PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35 fix two critical vulnerabilities that allow unauthenticated remote code execution. Here's who's at risk and how to update. The post PHP Security Releases Fix Two Critical RCE Vulnerabilities appeared first on Laravel News. Join the Laravel Newsletter to get Lar...

Laravel 13.38 adds PreventStaleDatabaseReads middleware and DB::usingWritePdo() so users see their own writes when you read from database replicas. The post Prevent Stale Database Reads in Laravel 13.38 appeared first on Laravel News. Join the Laravel Newsletter to get Laravel articles like this dir...

The PHP security team will ship a release on October 21, 2026 at 14:00 UTC that fixes two critical vulnerabilities, both rated CVSS 9.2. Plan your upgrade now. The post Critical PHP Security Release Coming Tomorrow (October 21) appeared first on Laravel News. Join the Laravel Newsletter to get Larav...

A critical auth bypass in Laravel's token API guard let attackers log in as other users on MySQL and MariaDB. Update to 12.68.0 or 13.29.0. The post Critical Token Guard Auth Bypass Fixed in Laravel 13.29 and 12.68 appeared first on Laravel News. Join the Laravel Newsletter to get Laravel articles l...

Laravel's new DB::olap() method runs PlanetScale and Vitess queries in OLAP mode to get past the 100,000 row limit, then switches the connection back. The post Run Large PlanetScale Queries in Laravel With DB::olap() appeared first on Laravel News. Join the Laravel Newsletter to get Laravel articles...

Laravel 13.36 adds Rule:: methods for required_with, accepted_if, url, uuid, distinct, and the other string-only validation rules, with IDE autocompletion. The post Fluent Rule Builders for All Laravel Validation Rules appeared first on Laravel News. Join the Laravel Newsletter to get Laravel articl...

Spatie's Laravel URL AI Transformer fetches web pages, runs them through Laravel AI agents, and stores JSON-LD, summaries, or schema-validated data. The post Laravel URL AI Transformer: Extract Structured Data From URLs appeared first on Laravel News. Join the Laravel Newsletter to get Laravel artic...

Laravel 13.36 adds Rule:: builders for the remaining validation rules, DB::olap() for PlanetScale, and an option to reset sticky connections between queue jobs. The post Rule Builders for Every Validation Rule in Laravel 13.36 appeared first on Laravel News. Join the Laravel Newsletter to get Larave...

PHP News is a new site from Eric Barnes and Matt Stauffer covering PHP core, RFCs, releases, packages, and events, plus a free weekly PHP newsletter. The post PHP News: A New Site for PHP Releases, RFCs, and Packages appeared first on Laravel News. Join the Laravel Newsletter to get Laravel articles...

Inertia.js v3.9 adds a background option to pause polling in hidden tabs, a navigate event type for history restores, and fixes for back navigation. The post Pause Polling in Background Tabs in Inertia.js v3.9 appeared first on Laravel News. Join the Laravel Newsletter to get Laravel articles like t...

Puzzle Party isn't a game. It's a place to play the games you're already playing --- Wordle, Connections, Strands, crosswords, and other daily puzzles --- with people you already know. The post Look What You Helped Me Build appeared first on Laravel News. Join the Laravel Newsletter to get Laravel a...

BashBox runs AI-generated bash scripts in pure PHP, with a virtual filesystem, execution limits, and opt-in network access. No exec or proc_open calls. The post BashBox: A Sandboxed Bash Interpreter for AI Agents in PHP appeared first on Laravel News. Join the Laravel Newsletter to get Laravel artic...

Laravel 13.35 adds Schedule::alwaysOnOneServer() to run every task once across servers, and a way for long scheduled commands to stop during a deploy. The post Running Laravel's Scheduler on Multiple Servers appeared first on Laravel News. Join the Laravel Newsletter to get Laravel articles like thi...

Laravel 13.35 lets assertPushed(), assertDispatched(), and assertSentTo() take an array of expected properties in place of a callback. The post Laravel Fake Assertions Now Accept Property Arrays appeared first on Laravel News. Join the Laravel Newsletter to get Laravel articles like this directly in...

Laravel 13.35 adds Route::query(), an opt-in defaults() method for models, property arrays in fake assertions, percentage worker memory limits, and more. The post Route::query() and Model defaults() in Laravel 13.35 appeared first on Laravel News. Join the Laravel Newsletter to get Laravel articles ...

Laravel AI SDK 1.1 adds Agent Skills support, Cohere text generation, approval for built-in tools, and failover that skips provider tools a provider lacks. The post Laravel AI SDK 1.1 Adds Agent Skills and Cohere Chat appeared first on Laravel News. Join the Laravel Newsletter to get Laravel article...

VMPal gives your AI agent its own macOS, Windows, or Linux VM on Apple silicon, so Claude Code or Codex can work without you approving every prompt. The post VMPal: Give Your AI Agent a Whole Computer appeared first on Laravel News. Join the Laravel Newsletter to get Laravel articles like this direc...

Synapse from Redberry lists your Laravel AI SDK agents, lets you chat with them in the browser, and shows their tool calls and token usage. The post Synapse: A Dev Dashboard for Laravel AI SDK Agents appeared first on Laravel News. Join the Laravel Newsletter to get Laravel articles like this direct...

Grant defines Laravel roles and permissions with PHP enums, stores role assignments in the database, and checks access through Laravel's Gate. The post Grant: Enum-Based Roles and Permissions for Laravel appeared first on Laravel News. Join the Laravel Newsletter to get Laravel articles like this di...

A single yes or no doesn't tell you much about a draft. In this episode of Decide with Jev, we ask Jev three questions in one request and get back a Boolean, a choice and a score. Then we read every part of each answer in PHP. The post Decide with Jev: Three Questions in One Request with the Laravel...

If you keep up with Filament news, you've likely heard that there are now over 1,000 community plugins in the Filament plugins directory. So with these 1,000 plugins and growing, it's time to talk about how Filament handles plugin security and what have implemented to help you make informed decision...

LayaPHP sends text to a self-hosted model and returns typed classifications with confidence values for PHP and Laravel applications. The post LayaPHP: Self-Hosted Text Classification for PHP and Laravel appeared first on Laravel News. Join the Laravel Newsletter to get Laravel articles like this dir...

Inertia.js v3.8 adds a WhenMounted component for browser-only code under SSR, BigInt support for large integer props, Form callback fixes, and more. The post WhenMounted and BigInt Props in Inertia.js v3.8 appeared first on Laravel News. Join the Laravel Newsletter to get Laravel articles like this ...

Postcodes for Laravel adds typed GB postcode lookups, validation, geography data, distance searches, and test fakes through the GB Postcodes API. The post Postcodes for Laravel: GB Postcode Lookup and Geography Data appeared first on Laravel News. Join the Laravel Newsletter to get Laravel articles ...

Laravel 14 adds a defaults() method to Eloquent models, so default attribute values can use config, feature flags, and dates instead of constant expressions. The post Laravel 14 Adds a defaults() Method to Eloquent Models appeared first on Laravel News. Join the Laravel Newsletter to get Laravel art...

Security advisories for the Laravel AI SDK and Laravel MCP fix an SSRF bug and an OAuth redirect issue. Here are the affected versions and how to update. The post Laravel AI SDK and Laravel MCP Security Fixes: Update Now appeared first on Laravel News. Join the Laravel Newsletter to get Laravel arti...

Laravel 13.34 counts worker crashes toward maxExceptions, notifies interruptible jobs before a timeout, adds job durations to JobProcessed, and more. The post Count Worker Crashes as Job Exceptions in Laravel 13.34 appeared first on Laravel News. Join the Laravel Newsletter to get Laravel articles l...

Mailbox for Laravel captures outgoing mail in a local dashboard and lets you test rendered HTML, recipients, and attachments with fluent assertions. The post Mailbox for Laravel: Preview and Test Rendered Email appeared first on Laravel News. Join the Laravel Newsletter to get Laravel articles like ...

How Laravel releases work: one major version a year, weekly minor releases, 18 months of bug fixes, and support dates for Laravel 10 through 14. The post Laravel Release Cycle: Versions, Support Policy, and Dates appeared first on Laravel News. Join the Laravel Newsletter to get Laravel articles lik...

Elastic Bridge brings fluent Elasticsearch and OpenSearch queries to Laravel, with model-style documents, aggregations, pagination, and testing fakes. The post Elastic Bridge: Eloquent-Style Queries for Elasticsearch and OpenSearch appeared first on Laravel News. Join the Laravel Newsletter to get L...