Commit affde50531c for php.net

commit affde50531cf6d6ef97df1866d363daa60302e26
Merge: 9f32f90ad35 55d759dc96b
Author: Ilia Alshanetsky <ilia@ilia.ws>
Date:   Mon Aug 17 06:44:29 2026 -0400

    Merge branch 'PHP-8.5'

    * PHP-8.5:
      Fix DOMNameSpaceNode clone UAF after xinclude

diff --cc NEWS
index a75d304276f,1bac1989e7e..8e795015064
--- a/NEWS
+++ b/NEWS
@@@ -5,33 -5,17 +5,35 @@@ PH
  - Core:
    . Fixed bug GH-15375 (Nested "yield from" skips items after a valid() or
      next() call on the inner generator). (iliaal)
 +  . Fixed GH-10497 (Allow direct mutation of objects stored in constants or
 +    class constants via OBJ->prop = $val). (Khaled Alam)
 +  . Reverted GH-22833, which attempted to fix bug GH-18985. (ilutov)
 +
 +- Curl:
 +  . Set content length using CURLOPT_POSTFIELDSIZE_LARGE instead of
 +    CURLOPT_POSTFIELDSIZE. This makes it possible to post strings larger than
 +    2GB on some platforms, e.g. Windows. (Sjoerd Langkemper)

  - DOM:
 +  . Fixed bug GH-22624 (use-after-free via DOMNameSpaceNode after
 +    DOMDocument::xinclude()). (David Carlier)
+   . Fixed a use-after-free when cloning a DOMNameSpaceNode after
+     DOMDocument::xinclude(). (iliaal)

 -- Opcache:
 -  . Fixed opcache.protect_memory race under ZTS. (realFlowControl)
 +- PDO_PGSQL:
 +  . Fixed several lazy fetch (PDO::ATTR_PREFETCH => 0) defects: an infinite
 +    loop when cleaning up a fetch left in a COPY, a use-after-free when a
 +    statement with emulated or disabled prepares is destroyed, a connection
 +    left busy for the next fetch, and rows delivered from a result another
 +    statement took over. (KentarouTakeda)
 +
 +- Phar:
 +  . Fixed Phar archives being automatically detected when ".phar" only occurs
 +    in a directory name or is not a filename extension in an included file's
 +    path. (Weilin Du)

  - Readline:
 -  . Fixed the interactive shell not waiting for the pager process to exit.
 -    (Weilin Du)
 +  . Fixed class constant completion in the interactive shell. (Weilin Du)

  - Zip:
    . Fixed bug GH-17787 (ZipArchive stream stops reading early when the archive