Bump cakephp/cakephp from 5.3.5 to 5.3.6

[dependabot]

Bumps cakephp/cakephp from 5.3.5 to 5.3.6.

Release notes

Sourced from cakephp/cakephp's releases.

CakePHP 5.3.6 released

The CakePHP core team is happy to announce the immediate availability of CakePHP 5.3.5. This is a maintenance release for the 5.3 branch that fixes community reported issues and a low severity security issue in View::element(). Thank you to Nguyen Danh Quan (@​z3moo) and Ta Quoc Hung (@​get-wright) for reporting this issue through our security process. The security fix has been backported and released as 5.2.13, 5.1.7, 4.6.4, and 4.5.11 as well.

Bugfixes

You can expect the following changes in 5.3.6. See the changelog for every commit.

• DateTimeType now marshals date only formats like Y-m-d to midnight.
• ConsoleOutput::_write() now guards against unset streams.
• Improved API documentation.
• Improved generic typehints for find(), findCreate() and loadInto().
• Fixed missing path normalization and directory separator handling in CommandScanner::scanPlugin().
• Improved error messages when validation rules are duplicated.
• Fixed element path name handling with relative directory traversals.

Contributors to 5.3.6

Thank you to all the contributors that submitted a pull request:

• ADmad
• Mark Scherer
• Mark Story
• Stuart

As always, we would like to also thank all the contributors that opened issues, or updated the documentation.

Commits

• cdaca8c Update version number to 5.3.6
• fdb57bb Merge pull request #19460 from cakephp/phpstan
• c5ccddd Update phpstan
• e8c983c Improve tolerance of path checking in View (#19459)
• 360fb12 Merge pull request #19457 from cakephp/issue-19449
• 3b763be Move association property name clash check to getter instead of setter.
• 08019f5 Fix a potential file handling weakness in element() (#19447)
• f6f32e0 Improve error message for duplicate rule names (#19456)
• 75b02a8 Merge pull request #19452 from cakephp/fix-command-scanner-plugin-path
• 3d7143e Document trailing directory separator requirement for scanDir() path
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)