PHP · Reads
Fuzz, a package by Jon Purvis, adds coverage-guided fuzz testing to Pest 5 via nikic's PHP-Fuzzer. It mutates seed strings, tracks code coverage without Xdebug, and reports crashes as failed tests. A walkthrough shows it…
PHP · Reads
Taylor Otwell has disabled GitHub Issues on most Laravel open-source packages, asking users to describe bugs to a coding agent and submit pull requests instead. The main Laravel repository is unaffected. Symfony is exper…
PHP · Reads
John Koster's Forte package parses Laravel Blade files into a typed syntax tree that developers can query, rewrite, and render back byte-identical. The Laravel News walkthrough covers codemods, audits, and CI checks, plu…
PHP · Reads
Sebastian Bergmann argues that European digital sovereignty already runs on PHP applications like TYPO3, Drupal and Nextcloud, citing Germany's €108 million Government Site Builder and the EU's 770 Drupal sites. His piec…
PHP · Reads
Laravel 13.30 ships chunkBy() for grouping adjacent collection items, forces Storage::path() through the Flysystem path normalizer so traversal attempts now throw PathTraversalDetected, prints the queue worker's stop rea…
PHP · Reads
Brent Roose, PHP developer advocate at JetBrains and creator of the Tempest framework, has joined The PHP Foundation's Board of Directors in the JetBrains Platinum Sponsor seat. He replaces Roman Pronskiy, founding membe…
AI · Reads
Researchers scanning 8,565 llms.txt files across 6,214 domains found 237+ package names and domains referenced in AI-agent instructions that were never registered. They registered several themselves and got installation …
DEV · Reads
An opinion piece argues the Hugging Face security incident reflects a deeper flaw: operating systems and file systems were built to run programs, not protect application data. The author revives the decades-old 'thick-da…
PHP · Reads
Inertia.js v3.7.0 adds a cancelOnUnmount attribute and a cancel method to the <Form> component, letting developers abort in-flight submissions when a form unmounts or on demand. usePoll now reports a reactive polling sta…
DEV · Reads
Zod v4.5 introduces schema compilation promising 3 to 9 times faster validation. The maintainer of zod-compiler responded with benchmarks showing his tool still outperforms Zod's native z.compile() by a median of 1.75x, …
PHP · Reads
All Laravel starter kits now build with Vite+, the unified toolchain released in beta in July 2026. The switch, made via laravel/maestro#60, replaces ESLint and Prettier with a single vp CLI covering linting, formatting,…
DEV · Reads
The htmx project has published version 4.0.0, announced on its four.htmx.org site on August 28, 2026. htmx is a small JavaScript library that lets developers add AJAX requests, WebSockets and other dynamic page behavior …
DEV · Reads
A newly published paper on mold, the massively parallel linker, is drawing discussion on r/programming. Its ablation study finds that speed gains do not come from any single optimization, but from running every linking p…
PHP · Reads
Laravel Boost v2.6.0 merges its overlapping testing skills into one dynamically composed testing-best-practices skill for AI agents. It also enforces read-only transactions at the database level for the DatabaseQuery MCP…
PHP · Reads
Laravel 13.27 ships a per-connection option to keep query bindings out of exception messages, a whereBinary() family for byte-exact comparisons on MySQL and MariaDB, refreshForUpdate() for reloading models under a pessim…
PHP · Reads
The Swoole team has open sourced TypePHP, an ahead-of-time compiler that translates PHP into C++ and then native machine code. The compiler is written in PHP itself and fully self-hosting, and it interoperates with the Z…
PHP · Reads
Laravel AI v0.11.0 introduces ToolSearch, a wrapper that defers tool definitions so providers load them only when needed. The feature maps to hosted tool search on OpenAI and Anthropic, cutting prompt tokens for agents w…
PHP · Reads
Laravel Auditor by Punyapal Shah equips existing AI coding agents with a written audit methodology, 75 stable rules and read-only project collectors, instead of letting them guess at bugs. The package requires PHP 8.3+ a…
PHP · Reads
Laravel AI SDK v0.11.0 assigns every agent run a single invocation ID and fires lifecycle events around each provider round-trip and tool call. It also adds hosted tool search for OpenAI and Anthropic and broadens failov…
DEV · Reads
A supply chain attack on a Rust crate has reignited debate about dependency culture. A widely discussed Reddit post argues that Rust shares the npm mindset of pulling in many small packages, and that languages with large…
PHP · Reads
Laravel Tackle is an open-source package that embeds an AI coding agent directly into a Laravel application as Artisan commands. It reads routes, queries databases, reviews pull requests, and can self-heal failed queue j…
PHP · Reads
The PHP Foundation's Ecosystem Security Team has published a step-by-step guide by Sebastian Bergmann for PHP maintainers who receive a vulnerability report. It covers private triage, safe proof-of-concept handling, GitH…
PHP · Reads
Laravel v13.26.0, released on August 18, 2026, adds a read-through filesystem driver that promotes files from a fallback disk on first read, debouncing for queued event listeners via #[DebounceFor], and a Queue::forward(…
PHP · Reads
Laravel Chores, a package by Amr Lotfy Saleh, wraps one-off data operations in batches that checkpoint progress to the database after every batch. An interrupted run resumes where it stopped. Inspired by Shopify's mainte…
PHP · Reads
The serversideup/php v4.6.0-beta1 images introduce a CADDY_ACME_PROFILE variable that selects Let's Encrypt's shortlived profile, the only profile under which IP-address certificates are issued. A FrankenPHP container re…
PHP · Reads
Lerd is a free, MIT-licensed local development environment for Linux and macOS that positions itself against Laravel Herd. It offers per-project PHP versions, trusted HTTPS on .test domains, a debugging dashboard, worktr…
DEV · Reads
A community piece previews the next major version of DuckDB, the in-process analytical database popular with data engineers. Worth a read for anyone running DuckDB in production or evaluating it, since a major version bu…
AI · Reads
Worth reading for Simon Willison's hands-on account of Alibaba's new Apache-2 licensed Qwen 3.8 27B, run locally on a MacBook Pro and an NVIDIA DGX Spark. He documents strong coding-agent and bounding-box performance, bu…
PHP · Reads
NativePHP v4 introduces SuperNative, a beta mode that compiles Blade components directly into SwiftUI on iOS and Jetpack Compose on Android, skipping web views entirely. Simon Hamp and Shane Rosenthal unveiled it at a 10…
DEV · Reads
Buf has released LSP support for Protocol Buffers, bringing IDE features like completion, navigation and diagnostics to .proto files. The announcement, discussed on r/programming, also drew comments on Buf's pricing: 36 …