GitLab

- Patch #248598 by David_Rothstein, pwolanin, aspilicious: improved warning about dangerous permissions.

- Patch #443514 by casey, sun: stylesheet override logic prevents loading of stylesheets of third-party libraries.

#241570 by effulgentsia and merlinofchaos: Fixed Theme preprocess functions do not get retained when using patterns.

#621618 by sun (and lots and lots of other people): Revamp MAINTAINERS.txt to better reflect maintainers (or lack thereof) of individual pieces of core.

- Patch #721436 by catch, chx, moshe weitzman: remove magical fairy saving of cruft from user_save().

- Patch #700704 by sobi3ch, Rob Loach, andypost: added ability to change the amount of blog posts listed.

- Patch #258397 by John Morahan, Dries, R.Muilwijk, Bart Jansens, grendzy, Berdir: IP address identification not broad enough.

- Patch #705306 by moshe weitzman: user_cancel_delete() method calls into a 'standard' user_delete_multiple() API.

- Patch #335035 by boombatower, Damien Tournoud, ksenzee, Berdir, Dave Reid, effulgentsia: Simpletest drupalPost() incorrectly submits input for disabled elements, causing unreliable testing of forms that contain them.

- Patch #431776 by catch, agentrickard, Damien Tournoud, Dries: cron should run as anonymous when invoked via the run-cron link on the status report page.

#86299 follow-up by coltrane and clojel: Stop users' passwords from being stored in users.data in plain-text. Ouch.