UpdateUserProfileInformation Action unverifies user's email regardless of change

[DarthShmev]

• Fortify Version: 1.4.1
• Laravel Version: 8.0
• PHP Version: 7.4.5
• Database Driver & Version: MySQL 8.0.19

Description:

When a user updates their profile information, the UpdateUserProfileInformation action checks to see if the new email in the request equals the user's existing email on record. Regardless of rather it does or not, the action sets the user's email_verified_at property to null. The expected behaviour would be to only nullify email_verified_at if the new email in the request does not equal the user's existing email on record.

Steps To Reproduce:

• Setup the latest version of Fortify
• Submit a PUT request to /user/profile-information with any email and name.

[DarthShmev]

Not only is this any issue for the aforementioned reason, the UpdateUserProfileInformation action checks to see if the emails match and then calls $user->sendEmailVerificationNotification() if it doesn't, before setting the user's email_verified_at property to null. This is a problem because before sending that email verification notification, Laravel checks to see if the user's email_verified_at property is null or not. Considering it has yet to be nullified, the notification is not send. Meaning the the user must re-verify their email address though receives no notification.