Laravel + AI news
Releases, posts, and packages from 15 sources — pulled every 30 minutes, deduplicated, and linked straight back to the publisher.
version
Composer 2.11 adds a cooldown dependency policy that withholds newly published package versions for a configurable period. The release also includes several security fixes and faster dependency resolution. Read more
Schedule session:garbage-collect to delete expired Laravel database and file sessions, and turn off the session lottery that runs cleanup in web requests.
Pollora runs WordPress inside Laravel, with Route::wp() routing on conditional tags, Blade themes, and PHP attributes for post types and hooks.
Laravel 13.39 adds a session:garbage-collect command for scheduled session cleanup, keyless models with #[Table(key: false)], and durations on JobAttempted.
version
[12.x] Cloud exceptions by @timacdonald in #61934 [12.x] Cloud exceptions improvements by @timacdonald in #62186
version
[13.x] Rebuild the phpredis client when a broken pipe surfaces as a warning by @aleedhillon in #62111 [13.x] Resolve view namespace hints like view locations by @fgilio in #62005 [13.x] feat(database): allow disabling pr...
Filament v5.8 adds deferLoading() for sections, tabs, wizards, and repeater items, plus session-persisted table grouping and lifecycle hooks in traits.
New Features feat: support JavaScript custom fields by @danharrin in #20494 feat: support JavaScript custom schema components by @danharrin in #20550 feat: support JavaScript custom widgets by @danharrin in #20548 feat:...
New Features feat: restrict Livewire methods and lock server-managed state by @danharrin in #20812 feat: standardize lazy loading configuration APIs by @danharrin in #20831 Add modal eyebrow above the heading by @leek in...
Below MySQL 8.0.1, or on a server Laravel misreads, workers reserve jobs with a plain FOR UPDATE and can deadlock on the DELETE. One tinker line shows which lock yours use. Read more
Mastering Laravel Testing is a video course from Joel Clermont on feature tests, mocks, policies, and form validation. Presale pricing ends November 20.
Sloppy checks AI-written PHP for swallowed exceptions, query loops, and unfinished code, with coding-agent hooks and reviews focused on new findings.
NativePHP published seven security advisories for its mobile package, plus rebuilt PHP binaries for this week's PHP CVEs. Update to 4.6.1 or 3.3.11 and rebuild.
Volker Dusch of the PHP Foundation explains how the two critical PHP RCE vulnerabilities were found, fixed, and disclosed, plus the leak and the broken embargo.
Jev can answer three questions about a draft, but the model should not decide what happens next. In episode 3 of Decide with Jev, we write a small PHP class that turns those answers into one label. When the answers are u...
Laravel's PreventStaleDatabaseReads middleware keeps a user's reads on the write database after they save, so read replica lag doesn't show them old data.
PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35 fix two critical vulnerabilities that allow unauthenticated remote code execution. Here's who's at risk and how to update.
Laravel 13.36 adds Worker::$flushStickyConnections so queue jobs go back to your read replicas after an earlier job writes to the database.
Skuul 3.0 is an open-source school management app on Laravel 13 and Livewire 4, with per-campus roles, gradebooks, a family portal, and fee tracking.
Screenshot captures HTML, Blade views, and web pages as PNG, JPEG, or PDF files with Chrome, then saves them locally or to Laravel filesystem disks.
What's Changed [3.x] Backport applicable October fixes by @calebporzio in #10832 Fixes backported from 4.x Resolve the current page in previousPage() and nextPage() when uninitialized. #10782 Avoid resolving inherited Ob...
What's Changed [4.x] Fix persistent middleware route deduplication by @danharrin in #10790 [4.x] Stop island scoping at the component boundary by @robert-stanciu in #10789 [4.x] Recompile components when compiled view fi...
The PHP security team will ship a release on October 21, 2026 at 14:00 UTC that fixes two critical vulnerabilities, both rated CVSS 9.2. Plan your upgrade now.
[12.x] Prevent escaping from bypassing protection by @valorin in #62027
On 10/21 two critical security vulnerabilities were disclosed and patched in PHP. These are extremely serious vulnerabilities affecting every PHP application on the web. Action may be required, read below.
Laravel 13.38 adds PreventStaleDatabaseReads middleware and DB::usingWritePdo() so users see their own writes when you read from database replicas.
Read the full post on https://stitcher.io/blog/update-now
What's Changed fix: prevent double encoding of app authentication QR codes by @people-sea in #20741 fix: preserve cloak state during Livewire updates by @danharrin in #20743 fix: Keep colored table actions hidden in load...
What's Changed fix: prevent double encoding of app authentication QR codes by @people-sea in #20741 fix: preserve cloak state during Livewire updates by @danharrin in #20743 fix: Keep colored table actions hidden in load...
[13.x] Allow float values in Unique where rule by @sertxudev in #62059 [13.x] Remove dead until higher order collection proxy by @xurshudyan in #62057 [13.x] Fix ofMany() alias inside closures by @xurshudyan in #62051 [1...
A critical auth bypass in Laravel's token API guard let attackers log in as other users on MySQL and MariaDB. Update to 12.68.0 or 13.29.0.
How a slow dependency becomes an outage, and how deadlines, concurrency limits, retry budgets, and jitter protect useful work. A practical deep dive with PHP examples and a controlled overload test design. Read more
Laravel's new DB::olap() method runs PlanetScale and Vitess queries in OLAP mode to get past the 100,000 row limit, then switches the connection back.
[13.x] Fix race condition with jobs using both onOneServer() and withoutOverlapping() by @tanerkay in #62007 [13.x] Respect faked Sleep in limiter block() timeout by @grzegorczykp in #62017 [13.x] Improve getForeignKeys...
Laravel 13.36 adds Rule:: methods for required_with, accepted_if, url, uuid, distinct, and the other string-only validation rules, with IDE autocompletion.
Spatie's Laravel URL AI Transformer fetches web pages, runs them through Laravel AI agents, and stores JSON-LD, summaries, or schema-validated data.
Resend is now a first-party Laravel Cloud integration. Connect once, verify a domain, and attach email to an environment like any other resource.
Laravel 13.36 adds Rule:: builders for the remaining validation rules, DB::olap() for PlanetScale, and an option to reset sticky connections between queue jobs.
What's Changed Fix notification slide-in direction in RTL by @yousef-aman in #20670 fix: sort by multiple columns in the order they are passed by @jnbn in #20676 fix(notifications): tolerate non-array items when restorin...
What's Changed Fix notification slide-in direction in RTL by @yousef-aman in #20670 fix: sort by multiple columns in the order they are passed by @jnbn in #20676 fix(notifications): tolerate non-array items when restorin...
PHP News is a new site from Eric Barnes and Matt Stauffer covering PHP core, RFCs, releases, packages, and events, plus a free weekly PHP newsletter.
[12.x] Address query issues by @taylorotwell in #61838 [12.x] Backport EncodedParameter from #61610 by @mahdyaralipor in #61871 [12.x] Generate different cache file based on configured $echoFormat by @crynobone in #61822
[12.x] Make the worker timed out exit code reachable by @kieranbrown in #61623 [12.x] Support named S3 credential providers and Cloud IAM disks by @kieranbrown in #61757 [12.x] Address query issues by @taylorotwell in #6...
Ryan Chandler makes a strong case for keeping PR descriptions human-written, even when agents handle most of the implementation. The piece focuses on ownership, review context, and why a concise explanation from the pers...
Inertia.js v3.9 adds a background option to pause polling in hidden tabs, a navigate event type for history restores, and fixes for back navigation.
What's Changed [3.x] Backport color picker lifecycle cleanup by @dbpolito in #20654 [3.x] Fix select refresh listener memory leak by @dbpolito in #20650 [3.x] Skip deferred modal opens after teardown by @dbpolito in #206...
A clear overview of PHP 8.6's readonly property defaults RFC, why the old restriction existed, and why interface properties made it worth revisiting. It also covers the practical edge cases, so you know where the new syn...
Puzzle Party isn't a game. It's a place to play the games you're already playing --- Wordle, Connections, Strands, crosswords, and other daily puzzles --- with people you already know.
BashBox runs AI-generated bash scripts in pure PHP, with a virtual filesystem, execution limits, and opt-in network access. No exec or proc_open calls.
A clear walkthrough of Laravel's Context feature and how it lets execution-scoped information travel through your app. It also explains why that matters for logging, queued jobs, and keeping trace data available without...
Laravel 13.35 adds Schedule::alwaysOnOneServer() to run every task once across servers, and a way for long scheduled commands to stop during a deploy.
Over the past few weeks I've posted a couple of times about There There, the helpdesk we're building at Spatie. After two decades of running our own customer support, we decided to stop compromising on tools and build th...
Laravel 13.35 lets assertPushed(), assertDispatched(), and assertSentTo() take an array of expected properties in place of a callback.
What's Changed fix: avoid null array offset in responsive column visibility checks by @rafafdez-fillthegapp in #20665 fix: ignore stale select search results after clearing search by @people-sea in #20664 fix: hide resid...
What's Changed fix: avoid null array offset in responsive column visibility checks by @rafafdez-fillthegapp in #20665 fix: ignore stale select search results after clearing search by @people-sea in #20664 fix: hide resid...
At Spatie we build SaaS apps with Laravel on the backend and Inertia with React on the frontend. That split means two type systems have to agree about every payload that crosses between them. Laravel data going out, Type...
Laravel 13.35 adds Route::query(), an opt-in defaults() method for models, property arrays in fake assertions, percentage worker memory limits, and more.
Laravel AI SDK 1.1 adds Agent Skills support, Cohere text generation, approval for built-in tools, and failover that skips provider tools a provider lacks.
New Features feat: add rich editor grid controls by @danharrin in #20585 feat: add assistive content to chart widgets by @danharrin in #20628 feat: inject related records into item closures by @danharrin in #20633 feat:...
New Features feat: add rich editor grid controls by @danharrin in #20585 feat: add assistive content to chart widgets by @danharrin in #20628 feat: inject related records into item closures by @danharrin in #20633 feat:...
VMPal gives your AI agent its own macOS, Windows, or Linux VM on Apple silicon, so Claude Code or Codex can work without you approving every prompt.
[13.x] Allow fake assertions to accept an array of properties by @jackbayliss in #61770 [13.x] Support percentages for queue:work --memory by @jackbayliss in #61753 [13.x] Let long-running scheduled commands see schedule...
There There, the helpdesk we're building at Spatie, is a project of learned habits. Twenty-some years of writing Laravel apps has taught us which patterns pay off and which ones quietly rot. One that keeps earning its ke...
Synapse from Redberry lists your Laravel AI SDK agents, lets you chat with them in the browser, and shows their tool calls and token usage.
Grant defines Laravel roles and permissions with PHP enums, stores role assignments in the database, and checks access through Laravel's Gate.
A single yes or no doesn't tell you much about a draft. In this episode of Decide with Jev, we ask Jev three questions in one request and get back a Boolean, a choice and a score. Then we read every part of each answer i...
If you keep up with Filament news, you've likely heard that there are now over 1,000 community plugins in the Filament plugins directory. So with these 1,000 plugins and growing, it's time to talk about how Filament hand...
A couple of posts back I walked through the agent and tools we built on top of the Laravel AI SDK for There There, the helpdesk we're putting together at Spatie. I ended that post on a small cliffhanger. We hand the agen...
What's Changed [3.x] fix: use valid Livewire upload references in restriction tests by @people-sea in #20400 chore(deps): bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 by @dependabot[bot] in #20453 chore(deps): bump...
LayaPHP sends text to a self-hosted model and returns typed classifications with confidence values for PHP and Laravel applications.