Composer(deps-dev): Bump phpunit/phpunit from 11.5.55 to 13.1.8 in /web

[dependabot]

Bumps phpunit/phpunit from 11.5.55 to 13.1.8.

Release notes

Sourced from phpunit/phpunit's releases.

PHPUnit 13.1.8

Fixed

• #6595: Crash when before-class or after-class method fails with assertion failure
• #6599: TeamCity logger does not wrap failures in before-test methods with testStarted and testFinished
• #6601: Anonymous classes are not rejected with a clear error when creating a test double
• #6603: assertArrays*IgnoringOrder() fails on mixed scalar types and on reordered nested associative arrays
• MockBuilder::setMockClassName() and TestStubBuilder::setStubClassName() now reject values that are not valid unqualified PHP class identifiers, throwing the new InvalidClassNameException
• The regular expression used by Generator::ensureValidMethods() to validate method names passed to MockBuilder::onlyMethods() and addMethods() was not anchored, so any string containing a valid identifier substring (including strings with parentheses, braces, comments, or newlines) was accepted

---

Learn how to install or update PHPUnit 13.1 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

PHPUnit 13.1.7

Changed

• Pass LIBXML_NONET when parsing/validating XML configuration files to make explicit that no network I/O is performed
• Verify the result file written by an isolated child process with a random nonce before deserializing it

---

Learn how to install or update PHPUnit 13.1 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

PHPUnit 13.1.6

Fixed

• #6590: Silent failure when configuration file is invalid
• #6592: INI metacharacters ; and " are not preserved when forwarding settings to child processes

---

Learn how to install or update PHPUnit 13.1 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

PHPUnit 13.1.5

... (truncated)

Changelog

Sourced from phpunit/phpunit's changelog.

[13.1.8] - 2026-05-01

Fixed

• #6595: Crash when before-class or after-class method fails with assertion failure
• #6599: TeamCity logger does not wrap failures in before-test methods with testStarted and testFinished
• #6601: Anonymous classes are not rejected with a clear error when creating a test double
• #6603: assertArrays*IgnoringOrder() fails on mixed scalar types and on reordered nested associative arrays
• MockBuilder::setMockClassName() and TestStubBuilder::setStubClassName() now reject values that are not valid unqualified PHP class identifiers, throwing the new InvalidClassNameException
• The regular expression used by Generator::ensureValidMethods() to validate method names passed to MockBuilder::onlyMethods() and addMethods() was not anchored, so any string containing a valid identifier substring (including strings with parentheses, braces, comments, or newlines) was accepted

[13.1.7] - 2026-04-18

Changed

• Pass LIBXML_NONET when parsing/validating XML configuration files to make explicit that no network I/O is performed
• Verify the result file written by an isolated child process with a random nonce before deserializing it

[13.1.6] - 2026-04-17

Fixed

• #6590: Silent failure when configuration file is invalid
• #6592: INI metacharacters ; and " are not preserved when forwarding settings to child processes

[13.1.5] - 2026-04-16

Fixed

• #5860: PHP CLI -d settings are not forwarded to child processes for process isolation
• #6451: Incomplete version in RequiresPhp (e.g. <=8.5) is compared against full PHP version, causing unexpected skips
• #6589: dataSetAsStringWithData() raises "float is not representable as int" warning for large floats in data sets

[13.1.4] - 2026-04-15

Fixed

• #5993: DefaultJobRunner deadlocks on child processes that write large amounts of stderr output
• #6465: SAPI-populated $_SERVER entries leak from parent into child process
• #6587: failOnEmptyTestSuite="false" in phpunit.xml is ignored when --group/--filter/--testsuite matches no tests
• #6588: Order of issue baseline entries is not canonicalized

[13.1.3] - 2026-04-13

Fixed

• Regression in XML configuration migration introduced in PHPUnit 12.5.8

[13.1.2] - 2026-04-13

... (truncated)

Commits

• f49a2b5 Prepare release
• 423461f Merge branch '12.5' into 13.1
• d75dd30 Prepare release
• 451a35b Merge branch '12.5' into 13.1
• 419e088 Closes #6599
• 172f1cd Closes #6603
• 8a8e7bb Merge branch '12.5' into 13.1
• f86f987 Merge branch '11.5' into 12.5
• 078b608 Update tools
• febf07f Increase timeout
• Additional commits viewable in compare view

[dependabot]

Assignees

The following users could not be added as assignees: Hackmastr. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Please fix the above issues or remove invalid values from dependabot.yml.