30 Pull requests merged by 10 people

• uri: Fix normalization memory management for uri_parser_php_parse_url.c

  #19600 merged Aug 26, 2025

• uri: Fix lexbor memory management in uri_parser_whatwg.c

  #19591 merged Aug 26, 2025

• uri: Stop touching the lxb_url_parser_t.idna field

  #19592 merged Aug 26, 2025

• zend_weakrefs: Remove layer of indirection in zend_weakrefs_hash_clean()

  #19580 merged Aug 26, 2025

• uri/standard: Move the parse_url() URI parser into ext/uri/

  #19587 merged Aug 26, 2025

• Add ZEND_VM_KIND constant

  #19574 merged Aug 26, 2025

• [RFC] FILTER_THROW_ON_FAILURE

  #18896 merged Aug 26, 2025

• uri: Clean up uri_parser_rfc3986.c

  #19586 merged Aug 26, 2025

• ext/standard: Deprecate $http_response_header

  #19464 merged Aug 25, 2025

• core: Remove disable_classes INI setting

  #12043 merged Aug 25, 2025

• uri: Properly prefix symbols in uri_parser_*.[ch]

  #19554 merged Aug 25, 2025

• uri: Mark local pointers as const in URI parser implementations

  #19581 merged Aug 25, 2025

• ext/intl: Add #[\Deprecated] to U_MULTIPLE_DECIMAL_SEPERATORS constant

  #19564 merged Aug 25, 2025

• README: Fix non-existent iconv in macOS instruction

  #19475 merged Aug 25, 2025

• ext/reflection: Align return types and values

  #19567 merged Aug 25, 2025

• ext/session: Add #[\Deprecated] to SID constant

  #19566 merged Aug 25, 2025

• ext/hash: Add #[\Deprecated] to MHASH_* constants

  #19565 merged Aug 25, 2025

• zend: optimisation for zend_page_size for macos.

  #19494 merged Aug 24, 2025

• Clarify usage of @deprecated annotation in stubs

  #19562 merged Aug 24, 2025

• Deprecate closure binding issues

  #19510 merged Aug 24, 2025

• remove safe_mode leftovers

  #19552 merged Aug 24, 2025

• Enact follow-up phase of the "Path to Saner Increment/Decrement operators" RFC

  #19374 merged Aug 23, 2025

• ext/phar: Fix memory leaks when verifying OpenSSL signature

  #19563 merged Aug 23, 2025

• Remove redundant PARSER_MODE() call

  #19559 merged Aug 23, 2025

• uri: Use PHP_RINIT/SHUTDOWN_FUNCTION in uri_parser_whatwg

  #19541 merged Aug 21, 2025

• uri: Improve return type of uriparser_parse_uri_ex()

  #19540 merged Aug 21, 2025

• uri: Fix header guard constant name for uri_parser_*.h

  #19539 merged Aug 21, 2025

• Rename URI handler files

  #19530 merged Aug 21, 2025

• ci: update codecov-action to v5

  #19517 merged Aug 20, 2025

• [RFC] Add #[\DelayedTargetValidation] attribute

  #18817 merged Aug 20, 2025

16 Pull requests opened by 9 people

• [Fix] UTF-8 handling on macOS in php_replace_controlchars()

  #19529 opened Aug 20, 2025

• Fix incorrect opline after deoptimization

  #19535 opened Aug 20, 2025

• gen_stub: Infer constants' types from values

  #19568 opened Aug 24, 2025

• Zend: add even more const qualifiers

  #19571 opened Aug 24, 2025

• Streams Poll API

  #19572 opened Aug 24, 2025

• Warn when coercing NAN to other types

  #19573 opened Aug 24, 2025

• fix build warnings for Haiku.

  #19575 opened Aug 24, 2025

• Fix GH-19578: imagefilledellipse underflow on width argument.

  #19579 opened Aug 25, 2025

• zend_string: Support NUL bytes in `ZSTR_*_LITERAL()` and `zend_string_*literal*()`

  #19582 opened Aug 25, 2025

• Fix GH-19577: avoid integer overflow when using a small offset and PHP_INT_MAX with LimitIterator

  #19585 opened Aug 25, 2025

• uri: Do not copy the normalized URI when cloning RFC 3986 URIs

  #19588 opened Aug 25, 2025

• Fix stream wrapper stream_close() not being called on exception unwind

  #19590 opened Aug 25, 2025

• Fix GH-11952: better locale strings canonicalization for IntlDateFormatter and NumberFormatter

  #19593 opened Aug 26, 2025

• ext/pdo_pgsql: [RFC] Deprecate PGSQL_TRANSACTION_ constants.

  #19594 opened Aug 26, 2025

• Deprecate driver specific PDO methods

  #19596 opened Aug 26, 2025

• Avoid using unsafe `sprintf()`

  #19598 opened Aug 26, 2025

20 Issues closed by 8 people

• DLLs missing from Windows releases - 8.3 & 8.4

  #19599 closed Aug 26, 2025

• FILTER_THROW_ON_FAILURE flag?

  #16710 closed Aug 26, 2025

• PHP 8.4.11 extension intl and curl not loaded

  #19589 closed Aug 25, 2025

• getopt with required value should not assign the next --opt as value, if no value provided

  #19555 closed Aug 25, 2025

• Change in class name resolution for `self`, `parent` and `static`

  #18373 closed Aug 25, 2025

• SIGSEGV when trying to modify HTTP headers of a PHP stream context

  #19583 closed Aug 25, 2025

• 8.5 regression: Curl response headers doesn't respect space anymore in header key

  #19560 closed Aug 24, 2025

• number_format shouldn't round

  #19561 closed Aug 22, 2025

• PHP 8.5: Recursive tokenization during `token_get_all` result on error

  #19507 closed Aug 22, 2025

• Memory unsafety with `HashTable`s treated as weak map

  #19543 closed Aug 22, 2025

• SEGV do_inherit_property zend_inheritance.c

  #19548 closed Aug 22, 2025

• Inconsistent echo results of reflection class

  #19549 closed Aug 22, 2025

• repeated warning msgs are omitted when jit

  #19550 closed Aug 22, 2025

• Built-in server misinterprets IPv6 address with port notation

  #19461 closed Aug 22, 2025

• Closure casted to array behaves inconsistently with other objects

  #18610 closed Aug 21, 2025

• Shorter way to write a Spread Operator in a array for null value

  #18479 closed Aug 21, 2025

• Array destructuring should warn when used on a non-array

  #19536 closed Aug 20, 2025

• Inconsistent result invalid class with or without loop

  #19524 closed Aug 20, 2025

• Call to undefined method Uri\Rfc3986\Uri::withScheme()

  #19532 closed Aug 20, 2025

• args facilities at include time

  #19531 closed Aug 20, 2025

15 Issues opened by 10 people

• JIT tests fail on aarch64 for 8.5beta2

  #19601 opened Aug 26, 2025

• "Increment on non-numeric string is deprecated, use str_increment() instead" and empty-string

  #19597 opened Aug 26, 2025

• FPM vs CLI - getcwd() !== $_SERVER['DOCUMENT_ROOT'] and include_path

  #19584 opened Aug 25, 2025

• libgd runtime error: left shift of negative value

  #19578 opened Aug 25, 2025

• Integer overflow LimitIterator

  #19577 opened Aug 25, 2025

• Add curl_multi_fdset to PHP cURL extension

  #19576 opened Aug 25, 2025

• unable to fseek in /dev/zero and /dev/null

  #19570 opened Aug 24, 2025

• Build faild on ARM on Windows in PHP 8.5

  #19569 opened Aug 24, 2025

• ext/reflection: Add `getFqn()` method to `ReflectionClass`, `ReflectionConstant`, `ReflectionFunctionAbstract`, and `ReflectionAttribute`

  #19558 opened Aug 22, 2025

• ext/reflection: Add missing `ReflectionConstant::inNamespace()` method

  #19557 opened Aug 22, 2025

• ext/reflection: Add various methods dealing with namespaces for `ReflectionAttribute`

  #19556 opened Aug 22, 2025

• Add streaming encryption/decryption API to OpenSSL extension (openssl_encrypt_init / openssl_encrypt_update / openssl_encrypt_final)

  #19553 opened Aug 22, 2025

• require() with >2GB

  #19542 opened Aug 21, 2025

• Inconsistent result stream with or without a function wrapper

  #19525 opened Aug 20, 2025

• The **const** modifier needs to be added to read-only parameters of all ZendAPI and PHPAPI functions

  #19523 opened Aug 20, 2025

28 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• [RFC] Allow `#[\Deprecated]` on traits

  #19045 commented on Aug 24, 2025 • 31 new comments

• Deprecate using null as an array offset and when calling `array_key_exists()`

  #19511 commented on Aug 25, 2025 • 24 new comments

• Use the same zend_arg_info struct for internal and user functions

  #19022 commented on Aug 26, 2025 • 3 new comments

• True async api stable

  #19142 commented on Aug 20, 2025 • 3 new comments

• Remote heap feng shui / heap spraying protection

  #14304 commented on Aug 26, 2025 • 1 new comment

• Zend: Convert certain fields to uint32_t

  #19479 commented on Aug 26, 2025 • 1 new comment

• Test PECL igbinary ext in nightly

  #19519 commented on Aug 25, 2025 • 0 new comments

• ci: remove macos13 from night job

  #19518 commented on Aug 20, 2025 • 0 new comments

• Remove mentions of PHP 9.0

  #19512 commented on Aug 24, 2025 • 0 new comments

• Fix uaf for nested finally with repeated return type check

  #19488 commented on Aug 25, 2025 • 0 new comments

• Use attribute validator for assigning flags

  #19465 commented on Aug 20, 2025 • 0 new comments

• ext/standard: Deprecate passing string which are not one byte long to ord()

  #19440 commented on Aug 24, 2025 • 0 new comments

• Zend: Warn when destructuring non-array values

  #19439 commented on Aug 26, 2025 • 0 new comments

• Add method to ReflectionClass to instantiate with the same semantics as `PDOStatement::fetchObject()`

  #19401 commented on Aug 25, 2025 • 0 new comments

• Fix opcache.huge_code_pages

  #19388 commented on Aug 20, 2025 • 0 new comments

• Write up NEWS rules

  #19387 commented on Aug 23, 2025 • 0 new comments

• Fix GH-18120: Honor `FILE_SKIP_EMPTY_LINES` even when `FILE_IGNORE_NEW_LINES` is not set

  #19346 commented on Aug 26, 2025 • 0 new comments

• [TEMP][DRAFT] Re-bundle oniguruma

  #19258 commented on Aug 25, 2025 • 0 new comments

• Intl: Add a new IntlNumberRangeFormatter class

  #19232 commented on Aug 24, 2025 • 0 new comments

• Add ASAN support to the zend allocator

  #18858 commented on Aug 20, 2025 • 0 new comments

• grapheme_extract should pass over invalid surrogate halves

  #17568 commented on Aug 23, 2025 • 0 new comments

• Avoid useless string releases in arginfo.h files

  #17344 commented on Aug 22, 2025 • 0 new comments

• Remove driver specific support from ODBC

  #15727 commented on Aug 21, 2025 • 0 new comments

• add BLAKE3 hash

  #13194 commented on Aug 23, 2025 • 0 new comments

• [Tracking] Pending PHP 8.5 deprecations

  #19468 commented on Aug 26, 2025 • 0 new comments

• `use method` aliasing/importing

  #18623 commented on Aug 26, 2025 • 0 new comments

• GNU Readline should be replaced with libedit

  #15882 commented on Aug 24, 2025 • 0 new comments

• parse_url() and incorrect port definition

  #7890 commented on Aug 20, 2025 • 0 new comments