composer(deps-dev): update phpunit/phpunit requirement from ^11.5.2 to ^11.5.3

[dependabot]

Updates the requirements on phpunit/phpunit to permit the latest version.

Release notes

Sourced from phpunit/phpunit's releases.

PHPUnit 11.5.3

Added

• Test\AfterLastTestMethodErrored, Test\AfterTestMethodErrored, Test\BeforeTestMethodErrored, Test\PostConditionErrored, and Test\PreConditionErrored events

Fixed

• #6093: Test Double Code Generator does not work when PHPUnit is used from PHAR on PHP 8.4
• #6094: Errors in after-last-test methods are not reported
• #6095: Expectation is not counted correctly when a doubled method is called more often than is expected
• #6096: --list-tests-xml is broken when a group with a numeric name is defined
• #6098: No system-out element in JUnit XML logfile
• #6100: Suppressed deprecations incorrectly stop test execution when execution should be stopped on deprecation

---

How to install or update PHPUnit

Changelog

Sourced from phpunit/phpunit's changelog.

[11.5.3] - 2025-01-13

Added

• Test\AfterLastTestMethodErrored, Test\AfterTestMethodErrored, Test\BeforeTestMethodErrored, Test\PostConditionErrored, and Test\PreConditionErrored events

Fixed

• #6093: Test Double Code Generator does not work when PHPUnit is used from PHAR on PHP 8.4
• #6094: Errors in after-last-test methods are not reported
• #6095: Expectation is not counted correctly when a doubled method is called more often than is expected
• #6096: --list-tests-xml is broken when a group with a numeric name is defined
• #6098: No system-out element in JUnit XML logfile
• #6100: Suppressed deprecations incorrectly stop test execution when execution should be stopped on deprecation

[11.5.2] - 2024-12-21

Fixed

• #6082: assertArrayHasKey(), assertArrayNotHasKey(), arrayHasKey(), and ArrayHasKey::__construct() do not support all possible key types
• #6087: --migrate-configuration does not remove beStrictAboutTodoAnnotatedTests attribute from XML configuration file

[11.5.1] - 2024-12-11

Added

• #6081: DefaultResultCache::mergeWith() for merging result cache instances

Fixed

• #6066: TeamCity logger does not handle error/skipped events in before-class methods correctly

[11.5.0] - 2024-12-06

Added

• #5948: Support for Property Hooks in Test Doubles
• #5954: Provide a way to stop execution at a particular deprecation
• Method assertContainsNotOnlyInstancesOf() in the PHPUnit\Framework\Assert class as the inverse of the assertContainsOnlyInstancesOf() method
• Methods assertContainsOnlyArray(), assertContainsOnlyBool(), assertContainsOnlyCallable(), assertContainsOnlyFloat(), assertContainsOnlyInt(), assertContainsOnlyIterable(), assertContainsOnlyNull(), assertContainsOnlyNumeric(), assertContainsOnlyObject(), assertContainsOnlyResource(), assertContainsOnlyClosedResource(), assertContainsOnlyScalar(), and assertContainsOnlyString() in the PHPUnit\Framework\Assert class as specialized alternatives for the generic assertContainsOnly() method
• Methods assertContainsNotOnlyArray(), assertContainsNotOnlyBool(), assertContainsNotOnlyCallable(), assertContainsNotOnlyFloat(), assertContainsNotOnlyInt(), assertContainsNotOnlyIterable(), assertContainsNotOnlyNull(), assertContainsNotOnlyNumeric(), assertContainsNotOnlyObject(), assertContainsNotOnlyResource(), assertContainsNotOnlyClosedResource(), assertContainsNotOnlyScalar(), and assertContainsNotOnlyString() in the PHPUnit\Framework\Assert class as specialized alternatives for the generic assertNotContainsOnly() method
• Methods containsOnlyArray(), containsOnlyBool(), containsOnlyCallable(), containsOnlyFloat(), containsOnlyInt(), containsOnlyIterable(), containsOnlyNull(), containsOnlyNumeric(), containsOnlyObject(), containsOnlyResource(), containsOnlyClosedResource(), containsOnlyScalar(), and containsOnlyString() in the PHPUnit\Framework\Assert class as specialized alternatives for the generic containsOnly() method
• Methods isArray(), isBool(), isCallable(), isFloat(), isInt(), isIterable(), isNumeric(), isObject(), isResource(), isClosedResource(), isScalar(), isString() in the PHPUnit\Framework\Assert class as specialized alternatives for the generic isType() method
• TestRunner\ChildProcessStarted and TestRunner\ChildProcessFinished events

Changed

• #5998: Do not run SKIPIF section of PHPT test in separate process when it is free of side effects
• #5999: Do not run CLEAN section of PHPT test in separate process when it is free of side effects that modify the parent process

... (truncated)

Commits

• 30e319e Prepare release
• e914839 Merge branch '10.5' into 11.5
• e76586f Prepare release
• 89a79cb Update ChangeLog
• d8b6085 Add test for #6102
• fbf2d02 Merge branch '10.5' into 11.5
• aa7621a Merge branch '9.6' into 10.5
• 2f41cde Merge branch '8.5' into 9.6
• bbd266e Update tools
• 94cbc3a Closes #6100
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
composer/phpunit/phpunit	>= 11.5.3, < 12.0.0	🟢 5.2	Details Check Score Reason Packaging ⚠️ -1 packaging workflow not detected Maintained 🟢 10 30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10 Code-Review ⚠️ 0 Found 0/30 approved changesets -- score normalized to 0 Dangerous-Workflow ⚠️ -1 no workflows found Token-Permissions ⚠️ -1 No tokens found Security-Policy 🟢 10 security policy file detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected SAST ⚠️ 0 no SAST tool detected Fuzzing ⚠️ 0 project is not fuzzed Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies ⚠️ -1 no dependencies found License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Vulnerabilities 🟢 10 0 existing vulnerabilities detected Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches

Scanned Files

• composer.json

[coveralls]

Pull Request Test Coverage Report for Build 12760428999

Details

• 0 of 0 changed or added relevant lines in 0 files are covered.
• No unchanged relevant lines lost coverage.
• Overall first build on dependabot/composer/master/phpunit/phpunit-tw-11.5.3 at 88.104%

---

Totals
Change from base Build 12756703746:	88.1%
Covered Lines:	237
Relevant Lines:	269

---

💛 - Coveralls