diff --git a/.gitea/workflows/build-push.yaml b/.gitea/workflows/build-push.yaml
index 9a4f875..67ce4e7 100644
--- a/.gitea/workflows/build-push.yaml
+++ b/.gitea/workflows/build-push.yaml
@@ -61,6 +61,9 @@ jobs:
   Build-and-Push:
     runs-on: ubuntu-latest
     strategy:
+      # One PHP version failing (e.g. an EOL stream) must not cancel the
+      # security builds of the others.
+      fail-fast: false
       matrix:
         phpver: [74, 80, 81, 82, 83, 84, 85]
     steps:
@@ -103,6 +106,9 @@ jobs:
   Build-FPM-Images:
     runs-on: ubuntu-latest
     strategy:
+      # One PHP version failing (e.g. an EOL stream) must not cancel the
+      # security builds of the others.
+      fail-fast: false
       matrix:
         phpver: [74, 80, 81, 82, 83, 84, 85]
     steps:
@@ -146,6 +152,9 @@ jobs:
   Build-LiteSpeed-Images:
     runs-on: ubuntu-latest
     strategy:
+      # One PHP version failing (e.g. an EOL stream) must not cancel the
+      # security builds of the others.
+      fail-fast: false
       matrix:
         # PHP 7.4/8.0 deliberately excluded — the LiteSpeed prebuilt base
         # images stop at older OLS releases for those PHP versions, and the
@@ -216,6 +225,9 @@ jobs:
   Build-LSPHP-Images:
     runs-on: ubuntu-latest
     strategy:
+      # One PHP version failing (e.g. an EOL stream) must not cancel the
+      # security builds of the others.
+      fail-fast: false
       matrix:
         # Same PHP matrix as cac-litespeed (81–85): cac-lsphp is the detached
         # backend for the shared-ols tier and shares the litespeed prebuilt