SA-CORE-2022-016 by fabpot, nicolas.grekas, xjm, lauriii, alexpott, Berdir, larowlan, catch, longwave, cilefen, james.williams, benjifisher

Issue #3296481 by xjm, kostyashupenko, nod_: Update terser and terser-webpack-plugin to the latest versions

Issue #3300040 by xjm, benjifisher, jlariza, cilefen, quietone: Update jQuery UI to the latest versions

Issue #3300773 by bradjones1, xjm, catch, andypost, Spokje: Fix failed test on `symfony/http-foundation` 4.4.44/6.1.3 and later

Issue #3298821 by alexpott, catch, Spokje: Remove test that tests drupal/core-composer-scaffold when it is not allowed

(cherry picked from commit ce0389d0)

SA-CORE-2022-015 by Heine, larowlan, alexpott, samuel.mortenson, xjm, pandaski, vijaycs85, effulgentsia, drumm, benjifisher, jenlampton, longwave

SA-CORE-2022-014 by elarlang, pwolanin, xjm, mcdruid, effulgentsia, greggles, jenlampton, larowlan, longwave

SA-CORE-2022-012 by cmlara, GuyPaddock, larowlan, mondrake, effulgentsia, xjm, longwave, Dave Reid, lauriii, David Strauss, benjifisher, alexpott, mcdruid, Fabianx

Issue #3294205 by shaal, NickDickinsonWilde, Spokje, alexpott, xjm, larowlan, longwave: Composer v2.2 prompts to authorize another plugin when stability=dev

(cherry picked from commit d323b06f)

Issue #3255749 by Spokje, alexpott, shaal, longwave, cilefen, AaronMcHale, benjifisher, catch, Mile23: Composer v2.2 prompts to authorize plugins

Issue #3285193 by Lendude, xjm: Temporarily skip random test failures that hide real test failures, part 4

(cherry picked from commit dd16e9e8)

SA-CORE-2022-011 by GHaddon, JeroenT, yivanov, Heine, longwave, DamienMcKenna, mlhess, cilefen, xjm, benjifisher

Issue #3247683 by Wim Leers, lauriii, bnjmnm, Reinmar: Disable CKEditor 5's automatic link decorators (in Drupal filters should be used instead)

Issue #3273983 by Wim Leers, ifrik, lauriii: Do not assume that plugin supporting <tag attr> also supports <tag> in  SourceEditingRedundantTags and upgrade path

(cherry picked from commit 77702ce7)

Issue #3274648 by nod_, Wim Leers: HTMLRestrictions::merge() and ::toGeneralHtmlSupportConfig() fail on allowed attribute values that can be interpreted as integers

(cherry picked from commit 94b5d575)
(cherry picked from commit f7d93687)
(cherry picked from commit 15be5c7f)

Issue #3276217 by lauriii, Wim Leers: [drupalMedia] add tests to confirm GHS attributes are retained in linked media

Issue #3280985 by mherchel, andy-blum: Olivero's code block styling is slightly broken at various viewport widths

(cherry picked from commit a595534d)
(cherry picked from commit f6b77620)

Issue #3274651 by Wim Leers, nod_, alexpott: Impossible to enable <ol type> or <ul type> with GHS: switch to List's successor, DocumentList

(cherry picked from commit 9018da4a)
(cherry picked from commit 47c9c023)
(cherry picked from commit 997186ec)