Beginning today, you may provide a list of email addresses that you would like to receive invoice PDFs when your Envoyer and Vapor subscriptions successfully renews.
We recently added this feature to Forge too, so now all Laravel products support this.
This new feature is available at:
Envoyer: "My Profile > Billing" dashboard image
Vapor: "My Profile > Billing" dashboard image
The invoice email contains a public and safe download invoice link, so your invoice recipient email addresses do not need to have access to your Envoyer and Vapor accounts.
Composer had a security vulnerability reported (CVE-2021-29472) and a new version has been released to address this. Everyone should run composer self-update to get v2.0.13 which includes the fix. According to their announcment : As a precaution after updating Composer we recommend you audit your composer.lock files to ensure they only contain URLs and none which start with -- , e.g. --config and could be considered command line options. Should you find any such URL values despite our belief that this vulnerability was not exploited in the wild, please contact us immediately by email to security@packagist.org. In general we always recommend you review changes you make to your lock files to ensure no untrusted dependencies or external URLs are introduced to your application. Please note that Packagist.org is only a metadata server and package contents are downloaded from a location chosen by the package maintainers. Private Packagist will store copies of mirrored packag...