Hi, php-7.4 has been EOL for a long time (no security fixes) and I'd like to mask it. The last remaining package with a hard dependency on it is selfoss. It looks like their github snapshots should work with newer versions of PHP. Would it be possible to package one of them?
(In reply to Michael Orlitzky from comment #0) > Hi, php-7.4 has been EOL for a long time (no security fixes) and I'd like to > mask it. The last remaining package with a hard dependency on it is selfoss. > It looks like their github snapshots should work with newer versions of PHP. > Would it be possible to package one of them? The issue with PHP pkgs is that I know almost nothing about PHP. In repo readme they write that composer is needed to build the php "server" side. It might take some time for me to figure out how to correctly prebuild(?) a selfoss snapshot. Michael, you can try either doing it yourself or helping me out on IRC but either way if you do it yourself, with me, or let me do it it will not be fast. The 2.19 uses the "prebuild" ZIP from releases.
I think these are prebuilt zips of the snapshots: https://cloudsmith.io/~fossar/repos/selfoss-git/packages/?q=version%3Alatest That URL is endorsed in upstream's README.md (so it is safe). The prebuilt packages bundle ~50 dependencies that probably have security vulnerabilities and should be packaged separately instead, but that's a separate problem.
The bug has been closed via the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=b0fad73eb114fc068b16c76db8ee6f243378ac79 commit b0fad73eb114fc068b16c76db8ee6f243378ac79 Author: Maciej Barć <xgqt@gentoo.org> AuthorDate: 2023-08-10 21:49:28 +0000 Commit: Maciej Barć <xgqt@gentoo.org> CommitDate: 2023-08-10 22:19:19 +0000 www-apps/selfoss: bump to 2.20_pre20230730 Closes: https://bugs.gentoo.org/911337 Signed-off-by: Maciej Barć <xgqt@gentoo.org> www-apps/selfoss/Manifest | 1 + www-apps/selfoss/selfoss-2.20_pre20230730.ebuild | 51 ++++++++++++++++++++++++ 2 files changed, 52 insertions(+)
Thank you!
