Skip to content

v2.1.5

Choose a tag to compare

View all tags
@keisuke-nakamura-spontena keisuke-nakamura-spontena released this 21 Oct 15:08
· 4 commits to master since this release
v2.1.5
fa14288
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Documentation release. No code, composer.json, or method signature changes; PHP ^8.1 is retained.

Security

  • Document that PHP 8.1 reached end of life on 31 December 2025 and does not receive PHP security fixes, including the critical PHP security release of 21 October 2026 (CVE-2026-109618 and CVE-2026-109619, fixed in PHP 8.2.35, 8.3.36, 8.4.27, and 8.5.12). PHP 8.3 or newer is recommended; PHP 8.2 reaches end of life on 31 December 2026. Updating this library does not patch the PHP runtime — upgrade PHP itself to the latest patch release of a supported branch.
  • CVE-2026-109618 and CVE-2026-109619 are in the PHP runtime's web request handling and can be triggered before application code runs. pb-php needs no code change for them, but applications that use it while serving web requests must upgrade PHP.

Deprecated

  • Support for PHP 8.1 and 8.2 is deprecated. A later release will require PHP ^8.3 (originally announced as 3.0; it will ship in 2.2.0). This release keeps the ^8.1 constraint, and no code, method signatures, or runtime behavior change in it.

Upgrading

Upgrade the PHP runtime first: PHP 8.2.35, 8.3.36, 8.4.27, 8.5.12, or later. See the PHP security advisory.

composer require spontena/pb-php:^2.1.5

Full Changelog: v2.1.4...v2.1.5

Assets 2
Loading