Don't marshall non-array data.

Non array data will never turn into entities, so we can skip it.

Refs #6271

src/ORM/Marshaller.php

@@ -531,6 +531,9 @@ public function mergeMany($entities, array $data, array $options = [])
         }
 
         foreach ((new Collection($indexed))->append($new) as $value) {
+            if (!is_array($value)) {
+                continue;
+            }
             $output[] = $this->one($value, $options);
         }
 

tests/TestCase/ORM/MarshallerTest.php

@@ -1512,6 +1512,32 @@ public function testMergeManySimple()
         $this->assertFalse($result[1]->dirty('user_id'));
     }
 
+    /**
+     * Test mergeMany() with some invalid data
+     *
+     * @return void
+     */
+    public function testMergeManyInvalidData()
+    {
+        $entities = [
+            new OpenEntity(['id' => 1, 'comment' => 'First post', 'user_id' => 2]),
+            new OpenEntity(['id' => 2, 'comment' => 'Second post', 'user_id' => 2])
+        ];
+        $entities[0]->clean();
+        $entities[1]->clean();
+
+        $data = [
+            ['id' => 2, 'comment' => 'Changed 2', 'user_id' => 2],
+            ['id' => 1, 'comment' => 'Changed 1', 'user_id' => 1],
+            '_csrfToken' => 'abc123',
+        ];
+        $marshall = new Marshaller($this->comments);
+        $result = $marshall->mergeMany($entities, $data);
+
+        $this->assertSame($entities[0], $result[0]);
+        $this->assertSame($entities[1], $result[1]);
+    }
+
     /**
      * Tests that only records found in the data array are returned, those that cannot
      * be matched are discarded