Issue #1587270 by klausi, greggles, sun: Forbid execution of PHP files in subfolders by default (except those needed by core).

Issue #2080311 by rhm50, amitgoyal, InternetDevels, Rajesh Ashok, pfrenssen, natemow, areke, chertzog | mrsinguyen: Clean up Drupal\system\Tests\Database\SelectTest.php.

Issue #2061977 by InternetDevels, kim.pepper, ianthomas_uk, herom, rhm50, naveenvalecha, andypost,  mandar.harkare, sergeypavlenko, sidharthap, SIz, tkuldeep17: Replace user_access() calls with ->hasPermission() in all core modules except user.

Revert "Issue #2061977 by InternetDevels, kim.pepper, ianthomas_uk, herom: Replace user_access() calls with ->hasPermission() in all core modules except user."

Fixing commit credit.

This reverts commit 25afa810.

Issue #2301599 by Cottser, mparker17: Fixed Regression: Bartik's field--taxonomy-term-reference.html.twig doesn't properly output label attributes.

Issue #2061977 by InternetDevels, kim.pepper, ianthomas_uk, herom: Replace user_access() calls with ->hasPermission() in all core modules except user.

Issue #806982 by lokapujya, gnuget, miqmago, shashi1028, Floydm, bfroehle, kathyh, sreynen: Tables should take an optional footer variable and produce <tfoot>.

Issue #2030743 by yingtho, runeasgar, marcingy, YesCT, damiankloip, larowlan, typhonius, dman, areke, Désiré: Improve tests for user form alters in contact module.

Issue #2216535 by jhodgdon, Berdir: Replace Node overview topic and Node API topic with Entity Hooks topic.

Issue #2030655 by justafish, Alumei, daffie, alexpott, wwhurley, jamesquinton, pcambra, InternetDevels, rdatar, james_kerrigan: Expand Role with methods.

Issue #1498662 by andypost, larowlan | dawehner: Refactor comment entity properties to multilingual.

Issue #2300313 by blueminds: Fixed Seven theme competely overrides the $form['#attached'] on node form.

Issue #2300843 by joshi.rohit100: Remove drupal_json_encode() and drupal_json_decode() methods as deprecated.

Issue #697760 by sun: Replace getInfo() in tests with native phpDoc + annotations (following PHPUnit).

Issue #2078867 by tim.plunkett, jackbravo, ianthomas_uk, InternetDevels, piyuesh23, disasm, nano_monkey | vijaycs85: Convert _form_test_* functions to classes.

Issue #2257519 by sun, larowlan, xjm, cs_shadow: Move content assertion methods into a trait, so DUTB can consume it, too.

Issue #2279681 by mgifford, joshi.rohit100, thedavidmeister: Views' InOperator filter should use Unicode::truncate() in adminSummary().