alright, jokes aside, i hit the big button and triggered a new build, so my service is now also on php 8.5.12 (where php2shell is fixed)
it was fun to live risky (9.2 vulnerability in prod) for a day but i just don't want to think about it anymore ahaha