A PHP developer who wrote a 174-line temporary polyfill for http_build_url() in 2014 has deprecated it after discovering it accumulated nearly 20 million installs across Packagist, WordPress plugins, and Linux distributions. The package contained a bug where trailing slashes corrupted paths containing the letter 'a', and the author chose deprecation over maintenance to avoid security risks associated with widely-installed packages changing hands.
PHP 8.6 releases November 19, 2026, introducing partial function application for creating closures with placeholder arguments, a clamp() function for bounding values, a Duration class for precise time measurements, readonly property defaults, parameter doc comments, and a unified polling API for event-driven programming.