Psalm 7.0.0-rc18 has been released: https://github.com/vimeo/psalm/releases/tag/7.0.0-rc18

Psalm 7.0.0-rc19 has been released: https://github.com/vimeo/psalm/releases/tag/7.0.0-rc19

Psalm 7.0.0-rc20 has been released: https://github.com/vimeo/psalm/releases/tag/7.0.0-rc20

Psalm 7.0.0-rc21 has been released: https://github.com/vimeo/psalm/releases/tag/7.0.0-rc21

Psalm 7.0.0-rc22 has been released: https://github.com/vimeo/psalm/releases/tag/7.0.0-rc22

For anyone thinking about the release frequency: Psalm will be switching to rolling releases starting from v7, with automated releases every hour or so if CI passes; this already applies now to rcs and betas

Psalm 6.20.4 has been released: https://github.com/vimeo/psalm/releases/tag/6.20.4 #psalm

Psalm 7.0.0-rc23 has been released: https://github.com/vimeo/psalm/releases/tag/7.0.0-rc23 #psalm

Psalm 7.0.0-rc24 has been released: https://github.com/vimeo/psalm/releases/tag/7.0.0-rc24 #psalm

Psalm 7.0.0-rc25 has been released: https://github.com/vimeo/psalm/releases/tag/7.0.0-rc25 #psalm

Psalm 7.0.0-rc26 has been released: https://github.com/vimeo/psalm/releases/tag/7.0.0-rc26 #psalm

Psalm 7.0.0-rc27 has been released: https://github.com/vimeo/psalm/releases/tag/7.0.0-rc27 #psalm

Psalm 6.20.5 has been released: https://github.com/vimeo/psalm/releases/tag/6.20.5 #psalm

Psalm 6.20.6 has been released: https://github.com/vimeo/psalm/releases/tag/6.20.6 #psalm

Psalm 7.0.0-rc28 has been released: https://github.com/vimeo/psalm/releases/tag/7.0.0-rc28 #psalm

Security analysis is on by default: types, taints and dead code in one pass, on a rewritten, 10x faster taint engine.

New: NoSQL, LLM prompt and URL injection, php://input and upload names as sources, taint through closures and generators.

Try it: https://psalm.dev/r/7631291cc5

Hack-style purity: declare which side effects code may have (io, time, write-props...) and catch the "pure" function that reads the clock or edits its input.

Purity templates make array_map() and your interfaces as pure as what you pass them.

Try it: https://psalm.dev/r/be7eb39420

Dead code detection on a reference graph: if nothing reachable uses it, Psalm finds it. Classes that only call each other, cycles included, and exceptions you create but never throw.

Try it: https://psalm.dev/r/31c62c069b

Template defaults for classes, functions and methods: Result<int> now means Result<int, RuntimeException>.

Libraries can add a template without breaking the types their users already wrote.

Try it: https://psalm.dev/r/4e21eb262e

PHP 8.6 pipelines with partial application, fully typed:

$slug = $title |> trim(...) |> str_replace(' ', '-', ?);
// string

$title |> explode(' ', ?) |> strtolower(...);
// InvalidArgument: strtolower expects string, non-empty-list<string> given

Try it: https://psalm.dev/r/3c08a570e0