php81-fpm-8.1.28-bp155.8.1

- version update to 8.1.28
  . Fixed bug GHSA-wpj3-hf5j-x4v4 (__Host-/__Secure- cookie bypass due to
    partial CVE-2022-31629 fix). (CVE-2024-2756) (nielsdos) [bsc#1222857]
  . Fixed bug GHSA-h746-cjrr-wfmr (password_verify can erroneously return true,
    opening ATO risk). (CVE-2024-3096) (Jakub Zelenka) [bsc#1222858]

- devel package requires php81-pear

- version update to 8.1.24
  * This is a bug fix release.

- Update Changes files
  * add missing CVEs for PHP 8.1.22

- version update to 8.1.23
  * This is a bug fix release.
  * https://www.php.net/ChangeLog-8.php#8.1.23

- version update to 8.1.22
  * This is a security release.
  * https://www.php.net/ChangeLog-8.php#8.1.22
    o fix for CVE-2023-3823:
    Libxml: Security issue with external entity loading in XML
    without enabling it
    o fix for CVE-2023-3824:
    Phar: Buffer mismanagement in phar_dir_read()
- deleted patches
  - php-unicode-allow-redistribution.patch (upstreamed)
- deleted sources
  - repack.sh (not needed)

- version update to 8.1.21
- modified patches
  % php-sort-filelist-phar.patch (refreshed)

- version update to 8.1.20
  * This is a security release.
  * https://www.php.net/ChangeLog-8.php#8.1.20
- force to repack tarball after update
  https://github.com/php/php-src/issues/11300
- session.save_path set to /var/lib/php8/sessions in mod_php8.conf
  and www.conf php-fpm pool example
- modified sources
  % mod_php8.conf
- added sources
  + repack.sh
  + php-unicode-allow-redistribution.patch

- repack the tarball temporarily [bsc#1211648]

- also MIT license (systzdata patch, ext/date/lib/parse_posix.c)
  [https://build.suse.de/request/show/298230]

- version update to 8.1.19
  * This is a bug fix release.
  * https://www.php.net/ChangeLog-8.php#8.1.19
- modified patches
  % php-ar-flags.patch (refreshed)
  % php-build-reproducible-phar.patch (refreshed)
  % php-ini.patch (refreshed)
  % php-systzdata-v23.patch (refreshed)

- downgrade back to 8.1.18
  https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/4ADCEV2FII7J5FZEWREFETTEVX7CDUSR/

- version update to 8.2.5
  * Readonly classes
  * Disjunctive Normal Form (DNF) Types
  * Allow null, false, and true as stand-alone types
  * New "Random" extension
  * Constants in traits
  * Deprecate dynamic properties
  * for details, see
    https://www.php.net/releases/8.2/en.php
    https://www.php.net/manual/en/migration82.php
- modified patches
  % php-ar-flags.patch (refreshed)
  % php-build-reproducible-phar.patch (refreshed)
  % php-ini.patch (refreshed)
- deleted patches
  - php-crypt-tests.patch (not needed)
- modified sources
  % php8.keyring

- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]

- version update to 8.1.18
  * This is a bug fix release.
  https://www.php.net/ChangeLog-8.php#8.1.18
- modified patches
  % php-ar-flags.patch (refreshed)
  % php-build-reproducible-phar.patch (refreshed)
  % php-ini.patch (refreshed)

- version update to 8.1.17
  * This is a bug fix release.
  https://www.php.net/ChangeLog-8.php#8.1.17

- update to newest systzdata patch [bsc#1208199]
- deleted patches
  - php-systzdata-v21.patch (upstreamed)
- added patches
  fix use of the system timezone database
  + php-systzdata-v23.patch

- add "/usr/share/php" to include_path

- allow to specify load order of extensions in %{php_sysconf}/conf.d
  [bsc#1205162]

- change to %bcond conditional build dependencies

- version update to 8.1.16
  * This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
    ([bsc#1208366], [bsc#1208367], [bsc#1208388])
  * https://www.php.net/ChangeLog-8.php#8.1.16

- version update to 8.1.15
  * This is a bug fix release.
  * https://www.php.net/ChangeLog-8.php#8.1.15