All pull requests

Pull requests

• fix: compare the target PID UID (not the caller UID) in non-Linux fingerprint check

  #1191·rootsiemen opened Nov 9, 2026Contributor·

  ·
  1

• fix: log the Throwable (not just its message) on service-reset failure

  #1190·rootsiemen opened Nov 9, 2026Contributor·

  ·
  1

• fix: resolve kernel before reading APP_CACHE_DIR in Runner::getCacheDir()

  #1172·rootsiemen opened Nov 7, 2026Contributor·

  ·
  1

• fix: surface failed Utils::reload() signals instead of failing silently

  #1171·rootsiemen opened Nov 7, 2026Contributor·

  ·
  1

• fix: treat non-multipart content types with a boundary as multipart

  #1152·rootsiemen opened Nov 6, 2026Contributor·

  ·
  1

• chore(deps): bump phpstan/phpstan from 2.3.1 to 2.3.5

  dependencies
  #1138·dependabot[bot] opened Nov 6, 2026Bot·

  ·

• chore(deps): bump symfony/event-dispatcher from 7.4.17 to 8.1.5

  dependencies
  #1137·dependabot[bot] opened Nov 6, 2026Bot·

  ·

• chore(deps): bump symfony/runtime from 7.4.14 to 8.1.11

  dependencies
  #1136·dependabot[bot] opened Nov 6, 2026Bot·

  ·

• chore(deps): bump phpunit/phpunit from 10.5.64 to 13.4.6

  dependencies
  #1135·dependabot[bot] opened Nov 6, 2026Bot·

  ·

• fix: honour Range offset/maxlen for temp-file BinaryFileResponse

  #1134·rootsiemen opened Nov 5, 2026Contributor·

  ·
  1

• fix: do not treat method-overridden HEAD as bodyless for real POST requests

  #1133·rootsiemen opened Nov 3, 2026Contributor·

  ·
  1

• fix: send head only for bodyless StreamedResponse statuses

  #1132·rootsiemen opened Nov 2, 2026Contributor·

  ·
  1

• fix: isolate mid-sweep reload signal from the test runner

  #1131·rootsiemen opened Nov 1, 2026Contributor·

  ·
  1

• fix: rotate polling sweep across source directories within per-tick budget

  #1130·rootsiemen opened Nov 1, 2026Contributor·

  ·
  1

• fix: validate max_requests reload configuration ranges

  #1129·rootsiemen opened Oct 30, 2026Contributor·

  ·
  1

• chore(deps): bump guzzlehttp/guzzle from 8.3.0 to 8.3.1

  dependencies
  #1127·dependabot[bot] opened Oct 30, 2026Bot·

  ·

• fix: reject non-scalar file entry fields before UploadedFile construction

  #1121·rootsiemen opened Oct 27, 2026Contributor·

  ·
  1

• fix: fall through to app on allowlist mismatch when no file exists

  #1120·rootsiemen opened Oct 27, 2026Contributor·

  ·
  1

• fix: reject control bytes in header names

  #1119·rootsiemen opened Oct 26, 2026Contributor·

  ·
  1

• fix: decode percent-encoded static file paths once before lookup

  #1107·rootsiemen opened Oct 24, 2026Contributor·

  ·
  1

• fix: check aliased use imports and multi-catch types, treat third-party namespaces as external

  #1106·rootsiemen opened Oct 24, 2026Contributor·

  ·
  1

• feat: send HTTP 103 Early Hints from AbstractController::sendEarlyHints()

  #1104·rootsiemen opened Oct 23, 2026Contributor·

  ·
  1

• feat: serve pre-compressed static files (.br, .gz)

  #1103·rootsiemen opened Oct 23, 2026Contributor·

  ·
  1

• fix: keep deleteFileAfterSend files on the X-Sendfile hand-off

  #1100·rootsiemen opened Oct 21, 2026Contributor·

  ·
  1

• test: cover X-Accel-Redirect hand-off and 1xx bodyless BinaryFileResponse path

  #1097·rootsiemen opened Oct 20, 2026Contributor·

  ·
  1