Update cakephp/cakephp requirement from ^4.2 to ^5.1

[dependabot]

Updates the requirements on cakephp/cakephp to permit the latest version.

Release notes

Sourced from cakephp/cakephp's releases.

CakePHP 5.1.0 released

The CakePHP core team is happy to announce the immediate availability of CakePHP 5.1.0. 5.1.0 provides a number improvements to CakePHP. 5.1.0 introduces a small number of deprecation warnings. Any deprecations introduced now will continue to have consistent behavior until their removal in 6.0.0. There is no scheduled date for 6.0.0 at this time.

Upgrading to 5.1.0

You can use composer to upgrade to CakePHP 5.1.0::

php composer.phar require --update-with-dependencies "cakephp/cakephp:5.1.*"

Deprecation Warnings

5.1 introduces a few deprecations. All of these features will continue for the duration of 5.x but will be removed in 6.0. See the migration guide.

What's new in 5.1.0?

The migration guide has a complete list of what's new in 5.1.0. We recommend you give that page a read when upgrading. A few highlights from 5.1.0 are:

• RedisEngine now supports TLS connections.
• bin/cake plugin list has been added to list plugin metadata.
• Optional Command arguments can now have a default value.
• BannerHelper was added. This command helper can format text as a banner with a colored background and padding.
• Components can now use the DI container to have dependencies resolved and provided as constructor parameters just like Controllers and Commands do.
• The toString, toInt, toBool, toDate, and toDateTime functions were added. They give you a typesafe way to cast request data or other input and return null when conversion fails.
• pathCombine() was added to help build paths without worrying about duplicate and trailing slashes.
• A new events hook was added to the BaseApplication as well as the BasePlugin class.
• Support for point, linestring, polygon and geometry types were added to the Database package.
• SelectQuery::intersect() and SelectQuery::intersectAll() were added.
• Client now emits HttpClient.beforeSend and HttpClient.afterSend events when requests are sent.
• Http\Server now emits Server.terminate event to run logic after the response has been sent in fastcgi environments. In other environments the Server.terminate event runs before the response has been sent.
• View cells now emit events around their actions Cell.beforeAction and Cell.afterAction.
• Validation::enum(), Validator::enum(), Validation::enumOnly(), and Validation::enumExcept() were added to further simplify validating backed enum values.
• HtmlHelper can now create a meta tag with the CSRF token in it.

Contributors to 5.1.0

Thank you to all the contributors that helped make 5.1 happen:

• Adam Halfar
• ADmad
• Alejandro Ibarra
• Fernando Herrero
• Frank de Graaf (Phally)
• Jamison Bryant
• J.Brabec

... (truncated)

Commits

• eb61f6b Update version number to 5.1.0
• c52010c Revert version number so release tooling works
• e5806ad Merge branch '5.next' into 5.x
• d19627c Merge pull request #17903 from cakephp/5.1-diactoros
• d2b6778 Bump up laminas-diactoros to ^3.3.
• 19af849 Update version number to 5.0.11
• 883bcf2 Merge pull request #17886 from KrzysiekNDS/5.next
• 7efe80c Fix up whitespace
• 8a5c181 Merge pull request #17893 from cakephp/dependabot/composer/phpstan/phpstan-1....
• 137b1ed Merge pull request #17897 from cakephp/5.next-restore-passed-down-args-assert...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)