Ecosystem — The Daily Commit
Releases
SYMFONY RELEASES, September 29, 2026 — Symfony released version 6.4.47 on 29 September. The update fixes escaping in generated PHP code and tightens Redis namespace cleanup. Serializer cache keys and YAML parsing also receive fixes, alongside HTTP client and Messenger patches. ErrorHandler now reads the fatal-error backtrace supplied by PHP 8.5.
RFC Watch
PHP INTERNALS ([RFC]/[VOTE]), September 29, 2026 — Sjoerd Langkemper has proposed the PHP RFC bcrypt_max_password_length. It would make password_hash() throw ValueError when bcrypt receives input longer than 72 bytes. PHP currently truncates longer input silently, hashing only the first 72 …
The Editorial
September 28, 2026 — laravel/mcp 1.0 drops server-side sessions, and for a language built on share-nothing requests that part of the upgrade is mostly a grep. The work that deserves real thinking is the one nobody forces on you: deciding which tools an agent se…
Releases
LARAVEL FRAMEWORK RELEASES, September 29, 2026 — Laravel released v11.57.0 of its framework on GitHub. taylorotwell created the tag on 29 September at 15:33. The release page lists no changelog entries. The update confirms the version tag but leaves the code changes undocumented.
Releases
MEDIUM · LARAVEL — A new Laravel-focused walkthrough tests Laravel AI SDK v1 with real OpenAI API calls. It examines middleware applied per step and approvals for tool execution. The guide also covers conversations and streaming. It adds practical verificatio…
RFC Watch
PHP INTERNALS ([RFC]/[VOTE]) — Pratik Bhujel has proposed Io\Terminal for PHP 8.7. The API would add native terminal sessions, size detection, safe raw mode, normalized key input, and hidden input to ext/standard. A reduced implementation is under review in php-src pull …
The Lead · The Editorial
PHP 8.5 ships Uri\Rfc3986\Uri and Uri\WhatWg\Url, and the obvious complaint is that one clean class would have been simpler.
September 29, 2026 — Kai argues the split is the real fix: most URL bugs come from two components reading the same string differently, and now the language makes you choose which reading you trust. Here is why, and where it will hurt.
The Editorial
Partial application will get the applause, but I think the substance of PHP 8.6 sits elsewhere: Time\Duration, clamp(), SortDirection, JSON errors with coordinates and a native polling layer. Core is …
The Editorial
Laravel AI SDK hit v1.0.0, and the feature I care about is not chat streaming. It is classification on the tiny Jev model: cheap, fast answers to the yes/no questions that make up most real AI work in…
Releases: Symfony UX adds experimental server-side pagination B2
Releases: Laravel 14 targets early 2027 with PHP 8.4 as its baseline B2
Releases: Laravel AI SDK 1.0 puts data consent outside tool approvals B2
Releases: PHP maintenance updates reach 8.4, 8.3 and 8.2 B2
The Editorial: A WordPress Bug Needed Accomplices, and Your Stack Volunteered B2
Reads: JetBrains Air brings AI agents to PhpStorm B2
Security: CVE-2026-87902 exploited after WordPress 7.1.2 release B2
Releases: Laravel AI SDK 1.0 pairs Jev with Laravel 13.33 B2
RFC Watch: PHP 8.6 reaches feature freeze amid internals changes B3
Security: CVE-2026-91766 links PHP redirects to credential exposure B3
Releases: Laravel MCP 1.0 enforces headers and removes session state B3
News: PHP 8.6 preview maps new syntax, APIs and migration work B3
Releases: PHP 8.4.26 released with security fixes B3
Releases: PHP 8.2.34 released with security fixes B3
Releases: PHP 8.3.35 released with security fixes B3
Releases: PHP 8.5.11 released with security fixes B3
Releases: PHP 8.6.0RC2 ready for testing B4
RFC Watch: PHP internals Time API proposal discussed on r/PHP B4
Reads: Laravel AI SDK 1.0 expands agent controls and integrations B4
Reads: Laravel 13.33.0 brings deeper cache, model and queue changes B4
Security: WordPress 7.1.2 closes a conditional RCE path B4
"All the Code That's Fit to Ship" · The Daily Commit · Screen edition · Imprint · Privacy Policy