From e2ef8bf22eadbdfc5c481c21dd0cc057cff55d07 Mon Sep 17 00:00:00 2001 From: Riddhesh Sanghvi Date: Fri, 25 Sep 2026 06:26:23 +0000 Subject: [PATCH 1/3] chore(deps): bump php to 8.2.34, 8.4.26 and 8.5.11 --- php/8.2/Dockerfile | 2 +- php/8.4/Dockerfile | 2 +- php/8.5/Dockerfile | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/php/8.2/Dockerfile b/php/8.2/Dockerfile index 5dc1500..295658b 100644 --- a/php/8.2/Dockerfile +++ b/php/8.2/Dockerfile @@ -1,4 +1,4 @@ -FROM php:8.2.33-fpm +FROM php:8.2.34-fpm LABEL maintainer="Riddhesh Sanghvi , Devarshi Sathiya " LABEL org.label-schema.schema-version="1.0.0" diff --git a/php/8.4/Dockerfile b/php/8.4/Dockerfile index db1ca63..48ca208 100644 --- a/php/8.4/Dockerfile +++ b/php/8.4/Dockerfile @@ -1,4 +1,4 @@ -FROM php:8.4.25-fpm +FROM php:8.4.26-fpm LABEL maintainer="Riddhesh Sanghvi " LABEL org.label-schema.schema-version="1.0.0" diff --git a/php/8.5/Dockerfile b/php/8.5/Dockerfile index a5cfb52..5c78f87 100644 --- a/php/8.5/Dockerfile +++ b/php/8.5/Dockerfile @@ -1,4 +1,4 @@ -FROM php:8.5.7-fpm +FROM php:8.5.11-fpm LABEL maintainer="Riddhesh Sanghvi " LABEL org.label-schema.schema-version="1.0.0" From a1275979e2ebb537f8fd2fa9a549baa8ae43cefe Mon Sep 17 00:00:00 2001 From: Riddhesh Sanghvi Date: Fri, 25 Sep 2026 06:26:23 +0000 Subject: [PATCH 2/3] ci(dependabot): track the php 8.5 base image php/8.5 had no dependabot entry, so it stayed on 8.5.7 while upstream shipped 8.5.8 to 8.5.11. --- .github/dependabot.yaml | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml index 76bf503..9229532 100644 --- a/.github/dependabot.yaml +++ b/.github/dependabot.yaml @@ -95,6 +95,16 @@ updates: reviewers: - mrrobot47 + - package-ecosystem: "docker" + directory: "/php/8.5" + ignore: + - dependency-name: "php" + update-types: ["version-update:semver-major", "version-update:semver-minor"] + schedule: + interval: "weekly" + reviewers: + - mrrobot47 + - package-ecosystem: "docker" directory: "/php/stable" ignore: From 517564b4260e7aed2be9b3a642538fc8f2e17c4b Mon Sep 17 00:00:00 2001 From: Riddhesh Sanghvi Date: Fri, 25 Sep 2026 06:27:14 +0000 Subject: [PATCH 3/3] fix(php): apply Debian security updates in the frozen php 8.1 base php:8.1.34-fpm is the final PHP 8.1 release and upstream no longer rebuilds it, so its Debian 13 base stays at 13.2. Upgrading at build time keeps the base libraries patched while Debian 13 is supported. --- php/8.1/Dockerfile | 2 ++ 1 file changed, 2 insertions(+) diff --git a/php/8.1/Dockerfile b/php/8.1/Dockerfile index e39fd12..9acee4f 100644 --- a/php/8.1/Dockerfile +++ b/php/8.1/Dockerfile @@ -5,8 +5,10 @@ LABEL org.label-schema.schema-version="1.0.0" LABEL org.label-schema.vendor="EasyEngine" LABEL org.label-schema.name="php" +# Upstream stopped rebuilding php:8.1 after its EOL, so pull in Debian security updates here. RUN set -ex; \ apt-get update; \ + apt-get upgrade -y; \ apt-get install -y --no-install-recommends \ imagemagick \ less \