PHP 8.6 releases November 19, 2026, introducing partial function application for creating closures with placeholder arguments, a clamp() function for bounding values, a Duration class for precise time measurements, readonly property defaults, parameter doc comments, and a unified polling API for event-driven programming.
Laravel Vet is a PHP dependency audit tool in beta that shows code changes from composer updates before they're installed, similar to Rust's cargo vet. It uses AI coding agents to review package changes and maintains a trust record in vet.json, working with any PHP project and installing as a Composer plugin.
SecretGate is a self-hosted, framework-free PHP application for anonymous encrypted messaging. It uses client-side RSA-OAEP and AES-256-GCM encryption, ensuring the server can only store unreadable ciphertext, with ephemeral message expiry and no user tracking or data collection.
A store listing offers premium WordPress plugins, themes, and PHP scripts with activated licenses for $5 per item as of September 9, 2026.
Yac is a WordPress object cache extension that stores data in shared memory accessible to all PHP workers, eliminating the need for a separate cache server. It achieves ~19% faster page renders than Memcached by removing socket and network overhead, with no external infrastructure to operate or maintain.
U is a new programming language that transpiles PHP, JavaScript, and TypeScript to compiled C binaries, achieving 14K–70K requests per second compared to PHP's 800 req/s and Node's 2.4K req/s. The compiler catches null dereferences and capability violations that LLMs introduce 23–31% of the time, producing tiny, dependency-free binaries suitable for edge computing and resource-constrained environments.
WordPress Security Skills is a modular resource that teaches AI coding agents like Claude Code and Cursor to write secure WordPress code and audit plugins and themes. Users can install these Markdown-based skills in their projects to guide AI-generated code toward secure patterns, addressing common vulnerabilities like missing nonce checks and SQL injection.
A developer shares lessons learned from porting PHP's DOM extension, discovering that declaring interfaces without fully implementing them creates hidden obligations that only surface when user code subclasses the implementation. The post emphasizes testing both sides of abstractions and maintaining accurate documentation of limitations, as nine of fourteen documented "known limitations" were found to be incorrect or outdated.
A store listing WordPress themes, plugins, and PHP scripts available for $5 each with product license activation, posted September 9, 2026.