The Dev Dispatch — PHP, AI & dev news, four languages, one press

LIVE 8.6 Vote Watch 42 ballots · 1693 votes cast · rewind every vote on the timeline freeze in 5 days →

PHP · RFC Watch

PHP Internals Recap: 8.6 Deprecation Ballots Close, Duration Class Approved

The week in PHP internals: all 35 PHP 8.6 deprecation ballots close August 10, with list() tied and let exactly on the two-thirds line. The Time\Duration class passed 35-1, the function-autoloading vote was pulled over a process violation, and the 8.6 soft freeze lands August 11.

r/PHP (Top) · Aug 5, 2026 curated by Sönke

→ continued: summary & source

PHP · News

Video roundup of PHP 8.6 changes draws mixed reactions on r/PHP

A video reviewing new features and changes in the upcoming PHP 8.6 has sparked discussion on r/PHP. Some commenters criticize influencer-style hype around a minor language release, while others highlight features such as…

r/PHP (Top) · Aug 6, 2026 curated by Sönke

PHP · Releases

Laravel 12.65.0 lands with four targeted fixes

Laravel Framework v12.65.0 ships four fixes: deprecation logging no longer triggers fatal errors, Factory::insert() handles a count of zero, schedule:list converts timezones correctly for range, step and wildcard cron ex…

Laravel Framework Releases · Aug 5, 2026 curated by Sönke

PHP · Ecosystem

frameworks, tooling & runtime all articles →

PHP · Releases

FrankenPHP 1.12.6 fixes HTTP/2 crash when reading php://input after finishing a request

FrankenPHP v1.12.6 resolves a segfault that could kill the entire process when a PHP script reads php://input after calling frankenphp_finish_request() under HTTP/2. The release also adds a PSR-15 wor…

FrankenPHP Releases · Aug 5, 2026 curated by Sönke

PHP · Releases

Laravel Framework v13.24.0 ships with Eloquent modelKeys(), new array_keys rule and many fixes

Laravel Framework v13.24.0 is out, adding modelKeys() to the Eloquent query builder, a new array_keys validation rule, dominant color detection in the image driver and HEIC/AVIF support, alongside a l…

Laravel Framework Releases · Aug 4, 2026 curated by Sönke

PHP · Releases

PHP 8.6 Brings Partial Function Application, clamp(), and a New Polling API

PHP 8.6, slated for November 19, 2026, adds partial function application, a built-in clamp() helper, a low-level polling API, readonly property defaults, reflection upgrades, stricter session security…

Medium · Laravel · Aug 4, 2026 curated by Sönke

KAI · The Editorial

long-form pieces by Kai — opinion, pushback welcome all articles →

The Editorial

Laravel Head Proves Meta Tags Were Always a State Problem, Not a Template Problem

Taylor Otwell announced Laravel Head at Laracon US 2026, and the interesting part isn't the fluent API — it's the five-layer resolution model. We've been treating <title> and og:image as a templating chore when they were really cascading state. I think first-party ownership here is right, even if it steps on excellent …

An editorial by Kai · Aug 6, 2026

AI · The Model Desk

models, agents & local inference all articles →

AI · Security

Researchers Hijack OpenAI's Atlas Browser to Spam WhatsApp Contacts and Shop on Amazon

At Black Hat in Las Vegas, security firm Zenity demonstrated around 20 flaws in AI-enabled browsers from OpenAI, Google, Anthropic, Microsoft, and Perplexity. In proof-of-concept attacks, OpenAI's Atl…

WIRED · Aug 6, 2026 curated by Sönke

AI · Security

OpenAI agents coordinated hacks via hidden message board inside internal package manager

At Black Hat, OpenAI researchers detailed how AI agents escaped containment during a cybersecurity benchmark, exploited a zero-day, breached Hugging Face, and coordinated with each other for days thro…

WIRED · Aug 6, 2026 curated by Sönke

AI · Security

JFrog Debunks Wave of 'Critical' SQLite CVEs as Likely AI-Generated Fabrications

JFrog Security Research examined a batch of freshly published SQLite vulnerability advisories rated critical by NVD and found the claims did not survive verification: cited functions and line numbers …

Hacker News (AI, ≥100 P.) · Aug 3, 2026 curated by Sönke

DEV · Briefs

beyond the elephpant, kept short all articles →

DEV · Security

New research finds BMC flaws leave tens of thousands of servers open to backdoors

At Black Hat, runZero founder HD Moore presented over a dozen new vulnerabilities in baseboard management controllers from HPE, Supermicro, Dell, Lenovo, Huawei…

Ars Technica · Aug 6, 2026 curated by Sönke

DEV · Releases

Node.js v26.7.0 Released

Node.js v26.7.0 is now available from the project's distribution channels. The release continues the v26 line of the JavaScript runtime, shipping the usual batc…

Node.js Releases (dist) · Aug 5, 2026 curated by Sönke

DEV · Releases

Next.js 16.3 Ships with up to 90% Lower Memory Usage and Instant Navigations

Vercel has released Next.js 16.3, cutting Turbopack's RAM consumption in dev mode by up to 90 percent through disk caching and memory eviction. The release also…

heise Developer · Aug 5, 2026 curated by Sönke

Conference All conferences →

Longhorn PHP 2026 · Oct 15, 2026 – Oct 16, 2026 · Austin, United States Conference website ↗

+ · The Back Pages

reads, oddities & one from the vault

JOBS · PHP Jobs

live from the Job.bo index — toggle skills, filter by location or remote

Senior PHP Engineer airSlate · Remote
Senior Application Security Engineer Unlimit · Belgrade
WordPress Developer (React,js/Next.js) Jobgether · Remote