Getting tired of watching people get swept up in whatever controversy because they're bored, or just plain don't know better

Some parts of this post aren't entirely accurate. LiveOverflow made a great video about it: https://youtu.be/SP7y1h0laN0

Of note: https://mastodon.social/@Girgias@phpc.social/117476477662524828

This PHP core member says there's no way to fully mitigate this problem without a patch. This means that the safest thing to do is to block all php-related access from your site until a patch is actually published.

A critical 9.2 CVE

Video of PoC: https://mastodon.social/@Viss/117475758985207443

Very interesting post! It's a good technical deep dive into the guts of the compiler, yet doesn't require background knowledge of it to be able to understand.

Hurray! Hurray! Hurray! Ineffably marvelous PHP! 🎉✨

You gotta respect them for being upfront about the limitations.

I’ve never used Symfony Mailer however:

1. PGP is a program that encrypts things. Under the hood it can use asymmetric keys just like the example code shows.
2. Typically you’d use the public key of the person you are sending the email to so that they can use their private key to decrypt it. I’d guess you’d need to look at the docs for the SMTP tool you’re using and see if it can be given the private key

I'm baffled at how the author just glosses over how the emoji for 5 doesn't work "because functions can't start with a number".

This seems to imply there is some kind of textual substitution going on, which further implies I could call an emoji named function by some other plaintext name.

That reminds me. I should use emoji variable names next time I'm coding something. Just for the fuck of it.

It's just bug fixes, nothing interesting.

What is so exciting about a micro release? Your post provides no details.

Swoole is much better

And link to the project homepage, not the release note. Or maybe both.

Did you open the link? The release notes have a project description, not just a change log.

Wait, isn't the link self-descritive?

After over 1,000 commits, 13 release candidates, 34 betas, and 12 alphas, we are thrilled to announce Mago 1.0.0 - the first stable release of the Mago PHP toolchain.

Mago is a comprehensive PHP toolchain written in Rust that combines a linter, formatter, and static analyzer into a single, blazingly fast binary. Whether you're working on a small project or a massive codebase with millions of lines, Mago delivers consistent, reliable feedback in seconds.

Mago is a PHP toolchain. I guess it is something similar to ruff/ty/pyrefly in Python, oxc in JavaScript, or Lux in Lua because it emphasis its speed and it is written in Rust. The author is also a maintainer of psl[1] and listed in JetBrains' 2025-2026 sponsorship program.[2]

• 1: https://packagist.org/packages/azjezz/psl
• 2: https://blog.jetbrains.com/phpstorm/2025/10/moving-php-open-source-forward/

Your point is fair. I intended to mention that Mago is a PHP toolchain and thought that would suffice, but I should have considered the audience more carefully. I will submit addional comment.

@lens0021 sorry, that was just a bit snarky. But hey, don’t assume all us plebs know what you’re doing: if you posted “blahlib makes your code better and we’ve released x.y.z” I’d know I could ignore it (if I didn’t want my code to if be better 😜). And link to the project homepage, not the release note. Or maybe both. That’s easy, right? Hope I’m being constructive.

@lens0021 congrats. What does it do? No explanation in post, no explanation in link? And you want me to look at it?

I use Intelephense together with Psalm (via LSP) in my editor. It's not a very pleasant experience, as Psalm is rather slow. Especially on large projects and large files. If a built in LSP server has as good diagnostics as Psalm, I would LOVE that! Hope this gets a reality. Would probably use Psalm as a CLI only tool, though. It's fantastic, just painfully slow

I don't know where the original discussion took place, so the title includes "fwd."

This will be very welcome. I probably have to wait for the major frameworks and many libraries to use it, so it’s it’s a few months away for me. But something to look forward to.

Incredibly sad news. I was lucky enough to see him in action at 2023's Symfonycon, he was an amazing person and a real force of nature. He'll be missed.