PECL: Latest releases

phalcon 5.23.0

2026-10-16T00:16:33-05:00

Full changelog can be found at: https://github.com/phalcon/cphalcon/blob/master/CHANGELOG-5.0.md

protobuf 5.37.0RC1

2026-10-15T18:05:10-05:00

* See github.com/protocolbuffers/protobuf/releases/tag/v37.0-rc1 for release notes.

mongodb 2.5.5

2026-10-15T07:59:00-05:00

## What's Changed ### Fixed * PHPC-276: Prevent stack exhaustion when decoding deeply nested BSON by @GromNaN in https://github.com/mongodb/mongo-php-driver/pull/2158 ### Other Changes * PHPC-276: Enforce the decode nesting limit for CodeWScope scopes by @GromNaN in https://github.com/mongodb/mongo-php-driver/pull/2166 **Full Changelog**: https://github.com/mongodb/mongo-php-driver/compare/2.5.4...2.5.5

mongodb 2.1.12

2026-10-15T07:58:48-05:00

mongodb 1.21.12

2026-10-15T07:58:38-05:00

gRPC 1.85.0RC1

2026-10-12T08:38:43-05:00

- gRPC Core 1.85.0 update

zephir_parser 2.9.1

2026-10-11T12:27:15-05:00

### Fixed - Fixed a union-typed property failing to parse with `{ get, set }` shortcuts or an all-caps name ([zephir-lang/zephir#2761](https://github.com/zephir-lang/zephir/issues/2761))

zephir_parser 2.9.0

2026-10-10T11:23:25-05:00

### Added - Support `a instanceof static` (late static binding). The right operand is a variable named `static`, the shape `instanceof self` and `instanceof parent` already have, and `a instanceof static::m()` still parses as before ([zephir-lang/zephir#2714](https://github.com/zephir-lang/zephir/issues/2714))

Judy 2.8.0

2026-10-09T04:48:26-05:00

- SECURITY FIX: appending to a string-keyed array ($j[] = ...) no longer crashes; the append guard now enumerates all seven string-keyed types, including Judy::STRING_TO_ENTRY (#217). - SECURITY FIX: forEach()/filter()/map() on Judy::STRING_TO_ENTRY read each value through the entry accessor instead of reinterpreting a cache-entry struct as a zval (out-of-bounds read / crash); equals() gained a matching ENTRY branch (#217). - SECURITY FIX: set() rejects keys longer than the 64 KB key buffer before taking a slot, closing a heap overflow reachable through an oversized key; deleteRange() on string-keyed ENTRY arrays now frees the cache-entry struct and its value reference instead of leaking both (#217). - FIX: expired STRING_TO_ENTRY values are hidden from reads and traversals (iterator, get, keys/values/toArray) while count()/size() stay raw-counter O(1) until pruneExpired(). mergeWith() copies TTL and flags verbatim, and get_gc() collects stored ENTRY values so value cycles are collectable (#217). - FIX: wrong-category range bounds now throw TypeError instead of silently coercing to a wrong-range read: int-keyed keys()/values()/toArray()/size()/ slice() reject non-numeric string bounds, and string-keyed deleteRange() rejects integer bounds (#217). - FIX: __unserialize() validates the serialized type, payload shape and optimizeIteration flag strictly before touching the object, so a malformed payload throws without destroying or corrupting an already-populated array, and an out-of-range type throws instead of emitting an E_WARNING (#225).

mongodb 2.5.4

2026-10-08T18:25:07-05:00

## What's Changed ### Fixed * PHPC-2505: Fix foreach after GC invocation by @GromNaN in https://github.com/mongodb/mongo-php-driver/pull/1982 ### Minor * PHPC-2682: Replace zend_hash_destroy + FREE_HASHTABLE with zend_hash_release by @GromNaN in https://github.com/mongodb/mongo-php-driver/pull/2138 ### Other Changes * Exclude OCSP tasks from PR checks by @kevinAlbs in https://github.com/mongodb/mongo-php-driver/pull/2125 * PHPC-2774: Pin all GitHub Actions to exact release tags by @GromNaN in https://github.com/mongodb/mongo-php-driver/pull/2121 * Align the v1.21 CI configuration with v2.1 and v2.5, and pin all GitHub Actions by @GromNaN in https://github.com/mongodb/mongo-php-driver/pull/2129 * Upgrade libmongoc by @paulinevos in https://github.com/mongodb/mongo-php-driver/pull/2148 * remove stray build files by @kevinAlbs in https://github.com/mongodb/mongo-php-driver/pull/2151 **Full Changelog**: https://github.com/mongodb/mongo-php-driver/compare/2.5.3...2.5.4