Security: Upgrade to PHP 8.x (7.4 is EOL) and ensure CI compatibility
Open
Nobody has claimed this yet.
- Dominant language
- PHP
- Stars
- 755
- Forks
- 128
- PR merge metrics
- No merged PRs in 30d
Description
The Dockerfile uses php:7.4.33-apache, but PHP 7.4 reached end-of-life in Nov 2022 and no longer receives security fixes.
Why this matters
- Security: No upstream patches for CVEs.
- Ecosystem: Many libs drop 7.4 support.
Proposed plan
- Bump base image to
php:8.2-apache(or 8.3). - Run the app and fix PHP 8 compatibility issues (CI3 uses some deprecated behaviors).
- Run unit/integration tests (if available).
- Update docs re: minimum PHP version.
Acceptance criteria
- Server builds and runs on PHP 8.2+.
- Smoke test of API endpoints passes (data upload/download, runs, flows).
- No fatal errors in logs.
References
docker/Dockerfilecurrently pins PHP 7.4.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with docker/Dockerfile and the current PHP 7.4 base image, then build and run the application on PHP 8.2 or newer. Run the available unit or integration tests and smoke-test data upload/download, runs, and flows; done means the server builds and runs, endpoints pass, and logs show no fatal errors.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- docker, php
- Domain
- devops
- Issue type
- Refactor
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100