Re: Concerns about syncing bundled libgd to upstream 2.4 (GH-22532)

Hi Jakub, On Wed, Jul 8, 2026 at 5:32 PM Jakub Zelenka <bukka@php.net> wrote: > I don't see this as a problem. The update was long due and if we go early for 2.4, then > both versions could stabilise in the same time. I think that syncing releases would be really great, > then we could more easily follow 2..4 with fixes. Volker has also done a deep AI review which found > some issues. Once all of those get addressed, it should be good enough for master merge IMHO. This > should ideally happen before beta1 so it really depends if it's ready in time for that. Thanks :) One issue is introduced in this PR and has been fixed. Some config.m4 default value being wrong has been fixed. There are other Volker sent to use but they are also in previous versions, so after discussion with him (mail), we decided to do them as normal sec fixes (only low ones remaining) and have synced releases as usual. Also some of those are in php's ext itself, not the lib. cheers, -- Pierre @pierrejoye