PHPDeveloper.org http://www.phpdeveloper.org Up-to-the Minute PHP News, views and community en-us Fri, 07 Aug 2026 11:49:51 +0000 30 <![CDATA[Community News: Latest PECL Releases (08.04.2026)]]> http://www.phpdeveloper.org/news/27866 http://www.phpdeveloper.org/news/27866 Latest PECL Releases:

  • protobuf 5.36.0RC2
    * See github.com/protocolbuffers/protobuf/releases/tag/v36.0-rc2 for release notes.

  • sqlsrv 5.13.2
    Added - The drivers can now be installed with PIE (the PHP Installer for Extensions), the official replacement for the now-deprecated PECL: `pie install microsoft/sqlsrv` and `pie install microsoft/pdo_sqlsrv`.

    Security

    • Fixed SQL injection in PDO::lastInsertId($name) (CWE-89). The sequence-name lookup previously interpolated the caller-supplied name directly into the query text, allowing injection of arbitrary Transact-SQL. The name is now passed to a parameterized query and bound with the connection encoding, so it is always treated as a literal value. This also fixes lookups for sequence names containing non-ASCII characters (PR #1673)
    • Fixed silent truncation of binary parameters containing embedded NUL (0x00) bytes when using PDO emulated prepares with PDO::SQLSRV_ENCODING_BINARY (CWE-626). All bytes are now encoded (PR #1675)

    Fixed

    • Fixed a Windows thread-safe (ZTS) shared build link failure (unresolved external symbol LNK2001 on _tsrm_ls_cache) when building the extensions as shared DLLs (PR #1674)
    • Fixed stale unixODBC INI caching on Linux and macOS by clearing the unixODBC INI cache at module shutdown (PR #1667)
    • Fixed an AddressSanitizer One Definition Rule (ODR) violation reported when both the sqlsrv and pdo_sqlsrv extensions are loaded together (PR #1659)
    • Addressed CodeQL static-analysis findings (PR #1615)

    Limitations

    • No support for inout / output params when using sql_variant type
    • No support for inout / output params when formatting decimal values
    • In Linux and macOS, setlocale() only takes effect if it is invoked before the first connection. Attempting to set the locale after connecting will not work
    • Always Encrypted requires MS ODBC Driver 17+
      • Only Windows Certificate Store and Azure Key Vault are supported. Custom Keystores are not yet supported
      • Issue #716 - With Always Encrypted enabled, named parameters in subqueries are not supported
      • Issue #1050 - With Always Encrypted enabled, insertion requires the column list for any tables with identity columns
      • Always Encrypted limitations

    Known Issues

    • Connection pooling on Linux or macOS is not recommended with unixODBC < 2.3.7
    • When pooling is enabled in Linux or macOS
      • unixODBC <= 2.3.4 (Linux and macOS) might not return proper diagnostic information, such as error messages, warnings and informative messages
      • due to this unixODBC bug, fetch large data (such as xml, binary) as streams as a workaround. See the examples here
  • pdo_sqlsrv 5.13.2
    Added - The drivers can now be installed with PIE (the PHP Installer for Extensions), the official replacement for the now-deprecated PECL: `pie install microsoft/sqlsrv` and `pie install microsoft/pdo_sqlsrv`.

    Security

    • Fixed SQL injection in PDO::lastInsertId($name) (CWE-89). The sequence-name lookup previously interpolated the caller-supplied name directly into the query text, allowing injection of arbitrary Transact-SQL. The name is now passed to a parameterized query and bound with the connection encoding, so it is always treated as a literal value. This also fixes lookups for sequence names containing non-ASCII characters (PR #1673)
    • Fixed silent truncation of binary parameters containing embedded NUL (0x00) bytes when using PDO emulated prepares with PDO::SQLSRV_ENCODING_BINARY (CWE-626). All bytes are now encoded (PR #1675)

    Fixed

    • Fixed a Windows thread-safe (ZTS) shared build link failure (unresolved external symbol LNK2001 on _tsrm_ls_cache) when building the extensions as shared DLLs (PR #1674)
    • Fixed stale unixODBC INI caching on Linux and macOS by clearing the unixODBC INI cache at module shutdown (PR #1667)
    • Fixed an AddressSanitizer One Definition Rule (ODR) violation reported when both the sqlsrv and pdo_sqlsrv extensions are loaded together (PR #1659)
    • Addressed CodeQL static-analysis findings (PR #1615)

    Limitations

    • No support for inout / output params when using sql_variant type
    • No support for inout / output params when formatting decimal values
    • In Linux and macOS, setlocale() only takes effect if it is invoked before the first connection. Attempting to set the locale after connecting will not work
    • Always Encrypted requires MS ODBC Driver 17+
      • Only Windows Certificate Store and Azure Key Vault are supported. Custom Keystores are not yet supported
      • Issue #716 - With Always Encrypted enabled, named parameters in subqueries are not supported
      • Issue #1050 - With Always Encrypted enabled, insertion requires the column list for any tables with identity columns
      • Always Encrypted limitations

    Known Issues

    • Connection pooling on Linux or macOS is not recommended with unixODBC < 2.3.7
    • When pooling is enabled in Linux or macOS
      • unixODBC <= 2.3.4 (Linux and macOS) might not return proper diagnostic information, such as error messages, warnings and informative messages
      • due to this unixODBC bug, fetch large data (such as xml, binary) as streams as a workaround. See the examples here
  • phalcon 5.18.0
    Full changelog can be found at: https://github.com/phalcon/cphalcon/blob/master/CHANGELOG-5.0.md
  • datadog_trace 1.23.3
    ## Profiler ### Fixed - Restore OPcache restart hook on shutdown (#4076)
  • datadog_trace 1.23.2
    ## Tracer ### Fixed - Prevent application error handlers from replacing successful OpenFeature evaluation values with code defaults #4071
]]> Tue, 04 Aug 2026 08:05:20 +0000 <![CDATA[Community News: Latest PECL Releases (07.28.2026)]]> http://www.phpdeveloper.org/news/27865 http://www.phpdeveloper.org/news/27865 Latest PECL Releases:

]]> Tue, 28 Jul 2026 08:05:21 +0000 <![CDATA[Community News: Latest PECL Releases (07.21.2026)]]> http://www.phpdeveloper.org/news/27864 http://www.phpdeveloper.org/news/27864 Latest PECL Releases:

  • zephir_parser 2.5.0
    ### Added

    • Support the readonly modifier on class and trait properties: readonly is a property modifier keyword that appears in the property visibility list (e.g. public readonly int x), independent of position relative to public/protected/private and combining with every property type prefix (builtin, ?type, &lt;Class&gt; cast and union). The parser only records the modifier; the typed / no-default / no-static rules are enforced by the compiler (zephir-lang/zephir#2614).

    Changed

    • readonly is now a reserved keyword; identifiers named readonly are a syntax error.
  • phalcon 5.17.0
    Full changelog can be found at: https://github.com/phalcon/cphalcon/blob/master/CHANGELOG-5.0.md
  • zephir_parser 2.4.0
    ### Added - Support union types on parameters and class/trait properties: a `type | type | ...` prefix (builtin scalars, `null`/`false`, and `<Class>` casts) is emitted as an ordered `data-types` member list. Parameters additionally carry `data-type: "variable"`; the single-type and single-cast forms are unchanged. Mirrors the union return-type syntax already accepted after `->` ([zephir-lang/zephir#2613](https://github.com/zephir-lang/zephir/issues/2613)).
  • zephir_parser 2.3.0
    ### Added - Support typed class and trait properties: a property may now carry a builtin type (`public array items`, `private int count`), a class type (`public <Response> response`), and an optional nullable marker (`protected ?string name`). The type prefix is emitted on the property node as a `data-type` string or a `<Class>` `cast` node, plus a `nullable` flag for `?type`, mirroring how parameters encode their types. Type prefixes combine with existing default values, `{ get, set }` shortcuts, docblocks and all-caps names ([zephir-lang/zephir#2608](https://github.com/zephir-lang/zephir/issues/2608)).
  • zephir_parser 2.2.0
    ### Added - Support the `::class` magic constant: `self::class`, `parent::class`, `static::class` and `ClassName::class` now parse into a `static-constant-access` node whose member value is `class`, which the compiler resolves to the fully-qualified class name ([zephir-lang/zephir#2527](https://github.com/zephir-lang/zephir/issues/2527)).
  • event 3.1.6
    Fix PHP 8.6.0alpha2 build (patch by Remi Collet)
]]> Tue, 21 Jul 2026 08:05:22 +0000 <![CDATA[Community News: Latest PECL Releases (07.14.2026)]]> http://www.phpdeveloper.org/news/27863 http://www.phpdeveloper.org/news/27863 Latest PECL Releases:

  • gRPC 1.83.0RC1
    - gRPC Core 1.83.0 update

  • protobuf 5.36.0RC1
    * See github.com/protocolbuffers/protobuf/releases/tag/v36.0-rc1 for release notes.
  • timezonedb 2026.3
    Extra release to hopefully have a "good last release" due to weird GitHub issues. There are no code or data changes.
  • swoole 6.2.2
    - Refactored the communication between multi-thread pools from `Pipe` to `Unix Socket` to enhance the reliability of high-concurrency transmission for asynchronous file operations. - Resolved sporadic segmentation faults when `Worker` parses `HTTP` parameters, eliminating the risk of process crashes. - Fixed a fatal `Error::__toString` error during the `PHP` request shutdown (rshutdown) phase when interacting with the database. - Fixed the `Poll` event initialization exception after coroutine conversion of `pdo_pgsql`, ensuring the stability of blocking mode. - Removed duplicate and redundant `Server` property configurations in `SwooleCoroutineHttpServer`. - Fixed an issue in `SwooleArrayObject::valid()` where, under `PHP 8.5`, using `null` as the key parameter for `array_key_exists()` would trigger a deprecation warning: "Using null as the key parameter for array_key_exists() is deprecated."
  • swoole 6.1.9
    - Refactored the inter-thread-pool communication mechanism from `Pipe` to `Unix Socket` to enhance the transmission reliability of asynchronous file operations under high concurrency. - Resolved the occasional segmentation fault in `Worker` when parsing `HTTP` parameters, eliminating the risk of process crashes. - Fixed the `Error::__toString` fatal error that occurred during database interactions in the PHP request shutdown (rshutdown) phase. - Fixed the `Poll` event initialization anomaly in `pdo_pgsql` after coroutine transformation, ensuring the stability of blocking mode.
]]> Tue, 14 Jul 2026 08:05:21 +0000 <![CDATA[Community News: Latest PECL Releases (06.30.2026)]]> http://www.phpdeveloper.org/news/27862 http://www.phpdeveloper.org/news/27862 Latest PECL Releases:

  • gRPC 1.81.1
    - gRPC Core 1.81.1 update

  • gRPC 1.82.0RC2
    - gRPC Core 1.82.0 update
  • bsdiff 0.2.1
    - Add composer.json for installation via PIE (PHP Installer for Extensions).
  • phalcon 5.16.0
    Full changelog can be found at: https://github.com/phalcon/cphalcon/blob/master/CHANGELOG-5.0.md
]]> Tue, 30 Jun 2026 08:05:19 +0000 <![CDATA[Community News: Latest PECL Releases (06.23.2026)]]> http://www.phpdeveloper.org/news/27861 http://www.phpdeveloper.org/news/27861 Latest PECL Releases:

  • parallel 1.2.15
    - Fix use-after-free race on future->monitor in error paths #381

    • Promote PIE installer #383
    • Fix: Update coverallsapp/github-action from master to v2.3.6 #384
    • Narrow the Windows VEH to undefined-function calls only #379
  • phalcon 5.14.1
    Full changelog can be found at: https://github.com/phalcon/cphalcon/blob/master/CHANGELOG-5.0.md
  • phalcon 5.14.2
    Full changelog can be found at: https://github.com/phalcon/cphalcon/blob/master/CHANGELOG-5.0.md
  • phalcon 5.15.0
    Full changelog can be found at: https://github.com/phalcon/cphalcon/blob/master/CHANGELOG-5.0.md
  • parallel 1.2.14
    - Fix PHP 8.4 task exit handling #377 - Narrow crash handler to undefined-function calls only #378
]]> Tue, 23 Jun 2026 08:05:27 +0000 <![CDATA[Community News: Latest PEAR Releases (01.26.2026)]]> http://www.phpdeveloper.org/news/27860 http://www.phpdeveloper.org/news/27860 Latest PEAR Releases:

]]> Mon, 26 Jan 2026 08:05:20 +0000 <![CDATA[Community News: Latest PEAR Releases (01.19.2026)]]> http://www.phpdeveloper.org/news/27859 http://www.phpdeveloper.org/news/27859 Latest PEAR Releases:

]]> Mon, 19 Jan 2026 08:05:22 +0000 <![CDATA[Community News: Latest PEAR Releases (01.05.2026)]]> http://www.phpdeveloper.org/news/27858 http://www.phpdeveloper.org/news/27858 Latest PEAR Releases:

]]> Mon, 05 Jan 2026 08:05:19 +0000 <![CDATA[Community News: Latest PEAR Releases (12.15.2025)]]> http://www.phpdeveloper.org/news/27857 http://www.phpdeveloper.org/news/27857 Latest PEAR Releases:

]]> Mon, 15 Dec 2025 08:05:23 +0000