PHP 8.5.9 is a runtime patch contract, not an app deploy
PHP 8.5.9 fixes CVE-2026-17543 in pgsql and other security issues. A green Laravel deploy does not prove the hosts, CI images, workers, and base containers actually run the patched binary.
Shinjae Kang
Read