Issue #1934568 by David_Rothstein, StryKaizer, borisson_, martin107, pwolanin, ofry, amitgoyal: Allow sites using the 'image_allow_insecure_derivatives' variable to have partial protection from the Drupal 7.20 security issue

Issue #1364670 by mondrake, mrfelton, dinarcon, das-peter, zuuperman, er.pushpinderrana, cchanana, drupaldrop, fietserwin: ImageStyle::transformDimensions unable to deal with all effects

Issue #2392559 by mondrake, mitrpaka, JeroenT, rpayanm, adci_contributor, ianthomas_uk: Remove all uses of file_stream_wrapper_get_* and file_get_stream_wrappers

Issue #2512718 by Berdir, pfrenssen, Wim Leers, Fabianx, dawehner, catch, effulgentsia, plach, Gábor Hojtsy: EntityManager::getTranslationFromContext() should add the content language cache context to the entity

Issue #2432791 by alexpott, vijaycs85, tim.plunkett, joshtaylor, Fabianx, Berdir, yched, bojanz: Skip Config::save schema validation of config data for trusted data.

Issue #2364157 by mpdonadio, dawehner, martin107, Berdir, pcambra, naveenvalecha, tim.plunkett: Replace most existing _url calls with Url objects

Issue #2281645 by dawehner, andypost: Make entity annotations use link templates instead of route names

Issue #2384535 by rpayanm, fernando_calsa, areke, Sharique: Make the class variables protected for ImageStyle

Issue #2246647 by mpdonadio, cilefen, YesCT, tim.plunkett: Rename PluginBag to LazyPluginCollection.

Issue #2028109 by tim.plunkett, almaudoh, twistor, larowlan, slashrsm, Berdir, Arla, neclimdul, Cottser: Convert hook_stream_wrappers() to tagged services.

Issue #2330899 by attiks, Jelle_S, fietserwin: Allow image effects to change the MIME type + extension, add a convert image effect.

Issue #2343661 by larowlan, tim.plunkett | xjm: Rename l() to _l() and url() to _url(), and document replacements.

Issue #2312093 by alexpott, yched, andypost, swentel | xjm: Rename FieldInstanceConfig to FieldConfig.

Issue #1976158 by Berdir | msonnabaum: Rename entity storage/list/form/render "controllers" to handlers.

Issue #2272481 by herom, ParisLiakos, tim.plunkett: Remove usages of watchdog() from forms, plugins and controllers.

Issue #2256679 by alexpott, tim.plunkett: Fixed Use config schema to determine which config entity properties to export regardless of whether they are public or protected.

Issue #2211227 by mondrake, xjm | fietserwin: Refactor image and imagetoolkit: isExisting, isSupported, supportedTypes, getMimeType.

Issue #2251223 by tim.plunkett: ConfigurableImageEffectInterface should use ConfigurablePluginInterface and PluginFormInterface.

Issue #2267329 by tim.plunkett | joachim: Move EntityWithPluginBagInterface out of Drupal\Core\Config\Entity and make it useful for more than one bag.

Issue #2204159 by Wim Leers, longwave, tim.plunkett: (Responsive) Image styles do not add correct cache tags, nor do they invalidate cache tags upon flushing.

Issue #2124535 by Berdir, alexpott, Désiré, xjm | yched: Prevent secondary configuration creates and deletes from breaking the ConfigImporter.

Issue #2120871 by andypost, Berdir, amateescu, vladan.me, Xano: Rename EntityListController to EntityListBuilder.

Issue #2103621 by mondrake | fietserwin: Move GD logic from ImageInterface to toolkit, tie toolkit instance to Image instance, toolkits should no longer be instantiated separately.