Laravel 5.6.7 Released

Laravel 5.6.7 is available for general release and includes a new SFTP filesystem driver and a critical security advisory for Parsedown.

Laravel depends on Parsedown for Markdown parsing, so this release is a necessary security upgrade that you should install.

In tandem with the new 5.6 release, Laravel 5.5.36 also includes an upgrade to Parsedown 1.7.0 to resolve the same security advisory.

The new SFTP filesystem driver, which allows for SSH key-based authentication has the following configuration:

'sftp' => [
    'driver' => 'sftp',
    'host' => 'example.com',
    'username' => 'username',
    'password' => 'password',
    'privateKey' => '/path/to/privateKey',
],

Here are the full release notes from the Laravel 5.6 GitHub changelog:

#v5.6.7 (2018-02-28)

#Added

• Added SFTP filesystem driver (#23308)

#Changed

• Pass parent model to withDefault() callback (#23334)
• Upgrade Parsedown to 1.7.0 (816f893)

#Fixed

• Fixed PostgresGrammar::whereTime() casting (#23323)
• Fixed SQLiteGrammar::whereTime() correct (#23321)