updating changelogs
CVE-2012-5664 options hashes should only be extracted if there are extra parameters
bumping to 3.0.18
* Strip nils from collections on JSON and XML posts. [CVE-2013-0155] * dealing with empty hashes. Thanks Damien Mathieu

Conflicts:
	actionpack/CHANGELOG.md
	activerecord/CHANGELOG.md

Conflicts:
	actionpack/CHANGELOG.md
	activerecord/CHANGELOG.md
	activerecord/lib/active_record/relation/predicate_builder.rb
CVE-2013-0156: Safe XML params parsing. Doesn't allow symbols or yaml.
bumping version
Remove test for XML YAML parsing

The support for YAML parsing in XML has been removed from Active Support
since it introduced an security risk. See a494824 for more detail.
Merge pull request #8836 from sikachu/3-0-stable-fix-ars

Remove test for XML YAML parsing
Methods that return nil should not be considered YAML

This is a direct port of @jaw6's pull request
https://github.com/rails/rails/pull/492. His cleanly applied to Rails
v3.1 and v3.2, and this cleanly applies to v3.0.

With yesterday's security patches
http://weblog.rubyonrails.org/2013/1/8/Rails-3-2-11-3-1-10-3-0-19-and-2-3-15-have-been-released/
there is now an issue with Rails v3.0 serving XML to any of the latest
versions of ActiveResource.

Without this, Rails v3.0 can serve XML to ActiveResource consumers that
will see `Hash::DisallowedType: Disallowed type attribute: "yaml"`
Merge pull request #8853 from zmoazeni/3-0-xml-serialization-fix

Methods that return nil should not be considered YAML
Update changelogs with release dates and minor improvements [ci skip]
Fix JSON params parsing regression for non-object JSON content.

Backports #8855.
Merge pull request #8890 from dylanahsmith/3-0-parse-non-object-json-params

3-0-stable: Fix JSON params parsing regression for non-object JSON content.
Remove unnecessary caching of ParameterFilter