Update dependency laravel/passport to v13

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
laravel/passport	^9|^10|^11 → 13.7.5

---

Release Notes

laravel/passport (laravel/passport)

v13.7.5

Compare Source

• Add notice of invalid tokens when user and client id match by @​Levivb in #​1910
• Clarify that running passport:hash is not optional by @​bram-pkg in #​1911

v13.7.4

Compare Source

• [13.x] Support space-delimited prompt parameter by @​hafezdivandari in #​1906

v13.7.3

Compare Source

• [13.x] Fix session JSON serialization by @​hafezdivandari in #​1905

v13.7.2

Compare Source

• [13.X] fix: resolve user as null when user ID matches client ID on integer key setups by @​Can-Kar in #​1902

This change permanently invalidates client credential tokens for any user whose user ID happens to match the client ID of the token issuer.

v13.7.1

Compare Source

• Prevent user impersonation via client credentials token by @​pushpak1300 in #​1901

v13.7.0

Compare Source

• [13.x] Add middleware attribute by @​axlon in #​1897

v13.6.0

Compare Source

• Add Boost skill for Passport development by @​pushpak1300 in #​1893

v13.5.0

Compare Source

• Add mixin annotation for Token model in AccessToken by @​fjkorf in #​1886
• Add dedicated token lifetime for client credentials grant by @​sajanp in #​1880
• Add missing OAuthenticatable interface step to upgrade guide by @​FeBe95 in #​1887
• Improve code syntax highlighting in upgrade guide by @​FeBe95 in #​1890
• Allow custom middleware to be registered by @​timacdonald in #​1892
• Update UPGRADE.md by @​siarheipashkevich in #​1891

v13.4.4

Compare Source

• [13.x] Supports Laravel 13 by @​crynobone in #​1885
• [13.x] Add can and cant methods to Token model by @​hafezdivandari in #​1882

v13.4.3

Compare Source

• [13.x] Allow firebase/php-jwt v7 by @​hafezdivandari in #​1879

v13.4.2

Compare Source

• [13.x] PHP 8.5 Compatibility by @​crynobone in #​1869
• Remove the usage of deprecated $request->get() by @​hivokas in #​1873
• [13.x] Allow setting the client with Passport::actingAs() by @​axlon in #​1876

v13.4.1

Compare Source

• [13.x] Fix possible 500 error when retrieving user on token guard by @​hafezdivandari in #​1871

v13.4.0

Compare Source

• [13.x] Add static setter for authorizationServerResponseType by @​RSpeekenbrink in #​1867

v13.3.0

Compare Source

• chore(UPGRADE): v13, update oauth_clients table schema changes by @​maximepvrt in #​1865
• feat: Allow findForPassport to optionally receive the OAuth client by @​maximepvrt in #​1866

v13.2.2

Compare Source

• Fix »OAuth Client Table Changes« migration snippet in the upgrade guide by @​hettiger in #​1859
• [13.x] Fix accessing the plain secret after creating a new confidential client via deprecated ClientController::store by @​hafezdivandari in #​1861

v13.2.1

Compare Source

• [13.x] add trailing commas in multiline constructor signatures by @​browner12 in #​1848
• Update Client Model by @​samsin33 in #​1850
• [13.x] Test Improvements by @​hafezdivandari in #​1853
• [13.x] Fix issuing PAT with configured trusted hosts by @​hafezdivandari in #​1852

v13.2.0

Compare Source

• [13.x] Added device code grant exception to purge command by @​SuperDJ in #​1846

v13.1.0

Compare Source

• [13.x] Add an option to disable device code grant by @​hafezdivandari in #​1842
• [13.x] Add an upgrade guide entry for key file permissions by @​hafezdivandari in #​1841
• [13.x] Fallback to list of auth user providers if no auth guard for Passport is defined by @​hafezdivandari in #​1840
• [13.x] Add an optional migration for oauth_clients table to the upgrade guide by @​hafezdivandari in #​1843
• Fix viewPrefix Method to Match Documentation Example by @​trippo in #​1844

v13.0.6

Compare Source

• [13.x] Fix broken token relation when auth identifier is not PK by @​axlon in #​1835

v13.0.5

Compare Source

• [13.x] Fix Exception Caused by Missing AccessToken Attributes by @​hafezdivandari in #​1829

v13.0.4

Compare Source

• [13.x] Fix skipping authorization consent when no scopes are requested by @​hafezdivandari in #​1825
• [13.x] Document changes to oauth_clients table in upgrade guide by @​gdebrauwer in #​1823

v13.0.3

Compare Source

• [13.x] Fix object returned by mocked validateAuthenticatedRequest() method in Passport::actingAsClient() method by @​gdebrauwer in #​1822

v13.0.2

Compare Source

• Changed getTokenFromRequest method to handle null value and prevent type error by @​eldair in #​1819
• fix: possible php error if redirect column is an empty string by @​Tofandel in #​1821

v13.0.1

Compare Source

• [13.x] Fix access to undefined route by @​axlon in #​1812
• [13.x] Fix access to uninitialised typed static property by @​owenvoke in #​1811
• Use isset to check for initialisation by @​patrickomeara in #​1813
• [13.x] Fix middleware type error by @​axlon in #​1815

v13.0.0

Compare Source

• [13.x] Support OAuth2 Server v9 by @​hafezdivandari in #​1734
• [13.x] Always hash client secret by @​hafezdivandari in #​1745
• [13.x] Remove redundant PAT client table and model by @​hafezdivandari in #​1749
• [13.x] Fix determining revoked records by @​hafezdivandari in #​1751
• [13.x] Use the oauth_scopes property of the bearer token on TokenGuard by @​hafezdivandari in #​1755
• [13.x] Refactor migrations by @​hafezdivandari in #​1759
• [13.x] Cleanup by @​hafezdivandari in #​1758
• [13.x] Use unique IDs on client model by @​hafezdivandari in #​1757
• [13.x] Force confidential PAT client by @​hafezdivandari in #​1761
• [13.x] Fix register a custom rendering closure for OAuthServerException by @​hafezdivandari in #​1763
• [13.x] Use UUID to identify clients by default by @​hafezdivandari in #​1764
• [13.x] Disable PAT requests by @​hafezdivandari in #​1766
• [13.x] Cleanup and add feature tests by @​hafezdivandari in #​1767
• [13.x] Always validate auth token by @​hafezdivandari in #​1769
• [13.x] Configure the user provider for PAT by @​hafezdivandari in #​1768
• [13.x] Fix user-token relations by @​hafezdivandari in #​1773
• [13.x] Make client RFC compatible by @​hafezdivandari in #​1744
• [13.x] Fix skipping consent prompt by @​hafezdivandari in #​1777
• [13.x] Improve issuing PATs by @​hafezdivandari in #​1780
• [13.x] Fix clients confidentiality by @​hafezdivandari in #​1782
• [13.x] Make Passport headless (Support Laravel Jetstream and Breeze) by @​hafezdivandari in #​1771
• [13.x] Improve performance, fix minor bugs, and add tests by @​hafezdivandari in #​1783
• bug: mockery not setup correctly by @​JimTools in #​1785
• [13.x] Cleanup, improve types and tests by @​hafezdivandari in #​1788
• [13.x] Enhance error responses by @​hafezdivandari in #​1791
• [13.x] Rename CheckClientCredentials middleware by @​hafezdivandari in #​1792
• [13.x] Improve resolving and converting PSR responses by @​hafezdivandari in #​1793
• [13.x] Deprecate JSON API by @​hafezdivandari in #​1778
• [13.x] Add new EnsureClientIsResourceOwner middleware by @​hafezdivandari in #​1794
• [13.x] Make revoking refresh tokens optional by @​hafezdivandari in #​1790
• [13.x] Validate key files' permissions by @​hafezdivandari in #​1789
• [13.x] Determine if the client handles the specified grant by @​hafezdivandari in #​1762
• [13.x] Device Authorization Grant RFC8628 by @​hafezdivandari in #​1750
• [13.x] Release Passport 13.x by @​hafezdivandari in #​1797

v12.4.3

Compare Source

• Fix firebase/php jwt vuln by @​jszoja in #​1889

v12.4.2

Compare Source

• [12.x] Update property annotation for $userId to match constructor type by @​ukkok in #​1805

v12.4.1

Compare Source

• Supports Laravel 12 by @​crynobone in #​1803

v12.4.0

Compare Source

• [12.x] Supports PHP 8.4 by @​crynobone in #​1799

v12.3.1

Compare Source

• Update logo to support dark/light theme by @​milewski in #​1787
• Fix repeated word "the" in upgrade guide by @​caendesilva in #​1798

v12.3.0

Compare Source

• [12.x] Add access token revoked event by @​axlon in #​1776

v12.2.1

Compare Source

• [12.x] Fix purge command by @​hafezdivandari in #​1772

v12.2.0

Compare Source

• [12.x] Add refreshToken relation to Token model by @​gdebrauwer in #​1739

v12.1.0

Compare Source

• [12.x] Make Passport's database connection configurable by @​axlon in #​1738

v12.0.3

Compare Source

• Adjust newFactory method visibility by @​brandonfarber in #​1735

v12.0.2

Compare Source

• [12.x] Make commands lazy by @​timacdonald in #​1731
• [12.x] Allow token "expires in" to be defined as date interval by @​jacobmllr95 in #​1733

v12.0.1

Compare Source

• [12.x] Cast session lifetime to int by @​kindslayer in #​1727
• [12.x] Fixes used version of L9 by @​nunomaduro in #​1730

v12.0.0

Compare Source

• [12.x] Adds Laravel 11 support by @​nunomaduro in #​1702
• [12.x] Disable password grant by default by @​hafezdivandari in #​1715
• [12.x] Make Client::$plainSecret public by @​axlon in #​1719
• [12.x] Use more secure key permissions by @​axlon in #​1721
• [12.x] Enhance console commands by @​hafezdivandari in #​1724

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "after 10pm every weekday,before 5am every weekday,every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.