Is the localwp app going to update the default version to 8.2.35 and is there a prospective timeline for the update. Asking as having the 8.2.29 binary installed is an issue for Corporate IT.
Thanks,
Bret
Patches are released and available for updating now. Read more here:
The next release of Local will also bump the default PHP version to 8.2.35. I don’t have a timeline for this update at the moment.
Thanks Nick. This is what I needed.
Sorry for not being clear on that @bret.belgarde! We’ll share updates here in the forum and on our Releases - Local page when those defaults are changed.
No worries. I would have asked you directly, but by the time I had got to your reply, nickc had already answered. Thank you for the response, I had expected a longer wait.
Hi,
I am also getting flagged by corporate IT for PHP vulnerabilities. I am on MacOS Apple Silicon and I have updated Local to 10.2 and deleted all PHP versions. When I restart Local it will only download PHP 8.2.29 and I do not have a “Update” button next to PHP version. What can I do to get the new patch?
Yeah it doesn’t show other versions of PHP in there either.
I’ve uninstalled Local WP and through Windows PowerShell confirmed no versions of PHP on my machine.
I reinstalled it and selected 8.2.35 as the Php version for the only site instance. I then checked the Php versions on the machine and 8.2.29 is listed alongside 8.2.35!
So I closed LocalWP, removed unsafe 8.2.29 through PowerShell and confirmed it’s gone, but..
Then I restart Local WP and check for Php again and it’s back!
Mode LastWriteTime Length Name
d----- 30/10/2026 13:32 php-8.2.29+0
d----- 23/10/2026 00:30 php-8.2.35+0
Am I going nuts (Head of IT is, because he wants Local WP removed!) or are you reinstalling 8.2.29 regardless of what I select as my Php version?
@dlum Check that your machine or network is not blocking access to the resources here (Local reaches out to a server to see what new versions are downloadable): https://localwp.com/help-docs/getting-started/installing-local/#allowing-local. Then restart Local and view the list again.
If that doesn’t help, please share your Local logs with us in a new thread.
@stevesuggy The latest version of Local (10.2.0) currently ships with PHP 8.2.29, and it installs that version on startup, but does not run it unless you start a site using it. (Local bundles a single copy of PHP so that it can run without additional downloads when first installed, and that version is gradually upgraded as new PHP and Local versions are released, but it can lag behind our latest downloadable PHP updates slightly.)
The next version of Local will ship with 8.2.35 as stated above. It will no longer install 8.2.29 on start after you remove it from disk. I don’t have a release schedule for this yet.
There’s little risk of just having a copy of PHP 8.2.29 on disk, especially if you’re not even running sites that use it locally and you’re not running public-facing sites with Local (Local is not a public-facing web server). For now you can upgrade your sites to PHP 8.2.35, upgrade to the next version of Local when available, and then optionally remove PHP 8.2.29 from disk if your IT team demands it.