https://symfony.com/blog/ Most recent comments published on the Symfony project blog Wed, 10 Jun 2026 19:22:03 +0200 Wed, 10 Jun 2026 16:25:20 +0200 en https://symfony.com/blog/new-in-symfony-8-1-dx-improvements-part-1?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26205 Wed, 10 Jun 2026 16:25:20 +0200 https://symfony.com/blog/new-in-symfony-8-1-dx-improvements-part-1?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26205 Very nice additions as always. Thank you very much! https://symfony.com/blog/new-in-symfony-8-1-httpclient-improvements?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26204 Wed, 10 Jun 2026 08:41:24 +0200 https://symfony.com/blog/new-in-symfony-8-1-httpclient-improvements?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26204 @Łukasz I've reworded a bit the original text. We wanted to say that passing `null` is deprecated and you can only pass positive integers to this option. Thanks. https://symfony.com/blog/new-in-symfony-8-1-httpclient-improvements?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26202 Mon, 08 Jun 2026 22:19:40 +0200 https://symfony.com/blog/new-in-symfony-8-1-httpclient-improvements?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26202 Nice improvements! One little spotted thing: In the https://symfony.com/blog/new-in-symfony-8-1-httpclient-improvements#safer-default-for-cached-responses section there is an error most probably "positive integer" should be "negative integer" in this sentence:… https://symfony.com/blog/new-in-symfony-8-1-messenger-improvements?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26201 Wed, 03 Jun 2026 10:40:09 +0200 https://symfony.com/blog/new-in-symfony-8-1-messenger-improvements?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26201 It appears the example for the 'Idle Timeout for Batch Handlers' feature might be misleading. If shouldFlush is overridden, the idle timeout logic does not run. It seems more appropriate to override getBatchSize to set the batch size, as this preserves the… https://symfony.com/blog/new-in-symfony-8-1-dynamic-controller-attributes?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26200 Tue, 02 Jun 2026 16:08:39 +0200 https://symfony.com/blog/new-in-symfony-8-1-dynamic-controller-attributes?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26200 @Ayyoub you are right ... and we just published a blog post about the `#[RateLimit]` attribute: https://symfony.com/blog/new-in-symfony-8-1-ratelimiter-improvements https://symfony.com/blog/new-in-symfony-8-1-dynamic-controller-attributes?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26199 Sat, 30 May 2026 13:05:16 +0200 https://symfony.com/blog/new-in-symfony-8-1-dynamic-controller-attributes?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26199 We actually have a ratelimit attribute that exists already, using this as an example is kind of confusing https://symfony.com/blog/symfony-8-1-curated-new-features?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26198 Fri, 29 May 2026 17:58:46 +0200 https://symfony.com/blog/symfony-8-1-curated-new-features?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26198 @Matthias you are right. TUI is missing from that list and other changes too. In the next days we're going to publish more "New in Symfony 8.1" posts and we'll update this list. Thanks. https://symfony.com/blog/symfony-8-1-curated-new-features?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26197 Fri, 29 May 2026 13:10:30 +0200 https://symfony.com/blog/symfony-8-1-curated-new-features?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26197 What about TUI? https://symfony.com/blog/cve-2026-46626-symfonyruntime-cve-2024-50340-patch-bypass-via-parse-str-sapi-argv-mismatch?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26196 Fri, 29 May 2026 12:16:16 +0200 https://symfony.com/blog/cve-2026-46626-symfonyruntime-cve-2024-50340-patch-bypass-via-parse-str-sapi-argv-mismatch?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26196 The blog post title mentions CVE-2024-50340 while the CVE-2026-46626 from the heading/title prefix is probably the correct CVE number? The linked commit message references the two year old CVE-2024-50340 while it should probably reference CVE-2026-46626… https://symfony.com/blog/new-in-symfony-8-1-dependency-injection-improvements?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26195 Thu, 28 May 2026 19:27:58 +0200 https://symfony.com/blog/new-in-symfony-8-1-dependency-injection-improvements?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26195 Grateful for `AsTaggedItem` on voters and the stringer `Target` possibilities. Thank you. https://symfony.com/blog/new-in-symfony-8-1-dependency-injection-improvements?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26194 Thu, 28 May 2026 18:54:00 +0200 https://symfony.com/blog/new-in-symfony-8-1-dependency-injection-improvements?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26194 This makes the container so much more convenient to use. Thank you! https://symfony.com/blog/new-in-symfony-8-1-dependency-injection-improvements?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26193 Thu, 28 May 2026 16:19:04 +0200 https://symfony.com/blog/new-in-symfony-8-1-dependency-injection-improvements?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26193 I'm so happy to see *named autowiring aliases w/o `#[Target]`* is being deprecated/removed! I recently did a short video on the dangers of it. https://www.youtube.com/watch?v=t2CdE7DgmmM https://symfony.com/blog/claude-mythos-audited-symfony-and-found-19-vulnerabilities?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26192 Thu, 28 May 2026 12:39:14 +0200 https://symfony.com/blog/claude-mythos-audited-symfony-and-found-19-vulnerabilities?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26192 @Kristian yes! It's not a big number. But, we don't know how much computing effort was put on this first analysis. Hopefully we get a new analysis and then we can see if more issues are reported. https://symfony.com/blog/claude-mythos-audited-symfony-and-found-19-vulnerabilities?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26191 Wed, 27 May 2026 15:13:28 +0200 https://symfony.com/blog/claude-mythos-audited-symfony-and-found-19-vulnerabilities?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26191 Am I the only one who is amazed that only 19 issues were found in Symfony? https://symfony.com/blog/new-in-symfony-8-1-improved-console-input?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26190 Tue, 26 May 2026 13:43:54 +0200 https://symfony.com/blog/new-in-symfony-8-1-improved-console-input?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26190 Amazing features ! https://symfony.com/blog/new-in-symfony-8-1-validator-improvements?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26189 Sun, 24 May 2026 20:38:14 +0200 https://symfony.com/blog/new-in-symfony-8-1-validator-improvements?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26189 Loving the XML constraint! https://symfony.com/blog/new-in-symfony-8-1-validator-improvements?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26187 Tue, 19 May 2026 20:12:59 +0200 https://symfony.com/blog/new-in-symfony-8-1-validator-improvements?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26187 Nice! I especially like the Clock-aware Comparison. Good job. https://symfony.com/blog/symfony-7-4-11-released?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26186 Mon, 18 May 2026 15:54:26 +0200 https://symfony.com/blog/symfony-7-4-11-released?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26186 User impersonation seems to be broken with Symfony 7.4.11 (see https://symfony.com/doc/7.4/security/impersonating_user.html), but we haven't figure out the reason yet. https://symfony.com/blog/new-in-symfony-8-1-http-less-symfony-applications?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26185 Mon, 18 May 2026 02:05:27 +0200 https://symfony.com/blog/new-in-symfony-8-1-http-less-symfony-applications?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26185 This is simply amazing! I've been waiting for this for a long time. The next logical step seems to be to add container inheritance/scopes/contexts, and then Symfony will be just perfect: ```php // as is $kernel = $builder->getContainer(); // separate for… https://symfony.com/blog/symfonyday-montreal-2026-symfony-8-the-hexagonal-track?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26184 Sun, 17 May 2026 05:17:08 +0200 https://symfony.com/blog/symfonyday-montreal-2026-symfony-8-the-hexagonal-track?utm_source=Symfony%20Blog%20Feed&utm_medium=feed#comment-26184 From 2022 to 2025, I worked on a Symfony project where the lead developer chose DDD simply because he liked it. We spent more than double the budget and delivered the same result a standard Symfony setup would have produced. The lesson: never add complexity…