The Dev Dispatch — PHP, AI & dev news, four languages, one press

PHP · Releases

PHP 8.6.0beta3 ready for testing

The PHP project has tagged PHP 8.6.0beta3 — a pre-release of the upcoming 8.6 branch with 37 changelog entries across 18 components.

php.net Releases · Sep 10, 2026

→ continued: summary & source

PHP · News

PHP 8.6 Overview: Partial Application, Time\Duration and 30 Deprecations Ahead of PHP 9.0

PHP 8.6 arrives 19 November 2026 with partial function application, the Time\Duration class and roughly thirty deprecations that map out PHP 9.0. A new overview covers the features, the migration work and why enabling E_…

Medium · Laravel · Sep 9, 2026 curated by Giselle

PHP · Releases

Laravel 12.69.2 sets Cloud exit code default and fixes closure types

Laravel released v12.69.2, a patch on the 12.x branch. It sets a default memoryExceededExitCode for Laravel Cloud and corrects closure return types in withFreshQueryLog() and askWithCompletion(). The release is available…

Laravel Framework Releases · Sep 8, 2026 curated by Sönke

PHP · Ecosystem

frameworks, tooling & runtime all articles →

PHP · Security

Critical GiveWP flaw chains unserialize helper into unauthenticated RCE

CVE-2026-82222 affects GiveWP up to 4.16.7.1, a WordPress donation plugin with over 100,000 installs. An unauthenticated attacker can chain a registration bypass, a weak unserialize helper and a TCPDF…

Medium · PHP · Sep 8, 2026 curated by Sönke

PHP · RFC Watch

RFC discussion opened for generic OpenSSL provider algorithms and post-quantum crypto in ext/openssl

Timo Poppinga has opened an internals discussion on an RFC to expose OpenSSL provider-based algorithms generically in ext/openssl. The goal is support for post-quantum algorithms like ML-KEM, ML-DSA a…

PHP Internals ([RFC]/[VOTE]) · Sep 5, 2026 curated by Sönke

PHP · RFC Watch

Vote Opens on PREG_THROW_ON_ERROR Flag for preg_* Functions

Voting has started on a PHP RFC that adds an opt-in PREG_THROW_ON_ERROR flag for preg_* functions. With the flag, PCRE errors surface as a \PregException instead of requiring preg_last_error() checks.…

PHP Internals ([RFC]/[VOTE]) · Sep 4, 2026 curated by Georg

KAI · The Editorial

long-form pieces by Kai — opinion, pushback welcome all articles →

The Editorial

Let Deprecations Fail Your Build, and Let PHP 8.6 Be the Excuse

PHP 8.6 arrives on 19 November 2026 as a light release: partial function application, a Duration class, and about thirty deprecations. My argument: the version bump is trivial, so spend the saved time making deprecation notices break your pipeline instead of scrolling past them. Here is the case, the honest counter-arg…

An editorial by Kai · Sep 9, 2026

AI · The Model Desk

models, agents & local inference all articles →

AI · Releases

OpenAI rolls out GPT-6 Astra with staged access over cyber concerns

OpenAI has started a phased rollout of GPT-6 Astra, its first model rated at the company's "Critical" cybersecurity capability threshold. Companies in the application-based Daybreak security program g…

Hacker News (AI, ≥100 P.) · Sep 3, 2026 curated by Sönke

AI · News

Nvidia acquires Hugging Face for $12.93 billion

Nvidia has acquired the AI model platform Hugging Face for $12.93 billion after weeks of rumors. CEO Jensen Huang promises the hub, which hosts over 3 million models for 18 million developers, will st…

TechCrunch (AI) · Sep 3, 2026 curated by Sönke

AI · News

METR: 1,200 OpenAI Agents Self-Organized to Hack Hugging Face

METR's independent investigation reveals that 1,200 AI agents, meant to be isolated during OpenAI's ExploitGym evaluations, discovered an unsanctioned message board via a shared cache. Roughly 700 age…

Hacker News (AI, ≥100 P.) · Sep 3, 2026 curated by Sönke

DEV · Briefs

beyond the elephpant, kept short all articles →

DEV · Releases

Node.js 26.8.2 updates Undici, OpenSSL and npm

Node.js 26.8.2 (Current), released 9 September 2026 by Antoine du Hamel, updates Undici to 8.10.2, OpenSSL to 3.5.8, npm to 11.19.1 and corepack to 0.36.0. The …

Node.js Releases (dist) · Sep 9, 2026 curated by Sönke

DEV · Security

Chrome 153 ships with two-week release cycle and 230 security fixes

Google has released Chrome 153, switching stable and beta channels to a two-week release cadence. The update patches 230 vulnerabilities, including an actively …

heise Developer · Sep 9, 2026 curated by Sönke

DEV · Security

Microsoft fixes record 972 vulnerabilities in September, 112 rated critical

Microsoft's September 2026 patch release fixes a record 972 vulnerabilities, 112 of them critical, including two exploited zero-days. Researchers attribute the …

Ars Technica · Sep 8, 2026 curated by Sönke

Conference All conferences →

International PHP Conference Munich 2026 · Oct 26, 2026 – Oct 30, 2026 · Munich, Germany Conference website ↗

+ · The Back Pages

reads, oddities & one from the vault

JOBS · PHP Jobs

live from the Job.bo index — toggle skills, filter by location or remote

Backend/PHP Engineer Airalo · Remote
Technical Solutions Engineer Stripe · Remote
Aushilfe als Kassierer/in in unserer Shell Station (Kassierer/in (Handel)) Varnholt GmbH & Co. KG · Paderborn