Added 3.1.0-rc3 changelog
Tagged 3.1.0-rc3
API Escape form validation messages (SS-2013-008)
FIX Auto-escape titles in TreeDropdownField

Related to SS-2013-009. While the default "TreeTitle" was escaped
within the SiteTree->TreeTitle() getter, other properties like SiteTree->Title
weren't escaped. The new logic uses the underlying casting helpers
on the processed objects.
FIX Escape breadcrumbs in SecurityAdmin (SS-2013-007)
Don't link record in GridField form message

This is no longer allows through Form->sessionMessage() to avoid XSS.
Updated translations
Minor changelog fixes
BUGFIX: Without casting TreeTitle as HTMLText, unescape HTML appears in TreeDropdownField
BUG Issue with login form failing to login in certain situations. Fixes issue #2424