Who contributed to Laravel on May 16, 2026?

2 developers shipped this update, including benbjurstrom and pushpak1300.

What were the notable Laravel updates?

v1.37.2, [1.x] Fix passkey password confirmation defaults, and Extract protocol versions to shared enum for client reuse.

@laravel

PHP's most popular framework - Forge, Vapor, and a massive paying audience

github ↗

Pick a date

Topics: PHP Full archive →

The Wire · Showcase

FORTIFY PATCHES PASSKEY REGRESSION, MCP PREPS CLIENT LIBRARY

By RepoJournal · Filed 06:00 UTC on May 16, 2026 · About Laravel

2 people shipped this

benbjurstrom @benbjurstrom 1 cited

pushpak1300 @pushpak1300 1 cited

Fortify shipped a hotfix overnight for a passkey configuration bug that broke application overrides, while the MCP server team extracted protocol versions into a shared enum ahead of the incoming client library.

Fortify v1.37.2 landed this morning to fix a regression introduced just one release ago [1]. The bug prevented applications from overriding default passkey confirmation settings, a breaking change that would have forced teams to either revert or work around the constraint [2]. This is a patch you should pull immediately if you're running 1.37.1 and using passkeys in authentication flows.

On the MCP front, the team is laying groundwork for the client library [3]. Protocol version management was hardcoded into the server, but now both client and server need to speak the same language during the initialize handshake [4]. Extracting versions to a shared enum prevents duplication and ensures neither side drifts. This is infrastructure work that clears the path for client-side shipping.

Fortify also hardened its CI/CD pipeline by pinning GitHub Actions to commit SHAs and adding Dependabot config [5]. This is good security hygiene that more packages should adopt. Maestro continues steady work on branch main with no breaking changes or surprises.

Action items

→ Upgrade Fortify to v1.37.2 before next deploy if you're using passkeys laravel/fortify [immediate]
→ Monitor MCP client library for incoming releases laravel/mcp [monitor]

References

[1] v1.37.2 ↗ laravel/fortify
[2] [1.x] Fix passkey password confirmation defaults ↗ laravel/fortify
[3] Extract protocol versions to shared enum for client reuse ↗ laravel/mcp
[4] Extract protocol versions to shared enum for client reuse (#215) laravel/mcp
[5] v1.37.1 ↗ laravel/fortify

Quick answers

What shipped in Laravel on May 16, 2026?: Fortify shipped a hotfix overnight for a passkey configuration bug that broke application overrides, while the MCP server team extracted protocol versions into a shared enum ahead of the incoming client library. In total, 7 commits, 5 pull requests, and 2 releases landed.
Who contributed to Laravel on May 16, 2026?: 2 developers shipped this update, including benbjurstrom and pushpak1300.
What were the notable Laravel updates?: v1.37.2, [1.x] Fix passkey password confirmation defaults, and Extract protocol versions to shared enum for client reuse.

ACTIONS/CHECKOUT 7.0.1 ROLLS OUT ACROSS LARAVEL ECOSYSTEM

GitHub Actions security patch lands in four Laravel notification and UI libraries as the ecosystem tightens its CI/CD hygiene.

php 6 shipped 1-min read

@laravel 1 day ago

VAPOR-CLI SHIPS 1.70.2 WITH STYLE FIXES AS AI TIGHTENS LANGUAGE HANDLING

Vapor-cli v1.70.2 lands with code cleanup [ref:2] while the Laravel AI package now preserves conversation titles in the user's language instead of defaulting to English [ref:6].

php 11 shipped 1-min read

@laravel 2 days ago

LARAVEL LSP FIXES CONFIG COMPLETIONS, FRAMEWORK TIGHTENS TEST PATTERNS

Laravel LSP v0.0.27 shipped with a critical fix for dotted config key completion, while the framework enables 16 Rector rules to modernize test patterns across 13.x.

php 15 shipped 1-min read

@laravel 3 days ago

LARAVEL 13 DOUBLES DOWN ON ATTRIBUTES AND AI DOCS

The framework is shipping request-scoped attributes, trait-level model attributes, and a major CI refactor while docs race to cover the expanding AI SDK surface.

php 31 shipped 2-min read

Elsewhere on the wire

AI Agents about 9 hours ago

CLAUDE OPUS 5 LANDS ACROSS THE STACK

The newest Anthropic model is now live in langchain, Cline, and llama-index, with native support for extended reasoning and 1M context windows.

ai-agents 28 shipped 1-min read

Local LLMs about 9 hours ago

OLLAMA LANDS LAGUNA SUPPORT AND CRUSHES MEMORY LEAKS WHILE SGLANG HITS V0.5.16 WITH CONFIDENCE-DRIVEN SPECULATIVE DECODING

Ollama shipped three critical performance and reliability fixes for Metal residency and concurrent access patterns, while SGL-Lang released 0.5.16 with a new speculative algorithm hitting 383.7 tok/s on DeepSeek-V4.