A Week of Symfony #940 (30 December 2024 - 5 January 2025)

This week, Symfony 6.4.17, 7.1.10 and 7.2.2 maintenance versions were released. In addition, we published more information about the upcoming SymfonyOnline January 2025 conference.

Symfony development highlights

This week, 44 pull requests were merged (34 in code and 10 in docs) and 30 issues were closed (24 in code and 6 in docs). Excluding merges, 23 authors made 888 additions and 79 deletions. See details for code and docs.

6.4 changelog:

• a4f0258: [HtmlSanitizer] reject URLs containing whitespaces
• 1236323: [Finder] fix using == as default operator in DateComparator
• 52d2ab9: [PropertyInfo] remove @internal from PropertyReadInfo and PropertyWriteInfo
• 006bbba: [ErrorHandler] update some colors on error stack traces to improve accessibility
• 96941db: [Yaml] fix parsing of unquoted strings in Parser::lexUnquotedString() to ignore spaces
• f26a5c2: [AssetMapper] add leading slash to public prefix
• 9fd383a: [HttpClient] fix reset() not called on decorated clients
• 4166af2: [Security] fix triggering session tracking from ContextListener
• dd50db5: [HttpKernel] don't override existing LoggerInterface autowiring alias in LoggerPass
• 6ba6441: [PropertyAccess] fix compatibility with PHP 8.4 asymmetric visibility

7.1 changelog:

• b53e128: [HttpFoundation] avoid mime type guess with temp files in BinaryFileResponse
• abb34d3: [Messenger] choose the correctly cased class name for the MariaDB platform
• b876e64: [SecurityBundle] remove outdated guard from security xsd schema

7.2 changelog:

• 5280da9: [SecurityBundle] do not replace authenticators service by their traceable version
• 04aa652: [Stopwatch] fix undefined key error when trying to fetch a missing section
• 89cd804: [HttpClient] fix amphp http client v5 unix socket
• c9ad225: [SecurityBundle] do not pass traceable authenticators to security.helper
• 1d75746: [Runtime] removing the warning on incorrect PHP_SAPI value
• e36382c: [Security] use the session only if it is started when using SameOriginCsrfTokenManager
• b048d76: [Lock] fix predis command error checking

7.3 changelog:

• 348781c: [Config] add ifFalse()
• ec3f12b: [Yaml] add compact nested mapping support to Dumper
• 78648f0: [Cache, HttpKernel] add a noStore argument to the Cache attribute
• a993465: [DependencyInjection] make the AsTaggedItem attribute repeatable
• 04ee771: [HttpClient] add IPv6 support to NativeHttpClient

Newest issues and pull requests

• [Messenger] Decouple AMQP type header from PHP namespaces
• Support for multipart/form-data in non-POST requests using request_parse_body()
• [OptionsResolver] Support union of types

Symfony CLI

Symfony CLI is a must-have tool when developing Symfony applications on your local machine. It includes the Symfony Local Server, the best way to run local Symfony applications. This week Symfony CLI released its new 5.10.6, version with the following changes:

• Add flag/config to allow CORS requests (@Kocal)
• Add a warning if multiple CORS headers are detected (@tucksaun)
• Fix project directory guessing is not traversing tree upward (@tucksaun)
• Fix Goreleaser deprecation (@fabpot)

Symfony Jobs

These are some of the most recent Symfony job offers:

• Symfony Developer at fortrabbit
  Full-time - €50,000 – €70,000 / year
  Full remote
  View details
• Backend Symfony Developer at anyip.io
  Contract / Freelance - $20 – $40 / hour
  Full remote
  View details
• Symfony Developer at Kennisnet
  Full-time - €4,104 – €5,673 / month
  Remote + part-time onsite (Zoetermeer, Netherlands)
  View details

You can publish a Symfony job offer for free on symfony.com.

They talked about us

• Integrate Neo4j With Symfony: A Step-by-Step Guide
• Logbook of Learning Domain-Driven Design: Day 2
• Hello from Symfony

Call to Action

• Follow Symfony on X, on Mastodon, on Bluesky and on Threads and share this article.
• Subscribe to the Symfony blog RSS and never miss a Symfony story again.