devbox icon indicating copy to clipboard operation
devbox copied to clipboard

The Latest PHP 7.4 Version (7.4.33) Is Not Available in PHP 7.4.x Series of Packages

Open tiernan opened this issue 2 years ago • 1 comments

Are you requesting a new package or reporting an issue on an existing one? Requesting an updated package version as the prior version is vulnerable to multiple CVEs.

If reporting an issue on an existing one, what is the name of the package? https://www.nixhub.io/packages/php

What changes are you requesting? The latest version of the 7.4.x series released is 7.4.33 and the latest available package on nixhub.io for this PHP version is 7.4.29. I am requesting that a release of 7.4.33 be made. (I will gladly assist in this effort if instructions are provided)

Additional context In my situation, I have a project still running PHP 7.4.33 and would like to be able to use devbox with the same version as used on the server. I am also aware that the 7.4.33 version patches multiple CVEs so while I doubt they will affect me, it would seem diligent to provide the latest patched version.

tiernan avatar Nov 22 '23 09:11 tiernan

I'm guessing that Nixhub doesn't pick it up since we're indexing the main branch, only goes up to 7.4.29. It looks like Nixpkgs removed php74 from the main branch after the PHP Group dropped support for versions older than 8.0.

Fortunately, someone did update it to 7.4.33 on the Spring 2022 release branch, so you can still install it using a Flake reference that points to the right commit. Try the following command:

devbox add github:nixos/nixpkgs/release-22.05#php74

Note that this will need to download and build PHP 7.4.33 from scratch, so it may take a a couple minutes to build and install the first time. Any additional projects on your machine will re-use this built version, so it should be much faster after the first installation.

Lagoja avatar Nov 23 '23 03:11 Lagoja