Issue #3054821 by mr.baileys, wiifm, sime, angrytoast, pobster, smustgrave, RichardGaunt, alexpott, Wim Leers, quietone, Berdir, neclimdul, acbramley: Include Cache-Control header on 301 redirects

Issue #3103962 by godotislate, smustgrave, alexpott, larowlan: ConfigInstaller::isSyncing() is not reset before module preinstall

Issue #3394870 by longwave, smustgrave, alexpott: Allow controller service wiring via constructor parameter attributes

Issue #3295790 by bradjones1, mstrelan, rpayanm, catch, alexpott, acbramley, longwave, kim.pepper, mfb: Post-response task running (destructable services) are actually blocking; add test coverage and warn for common misconfiguration

Issue #2944089 by msankhala, smustgrave, lauriii, Ada Hernandez, TanujJain-TJ, mrinalini9, Abhisheksingh27, alexpott, longwave: Test Drupal.behaviors.copyFieldValue javascript

Issue #2701085 by michaellander, george.karaivanov, Evaldas Užkuras, raman.b, S3b0uN3t, geek-merlin: Cacheable  Ajax response

Issue #3268932 by danflanagan8, mondrake, dww, xjm, longwave, alexpott, larowlan: Add methods to assert status messages to WebAssert

Issue #2571235 by alexpott, claudiu.cristea, dawehner, Wim Leers, gabesullice, IJsbrandy, benjifisher, alisonjo315, larowlan, Berdir, effulgentsia, longwave, herom, dmouse, heddn, catch: [regression] Roles should depend on objects that are building the granted permissions

Issue #2778917 by kiamlaluno, jungle, elaman, dawehner, alexpott, tvb, vadim.hirbu, ravi.shankar, quietone: Use the second parameter of \Drupal::state()->get() instead of checking the method didn't return any value

Issue #3105701 by tedbow, xjm, Gábor Hojtsy, Krzysztof Domański, dww, Wim Leers, jungle: Do not allow core: 9.x in info.yml files

Issue #2928994 by Berdir, alexpott, JeroenT, markcarver: Remove \Drupal\Core\Messenger\LegacyMessenger

SA-CORE-2019-009 by mcdruid, larowlan, Heine, alexpott, xjm, DamienMcKenna, dsnopek, catch, greggles

(cherry picked from commit 7ae15f9c)

Issue #3072702 by alexpott, Wim Leers, mikelutz, xjm, catch, Berdir, tedbow, webchick, shaal, Mixologic, heddn: Core extensions should not need to specify the new core_version_requirement in *.info.yml files so that 9.0.x can be installed

Issue #2313917 by tedbow, pwolanin, jhedstrom, Wim Leers, Mixologic, larowlan, Mile23, Gábor Hojtsy, xjm, Berdir: Core version key in module's .info.yml doesn't respect core semantic versioning

Issue #2966327 by alexpott, mcdruid, dww, dsnopek, catch, pwolanin, larowlan, tim.plunkett, Berdir, Sam152: Limit what can be called by a callback in render arrays to reduce the risk of RCE

Issue #2829185 by vaplas, Jo Fitzgerald, anmolgoyal74, chipway, gaurav.kapoor, mark_fullmer, amit.drupal, cilefen, longwave, xjm, wturrell, anavarre: Fix spelling errors in Drupal core comments

Issue #2971145 by voleger: Fix naming of tests referencing the refactored drupal_set_message() function

Issue #2935256 by Jo Fitzgerald, voleger, kim.pepper, ibustos, Yogesh Pawar, catch, jibran: Remove all usages of drupal_get_message and drupal_set_message in modules

Issue #2760167 by kim.pepper, markcarver, jibran, dawehner, znerol, Wim Leers, larowlan, xjm, tim.plunkett: Add \Drupal\Core\Messenger\Messenger

Issue #2573807 by 20th, Sam152, msgph, sherakama, heikki, jcnventura, Wim Leers: Fatal error: Call to a member function getTimestamp()

Issue #2776975 by joelpittet, dawehner, tim.plunkett, xjm, pfrenssen: March 3, 2017: Convert core to array syntax coding standards for Drupal 8.3.x RC phase

Issue #2075889 by pwolanin, kgoel, alexpott, catch, mpdonadio, YesCT, himanshu-dixit, dawehner, xjm, johnshortess, Crell, jhodgdon, Wim Leers, mradcliffe, attiks, tstoeckler, webchick: Make Drupal handle incoming paths in a case-insensitive fashion for routing

Revert "Issue #2075889 by pwolanin, kgoel, catch, mpdonadio, YesCT, dawehner, alexpott, johnshortess, Crell, Wim Leers, jhodgdon, mradcliffe, xjm, attiks, tstoeckler, webchick: Make Drupal handle incoming paths in a case-insensitive fashion for routing"

This reverts commit 77a2431e.

Issue #2075889 by pwolanin, kgoel, catch, mpdonadio, YesCT, dawehner, alexpott, johnshortess, Crell, Wim Leers, jhodgdon, mradcliffe, xjm, attiks, tstoeckler, webchick: Make Drupal handle incoming paths in a case-insensitive fashion for routing

Issue #2803779 by pfrenssen, klausi, Mile23, alexpott, dawehner: Update Coder to 8.2.10 and fix errors from improved sniffs

Issue #2716661 by anoopjohn: Fix 'Drupal.Commenting.FunctionComment' coding standard - Issues related to @see references

Issue #2719695 by alexpott, Mile23: Fix 'Drupal.Classes.ClassDeclaration.CloseBraceAfterBody' coding standard

Issue #2572601 by attiks, alexpott, tatarbj: Fix 'Drupal.Classes.ClassCreateInstance' coding standard

Issue #2665992 by alexpott, klausi, heykarthikwithu, xjm, tstoeckler: @file is not required for classes, interfaces and traits

Issue #2678674 by Wim Leers, benjy, mr.baileys, dawehner, xjm, mlhess: Access bypass to unpublished custom error pages

Issue #2572643 by alexpott, attiks, Jelle_S, jhodgdon: Fix Drupal.Commenting.FileComment coding standard

Issue #2351919 by almaudoh, Wim Leers, claudiu.cristea: Replace uses of drupal_get_path() with __DIR__  or Extension::getPath() where possible