build(deps-dev): bump phpunit/phpunit from 9.6.31 to 9.6.36

[dependabot]

Bumps phpunit/phpunit from 9.6.31 to 9.6.36.

Release notes

Sourced from phpunit/phpunit's releases.

PHPUnit 9.6.36

Changed

• Use spl_object_id() instead of spl_object_hash() (which will be deprecated in PHP 8.6)
• Use the error suppression operator (@) when calling DeepCopy\DeepCopy::copy() because it uses spl_object_hash() (which will be deprecated in PHP 8.6)

---

Learn how to install or update PHPUnit 9.6 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

PHPUnit 9.6.35

Changed

• #6797: Adapt code generated for test double of interface with constructor for PHP 8.6

---

Learn how to install or update PHPUnit 9.6 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

PHPUnit 9.6.34

Fixed

• Regression introduced in PHPUnit 9.6.33

---

Learn how to install or update PHPUnit 9.6 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

PHPUnit 9.6.33

Changed

• To prevent Poisoned Pipeline Execution (PPE) attacks using prepared .coverage files in pull requests, a PHPT test will no longer be run if the temporary file for writing code coverage information already exists before the test runs

---

... (truncated)

Changelog

Sourced from phpunit/phpunit's changelog.

[9.6.36] - 2026-08-11

Changed

• Use spl_object_id() instead of spl_object_hash() (which will be deprecated in PHP 8.6)
• Use the error suppression operator (@) when calling DeepCopy\DeepCopy::copy() because it uses spl_object_hash() (which will be deprecated in PHP 8.6)

[9.6.35] - 2026-07-06

Changed

• #6797: Adapt code generated for test double of interface with constructor for PHP 8.6

[9.6.34] - 2026-01-27

Fixed

• Regression introduced in PHPUnit 9.6.33

[9.6.33] - 2026-01-27

Changed

• To prevent Poisoned Pipeline Execution (PPE) attacks using prepared .coverage files in pull requests, a PHPT test will no longer be run if the temporary file for writing code coverage information already exists before the test runs

[9.6.32] - 2026-01-24

Changed

• PHPUnit\Framework\MockObject exceptions are now subtypes of PHPUnit\Exception

Commits

• abab27e Prepare release
• 0f2534e Merge branch '8.5' into 9.6
• 416a546 Prepare release
• 5a107b8 Use spl_object_id() instead of spl_object_hash() which is deprecated in PHP 8.6
• 752b775 Update dependencies
• 6d4bde7 Update github-actions
• 1d44ec6 Update dependency seld/phar-utils to ^1.2.2
• bb949f1 Update github-actions
• 4efef5e Update dependency seld/phar-utils to ^1.2.2
• b760399 Sync PHP settings
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)