fix(full): replace abandoned azure-storage-blob with azure-oss/storage#154
Conversation
phpbu 6.0.32 migrated its Azure Blob sync adapter from the abandoned microsoft/azure-storage-blob SDK to the maintained azure-oss/storage (sebastianfeldmann/phpbu#402). Bump phpbu to ^6.0.32 and swap the direct require accordingly, removing the abandoned microsoft/azure-storage-* packages from the full image entirely. Verified: composer resolves cleanly under PHP 8.5 (no abandoned packages in the lock, no security advisories) and phpbu's azureblob sync loads AzureOss\Storage\Blob\BlobServiceClient in --simulate. Signed-off-by: Sebastian Mendel <sebastian.mendel@netresearch.de>
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request updates the project's dependencies in composer.json and composer.lock. Specifically, it replaces the abandoned microsoft/azure-storage-blob package with azure-oss/storage (v1.9) and its associated dependencies (azure-oss/identity, azure-oss/storage-common, caseyamcl/guzzle_retry_middleware, and php-http/discovery). Additionally, the phpbu/phpbu package is updated from version 6.0.31 to 6.0.32. There are no review comments, and I have no further feedback to provide.
Important
The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
There was a problem hiding this comment.
Automated approval for maintainer PR
All automated quality gates passed. See SECURITY_CONTROLS.md for compensating controls.
|
1 participant
Removes the abandoned
microsoft/azure-storage-blobSDK from the full image by adopting phpbu 6.0.32's migration to the maintainedazure-oss/storage.Background
microsoft/azure-storage-blobis abandoned upstream (Microsoft archived it; Packagistabandoned: true, no replacement). It was a direct require in the full image only because phpbu's Azure Blob sync adapter was hardwired to it. That's now fixed at the root: phpbu migrated the adapter toazure-oss/storagein sebastianfeldmann/phpbu#402, released in phpbu 6.0.32.What changed (
app/full/composer.json+ lock)phpbu/phpbu^6.0→^6.0.32(the release whose Azure adapter uses azure-oss).microsoft/azure-storage-blob: ^1.4→azure-oss/storage: ^1.9(phpbu lists azure-oss assuggest/require-dev, so the full image still declares it explicitly to enable the adapter).composer updateremovedmicrosoft/azure-storage-blob+microsoft/azure-storage-commonentirely; pulledazure-oss/storage1.9.0,azure-oss/storage-common,azure-oss/identity.Verification
composer validateclean; no abandoned packages remain in the lock;composer auditreports no advisories.azureblobsync runs in--simulateunder PHP 8.5: loadsAzureOss\Storage\Blob\BlobServiceClient(no "SDK not loaded") and masks the credential (connectionString: ********).Supersedes
This replaces the documentation-only workaround in #153 (which explained why the abandoned package was kept). With the package removed, that note is obsolete — closing #153 in favour of this fix.