⬆️ Upgrade dependency laravel/passport to v13 - autoclosed

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
laravel/passport	^12.0 → ^13.0

---

Release Notes

laravel/passport (laravel/passport)

v13.5.0

Compare Source

• Add mixin annotation for Token model in AccessToken by @​fjkorf in #​1886
• Add dedicated token lifetime for client credentials grant by @​sajanp in #​1880
• Add missing OAuthenticatable interface step to upgrade guide by @​FeBe95 in #​1887
• Improve code syntax highlighting in upgrade guide by @​FeBe95 in #​1890
• Allow custom middleware to be registered by @​timacdonald in #​1892
• Update UPGRADE.md by @​siarheipashkevich in #​1891

v13.4.4

Compare Source

• [13.x] Supports Laravel 13 by @​crynobone in #​1885
• [13.x] Add can and cant methods to Token model by @​hafezdivandari in #​1882

v13.4.3

Compare Source

• [13.x] Allow firebase/php-jwt v7 by @​hafezdivandari in #​1879

v13.4.2

Compare Source

• [13.x] PHP 8.5 Compatibility by @​crynobone in #​1869
• Remove the usage of deprecated $request->get() by @​hivokas in #​1873
• [13.x] Allow setting the client with Passport::actingAs() by @​axlon in #​1876

v13.4.1

Compare Source

• [13.x] Fix possible 500 error when retrieving user on token guard by @​hafezdivandari in #​1871

v13.4.0

Compare Source

• [13.x] Add static setter for authorizationServerResponseType by @​RSpeekenbrink in #​1867

v13.3.0

Compare Source

• chore(UPGRADE): v13, update oauth_clients table schema changes by @​maximepvrt in #​1865
• feat: Allow findForPassport to optionally receive the OAuth client by @​maximepvrt in #​1866

v13.2.2

Compare Source

• Fix »OAuth Client Table Changes« migration snippet in the upgrade guide by @​hettiger in #​1859
• [13.x] Fix accessing the plain secret after creating a new confidential client via deprecated ClientController::store by @​hafezdivandari in #​1861

v13.2.1

Compare Source

• [13.x] add trailing commas in multiline constructor signatures by @​browner12 in #​1848
• Update Client Model by @​samsin33 in #​1850
• [13.x] Test Improvements by @​hafezdivandari in #​1853
• [13.x] Fix issuing PAT with configured trusted hosts by @​hafezdivandari in #​1852

v13.2.0

Compare Source

• [13.x] Added device code grant exception to purge command by @​SuperDJ in #​1846

v13.1.0

Compare Source

• [13.x] Add an option to disable device code grant by @​hafezdivandari in #​1842
• [13.x] Add an upgrade guide entry for key file permissions by @​hafezdivandari in #​1841
• [13.x] Fallback to list of auth user providers if no auth guard for Passport is defined by @​hafezdivandari in #​1840
• [13.x] Add an optional migration for oauth_clients table to the upgrade guide by @​hafezdivandari in #​1843
• Fix viewPrefix Method to Match Documentation Example by @​trippo in #​1844

v13.0.6

Compare Source

• [13.x] Fix broken token relation when auth identifier is not PK by @​axlon in #​1835

v13.0.5

Compare Source

• [13.x] Fix Exception Caused by Missing AccessToken Attributes by @​hafezdivandari in #​1829

v13.0.4

Compare Source

• [13.x] Fix skipping authorization consent when no scopes are requested by @​hafezdivandari in #​1825
• [13.x] Document changes to oauth_clients table in upgrade guide by @​gdebrauwer in #​1823

v13.0.3

Compare Source

• [13.x] Fix object returned by mocked validateAuthenticatedRequest() method in Passport::actingAsClient() method by @​gdebrauwer in #​1822

v13.0.2

Compare Source

• Changed getTokenFromRequest method to handle null value and prevent type error by @​eldair in #​1819
• fix: possible php error if redirect column is an empty string by @​Tofandel in #​1821

v13.0.1

Compare Source

• [13.x] Fix access to undefined route by @​axlon in #​1812
• [13.x] Fix access to uninitialised typed static property by @​owenvoke in #​1811
• Use isset to check for initialisation by @​patrickomeara in #​1813
• [13.x] Fix middleware type error by @​axlon in #​1815

v13.0.0

Compare Source

• [13.x] Support OAuth2 Server v9 by @​hafezdivandari in #​1734
• [13.x] Always hash client secret by @​hafezdivandari in #​1745
• [13.x] Remove redundant PAT client table and model by @​hafezdivandari in #​1749
• [13.x] Fix determining revoked records by @​hafezdivandari in #​1751
• [13.x] Use the oauth_scopes property of the bearer token on TokenGuard by @​hafezdivandari in #​1755
• [13.x] Refactor migrations by @​hafezdivandari in #​1759
• [13.x] Cleanup by @​hafezdivandari in #​1758
• [13.x] Use unique IDs on client model by @​hafezdivandari in #​1757
• [13.x] Force confidential PAT client by @​hafezdivandari in #​1761
• [13.x] Fix register a custom rendering closure for OAuthServerException by @​hafezdivandari in #​1763
• [13.x] Use UUID to identify clients by default by @​hafezdivandari in #​1764
• [13.x] Disable PAT requests by @​hafezdivandari in #​1766
• [13.x] Cleanup and add feature tests by @​hafezdivandari in #​1767
• [13.x] Always validate auth token by @​hafezdivandari in #​1769
• [13.x] Configure the user provider for PAT by @​hafezdivandari in #​1768
• [13.x] Fix user-token relations by @​hafezdivandari in #​1773
• [13.x] Make client RFC compatible by @​hafezdivandari in #​1744
• [13.x] Fix skipping consent prompt by @​hafezdivandari in #​1777
• [13.x] Improve issuing PATs by @​hafezdivandari in #​1780
• [13.x] Fix clients confidentiality by @​hafezdivandari in #​1782
• [13.x] Make Passport headless (Support Laravel Jetstream and Breeze) by @​hafezdivandari in #​1771
• [13.x] Improve performance, fix minor bugs, and add tests by @​hafezdivandari in #​1783
• bug: mockery not setup correctly by @​JimTools in #​1785
• [13.x] Cleanup, improve types and tests by @​hafezdivandari in #​1788
• [13.x] Enhance error responses by @​hafezdivandari in #​1791
• [13.x] Rename CheckClientCredentials middleware by @​hafezdivandari in #​1792
• [13.x] Improve resolving and converting PSR responses by @​hafezdivandari in #​1793
• [13.x] Deprecate JSON API by @​hafezdivandari in #​1778
• [13.x] Add new EnsureClientIsResourceOwner middleware by @​hafezdivandari in #​1794
• [13.x] Make revoking refresh tokens optional by @​hafezdivandari in #​1790
• [13.x] Validate key files' permissions by @​hafezdivandari in #​1789
• [13.x] Determine if the client handles the specified grant by @​hafezdivandari in #​1762
• [13.x] Device Authorization Grant RFC8628 by @​hafezdivandari in #​1750
• [13.x] Release Passport 13.x by @​hafezdivandari in #​1797

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[HerrLevin]

There's much to do: https://github.com/laravel/passport/blob/13.x/UPGRADE.md
:(