All pull requests

Pull requests

• Backport PCRE2 fix for GHSA-r9hj-j2rw-4q3m

  CI: All jobsExtension: pcre
  #24011·alexandre-daubois opened Sep 30, 2026Member·

  ·

• Add cgi.security_limit_extensions

  SAPI: cgi
  #24010·DanielEScherzer opened Sep 30, 2026Member·

  ·
  4

• Fix GH-24006: Skip gh18431.phpt when libzip lacks progress callbacks

  Extension: zip
  #24009·lazerg opened Sep 30, 2026Contributor·

  ·
  1

• Zend: Skip frameless registration for temporary modules

  Category: Engine
  #24008·iliaal opened Sep 30, 2026Member·

  ·
  2

• Zend: follow-up for GH-22145. Fix zend_fcc_closure_equals_ex() implementation

  ABI breakCategory: EngineExtension: spl
  #24007·Girgias opened Sep 30, 2026Member·

  ·

• ext/standard: Pin lazy proxy instances while reading properties

  Extension: standard
  #24005·iliaal opened Sep 29, 2026Member·

  ·

• Remove unused libmbfl functions from mbstring

  ABI breakExtension: mbstring
  #24004·kamil-tekiela opened Sep 29, 2026Member·

  ·

• Fix GH-23983 (Function JIT: wrong result after interrupts are handled in a loop)

  Extension: opcache
  #24003·ndossche opened Sep 29, 2026Member·

  ·
  1

• Fix GH-23991: JIT generates invalid IR for multiple recursive calls

  Extension: opcache
  #24001·ndossche opened Sep 29, 2026Member·

  ·
  1

  2

• Zend: derive lazy object initializer callble from FCC

  ABI breakCategory: EngineExtension: reflection
  #24000·Girgias opened Sep 29, 2026Member·

  ·

• Zend: Lazy objects minor refactorings

  ABI breakCategory: EngineExtension: reflection
  #23998·Girgias opened Sep 29, 2026Member·

  ·

• IO hooks PoC

  ABI breakCategory: Build SystemCategory: CICategory: DNSCategory: EngineCategory: FilesystemCategory: IOCategory: StreamsExtension: curlExtension: libxmlExtension: opensslExtension: pcntlExtension: reflectionExtension: socketsExtension: standardExtension: xmlreaderExtension: xmlwriterSTF: Streams
  #23997·bukka opened Sep 29, 2026Member·

  ·
  10

• std: refactor php_array_find() to only use FCC

  Extension: standard
  #23995·Girgias opened Sep 29, 2026Member·

  ·

• fibers: refactor fiber to only rely on a FCC

  ABI breakCategory: EngineExtension: reflection
  #23994·Girgias opened Sep 29, 2026Member·

  ·

• windows: support PGO with clang

  Category: Build System
  #23992·henderkes opened Sep 29, 2026Contributor·

  ·
  3

• ext/openssl: openssl_x509_checkpurpose - allow to check if the certificate is revoked + partial chain

  Extension: openssl
  #23988·adapik opened Sep 29, 2026Contributor·

  ·

• Fix GH-23979: Nullsafe operator must not flush delayed oplines of an enclosing function

  Category: Engine
  #23984·ndossche opened Sep 29, 2026Member·

  ·
  1

• ext/standard: Don't share the unserialize() context with enum autoloaders

  Extension: standard
  #23981·nicolas-grekas opened Sep 29, 2026Contributor·

  ·

• ext/zip: use ZIP_RDONLY when calling zip_open() in zip_stream.c

  Extension: zip
  #23976·DanielEScherzer opened Sep 29, 2026Member·

  ·
  1

• CLI server: prevent using symlinks to escape the docroot

  SAPI: cli
  #23975·DanielEScherzer opened Sep 28, 2026Member·

  ·
  2

• ext/mbstring: Fix truncated encoding names resolving to full names

  Extension: mbstring
  #23974·kamil-tekiela opened Sep 28, 2026Member·

  ·
  11

• Fix cal_days_in_month() returning a negative day count at the calendar's boundary year

  Extension: calendar
  #23971·lacatoire opened Sep 28, 2026Member·

  ·

• ext/pdo: Clear bindings when execute() fails to bind its array

  Extension: pdo (core)
  #23970·iliaal opened Sep 28, 2026Member·

  ·
  8

• sapi/cli: Fix built-in server truncating responses after a partial write

  SAPI: cli
  #23969·iliaal opened Sep 28, 2026Member·

  ·
  3

• ext/standard: Check for UTF-8 first when resolving the charset of html functions

  ABI breakExtension: standard
  #23961·nicolas-grekas opened Sep 28, 2026Contributor·

  ·
  5