- Patch #590656 by pwolanin, Pasqualle: harden one-time login links against vulnerability from disclosure of SQL backups, or SQL 'SELECT' injection.

- Patch #638070 by carlos8f, Gábor Hojtsy, ksenzee, pwolanin, chx, catch: router loaders causing a lot of database hits for access checks.

#674394 by David_Rothstein: Move add/remove shortcut buttons to a theme setting, so that it does not appear on themes where it makes no sense.

#678546 by rfay and jhodgdon: Improve wording of help text in admin/config/regional/language/configure.

#642122 by scor and Stefan Freudenberg: Allow for RDFa datatype attribute without callback function.

#678012 by heyrocker and jhodgdon: Tokens should not use the word 'node' in human-readable descriptions.

#677534 by jhodgdon, andrewmacpherson, Bojhan, yoroy, et al: Fixed Customize still being used in place of Edit.

#617588 by dww and yoroy: Drastically improve the UI for the landing page before you actually update your site.

#649224 by David_Rothstein and ksenzee: Fixed Cannot run certain batch processes (tests, update manager, etc) with the overlay enabled.

- Patch #678680 by aspilicious, sun: 'Save' button missing on user profile fields configuration form.

- Patch #632484 by aspilicious, linclark, scor: update the default profile with the proper RDF mapping.

#525622 by Frando, yched, et al: Add entity hook callbacks so that 'as link' formatters have a generic way to build the url of an 'entity'.

#676134 by mcarbone: Update documentation to account for taxonomy changes (no more node taxonomy property).

#678714 follow-up: Renaming poll template file renames. Ah, poll module... your role as our one true regression test continues to be realized...

#261258 by pwolanin, Damien Tournoud, David_Rothstein: Fix node_save() insertion logic. (with tests)

#616650 by Crell: Default MySQL to transactions ON. Makes sense now that we default to InnoDB as well.