Bump PHPUnit to ^9.6.33 to fix CVE-2026-24765 (Dependabot alert #3) - #21

Merged

basi merged 8 commits into

mainfrom

work/dependabot-3-phpunit-cve-2026-24765

Aug 27, 2026

Commits on Aug 26, 2026

build(deps-dev): require phpunit/phpunit ^9.6.33 (CVE-2026-24765)

basi
and
claude
committed
ff0f848
test: skip testVerifyPeer when the bad-cert test host no longer resolves

basi
and
claude
committed
e2ef91b
build(deps-dev): drop phpunit from the app skeleton composer.json

basi
and
claude
committed
5bff587
build(composer): scope the advisory ignore to specific phpcs advisories

basi
and
claude
committed
bf5e5a6
test: verify TLS peer rejection against a local self-signed server

basi
and
claude
committed
8ebbcbd
test: harden local TLS peer verification fixture
basi
committed
c9c3b9a
fix: support PHP 8.4 debugger highlight markup
basi
committed
9850847
Merge branch 'main' into work/dependabot-3-phpunit-cve-2026-24765
basi
authored
ce6c29b