Laravel Framework 13.31.0 introduces significant fixes and new features around queue handling, Redis cluster safety, and session guard stability. The new totalSize method on the Queue and a Mercure broadcast driver are notable additions. Fixes address previously crashing Str::camel() with multibyte characters, collapseWithKeys() with string keys, and errors in SessionGuard::userFromRecaller() when getAuthPassword() returns null. FilesystemAdapter now accepts a filesystem instance in copyToDisk() and moveToDisk(). Also, PHP 9 compatibility is improved by adding missing SessionHandlerInterface::create_sid() implementation.

Inertia.js v3.7.1 and inertia-laravel releases v3.3.4 and v2.0.27 address escaping < characters in the initial page JSON to prevent potential XSS vectors. Inertia also reverts a previous SSR CSS link URL origin preference and improves user experience by clearing prefetch timers and handling aborted view transitions.

Livewire's v4.4.4 patch resolves several hydration issues with nested reactive components and fixes exceptions thrown by attribute forwarding. It also updates Alpine.js to 3.17.2, adds support for custom x-cloak variants, and improves island rendering and browser event origins handling.

Filament 5.8.0 and 4.13.0 focus on new features like deferred schema loading, persistent table grouping in user sessions, reusable multi-factor challenge classes, and improvements in RichEditor. Several UI fixes and enhancements for action modals and sidebar behavior are included, with ongoing translation and dependency updates.

Laravel Boost v2.8.1 enhances MCP config handling (treating whitespace-only config files as new), preserves SQL literals during table prefixing, and refines browser log path configuration. It also introduces rule recording on demand and improves detection for MCP servers ignoring commented entries.

Laravel Echo v2.5.0 adds a Mercure connector and upgrades tooling and dependencies (Node, axios, TypeScript, Vitest) alongside CI improvements.

Laravel MCP v0.9.5 adds OAuth client logo and URI fields.

Other notable merges: Fortify introduces a timing-based username enumeration prevention via a timebox; Envoy adds Guzzle 8.x support; Valet improves detection of PHP versions installed from non-core Homebrew taps; and the Laravel AI package enhances stream handling and request timeouts configuration.

Overall, this batch focuses heavily on stability improvements, PHP 9 compatibility, incremental new features for queues and broadcasts, security in JSON payload escaping, and frontend hydration fixes. Keep an eye on potential PHP 9 session handler impacts and update client-facing packages to benefit from improved XSS protections and hydration consistency.