Issue #2293697 by Wim Leers, dawehner, Jo Fitzgerald, clemens.tolboom, vedpareek, tedbow, Munavijayalakshmi, hchonov, alexpott, effulgentsia, tstoeckler, Crell, klausi, EclipseGc: EntityResource POST routes all use the confusing default: use entity types' https://www.drupal.org/link-relations/create link template if available

Issue #2688945 by tduong, amateescu, timmillwood, alexpott, joachim, xjm, yoroy, ifrik, Berdir, Gábor Hojtsy, Bojhan, webchick, cilefen, dawehner: Allow removing a module's content entities prior to module uninstallation

This reverts commit 6418a1c5.

Issue #2753681 by tedbow, Wim Leers, dawehner, neclimdul, catch: Move CSRF header token out of REST module so that user module can use it, as well as any contrib module

Issue #2701851 by amateescu, animaci: The 'system.db_update' route should restrict access via the 'access_check.db_update' service

Issue #2578995 by pguillard, jhodgdon, r_sharma08, ifrik, snehi, Manjit.Singh, himanshugautam, yoroy, xjm: Update the link descriptions on the Configuration page for the system module

Issue #2679547 by Wim Leers: Fix random fail in ConfigImportAllTest caused by ModuleInstaller not rebuilding routes immediately, which happens to be surfaced by BigPipe

Issue #2616164 by agoradesign, swentel, facine, dawehner: /update.php/run URL is generated with language prefix and returns 404 error

Issue #2528178 by dawehner, amateescu, larowlan, tim.plunkett, jibran, catch, jhodgdon, effulgentsia, Berdir: Provide an upgrade path for blocks context IDs #2354889 (context manager)

Issue #2351015 by plach, effulgentsia, Wim Leers, dawehner, martin107, damiankloip, cilefen, Fabianx, catch, pwolanin, Damien Tournoud, znerol, YesCT, larowlan: URL generation does not bubble cache contexts

Issue #2502785 by dawehner, effulgentsia, tim.plunkett, amateescu, Fabianx, Wim Leers, catch, dsnopek, EclipseGc, yched, Berdir, larowlan, mondrake, olli: Remove support for $form_state->setCached() for GET requests

Issue #2490420 by amateescu, larowlan, Berdir, dpi: EntityAutocomplete element settings allows sql injection and for arbitrary user-supplied data to be passed into unserialize()

Issue #2461087 by Wim Leers, dawehner: Add 'no_cache' route option to mark a route's responses as uncacheable (was: Cron run response should not be cacheable)

Issue #2418017 by Wim Leers, YesCT, dawehner, webchick, jibran, amateescu, hussainweb: Implement autocomplete UI for the link widget

Issue #1959806 by amateescu, jibran, goldorak, Wim Leers, yched, dawehner: Provide a generic 'entity_autocomplete' Form API element

Issue #2362517 by Wim Leers: Improve default 403/404 exception HTML subscriber: don't duplicate the page render pipeline, use the routing system — add system.403 and system.404 routes.

Issue #2340251 by iMiksu, alexpott, tim.plunkett, dawehner, Wim Leers: Remove most remaining url() calls.

Issue #2316203 by olli, tim.plunkett | Charles Belov: Fixed Permission "Use the administration pages and help" grants permission to configure Image Toolkit.

Issue #2301317 by pwolanin, dawehner, Wim Leers, effulgentsia, YesCT, xjm, alexpott: MenuLinkNG part4: Conversion.

Revert "Issue #2301317 by pwolanin, effulgentsia, Wim Leers, dawehner, alexpott: MenuLinkNG part4: Conversion."

This reverts commit fd2db9cd.

Issue #2301317 by pwolanin, effulgentsia, Wim Leers, dawehner, alexpott: MenuLinkNG part4: Conversion.