[wp-trac] [WordPress Trac] #61686: Update Sodium Compat to 1.21.1

[WordPress Trac]

#61686: Update Sodium Compat to 1.21.1
--------------------------------+-------------------------
 Reporter:  jrf                 |      Owner:  (none)
     Type:  task (blessed)      |     Status:  new
 Priority:  normal              |  Milestone:  6.7
Component:  External Libraries  |    Version:  6.3
 Severity:  normal              |   Keywords:  needs-patch
  Focuses:  php-compatibility   |
--------------------------------+-------------------------
 Sodium_Compat 1.21.0 and 1.21.1 were released a few months ago and contain
 support for AEGIS and more importantly from a WP point of view:
 preliminary support for PHP 8.4.
 Additionally the PHP 8.2+ `SensitiveParameter` attribute is now applied
 where appropriate to functions in the Public API.

 The version included with WP should be updated.

 Full details:
 * https://github.com/paragonie/sodium_compat/releases/tag/v1.21.0
 * https://github.com/paragonie/sodium_compat/releases/tag/v1.21.1
 * https://github.com/paragonie/sodium_compat/compare/v1.20.0...v1.21.1
 (diff with the current version included in WP Core)

 I've done a cursory review of the diff and would recommend an update at
 the earliest convenience.


 ----


 Note: Sodium Compat has also released a v2.0 version. As that version has
 a minimum PHP version of PHP 8.1 and drops support for 32-bit PHP
 installs, it is not a viable upgrade path for WordPress at this time.
 Also see this release announcement: https://paragonie.com/blog/2024/04
 /release-sodium-compat-v2-and-future-our-polyfill-libraries

 The maintainer of Sodium Compat has been in touch with me about this and
 shared the following:

 > We think WordPress will want to continue using v1.x for the foreseeable
 future. We will continue to support it for as long as it's needed.



 Previously: #48371, #51399, #51925, #53274, #53907, #55453, #56564,
 #56642, #56653, #58224

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/61686>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform