Skip to content

chore(deps): update test packages - #42

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/test-packages
Oct 5, 2026
Merged

renovate[bot] merged 1 commit into
mainfrom
renovate/test-packages

Conversation

@renovate

@renovate renovate Bot commented Oct 5, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
friendsofphp/php-cs-fixer ^3.95.24 → ^3.95.27 age confidence
phpstan/phpstan ^2.2.13 → ^2.2.17 age confidence
phpunit/phpunit (source) ^13.3.2 → ^13.4.0 age confidence

Release Notes

PHP-CS-Fixer/PHP-CS-Fixer (friendsofphp/php-cs-fixer)

v3.95.27

Compare Source

  • fix: refuse a symlinked cache path in FileHandler to avoid arbitrary file overwrite (#​9856)
  • fix: validate value types in Cache::fromJson so a corrupt cache rebuilds instead of crashing (#​9855)
  • fix: SimplifiedIfReturnFixer - fix whitespace before ; as well (#​9857)
  • refactor: more moderate permissions for newly created cache file/directory (#​9852)
  • chore: add TODO to split class with too many responsibilities (#​9853)
  • docs: FullyQualifiedStrictTypesFixer - document attribute handling in example (#​9859)

v3.95.26

Compare Source

  • perf: Use dedicated sequence matcher in simplified_if_return (#​9763)
  • DX: add XDEBUG for PHP 8.5 docker build (#​9841)
  • chore: ConfigInterface - document TODO for v4 (#​9845)
  • chore: drop benchmark.sh in favour of phpbench (#​9849)
  • chore: stalebot - exclude RTM labels (#​9843)
  • deps: bump dev-deps (#​9840)
  • deps: explicitly expect PHPUnit 13.3+ over 13.0.x (#​9842)
  • deps: update dev deps (#​9848)
  • docs: do not promote deprecated path argument usage with --path-mode=override (#​9850)
  • docs: simpler docs for parallel execution, as it's default one nowadays (#​9851)

v3.95.25

Compare Source

  • fix: handle missing terminator after ?? in AssignNullCoalescingToCoalesceEqualFixer (#​9831)
  • fix: IsNullFixer - do not fix is_null() calls using argument unpacking (#​9830)
  • fix: IsNullFixer - handle is_null() calls using named arguments (#​9828)
  • UX: init - use outlined messages (#​9826)
  • deps: bump crate-ci/typos from 1.49.0 to 1.50.1 in /.github/workflows in the all group across 1 directory (#​9824)
  • deps: bump phpstan/phpstan from 2.2.9 to 2.2.12 in /dev-tools in the phpstan group (#​9822)
  • deps: bump shipmonk/dead-code-detector from 1.3.3 to 1.4.0 in /dev-tools in the shipmonk group across 1 directory (#​9823)
phpstan/phpstan-phar-composer-source (phpstan/phpstan)

v2.2.17

Compare Source

v2.2.16

Compare Source

v2.2.15

Compare Source

v2.2.14

Compare Source

sebastianbergmann/phpunit (phpunit/phpunit)

v13.4.0: PHPUnit 13.4.0

Compare Source

Added
  • #​6585: executionOrder attribute values and --order-by token lists that spell the order before defects, for example duration-ascending,defects
  • #​6585: pipeline() on the TestSuite\Sorted event for inspecting which reordering stages were applied
  • #​6686: Constraint::negatedToString() and Constraint::negatedFailureDescription() for authoring the description of a constraint that is wrapped in LogicalNot
  • #​6863: Cache which tests a test file contains
  • #​6957: Allow ordering tests by the time their source files were last modified
  • #​6958: Select the tests that are in all of several groups
  • #​6960: Record the order in which methods of mock objects are invoked
  • #​6964: #[RequiresClass] attribute to skip a test if a class does not exist
  • #​6995: ChildProcessExtension interface for extensions that need to be bootstrapped in the child process of a test that runs in process isolation
  • --coverage-jsonl CLI option and <jsonl> element for the XML configuration file to write a code coverage report in JSONL format, one JSON object per line, that reports uncovered code rather than every executable line
  • --timeout CLI option to limit the wall-clock time of the entire test run
  • requireCoverageMetadataOnSmallTests, requireCoverageMetadataOnMediumTests, and requireCoverageMetadataOnLargeTests attributes for the XML configuration file to require code coverage metadata depending on the size of a test; these have precedence over requireCoverageMetadata
Changed
  • Output printed by a test is now shown in the compact output as a --- OUTPUT: record that is attributed to the test instead of being passed through unformatted; the record is omitted when beStrictAboutOutputDuringTests or --disallow-test-output already reports the output as risky
Deprecated
  • #​6585: Writing defects before the order for --order-by and executionOrder, which will change meaning in PHPUnit 14
  • #​6585: depends and no-depends for --order-by and executionOrder
  • #​6585: Configuring more than one order for --order-by and executionOrder
  • #​6585: Unknown values for the executionOrder XML configuration attribute, which are currently ignored
  • #​6686: Constraint::failureDescriptionInContext() and LogicalNot::negate()
  • #​6999: Class-level #[Group], #[Ticket], #[Small], #[Medium], and #[Large] on parent classes of test classes
Fixed
  • Issues that are listed in the baseline are not ignored for tests that are run in a separate process
  • A test that is run in process isolation aborts the test run when its result cannot be unserialized, for instance because it returns an object that holds a test double
  • A test that uses #[DataProviderClosure] errors when it is run in process isolation

Learn how to install or update PHPUnit 13.4 in the documentation.

Keep up to date with PHPUnit:

v13.3.6: PHPUnit 13.3.6

Compare Source

Fixed
  • The first attempt of a test that is retried is reported as attempt 1 of 1 in events, instead of attempt 1 of the configured maximum number of attempts
  • The class name argument of #[RequiresMethod] is declared as class-string, so static analysis reports an error when it refers to a class that does not exist
  • A #[RequiresMethod] attribute that refers to a class which cannot be loaded, for instance because its parent class does not exist, aborts the test run instead of skipping the test

Learn how to install or update PHPUnit 13.3 in the documentation.

Keep up to date with PHPUnit:

v13.3.5: PHPUnit 13.3.5

Compare Source

Changed
  • Control characters and ANSI escape sequences in user-supplied strings such as test names, data set names, and messages are now made visible as \u{NNNN} escape sequences instead of being passed through to the terminal
  • Control characters in user-supplied strings are now also made visible in the compact output
  • Line feeds in the name of a test no longer break the header line of a record in the compact output

Learn how to install or update PHPUnit 13.3 in the documentation.

Keep up to date with PHPUnit:

v13.3.4: PHPUnit 13.3.4

Compare Source

Fixed
  • #​6965: Temporary file used by SourceMapper may be deleted prematurely
  • The compact output displays details on PHPUnit deprecations and PHPUnit notices even when --display-phpunit-deprecations and --display-phpunit-notices are not used
  • The summary line of the compact output does not report the number of PHPUnit deprecations, PHPUnit notices, and PHPUnit warnings

Learn how to install or update PHPUnit 13.3 in the documentation.

Keep up to date with PHPUnit:

v13.3.3: PHPUnit 13.3.3

Compare Source

Fixed
  • Paths of included files are now escaped when generating the code that is executed in a separate process, so that a path containing special characters no longer produces broken code
  • Tests of a test class that is skipped as a whole are missing from the TestDox output
  • A test that is skipped or marked incomplete before it started is missing from the TestDox output
  • A test that is marked incomplete before it started is not counted in the number of tests that ran
  • No progress is printed for a test that is marked incomplete before it started

Learn how to install or update PHPUnit 13.3 in the documentation.

Keep up to date with PHPUnit:

Configuration

📅 Schedule: (in timezone Europe/Berlin)

  • Branch creation
    • "before 6am on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies label Oct 5, 2026
@renovate
renovate Bot merged commit c34f51e into main Oct 5, 2026
4 checks passed
@renovate
renovate Bot deleted the renovate/test-packages branch October 5, 2026 05:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants