diff --git a/.github/actions/verify-generated-files/action.yml b/.github/actions/verify-generated-files/action.yml
index 79c49dbfcfff..3f3dea73c4dc 100644
--- a/.github/actions/verify-generated-files/action.yml
+++ b/.github/actions/verify-generated-files/action.yml
@@ -13,4 +13,5 @@ runs:
         ext/tokenizer/tokenizer_data_gen.php
         build/gen_stub.php -f --generate-optimizer-info --verify
         ext/phar/makestub.php
+        .github/scripts/download-bundled/make-workflow-file.php
         .github/scripts/test-directory-unchanged.sh .
diff --git a/.github/scripts/download-bundled/boost-context.sh b/.github/scripts/download-bundled/boost-context.sh
index 02febff73c3f..5501a3ce2131 100755
--- a/.github/scripts/download-bundled/boost-context.sh
+++ b/.github/scripts/download-bundled/boost-context.sh
@@ -4,6 +4,7 @@ cd "$(dirname "$0")/../../.."
 
 tmp_dir=/tmp/php-src-download-bundled/boost-context
 rm -rf "$tmp_dir"
+# header above this line is generated by make-workflow-file.php
 
 revision=refs/tags/boost-1.91.0
 
diff --git a/.github/scripts/download-bundled/jit-ir.sh b/.github/scripts/download-bundled/jit-ir.sh
index 9a1f8faa1be1..fc6cfe2c6843 100755
--- a/.github/scripts/download-bundled/jit-ir.sh
+++ b/.github/scripts/download-bundled/jit-ir.sh
@@ -4,6 +4,7 @@ cd "$(dirname "$0")/../../.."
 
 tmp_dir=/tmp/php-src-download-bundled/jit-ir
 rm -rf "$tmp_dir"
+# header above this line is generated by make-workflow-file.php
 
 revision=4a1208ccbfc8ca32a5103baf9820ad3cbb6ff06e
 
diff --git a/.github/scripts/download-bundled/make-workflow-file.php b/.github/scripts/download-bundled/make-workflow-file.php
new file mode 100755
index 000000000000..69ccc189b0db
--- /dev/null
+++ b/.github/scripts/download-bundled/make-workflow-file.php
@@ -0,0 +1,232 @@
+#!/usr/bin/env php
+<?php
+
+declare(strict_types=1);
+
+namespace Phpsrc\Ci\DownloadBundled;
+
+// How to add a new bundled source?
+// 1. add a new entry for the source into $bundles variable below (name and monitored directories/files, path is generated from the name)
+// 2. run this make-workflow-file.php generator
+// 3. edit the generated .github/scripts/download-bundled/<name>.sh file, see and be consistent with other files
+
+// How to run this make-workflow-file.php generator?
+// ```
+// docker run --rm -v "$(git rev-parse --show-toplevel)":/h php:latest /h/.github/scripts/download-bundled/make-workflow-file.php
+// ```
+
+// How to update/download specific bundled source?
+// 1. edit the bundled version inside relevant .github/scripts/download-bundled/<name>.sh file
+// 2. run:
+// ```
+// docker run --rm -v "$(git rev-parse --show-toplevel)":/f alpine:latest sh -c "apk add git && /f/.github/scripts/download-bundled/<name>.sh"
+// ```
+// 3. review git changes and commit the changes
+
+$bundles = [
+    new Bundle('boost.context', ['Zend/asm']),
+    new Bundle('XSSE', [], ['Zend/zend_simd.h']),
+    new Bundle('JIT IR', ['ext/opcache/jit/ir']),
+    new Bundle('xxHash', ['ext/hash/xxhash']),
+    new Bundle('PCRE2', ['ext/pcre/pcre2lib']),
+    new Bundle('uriparser', ['ext/uri/uriparser']),
+];
+
+class Bundle
+{
+    /**
+     * @param list<string> $directories
+     * @param list<string> $files
+     */
+    public function __construct(
+        public string $name,
+        public array $directories,
+        public array $files = []
+    ) {}
+
+    public function getNameForPath(): string
+    {
+        return preg_replace('~\W+~', '-', strtolower($this->name));
+    }
+}
+
+class Generator
+{
+    /**
+     * @param list<Bundle> $bundles
+     */
+    public function __construct(
+        public array $bundles
+    ) {}
+
+    protected function getRepoDirectory(): string
+    {
+        return dirname(__DIR__, 3);
+    }
+
+    protected function indentString(string $value, int $levels, bool $inclFirstLine): string
+    {
+        return preg_replace(
+            '~' . ($inclFirstLine ? '^|' : '') . '(?<=\n)~',
+            str_repeat('  ', $levels),
+            $value
+        );
+    }
+
+    /**
+     * @param mixed $data
+     */
+    protected function encodeYml($data): string
+    {
+        if (is_array($data)) {
+            $isList = array_is_list($data);
+            $resParts = [];
+            foreach ($data as $k => $v) {
+                $kEncoded = $isList
+                    ? '-'
+                    : $this->encodeYml($k) . ':';
+                $vEncoded = $this->encodeYml($v);
+
+                $resParts[] = $kEncoded
+                    . (!$isList && is_array($v) && $v !== [] ? "\n  " : ' ')
+                    . (is_array($v) ? $this->indentString($vEncoded, 1, false) : $vEncoded);
+            }
+
+            return implode("\n", $resParts);
+        }
+
+        if (preg_match('~^(\w+|\$\{\{[^\}]+\}\})$~', $data)) {
+            return $data;
+        }
+
+        return strpos($data, "\n") !== false
+            ? '|' . "\n" . $this->indentString($data, 1, true)
+            : '\'' . str_replace('\'', '\'\'', $data) . '\'';
+    }
+
+    public function makeWorkflowFile(): void
+    {
+        $content = <<<'YAML'
+            #
+            # whole file is generated by .github/scripts/download-bundled/make-workflow-file.php
+            #
+            name: Verify Bundled Files
+
+            on:
+              push:
+                paths: &paths
+                  %paths%
+              pull_request:
+                paths: *paths
+              schedule:
+                - cron: "0 1 * * *"
+              workflow_dispatch: ~
+
+            permissions:
+              contents: read
+
+            jobs:
+              VERIFY_BUNDLED_FILES:
+                if: github.repository == 'php/php-src' || github.event_name == 'workflow_dispatch'
+                name: Verify Bundled Files
+                runs-on: ubuntu-24.04
+                steps:
+                  - name: git checkout
+                    uses: actions/checkout@v7
+
+                  - name: Detect changed files
+                    if: ${{ github.event_name == 'push' || github.event_name == 'pull_request' }}
+                    uses: dorny/paths-filter@v3
+                    id: changes
+                    with:
+                      filters: %filters%
+
+                  %steps%
+
+            YAML;
+
+        $paths = [
+            '.github/scripts/download-bundled/**',
+        ];
+        foreach ($this->bundles as $bundle) {
+            foreach ($this->makeFiltersForDornyPathsFilterAction($bundle) as $p) {
+                if (str_starts_with($p, '.github/scripts/download-bundled/')) {
+                    continue;
+                }
+
+                $paths[] = $p;
+            }
+        }
+        $content = str_replace('%paths%', $this->indentString($this->encodeYml($paths), 3, false), $content);
+
+        $filters = [];
+        foreach ($this->bundles as $bundle) {
+            $filters[$bundle->getNameForPath()] = $this->makeFiltersForDornyPathsFilterAction($bundle);
+        }
+        $content = str_replace('%filters%', $this->indentString($this->encodeYml($this->encodeYml($filters)), 5, false), $content);
+
+        $steps = [];
+        foreach ($this->bundles as $bundle) {
+            $steps[] = [
+                'name' => $bundle->name,
+                'if' => '${{ !cancelled() && (steps.changes.outputs.' . $bundle->getNameForPath() . ' == \'true\' || github.event_name == \'schedule\' || github.event_name == \'workflow_dispatch\') }}',
+                'run' => implode("\n", [
+                    'echo "::group::Download"',
+                    '.github/scripts/download-bundled/' . $bundle->getNameForPath() . '.sh',
+                    'echo "::endgroup::"',
+                    'echo "::group::Verify files"',
+                    ...array_map(static fn ($v) => '.github/scripts/test-directory-unchanged.sh \'' . $v . '\'', array_merge($bundle->directories, $bundle->files)),
+                    'echo "::endgroup::"',
+                ]),
+            ];
+        }
+        $content = str_replace('%steps%', $this->indentString($this->encodeYml($steps), 3, false), $content);
+
+        file_put_contents($this->getRepoDirectory() . '/.github/workflows/verify-bundled-files.yml', $content);
+    }
+
+    protected function makeFiltersForDornyPathsFilterAction(Bundle $bundle): array
+    {
+        return [
+            '.github/scripts/download-bundled/' . $bundle->getNameForPath() . '.*',
+            ...array_map(static fn ($v) => $v . '/**', $bundle->directories),
+            ...$bundle->files,
+        ];
+    }
+
+    public function makeDownloadScriptHeaders(): void
+    {
+        foreach ($this->bundles as $bundle) {
+            $this->makeDownloadScriptHeader($bundle);
+        }
+    }
+
+    protected function makeDownloadScriptHeader(Bundle $bundle): void
+    {
+        $scriptPath = $this->getRepoDirectory() . '/.github/scripts/download-bundled/' . $bundle->getNameForPath() . '.sh';
+
+        $contentWithoutHeader = !file_exists($scriptPath)
+            ? "# TODO\n"
+            : preg_replace('~^.*\n# header above this line is generated by make-workflow-file.php\n+~s', '', file_get_contents($scriptPath));
+
+        $header = <<<'YAML'
+            #!/bin/sh
+            set -ex
+            cd "$(dirname "$0")/../../.."
+
+            tmp_dir=%tmp_dir%
+            rm -rf "$tmp_dir"
+            # header above this line is generated by make-workflow-file.php
+
+
+            YAML;
+
+        $header = str_replace('%tmp_dir%', '/tmp/php-src-download-bundled/' . $bundle->getNameForPath(), $header);
+
+        file_put_contents($scriptPath, $header . $contentWithoutHeader);
+    }
+}
+
+$generator = new Generator($bundles);
+$generator->makeWorkflowFile();
+$generator->makeDownloadScriptHeaders();
diff --git a/.github/scripts/download-bundled/pcre2.sh b/.github/scripts/download-bundled/pcre2.sh
index 360cbb91db82..0452f1fbc238 100755
--- a/.github/scripts/download-bundled/pcre2.sh
+++ b/.github/scripts/download-bundled/pcre2.sh
@@ -4,6 +4,7 @@ cd "$(dirname "$0")/../../.."
 
 tmp_dir=/tmp/php-src-download-bundled/pcre2
 rm -rf "$tmp_dir"
+# header above this line is generated by make-workflow-file.php
 
 revision=refs/tags/pcre2-10.44
 
diff --git a/.github/scripts/download-bundled/uriparser.sh b/.github/scripts/download-bundled/uriparser.sh
index 34d4b7fc5de5..441b7c718b5a 100755
--- a/.github/scripts/download-bundled/uriparser.sh
+++ b/.github/scripts/download-bundled/uriparser.sh
@@ -4,6 +4,7 @@ cd "$(dirname "$0")/../../.."
 
 tmp_dir=/tmp/php-src-download-bundled/uriparser
 rm -rf "$tmp_dir"
+# header above this line is generated by make-workflow-file.php
 
 revision=refs/tags/uriparser-1.0.3
 
diff --git a/.github/scripts/download-bundled/xsse.sh b/.github/scripts/download-bundled/xsse.sh
index 1e2c94d9366f..22965f20e9f3 100755
--- a/.github/scripts/download-bundled/xsse.sh
+++ b/.github/scripts/download-bundled/xsse.sh
@@ -4,6 +4,7 @@ cd "$(dirname "$0")/../../.."
 
 tmp_dir=/tmp/php-src-download-bundled/xsse
 rm -rf "$tmp_dir"
+# header above this line is generated by make-workflow-file.php
 
 revision=refs/tags/xsse-1.0.0
 
diff --git a/.github/scripts/download-bundled/xxhash.sh b/.github/scripts/download-bundled/xxhash.sh
index fc0c7eb7b302..0d5d8bab46f1 100755
--- a/.github/scripts/download-bundled/xxhash.sh
+++ b/.github/scripts/download-bundled/xxhash.sh
@@ -4,6 +4,7 @@ cd "$(dirname "$0")/../../.."
 
 tmp_dir=/tmp/php-src-download-bundled/xxhash
 rm -rf "$tmp_dir"
+# header above this line is generated by make-workflow-file.php
 
 revision=refs/tags/v0.8.2
 
diff --git a/.github/workflows/verify-bundled-files.yml b/.github/workflows/verify-bundled-files.yml
index a287e1229305..35b08eeeb74a 100644
--- a/.github/workflows/verify-bundled-files.yml
+++ b/.github/workflows/verify-bundled-files.yml
@@ -1,3 +1,6 @@
+#
+# whole file is generated by .github/scripts/download-bundled/make-workflow-file.php
+#
 name: Verify Bundled Files
 
 on:
@@ -60,7 +63,7 @@ jobs:
           .github/scripts/download-bundled/boost-context.sh
           echo "::endgroup::"
           echo "::group::Verify files"
-          .github/scripts/test-directory-unchanged.sh Zend/asm
+          .github/scripts/test-directory-unchanged.sh 'Zend/asm'
           echo "::endgroup::"
       - name: XSSE
         if: ${{ !cancelled() && (steps.changes.outputs.xsse == 'true' || github.event_name == 'schedule' || github.event_name == 'workflow_dispatch') }}
@@ -96,7 +99,7 @@ jobs:
           .github/scripts/download-bundled/pcre2.sh
           echo "::endgroup::"
           echo "::group::Verify files"
-          .github/scripts/test-directory-unchanged.sh ext/pcre/pcre2lib
+          .github/scripts/test-directory-unchanged.sh 'ext/pcre/pcre2lib'
           echo "::endgroup::"
       - name: uriparser
         if: ${{ !cancelled() && (steps.changes.outputs.uriparser == 'true' || github.event_name == 'schedule' || github.event_name == 'workflow_dispatch') }}
@@ -105,5 +108,5 @@ jobs:
           .github/scripts/download-bundled/uriparser.sh
           echo "::endgroup::"
           echo "::group::Verify files"
-          .github/scripts/test-directory-unchanged.sh ext/uri/uriparser
+          .github/scripts/test-directory-unchanged.sh 'ext/uri/uriparser'
           echo "::endgroup::"