chore(deps-dev): bump the composer-patch group across 1 directory with 3 updates

[dependabot]

Bumps the composer-patch group with 3 updates in the / directory: phpunit/phpunit, phpstan/phpstan and squizlabs/php_codesniffer.

Updates phpunit/phpunit from 11.5.32 to 11.5.55

Release notes

Sourced from phpunit/phpunit's releases.

PHPUnit 11.5.55

Fixed

• #6521: Performance regression in PHPUnit 11.5.54, PHPUnit 12.5.13, and PHPUnit 13.0.4

---

Learn how to install or update PHPUnit 11.5 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

PHPUnit 11.5.54

Fixed

• #6489: Classification of self/direct/indirect deprecation triggers is not aligned with Symfony's bridge for PHPUnit

---

Learn how to install or update PHPUnit 11.5 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

PHPUnit 11.5.53

Fixed

• #6503: Temporary file used by SourceMapper may be deleted prematurely when multiple PHPUnit processes run in parallel

---

Learn how to install or update PHPUnit 11.5 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

PHPUnit 11.5.52

Fixed

• #6495: Source map for issue trigger identification is regenerated in process isolation child processes

---

Learn how to install or update PHPUnit 11.5 in the documentation.

... (truncated)

Changelog

Sourced from phpunit/phpunit's changelog.

[11.5.55] - 2026-02-18

Fixed

• #6521: Performance regression in PHPUnit 11.5.54, PHPUnit 12.5.13, and PHPUnit 13.0.4

[11.5.54] - 2026-02-18

Fixed

• #6489: Classification of self/direct/indirect deprecation triggers is not aligned with Symfony's bridge for PHPUnit

[11.5.53] - 2026-02-10

Fixed

• #6503: Temporary file used by SourceMapper may be deleted prematurely when multiple PHPUnit processes run in parallel

[11.5.52] - 2026-02-08

Fixed

• #6495: Source map for issue trigger identification is regenerated in process isolation child processes

[11.5.51] - 2026-02-05

Added

• #6488: Allow disabling issue trigger identification for improved performance

Fixed

• #6486: Incorrect file name reported for errors for test methods declared in traits
• #6490: Incorrect test count when tests are skipped in before-class method

[11.5.50] - 2026-01-27

Changed

• To prevent Poisoned Pipeline Execution (PPE) attacks using prepared .coverage files in pull requests, a PHPT test will no longer be run if the temporary file for writing code coverage information already exists before the test runs

[11.5.49] - 2026-01-24

Fixed

• #6362: Manually instantiated test doubles are broken since PHPUnit 11.2
• #6470: Infinite recursion in Count::getCountOf() for unusal implementations of Iterator or IteratorAggregate

[11.5.48] - 2026-01-16

... (truncated)

Commits

• adc7262 Prepare release
• 0f31bcf Closes #6521
• eb7d132 Prepare release
• 0325337 Update ChangeLog
• 2413692 Classify issue trigger as "unknown" only when it is not "self", "direct", or ...
• 8811c22 Test all possible combinations (even if not all of them make sense)
• 79f11ae Remove IssueTrigger::unknown()
• 6589f44 Fall back to null instead of Code::ThirdParty when we cannot classify a file ...
• a64de8a Narrow type
• a230042 Resurrect test that got lost while reorganizing tests
• Additional commits viewable in compare view

Updates phpstan/phpstan from 1.12.28 to 1.12.33

Release notes

Sourced from phpstan/phpstan's releases.

1.12.33

Suggest to coding agents that PHPStan 2.x is available to upgrade to from 1.12.x (phpstan/phpstan-src@8c66d82)

1.12.32

Alternative solution to disable cloning with --prefer-source that does not need another repository

1.12.31

Custom Composer source for cloning phpstan/phpstan. Learn more: https://github.com/phpstan/phpstan-phar-composer-source

This hotfix release fixes PHPStan version number in CLI output.

1.12.30

Custom Composer source for cloning phpstan/phpstan. Learn more: https://github.com/phpstan/phpstan-phar-composer-source

1.12.29

Fix PHPStan Pro flickering (phpstan/phpstan-src@90b1048), #13381

Commits

• 37982d6 PHPStan 1.12.33
• 8c66d82 Updated PHPStan to commit 8c66d8255b29e146f6f150abae579f1f6f9170a5
• 2770dcd PHPStan 1.12.32
• b22655c Updated PHPStan to commit b22655c3f410cd3a6a0d69650018c9ad7147dc8c
• 8623477 Alternative solution to disable cloning with --prefer-source that does not ...
• a7630bb PHPStan 1.12.31
• 7ebf37e PHPStan 1.12.30
• e3713dc Custom Composer source for cloning phpstan/phpstan
• 0835c62 PHPStan 1.12.29
• 90b1048 Updated PHPStan to commit 90b10482abe663dcd85fd08ac082e231622ea68a
• See full diff in compare view

Updates squizlabs/php_codesniffer from 3.13.2 to 3.13.5

Release notes

Sourced from squizlabs/php_codesniffer's releases.

3.13.5 - 2025-11-04

Added

• Runtime support for PHP 8.5. All known PHP 8.5 deprecation notices have been fixed.
  • Syntax support for new PHP 8.5 features will follow in a future release.
  • If you find any PHP 8.5 deprecation notices which were missed, please report them.

Changed

• Various housekeeping, including improvements to the tests and documentation.
  • Thanks to Rodrigo Primo and Juliette Reinders Folmer for their contributions.

Fixed

• Fixed bug #1216: Tokenizer/PHP: added more defensive coding to prevent PHP 8.5 "Using null as an array offset" deprecation notices.
  • Thanks to Andrew Lyons for the patch.
• Fixed bug #1279: Tokenizer/PHP: on PHP < 8.0, an unclosed attribute (parse error) could end up removing some tokens from the token stream.
  • This could lead to false positives and false negative from sniffs, but could also lead to incorrect fixes being made mangling the file under scan.
  • Thanks to Juliette Reinders Folmer for the patch.

Other

• Please be aware that the master branch has been renamed to 3.x and the default branch has changed to the 4.x branch.
  • If you contribute to PHP_CodeSniffer, you will need to update your local git clone.
  • If you develop against PHP_CodeSniffer and run your tests against dev branches of PHPCS, you will need to update your workflows.

---

New Contributors

The PHP_CodeSniffer project is happy to welcome the following new contributors: @​andrewnicols

Statistics

Closed: 2 issues Merged: 36 pull requests

Follow @​phpcs on Mastodon or @​PHP_CodeSniffer on X to stay informed.

Please consider funding the PHP_CodeSniffer project. If you already do so: thank you!

3.13.4 - 2025-09-05

Fixed

• Fixed bug #1213: ability to run tests for external standards using the PHPCS native test framework was broken.
  • Thanks to Juliette Reinders Folmer for the patch.
• Fixed bug #1215: PHP 8.5 "Using null as an array offset" deprecation notices.
  • Thanks to Juliette Reinders Folmer for the patch.

Statistics

Closed: 0 issues Merged: 3 pull requests

... (truncated)

Changelog

Sourced from squizlabs/php_codesniffer's changelog.

[3.13.5] - 2025-11-04

Added

• Runtime support for PHP 8.5. All known PHP 8.5 deprecation notices have been fixed.
  • Syntax support for new PHP 8.5 features will follow in a future release.
  • If you find any PHP 8.5 deprecation notices which were missed, please report them.

Changed

• Various housekeeping, including improvements to the tests and documentation.
  • Thanks to [Rodrigo Primo][@​rodrigoprimo] and [Juliette Reinders Folmer][@​jrfnl] for their contributions.

Fixed

• Fixed bug #1216: Tokenizer/PHP: added more defensive coding to prevent PHP 8.5 "Using null as an array offset" deprecation notices.
  • Thanks to [Andrew Lyons][@​andrewnicols] for the patch.
• Fixed bug #1279: Tokenizer/PHP: on PHP < 8.0, an unclosed attribute (parse error) could end up removing some tokens from the token stream.
  • This could lead to false positives and false negative from sniffs, but could also lead to incorrect fixes being made mangling the file under scan.
  • Thanks to Juliette Reinders Folmer for the patch.

Other

• Please be aware that the master branch has been renamed to 3.x and the default branch has changed to the 4.x branch.
  • If you contribute to PHP_CodeSniffer, you will need to update your local git clone.
  • If you develop against PHP_CodeSniffer and run your tests against dev branches of PHPCS, you will need to update your workflows.

#1216: PHPCSStandards/PHP_CodeSniffer#1216 #1279: PHPCSStandards/PHP_CodeSniffer#1279

[3.13.4] - 2025-09-05

Fixed

• Fixed bug #1213: ability to run tests for external standards using the PHPCS native test framework was broken.
  • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch.
• Fixed bug #1215: PHP 8.5 "Using null as an array offset" deprecation notices.
  • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch.

#1213: PHPCSStandards/PHP_CodeSniffer#1213 #1215: PHPCSStandards/PHP_CodeSniffer#1215

[3.13.3] - 2025-09-04

Added

• Tokenizer support for PHP 8.4 dereferencing of new expressions without wrapping parentheses. #1160
  • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch.
• Tokenizer support for PHP 8.4 abstract properties. #1183
  • The File::getMemberProperties() method now also supports abstract properties through a new is_abstract array index in the return value. #1184
  • Additionally, the following sniffs have been updated to support abstract properties:
    • Generic.PHP.LowerCaseConstant #1185
    • Generic.PHP.UpperCaseConstant #1185
    • PSR2.Classes.PropertyDeclaration #1188

... (truncated)

Commits

• 0ca8684 Merge pull request #1305 from PHPCSStandards/feature/docs-minor-touch-up-befo...
• 3e7e576 Docs: various small fixes
• c3a2490 CHANGELOG: fix up missing credit
• 848341d Merge pull request #1304 from PHPCSStandards/feature/changelog-3.13.5
• 31c62de Changelog for the 3.13.5 release
• e163dbf PHP 8.5 | Tokenizer/PHP: properly fix "Using null as an array offset" depreca...
• af1b003 Merge pull request #1301 from PHPCSStandards/feature/e2e-tests-use-new-bashun...
• cf28362 E2E tests: use new bashunit assertion
• a82bffd Merge pull request #1298 from PHPCSStandards/dependabot/github_actions/3.x/ac...
• 0ae1271 Merge pull request #1299 from PHPCSStandards/dependabot/github_actions/3.x/ac...
• Additional commits viewable in compare view