Re: [PHP-DEV] 5.4.0 rc6 and release

2012-03-27 Thread Stas Malyshev
Hi! > Actually, this is not a bad thing at all. > It makes sure lots of PHP projects and Frameworks stays on 5.3 as a common > base for the next 1-3 years, introp wise that is a good thing. How this is good? 5.4 is superior to 5.3 in... well, all aspects, why denying people chance to use it for y

Re: [PHP-DEV] 5.4.0 rc6 and release

2012-03-27 Thread Lester Caine
André Rømcke wrote: > I disagree. The lesson here is that the Ubuntu's security team should > have discussed with us to see what are actually their worries instead > of not following what is actually a good move for everyone. Why? It is common practice to avoid .0 releases, including those f

Re: [PHP-DEV] 5.4.0 rc6 and release

2012-03-27 Thread Pierre Joye
On Tue, Mar 27, 2012 at 10:27 AM, André Rømcke wrote: >> I disagree. The lesson here is that the Ubuntu's security team should >> have discussed with us to see what are actually their worries instead >> of not following what is actually a good move for everyone. > > > > Why? Non vanilla php. C

Re: [PHP-DEV] 5.4.0 rc6 and release

2012-03-27 Thread André Rømcke
On Tue, Mar 27, 2012 at 8:45 AM, Pierre Joye wrote: > hi, > hi, > > On Tue, Mar 27, 2012 at 8:38 AM, Clint Byrum wrote: > > > I think the lesson here is to get the necessary bits from Suhosin into > > PHP's core so that users can feel safe when using stock PHP, rather > > than needing to wait fo

Re: [PHP-DEV] 5.4.0 rc6 and release

2012-03-27 Thread Stas Malyshev
Hi! > I think the lesson here is to get the necessary bits from Suhosin into > PHP's core so that users can feel safe when using stock PHP, rather > than needing to wait for the good and generous folks at the hardened > PHP project to catch up. Unfortunately, the good and generous leader of Suhos

Re: [PHP-DEV] 5.4.0 rc6 and release

2012-03-26 Thread Pierre Joye
hi, hi, On Tue, Mar 27, 2012 at 8:38 AM, Clint Byrum wrote: > I think the lesson here is to get the necessary bits from Suhosin into > PHP's core so that users can feel safe when using stock PHP, rather > than needing to wait for the good and generous folks at the hardened > PHP project to catch

Re: [PHP-DEV] 5.4.0 rc6 and release

2012-03-26 Thread Clint Byrum
Excerpts from Johannes Schlüter's message of Mon Mar 26 16:09:20 -0700 2012: > On Mon, 2012-03-26 at 12:00 -0700, Clint Byrum wrote: > > > > Our hands are tied, as the security team still does not feel > > comfortable shipping a PHP without Suhosin. Perhaps more can be done > > to convince the wor

Re: [PHP-DEV] 5.4.0 rc6 and release

2012-03-26 Thread Johannes Schlüter
On Mon, 2012-03-26 at 12:00 -0700, Clint Byrum wrote: > > Our hands are tied, as the security team still does not feel > comfortable shipping a PHP without Suhosin. Perhaps more can be done > to convince the world that this is a safe thing to do now, but for > now, we're taking the extremely conse

Re: [PHP-DEV] 5.4.0 rc6 and release

2012-03-26 Thread Clint Byrum
Excerpts from André Rømcke's message of Mon Mar 26 04:44:53 -0700 2012: > On Fri, Jan 20, 2012 at 1:43 AM, Clint Byrum wrote: > > > Excerpts from Stas Malyshev's message of Thu Jan 19 16:08:28 -0800 2012: > > > Hi! > > > > > > > - According to this website there are still 94 test failures in 5.4

Re: [PHP-DEV] 5.4.0 rc6 and release

2012-03-26 Thread Pierre Joye
hi, On Mon, Mar 26, 2012 at 1:44 PM, André Rømcke wrote: > With beta freeze on march 22 I guess the "mistake" of bundeling 5.3 instead > of 5.4 is already made, and we will have to live with that for the next 2 > years for prod, and the next 7 months for dev. It was long planed as far as I reme

Re: [PHP-DEV] 5.4.0 rc6 and release

2012-03-26 Thread André Rømcke
On Fri, Jan 20, 2012 at 1:43 AM, Clint Byrum wrote: > Excerpts from Stas Malyshev's message of Thu Jan 19 16:08:28 -0800 2012: > > Hi! > > > > > - According to this website there are still 94 test failures in 5.4 . > > > Can you confirm all of them are minor problems? > > > http://gcov.php.net/vi

Re: [PHP-DEV] 5.4.0 rc6 and release

2012-01-19 Thread Stas Malyshev
Hi! These tests should be skipped or marked as XFAIL on platforms they are known to fail on. Better to have no test than one that cannot be relied upon. All supported platforms should pass with 0 fails. These intentional Of course they should, and you (or anybody else) are welcome to make the

Re: [PHP-DEV] 5.4.0 rc6 and release

2012-01-19 Thread Clint Byrum
Excerpts from Stas Malyshev's message of Thu Jan 19 16:08:28 -0800 2012: > Hi! > > > - According to this website there are still 94 test failures in 5.4 . > > Can you confirm all of them are minor problems? > > http://gcov.php.net/viewer.php?version=PHP_5_4 > > Most of them appear so, I'll go thr

Re: [PHP-DEV] 5.4.0 rc6 and release

2012-01-19 Thread Stas Malyshev
Hi! - According to this website there are still 94 test failures in 5.4 . Can you confirm all of them are minor problems? http://gcov.php.net/viewer.php?version=PHP_5_4 Most of them appear so, I'll go through them again to be sure and encourage others to do so too and raise red flags if someb

Re: [PHP-DEV] 5.4.0 rc6 and release

2012-01-19 Thread Michael Kliewe
Hi, great to see progress! I have some small questions, please don't feel offended, I just want to know and understand: - According to this website there are still 94 test failures in 5.4 . Can you confirm all of them are minor problems? http://gcov.php.net/viewer.php?version=PHP_5_4 - There

[PHP-DEV] 5.4.0 rc6 and release

2012-01-19 Thread Stas Malyshev
Hi! We'll be announcing RC6 very soon, and we're planning the final release for February 2nd. The two weeks in between are meant for testing and finding out any critical issues that could prevent us from releasing 5.4.0. If we have none of these, we will proceed with the release. To ensure thi