Release 2.26 (#5189)

* bring back deprecated methods
* bump packages
* fix SAML redirect
* config flag for break times
* use class constant instead of string in attributes
* throw if all tags were not found - fixes #4792

tests/API/APIControllerBaseTest.php

@@ -188,6 +188,14 @@ abstract class APIControllerBaseTest extends ControllerBaseTest
         ]);
     }
 
+    protected function assertBadRequestResponse(Response $response): void
+    {
+        $this->assertApiException($response, [
+            'code' => Response::HTTP_BAD_REQUEST,
+            'message' => 'Bad Request'
+        ]);
+    }
+
     protected function assertApiAccessDenied(HttpKernelBrowser $client, string $url, string $message = 'Forbidden'): void
     {
         $this->request($client, $url);