How symfony is put together
symfony/symfony is the monorepo of the Symfony PHP framework, containing reusable Components (standalone libraries), Bundles (framework integrations), Bridges (integrations with third-party libraries such as Doctrine, Monolog, Twig, and PHPUnit), and Contracts (abstraction interfaces) under src/Symfony/. It is a library/framework repository rather than an application: there are no HTTP routes or deployable entrypoints defined here; downstream applications compose these packages via Composer. Each package ships its own composer.json, LICENSE, README, and phpunit.xml.dist, and splitsh.json indicates packages are split into standalone repositories. Development targets the 8.2 branch with per-minor-version CHANGELOG and UPGRADE files.
Languages
Frameworks
Major components
src/Symfony/Component/*
Standalone, decoupled PHP libraries (Asset, AssetMapper, BrowserKit, Cache, Clock, etc.) usable independently of the full framework.
src/Symfony/Bundle/FrameworkBundle
The core bundle that wires Symfony Components into a full-stack application kernel, including KernelBrowser for test HTTP clients.
src/Symfony/Bundle/SecurityBundle
Framework integration of the security layer (authentication/authorization configuration and services).
src/Symfony/Bridge/Doctrine
Integration between Symfony and Doctrine, including ManagerRegistry and a container-aware event manager.
src/Symfony/Bridge/Twig + Bundle/TwigBundle
Twig engine integration: AppVariable exposure to templates, undefined-callable handling, template iteration, and TwigBundle wiring.
src/Symfony/Bridge/Monolog
Integration between Symfony's logging services and the Monolog logging library.
src/Symfony/Bridge/PhpUnit
Testing utilities: ClockMock, DnsMock, ClassExistsMock, deprecation error handling, coverage listener, and PHPUnit extension/bootstrap.
src/Symfony/Contracts
Minimal PHP interfaces/abstractions that decouple Symfony components from concrete implementations.
A quieter week focused on bug fixes across Notifier, Serializer, HttpClient, Cache, and PropertyInfo, plus a Console feature for dropping multiple files.
5 weeksWeek of 2026-08-24
Week of 2026-08-24latest
A quieter week focused on bug fixes across Notifier, Serializer, HttpClient, Cache, and PropertyInfo, plus a Console feature for dropping multiple files.
Week of 2026-08-17
A very busy week with 360 commits: version 8.1.5 was released alongside a wave of security-minded fixes in Filesystem, Mime, and CssSelector, plus many translation reviews.
Week of 2026-08-10
A small but significant week adding several forward-looking features, including a MongoDB bridge for Messenger and richer type support in commands.
Week of 2026-07-27
A single targeted improvement bringing modern PHP number handling to validation constraints.
Week of 2026-07-06
One accessibility-focused change making the web profiler usable with keyboards and screen readers.
The last few weeks show a steady stream of bug fixes across Symfony's components—especially around translations, HTTP handling, and file operations—alongside a few notable new features like multi-file drag-and-drop in the Console and smarter dependency injection. A maintenance release (8.1.5) shipped mid-August, and the team also invested in accessibility improvements for error pages and the profiler. Overall it's a period of polish and reliability work rather than big architectural changes.
Week by week
2026-08-24A quieter week focused on bug fixes across Notifier, Serializer, HttpClient, Cache, and PropertyInfo, plus a Console feature for dropping multiple files.latest6 changes
Fix
Telegram messages escape special characters correctly
Notifications sent via Telegram now properly escape MarkdownV2 markup so messages with special characters don't break.
Feature
Console accepts multiple dropped files
You can now drop several files at once into a console command instead of just one.
Fix
Redis Sentinel authentication fixed
Caching with Redis Sentinel now authenticates to the master server correctly.
Fix
HttpClient Guzzle handler no longer consumes responses early
Fixed an issue where responses could be read out of order when using the Guzzle-based HTTP client handler.
Fix
PropertyInfo ignores static named constructors
Static factory methods are no longer mistaken for property accessors or mutators, preventing wrong property type detection.
Fix
Exception page better announces itself to screen readers
The error page now tells assistive technologies only what's relevant, improving accessibility.
2026-08-17A very busy week with 360 commits: version 8.1.5 was released alongside a wave of security-minded fixes in Filesystem, Mime, and CssSelector, plus many translation reviews.6 changes
Chore
Symfony 8.1.5 released
A maintenance release shipped with all of the week's accumulated fixes.
Fix
Temporary files stay private
Files created by tempnam() with a suffix are no longer world-readable, closing a potential privacy issue.
Fix
PGP key paths can't be misread as gpg options
Email signing no longer risks treating a key file path as a command-line option to the gpg tool.
Fix
CSS selector nesting depth capped
Deeply nested :is() and :where() selectors are limited to prevent performance problems or crashes.
Fix
MailerSend webhooks version 2 supported
The Mailer component can now process the newer format of MailerSend delivery notifications.
Docs
Validator translations reviewed in many languages
Russian, Urdu, Serbian, Turkish, and Polish validation messages were reviewed and improved for accuracy.
2026-08-10A small but significant week adding several forward-looking features, including a MongoDB bridge for Messenger and richer type support in commands.5 changes
Feature
MongoDB bridge added to Messenger
Applications can now use MongoDB as a message queue transport for background jobs.
Feature
Union and intersection types supported in command arguments
Controllers and console commands can declare more complex PHP types for their arguments and have them resolved automatically.
Feature
New #[AutowireClassMap] attribute
A new attribute lets you inject a map of classes built from tagged services, simplifying service wiring.
Feature
Console supports pasting multiple files in a row
Commands can accept several files pasted one after another.
Feature
GroupSequence accepts ::class constants
Validation group sequences can reference the annotated class using its ::class constant, making configs cleaner.
2026-07-27A single targeted improvement bringing modern PHP number handling to validation constraints.1 change
Feature
BcMath\Number support in comparison and Range constraints
Validators can now compare values against PHP's arbitrary-precision BcMath number type without errors.
2026-07-06One accessibility-focused change making the web profiler usable with keyboards and screen readers.1 change
Feature
Profiler panels keyboard and screen reader accessible
Developers using assistive technology can now navigate the debug profiler panels fully from the keyboard.
Dependencies and code review
Dependency advisories
Security Watch
No known advisories across 0 scanned dependencies.
No known advisories in the scanned dependencies.
Code review
No concrete code-level issues confirmed.
Get this report every week for your repos.
GitZoid learns each repo, reports what changed, and flags what needs attention. One flat price for the whole team.
$19 a month, flat · First 10 outputs free · No card required