β Composer policies block flagged malware, but only on 2.10. A CI image running an old Composer version, or a project disabling the policy, still installs flagged versions.
Private Packagist now blocks these at the registry, on any client.
#php#phpc#composerphp
Inertia 3.1 is out, and it brings rescued deferred props! πͺ
Your deferred prop might call a flaky third-party API or throw an exception. With the new rescue option, the exception is still reported, but your users won't see an error response.
After 4 years of rock-solid stability in production, weβre open-sourcing our ClickHouse package for Laravel! π
Features complete support for:
π οΈ Query Builder
π¦ Eloquent Models
π Migrations
https://t.co/kwYtAwkYEu
#Laravel#ClickHouse
The March Laravel Open Source changelog is out!
This is what you call in the industry a "beefy month"
- Laravel 13
- Inertia v3
- Teams in Starter Kits
- New πππππππ-ππππ-πππππππππ skill for Boost
- Slew of new Prompts components
- Reverb per application rate limiting
The list goes on (and on) (and on)
π³οΈπ³οΈπ³οΈ
https://t.co/EARQK0plU3
π¨ Security Alert: axios versions 1.14.1 and 0.30.4 were compromised on npm with a remote access trojan hidden in a postinstall script. Both versions have since been removed.
This was not a Laravel vulnerability β but we're taking proactive steps to protect our community from this supply chain attack.
If you installed or updated axios in the last 24 hours, scan your machine.
What we did:
β’ Pinned axios to safe versions in laravel/laravel
β’ laravel/installer now runs package installs with --ignore-scripts by default
β’ Blocked the attacker's domain across Laravel Cloud
More info: https://t.co/GhcKIAIEXE
Laravel maintains three AI packages, each with a different job:
β AI SDK: Adds AI features that your users interact with
β Boost: Helps AI agents write better Laravel code for you
β MCP: Exposes your app to external AI clients like ChatGPT and Claude
Theyβre not interchangeable, but they work together.
We break down when to use each one, with code examples for all three.
https://t.co/JlUZiIZ6Mc
If you've been waiting for a v1.0 tag of my Laravel JSON:API package...it is happening!
When Laravel 13 is released, run:
composer update laravel/framework
...and then uninstall my package and migrate to the first-party implementation π
bada bing bada boom
`tabular-nums` should be the default for any number that updates ( timers, counters, prices, percentages, scores, live data etc ).
you can enable this tnum OpenType feature using the CSS property `font-variant-numeric`.
.tabular-nums {
font-variant-numeric: tabular-nums;
}
Last month we shipped:
β Livewire 4 support in Starter Kits, Boost 2.0, JSON:API resource, & improved Docker support in VS Code.
β Laravel Valkey & expanded API access in Cloud.
β Hetzner S3 for backups in Forge.
β Real time exception detection in Nightwatch.
π£ The Laravel Open Source team is hiring!
If you want to help create an incredible developer experience that impacts hundreds of thousands of software engineers, let's chat π€
https://t.co/VW1puG3700
Really happy with the response on the <InfiniteScroll> component we released in @inertiajs 2.2! Here are some other new features that were merged along the way π
You can now access the Progress Bar API! It's the exact same API that Inertia uses under the hood π
This week we shipped support for SQS FIFO queue message group IDs in Laravel, as well as deduplication IDs. βοΈ
This also unlocks the ability for Laravel application's to use Amazon's new "fair queue" feature in SQS.
https://t.co/t9PSZ7IGTh
Laravel Tip π
You can add subqueries to your queries with Eloquent with the addSelect method. This can make queries much cleaner and sometimes avoid JOINs that are not needed.
Check this example on how to order users by the last payment date without a JOIN. π₯
In Inertia 2.1, we introduced a brand new <Form> component! It looks just like a classic HTML form, but under the hood, it's powered by Inertia.js π₯
Here's how it looks in Vue β¬οΈ