PHP

It's survey time! The first official #State_Of_PHP Survey is curently open. https://lnkd.in/eq8smrNX Hey PHP people! How is PHP working for you? The PHP Foundation partnered with PhpStorm by JetBrains to make this survey. We want to hear from PHP developers directly: what works, what is painful, and what you think PHP should focus on next. You can take the survey here: https://lnkd.in/eq8smrNX It will be open until July 31. It takes around 15 minutes. Later this year, we will publish aggregated results. We also will share the raw anonymized dataset, so anyone in the PHP community can look at the data and make their own analysis. Please help us reach more PHP developers. Share the survey with your colleagues, friends, or communities where PHP developers are. More responses means better picture of what is important for PHP users! 💜 🐘

📌 Stable versions on Packagist are now immutable. Once a version is published, the git commit it points to can no longer change. Until now, deleting and re-creating a tag silently rewrote the published version. Maintainers do this to fix a release minutes after tagging it, assuming nobody has installed it yet. In reality, mirrors, security scanners, and automated dependency updates pull new versions within seconds, and after a retag two variants of the same version number are in circulation with no way to tell them apart. The same mechanism lets an attacker with push access move a trusted, widely installed tag onto malicious code. What changes: • Retags of stable versions are blocked, the published version keeps its original commit reference • Maintainers see a warning on the package page and are notified by email • Deleted versions are no longer erased without a trace, they are marked with a reason and can be recovered if unmodified • All events are recorded on the public transparency log for the package If a release goes out wrong: version numbers are infinite, publish the fix as the next version, e.g. 1.2.3 can be republished as 1.2.3.1. Link in the comments. #php #phpc #composerphp

In case you missed it this week, we launched our first State of PHP survey together with PhpStorm, a JetBrains IDE 🐘. 🚀 This initiative aims to build a clearer picture of today’s PHP ecosystem – from frameworks and tooling to developer experience and AI adoption. Whether you’re a longtime PHP developer or just getting started, your perspective matters. Take the survey and help us map the herd 👉 https://lnkd.in/eWv36RWS  #StateOfPHP #phpcommunity

Last year we reached 55k developers. This year I want that number to be double: tomorrow I'm hosting the second edition of PHPverse; the free online conference where we celebrate #PHP, showing the world what a thriving community it is! Here's all the details, I hope you can come! (And a repost is appreciated!) https://jb.gg/7ne1ba

I'll be speaking about #Drupal at #PHPVerse 2026 on June 9th! In my session, we'll explore what's driving Drupal's resurgence, from component-driven development and the new Canvas page-building experience, to Drupal CMS and its rapidly growing marketplace ecosystem. We'll look at how modern PHP, and AI-powered workflows are helping teams build faster without sacrificing quality, or flexibility. This is a free virtual event that you won't want to miss! I'll be going on at 4:25pm CEST / 10:25am ET https://lnkd.in/edkAwBmm

🚨 Composer 2.9.6 and 2.2.27 are out with fixes for CVE-2026-40261 and CVE-2026-40176, both command injection issues in the Perforce driver. Run composer self-update now. Both vulnerabilities are located in Composer's Perforce VCS driver and involve insufficient escaping of values used in shell command construction. They can be exploited on any system even if you don't have Perforce installed. No exploitation detected on Packagist-org and Private Packagist. #php #phpc #composerphp

Thanks to all our sponsors for supporting The PHP Foundation in 2025! Your support directly funds the people and projects moving PHP forward. Together we helped: - Ship PHP 8.5 - Release PIE 1.0 - Support FrankenPHP - Launch the PHP MCP SDK with Anthropic and Symfony - Secure a second Sovereign Tech Agency investment for the Streams layer rework …and much more across the PHP ecosystem In 2026 we want to continue this work, hire a dedicated Executive Director, and grow the core team. If your company relies on PHP, please consider sponsoring the foundation in 2026: https://lnkd.in/exMwm6cY

PHP 8.5 Released! 🎉 In this new release, we have: – URI Extension – Pipe Operator – Clone With – A new #[\NoDiscard] attribute – Closures and first-class callables in constant expressions – Persistent cURL share handles Read all about it: https://lnkd.in/eiW3cFk9

After four rewarding years as Executive Director of The PHP Foundation, I'll be stepping down in early 2026. I'm proud of what we've achieved: building the Foundation from the ground up, expanding our team, and strengthening collaboration across the PHP ecosystem. Official announcement: https://lnkd.in/e-QHDWcK If you're passionate about open source and excited about the future of PHP, we're looking for a new Executive Director to carry the mission forward. Thank you to everyone in the PHP community for the trust and collaboration over these years. I'll continue on the Foundation's Board and look forward to supporting what's next.

The results are in! The winner of the PHP 8.5 Release Page Design Contest is Nuno Guerra 🏆🎉 Huge thanks to everyone who submitted their ideas and participated in the voting, and to our prize sponsors JetBrains and Tomas Votruba for supporting this community initiative 💜 See the full results and next steps: https://lnkd.in/eeKjAF52