.gitlab-ci.yml

-# cspell:ignore codequality Micheh micheh webide updatedb
+# cspell:ignore codequality Micheh micheh webide updatedb stylelintrc
 
 ################
 # Drupal GitLabCI template.
@@ -59,6 +59,7 @@ variables:
   _CONFIG_DOCKERHUB_ROOT: "drupalci"
   # Let composer know what self.version means.
   COMPOSER_ROOT_VERSION: "${CI_MERGE_REQUEST_TARGET_BRANCH_NAME}${CI_COMMIT_BRANCH}-dev"
+  COMPOSER_ALLOW_SUPERUSER: 1
   CONCURRENCY: 24
   GIT_DEPTH: "50"
   PARENT_PIPELINE_ID: $CI_PIPELINE_ID
@@ -204,6 +205,12 @@ default:
     _TARGET_PHP: "8.3"
     _TARGET_DB: "mariadb-10.3.22"
 
+'PHP 8.3 MariaDB 10.6':
+  <<: [ *default-stage, *run-on-mr ]
+  variables:
+    _TARGET_PHP: "8.3"
+    _TARGET_DB: "mariadb-10.6"
+
 'PHP 8.3 PostgreSQL 14.1':
   <<: [ *default-stage, *run-on-mr ]
   variables:
@@ -222,10 +229,10 @@ default:
     _TARGET_PHP: "8.3"
     _TARGET_DB: "pgsql-16"
 
-'PHP 8.3 SQLite 3':
+'PHP 8.3 SQLite 3.45':
   <<: [ *default-stage, *run-on-mr ]
   variables:
-    _TARGET_PHP: "8.3"
+    _TARGET_PHP: "8.3-ubuntu"
     _TARGET_DB: "sqlite-3"
 
 # Jobs running on commits.
@@ -240,8 +247,8 @@ default:
   needs: [ '[Commit] PHP 8.3 MySQL 5.7' ]
   <<: [ *run-on-commit ]
 
-'[Commit] PHP 8.3 SQLite 3':
-  extends: 'PHP 8.3 SQLite 3'
+'[Commit] PHP 8.3 SQLite 3.45':
+  extends: 'PHP 8.3 SQLite 3.45'
   needs: [ '[Commit] PHP 8.3 PostgreSQL 16' ]
   <<: [ *run-on-commit ]
 
@@ -252,14 +259,14 @@ default:
   needs: [ 'DEFAULT: PHP 8.3 MySQL 8' ]
   <<: [ *run-daily ]
 
-'[Daily] PHP 8.3 SQLite 3':
-  extends: 'PHP 8.3 SQLite 3'
+'[Daily] PHP 8.3 SQLite 3.45':
+  extends: 'PHP 8.3 SQLite 3.45'
   needs: [ '[Daily] PHP 8.3 PostgreSQL 16' ]
   <<: [ *run-daily ]
 
 '[Daily] PHP 8.3 MariaDB 10.3.22':
   extends: 'PHP 8.3 MariaDB 10.3.22'
-  needs: [ '[Daily] PHP 8.3 SQLite 3' ]
+  needs: [ '[Daily] PHP 8.3 SQLite 3.45' ]
   <<: [ *run-daily ]
 
 ################
@@ -284,9 +291,9 @@ default:
       - vendor/
   script:
       - composer validate
-      - composer install
+      - composer install --optimize-autoloader
       - if [ -n "$COMPOSER_UPDATE" ]; then
-          composer update;
+          composer update --optimize-autoloader;
           composer outdated;
         fi
 
@@ -367,6 +374,8 @@ default:
     - if: $CI_PIPELINE_SOURCE == "push" && $CI_PROJECT_ROOT_NAMESPACE == "project"
     - if: $CI_PIPELINE_SOURCE == "merge_request_event"
       changes:
+        - core/.eslint*
+        - core/.prettier*
         - core/package.json
         - core/yarn.lock
         - "**/*.js"
@@ -392,6 +401,7 @@ default:
     - if: $CI_PIPELINE_SOURCE == "push" && $CI_PROJECT_ROOT_NAMESPACE == "project"
     - if: $CI_PIPELINE_SOURCE == "merge_request_event"
       changes:
+        - core/.stylelintrc.json
         - core/package.json
         - core/yarn.lock
         - "**/*.css"

.htaccess

@@ -137,10 +137,6 @@ AddEncoding gzip svgz
   RewriteCond %{REQUEST_URI} !/core/[^/]*\.php$
   # Allow access to test-specific PHP files:
   RewriteCond %{REQUEST_URI} !/core/modules/system/tests/https?\.php
-  # Allow access to Statistics module's custom front controller.
-  # Copy and adapt this rule to directly execute PHP files in contributed or
-  # custom modules or to run another PHP application in the same directory.
-  RewriteCond %{REQUEST_URI} !/core/modules/statistics/statistics\.php$
   # Deny access to any other PHP files that do not match the rules above.
   # Specifically, disallow autoload.php from being served directly.
   RewriteRule "^(.+/.*|autoload)\.php($|/)" - [F]

composer.json

@@ -35,6 +35,7 @@
         "phpstan/phpstan-phpunit": "^1.3.16",
         "phpunit/phpunit": "^9.6.13",
         "symfony/browser-kit": "^7.0",
+        "symfony/config": "^7",
         "symfony/css-selector": "^7.0",
         "symfony/dom-crawler": "^7.0",
         "symfony/error-handler": "^7.0",

composer/Metapackage/CoreRecommended/composer.json

@@ -11,18 +11,19 @@
         "asm89/stack-cors": "~v2.2.0",
         "composer/semver": "~3.4.0",
         "doctrine/annotations": "~2.0.1",
-        "doctrine/deprecations": "~1.1.2",
-        "doctrine/lexer": "~2.1.0",
+        "doctrine/deprecations": "~1.1.3",
+        "doctrine/lexer": "~2.1.1",
         "egulias/email-validator": "~4.0.2",
         "guzzlehttp/guzzle": "~7.8.1",
         "guzzlehttp/promises": "~2.0.2",
         "guzzlehttp/psr7": "~2.6.2",
-        "masterminds/html5": "~2.8.1",
-        "mck89/peast": "~v1.15.4",
-        "pear/archive_tar": "~1.4.14",
+        "masterminds/html5": "~2.9.0",
+        "mck89/peast": "~v1.16.2",
+        "pear/archive_tar": "~1.5.0",
         "pear/console_getopt": "~v1.4.3",
-        "pear/pear-core-minimal": "~v1.10.14",
+        "pear/pear-core-minimal": "~v1.10.15",
         "pear/pear_exception": "~v1.0.2",
+        "php-tuf/composer-stager": "~v2.0.0-rc1",
         "psr/cache": "~3.0.0",
         "psr/container": "~2.0.2",
         "psr/event-dispatcher": "~1.0.0",
@@ -30,19 +31,19 @@
         "psr/http-factory": "~1.0.2",
         "psr/log": "~3.0.0",
         "ralouphie/getallheaders": "~3.0.3",
-        "sebastian/diff": "~4.0.5",
-        "symfony/console": "~v7.0.4",
-        "symfony/dependency-injection": "~v7.0.4",
+        "sebastian/diff": "~4.0.6",
+        "symfony/console": "~v7.0.6",
+        "symfony/dependency-injection": "~v7.0.6",
         "symfony/deprecation-contracts": "~v3.4.0",
-        "symfony/error-handler": "~v7.0.4",
+        "symfony/error-handler": "~v7.0.6",
         "symfony/event-dispatcher": "~v7.0.3",
-        "symfony/event-dispatcher-contracts": "~v3.4.0",
-        "symfony/filesystem": "~v7.0.3",
+        "symfony/event-dispatcher-contracts": "~v3.4.2",
+        "symfony/filesystem": "~v7.0.6",
         "symfony/finder": "~v7.0.0",
-        "symfony/http-foundation": "~v7.0.4",
-        "symfony/http-kernel": "~v7.0.5",
-        "symfony/mailer": "~v7.0.4",
-        "symfony/mime": "~v7.0.3",
+        "symfony/http-foundation": "~v7.0.6",
+        "symfony/http-kernel": "~v7.0.6",
+        "symfony/mailer": "~v7.0.6",
+        "symfony/mime": "~v7.0.6",
         "symfony/polyfill-ctype": "~v1.29.0",
         "symfony/polyfill-iconv": "~v1.29.0",
         "symfony/polyfill-intl-grapheme": "~v1.29.0",
@@ -50,16 +51,16 @@
         "symfony/polyfill-intl-normalizer": "~v1.29.0",
         "symfony/polyfill-mbstring": "~v1.29.0",
         "symfony/process": "~v7.0.4",
-        "symfony/psr-http-message-bridge": "~v7.0.3",
-        "symfony/routing": "~v7.0.5",
-        "symfony/serializer": "~v7.0.4",
-        "symfony/service-contracts": "~v3.4.1",
+        "symfony/psr-http-message-bridge": "~v7.0.6",
+        "symfony/routing": "~v7.0.6",
+        "symfony/serializer": "~v7.0.6",
+        "symfony/service-contracts": "~v3.4.2",
         "symfony/string": "~v7.0.4",
-        "symfony/translation-contracts": "~v3.4.1",
-        "symfony/validator": "~v7.0.5",
-        "symfony/var-dumper": "~v7.0.4",
-        "symfony/var-exporter": "~v7.0.4",
+        "symfony/translation-contracts": "~v3.4.2",
+        "symfony/validator": "~v7.0.6",
+        "symfony/var-dumper": "~v7.0.6",
+        "symfony/var-exporter": "~v7.0.6",
         "symfony/yaml": "~v7.0.3",
-        "twig/twig": "~v3.8.0"
+        "twig/twig": "~v3.9.3"
     }
 }

composer/Metapackage/DevDependencies/composer.json

@@ -27,6 +27,7 @@
         "phpstan/phpstan-phpunit": "^1.3.16",
         "phpunit/phpunit": "^9.6.13",
         "symfony/browser-kit": "^7.0",
+        "symfony/config": "^7",
         "symfony/css-selector": "^7.0",
         "symfony/dom-crawler": "^7.0",
         "symfony/error-handler": "^7.0",

composer/Metapackage/PinnedDevDependencies/composer.json

@@ -11,17 +11,17 @@
         "behat/mink": "v1.11.0",
         "behat/mink-browserkit-driver": "v2.2.0",
         "colinodell/psr-testlogger": "v1.3.0",
-        "composer/ca-bundle": "1.3.7",
-        "composer/class-map-generator": "1.1.0",
-        "composer/composer": "2.7.1",
+        "composer/ca-bundle": "1.5.0",
+        "composer/class-map-generator": "1.1.1",
+        "composer/composer": "2.7.2",
         "composer/metadata-minifier": "1.0.0",
-        "composer/pcre": "3.1.1",
+        "composer/pcre": "3.1.3",
         "composer/spdx-licenses": "1.5.8",
-        "composer/xdebug-handler": "3.0.3",
+        "composer/xdebug-handler": "3.0.4",
         "dealerdirect/phpcodesniffer-composer-installer": "v1.0.0",
         "doctrine/instantiator": "2.0.0",
-        "drupal/coder": "8.3.22",
-        "google/protobuf": "v3.25.1",
+        "drupal/coder": "8.3.23",
+        "google/protobuf": "v3.25.3",
         "justinrainbow/json-schema": "v5.2.13",
         "lullabot/mink-selenium2-driver": "v1.7.2",
         "lullabot/php-webdriver": "v2.0.3",
@@ -29,63 +29,64 @@
         "micheh/phpcs-gitlab": "1.1.0",
         "mikey179/vfsstream": "v1.6.11",
         "myclabs/deep-copy": "1.11.1",
-        "nikic/php-parser": "v4.18.0",
-        "open-telemetry/api": "1.0.0",
-        "open-telemetry/context": "1.0.0",
-        "open-telemetry/exporter-otlp": "1.0.0",
-        "open-telemetry/gen-otlp-protobuf": "1.0.0",
-        "open-telemetry/sdk": "1.0.1",
-        "open-telemetry/sem-conv": "1.23.1",
-        "phar-io/manifest": "2.0.3",
+        "nikic/php-parser": "v5.0.2",
+        "open-telemetry/api": "1.0.3",
+        "open-telemetry/context": "1.0.2",
+        "open-telemetry/exporter-otlp": "1.0.4",
+        "open-telemetry/gen-otlp-protobuf": "1.1.0",
+        "open-telemetry/sdk": "1.0.8",
+        "open-telemetry/sem-conv": "1.24.0",
+        "phar-io/manifest": "2.0.4",
         "phar-io/version": "3.2.1",
-        "php-http/discovery": "1.19.2",
+        "php-http/discovery": "1.19.4",
         "php-http/guzzle7-adapter": "1.0.0",
         "php-http/httplug": "2.4.0",
-        "php-http/promise": "1.2.1",
+        "php-http/promise": "1.3.1",
         "phpdocumentor/reflection-common": "2.2.0",
-        "phpdocumentor/reflection-docblock": "5.3.0",
-        "phpdocumentor/type-resolver": "1.7.3",
-        "phpspec/prophecy": "v1.18.0",
-        "phpspec/prophecy-phpunit": "v2.1.0",
+        "phpdocumentor/reflection-docblock": "5.4.0",
+        "phpdocumentor/type-resolver": "1.8.2",
+        "phpspec/prophecy": "v1.19.0",
+        "phpspec/prophecy-phpunit": "v2.2.0",
         "phpstan/extension-installer": "1.3.1",
-        "phpstan/phpdoc-parser": "1.24.4",
+        "phpstan/phpdoc-parser": "1.28.0",
         "phpstan/phpstan": "1.10.66",
         "phpstan/phpstan-deprecation-rules": "1.1.4",
         "phpstan/phpstan-phpunit": "1.3.16",
-        "phpunit/php-code-coverage": "9.2.29",
+        "phpunit/php-code-coverage": "9.2.31",
         "phpunit/php-file-iterator": "3.0.6",
         "phpunit/php-invoker": "3.1.1",
         "phpunit/php-text-template": "2.0.4",
         "phpunit/php-timer": "5.0.3",
-        "phpunit/phpunit": "9.6.15",
+        "phpunit/phpunit": "9.6.19",
         "react/promise": "v3.1.0",
-        "sebastian/cli-parser": "1.0.1",
+        "sebastian/cli-parser": "1.0.2",
         "sebastian/code-unit": "1.0.8",
         "sebastian/code-unit-reverse-lookup": "2.0.3",
         "sebastian/comparator": "4.0.8",
-        "sebastian/complexity": "2.0.2",
+        "sebastian/complexity": "2.0.3",
         "sebastian/environment": "5.1.5",
-        "sebastian/exporter": "4.0.5",
-        "sebastian/global-state": "5.0.6",
-        "sebastian/lines-of-code": "1.0.3",
+        "sebastian/exporter": "4.0.6",
+        "sebastian/global-state": "5.0.7",
+        "sebastian/lines-of-code": "1.0.4",
         "sebastian/object-enumerator": "4.0.4",
         "sebastian/object-reflector": "2.0.4",
         "sebastian/recursion-context": "4.0.5",
-        "sebastian/resource-operations": "3.0.3",
+        "sebastian/resource-operations": "3.0.4",
         "sebastian/type": "3.2.1",
         "sebastian/version": "3.0.2",
-        "seld/jsonlint": "1.10.0",
+        "seld/jsonlint": "1.10.2",
         "seld/phar-utils": "1.2.1",
         "seld/signal-handler": "2.0.2",
         "sirbrillig/phpcs-variable-analysis": "v2.11.17",
-        "slevomat/coding-standard": "8.14.1",
-        "squizlabs/php_codesniffer": "3.8.0",
+        "slevomat/coding-standard": "8.15.0",
+        "squizlabs/php_codesniffer": "3.9.1",
         "symfony/browser-kit": "v7.0.3",
+        "symfony/config": "v7.0.6",
         "symfony/css-selector": "v7.0.3",
         "symfony/dom-crawler": "v7.0.4",
-        "symfony/lock": "v7.0.3",
-        "symfony/phpunit-bridge": "v7.0.4",
-        "theseer/tokenizer": "1.2.2",
+        "symfony/lock": "v7.0.6",
+        "symfony/phpunit-bridge": "v7.0.6",
+        "theseer/tokenizer": "1.2.3",
         "webflo/drupal-finder": "1.2.2",
         "webmozart/assert": "1.11.0"
     }

composer/Plugin/Scaffold/Handler.php

@@ -3,7 +3,6 @@
 namespace Drupal\Composer\Plugin\Scaffold;
 
 use Composer\Composer;
-use Composer\EventDispatcher\EventDispatcher;
 use Composer\Installer\PackageEvent;
 use Composer\IO\IOInterface;
 use Composer\Package\PackageInterface;
@@ -143,7 +142,7 @@ public function scaffold() {
     }
 
     // Call any pre-scaffold scripts that may be defined.
-    $dispatcher = new EventDispatcher($this->composer, $this->io);
+    $dispatcher = $this->composer->getEventDispatcher();
     $dispatcher->dispatch(self::PRE_DRUPAL_SCAFFOLD_CMD);
 
     // Fetch the list of file mappings from each allowed package and normalize

composer/Plugin/Scaffold/README.md

@@ -450,7 +450,6 @@ Sample composer.json for composer-scaffold files in drupal/assets:
         "[web-root]/index.php": "assets/index.php",
         "[web-root]/robots.txt": "assets/robots.txt",
         "[web-root]/update.php": "assets/update.php",
-        "[web-root]/web.config": "assets/web.config"
       }
     }
   }

composer/Plugin/VendorHardening/FileSecurity.php

@@ -100,39 +100,6 @@ protected static function denyPublicAccess() {
 EOF;
   }
 
-  /**
-   * Writes a web.config file in the given directory, if it doesn't exist.
-   *
-   * @param string $directory
-   *   The directory.
-   * @param bool $force
-   *   (optional) Set to TRUE to force overwrite an existing file.
-   *
-   * @return bool
-   *   TRUE if the file already exists or was created. FALSE otherwise.
-   */
-  public static function writeWebConfig($directory, $force = FALSE) {
-    return self::writeFile($directory, 'web.config', self::webConfigLines(), $force);
-  }
-
-  /**
-   * Returns the standard web.config lines for security.
-   *
-   * @return string
-   *   The contents of the web.config file.
-   */
-  public static function webConfigLines() {
-    return <<<EOT
-<configuration>
-  <system.webServer>
-    <authorization>
-      <deny users="*">
-    </authorization>
-  </system.webServer>
-</configuration>
-EOT;
-  }
-
   /**
    * Writes the contents to the file in the given directory.
    *

composer/Plugin/VendorHardening/README.txt

@@ -35,9 +35,9 @@ This plugin can also clean up packages that were installed outside of the
 vendor directory, using composer/installers. This allows users to configure the
 plugin to clean up, for instance, Drupal extensions and Drupal core.
 
-2) The plugin also adds .htaccess and web.config files to the root of the
-project's vendor directory. These files will perform due diligence to keep the
-web server from serving files from within the vendor directory.
+2) The plugin also adds .htaccess file to the root of the
+project's vendor directory. The file will perform due diligence to keep the
+web server from serving file from within the vendor directory.
 
 How do I set it up?
 -------------------

composer/Plugin/VendorHardening/VendorHardeningPlugin.php

@@ -370,18 +370,15 @@ protected function cleanPathsForPackage(PackageInterface $package, $paths_for_pa
   }
 
   /**
-   * Place .htaccess and web.config files into the vendor directory.
+   * Place .htaccess file into the vendor directory.
    *
    * @param string $vendor_dir
    *   Path to vendor directory.
    */
   public function writeAccessRestrictionFiles(string $vendor_dir): void {
-    $this->io->writeError('<info>Hardening vendor directory with .htaccess and web.config files.</info>');
+    $this->io->writeError('<info>Hardening vendor directory with .htaccess file.</info>');
     // Prevent access to vendor directory on Apache servers.
     FileSecurity::writeHtaccess($vendor_dir, TRUE);
-
-    // Prevent access to vendor directory on IIS servers.
-    FileSecurity::writeWebConfig($vendor_dir);
   }
 
 }

core/.cspell.json

@@ -15,19 +15,12 @@
       "**/LICENSE.txt",
       "../**/LICENSE.txt",
       "modules/**/Migrate*Test.php",
-      "modules/book/tests/fixtures/drupal6.php",
-      "modules/book/tests/fixtures/drupal7.php",
       "modules/ckeditor5/js/build/*",
-      "modules/forum/tests/fixtures/drupal6.php",
-      "modules/forum/tests/fixtures/drupal7.php",
       "modules/media/tests/fixtures/oembed/*",
       "modules/migrate_drupal/tests/fixtures/drupal6.php",
       "modules/migrate_drupal/tests/fixtures/drupal7.php",
       "modules/search/tests/UnicodeTest.txt",
-      "modules/statistics/tests/fixtures/drupal6.php",
-      "modules/statistics/tests/fixtures/drupal7.php",
       "modules/system/tests/logo.svgz",
-      "modules/tracker/tests/fixtures/drupal7.php",
       "node_modules/*",
       "profiles/demo_umami/modules/demo_umami_content/default_content/languages/es/**/*",
       "tests/fixtures/files/*",

core/.eslintrc.jquery.json

@@ -5,7 +5,7 @@
   "rules": {
     "jquery/no-ajax": 0,
     "jquery/no-ajax-events": 2,
-    "jquery/no-animate": 0,
+    "jquery/no-animate": 2,
     "jquery/no-attr": 0,
     "jquery/no-bind": 2,
     "jquery/no-class": 0,
@@ -53,4 +53,4 @@
     "jquery/no-when": 2,
     "jquery/no-wrap": 0
   }
-}
+}
\ No newline at end of file

core/.phpstan-baseline.php

@@ -581,11 +581,6 @@
 	'count' => 1,
 	'path' => __DIR__ . '/lib/Drupal/Core/Updater/Module.php',
 ];
-$ignoreErrors[] = [
-	'message' => '#^Method Drupal\\\\action\\\\Form\\\\ActionFormBase\\:\\:save\\(\\) should return int but return statement is missing\\.$#',
-	'count' => 1,
-	'path' => __DIR__ . '/modules/action/src/Form/ActionFormBase.php',
-];
 $ignoreErrors[] = [
 	'message' => '#^Variable \\$position might not be defined\\.$#',
 	'count' => 4,
@@ -616,26 +611,6 @@
 	'count' => 9,
 	'path' => __DIR__ . '/modules/block_content/tests/src/Functional/BlockContentRevisionsTest.php',
 ];
-$ignoreErrors[] = [
-	'message' => '#^Variable \\$callable in empty\\(\\) always exists and is not falsy\\.$#',
-	'count' => 1,
-	'path' => __DIR__ . '/modules/book/src/BookExport.php',
-];
-$ignoreErrors[] = [
-	'message' => '#^Method Drupal\\\\book\\\\BookOutline\\:\\:nextLink\\(\\) should return array but return statement is missing\\.$#',
-	'count' => 1,
-	'path' => __DIR__ . '/modules/book/src/BookOutline.php',
-];
-$ignoreErrors[] = [
-	'message' => '#^Method Drupal\\\\book\\\\BookOutline\\:\\:prevLink\\(\\) should return array but return statement is missing\\.$#',
-	'count' => 1,
-	'path' => __DIR__ . '/modules/book/src/BookOutline.php',
-];
-$ignoreErrors[] = [
-	'message' => '#^Method Drupal\\\\book\\\\Form\\\\BookOutlineForm\\:\\:save\\(\\) should return int but return statement is missing\\.$#',
-	'count' => 1,
-	'path' => __DIR__ . '/modules/book/src/Form/BookOutlineForm.php',
-];
 $ignoreErrors[] = [
 	'message' => '#^Variable \\$ghs_config_classes in empty\\(\\) always exists and is always falsy\\.$#',
 	'count' => 1,
@@ -826,11 +801,6 @@
 	'count' => 1,
 	'path' => __DIR__ . '/modules/file/file.module',
 ];
-$ignoreErrors[] = [
-	'message' => '#^Variable \\$message might not be defined\\.$#',
-	'count' => 1,
-	'path' => __DIR__ . '/modules/file/file.module',
-];
 $ignoreErrors[] = [
 	'message' => '#^Variable \\$rows in empty\\(\\) always exists and is not falsy\\.$#',
 	'count' => 1,
@@ -871,16 +841,6 @@
 	'count' => 1,
 	'path' => __DIR__ . '/modules/filter/src/Plugin/Filter/FilterHtml.php',
 ];
-$ignoreErrors[] = [
-	'message' => '#^Method Drupal\\\\forum\\\\ForumManager\\:\\:getTopicOrder\\(\\) should return array but return statement is missing\\.$#',
-	'count' => 1,
-	'path' => __DIR__ . '/modules/forum/src/ForumManager.php',
-];
-$ignoreErrors[] = [
-	'message' => '#^Variable \\$vocabulary in empty\\(\\) always exists and is not falsy\\.$#',
-	'count' => 1,
-	'path' => __DIR__ . '/modules/forum/src/ForumUninstallValidator.php',
-];
 $ignoreErrors[] = [
 	'message' => '#^Method Drupal\\\\history\\\\Plugin\\\\views\\\\field\\\\HistoryUserTimestamp\\:\\:render\\(\\) should return Drupal\\\\Component\\\\Render\\\\MarkupInterface\\|string but return statement is missing\\.$#',
 	'count' => 1,
@@ -1568,16 +1528,6 @@
 	'count' => 1,
 	'path' => __DIR__ . '/modules/taxonomy/src/VocabularyForm.php',
 ];
-$ignoreErrors[] = [
-	'message' => '#^Method Drupal\\\\tour\\\\TipPluginBase\\:\\:get\\(\\) should return string but return statement is missing\\.$#',
-	'count' => 1,
-	'path' => __DIR__ . '/modules/tour/src/TipPluginBase.php',
-];
-$ignoreErrors[] = [
-	'message' => '#^Variable \\$location on left side of \\?\\? always exists and is not nullable\\.$#',
-	'count' => 1,
-	'path' => __DIR__ . '/modules/tour/src/TipPluginBase.php',
-];
 $ignoreErrors[] = [
 	'message' => '#^Variable \\$violation_messages might not be defined\\.$#',
 	'count' => 1,
@@ -1643,18 +1593,6 @@
 	'count' => 1,
 	'path' => __DIR__ . '/modules/user/tests/src/Functional/UserRegistrationRestTest.php',
 ];
-$ignoreErrors[] = [
-	'message' => '#^Call to deprecated method expectWarning\\(\\) of class PHPUnit\\\\Framework\\\\TestCase\\:
-https\\://github\\.com/sebastianbergmann/phpunit/issues/5062$#',
-	'count' => 1,
-	'path' => __DIR__ . '/modules/user/tests/src/Kernel/Views/HandlerFilterRolesTest.php',
-];
-$ignoreErrors[] = [
-	'message' => '#^Call to deprecated method expectWarningMessage\\(\\) of class PHPUnit\\\\Framework\\\\TestCase\\:
-https\\://github\\.com/sebastianbergmann/phpunit/issues/5062$#',
-	'count' => 1,
-	'path' => __DIR__ . '/modules/user/tests/src/Kernel/Views/HandlerFilterRolesTest.php',
-];
 $ignoreErrors[] = [
 	'message' => '#^Variable \\$result in isset\\(\\) always exists and is not nullable\\.$#',
 	'count' => 1,
@@ -2030,18 +1968,6 @@
 	'count' => 1,
 	'path' => __DIR__ . '/tests/Drupal/KernelTests/Core/Cache/ApcuBackendTest.php',
 ];
-$ignoreErrors[] = [
-	'message' => '#^Call to deprecated method expectWarning\\(\\) of class PHPUnit\\\\Framework\\\\TestCase\\:
-https\\://github\\.com/sebastianbergmann/phpunit/issues/5062$#',
-	'count' => 1,
-	'path' => __DIR__ . '/tests/Drupal/KernelTests/Core/Config/ConfigInstallTest.php',
-];
-$ignoreErrors[] = [
-	'message' => '#^Call to deprecated method expectWarningMessage\\(\\) of class PHPUnit\\\\Framework\\\\TestCase\\:
-https\\://github\\.com/sebastianbergmann/phpunit/issues/5062$#',
-	'count' => 1,
-	'path' => __DIR__ . '/tests/Drupal/KernelTests/Core/Config/ConfigInstallTest.php',
-];
 $ignoreErrors[] = [
 	'message' => '#^Variable \\$expected_driver might not be defined\\.$#',
 	'count' => 2,
@@ -2170,18 +2096,6 @@
 	'count' => 1,
 	'path' => __DIR__ . '/tests/Drupal/Tests/Composer/ComposerTest.php',
 ];
-$ignoreErrors[] = [
-	'message' => '#^Call to deprecated method expectError\\(\\) of class PHPUnit\\\\Framework\\\\TestCase\\:
-https\\://github\\.com/sebastianbergmann/phpunit/issues/5062$#',
-	'count' => 1,
-	'path' => __DIR__ . '/tests/Drupal/Tests/Core/Config/ConfigTest.php',
-];
-$ignoreErrors[] = [
-	'message' => '#^Call to deprecated method expectError\\(\\) of class PHPUnit\\\\Framework\\\\TestCase\\:
-https\\://github\\.com/sebastianbergmann/phpunit/issues/5062$#',
-	'count' => 1,
-	'path' => __DIR__ . '/tests/Drupal/Tests/Core/Database/ConditionTest.php',
-];
 $ignoreErrors[] = [
 	'message' => '#^Trying to mock an undefined method getRevisionId\\(\\) on class Drupal\\\\Tests\\\\Core\\\\Entity\\\\UrlTestEntity\\.$#',
 	'count' => 1,
@@ -2192,18 +2106,6 @@
 	'count' => 1,
 	'path' => __DIR__ . '/tests/Drupal/Tests/Core/Entity/EntityUrlTest.php',
 ];
-$ignoreErrors[] = [
-	'message' => '#^Call to deprecated method expectWarning\\(\\) of class PHPUnit\\\\Framework\\\\TestCase\\:
-https\\://github\\.com/sebastianbergmann/phpunit/issues/5062$#',
-	'count' => 1,
-	'path' => __DIR__ . '/tests/Drupal/Tests/Core/EventSubscriber/SpecialAttributesRouteSubscriberTest.php',
-];
-$ignoreErrors[] = [
-	'message' => '#^Call to deprecated method expectWarningMessage\\(\\) of class PHPUnit\\\\Framework\\\\TestCase\\:
-https\\://github\\.com/sebastianbergmann/phpunit/issues/5062$#',
-	'count' => 1,
-	'path' => __DIR__ . '/tests/Drupal/Tests/Core/EventSubscriber/SpecialAttributesRouteSubscriberTest.php',
-];
 $ignoreErrors[] = [
 	'message' => '#^Call to deprecated method getConfig\\(\\) of class GuzzleHttp\\\\Client\\:
 Client\\:\\:getConfig will be removed in guzzlehttp/guzzle\\:8\\.0\\.$#',
@@ -2245,18 +2147,6 @@
 	'count' => 1,
 	'path' => __DIR__ . '/tests/Drupal/Tests/Core/Plugin/TestPluginManager.php',
 ];
-$ignoreErrors[] = [
-	'message' => '#^Call to deprecated method expectWarning\\(\\) of class PHPUnit\\\\Framework\\\\TestCase\\:
-https\\://github\\.com/sebastianbergmann/phpunit/issues/5062$#',
-	'count' => 1,
-	'path' => __DIR__ . '/tests/Drupal/Tests/Core/Security/DoTrustedCallbackTraitTest.php',
-];
-$ignoreErrors[] = [
-	'message' => '#^Call to deprecated method expectWarningMessage\\(\\) of class PHPUnit\\\\Framework\\\\TestCase\\:
-https\\://github\\.com/sebastianbergmann/phpunit/issues/5062$#',
-	'count' => 1,
-	'path' => __DIR__ . '/tests/Drupal/Tests/Core/Security/DoTrustedCallbackTraitTest.php',
-];
 $ignoreErrors[] = [
 	'message' => '#^Variable \\$value in isset\\(\\) always exists and is not nullable\\.$#',
 	'count' => 1,

core/COPYRIGHT.txt

@@ -36,8 +36,6 @@ JavaScript
 
   LoadJS - Copyright (c) 2015 Andres Morey
 
-  Shepherd - Copyright (c) 2021
-
   Sortable - Copyright (c) 2019 All contributors to Sortable
 
   Tabbable - Copyright (c) 2015 David Clark

core/MAINTAINERS.txt

@@ -32,9 +32,9 @@ Framework managers
 
   Frontend
   - Ben Mullins 'bnjmnm' https://www.drupal.org/u/bnjmnm
-  - (provisional) Théodore Biadala 'nod_' https://www.drupal.org/u/nod_
-  - (provisional) Cristina Chumillas 'ckrina' https://www.drupal.org/u/ckrina
-  - (provisional) Sally Young 'justafish' https://www.drupal.org/u/justafish
+  - Théodore Biadala 'nod_' https://www.drupal.org/u/nod_
+  - Cristina Chumillas 'ckrina' https://www.drupal.org/u/ckrina
+  - Sally Young 'justafish' https://www.drupal.org/u/justafish
 
 Release managers
 - Nathaniel Catchpole 'catch' https://www.drupal.org/u/catch
@@ -60,9 +60,6 @@ subsystems. See https://www.drupal.org/contribute/core-maintainers for more
 information on their responsibilities, and to find out how to become a subsystem
 maintainer. Current subsystem maintainers:
 
-Actions UI
-- ?
-
 Ajax
 - Alex Bronstein 'effulgentsia' https://www.drupal.org/u/effulgentsia
 - Tim Plunkett 'tim.plunkett' https://www.drupal.org/u/tim.plunkett
@@ -101,9 +98,6 @@ Block Content
 - Lee Rowlands 'larowlan' https://www.drupal.org/u/larowlan
 - Stephen Mustgrave 'smustgrave' https://www.drupal.org/u/smustgrave
 
-Book
-- Peter Wolanin 'pwolanin' https://www.drupal.org/u/pwolanin
-
 Bootstrap
 - ?
 
@@ -220,9 +214,6 @@ File
 Filter
 - ?
 
-Forum
-- Lee Rowlands 'larowlan' https://www.drupal.org/u/larowlan
-
 Form API
 - Alex Bronstein 'effulgentsia' https://www.drupal.org/u/effulgentsia
 - Tim Plunkett 'tim.plunkett' https://www.drupal.org/u/tim.plunkett
@@ -373,9 +364,6 @@ Shortcut
 Stark
 - John Albin Wilkins 'JohnAlbin' https://www.drupal.org/u/johnalbin
 
-Statistics
-- ?
-
 Syslog
 - Mariano D'Agostino 'dagmar' https://www.drupal.org/u/dagmar
 
@@ -404,12 +392,6 @@ Token
 Toolbar
 - Théodore Biadala 'nod_' https://www.drupal.org/u/nod_
 
-Tour
-- Nick Schuch 'nick_schuch' https://www.drupal.org/u/nick_schuch
-
-Tracker
-- ?
-
 Transliteration
 - Andrei Mateescu 'amateescu' https://www.drupal.org/u/amateescu
 
@@ -441,6 +423,8 @@ Views
 Workflows
 - Sam Becker 'Sam152' https://www.drupal.org/u/sam152
 
+Workspaces
+- Andrei Mateescu 'amateescu' https://www.drupal.org/u/amateescu
 
 Topic maintainers
 -----------------

core/assets/scaffold/files/default.services.yml

 parameters:
+  # Toggles the super user access policy. If your website has at least one user
+  # with the Administrator role, it is advised to set this to false. This allows
+  # you to make user 1 a regular user, strengthening the security of your site.
+  security.enable_super_user: true
   session.storage.options:
     # Default ini options for sessions.
     #

core/assets/scaffold/files/default.settings.php

@@ -807,16 +807,6 @@
  */
 $settings['entity_update_backup'] = TRUE;
 
-/**
- * State caching.
- *
- * State caching uses the cache collector pattern to cache all requested keys
- * from the state API in a single cache entry, which can greatly reduce the
- * amount of database queries. However, some sites may use state with a
- * lot of dynamic keys which could result in a very large cache.
- */
-$settings['state_cache'] = TRUE;
-
 /**
  * Node migration type.
  *

core/assets/scaffold/files/htaccess

@@ -137,10 +137,6 @@ AddEncoding gzip svgz
   RewriteCond %{REQUEST_URI} !/core/[^/]*\.php$
   # Allow access to test-specific PHP files:
   RewriteCond %{REQUEST_URI} !/core/modules/system/tests/https?\.php
-  # Allow access to Statistics module's custom front controller.
-  # Copy and adapt this rule to directly execute PHP files in contributed or
-  # custom modules or to run another PHP application in the same directory.
-  RewriteCond %{REQUEST_URI} !/core/modules/statistics/statistics\.php$
   # Deny access to any other PHP files that do not match the rules above.
   # Specifically, disallow autoload.php from being served directly.
   RewriteRule "^(.+/.*|autoload)\.php($|/)" - [F]