[josbeir]

Form labels, help, choices, summaries, embeds, and action captions now accept CakePHP's HtmlStringable contract. Templates use HtmlString::render() to escape ordinary strings and preserve explicitly trusted content; examples and tests use the html() factory to create trusted markup.

Updates the locked CakePHP 6.x build to include cakephp/cakephp#19731 and removes FormCompose\Rendering\Html. Documentation describes the native API. Regression tests exercise application-defined HtmlStringable content through public form APIs and verify attributes and input values remain escaped.

Validation:

• composer validate --strict
• composer check: 820 tests, 3,303 assertions; analysis, lint, Rector, and format checks pass
• composer test-coverage with Xdebug: 100% source line coverage (2,517/2,517); greater-than-90% gate passes
• npm ci and npm run docs:build (rerun after documentation cleanup)
• git diff --check

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (c23f6d2) to head (1529d5a).

Additional details and impacted files

@@             Coverage Diff             @@
##                main       #47   +/-   ##
===========================================
  Coverage     100.00%   100.00%           
+ Complexity      1090      1087    -3     
===========================================
  Files            120       119    -1     
  Lines           2942      2942           
===========================================
  Hits            2942      2942           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.