| 3 Apr 2023 |
 tgerbet | Security support continue after that so we are fine on this front | 13:48:55 |
| tgerbet | * Security support for 8.1 continue after that so we are fine on this front | 13:49:03 |
| tgerbet | Maybe it's safer to keep 8.1 by default for now and to change the default to 8.2 after the branch-off | 13:51:39 |
| tgerbet | I will take a look tonight/tomorrow to drop PHP 8.0, I see some packages are still depending on it | 13:52:32 |
 Pol | Nice, thanks :) | 13:57:26 |
| Pol | Feel free to chime in https://github.com/NixOS/nixpkgs/pull/221845 as well, I would like to get this in as well. | 13:57:50 |
 etu | Pol: We'll switch to 8.2 after branchoff | 15:32:42 |
| etu | And drop 8.0 | 15:33:00 |
| tgerbet | In reply to @etu:failar.nu
And drop 8.0 We need to deal with 8.0 before the branch-off, security support for NixOS 23.05 ends on 31 December while PHP 8.0 security support ends on 26 November | 15:37:03 |
| etu | oh | 15:38:31 |
| etu | yeah... right... my schedule is based on NixOS XX.03 | 15:38:55 |
| etu | So the window have moved a couple of months | 15:39:04 |
| etu | So... I guess I'll drop 8.0 now. | 15:39:42 |
| tgerbet | From a quick look roundcube, grocy, limesurvey, moodle, tt-rss, arcanist and n98-magerun still depends on it | 15:43:13 |
| etu | yeah... | 15:51:52 |
| etu | So... we may get breakage that is no fun at all | 15:52:02 |
| etu | Grocy supports 8.1 at least now, according to their latest readme | 15:54:10 |
| etu | Then I see two choices...
- Really quickly remove PHP 8.0 right away and risk breaking a bunch of things that may not be easy to repair...
- Not remove it right away and have it EOL for about a month while the 23.11 is already hopefully released...
| 15:59:15 |
| etu | I kinda prefer option 2 because it's slower and less sudden. | 15:59:32 |
| etu | And then we can do it better for next cycle. | 15:59:48 |
| tgerbet | Moodle is also fine since the 4.1.2 | 16:05:44 |
| tgerbet | LimeSurvey is not ready yet
Arcanist it looks like there is still some pending patches
So yeah we might have to go with option 2 | 16:07:32 |
| tgerbet | I created https://github.com/NixOS/nixpkgs/issues/224505 to track progress on the PHP 8.0 removal | 18:34:56 |
| tgerbet | * I created https://github.com/NixOS/nixpkgs/issues/224505 to track progress of the PHP 8.0 removal | 19:02:03 |
| 4 Apr 2023 |
| Pol | In reply to @drupol:matrix.org
Feel free to chime in https://github.com/NixOS/nixpkgs/pull/221845 as well, I would like to get this in as well. Merged! Thanks Lars Strojny ! | 10:47:08 |
| 6 Apr 2023 |
| Pol | TIL that we can avoid using PHP session and still have persistent data across requests and responses using storageless session. Basically, sessions are stored in a cookie ! Very smart. | 20:40:34 |
 Jan Tojnar | Pol: well, then user can modify the session data, unless you authenticate it somehow | 21:36:55 |
| Jan Tojnar | also it increases the size of every HTTP request | 21:37:36 |
| 7 Apr 2023 |
| Pol | No, the content of the session is wrapped in a signed jwt... So good luck... | 01:27:17 |
| Pol | OMC | 01:31:52 |
