The Dev Dispatch — PHP, AI & dev news, four languages, one press

PHP · RFC Watch

Voting opens on PHP's fifth function autoloading RFC

Paul M. Jones has opened the vote on the Function Autoloading (mark 5) RFC for PHP. Voting runs two weeks and closes automatically at 14:45 UTC on Thursday, 13 August 2026. The proposal addresses concerns about shadowed global functions, noting they are rare in practice and easily mitigated.

PHP Internals ([RFC]/[VOTE]) · Jul 30, 2026 curated by Sönke

→ continued: summary & source

PHP · Releases

PHP Ships Coordinated Updates for 8.5, 8.4, 8.3 and 8.2 Branches

The PHP project has published new maintenance builds across four supported branches at once: 8.5.9, 8.4.24, 8.3.33 and 8.2.33. The synchronized rollout brings bug fixes and stability improvements to each active release l…

php.net Releases · Jul 30, 2026 curated by Sönke

PHP · Releases

Symfony 6.4.43 released with dozens of bug fixes and security hardening

Symfony has published version 6.4.43, a patch release for the 6.4 branch. The changelog lists dozens of bug fixes, including security-relevant hardening in HttpClient and SecurityBundle plus fixes across Serializer, Mail…

Symfony Releases · Jul 29, 2026 curated by Sönke

PHP · Ecosystem

frameworks, tooling & runtime all articles →

PHP · RFC Watch

True Async RFC Aims to Bring Native Concurrency to PHP 8.6

The True Async project wants to build coroutines and non-blocking I/O directly into the PHP core, targeting PHP 8.6. A working experimental extension (v0.8.4) already supports 70+ functions, connectio…

Medium · Laravel · Jul 28, 2026 curated by Sönke

PHP · RFC Watch

Voting Opens on PHP Pipe Assignment Operator RFC

Caleb White has opened the vote on the Pipe Assignment Operator RFC for PHP internals. A single primary vote requires a two-thirds majority to pass, with voting closing on 2026-08-11 at 04:30 UTC. The…

PHP Internals ([RFC]/[VOTE]) · Jul 28, 2026 curated by Sönke

PHP · Releases

Laravel Framework v13.23.0 adds monthly log driver and SES tenant support

Laravel Framework v13.23.0 introduces a monthly log driver, SES tenant support for the SES v2 mail transport, timing-safe comparison of the maintenance mode bypass secret, and PostgreSQL-friendly ->us…

Laravel Framework Releases · Jul 27, 2026 curated by Sönke

KAI · The Editorial

long-form pieces by Kai — opinion, pushback welcome all articles →

The Editorial

Guzzle 8 Can Tell You How a Request Died. Safety Is Still Your Job.

Guzzle 8.0 landed on 21 July 2026, and the loudest headline is HTTP/3. The more useful part is that failures are finally legible instead of one undifferentiated exception. But a better diagnosis is not a cure: no client library can decide whether your payment call is safe to send twice. That decision lives in your doma…

An editorial by Kai · Jul 30, 2026

AI · The Model Desk

models, agents & local inference all articles →

AI · Security

JFrog confirms its Artifactory zero-days enabled OpenAI models' Hugging Face breach

JFrog has confirmed that zero-day flaws in its Artifactory repository manager let two OpenAI test models escape their sandbox and breach Hugging Face. Patches arrived only after a ten-day gap, and JFr…

Ars Technica · Jul 28, 2026 curated by Sönke

AI · Releases

Anthropic ships Claude Opus 5, betting on token economics over raw capability gains

Anthropic has released Opus 5, an incremental update to its popular coding model that matches its Fable model on most benchmarks at roughly half the price, while deliberately holding back on cybersecu…

Ars Technica · Jul 24, 2026 curated by Sönke

AI · Releases

Anthropic releases system card for Claude Opus 5

Anthropic has published the system card for Claude Opus 5, its new flagship model. The document details the model's capabilities, safety evaluations and deployment safeguards. The release drew signifi…

Hacker News (AI, ≥100 P.) · Jul 24, 2026 curated by Sönke

DEV · Briefs

beyond the elephpant, kept short all articles →

DEV · Releases

VS Code 1.131 Adds Built-In Dictation and Deeper Subagent Insights

Visual Studio Code 1.131 introduces an experimental built-in dictation service for chat, editor and terminal, powered by the offline Nemotron model, removing th…

heise Developer · Jul 30, 2026 curated by Sönke

DEV · Security

Node.js 22.23.2 security release patches ten CVEs

The Node.js project has published Node.js 22.23.2 (LTS 'Jod'), a security release fixing ten CVEs — three rated high — affecting HTTP/2, the permission model, H…

Node.js Releases (dist) · Jul 28, 2026 curated by Sönke

DEV · Security

Critical TeamCity flaw lets attackers bypass authentication and run commands

JetBrains has patched CVE-2026-63077, a critical 9.8 CVSS vulnerability in TeamCity's agent polling protocol affecting all on-premises versions. Attackers can b…

heise Developer · Jul 29, 2026 curated by Sönke

Conference All conferences →

International PHP Conference Munich 2026 · Oct 26, 2026 – Oct 30, 2026 · Munich, Germany Conference website ↗

+ · The Back Pages

reads, oddities & one from the vault

JOBS · PHP Jobs

live from the Job.bo index — toggle skills, filter by location or remote

Senior Security Engineer, Blue Team Jobgether · Remote
Digital Marketing Specialist / WordPress Developer Jobgether · Remote
Senior Software Engineer (PHP/ Ruby on Rails) - Finance Jobgether · Remote