fix(menu): check if admin page menu items exist before sorting them

Allow admin page menu to be altered without causing WSOD. Adds regression test
Fixes #6379
Merge pull request #6397 from hypeJunction/admin-menu-sort

Fixes #6379: Makes sure that page menu items exist before trying to prepare them for viewing
fix(cache): removes memory leak when clearing an entity's metadata cache


When clearing the metadata cache for a particular entity, an empty array was
unnecessarily left for each GUID removed from cache. This instead removes the
entire key for the GUID.
perf(batch): reduce memory usage during batch processes

Result sets for batch queries tend to be large and bloat the query
cache without being of much use. Since the LRU cache is limited in
key size (not memory size), the simplest solution is to flush it
during batch operations.
Merge pull request #6423 from mrclay/metadata_clear_leak

fix(cache): removes memory leak when clearing an entity's metadata cache
Merge pull request #6424 from mrclay/reduce_batch_mem_usage

perf(batch): reduce memory usage during batch processes
feature(users): making nicer lost password process

1. User clicks "forgot password" and makes request
2. User receives via e-mail a URL to reset password
3. Accessing URL gives user a form to set her new password (uses temporary session bound to user account, but not logged in)
4. If password fields agree (and pass requirements), the password is set on the account, and the user is logged in.

There's just no need for the temporary password and forcing the user to login and change it.

Fixes #5886
chore(users): differentiating between user changing password and admin reset
security(users): making change password emails expire
fix(rss): corrects syntax errors preventing RSS validation

Now RSS pages with files will be validated by W3C and are more likely
to be handled by a wide variety of RSS readers.

Fixes #6411
Merge branch 'gerard-kanters-patch-5' into 1.8
chore(users): refactoring password reset action and function

Password reset action is using force_user_password_reset function.
The execute_new_password_request function sends the password by email
when it's generated randomly.
chore(output): add deprecation warning and update docs

Adds a deprecation warning for use of js attribute, updates docs with an example, removes the todo for style (support for this would require additional overhead for checking proper tokenization, whether or not style properties are closed with semicolon etc)
perf(groups): remove redundant filter of user-owner group acls

Since 1.8 upgrade the iteration to filter out acls that define group membership and are owned by the user are redundant

Fixes #6434
Merge pull request #6459 from hypeJunction/groups-write-access-hook

Fixes #6434: remove redundant filter of user-owner group acls
chore(thewire): few code enhancements in the wire js file
Merge pull request #354 from sembrestels/thewire-js-php

TheWire js cleanup
fix(groups): forces content accessibility to members_only for invisible groups

When user selects "Group members only" for group visibility, javascript sets
the group content accessibility field to "Members only" and disables it.

For existing groups the above is done also on server side.

When editing an existing public group, a warning is added under the group
content accessibility input saying that changing the setting won't change
the access permission of existing group content.
fix(core): Not redirecting in plugin and site entity views.

This redirect is infuriating to encounter if you pass invalid options to ege() and wind up on the index page for no apparent reason.

Fixes #4439.
chore(admin): Moved site secret regeneration to advanced settings.

Fixes #6443.