Joe Tannenbaum
@joe.codes
Full-stack developer at @laravel.com Currently fiddling with tidyinbox.com and termsky.app joe.codes/links
I've made the code for my talk at Laracon US public: github.com/joetannenbau... (slides + remote control) github.com/joetannenbau... (attendee view) Heavy Claude assist on this, was going to hand craft the whole thing but life was really life-ing in the 6 weeks leading up to the conference
GitHub - joetannenbaum/laracon-us-2026-admin
Contribute to joetannenbaum/laracon-us-2026-admin development by creating an account on GitHub.
github.com
Laravel Doctor: First-Party Diagnostics for Your Application posted by @ylynfatt.bsky.social laravel-news.com/laravel-doct...
Laravel Doctor: First-Party Diagnostics for Your Application
Announced at Laracon US 2026, Laravel Doctor is a new first-party package that adds an artisan doctor command, running diagnostics against your application's en…
laravel-news.com
CPX: The Composer Package Executor for PHP laravel-news.com/cpx-the-comp...
CPX: The Composer Package Executor for PHP - Laravel News
cpx 2.0 is a full rewrite of the Composer package executor. It runs a command from any Composer package without adding it to your project, prefers the binaries your project already pins, and returns JSON when an AI agent is driving it.
laravel-news.com
It's heeeeere!! Three months of work has led to this: Introducing Voxacon! A multiplayer 3D virtual Laracon watch party, together with @tighten.com's annual puzzle (with prizes!) Check out a writeup and a quick video preview: tighten.com/insights/int...
Introducing Voxacon, the 2026 Tighten Laracon Puzzle
Every year, Tighten builds a puzzle for Laracon. We’ve run typing challenges, coding challenges, and, last year, an entire game-building challenge. It's a fun chance for us to build something for th...
tighten.com
Scaffold Packages with the `laravel package` Command in Laravel Installer v5.31.0 posted by @ylynfatt.bsky.social laravel-news.com/laravel-inst...
Scaffold Packages with the `laravel package` Command in Laravel Installer v5.31.0 - Laravel News
Laravel Installer v5.31.0 introduces a command to scaffold Laravel packages, along with environment variable propagation for node-less setups and automated PHP version matching for GitHub Actions.
laravel-news.com
Laravel Installer v5.31 includes a new command: 𝚕𝚊𝚛𝚊𝚟𝚎𝚕 𝚙𝚊𝚌𝚔𝚊𝚐𝚎 This new command kicks off an interactive prompt that scaffolds out a Laravel package using our (new) (official) package skeleton: github.com/laravel/pack... Enjoy!
ICYMI: You can now switch repos easily from this new repo switcher tool!
Made a site that takes objects from wikipedia and turns them into endless I Spy > neal.fun/wiki-spy/
Gettin ril amped for Laracon US Just got that nervous/excited feeling in my bones
You can now limit open pull requests for users without write access to your repositories! github.blog/changelog/20...
The video from Wednesday’s PHP×Philly meetup is up! “After Shai-Hulud: Supply Chain Security for PHP Engineers” by Mike Priscella youtu.be/hhLReAGoFgs?...
After Shai-Hulud: Supply Chain Security for PHP Engineers - Mike Priscella - PHP×Philly
YouTube video by Chris Morrell
youtu.be
📢 Laravel OSS Changelog 2026.05 🔤 Font optimizations, including a @𝚏𝚘𝚗𝚝𝚜 Blade directive and Vite integration 🔒 𝚙𝚊𝚜𝚜𝚠𝚘𝚛𝚍𝚛𝚞𝚕𝚎𝚜 string conversion 🤖 Laravel AI sub-agent tools 🔄 New 𝚙𝚘𝚕𝚕 modes in Inertia 💾 Optional disk storage for large SQS payloads All that (and more!): laravel.com/docs/changelog
Changelog | Laravel 13.x - The clean stack for Artisans and agents
Laravel is a PHP web application framework with expressive, elegant syntax. We've already laid the foundation — freeing you to create without sweating the small things.
laravel.com
Ever struggled to get heading tags right in includes/components? headingoffset could be the answer…
Not the first time someone has called me that cronotype.vercel.app/joetannenbaum
@joetannenbaum · Cronotype
View @joetannenbaum's commit-time rhythm.
cronotype.vercel.app
Yo dawg we heard you like managing managed queues so now you can manage your managed queues right from your terminal New in Laravel Cloud CLI v0.5.0: 𝚖𝚊𝚗𝚊𝚐𝚎𝚍-𝚚𝚞𝚎𝚞𝚎 :𝚌𝚛𝚎𝚊𝚝𝚎 :𝚍𝚎𝚕𝚎𝚝𝚎-𝚏𝚊𝚒𝚕𝚎𝚍-𝚓𝚘𝚋 :𝚏𝚊𝚒𝚕𝚎𝚍-𝚓𝚘𝚋𝚜 :𝚙𝚊𝚞𝚜𝚎 :𝚙𝚞𝚛𝚐𝚎 :𝚛𝚎𝚜𝚞𝚖𝚎 :𝚛𝚎𝚝𝚛𝚢-𝚏𝚊𝚒𝚕𝚎𝚍-𝚓𝚘𝚋 :𝚜𝚎𝚝-𝚍𝚎𝚏𝚊𝚞𝚕𝚝
the replacements.fyi site now lets you drop a package.json into it to see which dependencies can be replaced with native functionality, or more performant choices 🎉
🚨 Supply chain attack on the Laravel Lang organization: 700+ historical versions across multiple community-maintained Laravel Lang packages were compromised with an RCE backdoor, including: laravel-lang/lang laravel-lang/http-statuses laravel-lang/attributes Laravel-Lang/actions
Laravel Lang Compromised with RCE Backdoor Across 700+ Versi...
Laravel Lang packages were compromised with an RCE backdoor across hundreds of versions, exposing cloud, CI/CD, and developer secrets.
socket.dev
💥 just released a github action: `uppt` it aims to be a very simple, secure release workflow for maintainers that adheres to best security practices ⚪ trusted, staged publishing on npmjs.com ⚪ github environment protection ⚪ generated release PR + changelog ⚪ automatic release + publish on merge ✨
Today we're shipping new polling features to Inertia.js! ⏱️ usePoll() now accepts a mode option to control the behavior between requests.
1/ We are sharing additional details regarding our investigation into unauthorized access to GitHub's internal repositories.
Two years ago today I started at Laravel. I have never worked anywhere where I happily sit down at my desk to kick off the day. Feels like I'm getting away with something, having this much fun. I love this company, I love this community, I feel so grateful to be part of both. Love y'all ✌️
Heads up maintainers of packages, this is a big deal: github.com/orgs/communi...
npm granular access token invalidation to prevent supply chain attacks · community · Discussion #196340
As initially announced on npm’s X channel, we have invalidated granular access tokens with write access that bypass two-factor authentication. This action was taken to help prevent supply chain att...
github.com
🔑 We just shipped passkey support across all of our starter kit flavors! We also released two new packages: 𝚕𝚊𝚛𝚊𝚟𝚎𝚕/𝚙𝚊𝚜𝚜𝚔𝚎𝚢𝚜 for PHP @𝚕𝚊𝚛𝚊𝚟𝚎𝚕/𝚙𝚊𝚜𝚜𝚔𝚎𝚢𝚜 for JS Fortify also consumes the PHP package to make server-side setup trivial. Enjoy!
☁️ Shipped a few improvements to Laravel Cloud CLI's 𝚌𝚘𝚖𝚖𝚊𝚗𝚍:𝚛𝚞𝚗 over the weekend: ⌨️ If you are running the CLI from your Cloud app's local directory, you will now get autocompletion of your available artisan commands
