This week, Symfony released maintenance versions 5.4.50, 6.4.29, and 7.3.7 to address a potential security vulnerability. Meanwhile, we continued polishing the upcoming Symfony 7.4 and 8.0 releases and published 7.4.0 RC1 and 8.0.0 RC1. Finally, we shared new details about several of the talks planned for SymfonyCon Amsterdam 2025.
Symfony development highlights
This week, 56 pull requests were merged (40 in code and 16 in docs) and 32 issues were closed (24 in code and 8 in docs). Excluding merges, 24 authors made additions and deletions. See details for code and docs.
- e4c32e0: [ExpressionLanguage] compile numbers with var_export in Compiler::repr for thread-safety
- af78d51: [Yaml] fix parsing of unquoted multiline scalars with comments or blank lines
- b0d77ad: [OptionsResolver] ensure remove() also unsets deprecation status
- 9e0088f: [Clock] align MockClock::sleep() behavior with NativeClock for negative values
- 19f6580: [OptionsResolver] fix missing prototype key in nested error paths
- 2dc11e4: [Serializer] fix BackedEnumNormalizer behavior with partial denormalization
- ec0cf2b: [Cache] add compatibility with ext-redis 6.3
- fc41d4f: [Serializer] fix inherited properties normalization
- 88b0d7f: [Security] fix HttpUtils::createRequest() when the context's base URL isn't empty
- c5a661a: [Serializer] fix AbstractObjectNormalizer to allow scalar values to be normalized
- 979e7bf: [PropertyInfo] fix ReflectionExtractor handling of underscore-only property names
- 4f06524: [HttpClient] fix Warning: curl_multi_select(): timeout must be positive
- 55a5d41: [Mime] remove unused variable in Email::prepareParts
- d286378: [HttpFoundation] fix AcceptHeader overwrites items with different parameters
- 2f41a5a: [Translation] fix Project too big for sync export in Lokalise
- 17c1070: [PropertyInfo] fix ReflectionMethod::setAccessible() is no-op since PHP 8.1
- 562515b: [HttpFoundation] fix RequestTest insulation
- b3cfb79: [Console] fix signal handlers not being cleared after command termination
- 711c969: [Cache] recognize saveDeferred events as writes in CacheDataCollector
- d398686: [Form] fix EnumType choice_label logic for grouped choices
- 6a854c5: [DependencyInjection] fix merging explicit tags and #[AsTaggeditem]
- 206351d: [Routing] fix default value not taken if usigng name:entity.attribute
- 4961eea: [JsonStreamer] rebuild cache on class update
- 92f9979: [HttpKernel] fix StreamedResponse with chunks support in HttpKernelBrowser
- da55ca9: [DependencyInjection] fix lazy proxy creation for interfaces aliased to final classes
- 7295d7a: [FrameworkBundle] fix wiring JsonStreamReader
- b9a4552: [Dependencyinjection] call default index method when index is not provided by tag
- a25b0c8: [FrameworkBundle] update deprecation message for collect_serializer_data
- 68c6f2d: [Routing] align routing.schema.json with YamlFileLoader behavior
- ec9c209: [Console] remove a redundant local variable in the console Application class
- 42a8072: [Security] set OIDC JWKS cache TTL from provider headers
- 6769c4c: [FrameworkBundle] revert auto-import of #[Route] defined on controllers
Newest issues and pull requests
- [Security] Add access_token.default_roles option that allows overwriting user's default roles
- [Intl] Update data to ICU 78.1
- [ObjectMapper] Add support for mapping nested objects
Symfony Jobs
These are some of the most recent Symfony job offers:
- Backend Symfony Developer at True9
Full-time - £60,000 / year
Full remote
View details - Backend Symfony Developer at POLAVIS
Full-time - €20 – €45 / hour
Full remote
View details - Backend Symfony Developer at ByteHire
Full-time - £55,000 – £60,000 / year
Full remote
View details - Backend Symfony Developer at Dr Data
Full-time - €50,000 – €60,000 / year
Remote + part-time onsite (Paris, France)
View details - Backend Symfony Developer at Wren Kitchens
Full-time - £35,000 – £44,000 / year
Remote + part-time onsite (Barton-upon-Humber, United Kingdom)
View details
You can publish a Symfony job offer for free on symfony.com.
SymfonyCasts Updates
SymfonyCasts is the official way to learn Symfony. Select a track for a guided path through 100+ video tutorial courses about Symfony, PHP and JavaScript.
This week, SymfonyCasts published the following updates:
- (Video) Symfony Bundle Development: Share the Love: Warmup Command Configuration
- (Video) Symfony Bundle Development: Share the Love: Cache Warmup Command
They talked about us
- Symfony Station Communiqué - Stardate: ✦ 14 November 2025 ✦
- Beyond CSS: Multi-Format Font Export for Symfony
- Meet Benjamin at SymfonyCon Amsterdam 2025!
- JoliMediaBundle, un nouveau bundle de médias pour vos projets Symfony
Call to Action
- Follow Symfony on X, on Mastodon, on Bluesky and on Threads and share this article.
- Subscribe to the Symfony blog RSS and never miss a Symfony story again.