Laravel v5.5.13 released


September 26th, 2017

Laravel v5.5.13 was tagged yesterday (9/24/2017) to address an ongoing issue related to a security fix released in v5.5.11.

This version should be the last quick patch release related to the “remember token” fix. You should upgrade to this version if you initially updated to v5.5.11 or v5.5.12.

This release adds two new features: the ability to configure an optional blacklist for the Whoops package and the Collection::pad() method.

The pad() method works like PHP’s array_pad function:

$collection = collect(['A', 'B', 'C']);
$filtered = $collection->pad(5, 0);
// ['A', 'B', 'C', 0, 0]

$filtered = $collection->pad(-5, 'D');
// ['D', 'D', 'A', 'B', 'C']



  • Added optional config option for whoops blacklist (#21336, a83ebc1)
  • Added Collection::pad() method (#21342)


  • Made $callback parameter of Arr::sort() optional (#21337)
  • Support setting custom REMOTE_ADDR in MakesHttpRequests (#21351)
  • Changed visibility of $output to public on console events (#21356)


  • Don’t compare remember token in user providers if it’s null (srsly for real this time, pinky promise) (#21328, #21368)



  • Added “software” as an uncountable word (#21324)


  • Don’t compare remember token if it’s null (#21328)

Filed in:

Paul Redmond

Full stack web developer. Author of Lumen Programming Guide and Docker for PHP Developers.