[dependabot]

Bumps the composer-dependencies group with 3 updates in the / directory: symfony/clock, symfony/polyfill-mbstring and phpunit/phpunit.

Updates symfony/clock from 7.4.8 to 8.1.9

Release notes

Sourced from symfony/clock's releases.

v8.1.9

Changelog (symfony/clock@v8.1.0...v8.1.9)

• bug #66833 Fix DatePoint being one hour off when its reference is in the DST fall-back hour (@​nicolas-grekas)
• bug #66831 Fix DatePoint keeping the current time of day for dates with a relative part (@​nicolas-grekas)
• bug #66708 Fix new DatePoint() being one hour off during the DST fall-back hour (@​nicolas-grekas)
• bug #66707 Fix MockClock::sleep() with dates before 1970 (@​nicolas-grekas)

v8.1.0

Changelog (symfony/clock@v8.1.0-BETA1...v8.1.0)

• no significant changes

v8.1.0-BETA1

Changelog (symfony/clock@v8.0.0...v8.1.0-BETA1)

• no significant changes

v8.0.8

Changelog (symfony/clock@v8.0.7...v8.0.8)

• no significant changes

v8.0.0

Changelog (symfony/clock@v8.0.0-RC3...v8.0.0)

• no significant changes

v8.0.0-RC1

Changelog (symfony/clock@v8.0.0-BETA2...v8.0.0-RC1)

• bug symfony/symfony#62346 [Clock] Align MockClock::sleep() behavior with NativeClock for negative values (@​yoeunes)

v8.0.0-BETA1

Changelog (symfony/clock@v7.3.4...v8.0.0-BETA1)

• feature symfony/symfony#60639 Bump Symfony 8 to PHP >= 8.4 (@​nicolas-grekas)

v7.4.21

Changelog (symfony/clock@v7.4.9...v7.4.21)

• bug #66833 Fix DatePoint being one hour off when its reference is in the DST fall-back hour (@​nicolas-grekas)
• bug #66831 Fix DatePoint keeping the current time of day for dates with a relative part (@​nicolas-grekas)
• bug #66708 Fix new DatePoint() being one hour off during the DST fall-back hour (@​nicolas-grekas)
• bug #66707 Fix MockClock::sleep() with dates before 1970 (@​nicolas-grekas)

Commits

• 945ea3b Merge branch '7.4' into 8.1
• 07437f6 Merge branch '6.4' into 7.4
• dd4481c [Clock] Fix DatePoint for dates outside the 32-bit timestamp range
• 1050bdc Merge branch '7.4' into 8.1
• 3b71495 Merge branch '6.4' into 7.4
• 2dc92a1 [Clock] Fix DatePoint being one hour off when its reference is in the DST f...
• c91eb12 [Clock] Fix DatePoint keeping the current time of day for dates with a rela...
• 8e72d5d Merge branch '7.4' into 8.1
• ca84bec Merge branch '6.4' into 7.4
• 7ba8c6d bug #66708 [Clock] Fix new DatePoint() being one hour off during the DST fa...
• Additional commits viewable in compare view

Updates symfony/polyfill-mbstring from 1.43.0 to 1.43.3

Release notes

Sourced from symfony/polyfill-mbstring's releases.

v1.43.3

Changelog (symfony/polyfill-mbstring@v1.43.0...v1.43.3)

• bug #722 Update the East Asian Width ranges of mb_strwidth() (@​wleeaf)
• bug #721 Use big-endian UCS-2 like ext/mbstring (@​wleeaf)
• bug #720 Use titlecase mappings for MB_CASE_TITLE (@​wleeaf)

Commits

• 122889e bug #722 [Mbstring] Update the East Asian Width ranges of mb_strwidth() (wleeaf)
• 02d3c13 bug #721 [Mbstring] Use big-endian UCS-2 like ext/mbstring (wleeaf)
• f9f3b16 [Mbstring] Use big-endian UCS-2 like ext/mbstring
• 48edf42 [Mbstring] Update the East Asian Width ranges of mb_strwidth()
• 8954524 [Mbstring] Use titlecase mappings for MB_CASE_TITLE
• See full diff in compare view

Updates phpunit/phpunit from 11.5.55 to 12.5.43

Release notes

Sourced from phpunit/phpunit's releases.

PHPUnit 12.5.43

Changed

• Issues whose message refers to an anonymous class could not be ignored using a baseline on PHP 8.6 (as of PHP 8.6, such messages contain the full name of the anonymous class: a NUL byte followed by the file, line, and a counter)
• Make PHAR build reproducible across filesystems (files are now added to the PHAR sorted by their path instead of in the order in which the filesystem lists them)

Fixed

• When method() is called for a method of a test double that cannot be configured, for instance because it does not exist, every subsequent invocation of a method of that test double fails with Method name is not configured
• When a hook method of a test, for instance setUp(), marks the test as incomplete, the hook method is reported as failed
• When an "after test" method, for instance tearDown(), marks a successful test as incomplete or skips it, the test is reported as failed
• When a before-first-test method, for instance setUpBeforeClass(), calls markTestIncomplete(), each test of the test class is reported as failed instead of the test class being skipped as it is when markTestSkipped() is called
• When an after-last-test method, for instance tearDownAfterClass(), calls markTestIncomplete() or markTestSkipped() after the tests of the test class have been run, this is reported as a failure, also for each test of the test class that is run in process isolation
• A failed PHP assertion, made using assert(), in a hook method is reported as an error of that method instead of as a failure, and it is counted as an error instead of as a failure when that method is a before-first-test method or an after-last-test method
• When an assertion fails in an "after test" method, for instance tearDown(), of a test that already failed, errored, or was marked as incomplete, a failure is reported in addition to the outcome of the test, so the test is counted more than once and onNotSuccessfulTest() is called with the failure from the "after test" method instead of the test's own
• When a test fails because of an exception of a registered failure type, an error or a failure in an "after test" method, for instance tearDown(), is reported in addition to the test's failure, so the test is counted more than once
• A test that fails because of an exception of a registered failure type is considered risky when it does not perform assertions or, when requireCoverageMetadata="true" is configured, when it does not define a code coverage target, unlike a test that fails because an assertion failed
• The TestDox output does not show the failure of a before-first-test method or an after-last-test method, for instance an assertion failure in setUpBeforeClass()
• Control characters and ANSI escape sequences in user-supplied strings are not made visible in the output of --debug and in the logfiles written by --log-events-text and --log-events-verbose-text
• Groups configured for a test directory or test file using the groups attribute of <directory> or <file> in the XML configuration file are not assigned to PHPT tests, so --group and --exclude-group do not select them and --list-groups and --list-tests-xml report them as being in the default group or not at all

Removed

• The library PHAR (phpunit-library-X.Y.Z.phar) is no longer built, it could not be loaded since PHPUnit 9.5.8

---

Learn how to install or update PHPUnit 12.5 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

PHPUnit 12.5.42

Fixed

• The static analysis cache directory that is automatically created in the operating system's path used for temporary files when no cache directory is configured is not used when the POSIX extension is not loaded

---

Learn how to install or update PHPUnit 12.5 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

PHPUnit 12.5.41

Fixed

... (truncated)

Changelog

Sourced from phpunit/phpunit's changelog.

[12.5.43] - 2026-11-02

Changed

• Issues whose message refers to an anonymous class could not be ignored using a baseline on PHP 8.6 (as of PHP 8.6, such messages contain the full name of the anonymous class: a NUL byte followed by the file, line, and a counter)
• Make PHAR build reproducible across filesystems (files are now added to the PHAR sorted by their path instead of in the order in which the filesystem lists them)

Fixed

• When method() is called for a method of a test double that cannot be configured, for instance because it does not exist, every subsequent invocation of a method of that test double fails with Method name is not configured
• When a hook method of a test, for instance setUp(), marks the test as incomplete, the hook method is reported as failed
• When an "after test" method, for instance tearDown(), marks a successful test as incomplete or skips it, the test is reported as failed
• When a before-first-test method, for instance setUpBeforeClass(), calls markTestIncomplete(), each test of the test class is reported as failed instead of the test class being skipped as it is when markTestSkipped() is called
• When an after-last-test method, for instance tearDownAfterClass(), calls markTestIncomplete() or markTestSkipped() after the tests of the test class have been run, this is reported as a failure, also for each test of the test class that is run in process isolation
• A failed PHP assertion, made using assert(), in a hook method is reported as an error of that method instead of as a failure, and it is counted as an error instead of as a failure when that method is a before-first-test method or an after-last-test method
• When an assertion fails in an "after test" method, for instance tearDown(), of a test that already failed, errored, or was marked as incomplete, a failure is reported in addition to the outcome of the test, so the test is counted more than once and onNotSuccessfulTest() is called with the failure from the "after test" method instead of the test's own
• When a test fails because of an exception of a registered failure type, an error or a failure in an "after test" method, for instance tearDown(), is reported in addition to the test's failure, so the test is counted more than once
• A test that fails because of an exception of a registered failure type is considered risky when it does not perform assertions or, when requireCoverageMetadata="true" is configured, when it does not define a code coverage target, unlike a test that fails because an assertion failed
• The TestDox output does not show the failure of a before-first-test method or an after-last-test method, for instance an assertion failure in setUpBeforeClass()
• Control characters and ANSI escape sequences in user-supplied strings are not made visible in the output of --debug and in the logfiles written by --log-events-text and --log-events-verbose-text
• Groups configured for a test directory or test file using the groups attribute of <directory> or <file> in the XML configuration file are not assigned to PHPT tests, so --group and --exclude-group do not select them and --list-groups and --list-tests-xml report them as being in the default group or not at all

Removed

• The library PHAR (phpunit-library-X.Y.Z.phar) is no longer built, it could not be loaded since PHPUnit 9.5.8

[12.5.42] - 2026-10-27

Fixed

• The static analysis cache directory that is automatically created in the operating system's path used for temporary files when no cache directory is configured is not used when the POSIX extension is not loaded

[12.5.41] - 2026-10-27

Fixed

• The TeamCity logger writes testSuiteFinished twice for a test class when one of its before-first-test methods errors or fails
• The TestDox output shows a less important outcome of a test that has more than one outcome, for instance the failure in tearDown() of a test that errored
• When no static analysis cache directory is configured, the cache directory that is automatically created in the operating system's path used for temporary files is also used when it was created by another user or can be written to by other users

[12.5.40] - 2026-10-16

Fixed

• The dependencies of a test that are listed after a dependency on a test that does not return a value, or after a dependency on a larger test, were not checked, so the test was run instead of being skipped when one of these dependencies had not passed
• Tests could not be run in process isolation when the namespace of the test class begins with a name that the code of the child process imports, for instance CodeCoverage or Facade
• A test that is run in process isolation aborts the test run when its data set or a value returned by a test it depends on cannot be serialized, for instance because it is a closure
• When a before-first-test method or an after-last-test method errors or fails, the remaining methods of the same kind are still called, and each of them that does not error or fail itself is reported with the exception of the earlier method
• When a hook method of a test, for instance a #[Before] method, skips the test, the remaining hook methods of the same kind are still called, so the test is reported as errored instead of skipped when one of them errors
• An error or failure in a before-first-test method or an after-last-test method that is called again in the child process of a test that is run in process isolation is reported twice, once for the test class and once for the test

... (truncated)

Commits

• 1d5a4a3 Prepare release
• 0e18ec2 Update cbrgm/mastodon-github-action action to v2.2.6
• 092e177 Make control characters in user-supplied strings visible in the output of --d...
• d596570 Merge branch '11.5' into 12.5
• 89a07f0 Merge branch '10.5' into 11.5
• 980dbeb Merge branch '9.6' into 10.5
• 8d2bf9e Merge branch '8.5' into 9.6
• 3e1dbd3 Copy the LICENSE files of sebastian/object-enumerator and sebastian/object-re...
• 5bbaab1 Recognize stack frames of code in the PHAR by the path that PHP reports for t...
• 0a6de0c Merge branch '11.5' into 12.5
• Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
phpunit/phpunit	[>= 13.a, < 14]

[ioannisj]

@dependabot ignore symfony/clock major version

[ioannisj]

@dependabot ignore phpunit/phpunit major version

[dependabot]

OK, I won't notify you about version 13.x.x of phpunit/phpunit again, unless you unignore it.

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml