Issue #3026386 by dsnopek, samuel.mortenson, xjm, ydahi, alexpott, Fabianx, kferencz91, littlepixiez, greggles, cilefen: Drush fatal error after upgrading to 8.6.6, 8.5.9, or 7.62: PHP Fatal error:  Uncaught TYPO3PharStreamWrapperException

SA-CORE-2019-002 by greggles, cashwilliams, EclipseGc, larowlan, samuel.mortenson, alexpott, tedbow, effulgentsia, Fabianx, xjm, mlhess

SA-CORE-2018-006 by alexpott, attilatilman, bkosborne, catch, bonus, Wim Leers, Sam152, Berdir, Damien Tournoud, Dave Reid, Kova101, David_Rothstein, dawehner, dsnopek, samuel.mortenson, stefan.r, tedbow, xjm, timmillwood, pwolanin, njbooher, dyates, effulgentsia, klausi, mlhess, larowlan

Issue #2991902 by amateescu: Fix block_content_update_8400() to not rely on the module handler anymore

Issue #2804155 by tedbow, drumm, samuel.mortenson, xjm, geerlingguy: If the next minor version of core has a security release, status still says "Security update required!" even if the site is on an equivalent, secure release already

(cherry picked from commit adf32937)

Issue #2995076 by mikelutz, benjamindamron, mradcliffe, xjm, samuel.mortenson, tedbow: Let UpdateTestBase check for multiple status messages

(cherry picked from commit cd9f5a7d)

Issue #2990511 by tedbow, xjm, samuel.mortenson: Add comprehensive test coverage for update status for security releases

(cherry picked from commit 5de039f5)
(cherry picked from commit 3c6d1f25)

Issue #2990133 by alexpott: Fix deprecation error in 8.5.x caused by Symfony\Component\HttpKernel\Controller\ControllerResolver::getArguments()

SA-CORE-2018-005 by MichaelCu, mwop, Wim Leers, bkosborne,  cashwilliams, moshe weitzman, mlhess, xjm, larowlan, Jibran, DamienMcKenna

Revert "Issue #2952634 by Sut3kh, alexpott, Rob C, jibran: LegacyMessenger::deleteByType does not delete anything"

This reverts commit cbe0ec99.

Issue #2952634 by Sut3kh, alexpott, Rob C, jibran: LegacyMessenger::deleteByType does not delete anything

(cherry picked from commit f5c6c3b7)

(cherry picked from commit 5a481760a331b08746be3c7d208811599de13ec0)

Issue #2904711 by Jo Fitzgerald: Missing and incorrect parameter, return, and thrown exception data types in Drupal\Core\Executable\ExecutablePluginBase

(cherry picked from commit 83c47444)

(cherry picked from commit 3c5bf74b)

Issue #2983917 by rattusrattus: Umami Baking Mishaps article contains UK English rather than US English

(cherry picked from commit a55c289c)

(cherry picked from commit 369c0ffd)

Issue #2921661 by heddn, maxocub, alexpott, phenaproxima, Jo Fitzgerald, badmetevils, quietone: Add support to migrate multilingual revisions

(cherry picked from commit 9eb79881)

(cherry picked from commit e3843009)

Revert "Issue #2971338 by Jo Fitzgerald, quietone, joachim: MigrationLookupTest::testMultipleSourceIds() uses wrong class for mocking"

This reverts commit dd44e76f.

Issue #2971338 by Jo Fitzgerald, quietone, joachim: MigrationLookupTest::testMultipleSourceIds() uses wrong class for mocking

(cherry picked from commit e9b5e54b27e3389d10426ec248d394fb7f245901)

Issue #2887490 by michaellenahan, cilefen, rOprOprOp, catch: Activity Tracker cannot be enabled if there are unpublished nodes

(cherry picked from commit 713294e9)

(cherry picked from commit 491aa067)

Issue #2860760 by Jo Fitzgerald, heddn, quietone, alexpott: Match setup() functionality of MigrateFileTest with MigratePrivateFileTest

(cherry picked from commit 4784ac3d)

(cherry picked from commit 9e9ee75b)

Issue #2635046 by neclimdul, dawehner, alexpott: run-test.sh doesn't work in directories with spaces

(cherry picked from commit abc6c6a3)

Issue #2950158 by Vidushi Mehta, ankitjain28may, Shiva Srikanth T, ckrina, markconroy, Eli-T: Choose policy for defining font-weight on Umami theme

(cherry picked from commit bb6ea924)