build(deps-dev): bump the minor-and-patch group across 1 directory with 2 updates

[dependabot]

Bumps the minor-and-patch group with 2 updates in the /sdk/php directory: giorgiosironi/eris and phpunit/phpunit.

Updates giorgiosironi/eris from 1.1.0 to 1.2.0

Release notes

Sourced from giorgiosironi/eris's releases.

1.2.0

Added

• Generic type annotations for the values that generators produce (#208), thanks @​sebastianbergmann.

Changed

• The Composer dist archive now ships only src/, composer.json, LICENSE, README.md and CHANGELOG.md: development files (test/, examples/, docs/, tooling configuration, etc.) are excluded via export-ignore rules in .gitattributes. If you relied on any of them being installed in vendor/, install with --prefer-source or open an issue.

Fixed

• choose() can generate every integer of a range wider than mt_getrandmax() instead of only some of them, and generates only integers inside a range wider than PHP_INT_MAX instead of floats below its lower limit; a broken random source raises a RuntimeException instead of looping forever (#207), thanks @​sebastianbergmann.
• An Error (such as DivisionByZeroError or TypeError) raised by a property is reported as itself instead of as an OutOfBoundsException about the evaluation ratio, and listeners are notified of it (#206), thanks @​sebastianbergmann.

Changelog

Sourced from giorgiosironi/eris's changelog.

[1.2.0] - 2026-09-30

Added

• Generic type annotations for the values that generators produce (#208), thanks @​sebastianbergmann.

Changed

• The Composer dist archive now ships only src/, composer.json, LICENSE, README.md and CHANGELOG.md: development files (test/, examples/, docs/, tooling configuration, etc.) are excluded via export-ignore rules in .gitattributes. If you relied on any of them being installed in vendor/, install with --prefer-source or open an issue.

Fixed

• choose() can generate every integer of a range wider than mt_getrandmax() instead of only some of them, and generates only integers inside a range wider than PHP_INT_MAX instead of floats below its lower limit; a broken random source raises a RuntimeException instead of looping forever (#207), thanks @​sebastianbergmann.
• An Error (such as DivisionByZeroError or TypeError) raised by a property is reported as itself instead of as an OutOfBoundsException about the evaluation ratio, and listeners are notified of it (#206), thanks @​sebastianbergmann.

Commits

• 90a3171 Release 1.2.0
• 884e1a9 Generate every integer of wide ranges in choose() (#212)
• 89719aa Report an Error raised by a property as itself (#211)
• f075013 add read-issue skill (#210)
• b2230a0 Fix flaky SuchThat and ShrinkingTimeLimit end-to-end tests (#209)
• a1ce94a update CHANGELOG and create AGENTS.md
• eb4ca4f Add generic type annotations for the values that generators produce (#208)
• b125301 update reverse regex dev dep (#203)
• dc7a77e fix README
• See full diff in compare view

Updates phpunit/phpunit from 10.5.64 to 10.5.66

Release notes

Sourced from phpunit/phpunit's releases.

PHPUnit 10.5.66

Changed

• The Software Bill of Materials (SBOM) embedded in the PHAR now uses CycloneDX 1.7 and provides the NTIA minimum elements as well as the data fields that BSI TR-03183-2 (version 2.1.0) requires for logical and identified components, including component creators, original, distribution and effective licences, source code URIs, and the PHP runtime and its extensions as external components

---

Learn how to install or update PHPUnit 10.5 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

PHPUnit 10.5.65

Changed

• Do not pass empty output of a test that was run in a separate process to unserialize() (which emits a warning for an empty string as of PHP 8.6)

---

Learn how to install or update PHPUnit 10.5 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

Changelog

Sourced from phpunit/phpunit's changelog.

[10.5.66] - 2026-10-05

Changed

• The Software Bill of Materials (SBOM) embedded in the PHAR now uses CycloneDX 1.7 and provides the NTIA minimum elements as well as the data fields that BSI TR-03183-2 (version 2.1.0) requires for logical and identified components, including component creators, original, distribution and effective licences, source code URIs, and the PHP runtime and its extensions as external components

[10.5.65] - 2026-09-23

Changed

• Do not pass empty output of a test that was run in a separate process to unserialize() (which emits a warning for an empty string as of PHP 8.6)

Commits

• 747c988 Prepare release
• a7d6e8b Merge branch '9.6' into 10.5
• 8b5f757 Prepare release
• d2e3381 Merge branch '8.5' into 9.6
• 951b085 Prepare release
• 9063826 Fix CS/WS issues
• cfda24d Merge branch '9.6' into 10.5
• 91cb0d4 Merge branch '8.5' into 9.6
• b488d80 Generate and sign an SBOM for each PHAR file, including its filename and SHA-...
• d1700ef Add BSI TR-03183-2 data fields to the SBOM embedded in the PHAR
• Additional commits viewable in compare view

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
docs	Ready	Preview	Oct 8, 2026 3:03pm UTC

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 5b384310-e8ea-4c6e-8041-8e5281660532

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml