From 2ea5d4166a57b23ada7bc952d26ea7d33f2b5480 Mon Sep 17 00:00:00 2001 From: Adrien Dupuis <61695653+adriendupuis@users.noreply.github.com> Date: Sun, 24 May 2026 16:20:56 +0200 Subject: [PATCH 1/5] update_from_4.6.md: about PHP 8.1 EOL --- docs/update_and_migration/from_4.6/update_from_4.6.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/update_and_migration/from_4.6/update_from_4.6.md b/docs/update_and_migration/from_4.6/update_from_4.6.md index 432e0a2a04..5c3ca79e80 100644 --- a/docs/update_and_migration/from_4.6/update_from_4.6.md +++ b/docs/update_and_migration/from_4.6/update_from_4.6.md @@ -698,7 +698,7 @@ If you're using PHP 7.4 or 8.0, to do the [[= product_name =]] update, you have #### Update PHP, the custom code, then the platform (recommended) -Make sure to use on PHP 8.1 or higher. +Make sure to use PHP 8.1 minimum. Notice that PHP 8.1 has reached its End of Life so you should consider using PHP 8.2 or higher. Migrate custom code to be compatible with PHP 8.1 or higher, for example by using [Rector](https://github.com/rectorphp/rector). Then, update Ibexa DXP. From aa876bf4629ff4d30e64c828b3cd33683b6fb952 Mon Sep 17 00:00:00 2001 From: Adrien Dupuis <61695653+adriendupuis@users.noreply.github.com> Date: Sun, 24 May 2026 16:21:33 +0200 Subject: [PATCH 2/5] requirements.md: about PHP 8.1 EOL --- docs/getting_started/requirements.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/docs/getting_started/requirements.md b/docs/getting_started/requirements.md index d91ceb5937..6139aa38a6 100644 --- a/docs/getting_started/requirements.md +++ b/docs/getting_started/requirements.md @@ -143,10 +143,10 @@ For production setups it's recommended that you use Varnish/Fastly, Redis/Valkey - 8.3 - 8.2 - - 8.1 - - 8.0 (PHP 8.0 has reached its End of Life. Unless you have extended support from vendors like Debian or Zend, you should use PHP 8.1) - - 7.4 (PHP 7.4 has reached its End of Life. Unless you have extended support from vendors like Debian or Zend, you should use PHP 8.1) - - 7.3 (PHP 7.3 has reached its End of Life. Unless you have extended support from vendors like Debian or Zend, you should use PHP 8.1) + - 8.1 (PHP 8.1 has reached its End of Life. Unless you have extended support from vendors like Debian or Zend, you should use PHP 8.2) + - 8.0 (PHP 8.0 has reached its End of Life. Unless you have extended support from vendors like Debian or Zend, you should use PHP 8.2) + - 7.4 (PHP 7.4 has reached its End of Life. Unless you have extended support from vendors like Debian or Zend, you should use PHP 8.2) + - 7.3 (PHP 7.3 has reached its End of Life. Unless you have extended support from vendors like Debian or Zend, you should use PHP 8.2) ### PHP extensions From 0bc098c8bb2855239135db1f399b6773b835d757 Mon Sep 17 00:00:00 2001 From: Adrien Dupuis <61695653+adriendupuis@users.noreply.github.com> Date: Sun, 24 May 2026 16:21:59 +0200 Subject: [PATCH 3/5] requirements.md: about SF SA --- docs/getting_started/requirements.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/getting_started/requirements.md b/docs/getting_started/requirements.md index 6139aa38a6..e231c1cb67 100644 --- a/docs/getting_started/requirements.md +++ b/docs/getting_started/requirements.md @@ -136,8 +136,8 @@ For production setups it's recommended that you use Varnish/Fastly, Redis/Valkey - 8.3 - 8.2 - 8.1 (PHP 8.1 has reached its End of Life. Unless you have extended support from vendors like Debian or Zend, you should use PHP 8.2) - - 8.0 (PHP 8.0 has reached its End of Life. Unless you have extended support from vendors like Debian or Zend, you should use PHP 8.2) - - 7.4 (PHP 7.4 has reached its End of Life. Unless you have extended support from vendors like Debian or Zend, you should use PHP 8.2) + - 8.0 (PHP 8.0 has reached its End of Life. Several Symfony dependencies security fixes are not available. Unless you have extended support from vendors like Debian or Zend, you should use PHP 8.2) + - 7.4 (PHP 7.4 has reached its End of Life. Several Symfony dependencies security fixes are not available. Unless you have extended support from vendors like Debian or Zend, you should use PHP 8.2) === "[[= product_name =]] v3.3" From fb4918d65dda7078e2dcc3be11b547ab3fa61a04 Mon Sep 17 00:00:00 2001 From: Adrien Dupuis <61695653+adriendupuis@users.noreply.github.com> Date: Sun, 24 May 2026 16:24:12 +0200 Subject: [PATCH 4/5] install_ibexa_dxp.md: PHP 8.0 & 7.4 --- docs/getting_started/install_ibexa_dxp.md | 95 ++++++++++++++++++++++- 1 file changed, 93 insertions(+), 2 deletions(-) diff --git a/docs/getting_started/install_ibexa_dxp.md b/docs/getting_started/install_ibexa_dxp.md index 4049b64358..a7ba912384 100644 --- a/docs/getting_started/install_ibexa_dxp.md +++ b/docs/getting_started/install_ibexa_dxp.md @@ -134,9 +134,9 @@ To use Composer to instantly create a project in the current folder with all the composer create-project ibexa/commerce-skeleton . ``` -??? note "Using PHP versions other than 8.3" +??? note "Using PHP versions 8.4, 8.2, or 8.1" - If you aren't using PHP 8.3 but are using PHP 8.4, PHP 8.2, or any older version, use a different set of commands: + If you are using PHP 8.4 (recommended), 8.2, or 8.1 (not recommended as has reached End of Life), use a different set of commands: === "[[= product_name_headless =]]" @@ -159,6 +159,97 @@ To use Composer to instantly create a project in the current folder with all the composer update ``` +??? note "Using PHP versions 8.0 or older" + + If you aren't using PHP 8.1 or higher, but are using PHP 8.0 or 7.4 (disrecommended as both have reached End of Life), use a different set of commands to ignore security advisories: + + === "[[= product_name_headless =]]" + + ``` bash + composer create-project ibexa/headless-skeleton --no-install . + composer config audit.ignore --json '{ + "GHSA-68jq-c3rv-pcrr": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "GHSA-fc86-6rv6-2jpm": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "GHSA-r7cg-qjjm-xhqq": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-5k7f-wvjj-jrgw": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-sjvz-tbbr-vwth": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-h8hf-ytnd-5t9q": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-wwb1-81rc-pd65": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-hgmw-wn4d-hpcy": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-kvv6-36cr-fkzb": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-n14z-jjjg-g8vd": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-3mcc-k66d-pydb": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-gw7n-z4yx-7xjt": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-dpx1-78wg-1kqs": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-21g2-dzjv-sky5": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-yhcn-xrg3-68b1": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-2wrf-1xmk-1pky": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-6319-ffpf-gx66": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-n7sg-8f52-pqtf": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-8kk8-h2xr-h5nx": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-2rbx-bjdx-4d4d": "As this is for code quality tests and not to run a production DXP, this can be ignored." + }' + composer update + ``` + + === "[[= product_name_exp =]]" + + ``` bash + composer create-project ibexa/experience-skeleton --no-install . + composer config audit.ignore --json '{ + "GHSA-68jq-c3rv-pcrr": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "GHSA-fc86-6rv6-2jpm": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "GHSA-r7cg-qjjm-xhqq": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-5k7f-wvjj-jrgw": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-sjvz-tbbr-vwth": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-h8hf-ytnd-5t9q": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-wwb1-81rc-pd65": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-hgmw-wn4d-hpcy": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-kvv6-36cr-fkzb": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-n14z-jjjg-g8vd": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-3mcc-k66d-pydb": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-gw7n-z4yx-7xjt": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-dpx1-78wg-1kqs": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-21g2-dzjv-sky5": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-yhcn-xrg3-68b1": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-2wrf-1xmk-1pky": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-6319-ffpf-gx66": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-n7sg-8f52-pqtf": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-8kk8-h2xr-h5nx": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-2rbx-bjdx-4d4d": "As this is for code quality tests and not to run a production DXP, this can be ignored." + }' + composer update + ``` + + === "[[= product_name_com =]]" + + ``` bash + composer create-project ibexa/commerce-skeleton --no-install . + composer config audit.ignore --json '{ + "GHSA-68jq-c3rv-pcrr": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "GHSA-fc86-6rv6-2jpm": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "GHSA-r7cg-qjjm-xhqq": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-5k7f-wvjj-jrgw": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-sjvz-tbbr-vwth": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-h8hf-ytnd-5t9q": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-wwb1-81rc-pd65": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-hgmw-wn4d-hpcy": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-kvv6-36cr-fkzb": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-n14z-jjjg-g8vd": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-3mcc-k66d-pydb": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-gw7n-z4yx-7xjt": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-dpx1-78wg-1kqs": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-21g2-dzjv-sky5": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-yhcn-xrg3-68b1": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-2wrf-1xmk-1pky": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-6319-ffpf-gx66": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-n7sg-8f52-pqtf": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-8kk8-h2xr-h5nx": "As this is for code quality tests and not to run a production DXP, this can be ignored.", + "PKSA-2rbx-bjdx-4d4d": "As this is for code quality tests and not to run a production DXP, this can be ignored." + }' + composer update + ``` + !!! tip "Authentication token" If you added credentials to the `COMPOSER_AUTH` variable, at this point add this variable to `auth.json` (for example, by running `echo $COMPOSER_AUTH > auth.json`). From bd8aaee7cc0216532bb18d0ec6ceba5769d55bdd Mon Sep 17 00:00:00 2001 From: Adrien Dupuis <61695653+adriendupuis@users.noreply.github.com> Date: Sun, 24 May 2026 16:24:56 +0200 Subject: [PATCH 5/5] install_ibexa_dxp.md: PHP 8.4 & 8.3 --- docs/getting_started/install_ibexa_dxp.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/getting_started/install_ibexa_dxp.md b/docs/getting_started/install_ibexa_dxp.md index a7ba912384..589571b48f 100644 --- a/docs/getting_started/install_ibexa_dxp.md +++ b/docs/getting_started/install_ibexa_dxp.md @@ -114,7 +114,7 @@ This operation is performed only once, when you install [[= product_name =]] for To use Composer to instantly create a project in the current folder with all the dependencies, run the following command: -!!! note "Using PHP 8.3" +!!! note "Using PHP 8.4 or 8.3" === "[[= product_name_headless =]]" @@ -134,7 +134,7 @@ To use Composer to instantly create a project in the current folder with all the composer create-project ibexa/commerce-skeleton . ``` -??? note "Using PHP versions 8.4, 8.2, or 8.1" +??? note "Using PHP versions 8.2 or 8.1" If you are using PHP 8.4 (recommended), 8.2, or 8.1 (not recommended as has reached End of Life), use a different set of commands: