PHP 8.5 compatibility

[samdark]

https://www.php.net/releases/8.5/en.php

1. Add to CI
2. See what happens

[marcovtwout]

From the migration docs:

• Backward incompatible changes: https://www.php.net/manual/en/migration85.incompatible.php
• Deprecated features: https://www.php.net/manual/en/migration85.deprecated.php

Note that the test suite by default runs without outputting deprecation messages.

[Justinas-Jurciukonis]

vendor/yiisoft/yii/framework/db/schema/CDbColumnSchema.php
vendor/yiisoft/yii/framework/web/helpers/CJSON.php

• Deprecated: Non-canonical cast (integer) is deprecated, use the (int) cast instead
• Deprecated: Non-canonical cast (boolean) is deprecated, use the (bool) cast instead

[mbvb1223]

I love Yii 👍

[piddubnij]

The imagedestroy() function has been deprecated, as GdImage objects are freed automatically.
https://www.php.net/manual/en/migration85.deprecated.php#migration85.deprecated.gd

framework/web/widgets/captcha/CCaptchaAction.php#L289

[jjdunn]

https://www.php.net/manual/en/migration85.deprecated.php

The __sleep() and __wakeup() magic methods have been soft-deprecated. The __serialize() and __unserialize() magic methods should be used instead, or at the same time if compatibility with PHP 7 is required.

__sleep is used in :

• /caching/dependencies/CDbCacheDependency
• /db/CDbCommand
• /db/CDbConnection
• /db/ar/CActiveRecord

__wakeup is used in:

• /db/schema/CDbCriteria

[marcovtwout]

About migrating __sleep/__wakeup:

https://www.php.net/manual/en/language.oop5.magic.php#language.oop5.magic.serialize

__serialize() and __unserialize() (..) This feature is available as of PHP 7.4.0.

If we migrate those completely, we have to raise minimum PHP version to 7.4 and since they are public functions it breaks backward compatibility. Since they are only soft-deprecated we can choose to keep them for now.

[jjdunn]

About migrating __sleep/__wakeup:

https://www.php.net/manual/en/language.oop5.magic.php#language.oop5.magic.serialize

__serialize() and __unserialize() (..) This feature is available as of PHP 7.4.0.

If we migrate those completely, we have to raise minimum PHP version to 7.4 and since they are public functions it breaks backward compatibility. Since they are only soft-deprecated we can choose to keep them for now.

I asked Google Gemini, which says that both methods (old/new) can be used. PHP 8.5 will use the newer __serialize() and __unserialize; and PHP <= 8.4 will ignore the new methods and use the older __sleep() and __wakeup().

Gemini said:

To make your code backward compatible when migrating to PHP 8.5, you must implement both the new serialization magic methods (__serialize / __unserialize) and the legacy magic methods (__sleep / __wakeup) side by side.In PHP 8.5, __sleep() and __wakeup() are deprecated, but they still function. By providing both in the same class, you satisfy the requirements for both older PHP versions and the modern PHP 8.5 ecosystem.How to implement both methodsThe modern __serialize() returns the entire state as an associative array. You can use the values from this array to populate the return for the legacy __sleep().php<?php

Gemini code example:

class MyClass {
    private string $name;
    private int $id;

    // --- MODERN APPROACH (PHP 8.5+) ---
    
    public function __serialize(): array {
        return [
            'name' => $this->name,
            'id' => $this->id,
        ];
    }

    public function __unserialize(array $data): void {
        $this->name = $data['name'];
        $this->id = $data['id'];
    }

    // --- LEGACY APPROACH (PHP 7 / 8.0 - 8.[4](https://www.amitmerchant.com/everything-that-is-coming-in-php-85/)) ---

    public function __sleep(): array {
        // Return the list of properties to serialize
        return ['name', 'id'];
    }

    public function __wakeup(): void {
        // Restore object state manually if needed, or re-run setup
    }
}

Use code with caution.

Why this works

PHP 8.5 and newer prioritize __serialize() and __unserialize(). If they are present, PHP will completely ignore __sleep() and __wakeup(), preventing the deprecation notice.Older PHP versions do not recognize __serialize() and will simply ignore it, falling back to the legacy __sleep() and __wakeup() mechanisms as expected.