On Windows? @shivammathur announced rebuilt PHP 8.2–8.5 packages with Brotli 1.2.1, fixing a 9.2 decoder bug reachable via curl's automatic decompression. And php.net suggests session.upload_progress.enabled=0 until the next bugfix release.
Artem Ukrainskiy went through a year of first-time PRs to php-src: about half accepted, 29% for a first PR, 66% after one lands. A reply within a day means a ~20-hour close; over a week, ~32 days. He asked whether a triage bot is worth prototyping.
Frode Børli's Scope RFC gives each unit of work an identity: an HTTP request, a queue job, a CLI command. Code can key its own state by it, and secondary votes would make superglobals, session, locale and timezone follow it. @Crell called it promising.
Arsan Gamal proposed effect declarations: functions that declare they start processes, read files or touch the network. David Maye and Damian Jóźwiak asked why not attributes. @Crell: engine-enforced without opt-in is "a complete non-starter."
Ayoub Ezzini's array_partition splits an array into matching and non-matching halves in one pass, keys preserved. He kept it to two groups, since PHP casts true/false keys to 1/0. @timwolla: "well-written, well-researched and well-argued."
Votes, at recording: Sjoerd Langkemper's RFC to make hexdec, octdec, bindec and base_convert throw on invalid characters is 25–1 (closes Nov 1). Muhammed Arshid's Filter enums RFC is 2–11 (closes Nov 4).
Quick hits: Pratik Bhujel fixed the Io\Terminal bugs Sjoerd found, vote on hold. Damian postponed the CSV vote at @timwolla's request. Sjoerd proposed openssl_get_channel_binding for SCRAM-PLUS logins.
@nicolasgrekas wants SSRF blocking in curl; Levi Morrison asked why not streams too. Máté Kocsis keeps the query params length limit. Abbas proposed async/await on Fibers. And paren-less scalar extension methods got a strong -1 from @imsop.
This week's episode is supported by Scalpels: open source apps you host yourself, installed in one click into your own Laravel Cloud or Forge account. The Free plan is $0 forever, and Laravel bills you directly for the hosting. It launches this Saturday, October 31st.
And the reason there's anything to report each week: the PHP Foundation funds more than half of ongoing php-src commits.
If you use the language, consider donating — or guilt your employer into it.