Skip to content

Latest commit

 

History

History
288 lines (154 loc) · 6.67 KB

CHANGELOG.md

File metadata and controls

288 lines (154 loc) · 6.67 KB

Changelog

All notable changes to laravel-query-builder will be documented in this file

2.0.0 - unreleased

  • removed request macros
  • sorts and field selects are not allowed by default
  • field aliases

1.17.3 - 2019-04-16

  • bugfix: remove duplicate parsing of (default) sort clauses

1.17.2 - 2019-04-12

  • bugfix: replace missing sort() method on QueryBuilderRequest
  • bugfix: don't escape allowedSorts and their aliases
  • bugfix: don't escape allowedFields

1.17.1 - 2019-04-09

  • security fixes

1.16.1 - 2019-04-09

  • security fixes

1.17.0 - 2019-03-11

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • moved features to traits
  • started using QueryBuilderRequest to read data from the current request
  • deprecated request macros (Request::filters(), Request::includes(), etc...)
  • raised minimum supported Laravel version to 5.6.34

1.16.0 - 2019-03-05

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • add support for multiple default sorts (#214)

1.15.2 - 2019-02-28

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • add support for Laravel 5.5 and up (again)
  • add support for PHP 7.1 and up (again)

1.15.1 - 2019-02-28

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • fix default sort not parsing correctly (#178)

1.15.0 - 2019-02-27

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • drop support for Laravel 5.7 and lower
  • drop support for PHP 7.1 and lower

1.14.0 - 2019-02-27

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • add aliased sorts (#164)

1.13.2 - 2019-02-27

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • add support for Laravel 5.8
  • use Str:: and Arr:: instead of helper methods

1.13.1 - 2019-01-18

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • fix detection of false-positives for ignored values (#154)
  • fix broken morphTo includes (#130)

1.13.0 - 2019-01-12

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • allow ignoring specific filter values using $filter->ignore()
  • allow filtering related model attributes allowedFilters('related-model.name')
  • fix for filtering by relation model properties
  • add custom sort classes

1.12.0 - 2018-11-27

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • allow differently named columns

1.11.2 - 2018-10-30

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • fix exception when using filters with nested arrays (#117)
  • fix overwritten fields when using allowedIncludes with many-to-many relationships (#118)

1.11.1 - 2018-10-09

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • fix exception when using allowedFields() but selecting none

1.11.0 - 2018-10-03

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • add allowedFields method
  • fix & cleanup Request::fields() macro
  • fix fields option (SELECT * FROM table instead of SELECT table.* FROM table)

1.10.4 - 2018-10-02

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • fix parsing empty filters from url

1.10.3 - 2018-09-17

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • improve compatibility with Lumen

1.10.2 - 2018-08-28

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • add support for Laravel 5.7
  • add framework/laravel as a dependency

1.10.1 - 2018-08-21

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • improve compatibility with Lumen by only publishing the config file in console mode

1.10.0 - 2018-06-12

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • add support for instantiated custom filter classes

1.9.6 - 2018-06-11

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • fix for using reserved SQL words as attributes in Postgres

1.9.5 - 2018-06-09

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • make sure filtering on string with special characters just works

1.9.4 - 2018-06-06

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • fix for using reserved SQL words as attributes

1.9.3 - 2018-06-05

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • resolved #14

1.9.2 - 2018-05-21

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • prevent double sorting statments

1.9.1 - 2018-05-15

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • improvements around field selection

1.9.0 - 2018-05-02

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • add Filter::scope() for querying scopes
  • explicitly defining parent includes in nested queries is no longer required

1.8.0 - 2018-03-28

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • add allowedAppends()

1.7.0 - 2018-03-23

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • add ability to customize query parameter names

1.6.0 - 2018-03-05

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • add support for selecting specific columns using ?fields[table]=field_name

1.5.3 - 2018-02-09

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • allow arrays in filters

1.5.2 - 2018-02-08

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • add support for Laravel 5.6

1.5.1 - 2018-02-07

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • fix: initializing scopes, macro's, the onDelete callback and eager loads from base query on QueryBuilder

1.5.0 - 2018-02-06

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • use specific exceptions for every invalid query

1.4.0 - 2018-02-05

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • allow multiple sorts

1.3.0 - 2018-02-05

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • allow allowedIncludes, allowedFilters and allowedSorts to accept arrays

1.2.1 - 2018-02-03

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • remove auto registering facade from composer.json

1.2.0 - 2018-01-29

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • add support for global scopes and soft deletes

1.1.2 - 2018-01-23

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • bugfix: revert #11 (escaping _ and % in LIKE queries)

1.1.1 - 2018-01-22

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • escape _ and % in LIKE queries

1.1.0 - 2018-01-20

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • add ability to set a default sort attribute

1.0.1 - 2018-01-19

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • bugfix: using allowedSorts together with an empty sort query parameter no longer throws an exception

1.0.0 - 2018-01-17

DO NOT USE: THIS VERSION ALLOWS SQL INJECTION ATTACKS

  • initial release! 🎉