Sylius Upgrade Analyzer

What it does

Sylius Upgrade Analyzer scans your existing Sylius 1.x project, detects every breaking change, deprecated API, and incompatible pattern from the official UPGRADE-2.0.md, UPGRADE-API-2.0.md and CHANGELOG-2.0.md, then produces a detailed migration report with time estimates and fix suggestions.

Compatibility

Supports every Sylius 1.x release, from 1.0 to 1.14 LTS (the final 1.x version). There is no Sylius 1.15 or 1.16. Works whatever your project's PHP version: the Docker image ships its own PHP, so a shop still on PHP 7.4 or Symfony 5.4 can be audited as is.

Sylius 1.14 LTS security support ends in December 2026 (official release cycle): after that date, 1.x shops no longer receive security fixes.

49 Built-in Analyzers

• Templates & Frontend (6): Twig template overrides, Sonata block events, Semantic UI classes, jQuery usage, Webpack Encore detection, use_webpack config removal
• Deprecations & Breaking Changes (34): Winzou state machine, SwiftMailer, user encoders, Payum gateways convertible to Payment Requests (optional, Payum is still supported), message bus renames, renamed Message* namespaces of Sylius bundles, removed email managers, removed payment gateways, service decorators, order processors and cart contexts no longer autoconfigured, removed form type extensions, removed Behat api_security service, listeners on removed admin menus, promotion rules, renamed shipping calculator services, Doctrine XML mapping, custom fixtures, removed findOneByHostname(), bundle configuration, calendar-to-clock, security firewalls, user model fields, removed classes (150+), renamed service IDs, removed routes, LiipImagine config, constructor signatures, removed config keys, routing imports, PHP/Node versions, class moves, service visibility, payment request env vars, deprecated bundle packages
• Plugins (1): Cross-references installed plugins with the Sylius Addons Marketplace API and Packagist
• Grid & Resource (3): Custom grid YAML/PHP, resource bundle config, grid filter entity syntax
• API Platform (4): API Platform migration, serialization groups, endpoint restructuring, query extension signatures
• Security (1): PHP versions declared by the project (Dockerfile, compose, composer platform) that miss a security release, such as the October 2026 remote code execution fixes (CVE-2026-109618, CVE-2026-109619)

37 Auto-Fixers

The tool can automatically apply fixes for the most common migration patterns. Each fix has a confidence level (HIGH, MEDIUM, LOW) to help you decide whether to apply it automatically or review manually.

In a terminal, --fix lists every change and asks for confirmation before writing anything; --dry-run shows the patch without touching files. Fixers only rewrite project files: none connects to a database, runs a migration or executes a command, and none edits PHP payment code.

6 Output Formats

Console (with colored output), JSON, CSV, SARIF (GitHub Code Scanning compatible), Markdown, and PDF (generated locally, for free).

Additional Features

• Custom rules via .sylius-upgrade-rules.yaml
• Baseline management — save and diff results across runs
• Sprint planner — generate a migration roadmap with sprint breakdown
• Plugin compatibility matrix
• GitHub Action for CI/CD integration
• Risk scoring (low / moderate / high / critical)

Installation

Docker (recommended, any project PHP version, all formats including PDF), from the project root:

docker run --rm -v "$PWD:/project" ghcr.io/pierrearthurdemengel/sylius-upgrade-analyzer

Standalone PHAR (needs PHP 8.2+ on the machine running it, not in the project; no PDF):

curl -LO https://github.com/pierrearthurdemengel/sylius-upgrade-analyzer/releases/latest/download/sylius-upgrade-analyzer.phar
php sylius-upgrade-analyzer.phar sylius-upgrade:analyze /path/to/project

Or with Composer: composer global require pierre-arthur/sylius-upgrade-analyzer, or composer require --dev pierre-arthur/sylius-upgrade-analyzer inside a project that already runs PHP 8.2+ with Symfony 6.4 or 7.x.

Quick Start

docker run --rm -v "$PWD:/project" ghcr.io/pierrearthurdemengel/sylius-upgrade-analyzer sylius-upgrade:analyze /project --fix --dry-run
docker run --rm -v "$PWD:/project" ghcr.io/pierrearthurdemengel/sylius-upgrade-analyzer sylius-upgrade:analyze /project --format=pdf --output=/project/report.pdf

Results on Public Projects

Run on Sylius-Standard 1.14 (66 issues, 27 blocking, 52 h), Sylius/InvoicingPlugin 1.0 (30 issues, 6 blocking, 38.5 h) and BitBag SyliusWishlistPlugin (13 issues, 2 blocking, 15.5 h), every blocking issue reviewed by hand: details and reproduction commands.