check with Object::canSetProperty()

fixes #4305, close #4211

how did that manage to pass before...?

Array attribute relations

* master:
  Update output-data-widgets.md
  Fixes #4370: fileinfo extension is required for FileValidator.
  Fixes #4342
  Fixes #3887
  minor refactoring of FileValidator.
  Doc translate for rest-resources
  Better fix for Dropdown container options
  #4388: CORS filter fixes:
  Fixed test break.
  #4310: Removed `$data` from signature of `yii\rbac\ManagerInterface`
  Update .travis.yml
  Update ActiveRecordInterface.php
  Fixes #4384.
  Sphinx distributed indexes support provided
  typo fix [skip ci]
  Fixes #3611: Refactored query caching.

fixed broken code block

4342 mssql driver updates

Doc translate for rest-resources

Better fix for Dropdown container options

Better fix for #3443 that does not break BC and allows widget to be extensible.

- Upgrade the documentation to match filter code
- Fix bad default behavior with Access-Control-Allow-Credentials
- Fix missing "s" in header Access-Control-Request-Method / Access-Control-Allow-Methods

temporarily skip app tests as they seem to be broken somehow

fixes #3026

fixes #1249

fixes #4105, close #4376

`yii\web\Request::cookieValidationKey` is now automatically generated by the installation script for the basic and advanced application templates

Russian translation - semantic fix [skip_ci]

fixes #4276, close #4358