Issue #144538 by acbramley, tuutti, Damien Tournoud, alexpott, solideogloria, Xano, TwoD, damiankloip, smustgrave, pameeela, deviantintegral, L_VanDamme, daften, karishmaamin, g.oechsler, larowlan, klausi, sun, Fabianx, andypost, dawehner, kwinters, greggles, Wim Leers, grendzy, pwolanin, alexanderpas, drumm, Chi: User logout is vulnerable to CSRF

Issue #1561214 by mfb, sun, fietserwin, drzraf, sdrycroft, nicxvan: Bootstrap sets C locale, but does not set UTF-8 character encoding

Issue #1170362 by alexpott, catch, pillarsdotnet, sun, jofitz, geerlingguy, steinmb, tresti88, DamienMcKenna, dpovshed, imclean, bradjones1, mErilainen, David_Rothstein, KarenS, BTMash, rickmanelius, Anonymous, smustgrave, Wim Leers, kreynen, webchick, websiteworkspace, phenaproxima, Kiphaas7, bbrala: Install profile is disabled for lots of different reasons and core doesn't allow for that

Issue #839444 by mkalkbrenner, andypost, gnunes, hchonov, voleger, claudiu.cristea, keichee, gease, kfritsche, wells, sokru, tstoeckler, quietone, ravi.shankar, Damien Tournoud, Berdir, Fabianx, catch, Wim Leers, larowlan, kristiaanvandeneynde, twistor, daffie, alexpott, sun: Make serializer customizable for Cache\DatabaseBackend

Issue #3416697 by longwave, Spokje, sun, larowlan: Remove install container definitions of FileSystem and StreamWrapperManager

Issue #2254189 by smustgrave, quietone, anya_m, andregp, sun, joachim: Fix test performance of Drupal\node\Tests\NodeTranslationUITest

Issue #2254209 by smustgrave, marvil07, quietone, sun, catch, Wim Leers: Fix test performance of Drupal\system\Tests\Cache\PageCacheTagsIntegrationTest

Issue #2254199 by smustgrave, sun, vacho, quietone, marvil07: Fix test performance of Drupal\system\Tests\Menu\BreadcrumbTest

Issue #3376563 by catch, alexpott, Spokje, Lendude, lauriii, longwave, Berdir: Random test fail in Drupal\Tests\Component\Utility\RandomTest::testRandomMachineNamesUniqueness

Issue #296693 by tedbow, omkar.podey, sun, ilya.no, JeroenT, tim.plunkett, catch, hooroomoo, ridhimaabrol24, boombatower, paulocs, Damien Tournoud, Xano, pwolanin, chx, webchick, stella, quietone, Bojhan, smustgrave, lauriii, benjifisher, gabesullice: Restrict access to empty top level administration pages

Issue #2866383 by sunlix, SAVEL, Nitin shrivastava, narendra.rajwar27, luizps, DieterHolvoet, Nikhil_110, Oscaner, rp7, Abhisheksingh27, smustgrave, dww: Readonly doesn't work on #States

Issue #1540390 by smustgrave, cosmicdreams, sun, alexpott, Chi, Mile23, dawehner, RobLoach, cweagans, David_Rothstein, webchick, borisson_, Unitoch: Deprecate the drupal.sh script

Issue #2254175 by smustgrave, pooja saraah, larowlan, sun: Fix test performance of Drupal\comment\Tests\CommentPreviewTest

Issue #2965929 by jhedstrom, dimitriskr, kkalashnikov, sun, Lendude, DanielVeza: DX: Insufficient error message "The form argument is not a valid form."

Issue #3308915 by smustgrave, longwave: Fix test performance of Drupal\Tests\workspaces\Functional\WorkspacesUninstallTest

Issue #2258313 by Wim Leers, nod_, ravi.shankar, lauriii, catch, mfb, longwave, corbacho, alexpott, sun, Owen Barton, tstoeckler: Add license information to aggregated assets

Issue #1014086 by catch, nod_, martin107, quietone, dww, mariacha1, Spokje, yogeshmpawar, pounard, Wim Leers, mfer, mikeytown2, mbutcher, moshe weitzman, Fabianx, borisson_, alexpott, donquixote, sun, andypost, dawehner: Stampedes and cold cache performance issues with css/js aggregation

Issue #1645328 by Liam Morland, darvanen, shravan sonkar, andregp, mandar.harkare, jhedstrom, sun: Add test to ensure fieldset allows any non-empty-string #title

Issue #3254245 by kim.pepper, Jeya sundhar, mrweiner, bakulahluwalia, Berdir, catch, newaytech, Summit: TypeError: Argument 1 passed to Drupal\Core\File\FileUrlGenerator::generateString() must be of the type string, null given

Issue #1810148 by Matroskeen, tanc, ravi.shankar, AaronBauman, VladimirAus, jmickela, edurenye, hugronaphor, erikwebb, dawehner, Lendude, tim.plunkett, drupalninja, mohit_aghera, youfei.sun, Nick Hope, seanmrafferty, pyrello, interdruper, attisan, EclipseGc, Blanca.Esqueda: Grouped exposed taxonomy term filters do not work

Issue #990218 by Lendude, sun, tim.plunkett, mr.baileys, joachim: Machine name field throws notices if before source field

Issue #838992 by alexpott, Charlie ChX Negyesi, daffie, Damien Tournoud, sun, quietone, longwave: Change the uid field from integer to serial by leveraging NO_AUTO_VALUE_ON_ZERO on MySQL

Issue #2946 by chx, michaellenahan, jcnventura, quietone, ifrik, wengerk, AaronBauman, salvis, pplantinga, sun, David_Rothstein, tatarbj, alexpott, Wim Leers, iMiksu, vijaycs85, anoopjohn, nedjo, Owen Barton, bjaspan, soxofaan, Gogowitsch, raman.b, robeano, deepakrmklm, bleen, xmacinfo, catch, beginner, dww, Gábor Hojtsy, webchick, Dries, larowlan, snufkin, RobRoy, bdragon, wizonesolutions, Lendude, sokru: Login fails and no warning is issued if cookies are not enabled

Issue #3210898 by quietone, BhumikaVarshney: Combine tests using NormalizerDenormalizeExceptionsUnitTestBase

Issue #2160091 by alexpott, dawehner, damiankloip, swentel, sun, moshe weitzman, xjm, joelpittet, charginghawk: drupal_rebuild() rebuilds container twice, since drupal_flush_all_caches() also rebuilds it

Issue #3038234 by Lendude, Gábor Hojtsy, alexpott, xjm, naveenvalecha, zviryatko, Dinesh18, catch, hchonov, cspitzlay, ziomizar, impalash, navneet0693, phenaproxima, snetcher, yogeshmpawar, pasan.gamage, longwave, tstoeckler, Meenakshi.g, Abhijith S, Utkarsh_Mishra, Spokje, shashikant_chauhan, nginex, mglaman, zaporylie, RytoEX, justinlevi, joachim, mondrake, vijaycs85, Mile23, andypost, borisson_, larowlan, GoZ, jofitz, michielnugter, jibran, Wim Leers, ApacheEx, dawehner, martin107, nlisgo, Berdir, Mixologic, Tessa Bakker, boaloysius, scuba_fly, mpdonadio, Manuel Garcia, claudiu.cristea, dagmar, klausi, jonathan1055, anmolgoyal74, jhodgdon, Antonnavi, IRuslan, Mac_Weber, blazey, Ujin, tanmayk, nuez, hswong3i, jmuzz, legovaer, mkalkbrenner, lomasr, marcoscano, maxocub, DuneBL, cilefen, droplet, himanshu-dixit, esoteric1, zahord, wengerk, mohit1604, quietone, sun, tar_inet, tameeshb, gaurav.kapoor, dan2k3k4, Krzysztof Domański, jhedstrom, msankhala, roderik, pritish.kumar, Hardik_Patel_12, sulfikar_s, kostyashupenko, mherchel, nnevill, scott_euser, proeung, saurabh.tripathi.cs, MerryHamster, tim.plunkett, voleger, Pavan B S, brentgees, bircher, markdorison, m1r1k, babruix, NickDickinsonWilde, bapi_22, ceardach, eli-on-drupal, dcam: The PHPUnit Initiative is complete!

Issue #315176 by Dave Reid, andypost, franz, sun, Alan D.: Clean-up remains of $form['array_filter'] hack with array_filter in book module

Issue #3143316 by Lendude, sunset_bill, daffie, xjm, facine: "Getting the base fields is not supported for entity type" exception in ViewsConfigUpdater

Issue #2983395 by mcdruid, narendra.rajwar27, andypost, yogeshmpawar, vijaycs85, prabha1997, swatichouhan012, amjad1233, SunnyGambino, larowlan, borisson_, anavarre, kim.pepper, alexpott: user module's flood controls should do better logging

Issue #474684 by bnjmnm, dawehner, tedbow, pfrenssen, JohnAlbin, ademarco, kalpaitch, vdacosta@voidtek.com, rensingh99, markcarver, jungle, jhedstrom, RobLoach, almaudoh, kevineinarsson, shaal, dpagini, thedavidmeister, sreynen, Snugug, Miguel.kode, kamkejj, alexpott, Pol, sun, Wim Leers, lauriii, tim.plunkett, eaton: Allow themes to declare dependencies on modules

Issue #3106280 by Hardik_Patel_12, longwave: Variable $modules is undefined in ModulesUninstallForm.php

Issue #1681832 by mcdruid, k_zoltan, dougvann, ZenDoodles, Cyberschorsch, kim.pepper, mohit1604, drumm, pdenooijer, eshta, mihai_brb, phiit, grwgreg, larowlan, amateescu, David_Rothstein, klausi, Damien Tournoud, coltrane, sun, aiypz, alippai: Password reset form has no flood protection

Issue #323110 by gpk, BarisW, MrHaroldA, Pancho, webflo, sun: Remove the open_basedir requirement check

Issue #2244513 by kim.pepper, phenaproxima, 20th, andrei.dincu, beejeebus, Berdir, alexpott, jibran, andypost, larowlan, Chadwick Wood, acbramley, Wim Leers, sun, xjm, YesCT, chx, tim.plunkett: Move the unmanaged file APIs to the file_system service (file.inc)

Revert "Issue #2244513 by kim.pepper, phenaproxima, 20th, andrei.dincu, beejeebus, Berdir, jibran, alexpott, andypost, larowlan, Chadwick Wood, Wim Leers, acbramley, YesCT, sun, tim.plunkett, chx: Move the unmanaged file APIs to the file_system service (file.inc)"

This reverts commit 56be1a03.

Issue #2244513 by kim.pepper, phenaproxima, 20th, andrei.dincu, beejeebus, Berdir, jibran, alexpott, andypost, larowlan, Chadwick Wood, Wim Leers, acbramley, YesCT, sun, tim.plunkett, chx: Move the unmanaged file APIs to the file_system service (file.inc)

Issue #1252606 by rlhawk, dsnopek, attiks, alansaviolobo, MariaDenysyuk, j0rd, sushyl, Adysone, Alan Evans, mondrake, andypost, alexpott, sun, tstoeckler: Add crop anchor option to Scale and Crop image effect

Issue #2862422 by chr.fritsch, robpowell, phenaproxima, webflo, bdimaggio, seanB, naveenvalecha, sunset_bill, vijaycs85, yoroy, starshaped, xjm, Berdir, hazong: Add per-media type creation permissions for media

Issue #2613924 by heykarthikwithu, oknate, Mac_Weber, pguillard, attiks, aerozeppelin, claudiu.cristea, Prasun, alozie, lokapujya, Wim Leers: Link text isn't marked as required