Bump craftcms/cms from 4.11.3 to 4.12.5

[dependabot]

Bumps craftcms/cms from 4.11.3 to 4.12.5.

Release notes

Sourced from craftcms/cms's releases.

4.12.5

• Fixed a bug where entries’ deletedWithEntryType values in the entries table weren’t getting set back to null after being restored.
• Fixed a bug where it wasn’t possible to discard changes for related elements via slideouts, if they didn’t exist in the primary site. (#15798)
• Fixed an information disclosure vulnerability.

4.12.4.1

• Fixed a JavaScript error. (#15784)

4.12.4

• Auto-generated handles, slugs, etc. now update immediately when the source input is changed. (#15754)
• Fixed a bug where Table fields’ Default Values table could lose existing rows if they only consisted of Dropdown columns without configured options.
• Fixed a bug where custom fields’ required properties were always false. (#15752)
• Fixed a bug where craft\helpers\StringHelper::toHandle() was allowing non-alphanumeric/underscore characters through. (#15772)
• Fixed a bug where entries were getting auto-saved while dragging elements within element select inputs.
• Fixed a bug where the maxBackups config setting wasn’t working. (#15780)

4.12.3

• Fixed a data deletion bug that occurred during garbage collection on PostgreSQL. (#14891)
• Fixed a bug where image constraint labels weren’t translated within the Image Editor.
• Fixed a bug where image orientation labels weren’t getting translated for screen readers within the Image Editor.
• Fixed a PHP error. (#14635)

4.12.2

• Updated Twig to 3.14. (#15704)
• Fixed a bug where soft-deleted structures weren’t getting hard-deleted via garbage collection. (#15705)
• Fixed an RCE vulnerability.

4.12.1

• Added craft\services\Security::isSystemDir().
• Fixed a bug where craft\helpers\StringHelper::lines() was returning an array of Stringy\Stringy objects, rather than strings.
• Fixed styling issues with Template field layout UI elements’ selector labels.
• Fixed a validation error that could occur when saving a relational field, if the “Maintain hierarchy” setting had been enabled but was no longer applicable. (#15666)
• Fixed a bug where formatted addresses weren’t using the application locale consistently. (#15668)
• Fixed a bug where Tip and Warning field layout UI elements would display in field layouts even if they had no content. (#15681)
• Fixed an error that could occur when reverting an element’s content from a revision, if the element had been added to additional sites since the time the revision was created. (#15679)
• Fixed an information disclosure vulnerability.

4.12.0

Content Management

• Element conditions can now have a “Site Group” rule, if there are two or more site groups. (#15625)

Development

• Country field values and craft\elements\Address::getCountry() now return the country in the current application locale.

Extensibility

• Added craft\base\ApplicationTrait::getEnvId(). (#15313)
• Added craft\base\ElementInterface::getRootOwner(). (#15534)
• Added craft\elements\conditions\SiteGroupConditionRule.
• Added craft\helpers\Session::close().
• Added craft\services\Sites::getEditableSitesByGroupId().

... (truncated)

Changelog

Sourced from craftcms/cms's changelog.

4.12.5 - 2024-09-27

• Fixed a bug where entries’ deletedWithEntryType values in the entries table weren’t getting set back to null after being restored.
• Fixed a bug where it wasn’t possible to discard changes for related elements via slideouts, if they didn’t exist in the primary site. (#15798)
• Fixed an information disclosure vulnerability.

4.12.4.1 - 2024-09-24

• Fixed a JavaScript error. (#15784)

4.12.4 - 2024-09-23

• Auto-generated handles, slugs, etc. now update immediately when the source input is changed. (#15754)
• Fixed a bug where Table fields’ Default Values table could lose existing rows if they only consisted of Dropdown columns without configured options.
• Fixed a bug where custom fields’ required properties were always false. (#15752)
• Fixed a bug where craft\helpers\StringHelper::toHandle() was allowing non-alphanumeric/underscore characters through. (#15772)
• Fixed a bug where entries were getting auto-saved while dragging elements within element select inputs.
• Fixed a bug where the maxBackups config setting wasn’t working. (#15780)

4.12.3 - 2024-09-14

• Fixed a data deletion bug that occurred during garbage collection on PostgreSQL. (#14891)
• Fixed a bug where image constraint labels weren’t translated within the Image Editor.
• Fixed a bug where image orientation labels weren’t getting translated for screen readers within the Image Editor.
• Fixed a PHP error. (#14635)

4.12.2 - 2024-09-11

• Updated Twig to 3.14. (#15704)
• Fixed a bug where soft-deleted structures weren’t getting hard-deleted via garbage collection. (#15705)
• Fixed an RCE vulnerability.

4.12.1 - 2024-09-06

• Added craft\services\Security::isSystemDir().
• Fixed a bug where craft\helpers\StringHelper::lines() was returning an array of Stringy\Stringy objects, rather than strings.
• Fixed styling issues with Template field layout UI elements’ selector labels.
• Fixed a validation error that could occur when saving a relational field, if the “Maintain hierarchy” setting had been enabled but was no longer applicable. (#15666)
• Fixed a bug where formatted addresses weren’t using the application locale consistently. (#15668)
• Fixed a bug where Tip and Warning field layout UI elements would display in field layouts even if they had no content. (#15681)
• Fixed an error that could occur when reverting an element’s content from a revision, if the element had been added to additional sites since the time the revision was created. (#15679)
• Fixed an information disclosure vulnerability.

4.12.0 - 2024-09-03

Content Management

• Element conditions can now have a “Site Group” rule, if there are two or more site groups. (#15625)

Development

• Country field values and craft\elements\Address::getCountry() now return the country in the current application locale.

... (truncated)

Commits

• 9c43399 Finish 4.12.5
• 1d7640b Fixed #15798
• 1bc4eaa Fixed GHSA-jrh5-vhr9-qh7q
• 259816c Set deletedWithEntryType back to null after restore
• 1ec846b Finish 4.12.4.1
• f9ccb7f Merge pull request #15786 from craftcms/bugfix/15784-croppedName-scope
• 1b270eb Release note
• eb3d49e Use let
• 65e41aa change scope of the croppedName var
• 272ccdc Finish 4.12.4
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[dependabot]

Superseded by #11.