Isaac Dew

Isaac Dew

@isaacdew.com

Laravel/WordPress developer. Amateur woodworker. Generally a nerd https://pinkary.com/@idew

128 followers 354 following149 posts

Isaac Dew reposted

The PHP Foundation

@thephpf.bsky.social

Set session.upload_progress.enabled=0 till next PHP release to block an unlikely RCE vector (CVE-2026-115560). Already recommended for CVE-2026-109619 Wed, keep disabled. Only apps with non-default serialize_handler switching it to "php" at runtime can be affected. #php #phpc

Isaac Dew reposted

🚨 FrankenPHP 1.13.2 is officially live! This is a security release patching a critical PHP vulnerability (PHP2Shell) alongside 4 vulnerabilities in FrankenPHP itself. Upgrading immediately is strongly recommended:

github.comRelease v1.13.2 · php/frankenphpFrankenPHP 1.13.2 is a security release. Its Docker images and static binaries are built with the PHP versions that fix PHP2Shell (CVE-2026-109618 and CVE-2026-109619), two critical vulnerabilities...

My day in a nutshell, dealing with this PHP vulnerability.

Isaac Dew reposted

@duncanmcclean.com

If you use PHP, be prepared to update PHP (8.0+) tomorrow at 14:00 UTC for a critical PHP security release! 😬 php.net/archive/2026...

php.netPHP: News Archive - 2026PHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.

I wonder how much of the world's resources are wasted on anthropomorphizing LLMs.

Jay 🦋@jay.bsky.team

agents are online, and they’re here to stay. open protocols are the layer that lasts, so excited to see human agent interactions being prototyped on delve.town

delve.townDelvetown

Isaac Dew reposted

Stephen Rees-Carter

@valorin.bsky.social

During a recent pentest, I suddenly got hit with 403s on every request. It wasn't a WAF - it was a clever little trap one of my clients built to catch anyone poking at Livewire. Let me show you how it works. 🤓 securinglaravel.com/security-tip... #Laravel

securinglaravel.comSecurity Tip: The Trap That Caught Me![Security Tip #135] During a recent pentest, I suddenly got hit with 403s on every request. It wasn't a WAF - it was a clever little trap one of my clients built to catch anyone poking at Livewire.…

Isaac Dew reposted

State of SaaS

Isaac Dew reposted

@dustinhaynes.bsky.social

This Hank Green stuff is crazy. The man has done so much, contributed so much. And we're cancelling him because he used ChatGPT? You would have thought he did something WAY worse just by the discourse.

Honestly, I don't love that a bunch of big OSS projects are getting bought up by big corps and VCs.

VoidZero@voidzero.dev

VoidZero is joining Cloudflare. Our mission stays the same: to make JavaScript developers more productive than ever before. Vite, Vitest, Rolldown, Oxc, and Vite+ remain MIT-licensed. Evan and the VoidZero team will continue leading them.

View full thread

...But if CF owns the license and signs the checks, they undoubtedly have control over the project and its direction. Maybe this situation is fine and there are no doubt examples of corps being good OSS stewards. But there are also examples of the opposite (Oracle being the biggest example). 3/4

These concerns are part of an overarching concern I have about big corps having outsized power and control in society stifling dissent and competition. Anyway, Vite is awesome and I'm grateful for the contributions of the team. I hope that only good comes from this! 4/4

Honestly, I don't love that a bunch of big OSS projects are getting bought up by big corps and VCs.

VoidZero@voidzero.dev

VoidZero is joining Cloudflare. Our mission stays the same: to make JavaScript developers more productive than ever before. Vite, Vitest, Rolldown, Oxc, and Vite+ remain MIT-licensed. Evan and the VoidZero team will continue leading them.

I didn't expect to get so many replies lol But to clarify my thoughts, it's great when OSS maintainers get paid and a project has consistent financial backing. However, I have a hard time trusting big corps and VCs with stewardship over OSS projects. 1/4

Big corps & VC have different priorities than OSS. Their goal is to make as much money as possible and to keep the numbers going up. In CF's case, even if that means laying off 1100 people despite record profit. I know for now the same team is in charge and nothing has changed on that front... 2/4

This.

John Rudolph Drexler@johnrudolphdrexler.com

My effective tax rate is like 40%. The richest Americans and biggest corporations pay 0-10%. If that doesn’t piss you off, you might be a bootlicker.

Isaac Dew reposted

@ianlandsman.com

You’re not blocking the strait I’m blocking the strait!!! 😆

Isaac Dew reposted

🚨 Active supply chain attack on axios@1.14.1. The latest version pulls in plain-crypto-js@4.2.1 -- a brand-new package that didn't exist before today. We're still investigating. If you use axios, pin your version and audit your lockfile. socket.dev/blog/axios-n...

socket.devSupply Chain Attack on Axios Pulls Malicious Dependency from...A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHu...

Isaac Dew reposted

@hankgreen.bsky.social

“Vice President JD Vance thinks aliens are visiting earth and that they are Demons” is the most “I wish Carl Sagan were alive” moment I’ve had in a while.

Isaac Dew reposted

Stephen Rees-Carter

@valorin.bsky.social

As Laravel's friendly hacker, I feel it is my duty to inform everyone that Laravel v11 is no longer supported! 😱 ❌ Bug fixes (they stopped 6 months ago) ❌ Security fixes (they stop today!) Have you upgraded yet? laravel.com/docs/release... #Laravel

laravel.comRelease Notes | Laravel 12.x - The clean stack for Artisans and agentsLaravel is a PHP web application framework with expressive, elegant syntax. We’ve already laid the foundation — freeing you to create without sweating the small things.

Isaac Dew reposted

@johnmkoster.bsky.social

I am happy to announce that Forte v1 is now available! Forte is my new library for parsing and modifying #laravel Blade. fortephp.com

fortephp.comForteA complete ecosystem for parsing, analyzing, and transforming Laravel Blade templates. Includes AST querying, code rewriting, formatting, and developer tools.

Unfortunately not the onion...

In case you missed it, here's the Blaze landing page. The performance gains in @calebporzio.bsky.social's demo today were nuts.

blazephp.devBlazeA drop-in Blade compiler replacement with up to 97% overhead reduction. Memoize repeated renders, fold components at compile time, and profile bottlenecks — no template changes required.

Livewire Blaze is dropping tomorrow!

Now this is a really cool use of LLMs

Laravel News@laravelnews.com

Laravel Related Content: Semantic Relationships Using pgvector posted by @ylynfatt.bsky.social laravel-news.com/laravel-rela...

laravel-news.comLaravel Related Content: Semantic Relationships Using pgvector - Laravel NewsBuild related content links using vector embeddings and pgvector for Laravel

Isaac Dew reposted

Anyone planning on participating in some way in the general strike tomorrow?

Wasted a good 30 minutes today chasing my tail because Salesforce only outputs 15 of the 18 characters in their IDs in reports...I have no idea why

I just want to throw caution to the wind and upgrade all of my Livewire apps to v4 right now

Tagged another alpha release for Industry a couple weeks ago. Hoping to dive back in after the holidays and get a beta going! github.com/isaacdew/ind...

github.comRelease v0.1.0-alpha.3 · isaacdew/industryFixes strange behavior when using relationship factory methods Avoids LLM calls when overrides are passed for generated attributes Full Changelog: v0.1.0-alpha.2...v0.1.0-alpha.3

I'm super excited for Blaze and @johnmkoster.bsky.social's Forte. As much as they've been talked about, I still feel like they're underrated.

Just found this Vite plugin that adds HMR support for Livewire so that component state isn't reset every time a change is made AND IT'S AMAZING!! I'm working on a wizard component and was going insane having to go through the steps again to view my changes. github.com/defstudio/vi...

github.comGitHub - defstudio/vite-livewire-plugin: Laravel Vite handler for Livewire componentsLaravel Vite handler for Livewire components. Contribute to defstudio/vite-livewire-plugin development by creating an account on GitHub.

This is awesome!

Laravel@laravel.com

Today is Day 1 of the Laravel OSS Advent Calendar. Fresh videos for 25 days on packages you should know about. laravel.com/advent

laravel.comAdvent Calendar 2025 - Laravel - The PHP Framework For Web ArtisansThe Laravel Advent Calendar reveals a new video walkthrough of a popular package daily from December 1-25.

I wonder how many Christmas surprises are ruined every year by targeted ads.

Now that PHP extensions can be written in Go, I wonder what kind of performance gains could be had if a framework like Laravel were written with some of its core in an extension. Seems like a fun experiment.

Tried @calebporzio.bsky.social's Blaze in a Flux project today and saw a performance bump of ~25-30% on most pages.

And I think a few of the Flux components I'm using aren't using Blaze yet but should be because I published their stubs a while ago. Excited to see how it does after I add the blaze directive to those components and a few of my simple components.

Just tagged a new alpha release for Industry! github.com/isaacdew/ind...

github.comRelease v0.1.0-alpha.2 · isaacdew/industryCast lazy_load_until value to int Fixed lazy_load_until behavior to make as few requests as possible to satisfy the factory call README fixes Build Prism request for every call so that subsequent r...

Tis the season to make cutting boards!

Isaac Dew reposted

Replying to @techenby.com

My talk is on YouTube! youtu.be/sDEohTrNVvc?...

youtu.beLivewire in production | Andy Newhouse Wire:Live 2025YouTube video by Livewire

In case you missed it, Wire:Live videos just dropped! youtu.be/A8AXghy-XzM?...

youtu.beLivewire 4 Keynote | Caleb Porzio Wire:Live 2025YouTube video by Livewire

Isaac Dew reposted

I've just published an alpha release of Industry, my package for using LLMs to generate realistic string data in your Eloquent factories. Would any #laravel folks be interested in giving it a try? github.com/isaacdew/ind...

github.comRelease v0.1.0-alpha.1 · isaacdew/industryv0.1.0-alpha.1 — Alpha release (2025-11-02) Initial alpha release of Industry — an integration that lets Laravel Eloquent factories generate realistic string data via Prism / LLM structured output....

I've just published an alpha release of Industry, my package for using LLMs to generate realistic string data in your Eloquent factories. Would any #laravel folks be interested in giving it a try? github.com/isaacdew/ind...

github.comRelease v0.1.0-alpha.1 · isaacdew/industryv0.1.0-alpha.1 — Alpha release (2025-11-02) Initial alpha release of Industry — an integration that lets Laravel Eloquent factories generate realistic string data via Prism / LLM structured output....

Isaac Dew reposted

Josh Hanley 🇦🇺

Livewire v4 beta has been tagged! Go forth ⚡️ github.com/livewire/liv... Docs can be found here livewire.laravel.com/docs/4.x/upg...

github.comRelease v4.0.0-beta.1 · livewire/livewireLivewire v4 beta release ⚡️ We’re excited to announce the first beta release of Livewire v4! This version brings major improvements, internal rewrites, and new features. Things are still in progres...

Things are happening 👀

Discovered this because I was trying to look at the teleport docs and got a 500... figured they had to be up to something with Wire:Live happening haha

Isaac Dew reposted

@johnmkoster.bsky.social

Another fun preview. Got timelines working for Livewire AJAX requests - and the timeline entries get associated with the live DOM tree (hovering over a view in this image highlights that node in the page):

Got some good feedback for Industry on Reddit. I'm adding this FAQ section to the readme to address common questions I got. Now to work on caching!

I've published an early version of Industry, my package for connecting Eloquent factories to LLMs for realistic string data! github.com/isaacdew/ind...

github.comGitHub - isaacdew/industry: A package that allows you to generate realistic data with an LLM of your choice in your Laravel Eloquent factories.A package that allows you to generate realistic data with an LLM of your choice in your Laravel Eloquent factories. - isaacdew/industry

A couple big things I still want to add: - Caching of generated text to avoid LLM calls for every reseed - A better way to set config on the industry instance. Hoping to knock out caching this weekend

When you look up whether md5 is acceptable for a simple checksum for caching purposes and the very first result talks about how md5 is good for storing sensitive data (it's definitely not)

Made great progress today! I've added separate state for tests, some config, a readme, etc.

Isaac Dew@isaacdew.com

TLDR: I'm working on a package I've called industry that uses Prism/LLMs with Laravel factories to generate more realistic seed data. Still need to workout some things. For example, definitely don't want this running during tests so I'll add a way to set a testing value.