When is WHMCS going to update vendor libraries to newer versions?

[ptomter]

I have used whmcs since 2004 and after had 2 years break now from whmcs I am shoked that whmcs stil does not update vendor libs to newer version even when they contains security risks and other updates that make the code more stable.

To start with theese as a minimum should be updated and have trouble with php versions over 8.0

Composer 1.10.6 from 2020 now its version 2.8.8
Guzzle 7.0.1 from 2020 now its Version 7.9.3
Promises 1.4.0 from 2020 now its version 2.2.0
tecnickcom 6.2.25 from 2018 now its version 6.9.3

Other libs are also outdated…
Illuminate, phpseclib… so on

I cant see in 8.13 they are updated. What is whmcs plans to update vendor libs? If any...

Edited Sunday at 06:03 PM by ptomter

[Kane William]

WHMCS has not provided a specific timeline for updating vendor libraries, but yes I am sure, they will release something new in the future.

Thanks

[ptomter]

3 minutes ago, Kane William said:

WHMCS has not provided a specific timeline for updating vendor libraries, but yes I am sure, they will release something new in the future.

Thanks

With all due respect, thank you for your input, but I am hoping to hear from WHMCS staff regarding this matter also. .

 I have  used WHMCS since 2004.. and it has newer been prioritized. 

And not updated since 2020 and earlier.. just dont get my faight that this will be done quickly. Yes in the feature it might be.. but feature.. could be another 2 years.. or more..  leaving us that use whmcs with custom scripts, modules and so on have this vendor libs updated and provided in additonal, as we cant use the one that is with WHMCS as they are to old..

Many vendor libs should be straight farward for WHCMS to update. like the TCPDF from Tecnickom .. and the composer..

[WHMCS John]

Hi @ptomter,

We follow semantic versioning, so these kinds of updates which would introduce backwards incompatible changes will take place in a major version increment (ie. version 9) and will require an increase in the minimum PHP requirements.

We monitor CVEs to ensure that any potential upstream security concerns are either not applicable to our implementation or patched.

We don't currently have any information to share about version 9.