Composer Security Update

This week, Composer had a security vulnerability reported (CVE-2021-29472) and a new version has been released to address this. Everyone should run `composer self-update` to get v2.0.13 which includes the fix.

From their announcement:

As a precaution after updating Composer we recommend you audit your composer.lock files to ensure they only contain URLs and none which start with -- , e.g. --config and could be considered command line options. Should you find any such URL values despite our belief that this vulnerability was not exploited in the wild, please contact us immediately by email to security@packagist.org.

In general we always recommend you review changes you make to your lock files to ensure no untrusted dependencies or external URLs are introduced to your application. Please note that Packagist.org is only a metadata server and package contents are downloaded from a location chosen by the package maintainers. Private Packagist will store copies of mirrored package contents, so Composer can download them from there, but the lock files will still contain the maintainers' original URLs for reference and as a fallback.

Password Validation Rule Object in Laravel 8
A new Password Rule object is coming to Laravel, which includes a rule for compromised passwords.

Laravel Scout V9 Adds MeiliSearch
The Laravel team released the next major version (v9.0.0) of Laravel Scout with support for the open-source search API MeiliSearch.

Laravel Pretty Routes Console Command
Pretty Routes for Laravel is a package to display Laravel routes in the console, but make it pretty.

Create Your Next Project's Readme With This Useful Tool
Readme.so is the easiest way to create a README.md file for your next project, created by Katherine Peterson.

Why you need a jsconfig.js when using VSCode
If you want to improve your developer experience when working in JavasScript with VSCode, you need to start adding a `jsconfig.json` file to all your projects.

Check if a Laravel request is from the CLI
There might be times where you need to know if a request to your Laravel app is coming from the CLI or from the web and the runningInConsole helper can tell you.

Tinkerwell now with Apple Silicon support
Tinkerwell has launched a new version that supports Apple Silicon and includes a lot of other great features.

Sponsor

Tinkerwell

This simple yet powerful desktop application allows you to run PHP code and quickly try out new ideas – all within the context of your application. Some of Tinkerwell features include:

• Built-in Laravel app. The quickest and easiest way to run code with Tinkerwell is via the built-in Laravel app. And it comes with a default Laravel project to get started right away.
   
• Remote via SSH. Quickly run any PHP code within your remote projects. This is done via an SSH connection that allows Tinkerwell to securely connect to your remote server.
   
• Local applications. Run your code within your own local PHP applications. Just open any local project to start tinkering with your code. This is where the real magic happens.

“I’ve pretty much used Tinkerwell every day since it was released.” - Taylor Otwell

Laravel Jobs

Laravel Full Stack Developer (Sr.)
KoreConX | Remote, Brazil, Argentina, Canada

Full Stack Engineer
Shelterluv | Remote, USA Only

Full Stack Laravel / Vue.js Developer
Postable | New York City (Remote possible)

Senior Laravel / VUE Developer (Remote)
Curotec | Remote

Senior Laravel Developer
ColorElephant | Remote

Mid/Senior Fullstack Laravel Developer
Townsend Music Ltd | Remote, UK Only

Midweight Front-end Software Engineer
elasticStage Ltd | 95% Remote, London UK

Senior Full-Stack Developer - Premio.io (Remote) 😎
Premio | Remote

Senior Software Developer
Office Test | London

Full Stack Laravel Developer
MedReportGuard | Remote, USA Only

Senior Software Engineer
Resonate Recordings | Remote, USA Only

Sr. Software Engineer (Fullstack - Vue, PHP, Laravel, AWS)
GRIN | Remote

Senior Full-Stack Software Developer
Mitech Integrated Systems Inc. | Toronto, Canada (local only)

Backend PHP Developer
ABOUT YOU GmbH & Co. KG | Hamburg, Germany

Lead Backend PHP Developer
ABOUT YOU GmbH & Co. KG | Hamburg, Germany

Web Developer (PHP)
Rebellion Developments | Oxford, Oxfordshire

Laravel Developer
Intiveo | Canada Only

Mid/Senior Laravel Developer
CareLineLive | London (flexible WFH)

Web Developer
Center for Rural Health | Grand Forks, North Dakota

Full Stack Laravel / Vue.js Developer at Postable
Postable | New York City

PHP developer
DIJ | "Remote, Netherlands Only", Apeldoorn

Senior Laravel / VUE Developer (Remote)
Curotec | Remote

Lead Developer
1 Atelier | Remote

Sr Laravel/PHP Developer
VOLTAGE, LLC | USA Only

Senior Laravel Engineer
Hawthorne Effect | Remote (USA only)

Post a job on LaraJobs and it'll be featured here in next week's newsletter. 

Community Links

Laravel 8.x Passport API Authentication Tutorial Example
www.codecheef.org

Vuex Complete Guide with Axios Api Call in Vue Js
www.codecheef.org

Advanced Laravel route parameters casting
butschster.medium.com

Update / Delete Related Models in Laravel using Model Events
www.youtube.com

How to Swap Items in an Array Using Laravel Macros
ashallendesign.co.uk

Destructuring in PHP
www.youtube.com

How to Store Multiple Select Values in Database using Laravel?
www.itsolutionstuff.com

Building a Constrained Textarea using Alpine.js
rappasoft.com

SPA Authentication using Laravel Sanctum and Vue.js
techvblogs.com

Quick tip: Laravel Redirect to Intended Page After Registration
tnt.studio

Create Your Own Custom Log File in Laravel
www.codecheef.org

Interfaces and Polymorphism in Object Oriented PHP - Interfaces Explained - Full PHP Course - PHP 8
youtu.be

Simplify your Laravel project with a folder-by-feature structure
jpkleemans.medium.com

Dow we really need to extend the Laravel's default Base controller?
www.youtube.com

Spotlight is a Livewire component that provides Spotlight/Alfred-like functionality to your Laravel application
github.com

Injecting extra data in the payload of queued jobs in Laravel
freek.dev

FlyClone
github.com

Laravel Model UUID - A package that lets you add uuid as primary key in your laravel applications
packagist.org

Validate input in Artisan commands
github.com

Build fast API-s in Laravel.
one2tek.github.io

QuickSnippets - Discover Programming Tips from Twitter
quicksnippets.dev

Tailwind color shades generator
tnt.studio

Eloquent Example: Group Data with Multiple Calculations [VIDEO]
www.youtube.com

Laravel E-shop: 3 Typical Eloquent Queries [VIDEO]
www.youtube.com

From the archive

Last Month

Lambo CLI for Quick Application Creation With Laravel and Valet
The new version of Laravel Lambo is now available. Automate repetitive tasks when creating new Laravel apps, now re-written in PHP. 

Major Heroicons Release Includes Vue/React Components and Figma Files
Heroicons hit a significant milestone with the release of v1.0, which brings some exciting features that'll make using Heroicons an excellent experience. 

Soap - A Laravel SOAP client that provides a clean interface for handling requests and responses
Laravel SOAP client provides a clean interface for handling requests and responses in your Laravel app. 

Quick Tip: Using the Laravel from() Testing Helper
When testing with Laravel, sometimes it's helpful to test that a user was redirected back to the page where they "submitted" the form from and Laravel from() is a helper for this. 

Laravel Eloquent Power Joins Package
Eloquent power joins is a package that adds some Laravel magic to your Eloquent joins. 

18 Tips to Optimize Your Laravel Database Queries
These 18 laravel performance optimization tips for optimizing database queries will help you skyrocket your laravel application performance. 

Prohibited Validation Rules in Laravel
Laravel 8 has three new "prohibited" validation rules. Let's walk through a few examples of where these rules are useful, and look at each one in more detail. 

Last Year

Horizon Statistics Dashboard for Laravel Nova
Nova Horizon is a package by the Appstract team, which provides Horizon statistics for Nova dashboards. 

Built-in PurgeCSS Comes To Tailwind v1.4
Tailind v1.4 has been released with new color opacity utilities, an IE 11 target mode, and built-in PurgeCSS support. 

RestQL Data Resolution Package for Laravel
RestQL is a data resolution package for your Laravel models by Gregori Piñeres, combining RESTful fundamentals with GraphQL principles. 

Sharing PHP-CS-Fixer rules across projects and teams
PHP-CS-Fixer is an open-source tool that can enforce, and detect violations of, PHP coding styles. With predefined rules, it allows you to have a strict coding style that is enforced by the tool so that you can spend time on more important things. 

Laravel 7.8 Released
The Laravel team released v7.8.0 with new takeWhile() and takeUntil() collection methods, along with all the latest new features, fixes, and changes in the 7.x branch. Let’s look at a few new features released in 7.8! 

Learning & Keeping Up To Date with Laravel – The Laravel Podcast
I had the pleasure of joining Matt Stauffer on the latest Laravel Podcast to talk about learning and keeping up to date with Laravel 

Tailwind v1.3 Adds New Space and Divide Utilities
Tailwind v1.3 was tagged this week with some really helpful additions. Space and divider utilities, inline-grid and flow-root utilities, transition-delay utilities, and more flexible container customization are just some of the new classes introduced in this update. 

Two Years ago

Testing Streamed Responses in Laravel
Let’s look at how Laravel helps us write controllers that force a user to download without creating a file on the server and how to write tests for streamed downloads. 

Building a flash message component with Vue.js and Tailwind CSS
In this tutorial, I am going to walk through how to build a custom flash message component using Vue.js and TailwindCSS. 

Allowing Users to send email with their own SMTP settings in Laravel
In a recent project, I needed a way to allow users to send emails with their SMTP credentials. The goal with this was to give all the outgoing emails a more personal touch and look like it came directly from an organization versus a generic one for the web app. 

Junges Laravel ACL
Junges Laravel ACL is a package by Mateus Junges that helps you to associate users with permissions and permission groups.