Bump cakephp/cakephp from 5.0.2 to 5.1.4

[dependabot]

Bumps cakephp/cakephp from 5.0.2 to 5.1.4.

Release notes

Sourced from cakephp/cakephp's releases.

CakePHP 5.1.4 released

The CakePHP core team is happy to announce the immediate availability of CakePHP 5.1.4. This is a maintenance release with a security fix for the 5.1 branch that fixes several community reported issues and regressions. If you are having problems with the framework breaking your application when you upgrade from 5.0.11 to 5.1, please open an issue.

Bugfixes

You can expect the following changes in 5.1.4. See the changelog for every commit.

• Relaxed typehints to allow callable where previously typehints were Closure.
• aria-invalid is now be applied to select elements.
• Relaxed type hints that were list to be array.
• Improved API documentation.
• Converted 5xx response codes to 4xx for externally invoked bad URLs.
• Client\Request no longer mangles the Content-Type header for JSON and XML requests with array data.
• Paginator will now trigger warnings when settings have not been applied.
• Request URIs are now read from REQUEST_URI instead of PATH_INFO. This resolves a potential security issue where paths with %2f would be incorrectly handled as / by CakePHP.
• Improved CSP compliance in FormHelper by replacing inline style attributes with classnames, and inline JavaScript with script blocks when CspMiddleware is enabled.
• Fixed off-by-one error on stackframe offests in ErrorTrap::handleError().

Contributors to 5.1.4

Thank you to all the contributors that submitted a pull request:

• ADmad
• Kevin Pfeifer
• Marc Würth
• Mark Scherer
• Mark Story

As always, we would like to also thank all the contributors that opened issues, or updated the documentation.

CakePHP 5.1.2 released

The CakePHP core team is happy to announce the immediate availability of CakePHP 5.1.2. This is a maintenance release for the 5.1 branch that fixes several community reported issues and regressions. If you are having problems with the framework breaking your application when you upgrade from 5.0.11 to 5.1, please open an issue.

Bugfixes

You can expect the following changes in 5.1.2. See the changelog for every commit.

• Fix usage of constants in EavStrategy.
• Clean up constructor logic.
• In console command listings app and cakephp commands are now displayed above plugin names.
• Added command descriptions to all framework commands.
• Fixed file descriptor leaks in StubConsoleOutput.
• Added support for using DI in commands executed by other commands.
• Restored ability to disable query logging at runtime.
• Improved performance of count updates in CounterCache.
• Fixed object naming in ObjectRegistry. Plugin class names are reflected more correctly now.
• Added IP and URL to active transaction warning.

... (truncated)

Commits

• c8e4f57 Update version number to 5.1.4
• fa6413a Merge pull request #18082 from cakephp/5.x-stack-trace
• da83e26 Fix up strack trace for ErrorTrap handleError()
• c69c235 Merge pull request #18081 from cakephp/5.x-adjust-ci
• 3d73e2e adjust ci
• 3482688 Merge pull request #18080 from cakephp/chore/cleanup
• 91aacee Avoid use of isset()
• ea9ed63 Remove redundant condition
• 9684ba0 Merge pull request #18069 from cakephp/5.x-fix-more-warnings
• a27572d fix more warnings in tests
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #58.