Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:128081
Precedence: bulk
MIME-Version: 1.0
References: <CAEPPVa2wXmb0pDKs4A7NyQ25Gaewz5n7JxBhaU1cxc=LpWzaPg@mail.gmail.com>
 <be95ae69-119f-4d39-bc42-4acb9ee295e1@sandfox.me> <CAEPPVa3EUy=YrQ91y2c4gKaSORYUunEcvDotQLjZ4yw0qKNz3A@mail.gmail.com>
 <CAAfnsFX1ru4QoU+xKbS3Ogo8M=My1idJ=PHVRD+BcTgNEZAYXA@mail.gmail.com>
 <CAEPPVa2ObVu0sjxK0SRAyp3AuU90-QToPAMZ4JxSuWfBC-uRCA@mail.gmail.com> <3c1e3111-32cd-4f2b-a525-e013e5b905cf@gmail.com>
In-Reply-To: <3c1e3111-32cd-4f2b-a525-e013e5b905cf@gmail.com>
Date: Wed, 16 Jul 2025 14:31:15 +0200
Message-ID: <CAEKnhAEHVtHVi79v4ry5mULQA=+t-B0wUS3BRFdDA5wyWNXdpQ@mail.gmail.com>
Subject: Re: [PHP-DEV] Oniguruma maintenance was ended on 2025-04-24
To: Niels Dossche <dossche.niels@gmail.com>
Cc: internals@lists.php.net
Content-Type: multipart/alternative; boundary="0000000000007940c0063a0b123e"
From: bukka@php.net (Jakub Zelenka)

--0000000000007940c0063a0b123e
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Tue, Jul 15, 2025 at 6:44=E2=80=AFPM Niels Dossche <dossche.niels@gmail.=
com>
wrote:

> On 15/07/2025 09:26, youkidearitai wrote:
> > 2025=E5=B9=B46=E6=9C=8819=E6=97=A5(=E6=9C=A8) 3:45 Peter Kokot <petk@ph=
p.net>:
> >>
> >> What about bundling Oniguruma to php-src/ext/mbstring/oniguruma again
> as it once was already? This would make development easier to be located
> inside php-src. However, everything put inside php-src has a questionable
> future on its own. For example, to be buildable as a standalone library a=
nd
> used elsewhere.
> >
> > Hi,
> >
> > Surely, I think make sense to be include inside php-src.
> > From GitHub comment
> > (https://github.com/php/php-src/issues/18467#issuecomment-3044192511),
> > FreeBSD will end to maintenance Oniguruma in 2026-12-01.
> >
> > Therefore, I think re-include Oniguruma inside php-src.
> >
> > Is require an RFC if re-include Oniguruma?
>
> Hi
>
> Yes.
>
> This also won't solve the problem.
> The problem is that Oniguruma is currently not maintained, not that it's
> unavailable. Bundling the library inside PHP does not solve that
> maintenance problem.
>

Well bundling effectively means that PHP teams is responsible for fixing
(at least the security) issues. So in some way it solves the problem for
users. The question is whether the maintenance burden that it adds is worth
it.

Kind regards,

Jakub

--0000000000007940c0063a0b123e
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr">On Tue, Jul 15, 2025 at 6:44=E2=80=AFPM N=
iels Dossche &lt;<a href=3D"mailto:dossche.niels@gmail.com">dossche.niels@g=
mail.com</a>&gt; wrote:</div><div class=3D"gmail_quote gmail_quote_containe=
r"><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;bord=
er-left:1px solid rgb(204,204,204);padding-left:1ex">On 15/07/2025 09:26, y=
oukidearitai wrote:<br>
&gt; 2025=E5=B9=B46=E6=9C=8819=E6=97=A5(=E6=9C=A8) 3:45 Peter Kokot &lt;<a =
href=3D"mailto:petk@php.net" target=3D"_blank">petk@php.net</a>&gt;:<br>
&gt;&gt;<br>
&gt;&gt; What about bundling Oniguruma to php-src/ext/mbstring/oniguruma ag=
ain as it once was already? This would make development easier to be locate=
d inside php-src. However, everything put inside php-src has a questionable=
 future on its own. For example, to be buildable as a standalone library an=
d used elsewhere.<br>
&gt; <br>
&gt; Hi,<br>
&gt; <br>
&gt; Surely, I think make sense to be include inside php-src.<br>
&gt; From GitHub comment<br>
&gt; (<a href=3D"https://github.com/php/php-src/issues/18467#issuecomment-3=
044192511" rel=3D"noreferrer" target=3D"_blank">https://github.com/php/php-=
src/issues/18467#issuecomment-3044192511</a>),<br>
&gt; FreeBSD will end to maintenance Oniguruma in 2026-12-01.<br>
&gt; <br>
&gt; Therefore, I think re-include Oniguruma inside php-src.<br>
&gt; <br>
&gt; Is require an RFC if re-include Oniguruma?<br>
<br>
Hi<br>
<br>
Yes.<br>
<br>
This also won&#39;t solve the problem.<br>
The problem is that Oniguruma is currently not maintained, not that it&#39;=
s unavailable. Bundling the library inside PHP does not solve that maintena=
nce problem.<br></blockquote><div><br></div><div>Well bundling effectively =
means that PHP teams is responsible for fixing (at least the security) issu=
es. So in some way it solves the problem for users. The question is whether=
 the maintenance burden that it adds is worth it.</div><div><br></div><div>=
Kind regards,</div><div><br></div><div>Jakub</div></div></div>

--0000000000007940c0063a0b123e--