PERL5260DELTA(1perl)

📦

version 5.44.0 · 2 versions

5.44.0 · arch rolling (latest)
5.42.3 · arch rolling

💖 PERL5260DELTA(1perl) — perl5260delta 💖

okay so bestie, welcome to the PERL5260DELTA(1perl) page from the Perl Programmers Reference Guide. This is literally the tea on perl5260delta, and we're about to get into it. 💅

✨ NAME ✨

perl5260delta - what is new for perl v5.26.0

🌸 DESCRIPTION 🌸

This document describes the differences between the 5.24.0 release and the 5.26.0 release. periodt, that's the overview.

🚨 Notice 🚨

This release includes three updates with widespread effects:

"." no longer in @INC — bestie, for security reasons, the current directory (".") is no longer included by default at the end of the module search path (@INC). This may have widespread implications for the building, testing and installing of modules, and for the execution of scripts. See the section "Removal of the current directory (".") from @INC" for the full details. 😭
do may now warn — do now gives a deprecation warning when it fails to load a file which it would have loaded had "." been in @INC. ngl, keep an eye on that.
In regular expression patterns, a literal left brace { should be escaped — See "Unescaped literal "{" characters in regular expression patterns are no longer permissible". iykyk 💅

👑 Core Enhancements 👑

🦋 Lexical subroutines are no longer experimental 🦋

Using the lexical_subs feature introduced in v5.18 no longer emits a warning. Existing code that disables the experimental::lexical_subs warning category that the feature previously used will continue to work. The lexical_subs feature has no effect; all Perl code can use lexical subroutines, regardless of what feature declarations are in scope. slay, no more experimental warning energy. ✨

🐚 Indented Here-documents 🐚

This adds a new modifier ~ to here-docs that tells the parser that it should look for /^\s*$DELIM\n/ as the closing delimiter. iconic.

These syntaxes are all supported:

<<~EOF;
<<~\EOF;
<<~'EOF';
<<~"EOF";
<<~`EOF`;
<<~ 'EOF';
<<~ "EOF";
<<~ `EOF`;

The ~ modifier will strip, from each line in the here-doc, the same whitespace that appears before the delimiter.

Newlines will be copied as-is, and lines that don't include the proper beginning whitespace will cause perl to croak. fr fr, don't skip that whitespace.

For example:

           if (1) {
             print <<~EOF;
               Hello there
               EOF
           }

prints "Hello there\n" with no leading whitespace. ate 💅

🌈 New regular expression modifier `/xx` 🌈

Specifying two x characters to modify a regular expression pattern does everything that a single one does, but additionally TAB and SPACE characters within a bracketed character class are generally ignored and can be added to improve readability, like /[ ^ A-Z d-f p-x ]/xx. Details are at "/x and /xx" in perlre. obsessed.

🎀 `"@{^CAPTURE}"`, `"%{^CAPTURE}"`, and `"%{^CAPTURE_ALL}"` 🎀

"@{^CAPTURE}" exposes the capture buffers of the last match as an array. So $1 is ${^CAPTURE}[0]. This is a more efficient equivalent to code like substr($matched_string,$-[0],$+[0]-$-[0]), and you don't have to keep track of the $matched_string either. This variable has no single character equivalent. Note that, like the other regex magic variables, the contents of this variable is dynamic; if you wish to store it beyond the lifetime of the match you must copy it to another array. main character energy tbh.

"%{^CAPTURE}" is equivalent to "%+" (i.e., named captures). Other than being more self-documenting there is no difference between the two forms.

"%{^CAPTURE_ALL}" is equivalent to "%-" (i.e., all named captures). Other than being more self-documenting there is no difference between the two forms.

🪄 Declaring a reference to a variable 🪄

As an experimental feature, Perl now allows the referencing operator to come after my(), state(), our(), or local(). This syntax must be enabled with use feature 'declared_refs'. It is experimental, and will warn by default unless no warnings 'experimental::refaliasing' is in effect. It is intended mainly for use in assignments to references. For example:

use experimental 'refaliasing', 'declared_refs';
my \$a = \$b;

See "Assigning to References" in perlref for more details. not me being experimental 🙈

🌍 Unicode 9.0 is now supported 🌍

A list of changes is at <http://www.unicode.org/versions/Unicode9.0.0/>. Modules that are shipped with core Perl but not maintained by p5p do not necessarily support Unicode 9.0. Unicode::Normalize does work on 9.0. iconic Unicode behavior ✨

🔮 Use of `"\p{script}"` uses the improved Script_Extensions property 🔮

Unicode 6.0 introduced an improved form of the Script (sc) property, and called it Script_Extensions (scx). Perl now uses this improved version when a property is specified as just \p{script}. This should make programs more accurate when determining if a character is used in a given script, but there is a slight chance of breakage for programs that very specifically needed the old behavior. The meaning of compound forms, like \p{sc=script} are unchanged. See "Scripts" in perlunicode. vibe check passed.

🧚 Perl can now do default collation in UTF-8 locales on platforms that support it 🧚

Some platforms natively do a reasonable job of collating and sorting in UTF-8 locales. Perl now works with those. For portability and full control, Unicode::Collate is still recommended, but now you may not need to do anything special to get good-enough results, depending on your application. See "Category "LC_COLLATE": Collation: Text Comparisons and Sorting" in perllocale. highkey useful depending on your app.

🍓 Better locale collation of strings containing embedded `"NUL"` characters 🍓

In locales that have multi-level character weights, "NUL"s are now ignored at the higher priority ones. There are still some gotchas in some strings, though. See "Collation of strings containing embedded "NUL" characters" in perllocale. lowkey niche but important. 🍓

💅 `"CORE"` subroutines for hash and array functions callable via reference 💅

The hash and array functions in the "CORE" namespace (keys, each, values, push, pop, shift, unshift and splice) can now be called with ampersand syntax ("&CORE::keys(\%hash") and via reference ("my $k = \&CORE::keys; $k->(\%hash)"). Previously they could only be used when inlined. periodt.

🧬 New Hash Function For 64-bit Builds 🧬

We have switched to a hybrid hash function to better balance performance for short and long keys.

For short keys, 16 bytes and under, we use an optimised variant of One At A Time Hard, and for longer keys we use Siphash 1-3. For very long keys this is a big improvement in performance. For shorter keys there is a modest improvement. slay 💅

🛡️ Security 🛡️

okay bestie, this whole part is a vibe check for your filesystem safety. no cap. 💅

🚫 Removal of the current directory (".") from @INC 🚫

The perl binary includes a default set of paths in @INC. Historically it has also included the current directory (".") as the final entry, unless run with taint mode enabled (perl -T). While convenient, this has security implications: for example, where a script attempts to load an optional module when its current directory is untrusted (such as /tmp), it could load and execute code from under that directory.

Starting with v5.26, "." is always removed by default, not just under tainting. This has major implications for installing modules and executing scripts.

The following new features have been added to help ameliorate these issues.

Configure -Udefault_inc_excludes_dot — There is a new Configure option, default_inc_excludes_dot (enabled by default) which builds a perl executable without "."; unsetting this option using -U reverts perl to the old behaviour. This may fix your path issues but will reintroduce all the security concerns, so don't build a perl executable like this unless you're really confident that such issues are not a concern in your environment.
PERL_USE_UNSAFE_INC — There is a new environment variable recognised by the perl interpreter. If this variable has the value 1 when the perl interpreter starts up, then "." will be automatically appended to @INC (except under tainting).

This allows you restore the old perl interpreter behaviour on a case-by-case basis. But note that this is intended to be a temporary crutch, and this feature will likely be removed in some future perl version. It is currently set by the cpan utility and Test::Harness to ease installation of CPAN modules which have not been updated to handle the lack of dot. Once again, don't use this unless you are sure that this will not reintroduce any security concerns.

A new deprecation warning issued by do. While it is well-known that use and require use @INC to search for the file to load, many people don't realise that do "file" also searches @INC if the file is a relative path. With the removal of ".", a simple do "file.pl" will fail to read in and execute file.pl from the current directory. Since this is commonly expected behaviour, a new deprecation warning is now issued whenever do fails to load a file which it otherwise would have found if a dot had been in @INC.

Here are some things script and module authors may need to do to make their software work in the new regime.

Script authors

If the issue is within your own code (rather than within included modules), then you have two main options. Firstly, if you are confident that your script will only be run within a trusted directory (under which you expect to find trusted files and modules), then add "." back into the path; e.g.:

BEGIN {
    my $dir = "/some/trusted/directory";
    chdir $dir or die "Can't chdir to $dir: $!\n";
    # safe now
    push @INC, '.';
}

use "Foo::Bar"; # may load /some/trusted/directory/Foo/Bar.pm
do "config.pl"; # may load /some/trusted/directory/config.pl

On the other hand, if your script is intended to be run from within untrusted directories (such as /tmp), then your script suddenly failing to load files may be indicative of a security issue. You most likely want to replace any relative paths with full paths; for example,

do "foo_config.pl"

might become

do "$ENV{HOME}/foo_config.pl"

If you are absolutely certain that you want your script to load and execute a file from the current directory, then use a "./" prefix; for example:

do "./foo_config.pl"

Installing and using CPAN modules

If you install a CPAN module using an automatic tool like cpan, then this tool will itself set the PERL_USE_UNSAFE_INC environment variable while building and testing the module, which may be sufficient to install a distribution which hasn't been updated to be dot-aware. If you want to install such a module manually, then you'll need to replace the traditional invocation:

perl Makefile.PL && make && make test && make install

with something like

(export PERL_USE_UNSAFE_INC=1; \
 perl Makefile.PL && make && make test && make install)

Note that this only helps build and install an unfixed module. It's possible for the tests to pass (since they were run under PERL_USE_UNSAFE_INC=1), but for the module itself to fail to perform correctly in production. In this case, you may have to temporarily modify your script until a fixed version of the module is released. For example:

use Foo::Bar;
{
    local @INC = (@INC, '.');
    # assuming read_config() needs '.' in @INC
    $config = Foo::Bar->read_config();
}

This is only rarely expected to be necessary. Again, if doing this, assess the resultant risks first.

Module Authors

If you maintain a CPAN distribution, it may need updating to run in a dotless environment. Although cpan and other such tools will currently set the PERL_USE_UNSAFE_INC during module build, this is a temporary workaround for the set of modules which rely on "." being in @INC for installation and testing, and this may mask deeper issues. It could result in a module which passes tests and installs, but which fails at run time.

During build, test, and install, it will normally be the case that any perl processes will be executing directly within the root directory of the untarred distribution, or a known subdirectory of that, such as t/. It may well be that Makefile.PL or t/foo.t will attempt to include local modules and configuration files using their direct relative filenames, which will now fail.

However, as described above, automatic tools like cpan will (for now) set the PERL_USE_UNSAFE_INC environment variable, which introduces dot during a build.

This makes it likely that your existing build and test code will work, but this may mask issues with your code which only manifest when used after install. It is prudent to try and run your build process with that variable explicitly disabled:

(export PERL_USE_UNSAFE_INC=0; \
 perl Makefile.PL && make && make test && make install)

This is more likely to show up any potential problems with your module's build process, or even with the module itself. Fixing such issues will ensure both that your module can again be installed manually, and that it will still build once the PERL_USE_UNSAFE_INC crutch goes away.

When fixing issues in tests due to the removal of dot from @INC, reinsertion of dot into @INC should be performed with caution, for this too may suppress real errors in your runtime code. You are encouraged wherever possible to apply the aforementioned approaches with explicit absolute/relative paths, or to relocate your needed files into a subdirectory and insert that subdirectory into @INC instead.

If your runtime code has problems under the dotless @INC, then the comments above on how to fix for script authors will mostly apply here too. Bear in mind though that it is considered bad form for a module to globally add a dot to @INC, since it introduces both a security risk and hides issues of accidentally requiring dot in @INC, as explained above.

Escaped colons and relative paths in PATH 🌈

On Unix systems, Perl treats any relative paths in the PATH environment variable as tainted when starting a new process. Previously, it was allowing a backslash to escape a colon (unlike the OS), consequently allowing relative paths to be considered safe if the PATH was set to something like "/\:.". The check has been fixed to treat "." as tainted in that example.

New `-Di` switch is now required for PerlIO debugging output ✨

This is used for debugging of code within PerlIO to avoid recursive calls. Previously this output would be sent to the file specified by the PERLIO_DEBUG environment variable if perl wasn't running setuid and the -T or -t switches hadn't been parsed yet.

If perl performed output at a point where it hadn't yet parsed its switches this could result in perl creating or overwriting the file named by PERLIO_DEBUG even when the -T switch had been supplied.

Perl now requires the -Di switch to be present before it will produce PerlIO debugging output. By default this is written to stderr, but can optionally be redirected to a file by setting the PERLIO_DEBUG environment variable.

If perl is running setuid or the -T switch was supplied, PERLIO_DEBUG is ignored and the debugging output is sent to stderr as for any other -D switch.

💥 Incompatible Changes 💥

Okay bestie, buckle up, this is the part where stuff you used to do just... doesn't work anymore. Not me being dramatic, it's literally the section title. 🫶

Unescaped literal `{` characters in regular expression patterns are no longer permissible

So, the tea: you now have to say something like \{ or [{] if you want to tell Perl you mean an actual LEFT CURLY BRACKET. If you don't, it's a fatal pattern compilation error — not a warning, a whole death. 💀 This change is what unlocks future extensions to the language, so it's giving sacrificial lamb but make it worth it.

These have been deprecated since v5.16, and a deprecation message was raised for some uses starting in v5.22. Unfortunately the code that was supposed to raise that message was buggy and failed to warn in some cases where it should have. So enforcement of this ban for those cases is deferred until Perl 5.30 — but the code has been fixed in the meantime to raise a default-on deprecation message for them. So like, you will hear about it. 🔔

Some uses of a literal { happen in contexts where we truly do not foresee the meaning ever being anything but the literal, like the very first character in the pattern, or after a | meaning alternation. So:

qr/{fee|{fie/

matches either of the strings "{fee" or "{fie". To avoid forcing unnecessary code changes, these uses do not need to be escaped, no warning is raised about them, and there are no current plans to change this. ✨

But it is always correct to escape {, and the simple rule to remember is to always do so. That's the whole vibe. Do it every time. 👑

See Unescaped left brace in regex is illegal here.

`scalar(%hash)` return signature changed

The value returned for scalar(%hash) will no longer show information about the buckets allocated in the hash. It will simply return the count of used keys. So it's equivalent to 0+keys(%hash) — same energy, fewer surprises.

A form of backward compatibility is provided via Hash::Util::bucket_ratio(), which gives you the same behavior as scalar(%hash) had in Perl 5.24 and earlier. So if you missed the bucket gossip, it's still there, just relocated. 📦

`"keys"` returned from an lvalue subroutine

"keys" returned from an lvalue subroutine can no longer be assigned to in list context. Like, at all.

sub foo : lvalue { keys(%INC) }
(foo) = 3; # death
sub bar : lvalue { keys(@_) }
(bar) = 3; # also an error

This makes the lvalue sub case consistent with (keys %hash) = ... and (keys @_) = ..., which are also errors. Consistency slay, honestly. [GH #15339] https://github.com/Perl/perl5/issues/15339

The `${^ENCODING}` facility has been removed

The special behaviour associated with assigning a value to this variable has been removed. As a consequence, the encoding pragma's default mode is no longer supported. So if you still need to write your source code in encodings other than UTF-8, use a source filter such as Filter::Encoding on CPAN, or encoding's "Filter" option. Options exist, they're just different options now. 🦋

POSIX::tmpnam() has been removed

The fundamentally unsafe tmpnam() interface was deprecated in Perl 5.22 and has now been removed — gone, no notes. In its place, you can use, for example, the File::Temp interfaces. Please do that instead, your files will thank you. 🙏

require ::Foo::Bar is now illegal

Formerly, "require ::Foo::Bar" would try to read /Foo/Bar.pm. Now any bareword require which starts with a double colon dies instead. No more sneaky leading-colon paths. RIP to that trick. 🪦

Literal control character variable names are no longer permissible

A variable name may no longer contain a literal control character under any circumstances. These previously were allowed in single-character names on ASCII platforms, but have been deprecated there since Perl 5.20. This affects things like "$\cT", where \cT is a literal control character (such as a "NAK" or "NEGATIVE ACKNOWLEDGE" character) in the source code. Yes, that's a real character name, and yes, it's as cursed as it sounds. Not allowed anymore.

`"NBSP"` is no longer permissible in `"\N{...}"`

The name of a character may no longer contain non-breaking spaces. It's been deprecated to do so since Perl 5.22. So don't sneak a non-breaking space into a character name, the parser sees you. 👀

🌧️ Deprecations 🌧️

String delimiters that aren't stand-alone graphemes are now deprecated

So here's the plan: for Perl to eventually allow string delimiters to be Unicode grapheme clusters (which look like a single character but may be a sequence of several of them — iconic behavior honestly), we have to stop allowing a single character delimiter that isn't a grapheme by itself. These are unlikely to exist in actual code, because they would typically display as attached to the character in front of them. So like, if you have one, you'd probably know, bestie.

`"\cX"` that maps to a printable is no longer deprecated

This means we have no plans to remove this feature. 🎉 It still raises a warning, but only if syntax warnings are enabled. So like, not deprecated anymore, just gently commented on.

The feature was originally intended to be a way to express non-printable characters that don't have a mnemonic ("\t" and "\n" are mnemonics for two non-printable characters, but most non-printables don't have a mnemonic). But the feature can be used to specify a few printable characters — though those are more clearly expressed as the printable itself. So, y'know, just type the character. 😌 See http://www.nntp.perl.org/group/perl.perl5.porters/2017/02/msg242944.html.

🚀 Performance Enhancements 🚀

Speed era. Let's go. 🔥

A hash in boolean context is now sometimes faster, e.g.

if (!%h) { ... }

This was already special-cased, but some cases were missed (such as "grep %$_, @AoH"), and even the ones which weren't have been improved. Nothing missed now, we're thorough. 💅

New Faster Hash Function on 64 bit builds — We use a different hash function for short and long keys. This should improve performance and security, especially for long keys. Faster and safer, the dream combo. ✨
readline is faster — Reading from a file line-by-line with readline() or "<>" should now typically be faster, thanks to a better implementation of the code that searches for the next newline character. 🏃‍♀️
Assigning one reference to another, e.g. "$ref1 = $ref2" has been optimized in some cases.
Remove some exceptions to creating Copy-on-Write strings. The string buffer growth algorithm has been slightly altered so that you're less likely to encounter a string which can't be COWed. COW everything, honestly. 🐄
Better optimise array and hash assignment: where an array or hash appears in the LHS of a list assignment, such as "(..., @a) = (...);", it's likely to be considerably faster — especially if it involves emptying the array/hash. For example, this code runs about a third faster compared to Perl 5.24.0:

my @a;
for my $i (1..10_000_000) {
    @a = (1,2,3);
    @a = ();
}

Converting a single-digit string to a number is now substantially faster. Small but mighty. 🍓
The "split" builtin is now slightly faster in many cases: in particular for the two specially-handled forms

my    @a = split ...;
local @a = split ...;

The rather slow implementation for the experimental subroutine signatures feature has been made much faster; it is now comparable in speed with the traditional "my ($a, $b, @c) = @_". Glow up of the century. 👑
Bareword constant strings are now permitted to take part in constant folding. They were originally exempted from constant folding in August 1999, during the development of Perl 5.6, to ensure that "use strict "subs"" would still apply to bareword constants. That has now been accomplished a different way, so barewords, like other constants, now gain the performance benefits of constant folding.

This also means that void-context warnings on constant expressions of barewords now report the folded constant operand, rather than the operation; this matches the behaviour for non-bareword constants. Consistent, finally. 😤

📦 Modules and Pragmata 📦

Updated Modules and Pragmata

Version bump era!! Everything got a little refresh, let's go through them one by one because I would never skip one. 🫶

IO::Compress has been upgraded from version 2.069 to 2.074.
Archive::Tar has been upgraded from version 2.04 to 2.24.
arybase has been upgraded from version 0.11 to 0.12.
attributes has been upgraded from version 0.27 to 0.29.

The deprecation message for the ":unique" and ":locked" attributes now mention that they will disappear in Perl 5.28. So like, heads up. ⏳

B has been upgraded from version 1.62 to 1.68.
B::Concise has been upgraded from version 0.996 to 0.999.

Its output is now more descriptive for "op_private" flags. Tea has been spilled. ☕

B::Debug has been upgraded from version 1.23 to 1.24.
B::Deparse has been upgraded from version 1.37 to 1.40.
B::Xref has been upgraded from version 1.05 to 1.06.

It now uses 3-arg open() instead of 2-arg open(). [GH #15721] https://github.com/Perl/perl5/issues/15721

base has been upgraded from version 2.23 to 2.25.
bignum has been upgraded from version 0.42 to 0.47.
Carp has been upgraded from version 1.40 to 1.42.
charnames has been upgraded from version 1.43 to 1.44.
Compress::Raw::Bzip2 has been upgraded from version 2.069 to 2.074.
Compress::Raw::Zlib has been upgraded from version 2.069 to 2.074.
Config::Perl::V has been upgraded from version 0.25 to 0.28.
CPAN has been upgraded from version 2.11 to 2.18.
CPAN::Meta has been upgraded from version 2.150005 to 2.150010.
Data::Dumper has been upgraded from version 2.160 to 2.167.

The XS implementation now supports Deparse. Big flex. 💪

DB_File has been upgraded from version 1.835 to 1.840.
Devel::Peek has been upgraded from version 1.23 to 1.26.
Devel::PPPort has been upgraded from version 3.32 to 3.35.
Devel::SelfStubber has been upgraded from version 1.05 to 1.06.

It now uses 3-arg open() instead of 2-arg open(). [GH #15721] https://github.com/Perl/perl5/issues/15721

diagnostics has been upgraded from version 1.34 to 1.36.

It now uses 3-arg open() instead of 2-arg open(). [GH #15721] https://github.com/Perl/perl5/issues/15721

Digest has been upgraded from version 1.17 to 1.17_01.
Digest::MD5 has been upgraded from version 2.54 to 2.55.
Digest::SHA has been upgraded from version 5.95 to 5.96.
DynaLoader has been upgraded from version 1.38 to 1.42.
Encode has been upgraded from version 2.80 to 2.88.
encoding has been upgraded from version 2.17 to 2.19.

This module's default mode is no longer supported. It now dies when imported, unless the "Filter" option is being used. Bye to the default mode, you will not be missed. 🪦

encoding::warnings has been upgraded from version 0.12 to 0.13.

This module is no longer supported. It emits a warning to that effect and then does nothing. Literally just vibes and a warning now. 💀

Errno has been upgraded from version 1.25 to 1.28.

It now documents that using "%!" automatically loads Errno for you. Convenient!! 🌸

It now uses 3-arg open() instead of 2-arg open(). [GH #15721] https://github.com/Perl/perl5/issues/15721

ExtUtils::Embed has been upgraded from version 1.33 to 1.34.

It now uses 3-arg open() instead of 2-arg open(). [GH #15721] https://github.com/Perl/perl5/issues/15721

ExtUtils::MakeMaker has been upgraded from version 7.10_01 to 7.24.
ExtUtils::Miniperl has been upgraded from version 1.05 to 1.06.
ExtUtils::ParseXS has been upgraded from version 3.31 to 3.34.
ExtUtils::Typemaps has been upgraded from version 3.31 to 3.34.
feature has been upgraded from version 1.42 to 1.47.
File::Copy has been upgraded from version 2.31 to 2.32.
File::Fetch — upgraded from version 0.48 to 0.52. ✨
File::Glob — upgraded from version 1.26 to 1.28. 👑

Not me being the bearer of bad news but it now issues a deprecation message for File::Glob::glob(). Yeah bestie, that one's on the way out. 💀

File::Spec — upgraded from version 3.63 to 3.67. 🌸
FileHandle — upgraded from version 2.02 to 2.03. 🎀
Filter::Simple — upgraded from version 0.92 to 0.93. 🦋

It no longer treats no MyFilter immediately following use MyFilter as end-of-file. [GH #11853] <https://github.com/Perl/perl5/issues/11853> — the way that bug just left the chat, obsessed. 💅

Getopt::Long — upgraded from version 2.48 to 2.49. ✨
Getopt::Std — upgraded from version 1.11 to 1.12. 🌈
Hash::Util — upgraded from version 0.19 to 0.22. 💜
HTTP::Tiny — upgraded from version 0.056 to 0.070. 🍓

Internal 599-series errors now include the redirect history. Lowkey a glow-up for debugging. 🔥

I18N::LangTags — upgraded from version 0.40 to 0.42. 🧚

It now uses 3-arg open() instead of 2-arg open(). [GH #15721] <https://github.com/Perl/perl5/issues/15721> — we love a security-conscious queen. 🫶

IO — upgraded from version 1.36 to 1.38. ✨
IO::Socket::IP — upgraded from version 0.37 to 0.38. 🌸
IPC::Cmd — upgraded from version 0.92 to 0.96. 💖
IPC::SysV — upgraded from version 2.06_01 to 2.07. ⭐
JSON::PP — upgraded from version 2.27300 to 2.27400_02. 🌈
lib — upgraded from version 0.63 to 0.64. 🎀

It now uses 3-arg open() instead of 2-arg open(). [GH #15721] <https://github.com/Perl/perl5/issues/15721> 🦋

List::Util — upgraded from version 1.42_02 to 1.46_02. 👑
Locale::Codes — upgraded from version 3.37 to 3.42. ✨
Locale::Maketext — upgraded from version 1.26 to 1.28. 💜
Locale::Maketext::Simple — upgraded from version 0.21 to 0.21_01. 🍓
Math::BigInt — upgraded from version 1.999715 to 1.999806. 🔥
Math::BigInt::FastCalc — upgraded from version 0.40 to 0.5005. 🌸
Math::BigRat — upgraded from version 0.260802 to 0.2611. 🧚
Math::Complex — upgraded from version 1.59 to 1.5901. ⭐
Memoize — upgraded from version 1.03 to 1.03_01. 💖
Module::CoreList — upgraded from version 5.20170420 to 5.20170530. 🌈
Module::Load::Conditional — upgraded from version 0.64 to 0.68. ✨
Module::Metadata — upgraded from version 1.000031 to 1.000033. 🎀
mro — upgraded from version 1.18 to 1.20. 🦋
Net::Ping — upgraded from version 2.43 to 2.55. 👑

IPv6 addresses and AF_INET6 sockets are now supported, along with several other enhancements. It's giving modern networking icon, fr fr. 💅

NEXT — upgraded from version 0.65 to 0.67. 💜
Opcode — upgraded from version 1.34 to 1.39. 🌸
open — upgraded from version 1.10 to 1.11. ✨
OS2::Process — upgraded from version 1.11 to 1.12. 🍓

It now uses 3-arg open() instead of 2-arg open(). [GH #15721] <https://github.com/Perl/perl5/issues/15721> 🫶

overload — upgraded from version 1.26 to 1.28. 🔥

Its compilation speed has been improved slightly. Small W but we take those. ⭐

parent — upgraded from version 0.234 to 0.236. 🎀
perl5db.pl — upgraded from version 1.50 to 1.51. 🌈

It now ignores /dev/tty on non-Unix systems. [GH #12244] <https://github.com/Perl/perl5/issues/12244> ✨

Perl::OSType — upgraded from version 1.009 to 1.010. 🦋
perlfaq — upgraded from version 5.021010 to 5.021011. 💖
PerlIO — upgraded from version 1.09 to 1.10. 👑
PerlIO::encoding — upgraded from version 0.24 to 0.25. 🌸
PerlIO::scalar — upgraded from version 0.24 to 0.26. 💜
Pod::Checker — upgraded from version 1.60 to 1.73. ⭐
Pod::Functions — upgraded from version 1.10 to 1.11. 🍓
Pod::Html — upgraded from version 1.22 to 1.2202. 🧚
Pod::Perldoc — upgraded from version 3.25_02 to 3.28. 🔥
Pod::Simple — upgraded from version 3.32 to 3.35. 🎀
Pod::Usage — upgraded from version 1.68 to 1.69. ✨
POSIX — upgraded from version 1.65 to 1.76. 🌈

This remedies several defects in making its symbols exportable. [GH #15260] <https://github.com/Perl/perl5/issues/15260> 🫶

The POSIX::tmpnam() interface has been removed, see "POSIX::tmpnam() has been removed".

The following deprecated functions have been removed — RIP besties, you will not be missed:

POSIX::isalnum
POSIX::isalpha
POSIX::iscntrl
POSIX::isdigit
POSIX::isgraph
POSIX::islower
POSIX::isprint
POSIX::ispunct
POSIX::isspace
POSIX::isupper
POSIX::isxdigit
POSIX::tolower
POSIX::toupper

Trying to import POSIX subs that have no real implementations (like POSIX::atend()) now fails at import time, instead of waiting until runtime. So no more creepy surprises showing up three hours into your script, periodt. 💅

re — upgraded from version 0.32 to 0.34. ✨

This adds support for the new /xx regular expression pattern modifier, and a change to the use re 'strict' experimental feature.

When re 'strict' is enabled, a warning now will be generated for all unescaped uses of the two characters } and ] in regular expression patterns (outside bracketed character classes) that are taken literally. This brings them more in line with the ) character which is always a metacharacter unless escaped. Being a metacharacter only sometimes, depending on an action at a distance, can lead to silently having the pattern mean something quite different than was intended, which the re 'strict' mode is intended to minimize. 👑

Safe — upgraded from version 2.39 to 2.40. 🌸
Scalar::Util — upgraded from version 1.42_02 to 1.46_02. 💜
Storable — upgraded from version 2.56 to 2.62. 🦋

Fixes [GH #15714] <https://github.com/Perl/perl5/issues/15714>. 🫶

Symbol — upgraded from version 1.07 to 1.08. 🎀
Sys::Syslog — upgraded from version 0.33 to 0.35. 🍓
Term::ANSIColor — upgraded from version 4.04 to 4.06. 🌈
Term::ReadLine — upgraded from version 1.15 to 1.16. ✨

It now uses 3-arg open() instead of 2-arg open(). [GH #15721] <https://github.com/Perl/perl5/issues/15721> ⭐

Test — upgraded from version 1.28 to 1.30. 💖

It now uses 3-arg open() instead of 2-arg open(). [GH #15721] <https://github.com/Perl/perl5/issues/15721> 🔥

Test::Harness — upgraded from version 3.36 to 3.38. 👑
Test::Simple — upgraded from version 1.001014 to 1.302073. 🌸
Thread::Queue — upgraded from version 3.09 to 3.12. 💜
Thread::Semaphore — upgraded from 2.12 to 2.13. 🦋

Added the down_timed method. New method just dropped. ✨

threads — upgraded from version 2.07 to 2.15. 🎀
threads::shared — upgraded from version 1.51 to 1.56. 🍓
Tie::Hash::NamedCapture — upgraded from version 0.09 to 0.10. 🌈
Time::HiRes — upgraded from version 1.9733 to 1.9741. ⭐

It now builds on systems with C++11 compilers (such as G++ 6 and Clang++ 3.9). 💅

Now uses clockid_t. 👑

Time::Local — upgraded from version 1.2300 to 1.25. 💖
Unicode::Collate — upgraded from version 1.14 to 1.19. 🌸
Unicode::UCD — upgraded from version 0.64 to 0.68. 🦋

It now uses 3-arg open() instead of 2-arg open(). [GH #15721] <https://github.com/Perl/perl5/issues/15721> ✨

version — upgraded from version 0.9916 to 0.9917. 🎀
VMS::DCLsym — upgraded from version 1.06 to 1.08. 🍓

It now uses 3-arg open() instead of 2-arg open(). [GH #15721] <https://github.com/Perl/perl5/issues/15721> 🌈

warnings — upgraded from version 1.36 to 1.37. 💜
XS::Typemap — upgraded from version 0.14 to 0.15. ⭐
XSLoader — upgraded from version 0.21 to 0.27. 🔥

Fixed a security hole in which binary files could be loaded from a path outside of @INC. 😭 Yeah ngl that one was SCARY scary.

It now uses 3-arg open() instead of 2-arg open(). [GH #15721] <https://github.com/Perl/perl5/issues/15721> 👑

📚 Documentation 📚

✨ New Documentation ✨

`perldeprecation`

okay so there's a whole new file bestie and it's called perldeprecation 💖

it documents every single upcoming deprecation, plus some of the deprecations that have already been removed. and the reason it exists is lowkey two-fold:

it tells you what's gonna disappear, and by which version it's disappearing 👀
and it serves as a guide for people dealing with code that has features which no longer work after they upgrade their perl 😭

so yeah, if your code broke after an upgrade, this is the doc that has your back. periodt.

🦋 Changes to Existing Documentation 🦋

the docs got a glow-up, and we tried to update them to reflect everything listed in this document. but ngl, if you find anything we missed, send an email to perlbug@perl.org <mailto:perlbug@perl.org> — we wanna know 🫶

also, heads up: all references to Usenet have been removed 💀 and on top of that, here are the selected changes that went down:

`perlfunc`

Removed obsolete text about defined() on aggregates that honestly should have been deleted way earlier, back when the feature itself got removed. bye 👋
Corrected the documentation of eval() and evalbytes(). 📝
Clarified the docs for seek(), tell() and sysseek(), emphasizing that positions are in bytes and not characters. [GH #15438] <https://github.com/Perl/perl5/issues/15438>
Clarified the documentation of sort() concerning the variables $a and $b. ✨
In split() it now notes that certain pattern modifiers are legal, and added a caution about its use in Perls before v5.11. ⚠️
Removed the obsolete documentation of study(), noting that it is now a no-op. 💀
Noted that vec() doesn't work well when the string contains characters whose code points are above 255. 🙈

`perlguts`

Added advice on formatted printing of operands of Size_t and SSize_t. 🎀

`perlhack`

Clarify what editor tab stop rules to use, and note that we are migrating away from using tabs, replacing them with sequences of SPACE characters. so... spaces are the main character now 👑

`perlhacktips`

Give another reason to use cBOOL to cast an expression to boolean. ✅
Note that the macros TRUE and FALSE are available to express boolean values. 💖

`perlinterp`

perlinterp has been expanded to give a more detailed example of how to hunt around in the parser for how a given operator is handled. detective mode fr fr 🔍

`perllocale`

Some locales aren't compatible with Perl. Note that these can cause core dumps. 💀 seriously, not cute.

`perlmod`

Various clarifications have been added. 🌸

`perlmodlib`

Updated the site mirror list. 🪞

`perlobj`

Added a section on calling methods using their fully qualified names. 💅
Do not discourage manual @ISA. live your truth, bestie.

`perlootut`

Mention Moo more. 🐄 obsessed, honestly.

`perlop`

Note that white space must be used for quoting operators if the delimiter is a word character (i.e., matches \w). 🧚
Clarify that in regular expression patterns delimited by single quotes, no variable interpolation is done. ✨

`perlre`

The first part was extensively rewritten to incorporate various basic points, that in earlier versions were mentioned in sort of an appendix on Version 8 regular expressions. full rewrite energy 📝
Note that it is common to have the /x modifier and forget that this means that # has to be escaped. 😭 we've all been there, no cap.

`perlretut`

Add introductory material. 🌈
Note that a metacharacter occurring in a context where it can't mean that, silently loses its meta-ness and matches literally. use re 'strict' can catch some of these. 👀

`perlunicode`

Corrected the text about Unicode BYTE ORDER MARK handling. ✅
Updated the text to correspond with changes in Unicode UTS#18, concerning regular expressions, and Perl compatibility with what it says. 🦋

`perlvar`

Document @ISA. It was documented in other places, but not in perlvar. and now it is 💅

💅 Diagnostics 💅

okay so this is the part where Perl is like "bestie I have something to TELL you" and honestly? the sheer volume of new messages here is giving main character energy 🎀 every single new error, every new warning, and every glow-up to an existing message is below. no skipping, you know the rules. 💖

✨ New Diagnostics ✨

💀 New Errors

A signature parameter must start with '$', '@' or '%'

yeah so a sub signature parameter has to open with one of those three sigils and literally nothing else. no cap. 🙈

Bareword in require contains "%s"

a bareword in a require is doing something it should not. nope. 🚫

Bareword in require maps to empty filename

the bareword collapses down to an empty filename, which is not a vibe. 💀

Bareword in require maps to disallowed filename "%s"

the bareword turns into a filename that's not allowed. the %s is the offending one. 🔥

Bareword in require must not start with a double-colon: "%s"

if your bareword in require starts with :: — like, double-colon first thing? — that's a hard no. 👑

%s: command not found

(A) You've accidentally run your script through bash or another shell instead of Perl. Check the #! line, or manually feed your script into Perl yourself. The #! line at the top of your file could look like:

#!/usr/bin/perl

iconic mistake honestly, we've all been there 😭 your script is being chewed on by the wrong interpreter.

%s: command not found: %s

(A) You've accidentally run your script through zsh or another shell instead of Perl. Check the #! line, or manually feed your script into Perl yourself. The #! line at the top of your file could look like:

#!/usr/bin/perl

same disaster, different shell girlie. fix that #! and you're slaying again 🫶

The experimental declared_refs feature is not enabled

(F) To declare references to variables, as in my \%x, you must first enable the feature:

no warnings "experimental::declared_refs";
use feature "declared_refs";

See "Declaring a reference to a variable".

lowkey you have to opt in first, it's not just gonna happen for you bestie ✨

Illegal character following sigil in a subroutine signature

there's a character hanging out right after the sigil in a sub signature and it should NOT be there. 💀

Indentation on line %d of here-doc doesn't match delimiter

your here-doc indentation is not matching up with the delimiter and Perl noticed. 🎀

Infinite recursion via empty pattern.

Using the empty pattern (which re-executes the last successfully-matched pattern) inside a code block in another regex, as in /(?{ s!!new! })/, has always previously yielded a segfault. It now produces this error.

so previously this just segfaulted — literally a crash, no notes 🫠 — and now it actually talks to you instead.

Malformed UTF-8 string in "%s"

your UTF-8 string is malformed in that context. 🙈

Multiple slurpy parameters not allowed

you can't have more than one slurpy parameter. one. that's the limit. 🚫

'#' not allowed immediately following a sigil in a subroutine signature

a # right after a sigil in a sub signature? not allowed, periodt. 💅

panic: unknown OA_*: %x

full panic mode. unknown OA_* value. 💀

Unescaped left brace in regex is illegal here

Unescaped left braces are now illegal in some contexts in regular expression patterns. In other contexts, they are still just deprecated; they will be illegal in Perl 5.30.

so in some spots it's straight-up illegal now, in other spots it's still just deprecated — but heads up, it goes fully illegal in Perl 5.30 so start escaping those braces fr fr 🔥

Version control conflict marker

(F) The parser found a line starting with <<<<<<<, >>>>>>>, or =======. These may be left by a version control system to mark conflicts after a failed merge operation.

you tried to run a merge conflict. the parser literally caught you 💀 resolve the conflict bestie.

🎀 New Warnings

Can't determine class of operator %s, assuming "BASEOP"

can't figure out which class that operator belongs to, so it's just assuming BASEOP. 🤷

Declaring references is experimental

(S experimental::declared_refs) This warning is emitted if you use a reference constructor on the right-hand side of my(), state(), our(), or local(). Simply suppress the warning if you want to use the feature, but know that in doing so you are taking the risk of using an experimental feature which may change or be removed in a future Perl version:

no warnings "experimental::declared_refs";
use feature "declared_refs";
$fooref = my \$foo;

See "Declaring a reference to a variable".

you can silence it, but know that experimental features are literally allowed to change or get deleted out from under you — that's the deal. 😭

do "%s" failed, '.' is no longer in @INC

Since . is now removed from @INC by default, do will now trigger a warning recommending to fix the do statement.

the . in @INC era is over, so do is politely telling you to fix your statement. 🫶

File::Glob::glob() will disappear in perl 5.30. Use File::Glob::bsd_glob() instead.

it's leaving in perl 5.30, so switch to File::Glob::bsd_glob() while you still can. 🌸

Unescaped literal '%c' in regex; marked by <-- HERE in m/%s/

unescaped literal in your regex, and Perl is even drawing an arrow at it. pay attention to the <-- HERE 👑

Use of unassigned code point or non-standalone grapheme for a delimiter will be a fatal error starting in Perl 5.30

See "Deprecations"

this becomes a FATAL error starting in Perl 5.30, so consider this your two-minute warning. 🚨

🔄 Changes to Existing Diagnostics

When a require fails, we now do not provide @INC when the require is for a file instead of a module.
When @INC is not scanned for a require call, we no longer display @INC to avoid confusion.
Attribute "locked" is deprecated, and will disappear in Perl 5.28

This existing warning has had the and will disappear text added in this release.

Attribute "unique" is deprecated, and will disappear in Perl 5.28

This existing warning has had the and will disappear text added in this release.

Calling POSIX::%s() is deprecated

This warning has been removed, as the deprecated functions have been removed from POSIX.

gone. the functions left, so the warning left too. ✌️

Constants from lexical variables potentially modified elsewhere are deprecated. This will not be allowed in Perl 5.32

This existing warning has had the this will not be allowed text added in this release.

Deprecated use of my() in false conditional. This will be a fatal error in Perl 5.30

This existing warning has had the this will be a fatal error text added in this release.

dump() better written as CORE::dump(). dump() will no longer be available in Perl 5.30

This existing warning has had the no longer be available text added in this release.

Experimental %s on scalar is now forbidden

This message is now followed by more helpful text. [GH #15291] <https://github.com/Perl/perl5/issues/15291>

it's still forbidden, but now it actually explains itself. growth. 💅

Experimental "%s" subs not enabled

This warning has been removed, as lexical subs are no longer experimental.

removed! because lexical subs graduated from experimental. proud of them fr 🎓

Having more than one /%c regexp modifier is deprecated

This deprecation warning has been removed, since /xx now has a new meaning.

%s() is deprecated on ":utf8" handles. This will be a fatal error in Perl 5.30 .

where %s is one of sysread, recv, syswrite, or send.

This existing warning has had the this will be a fatal error text added in this release.

This warning is now enabled by default, as all deprecated category warnings should be.

$* is no longer supported. Its use will be fatal in Perl 5.30

This existing warning has had the its use will be fatal text added in this release.

$# is no longer supported. Its use will be fatal in Perl 5.30

This existing warning has had the its use will be fatal text added in this release.

Malformed UTF-8 character%s

Details as to the exact problem have been added at the end of this message

now it actually tells you what went wrong instead of just vaguely dragging you. 🙈

Missing or undefined argument to %s

This warning used to warn about require, even if it was actually do which being executed. It now gets the operation name right.

it used to blame require when do was the one acting up. now it names the right culprit. 😌

NO-BREAK SPACE in a charnames alias definition is deprecated

This warning has been removed as the behavior is now an error.

it leveled up from warning to full error. 🚨

Odd name/value argument for subroutine '%s'

This warning now includes the name of the offending subroutine.

now it snitches on which sub. 🔥

Opening dirhandle %s also as a file. This will be a fatal error in Perl 5.28

This existing warning has had the this will be a fatal error text added in this release.

Opening filehandle %s also as a directory. This will be a fatal error in Perl 5.28

This existing warning has had the this will be a fatal error text added in this release.

panic: ck_split, type=%u panic: pp_split, pm=%p, s=%p

These panic errors have been removed.

bye girlies, you will not be missed 💀

Passing malformed UTF-8 to "%s" is deprecated

This warning has been changed to the fatal Malformed UTF-8 string in "%s"

it got promoted from "deprecated warning" to "fatal error". glow-up. ✨

Setting $/ to a reference to %s as a form of slurp is deprecated, treating as undef. This will be fatal in Perl 5.28

This existing warning has had the this will be fatal text added in this release.

"${^ENCODING}" is no longer supported. Its use will be fatal in Perl 5.28

This warning used to be: Setting "${^ENCODING}" is deprecated.

The special action of the variable ${^ENCODING} was formerly used to implement the encoding pragma. As of Perl 5.26, rather than being deprecated, assigning to this variable now has no effect except to issue the warning.

so yeah — the whole encoding pragma thing it used to power? over. assigning to it now literally does nothing except yell at you. 💀

Too few arguments for subroutine '%s'

This warning now includes the name of the offending subroutine.

Too many arguments for subroutine '%s'

This warning now includes the name of the offending subroutine.

Unescaped left brace in regex is deprecated here (and will be fatal in Perl 5.30), passed through in regex; marked by <-- HERE in m/%s/

This existing warning has had the here (and will be fatal...) text added in this release.

Unknown charname '' is deprecated. Its use will be fatal in Perl 5.28

This existing warning has had the its use will be fatal text added in this release.

Use of bare << to mean <<"" is deprecated. Its use will be fatal in Perl 5.28

This existing warning has had the its use will be fatal text added in this release.

Use of code point 0x%s is deprecated; the permissible max is 0x%s. This will be fatal in Perl 5.28

This existing warning has had the this will be fatal text added in this release.

Use of comma-less variable list is deprecated. Its use will be fatal in Perl 5.28

This existing warning has had the its use will be fatal text added in this release.

Use of inherited "AUTOLOAD" for non-method %s() is deprecated. This will be fatal in Perl 5.28

This existing warning has had the this will be fatal text added in this release.

Use of strings with code points over 0xFF as arguments to %s operator is deprecated. This will be a fatal error in Perl 5.28

This existing warning has had the this will be a fatal error text added in this release.

🛠️ Utility Changes 🛠️

🧚 c2ph and pstruct

These old utilities have long since superceded by h2xs, and are now gone from the distribution.

okay so they've been replaced by h2xs forever, and now they're officially ✨ deleted ✨ from the distribution. rip icons 🫡

🌈 Porting/pod_lib.pl

Removed spurious executable bit.
Account for the possibility of DOS file endings.

⭐ Porting/sync-with-cpan

Many improvements.

just... many. lots. a whole bunch. obsessed 💖

🔥 perf/benchmarks

Tidy file, rename some symbols.

🦋 Porting/checkAUTHORS.pl

Replace obscure character range with "\w".

🍓 t/porting/regen.t

Try to be more helpful when tests fail.

✨ utils/h2xs.PL

Avoid infinite loop for enums.

no more spinning forever on enums, we simply do not have the time 💅

🎀 perlbug

Long lines in the message body are now wrapped at 900 characters, to stay well within the 1000-character limit imposed by SMTP mail transfer agents. This is particularly likely to be important for the list of arguments to Configure, which can readily exceed the limit if, for example, it names several non-default installation paths. This change also adds the first unit tests for perlbug. [perl #128020] <https://rt.perl.org/Public/Bug/Display.html?id=128020>

so your message body lines get wrapped at 900 characters now, so everything stays comfy under SMTP's 1000-character ceiling — and honestly the Configure argument list is exactly the drama queen that would blow past that limit, like if it names several non-default installation paths. also!! perlbug has its very own unit tests now for the first time ever. periodt. 👑

⚙️ Configuration and Compilation 🛠️

okay besties this is the part where we talk about building perl, and there is SO much here, grab a snack 🍓

-Ddefault_inc_excludes_dot was added, and it's enabled by default. no cap.
The dtrace build process got more glow-up changes [GH #15718] <https://github.com/Perl/perl5/issues/15718> 💅:
- If the -xnolibs is available, use that, so a dtrace perl can be built inside a FreeBSD jail. jail-friendly, we love to see it.
- On systems that build a dtrace object file (FreeBSD, Solaris, and SystemTap's dtrace emulation), the input objects now get copied to a separate directory and processed there, and those objects are used in the link — because dtrace -G also modifies these objects, so we can't just let it mess with the originals, periodt.
- libelf gets added to the build on FreeBSD 10.x, since dtrace adds references to libelf symbols. that's it, that's the reason.
- A dummy dtrace_main.o gets generated if dtrace -G fails to build it. why? because a default build on Solaris generates probes from the unused inline functions, while they don't on FreeBSD, which causes dtrace -G to fail. so we fake it. iconic behaviour honestly.
You can now disable perl's use of the PERL_HASH_SEED and PERL_PERTURB_KEYS environment variables by configuring perl with -Accflags=NO_PERL_HASH_ENV. yes you can just… turn them off. 🤫
And you can now disable perl's use of the PERL_HASH_SEED_DEBUG environment variable by configuring perl with -Accflags=-DNO_PERL_HASH_SEED_DEBUG. same energy, different variable.
Configure now zeroes out the alignment bytes when calculating the bytes for 80-bit NaN and Inf, so builds are more reproducible. [GH #15725] <https://github.com/Perl/perl5/issues/15725> deterministic queen 👑
Since v5.18, for testing purposes we had included support for building perl with a variety of non-standard, and non-recommended hash functions. Since we do not recommend the use of these functions, we have removed them and their corresponding build options. Specifically this includes the following build options:

PERL_HASH_FUNC_SDBM
PERL_HASH_FUNC_DJB2
PERL_HASH_FUNC_SUPERFAST
PERL_HASH_FUNC_MURMUR3
PERL_HASH_FUNC_ONE_AT_A_TIME
PERL_HASH_FUNC_ONE_AT_A_TIME_OLD
PERL_HASH_FUNC_MURMUR_HASH_64A
PERL_HASH_FUNC_MURMUR_HASH_64B

Removed the Warning: perl appears in your path ✨ this install warning is more or less obsolete, since most platforms already will have a /usr/bin/perl or similar provided by the OS. bye girl, we won't miss you.
Reduced verbosity of make install.man. Previously, two progress messages were emitted for each manpage: one by installman itself, and one by the function in install_lib.pl that it calls to actually install the file. Disabling the second of those in each case saves over 750 lines of unhelpful output. 750 lines!! 😭 that's so many.
Cleanup for clang -Weverything support. [GH #15683] <https://github.com/Perl/perl5/issues/15683>
Configure: the signbit scan was assuming too much, so it stopped assuming negative 0. okay bestie we get it, you don't know.
Various compiler warnings have been silenced. 🔇
Several smaller changes have been made to remove impediments to compiling under C++11.
Builds using USE_PAD_RESET now work again; this configuration had bit-rotted. welcome back diva 🫶
A probe for gai_strerror was added to Configure that checks if the gai_strerror() routine is available and can be used to translate error codes returned by getaddrinfo() into human readable strings. translating chaos into readable sentences = the whole job lowkey.
Configure now aborts if both -Duselongdouble and -Dusequadmath are requested. [GH #14944] <https://github.com/Perl/perl5/issues/14944> pick one, bestie, you cannot have both 💀
Fixed a bug in which Configure could append -quadmath to the archname even if it was already present. [GH #15423] <https://github.com/Perl/perl5/issues/15423> stop double-stamping the name omg.
Clang builds with -DPERL_GLOBAL_STRUCT or -DPERL_GLOBAL_STRUCT_PRIVATE have been fixed (by disabling Thread Safety Analysis for these configurations). we did it by just… turning that off. sometimes that's the vibe.
make_ext.pl no longer updates a module's pm_to_blib file when no files require updates. This could cause dependencies, perlmain.c in particular, to be rebuilt unnecessarily. [GH #15060] <https://github.com/Perl/perl5/issues/15060> pointless rebuilds are NOT the move.
The output of perl -V has been reformatted so that each configuration and compile-time option is now listed one per line, to improve readability. so much cleaner, chef's kiss 😘
Configure now builds miniperl and generate_uudmap if you invoke it with -Dusecrosscompiler but not -Dtargethost=somehost. This means you can supply your target platform config.sh, generate the headers and proceed to build your cross-target perl. [GH #15126] <https://github.com/Perl/perl5/issues/15126>
Perl built with -Accflags=-DPERL_TRACE_OPS now only dumps the operator counts when the environment variable PERL_TRACE_OPS is set to a non-zero integer. This allows make test to pass on such a build. quieter debug output = happier tests.
When building with GCC 6 and link-time optimization (the -flto option to gcc), Configure was treating all probed symbols as present on the system, regardless of whether they actually exist. This has been fixed. [GH #15322] <https://github.com/Perl/perl5/issues/15322> she was lying about which symbols existed 😭
The t/test.pl library is used for internal testing of Perl itself, and also copied by several CPAN modules. Some of those modules must work on older versions of Perl, so t/test.pl must in turn avoid newer Perl features. Compatibility with Perl 5.8 was inadvertently removed some time ago; it has now been restored. [GH #15302] <https://github.com/Perl/perl5/issues/15302> we owe 5.8 an apology fr fr.
The build process no longer emits an extra blank line before building each "simple" extension (those with only *.pm and *.pod files). no more random empty space in the output, cleanse ✨

🧪 Testing 💖

Tests were added and changed to reflect the other additions and changes in this release. Furthermore, these substantive changes were made:

A new test script, comp/parser_run.t, has been added that is like comp/parser.t but with test.pl included, so that runperl() and the like are available for use. basically its more powerful sibling.
Tests for locales were erroneously using locales incompatible with Perl. oops 🙈 fixed.
Some parts of the test suite that try to exhaustively test edge cases in the regex implementation have been restricted to running for a maximum of five minutes. On slow systems they could otherwise take several hours, without significantly improving our understanding of the correctness of the code under test. five minutes tops, we're not doing overtime 🕐
A new internal facility allows analysing the time taken by the individual tests in Perl's own test suite; see Porting/harness-timer-report.pl. find out which test is the slow one.
t/re/regexp_nonull.t has been added to test that the regular expression engine can handle scalars that do not have a null byte just past the end of the string. edge case girlies rise up 🦋
A new test script, t/op/decl-refs.t, has been added to test the new feature "Declaring a reference to a variable".
A new test script, t/re/keep_tabs.t has been added to contain tests where "\t" characters should not be expanded into spaces. tabs stay tabs, no 🚫 turning them into spaces.
A new test script, t/re/anyof.t, has been added to test that the ANYOF nodes generated by bracketed character classes are as expected.
There is now more extensive testing of the Unicode-related API macros and functions. 🌈 more coverage, more confidence.
Several of the longer running API test files have been split into multiple test files so that they can be run in parallel. divide and conquer, main character move 👑
t/harness now tries really hard not to run tests which are located outside of the Perl source tree. [GH #14578] <https://github.com/Perl/perl5/issues/14578>
Prevent debugger tests (lib/perl5db.t) from failing due to the contents of $ENV{PERLDB_OPTS}. [GH #15782] <https://github.com/Perl/perl5/issues/15782> your env vars can't sabotage the tests anymore 💅

💖 Platform Support 🌍✨

🐣 New Platforms 🌱

NetBSD/VAX 🐢💾

okay so bestie, Perl now compiles under NetBSD on VAX machines. That's genuinely iconic. But lowkey there's a catch: it's not possible for that platform to implement floating-point infinities and NaNs compatible with most modern systems, which implement the IEEE-754 floating point standard. The hexadecimal floating point ("0x...p[+-]n" literals, "printf %a") is not implemented, either. The make test passes 98% of tests. still slay fr fr.

Test fixes and minor updates. ✨
Account for lack of "inf", "nan", and -0.0 support. 🫶

🗺️ Platform-Specific Notes 📝

Darwin 🍎

macOS besties, listen up:

Don't treat -Dprefix=/usr as special: instead require an extra option -Ddarwin_distribution to produce the same results. 💅
OS X El Capitan doesn't implement the clock_gettime() or clock_getres() APIs; emulate them as necessary. 🕰️
Deprecated syscall(2) on macOS 10.12. 👀

EBCDIC 🔤

EBCDIC hive, this one's for you: Several tests have been updated to work (or be skipped) on EBCDIC platforms. periodt.

HP-UX 💜

HP-UX girlies, the Net::Ping UDP test is now skipped on HP-UX. no cap.

Hurd 🧚

Hurd stans, the hints for Hurd have been improved, enabling malloc wrap and reporting the GNU libc used (previously it was an empty string when reported). slay.

VAX 🧮

VAX floating point formats are now supported on NetBSD. that's it, that's the tweet.

VMS 🖥️

The path separator for the PERL5LIB and PERLLIB environment entries is now a colon (:) when running under a Unix shell. There is no change when running under DCL (it's still |). 🐚
configure.com now recognizes the VSI-branded C compiler and no longer recognizes the DEC-branded C compiler (as there hasn't been such a thing for 15 or more years). 💀

Windows 🪟

Support for compiling perl on Windows using Microsoft Visual Studio 2015 (containing Visual C++ 14.0) has been added. 🪟✨

okay so this version of VC++ includes a completely rewritten C run-time library, some of the changes in which mean that work done to resolve a socket close() bug in perl #120091 and perl #118059 is not workable in its current state with this version of VC++. Therefore, we have effectively reverted that bug fix for VS2015 onwards on the basis that being able to build with VS2015 onwards is more important than keeping the bug fix. We may revisit this in the future to attempt to fix the bug again in a way that is compatible with VS2015. not ideal but okay.

These changes do not affect compilation with GCC or with Visual Studio versions up to and including VS2013, i.e., the bug fix is retained (unchanged) for those compilers. so if you're on those, you're safe bestie.

Note that you may experience compatibility problems if you mix a perl built with GCC or VS <= VS2013 with XS modules built with VS2015, or if you mix a perl built with VS2015 with XS modules built with GCC or VS <= VS2013. Some incompatibility may arise because of the bug fix that has been reverted for VS2015 builds of perl, but there may well be incompatibility anyway because of the rewritten CRT in VS2015 (e.g., see discussion at http://stackoverflow.com/questions/30412951). ⚠️ mixing is not the vibe.

It now automatically detects GCC versus Visual C and sets the VC version number on Win32. 🤖

Linux 🐧

Linux besties, Drop support for Linux a.out executable format. Linux has used ELF for over twenty years. bye a.out 👋

OpenBSD 6 🐡

OpenBSD 6 still does not support returning pid, gid, or uid with SA_SIGINFO. Make sure to account for it. iykyk.

FreeBSD 😈

t/uni/overload.t: Skip hanging test on FreeBSD. noted.

DragonFly BSD 🐉

DragonFly BSD now has support for setproctitle(). [GH #15703] https://github.com/Perl/perl5/issues/15703. slay.

✨ Internal Changes ✨

A brand new API function sv_setpv_bufsize() just dropped, and it lets you set the length AND the allocated size of the buffer in an SV at the same time — growing the buffer if it needs to. iconic, honestly. 💅
New API macro alert: SvPVCLEAR() sets its SV argument to an empty string, same vibe as Perl-space $x = '', but with a bunch of optimisations baked in. 🎀
Several new macros and functions for dealing with Unicode and UTF-8-encoded strings have been added to the API, plus some changes to how existing functions behave (peep "Unicode Support" in perlapi for the full tea):
- New versions of API macros like isALPHA_utf8 and toLOWER_utf8 have arrived, each with a _safe suffix, like isSPACE_utf8_safe. They take an extra parameter: an upper limit on how far into the string it's safe to read. Using the old versions could cause attempts to read beyond the end of the input buffer if the UTF-8 isn't well-formed, so their use now raises a deprecation warning. Deets live at "Character classification" in perlapi.
- Macros like isALPHA_utf8 and toLOWER_utf8 now die if they detect that their input UTF-8 is malformed. A deprecation warning had been issued for this since Perl 5.18, so bestie, you've had time. 😭
- Several new macros for analysing the validity of utf8 sequences. They are:

UTF8_GOT_ABOVE_31_BIT UTF8_GOT_CONTINUATION UTF8_GOT_EMPTY UTF8_GOT_LONG UTF8_GOT_NONCHAR UTF8_GOT_NON_CONTINUATION UTF8_GOT_OVERFLOW UTF8_GOT_SHORT UTF8_GOT_SUPER UTF8_GOT_SURROGATE UTF8_IS_INVARIANT UTF8_IS_NONCHAR UTF8_IS_SUPER UTF8_IS_SURROGATE UVCHR_IS_INVARIANT isUTF8_CHAR_flags isSTRICT_UTF8_CHAR isC9_STRICT_UTF8_CHAR

Functions that are all extensions of the is_utf8_string_*() functions, applying various restrictions to the UTF-8 recognized as valid:

is_strict_utf8_string, is_strict_utf8_string_loc, is_strict_utf8_string_loclen,

is_c9strict_utf8_string, is_c9strict_utf8_string_loc, is_c9strict_utf8_string_loclen,

is_utf8_string_flags, is_utf8_string_loc_flags, is_utf8_string_loclen_flags,

is_utf8_fixed_width_buf_flags, is_utf8_fixed_width_buf_loc_flags, is_utf8_fixed_width_buf_loclen_flags.

is_utf8_invariant_string. is_utf8_valid_partial_char. is_utf8_valid_partial_char_flags.

The functions utf8n_to_uvchr and its derivatives have had several changes of behaviour. 👀
- Calling them while passing a string length of 0 is now asserted against in DEBUGGING builds, and otherwise returns the Unicode REPLACEMENT CHARACTER. If you have nothing to decode, you shouldn't call the decode function. simple as that fr fr.
- They now return the Unicode REPLACEMENT CHARACTER if called with UTF-8 that has the overlong malformation and that malformation is allowed by the input parameters. This malformation is where the UTF-8 looks valid syntactically, but there's a shorter sequence that yields the same code point. This has been forbidden since Unicode version 3.1. periodt.
- They now accept an input flag to allow the overflow malformation. This malformation is when the UTF-8 may be syntactically valid, but the code point it represents is not capable of being represented in the word length on the platform. What "allowed" means, in this case, is that the function doesn't return an error, and it advances the parse pointer to beyond the UTF-8 in question, but it returns the Unicode REPLACEMENT CHARACTER as the value of the code point (since the real value is not representable).
- They no longer abandon searching for other malformations when the first one is encountered. So a call to one of these functions can generate multiple diagnostics, instead of just one. the way that it'll just keep reading you for filth — multiple times 💀
valid_utf8_to_uvchr() has been added to the API (although it was present in core earlier). Like utf8_to_uvchr_buf(), but assumes that the next character is well-formed. Use with caution. ⚠️
A new function, utf8n_to_uvchr_error, has been added for use by modules that need to know the details of UTF-8 malformations beyond pass/fail. Previously, the only ways to know why a sequence was ill-formed was to capture and parse the generated diagnostics, or to do your own analysis. exhausting, honestly.
There's now a safer version of utf8_hop(), called utf8_hop_safe(). Unlike utf8_hop(), utf8_hop_safe() won't navigate before the beginning or after the end of the supplied buffer. she's got boundaries. slay. 🦋
Two new functions, utf8_hop_forward() and utf8_hop_back(), are similar to utf8_hop_safe() but are for when you know which direction you wish to travel.
Two new macros which return useful utf8 byte sequences:

BOM_UTF8

REPLACEMENT_CHARACTER_UTF8

Perl is now built with the PERL_OP_PARENT compiler define enabled by default. To disable it, use the PERL_NO_OP_PARENT compiler define. This flag alters how the op_sibling field is used in OP structures, and has been available optionally since perl 5.22.

See "Internal Changes" in perl5220delta for more details of what this build option does.

Three new ops, OP_ARGELEM, OP_ARGDEFELEM, and OP_ARGCHECK have been added. These are intended principally to implement the individual elements of a subroutine signature, plus any overall checking required. signature girlies rise up 💖
The OP_PUSHRE op has been eliminated and the OP_SPLIT op has been changed from class LISTOP to PMOP.

Formerly the first child of a split would be a pushre, which would have the split's regex attached to it. Now the regex is attached directly to the split op, and the pushre has been eliminated. no middleman, we love to see it. ✨

The op_class() API function has been added. This is like the existing OP_CLASS() macro, but can more accurately determine what struct an op has been allocated as. For example OP_CLASS() might return OA_BASEOP_OR_UNOP indicating that ops of this type are usually allocated as an OP or UNOP; while op_class() will return OPclass_BASEOP or OPclass_UNOP as appropriate.
All parts of the internals now agree that the sassign op is a BINOP; previously it was listed as a BASEOP in regen/opcodes, which meant that several parts of the internals had to be special-cased to accommodate it. This oddity's original motivation was to handle code like $x ||= 1; that is now handled in a simpler way. character development 🫶
The output format of the op_dump() function (as used by perl -Dx) has changed: it now displays an "ASCII-art" tree structure 🌈, and shows more low-level details about each op, such as its address and class.
The PADOFFSET type has changed from being unsigned to signed, and several pad-related variables such as PL_padix have changed from being of type I32 to type PADOFFSET.
The DEBUGGING-mode output for regex compilation and execution has been enhanced.
Several obscure SV flags have been eliminated, sometimes along with the macros which manipulate them: SVpbm_VALID, SVpbm_TAIL, SvTAIL_on, SvTAIL_off, SVrepl_EVAL, SvEVALED. gone, not forgotten 💜
An OP op_private flag has been eliminated: OPpRUNTIME. This used to often get set on PMOP ops, but had become meaningless over time.

🐛 Selected Bug Fixes 🐛

Perl no longer panics when switching into some locales on machines with buggy strxfrm() implementations in their libc. [GH #13768] https://github.com/Perl/perl5/issues/13768
$-{$name} would leak an AV on each access if the regular expression had no named captures. The same applies to access to any hash tied with Tie::Hash::NamedCapture and all => 1. [GH #15882] https://github.com/Perl/perl5/issues/15882
Attempting to use the deprecated variable $# as the object in an indirect object method call could cause a heap use after free or buffer overflow. [GH #15599] https://github.com/Perl/perl5/issues/15599 💀
When checking for an indirect object method call, in some rare cases the parser could reallocate the line buffer but then continue to use pointers to the old buffer. [GH #15585] https://github.com/Perl/perl5/issues/15585
Supplying a glob as the format argument to formline would cause an assertion failure. [GH #15862] https://github.com/Perl/perl5/issues/15862
Code like $value1 =~ qr/.../ ~~ $value2 would have the match converted into a qr// operator, leaving extra elements on the stack to confuse any surrounding expression. [GH #15859] https://github.com/Perl/perl5/issues/15859
Since v5.24 in some obscure cases, a regex which included code blocks from multiple sources (e.g., via embedded via qr// objects) could end up with the wrong current pad and crash or give weird results. [GH #15657] https://github.com/Perl/perl5/issues/15657
Occasionally local()s in a code block within a pattern weren't being undone when the pattern matching backtracked over the code block. [GH #15056] https://github.com/Perl/perl5/issues/15056
Using substr() to modify a magic variable could access freed memory in some cases. [GH #15871] https://github.com/Perl/perl5/issues/15871
Under use utf8, the entire source code is now checked for being UTF-8 well formed, not just quoted strings as before. [GH #14973] https://github.com/Perl/perl5/issues/14973.
The range operator .. on strings now handles its arguments correctly when in the scope of the unicode_strings feature. The previous behaviour was sufficiently unexpected that we believe no correct program could have made use of it. bestie that's a polite way of saying "please don't have been relying on that" 😭
The split operator did not ensure enough space was allocated for its return value in scalar context. It could then write a single pointer immediately beyond the end of the memory block allocated for the stack. [GH #15749] https://github.com/Perl/perl5/issues/15749
Using a large code point with the W pack template character with the current output position aligned at just the right point could cause a write of a single zero byte immediately beyond the end of an allocated buffer. [GH #15572] https://github.com/Perl/perl5/issues/15572
okay so supplying a format's picture argument as part of the format argument list 💅 — if the picture specifies modifying the argument, it could cause an access to the new freed compiled format. [GH #15566] <https://github.com/Perl/perl5/issues/15566>
The sort() operator's built-in numeric comparison function 😭 — it didn't handle large integers that weren't exactly representable by a double. This now uses the same code used to implement the <=> operator. [GH #15768] <https://github.com/Perl/perl5/issues/15768>
Fix issues with /(?{ ... <<EOF })/ 🔥 — it was breaking Method::Signatures. [GH #15779] <https://github.com/Perl/perl5/issues/15779>
Fixed an assertion failure with chop and chomp 💀 — could be triggered by chop(@x =~ tr/1/1/). [GH #15738] <https://github.com/Perl/perl5/issues/15738>.
Fixed a comment skipping error in patterns under /x 🦋 — it could stop skipping a byte early, which could be in the middle of a UTF-8 character. [GH #15790] <https://github.com/Perl/perl5/issues/15790>.
perldb now ignores /dev/tty on non-Unix systems. [GH #12244] <https://github.com/Perl/perl5/issues/12244>;
Fix assertion failure for {}->$x when $x isn't defined. [GH #15791] <https://github.com/Perl/perl5/issues/15791>.
Fix an assertion error which could be triggered when a lookahead string in patterns exceeded a minimum length. [GH #15796] <https://github.com/Perl/perl5/issues/15796>.
Only warn once per literal number about a misplaced _. [GH #9989] <https://github.com/Perl/perl5/issues/9989>.
The tr/// parse code could be looking at uninitialized data after a perse error (yes, bestie, that's what it says 😭). [GH #15624] <https://github.com/Perl/perl5/issues/15624>.
In a pattern match, a back-reference (\1) to an unmatched capture could read back beyond the start of the string being matched. [GH #15634] <https://github.com/Perl/perl5/issues/15634>.
use re 'strict' is supposed to warn if you use a range (such as /(?[ [ X-Y ] ])/) whose start and end digit aren't from the same group of 10. It didn't do that for five groups of mathematical digits starting at U+1D7E.
A sub containing a forward declaration with the same name (e.g., sub c { sub c; }) could sometimes crash or loop infinitely. [GH #15557] <https://github.com/Perl/perl5/issues/15557>
A crash in executing a regex with a non-anchored UTF-8 substring against a target string that also used UTF-8 has been fixed. [GH #15628] <https://github.com/Perl/perl5/issues/15628>
Previously, a shebang line like #!perl -i u could be erroneously interpreted as requesting the -u option. This has been fixed. [GH #15623] <https://github.com/Perl/perl5/issues/15623>
The regex engine was previously producing incorrect results in some rare situations when backtracking past an alternation that matches only one thing; this showed up as capture buffers ($1, $2, etc.) erroneously containing data from regex execution paths that weren't actually executed for the final match. [GH #15666] <https://github.com/Perl/perl5/issues/15666>
Certain regexes making use of the experimental regex_sets feature could trigger an assertion failure. This has been fixed. [GH #15620] <https://github.com/Perl/perl5/issues/15620>
Invalid assignments to a reference constructor (e.g., \eval=time) could sometimes crash in addition to giving a syntax error. [GH #14815] <https://github.com/Perl/perl5/issues/14815>
The parser could sometimes crash if a bareword came after evalbytes. [GH #15586] <https://github.com/Perl/perl5/issues/15586>
Autoloading via a method call would warn erroneously (Use of inherited AUTOLOAD for non-method) if there was a stub present in the package into which the invocant had been blessed. The warning is no longer emitted in such circumstances. [GH #9094] <https://github.com/Perl/perl5/issues/9094>
The use of splice on arrays with non-existent elements could cause other operators to crash. [GH #15577] <https://github.com/Perl/perl5/issues/15577>
A possible buffer overrun when a pattern contains a fixed utf8 substring. [GH #15534] <https://github.com/Perl/perl5/issues/15534>
Fixed two possible use-after-free bugs in perl's lexer. [GH #15549] <https://github.com/Perl/perl5/issues/15549>
Fixed a crash with s///l where it thought it was dealing with UTF-8 when it wasn't. [GH #15543] <https://github.com/Perl/perl5/issues/15543>
Fixed a place where the regex parser was not setting the syntax error correctly on a syntactically incorrect pattern. [GH #15565] <https://github.com/Perl/perl5/issues/15565>
The &. operator (and the & operator, when it treats its arguments as strings) were failing to append a trailing null byte if at least one string was marked as utf8 internally. Many code paths (system calls, regexp compilation) still expect there to be a null byte in the string buffer just past the end of the logical string. An assertion failure was the result. [GH #15606] <https://github.com/Perl/perl5/issues/15606>
Avoid a heap-after-use error in the parser when creating an error message for a syntactically invalid heredoc. [GH #15527] <https://github.com/Perl/perl5/issues/15527>
Fix a segfault when run with -DC options on DEBUGGING builds. [GH #15563] <https://github.com/Perl/perl5/issues/15563>
Fixed the parser error handling in subroutine attributes for an '":attr(foo"' that does not have an ending '")"'.
Fix the perl lexer to correctly handle a backslash as the last char in quoted-string context. This actually fixed two bugs, [GH #15546] <https://github.com/Perl/perl5/issues/15546> and [GH #15582] <https://github.com/Perl/perl5/issues/15582>.
In the API function gv_fetchmethod_pvn_flags, rework separator parsing to prevent possible string overrun with an invalid len argument. [GH #15598] <https://github.com/Perl/perl5/issues/15598>
Problems with in-place array sorts: code like @a = sort { ... } @a, where the source and destination of the sort are the same plain array, are optimised to do less copying around. Two side-effects of this optimisation were that the contents of @a as seen by sort routines were partially sorted; and under some circumstances accessing @a during the sort could crash the interpreter. Both these issues have been fixed, and Sort functions see the original value of @a. [GH #15387] <https://github.com/Perl/perl5/issues/15387>
Non-ASCII string delimiters are now reported correctly in error messages for unterminated strings. [GH #15469] <https://github.com/Perl/perl5/issues/15469>
pack("p", ...) used to emit its warning (Attempt to pack pointer to temporary value) erroneously in some cases, but has been fixed.
@DB::args is now exempt from used once warnings. The warnings only occurred under -w, because warnings.pm itself uses @DB::args multiple times.
The use of built-in arrays or hash slices in a double-quoted string no longer issues a warning (Possible unintended interpolation...) if the variable has not been mentioned before. This affected code like qq|@DB::args| and qq|@SIG{'CHLD', 'HUP'}|. (The special variables @- and @+ were already exempt from the warning.)
gethostent and similar functions now perform a null check internally, to avoid crashing with the torsocks library. This was a regression from v5.22. [GH #15478] <https://github.com/Perl/perl5/issues/15478>
defined *{'!'}, defined *{'['}, and defined *{'-'} no longer leak memory if the typeglob in question has never been accessed before.
Mentioning the same constant twice in a row (which is a syntax error) no longer fails an assertion under debugging builds. This was a regression from v5.20. [GH #15017] <https://github.com/Perl/perl5/issues/15017>
Many issues relating to printf "%a" of hexadecimal floating point were fixed. In addition, the subnormals (formerly known as denormals) floating point numbers are now supported both with the plain IEEE 754 floating point numbers (64-bit or 128-bit) and the x86 80-bit extended precision. Note that subnormal hexadecimal floating point literals will give a warning about exponent underflow. [GH #15495] <https://github.com/Perl/perl5/issues/15495> [GH #15503] <https://github.com/Perl/perl5/issues/15503> [GH #15504] <https://github.com/Perl/perl5/issues/15504> [GH #15505] <https://github.com/Perl/perl5/issues/15505> [GH #15510] <https://github.com/Perl/perl5/issues/15510> [GH #15512] <https://github.com/Perl/perl5/issues/15512>
A regression in v5.24 with tr/\N{U+...}/foo/ when the code point was between 128 and 255 has been fixed. [GH #15475] <https://github.com/Perl/perl5/issues/15475>.
Use of a string delimiter whose code point is above 2**31 now works correctly on platforms that allow this. Previously, certain characters, due to truncation, would be confused with other delimiter characters with special meaning (such as ? in m?...?), resulting in inconsistent behaviour. Note that this is non-portable, and is based on Perl's extension to UTF-8, and is probably not displayable nor enterable by any editor. [GH #15477] <https://github.com/Perl/perl5/issues/15477>
@{x followed by a newline where x represents a control or non-ASCII character no longer produces a garbled syntax error message or a crash. [GH #15518] <https://github.com/Perl/perl5/issues/15518>
An assertion failure with %: = 0 has been fixed. [GH #15358] <https://github.com/Perl/perl5/issues/15358>
In Perl 5.18, the parsing of $foo::$bar was accidentally changed, such that it would be treated as $foo."::".$bar. The previous behavior, which was to parse it as $foo:: . $bar, has been restored. [GH #15408] <https://github.com/Perl/perl5/issues/15408>
Since Perl 5.20, line numbers have been off by one when perl is invoked with the -x switch. This has been fixed. [GH #15413] <https://github.com/Perl/perl5/issues/15413>
Vivifying a subroutine stub in a deleted stash — like delete $My::{"Foo::"}; \&My::Foo::foo — doesn't crash anymore bestie 💖 it started crashing back in Perl 5.18 and we said NOT today. [GH #15420] <https://github.com/Perl/perl5/issues/15420>
Some cursed lil edge cases where subroutines and file handles were getting freed at the same exact time 😭 could crash — fixed now. The crash was born in Perl 5.22. [GH #15435] <https://github.com/Perl/perl5/issues/15435>
Code that goes looking for a variable name tied to an uninitialized value could trip an assertion failure when magic is involved, like with $ISA[0][0] ✨ all better now. [GH #15364] <https://github.com/Perl/perl5/issues/15364>
That crash from code generating the warning Subroutine STASH::NAME redefined in cases like sub P::f{} undef *P::; *P::f =sub{};? Fixed. And when the STASH is missing, the warning now says Subroutine NAME redefined instead. [GH #15368] <https://github.com/Perl/perl5/issues/15368>
Fixed an assertion that got triggered by code handling deprecated format behavior, like this lil guy right here 🫶:

format STDOUT =
@
0"$x"

[GH #15366] <https://github.com/Perl/perl5/issues/15366>

A possible divide-by-zero in string transformation code on Windows? Avoided 💅 which fixes a crash when collating an empty string. [GH #15439] <https://github.com/Perl/perl5/issues/15439>
Some regex parsing glitches could lead to assertion failures with regexes like /(?<=/ and /(?<!/ 😳 fixed now. [GH #15332] <https://github.com/Perl/perl5/issues/15332>
until ($x = 1) { ... } and ...until $x = 1 now properly warn when syntax warnings are turned on, the way they always should've. [GH #15138] <https://github.com/Perl/perl5/issues/15138>
socket() now leaves the error code the system handed back sitting in $! on failure 👑 [GH #15383] <https://github.com/Perl/perl5/issues/15383>
Assignment variants of any bitwise ops under the bitwise feature would full-on crash if the left-hand side was an array or hash 💀 [GH #15346] <https://github.com/Perl/perl5/issues/15346>
require followed by a single colon (so like foo() ? require : ...) now parses correctly as require with implicit $_ 🌸 instead of being read as require "". [GH #15380] <https://github.com/Perl/perl5/issues/15380>
Scalar keys %hash can now be assigned to consistently in all scalar lvalue contexts — before it worked in some contexts and not others, which was giving chaotic energy fr.
List assignment to vec or substr with an array or hash as its first argument used to blow up with crashes or Can't coerce errors at run time — unlike scalar assignment, which errored at compile time. Now list assignment gives a compile-time error too 🎀 [GH #15370] <https://github.com/Perl/perl5/issues/15370>
Expressions with an && or || operator (or their synonyms and and or) were being compiled incorrectly in some cases. If the left-hand side was either a negated bareword constant or a negated do {} block containing a constant expression, and the right-hand side was a negated non-foldable expression, one of the negations was basically getting ignored 🙈 Same deal with if and unless statement modifiers, just with the left and right sides swapped. This long-standing bug has now been fixed. [GH #15285] <https://github.com/Perl/perl5/issues/15285>
reset with an argument no longer crashes when it bumps into stash entries that aren't globs. [GH #15314] <https://github.com/Perl/perl5/issues/15314>
Assigning hashes to, and deleting, typeglobs named *:::::: no longer causes crashes 🌈 [GH #15307] <https://github.com/Perl/perl5/issues/15307>
Perl wasn't correctly handling true/false values on the LHS of a list assign — specifically the truth values that boolean operators return. This could trigger an assertion failure in something like this:

for ($x > $y) {
    ($_, ...) = (...); # here $_ is aliased to a truth value
}

This was a regression from v5.24. [GH #15690] <https://github.com/Perl/perl5/issues/15690>

Assertion failure with user-defined Unicode-like properties ✨ fixed. [GH #15696] <https://github.com/Perl/perl5/issues/15696>
Fixed the error message for an unclosed \N{ in a regex. An unclosed \N{ could give the wrong error message: \N{NAME} must be resolved by the lexer 💀
List assignment in list context where the LHS contained aggregates and there weren't enough RHS elements used to skip scalar lvalues. Previously (($a,$b,@c,$d) = (1)) in list context returned ($a); now it returns ($a,$b,$d) 🦋 And (($a,$b,$c) = (1)) is unchanged — it still returns ($a,$b,$c). You can see it in this:

sub inc { $_++ for @_ }
inc(($a,$b,@c,$d) = (10))

Formerly the values of ($a,$b,$d) would be left as (11,undef,undef); now they're (11,1,1) 👑

Code like /(?{ s!!! })/ could trigger infinite recursion on the C stack (not the normal perl stack, bestie — the C one 😭) when the last successful pattern in scope is itself. We dodge the segfault by simply forbidding the use of the empty pattern when it would resolve to the currently executing pattern. [GH #15669] <https://github.com/Perl/perl5/issues/15669>
Stopped reading past the end of the line buffer in perl's lexer when there's a short UTF-8 character hanging out at the end. [GH #15531] <https://github.com/Perl/perl5/issues/15531>
Alternations in regular expressions were sometimes failing to match a utf8 string against a utf8 alternate. [GH #15680] <https://github.com/Perl/perl5/issues/15680>
Made do "a\0b" fail silently (returning undef and setting $!) instead of throwing an error. [GH #15676] <https://github.com/Perl/perl5/issues/15676>
chdir with no argument wasn't making sure there was stack space available for returning its result 💅 [GH #15569] <https://github.com/Perl/perl5/issues/15569>
All error messages related to do now actually say do — some of them used to claim they came from require instead 🙈
Executing undef $x where $x is tied or magical no longer wrongly blames the variable for an uninitialized-value warning that was actually hit by the tied/magical code. Periodt.
Code like $x = $x . "a" was incorrectly failing to yield a use of uninitialized value warning when $x was a lexical variable with an undefined value. Fixed now. [GH #15269] <https://github.com/Perl/perl5/issues/15269>
undef *_; shift or undef *_; pop inside a subroutine, with no argument to shift or pop, started crashing in Perl 5.14 — but it's fixed now 🎀
string$scalar->$* now correctly prefers concatenation overloading over string overloading if $scalar->$* returns an overloaded object, which brings it into consistency with $$scalar ✨
/@0{0*->@*/*0 and similar contortions used to crash, but no longer do — they now merely produce a syntax error 🌸 [GH #15333] <https://github.com/Perl/perl5/issues/15333>
do or require with an argument that's a reference or typeglob which, when stringified, contains a null character, started crashing in Perl 5.20 — but has now been fixed. [GH #15337] <https://github.com/Perl/perl5/issues/15337>
Improved the error message for a missing tie() package/method 🫶 which brings the error messages in line with the ones used for normal method calls.
Parsing bad POSIX charclasses no longer leaks memory 👑 [GH #15382] <https://github.com/Perl/perl5/issues/15382>

💀 Known Problems 💀

G++ 6 handles subnormal (denormal) floating point values differently than gcc 6 or g++ 5, which results in "flush-to-zero". The end result is that if you specify very small values using the hexadecimal floating point format, like 0x1.fffffffffffffp-1022, they become zeros 😭 [GH #15990] <https://github.com/Perl/perl5/issues/15990>

🌈 Errata From Previous Releases 🌈

Fixed issues with recursive regexes. The behavior was fixed in Perl 5.24. [GH #14935] <https://github.com/Perl/perl5/issues/14935>

🕊️ Obituary 🕊️

Jon Portnoy (AVENJ), a prolific Perl author and admired Gentoo community member, has passed away on August 10, 2016. He will be remembered and missed by all those who he came in contact with, and enriched with his intellect, wit, and spirit. 💜

It is with great sadness that we also note Kip Hampton's passing. Probably best known as the author of the Perl & XML column on XML.com, he was a core contributor to AxKit, an XML server platform that became an Apache Foundation project. He was a frequent speaker in the early days at OSCON, and most recently at YAPC::NA in Madison. He was frequently on irc.perl.org as ubu, generally in the #axkit-dahut community, the group responsible for YAPC::NA Asheville in 2011.

Kip and his constant contributions to the community will be greatly missed. 🫶

💖 ACKNOWLEDGEMENTS 💖

okay so picture this: Perl 5.26.0 is literally approximately 13 months of development since Perl 5.24.0, and it's carrying approximately 360,000 lines of changes across 2,600 files from 86 authors. that's not a release, that's a movement. 🔥

and if we take out the auto-generated files, the docs, and the release tools? still approximately 230,000 lines of changes to 1,800 .pm, .t, .c and .h files. bestie. that's so much code. 💀

Perl keeps flourishing into its third decade thanks to a vibrant community of users and developers — the way that works is genuinely iconic. the following people are known to have contributed the improvements that became Perl 5.26.0:

Aaron Crane
Abigail
Ævar Arnfjörð Bjarmason
Alex Vandiver
Andreas König
Andreas Voegele
Andrew Fresh
Andy Lester
Aristotle Pagaltzis
Chad Granum
Chase Whitener
Chris 'BinGOs' Williams
Chris Lamb
Christian Hansen
Christian Millour
Colin Newell
Craig A. Berry
Dagfinn Ilmari Mannsåker
Dan Collins
Daniel Dragan
Dave Cross
Dave Rolsky
David Golden
David H. Gutteridge
David Mitchell
Dominic Hargreaves
Doug Bell
E. Choroba
Ed Avis
Father Chrysostomos
François Perrad
Hauke D
H.Merijn Brand
Hugo van der Sanden
Ivan Pozdeev
James E Keenan
James Raspass
Jarkko Hietaniemi
Jerry D. Hedden
Jim Cromie
J. Nick Koston
John Lightsey
Karen Etheridge
Karl Williamson
Leon Timmermans
Lukas Mai
Matthew Horsfall
Maxwell Carey
Misty De Meo
Neil Bowers
Nicholas Clark
Nicolas R.
Niko Tyni
Pali
Paul Marquess
Peter Avalos
Petr Písař
Pino Toscano
Rafael Garcia-Suarez
Reini Urban
Renee Baecker
Ricardo Signes
Richard Levitte
Rick Delaney
Salvador Fandiño
Samuel Thibault
Sawyer X
Sébastien Aperghis-Tramoni
Sergey Aleynikov
Shlomi Fish
Smylers
Stefan Seifert
Steffen Müller
Stevan Little
Steve Hay
Steven Humphrey
Sullivan Beck
Theo Buehler
Thomas Sibley
Todd Rinaldo
Tomasz Konojacki
Tony Cook
Unicode Consortium
Yaroslav Kuzmin
Yves Orton
Zefram

ngl, that list above is almost certainly incomplete — it's automatically generated from version control history. specifically, it does not include the names of the (very much appreciated 🫶) contributors who reported issues to the Perl bug tracker. if that's you: we see you, we love you, you're the main character.

a lot of the changes in this version originated in the CPAN modules included in Perl's core, and the whole CPAN community gets a massive thank-you for helping Perl flourish. 🌸

want the complete historical receipts, like every contributor ever? check the AUTHORS file in the Perl source distribution. periodt.

🐛 REPORTING BUGS 🐛

found something you think is a bug? first move: go check the perl bug database at <https://rt.perl.org/>. there might also be info at <http://www.perl.org/>, the Perl Home Page. ✨

if you believe you've got an unreported bug, run the perlbug program that ships with your release. and bestie, please — trim your bug down to a tiny but sufficient test case. tiny. minimal. chef's kiss. your bug report, along with the output of perl -V, gets sent off to perlbug@perl.org to be analysed by the Perl porting team.

⚠️ if the bug you're reporting has security implications that make it inappropriate to send to a publicly archived mailing list, then see "SECURITY VULNERABILITY CONTACT INFORMATION" in perlsec for the details on how to report it. do not just yeet it into the public tracker, okay? 💅

🫶 GIVE THANKS 🫶

feeling grateful? want to thank the Perl 5 Porters for the work they did in Perl 5? you literally can, by running the perlthanks program:

perlthanks

that sends an email to the Perl 5 Porters list with your show of thanks. wholesome. no notes. 🥹💖

👀 SEE ALSO 👀

the Changes file — for an explanation of how to view exhaustive details on what changed 📜
the INSTALL file — for how to build Perl 🔨
the README file — for general stuff 🌈
the Artistic and Copying files — for copyright information ⚖️

and that's a wrap on PERL5260DELTA(1perl) bestie 🎀 you just read the whole thing, no skimming, we're so proud. this one's from perl v5.44.0, dated 2026-10-17 — go forth and perlthanks, report your tiny-but-sufficient test cases, and slay 💅✨🦋

📦 where this page comes from

arch rolling: perl 5.44.0-1 · Artistic-1.0-Perl AND GPL-1.0-or-later
💖 girlified by deepseek-ai/DeepSeek-V4.1-Flash on 2026-11-03: a language model's rewrite of the original, under its terms

PERL5260DELTA(1perl)

💖 PERL5260DELTA(1perl) — perl5260delta 💖

✨ NAME ✨

🌸 DESCRIPTION 🌸

🚨 Notice 🚨

👑 Core Enhancements 👑

🦋 Lexical subroutines are no longer experimental 🦋

🐚 Indented Here-documents 🐚

🌈 New regular expression modifier /xx 🌈

🎀 "@{^CAPTURE}", "%{^CAPTURE}", and "%{^CAPTURE_ALL}" 🎀

🪄 Declaring a reference to a variable 🪄

🌍 Unicode 9.0 is now supported 🌍

🔮 Use of "\p{script}" uses the improved Script_Extensions property 🔮

🧚 Perl can now do default collation in UTF-8 locales on platforms that support it 🧚

🍓 Better locale collation of strings containing embedded "NUL" characters 🍓

💅 "CORE" subroutines for hash and array functions callable via reference 💅

🧬 New Hash Function For 64-bit Builds 🧬

🛡️ Security 🛡️

🚫 Removal of the current directory (".") from @INC 🚫

Escaped colons and relative paths in PATH 🌈

New -Di switch is now required for PerlIO debugging output ✨

💥 Incompatible Changes 💥

Unescaped literal { characters in regular expression patterns are no longer permissible

scalar(%hash) return signature changed

"keys" returned from an lvalue subroutine

The ${^ENCODING} facility has been removed

POSIX::tmpnam() has been removed

require ::Foo::Bar is now illegal

Literal control character variable names are no longer permissible

"NBSP" is no longer permissible in "\N{...}"

🌧️ Deprecations 🌧️

String delimiters that aren't stand-alone graphemes are now deprecated

"\cX" that maps to a printable is no longer deprecated

🚀 Performance Enhancements 🚀

📦 Modules and Pragmata 📦

Updated Modules and Pragmata

📚 Documentation 📚

✨ New Documentation ✨

perldeprecation

🦋 Changes to Existing Documentation 🦋

perlfunc

perlguts

perlhack

perlhacktips

perlinterp

perllocale

perlmod

perlmodlib

perlobj

perlootut

perlop

perlre

perlretut

perlunicode

perlvar

💅 Diagnostics 💅

✨ New Diagnostics ✨

💀 New Errors

🎀 New Warnings

🔄 Changes to Existing Diagnostics

🛠️ Utility Changes 🛠️

🧚 c2ph and pstruct

🌈 Porting/pod_lib.pl

⭐ Porting/sync-with-cpan

🔥 perf/benchmarks

🦋 Porting/checkAUTHORS.pl

🍓 t/porting/regen.t

✨ utils/h2xs.PL

🎀 perlbug

⚙️ Configuration and Compilation 🛠️

🧪 Testing 💖

💖 Platform Support 🌍✨

🐣 New Platforms 🌱

NetBSD/VAX 🐢💾

🗺️ Platform-Specific Notes 📝

Darwin 🍎

EBCDIC 🔤

HP-UX 💜

Hurd 🧚

VAX 🧮

🌈 New regular expression modifier `/xx` 🌈

🎀 `"@{^CAPTURE}"`, `"%{^CAPTURE}"`, and `"%{^CAPTURE_ALL}"` 🎀

🔮 Use of `"\p{script}"` uses the improved Script_Extensions property 🔮

🍓 Better locale collation of strings containing embedded `"NUL"` characters 🍓

💅 `"CORE"` subroutines for hash and array functions callable via reference 💅

New `-Di` switch is now required for PerlIO debugging output ✨

Unescaped literal `{` characters in regular expression patterns are no longer permissible

`scalar(%hash)` return signature changed

`"keys"` returned from an lvalue subroutine

The `${^ENCODING}` facility has been removed

`"NBSP"` is no longer permissible in `"\N{...}"`

`"\cX"` that maps to a printable is no longer deprecated

`perldeprecation`

`perlfunc`

`perlguts`

`perlhack`

`perlhacktips`

`perlinterp`

`perllocale`

`perlmod`

`perlmodlib`

`perlobj`

`perlootut`

`perlop`

`perlre`

`perlretut`

`perlunicode`

`perlvar`