Partial application will get the applause, but I think the substance of PHP 8.6 sits elsewhere: Time\Duration, clamp(), SortDirection, JSON errors with coordinates and a native polling layer. Core is starting to ship sha…
Laravel AI SDK hit v1.0.0, and the feature I care about is not chat streaming. It is classification on the tiny Jev model: cheap, fast answers to the yes/no questions that make up most real AI work in a web app. Add the …
Symfony UX 3.5 introduces symfony/ux-pagination, an experimental component for paginating arrays, Doctrine queries and other data sources. It relies solely on server-side PHP and Twig, without JavaScript, Stimulus or Tur…
Laravel’s next major version is planned for Q1 2027, although the project has not set a release date. Development already includes API changes such as routing support for the HTTP QUERY method. Laravel 14 will require PH…
An analysis of Laravel AI SDK 1.0 draws a boundary between action approval and data consent. The new Approvable contract pauses tool calls for approval, rejection or argument edits, including queued workflows. It cannot …
Following the previously reported PHP 8.5.11 release, the PHP project has published PHP 8.4.26, PHP 8.3.35 and PHP 8.2.34. The announcement excerpt gives no component list or change details for these three versions. Deve…
WordPress 7.1.2 patches CVE-2026-87902, a critical template-inclusion flaw around get_page_template(). The exploit only fires when theme layout, pearcmd.php and register_argc_argv line up, and that is exactly the point: …
JetBrains has introduced Air, a product family for running and managing AI coding agents. Its free public-preview IDE plugin brings Claude Agent, Codex, Junie, Copilot, and OpenCode to PhpStorm and other JetBrains IDEs. …
Patchstack saw probing of CVE-2026-87902 within hours of WordPress 7.1.2, with exploitation attempts escalating the next day. The critical, unauthenticated path-traversal flaw can load local PHP files and reach code exec…
Laravel AI SDK 1.0 leaves beta with TypeSafe's Jev model for fast, low-cost classification, streaming through Vercel Chat and AG-UI, and human approval for risky tool calls. Laravel 13.33 adds tagged memoized caching, th…
PHP 8.6 has entered feature freeze, with the first release candidate due on September 24, while master targets 8.7. This week’s internals discussions also settled exception propagation for preg_replace_callback and intro…
An r/PHP post points to CVE-2026-91766 and associates it with a credential leak during HTTP redirects in PHP. The headline also notes that curl addressed the same redirect-related issue in 2018. The source provides no af…
Laravel MCP 1.0 can reject unchanged 0.9 clients with HTTP 400 and JSON-RPC -32020 when required protocol headers do not match. The migration removes session APIs, moves context into request data, and makes PKCE mandator…
PHP 8.6 is scheduled for November 19, 2026. The preview covers partial function application, readonly defaults, constant override checks, Time\Duration, clamp(), SortDirection, richer JSON diagnostics, and a new polling …
TimWolla posted a link to the PHP internals proposal for Time\Instant and Time\Clock on r/PHP. A commenter compared the design to C# NodaTime and clock interfaces in date-time and cryptography libraries. No vote, decisio…
Laravel AI SDK 1.0 gives Laravel applications a unified interface for AI providers and adds typed classification, Vercel Chat and AG-UI streaming, and approval workflows for tool calls. The release also changes conversat…
No new Laravel release is reported since our 22 September item. Laravel News' 23 September review adds implementation detail on Laravel Framework 13.33.0, covering tagged memoized cache reads, the #[Refreshes] model attr…
WordPress 7.1.2, released on September 22, 2026, fixes CVE-2026–87902, a CVSS 4.0 vulnerability rated 9.2 Critical. An unauthenticated attacker may reach local PHP files through page-template resolution when specific the…
PHP 8.5 adds the URI extension with immutable, standards-based objects for URL and URI handling. Uri\Rfc3986\Uri targets general RFC 3986 identifiers, while Uri\WhatWg\Url follows browser-oriented WHATWG behavior. The AP…
Fast Excel 5 gives Laravel applications low-memory imports, chunk controls, sheet and column filtering, and formula escaping for user data. Laravel News maps these changes to releases 5.12, 5.16, and 5.17, and documents …
Tim Düsterhus and Derick have proposed Time\Instant and Time\Clock as the next additions to PHP’s new date and time API after Time\Duration in PHP 8.6. The RFC is open well before the next feature freeze. Andreas Heigl h…
Laravel News presents Health for Laravel, a package by Sylvester Damgaard for Kubernetes health probes and Prometheus monitoring. Version 2.0.0 targets PHP 8.3 and Laravel 11, 12, or 13. The guide explains probe-specific…
Laravel Framework 13.33.0 landed on 22 September for the 13.x branch. The release changes worker signal and timeout handling, expands cache and collection behavior, adds Valkey and PostgreSQL options, and extends Laravel…
CVE-2026-45756 describes a denial-of-service vulnerability in Symfony JsonPath filters that stems from attacker-supplied regex patterns. Malicious input can trigger exponential backtracking in regex matching, starving CP…
Difflock 1.0.0 is a Laravel package from Rati Rukhadze that inspects migration source without executing it and checks it against a live database. It flags destructive changes, schema drift and configuration problems, the…
