Tessera
Folgen

Antoine Bluchet @soyuka

@soyuka.me

Developer, biker, @api-platform.com‬ release manager, CTO at Les-Tilleuls.coop.

117 Posts443 Follower104 Folgt
Antoine Bluchet @soyuka@soyuka.me · 2mo ago

🔒 Security patch out for API Platform Core (CVE-2026-54164): a type-confusion bug let writable relations accept a wrong-type IRI. Upgrade to 4.1.30 / 4.2.26 / 4.3.12+. Details: github.com/api-platform...

Relation IRIs are not type-checked: a related resource can be denormalised as the wrong resource type (type confusion)

## Summary The API Platform serializer's `AbstractItemNormalizer` does not validate the resource type returned when resolving relation IRIs, allowing type confusion where a resource of an uninte...

github.com

Antoine Bluchet @soyuka@soyuka.me · 2mo ago

🔒 API Platform CVE-2026-49858: JSON:API & HAL normalizers cached components across users on long-running runtimes (FrankenPHP, RoadRunner, Swoole). Patched in 4.1.29 / 4.2.25 / 4.3.8 — upgrade now. github.com/api-platform...

Cross-user attribute leak in JSON:API and HAL item normalizers due to missing isCacheKeySafe gate

### Impact `#[ApiProperty(security: ...)]` is evaluated per request to decide whether a property is exposed. The `componentsCache` arrays in `ApiPlatform\JsonApi\Serializer\ItemNormalizer` and `Ap...

github.com

Antoine Bluchet @soyuka@soyuka.me · 2mo ago

I feel like giving me a Premium Claude subscription is like giving me Pandora's Box. I feel I could do anything that relates to computer engineering: hacks, software—you name it. And I actually quite enjoy this breakage.

Antoine Bluchet @soyuka@soyuka.me · 5mo ago

API Platform 4.3 is out! This release bridges the gap between your API and AI — with MCP server support, JSON Schema improvements, and much more. Read the full announcement: soyuka.me/api-platform...

API Platform 4.3 - When Your API Meets AI · soyuka.me

Cover photo by AffectionateSand8525 — source # API Platform 4.3: When Your API Meets AI I’m excited to announce API Platform 4.3! This release brings a game-changing feature: native support for ...

soyuka.me

Kévin Dunglas@dunglas.dev · 5mo ago

🛡️ Symfony Docker now provides a rootless production image that contains only what is strictly necessary to run #FrankenPHP and #Symfony. They are 60% smaller than before, dropping from 704MB down to just 290MB! 📉✨ github.com/dunglas/symf...

feat: use rootless Debian slim images for prod by dunglas · Pull Request #909 · dunglas/symfony-docker

Hardens production images using a method to https://frankenphp.dev/docs/docker/#hardening-images, but using Debian Slim instead of distroless because we need a shell for the entrypoint, (Docker Har...

github.com

Antoine Bluchet @soyuka@soyuka.me · 5mo ago

Opus doesn't think about an O(n) => O(1) optimization as it is focused on the initial idea. I'd have probably coded the first implementation like this, but as writing the O(n) I'd have seen the optimization right away.

Antoine Bluchet @soyuka@soyuka.me · 5mo ago

Interesting, making Claude Code work on an already poor design, strengthens the bad choices, had to create a new chat to move to a better design I instructed (/fork or /compact kept the not so good direction).

Antoine Bluchet @soyuka@soyuka.me · 6mo ago

API Platform v4.3.0-alpha.1 is now available! Introducing MCP (Model Context Protocol) support for #Symfony & #Laravel - bring AI agent capabilities to your APIs! 20 new features full changelog: github.com/api-platform... We welcome your feedback on this alpha release.

Release v4.3.0-alpha.1 · api-platform/core

Features feat(mcp): introduce api-platform/mcp component (#7703) feat: mcp bundle tool integration (#7595) feat: add support of collection to MCP (#7724) feat(laravel): mcp support (#7709) feat(la...

github.com

Antoine Bluchet @soyuka@soyuka.me · 6mo ago

I think that with models like sonnet I've enough "smartness" to do everything I need to be "more productive". What I like about claude is the tooling aside (skills, agents etc.), this makes even lower models better.