Repository navigation
Prepare PHP SDK 3.18.0 - #405
Conversation
|
|
Security PASS for exact head The reviewed release delta is limited to the four 3.18.0 metadata surfaces (changelog, product train, quickstart identities and Laravel channel). The identity set is coherent and describes only the reviewed #402 experimental cancellation-cause parser/timeout subtype; it does not advertise timeout-cleanup capability or native end-to-end delivery. There is no dependency, workflow or runtime-code change in this release PR. All 35 current-head checks are green, including PHP 8.1–8.4, Carbon 2, package smoke, regression corpus, documentation compatibility, CodeQL/Sonar, public-boundary checks and target-branch qualification. Merge/release only at this exact head. Any head or source change requires counter-review. |
|
Published 3.18.0 after green main CI 43404451405 and Security PASS at release head 7a4f205. Annotated tag object e266bed3c7ab9f186bd3cc7842af09be803a61fe points to release merge 345b124; tree matches the reviewed head. GitHub Release is Latest, and Packagist source/dist both resolve to that exact merge. Installed parser/replayer checks and the existing qualified published worker/native check are now running. Full timeout-cleanup delivery remains server#1201; the separate aggregate-planning limitation is explicit in the release notes. |
|
Installed verification PASS. A clean Packagist consumer installs SDK 3.18.0 at source/dist reference 345b124; reflection verifies Client, CancellationContext and the timeout subtype load only from that installed package. All 17 cause/parser/replay/message vectors pass (69 assertions) on PHP 8.5.12 using immutable composer@sha256:2cf275428757e5435a667bfc0d038b14520ca02be2b1b70d44a05c8c19e2de48. The qualified bound-PHP8.3 published worker/native check also passes: https://github.com/durable-workflow/sdk-php/actions/runs/43405593928 (SDK3.18.0 + immutable native3.8.0). It completes a real workflow/activity and verifies all five worker instruments. This qualifies preparatory parsing and ordinary compatibility; native timeout cleanup remains server#1201. |
|
Consumer review: Sample App runtime constraint ^3.11.0 already admits 3.18.0, while its existing SDK3.11.0 lock remains under the Sample App owner’s separately qualified tuple refresh. Waterline has SDK3.16.0 only as a development test dependency. Server and current CLI declare no PHP SDK dependency. The experimental parser introduces no runtime dependency/protocol/capability change, so these consumers need no version-only release or image rebuild. PHP portal still presents ^3.17 from the build before tag publication; the existing protected portal workflow is dispatched for exact stable tag3.18.0, and its user-visible result will be checked. |
|
PHP portal publication is verified after exact-tag workflow43406386597: the live homepage now recommends durable-workflow/sdk:^3.18. Root documentation manifest adoption is owned by the docs agent in existing docs#532; they confirmed the3.18 pointer will be included without a timeout-cleanup capability claim. No consumer runtime rebuild or version-only release is required for this experimental parser addition. |
Releases the Security-reviewed experimental cancellation-cause parser and timeout subtype from #402.
Four metadata files only: changelog date/version, Composer product train, quickstart package requirements and Laravel adoption channel. The context reads cause only; timeout kind/work deadline remain history-event fields. The SDK does not advertise timeout_cleanup, and native end-to-end delivery remains server#1201.
Validation: RELEASE_TAG=3.18.0 composer check-release-identity passes with durable-workflow-php/3.18.0 and no advisories. #402 source checks and Security exact-head review passed. After merge and green main: annotated tag, GitHub release, Packagist install verification, installed parser/replayer vectors and the qualified published worker metrics/native compatibility check. No other consumer needs a version-only release.