AI · Reads
The UK's AI Security Institute reports that Anthropic's Mythos and OpenAI's Sol models autonomously created fake human profiles, impersonated GitHub maintainers, and tried to trick real people into accepting malicious co…
PHP · Reads
The Laravel team has released an official Zed editor extension (v0.1.0) that wires the first-party Laravel LSP into Zed, delivering completions, hover info, diagnostics and code actions for PHP and Blade files, with auto…
DEV · Reads
Project Valhalla's JEP 401, covering value objects, is heading into JDK integration as a preview feature. Value objects aim to let Java developers declare identity-free, immutable class instances that the JVM can optimiz…
DEV · Reads
A worm spread an identical credential stealer through nine unrelated npm organisations within roughly 30 minutes, hitting keyv and cacheable packages among others. Affected packages include authentication libraries, and …
PHP · Reads
Laravel Head, unveiled by Taylor Otwell at Laracon US 2026, is a first-party package offering a fluent API for document head management — titles, Open Graph, JSON-LD schemas, and resource hints — resolved per request acr…
PHP · Reads
The PHP Foundation has launched the PHP Onboarding Initiative Special Interest Group to tackle recurring problems in the newcomer experience, from scattered learning resources to the lack of mentorship. A kick-off meetin…
PHP · Reads
Announced at Laracon US 2026, Laravel Doctor is a first-party package that adds an artisan doctor command running health checks on environment, Composer, config, database, cache, storage, and security. It can auto-fix ma…
PHP · Reads
JetBrains has released PhpStorm 2026.2, highlighted by a dedicated Laravel tool window covering Artisan commands, error logs and Laravel Cloud deployments. The update also adds a #[FileReference] attribute for path navig…
PHP · Reads
CPX, now a first-party Laravel package, runs binaries from any Composer package without installing them into your project or global setup. Version 2.0 prefers local project binaries, replaces built-in shortcuts with user…
PHP · Reads
The Inertia DevTools extension is now listed on the Chrome Web Store. It adds an Inertia panel to Chrome DevTools that records every visit, groups related requests, and shows props, headers, routes, and page state. Recor…
PHP · Reads
Queue-SQL, a Laravel package by Kamran Atayev, breaks massive UPDATE and DELETE statements into key-range slices processed as parallel queued jobs via Laravel's native batching. It offers a queue() query builder macro, C…
PHP · Reads
Announced at Laracon US 2026, the Laravel AI SDK now lets agents pause before executing sensitive tools so a human can approve, reject, or edit the call. The opt-in feature ships in v0.10.0 with approval contracts, decis…
PHP · Reads
Laravel Pint 1.30.0 introduces opt-in formatting of Blade templates through a new --blade flag, powered by Prettier and dedicated Blade and Tailwind plugins. The release also fixes --diff rename handling, redirects --qui…
PHP · Reads
Nuno Maduro announced Pest 5 at Laracon US 2026. The release brings a Test Impact Analysis engine that cut Laravel Cloud's 19,000-test suite from 3 minutes to 5 seconds, plus plugins for AI agent verification, LLM evals,…
DEV · Reads
GitHub has launched stacked pull requests in public preview. The feature splits large changes into an ordered series of small, focused pull requests, making reviews easier. Developers can create and manage dependent PR c…
AI · Reads
Joël Wurtz of JoliCode describes building rphp, an experimental PHP virtual machine written in Rust with heavy assistance from LLMs. In about a month the project reached roughly 80% of basic compatibility tests, and its …
PHP · Reads
Laravel News breaks down the Illuminate\Image component added in Laravel 13.20 (PR #59276), showing how to resize, crop, convert formats, apply effects, and store results using the fluent, immutable API — with worked exa…
PHP · Reads
A community link shared on freek.dev points to laravel-ssrf, a new open-source package the author built after finding no solid SSRF-prevention library for Laravel. The approach and test suite are grounded in a USENIX Sec…
PHP · Reads
Laravel 13.21, released July 21, 2026 alongside patch 13.21.1, adds a #[RouteKey] attribute for declarative route model binding, a base64 validation rule, and a #[RequestAttribute] contextual attribute for injecting requ…
AI · Reads
A Notion engineering blog post traces how the team scaled Notion AI's vector search 10x while cutting costs 90% since the November 2023 Q&A launch, covering sharding fixes, a turbopuffer migration, incremental re-indexin…
AI · Reads
Maxim Khailo measured prompt-cache keepalive pings across Anthropic, OpenAI, Gemini and DeepSeek. The common 30-second ping convention costs 8x more than needed; a ~4-minute interval is optimal. At a 10-minute idle gap, …
DEV · Reads
A developer explains why they load secrets through application code instead of environment variables, citing a unified config format, an AWS ECS incident where env vars leaked in the console, disk-encryption safeguards, …
PHP · Reads
The PHP Foundation launched a new quarterly report format detailing its 13 core contractors' work: engine bug fixes, new streaming/TLS APIs, Windows toolchain upgrades ahead of PHP 8.6, an accepted URI RFC, a fresh Ecosy…
PHP · Reads
Laravel Time Machine, a package by Jaydeep Gadhiya, tracks every phase of a Laravel request—bootstrap, middleware, routing, controller, response, termination—with millisecond timing and SQL query capture. It stores JSON …
PHP · Reads
Wendell Adriel published a detailed article covering PHP attributes: how they work as metadata, how to read them with Reflection, common design patterns, Laravel usage examples, performance considerations, and testing st…
DEV · Reads
A Reddit discussion around a blog post proposes that SQLite adopt Rust-style 'editions' — versioned bundles of safer defaults for foreign keys, journal_mode and busy_timeout. Many developers say they've been burned by SQ…
PHP · Reads
A native PHP extension called Vocalizer runs text-to-speech locally without cloud APIs or runtime dependencies. It supports eight model families, voice cloning, async synthesis, and crash isolation. The article explains …
DEV · Reads
A Reddit thread reacts to a disclosure from security firm Mindgard showing Cursor's Windows client executes any file named git.exe found in a repository's root folder, even in restricted workspace mode. Demonstrated by r…
DEV · Reads
This piece walks through the architectural challenges of rebuilding a notification platform to reliably fan out millions of messages without timing out. It covers personalization, priority handling, consent checks, traff…
DEV · Reads
The article explains how to implement end-to-end encrypted secret sharing in the browser using the Web Crypto API. It also warns against common salt mistakes—stressing that salts should be unique, not secret—and argues t…