Post

🐘 FrankenPHP 1.13 is out! Caddy 2.11.7 (Slowloris protection, url_pattern matcher, RFC 10036 Incremental header), Mercure 1.0 built in, and config reloads validated before they go live. 5 security fixes, 2 rated high. Please upgrade.

4/10/26, 2:10 pm1 repost12 likes

Kévin Dunglas

@dunglas.dev

Before upgrading: num_threads now counts only threads for regular requests, Mercure keys must be bound to a trusted issuer, and Caddy now limits request headers to 16 KiB. Release notes: github.com/php/frankenp...

github.comRelease v1.13.0 · php/frankenphpFrankenPHP 1.13.0 is a big one. It ships with Mercure 1.0, opens FrankenPHP threads to Go-based PHP extensions, and makes configuration reloads safe: an invalid configuration is now rejected before...