chore(deps): update shivammathur/setup-php action to v2.32.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
shivammathur/setup-php	action	minor	2.31.1 -> 2.32.0

---

Release Notes

shivammathur/setup-php (shivammathur/setup-php)

v2.32.0

Compare Source

Changelog

• Added support for PHP 8.4 as the default stable PHP version.

- name: Setup PHP
  uses: shivammathur/setup-php@v2

• Added support for PHP 8.5 as the nightly version. (#​867)

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'

• Added support for pre-installed in php-version input. (#​872)
  It will setup the pre-installed PHP version on the runner as per the docs here
  https://github.com/shivammathur/setup-php?tab=readme-ov-file#github-hosted-runners. If the runner does not have a pre-installed PHP version, it will fail.
  Please note: It is not recommended to use this unless you are doing something trivial, the pre-installed PHP versions on GitHub hosted runners are old patch versions.

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: pre-installed

• Added support for .tool-versions file format in php-version-file input. (#​883)
  If you have an asdf .tool-versions file in your project.
  For example, you can specify .tool-versions now in the php-version-file input and the action would setup the correct PHP version.

ruby 3.4
php 8.4
nodejs 23.5

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version-file: .tool-versions

• Added support for to specify the path for composer file in the project to read the PHP version using COMPOSER_PROJECT_DIR env value. (#​894)

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  env:
    COMPOSER_PROJECT_DIR: php  

• Added support for macos-15 GitHub hosted environment.

• Added support for windows-2025 GitHub hosted environment.

• Added support for composer-dependency-analyser tool (#​859, #​897)

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.4'
    tools: composer-dependency-analyser

• Added support for relay extension for PHP 8.4 and 8.5. (#​892)

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.4'
    extensions: relay

• Added information on how an extension is loaded in the wiki extension lists. (#​887)
  https://github.com/shivammathur/setup-php/wiki

• Fixed support for debug builds. (#​880)

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.4'
  env:
    debug: true  

• Fixed support for zts buids on self-hosted runners.

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.4'
  env:
    phpts: ts

• Fixed support for oci extensions for PHP 8.4 and PHP 8.5.

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.4'
    extensions: pdo_oci, oci8

• Fixed support for zephir_parser extension.

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.4'
    extensions: zephir_parser

• Fixed support for couchbase extension on old PHP versions.

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '7.1'
    extensions: couchbase

• Fixed support for pdo_firebird extension on macos-15.

### runs-on: macos-15
- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.4'
    extensions: pdo_firebird

• Improved support to install tools in a multi-user self-hosted environment.
• Dropped support for macos-12 GitHub hosted environments.
• Dropped support for Debian 10 based self-hosted environments.
• Update Node.js dependencies.

Thanks @​janedbal, @​alexmerlin and @​tillkruss for the contributions 🎉

Thanks @​desrosj, @​bloodynumen and @​eliashaeussler for the sponsorship ❤️

For the complete list of changes, please refer to the Full Changelog

Follow for updates

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
actions/shivammathur/setup-php	9e72090525849c5e82e596468b86eb55e9cc5401	🟢 7.4	Details Check Score Reason Security-Policy 🟢 10 security policy file detected Code-Review ⚠️ 1 Found 3/25 approved changesets -- score normalized to 1 Binary-Artifacts 🟢 10 no binaries found in the repo Maintained 🟢 10 30 commit(s) and 15 issue activity found in the last 90 days -- score normalized to 10 Token-Permissions 🟢 9 detected GitHub workflow tokens with excessive permissions Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 CII-Best-Practices 🟢 5 badge detected: Passing Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Packaging 🟢 10 packaging workflow detected SAST 🟢 7 SAST tool detected but not run on all commits Vulnerabilities 🟢 10 0 existing vulnerabilities detected

Scanned Files

• .github/workflows/ci-integration.yml

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud