Issue #2758737 by Mixologic, amateescu, ndf, webflo, Mile23, bojanz: Add a packages.drupal.org to root composer.json

Issue #2808233 by gnuget, dawehner, Wim Leers, tedbow, Chi, dysrama: REST 403 responses don't tell the user *why* access is not granted: requires deep Drupal understanding to figure out

Issue #2408321 by mfb, sanduhrs, D34dMan, C_Logemann, xumepadismal, John Morahan, serg2, walterebert, David Grudl: Support RFC 5785 by whitelisting the .well-known directory

Issue #2826728 by tim.clifford, tim.plunkett, Adita, lomasr, tkoleary, boosmith, utkarsh_malviya, laxman.ghavte, dmezquia, Thew, shubhang, rosschive, larowlan: Block layout action removes instance, but contextual link deletes all instances

Issue #2851214 by amateescu: ViewsEntitySchemaSubscriber does a lot of unnecessary work every time an entity type definition is updated

Issue #2665152 by alexpott, Andrej Galuf, tfranz, longwave, jsimonis, andypost, bojanz: Certain modules can't be enabled when Suhosin is used

Issue #2313095 by claudiu.cristea, l0ke, umarzaffer, mrjmd, dawehner, alexpott, catch: Move node constants to NodeInterface

Issue #2575967 by rashidkhan, mpdonadio: Documentation for on403 function in Http4xxController file is wrong

Issue #2656278 by alexpott, miteshmap, droplet, walangitan, empesan, ejb503, manmohandream, vaidehi bapat, gadaniels72, swentel, jamesdesq, luca_cracco, malaimo29001, Wim Leers, nileema.jadhav: Convert "Limit allowed HTML tags" input field to a textarea

Issue #2850601 by alexpott, xjm, timmillwood: ContentModeration workflow type plugin preserves numeric keys on sorting and not sorting entity types

Issue #2821191 by tim.plunkett, tstoeckler, jibran: Allow object-based plugin definitions to be processed in PluginDependencyTrait

Issue #2849222 by tstoeckler: settings.testing.php / testing.services.yml not picked up by BrowserTestBase

Issue #2845113 by timmillwood, tstoeckler: Add test coverage that setting an invalid moderation state on a moderated entity fails

Issue #2849474 by Wim Leers: \Drupal\Tests\rest\Functional\CookieResourceTestTrait::initAuthentication() should use the current test format, and should not send an Accept header

Issue #2847687 by jp.stacey, dawehner: EntityAccessCheck mandates instanceof EntityInterface when it only needs AccessibleInterface

Issue #2838144 by arshadcn, Wim Leers, drpal: Update "bundle missing" error message in entity denormalization to indicate which field is actually missing

Issue #2847655 by diaspar, andrewmacpherson: Document Drupal\views\EventSubscriber\RouteSubscriber::routeRebuildFinished()

Issue #2824655 by tim.plunkett: Plugin definitions should store their class in a consistent manner (without leading slashes)

Issue #2850341 by alexpott, xjm, timmillwood: Improve \Drupal\content_moderation\Plugin\WorkflowType\ContentModeration::appliesToEntityTypeAndBundle() and ::getBundlesForEntityType()

Issue #665790 by chrisrockwell, Sumit kumar, lauriii, joelpittet, sun, vulcanr, vaplas, yoroy, leahtard, tompagabor, aspilicious, ckrina, Gábor Hojtsy, David_Rothstein, Manuel Garcia, rootwork, nod_, kostyashupenko, pguillard, Bojhan, droplet, typhonius, wturrell, mgifford, webkenny, cosmicdreams, tkoleary, YesCT, marcvangend, markabur, LewisNyman, mrfelton, oriol_e9g, prabhu9484, catch, hedrickbt, tsvenson, longwave, dww, kika, borisson_, rdellis87, realityloop, klonos: Redesign the status report page

Issue #2811407 by timmillwood, Sam152, tstoeckler, cilefen, Gábor Hojtsy, webchick: "Workflow entities" admin page title should be "Workflows"

Issue #2844293 by swentel: Manually calling $account->delete() will throw an exception if the user has nodes in an anonymous environment with node access enabled

Issue #2409129 by webflo, k4v, kgoel, claudiu.cristea, dawehner, tstoeckler: Enforce order of permissions in config export

Issue #2847611 by dawehner, webflo: \Drupal\Core\Template\TwigExtension::getLink overrides existing classes

Issue #2839267 by chiranjeeb2410, er.pushpinderrana, joyceg, oldpopsong: Argument of \Drupal::formBuilder()->getForm() should implement FormInterface

Issue #2832080 by cebasqueira, Berdir: BrowserTestBase::drupalLogin() does an unnecessary redirect from /user to /user/login for each login