Symfony Station Communique - Stardate: ✦ 18 April 2025 ✦ View
Welcome to this week's Symfony Station communiqué. It's your review of the essential news in the Symfony and PHP development communities focusing on protecting democracy.
There's good content in all of our categories, so please take your time and enjoy the items most relevant and valuable to you.
This is why we publish on Fridays. So you can savor it over your weekend.
Or jump straight to your favorite section.
Once again, thanks go out to Javier Eguiluz and the team at Symfony for sharing our communiqué in their Week of Symfony.
My opinions will be in bold. And will often involve cursing. Because humans. Especially tech bros.
Symfony
As always, we will start with the official news from Symfony.
This week, Symfony 7.3 entered its "feature freeze" period in preparation for its release at the end of May 2025. Development activity focused on refining and polishing its new features, including a new feature to configure compound rate limiters and new utility methods added to the JsonPath component.
April 7–13, 2025: A Week of Symfony #954
They also have:
SymfonyLive Paris 2025 Recap and replay!
SymfonyOnline June 2025: Rethinking File Handling in Symfony
SymfonyCasts has:
Featured Item
Michał Kurzeja interviews Roman Pronskiy, who works at JetBrains as the Executive Director of the PHP Foundation:
Insights from the PHP Foundation Executive Director
This Week
Ludovic Frank shows us how to:
Implémenter OAuth2 dans Symfony : guide pour sécuriser vos API
Tomas Votruba explains:
How we Maintain Dozens of Symfony Workflows with Peace
Ilyas Deckers explores:
Single Action Handlers in PHP Frameworks
Roman Huliak examines:
DateTime handling in native PHP
How To
Tihomir Manushev has:
Fixing OWASP API 7: 2023 — Server-Side Request Forgery (SSRF) in Symfony 7
LaurentMN has:
10 Advanced Symfony DebugBundle Features Every Dev Should Know (Symfony 7 Ready)
Bhavin Nakrani has:
Simplifying Image Processing in Symfony: LiipImagineBundle
Event Listener vs Event Subscriber in Symfony: What’s the Difference?
Pentest has:
IDOR Vulnerability in Symfony: How to Detect and Fix It
eCommerce
Amasty says:
Magento 2.4.8 Is Here, And It Brought a Broom for Your Codebase
Tidways shares its:
Performance Benchmark Report Q1 2025 for Shopware 6
Sylius has its:
CMSs
Sulu has:
Hot Rod or Clunker? Five Steps to Achieve Top CMS Performance
TYPO3 has:
T3CON24 Recap – Navigating Sustainable Governance and the Future of Sustainability Communication
Eric Harrer looks at:
WebP-Konvertierung in TYPO3 13 zentral aktivieren
Wolfgang Wagner shares:
Shocking Truth: Deine TYPO3-Website überlebt auch ohne Cookie-Banner!
Joomla has:
Drupal has:
Drupal 11.2 alpha phase begins May 7
DrupalCon Atlanta 2025: A Celebration of Community, Innovation, and Impact
Announcing four new Drupal core leaders and a strategy update in the works
Amazee shares:
Introducing Private AI at DrupalCon Atlanta
Acquia has:
Drupal Experience Builder and Acquia Site Studio Q&A
Mario Hernandez explores:
Using modern image formats to improve performance
Specbee examines:
Sorting node data using the Entity Queue module in Drupal
Tag1 Consulting finishes a long series:
Improving Drupal CMS Performance with Gander: Real-World Wins and Lessons
ImageX Media looks at:
Drupal Image Optimization, Part 1: Modules for Better Visual Presentation
Important stuff.
Golems explores:
Drupal cloud development using devcontainers
Previous Weeks
Shopware has:
Shopware Developer Digest March 2025
PHP
This Week
Laravel News reports:
Doğan Uçar examines:
What the 2025 PHP Security Audit Reveals - Why It Matters for Production Systems
Atakan Demircioğlu looks at:
Getting to Know PHP’s WeakMap: The Smart Way to Cache Without Memory Leaks
Patch Level explores:
What is New in PHP Event Sourcing 3.9 & 3.10
Roman Huliak examines:
Understanding PHP Autoloading: A modern guide for clean and efficient code
Daniel Rotter looks at:
Batch curl requests in PHP using multi handles
Markus Staab explores:
PHPStan remembered types from constructor
Valerio Barbera examines a:
LangChain alternative for PHP developers
[php]architect looks at:
Super Charging Development with DocBlock
Ilyas Deckers explores:
PHP + Static Analysis vs. Native Statically Typed Languages
Robert James examines:
Mastering Local PHP Environments with .servbay.config: A Config-Driven Alternative to Docker
More Programming
The Savvy Few has:
The European Accessibility Act: Everything You Need to Know
The Register reports:
LLMs can't stop making up software dependencies and sabotaging everything
Ars Technica reports:
Company apologizes after AI support agent invents policy that causes user uproar
Delan Azabani looks at:
They just said no-o. ;)
iA explores:
Markdown and the Slow Fade of the Formatting Fetish
Super cool.
That HTML Blog asks:
A Unified CSS Layout System: Could It Happen?
Ahmad Shadeed explores:
Fighting for Democracy
Here we feature several items from each section of Battalion's weekly "Defending Democracy" report.
Get all the news from the front of democracy's battle against autocracy via its latest "Defending Democracy" post. And please follow Battalion via RSS or on the Fediverse at battalion@battalion.mobileatom.net.
Please visit Symfony Stations Support Ukraine page to learn how you can help kick Russia out of Ukraine (eventually, like ending apartheid in South Africa).
The cyber response to Russia’s War Crimes and other douchebaggery
Harvard shares:
Understanding DOGE and Your Data
The Electronic Frontier Foundation reports:
Privacy on the Map: How States Are Fighting Location Surveillance
The Evil Empire Strikes Back
MIT Technology Review reports:
DOGE’s tech takeover threatens the safety and stability of our critical data
NPR reports:
A whistleblower's disclosure details how DOGE may have taken sensitive labor data
Cybersecurity / Privacy
Reuters reports:
Cybersecurity industry falls silent as Trump turns ire on SentinelOne
The Register reports:
CVE program gets last-minute funding from CISA – and maybe a new home
CVE fallout: The splintering of the standard vulnerability tracking system has begun
Fediverse
The Fediverse Report has:
The Nexus of Privacy reports:
On FediForum (and not just FediForum)
Other Slightly Federated Social Media
Ben Werdmuller shares:
The Fediverse Report has:
Bluesky, censorship and country-based moderation
CTAs (aka show us some free love)
- That’s it for this week. Please share this communiqué.
- Follow us on Flipboardor at @symfonystation@drupal.community on Mastodon for daily coverage.
Do you own or work for an organization that would be interested in our promotion opportunities? Or supporting our journalistic efforts? If so, please get in touch with us.
More importantly, if you are a Ukrainian company with coding-related products, we can offer free promotion on our Support Ukraine page. Or, if you know of one, get in touch.
You can find a vast array of curated evergreen content on our communiqués page.
