Issue #3410210 by quietone, sourabhjain, smustgrave, Spokje, catch: Remove statistics module from comments

Issue #3397490 by quietone, smustgrave, xjm, longwave, poker10: Fix more words that are only misspelled in comments

Issue #3375693 by andypost, catch, longwave, quietone: Fix deprecated assert_options() function usage for PHP 8.3

Issue #3205688 by jedihe, mr.baileys, dpagini: Include allowedOriginsPatterns in default.services.yml (regex matching for CORS)

Issue #3389282 by quietone, smustgrave, alexpott: Fix spelling for words that are only misspelled  in comments

Issue #3256642 by mondrake, daffie, yogeshmpawar, alexpott, tmaiochi, quietone, larowlan, catch: Introduce database driver extensions and autoload database drivers' dependencies

Issue #3358514 by poker10, mcdruid, smustgrave: Make phpinfo on the admin status report configurable

SA-CORE-2023-005 by benjifisher, Heine, cmlara, mlhess, larowlan, David_Rothstein, xjm, Wim Leers, DamienMcKenna, effulgentsia, pwolanin, mcdruid, poker10, jenlampton, longwave, kim.pepper, alexpott, drumm

Issue #3027639 by catch, jonhattan, ankithashetty, Lal_, voleger, beunerd, cmlara, yogeshmpawar, Jose Reyero, drfuzetto, MiguelArber, smustgrave, longwave, Berdir, leandro713, Ambient.Impact, olli, amitaibu: Make css/js optimized assets path configurable

Issue #3107548 by tunic, roderik, nicrodgers, greggles, anita_novicell, larowlan: Enhance hash_salt documentation in default.settings.php

Issue #3150614 by pfrenssen, cilefen, murilohp, FinnishFlash, mpp, andypost, ranjith_kumar_k_u, vagelis-prokopiou, rpayanm, tsplash, blazey, Winn, znerol, alexpott, Berdir, mxr576, catch, anagomes: Set SameSite on session cookies

Revert "Issue #3150614 by pfrenssen, cilefen, murilohp, FinnishFlash, mpp, andypost, ranjith_kumar_k_u, vagelis-prokopiou, blazey, tsplash, Winn, alexpott, Berdir, mxr576: Set SameSite on session cookies"

This reverts commit a3bddae4.

Issue #3150614 by pfrenssen, cilefen, murilohp, FinnishFlash, mpp, andypost, ranjith_kumar_k_u, vagelis-prokopiou, blazey, tsplash, Winn, alexpott, Berdir, mxr576: Set SameSite on session cookies

Issue #3317265 by ressa, smustgrave: Use immediately visible and functioning String override example

Issue #3333281 by MustangGB, smustgrave, xjm: Give trusted host configuration hint in default.settings.php

Issue #3260401 by idebr, Spokje, Akram Khan, mcdruid, longwave, alexpott: Google is abandoning FLoC - so remove the header

Issue #3112452 by lalitware, guilhermevp, narendra.rajwar27, WagnerMelo, ravi.shankar, mradcliffe, adalbertov, himanshu_sindhwani, quondam, Vidushi Mehta, alexpott, longwave, anmolgoyal74: Fix indentation consistency in core's yaml files

Issue #3305748 by kay_v, Spokje, bmahesh03121: improve instructions for allowedOrigins in default.services.yml

Issue #3096101 by quietone, danflanagan8, abhisekmazumdar, anmolgoyal74, alexpott, gabesullice, Wim Leers, Matroskeen, ankithashetty, mikelutz, benjifisher, daffie, webchick: Allow migrate_drupal_ui source database to be set in settings.php

SA-CORE-2022-016 by fabpot, nicolas.grekas, xjm, lauriii, alexpott, Berdir, larowlan, catch, longwave, cilefen, james.williams, benjifisher

Issue #2381797 by Tom Verhaeghe, slashrsm, johnwebdev, chr.fritsch, ankithashetty, Krzysztof Domański, nevergone, tobiasb, yogeshmpawar, anmolgoyal74, dhirendra.mishra, Wim Leers, longwave, Fabianx, andypost, joachim, alexpott: Add render_cache debug output

Issue #3262674 by tstoeckler, lauriii, cindytwilliams, mherchel, Gábor Hojtsy: Use Claro instead of Bartik as fallback maintenance theme

SA-CORE-2022-012 by cmlara, GuyPaddock, larowlan, mondrake, effulgentsia, xjm, longwave, Dave Reid, lauriii, David Strauss, benjifisher, alexpott, mcdruid, Fabianx

(cherry picked from commit 1f82337d)

Issue #3292908 by alexpott, dww, longwave, catch, Berdir, Charlie ChX Negyesi, mradcliffe, kndr: Fast 404s are slower than regular 404s

Issue #3295650 by Spokje, BR0kEN, Berdir, catch, Krzysztof Domański, longwave, voleger, neclimdul: Stop recommending using \Drupal\Component\Assertion\Handle::register() in example.settings.local.php

Issue #2733675 by smccabe, murilohp, andregp, Johnny Santos, ankithashetty, mglaman, jonathanshaw, daffie, alexpott, catch, froboy: Warning when mysql is not set to READ-COMMITTED

Issue #3166449 by ravi.shankar, adamzimmermann, mmatsoo, walangitan, joshua.boltz, Cottser: Improve wording around twig.cache setting for production environments

Issue #3175428 by tunic, kishor_kolekar, ranjith_kumar_k_u: Add link to "Trusted host settings" in default.settings.php

Issue #3129043 by mondrake, daffie, ankithashetty, ravi.shankar, alexpott, Beakerboy, catch: Move core database drivers to modules of their own

Issue #3106531 by mondrake, daffie, Rithesh BK, catch, xjm: Notify in Status Report that per-table database prefixes are no longer supported, and will throw errors in Drupal 10.0

Issue #2473875 by znerol, alexpott, andypost, kim.pepper, amit.drupal, raman.b, martin107, joachim: Convert uses of $_SESSION to symfony session retrieved from the request

Issue #3207968 by quietone, longwave, Spokje: Replace @codingStandards comments with phpcs: comments

Issue #3209628 by longwave, rachel_norfolk, antiorario, phenaproxima, rootwork, larowlan, neclimdul, Maeglin: Add Permissions-Policy header to block Google FLoC

Issue #3041885 by tedbow, beautifulmind, dww, ayushmishra206, phenaproxima, webchick, xjm, AaronMcHale, larowlan, benjifisher, heddn, catch, jhodgdon, longwave, mglaman, alexpott, mxr576, effulgentsia: Display relevant Security Advisories data for Drupal

Issue #3195533 by daffie, longwave: [Symfony 6] The constant Symfony\Component\HttpFoundation\Request::HEADER_X_FORWARDED_ALL is deprecated

Issue #2238561 by alexpott, dawehner, andypost, bradjones1, ridhimaabrol24, jofitz, eiriksm, Darren Oh, kalyansamanta, znerol, neclimdul, catch, pwolanin: Use the default PHP session ID instead of generating a custom one