Bump bootstrap from 4.3.1 to 4.6.0

[dependabot-preview]

Bumps bootstrap from 4.3.1 to 4.6.0.

Release notes

Sourced from bootstrap's releases.

v4.6.0

Highlights

• Tooltips and popovers can have custom clases via customClass option.
• Added new .navbar-nav-scroll class for scrolling expanded navbar contents on mobile devices.
• For improved accessibiliy, spinners now slow down when prefers-reduced-motion is enabled.
• v4.x docs are now built on Hugo for easier maintenance and backports from v5.x.
• Darkened background-color of .dropdown-item for improved hover state contrast, and ligthened the disabled .dropdown-item color.
• Improved alignment of form validation tooltips.
• File inputs no longer extend beyond their containers.

CSS

• #31557: Fix form validation tooltip alignment
• #31657: Handle the Ubuntu sans-serif case
• #31700: Suppress flexbox side effects in breadcrumb
• #31882: Slow down spinners when prefers-reduced-motion
• #31886: Fixed: Undefined mixin "deprecate" when importing "bootstrap-grid-scss"
• #32141: Use correct value order
• #32145: Avoid invisible real file input "spilling" out of container
• #32160: Add overflow suppression to custom file label
• #32211: Move negative margin-bottom from .nav-item to .nav-link
• #32212: Remove needless Stylelint disables
• #32833: Add .navbar-nav-scroll for vertical scrolling of navbar content
• Add two new variables for pagination border-radius values; backport of #32423
• Remove old/unnecessary reboot bug fix; backport of #32631
• Suppress focus outline for buttons when it shouldn't be visible in Chromium; backport of #32689
• Consistently use outline:0 rather than outline:none; backport of #32751
• Darken dropdown item hover style; backport of #32754
• Lighten disabled dropdown text to $gray-500

JS

• #31820: Check for data-interval on the first slide of carousel
• #31834/#32225: tooltip/popover: add a customClass option
• #32001: Move js/src/index.js one folder up
• #32045: tests: fix sanitizer test
• #32220: Don't hide modal when config.keyboard is false
• #32312: build-plugins: switch to "bundled" for babel helpers

Docs

• #31861: Split up dropdown sizing docs to improve rendering
• #31892: Remove redundant visually hidden "(current)" from pagination controls
• #31893: manifest.json: Switch to relative URLs so that we don't need to change the path with every major/minor release
• #31898: switch to suggesting jsDelivr as a CDN
• #31904:
  • docs(forms): use a legend for fieldset instead of aria-label
  • docs(forms): fix incorrect legend nesting in fieldset
• #31936: forms: change inline custom radio name

... (truncated)

Commits

• 6ffb0b4 Release v4.6.0. (#32726)
• 9d87bd7 Backport #32037 (#32833)
• 9c4abcc Backport #32759 (#32832)
• d2477ab Backport #32760 (#32827)
• ee282af Docs: Sass implementation and rounding precision (#32791)
• 87e42ce Lighten disabled dropdown text to $gray-500
• 5a17956 Backport #32469 and #32799
• 05a108b Document some basic code conventions for us (#32778)
• ec1d745 CI: change Node.js to 14 (#32796)
• d674c33 Backport #32795 (#32809)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)