This week, Symfony published maintenance versions 6.4.39, 7.4.11, and 8.0.11. In addition, we announced the second beta release of Symfony 8.1. Finally, we shared the schedule for the SymfonyOnline June 2026 conference and more details about SymfonyDay Montreal 2026.

Symfony development highlights

This week, 51 pull requests were merged (42 in code and 9 in docs) and 34 issues were closed (29 in code and 5 in docs). Excluding merges, 23 authors made additions and deletions. See details for code and docs.

6.4 changelog:

  • 76acf56: [Security] clarify AbstractToken's role-name decoupling and simplify ContextListener
  • 4a804c5: [Dotenv] don't truncate OS env vars containing $ when $_ENV is unpopulated
  • 35e8779: [WebProfilerBundle] don't try to access RawMessage::$headers
  • cafeaa2: [HttpKernel] use backend-handled request for terminate listeners in HttpCache
  • f36fbca: [Messenger] drop trace args from FlattenException normalization
  • 6e49223: [Scheduler] use stored checkpoint as base date for debug:scheduler
  • cbb5873: [Console] make ConsoleSectionOutput::overwrite() atomic to fix sections + ProgressIndicator clear
  • 78fb4f2: [Filesystem] preserve source mode when copying files
  • de84d00: [Process] ignore array env values before proc_open
  • aa86748: [Security] preserve webserver base URL in HttpUtils::createRequest()
  • de4b320: [Console] fix signal handler scoping
  • 57fafa5: [AssetMapper] warn on missing bare CSS and JSON imports
  • b6a9d39: [Messenger] fix support for RabbitMQ v4 by adding delayed quorum queues
  • 55a39e2: [Notifier] use hash_equals() to compare webhook signatures for Vonage
  • 0e24c67: [String] fixed singularize traces > trace in inflector
  • 1a4066e: [Yaml] reject non-stringables when using "!!binary"
  • 6548e65: [Security] remove the legacy nested unserialize() call from token and exception classes
  • 97267d7: [FrameworkBundle] bump Request/Session value resolver priority above EntityValueResolver
  • 40c0f8b: [SecurityBundle] allow defining security provider factories without config
  • 7aedb9f: [HttpFoundation] remove wrong documentation about the configurability of trusted proxies
  • 8efd735: [HttpKernel] preserve named-attribute override on Request/Session value resolvers

7.4 changelog:

  • 66e1cbd: [Mailer] use hash_equals() to compare webhook signatures for AhaSend
  • 35dc5cc: [Messenger] ensure SigningSerializer won't decode before verifying the signature
  • 3789137: [Security] fix impersonation being deauthenticated on every request

8.1 changelog:

  • f589b60: [Console] add missing symfony/polyfill-php85 dependency
  • af12d15: [Messenger] add delayed quorum queues in Amqp
  • 12baa37: [Yaml] emit {} instead of { } when dumping an empty map
  • 8139923: [HttpClient] log stale-if-error fallback in CachingHttpClient
  • 5e5fff8: [HttpClient] add $allowList argument to NoPrivateNetworkHttpClient
  • 923c07f: [Validator] add findByCodes() to ConstraintViolationListInterface
  • 140dfb3: [Form] fix array_flip() warning in expanded+multiple ChoiceType on partial submit
  • 90759e8: [HttpClient] add custom DNS resolution using a decorator
  • dd1be77: [Messenger] allow to respect retry strategy with RecoverableMessageHandlingException
  • 7a1e1c8: [HttpFoundation] add missing @throws tag to BinaryFileResponse constructor
  • c1dd421: [Console] sort command alternatives by name
  • b01d14a: [Runtime] fix TypeError when resolving untyped arguments

Newest issues and pull requests

Symfony Jobs

These are some of the most recent Symfony job offers:

  • DevOps for a Symfony project at Cloudpepper
    Full-time - $150,000 – $180,000 / year
    Full remote
    View details
  • Lead Symfony Developer at SCTR Services
    Full-time - $70,000 – $110,000 / year
    Full remote
    View details
  • Symfony Developer at Design Force Marketing
    Full-time - $60,000 – $100,000 / year
    Grand Haven Michigan, United States
    View details
  • Backend Symfony Developer at ShipMonk
    Contract / Freelance - $5,000 – $8,000 / month
    Full remote
    View details
  • Backend Symfony Developer at Vacatia
    Full-time - $150,000 – $180,000 / year
    Remote + part-time onsite (Portland, Oregon, United States)
    View details

You can publish a Symfony job offer for free on symfony.com.

SymfonyCasts Updates

SymfonyCasts is the official way to learn Symfony. Select a track for a guided path through 100+ video tutorial courses about Symfony, PHP and JavaScript.

This week, SymfonyCasts published the following updates:

They talked about us

Upcoming Symfony Events

Call to Action

Published in #A week of symfony