The Dev Dispatch — PHP, AI & dev news, four languages, one press

PHP · Tooling

vivace: Rust-based composer install clone, 5-16x faster, byte-identical vendor output

vivace is a Rust reimplementation of composer install that produces a byte-for-byte identical vendor directory compared to Composer 2.10. It runs 5 to 16 times faster across the benchmarked operations. It requires an existing composer.lock and deliberately falls back to real Composer for unsupported features.

r/PHP (Top) · Sep 10, 2026 curated by Sönke

→ continued: summary & source

PHP · RFC Watch

PHP Internals Week: PREG_THROW_ON_ERROR Vote Pulled, PEAR Sunset Moves Forward

Osama Aldemeery withdrew the PREG_THROW_ON_ERROR vote after 56 hours following a policy objection from Tim Düsterhus. The weekly internals recap also covers Gina Banyard's undefined-behaviour proposal, progress on sunset…

r/PHP (Top) · Sep 10, 2026 curated by Sönke

PHP · Releases

PHP 8.6.0beta3 ready for testing

The PHP project has tagged PHP 8.6.0beta3 — a pre-release of the upcoming 8.6 branch with 37 changelog entries across 18 components.

php.net Releases · Sep 10, 2026

PHP · Ecosystem

frameworks, tooling & runtime all articles →

PHP · News

PHP 8.6 Overview: Partial Application, Time\Duration and 30 Deprecations Ahead of PHP 9.0

PHP 8.6 arrives 19 November 2026 with partial function application, the Time\Duration class and roughly thirty deprecations that map out PHP 9.0. A new overview covers the features, the migration work…

Medium · Laravel · Sep 9, 2026 curated by Giselle

PHP · Releases

Laravel 12.69.2 sets Cloud exit code default and fixes closure types

Laravel released v12.69.2, a patch on the 12.x branch. It sets a default memoryExceededExitCode for Laravel Cloud and corrects closure return types in withFreshQueryLog() and askWithCompletion(). The …

Laravel Framework Releases · Sep 8, 2026 curated by Sönke

PHP · Security

Critical GiveWP flaw chains unserialize helper into unauthenticated RCE

CVE-2026-82222 affects GiveWP up to 4.16.7.1, a WordPress donation plugin with over 100,000 installs. An unauthenticated attacker can chain a registration bypass, a weak unserialize helper and a TCPDF…

Medium · PHP · Sep 8, 2026 curated by Sönke

KAI · The Editorial

long-form pieces by Kai — opinion, pushback welcome all articles →

The Editorial

Treat TypePHP Like an Extension Toolchain, Not a Faster PHP

The Swoole team open-sourced TypePHP, an AOT compiler that turns a typed subset of PHP into native binaries and claims up to 150x speedups. Kai argues the headline number is the least interesting part: the real prize is that writing a native PHP extension no longer requires C. But subset dialects carry old ghosts, and …

An editorial by Kai · Sep 11, 2026

AI · The Model Desk

models, agents & local inference all articles →

AI · Security

Researchers Tie OpenAI Agent Swarm to Massive RubyGems Attack in May

Security researchers say an OpenAI agent swarm uploaded over 2,000 malicious packages to RubyGems in May 2026, exploiting RubyDoc.info's build system for remote code execution and probing a since-patc…

Hacker News (AI, ≥100 P.) · Sep 12, 2026 curated by Sönke

AI · Releases

OpenAI launches GPT-6 Astra model for professional work

OpenAI has released GPT-6 Astra, its new flagship model for professional tasks, available in ChatGPT Work, Codex and the API. It leads benchmarks like Terminal-Bench 4.0 at 57.9 percent and costs 10 d…

OpenAI News · Sep 9, 2026 curated by Sönke

AI · Releases

OpenAI opens Agents API beta, exposing the Codex harness

OpenAI has released the Agents API in public beta, giving developers the same agent harness and sandbox infrastructure that powers Codex and ChatGPT for Work. It supports managed or self-hosted enviro…

OpenAI News · Sep 10, 2026 curated by Sönke

DEV · Briefs

beyond the elephpant, kept short all articles →

DEV · Releases

VS Code 1.137 Adds Scheduled Agent Task Automations

Microsoft has released Visual Studio Code 1.137. A new preview feature lets developers run recurring agent tasks on hourly, daily or weekly schedules. An experi…

heise Developer · Sep 10, 2026 curated by Sönke

DEV · Tooling

PlanetScale launches Neki, a sharded Postgres platform

PlanetScale has released Neki, a sharded Postgres platform now in platform preview. Each shard runs real Postgres, while Neki adds a router, sidecars and a cont…

Hacker News (Dev, ≥100 P.) · Sep 10, 2026 curated by Sönke

DEV · Security

BlueMoon exploit kit hits Chrome and Windows across four threat groups

Proofpoint has tracked a shared exploit kit called BlueMoon used by at least four hacking groups, two of them aligned with China. The kit chains two V8 vulnerab…

Ars Technica · Sep 9, 2026 curated by Sönke

Conference All conferences →

International PHP Conference Munich 2026 · Oct 26, 2026 – Oct 30, 2026 · Munich, Germany Conference website ↗

+ · The Back Pages

reads, oddities & one from the vault

JOBS · PHP Jobs

live from the Job.bo index — toggle skills, filter by location or remote

Industrieelektriker / Elektroniker für Betriebstechnik (m/w/d) (Industrieelektriker/in - Betriebstechnik) Interstaff HR-Management GmbH NL Rietberg · Gütersloh
WordPress Senior Developer Wanted Rommel ApS · Hovedstaden
Gebärdensprachpädagoge (m/w/d) (Gebärdensprachdolmetscher/in) Salo Bildung und Beruf GmbH Berlin · Berlin