Welcome to this week’s Symfony Station communiqué. It’s your review of the essential news in the Symfony and PHP development communities focusing on protecting democracy.
There’s good content in all of our categories, so please take your time and enjoy the items most relevant and valuable to you.
We publish on Fridays. So you can savor it over your weekend.
Or jump straight to your favorite section.
My opinions will be in bold. And will often involve cursing. Because humans. Especially tech bros. Fuck ’em!
**We’re back from France scouting locations for The Fulcrum’s worldwide HQ. ;) Occitanie won out…
Welcome to this week’s Symfony Station communiqué. It’s your review of the essential news in the Symfony and PHP development communities focusing on protecting democracy.
There’s good content in all of our categories, so please take your time and enjoy the items most relevant and valuable to you.
We publish on Fridays. So you can savor it over your weekend.
Or jump straight to your favorite section.
My opinions will be in bold. And will often involve cursing. Because humans. Especially tech bros. Fuck ’em!
We’re back from France scouting locations for The Fulcrum’s worldwide HQ. ;) Occitanie won out for the region (department). We’re still working on the town. Nimes, Montpellier, and Toulouse are in the final.
The Programmer’s Fulcrum is the future (and smaller) home for a fusion of Symfony Station and Battalion. Its tagline is Devs Defending Democracy, Developing the OMN.
You can sign up now and for 2025 get an email with links to each week’s Symfony Station Communiqué and Battalion “Destroying Autocracy” post along with their featured articles. And you’ll be set with TPF after the fusing.
We are posting on the Fediverse now at @thefulcrum@thefulcrum.dev and original website content will start in 2026.
Symfony
As always, we will start with the official news from Symfony.
This week, Symfony released the maintenance versions 6.4.27 and 7.3.5. In addition, we published 7.4.0-BETA1 and 8.0.0-BETA1 so you can test them before their final release in four weeks. Meanwhile, we shared a new case study about Symfony and more details about SymfonyCon Amsterdam 2025, which starts in less than 30 days.
October 27 – November 2, 2025 A Week of Symfony 983
They also have:
New in Symfony 7.4 Request Class Improvements
New in Symfony 7.4 Attribute Improvements
New in Symfony 7.4 Decoupled Controller Helpers
New in Symfony 7.4: Improved Invokable Commands
New in Symfony 7.4: Multi-Step Forms
New in Symfony 7.4: Better Currency Filtering
New in Symfony 7.4 Share Directory
New in Symfony 7.4 Better Exceptions in Terminal
New in Symfony 7.4: Weighted Workflow Transitions
New in Symfony 7.4 Video Constraint
SymfonyCon Amsterdam 2025: Integrating WordPress and Symfony
Very interesting.
SymfonyCon Amsterdam 2025: ClickHouse for Symfony developers
SymfonyCon Amsterdam 2025: From PR to launch: how code becomes product narrative
Featured Item
Pivale writes about Drupal Canvas:
For Drupal site builders and marketing teams, this means less waiting and more doing. You don’t have to ask a developer to sculpt a layout or preview it two days later. You drop a component, tweak inline, adjust spacing, swap content, and you’re live. It’s simple, visual, and empowering.
For frontend and JavaScript developers, Canvas opens a whole new door. It’s powered by code components, meaning developers can build reusable elements using JSX and CSS directly in the browser, with full access to page data, APIs, and dynamic behaviour. Under the hood, it runs on Preact, so anyone familiar with React will feel right at home. It’s a smooth bridge between Drupal and the modern frontend world.
Canvas also works beautifully with Single Directory Components (SDC), so your existing components in Drupal Core or your theme can appear right in the Canvas interface. This lets teams build pages visually using existing components, combining the ease of a no-code editing experience with the structure and consistency of Drupal’s component system.
Drupal Canvas: Drupal’s visual leap
Can they pull it off?
This Week
Matt Mochalkin explores:
The Symfony/HttpClient Cookbook: 4 Enterprise Patterns You Haven’t Seen
eCommerce
PrestaShop has:
PrestaShop Core Monthly - October 2025
Centarro has:
Streamlining Purchases with URL-Based Cart Operations
CMSs
Joomla has:
Joomla Officially Recognized as a Digital Public Good
Call for Candidate Manifestos - Secretary Replacement
Die Grenzen automatischer Barrierefreitstests: Farbkontraste
TYPO3 has:
ACL Enhancements — Permission Sets in TYPO3
This Month in TYPO3: October 2025, Issue 30
Introducing Live Documentation Preview
TYPO3Camp RheinRhur announces:
Wolfgang Wagner shares:
In2Code has:
Hinter den Kulissen: Ein Gespräch mit Peter, Teamlead des TYPO3 Localization Teams
B13 examines:
Coding, Collaboration, and Community: My Week at the TYPO3 v14 Feature Sprint in Geneva
Drupal has:
Showcasing Drupal Excellence: Refreshed Industry Pages and a Renewed Commitment
Dries Buyaert has:
Connecting Drupal with Activepieces
Setting up an Activepieces development environment
Setting up an Activepieces development environment
Automation and productivity tools like this are a legitimate use of AI. Gen AI can still fuck off.
Tag1 looks at:
Drupal CMS 2.0 Performance Testing
Dripyard explores:
Preparing Dripyard themes for Drupal Canvas
ImageX Media looks at:
Example User Roles for Nonprofit and Higher Ed Drupal Sites
Previous Week
Drupal announces:
Drupal to Enhance Security and Developer Tools thanks to Sovereign Tech Fund Investment
Centarro examines:
Belgrade, a Drupal Commerce Theme, Evolves to Match Real-World Requirements
PHP
This Week
Ryan Stubbs writes:
JetBrains looks at:
Unmanaged Files in Drupal (Part 6): Category-Aware Random Selection
xDebug announces:
Sebastian Bergmann explores:
More control, less friction: What’s new in PHPUnit 12.4?
Code Craft Diary shows us:
How to practice Feature Testing with PHP examples
Victor examines:
Demeter’s Law in PHP: Principle, Examples, and Best Practices
Dominik Chrástecký looks at:
Fun with PHP: Changing Readonly Properties and Other Shenanigans
Paytoliya explores:
Building Domain-Driven Design (DDD) Applications with PHP
De geek à directeur technique examines:
De PHP 8.0 à PHP 8.5, retour sur cinq ans d’innovation
More Programming
Open SSF shares:
Open Infrastructure is Not Free: A Joint Statement on Sustainable Stewardship
BleepingComputer reports:
Fake Solidity VSCode extension on Open VSX backdoors developers
AI-Slop ransomware test sneaks on to VS Code marketplace
DomoPi looks at:
Dockge, une alternative légère et simple à Portainer pour gérer les stacks Docker Compose
Philippe Charrière has:
Drastically Reduce and Improve the CI/CD Feedback Loop by Going Local with Docker Compose: Part 1
Good stuff.
TheNewStack lists:
Best Linux Distros for Development
Ollie Williams explores:
setHTML(), Trusted Types and the Sanitizer API
CSS Tricks is:
Explaining the Accessible Benefits of Using Semantic HTML Elements
Web Technology News reports:
When Everyone’s a Developer, How Do We Promote the Web Platform Over React?
Den Odell shares:
Escape Velocity: Break Free from Framework Gravity
More on the odious effects of React and the c^nts who keep choosing it.
Smashing Magazine has:
Smashing Animations Part 6: Magnificent SVGs With < use > And CSS Custom Properties
Josh Comeau examines:
Springs and Bounces in Native CSS
Piccalilli demonstrates:
Some practical examples of view transitions to elevate your UI
Fighting for Democracy
Please visit Symfony Stations Support Ukraine page to learn how you can help kick Russia out of Ukraine (eventually, like ending apartheid in South Africa).
The cyber response to Russia’s War Crimes, Techno Feudalism, and other douchebaggery
Tech Policy reports:
Mayor-Elect Mamdani Can Build a Tech Agenda for New York and a Model for the Country
Let’s fucking hope so.
The Markup reports:
Why a new California law could change the way all Americans browse the internet
The Evil Empire Strikes Back
Tech Policy reports:
Next Steps for Mitigating Harm in the UN Cybercrime Convention
ArsTechnica reports:
Bombshell report exposes how Meta relied on scam ad profits to fund AI
Cybersecurity and Privacy
DarkReading reports:
‘TruffleNet’ Attack Wields Stolen Credentials Against AWS
Krebs on Security reports:
Cloudflare Scrubs Aisuru Botnet from Top Domains List
Fediverse
Connect Places has:
On the coordination for better moderation systems
The Privacy Nexus has:
Media Liberation Day: how can we help newcomers get started and have a good experience on Fedi?
Other Slightly Federated Social Media
Connected Places has:
Decentralisation and blogging on atproto
This is why I say that although Bluesky will 100% become enshittified, ATProto has potential.
A New Social announces:
Launch: New Blocking Features on Bridgy Fed
CTAs (aka show us some free love)
- That’s it for this week. Please share this communiqué.
- Follow us on Flipboard or at @symfonystation@drupal.community on Mastodon for daily coverage.
Do you own or work for an organization that would be interested in our promotion opportunities? Or supporting our journalistic efforts? If so, please get in touch with us.
More importantly, if you are a Ukrainian company with coding-related products, we can offer free promotion on our Support Ukraine page. Or, if you know of one, get in touch.
You can find a vast array of curated evergreen content on our communiqués page.