- Patch #298309 by mfer: add PDO::FETCH_PROPS_LATE to tell __construct() to run before properties are added to the object.  This is closer to the expected behavior and avoids that values are being overwritten.

- Patch #309821 by Rob Loach: automatically put sites in maintenance mode when updates are being run.

#197266 by ufku, lilou, Dave Reid, and c960657: Avoid unnecessary query if there is no user limit on uploaded files.

#201799 by yched, quicksketch: compute identation width for draggables better, counting on padding and margin as well as measuring the width at the place where it is used (taking possible CSS overrides into account)

- Patch #232931 by mikey_p, flobruit et al: clarified the PHPdoc of drupal_add_feed() and drupal_add_link().

#224006 by Daniel Jalkut: blogapi_metaweblog_get_category_list() verified user access for the given content type but did not log in the user first.

#108979 by ewhipple, catch, and sun: Order permissions consistently, keep node type related permissions together.

- Patch #308138 by mfer, Dave Reid: replace valid_email_address with filter_var and FILTER_VALIDATE_EMAIL.