Laravel 14 is targeted for Q1 2027 and will raise the minimum PHP version to 8.4. Laravel News maps proposed routing, authorization, queue, cache, query-builder, and pruning changes from the framework’s master branch. Th…
Freek Van der Herten shows how the 1.x branch of Laravel AI SDK uses TypeSafe’s Jev to classify incoming mail with calibrated probabilities. His There There example combines header rules with three Boolean questions for …
Laravel MCP 1.0 is the first stable release for building Model Context Protocol servers with the PHP framework. It supports MCP protocol version 2026-07-28 and adds searchable tool catalogs, cache hints and stateless ser…
PHP internals spent the week on a withdrawn IntlRelativeDateTimeFormatter vote, a weak array_str_contains benchmark, and unresolved policy for callback exceptions in preg_replace_callback. PEAR's recovered bug archive mo…
FrankenPHP 1.12.7 fixes lost output after fastcgi_finish_request() and frankenphp_finish_request() in classic mode. It corrects the frankenphp_total_threads metric, removes an opcache restart hook, downgrades routine cli…
Laravel Scalpel adds filesystem-oriented intrusion checks to Laravel applications. Its Artisan commands inspect suspicious PHP files, obfuscated code, server directives, environment settings, and differences from a trust…
Laravel 13.32.0, released on September 16, 2026, adds Mercure broadcasting over Server-Sent Events, new FilesystemAdapter helpers for copying and moving files between disks, and enum arguments for queue pausing. The rele…
NativePHP has published Super Stack, an MIT-licensed Laravel starter kit that combines a browser application, Filament administration, NativePHP mobile support, Sanctum tokens, and an MCP endpoint. It targets Laravel 13 …
Laravel MCP 1.0 is the first stable release of Laravel's package for building Model Context Protocol servers. It supports MCP 2026-07-28, searchable tool catalogs, cache hints, stateless requests, updated OAuth with PKCE…
Laravel Vet is a beta Composer plugin from the Laravel team that records trusted package files and pauses updates when hashes change. It can send diffs to local agents such as Claude Code or Codex, then report PASS, FAIL…
Laravel Framework 13.32.0 was released on 15 Sep for the 13.x branch. The update adds Mercure broadcasting support, extends filesystem copying and moving, and prepares SessionHandlerInterface for PHP 9. It also fixes col…
PHP 8.6 is in beta and is scheduled for general availability on November 19, 2026. The release adds partial function application, clamp(), Time\Duration, a polling API, structured stream errors, URI builders, parameter d…
PHP 8.6 is in beta and is expected around November 19, 2026. It adds Partial Function Application (PFA), which binds selected arguments when a callable is created and accepts the remaining ones later. The syntax uses ? f…
PHP internals has opened the vote on Weilin Du's IntlRelativeDateTimeFormatter RFC for the intl extension. The ballot closes on 29 September 2026 at 11:14:40 UTC. Tim Düsterhus voted against the proposal, citing question…
Symfony has published maintenance release 6.4.46. The update for the 6.4 branch bundles about 60 merged pull requests, mostly bug fixes across Security, HttpFoundation, Messenger, Finder, Console and other components, pl…
Developer Rati Rukhadze released Vacuum, a Laravel package that reads PostgreSQL's own statistics views to flag bloat, dead tuples, unused indexes and slow queries, then scores database health out of 100. It ships CLI co…
Bref, the open-source toolkit for running PHP on AWS Lambda, has reached version 3.0. Since Bref 2.0, monthly Lambda invocations handled through the project grew from 10 billion to 40 billion. The package has been instal…
Laravel 13 quietly ships two opposite answers to one question: where does configuration belong? You can pin queue settings to a job class with a PHP attribute, or route jobs centrally with Queue::route(). Kai argues the …
Laravel 13 needs only PHP 8.3+ and, per creator Taylor Otwell, no business-logic changes to upgrade. Highlights include native PHP attributes for jobs and Eloquent models, a Cache::touch() method for extending TTLs, vect…
The arbitrary-precision arithmetic library brick/math has reached version 1.0.0, following more than ten years of work, 804 commits, 79 beta releases and over 590 million downloads. It provides BigInteger, BigDecimal and…
vivace 0.4.0 adds a Rust port of composer update, matching Composer 2.10.3's resolver logic including pool builder, CDCL solver and lock writer, so it produces identical composer.lock and vendor/ output on test projects …
The Swoole team open-sourced TypePHP, an AOT compiler that turns a typed subset of PHP into native binaries and claims up to 150x speedups. Kai argues the headline number is the least interesting part: the real prize is …
vivace is a Rust reimplementation of composer install that produces a byte-for-byte identical vendor directory compared to Composer 2.10. It runs 5 to 16 times faster across the benchmarked operations. It requires an exi…
Osama Aldemeery withdrew the PREG_THROW_ON_ERROR vote after 56 hours following a policy objection from Tim Düsterhus. The weekly internals recap also covers Gina Banyard's undefined-behaviour proposal, progress on sunset…
Laravel Telescope 5.24.0, released September 8, 2026, adds two Artisan commands, telescope:list and telescope:show, for inspecting recorded entries from the terminal. Both support filters and JSON output for scripts and …
PHP 8.6 arrives on 19 November 2026 as a light release: partial function application, a Duration class, and about thirty deprecations. My argument: the version bump is trivial, so spend the saved time making deprecation …
PHP 8.6 arrives 19 November 2026 with partial function application, the Time\Duration class and roughly thirty deprecations that map out PHP 9.0. A new overview covers the features, the migration work and why enabling E_…
Laravel v13.31.0 ships a new Queue::totalSize() method and a JobInterrupted event for Interruptible jobs. The release also adds chaperone support for BelongsToMany pivot models, a Vite devServerUrl() method, once asserti…
GiveWP's first attempt at fixing CVE-2026-82222 detected the malicious object and then returned the original payload anyway. That single line is the whole lesson of this CVSS 10.0 bug: allowed_classes => false does not d…
