From 9932c0c5274c5314b084f29196582abe5d7cb7ee Mon Sep 17 00:00:00 2001
From: Durable Workflow <support@durable-workflow.com>
Date: Wed, 21 Oct 2026 17:41:13 +0000
Subject: [PATCH] ci: allow bounded cold multiarch PHP security builds

---
 .github/workflows/release.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 9529fcd83..7ad5e04e8 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -198,7 +198,8 @@ jobs:
 
       - name: Build and push exact image tags
         id: build
-        timeout-minutes: 45
+        # A cold signed PHP source build under ARM emulation exceeds 45 minutes.
+        timeout-minutes: 120
         continue-on-error: true
         uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a  # v7
         with:
@@ -212,6 +213,7 @@ jobs:
           cache-to: ${{ steps.cache.outputs.cache_to }}
           provenance: false
           build-args: |
+            PHP_BUILD_JOBS=4
             PHPREDIS_VERSION=${{ env.PHPREDIS_VERSION }}
             PHPREDIS_COMMIT=${{ env.PHPREDIS_COMMIT }}
             WORKFLOW_PACKAGE_SOURCE=${{ steps.workflow.outputs.source }}