[PHP-DEV] PHP 8.3.22 Released

found at https://windows.php.net/download The list of changes is recorded in the ChangeLog: https://www.php.net/ChangeLog-8 Many thanks to all the contributors and supporters! Jakub Zelenka, Eric Mann and Pierrick Charron Release Manifest here and below: https://gist.github.com/bukka

[PHP-DEV] PHP 8.3.22RC1 Ready for testing

://github.com/php/php-src/issues PHP 8.3.22 should be expected in 2 weeks, i.e. on Jun 6th, 2025. Hash values and PGP signatures can be found at https://gist.github.com/bukka/265f11fa04342992694a8cfb518a0f26 Thank you, and happy testing! Regards, Jakub Zelenka, Eric Mann, and Pierrick Charron php

[PHP-DEV] FrankenPHP moving under the PHP GitHub organization

Hello, The PHP Foundation would like to announce that it has decided to directly support the FrankenPHP project moving forward. The plan is that FrankenPHP will move to the PHP GitHub organization, which will make it easier for core contributors and others to be actively involved in the project.

Re: [PHP-DEV] [RFC][Discussion] Policy release process update

Hi, On Tue, May 13, 2025 at 12:56 PM Tim Düsterhus wrote: > Hi > > Am 2025-05-13 12:13, schrieb Jakub Zelenka: > >> From my experience in maintaining an old PHP application and > >> upgrading > >> it to support the latest and greatest PHP every year, I thin

Re: [PHP-DEV] [RFC][Discussion] Policy release process update

Hi, On Sun, May 11, 2025 at 10:14 PM Tim Düsterhus wrote: > Hi > > I gave this some additional thoughts. > > Am 2025-05-09 13:36, schrieb Jakub Zelenka: > >> - A minor version MUST NOT break syntax compatibility (i.e. every PHP > >> program that

Re: [PHP-DEV] [RFC][Discussion] Policy release process update

Hi, On Fri, May 9, 2025 at 1:09 PM Tim Düsterhus wrote: > Hi > > Am 2025-05-09 12:47, schrieb Jakub Zelenka: > > I'd like to start discussion for some release process updates defined > > in > > the following RFC / linked PR: > > > > RFC: https://wi

[PHP-DEV] [RFC][Discussion] Policy release process update

Hello, I'd like to start discussion for some release process updates defined in the following RFC / linked PR: RFC: https://wiki.php.net/rfc/policy-release-process-update Policy PR: https://github.com/php/policies/pull/19 Regards Jakub

Re: [PHP-DEV] Requiring DCO (Developer Certificate of Origin)

On Sat, Apr 19, 2025 at 6:02 AM Pierre Joye wrote: > On Fri, Apr 18, 2025 at 11:41 PM Jakub Zelenka wrote: > > > That said we also need to think about the project and possible risk that > this can also bring. One of those is potentially hiding the identity > because the au

Re: [PHP-DEV] Requiring DCO (Developer Certificate of Origin)

Hi On Fri, Apr 18, 2025 at 9:04 PM Sai Liu wrote: > > > Jakub Zelenka hat am 18.04.2025 18:37 CEST geschrieben: > > > Hi, > > We just had some private discussions about the implication of contributing > under pseudonym. This is in general fine and we should not ha

Re: [PHP-DEV] Requiring DCO (Developer Certificate of Origin)

On Fri, Apr 18, 2025 at 7:53 PM Niels Dossche wrote: > Hi > > I have a strong suspicion of why this comes up now, but would still like > to have more openness on why this is suddenly needed. > This just seems like an extra barrier and extra work. > Since this is a policy change, doesn't this need

[PHP-DEV] Requiring DCO (Developer Certificate of Origin)

Hi, We just had some private discussions about the implication of contributing under pseudonym. This is in general fine and we should not have problem with it and we actually never verified the contributors so this is possibly happening already. The only thing about it is that it might raise ques

Re: [PHP-DEV] [RFC] [Discussion] Minor version compatibility

Hi, On Sun, Apr 13, 2025 at 11:09 PM Jorg Sowa wrote: > Thank you all for the feedback on the topic of BC breaks in argument > validation https://news-web.php.net/php.internals/126706 > > I have collected all concerns, prepared an RFC for this change, and I'm > opening discussion on its content:

Re: [PHP-DEV] Consensus on argument validation for built-in functions

> > > This thread clearly shows that there is no consensus so I think the only > way forward would be to create a policy RFC to make decision about this > approach. Until then no PR introducing exception, deprecation or just plain > warning for this sort of things should be merged. > > In terms of

Re: [PHP-DEV] Consensus on argument validation for built-in functions

Hi, On Tue, Mar 11, 2025 at 12:09 AM Jorg Sowa wrote: > Hello everyone, > > I’d like to align on the approach to validating arguments for built-in > functions (usually for flag inputs). Some ongoing discussions in PRs: > - https://github.com/php/php-src/pull/15647 > - https://github.com/php/php-

[PHP-DEV] PHP 8.3.20 Released

found at https://windows.php.net/download The list of changes is recorded in the ChangeLog: https://www.php.net/ChangeLog-8 Many thanks to all the contributors and supporters! Jakub Zelenka, Eric Mann and Pierrick Charron Release Manifest here and below: https://gist.github.com/bukka

[PHP-DEV] PHP 8.3.20RC1 Ready for testing

://github.com/php/php-src/issues PHP 8.3.20 should be expected in 2 weeks, i.e. on Apr 10th, 2025. Hash values and PGP signatures can be found at https://gist.github.com/bukka/08735c59844aec480364c36d02c8fda8 Thank you, and happy testing! Regards, Jakub Zelenka, Eric Mann, and Pierrick Charron php

Re: [PHP-DEV] [VOTE] Optional Interfaces

Hi, https://wiki.php.net/rfc/optional-interfaces > I voted yes as we have got a specific use case in core - user stream wrapper. More details can be found in https://github.com/php/php-src/issues/10506 . Regards Jakub

Re: [PHP-DEV] [VOTE] Optional Interfaces

On Fri, Mar 14, 2025 at 10:52 AM Jakub Zelenka wrote: > Hi, > > https://wiki.php.net/rfc/optional-interfaces >> > > I voted yes as we have got a specific use case in core - user stream > wrapper. More details can be found in > https://github.com/php/php-src/issues/1

Re: [PHP-DEV] PHP True Async RFC

Hi, > > > I thought about this quite a bit and I think we should first try to > clarify the primary design that we want to go for. > > What I mean is whether we would like to ever support a true concurrency > (threads) in it. > > If we think it would be worth it (even thought it wouldn't be initia

Re: [PHP-DEV] PHP True Async RFC

Hi, > https://wiki.php.net/rfc/true_async > > I believe this version is not perfect and requires analysis. And I > strongly believe that things like this shouldn't be developed in isolation. > So, if you think any important (or even minor) aspects have been > overlooked, please bring them to atten

Re: [PHP-DEV] PHP socket ethernet support - step 2

Hi, > I am working on the second pass of this feature and write here because of > the legitimate concern regarding new classes to add. > > PR here > For those that want to quickly see the actually classes, here is a stub link: https://github.com/php/ph

[PHP-DEV] PHP 8.3.18RC1 Ready for testing

://github.com/php/php-src/issues PHP 8.3.18 should be expected in 2 weeks, i.e. on Mar 13th, 2025. Hash values and PGP signatures can be found at https://gist.github.com/ericmann/e81faf47d96fb5d2529eebee69d25b34 Thank you, and happy testing! Regards, Eric Mann, Jakub Zelenka, and Pierrick Charron php

Re: [PHP-DEV] [RFC] Modern Compression (zstd, brotli)

On Tue 18. 2. 2025 at 11:21, Jordi Boggiano wrote: > Hey, > > Kévin Dunglas and myself would like to present this RFC proposing > inclusion of the zstandard and brotli pecl extensions into core, It would be really good to get some thoughts of the author of these extensions (kjdev) because that’

Re: [PHP-DEV] PHP True Async

Hi, On Fri, Feb 14, 2025 at 3:21 PM Edmond Dantes wrote: > Hello, *Jakub.* > (It seems that simply clicking "Reply" does not work for the conference) > > *> *I understand that's not ready for review yet but quickly > You could say that the code is in a state of "architectural stability," > so

Re: [PHP-DEV] PHP True Async

> > >> A brief overview of what this RFC will cover: >> >>1. *True* asynchronous support for PHP core functions without >>additional "tricks." >>2. *Scheduler* and *Reactor* components, providing a C-API for PHP >>extensions to enable non-blocking I/O in plugins or core code. >>

Re: [PHP-DEV] PHP True Async

Hi On Fri, Feb 14, 2025 at 12:24 PM Edmond Dantes wrote: > Good day, everyone. > > I would like to request permission to create an RFC dedicated to the > asynchronous module for PHP. > Someone will surely grant you karma soon. RFC makes sense. > Although the source code development is still in

[PHP-DEV] PHP 8.3.17 Released

found at https://windows.php.net/download The list of changes is recorded in the ChangeLog: https://www.php.net/ChangeLog-8 Many thanks to all the contributors and supporters! Jakub Zelenka, Eric Mann and Pierrick Charron Release Manifest here and below: https://gist.github.com/bukka

Re: [PHP-DEV] Update OpenSSL Extension to Support KEMs

> > > to include PHP functions in the OpenSSL extension that look like this: >> >> function openssl_kem_encaps(OpenSSLAsymmetricKey $pk): array; >> > > The name should be more openssl_pkey_encapsulate > > I just did a bit more checking and we should consider having required kem operation as select

Re: [PHP-DEV] Update OpenSSL Extension to Support KEMs

Hi, > We intend to send a pull request later this year > Just note that there are some bigger internal changes being done on separation of backend starting with https://github.com/php/php-src/commit/d662ab5f08af83297dc64499edf0b79182d79e91 which should ultimately result in usage of custom libctx

Re: [PHP-DEV] Allow to easily retrieve non-default INI settings / GH PR 17459

Hi, On Thu, Feb 6, 2025 at 9:57 AM Tim Düsterhus wrote: > Hi > > this email concerns my PR https://github.com/php/php-src/pull/17459, > which extended the cli-SAPI’s `--ini` flag to print any INI settings > that differ from the built-in default. There was some discussion around > which flag to u

Re: [PHP-DEV] Deprecate filter_input() or not?

Hi, On Wed, Feb 5, 2025 at 2:15 PM Christoph M. Becker wrote: > Hi all! > > There is some discussion on a recent bug report[1] about filter_input() > and related functionality. The bug report had been closed, because this > functionality has already been added to the general deprecation RFC for

Re: [PHP-DEV] [RFC] Introducing pm.max_memory for PHP-FPM

On Fri, Jan 31, 2025 at 4:06 PM Arkadiy Kulev wrote: > Hi! > > >> This wouldn't really work because FPM does not control the script during execution and would have to check it out after each allocation which is not really viable. >>> >>> Thanks for the feedback! I agree that m

Re: [PHP-DEV] [RFC] Introducing pm.max_memory for PHP-FPM

> > > To be honest, I haven't seen a 'slow' memory leak in a long time -- except > when using fgetcsv which has had a reported memory leak since ~2012 > somewhere on the old bug tracker. (I lost the link to it and don't even > remember how to get to the tracker or if it still exists.) I haven't > c

Re: [PHP-DEV] [RFC] Introducing pm.max_memory for PHP-FPM

Hi, > This wouldn't really work because FPM does not control the script during >> execution and would have to check it out after each allocation which is not >> really viable. >> > > Thanks for the feedback! I agree that monitoring memory usage after each > allocation would be infeasible. However

[PHP-DEV] PHP 8.3.17RC1 Ready for testing

://github.com/php/php-src/issues PHP 8.3.17 should be expected in 2 weeks, i.e. on February 13, 2025. Hash values and PGP signatures can be found below or at https://gist.github.com/bukka/7870c189a02100ec323b8d0c7994b716 Thank you, and happy testing! Regards, Jakub Zelenka, Eric Mann & Pierrick Cha

Re: [PHP-DEV] [RFC] Introducing pm.max_memory for PHP-FPM

Hi, On Tue, Jan 28, 2025 at 2:17 AM Arkadiy Kulev wrote: > Hello everyone, > > I’d like to propose adding a new configuration directive, tentatively > called *pm.max_memory*, to PHP-FPM. This directive would allow > administrators to specify a per-child memory usage limit, after which the > PHP-

Re: [PHP-DEV] ext/sockets: socket_getpeername/socket_getsockname BC

On Wed, Jan 29, 2025 at 4:22 AM David CARLIER wrote: > Hi, > > Working on this PR #17440 , I > wanted to ask if the BC from these two calls > were ok because : > > Before > > function socket_getsockname(Socket $socket, &$address, *&$port = null*): > bool

Re: [PHP-DEV] Discussion: Remove file statcache?

On Sun, Dec 22, 2024 at 4:55 PM Calvin Buckley wrote: > On Dec 22, 2024, at 10:57 AM, Kévin Dunglas wrote: > > > > On Sun, Dec 22, 2024 at 10:44 AM Jakub Zelenka wrote: > > Thinking about it, there might be a possibility to address it (at least > on Linux) using fanoti

Re: [PHP-DEV] C Unit testing and mocking

On Tue, Dec 24, 2024 at 8:40 PM Larry Garfield wrote: > On Sun, Dec 22, 2024, at 9:23 AM, Jakub Zelenka wrote: > > On Mon, Dec 16, 2024 at 9:05 PM Christoph M. Becker > wrote: > >> On 16.12.2024 at 14:18, Jakub Zelenka wrote: > >> > There was a suggestion of RFC

Re: [PHP-DEV] C Unit testing and mocking

On Tue, Dec 24, 2024 at 8:22 PM Ben Ramsey wrote: > On Dec 16, 2024, at 07:21, Jakub Zelenka wrote: > >  > Hi, > > I have been looking into how to test some cases where integration tests > are very difficult or even impossible to create for. Those are often found > i

Re: [PHP-DEV] C Unit testing and mocking

On Thu, Dec 19, 2024 at 1:10 PM Christoph M. Becker wrote: > On 16.12.2024 at 21:05, Christoph M. Becker wrote: > > > Especially on Windows, where we have different code paths, and sometimes > > even completely different code, it would be great to also have these > > unit tests. Given that link.

Re: [PHP-DEV] C Unit testing and mocking

On Mon, Dec 16, 2024 at 9:05 PM Christoph M. Becker wrote: > On 16.12.2024 at 14:18, Jakub Zelenka wrote: > > There was a suggestion of RFC but that might be a bit too much as it's > just > > an internal change / addition. But certainly some overview on internals > &

Re: [PHP-DEV] Discussion: Remove file statcache?

> I suppose a possible alternative would be to modify all file system >> mutation functions (file_put_contents(), touch(), etc.) to flush the cache, >> which for whatever reason doesn't happen now. That would be above my skill >> level, though, so someone else would need to do it. Also, I don't k

Re: [PHP-DEV] Discussion: Remove file statcache?

On Sun, Dec 22, 2024 at 5:12 AM Larry Garfield wrote: > On Sat, Dec 21, 2024, at 10:43 AM, Jakub Zelenka wrote: > > On Fri, Dec 20, 2024 at 8:29 PM Larry Garfield > wrote: > >> Background: PHP has a not-often-considered feature, the stat-cache. > That is, the runtime c

Re: [PHP-DEV] Discussion: Remove file statcache?

On Fri, Dec 20, 2024 at 8:29 PM Larry Garfield wrote: > Background: PHP has a not-often-considered feature, the stat-cache. That > is, the runtime caches the OS stat() call for files, so that subsequent > reads on the same file can be faster. However, it's even less realized > that it's a singl

Re: [PHP-DEV] Discussion: Remove file statcache?

Hi, On Fri, Dec 20, 2024 at 10:37 PM Christoph M. Becker wrote: > On 20.12.2024 at 20:26, Larry Garfield wrote: > > > Background: PHP has a not-often-considered feature, the stat-cache. > That is, the runtime caches the OS stat() call for files, so that > subsequent reads on the same file can be

[PHP-DEV] PHP 8.3.15 Released

found at https://windows.php.net/download The list of changes is recorded in the ChangeLog: https://www.php.net/ChangeLog-8 Many thanks to all the contributors and supporters! Jakub Zelenka, Eric Mann and Pierrick Charron Release Manifest here and below: https://gist.github.com/bukka

[PHP-DEV] C Unit testing and mocking

Hi, I have been looking into how to test some cases where integration tests are very difficult or even impossible to create for. Those are often found in networking related and system specific code code (network.c, streams, FPM and more). I was recently fixing one such bug and decided to give a tr

Re: [PHP-DEV] [RFC] [Discussion] Error backtraces v2

On Sun, Dec 8, 2024 at 9:36 AM Jakub Zelenka wrote: > Hi, > > On Thu, Dec 5, 2024 at 10:02 PM Eric Norris > wrote: > >> Hello yet again internals, >> >> I'd like to formally propose a continuation of the original error >> backtraces RFC (https://wik

Re: [PHP-DEV] [RFC] [Discussion] Error backtraces v2

Hi, On Thu, Dec 5, 2024 at 10:02 PM Eric Norris wrote: > Hello yet again internals, > > I'd like to formally propose a continuation of the original error > backtraces RFC (https://wiki.php.net/rfc/error_backtraces): > > https://wiki.php.net/rfc/error_backtraces_v2 > > I would prefer this to be

[PHP-DEV] PHP 8.3.15RC1 Ready for testing

://github.com/php/php-src/issues PHP 8.3.15 should be expected in 2 weeks, i.e. on December 19, 2024. Hash values and PGP signatures can be found below or at https://gist.github.com/bukka/1149ebfcf6c28e13a7cfe0f344081fc4 Thank you, and happy testing! Regards, Jakub Zelenka, Eric Mann & Pierrick Cha

Re: [PHP-DEV] PHP 8.2 Active Support Closed Reminder

On Tue, Nov 19, 2024 at 6:46 PM Sergey Panteleev wrote: > Hi, all! > > Just a friendly reminder, > > according to the supported versions page [1], > active support for PHP-8.2 ends on 31 December 2024. > > Since our release cycle has a release falling on 19 December, > this means PHP 8.2.27 is th

Re: [PHP-DEV] A new fuzz testing tool for PHP

On Tue, Nov 19, 2024 at 12:22 AM Ilija Tovilo wrote: > Hi Yuancheng > > On Fri, Nov 15, 2024 at 2:21 PM Yuancheng Jiang <0599jian...@gmail.com> > wrote: > > > > I have been submitting hundreds of bugs (see > https://github.com/php/php-src/issues/created_by/YuanchengJiang) during > the past months

Re: [PHP-DEV] [RFC] [Discussion] Persistent CurlShareHandle objects

On Mon, Nov 4, 2024 at 2:21 PM Jakub Zelenka wrote: > Hi, > > On Wed, Oct 9, 2024 at 10:18 PM Eric Norris > wrote: > >> Hello all, >> >> After receiving some feedback about >> https://github.com/php/php-src/pull/15603, I'm formally proposing an >

Re: [PHP-DEV] [RFC] [Discussion] Persistent CurlShareHandle objects

Hi, On Wed, Oct 9, 2024 at 10:18 PM Eric Norris wrote: > Hello all, > > After receiving some feedback about > https://github.com/php/php-src/pull/15603, I'm formally proposing an > RFC to add persistent curl share handles here: > https://wiki.php.net/rfc/curl_share_persistence > > I think what's

[PHP-DEV] PHP 8.3.13 Released

found at https://windows.php.net/download The list of changes is recorded in the ChangeLog: https://www.php.net/ChangeLog-8 Many thanks to all the contributors and supporters! Jakub Zelenka, Eric Mann and Pierrick Charron Release Manifest here and below: https://gist.github.com/bukka

[PHP-DEV] PHP 8.3.13RC1 Ready for testing

://github.com/php/php-src/issues PHP 8.3.13 should be expected in 2 weeks, i.e. on October 24, 2024. Hash values and PGP signatures can be found below or at https://gist.github.com/bukka/c673b82f3a2150f308cb0dc1da3b05eb Thank you, and happy testing! Regards, Jakub Zelenka, Eric Mann & Pierrick Charron

Re: [PHP-DEV] [RFC] Policy on 3rd party code

On Tue, Oct 8, 2024 at 12:20 AM Jim Winstead wrote: > On Mon, Oct 7, 2024, at 2:54 AM, Jakub Zelenka wrote: > > Hi, > > On Wed, Oct 2, 2024 at 7:38 PM Larry Garfield > wrote: > > Since Jim's RFC proposal was criticized for being too vague, I hereby > offer a s

Re: [PHP-DEV] [RFC] Policy on 3rd party code

Hi, On Wed, Oct 2, 2024 at 7:38 PM Larry Garfield wrote: > Since Jim's RFC proposal was criticized for being too vague, I hereby > offer a somewhat more prescriptive policy proposal on using 3rd party > code. (With JIm's blessing.) It's still more heuristics than rules, but I > think that's th

Re: [PHP-DEV] No more RFC implementations during beta phase

Hi, On Tue, Sep 24, 2024 at 4:53 PM Bob Weinand wrote: > On 24.9.2024 17:14:20, Christoph M. Becker wrote: > > Hi all, > > I want to suggest that we do not allow any RFC implementations to land > during beta phase. In my opinion, the remaining time to thoroughly > check and address possibly ove

Re: [PHP-DEV] Zephir, and other tangents

Hi, On Fri, Sep 20, 2024 at 9:36 PM Dennis Snell wrote: > > On Sep 20, 2024, at 1:21 PM, Jakub Zelenka wrote: > > Hi, > > On Fri, Sep 20, 2024 at 6:32 PM Dennis Snell > wrote: > >> >> My goal in sharing here is to help better represent my own perspective

Re: [PHP-DEV] Zephir, and other tangents

Hi, On Fri, Sep 20, 2024 at 6:32 PM Dennis Snell wrote: > > My goal in sharing here is to help better represent my own perspective of > WordPress’ needs based on what I’ve seen. It’s long been on my list to > propose a WASM RFC, but because I personally haven’t had the priority > available to ge

Re: [PHP-DEV] PHP 8.3.11 Released

On Fri, Aug 30, 2024 at 2:59 PM Christoph M. Becker wrote: > On 30.08.2024 at 00:46, Jakub Zelenka wrote: > > > The PHP development team announces the immediate availability of PHP > > 8.3.11. This is a bugfix release. > > > > All PHP 8.3 users are encoura

[PHP-DEV] PHP 8.3.11 Released

found at https://windows.php.net/download The list of changes is recorded in the ChangeLog: https://www.php.net/ChangeLog-8 Many thanks to all the contributors and supporters! Jakub Zelenka, Eric Mann and Pierrick Charron Release Manifest here and below: https://gist.github.com/bukka

[PHP-DEV] PHP 8.3.11RC2 Ready for testing

://github.com/php/php-src/issues PHP 8.3.11 should be expected in 1 week, i.e. on August 29, 2024. Hash values and PGP signatures can be found below or at https://gist.github.com/bukka/5f3bc60ac16788411145fdd73ccab441 Thank you, and happy testing! Regards, Jakub Zelenka, Eric Mann & Pierrick Charron

[PHP-DEV] PHP 8.3.11RC1 Ready for testing

://github.com/php/php-src/issues PHP 8.3.11 should be expected in 2 weeks, i.e. on August 29, 2024. Hash values and PGP signatures can be found below or at https://gist.github.com/bukka/a68c19f3a56138543ce8c5754ec18436 Thank you, and happy testing! Regards, Jakub Zelenka, Eric Mann & Pierrick Charron

Re: [PHP-DEV] Require C11 in PHP 8.4

Hi, On Fri, Aug 2, 2024 at 1:36 PM Giovanni Giacobbi wrote: > It feels wrong to raise such an important requirement that might affect a > lot of people, including maintainers of extensions > Why do you think that this might affect a lot of people? We are talking about minimum GCC version 4.7 an

Re: [PHP-DEV] [RFC] [VOTE] Deprecations for PHP 8.4

Hi, On Mon, Jul 22, 2024 at 11:59 AM Jakub Zelenka wrote: > Hi, > > On Fri, Jul 19, 2024 at 6:42 PM Gina P. Banyard wrote: > >> Hello internals, >> >> I have opened the vote for the mega deprecation RFC: >> https://wiki.php.net/rfc/deprecations_php_

Re: [PHP-DEV] [RFC] [VOTE] Deprecations for PHP 8.4

On Mon, Jul 22, 2024 at 11:59 AM Jakub Zelenka wrote: > I think we should also keep file_put_contents array argument as it might > actually be used with iovec in the future which could be a significant > optimization - need to check details if that would work but if it does, it >

Re: [PHP-DEV] [RFC] [VOTE] Deprecations for PHP 8.4

Hi, On Fri, Jul 19, 2024 at 6:42 PM Gina P. Banyard wrote: > Hello internals, > > I have opened the vote for the mega deprecation RFC: > https://wiki.php.net/rfc/deprecations_php_8_4 > > Reminder, each vote must be submitted individually. > > > Just wanted to send some reasoning of my no votes.

Re: [PHP-DEV] pcntl_exec update proposal

On Mon, Jul 8, 2024 at 11:14 PM Dusk wrote: > On Jul 8, 2024, at 14:12, David CARLIER wrote: > > Through this existing PR, I wanted to know how would appeal to you > adding some access restriction upon this existing call, using the open > basedir check. So if the sysadmin wants the php user havi

[PHP-DEV] PHP 8.3.9 Released

found at https://windows.php.net/download The list of changes is recorded in the ChangeLog: https://www.php.net/ChangeLog-8 Many thanks to all the contributors and supporters! Jakub Zelenka, Eric Mann and Pierrick Charron Release Manifest here and below: https://gist.github.com/bukka

[PHP-DEV] PHP 8.3.9RC1 Ready for testing

/php/php-src/issues PHP 8.3.9 should be expected in 2 weeks, i.e. on July 04, 2024. Hash values and PGP signatures can be found below or at https://gist.github.com/bukka/f2cf8f9f20604ad16a53eb7a84114370 Thank you, and happy testing! Regards, Jakub Zelenka, Eric Mann & Pierrick Charron

[PHP-DEV] PHP 8.3.7 Released

found at https://windows.php.net/download The list of changes is recorded in the ChangeLog: https://www.php.net/ChangeLog-8 Many thanks to all the contributors and supporters! Jakub Zelenka, Eric Mann and Pierrick Charron Release Manifest here and below: https://gist.github.com/bukka

[PHP-DEV] PHP 8.3.7RC1 Ready for testing

/php/php-src/issues PHP 8.3.7 should be expected in 2 weeks, i.e. on May 09, 2024. Hash values and PGP signatures can be found below or at https://gist.github.com/bukka/b4166ddb7aed43e350964021cd2cccb8 Thank you, and happy testing! Regards, Jakub Zelenka, Eric Mann & Pierrick Charron

Re: [PHP-DEV] PHP 8.3.6 Released

On Thu, Apr 11, 2024 at 5:10 PM wrote: > On 4/11/24 08:55, Athos Ribeiro wrote: > > On Thu, Apr 11, 2024 at 08:03:31AM -0700, ericm...@php.net wrote: > > The PHP development team announces the immediate availability of PHP > 8.3.6. This is a security release that addresses CVE-2024-1874, > CVE-20

Re: [PHP-DEV] Requiring GPG Commit Signing

On Tue, Apr 2, 2024 at 8:45 PM Rowan Tommins [IMSoP] wrote: > On 02/04/2024 20:02, Ilija Tovilo wrote: > > But, does it matter? I'm not sure we look at some commits closer than > others, based on its author. It's true that it might be easier to > identify malicious commits if they all come from t

Re: [PHP-DEV] Consider removing autogenerated files from tarballs

Hi, On Tue, Apr 2, 2024 at 7:14 PM Stanislav Malyshev wrote: > Hi! > > That is something PHP is missing atm, no one can verify the build process >> for releases. >> > > Yes that's what I was suggesting. This should be done by RM. In that way, > the RM becomes more someone that verifies the build

Re: [PHP-DEV] Requiring GPG Commit Signing

On Tue, Apr 2, 2024 at 5:05 PM John Coggeshall wrote: > > So if we want to make sure that something like XY doesn't happen, we > have to add some additional restrictions to those GPG keys. > > > Looks like all those geeky colleagues of ours back in the day having > key-signing parties at conferen

Re: [PHP-DEV] Consider removing autogenerated files from tarballs

On Tue, Apr 2, 2024 at 3:35 PM tag Knife wrote: > > On Tue, 2 Apr 2024 at 14:53, Jakub Zelenka wrote: > >> We will still need RM to sign the build so ideally we should make it >> reproducible so RM can verify that CI produced expected build and then sign >> it and

Re: [PHP-DEV] Requiring GPG Commit Signing

On Tue, Apr 2, 2024 at 3:36 PM Jakub Zelenka wrote: > On Tue, Apr 2, 2024 at 3:17 PM Derick Rethans wrote: > >> Hi, >> >> What do y'all think about requiring GPG signed commits for the php-src >> repository? >> >> > +1, most of the devs al

Re: [PHP-DEV] Requiring GPG Commit Signing

On Tue, Apr 2, 2024 at 3:17 PM Derick Rethans wrote: > Hi, > > What do y'all think about requiring GPG signed commits for the php-src > repository? > > +1, most of the devs already do that. I CC'd few of the regular devs that don't sign commits (taken from the latest history) so they are aware of

[PHP-DEV] [VOTE] PHP 8.4 Release Managers

tentially 4.5 if the extended security support RFC passes) commitment and is a position of trust. Thank you in advance for your consideration. Your 8.3 Release Managers, Jakub Zelenka, Eric Mann & Pierrick Charron Vote Opened: 2 April 2023 15:00:00 UTC Vote Closes: 16 April 2023 15:00:00 UTC Re

Re: [PHP-DEV] Consider removing autogenerated files from tarballs

Hi, On Tue, Apr 2, 2024 at 2:36 PM Derick Rethans wrote: > On Sat, 30 Mar 2024, Jakub Zelenka wrote: > > > On Sat, Mar 30, 2024 at 7:08 AM Marco Pivetta > wrote: > > > > > > I understand that the XZ project had signed releases too: that still > > > mea

Re: [PHP-DEV] Consider removing autogenerated files from tarballs

On Sat, Mar 30, 2024 at 5:46 PM Ben Ramsey wrote: > On Mar 30, 2024, at 07:03, Jakub Zelenka wrote: > >  > Hi, > > On Sat, Mar 30, 2024 at 7:08 AM Marco Pivetta wrote: > >> >> >> On Sat, 30 Mar 2024, 05:19 Ben Ramsey, wrote: >> >

Re: [PHP-DEV] Consider removing autogenerated files from tarballs

Hi, On Sat, Mar 30, 2024 at 3:33 PM Daniil Gentili wrote: > It is also pretty standard thing to distribute configure files (which is > the file that probably matters most). > > The current standard way of distributing generated configure files in > tarballs is precisely what allowed the xz suppl

Re: [PHP-DEV] Consider removing autogenerated files from tarballs

On Sat, Mar 30, 2024 at 12:03 PM Jakub Zelenka wrote: > Hi, > > On Sat, Mar 30, 2024 at 7:08 AM Marco Pivetta wrote: > >> >> >> On Sat, 30 Mar 2024, 05:19 Ben Ramsey, wrote: >> >>> On Mar 29, 2024, at 20:20, Bob Weinand wrote: >>>

Re: [PHP-DEV] Consider removing autogenerated files from tarballs

Hi On Sat, Mar 30, 2024 at 1:39 PM Daniil Gentili wrote: > Hi, > > > >The idea is that we would setup worklfow on CI that would run on tag push > and it would call (authenticated https request) downloads.php.net server > that could do the actual build > > I strongly believe that source tarballs

Re: [PHP-DEV] Consider removing autogenerated files from tarballs

Hi, On Sat, Mar 30, 2024 at 7:08 AM Marco Pivetta wrote: > > > On Sat, 30 Mar 2024, 05:19 Ben Ramsey, wrote: > >> On Mar 29, 2024, at 20:20, Bob Weinand wrote: >> >>  >> On 29.3.2024 23:31:26, Daniil Gentili wrote: >> >> In light of the recent supply chain attack in xz/lzma, leading to a >> b

Re: [PHP-DEV] GitHub milestones

Hi, On Wed, Mar 27, 2024 at 3:26 PM Ilija Tovilo wrote: > Hi Peter > > On Wed, Mar 27, 2024 at 9:44 AM Peter Kokot wrote: > > > > I was wondering if it would be useful to add GitHub milestones for the > PHP-8.4 and PHP-9.0 (or PHP-next or something like this)? > > https://github.com/php/php-src

[PHP-DEV] PHP 8.3.4 Released

found at https://windows.php.net/download The list of changes is recorded in the ChangeLog: https://www.php.net/ChangeLog-8 Many thanks to all the contributors and supporters! Jakub Zelenka, Eric Mann and Pierrick Charron Release Manifest here and below: https://gist.github.com/bukka

Re: [PHP-DEV] int|float for sleep? sleep(0.1) => sleep 0.1 seconds

On Fri, Mar 8, 2024 at 6:30 PM Jim Winstead wrote: > On Fri, Mar 8, 2024, at 12:12 AM, Hans Henrik Bergan wrote: > > On Tue, 5 Mar 2024 at 20:17, Larry Garfield > wrote: > >> > >> A 3 way up-down vote doesn't make sense. What happens if none of the 3 > options reaches 66%? > >> > >> The viable

[PHP-DEV] Re: Release Managers for PHP 8.4

On Tue, Mar 5, 2024 at 3:37 PM Jakub Zelenka wrote: > Hi all, > > It's time to start the process of finding and electing RMs for the next > minor PHP release. > > We are looking for three souls to take on this role. Whomsoever is elected > will be guided and helped

[PHP-DEV] Release Managers for PHP 8.4

re if you wish to be considered a candidate. An initial TODO page has been added to the wiki and contains provisional dates for GA and pre-releases [2]. [1] https://github.com/php/php-src/blob/master/docs/release-process.md [2] https://wiki.php.net/todo/php84 Let's all make PHP awesome!

Re: [PHP-DEV] php-src docs

Hi, On Tue, 5 Mar 2024 at 12:48, Peter Kokot wrote: > On Mon, 12 Feb 2024 at 12:13, Ilija Tovilo wrote: > > > > Hi Yuya > > > > It seems you accidentally sent your response to me instead of the list. > > > > On Sun, Feb 11, 2024 at 5:10 PM youkidearitai > wrote: > > > > > > 2024年2月11日(日) 21:18

[PHP-DEV] Changes to ML - only subscribed addresses can send to it

Hello, This is an information message. As some of you are aware there has been some changes to ML. I just stumbled on one of the changes when sending 8.3.4RC1 emails so want to let others know. The change is that the list will accept only messages from the subscribers which means that From header

[PHP-DEV] PHP 8.3.4RC1 available for testing

testing! Regards, Jakub Zelenka, Eric Mann & Pierrick Charron php-8.3.4RC1.tar.bz2 SHA256 hash: cbe898e2ae54ab6e3adf38c6300d84dca1dce163c1bc417a799b162f5e44d025 PGP signature: -BEGIN PGP SIGNATURE- iHUEABYIAB0WIQTCjZN1dWA+tKu3JYYcB3ncXAqd5AUCZd8eQAAKCRAcB3nc

Re: [PHP-DEV] Dedicated StreamBucket class

Hi, On Wed, Jan 17, 2024 at 9:14 PM Máté Kocsis wrote: > I just submitted feedback to the PR but will also mention it here as it's >> probably more an API thing. The problem that I see is that it combines two >> distinct things and create quite ugly self reference inside the proposed >> StreamBu

[PHP-DEV] PHP 8.3.2 Released

found at https://windows.php.net/download The list of changes is recorded in the ChangeLog: https://www.php.net/ChangeLog-8 Many thanks to all the contributors and supporters! Eric Mann, Jakub Zelenka, and Pierrick Charron Release Manifest here and below: https://gist.github.com/bukka

Re: [PHP-DEV] Dedicated StreamBucket class

Hi, On Sat, Jan 13, 2024 at 9:29 AM Máté Kocsis wrote: > Hi Everyone, > > Recently, I realized that the stream_bucket_new() and > stream_bucket_make_writeable() functions > create stdClass instances by dynamically adding a "bucket", a "data" and a > "datalen" property to it. > > A few days ago,

  1   2   3   4   5   >