Introducing Prereview for @phpstorm Review local changes: - human review: add inline comments like on GitHub - AI review: Codex + Claude Code review Then copy as prompt for your agent github.com/mnapoli/php...

Got secrets in local `.env`? Afraid of a compromised dependency or agent reading your filesystem? I built dotlock: - store secrets encrypted in `.env.secrets` - decrypted on the fly via `php artisan dev` github.com/mnapoli/dot...

GitHub - mnapoli/dotlock: Secure secrets for local Laravel development

Secure secrets for local Laravel development. Contribute to mnapoli/dotlock development by creating an account on GitHub.

github.com

If this benchmark is to be trusted, current frontier is: - grok 4.5 (high): cheap + fast - opus 5 (medium): best - fable 5 (high): if you're feeling fancy and forget the rest. Now time to see if Opus 5 is really that good. Source: cognition.com/frontiercode

yessss

I tried Fable extensively, I am blown away. Daily tasks are handled well, better than Opus but nothing too crazy. Complex tasks, risky features, etc -> Fable is insanely good. It codes better than

3 nice Bref updates: - zero-downtime deploys for website assets - public storage on S3 made simple - osls 4.0: resolved deprecations, hardened, supports SSO

Best job in the world… I hope the reports of its death are greatly exaggerated

I'm starting to really like Cursor automations: - CI broken on main -> create PR - Sentry error -> create PR - Review 1 random file every night -> post bugs found in Slack - Watch for new PHP releases (for Bref upgrades) etc.

Introducing VibePHP, a next-gen PHP runtime that runs on vibes and supports generics, async/await and more 🌀 github.com/mnapoli/vib... 🌀

Graphed my AI spend since 2024 lately it's mostly Cursor (main) + Claude, with a bit of OpenAI for ChatGPT and Gemini for specialized OCR

I rewrote externals.io to Laravel! (runs with Octane on Bref) 50% of requests under 5ms, p90 is 40ms 🚀 2.5M req/mo, costs: ~$2.5/mo + $11 for the database, staging costs $0 Open source on GitHub: github.com/mnapoli/ext...

GitHub - mnapoli/externals: Opening PHP's #internals to the outside

Opening PHP's #internals to the outside. Contribute to mnapoli/externals development by creating an account on GitHub.

github.com

Pest browser tests are way more insane than I thought. Classic browser tests hit a real server. Instead, Pest starts an HTTP server on the fly (random port) in the _same_ process as the test, and points chrome headless to it - no server to start

Conferences: steal this idea from Laravel Live Japan 🙏 no lunch buffet, lunch is outside with optional "lunch pairing" (groups of 4 ppl) - solo attendees meet people instead of eating alone - simpler org and cheaper tickets - eat better food (and local food when traveling)

I’m afraid this is just getting started. Supply chain hygiene is needed more than ever.

Socket@socket.dev · 2mo ago

🚨 Supply chain attack on the Laravel Lang organization: 700+ historical versions across multiple community-maintained Laravel Lang packages were compromised with an RCE backdoor, including: laravel-lang/lang laravel-lang/http-statuses laravel-lang/attributes Laravel-Lang/actions

I have a Laravel app running serverless with Bref and generating PDF via chrome on Lambda. I added X-Ray to visualize it: 1 - the HTTP route (Laravel controller) invokes the pdf function synchronously and passes it a URL to render

I just realized that Laravel doesn't recognize "prod" (env name) as _production_ New Bref docs to address it: bref.sh/docs/larave...

Laravel environments – Bref

Configure Laravel environments and deployment environments with Bref.

bref.sh

I'm rewriting externals.io to Laravel, it's long overdue: github.com/mnapoli/ext...

Rewrite to Laravel by mnapoli · Pull Request #225 · mnapoli/externals

Rewrite from the PHP-DI + Bref/Micro framework to Laravel 13 on PHP 8.5. UI unchanged. Production deploy steps SSM params (one-time): add /externals/app_key with a fresh base64:… value (php artisa...

github.com

L'IA a débarqué dans le quotidien des devs, il est dont évident que le Forum PHP 2026 en aura au programme. Mais quels sont les axes qui vous intéressent le plus autour du sujet ? Partagez avec nous vos attentes, vos envies, vos idées tout comme vos craintes, dans ce sondage anonyme.

Sondage IA générative - Forum PHP 2026

L’intelligence artificielle (LLM, Agents, etc ) prend chaque jour de plus en plus d’importance dans le quotidien des devs. Visant toujours à mieux accompagner la communauté dans l’évolution du…

buff.ly

I may have picked the wrong time to try Cursor again but I'm very pleasantly surprised! - very good app - picked up my Claude Code skills/commands - one subscription, all models - local projects, worktrees, cloud agents, all in one

New UI in Bref Cloud to go through Laravel failed jobs: list, retry, clear… bref.sh/cloud

I've been deep into genealogy research for the past year. As I collect more info, I want to render each family in my tree as a nice diagram. I built a free website that builds family trees and exports as images: family-tree-maker.mnapoli.fr It also works with Claude/ChatGPT via MCP

Family Tree Maker — minimalist family tree diagrams

Create and share minimalist family tree diagrams. Web UI, HTTP API, and MCP server for ChatGPT & Claude — free, no signup.

family-tree-maker.mnapoli.fr

Updated to my /address-pr-review skill: - fixes are automatically pushed to the PR - threads are marked as resolved (unless Claude disagrees: it will explain why) Btw this skill is awesome to let Claude review and other Claude fix, highly recommend github.com/mnapoli/ski...

GitHub - mnapoli/skill-address-pr-review: Claude skill that fixes PR comments and CI failures

Claude skill that fixes PR comments and CI failures - mnapoli/skill-address-pr-review

github.com

Configuring Bref to deploy Laravel storage S3 buckets got much simpler. S3 is simple, but large file uploads straight to S3 requires: - enabling S3 ACLs (deprecated feature, but Laravel still uses it) - enabling cors The new settings make it much simpler, here's a before/after.

I wrote a detailed blog post: mnapoli.fr/running-gith...

Running GitHub Actions on a Mac Mini

I've been hitting the 2,000 free minutes/month limit on GitHub Actions for my private repos. Instead of paying for more minutes, I set up self-hosted runners on my Mac Mini M4 running as a server at home. CI jobs are now 4x faster and I have unlimited minutes.

mnapoli.fr

Matthieu Napoli@mnapoli.bsky.social · 4mo ago

I moved my GitHub Actions to runners on my Mac Mini, my CI just got muuuch faster. That works for me as a solo dev, I have 4 runners (could probably add 4 more). For teams I wouldn't recommend it tbh, I'd look into Depot CI or Runs-On, that'd make much more sense.

I moved my GitHub Actions to runners on my Mac Mini, my CI just got muuuch faster. That works for me as a solo dev, I have 4 runners (could probably add 4 more). For teams I wouldn't recommend it tbh, I'd look into Depot CI or Runs-On, that'd make much more sense.

good thing I posted, I'm changing to this:

Matthieu Napoli@mnapoli.bsky.social · 4mo ago

Instead of bloating environment variables, I've created an `envMap()` helper in Laravel config. This is for values that : - are not secrets - have hardcoded values depending on the environment Thoughts?

Instead of bloating environment variables, I've created an `envMap()` helper in Laravel config. This is for values that : - are not secrets - have hardcoded values depending on the environment Thoughts?

When you create a private network (VPC) with Bref Cloud, you can now copy the IP addresses used for outgoing traffic. e.g. if you need to configure an API to only accept traffic from your app's IP address

with all the supply chain attacks, I'm pushing code to GitHub the secure way

Released exspec 0.3: - switched from Playwright MCP to CLI -> faster, less tokens - claude runs the specs as test, but sometimes the spec is not clear -> claude now suggests recommendations for confusing tests - more efficient, more logs, more reliable github.com/mnapoli/exs...