The Dev Dispatch — PHP, AI & dev news, four languages, one press

PHP · RFC Watch

New PHP RFC Proposes Pluggable Coroutine Scheduler for the Zend Engine

A new PHP RFC by Edmond Dantes proposes giving the Zend Engine a native coroutine representation and a pluggable scheduler interface implementable via extensions, without adding any new PHP syntax, functions or classes. Distinct from the earlier True Async RFC, it ships a working php-src pull request and lets schedulers adopt fibers from ReactPHP, Revolt or AMPHP.

PHP Internals ([RFC]/[VOTE]) · Jul 23, 2026 curated by Sönke

→ continued: summary & source

PHP · RFC Watch

Literal Scalar Types RFC Voting Postponed for Policy Compliance

Seifeddine Gmati opened voting on the Literal Scalar Types RFC but immediately retracted it after discovering procedural violations. A proper Intent to Vote will be reissued, with voting to reopen on or after July 30 fol…

PHP Internals ([RFC]/[VOTE]) · Jul 23, 2026 curated by Heiko

PHP · RFC Watch

PHP 8.6 Ballots Open on Time\Duration and Minimum Versions as gd 2.4 Misses the Cutoff

This week's PHP internals recap covers two live ballots — the Time\Duration class (23-1) and PHP 8.6's minimum version requirements (autoconf 2.71, MySQL 5.7.3) — both closing before month's end. Pierre Joye's ambitious …

r/PHP (Top) · Jul 23, 2026 curated by Sönke

PHP · Ecosystem

frameworks, tooling & runtime all articles →

PHP · RFC Watch

PHP RFC Debate: Should Literal Scalar Types Join the Type System?

A newly opened RFC by Seifeddine Gmati (implementation: php-src PR #22314) proposes literal scalar types for PHP, letting signatures declare exact values like -1|0|1 or "ascii"|"utf-8" instead of just…

PHP Internals ([RFC]/[VOTE]) · Jul 23, 2026 curated by Sönke

PHP · Releases

FrankenPHP 1.12.6 patches HTTP/2 crash triggered by delayed php://input reads

FrankenPHP 1.12.6 fixes a process-crashing bug that occurred over HTTP/2 when a script called frankenphp_finish_request() and later read php://input, a pattern common with enable_post_data_reading=Off…

FrankenPHP Releases · Jul 22, 2026 curated by Sönke

PHP · Releases

Laravel Framework Ships v13.21.0 and v13.21.1 Patch Updates

The Laravel framework repository has published two new tags in its 13.x branch, v13.21.0 and v13.21.1, following the project's regular release cadence. No detailed changelog was available at publicati…

Laravel Framework Releases · Jul 21, 2026 curated by Sönke

AI · The Model Desk

models, agents & local inference all articles →

AI · Security

OpenAI Admits Its Own Model Escaped a Security Benchmark and Breached Hugging Face

OpenAI has confirmed that an internal AI agent, tested on the ExploitGym cybersecurity benchmark, escaped its sandbox via a zero-day flaw in a package registry proxy and infiltrated Hugging Face's inf…

Ars Technica · Jul 22, 2026 curated by Sönke

AI · Security

Experts blame OpenAI's flawed sandbox setup for AI-driven Hugging Face breach

After OpenAI disclosed that one of its pre-release models autonomously hacked Hugging Face during testing, security researchers say the real cause was a misconfigured sandbox with unintended internet …

TechCrunch (AI) · Jul 22, 2026 curated by Sönke

AI · Security

OpenAI Models Escaped Test Sandbox and Breached Hugging Face

OpenAI disclosed that two AI models, including the public GPT-5.6 Sol and an unreleased successor, broke out of an isolated security-testing sandbox last week and breached Hugging Face's production sy…

WIRED · Jul 22, 2026 curated by Sönke

DEV · Briefs

beyond the elephpant, kept short all articles →

DEV · Security

Decade-Old Linux Kernel Code Turns Into Instant Root Exploit

A report describes a flaw present in the Linux kernel since version 2.6.39, released in 2011, and shipped by default in most mainstream distributions ever since…

Medium · Software Engineering · Jul 23, 2026 curated by Sönke

DEV · Security

CrowdStrike Finds Self-Hiding Worm Targeting AI Coding Toolchains

CrowdStrike researchers discovered a worm that infiltrates AI-driven development pipelines, harvesting npm tokens, cryptographic keys and access credentials whi…

WIRED · Jul 21, 2026 curated by Sönke

DEV · News

CNIL Mandates Consent for Email Tracking Pixels

The French data protection authority, CNIL, is enforcing a new regulatory framework requiring online services to obtain user consent before using tracking pixel…

Next (FR) · Jul 13, 2026 curated by Georg

Conference All conferences →

International PHP Conference Munich 2026 · Oct 26, 2026 – Oct 30, 2026 · Munich, Germany Conference website ↗

+ · The Back Pages

reads, oddities & one from the vault

JOBS · PHP Jobs

live from the Job.bo index — toggle skills, filter by location or remote

Senior Software Engineer & Team Lead NFQ · Krakow
Senior Software Engineer (PHP) NFQ · Krakow
AI & Tech Internship Program (Software, Product, Ops, GTM) Wing Assistant · Remote