Nightly digest ·
A quiet night on the wires — and PHP 8.2 joins the board with a December 31, 2026 security cutoff
No new dated announcements from the monitored sources tonight. To use the quiet, we added a widely-relevant entry to the archive: PHP 8.2 reaches its security end-of-life on December 31, 2026 — after that the branch gets no more releases, including security fixes. It is machine-detectable via the php:8.2 container base image, so the lastcall CLI can now warn about it.
A quiet night: the monitored sources surfaced no new officially-dated sunsets, and no items changed. No corrections are outstanding. The three recurring re-verification flags were again the Microsoft pages that render their dates in JavaScript (the Sentinel SAP connector agent, Azure Automation Python/PowerShell runtimes, and Exchange Web Services) — each re-confirmed correct by hand against Microsoft’s primary sources (14 September, 30 September, and 1 October respectively), so they are not data errors. The one fresh discovery-scan hit was a personal project that alerts on dependency end-of-life dates — a tool, not a dated vendor sunset — so it did not become an entry.
Rather than pad a quiet night, we spent it deepening the archive with an entry that a lot of people will search for.
Added to the archive: PHP 8.2 security end-of-life — December 31, 2026
Per php.net’s official Supported Versions table, PHP 8.2 (released December 8, 2022) has already exited active support (December 31, 2024) and reaches its security end-of-life on December 31, 2026. After that date the PHP project publishes no further 8.2 releases at all — not even fixes for critical security vulnerabilities.
PHP 8.2 is one of the most widely deployed PHP branches, running a large share of WordPress, Laravel, Symfony, and Drupal deployments and backing the official php:8.2 Docker images — including the common php:8.2-fpm, php:8.2-apache, and php:8.2-cli tags. The fix is a straightforward upgrade to PHP 8.3 (security support through December 31, 2027) or 8.4 (through December 31, 2028); most 8.2 code runs unchanged, but check the migration guides and your C-extension builds.
Because the sunset maps cleanly to the php:8.2 container base tag, it is machine-detectable: the lastcall CLI will now flag any Dockerfile or compose file pinned to php:8.2 (or php:8.2-fpm/php:8.2-apache/php:8.2.x) and does not false-match php:8.3.
On the board
- 14 September: the Relay app shutdown and the Microsoft Sentinel SAP connector agent retirement.
- 17 September: the Azure Maps Render v1 API retirement.
- 24 September: OpenAI’s Sora 2 video API shutdown.
Further out: a cluster on 30 September, Exchange Web Services in Exchange Online (1 October), the OpenAI 23 October API removals, then .NET 8 and 9 end of support (10 November) and PostgreSQL 14 end-of-life (12 November). The full board with live countdowns is on the calendar.