v5.6.6

What's Changed

• fix: support Closure in Builder::blockPickerColumns() by @People-Sea in #19889
• fix: prevent original upload before automatic aspect ratio editing by @People-Sea in #19859
• Fix custom datepicker show field validation by @wychoong in #19829
• fix: prevent native select from showing the wrong dynamic option by @People-Sea in #19871
• chore(deps): bump qs and express by @dependabot[bot] in #19898
• chore(deps): bump zizmorcore/zizmor-action from 0.5.3 to 0.5.6 by @dependabot[bot] in #19904
• chore(deps): bump danharrin/monorepo-split-github-action from 2.4.4 to 2.4.5 by @dependabot[bot] in #19905
• Restrict ImportCsv $rows unserialize via allowed_classes => false by @glivter in #19901
• include RestrictsFileUploadsToSchemaComponents to components example by @valpuia in #19899
• Fix: skip relationship query when Repeater has no parent model by @FS-Baz in #19906
• fix(forms): track un-indentation actions in EasyMDE undo history by @hamdyelbatal122 in #19890
• Filament issue reproduction project by @ijpatricio in #19820
• Allow pragmarx/google2fa-qrcode v4 by @achequer in #19908
• fix: Dropdown close on SPA navigate by @danharrin in #19912
• fix: DateTimePicker timezone in parent relationship component by @danharrin in #19911
• fix(tables): resolve BelongsToMany records with the correct primary key by @gehrisandro in #19910
• fix: update outdated Indonesian translations by @VernSG in #19907

New Contributors

• @glivter made their first contribution in #19901
• @FS-Baz made their first contribution in #19906
• @achequer made their first contribution in #19908
• @VernSG made their first contribution in #19907

Full Changelog: v5.6.5...v5.6.6

v4.11.6

What's Changed

• fix: support Closure in Builder::blockPickerColumns() by @People-Sea in #19889
• fix: prevent original upload before automatic aspect ratio editing by @People-Sea in #19859
• Fix custom datepicker show field validation by @wychoong in #19829
• fix: prevent native select from showing the wrong dynamic option by @People-Sea in #19871
• chore(deps): bump qs and express by @dependabot[bot] in #19898
• chore(deps): bump zizmorcore/zizmor-action from 0.5.3 to 0.5.6 by @dependabot[bot] in #19904
• chore(deps): bump danharrin/monorepo-split-github-action from 2.4.4 to 2.4.5 by @dependabot[bot] in #19905
• Restrict ImportCsv $rows unserialize via allowed_classes => false by @glivter in #19901
• include RestrictsFileUploadsToSchemaComponents to components example by @valpuia in #19899
• Fix: skip relationship query when Repeater has no parent model by @FS-Baz in #19906
• fix(forms): track un-indentation actions in EasyMDE undo history by @hamdyelbatal122 in #19890
• Filament issue reproduction project by @ijpatricio in #19820
• Allow pragmarx/google2fa-qrcode v4 by @achequer in #19908
• fix: Dropdown close on SPA navigate by @danharrin in #19912
• fix: DateTimePicker timezone in parent relationship component by @danharrin in #19911
• fix(tables): resolve BelongsToMany records with the correct primary key by @gehrisandro in #19910
• fix: update outdated Indonesian translations by @VernSG in #19907

New Contributors

• @glivter made their first contribution in #19901
• @FS-Baz made their first contribution in #19906
• @achequer made their first contribution in #19908
• @VernSG made their first contribution in #19907

Full Changelog: v4.11.5...v4.11.6

v5.6.5

What's Changed

• security: Escape ImageColumn and ImageEntry URLs by @danharrin in #19885
• security: Temporary file uploads available on auth pages by @danharrin in #19886
• security: Prevent user enumeration on login page by @danharrin in #19887
• security: Prevent 2FA concurrent recovery code reuse by @danharrin in #19891
• Improve Str::sanitizeUrl to reject malformed javascript URLs by @ukeloop in #19892

Full Changelog: v5.6.4...v5.6.5

v4.11.5

What's Changed

• security: Escape ImageColumn and ImageEntry URLs by @danharrin in #19885
• security: Temporary file uploads available on auth pages by @danharrin in #19886
• security: Prevent user enumeration on login page by @danharrin in #19887
• security: Prevent 2FA concurrent recovery code reuse by @danharrin in #19891
• Improve Str::sanitizeUrl to reject malformed javascript URLs by @ukeloop in #19892

Full Changelog: v4.11.4...v4.11.5

v3.3.52

What's Changed

• security: Temporary file uploads available on auth pages by @danharrin in #19886

Full Changelog: v3.3.51...v3.3.52

v5.6.4

What's Changed

• chore(deps): bump actions/setup-node from 4.4.0 to 6.4.0 by @dependabot[bot] in #19847
• chore(deps): bump nick-fields/retry from 3.0.2 to 4.0.0 by @dependabot[bot] in #19848
• chore(deps): bump Ilshidur/action-discord from 0.3.2 to 0.4.0 by @dependabot[bot] in #19849
• chore(deps): bump danharrin/monorepo-split-github-action from 2.4.0 to 2.4.4 by @dependabot[bot] in #19850
• chore(deps): bump actions/github-script from 7.1.0 to 9.0.0 by @dependabot[bot] in #19851
• chore(deps): bump actions/cache from 4.3.0 to 5.0.5 by @dependabot[bot] in #19852
• chore(deps): bump WyriHaximus/github-action-get-previous-tag from 1.4.0 to 2.0.0 by @dependabot[bot] in #19853
• chore(deps): bump actions/checkout from 4.3.1 to 6.0.2 by @dependabot[bot] in #19854
• chore(deps): bump stefanzweifel/git-auto-commit-action from 5.2.0 to 7.1.0 by @dependabot[bot] in #19855
• security: Introduce Str::sanitizeUrl() helper method by @danharrin in #19868
• feat(translation): add missing Arabic translation keys by @hamdyelbatal122 in #19876
• chore(deps): bump ws from 8.18.3 to 8.20.1 in /docs-assets/screenshots by @dependabot[bot] in #19878
• Improve Japanese translations for force delete and restore actions by @ukeloop in #19870
• Update the column name typo for ternary filter example in documentation by @KevinWinardi in #19874
• Add no options message in Indonesian language file by @adereksisusanto in #19864
• security: Inconsistent scope enforcement for attach and associate action select fields by @danharrin in #19880
• fix: add wire keys to grouped action items by @People-Sea in #19823
• fix: use correct Livewire id for awaited schema component events by @People-Sea in #19865
• fix(tables): preserve addSelect() subqueries when resolving BelongsToMany records by @Orrison in #19860
• Handle unicode whitespace consistently in form inputs by @ukeloop in #19869
• Conditionally render footer in empty-state component by @barocode in #19858

New Contributors

• @hamdyelbatal122 made their first contribution in #19876
• @Orrison made their first contribution in #19860
• @barocode made their first contribution in #19858

Full Changelog: v5.6.3...v5.6.4

v4.11.4

What's Changed

• chore(deps): bump actions/setup-node from 4.4.0 to 6.4.0 by @dependabot[bot] in #19847
• chore(deps): bump nick-fields/retry from 3.0.2 to 4.0.0 by @dependabot[bot] in #19848
• chore(deps): bump Ilshidur/action-discord from 0.3.2 to 0.4.0 by @dependabot[bot] in #19849
• chore(deps): bump danharrin/monorepo-split-github-action from 2.4.0 to 2.4.4 by @dependabot[bot] in #19850
• chore(deps): bump actions/github-script from 7.1.0 to 9.0.0 by @dependabot[bot] in #19851
• chore(deps): bump actions/cache from 4.3.0 to 5.0.5 by @dependabot[bot] in #19852
• chore(deps): bump WyriHaximus/github-action-get-previous-tag from 1.4.0 to 2.0.0 by @dependabot[bot] in #19853
• chore(deps): bump actions/checkout from 4.3.1 to 6.0.2 by @dependabot[bot] in #19854
• chore(deps): bump stefanzweifel/git-auto-commit-action from 5.2.0 to 7.1.0 by @dependabot[bot] in #19855
• security: Introduce Str::sanitizeUrl() helper method by @danharrin in #19868
• feat(translation): add missing Arabic translation keys by @hamdyelbatal122 in #19876
• chore(deps): bump ws from 8.18.3 to 8.20.1 in /docs-assets/screenshots by @dependabot[bot] in #19878
• Improve Japanese translations for force delete and restore actions by @ukeloop in #19870
• Update the column name typo for ternary filter example in documentation by @KevinWinardi in #19874
• Add no options message in Indonesian language file by @adereksisusanto in #19864
• security: Inconsistent scope enforcement for attach and associate action select fields by @danharrin in #19880
• fix: add wire keys to grouped action items by @People-Sea in #19823
• fix(tables): preserve addSelect() subqueries when resolving BelongsToMany records by @Orrison in #19860
• Handle unicode whitespace consistently in form inputs by @ukeloop in #19869
• Conditionally render footer in empty-state component by @barocode in #19858

New Contributors

• @hamdyelbatal122 made their first contribution in #19876
• @Orrison made their first contribution in #19860
• @barocode made their first contribution in #19858

Full Changelog: v4.11.3...v4.11.4

v3.3.51

What's Changed

• security: Inconsistent scope enforcement for attach and associate action select fields by @danharrin in #19881

Full Changelog: v3.3.50...v3.3.51

v5.6.3

What's Changed

• task: Extract internal form field closures into methods by @danharrin in #19807
• chore(deps): bump postcss from 8.5.6 to 8.5.13 in /docs-assets/app by @dependabot[bot] in #19815
• Add missing Russian translation keys by @altrntv in #19816
• fix(forms): customBlock TipTap node loses data-config + data-type on getHTML() by @iotron in #19812
• Add Persian(fa) translations by @FarhadShirmardi in #19819
• fix: reset tabs state when using create another action by @People-Sea in #19817
• chore(deps): bump ip-address from 10.0.1 to 10.2.0 in /docs-assets/screenshots by @dependabot[bot] in #19826
• fix: hide actions with authorization feedback when denial has no message by @intrepidws in #19792
• fix: make:filament-theme --pm flag injection by @danharrin in #19837
• fix: Re-authorize during Livewire hydration by @danharrin in #19841
• chore(deps-dev): bump @babel/plugin-transform-modules-systemjs from 7.28.5 to 7.29.4 by @dependabot[bot] in #19835
• chore(deps-dev): bump fast-uri from 3.1.0 to 3.1.2 by @dependabot[bot] in #19832
• chore(deps): bump basic-ftp from 5.3.0 to 5.3.1 in /docs-assets/screenshots by @dependabot[bot] in #19827
• fix: table toolbar button on markdowneditor is misaligned by @CorwinDev in #19828
• Add missing Bengali translations by @pankajXdev in #19842
• fix: apply grow styles to inline schema components by @People-Sea in #19833
• fix(forms): clear cached relation after Select saves, so reload doesn't repopulate from stale data by @doonfrs in #19843

New Contributors

• @altrntv made their first contribution in #19816
• @FarhadShirmardi made their first contribution in #19819
• @doonfrs made their first contribution in #19843

Full Changelog: v5.6.2...v5.6.3

v4.11.3

What's Changed

• task: Extract internal form field closures into methods by @danharrin in #19807
• chore(deps): bump postcss from 8.5.6 to 8.5.13 in /docs-assets/app by @dependabot[bot] in #19815
• Add missing Russian translation keys by @altrntv in #19816
• fix(forms): customBlock TipTap node loses data-config + data-type on getHTML() by @iotron in #19812
• Add Persian(fa) translations by @FarhadShirmardi in #19819
• fix: reset tabs state when using create another action by @People-Sea in #19817
• chore(deps): bump ip-address from 10.0.1 to 10.2.0 in /docs-assets/screenshots by @dependabot[bot] in #19826
• fix: hide actions with authorization feedback when denial has no message by @intrepidws in #19792
• fix: make:filament-theme --pm flag injection by @danharrin in #19837
• fix: Re-authorize during Livewire hydration by @danharrin in #19841
• chore(deps-dev): bump @babel/plugin-transform-modules-systemjs from 7.28.5 to 7.29.4 by @dependabot[bot] in #19835
• chore(deps-dev): bump fast-uri from 3.1.0 to 3.1.2 by @dependabot[bot] in #19832
• chore(deps): bump basic-ftp from 5.3.0 to 5.3.1 in /docs-assets/screenshots by @dependabot[bot] in #19827
• fix: table toolbar button on markdowneditor is misaligned by @CorwinDev in #19828
• Add missing Bengali translations by @pankajXdev in #19842
• fix: apply grow styles to inline schema components by @People-Sea in #19833
• fix(forms): clear cached relation after Select saves, so reload doesn't repopulate from stale data by @doonfrs in #19843

New Contributors

• @altrntv made their first contribution in #19816
• @FarhadShirmardi made their first contribution in #19819
• @doonfrs made their first contribution in #19843

Full Changelog: v4.11.2...v4.11.3