← Back to all sparks
S

Sulu

MKT AUTO
Velocity5.0

Symfony-based content management platform for business websites

Sulu adds AI disclosure fields to media, shipped to both supported lines the same minute

ai disclosuremedia provenancetwo-factor authapi deprecationslockstep releases
Current state
Sulu is a Symfony-based CMS for developer-built sites, released as a synchronised pair: every 3.0.x patch ships within a minute or two of the matching 2.6.x patch, carrying largely the same pull requests. The 3.0.9 / 2.6.26 pair is the most substantive in months. Media assets gain Origin and AI Disclosure information, delivered as a doctrine migration with new columns and an updated form metadata snapshot, and the AI platform integration now reports a reason when it turns a request down. Two-factor setup adds an authenticator app (TOTP) flow and a Google Authenticator method, and a deprecation batch retires AbstractRestController, RestControllerTrait, ApiWrapper and the persistence component repositories and traits.
Where it's heading
Three threads run through the pairs and their balance has shifted. Editor and framework upkeep continue — Symfony 8 request bag replacements, PHPStan baselines kept green — but this release adds two things that aren't maintenance. The media provenance work puts AI disclosure into the content model itself rather than leaving it to editors, which is the shape of a CMS preparing for disclosure obligations. The controller and repository deprecations point the other way, at an API layer being cleared out ahead of whatever 3.x becomes, since 3.0 has otherwise read like a maintenance branch alongside 2.6.
Prediction
Expect the deprecated REST controller and persistence layers to be removed in a future major, since deprecating four API surfaces in one release is how Sulu signals a rewrite is staged. Whether the AI disclosure fields are surfaced on the delivery side or stay editorial metadata isn't visible in these entries.

Recent moves

  1. 25d ago

    Media gains AI disclosure and origin fields; TOTP 2FA lands

    The most substantive pair in months: media assets get Origin and AI Disclosure columns via a doctrine migration, the AI platform reports why it refuses a request, authenticator-app two-factor setup arrives, and the REST controller and persistence repository layers are deprecated. Provenance metadata moving into the content model is the part that isn't routine upkeep.

    View source ↗
  2. 25d ago

    2.6.26 mirrors 3.0.9 with AI disclosure and TOTP setup

    The 2.6 half of the pair, published two minutes after 3.0.9 and carrying the same AI disclosure media fields, TOTP two-factor setup and deprecation batch. Cited once with its twin — that the older line receives this simultaneously is the point of Sulu's release process.

    View source ↗
  3. 2mo ago

    Sulu 3.0.8 validates selection filter params at build time

    Selection filter parameters were renamed and are now validated at build time rather than failing later, which turns a class of configuration mistakes into a build error. The rest is fixes — searchable fields inside global blocks indexed for article and page search, navigation for link pages with unresolvable targets, property names containing a slash, and a migration rollback that no longer throws.

    View source ↗
  4. 2mo ago

    Sulu 2.6.25 adds a redirect after SSO login

    The 2.6 half of the same July release, and it carries the one clearly user-facing change of the pair: a redirect after successful SSO login, plus URL auto-generation for items with an id. Everything else is search-index fixes and JavaScript test tooling shared with 3.0.8.

    View source ↗
  5. 3mo ago

    Sulu 3.0.7 fixes smart-content filtering and speeds up indexing

    Smart content gets two correctness fixes — group and template-key filtering no longer returns unrelated results, and category and tag filters work for taxonomy-only dimension contents — which continues the cleanup started when tags moved to IDs in 3.0.6. FileVersionMeta indexing was also sped up, and CKEditor 48's table widgets fixed.

    View source ↗
  6. 3mo ago

    Sulu 2.6.24 upgrades CKEditor to version 48

    The editor jump from 47 LTS to 48 lands here, with the table widget and webpack font build fixes that follow it. Live workspace orphans are now cleaned up for unpublished locales, and the sulu:build password prompt got better developer ergonomics — small operational fixes that accumulate for teams running multi-locale sites.

    View source ↗