PHP 8.5: Full Review – What’s New & What Changed!
– youtu.be - submitted by Nuno Maduro
Read more [youtu.be]
– youtu.be - submitted by Nuno Maduro
Read more [youtu.be]
– tighten.com - submitted by Kayla Helmick
This article continues the series on integrating Trix with Laravel by focusing on user mentions using the Rich Text Laravel package. It walks through adding a Tribute.js-powered mention picker in the editor, implementing back-end support via an AttachableContract and Signed Global IDs, and even scaffolds a notification system to email mentioned users.
Read more [tighten.com]
Join 9,500+ smart developers
Get my monthly newsletter with what I learn from running Spatie, building Oh Dear, and maintaining 300+ open source packages. Practical takes on Laravel, PHP, and AI that you can actually use.
No spam. Unsubscribe anytime. You can also follow me on X.
"Freek’s newsletter is one of the best ways to stay updated with the Laravel and PHP ecosystem. It consistently highlights useful packages, tools, and ideas from the community, especially the amazing work coming from Spatie. As a Laravel developer building SaaS and web platforms, I find it extremely helpful to discover practical tools and insights that improve my development workflow."
A critical security vulnerability was just disclosed for Livewire v3, as Stephen Rees-Carter wrote about on Securing Laravel. The vulnerability (CVE-2025-54068) allows unauthenticated attackers to achieve remote code execution in specific scenarios. What makes this particularly concerning is that exploitation doesn't require authentication or user interaction - just a component mounted and configured in a particular way.
This vulnerability affects all Livewire v3 versions up to 3.6.3. If you're running any version in that range, attackers could potentially run arbitrary PHP code on your server. Stephan warns us the open-source nature of the fix means attackers may already be reverse-engineering the patch to identify and abuse the exploit.
Many production apps are probably running vulnerable versions right now, with their developers completely unaware. This is where automated security monitoring becomes invaluable - using Laravel Health to check for vulnerabilities, and optionally services like Oh Dear to send you notifications when issues are detected.
The term "coroutine" often comes up when talking about asynchronous or non-blocking code, but what does it actually mean?
Read more [doeken.org]
PHP doesn’t let you serialize closures, but Laravel does, thanks to an underrated package that’s built into the framework.
We just tagged stable release for two new spatie packages: spatie/ping and spatie/simple-tcp-client. In this blogpost, I'd like to share why these were developed and how you can use them.
The #[\NoDiscard] is a safety feature for PHP developers, making it easier to catch mistakes where ignoring a function’s return value could lead to bugs.
Read more [www.amitmerchant.com]
– doeken.org - submitted by Doeke Norg
The term "coroutine" often comes up when talking about asynchronous or non-blocking code, but what does it actually mean? In this post, we will explore coroutines as a concept and see how PHP supports them through Generators and Fibers.
Read more [doeken.org]
Brent is back with another update on the usage of PHP versions.
Read more [stitcher.io]
In this post, I'll share how I'm using PHPStan's type aliases feature to make validation rule typehints more readable and maintainable in our Laravel application.
Read more [ohdear.app]
– youtu.be - submitted by Bert De Swaef
In this episode of the Quick Win Wednesday series, we're taking a look at the cases function on Enums.
Read more [youtu.be]
A nice video from Povilas on our newest pacakage
Read more [www.youtube.com]
Brent is doing some interesting stuff here.
Read more [tempestphp.com]
With PHP 8.4’s release, we have a new Dom\HTMLDocument class that makes working with HTML documents easier and more standards-compliant, while fixing some long-standing bugs in the old DOMDocument class.
Read more [liamhammett.com]
Povilas from Laravel Daily made a cool video about our packages.
Read more [www.youtube.com]
Our new package gives you everything you need to build a secure one-time password auth flow.
Read more [spatie.be]
Something that you’ll need to often is casting the collection back to a regular array. Like me, you might be tempted to use toArray() for this. But that might be the wrong method to call.
Read more [spatie.be]
Tests performed by Tideways show that, in general, the performance between 8.2, 8.3 and 8.4 does not move much for a Laravel, Symfony and WordPress demo application.
Read more [tideways.com]
– blog.genijaho.dev - submitted by Geni Jaho
Stubs are fake implementations of interfaces or classes that simulate the behavior of real services.
Read more [blog.genijaho.dev]
I’m proud to announce that we’ve released a new package called spatie/laravel-passkeys that makes adding passkeys to a Laravel app as easy as it can be.
Read more [spatie.be]