The runtime configuration option in the vapor.yml allows you to specify which PHP version a given environment uses.
Amazon recently announced the second version of its operating system: Amazon Linux 2 - that provides optimized performance and long term support, without any additional charges.
Starting today, you may start using PHP on top of Amazon Linux 2 by updating the runtime configuration option in the vapor.yml like so:
id: 3
name: vapor-app
environments:
production:
- runtime: php-8.0
+ runtime: php-8.0:al2
Once the environment is deployed, your application will automatically start using Amazon Linux 2 with zero downtime.
Keep in mind that using Amazon Linux 2 is highly recommended, as Amazon Linux 1 will end-of-life its standard support on December 31, 2020. After that date, Amazon will only be making "maintenance support" updates to the operating system.
We hope you enjoy this new addition to Laravel Vapor. At Laravel, we're committed to providing you with the most robust and developer-friendly PHP experience in the world. If you haven't checked out Vapor, now is a great time to start! You can create your account today at: vapor.laravel.com.
Composer had a security vulnerability reported (CVE-2021-29472) and a new version has been released to address this. Everyone should run composer self-update to get v2.0.13 which includes the fix. According to their announcment : As a precaution after updating Composer we recommend you audit your composer.lock files to ensure they only contain URLs and none which start with -- , e.g. --config and could be considered command line options. Should you find any such URL values despite our belief that this vulnerability was not exploited in the wild, please contact us immediately by email to security@packagist.org. In general we always recommend you review changes you make to your lock files to ensure no untrusted dependencies or external URLs are introduced to your application. Please note that Packagist.org is only a metadata server and package contents are downloaded from a location chosen by the package maintainers. Private Packagist will store copies of mirrored packag...