Bump craftcms/cms from 4.3.3 to 4.4.4

[dependabot]

Bumps craftcms/cms from 4.3.3 to 4.4.4.

Changelog

Sourced from craftcms/cms's changelog.

4.4.4 - 2023-03-20

• Input autofocussing has been reintroduced throughout the control panel. (#12921)
• The |json_encode Twig filter now calls craft\helpers\Json::encode() internally, improving error handling. (#12919)
• craft\helpers\Json::encode() no longer sets the JSON_UNESCAPED_SLASHES flag by default.
• Fixed a JavaScript error that occurred when resolving an asset move conflict. (#12920)
• Fixed a bug where volume subfolders were being shown when viewing soft-deleted assets. (#12927)
• Fixed a bug where structure data was getting deleted when running garbage collection on PostgreSQL. (#12925)
• Fixed an error that could occur when rebuilding the project config, if there were any custom source definitions for element types that weren’t Composer-installed. (#12881)
• Fixed an XSS vulnerability.

4.4.3 - 2023-03-16

• Customize Sources modals no longer hide when the Esc key is pressed on the surrounding area is clicked on. (#12895)
• Sections created via entrify commands no longer get a “Primary entry page” preview target by default, unless it was sourced from a category group with URLs. (#12897)
• entrify commands and the sections/create command now prompt for the initial entry type name and handle. (#12894)
• Added craft\helpers\FileHelper::uniqueName().
• Added craft\helpers\StringHelper::emojiToShortcodes().
• Added craft\helpers\StringHelper::shortcodesToEmoji().
• Fixed an error that occurred when uploading an asset with a filename over 250 characters long. (#12889)
• Fixed an error that could occur when preparing licensing alerts, if any licenses were invalid. (#12899)
• Fixed a bug where it wasn’t possible to drag nested Neo blocks. (#12896)
• Fixed a bug where fields with reduced widths in Matrix blocks were becoming full-width while dragged. (#12909)
• Fixed a bug where multi-edition plugins weren’t showing their edition labels within the Plugin Store cart. (#12910)
• Fixed a bug where private plugins’ control panel templates weren’t directly accessible by URL.
• Fixed a bug where element selector modals were persisting parts of their state in the query string. (#12900)
• Fixed a PHP error that occurred if a field type stored enum values. (#12297)
• Fixed an error that could occur when generating transforms for images stored in Google Cloud Storage. (#12878)
• Fixed a bug where some unicode characters were getting removed by LitEmoji. (#12905)

4.4.2 - 2023-03-14

• The entrify/categories and entrify/global-set commands now update user permissions for the new sections. (#12849)
• Variable dumps now use a light theme for web requests by default. (#12857)
• Added the dumper application component and craft\base\ApplicationTrait::getDumper(). (#12869)
• Added craft\models\ImageTransform::getConfig().
• Fixed a bug where it wasn’t always possible to access entry or category edit pages if the slugWordSeparator config setting was set to /. (#12871)
• Fixed a bug where craft\helpers\Html::parseTagAttribute() wasn’t decoding attribute values, which could lead to double-encoded attributes, e.g. when using the |attr filter. (#12887)
• Fixed a bug where multi-value field inputs would be considered modified even if they weren’t, if the field type’s isValueEmpty() method returned true. (#12858)
• Fixed a bug where asset thumbnails within secondary slideout tabs weren’t loading immediately. (#12859)
• Fixed a bug where rebuilding the project config would lose track of image transforms’ fill and upscale settings. (#12879)
• Fixed a bug where blank Dropdown options weren’t showing up in the Selectize menu. (#12880)
• Fixed a bug where it was possible to save a Dropdown field without a value, even if the field didn’t have any blank options. (#12880)
• Fixed a bug where element action triggers weren’t centered for element sources that don’t define any exporters. (#12885)
• Fixed an error that could occur when generating a transform URL for an image in the temp folder.
• Fixed XSS vulnerabilities.
• Fixed an SSRF vulnerability.

4.4.1 - 2023-03-09

... (truncated)

Commits

• bee9366 Merge branch 'release/4.4.4' into main
• 2db7bd6 Finish 4.4.4
• 02f74cd Merge branch 'v3' of https://github.com/craftcms/cms into develop
• 06a4916 Finish 3.8.4
• 96c56f1 Fixed #12925
• 909feea Merge branch 'v3' of https://github.com/craftcms/cms into develop
• 0da1ad6 Merge pull request #12932 from craftcms/webpack-bump
• e39861b Fixed #12927
• 88db08f Bump webpack, make browserlist versioned
• 647c7dd Merge pull request #12926 from simplegr/patch-2
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[dependabot]

Superseded by #180.