Skip to content

[6.0] fix(http/client): prefer CURLOPT_PROTOCOLS_STR over deprecated bitmask constants#275

Merged
phil-davis merged 4 commits intosabre-io:6.0from
phil-davis:backport-272-6.0
Apr 27, 2026
Merged

[6.0] fix(http/client): prefer CURLOPT_PROTOCOLS_STR over deprecated bitmask constants#275
phil-davis merged 4 commits intosabre-io:6.0from
phil-davis:backport-272-6.0

Conversation

@phil-davis
Copy link
Copy Markdown
Contributor

Backport #272 to 6.0

ralflang and others added 3 commits April 27, 2026 17:44
…k constants

CURLOPT_PROTOCOLS and CURLOPT_REDIR_PROTOCOLS are deprecated at the
libcurl level. When PHP eventually removes the bitmask constants the defined() guards will silently skip protocol restrictions.
This could once become a security issue. It's not an issue right now.
Prefer the string-based constants introduced in PHP 8.3 with fallback to bitmask for older versions.

This is not an urgent fix and I think it's BC
@codecov
Copy link
Copy Markdown

codecov Bot commented Apr 27, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 94.28%. Comparing base (167a323) to head (7d2c2a8).
⚠️ Report is 6 commits behind head on 6.0.

Additional details and impacted files
@@             Coverage Diff              @@
##                6.0     #275      +/-   ##
============================================
+ Coverage     94.27%   94.28%   +0.01%     
- Complexity      260      262       +2     
============================================
  Files            15       15              
  Lines           873      875       +2     
============================================
+ Hits            823      825       +2     
  Misses           50       50              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@phil-davis phil-davis merged commit c27a38b into sabre-io:6.0 Apr 27, 2026
9 checks passed
@phil-davis phil-davis deleted the backport-272-6.0 branch April 27, 2026 08:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants