backport runner fixes to 3-2-stable

Add a runner hook to Rails::Application and Rails::Engine that requires
ActiveRecord::Base to avoid circular constant loading when using observers.

This commit backports cc7dd66, c0ba0f0 and 8d01c61.
adding test for CVE
Fix ORA-00972 error at test_rename_table_with_prefix_and_suffix

backport pull request#5837 to 3-2-stable
Merge pull request #9471 from yahonda/5837_32-stable

Fix ORA-00972 error at test_rename_table_with_prefix_and_suffix
Revert "Skip test_remove_column_with_array_as_an_argument_is_deprecated with Oracle adapter."

This reverts commit 7544c7a9f290a3ea25099ae38d52795458391785.

Oracle enhanced adapter is supporting remove_column with Array.
Merge pull request #9472 from yahonda/revert_7544c7a9

Revert "Skip test_remove_column_with_array_as_an_argument_is_deprecated ...
Enforce i18n version >= v0.6.4

v0.6.2 and v0.6.3 both have issues with Ruby 1.8.7, see
https://github.com/svenfuchs/i18n/issues/192 for more info.
Backported #6755 to 3-2-stable. Don't read csv file during executing db:fixtures:load.
Merge pull request #9485 from authorNari/backport-6755-to-3-2-stable

Backported #6755 to 3-2-stable. Don't read csv file during executing db:fixtures:load.

CSV fixtures have already been removed some time ago in 1716da07204193c8acf967e2d75a53a82e4c7c28, but the task was still loading them, even though later it tried to find the related yaml file.
Improve AR changelog [ci skip]
Update docs, change_table does not use TableDefinition.

[ci skip]

Conflicts:
	activerecord/lib/active_record/connection_adapters/abstract/schema_definitions.rb
Freeze columns only once per Result

Conflicts:
	activerecord/lib/active_record/result.rb
remove unused path_without_format variable

Was forgotten in a72dab0.
Fix typo on CHANGELOG.md
Merge pull request #9528 from korny/patch-1

Fix unused variable warning in mapper.rb
Merge pull request #9531 from erik-escobedo/patch-1

Fix typo on ActionPack's ChangeLog
Fix issue #7526. Reload the target if it's stale.

* This has been fixed at master via `365b8b6`, but not at 3-2-stable branch.

* @stale_state should be nil when a model isn't saved. via `0f3901e`.

* set @stale_state to nil when reset the target.
Backport fixes about #7774 to 3-2-stable

Fix ActionDispatch::Request#formats when HTTP_ACCEPT header is an empty
string.
Merge pull request #9543 from maximerety/backport_fix_7774

Backported #7774 to 3-2-stable
Update CHANGELOGs for 3.2.13.rc1