Laravel Boost Skill
This release adds psalm-security-analysis AI skill installable via Laravel Boost. You can install it by re-running boost:update (or boost:install on fresh installations).
This allows your agent find and fix security issues found by Psalm taint analysis.
What’s Changed
Features
- Add Laravel Boost
psalm-security-analysisskill for AI agents (#672) @alies-dev - Support
HigherOrderCollectionProxymethod call chains (#724) @alies-dev - Validate
Config::array()andConfig::collection()default argument type (#736) @alies-dev - Resolve scope methods on Eloquent relation chains (#738) @alies-dev
- 🛡️ Add missing
@psalm-taint-sink filemethods to Filesystem/FilesystemAdapter stubs (#739) @alies-dev
Fixes
- Fix:
PossiblyUnusedMethodfalse positives for Eloquent legacy accessor/mutator methods (#732) @alies-dev
Internal changes
-
Simplify migration: Add Psalter plugin for upgrading relation PHPDoc annotations (#735) @alies-dev
Migration of PHPDoc from v3.x version to v4.7+ for relationship definitions is easy now:
./vendor/bin/psalter --plugin=vendor/psalm/plugin-laravel/tools/psalter/UpgradeRelationAnnotations.php
Full Changelog: v4.7.0...v4.8.0