build(deps-dev): bump phpunit/phpunit from 12.5.35 to 13.3.2 in /tools/phpunit

[dependabot]

Bumps phpunit/phpunit from 12.5.35 to 13.3.2.

Release notes

Sourced from phpunit/phpunit's releases.

PHPUnit 13.3.2

Fixed

• #6904: SourceMap is built in child process even though identifyIssueTrigger is disabled
• #6924: #[CoversFile] attribute is not considered for risky test check

---

Learn how to install or update PHPUnit 13.3 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

PHPUnit 13.3.1

Changed

• Invoking a static hook method such as setUpBeforeClass() no longer triggers a deprecation warning on PHP 8.6

---

Learn how to install or update PHPUnit 13.3 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

PHPUnit 13.3.0

Added

• #3794: Filesystem-based code coverage targeting
• #5758: Make export of objects customizable
• #6546: Both property hooks can now be configured on test doubles of virtual hooked properties, even when the doubled property only declares one of them
• #6586: Custom code coverage driver support
• #6591: Repeated test execution using --repeat CLI option and #[Repeat] attribute
• #6701: Allow expectOutputString() and expectOutputRegex() to be combined and repeated
• #6710: Deprecation Filters
• #6722: Allow #[CoversNothing] on methods
• #6742: Retry failing tests up to N times using --retry CLI option #[Retry] attribute
• #6827: Customize which deprecation trigger types fail the test run
• #6830: Warn when failOnAllIssues="true" is combined with an explicitly disabled fine-grained failOn* setting
• #6832: Allow doubling properties that do not declare property hooks
• #6853: Optionally warn when PHP is not configured for development
• [phpunit/php-code-coverage #1140](sebastianbergmann/php-code-coverage#1140): Class-oriented HTML report
• [phpunit/php-code-coverage #1141](sebastianbergmann/php-code-coverage#1141): Improve visualization of branch coverage and path coverage in the HTML report
• [phpunit/php-code-coverage #1153](sebastianbergmann/php-code-coverage#1153): Filter HTML code coverage report by test size
• --record-test-run-history and --do-not-record-test-run-history CLI options as well as the recordTestRunHistory attribute for the XML configuration file to control whether the status and duration of each test are recorded for use by --order-by defects and --order-by duration-*
• --without-class-view CLI option and classView attribute for the XML configuration file to disable the class-oriented view in the HTML code coverage report

... (truncated)

Changelog

Sourced from phpunit/phpunit's changelog.

[13.3.2] - 2026-08-27

Fixed

• #6904: SourceMap is built in child process even though identifyIssueTrigger is disabled
• #6924: #[CoversFile] attribute is not considered for risky test check

[13.3.1] - 2026-08-13

Changed

• Invoking a static hook method such as setUpBeforeClass() no longer triggers a deprecation warning on PHP 8.6

[13.3.0] - 2026-08-07

Added

• #3794: Filesystem-based code coverage targeting
• #5758: Make export of objects customizable
• #6546: Both property hooks can now be configured on test doubles of virtual hooked properties, even when the doubled property only declares one of them
• #6586: Custom code coverage driver support
• #6591: Repeated test execution using --repeat CLI option and #[Repeat] attribute
• #6701: Allow expectOutputString() and expectOutputRegex() to be combined and repeated
• #6710: Deprecation Filters
• #6722: Allow #[CoversNothing] on methods
• #6742: Retry failing tests up to N times using --retry CLI option #[Retry] attribute
• #6827: Customize which deprecation trigger types fail the test run
• #6830: Warn when failOnAllIssues="true" is combined with an explicitly disabled fine-grained failOn* setting
• #6832: Allow doubling properties that do not declare property hooks
• #6853: Optionally warn when PHP is not configured for development
• [phpunit/php-code-coverage #1140](sebastianbergmann/php-code-coverage#1140): Class-oriented HTML report
• [phpunit/php-code-coverage #1141](sebastianbergmann/php-code-coverage#1141): Improve visualization of branch coverage and path coverage in the HTML report
• [phpunit/php-code-coverage #1153](sebastianbergmann/php-code-coverage#1153): Filter HTML code coverage report by test size
• --record-test-run-history and --do-not-record-test-run-history CLI options as well as the recordTestRunHistory attribute for the XML configuration file to control whether the status and duration of each test are recorded for use by --order-by defects and --order-by duration-*
• --without-class-view CLI option and classView attribute for the XML configuration file to disable the class-oriented view in the HTML code coverage report
• --without-file-view CLI option and fileView attribute for the XML configuration file to disable the file-oriented view in the HTML code coverage report
• {PWD} is now substituted with the directory of the PHPT test file in --ENV-- and --INI-- sections of PHPT test files
• {TMP} (system directory for temporary files) and {ENV:name} (value of environment variable name) are now substituted in --INI-- sections of PHPT test files
• A PHPT test whose --INI-- section references an environment variable that is not set is now skipped
• A --SKIPIF-- section of a PHPT test file that prints xfail <reason> now marks the test as expected to fail, as if the PHPT test file had an --XFAIL-- section with that reason

Changed

• [phpunit/php-code-coverage #1231](sebastianbergmann/php-code-coverage#1231): Identify dead code using static analysis
• [phpunit/php-code-coverage #1259](sebastianbergmann/php-code-coverage#1259): Degrade gracefully when a source file cannot be parsed
• The test runner no longer crashes when an attribute cannot be instantiated
• Improved TestDox HTML report
• The feature formerly named "test result cache" is now named "test run history"; when a cache directory is configured, the file it is stored in is now named test-run-history instead of test-results
• The test runner warns now when ordering by defects or duration is configured but recording of the test run history is disabled
• TestCase no longer captures error_log() output for tests that do not use expectErrorLog(), avoiding the cost of setting up error log redirection for every test

... (truncated)

Commits

• 22104a5 Prepare release
• 7da33db Merge branch '12.5' into 13.3
• b142494 Update dependency phpunit/php-file-iterator to ^7.0.2
• bdfc83e Update actions/setup-java action to v6
• 2afb6f7 Closes #6924
• 6356792 Do not use deprecated CLI option in end-to-end test
• 231c116 Merge branch '12.5' into 13.3
• f06aea4 Merge branch '12.5' into 13.3
• 29d42e6 Specify generic types for filter iterators
• ed55b3a Merge branch '10.5' into 11.5
• Additional commits viewable in compare view

[dependabot]

Superseded by #2629.