51 Pull requests merged by 16 people

• Remove references to ODBCVER and assume ODBC 3.x

  #19453 merged Aug 12, 2025

• Remove dead error checks for php_stream_filter_alloc()

  #19194 merged Aug 12, 2025

• [RFC] Extend #[\Override] to target properties

  #19061 merged Aug 12, 2025

• [RFC] Deprecate ReflectionProperty::getDefaultValue() without default

  #19457 merged Aug 12, 2025

• [RFC] Deprecate ReflectionClass::getConstant() for missing constants

  #19456 merged Aug 12, 2025

• [RFC] Deprecate imagedestroy()

  #19454 merged Aug 12, 2025

• [RFC] Deprecate curl_share_close()

  #19452 merged Aug 12, 2025

• [RFC] Deprecate curl_close()

  #19451 merged Aug 12, 2025

• [RFC] Deprecate xml_parser_free()

  #19449 merged Aug 12, 2025

• RFC: Deprecate date constant RFC7231

  #12989 merged Aug 12, 2025

• Various return types and values consolidation

  #19418 merged Aug 12, 2025

• [RFC] Deprecate returning null from __debugInfo()

  #19455 merged Aug 12, 2025

• zend_compile: Deprecate backticks as an alias for shell_exec()

  #19443 merged Aug 12, 2025

• Emit EXT_STMT after each pipe stage, and attach the TMP var that holds the intermediary result

  #19377 merged Aug 12, 2025

• Fix Nightly workflow Symfony assertion (ir_ra.c:326: ir_fix_live_range: Assertion `ival && p->start == old_start' failed)

  #19458 merged Aug 12, 2025

• Use OpenSSL libctx for various BIO readers

  #19448 merged Aug 11, 2025

• GH-19153: Validate #[\Attribute] targets

  #19154 merged Aug 11, 2025

• Deprecate terminating case statements with a semicolon

  #19215 merged Aug 11, 2025

• Sync with lexbor/lexbor@49b43eba415a0222afc10b6a61d4902286e7c79a

  #19442 merged Aug 10, 2025

• ext/openssl: Deprecate $key_length parameter of openssl_pkey_derive()

  #19421 merged Aug 9, 2025

• Fix non-canonical casts

  #19438 merged Aug 9, 2025

• ext/standard: Deprecate passing null to readdir(), rewinddir(), and closedir()

  #19423 merged Aug 9, 2025

• ext/finfo: Deprecate the parameter for finfo_buffer()

  #19378 merged Aug 9, 2025

• ext/intl: Deprecate intl.error_level INI setting

  #19430 merged Aug 9, 2025

• ext/int: IntlTimeZone converting few intl error to exceptions.

  #13477 merged Aug 9, 2025

• Use proper hash_spec_result enum for return values in ext/hash

  #19386 merged Aug 9, 2025

• ext/spl: Deprecate SplObjectStorage::contains(), SplObjectStorage::attach(), and SplObjectStorage::detach()

  #19424 merged Aug 9, 2025

• ext/intl: wrap DateTimeZone constructor exception in an IntlException

  #19410 merged Aug 9, 2025

• ext/spl: Deprecate passing spl_autoload_call() to spl_autoload_unregister()

  #19422 merged Aug 9, 2025

• Deprecate the parameter of get_defined_functions()

  #19425 merged Aug 9, 2025

• Autotools: Update ax_check_compile_flag.m4 to serial 11

  #19127 merged Aug 9, 2025

• Make spl_filesystem_dir_read() return void

  #19419 merged Aug 8, 2025

• fileinfo: Deprecate finfo_close()

  #18396 merged Aug 8, 2025

• reflection: Deprecate Reflection*::setAccessible()

  #19273 merged Aug 8, 2025

• pdo: Deprecate the uri: DSN scheme

  #19274 merged Aug 8, 2025

• standard: Deprecate socket_set_timeout()

  #19285 merged Aug 8, 2025

• mysqli: Deprecate mysqli_execute()

  #19286 merged Aug 8, 2025

• Zend: Deprecate non-canonical cast names

  #19372 merged Aug 8, 2025

• ext/intl: Refactor timezone parameter passing

  #19409 merged Aug 8, 2025

• Use stack allocation in timezone_initialize()

  #19394 merged Aug 8, 2025

• Fix GH-18404: Display diff when a single test is run

  #19400 merged Aug 8, 2025

• ext/intl: Use ZPP specifier for IntlTimeZone::createEnumeration()

  #19393 merged Aug 7, 2025

• ext/intl: update C to C++ step2.

  #19294 merged Aug 7, 2025

• tree: remove some usages of the report_memleaks INI setting

  #19407 merged Aug 7, 2025

• ext/sockets: remove tests that leak memory

  #19408 merged Aug 7, 2025

• ext/intl: better errors for IntlTimeZone::createTimeZoneIDEnumeration

  #19395 merged Aug 7, 2025

• ext/intl: prevent creation of invalid UConverter instance

  #19396 merged Aug 7, 2025

• ext/intl: modernize tests

  #19392 merged Aug 6, 2025

• ext/date: null bytes in timezones can only happen via HT initialization

  #19357 merged Aug 6, 2025

• ext/ldap: Various minor refactorings 2

  #19389 merged Aug 6, 2025

• Fix Windows test for openssl-3.5 upgrade

  #19384 merged Aug 6, 2025

28 Pull requests opened by 11 people

• Write up NEWS rules

  #19387 opened Aug 6, 2025

• Fix opcache.huge_code_pages

  #19388 opened Aug 6, 2025

• Fix GH-16649: Avoid UAF when using array_splice

  #19399 opened Aug 7, 2025

• Add method to ReflectionClass to instantiate with the same semantics as `PDOStatement::fetchObject()`

  #19401 opened Aug 7, 2025

• Disable opcache for fuzzer-execute

  #19402 opened Aug 7, 2025

• fastcgi: using accept4 on connections accept when possible.

  #19403 opened Aug 7, 2025

• Fix GH-18223: Meaningful error on wrong trait method exclusion

  #19404 opened Aug 7, 2025

• ext/intl: migrate C code to C++ step 3.

  #19411 opened Aug 8, 2025

• Add some comments to zend_gc.c

  #19412 opened Aug 8, 2025

• Fix php_stream_url_wrap_http_ex segfault when real remote failed ssl encryption

  #19414 opened Aug 8, 2025

• Fix GH-19406: Redeclaring a protected constant in a child class should work

  #19415 opened Aug 8, 2025

• ext/tidy: throwing exception instead of warning for php calls.

  #19417 opened Aug 8, 2025

• ext/spl: Deprecate ArrayObject and ArrayIterator with objects

  #19420 opened Aug 8, 2025

• ext/intl: trying out ideas for GH-19362

  #19429 opened Aug 9, 2025

• ext/intl: get_icu_value_internal() to reduce manual memory manageme…

  #19433 opened Aug 9, 2025

• [RFC] Add clamp function

  #19434 opened Aug 9, 2025

• Zend: Deprecate __sleep() and __wakeup()

  #19435 opened Aug 9, 2025

• Zend: Warn when destructuring non-array values

  #19439 opened Aug 9, 2025

• ext/standard: Deprecate passing string which are not one byte long to ord()

  #19440 opened Aug 9, 2025

• ext/standard: Deprecate passing integers outside the interval [0, 255] to chr()

  #19441 opened Aug 9, 2025

• ext/pdo_pgsql: Deprecate PDO::PGSQL_TRANSACTION* constants.

  #19444 opened Aug 10, 2025

• Fix GH-15796: Add the `exit_status()` function

  #19445 opened Aug 11, 2025

• Fix GH-15496: Fix accessing NULL pointer on output handler stack

  #19446 opened Aug 11, 2025

• Fix GH-14402: Add support for serialization in SplPriorityQueue, SplMinHeap and SplMaxHeap

  #19447 opened Aug 11, 2025

• Fix GH-19461: Improve error message on listening error with IPv6

  #19462 opened Aug 12, 2025

• ext/standard: Deprecate $http_response_header

  #19464 opened Aug 12, 2025

• Use attribute validator for assigning flags

  #19465 opened Aug 12, 2025

• Eliminate useless spill stores

  #19467 opened Aug 12, 2025

20 Issues closed by 11 people

• Success error message on TLS stream accept failure

  #19245 closed Aug 12, 2025

• missing isset() on private(set) property (backing a get hook)

  #18318 closed Aug 12, 2025

• 0&&ZEND_DEBUG

  #19460 closed Aug 12, 2025

• Parameter Array in sqlite3 world to achieve one-liner sql-injection safety

  #19237 closed Aug 12, 2025

• Long match statement can segfault compiler during recursive SSA renaming

  #19065 closed Aug 11, 2025

• #[\Attribute] validation should error on trait/interface/enum/abstract class

  #19153 closed Aug 11, 2025

• MSVC Compiler warning (level 2) C4146 in php_random_uint128.h

  #19343 closed Aug 11, 2025

• Deprecate semicolons after case in switch statement

  #15258 closed Aug 11, 2025

• php-8.3.24: Missing type in function definition: fpm_event_kqueue_clean

  #19383 closed Aug 10, 2025

• \Dom\HTMLDocument querySelectorAll selecting only the first when using ~ and :has

  #18877 closed Aug 10, 2025

• 8.5 | Regression in openssl_sign() - support for alias algorithms appears to be broken

  #19369 closed Aug 9, 2025

• openssl_pkey_derive segfaults for DH derive with low key_length param

  #19428 closed Aug 9, 2025

• mb_list_encodings() can cause crashes on shutdown

  #19397 closed Aug 8, 2025

• run-tests.php doesn't create test results if directories are passed

  #18404 closed Aug 8, 2025

• zend_ast_tree_copy cannot copy closure with a default argument in zend_ast_process hook

  #19155 closed Aug 8, 2025

• make test failed on Ubuntu 24.04: Bug #66338 opcache

  #19227 closed Aug 8, 2025

• Does CVE-2024-3566 Affect PHP?

  #19398 closed Aug 7, 2025

• integer overflow in calendar.c

  #19371 closed Aug 7, 2025

• Segmentation fault, probaby on string operation

  #18611 closed Aug 7, 2025

• Weird behavior of `grapheme_stripos()` with grapheme `\u{34F}`

  #19361 closed Aug 7, 2025

7 Issues opened by 7 people

• Trait property conflicts silently drop attributes

  #19466 opened Aug 12, 2025

• Built-in server misinterprets IPv6 address with port notation

  #19461 opened Aug 12, 2025

• Null coalesce operator behaves inconsistent with null safe operator on the left-hand side

  #19427 opened Aug 8, 2025

• gen_stub.php support for @cvalue DocBlock annotation for backed enum cases

  #19426 opened Aug 8, 2025

• Final or Readonly Local Variables

  #19416 opened Aug 8, 2025

• PDO fixedly passes MYSQL_TYPE_LONG, causing values exceeding INT32 to overflow When using non-mysqlnd drivers,

  #19413 opened Aug 8, 2025

• Redeclaring protected properties on children creates a liskov violation

  #19406 opened Aug 7, 2025

29 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Tail call VM [2]

  #18720 commented on Aug 12, 2025 • 27 new comments

• Add internal URI handling API

  #19073 commented on Aug 10, 2025 • 20 new comments

• Intl: Add a new IntlNumberRangeFormatter class

  #19232 commented on Aug 11, 2025 • 10 new comments

• main: refactor userstream method calling

  #19312 commented on Aug 12, 2025 • 8 new comments

• [RFC] partitioned option for setcookie/setrawcookie and sessions

  #12652 commented on Aug 12, 2025 • 5 new comments

• [RFC] Add `#[\DelayedTargetValidation]` attribute

  #18817 commented on Aug 12, 2025 • 4 new comments

• Throw ValueError when a wrong flag value is provided to the second argument of `scandir()`

  #19373 commented on Aug 6, 2025 • 2 new comments

• ext/openssl: Check that loading/writing to RANDFILE succeeds

  #17758 commented on Aug 9, 2025 • 2 new comments

• [RFC] Add a locale for grapheme case-insensitive functions

  #18792 commented on Aug 13, 2025 • 2 new comments

• ext/date: Throw exceptions directly

  #19166 commented on Aug 8, 2025 • 0 new comments

• PDO - Added PDO::disconnect and PDO::isConnected and refactored free object

  #19214 commented on Aug 9, 2025 • 0 new comments

• Fix GH-19248: Use strerror_r instead of strerror in main

  #19251 commented on Aug 12, 2025 • 0 new comments

• Add a 1-char fastpath to `implode()`

  #19276 commented on Aug 10, 2025 • 0 new comments

• Update m4 check for libpcre2 version

  #19289 commented on Aug 7, 2025 • 0 new comments

• Implement GH-8967: Add PDO_SQLITE_ATTR_TRANSACTION_MODE

  #19317 commented on Aug 12, 2025 • 0 new comments

• fastcgi: fcgi_listen(), disallow SO_REUSEADDR socket option on windows.

  #19365 commented on Aug 7, 2025 • 0 new comments

• Enact follow-up phase of the "Path to Saner Increment/Decrement operators" RFC

  #19374 commented on Aug 12, 2025 • 0 new comments

• Add an enum for HASH_KEY_IS_* constants

  #19376 commented on Aug 12, 2025 • 0 new comments

• Opcache: Introduce ABI-based versioning for file cache portability

  #19123 commented on Aug 8, 2025 • 0 new comments

• Add allowed_classes_callback to unserialize()

  #19087 commented on Aug 11, 2025 • 0 new comments

• opcache: fix revalidation in long running CLI scripts

  #18671 commented on Aug 7, 2025 • 0 new comments

• Socket ether linux step2

  #17926 commented on Aug 6, 2025 • 0 new comments

• Add headers handler in CLI SAPI

  #16145 commented on Aug 6, 2025 • 0 new comments

• Remove driver specific support from ODBC

  #15727 commented on Aug 11, 2025 • 0 new comments

• Remote heap feng shui / heap spraying protection

  #14304 commented on Aug 9, 2025 • 0 new comments

• ZendMM C++ api

  #19362 commented on Aug 10, 2025 • 0 new comments

• Undefined Behavior in `date_sunrise()`

  #18978 commented on Aug 10, 2025 • 0 new comments

• ctype: test lc_ctype_inheritance.phpt fails on some macOS systems

  #18324 commented on Aug 9, 2025 • 0 new comments

• Would be nice to have a built-in function for preventing Directory Traversal Attacks

  #19375 commented on Aug 8, 2025 • 0 new comments