[shyim]

Raise the minimum supported PHP version to 8.4 and upgrade Symfony components to ^8.0. CI tests PHP 8.4 and 8.5, and tool and PHAR release jobs use PHP 8.4. Update Infection for Symfony 8 compatibility and use a stable PHP-CS-Fixer release.

Build the Docker image directly from Chainguard Wolfi with PHP 8.5, remove the inherited libc workaround, and correct the launcher shebangs. Pin the base image digest so Dependabot can track updates.

Group Composer, GitHub Actions, and Docker version updates into one daily Dependabot PR at 06:00 UTC, preserving the dependency label and conventional commit prefix. Security updates may still create separate PRs.

Validation:

• PHPUnit passes on PHP 8.4.27 and 8.5.12: 105 tests, 332 assertions.
• PHPStan passes on PHP 8.4 and 8.5; PHP-CS-Fixer dry run passes.
• Composer validation and dependency resolution pass with no reported security advisories.
• PHAR compilation and the local Docker build pass; PHP 8.5.12, command listing, both launchers, and danger init verified in the final image.
• Dependabot configuration passes JSON Schema validation.

Docker validation was local on amd64. Hosted CI and arm64 builds have not been run locally.