Skip to content

Update base PHP version to 8.4.27 - #234

Merged
phanan merged 1 commit into
koel:masterfrom
Itrimel:patch-1
Oct 21, 2026
Merged

phanan merged 1 commit into
koel:masterfrom
Itrimel:patch-1

Conversation

@Itrimel

@Itrimel Itrimel commented Oct 21, 2026 •

Copy link
Copy Markdown
Contributor

Description

This updates the PHP version of the base image to 8.4.27

Motivation

Given the publication today of CVE-2026-109618 and CVE-2026-109619 in PHP (cf. https://www.php.net/archive/2026.php#2026-10-21-5), this should fix the reported vulnerabilities. Emphasis on should, I have not tested it at all.

This change seems like it should not cause any other problems (same PHP minor version), but if needed I can test it more once I have more time (so not until a few days ...).

Checklist

  • I've tested my changes against a built image
  • I've updated goss.yaml if the change affects files, ports or packages in the image
  • I've updated relevant documentation (if any)

Summary by CodeRabbit

  • Chores
    • Updated the application’s runtime environment to PHP 8.4.27.

Fixes CVE-2026-109618 and CVE-2026-109619 in PHP
@Itrimel
Itrimel requested a review from phanan as a code owner October 21, 2026 20:58
@coderabbitai

coderabbitai Bot commented Oct 21, 2026 •

Copy link
Copy Markdown

Review in Change Stack →

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration
  • Configuration used: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 2999a9de-9a0f-4347-bfad-51989158ec86
📥 Commits

Reviewing files that changed from the base of the PR and between 571890c and 02abe6e.

📒 Files selected for processing: 1
  • Dockerfile

Included review availability: This review used your included allowance. Your plan provides up to 2 included reviews per hour; 1 remain after this review.

📝 Walkthrough

The Docker runtime image now uses PHP 8.4.27 Apache Bookworm instead of PHP 8.4.8 Apache Bookworm.

Changes: Runtime image

Layer / File(s) Summary
Update PHP base image
Dockerfile
The Dockerfile base image changes from PHP 8.4.8 Apache Bookworm to PHP 8.4.27 Apache Bookworm.

Priority: ➖ Normal

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to 02abe

No concrete issue currently blocks merging. The image build and smoke tests should still run through the normal CI workflow.

Pre-merge checks: Passed 5
Check name Status Explanation
Title check Passed The title clearly and concisely describes the main change: updating the base PHP version to 8.4.27.
Description check Passed The description includes the required Description, Motivation, and Checklist sections. It explains the security motivation and clearly states that the change has not been tested against a built image.
Docstring Coverage Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@phanan
phanan merged commit 852d8de into koel:master Oct 21, 2026
2 checks passed
@phanan

phanan commented Oct 21, 2026

Copy link
Copy Markdown
Member

Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants