Re: [PHP-DEV] [RFC] Deprecations for PHP 8.5

2025-08-05 Thread Theodore Brown
On Thu, July 24, 2025 at 22:47 Juliette Folmer wrote: >> On 2-7-2025 21:56, G. P. Banyard wrote: >> >> It is this time of year again where we proposed a list of deprecations to >> add in PHP 8.5: >> >> https://wiki.php.net/rfc/deprecations_php_8_5 > > > Just leaving a note here that I find it inc

Re: [PHP-DEV] Blog post: If we can get partial generics, should we?

2025-08-05 Thread Vinicius Dias
> For instance, if we had interfaces for Set, Map, etc, there are going to be > operations which return nullable values. Wouldn't it be implemented like this? ``` interface Set { public function get(string $key): ?T; } ``` I might have missed something, but this doesn't seem to be a limitat

Re: [PHP-DEV] Update OpenSSL *minor* version on Windows?

2025-08-05 Thread Christoph M. Becker
On 05.08.2025 at 15:49, Jan Ehrhardt wrote: > OpenSSL 3.5 has been marked as LTS now and supported up until 2030-04-08. > https://openssl-library.org/policies/releasestrat/index.html > This might be a good time to update OpenSSL to 3.5. > OpenSSL 3.5.2 has been released today. Could we release PHP

Re: [PHP-DEV] Update OpenSSL *minor* version on Windows?

2025-08-05 Thread Jan Ehrhardt
"Christoph M. Becker" in php.internals (Thu, 5 Sep 2024 19:19:45 +0200): >I'm still not happy considering that this would still leave more than >one year of lacking upstream support, where our Windows builds might >need to be fixed with some publicly available patches, in case there are >any securi

Re: [PHP-DEV] allowed_classes_callback option for unserialize()

2025-08-05 Thread Larry Garfield
On Tue, Aug 5, 2025, at 4:14 AM, Casper Langemeijer wrote: > I'm writing a this email to propose adding allowed_classes_callback > option to unserialize(). > > The class name as parsed from the serialized string is passed as a > parameter to the callback, it should return a boolean. true would a

[PHP-DEV] Use header_handler in CLI SAPI

2025-08-05 Thread Joan Miquel Abrines
Hi, I created a issue https://github.com/php/php-src/issues/12304 and later the PR https://github.com/php/php-src/pull/16145 about the headers in CLI. But both remains stalled, so I'll present it here. The CLI SAPI don't send headers, and for that it's OK that the sapi_cli_send_headers() do nothin

[PHP-DEV] allowed_classes_callback option for unserialize()

2025-08-05 Thread Casper Langemeijer
I'm writing a this email to propose adding allowed_classes_callback option to unserialize(). The class name as parsed from the serialized string is passed as a parameter to the callback, it should return a boolean. true would allow the class, false would block it. This blocks classes the same

[PHP-DEV] Re: [VOTE] Extend #[\Override] to target properties

2025-08-05 Thread Jiří Pudil
> 21. 7. 2025 v 19:31, Jiří Pudil : > > Hi internals, > > after two weeks of a rather uneventful discussion, I’ve opened the vote for > my RFC proposing to extend the target of the #[\Override] attribute to > properties. The vote will run for two weeks, until August 5, 00:00:00 UTC. > > RFC: