Issue #3431203 by kim.pepper, alexpott, smustgrave, longwave: Deprecate user_validate_name() and replace with service

Issue #3181647 by ultimike, guiu.rocafort.ferrer, tobiasb, ilgnerfagundes, prudloff, jurgenhaas, guzmanb, maxime.rffd, hexaki, samuel_orhan, rauch, guiu.rocafort.ferrer, mullzk, binnythomas: Add autocomplete attributes on login form and password reset form

Issue #3193759 by Bhanu951, _pratik_, lhridley, baliram.patil, mrconnerton, ameymudras, xjm, mfb, longwave, zviryatko, anmolgoyal74: Demote user log entries from "notice" to "info"

Issue #3261248 by paulocs, andregp, andypost, longwave, quietone: Remove deprecated user.module functions

Issue #1521996 by quietone, dww, Sophie.SK, Carsten Müller, Spokje, kim.pepper, izus, mjpa, ashu1629, AlanHDev, mangy.fox, Vivek Panicker, robpowell, jozzy_a, tar_inet, ravi.shankar, sokru, zuhair_ak, cjgratacos, aerozeppelin, darrenwh, lomasr, luismagr, mohit1604, ronald.garcia, matteodem, webchuck, gordon, nginex, jain_deepak, Aunion, ankitgarg, Elendev, Kristen Pol, alexpott, YesCT, dpi, no2e, larowlan, longwave, markpavlitski, acbramley, C_Logemann, cilefen, claudiu.cristea, penyaskito, David_Rothstein, Leeteq, anagp, jlbellido, pdrake, klausi: Password reset form reveals whether an email or username is in use

Issue #2409657 by anushrikumari, StevenPatz, MsG, manauwarsheikh, ressa, roderik, quietone, xjm, Bojhan: Login screen after requesting new password is irrelevant

Issue #86287 by g-brodiei, brianV, drupal_was_my_past, ravi.shankar, krlucas, wengerk, svendecabooter, chmez, paulocs, alexpott, rohit-rajput-sahab, jonathanshaw, salvis, alienzed, joachim, Dries, webchick, catch, Gábor Hojtsy, quietone: Password reset process ignores the user's language preference

Issue #3097445 by andypost, Berdir: Remove all @deprecated code in the User module except user:name token

Issue #1681832 by mcdruid, k_zoltan, dougvann, ZenDoodles, Cyberschorsch, kim.pepper, mohit1604, drumm, pdenooijer, eshta, mihai_brb, phiit, grwgreg, larowlan, amateescu, David_Rothstein, klausi, Damien Tournoud, coltrane, sun, aiypz, alippai: Password reset form has no flood protection

Issue #2886622 by Berdir, martin107, Mile23, tim.plunkett, mikelutz, jonathan1055: Deprecate all EntityManager methods with E_USER_DEPRECATED

Issue #3047699 by alfredofonseca, joachim, cosmicdreams: The class docs for the two password reset forms should differentiate them

Issue #3015752 by alexpott, bnjmnm: Properly deprecate USERNAME_MAX_LENGTH and USER_REGISTER_* constants

Issue #2787871 by alexpott, yogeshmpawar, Insasse, Prashant.c, catch, hass: Properly deprecate getUserName() and use getAccountName() instead

Issue #2935256 by Jo Fitzgerald, voleger, kim.pepper, ibustos, Yogesh Pawar, catch, jibran: Remove all usages of drupal_get_message and drupal_set_message in modules

Issue #2873696 by nvexler, wengerk, gido, Jo Fitzgerald, xjm: Add @internal to core classes, methods, properties to Form Classes

Issue #2722609 by anoopjohn, mfernea, Jo Fitzgerald, chishah92, druprad, martin107, Mile23: Fix Drupal.Commenting.FunctionComment.ParamNameNoMatch

Issue #2776975 by joelpittet, dawehner, tim.plunkett, xjm, pfrenssen: March 3, 2017: Convert core to array syntax coding standards for Drupal 8.3.x RC phase

SA-CORE-2016-005 by larowlan, xjm, David_Rothstein, Dave Reid, Crell, cilefen, alexpott, mlhess, catch, pwolanin, YesCT, dawehner, quicksketch, Heine, znerol, charlotte.b, jnicola, ezraw

(cherry picked from commit c5da97f9)

Issue #2665992 by alexpott, klausi, heykarthikwithu, xjm, tstoeckler: @file is not required for classes, interfaces and traits

Issue #2576037 by unqunq, er.manojsharma, sdstyles, martins.kajins, Devaraj johnson, cilefen, Bojhan, Wim Leers: "Sorry" in user-facing errors violates the User Interface Standards

Issue #2551453 by LoMo, Ayesh, jaxxed, LinL, madhavvyas, Miraya: Follow-up: Consistently use "email" instead of "e-mail" in Drupal

Issue #753898 by corbacho, weri, opdavies, dscl, idebr, willzyx, manauwarsheikh, dansologuren, yoroy, alexpott: Wrong message for blocked users who request password reset

Issue #2340667 by YesCT, Pedro Lozano, alexpott, martin107: Protect Drupal\Core\Language\Language::id, and use getId().

Issue #2212427 by Mixologic, YesCT, Sutharsan, mgriego, icseh., visabhishek, znerol: Use interface instead of class name for language manager where appropriate.

Issue #2308821 by tim.plunkett: Replace FormErrorInterface with $form_state->setErrorByName() and $form_state->setError().

Issue #2272481 by herom, ParisLiakos, tim.plunkett: Remove usages of watchdog() from forms, plugins and controllers.

Issue #2246665 by jaredsmith, martin107, YesCT, filijonka, tstoeckler: Typehint with Drupal\Core\Language\LanguageInterface instead Drupal\Core\Language\Language.

Issue #950534 by mparker17, mgifford, Mixologic, jbloomfield, erinclerico, theMusician, wmostrey | zirvap: [policy] Consistently use email instead of e-mail in Drupal.

Issue #1862202 by plach, Berdir, katbailey, ParisLiakos, alexpott, chx, sun, larowlan, Gábor Hojtsy, cosmicdreams, vijaycs85, YesCT, penyaskito, andypost, Albert Volkman, joelpitett: Objectify the language system.

Issue #2145007 by tim.plunkett, h3rj4n: Convert form_set_error() in FormBase classes to use FormErrorInterface.