chore(deps): update shivammathur/setup-php action to v2.33.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
shivammathur/setup-php	action	minor	2.32.0 -> 2.33.0

---

Release Notes

shivammathur/setup-php (shivammathur/setup-php)

v2.33.0

Compare Source

Changelog

• Added support for Arm Ubuntu runners ubuntu-24.04-arm and ubuntu-22.04-arm. (#​848)

jobs:
  run:
    runs-on: ubuntu-24.04-arm # or ubuntu-22.04-arm
    steps:
    - name: Setup PHP
      uses: shivammathur/setup-php@v2
      with:
        php-version: '8.4'

• Dropped support for Ubuntu 20.04 (ubuntu-20.04) for both GitHub hosted and self-hosted runners. Please migrate your workflows to ubuntu-22.04 or ubuntu-24.04. (#​939)
  Ref: https://github.com/shivammathur/setup-php#github-hosted-runners

• Improved support for installing PHPUnit around new releases. Now setup-php will fallback to the previous release till new release is available on the phpunit.de website after it is tagged. (#​913, #​938)

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.4'
    tools: phpunit

• Switched to using https://ppa.launchpadcontent.net for launchpad PPAs instead of http://ppa.launchpad.net. (#​927, #​928)

• Added a fallback to calling launchpad's API for getting PPA signatures to reduce reported failures on self-hosted runners. (#​935)

• Added support for specifying tools' directory using TOOLS_DIR env. (#​937)

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.4'
  env:
    TOOLS_DIR: '/tmp/tools'

• Fixed cache support for openswoole. (#​917, https://github.com/shivammathur/cache-extensions/issues/47)

• Fixed the version of composer-normalize in the logs. (#​899)

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.4'
    tools: composer-normalize

• Updated the repository for PHP-CS-Fixer. (#​900)

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.4'
    tools: php-cs-fixer

• Added support for blackfire and ionCube extensions for PHP 8.4.

• Improved support for phalcon and zephir_parser extensions.

• Improved support for OCI extensions pdo_oci and oci8 on self-hosted runners. (#​929)

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.4'
    extensions: pdo_oci, oci8

• Improved locking mechanism while fetching files on self-hosted runners. (#​912)

• Fixed a warning on macOS while patching extensions.

• Fixed linking hiredis library during relay setup.

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.4'
    extensions: relay

• Updated Node.js dependencies.

Thanks @​deguif, @​DanielEScherzer, @​voodooism, @​hms5232, and @​jg-development for the contributions 🎉

Thanks @​complex-gmbh and @​WorkOfStan for the sponsorship ❤️

For the complete list of changes, please refer to the Full Changelog

Follow for updates

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
actions/shivammathur/setup-php	cf4cade2721270509d5b1c766ab3549210a39a2a	🟢 7.5	Details Check Score Reason Code-Review ⚠️ 2 Found 5/23 approved changesets -- score normalized to 2 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Security-Policy 🟢 10 security policy file detected Maintained 🟢 10 26 commit(s) and 28 issue activity found in the last 90 days -- score normalized to 10 Binary-Artifacts 🟢 10 no binaries found in the repo Token-Permissions 🟢 9 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 CII-Best-Practices 🟢 5 badge detected: Passing License 🟢 10 license file detected Fuzzing ⚠️ 0 project is not fuzzed Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Packaging 🟢 10 packaging workflow detected SAST 🟢 7 SAST tool detected but not run on all commits Vulnerabilities 🟢 10 0 existing vulnerabilities detected

Scanned Files

• .github/workflows/ci-integration.yml

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud