🚨 Security Alert: axios versions 1.14.1 and 0.30.4 were compromised on npm with a remote access trojan hidden in a postinstall script. Both versions have since been removed.
This was not a Laravel vulnerability — but we're taking proactive steps to protect our community from this supply chain attack.
If you installed or updated axios in the last 24 hours, scan your machine.
What we did:
• Pinned axios to safe versions in laravel/laravel
• laravel/installer now runs package installs with --ignore-scripts by default
• Blocked the attacker's domain across Laravel Cloud
More info: https://t.co/GhcKIAIEXE
Every wondered which model is best for Laravel and how much does Boost actually help?
We had the same question - here's what we found out. 👀
https://t.co/516OzFtkCF
Merge it.
Taylor demos the full SDLC of 2026: Nightwatch catching an error, AI fixing it and opening a PR, Cloud creating a preview environment, @openclaw calling to ask if he wants to merge the PR.
No code touched. Fully self-healing app.
Taylor on AI, "I've never seen so much change since I started in software. Laravel is incredibly well positioned for the agentic era. It has conventions, clear documentation and 15 years of examples. I feel excited about the possibilities."
Live now →
https://t.co/38Q4Gb3oKo
🎧 Recorded a new morning walk this morning, hard one to share because I'm sure people will want to roast me for it but have been transparent up until now so publishing it anyways.
If you're using Tailwind, don't sleep on child selectors. They clean up your styles and eliminate repetition.
Vibe coding agents aren't smart enough to do this.
(if you're using CSS, keep scrolling)
Laravel's Bus::chain now supports no initial chain so you can append/prepend jobs dynamically before dispatching
Prepending will automatically shift the root job to be executed first. Previously you'd have to create an array and manipulate it into its final chain manually
🚨 FFmpeg 8.0 has been released! 🚨
It has many new features and bugfixes such as APV and ProRes RAW decoding, numerous Vulkan encoders and decoders, VVC decoding features etc.
We have also upgraded our project infrastructure.
https://t.co/kxHdQADGnL
Testing out Blaze in the Flux docs locally
Rendering the editor page:
Without Blaze: 56ms
With Blaze: 18ms
When this thing drops, Flux apps will get pretty big zero-effort performance improvements 🔥
Stay tuned ✌️
This simple trick will make your Livewire apps 10x faster with zero JavaScript 🏎️💨
Whenever you have a selectable element, you might be tempted to write something like this in your classes:
{{ $selected ? ‘bg-blue-500’ : ‘’ }}
This is very slow, that class will only get added when the server responds.
Instead, use an input element with wire:model on it, and add the following class to its parent:
has-checked:bg-blue-500
Now the element reacts instantly and doesn’t wait for the server, unlike the first solution.
This alone makes your app feel A LOT faster because it gives the user immediate feedback that something happened, even if the page updates 100ms later after the server responds.
You can use this trick with various form elements, toggles, checkboxes, etc.
Code below 👇
Next week we launch Laravel Nightwatch. 🦹
Truly one of the most thoughtful and beautiful products we've ever built. Incredibly proud of the team that has poured some serious blood, sweat, and (maybe?) tears into this product for you all.
It's been wonderful to hear how our early access customers have fallen in love with the product.
Can't wait to share it with you all.
And, on launch, we will have a free tier that allows every Laravel developer to see what it can do for your projects.
https://t.co/fGlNJUo28A
FrankenPHP is now officially supported by The PHP Foundation
The project repository will be moved to the @official_php organisation on GitHub.
https://t.co/gKiMwRUZhe