Originally published at hafiz.dev
Most point releases are safe to skim. Laravel 13.15 has one change that's a reason to update today, not eventually, so it's worth two minutes even if you skip the rest.
That change is a security fix for the date_equals validation rule, where an invalid date could slip past validation entirely under the right conditions. If you validate dates anywhere near authentication, scheduling, or access windows, read that section. The other three headline changes (typed translation accessors, JSON Schema unions, and a dedicated Cloud queue driver) are quality-of-life improvements you'll appreciate but won't lose sleep over. Here's what each one actually does.
Quick note on timing: Laravel ships minor releases weekly, so by the time you read this, 13.16 through 13.19 are already out too (13.19 added HTTP query method support). None of that changes the 13.15 features below, and since these are all backward-compatible minor releases, a composer update gets you everything at once.
The Security Fix You Should Actually Care About
