From 69cf50d86158045a86324c899a3b631ac4d2d415 Mon Sep 17 00:00:00 2001
From: Nayleen <almightynay@gmail.com>
Date: Thu, 22 Oct 2026 08:15:43 +0200
Subject: [PATCH] fix: update PHP images to releases patched against php2shell

roave/security-advisories now conflicts with php <8.3.36, <8.4.27 and
<8.5.12, so the composer-permissions test failed for the 8.3 and 8.4
images still pinned to 8.3.32 and 8.4.23.

Renovate never proposed those patch bumps: without separateMinorPatch it
only offers the newest non-major version (8.5.x) for every line, which
the minor-update rule disables. Enable separateMinorPatch for the PHP
images so each line receives its own patch updates.
---
 php-images.json | 6 +++---
 renovate.json5  | 9 +++++++++
 2 files changed, 12 insertions(+), 3 deletions(-)

diff --git a/php-images.json b/php-images.json
index 0896d3e..f3086a7 100644
--- a/php-images.json
+++ b/php-images.json
@@ -1,5 +1,5 @@
 {
-  "8.3": "docker.io/library/php:8.3.32-cli@sha256:2a3f699b6cb31e5638c5432e4d37d4047853ba6351a692c91e0a073af00a55cc",
-  "8.4": "docker.io/library/php:8.4.23-cli@sha256:3a70cc45c4b03b691f04ea3c032030613a5ff6ee61053127aadb8a93b39cc7c3",
-  "8.5": "docker.io/library/php:8.5.11-cli@sha256:01a109229f4465bc9ef042d9198f09a4d9da7775a825dbd8572dcdbd8756c4d3"
+  "8.3": "docker.io/library/php:8.3.36-cli@sha256:74caa458ad8d6c5e401eb9f8841a62faeab9b7be42b54cd37986d7685f857618",
+  "8.4": "docker.io/library/php:8.4.27-cli@sha256:a4ae1f57e22b89a0a69c5e085b3010ee727d094e1542d249e48a01bec3c44810",
+  "8.5": "docker.io/library/php:8.5.12-cli@sha256:595a7cbb1e0547336319f228c4dc991c2a199350ab12b1c8fda05f73abd06e6b"
 }
diff --git a/renovate.json5 b/renovate.json5
index 61a0a02..9943368 100644
--- a/renovate.json5
+++ b/renovate.json5
@@ -18,6 +18,15 @@
     'github-actions'
   ],
   packageRules: [
+    {
+      matchManagers: [
+        'custom.regex'
+      ],
+      matchPackageNames: [
+        'php'
+      ],
+      separateMinorPatch: true
+    },
     {
       enabled: false,
       matchManagers: [