- Patch #461938 by Kars-T, Garrett Albright, JamesAn, grendzy: fixed inconsistent use of filter_xss_admin() on () and ().

- Patch #676800 by casey, sun, james.elliott, cosmicdreams, seutje, Jacine: made fieldsets work on all browser.

- Patch #353918 by Dave Reid, yched: drupal_write_record() writes empty string instead of empty serialized array.

- Patch #671520 by mr.baileys, cha0s, boombatower, andypost: CURL and fragment URLs break testing due to a bug in some CURL versions.

- Patch #358315 by neochief, andypost, Damien Tournoud, catch, xurizaemon: drupal_lookup_path() not respects alias' order.

- Patch #347959 by sun, Damien Tournoud, justinrandell, scor, chx: modules_installed() was broken during testing.

- Patch #727650 by Damien Tournoud: made OpenID more pluggable so we can extend it in contrib, and added support for Google's OpenID discovery protocol.

- Patch #634562 by vgarvardt, Damien Tournoud: added OpenID AX support (in addition to SREF) so that we can extend our OpenID implementation in contrib.

- Patch #243251 by naxoc, Signe, lilou, mcarbone: JavaScript requiring a query string cannot be loaded.

- Patch #279851 by catch, David Strauss, Damien Tournoud, asimmonds, c960657, JohnAlbin, drawk, pwolanin, robertDouglass, coltrane: replace LOWER() with db_select() and LIKE() where possible.

- Patch #582948 by Damien Tournoud, agentrickard: improve safety of schema manipulation to help with upgrade path.

- Patch #691938 by carlos8f, mr.baileys: block caching per-role, per-user, per-page was broken. With new tests.