Issue #2855328 by danflanagan8, sourabh.singhal, Pancho, aarti zikre, asad_ahmed, priscarabelli, anushrikumari, ashwinparmar, vikashsoni, cilefen, ideaseed, Archana.Phatangare, quietone, finex, alexpott, catch, smustgrave, sugaroverflow: Password and confirm password should be mandatory fields while setting up password using one time link following by email

(cherry picked from commit 0b78493d)

(cherry picked from commit 1bf08a6c)

(cherry picked from commit 044dcc53)

Issue #3471932 by mstrelan, bbrala, quietone: Fix callables that are expected to return bool but don't

(cherry picked from commit 3a3c8164)

Issue #3083507 by oknate, jungle, quietone, neelam_wadhwani, longwave, xjm, tim.plunkett, smustgrave: Standardize "plugin ID" in doc comments instead of "plugin_id"

(cherry picked from commit 4e9a6028)

Issue #2951814 by wim leers, mxr576, vakulrai, claudiu.cristea, neclimdul, alexpott, sanjayk, joachim, chi, smustgrave: Improve X-Drupal-Cache and X-Drupal-Dynamic-Cache headers, even for responses that are not cacheable

(cherry picked from commit 19f80f65)

Issue #3470179 by catch, longwave, quietone: Account for test type, number of methods, and data providers in test ordering

Issue #3465602 by catch, quietone, smustgrave, nod_: Order tests by number of public methods to optimize gitlab job times

Issue #3275491 by dewalt, murz, pooja_sharma, avpaderno, Nicolas Bouteille, dmitry.korhov: External application is redirected to frontpage in maintenance mode

Issue #3306107 by b_sharpe, catch, carolpettirossi, quietone: Allow failed logins in maintenance mode to be themed differently to other maintenance pages

(cherry picked from commit b9161b4f)

Issue #3469309 by mstrelan, smustgrave, moshe weitzman: Use one-time login link instead of user login form in BrowserTestBase tests

(cherry picked from commit 104f8285)

Revert "Issue #3469309 by mstrelan, smustgrave, moshe weitzman: Use one-time login link instead of user login form in BrowserTestBase tests"

This reverts commit b16714a9.

Issue #3469309 by mstrelan, smustgrave, moshe weitzman: Use one-time login link instead of user login form in BrowserTestBase tests

(cherry picked from commit bf4ae811)

Issue #3464530 by nod_, mabho, nicxvan, joaopauloc.dev, cassioalmeida, catch, sun, quietone, droplet, aaronbauman, geerlingguy: Improve performance of the user.permissions.js script running in /admin/people/permissions

(cherry picked from commit b80bfda1)

Issue #973772 by drupal_was_my_past, avpaderno, joachim, tstoeckler, quietone, EvanDonovan, zirvap: Hard to translate: "Required if you want to change the %mail or %pass below."

(cherry picked from commit 353e737c)

Issue #3467405 by quietone, smustgrave: Missing @var annotation for properties that provide default values

(cherry picked from commit a7180bf1)

Issue #3467294 by quietone, nod_, smustgrave, catch, longwave: Change string 'Modules to enable' to {@inheritdoc} in comments

Issue #3458422 by mstrelan, smustgrave: Add string return typehints to protected test helper methods

(cherry picked from commit 22e2a128)

(cherry picked from commit 0b17a574)

Issue #3417668 by ankitv18, smustgrave, _shY, quietone, catch: Correct version in deprecation for #3363424

(cherry picked from commit a6f5d7d3)

(cherry picked from commit afce6da3)

Issue #3306434 by benjifisher, quietone, Berdir, kopeboy, DYdave, larowlan: Fix access checks for bundle permissions to avoid triggering a config validation error

(cherry picked from commit 3f03a0aa)

(cherry picked from commit 745a0e25)

Issue #2719657 by quietone, andypost, Mile23, Spokje, ilya.no, xjm, alexpott, smustgrave: Fix 'Drupal.Commenting.InlineComment.NotCapital' coding standard

(cherry picked from commit 833aa93b)

Issue #3459240 by jurgenhaas, b_sharpe, longwave, quietone: Deprecation message for user_validate_name points to an invalid replacement

(cherry picked from commit 717b02a8)

Issue #3456738 by cmlara, Anybody, andrewbelcher, Berdir, catch: BC break in login auth changes from #3444978

(cherry picked from commit e015f808)

Issue #3421418 by mstrelan, Spokje, xjm, mondrake, longwave, acbramley: Add void return typehints to all test methods

Issue #2874067 by kkalashnikov, Nikolay Shapovalov, quietone, b_sharpe, smustgrave, xjm, benjifisher, MerryHamster, dww: Fix Drupal.Commenting.DocCommentLongArraySyntax coding standard

Issue #3452426 by mxr576, kristiaanvandeneynde: Insufficient cacheability information bubbled up by UserAccessControlHandler

(cherry picked from commit 9fc1bc9a)

(cherry picked from commit abbe5db1)

Issue #3180696 by Spokje, Nikolay Shapovalov, adamzimmermann, quietone, manish-31, xjm, SuperfluousApostrophe, smustgrave, jonathan1055, longwave: Fix 'Drupal.Commenting.TodoComment' coding standard

Issue #2640994 by dww, tduong, Alex Bukach, Berdir, ameymudras, catch, mohit_aghera, raman.b, jofitz, Ben Buske, ankithashetty, smustgrave, nikitagupta, nicxvan, FeyP, pameeela, technoveltyco, dawehner, kim.pepper, Lendude: Fix label token replacement for views entity reference arguments

Issue #3443117 by bbrala, longwave, quietone: Fix Drupal.Functions.MultiLineFunctionDeclaration coding standard

Issue #3331229 by pminf, chadhester, zshrestha, hardikpandya, _pratik_, rogerpfaff, ultimike, xjm, mandclu, alexb7217: Use chaining for User::addRole() and ::removeRole()

(cherry picked from commit 8d512c2a)

Issue #3444978 by catch, Berdir: UserAuth BC layer is not working for modules that use it to provide email based logins

(cherry picked from commit 26208e91)

Issue #3439923 by alexpott, longwave, thejimbirch, Wim Leers, phenaproxima, immaculatexavier, nedjo, bircher, deviantintegral, franz, narendraR, omkar.podey, srishtiiee, Rajab Natshah, millnut, mondrake, amateescu, larowlan, sonfd, tasc, vasike: Add recipes api as experimental API to core