A discussion on the PHP internals mailing list about a PR (GH-22532) proposing to sync PHP's bundled libgd to the unreleased upstream 2.4.0. The original author raises four concerns: the code is less than a month old in upstream, libgd 2.4.0 has never been officially released or tagged, PHP 8.6 is already in alpha with limited testing time, and new ext/gd features tied to libgd-2.4 would effectively force use of the bundled library. Respondents are divided — some argue the update is long overdue and syncing releases would be beneficial, while others suggest waiting until libgd 2.4 is officially released before merging into the next PHP version. The PR author (Pierre Joye) clarifies the sync is purely a library update with no BC breaks, that security audits have been performed, and that a separate RFC for new ext/gd features is planned.
