- Patch #402264 by yched, bjaspan: adapt field's add-more js handler to recent fapi changes.  Added tests.

- Patch #172571 by mgifford, lilou: remove theme_xml_icon because it is not used and we have theme_feed_icon.

- Patch #394594 by Berdir: additional conversion to the new database abstraction layer plus clean-up.

   + fixes a few missing whitelines
   + makes it clear that the same function tests field_attach_insert(), field_attach_update() and field_attach_load()
   + streamlines a few overly detailed explanations
   + add missing t() functions

#356908 by andypost and yched: Run field prefixes and suffixes through field_filter_xss() rather than check_plain() to prevent funny characters.

- Patch #392706 by bjaspan, yched, puradata: some of the field attach tests in field.test use database queries to verify correct functionality. This makes the field attach tests work only if field_sql_module is the only field storage module in use. Instead, tests of database storage should be in the field storage module's tests, and field attach tests should operate purely at the field attach api level.

#220592 by dww and pwolanin: Update module now always uses the database for caching so that drupal.org project data persists and site performance (in both directions) is not horrifically mangled.

- Patch #295864 by boombatower: cleaned up the randomName() method by removing unnecessary prefix code, and added a new randomString() method which includes characters like spaces.

- Patch #251245 by c960657: added tests for the OpenID module. The test module implements a dummy OpenID provider/server.  Most impressive patch of the month.

- Patch #302632 by recidive, c960657: use PHP5 functionality for _openid_sha1().  Simplified some code.

#431148 by pwolanin: Make it easier to visually distinguish between security updates and regular updates.

#445094 by yched: Fix failing tests in SQLite/PostgreSQL due to passing in NULL values for ftid and ftvid.