Issue #2384487 by rpayanm, daffie, Sharique, areke: Make the class variables protected for FilterFormat

Issue #2382503 by Wim Leers: Not possible to render self-contained render array while a render stack is active

Issue #2328111 by dawehner, martin107, neclimdul: Replace most instances of the DRUPAL_ROOT constant with the app.root container parameter.

Issue #2361681 by Wim Leers: drupal_render(): invert second argument ($is_recursive_call -> $is_root_call) => more strict, better DX/TX.

Issue #2340667 by YesCT, Pedro Lozano, alexpott, martin107: Protect Drupal\Core\Language\Language::id, and use getId().

Issue #2246675 by rpayanm, johnstorey, holly.ross.drupal | mgbellaire: Remove all unnecessary 'template' lines in hook_theme() declarations.

Issue #2304987 by Berdir, Wim Leers: Fixed Don't invalidate cache tags of referenced entities, use entity list cache tags correctly, add test coverage for entity list cache tags.

Issue #2340251 by iMiksu, alexpott, tim.plunkett, dawehner, Wim Leers: Remove most remaining url() calls.

Issue #2340123 by Wim Leers: Setting cache tags can be tricky: use strings instead of nested arrays to improve DX.

Issue #2328411 by dawehner, geerlingguy, herom: Convert all permissions to yml files and permission callbacks.

Issue #2239413 by Wim Leers, blueminds: Split FilterCaption into FilterAlign (for data-align) and FilterCaption (for data-caption).

Issue #2061977 by InternetDevels, kim.pepper, ianthomas_uk, herom, rhm50, naveenvalecha, andypost,  mandar.harkare, sergeypavlenko, sidharthap, SIz, tkuldeep17: Replace user_access() calls with ->hasPermission() in all core modules except user.

Revert "Issue #2061977 by InternetDevels, kim.pepper, ianthomas_uk, herom: Replace user_access() calls with ->hasPermission() in all core modules except user."

Fixing commit credit.

This reverts commit 25afa810.

Issue #2061977 by InternetDevels, kim.pepper, ianthomas_uk, herom: Replace user_access() calls with ->hasPermission() in all core modules except user.

Issue #2279617 by thedavidmeister, mgifford: Fixed _filter_url_trim() should use Unicode::truncate().

Issue #2089331 by grom358 | thedavidmeister: [meta] Replace calls to check_plain() with Drupal\Component\Utility\String::checkPlain().

Issue #1423244 by tstoeckler, floretan, Wim Leers, lokapujya, xjm, webflo: #allowed_formats property for #type 'text_format' to filter available formats.

Issue #2246665 by jaredsmith, martin107, YesCT, filijonka, tstoeckler: Typehint with Drupal\Core\Language\LanguageInterface instead Drupal\Core\Language\Language.

Issue #950534 by mparker17, mgifford, Mixologic, jbloomfield, erinclerico, theMusician, wmostrey | zirvap: [policy] Consistently use email instead of e-mail in Drupal.

Issue #2217877 by Wim Leers, Dave Reid, damiankloip, xjm, chx | catch: Fixed Text filters should be able to add #attached, #post_render_cache, and cache tags.

Issue #2126761 by Tim Bozeman, SGhosh, Jalandhar: The body field summary textarea indicates it has a description with aria-describedby attribute, but the DOM id value points to a non-existent node.

Issue #2183113 by jhodgdon, effulgentsia, tim.plunkett, herom, larowlan: Update hook_help signature to use route_name instead of path.

Issue #2101119 by Xano, tim.plunkett: Convert Filter routes to use entity access instead of permissions.

Issue #2217749 by Wim Leers, Jalandhar, visabhishek, damiankloip: Entity base class should provide standardized cache tags and built-in invalidation.

Issue #2089433 by ianthomas_uk, grom358, herom, thedavidmeister, visabhishek, longwave, Sweetchuck: Remove uses of deprecated XSS filter functions.

Issue #2226903 by pwolanin, dawehner, tvn, martin107, jessebeach: Step 1: Move static menu links to yml files.