PHP builds for security releases fixing CVE-2026-109618 and CVE-2026-109619 are now available.
Do not rely on php.ini workarounds, they do not fully mitigate the issues.
Thank you everyone who pitched in. As the final project for this year, we chose setup-php from @meshivammathur, which is helping countless other open source PHP projects thrive. There are many more great projects, and we hope others will be inspired to follow us 💪
