PHP 8.3

PHP 8.3 adds typed class constants, allowing classes, interfaces, traits and enums to declare the type of a constant value. It adds the #[Override] attribute, which makes PHP verify that a marked method actually overrides a parent or interface method. Other additions include json_validate() for checking JSON without decoding it, improved random-number APIs, mb_str_pad(), and str_increment() and str_decrement() for ASCII alphanumeric strings. The release also expands readonly-property handling during cloning and introduces several deprecations, including incrementing or decrementing non-alphanumeric strings and certain legacy calls with omitted arguments.

PHP 8.3 remains within its supported window, so staying on it does not by itself mean running an unsupported runtime. The practical trade-off is that the application will not gain language, runtime, and library improvements available in newer supported PHP lines. Delaying the move can also increase later migration effort as dependencies raise their PHP requirements, remove compatibility with older versions, or begin emitting deprecation warnings under newer runtimes. Teams that do not keep PHP 8.3 patched also retain avoidable exposure to fixes delivered within the line's support policy.

Keep the deployed PHP 8.3 build current, including its bundled and externally managed extensions. Start a compatibility branch against the PHP version you intend to adopt next, and run the full test suite, static analysis, dependency checks, and production-like smoke tests there. Inventory extensions, framework versions, CI images, container base images, and deployment tooling before changing the runtime. Resolve PHP 8.3 deprecations in application code and dependencies now, particularly code that relies on legacy string increment or decrement behavior, then upgrade dependencies and the runtime together through a staged rollout with monitoring and a tested rollback path.