Bump PHPUnit and PHPStan

composer.json

@@ -16,7 +16,7 @@
         "psr/http-server-middleware": "^1.0"
     },
     "require-dev": {
-        "phpunit/phpunit": "^9.6.21",
+        "phpunit/phpunit": "^10.5|^11.5",
         "laminas/laminas-diactoros": "^3.5",
         "phpstan/phpstan": "^1.12",
         "phpstan/phpstan-phpunit": "^1.3.15",

phpunit.xml.dist

@@ -1,18 +1,18 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <phpunit xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
-         xsi:noNamespaceSchemaLocation="https://schema.phpunit.de/9.3/phpunit.xsd"
-         colors="true"
+         xsi:noNamespaceSchemaLocation="vendor/phpunit/phpunit/phpunit.xsd"
+         bootstrap="vendor/autoload.php"
+         failOnRisky="true"
+         failOnWarning="true"
          stopOnError="true"
          stopOnFailure="true"
-         stopOnIncomplete="false"
-         stopOnSkipped="false"
-         bootstrap="tests/Bootstrap.php"
 >
-  <coverage includeUncoveredFiles="true">
+  <source restrictNotices="true" restrictWarnings="true">
     <include>
-      <directory suffix=".php">src</directory>
+      <directory>src</directory>
     </include>
-  </coverage>
+  </source>
+
   <testsuites>
     <testsuite name="Tests">
       <directory>./tests/</directory>

src/AuthorizationValidators/BearerTokenValidator.php

@@ -74,6 +74,7 @@ private function initJwtConfiguration(): void
             throw new RuntimeException('Public key is empty');
         }
 
+        // TODO: next major release: replace deprecated method and remove phpstan ignored error
         $this->jwtConfiguration->setValidationConstraints(
             new LooseValidAt($clock, $this->jwtValidAtDateLeeway),
             new SignedWith(

tests/Exception/OAuthServerExceptionTest.php

@@ -4,12 +4,14 @@
 
 namespace LeagueTests\Exception;
 
+use DateInterval;
 use Exception;
 use Laminas\Diactoros\Response;
 use Laminas\Diactoros\ServerRequest;
 use League\OAuth2\Server\Exception\OAuthServerException;
 use League\OAuth2\Server\Grant\AbstractGrant;
 use League\OAuth2\Server\Repositories\ClientRepositoryInterface;
+use League\OAuth2\Server\ResponseTypes\ResponseTypeInterface;
 use PHPUnit\Framework\TestCase;
 use Psr\Http\Message\ServerRequestInterface;
 use ReflectionClass;
@@ -93,7 +95,17 @@ private function issueInvalidClientException(ServerRequestInterface $serverReque
         $clientRepositoryMock = $this->getMockBuilder(ClientRepositoryInterface::class)->getMock();
         $clientRepositoryMock->method('validateClient')->willReturn(false);
 
-        $grantMock = $this->getMockForAbstractClass(AbstractGrant::class);
+        $grantMock = new class () extends AbstractGrant {
+            public function getIdentifier(): string
+            {
+                return 'foo';
+            }
+
+            public function respondToAccessTokenRequest(ServerRequestInterface $request, ResponseTypeInterface $responseType, DateInterval $accessTokenTTL): ResponseTypeInterface
+            {
+                return $responseType;
+            }
+        };
         $grantMock->setClientRepository($clientRepositoryMock);
 
         $abstractGrantReflection = new ReflectionClass($grantMock);