PHP 8.5.4 was released on March 12, 2026, and the practical takeaway is simple: if you’re already running PHP 8.5, update to it. If you’re still on PHP 8.4, this is not really a “drop everything and migrate” kind of release.
This is a bug-fix release, not a feature release. The PHP team says exactly that, and the changelog reads like what you would expect from a healthy point release: crash fixes, build fixes, a handful of JIT and Opcache-related issues, some Date and DOM fixes, OpenSSL leak/error propagation fixes, and a Windows clang compilation fix.
For me, that is actually good news. I would rather see a point release full of boring stability work than a patch release trying to be exciting.
What stands out in PHP 8.5.4
The main things worth noticing are the crash and corruption fixes in core and runtime-adjacent areas.
The official changelog for 8.5.4 includes fixes for:
zend_mm_heapcorruption on Aarch64 with LTO builds- a segfault when preloading a constant AST closure
- a crash on
(unset)cast in a constant expression - JIT-related behavior around null array key deprecations
- assertion failures around lazy objects and reflection proxies
- OpenSSL leaks and error propagation issues
- a Windows clang build fix
That is enough for me to call this an easy maintenance upgrade if you are already on the 8.5 branch.
Should you upgrade?
My view is:
- On PHP 8.5 already: yes, upgrade.
- On PHP 8.4: probably stay where you are unless you already wanted PHP 8.5 for its actual new features.
- On anything older: your bigger problem is not 8.5.4 specifically, it is that you are still behind on the supported branches.
I would not sell PHP 8.5.4 as some major turning point. The real 8.5 story is still PHP 8.5 itself, with features like the pipe operator, the URI extension, clone() updates, and other language/runtime additions that shipped in 8.5.0.
But that does not make 8.5.4 unimportant. Patch releases like this are where you quietly reduce the chance of weird crashes, broken builds, and runtime edge cases showing up at the worst possible time.
So my take is simple: if you are on PHP 8.5, upgrade to 8.5.4. If you are deciding whether to move from 8.4 to 8.5, make that decision based on PHP 8.5 as a whole, not because patch version .4 exists.