Laravel
dates

Make Carbon immutable by default

One line in a service provider makes now() and every date attribute return CarbonImmutable, so addDay() stops changing the date you passed in.

October 16, 20261 min read

Carbon mutates in place: $due = $start->addDays(7) also moves $start, which is the kind of bug that shows up only in a report three weeks later. CarbonImmutable returns a new instance from every call.

use Carbon\CarbonImmutable;
use Illuminate\Support\Facades\Date;
 
public function boot(): void
{
    Date::use(CarbonImmutable::class);
}

After that, now(), today() and model attributes such as created_at are immutable. Code that relied on mutation, for example $date->addDay() on its own line, needs the result assigned back: $date = $date->addDay().

New

Laravel
rate-limiting
security
http

Count only the responses you choose in a rate limit

Limit::after() decides after the response which requests count: only 404s for someone guessing ids, and never 422s, so a user fixing a form does not spend their own limit.

Published on: October 19, 2026

1 min read New

Laravel
cache
concurrency

Lock the rebuild, not the read

Wrap the expensive rebuild in Cache::lock() so one request fills the key while the others wait a moment and read the result.

Published on: October 19, 2026

1 min read