Vulnerabilities & updates

Node.js 25.4.0 (Current)

Krill 0.15.1 ‘Contains Adult Language’ Released

We have just published the latest release of Krill, versions 0.15.1 ‘Contains Adult Language.’ Krill is a daemon for running delegated RPKI, featuring a Certificate Authority and a publication server that allows you to create and publish signed statements about routing intent. This release fixes a bug introduced …

GitLab Patch Release: 18.8.1

On January 19, 2026, we released versions 18.8.1 for GitLab Community Edition and Enterprise Edition. These versions resolve a number of regressions and bugs. This patch release does not include any security fixes. GitLab Community Edition and Enterprise Edition 18.8.1 Backport: Release AI Catalog External Agents Backport of ‘Fix summarize review prompt version for DAP Duo Code Review’ Backport of Disallow creation of new external agents Backport of Correct Code Review Flow history for beta Backport of ‘Fix incorrectly shown limited experience alert on pipeline security tab’ Backport of ‘Fix…

PHP 8.5.2 Released!

The PHP development team announces the immediate availability of PHP 8.5.2. This is a bug fix release. All PHP 8.5 users are encouraged to upgrade to this version. For source downloads of PHP 8.5.2 please visit our , Windows source and binaries can also be found . The list of changes is recorded in the . downloads page there ChangeLog

PHP 8.3.30 Released!

The PHP development team announces the immediate availability of PHP 8.3.30. This is a bug fix release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.30 please visit our , Windows source and binaries can also be found . The list of changes is recorded in the . downloads page there ChangeLog

PHP 8.4.17 Released!

The PHP development team announces the immediate availability of PHP 8.4.17. This is a bug fix release. All PHP 8.4 users are encouraged to upgrade to this version. For source downloads of PHP 8.4.17 please visit our , Windows source and binaries can also be found . The list of changes is recorded in the . downloads page there ChangeLog

Laravel Wayfinder: End-to-End Type Safety for PHP and TypeScript

Sync PHP and TypeScript automatically with Laravel Wayfinder, now in beta. Generate types, routes, and validation from your Laravel app.

PHP Velho Oeste 2026

The is a national-level conference that takes place annually in the West of Santa Catarina, Brazil, known as Velho Oeste(Old West). PHP Velho Oeste Knowledge + Networking In this event, several relevant topics will be covered, from the latest language updates to best development practices. You will have the opportunity to expand your PHP knowledge and stay up to date with the latest market trends. Date: May 29-30, 2025 Location: Unochapecó Noble Hall in Chapecó, Santa Catarina, Brazil. See how it was last year: . PHP Velho Oeste 2025 Follow us on social media: / / / . LinkedIn Instagram YouTu…

Python 3.15.0 alpha 5 (yes, another alpha!)

Note: 3.15.0a4 was accidentally built against from 2025-12-23 instead of 2026-01-13, so this 3.15.0a5 is an extra release correctly built against 2026-01-14...

Mitigating Denial-of-Service Vulnerability from Unrecoverable Stack Space Exhaustion for React, Next.js, and APM Users

Node.js 22.22.0 (LTS)

Node.js 25.3.0 (Current)

Node.js 24.13.0 (LTS)

Node.js 20.20.0 (LTS)

Bun v1.3.6

Fixes 45 issues (addressing 125 👍). Bun.Archive API for creating & extracting tarballs with gzip compression, Bun.JSONC for parsing JSON with comments, metafile & files options in Bun.build for bundle analysis and virtual files, Response.json() 3.5x faster, 15% faster async/await, 30% faster Promise.race, 20x faster Bun.hash.crc32, faster Buffer.indexOf/includes with SIMD, HTTP/HTTPS proxy support for WebSocket, S3 Requester Pays support, --grep flag for bun test, fake timers now work with @testing-library/react, SQLite updated to 3.51.2, and numerous Node.js compatibility improvements.

Tuesday, January 13, 2026 Security Releases

Python 3.15.0 alpha 4

Edit: This 3.15.0a4 was accidentally built against \ from 2025-12-23 instead of 2026-01-13, so 3.15.0a5 is an extra release correctly built against 2026-01-1...

Rotonda 0.5.1 released

We are delighted to announce a new minor release of Rotonda, version 0.5.1. Rotonda is a programmable, analytical BGP engine, that allows users to gather routing data from various sources, such as routers, routing software and files, and over various protocols, such as BMP, BGP and MRT. Rotonda …

Laravel December Product Releases

See what you can do with our latest product releases: set up billing alerts in Laravel Cloud, and ship faster with framework, Forge, and Nightwatch updates.

Type inference of all constructs and the next 15 months

Today we celebrate 15 years since Elixir's first commit! To mark the occasion, we are glad to announce the first release candidate for Elixir v1.20, which performs type inference of all language constructs, with increasing precision.

Building with Laravel for Impact. The Artisan of the Day Is Hugo Monteiro.

Hugo Monteiro, co-founder of Spotahome, builds internal Laravel systems and encourages developers to learn, connect, and create with purpose.

Building Scalable Laravel Systems. The Artisan of the Day Is Lucas Giovanny.

Laravel engineer Lucas Giovanny leads teams at Worksome, speaks at Laracon events, and builds scalable backend systems while growing the community in Portugal.

Build a dinosaur runner game with Deno, pt. 3

Adding obstacles, collision detection and game mechanics to our example browser-based game.

Open Source as a Way of Giving Back: The Artisan of the Day Is Daniel Petrica.

Daniel Petrica shares how Laravel shaped his career, from real estate portals to new SaaS projects and open-source contributions as a full-time freelancer.

PHP 8.1.34 Released!

The PHP development team announces the immediate availability of PHP 8.1.34. This is a security release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.34 please visit our , Windows source and binaries can also be found . The list of changes is recorded in the . downloads page there ChangeLog

PHP 8.4.16 Released!

The PHP development team announces the immediate availability of PHP 8.4.16. This is a security release. All PHP 8.4 users are encouraged to upgrade to this version. For source downloads of PHP 8.4.16 please visit our , Windows source and binaries can also be found . The list of changes is recorded in the . downloads page there ChangeLog

Next.js 16.1

Next.js 16.1 introduces Turbopack file system caching for development, a new bundle analyzer, and easier debugging in Node.js.

PHP 8.2.30 Released!

The PHP development team announces the immediate availability of PHP 8.2.30. This is a security release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.30 please visit our , Windows source and binaries can also be found . The list of changes is recorded in the . downloads page there ChangeLog

PHP 8.3.29 Released!

The PHP development team announces the immediate availability of PHP 8.3.29. This is a security release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.29 please visit our , Windows source and binaries can also be found . The list of changes is recorded in the . downloads page there ChangeLog

PHP 8.5.1 Released!

The PHP development team announces the immediate availability of PHP 8.5.1. This is a security release. All PHP 8.5 users are encouraged to upgrade to this version. For source downloads of PHP 8.5.1 please visit our , Windows source and binaries can also be found . The list of changes is recorded in the . downloads page there ChangeLog

How We Built Laravel Wrapped

Learn how Laravel's team built Laravel Wrapped in two weeks: aggregating data across products, generating 55K AI summaries, and shipping with Cloud's speed.

Bun v1.3.5

Fixes 32 issues (addressing 25 👍). Bun.Terminal API, compile-time feature flags, improved Bun.stringWidth accuracy, V8 C++ value type checking APIs, Content-Disposition support for S3 uploads, environment variable expansion in .npmrc quoted values, and numerous bug fixes & node.js compatibility improvements

International PHP Conference Berlin 2026

is the world's first PHP conference and stands since more than a decade for top-notch pragmatic expertise in PHP and web technologies. At the IPC, internationally renowned experts from the PHP industry meet up with PHP users and developers from large and small companies. Here is the place where concepts emerge and ideas are born – the IPC signifies knowledge transfer at highest level. The International PHP Conference Basic facts: Date: June 8 – 12, 2026 Location: Maritim ProArte Hotel Berlin, Berlin or Online Highlights: 60+ best practice sessions 50+ international top speakers PHPower: Hands…

Python 3.15.0 alpha 3

This is an early developer preview of Python 3.15 www.python.org/downloads/release/python-3150a3/ Major new features of the 3.15 series, compared to 3.14 Pyt...

Build a dinosaur runner game with Deno, pt. 2

This series of posts will guide you through building a simple game using Deno. This post sets up the game loop, user controls and basic game physics.

Building with Laravel for Ecommerce. The Artisan of the Day Is Gulzar Ahmed.

Gulzar Ahmed, CTO of Hyperzod, builds large-scale quick commerce systems using Laravel, and mentors devs while contributing to the community and open source.

Next.js Security Update: December 11, 2025

Two additional vulnerabilities have been identified in React Server Components. Users should upgrade to patched versions immediately.

Node.js 24.12.0 (LTS)

Deno 2.6: dx is the new npx

This release includes `dx` for running package binaries, more granular permissions, source phase imports, faster type checking with `tsgo`, native source maps, `deno audit`, and much more.

New OpenPGP keys for release signing and vulnerability reporting

We are performing a routine roll of our software signing and vulnerability reporting OpenPGP keys. From January 1st 2026, releases of ldns, NSD and Unbound will be signed with the following OpenPGP key: User ID: NLnet Labs releases signing key G2 <releases@nlnetlabs.nl> Key ID: A144 323D EAAC DF45 …

Build a dinosaur runner game with Deno, pt. 1

This series of posts will guide you through building a simple game using Deno. Each post corresponds to a stage in the development process, gradually introducing new features and concepts.

Bun v1.3.4

Fixes 194 issues (addressing 412 👍). URLPattern API, Fake Timers for bun:test, Custom Proxy Headers in fetch(),console.log %j format, http.Agent connection pooling fix, Standalone executable config loading changes, SQLite 3.51.1, and numerous bugfixes for bun:test, Node.js compatibility, Windows, Web APIs, bun install, and more

Writing Clean Code with Laravel: The Artisan of the Day Is Jamie Peters.

Jamie Peters shares how discovering Laravel in 2018 transformed his career, sharpened his coding practices, and led him to his role at Jump24 in the UK.

Python 3.14.2 and 3.13.11 are now available!

Two more, just three days after the last? Yes! We found some regressions, so here’s an expedited pair of releases. They also come with some bonus security fi...

NSD 4.14.0 released

Today, we released version 4.14.0 of the authoritative DNS nameserver NSD. NSD 4.14.0 comes with refactored RDATA storage, reducing the memory footprint of NSD. You can get source packages of this version from the downloads page . Related links: NSD project page Direct Download