Remove Monitoring route /phpinfo removed because of security concern

.github/workflows/ci.yml

@@ -22,8 +22,10 @@ jobs:
         steps:
             -   name: Checkout repository
                 uses: actions/checkout@v4
-            -   name: Configure GitHub token for Composer
-                run: composer config -g github-oauth.github.com ${{ secrets.GITHUB_TOKEN }}
+            -   name: Configure GitHub token and Git ownership for Composer
+                run: |
+                    git config --global --add safe.directory '*'
+                    composer config -g github-oauth.github.com ${{ secrets.GITHUB_TOKEN }}
             # Dynamically update composer.json dependencies before running make install
             -   name: "Restrict Doctrine ORM version"
                 run: composer require "doctrine/orm:${{ matrix.orm }}" --no-update --no-interaction

CHANGELOG.md

@@ -1,5 +1,9 @@
 CHANGELOG for 1.x
 ===================
+## v1.18.2 - (2026-06-12)
+### Removed
+- Monitoring route `/phpinfo` removed because of security concern
+
 ## v1.18.1 - (2026-05-19)
 ### Added
 - Allow `doctrine/doctrine-fixtures-bundle` v4

src/Controller/MonitoringController.php

@@ -23,12 +23,6 @@ public function uptime(): Response
         ]);
     }
 
-    public function phpinfo(): void // phpcs:ignore
-    {
-        phpinfo(); // phpcs:ignore
-        exit;
-    }
-
     public function simulateIniOverride(IniOverrideConfig $config): Response
     {
         $data = ['memory_limit_default' => $config->getCurrentMemoryLimit()];

src/Route/RouteLoader.php

@@ -36,7 +36,7 @@ public function load(mixed $resource, ?string $type = null): RouteCollection
             // MDT the path ^/anonymous must have PUBLIC_ACCESS in the project security.yaml config for the probe route to be accessible without user
             new Route('/anonymous' . $routePathPrefix . 'uptime', ['_controller' => $controller . 'uptime'])
         );
-        foreach (['phpinfo', 'simulateIniOverride', 'dateFormatting'] as $action) {
+        foreach (['simulateIniOverride', 'dateFormatting'] as $action) {
             $collection->add(
                 $routeNamePrefix . u($action)->snake()->toString(),
                 new Route($routePathPrefix . u($action)->snake()->replace('_', '-')->toString(), ['_controller' => $controller . $action])