Skip to content

Bump the php-images group across 2 directories with 1 update - #136

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/docker/8.4-debian/php-images-54b3b94145
Closed

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/docker/8.4-debian/php-images-54b3b94145

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the php-images group with 1 update in the /8.4-debian directory: php.
Bumps the php-images group with 1 update in the /8.4-debian-prod directory: php.

Updates php from 8.4-fpm-bookworm to 8.5-fpm-bookworm

Updates php from 8.4-fpm-bookworm to 8.5-fpm-bookworm

Updates php from 8.4-fpm-bookworm to 8.5-fpm-bookworm

Updates php from 8.4-fpm-bookworm to 8.5-fpm-bookworm

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file docker Pull requests that update docker code labels Oct 26, 2026
Bumps the php-images group with 1 update in the /8.4-debian directory: php.
Bumps the php-images group with 1 update in the /8.4-debian-prod directory: php.


Updates `php` from 8.4-fpm-bookworm to 8.5-fpm-bookworm

Updates `php` from 8.4-fpm-bookworm to 8.5-fpm-bookworm

Updates `php` from 8.4-fpm-bookworm to 8.5-fpm-bookworm

Updates `php` from 8.4-fpm-bookworm to 8.5-fpm-bookworm

---
updated-dependencies:
- dependency-name: php
  dependency-version: 8.5-fpm-bookworm
  dependency-type: direct:production
  dependency-group: php-images
- dependency-name: php
  dependency-version: 8.5-fpm-bookworm
  dependency-type: direct:production
  dependency-group: php-images
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
dependabot Bot force-pushed the dependabot/docker/8.4-debian/php-images-54b3b94145 branch from 18a324e to d96b1d8 Compare November 2, 2026 09:40
@dbpolito

Copy link
Copy Markdown
Member

Closing this update because it changes the PHP runtime from 8.4 to 8.5 inside the 8.4 Debian image directories, breaking the version contract of the published tags. It also edits generated Dockerfiles without the corresponding generator configuration. Current master correctly retains PHP 8.4 and supports PHP 8.5 separately.

The security-refresh intent is valid, but it does not require crossing the minor-version boundary: fresh executions of the published base tags now report PHP 8.2.35, 8.3.36, 8.4.27, and 8.5.12. Derived-image freshness and downstream rebuild propagation are being addressed separately, including #138; security issue #137 remains open pending that verification. A future PHP 8.4 base update should preserve the 8.4 runtime and keep templates/generated files consistent.

@dbpolito dbpolito closed this Nov 13, 2026
@dependabot @github

dependabot Bot commented on behalf of github Nov 13, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/docker/8.4-debian/php-images-54b3b94145 branch November 13, 2026 20:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file docker Pull requests that update docker code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant