Bump craftcms/cms from 5.4.1 to 5.4.8

[dependabot]

Bumps craftcms/cms from 5.4.1 to 5.4.8.

Release notes

Sourced from craftcms/cms's releases.

5.4.8

• Added craft\helpers\App::isTty().
• Fixed a styling issue with Color field inputs. (#15868)
• Fixed a deprecation error. (#15873)
• Fixed a bug where element sources weren’t keyboard-selectable. (#15876)
• Fixed a bug where Craft wasn’t auto-detecting interactive terminals on Windows.
• Fixed a bug where element actions were allowed on nested entries when viewing a revision. (#15879)
• Fixed a bug where element error summaries weren’t linking to recursively-nested Matrix fields properly. (#15797)
• Fixed a bug where eager-loaded relation fields were loading all related elements across all instances of the field. (#15890)
• Fixed a bug where expanding the site statuses UI for an entry within a slideout would remove the expand button from the main entry’s form. (#15893)
• Fixed a privilege escalation vulnerability.

5.4.7.1

• Custom field condition rules are now ignored if they reference a field with an incompatible type. (#15850)
• Fixed an error that could occur if Hyper was installed. (#15867)
• Fixed an error occurred when running migrate commands with an invalid --plugin option value.

5.4.7

• The Plugin Store now displays plugin ratings and reviews. (#15860)
• An InvalidConfigException is now thrown if the defaultCountryCode config setting is set to an empty string. (#15812)
• Fixed an error that could occur when saving an element, if a Date field’s time zone input was focused.
• Fixed a bug where the time zones listed in Date fields weren’t labelled properly based on the selected date. (#15805)
• Fixed an error that could occur if a native element property was attempted to be eager-loaded. (#15822)
• Fixed errors that could occur if a custom source or field condition referenced a custom field whose type had changed. (#15850)
• Fixed a bug where disclosure menus weren’t sticking to their trigger element as it was scrolled, if it was within a slideout or other inline-scrollable container. (#15852)
• Fixed a bug where the default backup command for MySQL was exporting triggers twice. (#15854)
• Fixed a bug where Multi-select fields were saving the selected options in the user-selected order rather than the field-defined order. (#15857)
• Fixed a bug where field toggling wasn’t working properly for boolean menus and radio groups.
• Fixed a bug where eager-loading wasn’t working properly when multiple fields had the same handle. (#15796)
• Fixed a bug where where required Full Name fields weren’t getting enforced for users. (#15808)
• Fixed a bug where relation fields weren’t merging uploaded asset IDs with the existing field values. (#15809)
• Fixed a bug where the “Add” menu within field layout designer tabs was always being positioned below the button. (#15852)
• Fixed a bug where Number fields weren’t getting sorted properly in PostgreSQL. (#15828)
• Fixed a SQL error that occurred when upgrading to Craft 5 on MySQL, if sql_generate_invisible_primary_key was enabled. (#15853)
• Fixed a missing authorization vulnerability.

5.4.6

• Improved relational fields’ drag-n-drop responsiveness in Safari. (#15728)
• Fixed a bug where entries’ deletedWithEntryType values in the entries table weren’t getting set back to null after being restored.
• Fixed a bug where it wasn’t possible to discard changes for related elements via slideouts, if they didn’t exist in the primary site. (#15798)
• Fixed an error that could occur when restoring a soft-deleted entry type and section, if any entries had been soft-deleted alongside the entry type. (#15787)
• Fixed a bug where Tags fields weren’t working properly when their label was hidden. (#15800)
• Fixed an information disclosure vulnerability.

5.4.5.1

• Fixed a JavaScript error. (#15784)

5.4.5

• Element conditions now show rules for fields with the same name but unique handles, if the “Show field handles in edit forms” user preference is enabled. (#15764)
• Auto-generated handles, slugs, etc. now update immediately when the source input is changed. (#15754)

... (truncated)

Changelog

Sourced from craftcms/cms's changelog.

5.4.10.1 - 2024-11-07

• Fixed a bug where it wasn’t possible to create new nested Matrix entries for global sets. (#16041)

5.4.10 - 2024-11-06

• Fixed a bug where entry/category drafts weren’t retaining new parent selections.
• Fixed a bug where the “Related To” condition rule would lose track of the selected element if it belonged to a different site. (#16005)
• Fixed a bug where the GraphQL tokens index was saying tokens never expired. (#16029)
• Fixed a bug craft\services\Categories::saveGroup() and craft\services\Tags::saveTagGroup() weren’t respecting predefined UUID values on new models.
• Fixed an error that could occur when editing a nested Matrix entry in a slideout or full-page editor, if it was initially edited while the Matrix field was in inline-editable blocks mode.
• Fixed an error that could occur when editing an address that had provisional changes.
• Fixed a bug where address cards weren’t showing provisional changes.
• Fixed a bug where it was possible to edit nested addresses when viewing a revision. (#15961)
• Fixed a bug where nested elements could have checkboxes and drag handles when viewing a revision. (#15961)
• Fixed an error that could occur when bulk-editing elements from an element index, if any of them had provisional drafts. (#15962)
• Fixed a bug where element exporting was only working as intended on the first page of results. (#15996, #16003)
• Fixed a bug where Number fields weren’t getting sorted properly in PostgreSQL. (#15973)
• Fixed a bug where field conditions weren’t taking effect within Matrix fields set to inline-editable blocks mode, if autosaveDrafts was disabled. (#15985)
• Fixed an error that occurred when attempting to delete a nested Matrix entry, if it had an entry type that was no longer allowed for the Matrix field. (#15990)
• Fixed a bug where structure data wasn’t getting deleted for drafts when moving an entry out of a Structure section. (#15949, #16014)
• Fixed a bug where loading spinners weren’t always centered. (#16013)
• Fixed a race condition that could break default entry creation for Matrix fields. (#15999)
• Fixed a JavaScript error that occurred when sorting nested elements in an embedded element index, if the index was paginated. (#16026)
• Fixed a styling bug.
• Updated Axios to 1.7.7. (#15958)

5.4.9 - 2024-10-22

• The install command now runs through database connection setup, if Craft can’t yet connect to the database. (#15943)
• authorId, authorIds, authors, and sectionId are now reserved field handles for entry types. (#15923)
• Added craft\elements\db\NestedElementQueryInterface.
• Added craft\services\Gc::$silent.
• Fixed a bug where admin table header cells weren’t indicating when they were sorted. (#15897)
• Fixed an error that occurred when creating a database backup, if the System Name contained any quote-like characters. (#15933)
• Fixed a bug where buttons could bleed out of their containers. (#15931, #15946)
• Fixed a PHP error. (#15915)
• Fixed a bug where uninstalled/missing plugins weren’t getting status indicators on the Plugins index page.
• Fixed errors that occurred when working with nested entries for a newly-added site. (#15898)
• Fixed a bug where it wasn’t possible to scroll the section select modal when moving entries to a different section. (#15900)
• Fixed a bug where query params in the format of '<operator> <values>' weren’t being parsed correctly.
• Fixed a bug craft\services\Entries::saveSection() and craft\services\Volumes::saveVolume() weren’t respecting predefined UUID values on new models.
• Fixed a bug where Addresses fields in element index view weren’t showing newly-created addresses. (#15911)
• Fixed a bug where disabled Money fields were showing the clear button.
• Fixed a bug where element slideouts had a “Save” button when viewing a revision. (#15930)
• Fixed a bug where element edit pages had a “Revert content from this revision” button for elements that didn’t support revisions. (#15930)
• Fixed an error that occurred when loading a soft-deleted nested entry from a revision. (#15930)
• Fixed a bug where the entrify/tags and entrify/global-set commands would prompt for the target section after one had just been created.
• Fixed a bug where entrify commands weren’t copying the original field instance UUIDs into newly-created entry types, causing content to appear missing. (#15935)
• Fixed a bug where element editor slideouts could create unnecessary provisional drafts. (#15938)

... (truncated)

Commits

• be2ded2 Merge branch '4.x' of https://github.com/craftcms/cms into 5.x
• 91eb1f4 Empty commit
• bb1b3c3 Unneeded
• 29729e2 Better
• f4f7ba0 Empty commit
• d31b9ce take 2
• 757ace8 Empty commit
• 5cd488d Replace composer.json ourselves
• 5b5bca0 Finish 5.4.8
• 038acd0 Merge branch '4.x' of https://github.com/craftcms/cms into 5.x
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.