The Dev Dispatch

PHP · Reads

AI Review for Laravel Upgrades

Shift now integrates AI-powered code review into its Laravel upgrade workflow. The feature combines Shift's detailed migration comments with AI context for a second-pass analysis, improving upgrade accuracy and reducing …

Laravel News · Jul 8, 2026 curated by Heiko

PHP · Reads

A tour of my dotfiles

A walkthrough of a developer's dotfile repository—shell aliases, functions, and CLI tools that enable rapid machine setup. Covers modern replacements for Unix utilities (eza, bat, ripgrep, fd, zoxide, delta) with transpa…

freek.dev · Jul 10, 2026 curated by Heiko

PHP · RFC Watch

[RFC] Pipe Assignment Operator

The RFC proposes a compound assignment form of the pipe operator: $x |>= callable becomes shorthand for $x = $x |> callable. Chaining is supported. An implementation including tests has been submitted as a pull request a…

PHP Internals ([RFC]/[VOTE]) · Jul 10, 2026 curated by Georg

PHP · Reads

Rewriting Bun in Rust

Jarred Sumner explains why the Bun team is moving parts of the runtime from Zig to Rust after repeated memory-safety problems in a codebase that combines garbage collection with manual memory management. The piece also d…

freek.dev · Jul 10, 2026 curated by Charlie

PHP · RFC Watch

[RFC] Readonly Property Defaults

Proposal to allow default values on readonly class properties, enabling strict contracts with constant-like behaviour that cannot change at runtime. The RFC introduces a minimal change to permit initialization of readonl…

PHP Internals ([RFC]/[VOTE]) · Jul 9, 2026 curated by Heiko

PHP · Archive

Reference Guide: What does this symbol mean in PHP? (PHP Syntax)

Canonical Stack Overflow thread cataloging PHP operators and symbols: `$`, `->`, `=>`, `::`, `&`, `*`, `@`, and more. Essential reference for beginners decoding unfamiliar syntax and for experienced developers brushing u…

Stack Overflow Archiv (php ≥500) · Jul 10, 2026 curated by Heiko

PHP · Reads

Ship AI with Laravel: I Tricked My Own AI Into Leaking Everything

This article shows a real prompt-injection attack that extracts a Laravel AI support agent's system prompt and customer data. It then presents four practical defenses: hardened prompts, a local Ollama guard, tool-level a…

Laravel News · Jul 8, 2026 curated by Georg

PHP · RFC Watch

RFC: Deprecations for PHP 8.6

An RFC proposes multiple deprecations targeting PHP 8.6. Discussion on the internals list focuses on the absence of impact analysis for existing code in many proposals. Contributors debate the need for systematic assessm…

PHP Internals ([RFC]/[VOTE]) · Jul 7, 2026 curated by Georg

PHP · Security

FrankenPHP 1.12.4 – Security & Stability Hardening

FrankenPHP 1.12.4 closes HTTP header spoofing via underscore collision, bundles Caddy 2.11.4 and Mercure 0.24.2 security patches, and fixes worker-mode crashes and data races. The CGI dash-to-underscore mapping allowed a…

FrankenPHP Releases · Jul 10, 2026 curated by Heiko

PHP · Releases

Composer 2.10.2

Composer 2.10.2 delivers multiple security fixes: package name validation, protection against path traversal in bin paths, sanitization of credentials in verbose output, stricter redirect handling, and prevention of phar…

Composer Releases · Jul 8, 2026 curated by Georg