Issue #1587270 by klausi: Added comment in .htaccess describing how to forbid execution of PHP files in subfolders.
Issue #2100329 by cosmicdreams: Use \Drupal instead of Drupal to make IDEs and static code analyse tools happy.
Issue #1798732 by sun, Dean Reilly, mbrett5062, chx, westie, alexpott, juanolalla, Mark Carver, catch, jthorson, cam8001, Berdir: Convert install_task(), install_time() and install_current_batch() to use the state system.
Issue #2098697 by tstoeckler, sxnc, Gábor Hojtsy: Provide a LocaleConfigManager::hasTranslation().
Issue #2080401 by Bladedu, mrsinguyen, lokapujya, pfrenssen: Remove Unused local variable  from /core/modules/simpletest/lib/Drupal/simpletest/Tests/SimpleTestTest.php.
Issue #2096595 by neclimdul, damiankloip, tim.plunkett, Mile23, ParisLiakos: Make all PHPUnit tests pass with --strict.
Issue #2099671 by salvis: Fixed Windows 7 and MTimeProtectedFileStorage has problems.
Issue #1788610 by chertzog, fjd, brainbender: Hook_update_N has unreachable UpdateException.
Issue #2049207 by dlu, blakehall, janstoeckler, ramlev, Moderate | Cottser: Replace .tpl.php with .html.twig in documentation.
Issue #2095613 by juanolalla, g.oechsler, grisendo | YesCT: Convert all plugin IDs in local_tasks().yml to 'module_name().foo_bar()' naming convention to match routing convention.
Issue #2091691 by tim.plunkett: Convert test non-form page callbacks to routes and controllers.
Issue #1953408 by swentel, aspilicious, andypost, yched: Remove ArrayAccess BC layer from field config entities.
Issue #2095693 by Xano, tim.plunkett: Fixed FilterFormatAccessController always grants access for any operation on the fallback format.
Issue #1936216 by stkrzysiak, kfritsche, Schnitzel, webflo, grisendo: Fixed Configuration language selectors should have English even if English is not on the site.
Issue #1653026 by damiankloip, alexpott, sun, tim.plunkett, dawehner, mtift: Fixed All configuration values are stored as strings.
Issue #1969256 by zhuber, ronan.orb: Replace stdClass with object in param docs, as per standards
Issue #2057401 by plach, socketwench, kfritsche: Fixed Make the node entity database schema sensible.
Issue #2104329 by pameeela, larowlan: Fix see link in Xss class
Issue #2104353 by pameeela, larowlan: Fix up docblock for isLocked method on NodeTypeInterface
Issue #2084659 by Xano: Fix indentation in return docblock for db_installer_object