Bump cakephp/cakephp from 5.2.3 to 5.2.9

[dependabot]

Bumps cakephp/cakephp from 5.2.3 to 5.2.9.

Release notes

Sourced from cakephp/cakephp's releases.

CakePHP 5.2.9 released

The CakePHP core team is happy to announce the immediate availability of CakePHP 5.2.9. This is a maintenance release for the 5.2 branch that fixes several community reported issues and regressions.

Bugfixes

You can expect the following changes in 5.2.9. See the changelog for every commit.

• Improve PHPUnit usage in tests.
• Fixed DI integration for Components.
• Type annotations for LocatorAwareTrait::fetchTable() have been improved so that IDEs / static analyzer can now recognize the specific table type for the returned value, when the method is called with FQCN.
• Fixed default value reflection and for SQLite boolean columns.
• Fixed how Socket detects connection interruptions, by deprecating $connected property, and using is_resource() instead. This should improve behavior of SmtpTransport in long running processes.
• Improved typehints for SelectQuery.

Contributors to 5.2.9

Thank you to all the contributors that submitted a pull request:

• Adam Halfar
• ADmad
• Alberto Pagliarini
• kolorafa
• Mark Scherer
• Mark Story

As always, we would like to also thank all the contributors that opened issues, or updated the documentation.

CakePHP 5.2.8 released

The CakePHP core team is happy to announce the immediate availability of CakePHP 5.2.8. This is a maintenance release for the 5.2 branch that fixes several ,community reported issues and regressions. 5.2.8 also contains a fix for a potential security issue in the query builder. When using already executed queries as subquery expressions, bound parameter values were overwritten which could lead to inccorrect query results. Other usage of subqueries are not impacted.

I'd like to welcome josbeir to the CakePHP team. They have been actively been developing a refesh of the documentation. You can see a development preview of the documentation at newbook.cakephp.org. If you have any feedback about the new documentation site, please open an issue in GitHub.

Bugfixes

You can expect the following changes in 5.2.8. See the changelog for every commit.

• Improved type checks and null coalescing operator usage.
• Fixed route generation when routes are defined with null prefix values.
• Improved type annotations in collection classes.
• Fixed more compatibility issues with PHP 8.5.
• Fixed loading nested associations with Table::loadInto().
• Fixed usage of lock option for PaginatorHelper::sort().
• Fixed an access before initialization in RedisEngine.

Contributors to 5.2.8

... (truncated)

Commits

• 12d41e4 Update version number to 5.2.9
• e08a0f7 Fix Socket::isConnected() (#18974)
• dd8e460 Fix default value for boolean type in SQLite getting columns schema (#18973)
• f4d62c2 Merge pull request #18969 from cakephp/dependabot/github_actions/actions/chec...
• 4e4d940 Bump actions/checkout from 4 to 5
• 59b3f20 Merge pull request #18961 from cakephp/ci
• db38220 Fix phpstan errors
• ffdeaeb Cleanup CI workflow
• c6d6855 Merge pull request #18925 from kolorafa/selectquery-all-typehing-fix
• 2375c76 Add TableLocator get by FQCN (#18957)
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.