Bump bolt/bolt from 3.6.7 to 3.6.11

[dependabot]

Bumps bolt/bolt from 3.6.7 to 3.6.11.

Release notes

Sourced from bolt/bolt's releases.

Maintenance release 3.6.11

To do a 15-second install, use the following:

curl -O https://bolt.cm/distribution/archive/3.6/bolt-v3.6.11.tar.gz
tar -xzf bolt-v3.6.11.tar.gz --strip-components=1
php app/nut init

For detailed installation instructions and other ways to install, see the documentation: https://docs.bolt.cm/3.6/installation/installation

Released: 2019-11-10. Notable changes:

• Fixed: Fix tags in non-english languages and firefox caching selected options #7822
• Fixed: Fix typo in AccessControlListener.php #7809
• Security: Fix CRSF issues in file operations #7823
• Updated: Add download to allowed_attributes in HTML cleaner #7808
• Updated: Added comment about required IP in trustProxies #7807
• Updated: Export improvements #7812
• Updates: Update tests for Doctrine 2.10 compatibility #7824

Special thanks go out f4h4dbt for responsibly disclosing the CSRF issue to us.

Maintenance release 3.6.10

To do a 15-second install, use the following:

curl -O https://bolt.cm/distribution/archive/3.6/bolt-v3.6.9.tar.gz
tar -xzf bolt-v3.6.9.tar.gz --strip-components=1
php app/nut init

For detailed installation instructions and other ways to install, see the documentation: https://docs.bolt.cm/3.6/installation/installation

Released: 2019-08-15. Notable changes:

• Security: Prevent XSS in system log (for authenticated users) #7802
• Security: Prevent XSS in image alt/title (for authenticated users) #7801
• Security: Prevent XSS in "Create file" in file manager (for authenticated users) #7800
• Fixes: Prevent update of guzzlehttp/psr7 to 1.6, fixes tests #7798
• Fixed: Fix taxonomy name collision #7799
• Fixed: Rebuilding assets, fixing tags cloud #7794

Special thanks go out to @​marcingajda for his contributions, and to @​KotatuBot for responsibly disclosing the XSS issues to us.

Maintenance release 3.6.9

To do a 15-second install, use the following:

</tr></table> 

... (truncated)

Changelog

Sourced from bolt/bolt's changelog.

Bolt 3.6.11

Released: 2019-11-10. Notable changes:

• Fixed: Fix tags in non-english languages and firefox caching selected options #7822
• Fixed: Fix typo in AccessControlListener.php #7809
• Security: Fix CRSF issues in file operations #7823
• Updated: Add download to allowed_attributes in HTML cleaner #7808
• Updated: Added comment about required IP in trustProxies #7807
• Updated: Export improvements #7812
• Updates: Update tests for Doctrine 2.10 compatibility #7824

Special thanks go out f4h4dbt for responsibly disclosing the CSRF issue to us.

Bolt 3.6.10

Released: 2019-08-15. Notable changes:

• Security: Prevent XSS in system log (for authenticated users) #7802
• Security: Prevent XSS in image alt/title (for authenticated users) #7801
• Security: Prevent XSS in "Create file" in file manager (for authenticated users) #7800
• Fixes: Prevent update of guzzlehttp/psr7 to 1.6, fixes tests #7798
• Fixed: Fix taxonomy name collision #7799
• Fixed: Rebuilding assets, fixing tags cloud #7794

Special thanks go out to @​marcingajda for his contributions, and to @​KotatuBot for responsibly disclosing the XSS issues to us.

Bolt 3.6.9

Released: 2019-06-24. Notable changes:

• Added: Add abbreviations to CKeditor, using <abbr>-tag. #7783
• Fixed: Use isIterable over Traversable #7778
• Updated: Select2 updated to 4.0.7, since it finally works on IE 11 again. #7783

Bolt 3.6.8

Released: 2019-05-23. Notable changes:

• Fixed: Make sure stripFields is set to array by default #7776

Commits

• 1cd8391 Merge pull request #7825 from bolt/release/3.6.11
• d222143 Update bolt.js
• 6738830 Merge branch 'release/3.6.11' of github.com:bolt/bolt into release/3.6.11
• 0abd7ad Update bolt.js
• 28f04c9 Prepare release 3.6.11
• 3d85f14 Prepare release 3.6.11
• ca49f43 Merge pull request #7823 from bolt/security/add-csrf-tokens-to-file-operations
• 493fe01 Merge pull request #7822 from bolt/bug/fix-select-i18n-and-FF
• dc7976a Merge branch '3.6' into security/add-csrf-tokens-to-file-operations
• 04f1164 Merge branch '3.6' into bug/fix-select-i18n-and-FF
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.