[dependabot]

Updates the requirements on phpunit/phpunit to permit the latest version.

Release notes

Sourced from phpunit/phpunit's releases.

PHPUnit 11.5.57

Changed

• The Software Bill of Materials (SBOM) embedded in the PHAR now uses CycloneDX 1.7 and provides the NTIA minimum elements as well as the data fields that BSI TR-03183-2 (version 2.1.0) requires for logical and identified components, including component creators, original, distribution and effective licences, source code URIs, and the PHP runtime and its extensions as external components

---

Learn how to install or update PHPUnit 11.5 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

Changelog

Sourced from phpunit/phpunit's changelog.

[11.5.57] - 2026-10-05

Changed

• The Software Bill of Materials (SBOM) embedded in the PHAR now uses CycloneDX 1.7 and provides the NTIA minimum elements as well as the data fields that BSI TR-03183-2 (version 2.1.0) requires for logical and identified components, including component creators, original, distribution and effective licences, source code URIs, and the PHP runtime and its extensions as external components

[11.5.56] - 2026-07-06

Changed

• #6797: Adapt code generated for test double of interface with constructor for PHP 8.6

[11.5.55] - 2026-02-18

Fixed

• #6521: Performance regression in PHPUnit 11.5.54, PHPUnit 12.5.13, and PHPUnit 13.0.4

[11.5.54] - 2026-02-18

Fixed

• #6489: Classification of self/direct/indirect deprecation triggers is not aligned with Symfony's bridge for PHPUnit

[11.5.53] - 2026-02-10

Fixed

• #6503: Temporary file used by SourceMapper may be deleted prematurely when multiple PHPUnit processes run in parallel

[11.5.52] - 2026-02-08

Fixed

• #6495: Source map for issue trigger identification is regenerated in process isolation child processes

[11.5.51] - 2026-02-05

Added

• #6488: Allow disabling issue trigger identification for improved performance

Fixed

• #6486: Incorrect file name reported for errors for test methods declared in traits
• #6490: Incorrect test count when tests are skipped in before-class method

[11.5.50] - 2026-01-27

Changed

... (truncated)

Commits

• See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
phpunit/phpunit	[>= 13.a, < 14]
phpunit/phpunit	[>= 12.a, < 13]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[donatj]

@dependabot ignore this major version