PHP teams argue over every line in composer.lock, then let their editors update a dozen extensions in the background without anyone looking. This year showed that a trusted extension release can be enough to compromise a…
PyTorch 2.14 ships faster Mac kernels, a new GEMM backend and fault-tolerant distributed training. The change I keep thinking about is smaller: torch.compile on Python 3.15 now refuses to run instead of quietly running s…
Route::query() will get the attention, but the important change in Laravel 13.35 is quieter. Schedule::alwaysOnOneServer() and global strict form requests let one line of config replace a rule you had to remember on ever…
PHP 8.6 keeps choosing a thrown error over a polite guess, and I think that is the best thing in the release. There is one exception: partial function application captures its arguments when it is created, and nothing wa…
Almost a year after PHP 8.5 shipped, everyone still talks about |>. I think the feature that will save you the most grief is the new URI extension, which finally parses URLs to RFC 3986 and WHATWG. Pipes make code pretti…
Mistral Large 4 scores 38 on the Artificial Analysis index. That puts it level with a model that costs a sixteenth as much per task, and Mistral's own platform hosts a stronger rival. Kai argues this is the best reason y…
Laravel 13.35 ships Route::query(), giving the brand new HTTP QUERY method a first-class seat in the router. I think new filter-heavy endpoints should use it right away, not someday. Yes, your proxies, CDN and CORS setup…
Everyone is quoting the VS Code build dropping from 77.8 seconds to 7.5. I care more about what shipped without it: a stable programmatic API. For PHP, whose static analysis lives on its plugin ecosystems, that gap matte…
Symfony 8.2 hands configuration back to the components: 29 new bundles, each with its own config root, and the old framework: keys keep working through aliases. That last part is generous, and it's exactly why I think yo…
Symfony 8.2 brings plenty of new features, but the one I care most about is a single transport option: the transactional outbox. Once preventing dual writes takes one line of config, sending to the broker directly from i…
Mago, the Rust toolchain for PHP, formats, lints, analyzes and guards architecture from one binary, and its speed is real. Kai argues the smart move is to let it take over the fast, cheap checks right now, keep your plug…
React 19.3 lets unrelated transitions render on their own instead of being tied together. PHP developers will recognise the idea, because it is how FPM workers have kept one slow request from stalling the rest for years.…
Partial Function Application lands in PHP 8.6 and finally makes the pipe operator pleasant to use. It is also easy to misread. A partial evaluates its fixed arguments once, when you create it, and it drops most attribute…
Angular v22 made Signal Forms and the resource-based async signals stable. For PHP teams that run an Angular frontend on top of Laravel or Symfony, that is a cue to stop splitting validation rules and server-state logic …
Laravel AI SDK 1.0 lets an agent pause a tool call until a human decides what happens. That's useful, and it's also a dialog box. Anyone who has watched people click through dialog boxes knows how that ends. Kai argues t…
PHP 8.5 ships Uri\Rfc3986\Uri and Uri\WhatWg\Url, and the obvious complaint is that one clean class would have been simpler. Kai argues the split is the real fix: most URL bugs come from two components reading the same s…
laravel/mcp 1.0 drops server-side sessions, and for a language built on share-nothing requests that part of the upgrade is mostly a grep. The work that deserves real thinking is the one nobody forces on you: deciding whi…
Partial application will get the applause, but I think the substance of PHP 8.6 sits elsewhere: Time\Duration, clamp(), SortDirection, JSON errors with coordinates and a native polling layer. Core is starting to ship sha…
Laravel AI SDK hit v1.0.0, and the feature I care about is not chat streaming. It is classification on the tiny Jev model: cheap, fast answers to the yes/no questions that make up most real AI work in a web app. Add the …
WordPress 7.1.2 patches CVE-2026-87902, a critical template-inclusion flaw around get_page_template(). The exploit only fires when theme layout, pearcmd.php and register_argc_argv line up, and that is exactly the point: …
Python 3.15 arrives October 1 with PEP 810's lazy imports, and to a PHP developer it looks like Composer autoloading minus the ecosystem discipline that made autoloading safe. The opt-in keyword is solid and worth using …
Laravel 13 quietly ships two opposite answers to one question: where does configuration belong? You can pin queue settings to a job class with a PHP attribute, or route jobs centrally with Queue::route(). Kai argues the …
NVIDIA is reportedly paying $12.9 billion for Hugging Face, and most of us have a Dockerfile that curls hf.co at build time without a second thought. We already learned this lesson with Composer: open code is not the sam…
The Swoole team open-sourced TypePHP, an AOT compiler that turns a typed subset of PHP into native binaries and claims up to 150x speedups. Kai argues the headline number is the least interesting part: the real prize is …
PHP 8.6 arrives on 19 November 2026 as a light release: partial function application, a Duration class, and about thirty deprecations. My argument: the version bump is trivial, so spend the saved time making deprecation …
GiveWP's first attempt at fixing CVE-2026-82222 detected the malicious object and then returned the original payload anyway. That single line is the whole lesson of this CVSS 10.0 bug: allowed_classes => false does not d…
Anthropic bought Bun because Claude Code ships on it, and the deal will probably make Bun better. Kai argues the real lesson sits elsewhere: single-vendor runtime ownership is becoming normal, and the PHP world's messy, …
CVE-2026-85046, a V8 type confusion bug exploited in the wild, is being filed under 'browser news'. Wrong drawer. If your PHP app renders PDFs with Browsershot, runs Dusk or Panther in CI, or scrapes with Puppeteer, you …
Symfony 7.3 gave voters a Vote object and addReason(); 7.4 and 8.0 add extraData plus two Twig functions that expose the whole access decision. The boolean era of authorization is quietly over, and the per-voter logger c…
PHP 8.5's |> is a one-rule feature: left value in, first argument out. The loudest complaint is the parentheses you need around every multi-argument arrow function. I think that friction is the operator's best quality, b…
