Laminas Diactoros Laravel Package

Release Notes for 3.8.0

Feature release (minor)

3.8.0

• Total issues resolved: 0
• Total pull requests resolved: 1
• Total contributors: 1

Enhancement

• 214: add PHP 8.5 and remove 8.1 thanks to @LordSimal

Release Notes for 3.7.0

Feature release (minor)

3.7.0

• Total issues resolved: 0
• Total pull requests resolved: 2
• Total contributors: 1

BC Break,Bug,renovate

• 209: Update dependency vimeo/psalm to v6 thanks to @renovate[bot]

renovate

• 204: Lock file maintenance. Update reason phrase for response code 104 thanks to @renovate[bot]

Release Notes for 3.6.0

Feature release (minor)

3.6.0

• Total issues resolved: 0
• Total pull requests resolved: 5
• Total contributors: 4

Bug

• 213: Adds temporary IANA status code reason phrase for 104 thanks to @gsteel

Bug,Documentation

• 212: Fix broken link in migration.md thanks to @Potherca

Enhancement

• 201: Update to use PHPUnit 10 syntax thanks to @samsonasik
• 200: Update to latest PHP 8.1 syntax thanks to @samsonasik

Dependencies

• 197: Update dependency laminas/laminas-coding-standard to v3 thanks to @renovate[bot]

Release Notes for 3.5.0

3.5.0

• Total issues resolved: 0
• Total pull requests resolved: 1
• Total contributors: 1

Enhancement

• 198: Add support for PHP 8.4 thanks to @ADmad

Release Notes for 3.4.0

Feature release (minor)

3.4.0

• Total issues resolved: 2
• Total pull requests resolved: 7
• Total contributors: 5

Bug

• 195: Fix error while trying to get stream metadata after detach thanks to @Xerkus
• 194: Fix provided versions of psr/http-factory-implementation in composer.json thanks to @Xerkus
• 193: Fix cookie parsing from headers in server request factory using globals. thanks to @Xerkus
• 165: Plus signs in cookie data get converted to space. thanks to @Danack

Enhancement

• 192: Add Roave BC Check to CI thanks to @gsteel

Bug,Enhancement

• 190: Upgrade PHPUnit to 10.x. Fix Stream conformance thanks to @gsteel

Documentation

• 187: Fix linting issues in docs thanks to @gsteel

renovate

• 186: Update dependency psalm/plugin-phpunit to ^0.19.0 thanks to @renovate[bot]

Bug,Help Wanted

• 22: Stream::getMetadata() does not handle detached resource thanks to @weierophinney

Release Notes for 3.3.1

3.3.x bugfix release (patch)

3.3.1

• Total issues resolved: 0
• Total pull requests resolved: 1
• Total contributors: 1

renovate

• 181: Lock file maintenance, Upgrade Psalm to 5.20.x, QA improvements thanks to @renovate[bot]

Release Notes for 2.26.0

Feature release (minor)

2.26.0

• Total issues resolved: 0
• Total pull requests resolved: 1
• Total contributors: 1

Enhancement

• 176: Update PHP constraints to allow v8.3 thanks to @ADmad

Release Notes for 3.3.0

Feature release (minor)

3.3.0

• Total issues resolved: 0
• Total pull requests resolved: 2
• Total contributors: 1

Enhancement

• 174: Remove support for PHP 8.0, remove unnecessary reflection method calls thanks to @gsteel
• 171: Don't ignore platform requirements on 8.3 thanks to @gsteel

Release Notes for 3.2.0

Feature release (minor)

3.2.0

• Total issues resolved: 0
• Total pull requests resolved: 1
• Total contributors: 1

Enhancement

• 170: Add PHP 8.3 support thanks to @MauricioFauth

Release Notes for 3.1.0

3.1.0

• Total issues resolved: 0
• Total pull requests resolved: 3
• Total contributors: 3

Enhancement

• 169: Correctly handle explicitly providing JSON_THROW_ON_ERROR in JsonResponse thanks to @TimWolla

renovate

• 166: Lock file maintenance thanks to @renovate[bot]

Documentation

• 158: Fix docs referring to array key as value thanks to @Xerkus

Release Notes for 3.0.0

Added

This version adds support for PSR-7 v2.0. While we had previously added return type hints in Diactoros, there were a few cases where PSR-7 updated the interfaces to use void returns where we had not. As a result, this release represents a BC break for anybody extending our classes, as defining an extension that uses one of these methods with a mixed return type (or omitting the return type entirely) will result in a type error.

The interfaces affected were Psr\Http\Message\StreamInterface and Psr\Http\Message\UploadedFileInterface.

For consumers, this version should be entirely backwards compatible in usage. For those extending our classes, you will only run into issues when extending implementations of the above interfaces.

3.0.0

• Total issues resolved: 7
• Total pull requests resolved: 8
• Total contributors: 3

BC Break,Bug,Documentation

• 157: Filter integer header names during SAPI discovery thanks to @weierophinney
• 148: Remove support for GD images in Stream implementation thanks to @weierophinney and @boesing

Documentation

• 156: Document PSR-7 v2 impact thanks to @weierophinney

Bug

• 155: Ensure fromGlobals does not use superglobals when passed empty arrays thanks to @Xerkus

BC Break,Documentation

• 154: Remove PhpInputStream thanks to @weierophinney and @Xerkus

BC Break,Documentation,Enhancement

• 152: Remove marshalUriFromSapi function thanks to @weierophinney and @Xerkus

BC Break,Feature Removal

• 146: Drop legacy helper functions in Zend namespace thanks to @Xerkus

BC Break,Enhancement

• 136: Allow usage with PSR-7 v2 thanks to @weierophinney

Enhancement

• 132: Update to PSR-7 1.1/2.0 thanks to @weierophinney

BC Break,Bug

• 12: ServerRequestFactory::fromGlobals() checks if args are truthy rather than set thanks to @weierophinney

Release Notes for 2.25.1

2.25.x bugfix release (patch)

2.25.1

• Total issues resolved: 0

• Total pull requests resolved: 1

• Total contributors: 1

• 138: Merge release 2.24.1 into 2.25.x thanks to @github-actions[bot]

Release Notes for 2.24.1

2.24.x bugfix release (patch)

2.24.1

• Total issues resolved: 0
• Total pull requests resolved: 1
• Total contributors: 1

Bug

• 135: Examine X-Forwarded-Host for additional port information thanks to @boesing

Release Notes for 2.25.0

Added

Adds support for the PSR-7 v1.1 release.

2.25.0

• Total issues resolved: 0
• Total pull requests resolved: 2
• Total contributors: 2

Enhancement

• 133: Allow usage with PSR-7 v1.1 thanks to @weierophinney

Review Needed,renovate

• 130: Lock file maintenance thanks to @renovate[bot]

Release Notes for 2.24.0

Feature release (minor)

2.24.0

• Total issues resolved: 0
• Total pull requests resolved: 1
• Total contributors: 1

Enhancement,renovate

• 129: Update vimeo/psalm to 5.4, minor type improvements, bump dev dependencies thanks to @renovate[bot]

Release Notes for 2.23.0

Feature release (minor)

2.23.0

• Total issues resolved: 1
• Total pull requests resolved: 3
• Total contributors: 4

Enhancement

• 128: Update PSR-7 integration tests thanks to @weierophinney

Documentation,Enhancement

• 126: Fix typos in docs thanks to @cvigano

renovate

• 125: Update dependency vimeo/psalm to v5 thanks to @renovate[bot]

Bug

• 74: PSR-7 Integration Tests Failing thanks to @l0gicgate

Release Notes for 2.22.0

Feature release (minor)

2.22.0

• Total issues resolved: 1
• Total pull requests resolved: 1
• Total contributors: 1

Enhancement

• 123: Add UriFactory::createFromSapi() thanks to @markstory

Release Notes for 2.21.0

Feature release (minor)

2.21.0

• Total issues resolved: 0
• Total pull requests resolved: 1
• Total contributors: 1

Enhancement

• 121: Remove obsolete check for PHP_VERSION_ID in Stream thanks to @TimWolla

Release Notes for 2.20.0

Feature release (minor)

2.20.0

• Total issues resolved: 0
• Total pull requests resolved: 1
• Total contributors: 1

Enhancement

• 120: Update .gitattributes thanks to @TimWolla

Release Notes for 2.19.0

Feature release (minor)

2.19.0

• Total issues resolved: 0
• Total pull requests resolved: 1
• Total contributors: 1

Enhancement

• 119: Apply PHP 8.0 Syntax and constructor promotion thanks to @samsonasik

Release Notes for 2.18.0

Feature release (minor)

2.18.0

• Total issues resolved: 0
• Total pull requests resolved: 1
• Total contributors: 1

Enhancement

• 118: Add PHP 8.2, Drop PHP 7.4 thanks to @gsteel

Release Notes for 2.17.0

Feature release (minor)

2.17.0

• Total issues resolved: 0
• Total pull requests resolved: 1
• Total contributors: 1

Enhancement

• 116: Apply PHP 8.2's SensitiveParameter attribute to Uri::withUserInfo() thanks to @TimWolla

Release Notes for 2.16.0

Feature release (minor)

2.16.0

• Total issues resolved: 0
• Total pull requests resolved: 1
• Total contributors: 1

Enhancement

• 115: Apply PHP 7.4 syntax and typed property thanks to @samsonasik

Release Notes for 2.15.0

Feature release (minor)

2.15.0

• Total issues resolved: 0
• Total pull requests resolved: 1
• Total contributors: 1

renovate

• 114: Dropped PHP 7.3 support, update dependency laminas/laminas-coding-standard to ^2.4.0, removed prophecy mocks thanks to @renovate[bot]

Release Notes for 2.14.0

Feature release (minor)

2.14.0

• Total issues resolved: 0
• Total pull requests resolved: 3
• Total contributors: 2

Documentation,Enhancement

• 113: Fix static return type in RequestTrait thanks to @gsteel

Enhancement

• 110: Remove duplicate config.allow-plugins key in composer.json thanks to @TimWolla
• 109: Add export-ignore attribute for /renovate.json thanks to @TimWolla

Release Notes for 2.13.0

Feature release (minor)

2.13.0

• Total issues resolved: 0
• Total pull requests resolved: 4
• Total contributors: 3

Enhancement

• 106: Refined types as per laminas/laminas-coding-standard:2.3.x upgrades thanks to @Ocramius
• 103: Update to laminas/laminas-coding-standard:2.3.x, improved types and internal API thanks to @gsteel

renovate

• 101: Update dependency laminas/laminas-coding-standard to v2 - autoclosed thanks to @renovate[bot]
• 100: Configure Renovate thanks to @renovate[bot]

Release Notes for 2.12.0

Feature release (minor)

2.12.0

• Total issues resolved: 0
• Total pull requests resolved: 5
• Total contributors: 4

Bug

• 99: Merge release 2.11.3 into 2.12.x thanks to @github-actions[bot]
• 92: Fix typo in property name in UploadedFileTest::setUp() thanks to @TimWolla

Enhancement

• 97: Ignore obviously malformed host headers when constructing a ServerRequest thanks to @TimWolla
• 91: Fix typo thanks to @PhantomWatson

Documentation,Enhancement

• 93: Clarify how zero-valued header parsing changed from diactoros 1.x to 2.x thanks to @S1ructure

Release Notes for 2.11.3

2.11.x bugfix release (patch)

2.11.3

• Total issues resolved: 0
• Total pull requests resolved: 1
• Total contributors: 1

Bug,Enhancement

• 98: Fixed UploadedFile::moveTo() so it actually removes the original file when used in CLI context, and doesn't leave orphaned files thanks to @k2rn

Release Notes for 2.11.2

2.11.x bugfix release (patch)

2.11.2

• Total issues resolved: 0
• Total pull requests resolved: 1
• Total contributors: 1

Bug

• 95: Resolve Host header and X-Forwarded-Proto regressions thanks to @weierophinney

Release Notes for 2.11.1

This is a SECURITY release. All users are encouraged to upgrade immediately.

Added

This release adds features to allow filtering a ServerRequest as generated by Laminas\Diactoros\ServerRequestFactory::fromGlobals() for the purposes of initialization. Examples include:

• Adding a request identifier.
• Using X-Forwarded-* headers to modify the URL to represent the original client request.

The features are based on a new interface, Laminas\Diactorors\ServerRequestFilter\FilterServerRequestInterface, which defines a single method:

public function __invoke(
    \Psr\Http\Message\ServerRequestInterface $request
): \Psr\Http\Message\ServerRequestInterface

We provide two implementations, as follows:

• Laminas\Diactoros\ServerRequestFilter\DoNotFilter will return the provided request verbatim.
• Laminas\Diactoros\ServerRequestFilter\FilterUsingXForwardedHeaders has named constructors that allow you to define how and when X-Forwarded-* headers are used to modify the URI instance associated with the request. These methods are:
  • trustAny(): this method generates a filter instance that will trust all X-Forwarded-* headers from any source.
  • trustReservedSubnets(array $trustedHeaders = ?): this method generates a filter instance that only modifies the URL if the IP address of the requesting server is from a reserved, private subnet (localhost; classes A, B, and C subnets; and IPv6 private and local-link subnets). By default, it will trust all X-Forwarded-* headers from these sources, but you may specify a list to allow via the $trustedHeaders argument.
  • trustProxies(array $proxyCIDRList, array $trustedHeaders = ?): this method will generate a filter instance that only modifies the URL if the requesting server matches an entry in the $proxyCIDRList. These entries may be IP addresses, or any IPv4 or IPv6 CIDR subnets. By default, it will trust all X-Forwarded-* headers from these sources, but you may specify a list to allow via the $trustedHeaders argument.

ServerRequestFactory::fromGlobals() now accepts a FilterServerRequestInterface instance as the optional argument $requestFilter. If none is provided, it uses one as produced by FilterUsingXForwardedHeaders::trustReservedSubnets().

Deprecated

• The function Laminas\Diactoros\marshalUriFromSapi() is deprecated, and no longer used internally.

Changed

Laminas\Diactoros\ServerRequestFactory::fromGlobals() no longer consumes marshalUriFromSapi(), and instead inlines an alternate implementation. The new implementation does not consider X-Forwarded-* headers by default when generating the associated URI instance. Internally, if no FilterServerRequestInterface implementation is provided, it defaults to using an instance returned by FilterUsingXForwardeHeaders::trustReservedSubnets(). If you previously relied on X-Forwarded-* headers, you MAY need to update your code to use either the FilterUsingXForwardedHeaders::trustAny() or FilterUsingXForwardedHeaders::trustProxies() methods to generate a filter to use with ServerRequestFactory::fromGlobals().

Fixed

• Fixes CVE-2022-31109

2.11.1

• Total issues resolved: 0
• Total pull requests resolved: 0
• Total contributors: 0