Skip to content

Fix PHP deprecation dates to reflect security support EOL - #662

Merged
ivanovac merged 1 commit into
masterfrom
fix-php-deprecation-dates
Jul 16, 2026
Merged

Fix PHP deprecation dates to reflect security support EOL#662
ivanovac merged 1 commit into
masterfrom
fix-php-deprecation-dates

Conversation

@ivanovac

Copy link
Copy Markdown
Contributor

Fix PHP deprecation dates to reflect security support EOL

Update PHP deprecation dates in dependency-builds config to show when security support ends, not when active support ends.

Problem

PHP has two support phases:

  1. Active Support (2 years) - All bugs and security issues fixed
  2. Security Support (2 years) - Only critical security fixes

The config was showing active support end dates, which could cause premature removal of PHP versions still receiving security patches.

Changes

File: pipelines/dependency-builds/config.yml

Version Before (Wrong) After (Correct) Explanation
PHP 8.2 2025-12-08 2026-12-31 Security support end date
PHP 8.3 2025-12-31 2027-12-31 Security support end date
PHP 8.4 2026-12-31 2028-12-31 Security support end date
PHP 8.5 2027-12-31 2029-12-31 Security support end date

Impact

  • ✅ Dependency builds will continue until true EOL (security support ends)
  • ✅ Aligns with php-buildpack manifest dates
  • ✅ Prevents premature removal of PHP versions with security support
  • ✅ Matches official PHP support timeline

Example: PHP 8.3

  • Active support ended: Dec 31, 2025
  • Security support until: Dec 31, 2027
  • Old config date: 2025-12-31 (active support end) ❌
  • New config date: 2027-12-31 (security support end) ✅

Between Jan 1, 2026 and Dec 31, 2027, PHP 8.3 still receives critical security patches and should remain available.

Reference

Note

PHP 8.1 was already correctly removed from this config (EOL Dec 31, 2025). This PR only fixes dates for currently supported versions (8.2, 8.3, 8.4, 8.5).

Update PHP deprecation dates to show when security support ends, not when
active support ends. PHP versions receive security fixes for 2 years after
active support ends.

Corrected dates (security support end):
- PHP 8.2: 2026-12-31 (was 2025-12-08)
- PHP 8.3: 2027-12-31 (was 2025-12-31)
- PHP 8.4: 2028-12-31 (was 2026-12-31)
- PHP 8.5: 2029-12-31 (was 2027-12-31)

This ensures dependency builds continue for PHP versions until they truly
reach EOL (end of all support), preventing premature removal of versions
still receiving critical security patches.

Reference: https://www.php.net/supported-versions.php
@ivanovac
ivanovac requested a review from ramonskie July 16, 2026 08:39
@ivanovac
ivanovac merged commit 23d9a30 into master Jul 16, 2026
1 check passed
@ivanovac
ivanovac deleted the fix-php-deprecation-dates branch July 16, 2026 08:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants