• Added PHP 8.7 PGO configuration templates.
• Updated 7-Zip from 26.02 to 26.03.
• Updated jq from 1.6 to 1.8.2.
• Switched to explicit nullable parameter types to resolve PHP 8.4+ deprecations.
• Fixed MariaDB PGO downloads by using the archive URL, and update MariaDB to 10.11.19.

• Add jom. #53
• Add licenses for third-party tools.

• Update 7-Zip to 26.02.
• Use supported resolved state in CycloneDX SBOM.
• Improve README and add SBOM section.

Support post-build SBOM packaging

• Enabled TLS certificate and hostname verification for downloads.
• Modernized PGO training scripts for current PHP versions.
• Enabled tracing JIT during PHP 8.4 PGO training.
• Updated PGO training to use production-style error reporting.
• Updated nginx, MariaDB, and PostgreSQL training services.
• Improved MariaDB initialization.
• Fixed download retries incorrectly reporting success.
• Fixed PHP deprecation warnings caused by nullable command and configuration results.
• Improved SPDX and CycloneDX SBOM generation and validation.
• Removed obsolete rmtools integration.

• Add support to export SBOM for PHP build artifacts.

• Add SBOM generation tool

• Added support for Visual Studio 2026/VS18
• Fixed opcache related ini entries in PGO config for PHP 8.5 and 8.6

Update 7zip to 25.01
Fixes GHSA-58pw-r2v4-pwjv, CVE-2025-53816, and CVE-2025-53817.

• Added PHP 8.6 configs for PGO.
• Added a script to map lib files for dependencies.