The Php Times — Ecosystem

RFC Watch

PHP RFC advances the next step in its time API

curated by Heiko

PHP INTERNALS ([RFC]/[VOTE]), September 22, 2026 — Tim Düsterhus and Derick have proposed Time\Instant and Time\Clock as the next additions to PHP’s new date and time API after Time\Duration in PHP 8.6. The RFC is open well before the next feature freeze. Andreas Heigl has questioned its leap-second model and the relationship between Time\Clock and Psr\Clock\ClockInterface.

Reads

Laravel package maps health checks to Kubernetes probes

curated by Georg

LARAVEL NEWS, September 21, 2026 — Laravel News presents Health for Laravel, a package by Sylvester Damgaard for Kubernetes health probes and Prometheus monitoring. Version 2.0.0 targets PHP 8.3 and Laravel 11, 12, or 13. The guide explains probe-specific checks, container-a…

Releases

Laravel 13.33.0 tightens workers, expands Cloud options

curated by Heiko

LARAVEL FRAMEWORK RELEASES, September 22, 2026 — Laravel Framework 13.33.0 landed on 22 September for the 13.x branch. The release changes worker signal and timeout handling, expands cache and collection behavior, adds Valkey and PostgreSQL options, and extends Laravel Cloud support. It a…

Reads

Fast Excel 5 Targets Large Laravel Spreadsheet Jobs

LARAVEL NEWS, September 20, 2026 — Fast Excel 5 gives Laravel applications low-memory imports, chunk controls, sheet and column filtering, and formula escaping for user data. Laravel News maps these changes to releases 5.12, 5.16, and 5.17, and documents the PHP 8, Laravel 6, and OpenSpout 4 requirements. The guide helps teams assess large spreadsheet jobs before upgrading.

curated by Giselle · The Php Times

→ continued: summary & source

Security

Symfony JsonPath regex denial-of-service flaw

curated by Heiko

R/PHP (TOP) — CVE-2026-45756 describes a denial-of-service vulnerability in Symfony JsonPath filters that stems from attacker-supplied regex patterns. Malicious input can trigger exponential backtracking in regex matching, starving CPU and halting servic…

Reads

Difflock checks Laravel migrations against live databases

curated by Georg

LARAVEL NEWS — Difflock 1.0.0 is a Laravel package from Rati Rukhadze that inspects migration source without executing it and checks it against a live database. It flags destructive changes, schema drift and configuration problems, then exposes guards, CI…

The Lead · News

PHP 8.5 adds standards-based URI objects

PHP 8.5 adds the URI extension with immutable, standards-based objects for URL and URI handling.

curated by Heiko

MEDIUM · PHP, September 22, 2026 — Uri\Rfc3986\Uri targets general RFC 3986 identifiers, while Uri\WhatWg\Url follows browser-oriented WHATWG behavior. The API validates input, exposes structured components, supports controlled modifications and semantic comparison, and provides a built-in alternative to parse_url().

→ continued: summary & source

Reads

Laravel 14 preview raises the PHP floor to 8.4

curated by Heiko

LARAVEL NEWS — Laravel 14 is targeted for Q1 2027 and will raise the minimum PHP version to 8.4. Laravel News maps proposed routing, authorization, queue, cache, query-builder, and pruning changes from the framework…

Reads

Jev brings calibrated mail decisions to Laravel

curated by Giselle

FREEK.DEV — Freek Van der Herten shows how the 1.x branch of Laravel AI SDK uses TypeSafe’s Jev to classify incoming mail with calibrated probabilities. His There There example combines header rules with three Bo…

◆ Inside The Php Times ◆