Bump laravel/boost from 1.8.13 to 2.4.1

[dependabot]

Bumps laravel/boost from 1.8.13 to 2.4.1.

Release notes

Sourced from laravel/boost's releases.

v2.4.1

What's Changed

• Update Inertia v3 upgrade prompt to stable and add missing sections by @​pushpak1300 in laravel/boost#717
• Strip HTML comments before parsing skill frontmatter by @​pushpak1300 in laravel/boost#711
• Escape Blade component tags in guideline rendering by @​pushpak1300 in laravel/boost#718

Full Changelog: laravel/boost@v2.4.0...v2.4.1

v2.4.0

What's Changed

• Fix typo in Livewire skill description by @​bram-pkg in laravel/boost#695
• Remove Herd MCP integration in favor of Herd CLI by @​pushpak1300 in laravel/boost#666
• Add security audit to add-skill command by @​pushpak1300 in laravel/boost#616
• Add oauth field to OpenCode Nightwatch MCP config by @​DGarbs51 in laravel/boost#703
• Add laravel-best-practices skill by @​pushpak1300 in laravel/boost#628
• Feat: ignore skills update command by @​MrPunyapal in laravel/boost#702
• Improve folio-routing skill description and remove core guideline by @​pushpak1300 in laravel/boost#674
• Optimize core guideline for token efficiency by @​pushpak1300 in laravel/boost#668

New Contributors

• @​bram-pkg made their first contribution in laravel/boost#695
• @​DGarbs51 made their first contribution in laravel/boost#703

Full Changelog: laravel/boost@v2.3.4...v2.4.0

v2.3.4

What's Changed

• Remove Roster object caching to fix Laravel 13 serialization issue by @​pushpak1300 in laravel/boost#692

Full Changelog: laravel/boost@v2.3.3...v2.3.4

v2.3.3

Full Changelog: laravel/boost@v2.3.2...v2.3.3

v2.3.2

What's Changed

• Use major.minor PHP version in guidelines instead of full version by @​oddvalue in laravel/boost#657
• Remove redundant Tailwind CSS guidelines by @​pushpak1300 in laravel/boost#661
• Add Upgrade Laravel v13 MCP prompt by @​pushpak1300 in laravel/boost#658
• Use app_path() helper to support customized app locations by @​iWader in laravel/boost#665
• Configure sail binary path by @​iWader in laravel/boost#664
• fix: register installed skills in boost.json during add-skill by @​meirdick in laravel/boost#621
• Add --discover flag to boost:update by @​MrPunyapal in laravel/boost#651
• Remove redundant "When to Apply" sections from skill bodies by @​sulimanbenhalim in laravel/boost#669
• Guard against file_get_contents() returning false by @​sulimanbenhalim in laravel/boost#671
• fix: resolve relative symlinks when skills path is outside project root by @​tjmartin69 in laravel/boost#673
• Update pest-testing skill descriptions and clean up core guidelines by @​pushpak1300 in laravel/boost#670
• Rewrite Livewire core guidelines and skill descriptions in imperative style by @​pushpak1300 in laravel/boost#672

... (truncated)

Changelog

Sourced from laravel/boost's changelog.

v2.4.1 - 2026-03-25

What's Changed

• Update Inertia v3 upgrade prompt to stable and add missing sections by @​pushpak1300 in laravel/boost#717
• Strip HTML comments before parsing skill frontmatter by @​pushpak1300 in laravel/boost#711
• Escape Blade component tags in guideline rendering by @​pushpak1300 in laravel/boost#718

Full Changelog: laravel/boost@v2.4.0...v2.4.1

v2.4.0 - 2026-03-23

What's Changed

• Fix typo in Livewire skill description by @​bram-pkg in laravel/boost#695
• Remove Herd MCP integration in favor of Herd CLI by @​pushpak1300 in laravel/boost#666
• Add security audit to add-skill command by @​pushpak1300 in laravel/boost#616
• Add oauth field to OpenCode Nightwatch MCP config by @​DGarbs51 in laravel/boost#703
• Add laravel-best-practices skill by @​pushpak1300 in laravel/boost#628
• Feat: ignore skills update command by @​MrPunyapal in laravel/boost#702
• Improve folio-routing skill description and remove core guideline by @​pushpak1300 in laravel/boost#674
• Optimize core guideline for token efficiency by @​pushpak1300 in laravel/boost#668

New Contributors

• @​bram-pkg made their first contribution in laravel/boost#695
• @​DGarbs51 made their first contribution in laravel/boost#703

Full Changelog: laravel/boost@v2.3.4...v2.4.0

v2.3.4 - 2026-03-17

What's Changed

• Remove Roster object caching to fix Laravel 13 serialization issue by @​pushpak1300 in laravel/boost#692

Full Changelog: laravel/boost@v2.3.3...v2.3.4

v2.3.3 - 2026-03-17

Full Changelog: laravel/boost@v2.3.2...v2.3.3

v2.3.2 - 2026-03-16

What's Changed

• Use major.minor PHP version in guidelines instead of full version by @​oddvalue in laravel/boost#657
• Remove redundant Tailwind CSS guidelines by @​pushpak1300 in laravel/boost#661
• Add Upgrade Laravel v13 MCP prompt by @​pushpak1300 in laravel/boost#658
• Use app_path() helper to support customized app locations by @​iWader in laravel/boost#665

... (truncated)

Upgrade guide

Sourced from laravel/boost's upgrade guide.

Upgrade Guide

Upgrading To 2.x From 1.x

Note: If you are not using custom agents or overriding Boost in any way, you should experience minimal issues while upgrading. Simply run php artisan boost:install after upgrading to Boost 2.x and the migration will be handled automatically.

Note: If you are using external packages that add custom agents, ensure you update to versions that have support for Boost 2.x.

Minimum PHP Version

PHP 8.2 is now the minimum required version.

Minimum Laravel Version

Laravel 11.x is now the minimum required version.

Custom Agent Changes

PR Link: laravel/boost#439

Likelihood Of Impact: Low

If you have added your own custom agents, you will need to make the following changes:

Terminology and Namespace Changes

CodeEnvironment has been replaced with Agent throughout:

Before	After
CodeEnvironment	Agent
CodeEnvironmentsDetector	AgentsDetector
src/Install/CodeEnvironment/	src/Install/Agents/
Laravel\Boost\Install\CodeEnvironment	Laravel\Boost\Install\Agents
registerCodeEnvironment(string $key, string $className)	registerAgent(string $key, string $className)
getCodeEnvironments()	getAgents()

Contract Renames

Several contracts have been renamed for clarity:

Before	After
Laravel\Boost\Contracts\Agent	Laravel\Boost\Contracts\SupportsGuidelines
Laravel\Boost\Contracts\McpClient	Laravel\Boost\Contracts\SupportsMcp
Laravel\Boost\Contracts\SupportSkills	Laravel\Boost\Contracts\SupportsSkills

Custom Agent Migration

If you have registered custom agents, update them to use the new namespace and contracts:

... (truncated)

Commits

• f6241df Escape Blade component tags in guideline rendering (#718)
• b7f3765 Strip HTML comments before parsing skill frontmatter (#711)
• 9e718cf Update Inertia v3 upgrade prompt to stable and add missing sections (#717)
• f405782 Update CHANGELOG
• a09bebc Optimize core guideline for token efficiency (#668)
• 1f7830f Improve folio-routing skill description and remove core guideline (#674)
• a14a8cf Feat: ignore skills update command (#702)
• 15e6b8f Add laravel-best-practices skill (#628)
• 212fa0b Add oauth field to OpenCode Nightwatch MCP config (#703)
• b3e5f87 Add security audit to add-skill command (#616)
• Additional commits viewable in compare view

[crimsonstrife]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[deepsource-io]

DeepSource Code Review

We reviewed changes in 3a48f78...ebc10bd on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade

Security   Reliability   Complexity   Hygiene

Code Review Summary

Analyzer	Status	Updated (UTC)	Details
PHP		Apr 10, 2026 5:33p.m.	Review ↗
JavaScript		Apr 10, 2026 5:33p.m.	Review ↗
Python		Apr 10, 2026 5:33p.m.	Review ↗

---

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

[dependabot]

Superseded by #555.