build(deps-dev): bump phpunit/phpunit from 9.5.28 to 13.2.0

[dependabot]

Bumps phpunit/phpunit from 9.5.28 to 13.2.0.

Release notes

Sourced from phpunit/phpunit's releases.

PHPUnit 13.2.0

Added

• #3387: Specify a list of tests to run
• #4201: Handle interrupts and display current test results
• #4501: Option to mark test as risky when it does not contribute to code coverage
• #5757: Add assertions for ignoring whitespace differences in strings
• #5810: Do not dump arrays and objects in failure messages of IsTrue, IsFalse, IsNull, IsFinite, IsInfinite, and IsNan constraints
• #5838: Inherit #[RunTestsInSeparateProcesses] from parent test classes
• #5922: assertContainsEquals() should use sebastian/comparator for element comparison
• #6000: Report PHPT test as risky when --SKIPIF-- does not have standard-output side effect
• #6075: Support test execution order sorted by descending duration
• #6346: Emit warning when conflicting CLI options are used
• #6534: Make $_dataName available to #[TestDoxFormatter] callbacks
• #6559: Improved API for exception message expectations
• #6565: Optional $skipWhenEmpty parameter for #[DataProvider] and #[DataProviderExternal]
• #6566: Allow --stop-on-defect, --stop-on-error, etc. to accept an optional threshold
• #6567: Make diff context lines configurable
• #6574: Improve willReturnMap() with constraint support and strict matching
• #6575: --list-test-ids CLI option and enhance --filter CLI option to support test ID syntax
• #6577: --run-test-id <test-id> CLI option that accepts a single test ID for exact matching
• #6579: Properly handle issues triggered outside of tests
• #6597: Compact output (activated through --compact CLI option and PHPUNIT_COMPACT_OUTPUT=1 environment variable)
• #6598: --disable-coverage-targeting CLI option
• #6602: Separate configuration for branch coverage from path coverage
• #6606: Support for partially ordered parameter sets in mock object expectations
• #6611: Add CPU time to telemetry
• #6681: Comment-aware variants of XML comparison assertions
• The executionOrder attribute in the XML configuration file now accepts defects combined with any main order, as well as three-way combinations of depends/no-depends, defects, and a main order (for example, depends,defects,duration-ascending)
• --validate-configuration CLI option to validate an XML configuration file for PHPUnit
• Report TestDox information in Open Test Reporting XML
• Report per-test and per-test-suite resource usage (time, memory usage, peak memory usage) in Open Test Reporting XML
• Report number of assertions performed for each test in Open Test Reporting XML
• Report structured comparison failure details (expected, actual, diff) in Open Test Reporting XML
• Report random order seed in Open Test Reporting XML when test execution order is randomised

Changed

• #5873: Chain previously registered error handler instead of silently disabling PHPUnit's error handling
• #6535: Use sebastian/file-filter in SourceFilter::includes() for issue trigger identification
• #6581: Allow #[IgnoreDeprecations] to be repeated
• #6609: Skip data providers whose method cannot match --filter
• #6685: Generate failure messages for inverse assertions by authoring negations, not by rewriting strings
• Only errors and failures are now considered for "defect first" test reordering (tests that triggered deprecations, notices, or warnings as well as incomplete, risky, and skipped tests were previous also considered)
• A warning is now emitted when closures are compared for equality using the IsEqual, IsEqualCanonicalizing, IsEqualIgnoringCase, IsEqualWithDelta, and TraversableContainsEqual constraints or the assertEquals(), assertEqualsCanonicalizing(), assertEqualsIgnoringCase(), assertEqualsWithDelta(), and assertContainsEquals() assertions

Deprecated

• #6075: --order-by duration CLI option, use --order-by duration-ascending instead
• #6075: --order-by size CLI option, use --order-by size-ascending instead

... (truncated)

Changelog

Sourced from phpunit/phpunit's changelog.

[13.2.0] - 2026-06-05

Added

• #3387: Specify a list of tests to run
• #4201: Handle interrupts and display current test results
• #4501: Option to mark test as risky when it does not contribute to code coverage
• #5757: Add assertions for ignoring whitespace differences in strings
• #5810: Do not dump arrays and objects in failure messages of IsTrue, IsFalse, IsNull, IsFinite, IsInfinite, and IsNan constraints
• #5838: Inherit #[RunTestsInSeparateProcesses] from parent test classes
• #5922: assertContainsEquals() should use sebastian/comparator for element comparison
• #6000: Report PHPT test as risky when --SKIPIF-- does not have standard-output side effect
• #6075: Support test execution order sorted by descending duration
• #6346: Emit warning when conflicting CLI options are used
• #6534: Make $_dataName available to #[TestDoxFormatter] callbacks
• #6559: Improved API for exception message expectations
• #6565: Optional $skipWhenEmpty parameter for #[DataProvider] and #[DataProviderExternal]
• #6566: Allow --stop-on-defect, --stop-on-error, etc. to accept an optional threshold
• #6567: Make diff context lines configurable
• #6574: Improve willReturnMap() with constraint support and strict matching
• #6575: --list-test-ids CLI option and enhance --filter CLI option to support test ID syntax
• #6577: --run-test-id <test-id> CLI option that accepts a single test ID for exact matching
• #6579: Properly handle issues triggered outside of tests
• #6597: Compact output (activated through --compact CLI option and PHPUNIT_COMPACT_OUTPUT=1 environment variable)
• #6598: --disable-coverage-targeting CLI option
• #6602: Separate configuration for branch coverage from path coverage
• #6606: Support for partially ordered parameter sets in mock object expectations
• #6611: Add CPU time to telemetry
• #6681: Comment-aware variants of XML comparison assertions
• The executionOrder attribute in the XML configuration file now accepts defects combined with any main order, as well as three-way combinations of depends/no-depends, defects, and a main order (for example, depends,defects,duration-ascending)
• --validate-configuration CLI option to validate an XML configuration file for PHPUnit
• Report TestDox information in Open Test Reporting XML
• Report per-test and per-test-suite resource usage (time, memory usage, peak memory usage) in Open Test Reporting XML
• Report number of assertions performed for each test in Open Test Reporting XML
• Report structured comparison failure details (expected, actual, diff) in Open Test Reporting XML
• Report random order seed in Open Test Reporting XML when test execution order is randomised

Changed

• #5873: Chain previously registered error handler instead of silently disabling PHPUnit's error handling
• #6535: Use sebastian/file-filter in SourceFilter::includes() for issue trigger identification
• #6581: Allow #[IgnoreDeprecations] to be repeated
• #6609: Skip data providers whose method cannot match --filter
• #6685: Generate failure messages for inverse assertions by authoring negations, not by rewriting strings
• Only errors and failures are now considered for "defect first" test reordering (tests that triggered deprecations, notices, or warnings as well as incomplete, risky, and skipped tests were previous also considered)
• A warning is now emitted when closures are compared for equality using the IsEqual, IsEqualCanonicalizing, IsEqualIgnoringCase, IsEqualWithDelta, and TraversableContainsEqual constraints or the assertEquals(), assertEqualsCanonicalizing(), assertEqualsIgnoringCase(), assertEqualsWithDelta(), and assertContainsEquals() assertions

Deprecated

• #6075: --order-by duration CLI option, use --order-by duration-ascending instead

... (truncated)

Commits

• 3796ea9 Prepare release
• 70a2e77 Update github-actions to v1.0.1
• 5ea3bfc Merge branch '12.5' into 13.2
• 9970ce9 Merge branch '11.5' into 12.5
• 9e9c2c6 Fix errors reported by PHPStan
• 16d3906 Merge branch '10.5' into 11.5
• df54837 Merge branch '9.6' into 10.5
• 49c244f Merge branch '8.5' into 9.6
• 7a0d52c Update tools
• 0a3e9b1 Update dependencies
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 duplication

Metric	Results
Duplication	0

View in Codacy

AI Reviewer: first review requested successfully. AI can make mistakes. Always validate suggestions.

_{TIP This summary will be updated as you push new changes.}

[codacy-production]

Pull Request Overview

This PR attempts a major version upgrade for PHPUnit from version 9 to 13. This transition spans four major versions and introduces significant breaking changes that are not addressed in this PR. Specifically, PHPUnit 10+ requires a new configuration schema for phpunit.xml and has removed several widely used APIs (such as withConsecutive() and expectError()).

The current implementation only updates the dependency version in composer.json and composer.lock. Without corresponding configuration migrations and test suite refactoring, the build is expected to fail. This update should be treated as a major migration rather than a simple dependency bump.

About this PR

• The PR performs a major version jump from PHPUnit 9 to 13 without corresponding changes to the test suite or configuration files. PHPUnit 10+ introduced a completely new event system and removed many features (like listeners and certain assertions) that were standard in v9. Upgrading across these versions requires a coordinated update of the test environment and codebase.

Test suggestions

• Execute existing test suite with PHPUnit 13 to verify compatibility
• Migrate and validate the phpunit.xml configuration file to the PHPUnit 10+ schema

Prompt proposal for missing tests

Consider implementing these tests if applicable:
1. Execute existing test suite with PHPUnit 13 to verify compatibility
2. Migrate and validate the `phpunit.xml` configuration file to the PHPUnit 10+ schema

_{TIP Improve review quality by adding custom instructions
TIP How was this review? Give us feedback}

[codacy-production]

_{🔴 HIGH RISK}

Upgrading across four major versions (9 to 13) is a major migration that will likely break the build. You must update your phpunit.xml schema by running vendor/bin/phpunit --migrate-configuration. Additionally, you must refactor your test suite to address the removal of common APIs like withConsecutive(), expectError(), and the transition to the new event-driven system. Ensure your environment supports the PHP version requirements introduced in these later PHPUnit releases.