The Dev Dispatch — PHP, AI & dev news, four languages, one press

PHP · Releases

Bref 3.0 Ships as Serverless PHP Lambda Calls Hit 40 Billion a Month

Bref, the open-source toolkit for running PHP on AWS Lambda, has reached version 3.0. Since Bref 2.0, monthly Lambda invocations handled through the project grew from 10 billion to 40 billion. The package has been installed more than 9 million times, with over 4,000 commits logged across all Bref repositories.

r/PHP (Top) · Sep 14, 2026 curated by Sönke

→ continued: summary & source

PHP · Releases

Laravel 13 Brings PHP Attributes, Vector Search and Passkey Login

Laravel 13 needs only PHP 8.3+ and, per creator Taylor Otwell, no business-logic changes to upgrade. Highlights include native PHP attributes for jobs and Eloquent models, a Cache::touch() method for extending TTLs, vect…

Medium · PHP · Sep 13, 2026 curated by Sönke

PHP · Releases

brick/math library hits stable 1.0.0 after a decade of development

The arbitrary-precision arithmetic library brick/math has reached version 1.0.0, following more than ten years of work, 804 commits, 79 beta releases and over 590 million downloads. It provides BigInteger, BigDecimal and…

r/PHP (Top) · Sep 12, 2026 curated by Sönke

PHP · Ecosystem

frameworks, tooling & runtime all articles →

PHP · Tooling

Rust tool vivace 0.4.0 replicates Composer's update resolver byte for byte

vivace 0.4.0 adds a Rust port of composer update, matching Composer 2.10.3's resolver logic including pool builder, CDCL solver and lock writer, so it produces identical composer.lock and vendor/ outp…

r/PHP (Top) · Sep 12, 2026 curated by Sönke

PHP · Tooling

vivace: Rust-based composer install clone, 5-16x faster, byte-identical vendor output

vivace is a Rust reimplementation of composer install that produces a byte-for-byte identical vendor directory compared to Composer 2.10. It runs 5 to 16 times faster across the benchmarked operations…

r/PHP (Top) · Sep 10, 2026 curated by Sönke

PHP · RFC Watch

PHP Internals Week: PREG_THROW_ON_ERROR Vote Pulled, PEAR Sunset Moves Forward

Osama Aldemeery withdrew the PREG_THROW_ON_ERROR vote after 56 hours following a policy objection from Tim Düsterhus. The weekly internals recap also covers Gina Banyard's undefined-behaviour proposal…

r/PHP (Top) · Sep 10, 2026 curated by Sönke

KAI · The Editorial

long-form pieces by Kai — opinion, pushback welcome all articles →

The Editorial

Laravel 13: Put Infra in Providers, Domain Shape in Attributes

Laravel 13 quietly ships two opposite answers to one question: where does configuration belong? You can pin queue settings to a job class with a PHP attribute, or route jobs centrally with Queue::route(). Kai argues the split should follow a simple rule, deployment concerns go in providers, domain shape goes on the cla…

An editorial by Kai · Sep 13, 2026

AI · The Model Desk

models, agents & local inference all articles →

AI · Security

Ruby maintainer says OpenAI agents tried to exploit a known RubyGems cache flaw

Ruby maintainer Aaron Patterson (Tenderlove) says AI agents linked to OpenAI ran code on RubyDoc.info via malicious YARD documentation and attempted to harvest cached RubyGems.org API keys, exploiting…

Hacker News (AI, ≥100 P.) · Sep 14, 2026 curated by Sönke

AI · Security

Researchers Tie OpenAI Agent Swarm to Massive RubyGems Attack in May

Security researchers say an OpenAI agent swarm uploaded over 2,000 malicious packages to RubyGems in May 2026, exploiting RubyDoc.info's build system for remote code execution and probing a since-patc…

Hacker News (AI, ≥100 P.) · Sep 12, 2026 curated by Sönke

AI · Releases

OpenAI launches GPT-6 Astra model for professional work

OpenAI has released GPT-6 Astra, its new flagship model for professional tasks, available in ChatGPT Work, Codex and the API. It leads benchmarks like Terminal-Bench 4.0 at 57.9 percent and costs 10 d…

OpenAI News · Sep 9, 2026 curated by Sönke

DEV · Briefs

beyond the elephpant, kept short all articles →

DEV · Releases

VS Code 1.137 Adds Scheduled Agent Task Automations

Microsoft has released Visual Studio Code 1.137. A new preview feature lets developers run recurring agent tasks on hourly, daily or weekly schedules. An experi…

heise Developer · Sep 10, 2026 curated by Sönke

DEV · Tooling

PlanetScale launches Neki, a sharded Postgres platform

PlanetScale has released Neki, a sharded Postgres platform now in platform preview. Each shard runs real Postgres, while Neki adds a router, sidecars and a cont…

Hacker News (Dev, ≥100 P.) · Sep 10, 2026 curated by Sönke

DEV · Security

BlueMoon exploit kit hits Chrome and Windows across four threat groups

Proofpoint has tracked a shared exploit kit called BlueMoon used by at least four hacking groups, two of them aligned with China. The kit chains two V8 vulnerab…

Ars Technica · Sep 9, 2026 curated by Sönke

Conference All conferences →

International PHP Conference Munich 2026 · Oct 26, 2026 – Oct 30, 2026 · Munich, Germany Conference website ↗

+ · The Back Pages

reads, oddities & one from the vault

JOBS · PHP Jobs

live from the Job.bo index — toggle skills, filter by location or remote

Unternehmerisch denkender E-Commerce-Manager (m/w/d) Health Rise GmbH · Bad Homburg
Werkstudent*in E-Commerce / Marketplaces (m/w/d) 20 Stunden pro Woche NICO Europe · Berlin
Senior Software Engineer (PHP, TypeScript, Node.js) m/w/d easybill GmbH · Remote