NautiyalVikas1 · Oct 22, 2026 · Oct 22, 2026
diff --git a/user-restricted-combined-auth-tutorials/cis2/php/README.md b/user-restricted-combined-auth-tutorials/cis2/php/README.md
@@ -9,7 +9,7 @@ To call a user-restricted API, the end user must be authenticated.
 NHS CIS2 is used to authenticate when the end user is a healthcare worker. With the combined authentication and authorisation pattern, authentication is done by NHS CIS2 but is coordinated behind our OAuth2.0 authorisation server. In exchange, you receive an access token which you need to include in the API request.
 
 ## Setting up your environment
-This example project was developed using Symfony 6.1.4 and PHP 8.1.9 so you need to have these installed.
+This example project was developed using Symfony 6.1.4 and PHP 8.5.12 so you need to have these installed.
 
 ## Checkout the GitHub Repository
 

diff --git a/user-restricted-combined-auth-tutorials/cis2/php/composer.json b/user-restricted-combined-auth-tutorials/cis2/php/composer.json
@@ -4,7 +4,7 @@
     "minimum-stability": "stable",
     "prefer-stable": true,
     "require": {
-        "php": ">=8.1",
+        "php": ">=8.5.12",
         "ext-ctype": "*",
         "ext-iconv": "*",
         "league/oauth2-client": "2.9",

diff --git a/user-restricted-combined-auth-tutorials/cis2/php/composer.lock b/user-restricted-combined-auth-tutorials/cis2/php/composer.lock
diff --git a/user-restricted-combined-auth-tutorials/nhs-login/php/README.md b/user-restricted-combined-auth-tutorials/nhs-login/php/README.md
@@ -9,7 +9,7 @@ To call a user-restricted API, the end user must be authenticated.
 NHS login is used to authenticate when the end user is a patient. With the combined authentication and authorisation pattern, authentication is done by NHS login but is coordinated behind our OAuth2.0 authorisation server. In exchange, you receive an access token which you need to include in the API request.
 
 ## Setting up your environment
-This example project was developed using Symfony 6.1.4 and PHP 8.1.9 so you need to have these installed.
+This example project was developed using Symfony 6.1.4 and PHP 8.5.12 so you need to have these installed.
 
 ## Checkout the GitHub Repository
 

diff --git a/user-restricted-combined-auth-tutorials/nhs-login/php/composer.json b/user-restricted-combined-auth-tutorials/nhs-login/php/composer.json
@@ -4,7 +4,7 @@
     "minimum-stability": "stable",
     "prefer-stable": true,
     "require": {
-        "php": ">=8.1",
+        "php": ">=8.5.12",
         "ext-ctype": "*",
         "ext-iconv": "*",
         "league/oauth2-client": "2.9",

diff --git a/user-restricted-combined-auth-tutorials/nhs-login/php/composer.lock b/user-restricted-combined-auth-tutorials/nhs-login/php/composer.lock
diff --git a/user-restricted-separate-auth-tutorials/cis2/php/README.md b/user-restricted-separate-auth-tutorials/cis2/php/README.md
@@ -9,7 +9,7 @@ To call a user-restricted API, the end user must be authenticated.
 NHS CIS2 is used to authenticate when the end user is a healthcare worker. With the separate authentication and authorisation pattern, authentication and authorisation are done separately. You might authenticate the user when they sign in but only get authorisation to call the API if and when you need it. You do authentication directly with NHS CIS2 and then separately do authorisation with our OAuth2.0 authorisation service
 
 ## Setting up your environment
-This example project was developed using Symfony 6.1.4 and PHP 8.1.9 so you need to have these installed.
+This example project was developed using Symfony 6.1.4 and PHP 8.5.12 so you need to have these installed.
 
 ## Checkout the GitHub Repository
 

diff --git a/user-restricted-separate-auth-tutorials/cis2/php/composer.json b/user-restricted-separate-auth-tutorials/cis2/php/composer.json
@@ -4,7 +4,7 @@
     "minimum-stability": "stable",
     "prefer-stable": true,
     "require": {
-        "php": ">=8.1",
+        "php": ">=8.5.12",
         "ext-ctype": "*",
         "ext-iconv": "*",
         "league/oauth2-client": "2.9",

diff --git a/user-restricted-separate-auth-tutorials/cis2/php/composer.lock b/user-restricted-separate-auth-tutorials/cis2/php/composer.lock
diff --git a/user-restricted-separate-auth-tutorials/nhs-login/php/Dockerfile b/user-restricted-separate-auth-tutorials/nhs-login/php/Dockerfile
@@ -1,4 +1,4 @@
-FROM php:8.1.11RC1-zts-buster
+FROM php:8.5.12-zts-bookworm
 USER root
 
 RUN apt-get update -y && apt-get install -y libmcrypt-dev

diff --git a/user-restricted-separate-auth-tutorials/nhs-login/php/README.md b/user-restricted-separate-auth-tutorials/nhs-login/php/README.md
@@ -9,7 +9,7 @@ To call a user-restricted API, the end user must be authenticated.
 NHS login is used to authenticate when the end user is a patient. With the separate authentication and authorisation pattern, authentication is done by NHS login. In exchange, you receive an access ID token which you need to exchange it with an access token. You need to include this access token in the API request.
 
 ## Setting up your environment
-This example project was developed using Symfony 6.1.4 and PHP 8.1.9 so you need to have these installed.
+This example project was developed using Symfony 6.1.4 and PHP 8.5.12 so you need to have these installed.
 
 ## Checkout the GitHub Repository
 

diff --git a/user-restricted-separate-auth-tutorials/nhs-login/php/composer.json b/user-restricted-separate-auth-tutorials/nhs-login/php/composer.json
@@ -4,7 +4,7 @@
     "minimum-stability": "stable",
     "prefer-stable": true,
     "require": {
-        "php": ">=8.1",
+        "php": ">=8.5.12",
         "ext-ctype": "*",
         "ext-iconv": "*",
         "league/oauth2-client": "2.9",

diff --git a/user-restricted-separate-auth-tutorials/nhs-login/php/composer.lock b/user-restricted-separate-auth-tutorials/nhs-login/php/composer.lock