- Patch #237754 by Robert Douglass and David Lesieur: search_index hardcoded the weights of HTML elements.  Made them configurable through variable_get().

- Patch #247095 by drewish ad flobruit: upload module performs permission checks on files it doesn't control.

- Patch #258128 by webchick: @parameter should be @param.  Gets the Most Trivial Patch of the Month Award.

- Patch #256152 by catch: added additional tests for the IP address blocking and added a small usability improvement.

- Patch #73874 by pwolanin: normalize the permissions table and wrote simpletests for the (new) permission handling.  At last.

- Patch #248436 by catch: fixed some bugs in the statistics module, wrote some tests, and made some minor usability improvments along the way.  That is _exactly_ how we like it.

  et al.  Can you say 'registry'?  Drupal now maintains an internal registry of
  all functions or classes in the system, allowing it to lazy-load code files as
  needed (reducing the amount of code that must be parsed on each request). The
  list of included files is cached per menu callback for subsequent loading by
  the menu router. This way, a given page request will have all the code it needs
  but little else, minimizing time spent parsing unneeded code.

  et al.  Can you say 'registry'?  Drupal now maintains an internal registry of
  all functions or classes in the system, allowing it to lazy-load code files as
  needed (reducing the amount of code that must be parsed on each request). The
  list of included files is cached per menu callback for subsequent loading by
  the menu router. This way, a given page request will have all the code it needs
  but little else, minimizing time spent parsing unneeded code.

- Patch #251473 by webchick, chx, et al: one step closer to running tests in the includes directory.  Not working yet.

- Modified patch #230374 by killes, jakeg, Eaton et al: corrected problem with form API caches not being flushed.  This could lead to performance issues.