Update NEWS and UPGRADING for recent deprecation merges

NEWS

@@ -10,12 +10,15 @@ PHP                                                                        NEWS
 
 - FileInfo
   . The finfo_close() function has been deprecated. (timwolla)
+  . The $context parameter of the finfo_buffer() function has been deprecated
+    as it is ignored. (Girgias)
 
 - Intl:
   . Intl's internal error mechanism has been modernized so that it
     indicates more accurately which call site caused what error.
     Moreover, some ext/date exceptions have been wrapped inside a
     IntlException now. (Girgias)
+  . The intl.error_level INI setting has been deprecated. (Girgias)
 
 - MySQLi:
   . The mysqli_execute() alias function has been deprecated. (timwolla)
@@ -23,6 +26,8 @@ PHP                                                                        NEWS
 - OpenSSL:
   . Fixed bug GH-19369 (8.5 | Regression in openssl_sign() - support for alias
     algorithms appears to be broken). (Jakub Zelenka)
+  . The $key_length parameter for openssl_pkey_derive() has been deprecated.
+    (Girgias)
 
 - PDO:
   . The "uri:" DSN scheme has been deprecated due to security concerns with
@@ -47,6 +52,8 @@ PHP                                                                        NEWS
 
 - Standard:
   . The socket_set_timeout() alias function has been deprecated. (timwolla)
+  . Passing null to to readdir(), rewinddir(), and closedir() to use the last
+    opened directory has been deprecated. (Girgias)
 
 31 Jul 2025, PHP 8.5.0alpha4
 

UPGRADING

@@ -327,17 +327,32 @@ PHP 8.5 UPGRADE NOTES
   . The finfo_close() function has been deprecated.
     As finfo objects are freed automatically.
     RFC: https://wiki.php.net/rfc/deprecations_php_8_5#deprecate_finfo_close
+  . The $context parameter of the finfo_buffer() function has been deprecated
+    as it is ignored.
+    RFC: https://wiki.php.net/rfc/deprecations_php_8_5#deprecate_the_context_parameter_for_finfo_buffer
 
 - Hash:
   . The MHASH_* constants have been deprecated.  These have been overlooked
     when the mhash*() function family has been deprecated per
     https://wiki.php.net/rfc/deprecations_php_8_1#mhash_function_family
 
+- Intl:
+  . The intl.error_level INI setting has been deprecated.
+    Errors should either be checked manually or exceptions should be enabled
+    by using the intl.use_exceptions INI setting.
+    RFC: https://wiki.php.net/rfc/deprecations_php_8_5#deprecate_intlerror_level_ini_setting
+
 - MySQLi:
   . The mysqli_execute() alias function has been deprecated.
     Use mysqli_stmt_execute() instead.
     RFC: https://wiki.php.net/rfc/deprecations_php_8_5#formally_deprecate_mysqli_execute
 
+- OpenSSL:
+  . The $key_length parameter for openssl_pkey_derive() has been deprecated.
+    This is because it is either ignored, or truncates the key, which can be
+    a vulnerability.
+    RFC: https://wiki.php.net/rfc/deprecations_php_8_5#deprecate_key_length_parameter_of_openssl_pkey_derive
+
 - PDO:
   . The "uri:" DSN scheme has been deprecated due to security concerns with
     DSNs coming from remote URIs.
@@ -365,6 +380,10 @@ PHP 8.5 UPGRADE NOTES
   . The socket_set_timeout() alias function has been deprecated.
     Use stream_set_timeout() instead.
     RFC: https://wiki.php.net/rfc/deprecations_php_8_5#formally_deprecate_socket_set_timeout
+  . Passing null to to readdir(), rewinddir(), and closedir() to use the last
+    opened directory has been deprecated. Provide the last opened directory
+    explicitly instead.
+    RFC: https://wiki.php.net/rfc/deprecations_php_8_5#deprecate_passing_null_to_readdir_rewinddir_and_closedir
 
 ========================================
 5. Changed Functions