Issue #2570285 by mr.baileys, cpj, stefan.r, alexpott, nlisgo, joelpittet, Aki Tendo, borisson_, chx, dawehner, s_leu, Berdir: Make sure TranslatableMarkup accepts string values only

Issue #2575869 by pwolanin, Wim Leers, JeroenT, dawehner, YesCT: Remove all remaining usage of deprecated UrlGeneratorInterface::generateFromPath() and delete it

Issue #2578561 by tim.plunkett, joelpittet, Bojhan, Fabianx, xjm, cilefen, David_Rothstein, DamienMcKenna: Move "Inline Form Errors" functionality to optional module and restore D7-style form errors by default

Issue #2560987 by tstoeckler: Active class (almost) always added to frontpage links for anonymous users, even on other pages

Issue #2416857 by cilefen, evgeny.chernyavskiy, lauriii, chr.fritsch, pjonckiere: Add an active_theme_path twig function

Issue #2503755 by Wim Leers, bobrov1989, webchick, dcrocks, andypost, emma.maria, catch, Bojhan, dawehner, Gábor Hojtsy, alexpott, tstoeckler, yoroy: Switch from user login block to login menu link and search block in standard profile

Revert "Issue #2503755 by Wim Leers, bobrov1989, webchick, dcrocks, andypost, emma.maria, catch, dawehner, Bojhan, tstoeckler, alexpott, yoroy: Switch from user login block to login menu link and search block in standard profile"

This reverts commit 1cdbe865.

Issue #2520540 by alexpott: Enforced configuration dependencies shouldn't have to be repeated in the calculated dependencies

Issue #2454649 by Aki Tendo, dawehner: Cache Optimization and hardening -- [PP-1] Use assert() instead of exceptions in Cache::merge(Tags|Contexts)

Issue #2497667 by almaudoh, Wim Leers, Cottser, Fabianx, jaxxed: Add libraries-extend to themes' *.info.yml

Issue #2576945 by hchonov: PathProcessorLanguage::initProcessors is not sorting the methods by weight

Issue #2552799 by heddn, glenshewchuck, Xano, deepakaryan1988, swentel, jordanpagewhite, yched, tim.plunkett: FieldType with no available widget causes Fatal error

Issue #2503755 by Wim Leers, bobrov1989, webchick, dcrocks, andypost, emma.maria, catch, dawehner, Bojhan, tstoeckler, alexpott, yoroy: Switch from user login block to login menu link and search block in standard profile

Issue #2451411 by almaudoh, Shamsher_Alam, lauriii, borisson_, cilefen, davidhernandez, Cottser, Wim Leers, joelpittet: Add libraries-override to themes' *.info.yml

Issue #2463567 by borisson_, Wim Leers, Xano: Push CSRF tokens for forms to placeholders + #lazy_builder

Issue #2575615 by alexpott, pwolanin, stefan.r, catch, dawehner, effulgentsia, xjm, David_Rothstein, iMiksu, lauriii, joelpittet: Introduce HtmlEscapedText and remove SafeMarkup::setMultiple() and SafeMarkup::getAll() and remove the static safeStrings list

Issue #2476563 by Gábor Hojtsy, penyaskito, amateescu: Entity operations links tied to original entity language, ignore everything else

Issue #2576533 by alexpott, stefan.r, Wim Leers, dawehner, xjm, effulgentsia, catch: Rename SafeStringInterface to MarkupInterface and move related classes

Issue #2567257 by dawehner, stefan.r, effulgentsia, pwolanin, catch, Xano, mr.baileys, Wim Leers, k4v, Dave Reid, chx, googletorp, plach, lauriii, Berdir, webchick, alexpott, stefan.r: hook_tokens() $sanitize option incompatible with Html sanitisation requirements

Revert "Issue #2567257 by dawehner, stefan.r, effulgentsia, pwolanin, catch, Xano, mr.baileys, Wim Leers, k4v, Dave Reid, chx, googletorp, plach, lauriii, Berdir, webchick, alexpott, stefan.r: hook_tokens() $sanitize option incompatible with Html sanitisation requirements"

This reverts commit 542a1663.

Issue #2567257 by dawehner, stefan.r, effulgentsia, pwolanin, catch, Xano, mr.baileys, Wim Leers, k4v, Dave Reid, chx, googletorp, plach, lauriii, Berdir, webchick, alexpott, stefan.r: hook_tokens() $sanitize option incompatible with Html sanitisation requirements

Issue #2575493 by Berdir, dawehner: Remove string cast of EntityType::getLabel() and getGroupLabel()

Issue #2571695 by dawehner, plach, stefan.r, jaredsmith, lauriii, YesCT, xjm, catch, alexpott, joelpittet, Ryan Weal, Sutharsan, subhojit777, justAChris, nlisgo, effulgentsia, rpayanm, larowlan, chx, geertvd: Remove !placeholder and unsafe string return from SafeMarkup::format()

Issue #2508884 by EclipseGc, tim.plunkett, dsnopek, japerry, sravya_12, swathin, Wim Leers, Fabianx, dawehner, yched: Make contexts immutable

Issue #2559971 by stefan.r, alexpott, lauriii, nlisgo, plach, dawehner: Make SafeMarkup::format() return a safe string object to remove reliance on a static, unpredictable safe list

Issue #2489672 by pwolanin, mpdonadio, zniki.ru, bzrudi71, Crell: Limit all DB drivers to executing single statements by checking for delimiter

Issue #2571593 by dawehner, lauriii, Berdir: Fatal error: Cannot use object of type Drupal\Core\GeneratedLink as array in Tableselect.php on line 220

Issue #2570107 by alexpott: Make format_plural() return a PluralTranslatableString object to remove reliance on a static, unpredictable safe list

Issue #2543334 by Wim Leers, lauriii, Fabianx: Auto-placeholdering for #lazy_builder with bubbling of contexts and tags

Issue #2569069 by stefan.r, mr.baileys, alexpott, lauriii: Replace TranslationWrapper with TranslatableString and deprecate TranslationWrapper

Issue #2568977 by alexpott, dawehner, pwolanin, Wim Leers: Replace SafeMarkup::format() in the link generator - it's a bad example to everyone

Issue #2557113 by stefan.r, alexpott, dawehner, joelpittet, cilefen, lauriii, plach, catch, chx, xjm: Make t() return a TranslationWrapper object to remove reliance on a static, unpredictable safe list

Issue #2545972 by alexpott, joelpittet, ericjenkins, stefan.r, Wim Leers, Cottser: Remove all code usages SafeMarkup::checkPlain() and rely more on Twig autoescaping

Issue #2511516 by lauriii, Xano, Wim Leers, dawehner: Make local tasks and actions hooks provide cacheability metadata, to make the blocks showing them cacheable

Issue #2567139 by Cottser, stefan.r, joelpittet: Twig autoescape default strategy deprecation error triggered on every page load

Issue #2492967 by dawehner, cilefen, greggles, larowlan, hussainweb, chx, bircher, mr.baileys, webchick, Berdir, Fabianx, catch, pwolanin, Crell: SQL layer: $match_operator is vulnerable to injection attack