Bump cakephp/cakephp from 3.7.4 to 3.7.7

[dependabot]

Bumps cakephp/cakephp from 3.7.4 to 3.7.7.

Release notes

Sourced from cakephp/cakephp's releases.

CakePHP 3.7.7 released

The CakePHP core team is happy to announce the immediate availability of CakePHP
3.7.7, 3.6.15 and 3.5.18. These releases contain a security related fix for CVE-2019-11458. The vulnerability affects applications that open serialized content from user input. When doing so the SmtpTransport can be used to overwrite any file the webserver has write access to. We'd like to thank Edgaras Janušauskas for notifying us of this issue and confirming the fix.

Bugfixes

In addition to the security fix, you can expect the following changes in 3.7.7. See the changelog for every
commit.

• Add getName() to View. This method was suggested in a deprecation warning but did not exist.
• Cake\Http\Response::withModified() is now compatible with DateTimeImmutable objects.
• Improved API documentation.
• Fixed accidental return type change in Cache::deleteMany().
• FileEngine no longer emits warnings when cache files are written to during shutdown when the previous write is for the same key.
• CommandRunner now gracefully handles StopException now.
• Fixed side-effect in SmtpTransport destructor.

Contributors to 3.7.7

Thank you to all the contributors that helped make this release happen:

• ADmad
• Edgaras Janušauskas
• Mark Scherer
• Mark Story
• saeideng

As always, we would like to thank all the contributors that opened issues, created pull requests or updated the documentation.

CakePHP 3.7.6 released

The CakePHP core team is happy to announce the immediate availability of CakePHP 3.7.6. This is a maintenance release for the 3.7 branch that fixes several community reported issues.

Bugfixes

You can expect the following changes in 3.7.6. See the changelog for every commit.

• Improved the error message displayed when a route filter fails to apply.
• Improved API documentation.
• Blackhole callbacks for SecurityComponent can now return responses as they could in CakePHP 3.6.
• The console TableHelper now calculates cell widths correctly when cells contain formatted content.
• Fixed a persistence failure when HasMany associations had string keys.
• Updated the CA bundle to curl 2019-01-23.
• Fixed requirements on standalone Cache package.

Contributors to 3.7.6

... (truncated)

Commits

• b0aeff3 Update version number to 3.7.7
• 2434f9b Merge pull request #13153 from cakephp/smtp-transport
• 1a74e79 Fix side-effect in destructor
• f3adf8c Merge pull request #13134 from cakephp/run-command
• 649c0a4 catch the StopException when execute a command
• 33e43ea Merge pull request #13118 from cakephp/issue-13110
• b5b6efc Merge pull request #13127 from cakephp/issue-13085-v3
• d53a520 Fix warnings from FileEngine on shutdown
• 6331b0e Merge pull request #13119 from cakephp/issue-13087
• 4e35047 Fix method descriptions in FrozenTime
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

[dependabot]

Superseded by #6.