Issue #2105947 by vijaycs85, japerry: Make sure all config yml files in Entity Reference module has no type-casting to string.
Issue #1798296 by damiankloip, Xano, David_Rothstein, Crell, dawehner: Integrate CSRF link token directly into routing system.
Issue #2124619 by alexpott: Stop creating user_picture() field programatically.
Issue #2112045 by Wim Leers, Berdir: Fix up documentation for cache tags
Issue #2103163 by pfrenssen: Fix up docs for ControllerBase::redirect
Issue #1793990 by vladan.me, chx, socketwench, -enzo-: Fix up docs on Config class
Issue #2127941 by Gábor Hojtsy: Remove two (out of 3) bogus and duplicate date languages UIs.
Issue #2120505 by tstoeckler, dawehner: Remove MatcherDumper::MAX_PARTS.
Issue #2132795 by tstoeckler: Remove \Drupal\Core\Routing\RouteCompiler::MAX_PARTS.
Issue #2119471 by Xano, swentel, amateescu: FieldInterface::getBundles() no longer needs to be nested.
Issue #2113621 by catch, ParisLiakos: Convert PhpStorageFactory from global  to settings.
Issue #1959338 by superspring, urwen, tim.plunkett, damiankloip: Reroll: Remove PHP4-style references for objects.
Issue #2128399 by olli: View preview is broken in UI if more link is displayed.
Issue #1798296 follow-up by andypost: Correct typo in route name.
Issue #1912806 by dcrocks, marthinal, jthorson, amateescu, julien, sun: Regression: 'User Account' displayed on front page for anonymous users.
Issue #2121461 by Xano: \Drupal\Core\EventSubscriber\ViewSubscriber::onHtml() does not allow controllers to return string content.
Issue #2084535 by sivaji: Remove incorrect line from file_copy docs
Issue #2085201 by jessebeach, tim.plunkett, dawehner, yoroy: Use sensible block categories (rather than module-name categories).
Issue #1956448 by benjy, tim.plunkett, ed.hollinghurst, YesCT: Use the block instance title on the block admin listing.