Commit b92c1a7f8df for php.net

commit b92c1a7f8dfc069f6bc00e533fe9c026b3d88cf7
Author: Jorg Adam Sowa <jorg.sowa@gmail.com>
Date:   Sun May 24 15:37:17 2026 +0200

    [ci skip] ext/session: add missing NEWS entries (#22098)

    Add NEWS entries for three ext/session changes that were never documented:
    - SameSite cookie validation (GH-21670)
    - session.cookie_lifetime improved parsing (GH-21704)
    - Recursive GC cleanup for nested session directories (GH-21491)

diff --git a/NEWS b/NEWS
index 3bb752f5c8b..d5e3f6d71b9 100644
--- a/NEWS
+++ b/NEWS
@@ -158,6 +158,12 @@ PHP                                                                        NEWS
     (Girgias)
   . Null bytes in session.cookie_path, session.cookie_domain, and
     session.cache_limiter are now rejected with a warning. (jorgsowa)
+  . session.cookie_samesite now rejects invalid values with a warning; only
+    "Strict", "Lax", "None", or "" are accepted. (jorgsowa)
+  . session.cookie_lifetime now rejects non-integer and out-of-range values
+    with a warning. (jorgsowa)
+  . Session file GC now recursively cleans nested subdirectories when
+    session.save_path uses the dirdepth prefix. (jorgsowa)
   . Changed defaults of session.use_strict_mode (now 1), session.cookie_httponly
     (now 1) and session.cookie_samesite (now "Lax"). (jorgsowa)