Composer(deps-dev): Bump phpunit/phpunit from 11.5.55 to 13.1.8 in /web (sbpp#1340)

* Composer(deps-dev): Bump phpunit/phpunit from 11.5.55 to 13.1.8 in /web

Bumps [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit) from 11.5.55 to 13.1.8.
- [Release notes](https://github.com/sebastianbergmann/phpunit/releases)
- [Changelog](https://github.com/sebastianbergmann/phpunit/blob/13.1.8/ChangeLog-13.1.md)
- [Commits](sebastianbergmann/phpunit@11.5.55...13.1.8)

---
updated-dependencies:
- dependency-name: phpunit/phpunit
  dependency-version: 13.1.8
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* test(GroupsTest): convert @dataProvider docblock to PHPUnit attribute

PHPUnit 13 dropped support for the legacy `@dataProvider` docblock
metadata in favour of PHP attributes. The `testEditRoundTripsHighBitFlagsAsPositiveIntegers`
test was the only remaining survivor across the suite; converting to
`#[DataProvider('highBitFlagProvider')]` keeps the round-trip coverage
green under PHPUnit 13.x without changing test semantics.

Pin for sbpp#1340 (Composer dependabot bump from 11.5.55 to 13.1.8).

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: rumblefrog <contact@zhenyangli.me>

Author: dependabot[bot]

web/composer.json

@@ -41,7 +41,7 @@
     "require-dev": {
         "phpstan/phpstan": "^2.1",
         "phpstan/phpstan-deprecation-rules": "^2.0",
-        "phpunit/phpunit": "^11",
+        "phpunit/phpunit": "^13",
         "staabm/phpstan-dba": "^0.4"
     },
     "scripts": {