Who contributed to Laravel on June 27, 2026?

4 developers shipped this update, including Amirhf1, Button99, jackbayliss, and joetannenbaum.

What were the notable Laravel updates?

Fix RateLimited middleware not serializing releaseAfter in __sleep(), [13.x] Prevent restored event when soft delete restore fails, and [13.x] Expose jobs processed count and last job timestamp on the WorkerStopping event.

@laravel

PHP's most popular framework - Forge, Vapor, and a massive paying audience

github ↗

Pick a date

Topics: PHP Full archive →

The Wire · Showcase

FRAMEWORK FIXES QUEUE SERIALIZATION BUG, WORKER EVENTS GET OBSERVABILITY BOOST

By RepoJournal · Filed 06:00 UTC on June 27, 2026 · About Laravel

4 people shipped this

Amirhf1 @Amirhf1 1 cited

Button99 @Button99 1 cited

jackbayliss @jackbayliss 1 cited

joetannenbaum @joetannenbaum 1 cited

RateLimited middleware was silently dropping releaseAfter values during job serialization, breaking retry delays for queued jobs.

The Laravel framework team squashed a critical serialization bug in the RateLimited middleware [1] where the releaseAfter property vanished after jobs cycled through the queue's serialize/deserialize loop. This meant jobs configured to delay on rate limit hits would lose that delay instruction entirely. In parallel, the framework is tightening event reliability by ensuring the restored event only fires when soft delete restoration actually succeeds [2], eliminating silent failures from triggering event handlers. Worker observability just got sharper with the WorkerStopping event now receiving jobsProcessed and lastJobProcessedAt data [3], giving ops teams better visibility into worker lifecycles and memory pressure correlations. On the dev experience side, artisan dev now respects exit codes more intelligently [4]. Short-lived commands like migrations or seeds won't torpedo your entire dev environment when they finish successfully, but failures still tear everything down as they should.

Action items

→ Review queued jobs using RateLimited middleware directly in constructors - verify releaseAfter behavior after next deploy laravel/framework [plan]
→ Update any soft delete event handlers that assume restored event always means success laravel/framework [plan]
→ Merge pending actions/checkout 7.0.0 updates across all notification channels laravel/ui [monitor]

References

[1] Fix RateLimited middleware not serializing releaseAfter in __sleep() ↗ laravel/framework
[2] [13.x] Prevent restored event when soft delete restore fails ↗ laravel/framework
[3] [13.x] Expose jobs processed count and last job timestamp on the WorkerStopping event ↗ laravel/framework
[4] Use `--kill-others-on-fail` for `artisan dev` ↗ laravel/framework

Quick answers

What shipped in Laravel on June 27, 2026?: RateLimited middleware was silently dropping releaseAfter values during job serialization, breaking retry delays for queued jobs. In total, 5 commits and 9 pull requests landed.
Who contributed to Laravel on June 27, 2026?: 4 developers shipped this update, including Amirhf1, Button99, jackbayliss, and joetannenbaum.
What were the notable Laravel updates?: Fix RateLimited middleware not serializing releaseAfter in __sleep(), [13.x] Prevent restored event when soft delete restore fails, and [13.x] Expose jobs processed count and last job timestamp on the WorkerStopping event.

HORIZON METRICS BUG SILENTLY LEAKS REDIS KEYS ON PHPREDIS 6.1+

Laravel Horizon's clear-metrics command reports success while accumulating unbounded Redis keys on phpredis 6.1 or newer, potentially starving your queue storage.

php 3 shipped 1-min read

@laravel 2 days ago

ACTIONS/CHECKOUT 7.0.1 SHIPS WITH UNSAFE PR CHECK FIX

GitHub Actions' checkout action patched an unsafe PR verification bypass that could have exposed workflows to malicious pull requests.

php 1 shipped 1-min read

@laravel 3 days ago

ACTIONS/CHECKOUT 7.0.1 ROLLS OUT ACROSS LARAVEL ECOSYSTEM

GitHub Actions security patch lands in four Laravel notification and UI libraries as the ecosystem tightens its CI/CD hygiene.

php 6 shipped 1-min read

@laravel 4 days ago

VAPOR-CLI SHIPS 1.70.2 WITH STYLE FIXES AS AI TIGHTENS LANGUAGE HANDLING

Vapor-cli v1.70.2 lands with code cleanup [ref:2] while the Laravel AI package now preserves conversation titles in the user's language instead of defaulting to English [ref:6].

php 11 shipped 1-min read

Elsewhere on the wire

AI Agents about 21 hours ago

CLINE SHIPS FIVE CRITICAL AGENT FIXES AFTER END-TO-END TESTING BLITZ

Saoudrizwan just landed a cascade of fixes that prevent the agent loop from running wild, stop file reads from resolving to the wrong directory, and plug the compaction pipeline.

ai-agents 16 shipped 2-min read

Local LLMs about 21 hours ago

LLAMA.CPP SHIPS MINIMAX-M3 SPARSE ATTENTION, VLLM UNLOCKS HETEROGENEOUS PREFILL-DECODE

The inference stack gets a new model architecture and a fundamental shift in how prefill and decode can run on different hardware configurations.

+10

llms 125 shipped 1-min read

@CachyOS about 21 hours ago

GLIBC 2.43 REBUILD SHIPS, INSTALLER JUMPS TO C++26

CachyOS pushed glibc 2.43 through the pipeline while the CLI installer upgraded its C++ standard to C++26, signaling a major refresh across core infrastructure.

infra 97 shipped 1-min read

Elixir & Phoenix about 21 hours ago

ECTO FIXES SUBQUERY PLANNING IN JOINS, ELIXIR PATCHES IEX PARSING

Ecto's query planner now handles subqueries correctly in interpolated join filters, while Elixir fixes a syntax error that broke 'not in' as a continuation operator in IEx.