Allow escaping only attributes of a link and not it's title
CakeEmail::emailRegex() change to null default value
Update build scripts to fetch new changes.

Prevent future mistakes when creating tags by always fetching the branch
head before bumping version numbers or creating tags.
Add an additional test for CakeRequest::referer().

Trying to track down the issue for #3897. This test coverage was
missing, so fix that.
Fix issue where redirectURLs were not generated correctly.

When the first path segment matches the base path an incorrect URL was
generated. Trimming slashes off makes Router normalize the URL correctly
as the leading / implies that the base is already prepended.

Fixes #3897
Merge branch 'master' into 2.4
Fix for #3318

Fixes https://cakephp.lighthouseapp.com/projects/42648-cakephp/tickets/3318

It seems fixing this in the htaccess file(s) isn't going to work even though a url rewriting based solution was more clean. On the plus side this works for any web server.
If a url is called with "index.php" in it then the CakeRequest swallows this part and fixes the path. Any linked url from the requested page will have a clean url. Thus after following one of these urls this problem is gone anyway.

Some code docblock improvements to CakeRequestTest.php
Added test case for fix
Also now you can call just index.php even if you have url rewriting enabled
change emailRegex to emailPattern
Typo in FormAuthenticate.php
Merge pull request #1388 from ravage84/patch-1

Typo in FormAuthenticate.php
Merge pull request #1380 from ceeram/2.4-ext

Set extension with multiple accept based on order in parseExtensions.
Made _stop() usage in Consoles / Tasks more consistent
Merge pull request #1389 from tersmitten/consistent-usage-of-stop

Made _stop() usage in Consoles / Tasks more consistent
Merge pull request #1375 from dereuromark/master-cake-email

Move boundary calculation inside _render()
Merge pull request #1386 from nojimage/cakeemail-custom-email-validation

CakeEmail class be able to setting custom email validation rule.
Don't load classnames with `..` in their names.

Classnames with . in them are invalid and can be leveraged to load code
outside of an application by traversing directories.
Hash passwords even when users don't exist.

Not hashing passwords when users don't exist means there is an
opportunity for timing attacks when people use blowfish or other
expensive hashing algorithms.
Merge pull request #1377 from ravage84/fix-for-3318

Trim off webroot/index.php when determining base and url.

Trimming off index.php from url and webroot/index.php from base url allows the correct values to be created when a path contains index.php in it.

Fixes #3318
Fix coding standards.
Use simpler and faster code.

substr_compare() is up to 2x slower than just substr(). Use a faster,
more common, and simpler to read variant of the same thing.