Plan
Upgrades and deadlines to schedule.
npm 12 stops running dependency install scripts by default
npm v12 became the default on July 8. Dependency lifecycle scripts, Git dependencies and remote URL dependencies are now opt-in.
TypeScript 7 is native and 8 to 12 times faster, but not a drop-in
TypeScript 7.0, the native port written in Go, shipped July 8. It has no stable programmatic API yet, and its new defaults change your tsconfig.
Laravel 13 is the line to be on
Laravel 12 stopped receiving bug fixes on August 13, 2026. Laravel 13 supports PHP 8.3 to 8.5, with security fixes until March 17, 2028.
npm's brutal year: the TanStack compromise and the ChainDrop worm
An attacker chained a pull_request_target workflow into 84 malicious TanStack versions, and a worm planted persistence in editor and AI tool config.
Next.js 16.3 is a free performance upgrade
Up to 90% less memory in long dev sessions, build caching on by default, and up to 22% more server-rendered requests under load.
Node 20 is end-of-life; Node 26 becomes LTS on October 28
Node 20 has been end-of-life since April 30, 2026. Node 24 moves to maintenance on October 20, and from Node 27 every release becomes LTS.
PHP support calendar: target 8.4 or 8.5 today
PHP 8.2's security fixes end on December 31, 2026, the same day PHP 8.4's active support ends.