Laravel 13.33, Livewire Honeypot, Pest 5.1 Goes AI — A Day With Laravel #065

Laravel ecosystem news — September 23, 2026

EDITO

Hey Laravel artisans 👋

Our favorite framework keeps shipping: Laravel 13.33 lands with a big batch for queues, tagged cache and Cloud, while Paul Redmond's "What We Know About Laravel 14" roundup maps what's already on master — PHP 8.4 minimum, Route::query(), $user->authorize(), and breaking changes to prepare for now.

But the juiciest stuff lives off the headlines: the Livewire honeypot that trapped Stephen Rees-Carter mid-pentest, Pest 5.1 with its TIA engine that only re-runs impacted tests, plus dev.to gems — whereBinary(), docs you can run in the browser, and hard numbers proving Laravel costs 316 KB per request with OPcache. Stuff your colleagues haven't seen yet 😎

And save the date: on October 15, Nuno Maduro, Brent Roose and Matthieu Napoli build a social network in PHP in 48 hours, live from the JetBrains office 🍿

Happy reading and happy coding 💻

— Fred

P.S.: If you don’t want to miss out on future news about the Laravel ecosystem, you can subscribe now!

🚀 Framework & Releases

Laravel 13.33 — Queues, cache and Cloud A big quiet weekly batch: more forgiving queue workers, tagged cache at peace with enums, and read replicas on Cloud. The kind of release that makes production calmer without making noise. » View release note

Laravel 14 preview — PHP 8.4 minimum and first breaking changes No official date yet, but the roadmap is taking shape: PHP 8.4 required, a new route able to carry a body while staying read-only, and authorization that throws instead of returning false. Time to get used to the idea gently. » Read the article

Livewire 4.4.6 and Filament 5.8.4 — Maintenance that feels good Nothing spectacular, and that is fine: a refreshed Alpine on the Livewire side, and a round of stabilization fixes on Filament after 5.8. Update, run the tests, move on. » View release note

📦 Packages & Plugins

Difflock — The guardrail that re-reads your migrations before prod Everybody knows the Friday-night fear: a migration that passes locally and locks production. Difflock re-reads it against the real database — live schema, table sizes — and warns you before anything breaks. Even your AI agent can use it as a reviewer. » Read the article

Fast Excel 5.x — Finally relaxed about giant client files We have all received that 200,000-row file that blows up memory. Fast Excel learns to read it as a stream, piece by piece, and hardens exports against trapped formulas. The quiet kind of tool that saves a deploy. » Read the article

Health for Laravel — When your pod restarts for no reason A container restarted by Kubernetes with no explanation is often a naive health probe. This package gives each probe its own checkup — database, cache, queue, scheduler — and exposes it all to Prometheus. Your on-call self will thank you. » Read the article

Fresh Package — Starting a package without the paperwork Starting a package is 80% chores: tests, CI, static analysis, demo app. This skeleton ships all of it ready-made, even with rules prepared for AI agents. Only the interesting code is left to write. » Read the article

📘 Articles & Tutorials

Laravel Snippets — Docs you can touch What if the docs examples actually ran? That is the bet of Laravel Snippets: every code sample executes right in the browser, no server needed. Perfect for testing an idea between two coffees. » Read the article

Laravel is not heavy, your queries are — Proven with numbers "Laravel uses 20 MB per request": we have all heard it. Measured data shows the framework weighs almost nothing once OPcache is on — what costs a lot is loading 10,000 models at once. Liberating: the problem is not the framework, it is our habits. » Read the article

🎥 Videos & Talks

A social network in PHP in 48h, live — Nuno, Brent and Matthieu at JetBrains Three PHP figures locked in for two days with a wild goal: a complete social network, coded live. Beyond the challenge, a rare look into their real-time trade-offs: what to keep, what to drop. See you October 15 and 16. » Read the announcement

🔧 Tips & Tricks

Case-sensitive search, done cleanly — The query builder newcomer Comparing "Jean" and "jean" in MySQL often ended in SQL tinkering. There is now an explicit, readable way to say it, working beyond MySQL too. Three lines that make code more honest. » Read the article

Your worker finally tells you why it stops — Mystery restarts are over A worker under Supervisor restarting in a loop without a word: over. It now prints its stop reason in plain text, and even speaks JSON for your logs. Debugging queues becomes almost pleasant. » Read the article

🛡️ Security

The Livewire trap that caught a pentester — Securing Laravel #135 Mid-audit, Stephen gets 403s everywhere after poking at a locked Livewire property. Not a firewall: a home-made honeypot banning any IP triggering errors impossible in normal use. Clever, simple, and a fine lesson: alert on everything that should never happen. » Read the article

🌐 Community

What really breaks in the Laravel 13 upgrade — No-BS guide The docs promise ten minutes, and that is almost true — except three or four traps that sting: cached serialized objects, MySQL upserts, CSRF middleware in tests. This guide reviews them with a battle-tested checklist. Read before upgrading. » Read the article

🛠️ Tools & Services

Pest 5.1 only replays what matters — And tests your AI Your test suite takes three minutes? The new analysis engine replays only tests touched by your changes: seconds are enough. And while at it, Pest learns to grade your AI features output — tone, relevance, accuracy. Speed and confidence in one. » Read the article

Inertia DevTools lands on Firefox — Your visits finally readable Understanding what flows between Laravel and the frontend is often guesswork. The official extension shows each visit, its data and route, with direct links to your editor — and nothing leaves your machine. Firefox users can finally join in. » Read the article

This newsletter needs your support 🙏

If you found this newsletter useful, I would be delighted if you could support my work.

Here are the different options:

https://laracasts.com/referral/happytodev

2c2c3389 c647 405c a499 f80e4d521277

Ezgif com animated gif maker

517hY12cdLL

• Subscribe to Laracasts, the go-to resource for Laravel
• Place your next Amazon order using my affiliate link
• Subscribe to OpenCode Go for $5 and get an extra $5 using my referral link

• Buy me a coffee!

  What is the aim of this newsletter?

🎯 To regularly provide you with the latest or most important resources (videos, articles, GitHub repositories, packages, tutorials, etc.) that I come across relating to Laravel and its ecosystem.

See you soon for the next edition. If you haven’t already, please subscribe!