Security Laravel Package

Added

• Extension hooks powered by artisanpack-ui/hooks (^1.2):
  • ap.security.sanitizedInput filter — wraps every Security::sanitize* return with (mixed $value, string $type, mixed $original).
  • ap.security.escapedOutput filter — wraps every Security::esc* return with (string $value, string $context, string $original).
  • ap.security.ksesAllowedTags filter — receives (array $allowedTags) from Security::kses(); a non-empty return overrides htmLawed's element whitelist for the call.
  • ap.security.csp.directives filter — fires inside CspPolicyService::getPolicy() with (array $directives, Request $request), letting host apps mutate the directive array before it is serialized.
  • ap.security.csp.violationHandled action — fires at the end of CspViolationHandler::handle() on stored violations with (CspViolationReport $report).
  • See the README "Hooks" section for full payload details and examples.

Fixed

• Security::sanitizeFloat() was declared to return float but returned the raw number_format() string, which raised a TypeError under strict_types=1 any time the method was actually called. The result is now explicitly cast to float before return.

Added

• Laravel 13 support. Widened the illuminate/support constraint to ^10.0|^11.0|^12.0|^13.0. Existing Laravel 10/11/12 users are unaffected; Laravel 13 is only selectable on PHP 8.3+ per its own framework constraint.

Changed

• Widened orchestra/testbench dev requirement to ^10.2|^11.0 so package tests can install against Laravel 13.
• Swept the package through Laravel Pint to bring it back in line with the configured code style (no behavioral changes).

Fixed

• Restore the csp:test command (CspTest) to the distributed package. An over-broad export-ignore rule (/src/**/*Test.php) stripped it from the release tarball, so SecurityServiceProvider registered a class that wasn't shipped — causing Target class [ArtisanPackUI\Security\Console\Commands\CspTest] does not exist during package discovery for every consumer.

Changed

• Promotes the 2.0.0-alpha.1 feature surface to the stable 2.0.0 release. No code changes from the alpha — see the alpha entry below for the complete 2.0 changelog.

In this release...

• Initial release

In this release...

• Removed unnecessary files from the published package.

In this release...

• Fixed an issue with running the kses() function.
• Added in tests and a GitLab pipeline.

In this release...

• Changed the vendor name to ArtisanPack UI.