Nowadays I barely write code without an LLM, and my OSS productivity has gone through the roof. Look at what I've shipped on #Twig lately (more to come).
Steve Yegge's 8 levels of AI-assisted development described my last 2 years exactly.
But this isn't what I see at #Upsun: at the organization level, the challenges are different. So I tried to map a second scale, for AI engineering maturity in orgs: upsun.com/blog/8-stages-ai-e…
Most engineering teams already use AI. The real gap is whether the whole org is moving together. @fabpot maps 8 stages of AI maturity, from leadership silence to autonomous agents. See where your team stands 👉 upsun.com/blog/8-stages-ai-e…
🔒An update on Composer & Packagist supply chain security: what's in place, what ships this week with Composer 2.10 (dependency policies, immutable versions), and what comes next.
If you maintain PHP packages, enable MFA now!
#php#phpc#composerphp
As an OSS maintainer, my new rule is that anything a frontier model can find with some reasonable effort is a 0-day. Hence why I'm now shipping security releases on public holidays.
During the last few weeks, the #Symfony core team has been hard at work fixing a long list of vulnerabilities for both #Symfony and #Twig. Today, we're publishing that work in the biggest security patch releases ever. Bare with us and wish us luck 🍀
We are aware of the recently disclosed copy.fail vulnerability (CVE-2026-31431) and want to assure our customers that Upsun systems are not affected.
The module targeted by this vulnerability is disabled in our platform. We run hardened Linux kernels in which we only enable the components required for our services, minimizing the attack surface. As such, there is no risk of exploitation, and no action is required on your part.
We remain committed to the security of our products and will continue to monitor for any developments. If you have any questions or concerns, please do not hesitate to contact our support team. ✨
Yes, it will be streamed on the PHP Annotated YouTube channel by @brendt_gd. Please register on the event landing page to receive a reminder closer to the stream date. You can also click “Notify me” directly on the stream page if that’s more convenient: youtube.com/live/NR9L0zwXJq4
As an OSS maintainer, merging older maintained branches up can be challenging in case of conflicts. As agents are now good at following instructions and resolving conflicts, I've just created a SKILL for #symfony that automates most of the work (but keeping the human in the loop)
💻 Pour cette édition #Symfony_Live Paris 2026, Fabien Potencier (@fabpot) enchaîne deux talks ! ⚡
Cette session : "Développer un Coding Agent en PHP : dans les coulisses du "Harness"” !
#PHP#Symfony#TechEvent
My favorite activity when coding: remove code
My new favorite activity with my coding agents: let them remove code they generated 😂
Also, I like removing cruft from AGENTS.md or SKILLS.md files
Writing code is also about removing code 😀