Bug 1105795 - Avoid ClassCastException in testAboutHomeVisibility; r=mcomella
Bug 1105887 - Wait for panel in testAboutHomeVisibility; r=mcomella
Bug 1105792 - Avoid assertions in testHomeBanner; r=margaret
Bug 1105792 - Simplify testHomeBanner to account for the fact that banner view is removed when banner is dismissed; r=gbrown
Bug 1090927 - Rename private test... functions in testGeckoProfile; r=mfinkle
Bug 1105522 - Copy Robocop exception handling into UITest; r=jmaher
Bug 1107002 - Update robocop dismissEditingMode for tablets; r=mcomella
Bug 1085837 - Open legacy "More" menu before asserting menu item is disabled; r=liuche
Bug 1032414: Always return failure in OnStopRequest on network error (r=gcp)
Bug 1090636, part 14 - Rewrite SetPropertyHelper. r=efaust.

With this patch:

*   SetPropertyHelper no longer calls lookupProperty hooks, which is nice
    since there's no such thing in ES6.

*   As SetPropertyHelper walks the prototype chain, as soon as it reaches a
    non-native object, it calls that object's set hook, passing the original
    receiver, and returns.

    This means Proxy set traps will now be called per spec when triggered via
    the prototype chain from a native object.

    It also means that legacy scripted indirect proxies (Proxy.create) will
    now sometimes have their set trap called when it wouldn't have been called
    before. This seems to be confined to fuzztests in practice, since it only
    matters when the proxy is used as the prototype of an ordinary object.
    But it could cause trouble.

    The same situation affects other proxies too: BaseProxyHandler::set() and
    its overrides will all be called in new situations. It's inevitable though;
    Reflect.set was going to enable all these situations anyway.

--HG--
extra : rebase_source : 01bb32b4950ea14922f135bf785aea7d298c8dfb
Bug 1052825 - Part 2: DOM changes for using WebIDL enum in lockType. r=smaug
Bug 1052825 - Part 3: RIL and test changes for lockType WebIDL enum. r=hsinyi
Bug 1090636, part 15 - Optimize away the HasOwnProperty call in SetPropertyByDefining, in the common case. No change in behavior, theoretically. r=efaust.

--HG--
extra : rebase_source : 98930753e4c19c0db6db8912178d27b0fa5fea2e
Bumping gaia.json for 2 gaia revision(s) a=gaia-bump

========

https://hg.mozilla.org/integration/gaia-central/rev/ac22f87d6786
Author: James Burke <jrburke@gmail.com>
Desc: Merge pull request #26747 from jrburke/bug1110885-email-password-text-select

Bug 1110885 - [Email] Password field can not utilize Text Selection or Cut/Copy Paste functionality r=asuth

========

https://hg.mozilla.org/integration/gaia-central/rev/f3c5767d1222
Author: jrburke <jrburke@gmail.com>
Desc: Bug 1110885 - [Email] Password field can not utilize Text Selection or Cut/Copy Paste functionality
Bumping manifests a=b2g-bump
Bumping manifests a=b2g-bump
Bumping gaia.json for 2 gaia revision(s) a=gaia-bump

========

https://hg.mozilla.org/integration/gaia-central/rev/6369b3b6c2a6
Author: Sherman Chen <shamenchens@users.noreply.github.com>
Desc: Merge pull request #26689 from shamenchens/Bug1105124-USSDResponseText-master

Bug 1105124 - Clear response text when MMI response form is closed, r=gsvelto

========

https://hg.mozilla.org/integration/gaia-central/rev/ad57d4b45a1d
Author: Sherman Chen <shamen.chens@gmail.com>
Desc: Bug 1105124 - Clear response text when MMI response form is closed
Bumping manifests a=b2g-bump
Merge m-c to b2g-inbound a=merge
Bug 1104055 - fix CameraControl memory leak, r=aosmond