Laravel 12 stopped receiving bug fixes on August 13, 2026, according to the framework's published support policy. It will continue to get security fixes until February 24, 2027. Laravel 13, released on March 17, 2026, is now the only version receiving both bug fixes and security fixes. For businesses with Laravel applications, this is the point where an upgrade moves from optional to planned work.
What the support policy says
The Laravel 13 release notes state that every Laravel release gets 18 months of bug fixes and two years of security fixes. The current schedule is:
| Version | Supported PHP | Released | Bug fixes until | Security fixes until |
|---|---|---|---|---|
| Laravel 11 | 8.2 to 8.4 | March 12, 2024 | September 3, 2025 | March 12, 2026 |
| Laravel 12 | 8.2 to 8.5 | February 24, 2025 | August 13, 2026 | February 24, 2027 |
| Laravel 13 | 8.3 to 8.5 | March 17, 2026 | Q3 2027 | March 17, 2028 |
Laravel 11 has already reached end of life, so applications still running it no longer receive security patches. The release notes also say that major versions ship every year, around the first quarter, so the next major release is due on that cadence close to the date when Laravel 12's security fixes end on February 24, 2027.
What Laravel 13 brings
Laravel 13 requires PHP 8.3 or later. The release notes describe a focus on keeping breaking changes to a minimum and list these additions:
- a first-party Laravel AI SDK for text generation, tool-calling agents, embeddings, audio, images and vector stores;
- first-party JSON:API resources for standards-compliant API responses;
- request forgery protection formalized as PreventRequestForgery, with origin-aware checks;
- queue routing by class, Cache::touch() for extending cache lifetimes, and more PHP attributes for controllers, authorization and jobs;
- semantic and vector search using PostgreSQL and pgvector.
Laravel Daily's report from Laracon EU notes that Taylor Otwell said the release would not have breaking changes for most applications, that around 15 new PHP attribute options were coming, and that the starter kits would gain teams and passkey support.
Why it matters for companies hiring IT firms
An application that only receives security fixes will not get fixes for ordinary framework bugs, and the window to February 2027 is short. The PHP version matters too. The PHP supported versions page shows PHP 8.2 security support ending on December 31, 2026, and Laravel 13 needs PHP 8.3 or newer. Many teams will need to upgrade PHP and Laravel together, which is easier to plan as one project than as two emergencies.
If you work with a Laravel development company, ask for an upgrade estimate that covers PHP, third-party packages and automated tests, not only the framework version number. Ask as well whether any features you pay to maintain, such as custom API formatting or search, could move to Laravel 13's built-in tools.
Why it matters for IT firms
Agencies maintaining Laravel 11 or 12 applications have a clear reason to schedule upgrades with clients now, and a simple story to explain them: support dates are published and fixed. The AI SDK and vector search features also create new service opportunities, such as AI-assisted search or support tools built inside existing Laravel applications without a separate stack. Firms offering PHP development should check server fleets for PHP 8.2, which leaves security support at the end of the year.
What to do next
- List your Laravel applications with their Laravel and PHP versions.
- Move anything on Laravel 11 or PHP 8.2 to the top of the queue.
- Upgrade on a branch with good test coverage, then review packages that pin older Laravel versions.
- Decide whether the AI SDK or JSON:API resources can replace custom code you maintain today.
Trusted IT Firms lists 84 Laravel development companies. Compare them in the directory.
Frequently asked questions
Is Laravel 12 still supported?
Partly. Bug fixes for Laravel 12 ended on August 13, 2026, and security fixes continue until February 24, 2027.
What PHP version does Laravel 13 need?
Laravel 13 requires at least PHP 8.3 and supports PHP 8.3 to 8.5.
Is upgrading to Laravel 13 difficult?
The release notes describe Laravel 13 as a relatively minor upgrade, and most applications can move without changing much code. Testing is still needed, especially for third-party packages.
When does PHP 8.2 stop receiving security fixes?
PHP.net lists December 31, 2026 as the end of security support for PHP 8.2.
Sources
Add trusteditfirms.com as a preferred source on Google, or open this page in your AI assistant to use it as a source.
