Laravel 13 Just Quietly Made Every PHP Shop an AI Shop

Laravel 13 shipped on March 17, 2026 with a feature list that, on paper, reads like three separate releases. There is no breaking-changes drama, no migration weekend, just a 10-minute upgrade path from Laravel 12 — which is exactly why the implications are sneaking past most teams. PHP 8.3 is now the floor, and that floor is holding up a new first-party Laravel AI SDK, native pgvector similarity search, passkey authentication baked into Fortify and the starter kits, and a fresh round of PHP attribute syntax across controllers, authorization, and queue jobs.

If you run a PHP shop in 2026 — agency, SaaS team, in-house product engineering — Laravel 13 just collapsed the cost of building AI features by an order of magnitude. The features are not exotic; they are the boring infrastructure that used to require three packages, two SDKs, and a custom abstraction layer. Now they are in the framework.

1. The Laravel AI SDK Is the Headline

The AI SDK gives you a unified, provider-agnostic interface for text generation, tool-calling agents, embeddings, audio, images, and vector-store integrations. You write Laravel-style code; you swap OpenAI for Anthropic for Gemini with a config change. Until last month, doing this cleanly meant either adopting a third-party wrapper that lagged the providers or building your own facade. The first-party SDK ends that argument.

2. Vector Search Is Now a Migration Away

Laravel 13 ships native pgvector support. You can generate embeddings directly from strings and run similarity search against them with first-class query syntax. Combined with the AI SDK, this means you can implement semantic search, RAG over your own database, and AI-assisted product discovery without leaving the Eloquent surface area you already know.

3. Passkeys Are Built In — Stop Shipping Password Forms

Passkey authentication is now first-party in Fortify and the new starter kits. WebAuthn-based passwordless login used to be a multi-week implementation; now it is a starter-kit checkbox. Given the 2026 reality — credential theft is the single most common precursor to breach — there is no defensible reason to ship a new auth surface in 2026 with passwords as the primary path.

4. Attributes Reduce the Magic-String Tax

Laravel 13 expands PHP attribute support across the framework. #[Middleware], #[Authorize], #[Tries], #[Backoff], #[Timeout], and #[FailOnTimeout] are now first-class. Your controllers, policies, and queued jobs become self-describing — and the IDE finally gets the static signal it needs to refactor safely.

My Take

The story I keep hearing from PHP teams is "we want to ship AI features, but we don't want to rewrite our stack in Python." Laravel 13 is the first release that takes that complaint seriously and answers it with infrastructure instead of a blog post. The AI SDK plus pgvector plus passkeys is not a flashy launch, but it is the most consequential PHP release of the decade for one reason: it removes the last technical excuses for treating AI as a separate product team. Your existing Laravel codebase, with one weekend of work, can host embeddings, semantic search, and a tool-using agent that talks to your domain models. That used to take a quarter and a new team. The teams that win the second half of 2026 will be the ones that notice this shift before their competitors do.