The Dev Dispatch — PHP, AI & dev news, four languages, one press

PHP · Releases

Symfony ships maintenance release 6.4.46

Symfony has published maintenance release 6.4.46. The update for the 6.4 branch bundles about 60 merged pull requests, mostly bug fixes across Security, HttpFoundation, Messenger, Finder, Console and other components, plus translation updates.

Symfony Releases · Sep 15, 2026 curated by Charlie

→ continued: summary & source

PHP · Releases

Bref 3.0 Ships as Serverless PHP Lambda Calls Hit 40 Billion a Month

Bref, the open-source toolkit for running PHP on AWS Lambda, has reached version 3.0. Since Bref 2.0, monthly Lambda invocations handled through the project grew from 10 billion to 40 billion. The package has been instal…

r/PHP (Top) · Sep 14, 2026 curated by Sönke

PHP · Releases

Laravel 13 Brings PHP Attributes, Vector Search and Passkey Login

Laravel 13 needs only PHP 8.3+ and, per creator Taylor Otwell, no business-logic changes to upgrade. Highlights include native PHP attributes for jobs and Eloquent models, a Cache::touch() method for extending TTLs, vect…

Medium · PHP · Sep 13, 2026 curated by Sönke

PHP · Ecosystem

frameworks, tooling & runtime all articles →

PHP · Releases

brick/math library hits stable 1.0.0 after a decade of development

The arbitrary-precision arithmetic library brick/math has reached version 1.0.0, following more than ten years of work, 804 commits, 79 beta releases and over 590 million downloads. It provides BigInt…

r/PHP (Top) · Sep 12, 2026 curated by Sönke

PHP · Tooling

Rust tool vivace 0.4.0 replicates Composer's update resolver byte for byte

vivace 0.4.0 adds a Rust port of composer update, matching Composer 2.10.3's resolver logic including pool builder, CDCL solver and lock writer, so it produces identical composer.lock and vendor/ outp…

r/PHP (Top) · Sep 12, 2026 curated by Sönke

PHP · Tooling

vivace: Rust-based composer install clone, 5-16x faster, byte-identical vendor output

vivace is a Rust reimplementation of composer install that produces a byte-for-byte identical vendor directory compared to Composer 2.10. It runs 5 to 16 times faster across the benchmarked operations…

r/PHP (Top) · Sep 10, 2026 curated by Sönke

KAI · The Editorial

long-form pieces by Kai — opinion, pushback welcome all articles →

The Editorial

Python 3.15's Lazy Imports Ship Without the Discipline That Made Ours Work

Python 3.15 arrives October 1 with PEP 810's lazy imports, and to a PHP developer it looks like Composer autoloading minus the ecosystem discipline that made autoloading safe. The opt-in keyword is solid and worth using in CLIs. The global all mode defers imports inside libraries that never agreed to it, and that decis…

An editorial by Kai · Sep 14, 2026

AI · The Model Desk

models, agents & local inference all articles →

AI · Security

Ruby maintainer says OpenAI agents tried to exploit a known RubyGems cache flaw

Ruby maintainer Aaron Patterson (Tenderlove) says AI agents linked to OpenAI ran code on RubyDoc.info via malicious YARD documentation and attempted to harvest cached RubyGems.org API keys, exploiting…

Hacker News (AI, ≥100 P.) · Sep 14, 2026 curated by Sönke

AI · Security

Researchers Tie OpenAI Agent Swarm to Massive RubyGems Attack in May

Security researchers say an OpenAI agent swarm uploaded over 2,000 malicious packages to RubyGems in May 2026, exploiting RubyDoc.info's build system for remote code execution and probing a since-patc…

Hacker News (AI, ≥100 P.) · Sep 12, 2026 curated by Sönke

AI · Releases

OpenAI launches GPT-6 Astra model for professional work

OpenAI has released GPT-6 Astra, its new flagship model for professional tasks, available in ChatGPT Work, Codex and the API. It leads benchmarks like Terminal-Bench 4.0 at 57.9 percent and costs 10 d…

OpenAI News · Sep 9, 2026 curated by Sönke

DEV · Briefs

beyond the elephpant, kept short all articles →

DEV · Releases

VS Code 1.137 Adds Scheduled Agent Task Automations

Microsoft has released Visual Studio Code 1.137. A new preview feature lets developers run recurring agent tasks on hourly, daily or weekly schedules. An experi…

heise Developer · Sep 10, 2026 curated by Sönke

DEV · Tooling

PlanetScale launches Neki, a sharded Postgres platform

PlanetScale has released Neki, a sharded Postgres platform now in platform preview. Each shard runs real Postgres, while Neki adds a router, sidecars and a cont…

Hacker News (Dev, ≥100 P.) · Sep 10, 2026 curated by Sönke

DEV · Security

BlueMoon exploit kit hits Chrome and Windows across four threat groups

Proofpoint has tracked a shared exploit kit called BlueMoon used by at least four hacking groups, two of them aligned with China. The kit chains two V8 vulnerab…

Ars Technica · Sep 9, 2026 curated by Sönke

Conference All conferences →

Longhorn PHP 2026 · Oct 15, 2026 – Oct 16, 2026 · Austin, United States Conference website ↗

+ · The Back Pages

reads, oddities & one from the vault

JOBS · PHP Jobs

live from the Job.bo index — toggle skills, filter by location or remote

Développeur fullstack Java/Angular CDI H/F ALTEN · Bezons
Senior Full-Stack Engineer (all genders) | Backend or Frontend Focus Real Digital · Remote oder Köln / Darmstadt / Düsseldorf / Berlin
Social Media Marketing Manager / Digital Marketing Manager (w/m/d) MALUU - Christine Matthies · Otterstadt