March PHP Releases

php 8.4.18
php 8.5.30

MySQL 9.6.0, 8.4.8 & 8.0.45

Update php module properties (#70)

Auto-generated from release php-2026.3.4

Co-authored-by: N6REJ <1850089+N6REJ@users.noreply.github.com>

Python 3.14.2

Update php module properties (#63)

Auto-generated from release php-2026.1.16

Co-authored-by: N6REJ <1850089+N6REJ@users.noreply.github.com>

PHP January release

8.5.2
8.4.17
8.3.30
8.2.30

Nodejs-25.3.0

nodejs-2026.1.15

Update Node.js link to latest version

Ruby 4.0.0

Remove Python version 3.14.2.7 from properties

Removed outdated Python version reference.

Perl 5.42.0

Update nodejs module properties (#52)

Auto-generated from release nodejs-2026.1.15

Co-authored-by: N6REJ <1850089+N6REJ@users.noreply.github.com>

Ngrok 3.35.0

Update memcached module properties (#50)

Auto-generated from release Memcached-2026.1.15

Co-authored-by: N6REJ <1850089+N6REJ@users.noreply.github.com>

Memcached 1.6.40

Update mailpit module properties (#49)

Auto-generated from release Mailpit-2026.1.15

Co-authored-by: N6REJ <1850089+N6REJ@users.noreply.github.com>

Mailpit 1.28.2 Security fix

This release includes an important security fix, so upgrading is strongly recommended.

This is a security release to address CVE-2026-22689 which allowed unauthenticated browser access to the websocket which provides the real-time web UI updates when new messages are received. A huge thanks to the security researcher (@omarkurt) who reported this issue responsibly.

Security

• Prevent Cross-Site WebSocket Hijacking (CSWSH) allowing unauthenticated access to message data CVE-2026-22689

Feature

• Allow default relay addresses to be set when releasing message (#594)

Chore

• Remove webkit warnings about missing template / render functions
• Avoid empty URL query parameter when returning to inbox from message view