Nine of my PHP extensions shipped today, and almost none of it is new features. php_excel's local saves stream again instead of buffering the whole workbook: 67.7 MB peak RSS to 0.7 MB. pdo_duckdb re-latches its open_basedir sandbox per chunk instead of per row: 133 ns/row back to 51. phpser closed three use-after-frees, one reachable by anyone with the signing key. Most of the perf work paid back what the hardening cost. https://ilia.ws/blog/the-cost-of-failing-closed-what-shipped-across-nine-php-extensions #php #extension #performance