Updated NEWS for #66535
Updated news for #66535 and #66109
support for static analyzers other than visual studio
turn off some false positives
Windows cert verify improvements + leak fixes

- Clean up properly at all fail points in native Windows peer
  verification routine
- Bring certificate usages and chain flags into line with chromium
  implementation in windows environments
Capture peer cert even if verify fails

Previously the "capture_peer_cert" SSL context option only
captured the peer's certificate if the verification routine
succeeded.

By also capturing the on verify failure applications have the
ability to parse the cert and ask users whether they wish to
proceed given the information presented by the peer.
Fixed NEWS.
Sort alphabetically
Added DateTimeImmutable::createFromMutable.
proc_open(): separate environment values that aren't strings

Added a test case
Updated news for #60602
Merge branch 'PHP-5.4' into PHP-5.5
Fixed news for #60602
Merge branch 'PHP-5.5' into PHP-5.6
Fixed NEWS for #60602
Add notice about tsrm_virtual_cwd.h moved to zend_virtual_cwd.h
as this introduce need for awfull hacks...