Revert punycode to 1.4.x which supports pre ES6 format

* Include missing changelog for #20284

* Update CHANGELOG.md

add CSRF validation by custom HTTP header

* reset useCookie value
see also yiisoft/yii2-docker#174

* removed empty line

…_handler()`

… useCookie is false

Support BackedEnum attribute typecast behaviour.

… value of `error_get_last()` can be `null` #17365

…non-null value #20294

Fix "Trying to access array offset on null" warning

…ame.

…/Psalm annotations for `yii\db\SqlTokenizer::startsWithAnyLongest()`

…tan/Psalm annotations for `$modelClass` in `ActiveQuery`, `ActiveQueryTrait` and `ActiveRelationTrait`

…eryBuilderTest` class. (#20635)

…down::renderParagraph()`

…0644)

…spaces. Fix PHPDoc annotations in `ArrayAccessTrait`

…notations in `yii\db\ArrayExpression`

…yml`. (#20649)

…not supported and raise code coverage. (#20652)

…pareValue property closure

… driver. (#20659)

…i\caching` and `yii\behaviors` namespaces

…controllers\ReleaseController` class. (#20665)

…Lite. (#20653)

…r `withConsecutive` deprecated method. (#20646)

…ilters` and `yii\web` namespaces