PIE 1.5: multi-extension installs, explicit package selection and pie upgrade

PIE (PHP Installer for Extensions) is the PHP Foundation's extension installer. The GitHub releases page shows 1.5.0 tagged on 16 September 2026 and 1.5.1 on 30 September 2026. 1.5.1 fixes pie upgrade for dev extensions. The Foundation announced the 1.5 series on 7 October 2026 and says it was about five months in the making. A release date is not the date of its announcement.

Changes described in the announcement

• Several extensions in one command, for example pie install php-amqp/php-amqp:^2.2 girgias/csv. Configure options are routed to the right extension's ./configure. The post presents this as useful for Docker images.
• Explicit package selection for unattended project installs. Inside a PHP project, older versions could pick packages for missing extensions automatically with --allow-non-interactive-project-install. The post calls this risky, because it is not certain which package a missing extension resolves to. Non-interactive installs now need --select=<extension>=<vendor/package> for each extension. Scripts that relied on automatic selection should be checked. The post does not say whether the old option was removed or what it does now.
• pie upgrade upgrades all extensions installed with PIE, but only within the constraint each one was installed with. An extension installed as ^1.1 moves to 1.2.0 but not to 2.0.0.
• Attestation library. PIE uses Sigstore to verify the authenticity of PIE itself. Before, it called the gh CLI when available and otherwise fell back to a basic verifier. The ThePHPF/attestation library now passes 131 Sigstore conformance tests, with 5 skipped because it only verifies and 4 expected failures. PIE uses it when updating. The library is no longer tied to GitHub's attestations and trusted root, though both still ship by default. It is BSD-3-Clause.
• Smaller additions: --no-dev for project installs, --suppress-download-url-method, a pie search command, pie check-build-tools, and placeholder support for some PECL extensions that relied on it.

The 1.5.0 release notes also list pie install --from-lock, an SBOM attestation, and support for more system libraries and package-manager providers. The announcement does not cover these.

Limitations

This page relies on the project's own announcement and release notes and was not tested. The conformance figures are the project's own. The page does not say which PHP versions or platforms each feature supports.