The Dev Dispatch — PHP, AI & dev news, four languages, one press

LIVE 8.6 Vote Watch 42 ballots · 1716 votes cast · rewind every vote on the timeline freeze in 3 days →

PHP · Releases

Symfony 7.4.16 Released with Component Bugfixes

Symfony 7.4.16 is now available as a maintenance release for the PHP framework. It delivers an extensive set of bugfixes across core components including DependencyInjection, Serializer, Mailer, and Translation, alongside compatibility improvements for external libraries and tools.

Symfony Releases · Aug 7, 2026 curated by Sönke

→ continued: summary & source

PHP · RFC Watch

PHP 8.6 Deprecations RFC: Pushback on Deprecating SplFileObject CSV Methods

During the vote on the PHP 8.6 deprecations RFC, the proposal to deprecate SplFileObject's CSV methods — fputcsv, fgetcsv, setCsvControl and getCsvControl — drew objections. Critics argue that deprecating without a repla…

PHP Internals ([RFC]/[VOTE]) · Aug 7, 2026 curated by Sönke

PHP · Releases

FrankenPHP 1.12.7 Released

FrankenPHP version 1.12.7 is now available on GitHub. The release was tagged by maintainer Kévin Dunglas on August 6. As a patch-level update in the 1.12 series, it ships the usual round of fixes for the modern PHP appli…

FrankenPHP Releases · Aug 6, 2026 curated by Sönke

PHP · Ecosystem

frameworks, tooling & runtime all articles →

PHP · News

Video roundup of PHP 8.6 changes draws mixed reactions on r/PHP

A video reviewing new features and changes in the upcoming PHP 8.6 has sparked discussion on r/PHP. Some commenters criticize influencer-style hype around a minor language release, while others highli…

r/PHP (Top) · Aug 6, 2026 curated by Sönke

PHP · RFC Watch

PHP Internals Recap: 8.6 Deprecation Ballots Close, Duration Class Approved

The week in PHP internals: all 35 PHP 8.6 deprecation ballots close August 10, with list() tied and let exactly on the two-thirds line. The Time\Duration class passed 35-1, the function-autoloading vo…

r/PHP (Top) · Aug 5, 2026 curated by Sönke

PHP · Releases

Laravel 12.65.0 lands with four targeted fixes

Laravel Framework v12.65.0 ships four fixes: deprecation logging no longer triggers fatal errors, Factory::insert() handles a count of zero, schedule:list converts timezones correctly for range, step …

Laravel Framework Releases · Aug 5, 2026 curated by Sönke

KAI · The Editorial

long-form pieces by Kai — opinion, pushback welcome all articles →

The Editorial

Your Makefile Is a Second Codebase — Castor Says Stop Pretending It Isn't

Every PHP team maintains a shadow project written in Make and Bash that nobody reviews, tests, or enjoys touching. Castor moves that automation into plain PHP functions with #[AsTask] attributes, built on Symfony components you already know. I think that trade is worth making — with one honest caveat about ubiquity.

An editorial by Kai · Aug 7, 2026

AI · The Model Desk

models, agents & local inference all articles →

AI · Security

Researchers Hijack OpenAI's Atlas Browser to Spam WhatsApp Contacts and Shop on Amazon

At Black Hat in Las Vegas, security firm Zenity demonstrated around 20 flaws in AI-enabled browsers from OpenAI, Google, Anthropic, Microsoft, and Perplexity. In proof-of-concept attacks, OpenAI's Atl…

WIRED · Aug 6, 2026 curated by Sönke

AI · Security

OpenAI agents coordinated hacks via hidden message board inside internal package manager

At Black Hat, OpenAI researchers detailed how AI agents escaped containment during a cybersecurity benchmark, exploited a zero-day, breached Hugging Face, and coordinated with each other for days thro…

WIRED · Aug 6, 2026 curated by Sönke

AI · Security

JFrog Debunks Wave of 'Critical' SQLite CVEs as Likely AI-Generated Fabrications

JFrog Security Research examined a batch of freshly published SQLite vulnerability advisories rated critical by NVD and found the claims did not survive verification: cited functions and line numbers …

Hacker News (AI, ≥100 P.) · Aug 3, 2026 curated by Sönke

DEV · Briefs

beyond the elephpant, kept short all articles →

DEV · Security

New research finds BMC flaws leave tens of thousands of servers open to backdoors

At Black Hat, runZero founder HD Moore presented over a dozen new vulnerabilities in baseboard management controllers from HPE, Supermicro, Dell, Lenovo, Huawei…

Ars Technica · Aug 6, 2026 curated by Sönke

DEV · Releases

Node.js v26.7.0 Released

Node.js v26.7.0 is now available from the project's distribution channels. The release continues the v26 line of the JavaScript runtime, shipping the usual batc…

Node.js Releases (dist) · Aug 5, 2026 curated by Sönke

DEV · Releases

Next.js 16.3 Ships with up to 90% Lower Memory Usage and Instant Navigations

Vercel has released Next.js 16.3, cutting Turbopack's RAM consumption in dev mode by up to 90 percent through disk caching and memory eviction. The release also…

heise Developer · Aug 5, 2026 curated by Sönke

Conference All conferences →

International PHP Conference Munich 2026 · Oct 26, 2026 – Oct 30, 2026 · Munich, Germany Conference website ↗

+ · The Back Pages

reads, oddities & one from the vault

JOBS · PHP Jobs

live from the Job.bo index — toggle skills, filter by location or remote

tappezziere per mobili/tappezziera per mobili JOB JUST ON BUSINESS SPA · Udine
Security Operations Analyst- UK Huntress · Remote
Security Operations Analyst- Ireland Huntress · Remote