Laravel 13 was released on March 17, 2026. As with the yearly major release cadence, Laravel 13 focuses in particular on AI-native workflows, safer defaults, and more expressive developer APIs.Breaking changes are kept to a minimum, so most applications can upgrade with only small adjustments. On the other hand, many new features—the Laravel AI SDK, semantic search, and more—have been added that can significantly change how modern applications are built.
Laravel 13 support policy: bug fixes through 2027 Q3 and security fixes through March 17, 2028.
Laravel 13’s headline feature is the first-party AI SDK. It provides a unified API for text generation, tool-calling agents, embeddings, audio, image generation, and vector store integration.You can build provider-agnostic AI features while retaining the Laravel-native developer experience.Text generation (agents)
use App\Ai\Agents\SalesCoach;$response = SalesCoach::make()->prompt('Please analyze this sales transcript...');return (string) $response;
Image generation
use Laravel\Ai\Image;$image = Image::of('A donut on a kitchen counter')->generate();$rawContent = (string) $image;
Speech synthesis
use Laravel\Ai\Audio;$audio = Audio::of('I love coding in Laravel.')->generate();$rawContent = (string) $audio;
Embedding generation
use Illuminate\Support\Str;$embeddings = Str::of('Napa Valley wines are the best.')->toEmbeddings();
Native vector query support, integrated with the AI SDK, has been added. You can run semantic search directly from the query builder using PostgreSQL + pgvector.
$documents = DB::table('documents') ->whereVectorSimilarTo('embedding', 'the best wineries in Napa Valley') ->limit(10) ->get();
Everything—from adding embedding columns to running queries—can be done within the Laravel ecosystem.
The CSRF middleware has been renamed from VerifyCsrfToken to PreventRequestForgery, and origin validation via the Sec-Fetch-Site header has been added.
use Illuminate\Foundation\Http\Middleware\PreventRequestForgery;// Excluding the middleware in tests->withoutMiddleware([PreventRequestForgery::class]);
VerifyCsrfToken remains as a deprecated alias, but migrating to the new class name is recommended.
A serializable_classes option has been added to config/cache.php, and the default is false. This mitigates PHP deserialization attacks if APP_KEY is leaked.
The starter kits revamped in Laravel 12 (React/Vue/Livewire-based) continue to be available in Laravel 13.Inertia v3 was also released alongside Laravel 13. Key changes include:
Simpler layout props
Vite 8 support
Addition of a withApp callback
New Blade components
If you use Inertia v3, consider upgrading it as well.
Laravel Boost is a first-party MCP server. It integrates with AI editors like Claude Code, Cursor, OpenCode, Gemini, and VS Code, letting you semi-automate upgrades via the /upgrade-laravel-v13 slash command.
Laravel 13 is a release characterized by “few breaking changes, many new features.” Upgrade work is minimal, while the AI SDK and semantic search in particular have the potential to change how modern applications are built.When you’re ready to upgrade an existing application from Laravel 12 to 13, see the detailed guide below.
Upgrade guide: Laravel 12 to 13
A list of breaking changes and step-by-step upgrade instructions.