The Dev Dispatch — PHP, AI & dev news, four languages, one press

PHP · Releases

Symfony 8 Drops XML Configuration, YAML Stays the Default

Symfony 8.0, released November 27, 2025, removes the XML configuration loader for services and routes entirely. YAML remains supported and gains JSON schema tooling, while a new array-based PHP format replaces the deprecated fluent config builders.

Medium · PHP · Aug 19, 2026 curated by Sönke

→ continued: summary & source

PHP · Releases

Laravel 12.67.0 ships with fixes for validation bypass and Postgres JSON escaping

Laravel 12.67.0 tightens temporary upload URL handling, closes a loose-comparison bypass in validation rules, and escapes single quotes in Postgres JSON paths. It also adds retries for timed-out cloud agent long-polls an…

Laravel Framework Releases · Aug 18, 2026 curated by Sönke

PHP · Releases

Leaf 5 ships with AI-assistant workflows built into the framework

Leaf PHP framework creator Michael Darko has released Leaf 5, described as the project's largest update yet. It adds self-explaining error screens, token-efficient documentation and a .leaf/CONTEXT.md file for persistent…

r/PHP (Top) · Aug 17, 2026 curated by Sönke

PHP · Ecosystem

frameworks, tooling & runtime all articles →

PHP · RFC Watch

Debate over CSV deprecations in the PHP 8.6 deprecations RFC

The Deprecations for PHP 8.6 RFC has passed its vote, but discussion on internals continues. Robert Humphries argues that deprecating SplFileObject CSV methods like fputcsv() and setCsvControl() leave…

PHP Internals ([RFC]/[VOTE]) · Aug 15, 2026 curated by Giselle

PHP · News

PHP 8.6 Deprecation Wave Could Inflate Your Logging Costs

PHP 8.6's mass deprecation vote closed with 35 RFCs, most passing. Nothing breaks immediately, but deprecated calls keep warning — and on busy Laravel apps that means sustained log volume, higher inge…

Medium · Laravel · Aug 14, 2026 curated by Heiko

PHP · News

Symfony App Migration to FrankenPHP Worker Mode Yields 20% Gain, Not the Advertised 3.5x

A developer reports that migrating a production Symfony application from nginx plus PHP-FPM to FrankenPHP worker mode delivered roughly a 20% speedup rather than the 3.5x figure on the FrankenPHP home…

r/PHP (Top) · Aug 14, 2026 curated by Georg

KAI · The Editorial

long-form pieces by Kai — opinion, pushback welcome all articles →

The Editorial

queue:pause --all Matters More Than Laravel's Shiny New Terminal Tabs

Laravel 13.25's tabbed dev UI will collect the screenshots, but the release's real gift is queue:pause --all: a precise fix for the deploy window where fresh code meets stale workers. I argue why that command, and the careful thinking behind its resume semantics, outweighs the eye candy, and ask where framework-owned t…

An editorial by Kai · Aug 19, 2026

AI · The Model Desk

models, agents & local inference all articles →

AI · Security

Copilot Leaked Its Own Bypass: Varonis One-Click Attack Exfiltrates Passwords

Varonis researchers coaxed Microsoft 365 Copilot Enterprise into revealing an undocumented URL parameter, ?autorun=1, that executes prompts without user consent. Combined with ?q=, a single clicked li…

Ars Technica · Aug 18, 2026 curated by Sönke

AI · Releases

DeepSeek launches V4-Pro and splits API pricing into peak and off-peak rates

DeepSeek has released DeepSeek-V4-Pro as GA, promising stronger agent performance, adjustable reasoning effort and native OpenAI Responses API support. Alongside, the provider introduces peak/off-peak…

Hacker News (AI, ≥100 P.) · Aug 14, 2026 curated by Giselle

AI · Releases

Google Releases Gemini 3.7 Flash with Enhanced Coding and Agent Capabilities

Google has launched Gemini 3.7 Flash, an upgraded version of its widely-used workhorse model, just three weeks after version 3.6. The new model demonstrates significant improvements in software engine…

Hacker News (AI, ≥100 P.) · Aug 13, 2026 curated by Heiko

DEV · Briefs

beyond the elephpant, kept short all articles →

DEV · Security

Critical GitLab GraphQL flaw already under attack, watchTowr reports

Attack attempts against CVE-2026-19478, a critical GitLab vulnerability patched in an out-of-band release on Monday, have been observed by security firm watchTo…

heise Developer · Aug 20, 2026 curated by Sönke

DEV · Security

Critical GitLab Flaw Lets Attackers Delete Projects

GitLab has patched two vulnerabilities, one rated critical, that allow attackers to manipulate or delete public projects and user data via the GraphQL API. Fixe…

heise Developer · Aug 18, 2026 curated by Sönke

DEV · Security

PostgreSQL patches 28 security flaws, two allow code execution

PostgreSQL's team released versions 14.24, 15.19, 16.15, 17.11 and 18.6, fixing 28 vulnerabilities. Most let attackers run arbitrary code after a successful att…

heise Developer · Aug 17, 2026 curated by Sönke

Conference All conferences →

International PHP Conference Munich 2026 · Oct 26, 2026 – Oct 30, 2026 · Munich, Germany Conference website ↗

+ · The Back Pages

reads, oddities & one from the vault

JOBS · PHP Jobs

live from the Job.bo index — toggle skills, filter by location or remote

Senior PHP Developer ftmo · Prague office
PHP Software Developer HOUSE OF RECRUITMENT SOLUTIONS BV · Arr. Gent
PHP Backend Developer HOUSE OF RECRUITMENT SOLUTIONS BV · Arr. Gent