Bug 962313 - Disable <input type=number> for v28. r=smaug, a=lsblakk
Bug 969800 - Fix nsMemoryReporterManager::GetVsize for !HAVE_VSIZE_AND_RESIDENT_REPORTERS and add GNU/kFreeBSD support to nsMemoryReporterManager. r=njn, a=NPOTB
Bug 969839 - Bump required NSPR version to 4.10.3. r=gps, a=NPOTB
Bug 965745 - Always patch loop backedges in Ion if interrupt flag is set. r=jandem, a=sledru
Bug 968267 - Passive updates might not restart properly in metro mode. r=bbondy, a=sledru
Bug 966510 - Scroll frame display items are never opaque. r=roc, a=sledru

The content they contain may be moved, so any region that is opaquely covered at paint time may not be later.

This problem was made worse by bug 951467 because it made the bounds of the scroll layer item be the bounds of the scrollport is all cases (making it return wrong results even at paint time), instead of the bounds of the contained content (meaning the results would only be wrong after async scroll).
Bug 968774 - Don't set XUL_APP_FILE on metrofx startup. r=mbrubeck, a=sledru
Merge mozilla-beta to b2g28. a=merge