Issue #2005644 by Wim Leers, damiankloip, beejeebus, amateescu: Use client-side cache tags & caching to eliminate 1 HTTP requests/page for in-place editing metadata, introduce drupalSettings.user.permissionsHash.

Issue #2119237 by cosmicdreams, Crell, damiankloip: Use \Symfony\Component\Debug\Exception\FlattenException instead of \Symfony\Component\HttpKernel\Exception\FlattenException.

Issue #1874498 by tim.plunkett, dawehner, jibran, benjy: Provide and use API methods for retrieving base plugin and derivative names from block plugin IDs.

Issue #1912602 by dawehner, damiankloip, dagmar, tim.plunkett, bdone: Changing view access from 'Permission' to 'Role' causes AJAX error message re getRoles().

Revert "Issue #1912602 by dawehner, dagmar, tim.plunkett, bdone: Changing view access from 'Permission' to 'Role' causes AJAX error message re getRoles()."

This reverts commit 0f17b0ec.

Issue #1912602 by dawehner, dagmar, tim.plunkett, bdone: Changing view access from 'Permission' to 'Role' causes AJAX error message re getRoles().

Issue #1954892 by dawehner, David_Rothstein, tim.plunkett: Replace 'theme callback' and hook_custom_theme() with a clean theme negotiation system.

Issue #1786490 by Berdir, amateescu, damiankloip, Wim Leers, dawehner: Add caching to the state system.

Revert "Issue #1786490 by Berdir, amateescu, damiankloip, dawehner: Add caching to the state system."

This reverts commit 8ec847cc.

Issue #2098197 by dawehner, vijaycs85, damiankloip, tstoeckler: Add getAllRoutes() method to RouteProvider .

Issue #2109793 by damiankloip, dawehner, tim.plunkett: Convert element_* methods in common.inc to a class.

Issue #2109287 by dawehner, Cottser, tim.plunkett, kim.pepper: Replace list_themes() with a service.

Issue #2109303 by damiankloip, ParisLiakos: Convert CSRF checks in controllers to the routing system.

Issue #2111349 by dawehner, tim.plunkett: Move format_plural to the string translation service and format_interval to the date service.

Issue #2102417 by damiankloip, dawehner: Change Drupal\Core\Routing\RouteBuildEvent::getModule() to getProvider().

Issue #2108829 by damiankloip, dawehner: Make AccessManager stricter with values returned from access checkers.

Issue #2141041 by Heine, klausi, David_Rothstein, amateescu, tim.plunkett, : CsrfTokenGenerator::validate() should do an identical compare. (CORE-SA-2013-003 follow-up)

Issue #2047229 by fago, smiletrl, Berdir, effulgentsia, amateescu: Make use of classes for entity field and data definitions.

Revert "Issue #1954892 by dawehner, tim.plunkett, David_Rothstein, effulgentsia: Replace 'theme callback' and hook_custom_theme() with a clean theme negotiation system."

This reverts commit fc04601c.

Issue #1954892 by dawehner, tim.plunkett, David_Rothstein, effulgentsia: Replace 'theme callback' and hook_custom_theme() with a clean theme negotiation system.

Issue #1886448 by dawehner, sun, Berdir, ParisLiakos: Rewrite the theme registry into a proper service.

Issue #2073531 by tim.plunkett, dawehner, Berdir, catch, plach: Use current user service instead of _account, remove _account from the request object.