Symfony Blog

SymfonyCon Warsaw 2026: Asynchronous PHP & Symfony in High-Performance Systems

Eloïse Charrier — Tue, 28 Jul 2026 15:30:00 +0200

SymfonyCon returns to its roots! Join us in Warsaw (Poland) on November 26 and 27, 2026, for two days of world-class technical sessions. See more details here!

🎤 Speaker announcements

We are excited to introduce Mathias Arlaud, Software Engineer at baksla.sh ! He'll take the mic to present "Asynchronous PHP & Symfony in High-Performance Systems", taking a deep dive into runtime internals and architecture to help you engineer lightning-fast applications:

"Most Symfony applications buffer everything: Doctrine results, serialized objects, JSON, exports. They build the entire response, then send it. This works fine, until it doesn't: memory spikes, time-to-first-byte creeps up, and exports start dying in production.

LLMs make the problem impossible to ignore. When a model takes several seconds to answer, waiting for the return means staring at a spinner the whole time. Streaming isn't a back-end optimization anymore. It's the foundation modern user experience is built on.

In this talk, we tear down an assumption baked into most Symfony apps: that a response has to be fully built before it's sent. We'll rethink the data flow end to end, StreamedResponse, incremental JSON encoding with the JsonStreamer component, iterable Doctrine data sources, Server-Sent Events, and EventStreamResponse for real time.

You'll walk away knowing how to stream data as it's produced, power live interfaces, generate exports of several million rows, and keep memory flat, using tools already sitting in Symfony."

Click here to see more talks — the full schedule will be unveiled step-by-step over the coming weeks. Stay tuned!

Ready to join us?

🏨 Accommodation

The official conference hotel offers special preferential rates and flexible conditions for our attendees. Make sure to use our dedicated link to book your room and stay right where the action happens!

🥳 Save the date for the Community Party!

Because SymfonyCon isn't just about code, we are happy to confirm that our traditional Community Party will take place on the evening of Thursday, November 26. Get ready for a great night of networking, fun, and connecting with peers!

💻 Hackday

Ready to contribute? The Hackday on Saturday, November 28 (free and open to all!) will take place at "The Brain Embassy - Czackiego" thanks to the support of Baksla.sh. Bring your laptop and your good mood!

🎟️ Get your tickets

Regular tickets are available now, but don't wait too long. secure your ticket today

Join us online!

💡Follow the "conference" blog posts to not miss anything!

Want the latest Symfony updates? Follow us and tune in from wherever you are 🌎

Sponsor the Symfony project.

A Week of Symfony #1021 (July 20–26, 2026)

Javier Eguiluz — Sun, 26 Jul 2026 09:50:00 +0200

This week, Symfony development activity was very intense and focused mostly on bug fixes. In addition, we added support for the upcoming Twig 4.0 version and fixed some issues related to changes in the upcoming PHP 8.6 version. Lastly, we published the first talks for the SymfonyCon Warsaw 2026 conference.

Symfony development highlights

This week, 73 pull requests were merged (65 in code and 8 in docs) and 49 issues were closed (43 in code and 6 in docs). Excluding merges, 36 authors made additions and deletions. See details for code and docs.

6.4 changelog:

f93084a: [DependencyInjection] fix env var reported as never used for a removed autowired service
11e0686: [Yaml] fix line folding after trailing backslashes in quoted strings
a6e6772: [EventDispatcher] clear wrappedListeners in TraceableEventDispatcher::reset()
05b14f2: [ErrorHandler] fix fatal error without args triggering an error when calling getTraceFromString
649942c: [Messenger] fix fatal on AmazonSqs shutdown when the in-flight receive cannot be resumed
07ed2b6: [Cache] initialize PhpArrayAdapter before classifying keys in deleteItems()
c4f0855: [Console] fix two ValueError crashes on multibyte / multi-column widths
a11f0f9: [Config] escape comment-closing sequence in generated config builders
7b243b5: [DoctrineBridge] filter non-php files in ProxyCacheWarmer::warmUp() to avoid CacheWarmerAggregate exception
94213f3: handle PHP 8.6 removing function arguments in error messages
b520c9e: [Console] fix table borders around colspan cells and header-less tables
b6562e7: allow Twig 4
140e32b: [Mime] fix dropped whitespace between multiple encoded words
7e89fae: [Routing] detect circular references in object route parameters
24aec8c: [EventDispatcher] fix regression in TraceableEventDispatcher invocation counting
e85b30a: [AssetMapper] fix crash when a remote package depends on a locally-mapped importmap entry
1f10bcd: [Messenger] fix ack/reject failing when the Redis stream entry is already deleted
e289b15: [Messenger] strip trace from nested exceptions in ErrorDetailsStamp
cc6e1c4: [PropertyInfo] fix union with mixed handling in PhpStanTypeHelper
1c70327: [Validator] allow Traverse to be inherited
0a1173b: [PropertyInfo] ignore mutators with several required parameters
42ef012: [HttpFoundation] throw when IpUtils::isPrivateIp() receives a non-canonical IP address
075a897: [Mailer] reject control characters in SmtpTransport::setLocalDomain()
aa9d1c9: [Cache] fix "Class Relay\Relay not found" for RedisCluster/RedisArray with tcp_keepalive

7.4 changelog:

2704a0a: [Config] escape "*/" in generated array-shape comments
9cffd39: [TwigBridge] prevent implicit string casts for translatable message objects
a6fd02c: [HttpClient] do not stream empty PSR-18 request bodies
15a8740: [ObjectMapper] fix per-property #[Map(source:)] being ignored when the target property name also exists on the source
e295c4d: [FrameworkBundle] fix valkey cache adapters ignoring default_valkey_provider
fafd5f8: [DependencyInjection] add supported literal option not_found for imports.[*].ignore_errors in services.schema and AppReference
650db20: [Validator] allow null groups in ConstraintValidatorTestCase
b0d37c7: [ObjectMapper] fix explicit #[Map(target:)] being overwritten by a same-name source property
e713694: [FrameworkBundle] make WebTestCase enable web mode by default
ceeb7c6: [Serializer] skip XmlEncoderTest::testEncodeException() when using libxml ≥ 2.13
3b910dd: [DependencyInjection] fix lazy + factory service with a leading-backslash class on PHP 8.4
84438bb: [Validator] merge target's own constraints when using #[ExtendsValidationFor]
0f4dbef: [Filesystem] handle PHP 8.6 removing function arguments in error messages
f6aa8f4: [Messenger] do not reject unknown types when no message requires signing
4b9ed82: [Config] accept env placeholders for scalar alternatives in generated array-shapes
c7717ab: [Serializer] keep FILTER_BOOL working when ENABLE_TYPE_CONVERSION is enabled
e27c6fc: [ObjectMapper] resolve a nested reverse-mapped property by the type of its destination

8.1 changelog:

037121a: do not expose the BundleAdapter class in the kernel.bundles parameter
84c13ac: [Console] strip terminal control characters from displayed file names
6b7e834: [WebProfilerBundle] fix crash when injecting the toolbar in a BinaryFileResponse
c8354be: [Messenger] avoid redispatching messages from completed batches
66e2ae2: [Form] document the hidden placeholder of required ChoiceType fields
38bcc1c: [ObjectMapper] keep the class-level transform/if of the target's #[Map] in the reverse class-map factory
86d2696: [PhpUnitBridge] fix finding given config file name
5d66a96: [HttpKernel] keep converting scalars of a form payload that carries an uploaded file
3399279: [FrameworkBundle] keep transport decorators when mock_response_factory is set

8.2 changelog:

40f72e1: [RemoteEvent] allow repeating #[AsRemoteEventConsumer]

Newest issues and pull requests

Symfony Jobs

These are some of the most recent Symfony job offers:

Symfony Developer at ATH
Contract / Freelance - €25 – €50 / hour
Full remote
View details
Lead Symfony Developer at DocuPet
Full-time - CA$140,000 – CA$180,000 / year
Full remote
View details

You can publish a Symfony job offer for free on symfony.com.

They talked about us

Call to Action

Follow Symfony on X, on Mastodon, on Bluesky and on Threads and share this article.
Subscribe to the Symfony blog RSS and never miss a Symfony story again.

Sponsor the Symfony project.

SymfonyCon Warsaw 2026: Securing Your API: The OWASP API Top 10

Eloïse Charrier — Fri, 24 Jul 2026 11:00:00 +0200

Mark your calendars! The global Symfony community is heading to Warsaw (Poland) on November 26-27, 2026, for SymfonyCon Warsaw 2026.

🎤 Speaker announcements

Joining us in Warsaw is Rob Allen, Software Consultant at Nineteen Feet Limited. He will be delivering a talk titled "Securing Your API: The OWASP API Top 10", in which he breaks down practical strategies and technical insights for building and scaling high-quality web applications:

"APIs are the foundation of our AI applications today and need to be secure. From broken authorisation and authentication to injection attacks, the OWASP API Security Top 10 identifies the most critical security issues facing APIs today. In this talk, we'll walk through the items on the list and explore these security flaws and look at how to prevent them. By the end of this session, you'll have a clear understanding of the most critical API security risks and be equipped with the knowledge to build more secure APIs."

Click here to see more talks — the full schedule will be unveiled step-by-step over the coming weeks. Stay tuned!

🏨 Looking for a place to stay?

🥳 Save the date for the Community Party!

💻 Hackday

🎟️ Get your tickets

Regular tickets are available now, but don't wait too long. secure your ticket today

Join us online!

💡Follow the "conference" blog posts to not miss anything!

Want the latest Symfony updates? Follow us and tune in from wherever you are 🌎

Sponsor the Symfony project.

SymfonyCon Warsaw 2026: 10 easy steps towards a more inclusive workplace

Eloïse Charrier — Wed, 22 Jul 2026 15:30:00 +0200

We are thrilled to announce that SymfonyCon Warsaw 2026 will take place on November 26 and 27, 2026, in Warsaw (Poland)! Join us for an extraordinary worldwide conference with 3 parallel tracks and community events.

🎤 Speaker announcements

We are delighted to feature Stefan Koopmanschap, Co-Owner, Ingewikkeld, on stage! As a long-standing community leader Stefan will talk about "10 easy steps towards a more inclusive workplace":

Are you aware of how your daily common language may exclude certain people or groups? Could it be that implicit bias and our own behaviour may impact our chances of improving diversity? Slightly changing your language and behaviour and being aware of potential pitfalls may make your workplace more inclusive and welcoming. In this talk we'll discuss 10 situations in which we can improve our daily (work) life to be more inclusive. It includes practical examples that can be directly applied to your team or company.

This is just the beginning — the full schedule will be unveiled step-by-step over the coming weeks. Stay tuned!

🏨 Looking for a place to stay?

🥳 Save the date for the Community Party!

💻 Hackday

🎟️ Get your tickets

Regular tickets are available now, but don't wait too long. secure your ticket today

Join us online!

💡Follow the "conference" blog posts to not miss anything!

Want the latest Symfony updates? Follow us and tune in from wherever you are 🌎

Sponsor the Symfony project.

A Week of Symfony #1020 (July 13–19, 2026)

Javier Eguiluz — Sun, 19 Jul 2026 09:23:00 +0200

This week, Symfony published Symfony UX 3.3, which adds support for Symfony Reprise and includes several improvements to the toolkit. In addition, SymfonyCasts announced a new course on upgrading to Symfony 8. Finally, the upcoming SymfonyCon Warsaw 2026 conference announced its first four speakers.

Symfony development highlights

This week, 13 pull requests were merged (9 in code and 4 in docs) and 11 issues were closed (10 in code and 1 in docs). Excluding merges, 14 authors made 233 additions and 88 deletions. See details for code and docs.

6.4 changelog:

b416502: [WebProfilerBundle] fix Twig macros usage in Mailer panel
d9b1d6d: [Dotenv] allow multiple underscores at start
abf190f: [Cache] remove obsolete return instruction from classes constructors
879ac15: [HttpClient] replace the native "dechunk" stream filter with a pure PHP implementation
1dbbec9: [TwigBridge] ensure that a label with value "0" is rendered

Newest issues and pull requests

Symfony Jobs

These are some of the most recent Symfony job offers:

Symfony Developer at ATH
Contract / Freelance - €25 – €50 / hour
Full remote
View details
Lead Symfony Developer at DocuPet
Full-time - CA$140,000 – CA$180,000 / year
Full remote
View details
DevOps for a Symfony project at Cloudpepper
Full-time - $150,000 – $180,000 / year
Full remote
View details

You can publish a Symfony job offer for free on symfony.com.

SymfonyCasts Updates

SymfonyCasts is the official way to learn Symfony. Select a track for a guided path through 100+ video tutorial courses about Symfony, PHP and JavaScript.

This week, SymfonyCasts published the following updates:

(New article) How We Built Brontie your AI Assistant
(Video) Symfony Security: The Basics: Enabling "Remember Me" Feature

They talked about us

Call to Action

Follow Symfony on X, on Mastodon, on Bluesky and on Threads and share this article.
Subscribe to the Symfony blog RSS and never miss a Symfony story again.

Sponsor the Symfony project.

SymfonyCon Warsaw 2026: The first 4 speakers are live! 🔥

Eloïse Charrier — Wed, 15 Jul 2026 10:00:00 +0200

SymfonyCon Warsaw 2026, our next annual international Symfony conference, will take place on:

November 24 & 25 with two days of hands-on workshops to learn, practice, and enhance your skills in small groups.
November 26 & 27 with three English-speaking tracks, an Unconference track, and a lively community evening.

🎤 Speaker announcements

The Call for Papers is officially closed, and wow... we are blown away by your submissions! Thank you to everyone who submitted a talk or a workshop. We are thrilled to kick off the countdown by revealing our first 4 speakers on our page! Go check them out! 👀

This is just the beginning — the full schedule will be unveiled step-by-step over the coming weeks. Stay tuned!

Here is a quick reminder of what’s waiting for you in Warsaw:

✔️ 3 parallel tracks featuring around 50 international speakers covering the latest in Symfony & PHP.

✔️ The Unconference track: As always, this is your stage! Claim your slot by emailing us at events@symfony.com and set the stage for an unforgettable experience. Each unconference talk lasts 20 minutes.

🏨 Looking for a place to stay?

🥳 Save the date for the Community Party!

💻 Hackday

🎟️ Get your tickets

Regular tickets are still available, but not for long. Secure your spot now and join the ultimate Symfony week!

Join us online!

💡Follow the "conference" blog posts to not miss anything!

Want the latest Symfony updates? Follow us and tune in from wherever you are 🌎

Sponsor the Symfony project.

Symfony UX 3.3.0 released

Fabien Potencier — Wed, 15 Jul 2026 08:17:00 +0200

Symfony UX 3.3.0 is out. This release brings first-class support for Symfony Reprise in StimulusBundle, two new Shadcn components for the Toolkit (Sonner and Combobox), and a batch of quality-of-life improvements to the ux:install command and to how component documentation is parsed and linted.

StimulusBundle: Symfony Reprise support

Contributed by Hugo Alliaume in #3705

Symfony Reprise is the new Vite and Rsbuild integration for Symfony assets. It is brand new and still very much experimental (its first commit landed in September 2025 and the repository only just went public), so expect things to move fast and APIs to change. That said, StimulusBundle already supports it as a first-class asset system, alongside AssetMapper and Webpack Encore. Point the Reprise plugin at your controllers.json and start the app from @symfony/reprise/stimulus:

        
        // vite.config.js (or rsbuild.config.js)
Symfony({
    stimulus: './assets/controllers.json',
})
    

As part of this change, @symfony/stimulus-bridge is no longer a default npm peer dependency: it is specific to Webpack Encore, and Reprise projects would pull it in for nothing. Only @hotwired/stimulus remains; Encore users now install the bridge manually.

StimulusBundle: preserved `stimulusFetch: 'lazy'` comments

Contributed by Indra Gunawan in #3702

The stimulusFetch: 'lazy' directive that marks a controller as lazy-loaded is now detected even when it uses a preserved comment marker (/*! stimulusFetch: 'lazy' */). Tools like tsc and esbuild emit that form to keep important comments from being stripped during compilation, so lazy controllers written in TypeScript now behave as expected.

Toolkit: two new Shadcn components

Contributed by Hamza Makraz in #3477 and #3482

The Shadcn kit gains two components:

Sonner is an opinionated toast notification component for showing transient feedback.
Combobox combines an input with a searchable, filterable list of options for autocomplete-style selection. Install either one with ux:install.

        
        $ php bin/console ux:install sonner --kit=shadcn
$ php bin/console ux:install combobox --kit=shadcn

Toolkit: friendlier `ux:install`

Contributed by Hugo Alliaume in #3700

Recipe names are stored in lower-case, so ux:install Alert used to fail with a raw "does not exist in any official kits" error. Recipe lookup is now case-insensitive: Alert resolves to the alert recipe, both without --kit (the "which kit?" prompt) and with an explicit --kit=shadcn. When a recipe genuinely does not exist in any official kit, the error now suggests the closest alternatives found across all kits instead of leaving you guessing.

Toolkit: better `@prop` and `@block` documentation

Contributed by Hugo Alliaume in #3694

Component documentation comments now have a single, well-defined format. A new ComponentDocParser reads the {# @prop #} and {# @block #} comments at the top of a Twig component, and a companion ComponentDocChecker lints them for consistency (capitalized descriptions ending with a period, valid types, and no more hand-written "Defaults to ..." strings):

        
        {# @prop defaultValue string Define the open Tabs at initial rendering. #}
{# @prop orientation 'horizontal'|'vertical' Define the visual orientation. #}
{# @block content The default block. #}
{%- props defaultValue = '', orientation = 'horizontal' -%}
    

Default values are now read directly from the {% props %} tag, so they are no longer duplicated in the description. The same parser can power both the UX website and the Toolkit linter, and it gives LLMs a clear structure to fix documentation issues against.

Contributed by Hugo Alliaume in #3696

The Shadcn tooltip now dismisses itself on scroll and resize, and no longer intercepts pointer events while hidden, so it stops swallowing clicks on the elements underneath it.

Notable bug fixes

LiveComponent no longer returns a 500 error on malformed hydration payloads, handles nullable collection properties correctly, and stops the data-loading scanner from ignoring data-live-ignore subtrees. Autocomplete fixes a LIKE ESCAPE clause that broke search on PostgreSQL.

Full Changelog

#3705 [StimulusBundle] Add support for Symfony Reprise (@Kocal)
#3702 [StimulusBundle] Support preserved /*! stimulusFetch: 'lazy' */ syntax (@IndraGunawan)
#3703 [StimulusBundle] Sort custom controllers to keep the generated loader deterministic (@Amoifr)
#3676 [LiveComponent] Avoid 500 errors on malformed hydration payloads (@Amoifr)
#3688 [LiveComponent] Fix data-loading scanner ignoring data-live-ignore subtrees (@Amoifr)
#3690 [LiveComponent] Fix support for nullable collection properties on component (@rogierknoester)
#3700 [Toolkit] Resolve ux:install recipe name case-insensitively and suggest alternatives (@Kocal)
#3696 [Toolkit][Shadcn] Dismiss the tooltip on scroll and resize, and stop it from intercepting pointer events while hidden (@Kocal)
#3694 [Toolkit] Refactor (again) but improve @prop and @block comments format (@Kocal)
#3685 [Autocomplete] Fix LIKE ESCAPE clause breaking search on PostgreSQL (@Amoifr)
#3477 [Shadcn] Add Sonner (@makraz)
#3693 [Toolkit] Make component rendering snapshots independent from the libxml version (@Kocal)
#3482 [Toolkit][Shadcn] Add Combobox (@makraz)

Sponsor the Symfony project.

New SymfonyCasts Course: Upgrading to Symfony 8

Kevin Bond — Mon, 13 Jul 2026 21:40:00 +0200

One of Symfony's greatest strengths is its upgrade process. Thanks to the backward compatibility promise and deprecation system, major upgrades are smooth, predictable, and, dare I say it, enjoyable!

Our newest tutorial is now available - and completely free:

👉 Upgrading to Symfony 8

In this course, we take a real Symfony application and guide it through the entire upgrade process. You'll learn how to identify and fix deprecations, modernize dependencies, prepare for PHP 8.4, and upgrade to Symfony 8 with confidence.

By the end, you'll have a practical, repeatable process that you can apply to your own applications - making future upgrades smaller, safer, and much less stressful.

What This Course Covers

This course follows a real-world Symfony application through the upgrade process, some of the things you'll learn include:

Understanding Symfony's backward compatibility promise
Finding and fixing deprecations
Using automated tests to upgrade safely
Updating Composer dependencies
Preparing your application for Symfony 8 and PHP 8.4
Modernizing Doctrine integrations
Cleaning up deprecated configuration and APIs
Verifying third-party bundle compatibility

As a bonus chapter, we also cover something that's become increasingly important for every PHP developer: dependency security.

Recent advances in AI-assisted security auditing have dramatically increased the number of vulnerabilities being discovered across the entire software ecosystem. That's good news - issues are being found and fixed faster than ever - but it also means it's more important than ever to stay on top of dependency updates.

In the bonus chapter, you'll learn how to use Composer's built-in composer audit command to identify known vulnerabilities, understand security advisories, and keep your applications secure as part of your regular maintenance workflow.

Who Is This For?

This course is perfect if you:

Maintain Symfony applications that need to stay current
Want a repeatable process for framework upgrades
Feel intimidated by major version upgrades
Want to better understand Symfony's upgrade philosophy
Care about keeping your dependencies secure

Whether you're upgrading your first application or your fiftieth, this course will help make the process predictable and approachable.

What's Next on SymfonyCasts?

If this course leaves you wanting more, we're already releasing the next chapter in your Symfony journey.

Symfony Security: The Basics - learn the fundamentals of Symfony's security system, including authentication, login forms, user providers, password hashing, CSRF protection, and more.

And coming soon:

E2E Testing - a practical guide to browser testing, including authentication, JavaScript interactions, debugging tools, and complete user flows from end to end.

In the meantime, check out a couple of our recent blog posts:

Keeping Doctrine Entities Honest - Should your Doctrine entities always represent valid domain objects? We explore a different approach that separates persistence from user input using Symfony's ObjectMapper.
Meet Brontie, Your AI Companion - Meet our new AI-powered course assistant that can answer questions about the current chapter, explain concepts, and help you learn faster without leaving the course.

Happy upgrading!

Sponsor the Symfony project.

A Week of Symfony #1019 (July 6–12, 2026)

Javier Eguiluz — Sun, 12 Jul 2026 09:33:00 +0200

This week, development activity focused on various improvements, such as enhancing the DX of AssetMapper in debug mode and allowing developers to disable redirects on logout. There were also proposals to improve Messenger with a new command and to add pipe operator compatibility to the Validator component.

Symfony development highlights

This week, 48 pull requests were merged (31 in code and 17 in docs) and 25 issues were closed (12 in code and 13 in docs). Excluding merges, 22 authors made 5,573 additions and 2,979 deletions. See details for code and docs.

6.4 changelog:

8bce4fe: [Cache] remove always-true method_exists() check in FilesystemCommonTrait::__destruct()
2aa4d7d: [Scheduler] fix jitter shouldn't make scheduler miss runs
cf7a2d1: [Serializer] fix support check for nested array items
fd30af7: [Console] fix SymfonyStyle questions when using output sections
62cd8e9: [Console] fall back to "stty sane" when restoring the captured terminal state fails

8.1 changelog:

7c9773c: [Notifier] add handling for the Prelude bridge to UnsupportedSchemeException
fa6e7fb: [Tui] repaint the full screen on resize so multiplexer reattaches are not blank

8.2 changelog:

f504f7e: [FrameworkBundle] unregister its service when the EnumMappingMetadataFactory class does not exist
15b0727: [HttpClient] remove unused code in AsyncResponse::__destruct()
71d1fa7: [Security] allow disabling redirect on logout
d56fec8: [AssetMapper] ignore compiled assets in debug mode
a1115aa: [Serializer] allow associative csv_headers to map and reorder columns when encoding

Newest issues and pull requests

Symfony Jobs

These are some of the most recent Symfony job offers:

Symfony Developer at ATH
Contract / Freelance - €25 – €50 / hour
Full remote
View details
Lead Symfony Developer at DocuPet
Full-time - CA$140,000 – CA$180,000 / year
Full remote
View details
DevOps for a Symfony project at Cloudpepper
Full-time - $150,000 – $180,000 / year
Full remote
View details

You can publish a Symfony job offer for free on symfony.com.

SymfonyCasts Updates

SymfonyCasts is the official way to learn Symfony. Select a track for a guided path through 100+ video tutorial courses about Symfony, PHP and JavaScript.

This week, SymfonyCasts published the following updates:

(Video) Symfony Security: The Basics: Protecting Logout with CSRF

They talked about us

Call to Action

Follow Symfony on X, on Mastodon, on Bluesky and on Threads and share this article.
Subscribe to the Symfony blog RSS and never miss a Symfony story again.

Sponsor the Symfony project.