Symfony Station Communiqué - 11 April 2025 - A look at Symfony, Drupal, PHP, and other programming news!

This communiqué originally appeared on Symfony Station. Welcome to this week's Symfony Station communiqué. It's your review of the essential news in the Symfony and PHP development communities focusing on protecting democracy. There's good content in all of our categories, so please take your time and enjoy the items most relevant and valuable to you. This is why we publish on Fridays. So you can savor it over your weekend. Or jump straight to your favorite section via our website. Symfony Universe PHP More Programming Defending Democracy Cybersecurity Fediverse Once again, thanks go out to Javier Eguiluz and the team at Symfony for sharing our communiqué in their Week of Symfony. My opinions will be in bold. And will often involve cursing. Because humans. Especially tech bros. Symfony As always, we will start with the official news from Symfony. This week, Symfony 7.3 entered its "feature freeze" period in preparation for its release at the end of May 2025. Development activity focused on refining and polishing its new features, including a new feature to configure compound rate limiters and new utility methods added to the JsonPath component. April 7–13, 2025: A Week of Symfony #954 They also have: SymfonyLive Paris 2025 Recap and replay! SymfonyOnline June 2025: Rethinking File Handling in Symfony SymfonyCasts has: This week on SymfonyCasts! Featured Item Michał Kurzeja interviews Roman Pronskiy, who works at JetBrains as the Executive Director of the PHP Foundation: Insights from the PHP Foundation Executive Director This Week Ludovic Frank shows us how to: Implémenter OAuth2 dans Symfony : guide pour sécuriser vos API Tomas Votruba explains: How we Maintain Dozens of Symfony Workflows with Peace Ilyas Deckers explores: Single Action Handlers in PHP Frameworks Roman Huliak examines: DateTime handling in native PHP How To Tihomir Manushev has: Fixing OWASP API 7: 2023 — Server-Side Request Forgery (SSRF) in Symfony 7 LaurentMN has: 10 Advanced Symfony DebugBundle Features Every Dev Should Know (Symfony 7 Ready) Bhavin Nakrani has: Simplifying Image Processing in Symfony: LiipImagineBundle Event Listener vs Event Subscriber in Symfony: What’s the Difference? Pentest has: IDOR Vulnerability in Symfony: How to Detect and Fix It eCommerce Amasty says: Magento 2.4.8 Is Here, And It Brought a Broom for Your Codebase Tidways shares its: Performance Benchmark Report Q1 2025 for Shopware 6 Sylius has its: Month of Sylius: March CMSs Sulu has: Hot Rod or Clunker? Five Steps to Achieve Top CMS Performance TYPO3 has: Coder's Corner: March 2025 T3CON24 Recap – Navigating Sustainable Governance and the Future of Sustainability Communication Eric Harrer looks at: WebP-Konvertierung in TYPO3 13 zentral aktivieren Wolfgang Wagner shares: Shocking Truth: Deine TYPO3-Website überlebt auch ohne Cookie-Banner! Joomla has: Joomla 5.3 is here! Drupal has: Drupal 11.2 alpha phase begins May 7 DrupalCon Atlanta 2025: A Celebration of Community, Innovation, and Impact Announcing four new Drupal core leaders and a strategy update in the works Amazee shares: Introducing Private AI at DrupalCon Atlanta Acquia has: Drupal Experience Builder and Acquia Site Studio Q&A Mario Hernandez explores: Using modern image formats to improve performance Specbee examines: Sorting node data using the Entity Queue module in Drupal Tag1 Consulting finishes a long series: Migrations How-To: #31, Migrating Your Data from D7 to D10: Debugging tips, performance considerations, Drupal CMS, AI-assisted migrations and more! Improving Drupal CMS Performance with Gander: Real-World Wins and Lessons ImageX Media looks at: Drupal Image Optimization, Part 1: Modules for Better Visual Presentation Important stuff. Golems explores: Drupal cloud development using devcontainers Previous Weeks Shopware has: Shopware Developer Digest March 2025 PHP This Week Laravel News reports: PhpStorm 2025.1 is Here Doğan Uçar examines: What the 2025 PHP Security Audit Reveals - Why It Matters for Production Systems Atakan Demircioğlu looks at: Getting to Know PHP’s WeakMap: The Smart Way to Cache Without Memory Leaks Patch Level explores: What is New in PHP Event Sourcing 3.9 & 3.10 Roman Huliak examines: Understanding PHP Autoloading: A modern guide for clean and efficient code Daniel Rotter looks at: Batch curl requests in PHP using multi handles Markus Staab explores: PHPStan remembered types from constructor Valerio Barbera examines a: LangChain alternative for PHP developers [php]architect looks at: Super Charging Development with DocBlock Ilyas Deckers explores: PHP + Static Analysis vs. Native Statically Typed Languages Robert James examines: Mastering Local PHP Environments with .servbay.config: A Config-Driven Alternative to Docker More Programming

Apr 19, 2025 - 21:44

This communiqué originally appeared on Symfony Station.

Welcome to this week's Symfony Station communiqué. It's your review of the essential news in the Symfony and PHP development communities focusing on protecting democracy.

There's good content in all of our categories, so please take your time and enjoy the items most relevant and valuable to you.

This is why we publish on Fridays. So you can savor it over your weekend.

Or jump straight to your favorite section via our website.

Once again, thanks go out to Javier Eguiluz and the team at Symfony for sharing our communiqué in their Week of Symfony.

My opinions will be in bold. And will often involve cursing. Because humans. Especially tech bros.

Symfony

As always, we will start with the official news from Symfony.

This week, Symfony 7.3 entered its "feature freeze" period in preparation for its release at the end of May 2025. Development activity focused on refining and polishing its new features, including a new feature to configure compound rate limiters and new utility methods added to the JsonPath component.

April 7–13, 2025: A Week of Symfony #954

They also have:

SymfonyLive Paris 2025 Recap and replay!

SymfonyOnline June 2025: Rethinking File Handling in Symfony

SymfonyCasts has:

This week on SymfonyCasts!

PHP

This Week

Laravel News reports:

PhpStorm 2025.1 is Here

Doğan Uçar examines:

What the 2025 PHP Security Audit Reveals - Why It Matters for Production Systems

Atakan Demircioğlu looks at:

Getting to Know PHP’s WeakMap: The Smart Way to Cache Without Memory Leaks

Patch Level explores:

What is New in PHP Event Sourcing 3.9 & 3.10

Roman Huliak examines:

Understanding PHP Autoloading: A modern guide for clean and efficient code

Daniel Rotter looks at:

Batch curl requests in PHP using multi handles

Markus Staab explores:

PHPStan remembered types from constructor

Valerio Barbera examines a:

LangChain alternative for PHP developers

[php]architect looks at:

Super Charging Development with DocBlock

Ilyas Deckers explores:

PHP + Static Analysis vs. Native Statically Typed Languages

Robert James examines:

Mastering Local PHP Environments with .servbay.config: A Config-Driven Alternative to Docker

More Programming

The Savvy Few has:

The European Accessibility Act: Everything You Need to Know

The Register reports:

LLMs can't stop making up software dependencies and sabotaging everything

Ars Technica reports:

Company apologizes after AI support agent invents policy that causes user uproar

Delan Azabani looks at:

Generative AI in Servo

They just said no-o. ;)

iA explores:

Markdown and the Slow Fade of the Formatting Fetish

Super cool.

That HTML Blog asks:

A Unified CSS Layout System: Could It Happen?

Ahmad Shadeed explores:

Item Flow

Fighting for Democracy

The cyber response to Russia’s War Crimes and other douchebaggery

Harvard shares:

Understanding DOGE and Your Data

The Electronic Frontier Foundation reports:

Privacy on the Map: How States Are Fighting Location Surveillance

The Evil Empire Strikes Back

MIT Technology Review reports:

DOGE’s tech takeover threatens the safety and stability of our critical data

NPR reports:

A whistleblower's disclosure details how DOGE may have taken sensitive labor data

Cybersecurity/Privacy

Reuters reports:

Cybersecurity industry falls silent as Trump turns ire on SentinelOne

The Register reports:

CVE program gets last-minute funding from CISA – and maybe a new home

CVE fallout: The splintering of the standard vulnerability tracking system has begun

Fediverse

The Fediverse Report has:

Fediverse Report – #112

The Nexus of Privacy reports:

On FediForum (and not just FediForum)

Other Slightly Federated Social Media

Ben Werdmuller shares:

If I ran Bluesky Product

The Fediverse Report has:

Bluesky, censorship and country-based moderation

CTAs (aka show us some free love)

That’s it for this week. Please share this communiqué.
Follow us on Flipboardor at @symfonystation@drupal.community on Mastodon for daily coverage.

Do you own or work for an organization that would be interested in our promotion opportunities? Or supporting our journalistic efforts? If so, please get in touch with us.

More importantly, if you are a Ukrainian company with coding-related products, we can offer free promotion on our Support Ukraine page. Or, if you know of one, get in touch.

You can find a vast array of curated evergreen content on our communiqués page.

Author

Reuben Walker

Founder
Symfony Station