fix(security): add csrf filter + prevent xss attacks by escaping user input

- update CI4 to v4.1.9's stable production package
- update php and js dependencies to latest

app/Views/Components/DropdownMenu.php

@@ -11,6 +11,8 @@ class DropdownMenu extends Component
 {
     public string $id = '';
 
+    public string $labelledby;
+
     public string $placement = 'bottom-end';
 
     public string $offsetX = '0';