SA-CORE-2020-005 by lorenzo_gre, jazzy2fives, xjm, samuel.mortenson, pwolanin, larowlan, greggles, cashwilliams, Heine, mcdruid, alexpott, Gábor Hojtsy

SA-CORE-2020-004 by samuel.mortenson, DorTumarkin, greggles, xjm, larowlan, webchick, pwolanin, dawehner, mcdruid, alexpott, dsnopek

Issue #3134648 by alexpott, dww, greg.1.anderson, hussainweb, catch, xjm, Mixologic: [backport, needs scheduling] Don't pin the composer/installers version in drupal/core-recommended

Issue #3118741 by dww, lauriii, alexpott, xjm, nod_, longwave, tedbow, catch: [Security] Update yarn dependencies to fix security issues

Issue #3143339 by mohrerao, Bunty Badgujar, mondrake, xjm, longwave: [backport] Clean up the arguments of calls to WebAssert::titleEquals() and AssertLegacyTrait::assertTitle()

(cherry picked from commit a45c4857)

(cherry picked from commit 7fd928bd)

(cherry picked from commit dfba06e7)

(cherry picked from commit da2fb105)

(cherry picked from commit f46d09e9)

(cherry picked from commit 9be077ff)

(cherry picked from commit 8acabfb7)

(cherry picked from commit f72ff0bd)

(cherry picked from commit 25595ff2)

Issue #3138591 by ankit.singh, benjifisher, xjm, mikelutz, andypost: [D8 only] Add missing E_USER_DEPRECATED to deprecation notices

(cherry picked from commit 25c58901)

Issue #3143115 by Ramya Balasubramanian, mrinalini9, atul4drupal, xjm: README.txt file format for Drupal

(cherry picked from commit 2b29ed1d)

Issue #3002820 by daffie, pavnish, dww, sokru, mmjvb: PHP Warning in template_preprocess_update_report(): Invalid argument supplied for foreach()

(cherry picked from commit ae444361)

Issue #3139439 by Bunty Badgujar, mondrake, xjm, daffie: Replace usages of deprecated AssertLegacyTrait::assertHeader()

Issue #3139403 by sja112, mondrake, xjm: Replace usages of deprecated AssertLegacyTrait::assertElement(Not)Present()

(cherry picked from commit 62b57732)

(cherry picked from commit 1acb0bb4)

Issue #3110200 by himanshu_sindhwani, kiamlaluno, tdnshah, xjm: Comments make a reference to filter_process_format(), which no longer exists

(cherry picked from commit 648c4aaf)

Issue #3100712 by daffie, tim.plunkett, milindk, StevenPatz, xjm, alexpott, dorficus, tedbow, bircher, marcuschristopher, opdavies: Drupal 8.7.10 to 8.8.0 update fails if views have invalid configuration

(cherry picked from commit 0aa8da91)

(cherry picked from commit bf1f49b6)

Issue #3137713 by mohrerao, jyotimishra123, benjifisher, mikelutz, andypost: Update deprecation notices in NodeNewComments constructor

(cherry picked from commit a168dc72)

(cherry picked from commit 7546ecb1)

Revert "Issue #3062446 by a.qala: duplicate if statements in "MenuLinkContent.php" on line 151 and 156 - Code Improvement in "Custom Menu Links" module"

This reverts commit dee0b484.

SA-CORE-2020-002 by mcdruid, dungahk, justafish, cilefen, xjm, larowlan, effulgentsia, bnjmnm, lauriii, zrpnr, samuel.mortenson