Bump phpunit/phpunit from 13.3.3 to 13.3.5

[dependabot]

Bumps phpunit/phpunit from 13.3.3 to 13.3.5.

Release notes

Sourced from phpunit/phpunit's releases.

PHPUnit 13.3.5

Changed

• Control characters and ANSI escape sequences in user-supplied strings such as test names, data set names, and messages are now made visible as \u{NNNN} escape sequences instead of being passed through to the terminal
• Control characters in user-supplied strings are now also made visible in the compact output
• Line feeds in the name of a test no longer break the header line of a record in the compact output

---

Learn how to install or update PHPUnit 13.3 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

PHPUnit 13.3.4

Fixed

• #6965: Temporary file used by SourceMapper may be deleted prematurely
• The compact output displays details on PHPUnit deprecations and PHPUnit notices even when --display-phpunit-deprecations and --display-phpunit-notices are not used
• The summary line of the compact output does not report the number of PHPUnit deprecations, PHPUnit notices, and PHPUnit warnings

---

Learn how to install or update PHPUnit 13.3 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

Changelog

Sourced from phpunit/phpunit's changelog.

[13.3.5] - 2026-09-25

Changed

• Control characters and ANSI escape sequences in user-supplied strings such as test names, data set names, and messages are now made visible as \u{NNNN} escape sequences instead of being passed through to the terminal
• Control characters in user-supplied strings are now also made visible in the compact output
• Line feeds in the name of a test no longer break the header line of a record in the compact output

[13.3.4] - 2026-09-15

Fixed

• #6965: Temporary file used by SourceMapper may be deleted prematurely
• The compact output displays details on PHPUnit deprecations and PHPUnit notices even when --display-phpunit-deprecations and --display-phpunit-notices are not used
• The summary line of the compact output does not report the number of PHPUnit deprecations, PHPUnit notices, and PHPUnit warnings

Commits

• 1b482b9 Prepare release
• 6e195fe Update dependencies
• 9f5d4a1 Update expectations
• 53f8726 Update dependencies
• 7fff738 Merge branch '12.5' into 13.3
• 8d47690 Update dependency phpstan/phpstan to ^2.2.15
• 5ebece6 Merge branch '11.5' into 12.5
• 23e85e6 Merge branch '10.5' into 11.5
• b62a8e0 Merge branch '9.6' into 10.5
• 8df4bd1 Merge branch '8.5' into 9.6
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)