Get PHP News in your inbox

You're reading a past issue. New ones go out free every week.

PHP 8.6 RC2 Is Out, and There Is No RC1
PHP News PHP  News
Sep 22 - Sep 29, 2026
 
In this issue
9 stories from PHP News
  • PHP 8.6 RC2 Is Out, and There Is No RC1
  • PHPenomenal 8.6: A PHP 8.6 Coding Challenge
  • Swoole Adds Windows Support in 6.3 RC1
  • Bootgly: A PHP Framework With Its Own Async HTTP Server
  • And 5 more stories from the week.
  • Around the web: 7 links the community sent in.
  • RFC Watch: 1 decided, 2 new proposals.
  • Coming up: 4 events in the next month.
PHP Core
PHP 8.6 RC2 Is Out, and There Is No RC1
PHP 8.6.0 RC2 is the first release candidate for PHP 8.6. A packaging bug skipped RC1, and GA is set for November 19, 2026.
More this week
Community
PHPenomenal 8.6 challenges you to build a working PHP app with PHP 8.6 features before the release on November 19. The best entrie...
PHPenomenal 8.6: A PHP 8.6 Coding Challenge
Packages
Swoole 6.3.0 RC1 now supports Windows, and adds new Swoole\Table methods, an HTTP/2 multiplexing client and support for PHP 8.4's...
Swoole Adds Windows Support in 6.3 RC1
Packages
Bootgly 1.0 is a PHP framework with its own HTTP server, a router, async database drivers and CLI tools. Here's how it works and w...
Bootgly: A PHP Framework With Its Own Async HTTP Server
Packages
ext-turbovec is a PHP extension for vector search that runs in-process. It compresses embeddings to 4 bits and needs no vector dat...
ext-turbovec: A PHP Vector Index Without Pinecone or pgvector
PHP Core
PHP 8.5.11, 8.3.35, and 8.2.34 fix 11 CVEs, including an unauthenticated SoapServer crash and HTTP redirects that leak Authorizati...
PHP 8.5.11 Patches 11 CVEs, Including a SOAP Server Crash
PHP Core
Tim Düsterhus and Derick Rethans propose Time\Instant and a Time\Clock interface for PHP 8.7: a timezone-free point in time you ca...
Time\Instant RFC Proposes a Native Clock for PHP 8.7
Packages
Laravel Vet shows you the code each Composer update adds before it reaches vendor/, and fails your build on any package nobody has...
Laravel Vet: Spot Malicious Code in Composer Updates
Community
Composer's creators take the SymfonyCon stage to share what a year of Packagist supply chain attacks taught them, and what changed...
Composer After the Attack: A SymfonyCon 2026 Talk
RFC Watch
Declined
2 yes, 11 no.
New proposal
Adds an Io\Terminal API to read the terminal size, switch to raw mode, read single keys, and take hidden input without shelling out to stty.
New proposal
Deprecates passwords over 72 bytes in password_hash() with bcrypt in PHP 8.7 and throws a ValueError in 8.8, instead of silently cutting them short.
Follow every RFC on the tracker →
Around the web
Dries Buytaert - Drupal is light-years ahead of its reputation · Community
Teaching Laravel Boost to guide Domain-Driven Design · Package
Kicking Off the Community Events Coalition Special Interest Group · Community
Psalm 6.19.0 Released · Package
This Week In PHP Internals | Sept 24, 2026 · Community
Laravel MCP, Bifrost's Birthday, and Laravel 14 · Podcast
Continuing to Move PHP Open Source Forward · Community
Upcoming events
Oct 5 ValkeyConf 2026 · Prague Congress Centre
Oct 15 Longhorn PHP 2026 · Holiday Inn Austin Midtown
Oct 15 UpstatePHP - Show & Tell · OpenWorks
Oct 27 International PHP Conference Munich 2026 · Holiday Inn Munich
See every upcoming event →
PHP News
Independent coverage of the PHP language, its ecosystem and the people building it.
Written by PHP developers, for PHP developers

Enjoyed this issue?

Get the next one in your inbox, free every week.