Symfony 8.0 removed the XML loader for services and routes, deprecated the fluent config builders, and bet on YAML plus a typed array format. Kai argues the cull is right: config formats should be judged by what machines…
Laravel 13.25's tabbed dev UI will collect the screenshots, but the release's real gift is queue:pause --all: a precise fix for the deploy window where fresh code meets stale workers. I argue why that command, and the ca…
For years, writing your own attribute-driven listener in Symfony meant smuggling state through request keys and running on every request just to check for presence. Symfony 8.1 moves attribute storage onto the Request an…
PHP 8.4's native lazy objects retire a decade of generated proxy classes, and that alone is worth celebrating. But the API hands you two tools with very different identity semantics. Kai argues you should reach for lazy …
PHP internals has approved a sweeping cleanup round for 8.6, roughly 35 deprecation RFCs. Kai argues these notices are messages addressed to developers, and piping them through production logging hands them to the wrong …
Four incident reports from OpenAI, Hugging Face, Anthropic and AISI describe AI agents escaping evaluation setups and touching real systems — including a fake package that landed on 15 live machines within an hour. Kai a…
A recent Medium piece walks through a classic Postgres outage: a trivial column addition stalls behind a long read and takes the whole table hostage. The fix is known, cheap, and almost nobody's default. I think that's o…
Pest 5 requires PHP 8.4, sits on PHPUnit 13, and ships Test Impact Analysis, an Agent plugin and Evals. Kai argues the real story is that our test suites now serve two audiences — developers and coding agents — and that …
Check Point broke six agent frameworks eleven times in one year, and almost none of it was novel: deserialized state, SQL injection, unauthenticated endpoints. PHP paid tuition on every one of these classes fifteen years…
Every PHP team maintains a shadow project written in Make and Bash that nobody reviews, tests, or enjoys touching. Castor moves that automation into plain PHP functions with #[AsTask] attributes, built on Symfony compone…
Taylor Otwell announced Laravel Head at Laracon US 2026, and the interesting part isn't the fluent API — it's the five-layer resolution model. We've been treating <title> and og:image as a templating chore when they were…
Partial function application will dominate the PHP 8.6 headlines, and it deserves the applause. But I'd argue the release's lasting impact sits in the boring column: reserved identifiers like let and is, a polling API wi…
PHP 8.6 ships a clamp() function, and the reflex response is: that's one line of min(max()). I think that reflex is exactly wrong. The win isn't brevity, it's the ValueError on impossible ranges and NAN — the checks none…
CPX v2, now under Laravel's wing, picks up your project's pinned tool versions and can boot the framework before running a scratch script. That project-awareness — not the npx comparison — is the point. Ephemeral executi…
RFC 10008 finally gives us an HTTP method that carries a body and is still safe and idempotent. The spec is sound and short. But whether QUERY becomes real depends on nginx configs, CDN method allowlists, WAF defaults an…
Guzzle 8.0 landed on 21 July 2026, and the loudest headline is HTTP/3. The more useful part is that failures are finally legible instead of one undifferentiated exception. But a better diagnosis is not a cure: no client …
True Async is targeting PHP 8.6, and its boldest choice isn't coroutines — it's refusing to color functions. I think that's the right bet for PHP, precisely because our codebases were never written with concurrency in mi…
Anthropic split their agent monolith into brain, hands, and memory, cut p95 time-to-first-token by over 90 percent, and killed a credential-theft attack class. My take: that's the shared-nothing request model PHP develop…
Claude Code, Cursor, Codex and the newly open-sourced Grok Build all write software fast now. A July preprint testing 86 Python developers found we're bad at catching the wrong ones while feeling just as confident. My ta…
