Latest PECL Releases:

• taint 3.0.0
  - Support PHP 8.0 up to 8.5
  • Dropped PHP 7 support (use taint 2.1.x for PHP 7.x)
  • Propagate the taint mark through the frameless call fast paths (PHP 8.4+)
  • Extended sink coverage (see README for the full list)
• sqlsrv 5.13.3
  Added - Windows support for installing the drivers with PIE (the PHP Installer for Extensions). PIE-based installation, introduced for Linux and macOS in 5.13.2, is now also available on Windows: `pie install microsoft/sqlsrv` and `pie install microsoft/pdo_sqlsrv`.

  Limitations

  • No support for inout / output params when using sql_variant type
  • No support for inout / output params when formatting decimal values
  • In Linux and macOS, setlocale() only takes effect if it is invoked before the first connection. Attempting to set the locale after connecting will not work
  • Always Encrypted requires MS ODBC Driver 17+
    • Only Windows Certificate Store and Azure Key Vault are supported. Custom Keystores are not yet supported
    • Issue #716 - With Always Encrypted enabled, named parameters in subqueries are not supported
    • Issue #1050 - With Always Encrypted enabled, insertion requires the column list for any tables with identity columns
    • Always Encrypted limitations

  Known Issues

  • Connection pooling on Linux or macOS is not recommended with unixODBC < 2.3.7
  • When pooling is enabled in Linux or macOS
    • unixODBC <= 2.3.4 (Linux and macOS) might not return proper diagnostic information, such as error messages, warnings and informative messages
    • due to this unixODBC bug, fetch large data (such as xml, binary) as streams as a workaround. See the examples here
• pdo_sqlsrv 5.13.3
  Added - Windows support for installing the drivers with PIE (the PHP Installer for Extensions). PIE-based installation, introduced for Linux and macOS in 5.13.2, is now also available on Windows: `pie install microsoft/sqlsrv` and `pie install microsoft/pdo_sqlsrv`.

  Limitations

  • No support for inout / output params when using sql_variant type
  • No support for inout / output params when formatting decimal values
  • In Linux and macOS, setlocale() only takes effect if it is invoked before the first connection. Attempting to set the locale after connecting will not work
  • Always Encrypted requires MS ODBC Driver 17+
    • Only Windows Certificate Store and Azure Key Vault are supported. Custom Keystores are not yet supported
    • Issue #716 - With Always Encrypted enabled, named parameters in subqueries are not supported
    • Issue #1050 - With Always Encrypted enabled, insertion requires the column list for any tables with identity columns
    • Always Encrypted limitations

  Known Issues

  • Connection pooling on Linux or macOS is not recommended with unixODBC < 2.3.7
  • When pooling is enabled in Linux or macOS
    • unixODBC <= 2.3.4 (Linux and macOS) might not return proper diagnostic information, such as error messages, warnings and informative messages
    • due to this unixODBC bug, fetch large data (such as xml, binary) as streams as a workaround. See the examples here
• yaconf 1.1.3
  - Fixed memory leak with PHP 8.1 - Fixed garbage value being returned when an INI file is unreadable - Fixed Yaconf::get() with paths deeper than a scalar value - Fixed section inheritance from numeric section names - Fixed fatal error and a memory leak in the startup scan
• yar 2.4.0
  - Added yar.ssl_verify to make TLS certificate verification configurable - Kept persistent curl connections in the persistent resource list - Rejected non-public methods in the server dispatcher - Fixed use-after-free (dangling offset) in REALLOC_BUF_IF_EXCEED - Fixed size_t underflow when request body is shorter than the protocol header - Hardened protocol parsing: body length clamping, bounds checks, payload type checks - Fixed YAR_OPT_PROXY passing the connect timeout to CURLOPT_PROXY - Fixed issue #175 where Yar_Server::Info returns garbled output.

Latest PECL Releases:

• protobuf 5.36.0RC2
  * See github.com/protocolbuffers/protobuf/releases/tag/v36.0-rc2 for release notes.

• sqlsrv 5.13.2
  Added - The drivers can now be installed with PIE (the PHP Installer for Extensions), the official replacement for the now-deprecated PECL: `pie install microsoft/sqlsrv` and `pie install microsoft/pdo_sqlsrv`.

  Security

  • Fixed SQL injection in PDO::lastInsertId($name) (CWE-89). The sequence-name lookup previously interpolated the caller-supplied name directly into the query text, allowing injection of arbitrary Transact-SQL. The name is now passed to a parameterized query and bound with the connection encoding, so it is always treated as a literal value. This also fixes lookups for sequence names containing non-ASCII characters (PR #1673)
  • Fixed silent truncation of binary parameters containing embedded NUL (0x00) bytes when using PDO emulated prepares with PDO::SQLSRV_ENCODING_BINARY (CWE-626). All bytes are now encoded (PR #1675)

  Fixed

  • Fixed a Windows thread-safe (ZTS) shared build link failure (unresolved external symbol LNK2001 on _tsrm_ls_cache) when building the extensions as shared DLLs (PR #1674)
  • Fixed stale unixODBC INI caching on Linux and macOS by clearing the unixODBC INI cache at module shutdown (PR #1667)
  • Fixed an AddressSanitizer One Definition Rule (ODR) violation reported when both the sqlsrv and pdo_sqlsrv extensions are loaded together (PR #1659)
  • Addressed CodeQL static-analysis findings (PR #1615)

  Limitations

  • No support for inout / output params when using sql_variant type
  • No support for inout / output params when formatting decimal values
  • In Linux and macOS, setlocale() only takes effect if it is invoked before the first connection. Attempting to set the locale after connecting will not work
  • Always Encrypted requires MS ODBC Driver 17+
    • Only Windows Certificate Store and Azure Key Vault are supported. Custom Keystores are not yet supported
    • Issue #716 - With Always Encrypted enabled, named parameters in subqueries are not supported
    • Issue #1050 - With Always Encrypted enabled, insertion requires the column list for any tables with identity columns
    • Always Encrypted limitations

  Known Issues

  • Connection pooling on Linux or macOS is not recommended with unixODBC < 2.3.7
  • When pooling is enabled in Linux or macOS
    • unixODBC <= 2.3.4 (Linux and macOS) might not return proper diagnostic information, such as error messages, warnings and informative messages
    • due to this unixODBC bug, fetch large data (such as xml, binary) as streams as a workaround. See the examples here
• pdo_sqlsrv 5.13.2
  Added - The drivers can now be installed with PIE (the PHP Installer for Extensions), the official replacement for the now-deprecated PECL: `pie install microsoft/sqlsrv` and `pie install microsoft/pdo_sqlsrv`.

  Security

  • Fixed SQL injection in PDO::lastInsertId($name) (CWE-89). The sequence-name lookup previously interpolated the caller-supplied name directly into the query text, allowing injection of arbitrary Transact-SQL. The name is now passed to a parameterized query and bound with the connection encoding, so it is always treated as a literal value. This also fixes lookups for sequence names containing non-ASCII characters (PR #1673)
  • Fixed silent truncation of binary parameters containing embedded NUL (0x00) bytes when using PDO emulated prepares with PDO::SQLSRV_ENCODING_BINARY (CWE-626). All bytes are now encoded (PR #1675)

  Fixed

  • Fixed a Windows thread-safe (ZTS) shared build link failure (unresolved external symbol LNK2001 on _tsrm_ls_cache) when building the extensions as shared DLLs (PR #1674)
  • Fixed stale unixODBC INI caching on Linux and macOS by clearing the unixODBC INI cache at module shutdown (PR #1667)
  • Fixed an AddressSanitizer One Definition Rule (ODR) violation reported when both the sqlsrv and pdo_sqlsrv extensions are loaded together (PR #1659)
  • Addressed CodeQL static-analysis findings (PR #1615)

  Limitations

  • No support for inout / output params when using sql_variant type
  • No support for inout / output params when formatting decimal values
  • In Linux and macOS, setlocale() only takes effect if it is invoked before the first connection. Attempting to set the locale after connecting will not work
  • Always Encrypted requires MS ODBC Driver 17+
    • Only Windows Certificate Store and Azure Key Vault are supported. Custom Keystores are not yet supported
    • Issue #716 - With Always Encrypted enabled, named parameters in subqueries are not supported
    • Issue #1050 - With Always Encrypted enabled, insertion requires the column list for any tables with identity columns
    • Always Encrypted limitations

  Known Issues

  • Connection pooling on Linux or macOS is not recommended with unixODBC < 2.3.7
  • When pooling is enabled in Linux or macOS
    • unixODBC <= 2.3.4 (Linux and macOS) might not return proper diagnostic information, such as error messages, warnings and informative messages
    • due to this unixODBC bug, fetch large data (such as xml, binary) as streams as a workaround. See the examples here
• phalcon 5.18.0
  Full changelog can be found at: https://github.com/phalcon/cphalcon/blob/master/CHANGELOG-5.0.md
• datadog_trace 1.23.3
  ## Profiler ### Fixed - Restore OPcache restart hook on shutdown (#4076)
• datadog_trace 1.23.2
  ## Tracer ### Fixed - Prevent application error handlers from replacing successful OpenFeature evaluation values with code defaults #4071

Latest PECL Releases:

• gRPC 1.83.0
  - gRPC Core 1.83.0 update

Latest PECL Releases:

• zephir_parser 2.5.0
  ### Added
  • Support the readonly modifier on class and trait properties: readonly is a property modifier keyword that appears in the property visibility list (e.g. public readonly int x), independent of position relative to public/protected/private and combining with every property type prefix (builtin, ?type, <Class> cast and union). The parser only records the modifier; the typed / no-default / no-static rules are enforced by the compiler (zephir-lang/zephir#2614).

  Changed

  • readonly is now a reserved keyword; identifiers named readonly are a syntax error.
• phalcon 5.17.0
  Full changelog can be found at: https://github.com/phalcon/cphalcon/blob/master/CHANGELOG-5.0.md
• zephir_parser 2.4.0
  ### Added - Support union types on parameters and class/trait properties: a `type | type | ...` prefix (builtin scalars, `null`/`false`, and `<Class>` casts) is emitted as an ordered `data-types` member list. Parameters additionally carry `data-type: "variable"`; the single-type and single-cast forms are unchanged. Mirrors the union return-type syntax already accepted after `->` ([zephir-lang/zephir#2613](https://github.com/zephir-lang/zephir/issues/2613)).
• zephir_parser 2.3.0
  ### Added - Support typed class and trait properties: a property may now carry a builtin type (`public array items`, `private int count`), a class type (`public <Response> response`), and an optional nullable marker (`protected ?string name`). The type prefix is emitted on the property node as a `data-type` string or a `<Class>` `cast` node, plus a `nullable` flag for `?type`, mirroring how parameters encode their types. Type prefixes combine with existing default values, `{ get, set }` shortcuts, docblocks and all-caps names ([zephir-lang/zephir#2608](https://github.com/zephir-lang/zephir/issues/2608)).
• zephir_parser 2.2.0
  ### Added - Support the `::class` magic constant: `self::class`, `parent::class`, `static::class` and `ClassName::class` now parse into a `static-constant-access` node whose member value is `class`, which the compiler resolves to the fully-qualified class name ([zephir-lang/zephir#2527](https://github.com/zephir-lang/zephir/issues/2527)).
• event 3.1.6
  Fix PHP 8.6.0alpha2 build (patch by Remi Collet)

Latest PECL Releases:

• gRPC 1.83.0RC1
  - gRPC Core 1.83.0 update

• protobuf 5.36.0RC1
  * See github.com/protocolbuffers/protobuf/releases/tag/v36.0-rc1 for release notes.
• timezonedb 2026.3
  Extra release to hopefully have a "good last release" due to weird GitHub issues. There are no code or data changes.
• swoole 6.2.2
  - Refactored the communication between multi-thread pools from `Pipe` to `Unix Socket` to enhance the reliability of high-concurrency transmission for asynchronous file operations. - Resolved sporadic segmentation faults when `Worker` parses `HTTP` parameters, eliminating the risk of process crashes. - Fixed a fatal `Error::__toString` error during the `PHP` request shutdown (rshutdown) phase when interacting with the database. - Fixed the `Poll` event initialization exception after coroutine conversion of `pdo_pgsql`, ensuring the stability of blocking mode. - Removed duplicate and redundant `Server` property configurations in `SwooleCoroutineHttpServer`. - Fixed an issue in `SwooleArrayObject::valid()` where, under `PHP 8.5`, using `null` as the key parameter for `array_key_exists()` would trigger a deprecation warning: "Using null as the key parameter for array_key_exists() is deprecated."
• swoole 6.1.9
  - Refactored the inter-thread-pool communication mechanism from `Pipe` to `Unix Socket` to enhance the transmission reliability of asynchronous file operations under high concurrency. - Resolved the occasional segmentation fault in `Worker` when parsing `HTTP` parameters, eliminating the risk of process crashes. - Fixed the `Error::__toString` fatal error that occurred during database interactions in the PHP request shutdown (rshutdown) phase. - Fixed the `Poll` event initialization anomaly in `pdo_pgsql` after coroutine transformation, ensuring the stability of blocking mode.

Latest PECL Releases:

• gRPC 1.81.1
  - gRPC Core 1.81.1 update

• gRPC 1.82.0RC2
  - gRPC Core 1.82.0 update
• bsdiff 0.2.1
  - Add composer.json for installation via PIE (PHP Installer for Extensions).
• phalcon 5.16.0
  Full changelog can be found at: https://github.com/phalcon/cphalcon/blob/master/CHANGELOG-5.0.md

Latest PECL Releases:

• parallel 1.2.15
  - Fix use-after-free race on future->monitor in error paths #381
  • Promote PIE installer #383
  • Fix: Update coverallsapp/github-action from master to v2.3.6 #384
  • Narrow the Windows VEH to undefined-function calls only #379
• phalcon 5.14.1
  Full changelog can be found at: https://github.com/phalcon/cphalcon/blob/master/CHANGELOG-5.0.md
• phalcon 5.14.2
  Full changelog can be found at: https://github.com/phalcon/cphalcon/blob/master/CHANGELOG-5.0.md
• phalcon 5.15.0
  Full changelog can be found at: https://github.com/phalcon/cphalcon/blob/master/CHANGELOG-5.0.md
• parallel 1.2.14
  - Fix PHP 8.4 task exit handling #377 - Narrow crash handler to undefined-function calls only #378

Latest PEAR Releases:

• pearweb_phars 1.10.26
  

• PEAR 1.10.18
  

Latest PEAR Releases:

• pearweb 1.33.0
  

Latest PEAR Releases:

• Net_SMTP 1.12.2