Update cakephp/cakephp requirement from 5.3.* to 5.4.*

[dependabot]

Updates the requirements on cakephp/cakephp to permit the latest version.

Release notes

Sourced from cakephp/cakephp's releases.

CakePHP 5.4.0

The CakePHP core team is happy to announce the release of CakePHP 5.4.0. With the release of 5.4.0, the 5.1 will no longer receive security fixes. 5.2 will continue to receive security fixes until the release of 5.5.

What's new in 5.4.0

Some highlights of the 5.4.0 release include:

• A backwards compatible container implementation has been added to CakePHP.
• New methods on Collection for working with keys, values, conditional method chaining, and imploding to a string.
• New Lock package for working with distributed locks.
• Commands now have $this->io and $this->args as properties.
• ConsoleHelpHeaderProviderInterface lets commands customize help output header messages.
• The #[RequestToDto] attribute enables automatic mapping of request data to Data Transfer Objects.
• Added JsonStreamResponse for more memory efficient streaming of large JSON responses.
• Added several new expression builders for null-safe comparisons, and aggregations.
• Added Connection::afterCommit() to register callbacks that run after the outermost transaction commits.
• Additional postgres index metadata reflection and generation support was added.
• LoggedQuery::setRedactor() was added to scrub sensitive data from query logs.
• Added a PSR-13 Link header implementation.
• Number::toReadableSizes() now defaults binary units (KiB = 1024 bytes) with setUseIecUnits().
• I18n::setCacheConfig() lets you rename the _cake_translations_ cache profile.
• cake i18n extract now extracts labels added with the #[Label] attribute.
• The associated option in newEntity() and patchEntity() supports the nested array format used by contain().
• TestCase::mockModel() enables mocking of model classes with Mockery.
• Added new Utility\Fs classes for scanning and pattern based discovery of directory trees.
• Security::encrypt() now supports longer keys with separate encryption and authentication keys.
• Text::mask() and Text::maskValue() were added.
• FormHelper::enumOptions() was added to make generating form inputs from enums easier.
• The default eager loading strategy for HasMany and BelongsToMany associations was changed from select to subquery.
• Table methods for patching, saving, deleting and loading entities now check entity class types and reject mismatched entities.
• FormHelper now wraps hidden form blocks used for CSRF and tampering prevention with hidden attributes instead of inline styles.
• Application::events() and Plugin::events() are now called consistently in both web and CLI contexts, and can use DI container services.

The migration guide has a complete list of what's new in 5.4.0. We recommend you give that page a read when upgrading as it notes the behavior changes present in 5.4.0.

Contributors to 5.4.0

Thank you to all the contributors that have contributed to this release:

• Abdul Malik Ikhsan
• ADmad
• celsowm
• gillux
• Graham Watson
• Jamison Bryant
• Jasper Smet
• Joachim Rey
• Kevin Pfeifer

... (truncated)

Commits

• 82328ac Update version number to 5.4.0
• 5ee2d9c Update version constraints and branch aliases
• 097d5fe Merge branch '5.next' into 5.x
• b6a9e4f Improve type inference (#19545)
• 4f063eb add command instances to the event manager by default (#19540)
• 49ceb6f add a safety step before releasing to check obvious PHP syntax problems (#19544)
• 2185873 Merge remote-tracking branch 'origin/5.x' into merge-5x-into-5next
• 8fccd79 Fix assertLogMessageContains() to support partial matches (#19534)
• c0d21e0 Update version number to 5.3.7
• f95aebd Handle %2f in routing more consistently (#19537)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)