nWidart/laravel-modules v13.1.0 on GitHub

install: module:install no longer passes the module name, version, path or repository URL through the shell, which allowed command injection from the CLI or a committed modules.json. A failed install now exits with an error instead of running module:update (#2174, 25c4847)

boost: Add Laravel Boost support: a core guideline and a laravel-modules-development skill, by @rupeshstha (#2156, 63d90fa, 8dc6deb)

migrations: module:migrate-fresh asks for confirmation in production before wiping the database (#2173, 9c27d35)
migrations: module:migrate <Module> no longer runs the app's migrations or those of another module with a similar name (#2171, 4917d29)
migrations: Honour --pretend on module:migrate-rollback and module:migrate-reset, and ask for confirmation before a rollback in production (#2175, d7bab5e)
translations: Fix module translation loading missing its namespace, by @joaopluis (#2154, aed5d54)

ci: Add the release workflows and a Conventional Commits check on pull requests (#2176, 99c5d08)
ci: Modernize the CI workflow, stop duplicate runs, and remove the Travis CI and Scrutinizer config (6f30986, 65444f8)
tests: Bump phpunit in the Recipe test fixture to a patched version (#2172, cab48f1)
docs: Add AGENTS.md agent guidance and fix FUNDING.yml so both sponsor accounts show (fe7e532, 178ca04)