Bump craftcms/cms from 5.3.6 to 5.4.6

[dependabot]

Bumps craftcms/cms from 5.3.6 to 5.4.6.

Release notes

Sourced from craftcms/cms's releases.

5.4.6

• Improved relational fields’ drag-n-drop responsiveness in Safari. (#15728)
• Fixed a bug where entries’ deletedWithEntryType values in the entries table weren’t getting set back to null after being restored.
• Fixed a bug where it wasn’t possible to discard changes for related elements via slideouts, if they didn’t exist in the primary site. (#15798)
• Fixed an error that could occur when restoring a soft-deleted entry type and section, if any entries had been soft-deleted alongside the entry type. (#15787)
• Fixed a bug where Tags fields weren’t working properly when their label was hidden. (#15800)
• Fixed an information disclosure vulnerability.

5.4.5.1

• Fixed a JavaScript error. (#15784)

5.4.5

• Element conditions now show rules for fields with the same name but unique handles, if the “Show field handles in edit forms” user preference is enabled. (#15764)
• Auto-generated handles, slugs, etc. now update immediately when the source input is changed. (#15754)
• Fixed a bug where Table fields’ Default Values table could lose existing rows if they only consisted of Dropdown columns without configured options.
• Fixed a bug where custom fields’ required properties were always false. (#15752)
• Fixed a bug where craft\helpers\StringHelper::toHandle() was allowing non-alphanumeric/underscore characters through. (#15772)
• Fixed a bug where entries were getting auto-saved while dragging elements within element select inputs.
• Fixed a bug where the maxBackups config setting wasn’t working. (#15780)
• Fixed a bug where it wasn’t possible to save nested entries via the entries/save-entry controller action. (#15737)
• Fixed a bug where hyperlinks in Link field inputs could wrap unnecessarily. (#15738)
• Fixed an error that occurred when running the entrify/global-set command. (#15746)
• Fixed a bug where users’ username values weren’t getting updated based on email address changes when useEmailAsUsername was enabled. (#15758)
• Fixed a bug where the hasAlt asset query param wasn’t working properly. (#15762)
• Fixed a bug where relational fields could show related elements for other field instances within element indexes. (#15777)
• Fixed a bug where it wasn’t possible to upload files to Assets fields with dynamic subpaths. (#15775)

5.4.4

[!IMPORTANT]
This update fixes a critical data deletion bug for PostgreSQL installs.

• Fixed a data deletion bug that occurred during garbage collection on PostgreSQL. (#14891)
• Fixed a bug where image constraint labels weren’t translated within the Image Editor.
• Fixed a bug where image orientation labels weren’t getting translated for screen readers within the Image Editor.
• Fixed a PHP error. (#14635)
• Fixed a bug where elements’ default field values weren’t getting populated on creation. (#15706)
• Fixed a bug where URL field previews could bleed out of their container. (#15722)

5.4.3

• Updated Twig to 3.14. (#15704)
• Fixed a bug where soft-deleted structures weren’t getting hard-deleted via garbage collection. (#15705)
• Fixed a bug where address’ Label fields were being marked as translatable. (#15702)
• Fixed an error that could occur when saving an entry with a Matrix field, if the nested entries didn’t have slugs.
• Fixed a bug where relation fields weren’t merging uploaded asset IDs with the existing field values. (#15707)
• Fixed a styling issue with inline-editable Matrix block tabs. (#15703)
• Fixed a bug where the control panel layout could shift briefly when removing an element from an element select input. (#15712)
• Fixed an RCE vulnerability.
• Fixed an XSS vulnerability.

5.4.2

... (truncated)

Changelog

Sourced from craftcms/cms's changelog.

5.4.6 - 2024-09-27

• Improved relational fields’ drag-n-drop responsiveness in Safari. (#15728)
• Fixed a bug where entries’ deletedWithEntryType values in the entries table weren’t getting set back to null after being restored.
• Fixed a bug where it wasn’t possible to discard changes for related elements via slideouts, if they didn’t exist in the primary site. (#15798)
• Fixed an error that could occur when restoring a soft-deleted entry type and section, if any entries had been soft-deleted alongside the entry type. (#15787)
• Fixed a bug where Tags fields weren’t working properly when their label was hidden. (#15800)
• Fixed an information disclosure vulnerability.

5.4.5.1 - 2024-09-24

• Fixed a JavaScript error. (#15784)

5.4.5 - 2024-09-23

• Element conditions now show rules for fields with the same name but unique handles, if the “Show field handles in edit forms” user preference is enabled. (#15764)
• Auto-generated handles, slugs, etc. now update immediately when the source input is changed. (#15754)
• Fixed a bug where Table fields’ Default Values table could lose existing rows if they only consisted of Dropdown columns without configured options.
• Fixed a bug where custom fields’ required properties were always false. (#15752)
• Fixed a bug where craft\helpers\StringHelper::toHandle() was allowing non-alphanumeric/underscore characters through. (#15772)
• Fixed a bug where entries were getting auto-saved while dragging elements within element select inputs.
• Fixed a bug where the maxBackups config setting wasn’t working. (#15780)
• Fixed a bug where it wasn’t possible to save nested entries via the entries/save-entry controller action. (#15737)
• Fixed a bug where hyperlinks in Link field inputs could wrap unnecessarily. (#15738)
• Fixed an error that occurred when running the entrify/global-set command. (#15746)
• Fixed a bug where users’ username values weren’t getting updated based on email address changes when useEmailAsUsername was enabled. (#15758)
• Fixed a bug where the hasAlt asset query param wasn’t working properly. (#15762)
• Fixed a bug where relational fields could show related elements for other field instances within element indexes. (#15777)
• Fixed a bug where it wasn’t possible to upload files to Assets fields with dynamic subpaths. (#15775)

5.4.4 - 2024-09-14

[!IMPORTANT]
This update fixes a critical data deletion bug for PostgreSQL installs.

• Fixed a data deletion bug that occurred during garbage collection on PostgreSQL. (#14891)
• Fixed a bug where image constraint labels weren’t translated within the Image Editor.
• Fixed a bug where image orientation labels weren’t getting translated for screen readers within the Image Editor.
• Fixed a PHP error. (#14635)
• Fixed a bug where elements’ default field values weren’t getting populated on creation. (#15706)
• Fixed a bug where URL field previews could bleed out of their container. (#15722)

5.4.3 - 2024-09-11

• Updated Twig to 3.14. (#15704)
• Fixed a bug where soft-deleted structures weren’t getting hard-deleted via garbage collection. (#15705)
• Fixed a bug where address’ Label fields were being marked as translatable. (#15702)
• Fixed an error that could occur when saving an entry with a Matrix field, if the nested entries didn’t have slugs.
• Fixed a bug where relation fields weren’t merging uploaded asset IDs with the existing field values. (#15707)
• Fixed a styling issue with inline-editable Matrix block tabs. (#15703)

... (truncated)

Commits

• d44a2d4 Finish 5.4.6
• 309adb6 Merge branch '4.x' of https://github.com/craftcms/cms into 5.x
• 9c43399 Finish 4.12.5
• c5131e1 Merge branch '4.x' of https://github.com/craftcms/cms into 5.x
• 1d7640b Fixed #15798
• 33b5584 Merge pull request #15802 from craftcms/bugfix/15800-tags-field-without-label
• c3eae55 Release note
• 3cc7a70 Merge branch '5.x' into bugfix/15800-tags-field-without-label
• 263fb47 Merge pull request #15801 from jarheadcore/german-typo-fixes
• 28f4dac Merge pull request #15788 from craftcms/bugfix/cms-15728-drag-sorting-lag-take-2
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[sonarcloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[dependabot]

Superseded by #406.