Bump the dependencies group with 4 updates

[dependabot]

Bumps the dependencies group with 4 updates: phpro/grumphp, phpspec/prophecy, phpspec/prophecy-phpunit and phpunit/phpunit.

Updates phpro/grumphp from 2.18.0 to 2.19.0

Release notes

Sourced from phpro/grumphp's releases.

Version 2.19.0

What's Changed

• Bump actions/cache from 4 to 5 by @​dependabot[bot] in phpro/grumphp#1201
• Require --raw diffs for gitlib by @​veewee in phpro/grumphp#1207

Upgrading

❗ Requires re-initialization from git hooks

In the new version of our dependency gitlib, you need to pass the --raw option to the git diff that is being parsed by the pre-commit hooks. This means you'll need to change your git hook after upgrading:

./vendor/bin/grumphp git:init

Full Changelog: phpro/grumphp@v2.18.0...v2.19.0

Commits

• 5a414be 2.19.0 release
• fcd1f78 Merge pull request #1207 from veewee/gitlib-rquires-raw-difffs
• 81a6f9a Require --raw diffs for gitlib
• d8253ca Merge pull request #1201 from phpro/dependabot/github_actions/actions/cache-5
• 14bf7d9 Bump actions/cache from 4 to 5
• See full diff in compare view

Updates phpspec/prophecy from 1.24.0 to 1.25.0

Release notes

Sourced from phpspec/prophecy's releases.

1.25.0

Added:

• Add support for PHPUnit 13 (@​Jean85)

Changelog

Sourced from phpspec/prophecy's changelog.

1.25.0

Added:

• Add support for PHPUnit 13 (@​Jean85)

Commits

• 7ab9650 Update the changelog for 1.25.0
• bbb7122 Allow PHPUnit 13 (#662)
• a20142f Merge pull request #664 from 6b7562617765726c6f73/php-cs-fixer-shim
• 90bf10c Merge pull request #666 from stof/fix_phpstan
• ad76aba Fix the phpstan range to forbid broken versions
• ca6a691 Merge pull request #665 from phpspec/stof-patch-1
• 9054237 Prevent installing phpstan 2.1.34
• 4052fb9 Use shim package for PHP CS Fixer
• See full diff in compare view

Updates phpspec/prophecy-phpunit from 2.4.0 to 2.5.0

Release notes

Sourced from phpspec/prophecy-phpunit's releases.

2.5.0

What's Changed

• Allow PHPUnit 13 by @​Jean85 in phpspec/prophecy-phpunit#70
• Add a CI job running PHP 8.5 by @​stof in phpspec/prophecy-phpunit#71

Full Changelog: phpspec/prophecy-phpunit@v2.4.0...v2.5.0

Changelog

Sourced from phpspec/prophecy-phpunit's changelog.

2.5.0

• Add support for PHPUnit 13
• Add a CI job running on PHP 8.5

Commits

• 89f91b0 Update changelog
• facd332 Merge pull request #71 from phpspec/php8.5
• 04039e9 Add a CI job running PHP 8.5
• 124093c Merge pull request #70 from Jean85/patch-1
• 24555bd Allow PHPUnit 13
• See full diff in compare view

Updates phpunit/phpunit from 11.5.46 to 11.5.53

Release notes

Sourced from phpunit/phpunit's releases.

PHPUnit 11.5.53

Fixed

• #6503: Temporary file used by SourceMapper may be deleted prematurely when multiple PHPUnit processes run in parallel

---

Learn how to install or update PHPUnit 11.5 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

PHPUnit 11.5.52

Fixed

• #6495: Source map for issue trigger identification is regenerated in process isolation child processes

---

Learn how to install or update PHPUnit 11.5 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

PHPUnit 11.5.51

Added

• #6488: Allow disabling issue trigger identification for improved performance

Fixed

• #6486: Incorrect file name reported for errors for test methods declared in traits
• #6490: Incorrect test count when tests are skipped in before-class method

---

Learn how to install or update PHPUnit 11.5 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

PHPUnit 11.5.50

Changed

... (truncated)

Changelog

Sourced from phpunit/phpunit's changelog.

[11.5.53] - 2026-02-10

Fixed

• #6503: Temporary file used by SourceMapper may be deleted prematurely when multiple PHPUnit processes run in parallel

[11.5.52] - 2026-02-08

Fixed

• #6495: Source map for issue trigger identification is regenerated in process isolation child processes

[11.5.51] - 2026-02-05

Added

• #6488: Allow disabling issue trigger identification for improved performance

Fixed

• #6486: Incorrect file name reported for errors for test methods declared in traits
• #6490: Incorrect test count when tests are skipped in before-class method

[11.5.50] - 2026-01-27

Changed

• To prevent Poisoned Pipeline Execution (PPE) attacks using prepared .coverage files in pull requests, a PHPT test will no longer be run if the temporary file for writing code coverage information already exists before the test runs

[11.5.49] - 2026-01-24

Fixed

• #6362: Manually instantiated test doubles are broken since PHPUnit 11.2
• #6470: Infinite recursion in Count::getCountOf() for unusal implementations of Iterator or IteratorAggregate

[11.5.48] - 2026-01-16

Changed

• Reverted a change that caused a build failure for the PHP project's nightly community job

[11.5.47] - 2026-01-15

Changed

• PHPUnit\Framework\MockObject exceptions are now subtypes of PHPUnit\Exception

Fixed

... (truncated)

Commits

• a997a65 Prepare release
• 561fed0 Merge branch '10.5' into 11.5
• f110cb0 Remove PhpStorm inspection suppression annotations that are no longer needed
• eb7e701 Closes #6503
• 68a4394 Remove unused import
• eaf67a5 Add missing TestDox attribute
• 1d34e5d Document the behaviour discovered in #6504
• 666b33c Fix test
• b287d32 Prepare release
• 03cfcf5 Update ChangeLog
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Try the dev build for this PR: https://acquia-cli.s3.amazonaws.com/build/pr/1963/acli.phar

curl -OL https://acquia-cli.s3.amazonaws.com/build/pr/1963/acli.phar
chmod +x acli.phar

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 92.29%. Comparing base (e4c3d97) to head (c5bfad9).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff            @@
##               main    #1963   +/-   ##
=========================================
  Coverage     92.29%   92.29%           
  Complexity     1916     1916           
=========================================
  Files           122      122           
  Lines          6995     6995           
=========================================
  Hits           6456     6456           
  Misses          539      539           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.