Skip to content

Bump phpunit/phpunit from 7.3.1 to 8.5.52#14

Merged
rick-lam merged 2 commits into
mainfrom
dependabot/composer/phpunit/phpunit-8.5.52
May 7, 2026
Merged

Bump phpunit/phpunit from 7.3.1 to 8.5.52#14
rick-lam merged 2 commits into
mainfrom
dependabot/composer/phpunit/phpunit-8.5.52

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Jan 27, 2026 •
edited
Loading

Bumps phpunit/phpunit from 7.3.1 to 8.5.52.

Release notes

Sourced from phpunit/phpunit's releases.

PHPUnit 8.5.52

Changed

  • To prevent Poisoned Pipeline Execution (PPE) attacks using prepared .coverage files in pull requests, a PHPT test will no longer be run if the temporary file for writing code coverage information already exists before the test runs

Learn how to install or update PHPUnit 8.5 in the documentation.

Keep up to date with PHPUnit:

PHPUnit 8.5.51

Changed

  • PHPUnit\Framework\MockObject exceptions subtypes of PHPUnit\Exception

Learn how to install or update PHPUnit 8.5 in the documentation.

Keep up to date with PHPUnit:

PHPUnit 8.5.50

  • No changes; phpunit.phar rebuilt with PHP 8.4 to work around PHP-Scoper issue #1139

Learn how to install or update PHPUnit 8.5 in the documentation.

Keep up to date with PHPUnit:

PHPUnit 8.5.49

  • No changes; phpunit.phar rebuilt with updated dependencies

Learn how to install or update PHPUnit 8.5 in the documentation.

Keep up to date with PHPUnit:

... (truncated)

Changelog

Sourced from phpunit/phpunit's changelog.

[8.5.52] - 2026-01-27

Changed

  • To prevent Poisoned Pipeline Execution (PPE) attacks using prepared .coverage files in pull requests, a PHPT test will no longer be run if the temporary file for writing code coverage information already exists before the test runs

[8.5.51] - 2026-01-24

Changed

  • PHPUnit\Framework\MockObject exceptions are now subtypes of PHPUnit\Exception

[8.5.50] - 2025-12-06

  • No changes; phpunit.phar rebuilt with PHP 8.4 to work around PHP-Scoper issue #1139

[8.5.49] - 2025-12-01

  • No changes; phpunit.phar rebuilt with updated dependencies

[8.5.48] - 2025-09-24

  • No changes; phpunit.phar rebuilt with updated dependencies

[8.5.47] - 2025-09-23

  • No changes; phpunit.phar rebuilt with updated dependencies

[8.5.46] - 2025-09-14

Changed

  • #6366: Exclude __sleep() and __wakeup() from test double code generation on PHP >= 8.5

[8.5.45] - 2025-09-11

Changed

  • Implement __serialize() in addition to __sleep() (which will be deprecated in PHP 8.5)

[8.5.44] - 2025-08-20

Changed

  • Do not configure report_memleaks setting (which will be deprecated in PHP 8.5) for PHPT processes

[8.5.43] - 2025-08-10

Changed

... (truncated)

Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Jan 27, 2026
@rick-lam
Copy link
Copy Markdown
Contributor

rick-lam commented May 7, 2026

@dependabot rebase

@dependabot dependabot Bot force-pushed the dependabot/composer/phpunit/phpunit-8.5.52 branch from df0cf38 to 3687923 Compare May 7, 2026 10:23
@rick-lam rick-lam mentioned this pull request May 7, 2026
Merged
@rick-lam
Copy link
Copy Markdown
Contributor

rick-lam commented May 7, 2026

@dependabot rebase

@dependabot dependabot Bot force-pushed the dependabot/composer/phpunit/phpunit-8.5.52 branch from 3687923 to 3f47ace Compare May 7, 2026 10:33
@rick-lam rick-lam mentioned this pull request May 7, 2026
Merged
@rick-lam
Copy link
Copy Markdown
Contributor

rick-lam commented May 7, 2026

@dependabot rebase

@dependabot dependabot Bot force-pushed the dependabot/composer/phpunit/phpunit-8.5.52 branch from 3f47ace to 09d0519 Compare May 7, 2026 10:44
rick-lam added a commit that referenced this pull request May 7, 2026
@rick-lam @claude
Bump mockery floor to ^1.3 for PHPUnit 8 compat
67d10b0 
Mockery added : void return-type overrides on its
MockeryPHPUnitIntegration trait in 1.3.0 (2019) to match the
return-type changes in PHPUnit 8. The current ^1 floor lets
--prefer-lowest resolve mockery 1.0.x, which still has the
return-typeless overrides and fatals when paired with PHPUnit 8
(observed on Dependabot PR #14's prefer-lowest jobs).

Mockery ^1.3 supports PHP 5.6+ and PHPUnit 5.x/6.x/7.x/8.x, so
this is non-breaking against the suite's currently-pinned phpunit
^5.7.21 | ^6 | ^7 constraint. No code changes required.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@rick-lam rick-lam mentioned this pull request May 7, 2026
Merged
@rick-lam
Copy link
Copy Markdown
Contributor

rick-lam commented May 7, 2026

@dependabot rebase

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 7, 2026

Looks like phpunit/phpunit is no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this May 7, 2026
@dependabot dependabot Bot deleted the dependabot/composer/phpunit/phpunit-8.5.52 branch May 7, 2026 10:52
@rick-lam rick-lam restored the dependabot/composer/phpunit/phpunit-8.5.52 branch May 7, 2026 10:54
@rick-lam
Copy link
Copy Markdown
Contributor

rick-lam commented May 7, 2026

@dependabot rebase

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 7, 2026

Looks like this PR is closed. If the branch still exists, you can re-open the PR and then use @dependabot rebase or @dependabot recreate. If the branch was deleted, Dependabot will create a new PR on the next scheduled run, or you can trigger an update from the Dependency graph page.

@rick-lam rick-lam reopened this May 7, 2026
dependabot Bot and others added 2 commits May 7, 2026 11:56
@dependabot @rick-lam
Bump phpunit/phpunit from 7.3.1 to 8.5.52
b6f19fb 
Bumps [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit) from 7.3.1 to 8.5.52.
- [Release notes](https://github.com/sebastianbergmann/phpunit/releases)
- [Changelog](https://github.com/sebastianbergmann/phpunit/blob/8.5.52/ChangeLog-8.5.md)
- [Commits](sebastianbergmann/phpunit@7.3.1...8.5.52)

---
updated-dependencies:
- dependency-name: phpunit/phpunit
  dependency-version: 8.5.52
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@rick-lam @claude
Regenerate composer.lock for mockery ^1.3 floor
d7b05c4 
Manual rebase of the Dependabot phpunit-8 bump onto main needed
the lock refreshed: composer.json on main requires mockery ^1.3
since #20, but Dependabot's lock still pinned mockery 1.1.0.
Ran `composer update mockery/mockery` locally to pick up 1.4.0,
which has the : void overrides on MockeryPHPUnitIntegration that
PHPUnit 8 expects.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@rick-lam rick-lam force-pushed the dependabot/composer/phpunit/phpunit-8.5.52 branch from 09d0519 to d7b05c4 Compare May 7, 2026 11:00
@rick-lam rick-lam merged commit 2e9d4f7 into main May 7, 2026
7 checks passed
@rick-lam rick-lam deleted the dependabot/composer/phpunit/phpunit-8.5.52 branch May 7, 2026 11:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@rick-lam