composer: bump phpunit/phpunit from 13.2.4 to 13.3.4

[dependabot]

Bumps phpunit/phpunit from 13.2.4 to 13.3.4.

Release notes

Sourced from phpunit/phpunit's releases.

PHPUnit 13.3.4

Fixed

• #6965: Temporary file used by SourceMapper may be deleted prematurely
• The compact output displays details on PHPUnit deprecations and PHPUnit notices even when --display-phpunit-deprecations and --display-phpunit-notices are not used
• The summary line of the compact output does not report the number of PHPUnit deprecations, PHPUnit notices, and PHPUnit warnings

---

Learn how to install or update PHPUnit 13.3 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

PHPUnit 13.3.3

Fixed

• Paths of included files are now escaped when generating the code that is executed in a separate process, so that a path containing special characters no longer produces broken code
• Tests of a test class that is skipped as a whole are missing from the TestDox output
• A test that is skipped or marked incomplete before it started is missing from the TestDox output
• A test that is marked incomplete before it started is not counted in the number of tests that ran
• No progress is printed for a test that is marked incomplete before it started

---

Learn how to install or update PHPUnit 13.3 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

PHPUnit 13.3.2

Fixed

• #6904: SourceMap is built in child process even though identifyIssueTrigger is disabled
• #6924: #[CoversFile] attribute is not considered for risky test check

---

Learn how to install or update PHPUnit 13.3 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

PHPUnit 13.3.1

... (truncated)

Changelog

Sourced from phpunit/phpunit's changelog.

[13.3.4] - 2026-09-15

Fixed

• #6965: Temporary file used by SourceMapper may be deleted prematurely
• The compact output displays details on PHPUnit deprecations and PHPUnit notices even when --display-phpunit-deprecations and --display-phpunit-notices are not used
• The summary line of the compact output does not report the number of PHPUnit deprecations, PHPUnit notices, and PHPUnit warnings

[13.3.3] - 2026-09-09

Fixed

• Paths of included files are now escaped when generating the code that is executed in a separate process, so that a path containing special characters no longer produces broken code
• Tests of a test class that is skipped as a whole are missing from the TestDox output
• A test that is skipped or marked incomplete before it started is missing from the TestDox output
• A test that is marked incomplete before it started is not counted in the number of tests that ran
• No progress is printed for a test that is marked incomplete before it started

[13.3.2] - 2026-08-27

Fixed

• #6904: SourceMap is built in child process even though identifyIssueTrigger is disabled
• #6924: #[CoversFile] attribute is not considered for risky test check

[13.3.1] - 2026-08-13

Changed

• Invoking a static hook method such as setUpBeforeClass() no longer triggers a deprecation warning on PHP 8.6

[13.3.0] - 2026-08-07

Added

• #3794: Filesystem-based code coverage targeting
• #5758: Make export of objects customizable
• #6546: Both property hooks can now be configured on test doubles of virtual hooked properties, even when the doubled property only declares one of them
• #6586: Custom code coverage driver support
• #6591: Repeated test execution using --repeat CLI option and #[Repeat] attribute
• #6701: Allow expectOutputString() and expectOutputRegex() to be combined and repeated
• #6710: Deprecation Filters
• #6722: Allow #[CoversNothing] on methods
• #6742: Retry failing tests up to N times using --retry CLI option #[Retry] attribute
• #6827: Customize which deprecation trigger types fail the test run
• #6830: Warn when failOnAllIssues="true" is combined with an explicitly disabled fine-grained failOn* setting
• #6832: Allow doubling properties that do not declare property hooks
• #6853: Optionally warn when PHP is not configured for development
• [phpunit/php-code-coverage #1140](sebastianbergmann/php-code-coverage#1140): Class-oriented HTML report
• [phpunit/php-code-coverage #1141](sebastianbergmann/php-code-coverage#1141): Improve visualization of branch coverage and path coverage in the HTML report

... (truncated)

Commits

• d19d90c Prepare release
• 86682b2 Honour --display-phpunit-deprecations and --display-phpunit-notices in compac...
• 3776534 Do not perform lock-file maintenance
• c27a65f Merge branch '12.5' into 13.3
• 3cc07a3 Update dependencies
• 7f02ff4 Update dependency phpstan/phpstan to ^2.2.14
• 578d829 Update dependency phpstan/phpstan to ^2.2.14
• 57b9425 Update actions/setup-java action to v6.0.1
• d2d546d Update actions/setup-java action to v6.0.1
• 8e79fcb Update dependencies
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: b88ccdb9-3155-4725-961e-53d53dc43a36

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}