Skip to content

build(deps-dev): bump phpunit/phpunit from 13.1.10 to 13.1.13#579

Open
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/composer/phpunit/phpunit-13.1.13
Open

build(deps-dev): bump phpunit/phpunit from 13.1.10 to 13.1.13#579
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/composer/phpunit/phpunit-13.1.13

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 1, 2026

Copy link
Copy Markdown
Contributor

Bumps phpunit/phpunit from 13.1.10 to 13.1.13.

Release notes

Sourced from phpunit/phpunit's releases.

PHPUnit 13.1.13

Fixed

  • #6681: XML assertions such as assertXmlStringEqualsXmlString() regressed into treating comments as significant

Learn how to install or update PHPUnit 13.1 in the documentation.

Keep up to date with PHPUnit:

PHPUnit 13.1.12

Fixed

  • #6673: Empty PHP settings from the parent process override per-test -d settings forwarded to child processes (breaks PCOV coverage)

Learn how to install or update PHPUnit 13.1 in the documentation.

Keep up to date with PHPUnit:

PHPUnit 13.1.11

Fixed

  • PHP setting values containing = need to be quoted before forwarding via -d

Learn how to install or update PHPUnit 13.1 in the documentation.

Keep up to date with PHPUnit:

Changelog

Sourced from phpunit/phpunit's changelog.

[13.1.13] - 2026-05-27

Fixed

  • #6681: XML assertions such as assertXmlStringEqualsXmlString() regressed into treating comments as significant

[13.1.12] - 2026-05-25

Fixed

  • #6673: Empty PHP settings from the parent process override per-test -d settings forwarded to child processes (breaks PCOV coverage)

[13.1.11] - 2026-05-21

Fixed

  • PHP setting values containing = need to be quoted before forwarding via -d
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit) from 13.1.10 to 13.1.13.
- [Release notes](https://github.com/sebastianbergmann/phpunit/releases)
- [Changelog](https://github.com/sebastianbergmann/phpunit/blob/13.1.13/ChangeLog-13.1.md)
- [Commits](sebastianbergmann/phpunit@13.1.10...13.1.13)

---
updated-dependencies:
- dependency-name: phpunit/phpunit
  dependency-version: 13.1.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jun 1, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: composer, dependencies, php. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions github-actions Bot added the size/L Denotes a PR that changes 100-499 lines, ignoring generated files. label Jun 1, 2026
@deepsource-io

deepsource-io Bot commented Jun 1, 2026

Copy link
Copy Markdown

DeepSource Code Review

We reviewed changes in 11b0e7a...c0793dd on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade   Security  

Reliability  

Complexity  

Hygiene  

Coverage  

Code Review Summary

Analyzer Status Updated (UTC) Details
Code coverage Jun 1, 2026 6:41a.m. Review ↗
SQL Jun 1, 2026 6:41a.m. Review ↗
Secrets Jun 1, 2026 6:41a.m. Review ↗
PHP Jun 1, 2026 6:41a.m. Review ↗
Docker Jun 1, 2026 6:41a.m. Review ↗

Code Coverage Summary

Language Line Coverage (Overall)
Aggregate
93%
Php
93%

➟ Additional coverage metrics may have been reported. See full coverage report ↗


Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

@socket-security

socket-security Bot commented Jun 1, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedcomposer/​phpunit/​phpunit@​13.1.10.0 ⏵ 13.1.13.010010090100100

View full report

@codacy-production

codacy-production Bot commented Jun 1, 2026

Copy link
Copy Markdown

Not up to standards ⛔

🟢 Coverage ∅ diff coverage · +0.00% coverage variation

Metric Results
Coverage variation +0.00% coverage variation (-1.00%)
Diff coverage diff coverage

View coverage diff in Codacy

Coverage variation details
Coverable lines Covered lines Coverage
Common ancestor commit (96bdbbe) 859 799 93.02%
Head commit (852b6a7) 859 (+0) 799 (+0) 93.02% (+0.00%)

Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: <coverage of head commit> - <coverage of common ancestor commit>

Diff coverage details
Coverable lines Covered lines Diff coverage
Pull request (#579) 0 0 ∅ (not applicable)

Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: <covered lines added or modified>/<coverable lines added or modified> * 100%

NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.

@codecov

codecov Bot commented Jun 1, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.71%. Comparing base (96bdbbe) to head (852b6a7).

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #579   +/-   ##
=======================================
  Coverage   93.71%   93.71%           
=======================================
  Files          23       23           
  Lines        1034     1034           
=======================================
  Hits          969      969           
  Misses         65       65           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@guibranco guibranco enabled auto-merge (squash) June 2, 2026 19:12
@gstraccini gstraccini Bot added the ☑️ auto-merge Automatic merging of pull requests (gstraccini-bot) label Jun 2, 2026

@guibranco guibranco left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automatically approved by gstraccini[bot]

@gstraccini gstraccini Bot added the 🤖 bot Automated processes or integrations label Jun 2, 2026
@github-actions

github-actions Bot commented Jun 2, 2026

Copy link
Copy Markdown
Contributor

Infisical secrets check: ✅ No secrets leaked!

💻 Scan logs
2026-06-02T19:12:51Z INF scanning for exposed secrets...
7:12PM INF 465 commits scanned.
2026-06-02T19:12:52Z INF scan completed in 700ms
2026-06-02T19:12:52Z INF no leaks found

@sonarqubecloud

sonarqubecloud Bot commented Jun 2, 2026

Copy link
Copy Markdown

@dependabot @github

dependabot Bot commented on behalf of github Jun 8, 2026

Copy link
Copy Markdown
Contributor Author

A newer version of phpunit/phpunit exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

☑️ auto-merge Automatic merging of pull requests (gstraccini-bot) 🤖 bot Automated processes or integrations size/L Denotes a PR that changes 100-499 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant