Issue #2508627 by rvtraveller, pwolanin: Changing email address should invalidate one-time login links

Issue #2375695 by Berdir, EclipseGc, tim.plunkett, Wim Leers, Fabianx, dawehner: Condition plugins should provide cache contexts AND cacheability metadata needs to be exposed

Issue #2513244 by Berdir, Wim Leers, EclipseGc, Fabianx: ContextHandler incorrectly checks required/optional contexts of plugins

Issue #2463909 by phenaproxima, mikeryan: Migrations should support non-installed default configurations (templates)

Issue #2309215 by googletorp, subhojit777, lokeoke, tadityar, crowdcg, aneek, joelpittet, jhedstrom, alexpott, lauriii, amankanoria: HTML double-escaping in revision messages

Issue #1831798 by darol100, pjonckiere, rhuffstedtler, ifrik, paul.linney, rajneeshb, batigolix, jhodgdon: Update hook_help() for config manager module

Issue #2188165 by tim.plunkett, dww: [Regression] View term filter 'is/not empty' and 'not one of' operators do not work

Issue #2513396 by Cottser, larowlan, HelloNewman, webchick, crowdg, Bojhan, eliza411, ivanstegic, LewisNyman, lunk_rat, nickrosencrans, stpaultim: There is no link, anywhere, to a contact form once a user creates it

Issue #2517114 by joshi.rohit100, cilefen: Remove needless, wrongly-placed system_test.permissions.yml file

Issue #2513626 by cilefen, akalata, Les Lim: [Regression] Module permission links missing from module list page

Issue #2477853 by ingaro, daffie, bzrudi71, mradcliffe, alexpott: PostgreSQL: Add support for reserved field/column names

Issue #2508735 by darol100, dawehner, pwolanin, Chi, Fabianx, tim.plunkett: Code injection via preg_replace()

Issue #2487498 by Cristian.Andrei, Scott Weston, iMiksu: Make randomString always return a > to avoid random test fails

Issue #2463581 by Wim Leers, swentel: #cache_redirect cache items should have an 'expire' timestamp that matches the merged max-age

Issue #2487600 by dawehner, Wim Leers, fgm: #access should support AccessResultInterface objects or better has to always use it

Issue #2408371 by dawehner, Fabianx, alexpott, bforchhammer: Proxies of module interfaces don't work

Issue #2512452 by dawehner, pwolanin, alexpott, fnqgpc: Confirm form cancel button can lead to external domain

Issue #2509300 by dawehner, catch, larowlan: Path alias UI allows node/1 and /node/1 as system path then fatals

Revert "Issue #2512452 by dawehner, pwolanin, fnqgpc: Confirm form cancel button can lead to external domain"

This reverts commit 1462460f.

Issue #2512452 by dawehner, pwolanin, fnqgpc: Confirm form cancel button can lead to external domain

Issue #2512382 by Wim Leers: Follow-up for #2407195: #attached['http_header'] being added to Response in two places

Issue #1392754 by tss, justAChris, jhodgdon: Comply with new documentation standards for @file for namespaced class files

Issue #2509694 by kfitz, joshi.rohit100, cilefen: The $name parameter for UrlGenerator::getRoute() is documented incorrectly

Issue #2500523 by tim.plunkett, effulgentsia, dawehner: Rewrite views_ui_add_ajax_trigger() to not rely on /system/ajax

Issue #2512460 by pwolanin, Gábor Hojtsy, grisendo, JvE: "Translate user edited configuration" permission needs to be marked as restricted.

Issue #2489024 by lauriii, Fabianx, Gábor Hojtsy, Cottser, dawehner, zeropx: Arbitrary code execution via 'trans' extension for dynamic twig templates (when debug output is on)