Bump craftcms/cms from 5.4.1 to 5.4.6

[dependabot]

Bumps craftcms/cms from 5.4.1 to 5.4.6.

Release notes

Sourced from craftcms/cms's releases.

5.4.6

• Improved relational fields’ drag-n-drop responsiveness in Safari. (#15728)
• Fixed a bug where entries’ deletedWithEntryType values in the entries table weren’t getting set back to null after being restored.
• Fixed a bug where it wasn’t possible to discard changes for related elements via slideouts, if they didn’t exist in the primary site. (#15798)
• Fixed an error that could occur when restoring a soft-deleted entry type and section, if any entries had been soft-deleted alongside the entry type. (#15787)
• Fixed a bug where Tags fields weren’t working properly when their label was hidden. (#15800)
• Fixed an information disclosure vulnerability.

5.4.5.1

• Fixed a JavaScript error. (#15784)

5.4.5

• Element conditions now show rules for fields with the same name but unique handles, if the “Show field handles in edit forms” user preference is enabled. (#15764)
• Auto-generated handles, slugs, etc. now update immediately when the source input is changed. (#15754)
• Fixed a bug where Table fields’ Default Values table could lose existing rows if they only consisted of Dropdown columns without configured options.
• Fixed a bug where custom fields’ required properties were always false. (#15752)
• Fixed a bug where craft\helpers\StringHelper::toHandle() was allowing non-alphanumeric/underscore characters through. (#15772)
• Fixed a bug where entries were getting auto-saved while dragging elements within element select inputs.
• Fixed a bug where the maxBackups config setting wasn’t working. (#15780)
• Fixed a bug where it wasn’t possible to save nested entries via the entries/save-entry controller action. (#15737)
• Fixed a bug where hyperlinks in Link field inputs could wrap unnecessarily. (#15738)
• Fixed an error that occurred when running the entrify/global-set command. (#15746)
• Fixed a bug where users’ username values weren’t getting updated based on email address changes when useEmailAsUsername was enabled. (#15758)
• Fixed a bug where the hasAlt asset query param wasn’t working properly. (#15762)
• Fixed a bug where relational fields could show related elements for other field instances within element indexes. (#15777)
• Fixed a bug where it wasn’t possible to upload files to Assets fields with dynamic subpaths. (#15775)

5.4.4

[!IMPORTANT]
This update fixes a critical data deletion bug for PostgreSQL installs.

• Fixed a data deletion bug that occurred during garbage collection on PostgreSQL. (#14891)
• Fixed a bug where image constraint labels weren’t translated within the Image Editor.
• Fixed a bug where image orientation labels weren’t getting translated for screen readers within the Image Editor.
• Fixed a PHP error. (#14635)
• Fixed a bug where elements’ default field values weren’t getting populated on creation. (#15706)
• Fixed a bug where URL field previews could bleed out of their container. (#15722)

5.4.3

• Updated Twig to 3.14. (#15704)
• Fixed a bug where soft-deleted structures weren’t getting hard-deleted via garbage collection. (#15705)
• Fixed a bug where address’ Label fields were being marked as translatable. (#15702)
• Fixed an error that could occur when saving an entry with a Matrix field, if the nested entries didn’t have slugs.
• Fixed a bug where relation fields weren’t merging uploaded asset IDs with the existing field values. (#15707)
• Fixed a styling issue with inline-editable Matrix block tabs. (#15703)
• Fixed a bug where the control panel layout could shift briefly when removing an element from an element select input. (#15712)
• Fixed an RCE vulnerability.
• Fixed an XSS vulnerability.

5.4.2

... (truncated)

Changelog

Sourced from craftcms/cms's changelog.

5.4.10.1 - 2024-11-07

• Fixed a bug where it wasn’t possible to create new nested Matrix entries for global sets. (#16041)

5.4.10 - 2024-11-06

• Fixed a bug where entry/category drafts weren’t retaining new parent selections.
• Fixed a bug where the “Related To” condition rule would lose track of the selected element if it belonged to a different site. (#16005)
• Fixed a bug where the GraphQL tokens index was saying tokens never expired. (#16029)
• Fixed a bug craft\services\Categories::saveGroup() and craft\services\Tags::saveTagGroup() weren’t respecting predefined UUID values on new models.
• Fixed an error that could occur when editing a nested Matrix entry in a slideout or full-page editor, if it was initially edited while the Matrix field was in inline-editable blocks mode.
• Fixed an error that could occur when editing an address that had provisional changes.
• Fixed a bug where address cards weren’t showing provisional changes.
• Fixed a bug where it was possible to edit nested addresses when viewing a revision. (#15961)
• Fixed a bug where nested elements could have checkboxes and drag handles when viewing a revision. (#15961)
• Fixed an error that could occur when bulk-editing elements from an element index, if any of them had provisional drafts. (#15962)
• Fixed a bug where element exporting was only working as intended on the first page of results. (#15996, #16003)
• Fixed a bug where Number fields weren’t getting sorted properly in PostgreSQL. (#15973)
• Fixed a bug where field conditions weren’t taking effect within Matrix fields set to inline-editable blocks mode, if autosaveDrafts was disabled. (#15985)
• Fixed an error that occurred when attempting to delete a nested Matrix entry, if it had an entry type that was no longer allowed for the Matrix field. (#15990)
• Fixed a bug where structure data wasn’t getting deleted for drafts when moving an entry out of a Structure section. (#15949, #16014)
• Fixed a bug where loading spinners weren’t always centered. (#16013)
• Fixed a race condition that could break default entry creation for Matrix fields. (#15999)
• Fixed a JavaScript error that occurred when sorting nested elements in an embedded element index, if the index was paginated. (#16026)
• Fixed a styling bug.
• Updated Axios to 1.7.7. (#15958)

5.4.9 - 2024-10-22

• The install command now runs through database connection setup, if Craft can’t yet connect to the database. (#15943)
• authorId, authorIds, authors, and sectionId are now reserved field handles for entry types. (#15923)
• Added craft\elements\db\NestedElementQueryInterface.
• Added craft\services\Gc::$silent.
• Fixed a bug where admin table header cells weren’t indicating when they were sorted. (#15897)
• Fixed an error that occurred when creating a database backup, if the System Name contained any quote-like characters. (#15933)
• Fixed a bug where buttons could bleed out of their containers. (#15931, #15946)
• Fixed a PHP error. (#15915)
• Fixed a bug where uninstalled/missing plugins weren’t getting status indicators on the Plugins index page.
• Fixed errors that occurred when working with nested entries for a newly-added site. (#15898)
• Fixed a bug where it wasn’t possible to scroll the section select modal when moving entries to a different section. (#15900)
• Fixed a bug where query params in the format of '<operator> <values>' weren’t being parsed correctly.
• Fixed a bug craft\services\Entries::saveSection() and craft\services\Volumes::saveVolume() weren’t respecting predefined UUID values on new models.
• Fixed a bug where Addresses fields in element index view weren’t showing newly-created addresses. (#15911)
• Fixed a bug where disabled Money fields were showing the clear button.
• Fixed a bug where element slideouts had a “Save” button when viewing a revision. (#15930)
• Fixed a bug where element edit pages had a “Revert content from this revision” button for elements that didn’t support revisions. (#15930)
• Fixed an error that occurred when loading a soft-deleted nested entry from a revision. (#15930)
• Fixed a bug where the entrify/tags and entrify/global-set commands would prompt for the target section after one had just been created.
• Fixed a bug where entrify commands weren’t copying the original field instance UUIDs into newly-created entry types, causing content to appear missing. (#15935)
• Fixed a bug where element editor slideouts could create unnecessary provisional drafts. (#15938)

... (truncated)

Commits

• d44a2d4 Finish 5.4.6
• 309adb6 Merge branch '4.x' of https://github.com/craftcms/cms into 5.x
• 9c43399 Finish 4.12.5
• c5131e1 Merge branch '4.x' of https://github.com/craftcms/cms into 5.x
• 1d7640b Fixed #15798
• 33b5584 Merge pull request #15802 from craftcms/bugfix/15800-tags-field-without-label
• c3eae55 Release note
• 3cc7a70 Merge branch '5.x' into bugfix/15800-tags-field-without-label
• 263fb47 Merge pull request #15801 from jarheadcore/german-typo-fixes
• 28f4dac Merge pull request #15788 from craftcms/bugfix/cms-15728-drag-sorting-lag-take-2
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[dependabot]

Superseded by #110.