The Php Times — Ecosystem

The Editorial

Symfony Dropping XML Config Is a Tooling Decision, and Tooling Should Win

An editorial by Kai

August 20, 2026 — Symfony 8.0 removed the XML loader for services and routes, deprecated the fluent config builders, and bet on YAML plus a typed array format. Kai argues the cull is right: config formats should be judged by what machines can verify, not by team taste. But bundle authors are paying the bill, and that deserves honesty.

Releases

Laravel 11.56.0 ships as tagged release

curated by Sönke

LARAVEL FRAMEWORK RELEASES, August 20, 2026 — Taylor Otwell tagged Laravel Framework v11.56.0 on August 20 as commit 3dc2399. The release listing on GitHub carries no changelog notes beyond the version marker, so teams on the 11.x branch should review the compare view for the exact com…

Releases

Symfony 8 Drops XML Configuration, YAML Stays the Default

curated by Sönke

MEDIUM · PHP, August 19, 2026 — Symfony 8.0, released November 27, 2025, removes the XML configuration loader for services and routes entirely. YAML remains supported and gains JSON schema tooling, while a new array-based PHP format replaces the deprecated fluent config b…

Reads

Laravel Tackle Puts an AI Coding Agent Inside Your Artisan Console

LARAVEL NEWS, August 20, 2026 — Laravel Tackle is an open-source package that embeds an AI coding agent directly into a Laravel application as Artisan commands. It reads routes, queries databases, reviews pull requests, and can self-heal failed queue jobs, with guardrails enforced in PHP code rather than prompt instructions.

curated by Sönke · The Php Times

→ continued: summary & source

Reads

PHP Foundation Publishes Guide for Maintainers on Handling Security Reports

curated by Sönke

THE PHP FOUNDATION — The PHP Foundation's Ecosystem Security Team has published a step-by-step guide by Sebastian Bergmann for PHP maintainers who receive a vulnerability report. It covers private triage, safe proof-of-concept handling, GitHub Security Advisori…

Reads

Laravel 13.26 Ships Read-Through Disks, Debounced Listeners and Queue::forward()

curated by Sönke

LARAVEL NEWS — Laravel v13.26.0, released on August 18, 2026, adds a read-through filesystem driver that promotes files from a fallback disk on first read, debouncing for queued event listeners via #[DebounceFor], and a Queue::forward() method that rerout…

The Lead · RFC Watch

Pushback on RFC to Deprecate Fuzzy Type Casts Ahead of PHP 8.6

On the PHP internals list, Robert Chapin objects to the RFC proposing deprecation of fuzzy type casts, warning of a backward compatibility break comparable to the PHP 8.0 equality operator change.

curated by Sönke

PHP INTERNALS ([RFC]/[VOTE]), August 20, 2026 — He asks that the stalled proposal be retargeted away from PHP 8.6.

→ continued: summary & source

The Editorial

queue:pause --all Matters More Than Laravel's Shiny New Terminal Tabs

An editorial by Kai

Laravel 13.25's tabbed dev UI will collect the screenshots, but the release's real gift is queue:pause --all: a precise fix for the deploy window where fresh code meets stale workers. I argue why that…

Releases

Laravel 12.67.0 ships with fixes for validation bypass and Postgres JSON escaping

curated by Sönke

LARAVEL FRAMEWORK RELEASES — Laravel 12.67.0 tightens temporary upload URL handling, closes a loose-comparison bypass in validation rules, and escapes single quotes in Postgres JSON paths. It also adds retries for timed-out cloud…

◆ Inside The Php Times ◆