diff --git a/composer.json b/composer.json
index 22782b3d..660c1547 100644
--- a/composer.json
+++ b/composer.json
@@ -35,7 +35,7 @@
         "cakephp/cakephp": "^5.1.0",
         "cakephp/cakephp-codesniffer": "^5.0",
         "firebase/php-jwt": "^6.2",
-        "phpunit/phpunit": "^10.5.5 || ^11.1.3 || ^12.0.9"
+        "phpunit/phpunit": "^10.5.32 || ^11.3.3 || ^12.0.9"
     },
     "suggest": {
         "ext-ldap": "Make sure this php extension is installed and enabled on your system if you want to use the built-in LDAP adapter for \"LdapIdentifier\".",
diff --git a/phpcs.xml b/phpcs.xml
index eef10856..0cccd4f6 100644
--- a/phpcs.xml
+++ b/phpcs.xml
@@ -1,6 +1,7 @@
 <?xml version="1.0"?>
 <ruleset name="CakePHP Core">
-    <config name="installed_paths" value="../../cakephp/cakephp-codesniffer" />
-
     <rule ref="CakePHP"/>
+
+    <file>src/</file>
+    <file>tests/</file>
 </ruleset>
diff --git a/src/Authenticator/AuthenticationRequiredException.php b/src/Authenticator/AuthenticationRequiredException.php
index 1bdd6370..017074ce 100644
--- a/src/Authenticator/AuthenticationRequiredException.php
+++ b/src/Authenticator/AuthenticationRequiredException.php
@@ -28,7 +28,7 @@
 class AuthenticationRequiredException extends HttpException
 {
     /**
-     * @var array<string, mixed>
+     * @var array<non-empty-string, array<string>|string>
      */
     protected array $headers = [];