diff --git a/CHANGELOG.md b/CHANGELOG.md
index 619e6ed..d701d0e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -21,6 +21,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Changed
 
+- `laravel/framework ^13.0` is now declared in `require`. `src/` uses `FormRequest` from `Illuminate\Foundation`, which no `illuminate/*` component ships, so the dependency only arrived through the host application.
 - **Route names are vendor-scoped.** `env-kit.keys.{index,show,store,update,destroy}` and
   `env-kit.panel` are now registered as `laranail-env-kit-webui.keys.*` and
   `laranail-env-kit-webui.panel`. `env-kit.*` is also the engine's (`laranail/env-kit`) own
diff --git a/composer.json b/composer.json
index 8deb4fb..a42be30 100644
--- a/composer.json
+++ b/composer.json
@@ -38,7 +38,8 @@
         "illuminate/contracts": "^13.0",
         "illuminate/http": "^13.0",
         "illuminate/routing": "^13.0",
-        "illuminate/support": "^13.0"
+        "illuminate/support": "^13.0",
+        "laravel/framework": "^13.0"
     },
     "require-dev": {
         "orchestra/testbench": "^11.0",