Requires the PhpSpreadsheet package

[REF] Paramter simplification

5.43 to master

[NFC] First Pass Release notes 5.43

REF - Fix loop in APIv4 Entity.get to only load ad-hoc entities once

#2907 fix for gdpr clobering contact tokens

5.43 to master

This is a fix for contact tokens not rendering when gdpr tokens is installed.

Gdpr declares some addtional tokens with the namespace 'contact'. I am inclined to
agree this counts as 'naughty' and so while I have fixed the clobbering by
not processing contact-metadata tokens I have not fixed the enotices.

If we think it is non-naughty I can kill those - but I've already loosened
some strictness that I think had benefits in order to facilitate this

[REF] APIv4 - Dispatch event during Entity.get

#2895 handle case ids passed via url

5.43 to master

EntityTokens - Normalize data-loading via myEntityId (eg activityId)

This allows extensions to modify the list of entities,
enabling "virtual" entities not based on php files.

Make hardcoded strings translatable.

5.43

Wraps previously hardcoded strings in {ts} in Smarty .tpl files.

Before
======

EntityTokens has two protocols for fetching data:

1. For scheduled-reminders, hook into the main query. Add N-ary columns to select
   any fields used by tokens.
2. For everything else, expect a parameter `$row->context['activityId']`. Collect
   the `activityId`s and fetch the needful via APIv4.

This poses a few challenges, but TLDR it's duplicate functionality.  That
means that listeners who consume the `activityId` must check multiple
places.  It means that the data-loading could return slightly different data
(ie based on SQL query vs API data-loader).

After
=====

* EntityTokens has one protocol for fetching data: it must receive `activityId`s and then
  call APIv4 for the batch.
* For scheduled-reminders, EntityTokens uses a small adapter to ensure that `activityId`s
  are available.

Use money formatting for currency in templates

#2904 ensure skipStatusCal not passed from the order api

#2902 revert apiv3 handling of membership

Do not find references for empty values

Remove another call to getTokenDetails

$sid doesn't get set on upgrade runFinish

Use HTMLPurifier from composer instead of packages

5.43.0 release notes initial run

The goal is to make the tokenValues hook uncalled outside the
token processor & hence redundant. We were trying to do that in 5.43
but this call is not using the results anyway so I guess
putting in master is immaterial to that goal