Skip to content

Comments

chore(deps-dev): Bump phpunit/phpunit from 11.5.43 to 12.5.8 in /vendor-bin/phpunit#2344

Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/composer/vendor-bin/phpunit/phpunit/phpunit-12.5.8
Closed

chore(deps-dev): Bump phpunit/phpunit from 11.5.43 to 12.5.8 in /vendor-bin/phpunit#2344
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/composer/vendor-bin/phpunit/phpunit/phpunit-12.5.8

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 31, 2026 •
edited
Loading

Bumps phpunit/phpunit from 11.5.43 to 12.5.8.

Release notes

Sourced from phpunit/phpunit's releases.

PHPUnit 12.5.8

Changed

  • To prevent Poisoned Pipeline Execution (PPE) attacks using prepared .coverage files in pull requests, a PHPT test will no longer be run if the temporary file for writing code coverage information already exists before the test runs

Learn how to install or update PHPUnit 12.5 in the documentation.

Keep up to date with PHPUnit:

PHPUnit 12.5.7

Fixed

  • #6362: Manually instantiated test doubles are broken since PHPUnit 11.2
  • #6470: Infinite recursion in Count::getCountOf() for unusal implementations of Iterator or IteratorAggregate

Learn how to install or update PHPUnit 12.5 in the documentation.

Keep up to date with PHPUnit:

PHPUnit 12.5.6

Changed

Learn how to install or update PHPUnit 12.5 in the documentation.

Keep up to date with PHPUnit:

PHPUnit 12.5.5

Deprecated

  • #6461: any() matcher (soft deprecation)

Fixed

... (truncated)

Changelog

Sourced from phpunit/phpunit's changelog.

[12.5.8] - 2026-01-27

Changed

  • To prevent Poisoned Pipeline Execution (PPE) attacks using prepared .coverage files in pull requests, a PHPT test will no longer be run if the temporary file for writing code coverage information already exists before the test runs

[12.5.7] - 2026-01-24

Fixed

  • #6362: Manually instantiated test doubles are broken since PHPUnit 11.2
  • #6470: Infinite recursion in Count::getCountOf() for unusal implementations of Iterator or IteratorAggregate

[12.5.6] - 2026-01-16

Changed

[12.5.5] - 2026-01-15

Changed

  • PHPUnit\Framework\MockObject exceptions are now subtypes of PHPUnit\Exception

Deprecated

  • #6461: any() matcher (soft deprecation)

Fixed

  • #6470: Mocking a class with a property hook setter accepting more types than the property results in a fatal error

[12.5.4] - 2025-12-15

Changed

  • The #[AllowMockObjectsWithoutExpectations] attribute can now be used on the method level

Fixed

  • #6446: Test runner crashes with Timer::start() has to be called before Timer::stop()

[12.5.3] - 2025-12-11

Changed

  • The message emitted when a test method creates a mock object but does not configure any expectations for it has been improved

[12.5.2] - 2025-12-08

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added 3. to review dependencies Pull requests that update a dependency file labels Jan 31, 2026
@dependabot dependabot bot mentioned this pull request Jan 31, 2026
Closed
@github-actions github-actions bot enabled auto-merge January 31, 2026 02:37
@cypress
Copy link

cypress bot commented Jan 31, 2026 •
edited
Loading

Activity    Run #3239

Run Properties:  status check failed Failed #3239  •  git commit 05bed39c31: chore(deps-dev): Bump phpunit/phpunit from 11.5.43 to 12.5.8 in /vendor-bin/phpu...
Project Activity
Branch Review dependabot/composer/vendor-bin/phpunit/phpunit/phpunit-12.5.8
Run status status check failed Failed #3239
Run duration 02m 02s
Commit git commit 05bed39c31: chore(deps-dev): Bump phpunit/phpunit from 11.5.43 to 12.5.8 in /vendor-bin/phpu...
Committer dependabot[bot]
View all properties for this run ↗︎
Test results
Tests that failed  Failures 1
Tests that were flaky  Flaky 0
Tests that did not run due to a developer annotating a test with .skip  Pending 1
Tests that did not run due to a failure in a mocha hook  Skipped 0
Tests that passed  Passing 8
View all changes introduced in this branch ↗︎

Tests for review

Failed  cypress/e2e/sidebar.cy.ts • 1 failed test • Run E2E

View Output

Test Artifacts
Check activity listing in the sidebar > Has move activity Test Replay Screenshots

@dependabot dependabot bot force-pushed the dependabot/composer/vendor-bin/phpunit/phpunit/phpunit-12.5.8 branch from 910bceb to 4000f66 Compare January 31, 2026 05:30
@dependabot
chore(deps-dev): Bump phpunit/phpunit in /vendor-bin/phpunit
4274bba 
Bumps [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit) from 11.5.43 to 12.5.8.
- [Release notes](https://github.com/sebastianbergmann/phpunit/releases)
- [Changelog](https://github.com/sebastianbergmann/phpunit/blob/12.5.8/ChangeLog-12.5.md)
- [Commits](sebastianbergmann/phpunit@11.5.43...12.5.8)

---
updated-dependencies:
- dependency-name: phpunit/phpunit
  dependency-version: 12.5.8
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/composer/vendor-bin/phpunit/phpunit/phpunit-12.5.8 branch from 4000f66 to 4274bba Compare January 31, 2026 06:16
@miaulalala miaulalala closed this Feb 2, 2026
auto-merge was automatically disabled February 2, 2026 13:10

Pull request was closed

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 2, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/composer/vendor-bin/phpunit/phpunit/phpunit-12.5.8 branch February 2, 2026 13:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes

Assignees

No one assigned

Labels

3. to review dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@miaulalala