Fix #14036. Remove user/pass from ajaxLocation. Close gh-1340.
(cherry picked from commit eb1a2afc9fb1d990d10358aab0e17bc0ce1d1db3)
Modify release script to create a headless tag for bower and publish to NPM

Conflicts:
	build/release.js
Update Sizzle: remove the use of version ranges

Conflicts:
	bower.json
Use grunt and bower packages as local dependencies. Close gh-1433.
Update sizzle location in release script
Fix #14475. Use IE11-friendly detect for proper XHR object.

We don't seem to have test cases for local file access.
Ref #14180, let focusin/out work on non-element targets.
(cherry picked from commit c2aca17d457d302cb1683f925b9e5ee93f0984ea)

Conflicts:
	src/event.js
Fix #14503: Cast to string before setting XHR header. Close gh-1427.
Ref 27b22f4e: Don't try to outsmart Apache
Ref 27b22f4e: Remove oldIE-unfriendly trailing comma