Laravel Release Notes

Pull request by @stevebauman

If the same model gets saved multiple times in quick succession, Scout can end up queuing redundant indexing jobs for it. The new unique job variants - MakeSearchableUnique and RemoveFromSearchUnique - implement ShouldBeUniqueUntilProcessing, so only one job per model sits in the queue at a time. Opt in by registering them in a service provider.

use Laravel\Scout\Scout;
use Laravel\Scout\Jobs\MakeSearchableUnique;
use Laravel\Scout\Jobs\RemoveFromSearchUnique;

Scout::makeSearchableUsing(MakeSearchableUnique::class);
Scout::removeFromSearchUsing(RemoveFromSearchUnique::class);

These require a default cache store, so they're opt-in rather than the new default.

Pull request by @stevebauman

Setting up a fake Socialite user in tests used to require constructing and mapping an attribute array by hand before passing it to Socialite::fake(). The new User::fake() static method takes care of all of that - pass only the attributes you care about and sensible defaults fill in the rest.

// Before
Socialite::fake('github', (new User)->setRaw($attributes)->map($attributes)
    ->setToken('fake-token')
    ->setRefreshToken('fake-refresh-token')
    ->setExpiresIn(3600)
    ->setApprovedScopes([]));

// After
Socialite::fake('github', User::fake([
    'email' => 'test@example.com',
]));

Works for OAuth 1 users too, via \Laravel\Socialite\One\User::fake().

• [13.x] Further reduce cache hits when using debounced jobs by @jackbayliss in https://github.com/laravel/framework/pull/60575
• Add priority-based registration to dev commands by @joetannenbaum in https://github.com/laravel/framework/pull/60580
• fix: cache headers not set on HEAD requests by @c0defre4k in https://github.com/laravel/framework/pull/60589
• [13.x] Add conditional return types to several methods by @alies-dev in https://github.com/laravel/framework/pull/60586
• [13.x] Sync getter return types with their property generics by @dfinchenko in https://github.com/laravel/framework/pull/60591
• [13.x] Expose jobs processed count and last job timestamp on the WorkerStopping event by @jackbayliss in https://github.com/laravel/framework/pull/60592
• [13.x] Prevent restored event when soft delete restore fails by @Button99 in https://github.com/laravel/framework/pull/60605
• [13.x] Ensure lastJobProcessedAt is null if nothing is processed by @jackbayliss in https://github.com/laravel/framework/pull/60608
• Fix RateLimited middleware not serializing releaseAfter in __sleep() by @Amirhf1 in https://github.com/laravel/framework/pull/60609
• Use --kill-others-on-fail for artisan dev by @joetannenbaum in https://github.com/laravel/framework/pull/60606
• [13.x] Fix Number::forHumans() and Number::abbreviate() crashing on INF/NAN by @humamj1 in https://github.com/laravel/framework/pull/60617 …

Pull request by @ManicardiFrancesco

Previously, calling between() or unlessBetween() before timezone() in a schedule chain would silently use UTC regardless of what timezone you specified - a subtle bug that could have scheduled tasks running at the wrong hour in production. The time-interval check is now deferred until the filter executes, so the order no longer matters.

// Both of these now behave identically
$schedule->command('foo')->timezone('Europe/Rome')->between('10:00', '12:00');
$schedule->command('foo')->between('10:00', '12:00')->timezone('Europe/Rome');

Pull request by @joetannenbaum

php artisan dev brings all your development processes together in one command - server, queue worker, log tailing, and Vite running concurrently, each with its own color-coded output. It replaces the composer dev script with a proper Artisan convention and auto-detects your Node package manager (npm, yarn, pnpm, or bun).

You can register additional commands from a service provider - useful for tools like Reverb or Stripe's CLI webhook listener:

use Illuminate\Foundation\Console\DevCommands;

DevCommands::artisan('reverb:start', 'reverb')->orange();
DevCommands::register('stripe listen --forward-to ' . config('app.url'))->green();

Pull request by @astandkaya

Working with backed enums in request data used to mean a whenFilled() call followed by a tryFrom() check and a null guard. whenFilledEnum() collapses all of that into a single method that only fires the callback when the key is present, the value maps to a valid enum case, and you get a typed enum instance in the closure - no manual validation needed.

// Before
$request->whenFilled('status', function (string $input) use ($query): void {
    $status = Status::tryFrom($input);
    if ($status === null) {
        return;
    }
    $query->where('status', $status);
});

// After
$request->whenFilledEnum('status', Status::class, function (Status $status) use ($query): void {
    $query->where('status', $status);
});

Pull request by @LucasCavalheri

MailMessage in notifications now has attachFromStorage() and attachFromStorageDisk() methods, matching what Mailable has offered for a while. Attach invoices, reports, or any file from your storage layer without having to read the contents yourself first.

(new MailMessage)
    ->attachFromStorage('invoices/1.pdf')
    ->attachFromStorageDisk('s3', 'invoices/1.pdf', 'Invoice.pdf', [
        'mime' => 'application/pdf',
    ]);

Pull request by @pushpak1300

Illuminate\JsonSchema can now represent multi-type union schemas - schemas where the type field is an array like ['string', 'number', 'boolean']. This comes up frequently with third-party MCP tool schemas where mixed types are common. Previously these would throw an exception; now they deserialize, serialize, and round-trip correctly.

// Now works where it used to throw
JsonSchema::fromArray(['type' => ['string', 'number', 'boolean']]);

// Or build one directly
JsonSchema::union(['string', 'number'])->nullable();

Pull request by @hotmeteor

All-uppercase strings like CBOR or ALL_CAPS now have a path through Str::studly() and Str::pascal() that produces the expected output. Pass normalize: true and any fully-uppercased word segment gets lowercased before conversion - mixed-case strings are left alone as before.

Str::studly('CBOR', normalize: true)      // 'Cbor'
Str::studly('ALL_CAPS', normalize: true)  // 'AllCaps'
Str::studly('AllJersey', normalize: true) // 'AllJersey' (unchanged)

Pull request by @stevebauman

The HTTP client's Request object now has a uri() method that returns an Illuminate\Support\Uri instance, consistent with the uri() method already available on Illuminate\Http\Request. This makes Http::assertSent() callbacks a lot cleaner when you need to inspect the URL.

Http::assertSent(function (Request $request) {
    return $request->uri()->path() === '/api/users'
        && $request->uri()->query()->integer('page') === 2;
});