[dependabot]

Bumps spatie/laravel-permission from 6.25.0 to 8.3.0.

Release notes

Sourced from spatie/laravel-permission's releases.

8.3.0

What's Changed

• Fix initializeCache() not clearing in-memory perms collection on tenant/cache switch by @​drbyte in spatie/laravel-permission#2965
• Add wiring-level test coverage for the Octane reset listener by @​drbyte in spatie/laravel-permission#2966

ALSO CHECK THE RELEASE NOTES FOR 8.2.0

Full Changelog: spatie/laravel-permission@8.2.0...8.3.0

8.2.0

What's Changed

• Fire PermissionDetachedEvent when syncing permissions (symmetry with syncRoles) by @​chengkangzai in spatie/laravel-permission#2963
• Fixed a bug where removing a role or permission from a model on one team could also remove that same assignment on other teams, when the model uses a custom pivot class (->using(CustomPivot::class)) on roles()/permissions() with teams enabled. (Issue #2867) by @​drbyte in spatie/laravel-permission#2961

Watch out for in your own test suite:

• If you use custom pivot model deleting/deleted hooks to react to role/permission removal under teams, those hooks were already unreliable in this scenario and remain out of scope — switch to listening for RoleDetachedEvent / PermissionDetachedEvent instead.
• revokePermissionTo() can now throw GuardDoesNotMatch in rare cases where it previously wouldn't have, as a side effect of routing through the same guard-check used by givePermissionTo(). This should not affect normal usage (permissions being revoked are already guard-matched), but if your tests exercise unusual multi-guard setups, re-run them against this release.

Full Changelog: spatie/laravel-permission@8.1.0...8.2.0

8.1.0

What's Changed

• Fixed: mismatched surrounding quote characters in pipe-delimited role strings are now preserved instead of stripped. by @​albertoarena in spatie/laravel-permission#2960

Fixes malformed pipe strings that start with ' or " and do not end with the same quote. Normal documented usage is unchanged:

hasAnyRole('writer|admin')       // same
hasAnyRole("'writer|admin'")     // same
hasAnyRole('"writer|admin"')     // same
hasAnyRole("'writer|admin")      // changed: mismatched apostrophe is removed
hasAnyRole("'writer|admin\"")    // changed: mismatched quote is removed

also

• docs: modernize middleware usage examples by @​zainphp in spatie/laravel-permission#2954
• Bump actions/checkout from 6 to 7 by @​dependabot[bot] in spatie/laravel-permission#2959

New Contributors

• @​zainphp made their first contribution in spatie/laravel-permission#2954
• @​albertoarena made their first contribution in spatie/laravel-permission#2960

Full Changelog: spatie/laravel-permission@8.0.0...8.1.0

8.0.0

What's Changed

• Extend BackedEnum support on Role/Permission by @​YasserB94 in spatie/laravel-permission#2953

Full Changelog: spatie/laravel-permission@7.4.2...8.0.0

... (truncated)

Changelog

Sourced from spatie/laravel-permission's changelog.

8.3.0 - 2026-07-03

What's Changed

• Fix initializeCache() not clearing in-memory perms collection on tenant/cache switch by @​drbyte in spatie/laravel-permission#2965
• Add wiring-level test coverage for the Octane reset listener by @​drbyte in spatie/laravel-permission#2966

ALSO CHECK THE RELEASE NOTES FOR 8.2.0

Full Changelog: spatie/laravel-permission@8.2.0...8.3.0

8.2.0 - 2026-07-03

What's Changed

• Fire PermissionDetachedEvent when syncing permissions (symmetry with syncRoles) by @​chengkangzai in spatie/laravel-permission#2963
• Fixed a bug where removing a role or permission from a model on one team could also remove that same assignment on other teams, when the model uses a custom pivot class (->using(CustomPivot::class)) on roles()/permissions() with teams enabled. (Issue #2867) by @​drbyte in spatie/laravel-permission#2961

Watch out for in your own test suite:

• If you use custom pivot model deleting/deleted hooks to react to role/permission removal under teams, those hooks were already unreliable in this scenario and remain out of scope — switch to listening for RoleDetachedEvent / PermissionDetachedEvent instead.
• revokePermissionTo() can now throw GuardDoesNotMatch in rare cases where it previously wouldn't have, as a side effect of routing through the same guard-check used by givePermissionTo(). This should not affect normal usage (permissions being revoked are already guard-matched), but if your tests exercise unusual multi-guard setups, re-run them against this release.

Full Changelog: spatie/laravel-permission@8.1.0...8.2.0

8.1.0 - 2026-06-27

What's Changed

• Fixed: mismatched surrounding quote characters in pipe-delimited role strings are now preserved instead of stripped. by @​albertoarena in spatie/laravel-permission#2960

Fixes malformed pipe strings that start with ' or " and do not end with the same quote. Normal documented usage is unchanged:

hasAnyRole('writer|admin')       // same
hasAnyRole("'writer|admin'")     // same
hasAnyRole('"writer|admin"')     // same
hasAnyRole("'writer|admin")      // changed: mismatched apostrophe is removed
hasAnyRole("'writer|admin\"")    // changed: mismatched quote is removed

also

• docs: modernize middleware usage examples by @​zainphp in spatie/laravel-permission#2954
• Bump actions/checkout from 6 to 7 by @​dependabot[bot] in spatie/laravel-permission#2959

New Contributors

• @​zainphp made their first contribution in spatie/laravel-permission#2954

... (truncated)

Commits

• 60e8ed5 Merge pull request #2966 from spatie/octane-tests
• 1a04d7e ## Add wiring-level test coverage for the Octane reset listener
• 396c747 Merge pull request #2965 from spatie/tenant-initialize-cache-issue-2964
• e80d7b0 Fix initializeCache() not clearing in-memory perms collection on tenant/cache...
• 9d4eb1e Update CHANGELOG
• e97b036 Merge pull request #2961 from spatie/fix-2867-teams-custom-pivot
• 9a43872 Apply same team detach sync to permissions
• 5084699 Fix team delete/sync when using custom pivot class
• 08cc164 PhpStan ignore in HasPermissions trait
• 9acc273 Merge pull request #2963 from chengkangzai/fix/sync-permissions-detached-event
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #19.