Skip to content

🚨 [Conductor] Security update phpunit/phpunit to 12.5.23#70

Closed
private-packagist[bot] wants to merge 1 commit intomainfrom
conductor-phpunit-phpunit-70097
Closed

🚨 [Conductor] Security update phpunit/phpunit to 12.5.23#70
private-packagist[bot] wants to merge 1 commit intomainfrom
conductor-phpunit-phpunit-70097

Conversation

@private-packagist
Copy link
Copy Markdown
Contributor

@private-packagist private-packagist Bot commented Apr 18, 2026

This PR was automatically generated by Conductor.

The PR contains the changes generated by running the following command:

composer update phpunit/phpunit:12.5.23 --with-all-dependencies --minimal-changes

Changelog

phpunit/phpunit (Source: GitHub Releases))

12.5.23

Changed

  • Pass LIBXML_NONET when parsing/validating XML configuration files to make explicit that no network I/O is performed
  • Verify the result file written by an isolated child process with a random nonce before deserializing it

Learn how to install or update PHPUnit 12.5 in the documentation.

Keep up to date with PHPUnit:

12.5.22

Fixed

  • #​6590: Silent failure when configuration file is invalid
  • #​6592: INI metacharacters ; and " are not preserved when forwarding settings to child processes

Learn how to install or update PHPUnit 12.5 in the documentation.

Keep up to date with PHPUnit:

12.5.21

Fixed

  • #​5860: PHP CLI -d settings are not forwarded to child processes for process isolation
  • #​6451: Incomplete version in RequiresPhp (e.g. <=8.5) is compared against full PHP version, causing unexpected skips

Learn how to install or update PHPUnit 12.5 in the documentation.

Keep up to date with PHPUnit:

12.5.20

Fixed

  • #​5993: DefaultJobRunner deadlocks on child processes that write large amounts of stderr output
  • #​6465: SAPI-populated $_SERVER entries leak from parent into child process
  • #​6587: failOnEmptyTestSuite="false" in phpunit.xml is ignored when --group/--filter/--testsuite matches no tests
  • #​6588: Order of issue baseline entries is not canonicalized

Learn how to install or update PHPUnit 12.5 in the documentation.

Keep up to date with PHPUnit:

12.5.19

Fixed

  • Regression in XML configuration migration introduced in PHPUnit 12.5.8

Learn how to install or update PHPUnit 12.5 in the documentation.

Keep up to date with PHPUnit:

12.5.18

Fixed

  • #​4571: No warning when --random-order-seed is used when test execution order is not random
  • #​4975: --filter does not work when filter string starts with #
  • #​5354: JUnit XML logger does not handle TestSuiteSkipped event
  • #​6276: Exit with non-zero exit code when explicit test selection (--filter, --group, --testsuite) yields no tests
  • #​6583: Failing output expectation skips tearDown() and handler restoration, causing subsequent tests to be marked as risky

Learn how to install or update PHPUnit 12.5 in the documentation.

Keep up to date with PHPUnit:

12.5.17

Changed

  • #​4793: Exit with non-zero exit code when exit was called from some test

Fixed

  • #​5881: colors="true" in XML configuration file does not unconditionally enable colored output
  • #​6019: --migrate-configuration does not update schema location when XML content already validates against current schema
  • #​6372: Assertion failure inside willReturnCallback() is silently swallowed when code under test catches exceptions
  • #​6464: Process isolation template unconditionally calls set_include_path()
  • #​6571: Static analysis errors for TestDoubleBuilder method chaining

Learn how to install or update PHPUnit 12.5 in the documentation.

Keep up to date with PHPUnit:

Task options

If you close the PR, the task will be skipped and Conductor will schedule the next task. Clicking the "Skip" button in the UI has the same effect. Conductor won't attempt to update the dependency to this exact version again but it will schedule updates to newer versions.


Powered by Private Packagist

@private-packagist
Copy link
Copy Markdown
Contributor Author

private-packagist Bot commented Apr 18, 2026

composer.lock

Dev Package changes

Package Operation From To About
phpunit/php-code-coverage upgrade 12.5.3 12.5.6 diff
phpunit/phpunit upgrade 12.5.16 12.5.23 diff
sebastian/comparator upgrade 7.1.4 7.1.6 diff
sebastian/environment upgrade 8.0.4 8.1.0 diff

Settings · Docs · Powered by Private Packagist

@github-actions github-actions Bot force-pushed the conductor-phpunit-phpunit-70097 branch from 6742e4a to 1b63463 Compare April 18, 2026 06:15
Conductor executed the following commands:
composer update phpunit/phpunit:12.5.23 --with-all-dependencies --minimal-changes
@private-packagist
Copy link
Copy Markdown
Contributor Author

The composer.lock diff comment has been updated to reflect new changes in this PR.

@private-packagist private-packagist Bot force-pushed the conductor-phpunit-phpunit-70097 branch from 1b63463 to 4263e02 Compare April 18, 2026 06:15
@private-packagist private-packagist Bot changed the title 🚨 [Conductor] Security update phpunit/phpunit to 12.5.22 🚨 [Conductor] Security update phpunit/phpunit to 12.5.23 Apr 18, 2026
@private-packagist
Copy link
Copy Markdown
Contributor Author

The pull request for this task was closed by Conductor because a newer package version is available.

@private-packagist private-packagist Bot deleted the conductor-phpunit-phpunit-70097 branch April 18, 2026 09:10
@private-packagist
Copy link
Copy Markdown
Contributor Author

The composer.lock diff comment has been updated to reflect new changes in this PR.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants