A Week of Symfony #811 (11-17 July 2022)

This week, we focused on finishing several new features for the upcoming Symfony 6.2 version: Console added support for multiple choice questions; we applied the SensitiveParameter PHP attribute to all the parameters that can contain sensitive values such as security tokens and passwords; and we enabled the use of lazy-loading ghost object proxies in Dependency Injection. Finally, we moved #[IsGranted()], #[Template()] and #[Cache()] attributes into Symfony components so we can get rid of the SensioFrameworkExtra bundle.

Symfony development highlights

This week, 42 pull requests were merged (33 in code and 9 in docs) and 25 issues were closed (17 in code and 8 in docs). Excluding merges, 27 authors made 30,698 additions and 14,089 deletions. See details for code and docs.

4.4 changelog:

  • 43126b1: [Messenger] fix calls to deprecated DBAL methods
  • b1cd4b0: [HttpFoundation] fix deleteFileAfterSend on client abortion
  • 2184f32: [BrowserKit] fix sending request to paths containing multiple slashes
  • 92c7e6e: [HttpFoundation] flush backend output buffer after closing

5.4 changelog:

  • 550e4cc: [Validator] fix traverse option on Valid constraint when used as Attribute
  • 9eca550: [Validator] fix PHP warning in NotCompromisedPasswordValidator
  • 8dd6bb7: [Serializer] prevent that bad Ignore method annotations lead to incorrect results

6.2 changelog:

  • 7c194b9: [HttpKernel] refactored some code to remove else logic
  • 47b66a9: [Console] add multiple select to choice()
  • 4a31363: hide sensitive information with SensitiveParameter PHP attribute
  • 3edca67, fa24df6: [Security] add #[IsGranted()]
  • 378902e: [TwigBridge] add #[Template()] to describe how to render arrays returned by controllers
  • 338daf2: [VarExporter] add trait to help implement lazy loading ghost objects
  • 96667d3: [HttpKernel] add #[Cache()] to describe the default HTTP cache headers on controllers
  • d095a50: [DependencyInjection] use lazy-loading ghost object proxies out of the box
  • c3bad04: [TwigBridge] add test on _template attribute for Twig listener
  • e938174: [DependencyInjection] fix dumping lazy services with parametrized class
  • 8a6fa52: [DependencyInjection, VarExporter] fix support for lazy withers
  • 2bf5206: [VarExporter] do not call unset() on unknown variables
  • a2f27ad: [Console] be explicit about the completion API version
  • 5bc5827: [FrameworkBundle] add "Usages" to debug:container output

Newest issues and pull requests

SymfonyCasts Updates

SymfonyCasts is the official way to learn Symfony. Select a track for a guided path through 100+ video tutorial courses about Symfony, PHP and JavaScript.

These were some of the most relevant SymfonyCasts updates of the week:

They talked about us

Call to Action

            <hr style="margin-bottom: 5px" />
            <div style="font-size: 90%">
                <a href="https://symfony.com/sponsor">Sponsor</a> the Symfony project.
            </div>

https://symfony.com/blog/a-week-of-symfony-811-11-17-july-2022?utm_source=Symfony%20Blog%20Feed&utm_medium=feed

Létrehozva 3y | 2022. júl. 17. 10:20:09


Jelentkezéshez jelentkezzen be

EGYÉB POSTS Ebben a csoportban

New in Symfony 7.3: New Bridges and Improved Integrations

Symfony's bridge packages integrate third-party services, such as mailers, notifiers, and translation providers, into Symfony applications. With more than 120 bridges available today, Symfony supports

2025. máj. 23. 9:30:04 | Symfony
New in Symfony 7.3: Messenger Improvements

Symfony Messenger component keeps evolving to meet the needs of complex, modern applications. In Symfony 7.3, we're introducing several powerful features to it.

Run Process Using the Shell… https://s

2025. máj. 22. 7:50:11 | Symfony
New in Symfony 7.3: Routing Improvements

The Routing component provides an impressive list of features to map incoming URLs to your application code. Symfony 7.3 pushes it even further with a set of new features that improve developer experi

2025. máj. 21. 11:10:07 | Symfony
New in Symfony 7.3: JsonStreamer Component

Contributed by Mathias Arlaud in

2025. máj. 20. 9:30:13 | Symfony
Symfony UX CVE-2025-47946: Unsanitized HTML attribute injection via ComponentAttributes

Affected versions

Symfony UX symfony/ux-live-component and symfony/ux-twig-component versions <2.25.1 are affected by this security issue.

The issue has been fixed in the 2.25.1 version of these

2025. máj. 19. 12:40:14 | Symfony
New in Symfony 7.3: Yaml Improvements

Symfony has been reducing the need for configuration in applications for several years now. Thanks to PHP attributes, you can now configure most things alongside the relevant code, removing the need f

2025. máj. 19. 8:10:09 | Symfony
A Week of Symfony #959 (May 12–18, 2025)

This week, development activity focused on polishing Symfony 7.3 ahead of its final release in two weeks. We also continued publishing articles highlighting the new features of Symfony 7.3 and shared

2025. máj. 18. 8:50:08 | Symfony