The Dev Dispatch — PHP, AI & dev news, four languages, one press

PHP · Tooling

PIE is now PHP’s recommended route for extensions

In September 2025, the PHP community approved guidance that favors PIE, the PHP Installer for Extensions, over PECL for installing non-bundled extensions. PIE 1.5.2 builds and enables packages from Packagist, while PECL continues to work with no removal date. The practical notes cover PHP requirements, build dependencies, CI and Docker use, package compatibility, and cleanup after uninstalling.

Medium · PHP · Oct 18, 2026 curated by Sönke

→ continued: summary & source

PHP · Security

Symfony patches ExpressionLanguage flaw in 5.4.54

Symfony 5.4.54 fixes CVE-2026-109449 in the ExpressionLanguage component by limiting how deeply expressions can nest. The maintenance release also improves cache handling and character escaping in the console. No exploit…

Medium · Laravel · Oct 18, 2026 curated by Sönke

PHP · Releases

Laravel 13.37.0 tightens queues and Eloquent behavior

Laravel 13.37.0 arrived on 16 October with fixes across queues, Eloquent and database access. queue:failed now supports a --queue option, and queue:forget accepts multiple IDs. The Image API adds JPEG XL support, and FTP…

Laravel Framework Releases · Oct 16, 2026 curated by Sönke

PHP · Ecosystem

frameworks, tooling & runtime all articles →

PHP · Tooling

Pest 5.3.2 skips all PHPUnit tests during sharded parallel runs

Pest 5.3.2 has a defect in its new time-balanced sharding path. When parallel execution and sharding are combined, the runner silently skips all PHPUnit tests. The problem was reported in GitHub issue…

r/PHP (Top) · Oct 15, 2026 curated by Sönke

PHP · Security

Symfony 5.4 LTS ships a security-focused update

Symfony 5.4.54, published on 15 October 2026, is a security release for the 5.4 branch. It addresses CVE-2026-109449 in ExpressionLanguage, CVE-2026-108082 in HttpFoundation, and CVE-2026-109413 in Ya…

Symfony Releases · Oct 15, 2026 curated by Georg

PHP · Releases

Symfony ships maintenance release v6.4.48

Symfony released version 6.4.48 on 14 October. The detailed changelog lists fixes across HttpClient, DependencyInjection, HttpKernel, Messenger, Yaml, Clock and Security, plus translation updates. It …

Symfony Releases · Oct 14, 2026 curated by Sönke

KAI · The Editorial

long-form pieces by Kai — opinion, pushback welcome all articles →

The Editorial

mir proves Psalm's annotations are a standard now, so let's write the spec

mir, a Rust analyzer that reads psalm.xml, baselines and @psalm-* tags, checks Laravel and Symfony in about two seconds where Psalm takes close to a minute. The speed is the headline. The bigger story is that PHP's docblock type language now has two engines interpreting it, and nobody has written down what it actually …

An editorial by Kai · Oct 18, 2026

AI · The Model Desk

models, agents & local inference all articles →

AI · Security

OpenCode cloud users urged to rotate provider credentials

Users in r/LocalLLaMA are warning OpenCode Console customers about a reported compromise involving third-party provider API keys. Comments point to the hosted service, while local model use appears ou…

r/LocalLLaMA (Top) · Oct 17, 2026 curated by Sönke

AI · Releases

DeepSeek ships a 763B update for agent workloads

DeepSeek-V4.1-Flash-1017 is a 763B-parameter minor update to DeepSeek-V4.1-Flash. The multimodal model improves reasoning, coding, agent tasks, and visual benchmarks while reducing execution time and …

Hacker News (AI, ≥100 P.) · Oct 17, 2026 curated by Sönke

AI · Releases

Muse Spark Open joins the US open-weight lineup

An r/LocalLLaMA post presents Muse Spark Open as a leading open-weight model from the United States. Discussion around the announcement highlights safety post-training and custom sglang kernels. Comme…

r/LocalLLaMA (Top) · Oct 15, 2026 curated by Sönke

DEV · Briefs

beyond the elephpant, kept short all articles →

DEV · Releases

Node.js 24.22.0 LTS widens crypto and runtime support

Node.js 24.22.0, the LTS release named Krypton, arrived on 14 October 2026. It adds PKCS#12 parsing, a generic MAC API and OpenSSL provider discovery in crypto.…

Node.js Releases (dist) · Oct 14, 2026 curated by Sönke

DEV · Security

Microsoft ships 1,411 fixes, including an exploited zero-day

Microsoft’s 13 October 2026 security release fixes 1,411 vulnerabilities, the largest monthly total reported for the company. Seventy are critical, and three ar…

Next (FR) · Oct 14, 2026 curated by Sönke

DEV · News

Cloudflare brings Deno into its Workers platform

Cloudflare will take on the entire Deno team, according to founder Ryan Dahl. Deno’s runtime will receive monthly bug and security releases for one more year, t…

Hacker News (Dev, ≥100 P.) · Oct 9, 2026 curated by Sönke

Conference All conferences →

International PHP Conference Munich 2026 · Oct 26, 2026 – Oct 30, 2026 · Munich, Germany Conference website ↗

+ · The Back Pages

reads, oddities & one from the vault

JOBS · PHP Jobs

live from the Job.bo index — toggle skills, filter by location or remote

AI Engineer (m/w/d) 80-100% bexio ag · Rapperswil-Jona
Technical Operations Engineer (CDI) Askara · Strasbourg
Webdesigner / Webentwickler WordPress & Shopware 60-100% (w/m/d) Fresh Interactive AG · Uster