Update spatie/laravel-permission requirement from ^7.0 to ^8.3

[dependabot]

Updates the requirements on spatie/laravel-permission to permit the latest version.

Release notes

Sourced from spatie/laravel-permission's releases.

8.3.0

What's Changed

• Fix initializeCache() not clearing in-memory perms collection on tenant/cache switch by @​drbyte in spatie/laravel-permission#2965
• Add wiring-level test coverage for the Octane reset listener by @​drbyte in spatie/laravel-permission#2966

ALSO CHECK THE RELEASE NOTES FOR 8.2.0

Full Changelog: spatie/laravel-permission@8.2.0...8.3.0

Changelog

Sourced from spatie/laravel-permission's changelog.

8.3.0 - 2026-07-03

What's Changed

• Fix initializeCache() not clearing in-memory perms collection on tenant/cache switch by @​drbyte in spatie/laravel-permission#2965
• Add wiring-level test coverage for the Octane reset listener by @​drbyte in spatie/laravel-permission#2966

ALSO CHECK THE RELEASE NOTES FOR 8.2.0

Full Changelog: spatie/laravel-permission@8.2.0...8.3.0

8.2.0 - 2026-07-03

What's Changed

• Fire PermissionDetachedEvent when syncing permissions (symmetry with syncRoles) by @​chengkangzai in spatie/laravel-permission#2963
• Fixed a bug where removing a role or permission from a model on one team could also remove that same assignment on other teams, when the model uses a custom pivot class (->using(CustomPivot::class)) on roles()/permissions() with teams enabled. (Issue #2867) by @​drbyte in spatie/laravel-permission#2961

Watch out for in your own test suite:

• If you use custom pivot model deleting/deleted hooks to react to role/permission removal under teams, those hooks were already unreliable in this scenario and remain out of scope — switch to listening for RoleDetachedEvent / PermissionDetachedEvent instead.
• revokePermissionTo() can now throw GuardDoesNotMatch in rare cases where it previously wouldn't have, as a side effect of routing through the same guard-check used by givePermissionTo(). This should not affect normal usage (permissions being revoked are already guard-matched), but if your tests exercise unusual multi-guard setups, re-run them against this release.

Full Changelog: spatie/laravel-permission@8.1.0...8.2.0

8.1.0 - 2026-06-27

What's Changed

• Fixed: mismatched surrounding quote characters in pipe-delimited role strings are now preserved instead of stripped. by @​albertoarena in spatie/laravel-permission#2960

Fixes malformed pipe strings that start with ' or " and do not end with the same quote. Normal documented usage is unchanged:

hasAnyRole('writer|admin')       // same
hasAnyRole("'writer|admin'")     // same
hasAnyRole('"writer|admin"')     // same
hasAnyRole("'writer|admin")      // changed: mismatched apostrophe is removed
hasAnyRole("'writer|admin\"")    // changed: mismatched quote is removed

also

• docs: modernize middleware usage examples by @​zainphp in spatie/laravel-permission#2954
• Bump actions/checkout from 6 to 7 by @​dependabot[bot] in spatie/laravel-permission#2959

New Contributors

• @​zainphp made their first contribution in spatie/laravel-permission#2954

... (truncated)

Commits

• 60e8ed5 Merge pull request #2966 from spatie/octane-tests
• 1a04d7e ## Add wiring-level test coverage for the Octane reset listener
• 396c747 Merge pull request #2965 from spatie/tenant-initialize-cache-issue-2964
• e80d7b0 Fix initializeCache() not clearing in-memory perms collection on tenant/cache...
• 9d4eb1e Update CHANGELOG
• e97b036 Merge pull request #2961 from spatie/fix-2867-teams-custom-pivot
• 9a43872 Apply same team detach sync to permissions
• 5084699 Fix team delete/sync when using custom pivot class
• 08cc164 PhpStan ignore in HasPermissions trait
• 9acc273 Merge pull request #2963 from chengkangzai/fix/sync-permissions-detached-event
• Additional commits viewable in compare view

[dependabot]

Dependabot can't resolve your PHP dependency files. Because of this, Dependabot cannot update this pull request.