Pull request #3 · ci-on/laravel-nuxt-tailwind-boilerplate

Bumps fruitcake/laravel-cors from 1.0.6 to 2.0.1.

Release notes

Sourced from fruitcake/laravel-cors's releases.

<h2>Use reflective headers/methods</h2>
Uses v2.0.1 of stack-cors, re-enables reflective headers instead of wildcards.
<h2>v2.0 (2020-05-11)</h2>
asm89/stack-cors 2.x is now used, with these notable changes:
<h3>Added</h3>

CORS headers are better cachable now, with correct Vary headers (#asm89/stack-cors#70, #asm89/stack-cors#74)

<h3>Changed</h3>

CORS headers are added to non-Origin requests when possible (#asm89/stack-cors#73)

Requests are no longer blocked by the server, only by the browser (#asm89/stack-cors#70)

<h2>Add headers with Event Listener</h2>
No release notes provided.
<h2>Update max_age check, improve tests</h2>
No release notes provided.
<h2>Update to v2</h2>

Don't block CORS requests in Laravel, leave it to the browser

Update Vary headers for better caching

Use static/cacheable headers when possible

Changelog

Sourced from fruitcake/laravel-cors's changelog.

<h1>Change Log</h1>
All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.
<h2>v2.0 (2020-05-11)</h2>
asm89/stack-cors 2.x is now used, with these notable changes:
<h3>Added</h3>

CORS headers are better cachable now, with correct Vary headers (#asm89/stack-cors#70, #asm89/stack-cors#74)

<h3>Changed</h3>

CORS headers are added to non-Origin requests when possible (#asm89/stack-cors#73)

Requests are no longer blocked by the server, only by the browser (#asm89/stack-cors#70)

<h2>v1.0 (2019-12-27)</h2> <h3>Breaking changes</h3>

Adding the middleware on Route groups is no longer supported. You can use the new paths option to match your routes

The config file has been changed from camelCase to snake_case, please update your own config.

The deprecated Lumen ServiceProvider has been removed.

There is no need to manually configure the cors config in Lumen.

<h3>Added</h3>

The paths option is added to match certain routes only, while still using global middleware. This allows for better error handling.

<h2>v0.11.0 (2017-12-xx)</h2> <h3>Breaking changes</h3>

The wildcard matcher is changed. You can use allowedOriginPatterns for your own patterns, or simple wildcards in the normal origins. Eg. *.laravel.com should still work.

<h2>v0.9.0 (2016-03-2017)</h2> <h3>Breaking changes</h3>

The cors alias is no longer added by default. Use the full class or add the alias yourself.

The Lumen ServiceProvider has been removed. Both Laravel and Lumen should use Barryvdh\Cors\ServiceProvider::class.

Barryvdh\Cors\Stack\CorsService moves to \Barryvdh\Cors\CorsService (namespace changed).

Barryvdh\Cors@addActualRequestHeaders will automatically attached when Exception occured.

<h3>Added</h3>

Better error-handling when exceptions occur.

A lot of tests, also on older Laravel versions.

Commits

dbfc311 Bump stack-cors v2.0.1 (#466)
7f2ac85 Test axios (#462)
76742fc Run on PR
f34414b move cors options to method (#461)
77d4a9a Update note about update
8cc9f7e Update readme.md
5f5e584 Update changelog.md
7dcfb1a Clarify patterns
dbb02ec Clarify config
138be6e [2.x] Add event listener (#450)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)