€0.00 — free as in speechtonight's forecast: clear skies over production Cache: warm · Deploys: fair, 0% rollbacks expectedset by moonlight, shipped before dawn · deploy freely Page A1

❦The Daily Commit❦ ☾The Nightly Build☽

Dev news, typeset daily — PHP · AI · The Wider Stack

The developer's evening paper — PHP · AI · The Wider Stack

Motto of the dayMotto of the night

“Two parsers beat one worm: PHP's security focus outpaces ecosystem chaos.”

Wednesday, September 30, 2026 Vol. I — No. 683 · Morning editionLate edition EN DE FR ES

PHP · The Lead · Releases

Symfony releases maintenance update 6.4.47

Symfony Releases, September 29, 2026 — Symfony released version 6.4.47 on 29 September. The update fixes escaping in generated PHP code and tightens Redis namespace cleanup. Serializer cache keys and YAML parsing also receive fixes, alongside HTTP client and Messenger patches. ErrorHandler now reads the fatal-error backtrace supplied by PHP 8.5.

Symfony published version 6.4.47 on 29 September. Fabien Potencier signed the release. The verified commit is 9e1e0c5, tagged with GPG key ID B5690EEEBB952194.

The update corrects several DependencyInjection cases. Symfony now tracks reused environment placeholders after an extension removes them and escapes identifiers in generated PHP. Shared circular wither services expose their service ID, and tag movement between decorators is fixed. Redis namespace cleanup now escapes glob characters, and DoctrineBridge extracts UUID and ULID types more accurately, including collections indexed by custom types.

→ continued: summary & source

curated by Sönke

PHP · Releases

Laravel tags framework release v11.57.0

Laravel Framework Releases, September 29, 2026 — Laravel released v11.57.0 of its framework on GitHub. taylorotwell created the tag on 29 September at 15:33. The release page lists no changelog entries. The update confirms the version tag but leaves the code changes undocumented.

curated by Sönke

PHP · RFC Watch

PHP RFC would reject oversized bcrypt passwords

PHP Internals ([RFC]/[VOTE]), September 29, 2026 — Sjoerd Langkemper has proposed the PHP RFC bcrypt_max_password_length. It would make password_hash() throw ValueError when bcrypt receives input longer than 72 bytes. PHP currently truncates longer input silently, hashing only the first 72 bytes. The change targets severe security vulnerabilities, especially in applications that hash data beyond a user’s password.

curated by Sönke

Ad — php-net.pro · in our own cause

Ad · php-net.pro

Reach 145,000+ PHP developers.

Sponsored posts on @php_net — the largest independent PHP account on X. From €399, booked online in minutes: write, preview, schedule, pay.

Book a post →

◇ this ad position rotates with every refresh · plus VAT where applicable

PHP · Releases

A practical OpenAI test drive for Laravel AI SDK v1

Medium · Laravel, September 28, 2026 — A new Laravel-focused walkthrough tests Laravel AI SDK v1 with real OpenAI API calls. It examines middleware applied per step and approvals for tool execution. The guide also covers conversations and streaming. It adds practical verification and implementation guidance to the SDK 1.0 release already covered here.

curated by Sönke

PHP · RFC Watch

PHP 8.7 proposal targets native terminal support

PHP Internals ([RFC]/[VOTE]), September 27, 2026 — Pratik Bhujel has proposed Io\Terminal for PHP 8.7. The API would add native terminal sessions, size detection, safe raw mode, normalized key input, and hidden input to ext/standard. A reduced implementation is under review in php-src pull request 23941. The RFC uses Time\Duration and seeks feedback before voting.

curated by Sönke

PHP · Releases

Symfony UX adds experimental server-side pagination

heise Developer, September 26, 2026 — Symfony UX 3.5 introduces symfony/ux-pagination, an experimental component for paginating arrays, Doctrine queries and other data sources. It relies solely on server-side PHP and Twig, without JavaScript, Stimulus or Turbo. Version 3.5.1 has already followed with two fixes for AssetMapper.

curated by Sönke

The Wider Stack

Dev · Releases

TypeScript ships vscode-typescript 1.0.1

TypeScript has published vscode-typescript 1.0.1 on GitHub. The tag points to commit b6eaace and was created by typescript-automation on 29 Sep at 19:31. GitHub lists two release assets. The supplied release page contains no change notes or compatibility information, so the update’s practical impact…

curated by Sönke

Situations Vacant — PHP

live from the Job.bo index — toggle skills, filter by location or remote

Browse all 932 PHP jobs → · Powered by Job.bo