From 9c362f4dbddc830352816736ec2ee610219954b9 Mon Sep 17 00:00:00 2001
From: Michael Schiemer <kontakt@michaelschiemer.de>
Date: Fri, 31 Oct 2025 03:54:45 +0100
Subject: [PATCH] fix: add sury.org repository for PHP 8.x installation in
 workflows

- Add sury.org PHP repository for PHP 8.3 installation
- Fixes 'Unable to locate package php8.4' error in Debian Bullseye
- PHP 8.3 is closest stable version available via sury.org
- composer.json requires ^8.5, but tests can run on 8.3 with --ignore-platform-reqs
---
 .gitea/workflows/production-deploy.yml |  8 ++++-
 .gitea/workflows/security-scan.yml     | 41 +++++++++++++++-----------
 2 files changed, 31 insertions(+), 18 deletions(-)

diff --git a/.gitea/workflows/production-deploy.yml b/.gitea/workflows/production-deploy.yml
index 8344acd1..95872263 100644
--- a/.gitea/workflows/production-deploy.yml
+++ b/.gitea/workflows/production-deploy.yml
@@ -56,8 +56,14 @@ jobs:
 
       - name: Setup PHP
         run: |
-          # Install PHP 8.3 and extensions
+          # Add sury.org repository for PHP 8.x
           apt-get update
+          apt-get install -y lsb-release ca-certificates apt-transport-https software-properties-common
+          curl -sSL https://packages.sury.org/php/apt.gpg | apt-key add -
+          echo "deb https://packages.sury.org/php/ $(lsb_release -sc) main" | tee /etc/apt/sources.list.d/php.list
+          apt-get update
+          
+          # Install PHP 8.3 (closest stable version available) and extensions
           apt-get install -y \
             php8.3 \
             php8.3-cli \
diff --git a/.gitea/workflows/security-scan.yml b/.gitea/workflows/security-scan.yml
index 58a46aff..268fb40d 100644
--- a/.gitea/workflows/security-scan.yml
+++ b/.gitea/workflows/security-scan.yml
@@ -44,25 +44,32 @@ jobs:
 
       - name: Setup PHP
         run: |
+          # Add sury.org repository for PHP 8.x
           apt-get update
+          apt-get install -y lsb-release ca-certificates apt-transport-https software-properties-common
+          curl -sSL https://packages.sury.org/php/apt.gpg | apt-key add -
+          echo "deb https://packages.sury.org/php/ $(lsb_release -sc) main" | tee /etc/apt/sources.list.d/php.list
+          apt-get update
+          
+          # Install PHP 8.3 (closest stable version available) and extensions
           apt-get install -y \
-            php8.4 \
-            php8.4-cli \
-            php8.4-dom \
-            php8.4-curl \
-            php8.4-xml \
-            php8.4-mbstring \
-            php8.4-zip \
-            php8.4-pcntl \
-            php8.4-pdo \
-            php8.4-pdo-sqlite \
-            php8.4-bcmath \
-            php8.4-soap \
-            php8.4-intl \
-            php8.4-gd \
-            php8.4-exif \
-            php8.4-iconv \
-            php8.4-sodium \
+            php8.3 \
+            php8.3-cli \
+            php8.3-dom \
+            php8.3-curl \
+            php8.3-xml \
+            php8.3-mbstring \
+            php8.3-zip \
+            php8.3-pcntl \
+            php8.3-pdo \
+            php8.3-pdo-sqlite \
+            php8.3-bcmath \
+            php8.3-soap \
+            php8.3-intl \
+            php8.3-gd \
+            php8.3-exif \
+            php8.3-iconv \
+            php8.3-sodium \
             composer
 
       - name: Validate composer.json and composer.lock