build(deps-dev): bump phpunit/phpunit from 9.5.28 to 13.1.10

[dependabot]

Bumps phpunit/phpunit from 9.5.28 to 13.1.10.

Release notes

Sourced from phpunit/phpunit's releases.

PHPUnit 13.1.10

Changed

• Pass configuration options introduced in sebastian/diff 8.3.0

---

Learn how to install or update PHPUnit 13.1 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

PHPUnit 13.1.9

Changed

• A Test or Tests prefix is no longer stripped from class names when they are processed for TestDox output

Fixed

• #6605: Data set names and provider values containing Unicode bidirectional control characters distort terminal output
• #6610: Per-testsuite bootstrap script not loaded in process isolation
• TestDox output collapsed separate test classes into a single group when their prettified class names matched

---

Learn how to install or update PHPUnit 13.1 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

PHPUnit 13.1.8

Fixed

• #6595: Crash when before-class or after-class method fails with assertion failure
• #6599: TeamCity logger does not wrap failures in before-test methods with testStarted and testFinished
• #6601: Anonymous classes are not rejected with a clear error when creating a test double
• #6603: assertArrays*IgnoringOrder() fails on mixed scalar types and on reordered nested associative arrays
• MockBuilder::setMockClassName() and TestStubBuilder::setStubClassName() now reject values that are not valid unqualified PHP class identifiers, throwing the new InvalidClassNameException
• The regular expression used by Generator::ensureValidMethods() to validate method names passed to MockBuilder::onlyMethods() and addMethods() was not anchored, so any string containing a valid identifier substring (including strings with parentheses, braces, comments, or newlines) was accepted

---

Learn how to install or update PHPUnit 13.1 in the documentation.

Keep up to date with PHPUnit:

... (truncated)

Changelog

Sourced from phpunit/phpunit's changelog.

[13.1.10] - 2026-05-15

Changed

• Pass configuration options introduced in sebastian/diff 8.3.0

[13.1.9] - 2026-05-13

Changed

• A Test or Tests prefix is no longer stripped from class names when they are processed for TestDox output

Fixed

• #6605: Data set names and provider values containing Unicode bidirectional control characters distort terminal output
• #6610: Per-testsuite bootstrap script not loaded in process isolation
• TestDox output collapsed separate test classes into a single group when their prettified class names matched

[13.1.8] - 2026-05-01

Fixed

• #6595: Crash when before-class or after-class method fails with assertion failure
• #6599: TeamCity logger does not wrap failures in before-test methods with testStarted and testFinished
• #6601: Anonymous classes are not rejected with a clear error when creating a test double
• #6603: assertArrays*IgnoringOrder() fails on mixed scalar types and on reordered nested associative arrays
• MockBuilder::setMockClassName() and TestStubBuilder::setStubClassName() now reject values that are not valid unqualified PHP class identifiers, throwing the new InvalidClassNameException
• The regular expression used by Generator::ensureValidMethods() to validate method names passed to MockBuilder::onlyMethods() and addMethods() was not anchored, so any string containing a valid identifier substring (including strings with parentheses, braces, comments, or newlines) was accepted

[13.1.7] - 2026-04-18

Changed

• Pass LIBXML_NONET when parsing/validating XML configuration files to make explicit that no network I/O is performed
• Verify the result file written by an isolated child process with a random nonce before deserializing it

[13.1.6] - 2026-04-17

Fixed

• #6590: Silent failure when configuration file is invalid
• #6592: INI metacharacters ; and " are not preserved when forwarding settings to child processes

[13.1.5] - 2026-04-16

Fixed

• #5860: PHP CLI -d settings are not forwarded to child processes for process isolation
• #6451: Incomplete version in RequiresPhp (e.g. <=8.5) is compared against full PHP version, causing unexpected skips
• #6589: dataSetAsStringWithData() raises "float is not representable as int" warning for large floats in data sets

... (truncated)

Commits

• 3895909 Prepare release
• 5be497c Update dependencies
• 4aab6e3 Pass configuration options introduced in sebastian/diff 8.3.0
• 28ccd33 Update dependencies
• 6accbbe Merge branch '12.5' into 13.1
• d4409c7 Do not persist Git credentials
• e8098c5 Merge branch '12.5' into 13.1
• ecbca50 Merge branch '11.5' into 12.5
• 5fd7636 Merge branch '10.5' into 11.5
• 9408671 Merge branch '9.6' into 10.5
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 duplication

Metric	Results
Duplication	0

View in Codacy

AI Reviewer: first review requested successfully. AI can make mistakes. Always validate suggestions.

_{TIP This summary will be updated as you push new changes.}

[codacy-production]

Pull Request Overview

This PR attempts a major version upgrade of PHPUnit from 9 to 13. This jump spans four major releases, introducing fundamental breaking changes, including a new event system, a rewritten configuration schema (introduced in v10), and the removal of various mock builders.

The current implementation is incomplete and likely to fail. There are no updates to the 'phpunit.xml' configuration file to match the new schema, nor is there a corresponding update to the project's minimum PHP requirement. PHPUnit versions 11 and above require PHP 8.2 or higher. Additionally, the test suite likely requires manual refactoring to add ': void' return types to lifecycle methods and to adapt to the removed functionality.

About this PR

• The upgrade from PHPUnit 9 to 13 involves substantial breaking changes in the event system, assertions, and configuration schema. This PR currently only modifies the version constraint without addressing these systemic requirements.

Test suggestions

• Execute the test suite with PHPUnit 13 to ensure compatibility with breaking changes introduced since version 9.
• Update the phpunit.xml configuration file to comply with the schema changes introduced in PHPUnit 10 and later.

Prompt proposal for missing tests

Consider implementing these tests if applicable:
1. Execute the test suite with PHPUnit 13 to ensure compatibility with breaking changes introduced since version 9.
2. Update the phpunit.xml configuration file to comply with the schema changes introduced in PHPUnit 10 and later.

_{TIP Improve review quality by adding custom instructions
TIP How was this review? Give us feedback}

[codacy-production]

_{🔴 HIGH RISK}

Updating from PHPUnit 9 to 13 involves significant breaking changes, such as the new event system in v10, the removal of certain mock builders, and a new configuration schema. This upgrade requires PHP 8.2 or higher; however, the 'require' section of your composer.json does not enforce this. Additionally, you will likely need to update test lifecycle methods (e.g., adding ': void' to 'setUp' and 'tearDown') and migrate your 'phpunit.xml' file.

[dependabot]

Superseded by #360.