Hasnayeen

We have posted more information about today's security releases, including the sequence of events that led to the discovery, how the PHP security team is improving their processes & more. thephp.foundation/blog/2026/1...

it’s 2026. build like you’re already going to get hacked, because sooner or later you probably will collect less. only keep the customer data you actually need. anything you never store can’t leak

And it's up! www.php.net github.com/php/php-src/... github.com/php/php-src/... I don't think the Ubuntu repos are updated yet, but they shouldn't be too far away.

PHP Security Releases Fix Two Critical RCE Vulnerabilities posted by @ericlbarnes.com laravel-news.com/php-critical...

The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2. PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.

Critical Token Guard Auth Bypass Fixed in Laravel 13.29 and 12.68 laravel-news.com/laravel-toke...

A Critical PHP Security Release is coming in 13 hours - you need to be ready to patch your servers. securinglaravel.com/laravel-secu... #Laravel

Critical PHP Security Release Coming Tomorrow (October 21) laravel-news.com/php-critical...

after 48 hours, using the most productive stack in the wolrd: php, laravel, phpstorm, air, we are proud to introduce: dev-null.sh; social network for developers; sign-in with github, done!

Kenney Shape is now FREE! (and it'll remain free, forever) ✨ Previously a paid tool, I'm releasing it as a gift to the community. Today's update will be the final one, with no further updates planned. That way I can focus on new software & projects! kenney.itch.io/kenney-shape

In case you missed it, I published a tool called Gradient Layers, which is simply a way to visualize multiple background images in CSS. Works well for mask-image, too. Take a look: lab.ishadeed.com/tools/gradie...

NativePHP Mobile 4.6.0 is out — orientation from PHP, supported languages, Android APP_KEY in the Keystore, simulator builds without a simulator, plus iOS 26 chrome fixes and WebP. nativephp.com/blog/nativep...

🚀 Skyrocketing！ 🚀 (200+ new stars) 📦 cathrynlavery / diagram-design ⭐ 43,634 (+227) 🗒 HTML Editorial diagram design for Claude Code, Codex, GitHub Copilot, Factory Droid, and Pi. 42 diagram types. Self-contained HTML + SVG. No shadows. No Mermaid slop.

building yet another wind data particle layer for mapbox in webgl and while cranking the parameters up to this point probably isn't very useful, it looks preetty cool

🧪 Pest tip. Pest now supports Playwright traces for browser tests: `./vendor/bin/pest --trace` 🔍 Perfect for flaky or CI-only failures when stepping through the test isn't enough. You can also enable traces by default in `Pest.php`.

Recently, we partnered with PlumbPHP to add free, automatic security and ecosystem health checks to all plugins in our official plugins directory! Now, plugin authors and users can use these scores to make sure they build and maintain secure codebases 💪 More info the replies!

I hope we keep writing docs for people who want to understand and build things without using AI.

we introverts are doomed likely

🚀 PHP Developers, meet your new best friend: NativePHP Mobile 4.5! 🌟 Async Tasks bring you a second thread for smooth multitasking. Your apps just got a serious upgrade! Dive into the details and elevate your coding game. #PHP #Nati… https://shocm.me/posts/2026-09-26-nativephp-mobile-async-tasks/

A lot of new stuff incoming! I decided to make it all free because I love you all. 💞

Jev has been all over my feed. So instead of arguing about it, I put it to work in a real Laravel app. Episode 1 of Decide with Jev is out. We ask Jev if a draft matches its brief. It answers with a number, not a paragraph, so PHP can decide what happens next.

after working two weeks on my #threejs learning project 1 reached somewhat a playable stage, controls are little funky. learning lot of new things & I'm already tired. let's see where I finish in the remaining two weeks

The time to ramp up your scroll-driven animations skills is **NOW** Go check scroll-driven-animations.style for and free 10-part video course created by yours truly, as well as a bunch of tools and demos.

your package manager could be hacking you here are 3 fixes you can do right now (literally takes 2 minutes) watch this: youtu.be/YOoBLUiBo5I?...

Laravel AI SDK 1.0 Adds Classification and Tool Approvals posted by @ericlbarnes.com laravel-news.com/laravel-ai-s...

If you’re on GitHub can I ask a huge favor? Star this repo for me: github.com/VheissuLabs/...

NativePHP Mobile 4.5.0 is out — with mobile-ui 0.5.0. Async PHP, glow/blur, gesture pan, auto routes/mobile.php. nativephp.com/blog/nativep...

Here's a recording of the talk I gave at this year's Laravel Live Denmark conference. www.youtube.com/watch?v=22R...

My talk on Advanced Circuit Breakers for Laravel from @laravellive.dk is now live! Go give it a watch! youtu.be/YvfWLyHy6k4

it's a dependency audit for php, so you actually know what's changing but we took it further: you can delegate the review to AI 🤌🏻 repository & documentation: github.com/laravel/vet

this is an excellent read if you've multiple interest taylinsimmonds.substack.com/p/how-i-comb... you can give this to your ai and tell it to figure out your problem cluster, this can be very useful in this ai era

starting learning #threejs , I know I know llm are really good at it, can write better & faster than me, don't care. started learning things for the fun of it. building things hands-on give such a good experience

🚨 NEW PLUGIN ALERT 🚨 We've just released our next first-party plugin for Mobile: Bluetooth© Low Energy Great work by Sonali Dudhia 🙌🏼 Included with all Ultra subscriptions nativephp.com/plugins/nati...

Fixing PHPStan Issues in Livewire Components with Larastan-Livewire 🚀 ashallendesign.co.uk/blog/larasta...

Laravel devs, this Collection feature is easy to overlook. 👀 Higher-order messages let you replace simple callbacks with expressive syntax across many Collection methods. Once you spot the pattern, your Collection code gets a lot cleaner.

📺 Here is What's New in Laravel 13.26 ➡️ Process fake assertion helpers ➡️ Debounceable queued listeners ➡️ Queue::forward() ➡️ Read-through filesystem Thank you Volodya, Steve, Jack, Taylor & Josh 🙏 youtu.be/8PLwC-Ye-Bk

State of Laravel 2026 Survey Is Now Open posted by @ericlbarnes.com laravel-news.com/state-of-lar...

NativePHP Mobile Calendar v2.0 is out 🎉 • NativePHP Mobile v4 support • Recurring and all-day event fixes • Timezone fixes on iOS and Android • FakeBridge test helpers • Faster Android loading • CI on v3 and v4 nativephp.com/plugins/srw...

Ever add a personal scratch file to .gitignore just to keep git status clean? 👀 Don't change the shared .gitignore for something only you need. Use .git/info/exclude instead. Same ignore syntax. Local to your clone. Never committed.

Laravel Tip 💡 Need to know what changed on an Eloquent model? Before saving, use isDirty() and isClean(). After saving, use wasChanged(). And when you need the previous value, getOriginal() has you covered. The important part is knowing when to use each one. 👀

Laravel devs, you asked for it and it's here! 👀 I've started collecting the Laravel tips I've posted on X in one place. Around 100 tips are there so far, and the best part: you can add your own tips too! Let's build the collection together. ❤️ github.com/MrPunyapal/t...

Major performance improvements & security patches for Filament v4.12 and v5.7! laravel-news.com/major-perfor...

Got secrets in local `.env`? Afraid of a compromised dependency or agent reading your filesystem? I built dotlock: - store secrets encrypted in `.env.secrets` - decrypted on the fly via `php artisan dev` github.com/mnapoli/dot...

blade (and livewire) fans, this one's for you: pint --blade formats blade / html / php, and sorts tailwind classes in your blade files composer update & enjoy 🤌🏻

say hello to pest v5 · tia: the fastest testing engine in the world (literally instant) · agent plugin: 10x better than any other browser agent · phpstan + rector: built in · evals: test your agents ship it

Laravel Installer v5.31 includes a new command: 𝚕𝚊𝚛𝚊𝚟𝚎𝚕 𝚙𝚊𝚌𝚔𝚊𝚐𝚎 This new command kicks off an interactive prompt that scaffolds out a Laravel package using our (new) (official) package skeleton: github.com/laravel/pack... Enjoy!

Trying to read more long form contents so decided to make a little rss feed reader app with filament. I fell in love with @filamentphp.com every time I work with it. P.S I need more rss feed recommendation, particularly on tech, php please.

🚀 Say goodbye to juggling multiple tools! With Pest 4's suite for browser testing, you can seamlessly handle unit, feature, AND browser tests all in one place. Ready to elevate your PHP game? Let’s simplify your workflow! #PestPHP… https://shocm.me/posts/2026-07-04-pest-4-browser-testing-laravel/

Laravel tip: If you update records while chunking them, be careful with `chunk()`. Because `chunk()` uses offset pagination, changing the result set during processing can make you skip rows. Use `chunkById()` when the records can change while processing.