Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 6, 2025

Bumps farisc0de/phpfileuploading from 2.5.1 to 2.6.0.

Release notes

Sourced from farisc0de/phpfileuploading's releases.

v2.6.0

[2.6.0] - 2025-05-03

Enhanced file filtering and validation with a more comprehensive approach to file type management.

Added

  • Enhanced filter.json structure with version tracking
  • Added categorized MIME types for better file type validation
  • Added category-specific file size limits
  • Expanded the forbidden files list for improved security
  • Added support for more file extensions and MIME types

Changed

  • Updated Upload class to use the enhanced filter.json structure
  • Improved file category detection based on MIME types
  • Enhanced size limit validation with category-specific limits
  • Improved MIME type validation with better error handling
  • Updated isImage() method to use the new categories structure
Changelog

Sourced from farisc0de/phpfileuploading's changelog.

[2.6.0] - 2025-05-03

Enhanced file filtering and validation with a more comprehensive approach to file type management.

Added

  • Enhanced filter.json structure with version tracking
  • Added categorized MIME types for better file type validation
  • Added category-specific file size limits
  • Expanded the forbidden files list for improved security
  • Added support for more file extensions and MIME types

Changed

  • Updated Upload class to use the enhanced filter.json structure
  • Improved file category detection based on MIME types
  • Enhanced size limit validation with category-specific limits
  • Improved MIME type validation with better error handling
  • Updated isImage() method to use the new categories structure

[2.0.0] - 2025-01-14

A major update focusing on modernizing the codebase with enhanced type safety, improved error handling, and new features across all core classes.

Breaking Changes

Upload Class

  • Added strict type declarations for all properties and methods
  • Enhanced constructor with proper dependency injection
  • Improved error handling with specific exception types
  • Added validation for constructor parameters
  • Changed method signatures to include return types
  • Improved file validation and security checks

File Class

  • Added strict type declarations and return types
  • Enhanced error handling with specific exceptions
  • Improved file validation and type checking
  • Added proper resource management
  • Changed method signatures for better type safety

Image Class

  • Complete rewrite with modern image manipulation features
  • Added support for WebP format
  • Enhanced watermarking capabilities with opacity control
  • Added image resizing with aspect ratio preservation
  • Added filter application support

... (truncated)

Commits
  • de4b361 Update Version Number
  • 0267ec3 Update changelog and enhance file filtering with categorized MIME types and s...
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [farisc0de/phpfileuploading](https://github.com/farisc0de/PhpFileUploading) from 2.5.1 to 2.6.0.
- [Release notes](https://github.com/farisc0de/PhpFileUploading/releases)
- [Changelog](https://github.com/farisc0de/PhpFileUploading/blob/main/CHANGELOG.md)
- [Commits](farisc0de/PhpFileUploading@v2.5.1...v2.6.0)

---
updated-dependencies:
- dependency-name: farisc0de/phpfileuploading
  dependency-version: 2.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels May 6, 2025
@sonarqubecloud
Copy link

sonarqubecloud bot commented May 6, 2025

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant