Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
phpstan/phpstan	2.2.15 → 2.2.16
phpunit/phpunit (source)	13.3.4 → 13.4.0

---

Release Notes

phpstan/phpstan-phar-composer-source (phpstan/phpstan)

v2.2.16

Compare Source

sebastianbergmann/phpunit (phpunit/phpunit)

v13.4.0: PHPUnit 13.4.0

Compare Source

Added

• #​6585: executionOrder attribute values and --order-by token lists that spell the order before defects, for example duration-ascending,defects
• #​6585: pipeline() on the TestSuite\Sorted event for inspecting which reordering stages were applied
• #​6686: Constraint::negatedToString() and Constraint::negatedFailureDescription() for authoring the description of a constraint that is wrapped in LogicalNot
• #​6863: Cache which tests a test file contains
• #​6957: Allow ordering tests by the time their source files were last modified
• #​6958: Select the tests that are in all of several groups
• #​6960: Record the order in which methods of mock objects are invoked
• #​6964: #[RequiresClass] attribute to skip a test if a class does not exist
• #​6995: ChildProcessExtension interface for extensions that need to be bootstrapped in the child process of a test that runs in process isolation
• --coverage-jsonl CLI option and <jsonl> element for the XML configuration file to write a code coverage report in JSONL format, one JSON object per line, that reports uncovered code rather than every executable line
• --timeout CLI option to limit the wall-clock time of the entire test run
• requireCoverageMetadataOnSmallTests, requireCoverageMetadataOnMediumTests, and requireCoverageMetadataOnLargeTests attributes for the XML configuration file to require code coverage metadata depending on the size of a test; these have precedence over requireCoverageMetadata

Changed

• Output printed by a test is now shown in the compact output as a --- OUTPUT: record that is attributed to the test instead of being passed through unformatted; the record is omitted when beStrictAboutOutputDuringTests or --disallow-test-output already reports the output as risky

Deprecated

• #​6585: Writing defects before the order for --order-by and executionOrder, which will change meaning in PHPUnit 14
• #​6585: depends and no-depends for --order-by and executionOrder
• #​6585: Configuring more than one order for --order-by and executionOrder
• #​6585: Unknown values for the executionOrder XML configuration attribute, which are currently ignored
• #​6686: Constraint::failureDescriptionInContext() and LogicalNot::negate()
• #​6999: Class-level #[Group], #[Ticket], #[Small], #[Medium], and #[Large] on parent classes of test classes

Fixed

• Issues that are listed in the baseline are not ignored for tests that are run in a separate process
• A test that is run in process isolation aborts the test run when its result cannot be unserialized, for instance because it returns an object that holds a test double
• A test that uses #[DataProviderClosure] errors when it is run in process isolation

---

Learn how to install or update PHPUnit 13.4 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

v13.3.6: PHPUnit 13.3.6

Compare Source

Fixed

• The first attempt of a test that is retried is reported as attempt 1 of 1 in events, instead of attempt 1 of the configured maximum number of attempts
• The class name argument of #[RequiresMethod] is declared as class-string, so static analysis reports an error when it refers to a class that does not exist
• A #[RequiresMethod] attribute that refers to a class which cannot be loaded, for instance because its parent class does not exist, aborts the test run instead of skipping the test

---

Learn how to install or update PHPUnit 13.3 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

v13.3.5: PHPUnit 13.3.5

Compare Source

Changed

• Control characters and ANSI escape sequences in user-supplied strings such as test names, data set names, and messages are now made visible as \u{NNNN} escape sequences instead of being passed through to the terminal
• Control characters in user-supplied strings are now also made visible in the compact output
• Line feeds in the name of a test no longer break the header line of a record in the compact output

---

Learn how to install or update PHPUnit 13.3 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.