The Dockerfile uses php:7.4.33-apache, but PHP 7.4 reached end-of-life in Nov 2022 and no longer receives security fixes.
Why this matters
- Security: No upstream patches for CVEs.
- Ecosystem: Many libs drop 7.4 support.
Proposed plan
- Bump base image to
php:8.2-apache (or 8.3).
- Run the app and fix PHP 8 compatibility issues (CI3 uses some deprecated behaviors).
- Run unit/integration tests (if available).
- Update docs re: minimum PHP version.
Acceptance criteria
- Server builds and runs on PHP 8.2+.
- Smoke test of API endpoints passes (data upload/download, runs, flows).
- No fatal errors in logs.
References
docker/Dockerfile currently pins PHP 7.4.
The Dockerfile uses
php:7.4.33-apache, but PHP 7.4 reached end-of-life in Nov 2022 and no longer receives security fixes.Why this matters
Proposed plan
php:8.2-apache(or 8.3).Acceptance criteria
References
docker/Dockerfilecurrently pins PHP 7.4.