Update shivammathur/setup-php action to v2.40.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
shivammathur/setup-php	action	minor	2.37.2 → 2.40.0

---

Release Notes

shivammathur/setup-php

v2.40.0

Compare Source

Changelog

• Added support for PHP 8.7 nightly builds. This installs PHP builds from the master branch of php/php-src.

- name: Setup PHP 8.7
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.7'

• Added support for Ubuntu 26.04 (ubuntu-26.04). (#​1083)

• Added support for pinning tools to SHA-256 and SHA-512 checksums. (#​1098, #​1099)

- name: Setup PHP with tools pinned to checksums
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'
    tools: >
      composer:2.9.8@sha256:59b2c50e10cafa0d8efc19ede9a326d782f096c674a26baf98cf042ce23de890,
      phpunit:12.5.0@sha512:76430b433bd57f96e5fbbabaefc0c82e3a5b19b1a366bd836614344c441a7a87575d77faa07e0e58ecec52061af67584b036adc4311f0764bd4414bc62be4684

• Fixed support for Couchbase, Oracle, and IBM extensions on Ubuntu 26.04. (#​1123)

• Added support for cpx. (#​1104)

- name: Setup PHP with cpx
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'
    tools: cpx

• Added support for Laravel Cloud CLI. (#​1106)

- name: Setup PHP with Laravel Cloud CLI
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'
    tools: laravel-cloud

• Added configurable verbose logging using the verbose environment variable. Set it to true or v to show command output, or vv or vvv to also enable tracing. Also, deprecated the verbose and more-verbose tags in favor of this environment variable. (#​1077, #​1118, #​1119)

- name: Setup PHP with verbose logging
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'
  env:
    verbose: true

• Improved support for PHP version files, including version aliases, partial versions, and comments. For example, a .php-version file containing 8.x can now be used to set up the latest stable PHP 8 version. (#​1121)

- name: Checkout
  uses: actions/checkout@v7

- name: Setup PHP from a version file
  uses: shivammathur/setup-php@v2
  with:
    php-version-file: '.php-version'

• Improved PHP installation on macOS using cached builds from shivammathur/php-darwin. This should improve the setup-php runtime from around a minute to 5-10s.

• Improved Homebrew extension installation, timeout handling, and retries. (#​1120)

• Improved PHP installation on Windows using release manifests and cached builds from shivammathur/php-builder-windows.

• Improved caching and validation of versioned extensions on Linux, macOS, and Windows. (#​1108)

• Added opt-in support for cached PHP builds on Blacksmith and Depot runners using use_builds_cache environment variable. This is currently experimental and uses the builds cache that we maintain for GitHub hosted runners. (#​1056, #​1129)

- name: Setup PHP with cached builds
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'
  env:
    use_builds_cache: true

• Switched to Homebrew extension packages for Lua and GEOS extensions on supported macOS PHP versions.

• Deprecated support for Intel macOS and macOS 14 arm64 runners. It is recommended to upgrade to arm64 based macOS runners (macos-15 or newer). (#​1112)

• Updated Node.js dependencies and internal GitHub Actions workflows.

For the complete list of changes, please refer to the Full Changelog

Thanks @​kmaeda-rakus, @​jrfnl, @​WendellAdriel, @​damiantw, @​ibrahimlawal-paystack, @​Perlence, and @​Sainan for the contributions.

Follow for updates

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ All tests successful. No failed tests found.

@@            Coverage Diff            @@
##                8.x    #1153   +/-   ##
=========================================
  Coverage     88.88%   88.88%           
  Complexity     1525     1525           
=========================================
  Files           158      158           
  Lines          4275     4275           
=========================================
  Hits           3800     3800           
  Misses          475      475           

Flag	Coverage Δ	Complexity Δ		*Carryforward flag
emulator	40.81% <ø> (ø)	1525.00 <ø> (ø)
grpc	3.90% <ø> (ø)	1525.00 <ø> (ø)		Carriedforward from 905266a
integration	72.20% <ø> (ø)	1525.00 <ø> (ø)		Carriedforward from 905266a
unit	50.65% <ø> (ø)	1525.00 <ø> (ø)

*This pull request uses carry forward flags. Click here to find out more.