Bump craftcms/cms from 5.4.5.1 to 5.4.8

[dependabot]

Bumps craftcms/cms from 5.4.5.1 to 5.4.8.

Release notes

Sourced from craftcms/cms's releases.

5.4.8

• Added craft\helpers\App::isTty().
• Fixed a styling issue with Color field inputs. (#15868)
• Fixed a deprecation error. (#15873)
• Fixed a bug where element sources weren’t keyboard-selectable. (#15876)
• Fixed a bug where Craft wasn’t auto-detecting interactive terminals on Windows.
• Fixed a bug where element actions were allowed on nested entries when viewing a revision. (#15879)
• Fixed a bug where element error summaries weren’t linking to recursively-nested Matrix fields properly. (#15797)
• Fixed a bug where eager-loaded relation fields were loading all related elements across all instances of the field. (#15890)
• Fixed a bug where expanding the site statuses UI for an entry within a slideout would remove the expand button from the main entry’s form. (#15893)
• Fixed a privilege escalation vulnerability.

5.4.7.1

• Custom field condition rules are now ignored if they reference a field with an incompatible type. (#15850)
• Fixed an error that could occur if Hyper was installed. (#15867)
• Fixed an error occurred when running migrate commands with an invalid --plugin option value.

5.4.7

• The Plugin Store now displays plugin ratings and reviews. (#15860)
• An InvalidConfigException is now thrown if the defaultCountryCode config setting is set to an empty string. (#15812)
• Fixed an error that could occur when saving an element, if a Date field’s time zone input was focused.
• Fixed a bug where the time zones listed in Date fields weren’t labelled properly based on the selected date. (#15805)
• Fixed an error that could occur if a native element property was attempted to be eager-loaded. (#15822)
• Fixed errors that could occur if a custom source or field condition referenced a custom field whose type had changed. (#15850)
• Fixed a bug where disclosure menus weren’t sticking to their trigger element as it was scrolled, if it was within a slideout or other inline-scrollable container. (#15852)
• Fixed a bug where the default backup command for MySQL was exporting triggers twice. (#15854)
• Fixed a bug where Multi-select fields were saving the selected options in the user-selected order rather than the field-defined order. (#15857)
• Fixed a bug where field toggling wasn’t working properly for boolean menus and radio groups.
• Fixed a bug where eager-loading wasn’t working properly when multiple fields had the same handle. (#15796)
• Fixed a bug where where required Full Name fields weren’t getting enforced for users. (#15808)
• Fixed a bug where relation fields weren’t merging uploaded asset IDs with the existing field values. (#15809)
• Fixed a bug where the “Add” menu within field layout designer tabs was always being positioned below the button. (#15852)
• Fixed a bug where Number fields weren’t getting sorted properly in PostgreSQL. (#15828)
• Fixed a SQL error that occurred when upgrading to Craft 5 on MySQL, if sql_generate_invisible_primary_key was enabled. (#15853)
• Fixed a missing authorization vulnerability.

5.4.6

• Improved relational fields’ drag-n-drop responsiveness in Safari. (#15728)
• Fixed a bug where entries’ deletedWithEntryType values in the entries table weren’t getting set back to null after being restored.
• Fixed a bug where it wasn’t possible to discard changes for related elements via slideouts, if they didn’t exist in the primary site. (#15798)
• Fixed an error that could occur when restoring a soft-deleted entry type and section, if any entries had been soft-deleted alongside the entry type. (#15787)
• Fixed a bug where Tags fields weren’t working properly when their label was hidden. (#15800)
• Fixed an information disclosure vulnerability.

Changelog

Sourced from craftcms/cms's changelog.

5.4.8 - 2024-10-15

• Added craft\helpers\App::isTty().
• Fixed a styling issue with Color field inputs. (#15868)
• Fixed a deprecation error. (#15873)
• Fixed a bug where element sources weren’t keyboard-selectable. (#15876)
• Fixed a bug where Craft wasn’t auto-detecting interactive terminals on Windows.
• Fixed a bug where element actions were allowed on nested entries when viewing a revision. (#15879)
• Fixed a bug where element error summaries weren’t linking to recursively-nested Matrix fields properly. (#15797)
• Fixed a bug where eager-loaded relation fields were loading all related elements across all instances of the field. (#15890)
• Fixed a bug where expanding the site statuses UI for an entry within a slideout would remove the expand button from the main entry’s form. (#15893)
• Fixed a privilege escalation vulnerability.

5.4.7.1 - 2024-10-09

• Custom field condition rules are now ignored if they reference a field with an incompatible type. (#15850)
• Fixed an error that could occur if Hyper was installed. (#15867)
• Fixed an error occurred when running migrate commands with an invalid --plugin option value.

5.4.7 - 2024-10-08

• The Plugin Store now displays plugin ratings and reviews. (#15860)
• An InvalidConfigException is now thrown if the defaultCountryCode config setting is set to an empty string. (#15812)
• Fixed an error that could occur when saving an element, if a Date field’s time zone input was focused.
• Fixed a bug where the time zones listed in Date fields weren’t labelled properly based on the selected date. (#15805)
• Fixed an error that could occur if a native element property was attempted to be eager-loaded. (#15822)
• Fixed errors that could occur if a custom source or field condition referenced a custom field whose type had changed. (#15850)
• Fixed a bug where disclosure menus weren’t sticking to their trigger element as it was scrolled, if it was within a slideout or other inline-scrollable container. (#15852)
• Fixed a bug where the default backup command for MySQL was exporting triggers twice. (#15854)
• Fixed a bug where Multi-select fields were saving the selected options in the user-selected order rather than the field-defined order. (#15857)
• Fixed a bug where field toggling wasn’t working properly for boolean menus and radio groups.
• Fixed a bug where eager-loading wasn’t working properly when multiple fields had the same handle. (#15796)
• Fixed a bug where where required Full Name fields weren’t getting enforced for users. (#15808)
• Fixed a bug where relation fields weren’t merging uploaded asset IDs with the existing field values. (#15809)
• Fixed a bug where the “Add” menu within field layout designer tabs was always being positioned below the button. (#15852)
• Fixed a bug where Number fields weren’t getting sorted properly in PostgreSQL. (#15828)
• Fixed a SQL error that occurred when upgrading to Craft 5 on MySQL, if sql_generate_invisible_primary_key was enabled. (#15853)
• Fixed a missing authorization vulnerability.

5.4.6 - 2024-09-27

• Improved relational fields’ drag-n-drop responsiveness in Safari. (#15728)
• Fixed a bug where entries’ deletedWithEntryType values in the entries table weren’t getting set back to null after being restored.
• Fixed a bug where it wasn’t possible to discard changes for related elements via slideouts, if they didn’t exist in the primary site. (#15798)
• Fixed an error that could occur when restoring a soft-deleted entry type and section, if any entries had been soft-deleted alongside the entry type. (#15787)
• Fixed a bug where Tags fields weren’t working properly when their label was hidden. (#15800)
• Fixed an information disclosure vulnerability.

Commits

• be2ded2 Merge branch '4.x' of https://github.com/craftcms/cms into 5.x
• 91eb1f4 Empty commit
• bb1b3c3 Unneeded
• 29729e2 Better
• f4f7ba0 Empty commit
• d31b9ce take 2
• 757ace8 Empty commit
• 5cd488d Replace composer.json ourselves
• 5b5bca0 Finish 5.4.8
• 038acd0 Merge branch '4.x' of https://github.com/craftcms/cms into 5.x
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.