{"action":"closed","issue":{"url":"https://api.github.com/repos/cloudfoundry/php-buildpack/issues/109","labels_url":"https://api.github.com/repos/cloudfoundry/php-buildpack/issues/109/labels{/name}","comments_url":"https://api.github.com/repos/cloudfoundry/php-buildpack/issues/109/comments","events_url":"https://api.github.com/repos/cloudfoundry/php-buildpack/issues/109/events","html_url":"https://github.com/cloudfoundry/php-buildpack/issues/109","id":110728122,"number":109,"title":"RFC: Drop nginx 1.6.3 from php-buildpack","user":{"login":"flavorjones","id":8207,"avatar_url":"https://avatars.githubusercontent.com/u/8207?v=3","gravatar_id":"","url":"https://api.github.com/users/flavorjones","html_url":"https://github.com/flavorjones","followers_url":"https://api.github.com/users/flavorjones/followers","following_url":"https://api.github.com/users/flavorjones/following{/other_user}","gists_url":"https://api.github.com/users/flavorjones/gists{/gist_id}","starred_url":"https://api.github.com/users/flavorjones/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/flavorjones/subscriptions","organizations_url":"https://api.github.com/users/flavorjones/orgs","repos_url":"https://api.github.com/users/flavorjones/repos","events_url":"https://api.github.com/users/flavorjones/events{/privacy}","received_events_url":"https://api.github.com/users/flavorjones/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2015-10-09T20:10:35Z","updated_at":"2015-12-30T20:30:42Z","closed_at":"2015-12-30T20:30:42Z","body":"# Proposal to drop nginx 1.6.3 support\r\n\r\nThis issue describes a proposal to drop nginx 1.6.3 from the Cloud Foundry `php-buildpack`. The community is asked to comment on this proposal.\r\n\r\n\r\n## The Challenge\r\n\r\nCurrently `php-buildpack` vendors three different versions of `nginx`:\r\n\r\n* 1.9.5 (\"Mainline\")\r\n* 1.8.0 (\"Stable\")\r\n* 1.6.3 (\"Legacy\")\r\n\r\nMy understanding is that security updates will only be provided to \"mainline\" and \"stable\" releases.\r\n\r\n## The Proposal\r\n\r\nI'm proposing here to drop nginx 1.6.3 from the `php-buildpack`, since it appears to be unsupported upstream.\r\n\r\nThis would ideally be implemented no later than `php-buildpack` v4.1.6. (As of this writing, the current is 4.1.4 and [4.1.5 is being cut](https://www.pivotaltracker.com/story/show/105336604)).\r\n\r\n## Action Items\r\n\r\nPlease comment on this ticket! If you're still using nginx 1.6.3 (likely by setting `NGINX_VERSION` in the app's `options.json` file), I'd like to know why, and know whether you'd be able to upgrade.\r\n"}}