Problem/Motivation
Part of #3109885: [meta] Ensure compatibility of Drupal 9 with PHP 8.0 (as it evolves)
typo3/phar-stream-wrapper
is core's (and drupal/core-recommended
) dependency package used to release PHP 8 compatibility in bug-fix release
I
https://github.com/TYPO3/phar-stream-wrapper/issues/64
https://github.com/TYPO3/phar-stream-wrapper/pull/65
Proposed resolution
Upgrade version from 3.1.5 to 3.1.6
This upgrade leaves only laminas dependencies blocking to declare core PHP 8.0 compatible
Remaining tasks
- review/commit - https://github.com/TYPO3/phar-stream-wrapper/releases/tag/v3.1.6
- backport to 9.1.x branch as this is bugfix release in terms of semver
User interface changes
no
API changes
no
Data model changes
no
Release notes snippet
typo3/phar-stream-wrapper updated to v3.1.6 for PHP 8 compatibility.
Comment | File | Size | Author |
---|---|---|---|
#2 | 3181240-2.patch | 2.5 KB | andypost |
Comments
Comment #2
andypostRelease notes https://github.com/TYPO3/phar-stream-wrapper/releases/tag/v3.1.6 states about possible incompatibility
Comment #3
andypostFixed IS as the package is not -dev dependency
Comment #4
andypostchecked upgrade for 9.1.x and it is exactly the same as for 9.2.x
COMPOSER_ROOT_VERSION=9.1.x-dev composer2 update typo3/phar-stream-wrapper
Comment #5
andypostFrom https://github.com/TYPO3/phar-stream-wrapper/issues/64#issuecomment-7191...
Talked to @alexpott in slack and he said
Comment #6
alexpottOpened #3181275: Do not register Phar stream wrapper on PHP 8 because it is not vulnerable to unserialize bugs
Comment #7
longwaveLooks good to me!
Comment #8
alexpottCommitted and pushed 5e0b2d7a05 to 9.2.x and 2068480ad0 to 9.1.x. Thanks!