[Snyk] Security upgrade php from 8.5-fpm-alpine to 8.5.7RC1-fpm-alpine

[samuelwei]

Snyk has created this PR to fix 5 vulnerabilities in the dockerfile dependencies of this project.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Snyk changed the following file(s):

• docker/app/Dockerfile

We recommend upgrading to php:8.5.7RC1-fpm-alpine, as this image has only 0 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	CVE-2025-14017 SNYK-ALPINE323-CURL-16724709	436
	CVE-2026-3783 SNYK-ALPINE323-CURL-16724710	436
	CVE-2026-1965 SNYK-ALPINE323-CURL-16724711	436
	CVE-2026-3784 SNYK-ALPINE323-CURL-16724712	436
	Open Redirect SNYK-ALPINE323-CURL-16724713	436

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Open Redirect

[coderabbitai]

Important

Review skipped

Ignore keyword(s) in the title.

⛔ Ignored keywords (1)

• Bump

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: b8465b89-244f-49f6-9ad8-b545a0b9e13b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch snyk-fix-fa347146809db0c8e0a48f8c9dae7211

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 97.19%. Comparing base (e5f22fe) to head (eafc85c).

Additional details and impacted files

@@              Coverage Diff              @@
##             develop    #3176      +/-   ##
=============================================
+ Coverage      96.78%   97.19%   +0.40%     
=============================================
  Files            468      182     -286     
  Lines          13364     6561    -6803     
  Branches        2215     2215              
=============================================
- Hits           12935     6377    -6558     
+ Misses           429      184     -245     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[cypress]

PILOS    Run #3073

Run Properties:   Passed #3073  •  eafc85c4e6: [Snyk] Security upgrade php from 8.5-fpm-alpine to 8.5.7RC1-fpm-alpine

Project	PILOS
Branch Review	snyk-fix-fa347146809db0c8e0a48f8c9dae7211
Run status	Passed #3073
Run duration	07m 44s
Commit	eafc85c4e6: [Snyk] Security upgrade php from 8.5-fpm-alpine to 8.5.7RC1-fpm-alpine
Committer	Samuel Weirich
View all properties for this run ↗︎

---

Test results
Failures	0
Flaky	0
Pending	0
Skipped	0
Passing	632
View all changes introduced in this branch ↗︎