(cherry picked from commit de66aa93)

SA-CORE-2023-001 by danflanagan8, larowlan, xjm, seanB, Berdir, benjifisher, longwave, jenlampton, lauriii

Issue #3191623 by mondrake, Medha Kumari, daffie, alexpott: Select queries do not escape the GROUP BY fields

(cherry picked from commit 5a193a82)

Issue #3219472 by quietone, xjm, Abhishek_Singh, karishmaamin, smustgrave, longwave: Fix spelling for words used once, beginning with 'e' -> 'i', inclusive

Issue #3088168 by DuaelFr, dww, Ambient.Impact, alexpott: Media thumbnail dimensions are wrong for YouTube videos

(cherry picked from commit ac30a985)

Issue #3260391 by huzooka, arunkumark, Spokje, quietone: BlockedIp::import violates MigrateDestinationInterface::import

(cherry picked from commit 231e7718)

(cherry picked from commit fcd75dd0)

(cherry picked from commit dcd42164)

Issue #992540 by valthebald, ndobromirov, jec006, kid_icarus, rickmanelius, mr.baileys, pguillard, joseph.olstad, vijaycs85, paulocs, voleger, Matt V., aerozeppelin, ravi.shankar, quietone, Munavijayalakshmi, ranjith_kumar_k_u, evilehk, swentel, gaurav.kapoor, yogeshmpawar, klidifia, pradhumanjainOSL, louis-cuny, catch, Everett Zufelt, alexpott, cilefen, xjm, grendzy, cashwilliams, borisson_, lachezar.valchev, tstoeckler, Heine: Nothing clears the "5 failed login attempts" security message when a user resets their own password

Issue #3226334 by albertosilva, pauger, xjm, smustgrave, K3vin_nl, krisahil: PathAliasManager could not find the alias by the internal path

(cherry picked from commit 9cc7cfaa)

Issue #3327974 by Lendude, ExTexan: The $entity_type property is protected, so fix views.api.php sample code to use a getter

(cherry picked from commit bc41ac89)

Issue #3323353 by Lendude, ameymudras, VitaliyB98, xjm, andypost: View combine filter operator "Is not equal to" use the same operator as "Is equal to"

(cherry picked from commit 981d266c)

Issue #3331900 by noorulshameera, anmolgoyal74: Remove unused variable $translation from BulkFormTest

(cherry picked from commit 121e42f8)

Issue #3331818 by xjm, Spokje: commit-code-check.sh gives unclear output when CSS is not properly rebuilt

(cherry picked from commit 081f5690)

Issue #3244737 by longwave, droplet, andypost, joshua1234511, Satyajit1990, klonos: "core/drupal.checkbox" (misc/checkbox.js) has never loaded on user permission page

(cherry picked from commit 2455ba0f)

(cherry picked from commit 8b49c009)

Issue #3331205 by larowlan, sanderwind: SSTI possible via translation of "Language" in CKEditor Language plugin

Issue #3310555 by jonathan1055, smustgrave: htmlspecialchars(): Passing null to parameter #1 ($string) of type string is deprecated

(cherry picked from commit d98f5613)

Issue #3254446 by catch: Log the exception rather than aborting the update if a configuration item does not exist in system_post_update_sort_all_config()

(cherry picked from commit 4b589664)

Issue #3322784 by mondrake, longwave, Spokje: TestCase::getMockClass() is deprecated in PHPUnit 9.6 and removed from PHPUnit 10

(cherry picked from commit 7432d6d1)

(cherry picked from commit c6c37c28)

Issue #3107500 by joachim, quietone, longwave, apaderno: EntityTypeInterface::getGroup() doesn't explain what the group is

(cherry picked from commit 817c02e8)

(cherry picked from commit 23a41f09)

Issue #3324838 by Spokje: Fix PHPStan L2 error "PHPDoc tag @throws with type Foo is not subtype of Throwable"

(cherry picked from commit 97ffc69f)

Issue #3272275 by eelkeblok, smustgrave, xjm, ravi.shankar, quietone, sergiogsanchez: Decide what to say very early in the installer if the site is below the absolute minimum

Issue #3260652 by rpayanm, lind101, bserem, davisben, ravi.shankar, Peleccotur, neverstopscrolling, znerol, cilefen, xjm, alexpott, smustgrave, Problue Solutions: Feature "Remember the last selection" for views exposed filters doesn't work anymore

(cherry picked from commit 7642b6fa)

Issue #3328497 by DanielVeza, larowlan, longwave, quietone: Stop unneeded cycles in ActionListBuilder::load

(cherry picked from commit 3424bb2f)

Issue #2939442 by Lendude, jidrone, joachim, Akhil Babu, Kristen Pol, larowlan: Views 'Entity Operations' field crashes if on a non-required relationship

Issue #3180227 by danflanagan8, robertom, xjm, Lendude, quietone: Notice: Trying to access array offset on value of type null in Drupal\views\Plugin\views\display\EntityReference->query()

(cherry picked from commit 0f6101a7)

Issue #3327856 by alexpott, catch, zcht, longwave, znerol, Berdir, BramDriesen, Spokje, callen321, andypost, neclimdul, acbramley, mstrelan: Performance regression introduced by container serialization solution