Laravel Release Notes

Pull request by @pushpak1300

When you install a third-party skill, Boost now runs a non-blocking security audit via partner services. Results appear as a color-coded table so you can make an informed decision before proceeding. Skip it anytime with --skip-audit:

php artisan boost:add-skill owner/repo --all
php artisan boost:add-skill owner/repo --all --skip-audit

Pull request by @pushpak1300

Similar to the Laravel 13 upgrade prompt, this one provides step-by-step guidance for moving from Inertia v2 to v3. It detects your frontend framework (React, Vue, or Svelte) and renders only the relevant migration steps.

Pull request by @MrPunyapal

Running php artisan boost:update --discover now detects new guideline packages and skills that have been published since your last update, prompting you to select which ones to add.

Pull request by @sulimanbenhalim

The DatabaseSchema tool now accepts a summary parameter that returns only table names and column types - roughly 83% fewer tokens. AI agents can call summary first for an overview, then drill down with filter on specific tables when they need the full picture.

An opt-in rule that strips all PHPDoc comments except type annotations. Enable it in your pint.json:

{
    "Pint/phpdoc_type_annotations_only": true
}

Before:

/**
 * Register any application services.
 */
public function register(): void

After:

public function register(): void

Type annotations like @var list<string> are preserved. The config directory is excluded by default. Best suited for new projects - enable with care on existing codebases.

Now enabled by default in the Laravel preset, this improvement automatically converts fully qualified class names in PHPDoc annotations to regular imports:

+ use Database\Factories\UserFactory;

  class User extends Authenticatable
  {
-     /** @use HasFactory<\Database\Factories\UserFactory> */
+     /** @use HasFactory<UserFactory> */
      use HasFactory, Notifiable;

This applies automatically when you update Pint.

Pull request by @pascalbaljet

Precognition v2 ships with a built-in fetch-based HTTP client, dropping Axios as a hard dependency and reducing bundle size by up to 50%. The new client handles XSRF tokens, FormData conversion, and AbortController support out of the box. If you still need Axios for interceptors or other features, an adapter is provided:

import { client, axiosAdapter } from "laravel-precognition";

client.useHttpClient(axiosAdapter());

Pull request by @gdebrauwer

Scout's query builder now accepts operators in where() clauses, making range queries straightforward without dropping into engine-specific callbacks:

User::search('taylor')
    ->where('created_at', '>', now()->subMonth()->timestamp)
    ->get();

New features

• The site creation wizard now includes an option to install team support when using a starter kit with authentication
• Added --update-env flag to herd link that forces updating the APP_URL in your .env file, even when it already contains the current TLD

Fixes and Improvements

• Fixed an issue where the ~/Herd directory was created during onboarding before the user had finished choosing a custom sites path
• Fixed Svelte icon in site wizard

New features

• The site creation wizard now includes an option to install team support when using a starter kit with authentication
• Added --update-env flag to herd link that forces updating the APP_URL in your .env file, even when it already contains the current TLD

New features

• Added RustFS as a service for S3-compatible local storage
• Site creation wizard includes a "None" option for new Laravel apps without authentication

Fixes and Improvements

• Fixed a startup crash when the user's shell binary no longer exists
• Fixed an issue where the sidebar lock icon would not update after toggling a site's secur/unsecure state
• Fixed an undefined array key warning in herd init
• Improved the linked site isolation UI to refresh in place
• Updated the built-in cacert.pem bundle
• Updated the built-in Laravel Installer

New features

• Added RustFS as a service for S3-compatible local storage
• Site creation wizard includes a "None" option for new Laravel apps without authentication

Fixes and Improvements

• Fixed an issue where clicking dump links would not open PhpStorm correctly
• Fixed broken "Learn more" documentation links
• Updated the built-in cacert.pem bundle
• Updated the built-in Laravel Installer

Pull request by @jackbayliss

makeMany() gives you a clean, expressive way to generate multiple in-memory model instances without persisting anything. It's ideal for tests, previews, and shaping data before a write.

$users = User::factory()->makeMany(3);

$payload = $users->map->only(['name', 'email']);

Pull request by @gcavanunez

You can now lazily compute attribute values only when a record is actually being created. That means fewer unnecessary queries and less wasted work when the model already exists.

$location = Location::firstOrCreate(
    ['address' => $address],
    fn () => ['coordinates' => Geocoder::resolve($address)],
);

Pull request by @gdebrauwer

These helpers are particularly useful when you use the validator to validate data outside the request cycle where the error would not get picked up automatically by the HTTP handler.

Validator::make(
    ['file' => $file],
    ['file' => 'required|image|dimensions:min_width=100,min_height=200']
)->whenFails(function () {
    throw new InvalidArgumentException('Provided file is invalid');
});

Pull request by @miladev95

Removing headers is now straightforward with withoutHeader(), which is handy when you need to strip inherited headers (like caching or debug headers) before returning a response.

return response($content)->withoutHeader('X-Debug');

Pull request by @serhiilabs

Console and non-browser contexts no longer receive the decorative ASCII SVG payload, keeping error output cleaner in logs, CI, agent, and API responses. Furthermore...

Pull request by @markjaquith

The exception page ASCII SVG is now generated on the fly with JavaScript, keeping output leaner and better suited to different rendering contexts.