The State Of Laravel 2025 survey is open, aiming to capture ecosystem changes. Participate to shape insights on Laravel's evolution.

A critical vulnerability (CVE-2025-54068) in Livewire v3 allows unauthenticated attackers to execute remote commands due to improper handling of component property updates. This issue affects versions from 3.0.0-beta.1 to 3.6.3 and has been patched in version 3.6.4, with users strongly advised to upgrade immediately.

This update adds strict numeric validation (rejecting numeric strings in favor of real numbers), lets you register #[Singleton] and #[Scoped] services with new PHP attributes, and enables more precise mail driver assertions in your tests. The release also introduces Uri::toStringable() for easier string handling Uri::of('http://localhost')->withScheme('https')->toStringable();, dontReportUsing for advanced exception filtering, a global setting to skip parent relationships in factories during tests, and a new Post::whereValueBetween(now(), ['visible_from', 'visible_to']) query method to check if a value falls between two columns.

Want to streamline your database logic? This article shows how to use SQL generated columns and views within your Laravel app. Covering when to use each, how to set them up in migrations, and how to query them with Eloquent for better performance and clarity.

Str class includes ⁠doesntStartWith and ⁠doesntEndWith methods, which provide a clean and readable way to check if a string does not start or end with a given substring.

use Illuminate\Support\Str;

$string = "Hello, World!";

Str::doesntStartWith($string, 'Hi'); // true

Str::doesntEndWith($string, '!'); // false

Reflecting on a year with PHP's property hooks, the feature proves transformative by reducing boilerplate code and enhancing interface capabilities. It streamlines class APIs, especially within models and data objects.

The proposed RFC adds a #[\Override] attribute to PHP, letting you mark class properties that override a parent’s. This helps catch mistakes early and improves inheritance safety.

PDF Parser offers a fast and maintainable solution for parsing PDFs in PHP without external dependencies. It supports text extraction, object retrieval, and image handling, enhancing efficiency and flexibility in PDF processing.

In the article, the author highlights that the real challenges in software engineering are not in writing code but in the processes of code reviews, knowledge transfer, testing, debugging, and coordination. With LLMs accelerating code generation, the complexity of understanding, testing, and trusting this code has increased, keeping these processes as the true bottlenecks. Despite faster code production, the need for clear thinking, careful review, and thoughtful design remains more crucial than ever.

Want to catch bugs before they hit production? Cursor’s BugBot scans your pull requests, flags potential issues, and explains the risks—directly in your PR workflow. If you’re interested in adding AI-assisted code review to your team’s process, check out how BugBot works.