Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update	OpenSSF
phpunit/phpunit	^10.5.21 -> ^10.5.24					require-dev	patch
shivammathur/setup-php	2.30.5 -> 2.31.0					action	minor

---

Release Notes

sebastianbergmann/phpunit (phpunit/phpunit)

v10.5.24: PHPUnit 10.5.24

Compare Source

Changed

• #​5877: Use array_pop() instead of array_shift() for processing Test objects in TestSuite::run() and optimize TestSuite::isEmpty()

---

How to install or update PHPUnit

v10.5.23: PHPUnit 10.5.23

Compare Source

Changed

• #​5875: Also destruct TestCase objects early that use a data provider

---

How to install or update PHPUnit

v10.5.22: PHPUnit 10.5.22

Compare Source

Changed

• #​5871: Do not collect unnecessary information using debug_backtrace()

---

How to install or update PHPUnit

shivammathur/setup-php (shivammathur/setup-php)

v2.31.0

Compare Source

Changelog

• Added support for a fallback mirror for ondrej/php PPA when launchpad is down (#​834).

• Fixed installing packages on self-hosted environments with existing conf files (#​852).

• Fixed support for oci8 and pdo_oci extensions on ubuntu-24.04.

• Fixed support for couchbase extension on ubuntu-24.04.

• Fixed support for ubuntu-24.04 after apt-fast was dropped from the GA images.

• Fixed support for firebird extension on macos-14

• Fixed support for blackfire extension on macos-14.

• Fixed support for relay extension.

• Fixed support for phalcon extension for PHP 7.4 on Ubuntu.

• Updated Node.js dependencies.

For the complete list of changes, please refer to the Full Changelog

Follow for updates

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
actions/shivammathur/setup-php	2.31.0	🟢 7.2	Details Check Score Reason Maintained 🟢 10 26 commit(s) and 19 issue activity found in the last 90 days -- score normalized to 10 Code-Review ⚠️ 0 Found 1/29 approved changesets -- score normalized to 0 License 🟢 10 license file detected CII-Best-Practices 🟢 5 badge detected: Passing Security-Policy 🟢 10 security policy file detected Binary-Artifacts 🟢 10 no binaries found in the repo Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Token-Permissions 🟢 9 detected GitHub workflow tokens with excessive permissions Fuzzing ⚠️ 0 project is not fuzzed Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Signed-Releases ⚠️ -1 no releases found Packaging 🟢 10 packaging workflow detected SAST 🟢 7 SAST tool detected but not run on all commits Vulnerabilities 🟢 9 1 existing vulnerabilities detected
actions/shivammathur/setup-php	2.30.5	🟢 7.2	Details Check Score Reason Maintained 🟢 10 26 commit(s) and 19 issue activity found in the last 90 days -- score normalized to 10 Code-Review ⚠️ 0 Found 1/29 approved changesets -- score normalized to 0 License 🟢 10 license file detected CII-Best-Practices 🟢 5 badge detected: Passing Security-Policy 🟢 10 security policy file detected Binary-Artifacts 🟢 10 no binaries found in the repo Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Token-Permissions 🟢 9 detected GitHub workflow tokens with excessive permissions Fuzzing ⚠️ 0 project is not fuzzed Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Signed-Releases ⚠️ -1 no releases found Packaging 🟢 10 packaging workflow detected SAST 🟢 7 SAST tool detected but not run on all commits Vulnerabilities 🟢 9 1 existing vulnerabilities detected

Scanned Manifest Files

.github/workflows/continuous-integration.yml

• shivammathur/setup-php@2.31.0
• shivammathur/setup-php@2.30.5

composer.json

• phpunit/phpunit@>= 10.5.24, < 11.0.0
• phpunit/phpunit@>= 10.5.21, < 11.0.0

[coveralls]

Pull Request Test Coverage Report for Build 9637601950

Details

• 0 of 0 changed or added relevant lines in 0 files are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage remained the same at 100.0%

---

Totals
Change from base Build 9553948188:	0.0%
Covered Lines:	25
Relevant Lines:	25

---

💛 - Coveralls

[codeclimate]

Code Climate has analyzed commit fa94efd and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 100.0% (0.0% change).

View more on Code Climate.

[coveralls]

Pull Request Test Coverage Report for Build 9639631309

Details

• 0 of 0 changed or added relevant lines in 0 files are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage remained the same at 100.0%

---

Totals
Change from base Build 9639625800:	0.0%
Covered Lines:	25
Relevant Lines:	25

---

💛 - Coveralls

[coveralls]

Pull Request Test Coverage Report for Build 9639631103

Details

• 0 of 0 changed or added relevant lines in 0 files are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage remained the same at 100.0%

---

Totals
Change from base Build 9639625800:	0.0%
Covered Lines:	25
Relevant Lines:	25

---

💛 - Coveralls