build(deps-dev): bump phpunit/phpunit from 9.5.28 to 13.2.1

[dependabot]

Bumps phpunit/phpunit from 9.5.28 to 13.2.1.

Release notes

Sourced from phpunit/phpunit's releases.

PHPUnit 13.2.1

Fixed

• #6741: Test is not run when --filter matches the name of a data set but not the name of the test method
• #6743: Improve error message for invalid version constraint in attribute
• #6744: Environment variable attributes reject empty-string values since PHPUnit 13.2.0

---

Learn how to install or update PHPUnit 13.2 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

PHPUnit 13.2.0

Added

• #3387: Specify a list of tests to run
• #4201: Handle interrupts and display current test results
• #4501: Option to mark test as risky when it does not contribute to code coverage
• #5757: Add assertions for ignoring whitespace differences in strings
• #5810: Do not dump arrays and objects in failure messages of IsTrue, IsFalse, IsNull, IsFinite, IsInfinite, and IsNan constraints
• #5838: Inherit #[RunTestsInSeparateProcesses] from parent test classes
• #5922: assertContainsEquals() should use sebastian/comparator for element comparison
• #6000: Report PHPT test as risky when --SKIPIF-- does not have standard-output side effect
• #6075: Support test execution order sorted by descending duration
• #6346: Emit warning when conflicting CLI options are used
• #6534: Make $_dataName available to #[TestDoxFormatter] callbacks
• #6559: Improved API for exception message expectations
• #6565: Optional $skipWhenEmpty parameter for #[DataProvider] and #[DataProviderExternal]
• #6566: Allow --stop-on-defect, --stop-on-error, etc. to accept an optional threshold
• #6567: Make diff context lines configurable
• #6574: Improve willReturnMap() with constraint support and strict matching
• #6575: --list-test-ids CLI option and enhance --filter CLI option to support test ID syntax
• #6577: --run-test-id <test-id> CLI option that accepts a single test ID for exact matching
• #6579: Properly handle issues triggered outside of tests
• #6597: Compact output (activated through --compact CLI option and PHPUNIT_COMPACT_OUTPUT=1 environment variable)
• #6598: --disable-coverage-targeting CLI option
• #6602: Separate configuration for branch coverage from path coverage
• #6606: Support for partially ordered parameter sets in mock object expectations
• #6611: Add CPU time to telemetry
• #6681: Comment-aware variants of XML comparison assertions
• The executionOrder attribute in the XML configuration file now accepts defects combined with any main order, as well as three-way combinations of depends/no-depends, defects, and a main order (for example, depends,defects,duration-ascending)
• --validate-configuration CLI option to validate an XML configuration file for PHPUnit
• Report TestDox information in Open Test Reporting XML
• Report per-test and per-test-suite resource usage (time, memory usage, peak memory usage) in Open Test Reporting XML
• Report number of assertions performed for each test in Open Test Reporting XML
• Report structured comparison failure details (expected, actual, diff) in Open Test Reporting XML

... (truncated)

Changelog

Sourced from phpunit/phpunit's changelog.

[13.2.1] - 2026-06-15

Fixed

• #6741: Test is not run when --filter matches the name of a data set but not the name of the test method
• #6743: Improve error message for invalid version constraint in attribute
• #6744: Environment variable attributes reject empty-string values since PHPUnit 13.2.0

[13.2.0] - 2026-06-05

Added

• #3387: Specify a list of tests to run
• #4201: Handle interrupts and display current test results
• #4501: Option to mark test as risky when it does not contribute to code coverage
• #5757: Add assertions for ignoring whitespace differences in strings
• #5810: Do not dump arrays and objects in failure messages of IsTrue, IsFalse, IsNull, IsFinite, IsInfinite, and IsNan constraints
• #5838: Inherit #[RunTestsInSeparateProcesses] from parent test classes
• #5922: assertContainsEquals() should use sebastian/comparator for element comparison
• #6000: Report PHPT test as risky when --SKIPIF-- does not have standard-output side effect
• #6075: Support test execution order sorted by descending duration
• #6346: Emit warning when conflicting CLI options are used
• #6534: Make $_dataName available to #[TestDoxFormatter] callbacks
• #6559: Improved API for exception message expectations
• #6565: Optional $skipWhenEmpty parameter for #[DataProvider] and #[DataProviderExternal]
• #6566: Allow --stop-on-defect, --stop-on-error, etc. to accept an optional threshold
• #6567: Make diff context lines configurable
• #6574: Improve willReturnMap() with constraint support and strict matching
• #6575: --list-test-ids CLI option and enhance --filter CLI option to support test ID syntax
• #6577: --run-test-id <test-id> CLI option that accepts a single test ID for exact matching
• #6579: Properly handle issues triggered outside of tests
• #6597: Compact output (activated through --compact CLI option and PHPUNIT_COMPACT_OUTPUT=1 environment variable)
• #6598: --disable-coverage-targeting CLI option
• #6602: Separate configuration for branch coverage from path coverage
• #6606: Support for partially ordered parameter sets in mock object expectations
• #6611: Add CPU time to telemetry
• #6681: Comment-aware variants of XML comparison assertions
• The executionOrder attribute in the XML configuration file now accepts defects combined with any main order, as well as three-way combinations of depends/no-depends, defects, and a main order (for example, depends,defects,duration-ascending)
• --validate-configuration CLI option to validate an XML configuration file for PHPUnit
• Report TestDox information in Open Test Reporting XML
• Report per-test and per-test-suite resource usage (time, memory usage, peak memory usage) in Open Test Reporting XML
• Report number of assertions performed for each test in Open Test Reporting XML
• Report structured comparison failure details (expected, actual, diff) in Open Test Reporting XML
• Report random order seed in Open Test Reporting XML when test execution order is randomised

Changed

• #5873: Chain previously registered error handler instead of silently disabling PHPUnit's error handling
• #6535: Use sebastian/file-filter in SourceFilter::includes() for issue trigger identification
• #6581: Allow #[IgnoreDeprecations] to be repeated

... (truncated)

Commits

• 60da0ff Prepare release
• a625c2a Merge branch '12.5' into 13.2
• 900400a Prepare release
• 4b16590 Fix CS/WS issues
• 073298c Closes #6744
• 9147606 Merge branch '12.5' into 13.2
• cbabf21 Update ChangeLog
• d651dab Improve error message for invalid version constraint in attribute
• 059594d Add test showing current behaviour
• 8330ffa Closes #6741
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 duplication

Metric	Results
Duplication	0

View in Codacy

AI Reviewer: first review requested successfully. AI can make mistakes. Always validate suggestions.

_{TIP This summary will be updated as you push new changes.}

[codacy-production]

Pull Request Overview

The PR updates phpunit/phpunit from version 9.5.28 to 13.2.1. This is a significant major version jump that introduces substantial breaking changes, including the migration from DocBlock annotations to PHP Attributes and a completely overhauled configuration schema. While the dependency constraints are updated in composer.json, there are no accompanying updates to the test files or the phpunit.xml configuration. Consequently, the test suite is highly likely to fail in its current state. It is recommended to perform the migration using PHPUnit's automated migration tools for both the test code and the configuration file before merging.

About this PR

• The jump across several major versions of PHPUnit involves breaking changes that are not backwards compatible. Specifically, PHPUnit 10+ removed support for many DocBlock annotations in favor of PHP Attributes and introduced a new XML configuration schema. Without these updates, the CI pipeline and local test runs will likely fail. Please ensure the migration tool (phpunit --migrate-configuration) is run and that test metadata is updated.

Test suggestions

• Verify that existing tests are compatible with PHPUnit 13 (handling breaking changes in Mock Objects and Metadata)
• Verify that phpunit.xml configuration is migrated to the format required by version 13

Prompt proposal for missing tests

Consider implementing these tests if applicable:
1. Verify that existing tests are compatible with PHPUnit 13 (handling breaking changes in Mock Objects and Metadata)
2. Verify that `phpunit.xml` configuration is migrated to the format required by version 13

_{TIP Improve review quality by adding custom instructions
TIP How was this review? Give us feedback}