Issue #3328456 by xjm, dimitriskr, murilohp, smustgrave: Replace substr($a, 0, $i) with str_starts_with()

Issue #3305807 by andypost, ChrisPerko, mediabounds, xjm, sorlov, Rishabh Vishwakarma, ilya.no, asad_ahmed, paulocs, Michelle, _pratik_, reenaraghavan, DanChadwick, smustgrave, larowlan, allisonherodevs: Password is null if user has never logged in which causes PHP 8 warning

Issue #1845004 by znerol, claudiu.cristea, Spokje, neclimdul, VladimirAus, slasher13, tvb, pwolanin, NivethaSubramaniyan, pradhumanjainOSL, Ratan Priya, longwave, catch, Crell, andypost, xjm, dawehner, voleger, alexpott, Berdir, klausi, DamienMcKenna, mfb, borisson_, Jalandhar, mohit1604, mcdruid: Replace custom password hashing library with PHP password_hash()

Issue #3296293 by andypost, amjad1233, mfb, smustgrave, _utsavsharma, jordanpagewhite, longwave, geek-merlin: Apply SensitiveParameter attribute

Issue #3268818 by ravi.shankar, quietone: Fix class comment doc blocks in non tests 'Drupal.Commenting.DocComment.ShortSingleLine'

Issue #3268829 by quietone, bbrala: Fix class property comments for Drupal.Commenting.DocComment.ShortSingleLine

Issue #3210129 by quietone, murilohp, xjm: Fix spelling for words used once, beginning with 'a' -> 'd', inclusive

Issue #3153085 by kim.pepper, longwave, alexpott, vijaycs85, catch: Deprecate user_password and move to Password Generator service

Issue #2824935 by idebr, mfernea, Deepak Goyal, pfrenssen, longwave, hgunicamp, jofitz, andypost, daffie: Fix Squiz.ControlStructures.SwitchDeclaration coding standard

Issue #2924781 by osman, yogeshmpawar, zaporylie, mfernea: Missing @var annotation for scalars that do not provide default values

Issue #3053956 by alexpott, neeravbm, aleevas, voleger, Berdir: Deprecate \Drupal\Component\Utility\Crypt::hashEquals() in favour of PHP's builtin hash_equals()

Issue #3054311 by alexpott: Deprecate \Drupal\Component\Utility\Crypt::randomBytes() in favour of PHP's builtin random_bytes()

Issue #3053363 by alexpott, Wim Leers, Berdir, mondrake, xjm: Remove support for PHP 5 in Drupal 8.8

Issue #2854529 by alexpott, xjm, klausi, Chi, Mixologic: Fix Drupal.Scope.MethodScope - all methods should have scopes

Issue #2706753 by Mile23: Fix 'PSR2.Classes.PropertyDeclaration.ScopeMissing/VarUsed' coding standard

Issue #2665992 by alexpott, klausi, heykarthikwithu, xjm, tstoeckler: @file is not required for classes, interfaces and traits

Issue #2400197 by pwolanin, fgm, znerol, neclimdul, mpdonadio, thekevinday, Fabianx: Harden the security where hash values are compared

Issue #2511806 by claudiu.cristea, sumitmadan, znerol, neetu morwani, jhodgdon: Fix documentation in password hashing class

Issue #2503083 by pwolanin, neclimdul: Simplify PasswordInterface so it's not coupled to UserInterface

Issue #1317628 by Albert Volkman, Gaelan, disasm, mjonesdinero, xjm: Clean up for API docs in include files starting with n-z