Page MenuHomePhabricator
Create Task
Maniphest T397068

Upgrade psr/http-message to 2.0 or later
Closed, ResolvedPublic
Actions

Description

As of 2025-12-31

reedy@ubuntu64-web-esxi:/var/www/wiki/mediawiki/vendor$ php8.3 `which composer` depends psr/http-message
__root__              dev-master  requires psr/http-message (1.1)
guzzlehttp/psr7       2.8.0       requires psr/http-message (^1.1 || ^2.0)
league/oauth2-server  9999999-dev requires psr/http-message (^1.0.1)
league/uri            6.8.0       requires psr/http-message (^1.0.1)
league/uri-components 2.4.2       requires psr/http-message (^1.0)
psr/http-client       1.0.3       requires psr/http-message (^1.0 || ^2.0)
psr/http-factory      1.1.0       requires psr/http-message (^1.0 || ^2.0)

Details

Related Changes in Gerrit:
Show related patches Customize query in gerrit

Related Objects
Search...

Event Timeline

Reedy created this task.Jun 16 2025, 4:11 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJun 16 2025, 4:11 PM
Reedy added subtasks: T363639: web-auth/webauthn-lib must be upgraded to 4+ for PHP 8.2+ support, T261462: Migrate OAuth extension back from wikimedia/oauth2-server fork to upstream.Jun 16 2025, 4:11 PM
Reedy updated the task description. (Show Details)Jun 16 2025, 4:16 PM
Reedy renamed this task from Upgrade to psr/http-message 2.0 to Upgrade psr/http-message to 2.0 or later.Jun 16 2025, 4:29 PM
Krinkle mentioned this in T363639: web-auth/webauthn-lib must be upgraded to 4+ for PHP 8.2+ support.Jun 23 2025, 3:05 AM
Krinkle mentioned this in T360995: Migrate Wikimedia production from PHP 8.1 to PHP 8.3.Aug 8 2025, 12:56 AM
Reedy added a subtask: T389272: MWCallbackStream write method has a differing signature to upstream libraries.Aug 15 2025, 12:39 PM
• Tgr added a subtask: T393848: GoogleLogin extension ships with incompatible version of psr/http-message.Aug 31 2025, 8:54 PM
Reedy closed subtask T363639: web-auth/webauthn-lib must be upgraded to 4+ for PHP 8.2+ support as Resolved.Sep 23 2025, 12:27 PM
Jdforrester-WMF subscribed.Dec 1 2025, 6:21 PM

As of today:

Problem 1
  - Root composer.json requires league/oauth2-server dev-v9.0.0-alpha#61d770dc284898ea2905d66e12f8f7e5f6664092 as 9.0.0 -> satisfiable by league/oauth2-server[dev-v9.0.0-alpha].
  - league/oauth2-server dev-v9.0.0-alpha requires psr/http-message ^1.0.1 -> found psr/http-message[1.0.1, 1.1] but it conflicts with your root composer.json require (2.0).
Problem 2
  - Root composer.json requires league/uri 6.8.0 -> satisfiable by league/uri[6.8.0].
  - league/uri 6.8.0 requires psr/http-message ^1.0.1 -> found psr/http-message[1.0.1, 1.1] but it conflicts with your root composer.json require (2.0).
Problem 3
  - Root composer.json requires league/uri-components 2.4.2 -> satisfiable by league/uri-components[2.4.2].
  - league/uri-components 2.4.2 requires psr/http-message ^1.0 -> found psr/http-message[1.0, 1.0.1, 1.1] but it conflicts with your root composer.json require (2.0).
Reedy removed a subtask: T389272: MWCallbackStream write method has a differing signature to upstream libraries.Dec 31 2025, 4:08 PM
Reedy added a parent task: T389272: MWCallbackStream write method has a differing signature to upstream libraries.
Reedy updated the task description. (Show Details)Dec 31 2025, 4:14 PM
gerritbot added a comment.Dec 31 2025, 7:39 PM

Change #1222276 had a related patch set uploaded (by Reedy; author: Reedy):

[mediawiki/extensions/WebAuthn@master] composer.json: Allow psr/http-message ^2.0

https://gerrit.wikimedia.org/r/1222276

gerritbot added a project: Patch-For-Review.Dec 31 2025, 7:39 PM

Change #1222277 had a related patch set uploaded (by Reedy; author: Reedy):

[mediawiki/extensions/Wikibase@master] composer.json: Allow psr/http-message ^2.0.0

https://gerrit.wikimedia.org/r/1222277

gerritbot added a comment.Dec 31 2025, 7:41 PM

Change #1222278 had a related patch set uploaded (by Reedy; author: Reedy):

[mediawiki/core@master] Upgrade psr/http-message and lcobucci/jwt

https://gerrit.wikimedia.org/r/1222278

gerritbot added a comment.Dec 31 2025, 7:43 PM

Change #1222278 abandoned by Reedy:

[mediawiki/core@master] Upgrade psr/http-message and lcobucci/jwt

https://gerrit.wikimedia.org/r/1222278

gerritbot added a comment.Dec 31 2025, 7:44 PM

Change #1222279 had a related patch set uploaded (by Reedy; author: Reedy):

[mediawiki/core@master] Upgrade psr/http-message and lcobucci/jwt

https://gerrit.wikimedia.org/r/1222279

gerritbot added a comment.Dec 31 2025, 8:02 PM

Change #1222278 restored by Reedy:

[mediawiki/core@master] Upgrade psr/http-message and lcobucci/jwt

https://gerrit.wikimedia.org/r/1222278

gerritbot added a comment.Dec 31 2025, 8:03 PM

Change #1222278 abandoned by Reedy:

[mediawiki/core@master] Upgrade psr/http-message and lcobucci/jwt

https://gerrit.wikimedia.org/r/1222278

Reedy added a comment.Dec 31 2025, 8:22 PM

This might end up being dependancy hell with the gate and stuff...

Vendor, MW Core, OAuth, WebAuthn (though not gated), Wikibase...

I suspect it's going to need a force merge of one or two (probably Wikibase in this case), and then let CI push the rest through.

May want to get one train out of the way next week in the new year though first...

Reedy added a comment.Jan 1 2026, 3:11 AM

Ok, patches are up, probably need some commit summary improvements, and some RELEASE-NOTES where appropriate.

Vendor fails because of changes needed in core... Core will pass with it depending on a Wikibase patch. Another Wikibase patch depending on core (and the first Wikibase patch) prove that tests pass, it's just a dependancy cycle. OAuth passing depending on Core and down.

Vendor will need force merging, so will the Wikibase patch, but then the core patch should merge fine, and so will any other related ones...

Reedy mentioned this in T261462: Migrate OAuth extension back from wikimedia/oauth2-server fork to upstream.Jan 1 2026, 3:13 AM
gerritbot added a comment.Jan 13 2026, 7:29 PM

Change #1222276 merged by jenkins-bot:

[mediawiki/extensions/WebAuthn@master] composer.json: Allow psr/http-message ^2.0

https://gerrit.wikimedia.org/r/1222276

Reedy closed subtask T393848: GoogleLogin extension ships with incompatible version of psr/http-message as Resolved.Jan 29 2026, 2:52 AM
gerritbot added a comment.Feb 12 2026, 3:22 PM

Change #1222277 merged by Gergő Tisza:

[mediawiki/extensions/Wikibase@master] composer.json: Upgrade to psr/http-message ^2.0.0

https://gerrit.wikimedia.org/r/1222277

Lucas_Werkmeister_WMDE mentioned this in T417292: Wikibase secondary CI broken: cannot install psr/http-message.Feb 12 2026, 3:34 PM
ReleaseTaggerBot added a project: MW-1.46-notes (1.46.0-wmf.16; 2026-02-17).Feb 12 2026, 4:00 PM
gerritbot added a comment.Feb 12 2026, 4:25 PM

Change #1222279 merged by jenkins-bot:

[mediawiki/core@master] Upgrade psr/http-message and lcobucci/jwt

https://gerrit.wikimedia.org/r/1222279

gerritbot added a comment.Feb 12 2026, 4:58 PM

Change #1239168 had a related patch set uploaded (by Reedy; author: Reedy):

[mediawiki/extensions/OATHAuth@master] composer.json: Stop allowing psr/http-message ^1.0

https://gerrit.wikimedia.org/r/1239168

Reedy closed this task as Resolved.Feb 12 2026, 5:00 PM
Reedy claimed this task.
gerritbot added a comment.Feb 12 2026, 5:46 PM

Change #1239168 merged by jenkins-bot:

[mediawiki/extensions/OATHAuth@master] composer.json: Stop allowing psr/http-message ^1.0

https://gerrit.wikimedia.org/r/1239168

gerritbot added a comment.Feb 12 2026, 5:50 PM

Change #1239179 had a related patch set uploaded (by Reedy; author: Reedy):

[mediawiki/extensions/Wikibase@REL1_45] composer.json: Upgrade to psr/http-message ^2.0.0

https://gerrit.wikimedia.org/r/1239179

gerritbot added a comment.Feb 12 2026, 5:50 PM

Change #1239180 had a related patch set uploaded (by Reedy; author: Reedy):

[mediawiki/extensions/Wikibase@REL1_44] composer.json: Upgrade to psr/http-message ^2.0.0

https://gerrit.wikimedia.org/r/1239180

gerritbot added a comment.Feb 12 2026, 5:50 PM

Change #1239181 had a related patch set uploaded (by Reedy; author: Reedy):

[mediawiki/extensions/Wikibase@REL1_43] composer.json: Upgrade to psr/http-message ^2.0.0

https://gerrit.wikimedia.org/r/1239181

gerritbot added a comment.Feb 12 2026, 5:52 PM

Change #1239182 had a related patch set uploaded (by Reedy; author: Reedy):

[mediawiki/core@REL1_45] Upgrade psr/http-message and lcobucci/jwt

https://gerrit.wikimedia.org/r/1239182

gerritbot added a comment.Feb 12 2026, 5:58 PM

Change #1239185 had a related patch set uploaded (by Reedy; author: Reedy):

[mediawiki/core@REL1_44] Upgrade psr/http-message

https://gerrit.wikimedia.org/r/1239185

gerritbot added a comment.Feb 12 2026, 5:58 PM

Change #1239187 had a related patch set uploaded (by Reedy; author: Reedy):

[mediawiki/core@REL1_43] Upgrade psr/http-message

https://gerrit.wikimedia.org/r/1239187

gerritbot added a comment.Feb 12 2026, 8:42 PM

Change #1239234 had a related patch set uploaded (by Gergő Tisza; author: Gergő Tisza):

[mediawiki/core@master] Add release notes for PSR-7 change

https://gerrit.wikimedia.org/r/1239234

gerritbot added a comment.Feb 13 2026, 3:17 PM

Change #1239234 merged by jenkins-bot:

[mediawiki/core@master] RELEASE-NOTES-1.46: Add note for PSR-7 change

https://gerrit.wikimedia.org/r/1239234

Reedy changed the status of subtask T261462: Migrate OAuth extension back from wikimedia/oauth2-server fork to upstream from Stalled to Open.Mar 9 2026, 10:04 PM
matmarex closed subtask T261462: Migrate OAuth extension back from wikimedia/oauth2-server fork to upstream as Resolved.Tue, Mar 17, 7:39 PM
matmarex reopened subtask T261462: Migrate OAuth extension back from wikimedia/oauth2-server fork to upstream as Open.Tue, Mar 31, 2:32 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits