Nils Adermann (@naderman)

Mon, Nov 2

First social media where we run separate @composer and @packagist accounts now, wonder what we should get up to with these 🤔

PCPackagist Conductors@packagist3d

📦📦📦📦📦📦📦📦📦📦📦📦

Rob @rtconner3d

Make them fight!

Fri, Oct 30

Nils Adermann @naderman6d2015b98

Can't stop. Won't stop.

NANils Adermann@naderman6d

Update to composer 2.11!

Md. Khorshed Alam @robelsust5d

Bumped our local machines and CI runners to Composer 2.11 this morning. Crazy how fast dependency resolution and audit checks run now compared to the old Composer 1 days.

Gary Hockin @GeeH5d

Very phalic coffee there Nils

nunomaduro @nunomaduro6d

wait, where are you? in lisbon?

Nils Adermann @naderman6d4506068

Update to composer 2.11!

Nils Adermann @nadermanquoted6d

Can't stop. Won't stop.

nunomaduro @nunomaduro6d

dudeeeeeeee 😋

Pauline Vos @paulinevos6d

give me.

Fri, Oct 23

Nils Adermann @nadermanOct 2380b5b39

Had to laugh about this one a few times today already. Unfortunately don't know the author

Audun @xqusquotedOct 24

This will be my answer next time my 5 year old asks.

Eエ

Emilien エミリアン @EmilienKoppquotedOct 23

Very very funny one

Pauline Vos @paulinevosOct 23

my fav 4 meme is defo the olive one. I should probably post it on here

Nils Adermann @nadermanOct 234473ff6

Set session.upload_progress.enabled=0 till next PHP release to block an unlikely RCE vector (CVE-2026-115560). Already recommended for CVE-2026-109619 on Wednesday, keep it disabled. Only apps with non-default serialize_handler switching it to "php" at runtime can be affected.…

php.netPHP: News Archive - 2026PHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.

Ben James @benjam-esquotedOct 24

Heads up

Md. Khorshed Alam @robelsustOct 24

Invaluable tip straight from @naderman—flipping session.upload_progress.enabled=0 in php.ini is such an easy, zero-downtime mitigation while waiting on upstream distro packages.

Ibrahim Aboubacar Ibrahim @Ibrahim-AboubacarquotedOct 23

Important notice ⚠️

Tue, Oct 20

Nils Adermann @nadermanOct 2052ce81d

The PHP security team would like to give advance notice of an upcoming security release. It is scheduled for Wed, Oct 21st 2026 at 14:00 UTC. It addresses two critical vulnerabilities, both rated CVSS v4.0 9.2. All PHP users are encouraged to prepare to update. Earlier release…

Nils Hitze @nhitzeOct 22

Good job everyone

Bennett @bennettblackquotedOct 21

Should be super simple for those of us on Laravel Cloud & Laravel Forge 🤞

Stephen Rees-Carter @valorinquotedOct 21

Something tells me I'm not getting much sleep tonight. This drops at midnight for me. I'll try and keep Securing Laravel updated with any details I'm aware of: https://securinglaravel.com/laravel-security-notice-critical-php-security-release/