The Dev Dispatch

PHP · Reads

CPX 2.0: An npx-Style Executor for Composer Packages

CPX, now a first-party Laravel package, runs binaries from any Composer package without installing them into your project or global setup. Version 2.0 prefers local project binaries, replaces built-in shortcuts with user…

Laravel News · Jul 30, 2026 curated by Sönke

PHP · Reads

Inertia DevTools Extension Arrives on the Chrome Web Store

The Inertia DevTools extension is now listed on the Chrome Web Store. It adds an Inertia panel to Chrome DevTools that records every visit, groups related requests, and shows props, headers, routes, and page state. Recor…

Laravel News · Jul 29, 2026 curated by Sönke

PHP · Reads

Queue-SQL Package Splits Large Laravel Updates and Deletes into Parallel Queue Jobs

Queue-SQL, a Laravel package by Kamran Atayev, breaks massive UPDATE and DELETE statements into key-range slices processed as parallel queued jobs via Laravel's native batching. It offers a queue() query builder macro, C…

Laravel News · Jul 28, 2026 curated by Sönke

PHP · Reads

Laravel AI SDK v0.10.0 Introduces Human-in-the-Loop Tool Approval

Announced at Laracon US 2026, the Laravel AI SDK now lets agents pause before executing sensitive tools so a human can approve, reject, or edit the call. The opt-in feature ships in v0.10.0 with approval contracts, decis…

Laravel News · Jul 30, 2026 curated by Sönke

PHP · Reads

Laravel Pint 1.30 Adds Blade Template Formatting via Prettier

Laravel Pint 1.30.0 introduces opt-in formatting of Blade templates through a new --blade flag, powered by Prettier and dedicated Blade and Tailwind plugins. The release also fixes --diff rename handling, redirects --qui…

Laravel News · Jul 29, 2026 curated by Sönke

PHP · Reads

Pest 5 arrives with Test Impact Analysis, AI agent tooling, and eval support

Nuno Maduro announced Pest 5 at Laracon US 2026. The release brings a Test Impact Analysis engine that cut Laravel Cloud's 19,000-test suite from 3 minutes to 5 seconds, plus plugins for AI agent verification, LLM evals,…

Laravel News · Jul 29, 2026 curated by Sönke

DEV · Reads

GitHub Opens Public Preview of Stacked Pull Requests

GitHub has launched stacked pull requests in public preview. The feature splits large changes into an ordered series of small, focused pull requests, making reviews easier. Developers can create and manage dependent PR c…

r/programming (Top) · Jul 30, 2026 curated by Sönke

AI · Reads

JoliCode builds an experimental PHP virtual machine in Rust, accelerated by AI

Joël Wurtz of JoliCode describes building rphp, an experimental PHP virtual machine written in Rust with heavy assistance from LLMs. In about a month the project reached roughly 80% of basic compatibility tests, and its …

Lobsters /t/ai · Jul 29, 2026 curated by Sönke

PHP · Reads

Hands-on Walkthrough of Laravel's New Illuminate\Image API

Laravel News breaks down the Illuminate\Image component added in Laravel 13.20 (PR #59276), showing how to resize, crop, convert formats, apply effects, and store results using the fluent, immutable API — with worked exa…

Laravel News · Jul 23, 2026 curated by Sönke

PHP · Reads

New Open-Source Package Tackles SSRF in Laravel Beyond Simple IP Blocklists

A community link shared on freek.dev points to laravel-ssrf, a new open-source package the author built after finding no solid SSRF-prevention library for Laravel. The approach and test suite are grounded in a USENIX Sec…

freek.dev · Jul 22, 2026 curated by Sönke

PHP · Reads

Laravel 13.21 Adds RouteKey Attribute and Broader Image Format Support

Laravel 13.21, released July 21, 2026 alongside patch 13.21.1, adds a #[RouteKey] attribute for declarative route model binding, a base64 validation rule, and a #[RequestAttribute] contextual attribute for injecting requ…

Laravel News · Jul 22, 2026 curated by Sönke

AI · Reads

Notion engineers detail two-year overhaul of vector search behind Notion AI Q&A

A Notion engineering blog post traces how the team scaled Notion AI's vector search 10x while cutting costs 90% since the November 2023 Q&A launch, covering sharding fixes, a turbopuffer migration, incremental re-indexin…

Lobsters /t/ai · Jul 22, 2026 curated by Sönke

AI · Reads

Study Finds Popular 30-Second Cache Keepalive Wastes Money on Most LLM Providers

Maxim Khailo measured prompt-cache keepalive pings across Anthropic, OpenAI, Gemini and DeepSeek. The common 30-second ping convention costs 8x more than needed; a ~4-minute interval is optimal. At a 10-minute idle gap, …

Lobsters /t/ai · Jul 21, 2026 curated by Sönke

DEV · Reads

The Case Against Storing Secrets in Environment Variables

A developer explains why they load secrets through application code instead of environment variables, citing a unified config format, an AWS ECS incident where env vars leaked in the console, disk-encryption safeguards, …

r/programming (Top) · Jul 21, 2026 curated by Sönke

PHP · Reads

PHP Foundation Debuts Quarterly Core Team Report, Covers Q2 2026

The PHP Foundation launched a new quarterly report format detailing its 13 core contractors' work: engine bug fixes, new streaming/TLS APIs, Windows toolchain upgrades ahead of PHP 8.6, an accepted URI RFC, a fresh Ecosy…

The PHP Foundation · Jul 21, 2026 curated by Sönke

PHP · Reads

Laravel Time Machine Profiles Request Lifecycle Without a Database

Laravel Time Machine, a package by Jaydeep Gadhiya, tracks every phase of a Laravel request—bootstrap, middleware, routing, controller, response, termination—with millisecond timing and SQL query capture. It stores JSON …

Laravel News · Jul 21, 2026 curated by Sönke

PHP · Reads

A Practical Guide to PHP Attributes — And Their Limits

Wendell Adriel published a detailed article covering PHP attributes: how they work as metadata, how to read them with Reflection, common design patterns, Laravel usage examples, performance considerations, and testing st…

freek.dev · Jul 21, 2026 curated by Sönke

DEV · Reads

SQLite's Confusing Defaults Spark Debate Over Rust-Style 'Editions'

A Reddit discussion around a blog post proposes that SQLite adopt Rust-style 'editions' — versioned bundles of safer defaults for foreign keys, journal_mode and busy_timeout. Many developers say they've been burned by SQ…

r/programming (Top) · Jul 15, 2026 curated by Sönke

PHP · Reads

Vocalizer Brings On-Device Text-to-Speech to PHP

A native PHP extension called Vocalizer runs text-to-speech locally without cloud APIs or runtime dependencies. It supports eight model families, voice cloning, async synthesis, and crash isolation. The article explains …

Laravel News · Jul 17, 2026 curated by Georg

DEV · Reads

Reddit Reacts to Unpatched Cursor IDE 0-Day That Runs Any Renamed Executable as Git

A Reddit thread reacts to a disclosure from security firm Mindgard showing Cursor's Windows client executes any file named git.exe found in a repository's root folder, even in restricted workspace mode. Demonstrated by r…

r/programming (Top) · Jul 15, 2026 curated by Sönke

DEV · Reads

Engineering Deep Dive: Scaling a Notification System to Millions of Fanouts

This piece walks through the architectural challenges of rebuilding a notification platform to reliably fan out millions of messages without timing out. It covers personalization, priority handling, consent checks, traff…

r/programming (Top) · Jul 14, 2026 curated by Sönke

DEV · Reads

Building encrypted secret sharing in the browser with the Web Crypto API

The article explains how to implement end-to-end encrypted secret sharing in the browser using the Web Crypto API. It also warns against common salt mistakes—stressing that salts should be unique, not secret—and argues t…

r/programming (Top) · Jul 15, 2026 curated by Sönke

PHP · Reads

Building PHP Extensions in Go: A Practical Framework Integration Guide

Freek Van der Herten explores a conference session on writing PHP extensions using Go and FrankenPHP, then integrating them into Laravel and Symfony. The talk uses an in-memory LRU cache as a worked example to demonstrat…

freek.dev · Jul 17, 2026 curated by Heiko

PHP · Reads

PHP 8.6 array_map gets a faster path for first-class callables

A Tideways video featured on Freek Van der Herten’s blog shows that PHP 8.6 will make array_map faster when the callback is passed as a first-class callable. The short post is a useful pointer for developers tracking PHP…

freek.dev · Jul 15, 2026 curated by Charlie

PHP · Reads

Tutorial: build a Laravel Scout search endpoint with the HTTP QUERY method

A new Laravel tutorial walks through building a search endpoint with the HTTP QUERY method, using Laravel Scout's database driver and the Route::match(['QUERY']) workaround until Laravel 14 ships a dedicated Route::query…

Laravel News · Jul 16, 2026 curated by Giselle

PHP · Reads

Laravel Legacy Bridge: Share Authenticated Sessions During a Gradual Migration

A new package by Chris Keller lets teams migrate to Laravel one route at a time without forcing users to log in again at the boundary. It reads the legacy session cookie, decodes the payload from the legacy database, and…

Laravel News · Jul 15, 2026 curated by Georg

PHP · Reads

Laravel 13.20 Adds Native Image Processing, Middleware Attribute, and Redis Session Prefix

Laravel 13.20.0 ships a first-party Illuminate\Image component for transforming images from uploads, URLs, storage disks, or bytes, backed by optional Intervention Image v4 drivers. The release also adds a #[WithoutMiddl…

Laravel News · Jul 15, 2026 curated by Charlie

DEV · Reads

Cloudflare Identifies Race Condition in hyper's HTTP/1 Implementation

Cloudflare discovered a race condition vulnerability in the hyper Rust HTTP library's HTTP/1 handling. The flaw affects concurrent request processing and warrants attention from teams using hyper in production systems. D…

r/programming (Top) · Jul 13, 2026 curated by Heiko

DEV · Reads

GhostLock: A 15-Year-Old Stack Use-After-Free Vulnerability in Linux

GhostLock is a use-after-free (UAF) vulnerability affecting the kernel's I/O handling stack that persisted across all major Linux distributions for approximately 15 years. The flaw, detailed in security research, represe…

r/programming (Top) · Jul 13, 2026 curated by Heiko

AI · Reads

Integrating AI Agents into .NET Development Workflows

This guide explores how generative AI agents can accelerate .NET development by automating boilerplate, testing, and documentation. It emphasizes a human-in-the-loop approach, treating AI as a productivity booster rather…

freeCodeCamp (AI) · Jul 13, 2026 curated by Georg