⚒️ FrankenPHP.dev, Mercure.rocks, @api-platform.com, @symfony.com 🧑‍💻 Founder of @les-tilleuls.coop, a developer co-ophttps://bsky.app/profile/dunglas.devhttps://bsky.app/profile/dunglas.dev/post/3mvafeb2es52r🥳 Laravel 13 will have native support for Mercure!! 🪽🤝 https://github.com/laravel/framework/pull/6147411 Sep 2026 10:48 +0000at://did:plc:gwh4dbmorcxmllcqcmffrfdi/app.bsky.feed.post/3mvafeb2es52rhttps://bsky.app/profile/dunglas.dev/post/3mv67zcej542bThe hype is real! I’m so excited to see such an incredible mix of communities coming together next week in my hometown: maintainers of Laravel, Symfony, Caddy, PHP core, and of course API Platform will be there! api-platform.com/con/2026/10 Sep 2026 14:07 +0000at://did:plc:gwh4dbmorcxmllcqcmffrfdi/app.bsky.feed.post/3mv67zcej542bhttps://bsky.app/profile/dunglas.dev/post/3mufg3foejp2bMarx, Keynes, and A.I. https://www.unpopularfront.news/p/marx-keynes-and-ai31 Aug 2026 17:19 +0000at://did:plc:gwh4dbmorcxmllcqcmffrfdi/app.bsky.feed.post/3mufg3foejp2bhttps://bsky.app/profile/dunglas.dev/post/3mssji6m4fc2b🚀 Mercure 1.0 alpha is here! The biggest release in the project’s history brings: 🎯 New matcher system built on top of the WHATWG URL Pattern ⚙️ Revamped authorization mechanism using OAuth 2.0 Rich Authorization Requests 🛠️ Brand-new UI debugger and dev playground 🔒 Security hardening https://dunglas.dev/2026/08/mercure-1-0-alpha/11 Aug 2026 11:34 +0000at://did:plc:gwh4dbmorcxmllcqcmffrfdi/app.bsky.feed.post/3mssji6m4fc2bhttps://bsky.app/profile/dunglas.dev/post/3msppyr6dn22mThis happened because the API was flawed from the start. It will keep happening unless you secure your codebase. Fix your endpoints now, or contact @les-tilleuls.coop and we'll do it for you! https://www.abc.net.au/news/2026-08-10/ai-assistant-hacks-gym-website-aus-cyber-attack/10700798610 Aug 2026 08:53 +0000at://did:plc:gwh4dbmorcxmllcqcmffrfdi/app.bsky.feed.post/3msppyr6dn22mhttps://bsky.app/profile/dunglas.dev/post/3mspmsy3lgc23Tried GitHub's new syntactic sugar for parallel action steps on FrankenPHP's CI. Gains were minimal for our use case, and it currently breaks actionlint (unsupported parallel keyword). Shelved for now: https://github.com/php/frankenphp/pull/2597#issuecomment-523728567910 Aug 2026 07:56 +0000at://did:plc:gwh4dbmorcxmllcqcmffrfdi/app.bsky.feed.post/3mspmsy3lgc23https://bsky.app/profile/dunglas.dev/post/3mskxsymykh2nThis is an absolute disgrace. We urgently need a system capable of preventing such ecocide. AI could benefit humanity, but not under capitalism. This system will kill us all. https://www.nytimes.com/2026/08/08/climate/amazon-data-center-texas-pollution.html08 Aug 2026 11:30 +0000at://did:plc:gwh4dbmorcxmllcqcmffrfdi/app.bsky.feed.post/3mskxsymykh2nhttps://bsky.app/profile/dunglas.dev/post/3msi3bf5v7s2eFrankenPHP 1.12.7 fixes a bug where output written after fastcgi_finish_request() got silently dropped in classic mode, and killed the rest of the script execution right there. If you use that pattern for background cleanup, go upgrade. https://github.com/php/frankenphp/releases/tag/v1.12.707 Aug 2026 07:53 +0000at://did:plc:gwh4dbmorcxmllcqcmffrfdi/app.bsky.feed.post/3msi3bf5v7s2ehttps://bsky.app/profile/dunglas.dev/post/3msduigt3fu2v"The AI Compass: 15 questions. Where do you actually land on AI?" bambamramfan.github.io/ai-compass/05 Aug 2026 15:42 +0000at://did:plc:gwh4dbmorcxmllcqcmffrfdi/app.bsky.feed.post/3msduigt3fu2vhttps://bsky.app/profile/dunglas.dev/post/3msaykfbrww26Ignore the propaganda in that Qwen ad for a second. The core question for the Left remains valid: boycotting AI is a dead end. AI and robotics give us the tools to build the work-free, post-scarcity utopia envisioned by Lafargue and Bookchin.04 Aug 2026 12:16 +0000at://did:plc:gwh4dbmorcxmllcqcmffrfdi/app.bsky.feed.post/3msaykfbrww26https://bsky.app/profile/dunglas.dev/post/3mrurowpuvc2u"Face à l'IA, le refus moral et le boycott constituent une défaite stratégique. Sortir du purisme pour contester le contrôle politique et social de cette technologie est un impératif." https://blogs.mediapart.fr/paul-bartali/blog/290726/face-lia-depasser-limpuissance30 Jul 2026 15:42 +0000at://did:plc:gwh4dbmorcxmllcqcmffrfdi/app.bsky.feed.post/3mrurowpuvc2uhttps://bsky.app/profile/dunglas.dev/post/3mruj5rurlk2sJust improved Caddy performance by fixing header casing on the hot path! 🚀 When using Go's net/http, make sure to use canonical HTTP header casing (e.g. Content-Type instead of content-type). Non-canonical keys trigger string formatting and allocations on every lookup. https://github.com/caddyserver/caddy/pull/7911#pullrequestreview-481789774730 Jul 2026 13:09 +0000at://did:plc:gwh4dbmorcxmllcqcmffrfdi/app.bsky.feed.post/3mruj5rurlk2shttps://bsky.app/profile/dunglas.dev/post/3mrrqafburj2hCarré Bompard sur l'IA ! https://www.youtube.com/watch?v=wTTYjqfF-Xs&t=446s29 Jul 2026 10:38 +0000at://did:plc:gwh4dbmorcxmllcqcmffrfdi/app.bsky.feed.post/3mrrqafburj2hhttps://bsky.app/profile/dunglas.dev/post/3mranxkez272pIsolate deprecated code in dedicated files behind dedicated build tags. Years later you delete ~1,700 lines in one PR, zero issues. Thanks, past-me. https://github.com/dunglas/mercure/pull/130922 Jul 2026 15:42 +0000at://did:plc:gwh4dbmorcxmllcqcmffrfdi/app.bsky.feed.post/3mranxkez272phttps://bsky.app/profile/dunglas.dev/post/3mr3dhqgxer2nFrankenPHP 1.12.5 is a security release. Upgrade if you run the official Docker images or the session extension as a shared module. Fixed: the default Docker welcome page ran phpinfo() (env vars, php.ini, system paths, all exposed). Now a static page with nothing to leak.20 Jul 2026 12:50 +0000at://did:plc:gwh4dbmorcxmllcqcmffrfdi/app.bsky.feed.post/3mr3dhqgxer2nhttps://bsky.app/profile/dunglas.dev/post/3mqwhh5uycs27🔒 Vulcain 1.4.2 is out, a security release. Fixes 3 vulnerabilities in Preload/Fields directive handling: • High: quadratic response rebuild (DoS) • Medium: unbounded JSON-pointer recursion • Low: HTTP/2 push-counter race Upgrade: https://github.com/dunglas/vulcain/releases/tag/v1.4.218 Jul 2026 14:18 +0000at://did:plc:gwh4dbmorcxmllcqcmffrfdi/app.bsky.feed.post/3mqwhh5uycs27https://bsky.app/profile/dunglas.dev/post/3mqrgkxolse2cThe countdown to #APIPlatformCon is on! Incredible speakers, deep-tech talks, and a surprise announcement during my opening keynote. If you are building real-time apps or exploring AI integrations, you need to be in the room. Secure your spot before tickets sell out: 👉 api-platform.com/con/2026/16 Jul 2026 14:19 +0000at://did:plc:gwh4dbmorcxmllcqcmffrfdi/app.bsky.feed.post/3mqrgkxolse2chttps://bsky.app/profile/dunglas.dev/post/3mq7t7ybdus2bIntroducing prompt-mac: Turn a fresh Mac into an agent-first dev powerhouse with one command 🚄 https://github.com/dunglas/prompt-mac/tree/main09 Jul 2026 14:18 +0000at://did:plc:gwh4dbmorcxmllcqcmffrfdi/app.bsky.feed.post/3mq7t7ybdus2bhttps://bsky.app/profile/dunglas.dev/post/3mouv5zi36c2vLet's face it: coding agents work pretty well these days, and Claude Code is the leader. That's why I recently patched Symfony Docker to support it out of the box. https://lnkd.in/ekU8GMYv22 Jun 2026 12:28 +0000at://did:plc:gwh4dbmorcxmllcqcmffrfdi/app.bsky.feed.post/3mouv5zi36c2vhttps://bsky.app/profile/dunglas.dev/post/3mnhllrnxys2uFrankenPHP 1.12.4 is out, a security hardening release. Underscore header spoofing is now blocked at the server layer (Caddy 2.11.4), bundled Mercure 0.24.2 security fixes land, plus worker-mode crash and race fixes. Every user should upgrade. https://github.com/php/frankenphp/releases/tag/v1.12.404 Jun 2026 12:07 +0000at://did:plc:gwh4dbmorcxmllcqcmffrfdi/app.bsky.feed.post/3mnhllrnxys2uhttps://bsky.app/profile/dunglas.dev/post/3mnc7z3csxa25Mercure 0.24.2 is out: a security hardening release. Rejects SSE field injection (CWE-93) via id/type, blocks reserved-namespace forgery, fixes a Last-Event-ID leak, caps element counts against DoS. Upgrade your hub. https://github.com/dunglas/mercure/releases/tag/v0.24.202 Jun 2026 08:56 +0000at://did:plc:gwh4dbmorcxmllcqcmffrfdi/app.bsky.feed.post/3mnc7z3csxa25https://bsky.app/profile/dunglas.dev/post/3mmrdf4a2ay2hReady to code at the speed of thought? ⚡ Forget Docker headaches and slow cache warmups. At #SymfonOnline, I’m showing how FrankenPHP redefines @symfony.com DX with instant setups, true hot reloading via Mercure, and sandboxed AI agent integration. 📅 June 12 🎟️ https://live.symfony.com/2026-online-june/schedule#coding-at-the-speed-of-thought-symfony-dx-in-202626 May 2026 15:42 +0000at://did:plc:gwh4dbmorcxmllcqcmffrfdi/app.bsky.feed.post/3mmrdf4a2ay2hhttps://bsky.app/profile/dunglas.dev/post/3mm4hhanrs22nThis is exactly why we built FrankenPHP's extension infrastructure! Check out FrankenScriptling: a new extension that lets you use the Scriptling scripting language (Python-like) inside PHP. Since Scriptling is in Go, FrankenPHP makes embedding it seamless. Love seeing this! 🐘🐹 https://medium.com/@paul.arlott/building-frankenscriptling-running-scriptling-inside-frankenphp-6d4ac95432d218 May 2026 08:28 +0000at://did:plc:gwh4dbmorcxmllcqcmffrfdi/app.bsky.feed.post/3mm4hhanrs22n