RFC Tracker

Lets enums define __debugInfo() to control what var_dump() shows for an enum case.

Adds array_path_get() and array_path_exists() to read or check a value deep in a nested array using an array of keys.

Exempts new TypeError and ValueError input checks, and reworded error messages, from PHP's backward compatibility break policy.

Replaces the PHP License and Zend Engine License with the Modified BSD License, as PHP License 4 and Zend Engine License 3.

Changes the session defaults to use_strict_mode=1, cookie_httponly=1 and cookie_samesite=Lax so new installs are safer out of the box.

Changes the release manager policy to three per PHP version, two hands-on and one hands-off adviser, in line with current practice.

Removes the NUL byte (\0) from the default characters that trim(), ltrim() and rtrim() strip.

Adds a global SortDirection enum with Ascending and Descending cases as a shared, type-safe way to express sort order.

Lets you put a doc comment on each function parameter and read it with the new ReflectionParameter::getDocComment().

Adds array_only_keys() and array_except_keys() to keep or drop the listed keys of an array without the array_flip() workaround.

Lets pack() and unpack() take < and > byte order markers on the f and d float codes, matching the integer syntax added in PHP 8.6.

Makes closures cheaper by inferring static when $this is unused and caching stateless closures, though only the caching part was merged.

Lets a constructor reassign a promoted readonly property exactly once, so you can validate or normalize it without dropping promotion.

Adds six str_prefix_* and str_suffix_* functions to ensure, remove or replace a string's prefix or suffix in one call.

Adds grapheme_strrev() to intl, which reverses a string by grapheme cluster so emoji and combined characters stay intact.

Adds the form feed character (\f) to the default set of characters that trim(), ltrim() and rtrim() strip.

Adds a TLS session class and stream context options so clients and servers can save, store and resume TLS sessions.

Adds mysqli::quote_string(), which escapes a string and wraps it in single quotes, like PDO::quote(), to close a double-quote injection hole.

Adds exception and silent modes for stream errors, with structured StreamError objects and a StreamErrorCode enum you can inspect.

Deprecates PEAR as a way to install PHP packages and makes Composer the recommended installer instead.