SA-CORE-2022-016 by fabpot, nicolas.grekas, xjm, lauriii, alexpott, Berdir, larowlan, catch, longwave, cilefen, james.williams, benjifisher

SA-CORE-2022-012 by cmlara, GuyPaddock, larowlan, mondrake, effulgentsia, xjm, longwave, Dave Reid, lauriii, David Strauss, benjifisher, alexpott, mcdruid, Fabianx

Issue #3166449 by ravi.shankar, adamzimmermann, mmatsoo, walangitan, joshua.boltz, Cottser: Improve wording around twig.cache setting for production environments

(cherry picked from commit 1f171b93)

Issue #3175428 by tunic, kishor_kolekar, ranjith_kumar_k_u: Add link to "Trusted host settings" in default.settings.php

(cherry picked from commit 648e58d0)

Issue #3129043 by mondrake, daffie, ankithashetty, ravi.shankar, alexpott, Beakerboy, catch: Move core database drivers to modules of their own

Issue #3106531 by mondrake, daffie, Rithesh BK, catch, xjm: Notify in Status Report that per-table database prefixes are no longer supported, and will throw errors in Drupal 10.0

Issue #2473875 by znerol, alexpott, andypost, kim.pepper, amit.drupal, raman.b, martin107, joachim: Convert uses of $_SESSION to symfony session retrieved from the request

Issue #3207968 by quietone, longwave, Spokje: Replace @codingStandards comments with phpcs: comments

Issue #3209628 by longwave, rachel_norfolk, antiorario, phenaproxima, rootwork, larowlan, neclimdul, Maeglin: Add Permissions-Policy header to block Google FLoC

Issue #3041885 by tedbow, beautifulmind, dww, ayushmishra206, phenaproxima, webchick, xjm, AaronMcHale, larowlan, benjifisher, heddn, catch, jhodgdon, longwave, mglaman, alexpott, mxr576, effulgentsia: Display relevant Security Advisories data for Drupal

Issue #3195533 by daffie, longwave: [Symfony 6] The constant Symfony\Component\HttpFoundation\Request::HEADER_X_FORWARDED_ALL is deprecated

Issue #2238561 by alexpott, dawehner, andypost, bradjones1, ridhimaabrol24, jofitz, eiriksm, Darren Oh, kalyansamanta, znerol, neclimdul, catch, pwolanin: Use the default PHP session ID instead of generating a custom one

Issue #3138746 by jungle, rajandro, sja112, longwave, jameszhang023, quietone, dww: Fix 45 "shouldBeCamelCased" and related typos in core

Issue #1538118 by dww, swentel, dawehner, pwolanin, sanduhrs, alexpott, ayushmishra206, Wim Leers, yogeshmpawar, mgifford, cilefen, David_Rothstein, drumm, larowlan, Heine, colan, tedbow, benjifisher, klausi, borisson_, quietone: Update status does not verify the identity or authenticity of the release history URL

Issue #3158589 by bhushan.nagaonkar, brittany.huntzberry, ankithashetty, cilefen, alexpott, davidhernandez, nijolawrence: Improve comment in default.settings.php

Issue #3089957 by dww, Krzysztof Domański, Wim Leers, mr.baileys: Set X-Drupal-Cache-Max-Age to aid in debugging #cache fun

Issue #3055189 by mikelutz, catch, alexpott: [Symfony 5] Support for mapping keys in multi-line blocks is deprecated since Symfony 4.3 and will throw a ParseException in 5.0

Issue #3138718 by sja112, longwave, dww, xjm, alexpott: Convert British English spellings to American English, for the umpteenth time

Issue #3120096 by alexpott, daffie, effulgentsia, Neslee Canil Pinto, xjm, mondrake, catch, ravi.shankar: Support contrib database driver directories in a fixed location in a module

Issue #2746541 by quietone, alexpott, maxocub, Wim Leers, mikelutz, jofitz, masipila, firewaller, Madhura BK, Gábor Hojtsy, catch, heddn, plach, hchonov: Migrate D6 and D7 node revision translations to D8

Issue #3020296 by alexpott, longwave, bradjones1, catch, Berdir, gapple: Remove Symfony's classloader as it does not exist in Symfony 4

Issue #2586887 by LittleCoding, Cottser, webchick, gambry, alexpott, joachim, joelpittet, lauri, xjm: Remove bogus theme config override example from default.settings.php

Issue #3079029 by bircher, ricardoamaro, catch, wouter.adem, marcvangend, alexpott: Move module config exclusion from config_environment to core.services

Issue #3039026 by kim.pepper, Berdir, Peter Majmesku, vadim.hirbu, YurkinPark, andypost, dww, claudiu.cristea, alexpott, jibran, dawehner, mikelutz: Deprecate file_directory_temp() and move to FileSystem service

Issue #3035312 by kim.pepper, andypost, martin107, yogeshmpawar, naveenvalecha, pguillard, Berdir, dww, claudiu.cristea, jibran, Mile23: Move file_scan_directory() to file_system service

Issue #2980712 by bircher, alexpott, yogeshmpawar, mpotter, borisson_: Define config directory in settings

Issue #3024728 by amateescu, plach: Preserve the backup tables after an entity type schema conversion process

Issue #3030501 by alexpott, Gábor Hojtsy, Berdir: [Symfony 4] Drupal\Core\StackMiddleware\ReverseProxyMiddleware calls Symfony\Component\HttpFoundation\Request::setTrustedHeaderName() which does not exist

Issue #2975328 by alexpott, Gábor Hojtsy, borisson_: Install profile in settings.php and mismatch check makes re-installs of Drupal hard

Issue #2868078 by Manuel Garcia, claudiu.cristea, benjifisher, faline, gigiabba, ankitjain28may, mohit1604: Use new array syntax in PHP files outside of /core

Issue #2921706 by Daniel Korte, bkosborne: Update example.settings.local.php to include ['cache']['bins']['page']

Issue #2915673 by borisson_, alexpott, Gábor Hojtsy: Ignore coding standards in sites/* PHP files as they are for configuration and not real code

Issue #2805449 by joelpittet: Comment out 'extension_discovery_scan_tests' in example.settings.local.php

Issue #1286154 by mcdruid, cosmicdreams, das-peter, Cameron Tod, heddn, xjm, catch, tstoeckler, David_Rothstein, anavarre, tim.plunkett, naveenvalecha, dawehner: Allow custom default form cache expiration/lifetime

Issue #2662646 by chera.jaswinder, philnguyen, Munavijayalakshmi, daften, fago, memtkmcc, colan, benjifisher, cilefen, britter, dagmar, tomogden, catch, robertloo, xjm, osopolar, wesleydv, YesCT, jhodgdon, xlin, dhopki12: Add the temporary files directory config to the example config overrides in default.settings.php

Issue #2248983 by hchonov, amateescu, paranojik, timmillwood, tstoeckler, catch, Berdir, alexpott: Define the revision metadata base fields in the entity annotation in order for the storage to create them only in the revision table