Who contributed to Laravel on August 6, 2026?

3 developers shipped this update, including Lucas Michot, github-actions[bot], and Mohamed Said.

What were the notable Laravel updates?

[13.x] Bump minimum versions (#61033), v12.65.0, and Simplify remaining exception expectations.

@laravel

PHP's most popular framework - Forge, Vapor, and a massive paying audience

github ↗

Pick a date

Topics: PHP Full archive →

The Wire · Showcase

LARAVEL 13 LOCKS DOWN DEPENDENCIES, 12.65.0 FIXES FACTORY EDGE CASES

By RepoJournal · Filed 06:55 UTC on August 6, 2026 · About Laravel

3 people shipped this

Lucas Michot @lucasmichot 3 cited

github-actions[bot] @github-actions[bot] 1 cited

Mohamed Said @themsaid

Laravel's next major version is raising minimum dependency versions to eliminate 37 security vulnerabilities that could slip past composer update --prefer-lowest.

The 13.x branch just merged aggressive dependency bumping [1] that closes a critical audit gap: while normal composer update passes security checks, the prefer-lowest resolution strategy was still installing vulnerable packages. Lucas Michot's fix raises minimums across several packages to their first patched versions, turning a silent pass into actionable findings. Meanwhile, v12.65.0 shipped four targeted fixes [2] including a critical Factory::insert() correction for zero counts and schedule list timezone handling. The same PR cycle also landed test suite cleanups [3] [4] converting outdated expectException patterns to the cleaner expectExceptionObject approach, shedding boilerplate ahead of PHPUnit 13.2's coming deprecations. A weekly composer audit workflow now runs across the full PHP/stability matrix, catching newly published advisories before they hit your builds [1].

Action items

→ If on 12.x: upgrade to v12.65.0 immediately for Factory and schedule fixes laravel/framework [immediate]
→ For 13.x development: pull the minimum version bumps to stay ahead of supply chain risk laravel/framework [plan]
→ Monitor 13.x test refactors if you maintain custom test suites using deprecated expectException patterns laravel/framework [monitor]

References

[1] [13.x] Bump minimum versions (#61033) laravel/framework
[2] v12.65.0 ↗ laravel/framework
[3] Simplify remaining exception expectations ↗ laravel/framework
[4] [13.x] Simplify most of the exceptions expectations ↗ laravel/framework

Quick answers

What shipped in Laravel on August 6, 2026?: Laravel's next major version is raising minimum dependency versions to eliminate 37 security vulnerabilities that could slip past composer update --prefer-lowest. In total, 13 commits, 12 pull requests, and 1 releases landed.
Who contributed to Laravel on August 6, 2026?: 3 developers shipped this update, including Lucas Michot, github-actions[bot], and Mohamed Said.
What were the notable Laravel updates?: [13.x] Bump minimum versions (#61033), v12.65.0, and Simplify remaining exception expectations.

LARAVEL 13.24.0 SHIPS WITH ELOQUENT QUERY IMPROVEMENTS AND CRITICAL ARR::FORGET() FIX

Laravel framework v13.24.0 arrived with modelKeys() support, a new array_keys validation rule, and a critical fix for Arr::forget() that was removing the wrong nested elements.

php 28 shipped

@laravel Aug 4

AUTOMATIC EAGER LOADING EXITS BETA IN LARAVEL 13

Laravel's automatic eager loading feature is shedding its beta label, signaling Taylor Otwell's confidence that the optimization is production-ready.

php 7 shipped

@laravel Aug 3

TAYLOR PATCHES QUEUE LOCK BUG AS LARAVEL TIGHTENS COLLECTION PERFORMANCE

A critical fix for ShouldBeUniqueUntilProcessing jobs prevents newer dispatches from being orphaned when retries fail, while the framework cuts redundant collection passes across map/filter chains.

php 57 shipped

@laravel Aug 2

PINT 1.30.3 FIXES DIRECTIVE TRAILING COMMAS

Laravel's code formatter shipped a patch overnight that cleans up a long-standing formatting edge case in PHP directives.

php 4 shipped

Elsewhere on the wire

AI Agents Aug 6

LANGCHAIN HARDENS ANTHROPIC TOOL CALLING AND GIT CREDENTIALS AS OPENHANDS SHIPS 1.10.0

LangChain fixed a critical credential leak in evaluation runs while Anthropic tool schemas get proper fallback handling, as three major agent frameworks push releases across the ecosystem.

ai-agents 54 shipped

Local LLMs Aug 6

OLLAMA FIXES KV CACHE CORRUPTION, LLAMA.CPP HARDENS FILE SEARCH, VLLM KILLS MOE LEGACY CODE

Ollama patched a critical cache corruption bug that corrupts lazy snapshots during multi-request prefills, while llama.cpp hardened Windows junction traversal and vLLM removed 14 hardcoded MoE shards across quantization methods.