Kévin Dunglas

@dunglas
1.8K Followers
132 Following
5.9K Posts
⚒️ Free software creator: @ApiPlatform, FrankenPHP.dev, Mercure.rocks, and various @symfony components
🧑‍💻 Founder of @cooptilleuls, a developer co-op
📍 Lille, France
Websitehttps://dunglas.dev
GitHubhttps://github.com/dunglas
Blueskyhttps://bsky.app/profile/dunglas.dev

🚀 Coding at the speed of thought: Symfony DX in 2026!

Forget complex setups and slow cache warmups. At #SymfonyOnline, I'll show how FrankenPHP is redefining Symfony Developer Experience with instant starts, true hot reloading (no more F5 hammering), and background cache refreshes.

Plus, see how it integrates with AI coding agents like Claude Code! 🤖

📅 Friday, June 12 | 4:10 PM CEST
🎟️ Get your tickets here: https://live.symfony.com/2026-online-june/schedule#coding-at-the-speed-of-thought-symfony-dx-in-2026

#PHP #FrankenPHP 🐘🧟⚡️

This is exactly why we built FrankenPHP's extension infrastructure!

Check out FrankenScriptling: a new extension that lets you use the Scriptling scripting language (Python-like) inside PHP.

Since Scriptling is in Go, FrankenPHP makes embedding it seamless. Love seeing this! 🐘🐹

https://medium.com/@paul.arlott/building-frankenscriptling-running-scriptling-inside-frankenphp-6d4ac95432d2

Building Frankenscriptling: Running Scriptling Inside FrankenPHP

A dive into embedding a Python-like scripting language into PHP via a Go-based web server. Because why not.

Medium

Mercure 0.24.1 is out, riding on Caddy 2.11.3.

We contributed native OTLP metrics push to Caddy upstream. Mercure hubs can now ship metrics straight to your OpenTelemetry collector. No Prometheus scrape job needed. Drop

metrics {
otlp
}

into your Caddyfile and the standard OTEL_* env vars do the rest.

Pairs with the OTel tracing landed in 0.24, so traces + metrics work end-to-end against any OTLP backend.

https://github.com/dunglas/mercure/releases/tag/v0.24.1

#opensource #mercure #caddy #opentelemetry

Release v0.24.1 · dunglas/mercure

Community Mercure 0.24.1 picks up Caddy 2.11.3, including our upstream contribution that adds OTLP metrics push to Caddy. The Helm chart now also surfaces a JSON values schema and a signed .prov pr...

GitHub

🚀 FrankenPHP 1.12.3 is out with a nice performance boost!

A refreshed PGO profile delivers a 7–8% throughput bump for baseline HTTP requests right out of the box.

This release also patches a critical security flaw (CVE-2026-45062, CVSS 8.1) via unsafe Unicode handling in CGI path splitting. Upgrading from v1.11.2–v1.12.2 is highly recommended.

Ships with:
• Per-thread max_requests
• Stuck thread force-kill primitive
• SLSA build attestations

Release notes: https://github.com/php/frankenphp/releases/tag/v1.12.3

#PHP

Release v1.12.3 · php/frankenphp

This release fixes CVE-2026-45062 (high, CVSS 8.1): unsafe Unicode handling in CGI path splitting let an attacker have a non-.php file executed as PHP via a crafted URL, in any deployment where att...

GitHub

Mercure 0.24 is out 🚀

Native OpenTelemetry tracing for the Hub. Publish, subscribe, subscriptions, and transport history spans nest under Caddy's tracing directive, with zero allocations when disabled.

Plus file:// URLs for JWK Sets, a Helm chart that meets the restricted Pod Security Standard out of the box, and the same tracing across all Enterprise transports (Redis, Postgres, Kafka, Pulsar).

https://github.com/dunglas/mercure/releases/tag/v0.24.0

#opensource #realtime #observability

🚀 Mercure v0.23.5 is here, focusing on Helm chart hardening for Kubernetes!

After a production audit, we brought major security updates to the OSS chart, including opt-in NetworkPolicies, out-of-the-box readOnlyRootFilesystem, and restricted PodSecurity defaults.

I just published a blog post with the full story, the technical details, and the Go GC cache fixes.

Read it here: https://dunglas.dev/2026/05/mercure-0-23-5-helm-chart-hardening/

#Kubernetes #DevOps #Helm #Golang #Mercure #OpenSource #Security

Mercure 0.23.5: Helm chart hardening - Kévin Dunglas

Mercure v0.23.5 just landed, and the dominant theme is the Helm chart. If you run hubs on Kubernetes, especially in HA or multi-tenant mode, this release tightens defaults and adds the kind of policy templates that previously required forking the chart or templating policies outside it. The story behind the release: we audited a production

Kévin Dunglas - Founder of Les-Tilleuls.coop (worker-owned cooperative). Creator of API Platform, FrankenPHP, Mercure.rocks, Vulcain.rocks and of some Symfony components.

"Fourmies 1891", "Zapatiser l’IA, briser le patriarcat" : retrouvez les communiqués communs de l'Offensive avec Vert! La Commune et l'Action Antifa NP2C distribués lors de la manif du #1erMai et de la fête de la soupe à Lille

- https://offensive.eco/fourmies-1891-communique-commun-de-loffensive-et-de-laction-antifasciste-np2c-pour-le-1er-mai-2026/
- https://offensive.eco/zapatiser-lia-briser-le-patriarcat-communique-commun-de-loffensive-et-de-vert-la-commune-pour-le-1er-mai-2026/

@EcoloOuBarbarie @dunglas

🎉 Mercure 0.23 has just been released!

The highlight of this release is Transport-aware Health Checks. Orchestrators like Kubernetes can now see if your hub's actual transport connection is broken, not just the Caddy process.🩺

We also added HTTProute support (Gateway API) and configurable deployment annotations to the Helm chart. 🛥️

Enterprise users get full support for this across Redis, Postgres, Kafka, and Pulsar transports.

Read the changelog and get it here:
https://github.com/dunglas/mercure/releases/tag/v0.23.0

Release v0.23.0 · dunglas/mercure

Community Transport-aware health checks come to Mercure. Kubernetes (and any other orchestrator) can now detect when a hub's transport connection is actually broken, not just that the Caddy process...

GitHub

We've just finalized our next-gen AI-powered security audit tool at @cooptilleuls!

We used it to discover and patch a critical vulnerability in Mercure as well as in several of our clients' projects.

The Mercure fix also made topic matching 38% faster! ⚡️

1. Update Mercure and FrankenPHP immediately. (Using Mercure.rocks Cloud? You're already updated and protected! ☁️✅)
2. Want us to secure your stack? Contact us for a full security audit! ✉️ [email protected]

#CyberSecurity #AI

I've just dramatically improved my "Symfony Docker" project.

It now supports Dev Containers, autonomous (YOLO) coding agents such as Claude Code, Xdebug out of the box, instantaneous hot reloading with FrankenPHP, and slim, rootless images for production. 🐘

I presented these features at SymfonyLive Paris. Here is the detailed breakdown and the slides from my talk: https://dunglas.dev/2026/03/coding-at-the-speed-of-thought-the-new-era-of-symfony-docker/

Coding at the Speed of Thought: The New Era of Symfony Docker - Kévin Dunglas

If we want to discuss Developer Experience (DX) in 2026, we have to talk about instantaneous feedback and coding agents. At SymfonyLive Paris 2026, I presented "Coding at the Speed of Thought: Symfony DX in 2026", where I detailed the bleeding-edge features we have brought to the PHP and Symfony ecosystems. To make this vision

Kévin Dunglas - Founder of Les-Tilleuls.coop (worker-owned cooperative). Creator of API Platform, FrankenPHP, Mercure.rocks, Vulcain.rocks and of some Symfony components.