| 29 Mar 2023 |
 Pol | I had a meeting with Dan Leech this morning, he needed some help with Nix. I told him about the deprecations I had when using phpbench with php81. He told me he's going to bump the proper dependency and do a new release today.
I'm going to set my PR in draft until there. | 08:53:30 |
| Pol | (Dan Leech is the author of PHPBench) | 08:54:41 |
 tgerbet | Yes but that means that during lockfile generation Composer will always be forced to get the dist tarball, unpack it and then compute the checksum to put it in the lockfile
I'm not sure Composer will be willing to always do that due to the performance implication and that you are more likely to reach the rate limits of the platform | 09:56:06 |
 philipp | tgerbet: What about doing it like the cargo implementation and adding the missing hashes to the nix file? | 09:57:49 |
| tgerbet | In our case it would like be all/the majority of the deps so at this point it is not really different than what composer2nix does 😄 | 09:59:07 |
| 3 Apr 2023 |
| Pol | Can we move on with this issue? https://github.com/NixOS/nixpkgs/pull/221845 | 06:45:03 |
| Pol | There's also this issue: https://github.com/NixOS/nixpkgs/issues/224457 I guess there is nothing to mention on our side? | 13:21:57 |
| Pol | It would be nice to have that PR though https://github.com/NixOS/nixpkgs/pull/221845 ! | 13:22:11 |
| tgerbet | In reply to @drupol:matrix.org
There's also this issue: https://github.com/NixOS/nixpkgs/issues/224457 I guess there is nothing to mention on our side? Maybe we could switch the default php to 8.2 and we need to drop 8.0 because it will be outside the security support window upstream before 23.05 | 13:38:25 |
| Pol | 
Download image.png | 13:40:09 |
| Pol | The current version is 8.1. Let me check the EOL | 13:40:22 |
| Pol | https://www.php.net/supported-versions.php | 13:40:37 |
| Pol | Until 25 Nov 2023(in 7 months) | 13:41:14 |
| Pol | Should we switch to 8.2 ? I don't know. | 13:41:22 |
| tgerbet | Security support continue after that so we are fine on this front | 13:48:55 |
| tgerbet | * Security support for 8.1 continue after that so we are fine on this front | 13:49:03 |
| tgerbet | Maybe it's safer to keep 8.1 by default for now and to change the default to 8.2 after the branch-off | 13:51:39 |
| tgerbet | I will take a look tonight/tomorrow to drop PHP 8.0, I see some packages are still depending on it | 13:52:32 |
| Pol | Nice, thanks :) | 13:57:26 |
| Pol | Feel free to chime in https://github.com/NixOS/nixpkgs/pull/221845 as well, I would like to get this in as well. | 13:57:50 |
 @etu:failar.nu | Pol: We'll switch to 8.2 after branchoff | 15:32:42 |
| @etu:failar.nu | And drop 8.0 | 15:33:00 |
| tgerbet | In reply to @etu:failar.nu
And drop 8.0 We need to deal with 8.0 before the branch-off, security support for NixOS 23.05 ends on 31 December while PHP 8.0 security support ends on 26 November | 15:37:03 |
| @etu:failar.nu | oh | 15:38:31 |
| @etu:failar.nu | yeah... right... my schedule is based on NixOS XX.03 | 15:38:55 |
| @etu:failar.nu | So the window have moved a couple of months | 15:39:04 |
| @etu:failar.nu | So... I guess I'll drop 8.0 now. | 15:39:42 |
| tgerbet | From a quick look roundcube, grocy, limesurvey, moodle, tt-rss, arcanist and n98-magerun still depends on it | 15:43:13 |
| @etu:failar.nu | yeah... | 15:51:52 |
| @etu:failar.nu | So... we may get breakage that is no fun at all | 15:52:02 |
