Update to 1.10.7 maintenance release.
As before, I applied the lazy loading change from http://www.zendframework.com/manual/en/performance.classloading.html:
find . -name '*.php' -not -wholename '*/Loader/Autoloader.php' \
-not -wholename '*/Application.php' -print0 | \
xargs -0 sed --regexp-extended --in-place 's/(require_once)/\/\/ \1/g'
We won't update these files because ZF-8158 introduced a compat buster:
In Zend/Validate/Hostname.php, we changed this so that it doesn't depend on the include path:
547c547
< $regexChars += include($this->_validIdns[strtoupper($this->_tld)]);
---
> $regexChars += include(dirname(__FILE__) . '/../../' . $this->_validIdns[strtoupper($this->_tld)]);
(In [2833]) fixes #1539 - on second thought, I'll copy Uri.php and Http/Client.php, and comment out the offending code