Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 31, 2026

Bumps phpunit/phpunit from 11.5.43 to 12.5.8.

Release notes

Sourced from phpunit/phpunit's releases.

PHPUnit 12.5.8

Changed

  • To prevent Poisoned Pipeline Execution (PPE) attacks using prepared .coverage files in pull requests, a PHPT test will no longer be run if the temporary file for writing code coverage information already exists before the test runs

Learn how to install or update PHPUnit 12.5 in the documentation.

Keep up to date with PHPUnit:

PHPUnit 12.5.7

Fixed

  • #6362: Manually instantiated test doubles are broken since PHPUnit 11.2
  • #6470: Infinite recursion in Count::getCountOf() for unusal implementations of Iterator or IteratorAggregate

Learn how to install or update PHPUnit 12.5 in the documentation.

Keep up to date with PHPUnit:

PHPUnit 12.5.6

Changed


Learn how to install or update PHPUnit 12.5 in the documentation.

Keep up to date with PHPUnit:

PHPUnit 12.5.5

Deprecated

  • #6461: any() matcher (soft deprecation)

Fixed

... (truncated)

Changelog

Sourced from phpunit/phpunit's changelog.

[12.5.8] - 2026-01-27

Changed

  • To prevent Poisoned Pipeline Execution (PPE) attacks using prepared .coverage files in pull requests, a PHPT test will no longer be run if the temporary file for writing code coverage information already exists before the test runs

[12.5.7] - 2026-01-24

Fixed

  • #6362: Manually instantiated test doubles are broken since PHPUnit 11.2
  • #6470: Infinite recursion in Count::getCountOf() for unusal implementations of Iterator or IteratorAggregate

[12.5.6] - 2026-01-16

Changed

[12.5.5] - 2026-01-15

Changed

  • PHPUnit\Framework\MockObject exceptions are now subtypes of PHPUnit\Exception

Deprecated

  • #6461: any() matcher (soft deprecation)

Fixed

  • #6470: Mocking a class with a property hook setter accepting more types than the property results in a fatal error

[12.5.4] - 2025-12-15

Changed

  • The #[AllowMockObjectsWithoutExpectations] attribute can now be used on the method level

Fixed

  • #6446: Test runner crashes with Timer::start() has to be called before Timer::stop()

[12.5.3] - 2025-12-11

Changed

  • The message emitted when a test method creates a mock object but does not configure any expectations for it has been improved

[12.5.2] - 2025-12-08

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@github-actions github-actions bot enabled auto-merge January 31, 2026 02:37
@cypress
Copy link

cypress bot commented Jan 31, 2026

Activity    Run #3239

Run Properties:  status check failed Failed #3239  •  git commit 05bed39c31: chore(deps-dev): Bump phpunit/phpunit from 11.5.43 to 12.5.8 in /vendor-bin/phpu...
Project Activity
Branch Review dependabot/composer/vendor-bin/phpunit/phpunit/phpunit-12.5.8
Run status status check failed Failed #3239
Run duration 02m 02s
Commit git commit 05bed39c31: chore(deps-dev): Bump phpunit/phpunit from 11.5.43 to 12.5.8 in /vendor-bin/phpu...
Committer dependabot[bot]
View all properties for this run ↗︎

Test results
Tests that failed  Failures 1
Tests that were flaky  Flaky 0
Tests that did not run due to a developer annotating a test with .skip  Pending 1
Tests that did not run due to a failure in a mocha hook  Skipped 0
Tests that passed  Passing 8
View all changes introduced in this branch ↗︎

Tests for review

Failed  cypress/e2e/sidebar.cy.ts • 1 failed test • Run E2E

View Output

Test Artifacts
Check activity listing in the sidebar > Has move activity Test Replay Screenshots

@dependabot dependabot bot force-pushed the dependabot/composer/vendor-bin/phpunit/phpunit/phpunit-12.5.8 branch from 910bceb to 4000f66 Compare January 31, 2026 05:30
Bumps [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit) from 11.5.43 to 12.5.8.
- [Release notes](https://github.com/sebastianbergmann/phpunit/releases)
- [Changelog](https://github.com/sebastianbergmann/phpunit/blob/12.5.8/ChangeLog-12.5.md)
- [Commits](sebastianbergmann/phpunit@11.5.43...12.5.8)

---
updated-dependencies:
- dependency-name: phpunit/phpunit
  dependency-version: 12.5.8
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/composer/vendor-bin/phpunit/phpunit/phpunit-12.5.8 branch from 4000f66 to 4274bba Compare January 31, 2026 06:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants