drupal/core-dev fails composer audit due to abandoned sebastianbergmann/resource-operations

Problem/Motivation

The current version of drupal/core-dev requires phpunit/phpunit: ^9.6.13 which itself requires sebastian/resource-operations: ^3.0.3 which has been marked as abandoned/archived in GitHub as of March 13 2024.

Steps to reproduce

1. Start an empty drupal/recommended-project composer project
2. Run composer require --dev drupal/core-dev
3. Run composer audit and see the failure due to the abandoned package.

This affects current code for Drupal 10.2, 10.3 and 11.x.

Proposed resolution

Likely this would be solved by updating to PHPUnit 10. According to https://github.com/sebastianbergmann/phpunit/issues/4828, PHPUnit 9 is no longer receiving any updates or releases so it is also considered abandoned.

This also can be avoided by using composer audit --no-dev

Remaining tasks

User interface changes

API changes

Data model changes

Release notes snippet