build(deps-dev): bump phpunit/phpunit from 9.5.28 to 13.2.3

[dependabot]

Bumps phpunit/phpunit from 9.5.28 to 13.2.3.

Release notes

Sourced from phpunit/phpunit's releases.

PHPUnit 13.2.3

Changed

• #6797: Adapt code generated for test double of interface with constructor for PHP 8.6

---

Learn how to install or update PHPUnit 13.2 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

PHPUnit 13.2.2

Fixed

• #6768: Negative priorities for hook methods are rejected by static analysis
• #6778: Deprecation triggered outside of tests cannot be ignored

---

Learn how to install or update PHPUnit 13.2 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

PHPUnit 13.2.1

Fixed

• #6741: Test is not run when --filter matches the name of a data set but not the name of the test method
• #6743: Improve error message for invalid version constraint in attribute
• #6744: Environment variable attributes reject empty-string values since PHPUnit 13.2.0

---

Learn how to install or update PHPUnit 13.2 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

PHPUnit 13.2.0

Added

• #3387: Specify a list of tests to run
• #4201: Handle interrupts and display current test results

... (truncated)

Changelog

Sourced from phpunit/phpunit's changelog.

[13.2.3] - 2026-07-06

Changed

• #6797: Adapt code generated for test double of interface with constructor for PHP 8.6

[13.2.2] - 2026-06-29

Fixed

• #6768: Negative priorities for hook methods are rejected by static analysis
• #6778: Deprecation triggered outside of tests cannot be ignored

[13.2.1] - 2026-06-15

Fixed

• #6741: Test is not run when --filter matches the name of a data set but not the name of the test method
• #6743: Improve error message for invalid version constraint in attribute
• #6744: Environment variable attributes reject empty-string values since PHPUnit 13.2.0

[13.2.0] - 2026-06-05

Added

• #3387: Specify a list of tests to run
• #4201: Handle interrupts and display current test results
• #4501: Option to mark test as risky when it does not contribute to code coverage
• #5757: Add assertions for ignoring whitespace differences in strings
• #5810: Do not dump arrays and objects in failure messages of IsTrue, IsFalse, IsNull, IsFinite, IsInfinite, and IsNan constraints
• #5838: Inherit #[RunTestsInSeparateProcesses] from parent test classes
• #5922: assertContainsEquals() should use sebastian/comparator for element comparison
• #6000: Report PHPT test as risky when --SKIPIF-- does not have standard-output side effect
• #6075: Support test execution order sorted by descending duration
• #6346: Emit warning when conflicting CLI options are used
• #6534: Make $_dataName available to #[TestDoxFormatter] callbacks
• #6559: Improved API for exception message expectations
• #6565: Optional $skipWhenEmpty parameter for #[DataProvider] and #[DataProviderExternal]
• #6566: Allow --stop-on-defect, --stop-on-error, etc. to accept an optional threshold
• #6567: Make diff context lines configurable
• #6574: Improve willReturnMap() with constraint support and strict matching
• #6575: --list-test-ids CLI option and enhance --filter CLI option to support test ID syntax
• #6577: --run-test-id <test-id> CLI option that accepts a single test ID for exact matching
• #6579: Properly handle issues triggered outside of tests
• #6597: Compact output (activated through --compact CLI option and PHPUNIT_COMPACT_OUTPUT=1 environment variable)
• #6598: --disable-coverage-targeting CLI option
• #6602: Separate configuration for branch coverage from path coverage
• #6606: Support for partially ordered parameter sets in mock object expectations
• #6611: Add CPU time to telemetry
• #6681: Comment-aware variants of XML comparison assertions

... (truncated)

Commits

• d76d0e2 Prepare release
• eca8792 Merge branch '12.5' into 13.2
• 0608d15 Prepare release
• ca03a71 Merge branch '11.5' into 12.5
• 5f83edf Prepare release
• 2f3b5e4 Merge branch '10.5' into 11.5
• 0e8c1d1 Prepare release
• 6724240 Merge branch '9.6' into 10.5
• 0edba2f Prepare release
• c3984ec Merge branch '8.5' into 9.6
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 duplication

Metric	Results
Duplication	0

View in Codacy

AI Reviewer: first review requested successfully. AI can make mistakes. Always validate suggestions.

_{TIP This summary will be updated as you push new changes.}

[codacy-production]

Pull Request Overview

The proposed major version upgrade for the test framework is likely to break the testing pipeline. Although static analysis indicates the changes are up to standards, the transition involves significant breaking changes—notably a configuration schema overhaul and a new event system—that are not addressed in this PR. The absence of updates to the configuration file or test code suggests the suite will be unable to initialize or run correctly in the CI environment.

About this PR

• This upgrade represents a significant architectural shift. Major releases in this framework (specifically from version 9 to 10 and beyond) introduced a complete overhaul of the configuration schema and the removal of legacy metadata annotations. Proceeding without these updates will likely cause systemic failures in the test pipeline.

Test suggestions

• Execute the existing test suite using the updated version to ensure compatibility
• Verify that the project's configuration file has been migrated to the new schema required by the major version upgrade

Prompt proposal for missing tests

Consider implementing these tests if applicable:
1. Execute the existing test suite using the updated version to ensure compatibility
2. Verify that the project's configuration file has been migrated to the new schema required by the major version upgrade

_{TIP Improve review quality by adding custom instructions
TIP How was this review? Give us feedback}

[codacy-production]

_{🟡 MEDIUM RISK}

Suggestion: Upgrading the test framework across multiple major versions involves significant breaking changes. Please verify that the configuration has been migrated to the current schema and that the test suite is compatible with the removal of legacy features and the introduction of the new event system.

[dependabot]

Superseded by #375.