master
Deprecate returning non-string values from a user output handler (#18932)
Deprecate implicit dynamic properties
Port skipif.inc files to EXTENSIONS
Fix GH-9186 @strict-properties can be bypassed using unserialization (#9354)
ext/session: Remove bool type coercions in tests
Unify headers already sent/session already started error handler (#16451)
ext/session: Add #[\Deprecated] to SID constant (#19566)
Migrate SKIPIF -> EXTENSIONS (#7138)
Restructure ext-session tests
Deprecate disabling use_only_cookies (#13578)
Fix type confusion with session SID constant
Zend: Deprecate __sleep() (#19682)
ext/session: Fix GH-17541 (ext/session NULL pointer dereferencement during ID reset)
Use php_error_docref() instead of zend_error() in session.c (GH-15505)
Promote unserialize() notices to warning (#9629)
ext/session/tests: more lenient expected output checks. (#11631)
Fix session + Serializable tests
Add some missing EXTENSIONS sections to misc tests
Mention where headers were already sent if session_start fails (#16378)
Fix GH-12504: Corrupted session written when there's a fatal error in autoloader
Fix GH-13680: Segfault with session_decode and compilation error
Fix GH-14368: Test failure in ext/session/tests/gh13856.phpt (#14378)
Fix GH-16290: session cookie_lifetime ini value overflow.
Fix GH-16385: Unexpected null returned by session_set_cookie_params
Fix GH-16590: UAF in session_encode()
ext/session: Fix GH-18634 (#18653)
Update expires format for session cookie (#9304)
Remove forgotten obsolete session INI directives (#14238)
Check session_create_id() input for null byte (#14728)
ext/session: session_create_id() now throws a ValueError for large prefix (#15338)
Removed impossible paths from session_decode and session_encode (#13796)
ext/session: Warn when providing invalid values for session.gc_probability and session.gc_divisor
partitioned option for setcookie/setrawcookie and sessions
Deprecate calling session_set_save_handler() with more than 2 arguments
Merge branch 'PHP-8.3' into PHP-8.4
ValueError on null byte in session_name() (#15286)
zend_compile: Deprecate backticks as an alias for `shell_exec()` (#19443)
Fix CLEAN sections
Resolve open_basedir paths on ini update
Add test for negative cookie lifetime
ext/session: session_start() options arguments type checks.
Note where a session was already started (#10736)