From cc0446394fc3b86189a6f745617ac521b46ffd73 Mon Sep 17 00:00:00 2001
From: Tim de Pater <git@trafex.nl>
Date: Wed, 21 Oct 2026 20:41:35 +0200
Subject: [PATCH] Require PHP >= 8.4.27 for security fixes

Fail the build instead of shipping a vulnerable PHP version, and bust
the cached apk layer reused via --cache-from.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_011JzmrJ2vHDoHH6Pmr6tWMh
---
 Dockerfile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 661cbe3..9f41fab 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -19,8 +19,8 @@ LABEL org.opencontainers.image.description="Lightweight WordPress container with
 
 # Install packages
 RUN apk --no-cache add \
-  php84 \
-  php84-fpm \
+  'php84>=8.4.27' \
+  'php84-fpm>=8.4.27' \
   php84-mysqli \
   php84-json \
   php84-openssl \