Model defaults, agent skills, and fake assertions
· Summarized
Key takeaways
- The PHP community responded rapidly to critical vulnerabilities, showcasing effective collaboration among organizations, hosting providers, and the PHP Foundation.
- Laravel 13.35 introduced route query, enabling GET requests with request bodies to support larger search filters.
- Laravel 13.36 added a model defaults method, simplifying setting default attribute values through configuration or current context.
- Validation rules in Laravel now have a consistent rules:: method format, making rule definitions more uniform and developer-friendly.
- New packages like Grant and Synapse expand Laravel’s ecosystem to include enum-based permissions and AI agent management tools.
- Laravel’s queue worker memory limits can now be set as percentages of PHP’s memory, allowing more flexible resource management.
- Inertia.js 3.9 improves resource optimization by adding background polling options to pause or continue updates in hidden tabs.
- Laravel AI SDK 1.1 enhances AI capabilities with agent skills, Chat Cohere, and support for new provider models.
- A new PHP News site aims to centralize PHP releases, RFCs, and packages, supporting community growth outside of Laravel-specific news.
- Developers can now generate and execute multiple questions in a single request using the Jev system with Laravel AI SDK, streamlining complex content evaluations.
Summary
PHP Vulnerability Day and Community Response
The episode begins with Jake and Michael discussing a critical PHP vulnerability that was announced and mitigated on the same day. They emphasize how widespread the awareness was, noting extensive coverage including Cloudflare's mitigation strategies and official write-ups by the PHP Foundation. The hosts appreciate the rapid response involving approximately 100 organizations, including Laravel and cloud providers, who worked together to patch and rebuild infrastructure such as Docker images and QA environments. Michael mentions the proactive measures from their team, which involved updating environments to avoid exploitation, and highlights the government advisories, including the UK and Japanese governments urging service providers to shut down if unable to patch systems. The overall tone is one of relief and respect for the community's swift coordination and transparency during this emergency.
Laravel 13.35 and 13.36 Updates: Route Query and Validation Rules
Next, the hosts delve into recent Laravel releases, starting with Laravel 13.35, where Joel Butcher introduced route query, a new method allowing GET requests to include a request body, which is particularly useful for large search filters. This addition aligns with enhancements in Laravel’s testing helpers and route matching capabilities. Michael explains how this permits more flexible search endpoints, with tests validating JSON queries seamlessly.
Model Defaults and Developer Enhancements in Laravel 13.36
Continuing with Laravel updates, the discussion covers Laravel 13.36, where West Hooper brought the model defaults method from Laravel 14 into Laravel 13 as an optional trait. This method allows defining default values for model attributes, facilitating configurations like feature flags or current dates. Jack Bayless also improved the queued job and event fakes, enabling them to assert expected properties as arrays, making tests more straightforward. Memory management improvements in queue workers now allow setting memory limits as percentages of PHP’s memory limit, and new scheduling policies ensure tasks only run on a single server if desired.
Inertia.js and Validation Rule Builders
The episode then highlights Inertia.js v3.9.0, featuring new background polling options for resource optimization and fixes for navigation bugs. Next, the hosts discuss Laravel 13.36’s addition of fluent validation rule builders, providing a consistent, method-chaining interface for all validation rules, improving code clarity and developer experience.
New Packages for Laravel and AI Integration Tools
The hosts introduce several new packages, notably Grant, which uses PHP enums for roles and permissions; Synapse, a dashboard for managing Laravel AI SDK agents; BashBox, a sandboxed PHP bash interpreter for AI agents; and Laravel URL AI Transformer, a tool for extracting structured data from URLs. These packages expand Laravel’s ecosystem with advanced AI tools, data extraction capabilities, and development dashboards, broadening the scope of Laravel development.
Laravel AI SDK 1.1 and PHP News Site Launch
Additional highlights include the release of Laravel AI SDK 1.1, adding agent skills, cohere chat, and improved provider integrations, emphasizing AI’s role in Laravel development. Moreover, the announcement of PHP News, a new website dedicated to PHP releases, RFCs, and packages, via the collaboration of Eric Barnes and others, aims to centralize PHP updates separate from Laravel’s focus. Both announcements underscore a focus on community and ecosystem growth.
Tutorials and Deep Dives for Developers
The episode concludes with technical tutorials by Paul Redmond covering running Laravel’s scheduler on multiple servers, executing large PlanetScale queries with DB::olap(), and streamlining fake assertions. Harris Ruff Toppeless shares a quick guide on using Jev with the Laravel AI SDK to handle multiple questions in one request, providing practical tools and techniques for Laravel developers to improve performance and testing.
Sponsors
- Post Shiba · Post Shiba is the transactional email platform that powers Bento's amazing delivery rates. So email infrastructure for developers and SaaS platforms. They let your team worry about focusing on what matters building great products and they will handle all the process of making sure emails get it to the correct inbox.
Show notes
Jake and Michael discuss all the latest Laravel releases, tutorials, and happenings in the community.
This episode is sponsored by PostShiba - the transactional email platform that powers Bento's amazing delivery rates. Start your trial at PostShiba.com.
Show links
- PHP Security Releases Fix Two Critical RCE Vulnerabilities
- Route::query() and Model defaults() in Laravel 13.35
- Pause Polling in Background Tabs in Inertia.js v3.9
- Rule Builders for Every Validation Rule in Laravel 13.36
- Laravel AI SDK 1.1 Adds Agent Skills and Cohere Chat
- PHP News: A New Site for PHP Releases, RFCs, and Packages
- Grant: Enum-Based Roles and Permissions for Laravel
- Synapse: A Dev Dashboard for Laravel AI SDK Agents
- Sponsor: PostShiba
- BashBox: A Sandboxed Bash Interpreter for AI Agents in PHP
- Laravel URL AI Transformer: Extract Structured Data From URLs
Tutorials
Follow this show on AudioBrevity and new episodes get summarized for you. Create a free account