REST API: Match REST API routes on namespace before performing regex checks.

Rule out groups of API endpoints by simple namespace string comparison to reduce the number of regex checks necessary when matching a route.

Props TimothyBlynJacobs.
Fixes #48530.

Media: Improve wording for error message on failed post-processing of uploaded images.

Props eclev91, desrosj, antpb, azaozz.
Fixes #49280.

REST API: List all core theme feature support details in /themes endpoint response.

Fully list which first-party core theme features are supported in the /themes endpoint response. This brings the REST API themes controller's response more in line with the output of get_theme_support().

Props adamboro, apieschel, koke, spacedmonkey, TimothyBlynJacobs.
See #49037.

Media: Improve the preview of transparent images in Image widget by using CSS3 to show a checkered background.

Props bahia0019.
Fixes #49237.

Administration: Move `.has-row-actions` class in Recent Comments dashboard widget next to `.dashboard-comment-wrap`, for consistency.

Follow-up to [47255].

See #42938.

Administration: Remove a blank space in the Recent Comments dashboard widget if avatars are disabled on Discussion Settings screen.

Props Marius84, shital-patel, GaryJ, ianbelanger, sgastard, lgrev01, donmhico, garrett-eclipse, audrasjb, SergeyBiryukov.
Fixes #42938.

Site Health: Improve the wording for PHP update recommendations.

Props Clorith, grafruessel, sathyapulse, wpgurudev, garrett-eclipse, marybaum, xkon, SergeyBiryukov.
Fixes #48716.

Docs: Improve documentation for `tests/phpunit/includes/spy-rest-server.php`.

Props andizer.
Fixes #47567.

Comments: Improve the appearance of the Status box on Edit Comment screen.

This makes the box more consistent with the Publish meta box in classic editor.

Props birgire, nfmohit, melchoyce, afercia.
Fixes #43587.

Media: In `media_sideload_image()`, store the original attachment URL in the `_source_url` post meta value.

Props dshanske, joemcgill, antpb.
Fixes #48164.

Block Editor: Update WordPress Packages; Remove navigation block; Add social links block

The following package versions were changed:
@wordpress/annotations: 1.11.0 -> 1.12.0
@wordpress/api-fetch: 3.10.0 -> 3.11.0
@wordpress/block-directory: 1.4.0 -> 1.5.0
@wordpress/block-editor: 3.6.0 -> 3.7.0
@wordpress/block-library: 2.13.0 -> 2.14.0
@wordpress/blocks: 6.11.0 -> 6.12.0
@wordpress/components: 9.1.0 -> 9.2.0
@wordpress/core-data: 2.11.0 -> 2.12.0
@wordpress/data: 4.13.0 -> 4.14.0
@wordpress/data-controls: 1.7.0 -> 1.8.0
@wordpress/e2e-test-utils: 4.2.0 -> 4.3.0
@wordpress/edit-post: 3.12.0 -> 3.13.0
@wordpress/editor: 9.11.0 -> 9.12.0
@wordpress/format-library: 1.13.0 -> 1.14.0
@wordpress/icons: 1.0.0 -> 1.1.0
@wordpress/keyboard-shortcuts: 1.0.0 -> 1.1.0
@wordpress/list-reusable-blocks: 1.12.0 -> 1.13.0
@wordpress/media-utils: 1.6.0 -> 1.7.0
@wordpress/notices: 1.12.0 -> 2.0.0
@wordpress/nux: 3.11.0 -> 3.12.0
@wordpress/plugins: 2.11.0 -> 2.12.0
@wordpress/primitives: 1.0.0 -> 1.1.0
@wordpress/rich-text: 3.11.0 -> 3.12.0
@wordpress/server-side-render: 1.7.0 -> 1.8.0
@wordpress/url: 2.10.0 -> 2.11.0
@wordpress/viewport: 2.12.0 -> 2.13.0
The navigation block inclusion was reverted.
The social links block was included.

Props gziolo, youknowriad, mcsf, noisysocks.
Fixes #49397.

Docs: Improve documentation for the `$attr` parameter of `wp_get_attachment_image()`.

Props juanfra, Mte90, DrewAPicture, joemcgill, SergeyBiryukov.
Fixes #36661.

Coding Standards: Fix JSHint issues in [47246].

See #44264.

Privacy: Convert buttons to links visually in Privacy Export/Erasure "Next Steps" column.

With a lot of export or erasure requests, the secondary buttons were becoming overwhelming when stacked on top of each other.

Props xkon, karmatosed.
Fixes #49323.

Privacy: Give progress indication for export and erasure.

This adds a progress indicator for "Download Personal Data" and "Erase Personal Data" row actions, which can take a while with a lot of data.

Props garrett-eclipse, allendav, dominic_ks, xkon, karmatosed, birgire.
Fixes #44264.

Privacy: Rename `wp_get_user_request_data()` to `wp_get_user_request()` for clarity; deprecate the old function.

The function returns an instance of the `WP_User_Request` object itself, not its `$request_data` property.

Follow-up to [44606].

Props garrett-eclipse.
Fixes #46302.

Bundled Themes: Twenty Twenty post navigation links outside of the container.

Fixes a bug where the in-page pagination does not align within the inner container.

Props ataurr, audrasjb, mukesh27.
Fixes #48979.

Bundled Themes: Twenty Twenty add WhatsApp to the social icon menu.

This adds WhatsApp as an option in the social icon menu.

Props rryyaanndd, audrasjb.
Fixes #49098.

Twenty Nineteen: Add the missing `inc/helper-functions.php` file.

Follow-up to [47214].

Props kjellr, jffng.
Fixes #45984.

Bundled Themes: Twenty Twenty Author Bio/Post Meta Width in Cover Template in Mobile.

Fixes a bug where the author bio and post meta have no left or right padding in smaller viewports.

Props JarretC.
Fixes #49254.

Block Editor: Backport inclusion of new editor settings to the core.

This commit includes in the core settings for the gradients theme API stabilized in https://github.com/WordPress/gutenberg/pull/20107, and for the image sizes required for the latest posts feature image https://github.com/WordPress/gutenberg/pull/17151/.

Props: youknowriad, ryelle.
Fixes #49389.

REST API: Add support for the REDIRECT_HTTP_AUTHORIZATION header.

Previously the REST API did not account for server configurations where the Authorization header must be added using ModRewrite. This caused major DUX issues when trying to use custom authentication mechanisms.

Fixes #47077.
Props dshanske, cklosows.

Script Loader: Add polyfill for window.URL, window.DOMRect.

Pending block editor revisions for WordPress 5.4 will make use of `window.URL` and `window.DOMRect`. These are not available in Internet Explorer (or pre-Chromium Edge for `DOMRect`) and must be polyfilled to avoid script errors.

The changes make use of the existing polyfill pattern, and existing `polyfill-library` dependency. The dependency is bumped to the latest version, since the previous version did not include the `DOMRect` polyfill.

Props jorgefilipecosta.
Fixes #49360.

Privacy: Include session tokens in Personal Data Export.

Session tokens contain an IP address and user agent.

Props garrett-eclipse, nickylimjj, lakenh, xkon, rconde.
Fixes #45889.

Privacy: Include `community-events-location` user meta value in Personal Data Export.

The value is used by the WordPress Events and News widget to show relevant WP community events.

The location information may include an IP address, location description, and latitude/longitude coordinates.

Props garrett-eclipse, coreymckrill, xkon.
Fixes #43921.

Site Health: Move the warning about `WP_DEBUG_LOG` being publicly accessible from "critical issues" to "recommended improvements" if the error log is outside of the WordPress directory.

Props afragen, Clorith, miss_jwo, mikeschroder, kubiq, xkon.
Fixes #47985.

Administration: Standardize "found in Trash" messages.

Props Presskopp, audrasjb.
Fixes #38669.

Administration: Capitalize `Trash` consistently in various messages and comments.

When used as a noun referring to the "virtual" place, `Trash` should be capitalized.

Props garrett-eclipse, aandrewdixon, Presskopp.
Fixes #45317.

Login and Registration: Clarify the message on "Lost Password" screen.

Props pbiron, Presskopp.
Fixes #49346.

Docs: Add documentation for globals in `wp-settings.php`.

Props chinteshprajapati.
Fixes #46253.

Docs: Add descriptions for some globals:

* `$wp_version`
* `$wp_local_package`
* `$required_php_version`
* `$required_mysql_version`

See #48303.

Media: Ensure imgareaselect.js is not initialized twice for the same image. May happen when uploading an image into a post and then clicking on Edit Image.

Fixes #49262.

Editor: Add unique classes to `.post-attributes-label-wrapper` paragraphs for easier JS or CSS targeting.

Props sathyapulse, sabernhardt, garrett-eclipse, noisysocks.
Fixes #44408.

Import: Remove "Blogroll" import option (for links in OPML format) from the list of popular importer plugins.

Link Manager is disabled for new installations since WordPress 3.5, so core should not encourage importing links.

See #meta4706 for the corresponding WordPress.org API change.

Props Ipstenu, hareesh-pillai, DrewAPicture, nacin, karmatosed, dd32, garrett-eclipse.
Fixes #22994. See #21307.

Login and Registration: Use CSS animation instead of old JavaScript code for "shake" animation on login failure.

Props markjaquith, valentinbora.
Fixes #48490.

Build/Test Tools: Expose port 3306 of MySQL container.

This only defines the container port to allow `docker-compose` to choose an ephemeral host port.

Props ocean90, peterwilsoncc.
Fixes #48281.

REST API: Introduce selective link embedding.

Previously the _embed flag would embed all embeddable links in a response even if only a subset of the links were necessary. Now, a list of link relations can be passed in the _embed parameter to restrict the list of embedded objects.

Props rheinardkorf, adamsilverstein, jnylen0, cklosows, chrisvanpatten, TimothyBlynJacobs.
Fixes #39696.

General: Fix HTML for get_calendar()

The <tfoot> element was allowed to precede the <tbody> element in HTML 5. However, that was changed in HTML 5.1 and <tfoot> must now follow <tbody>.

This removes the tfooot and instead uses a nav element for navigation between months.

Fixes: #39763
Props: isabel_brison, Harry Milatz, audrasjb, abhijitrakas, SergeyBiryukov

Editor: Fix incorrect usage of ID attributes on custom fields.

Repeated containers used for custom fields have duplicate ID attributes. Duplicate IDs are incorrect HTML, and will also cause unexpected results when trying to manipulate using JS. Duplicate IDs are changed to matching classes; CSS & JS updated to match. 

Props jankimoradiya, audrasjb, donmhico, afercia.
Fixes #46964.

Toolbar: Load toolbar in `wp_body_open` when available.

For accessibility, the visual appearance and source order should match. Moving the toolbar to load in the new hook `wp_body_open` (5.2) fixes a long-standing source order problem.

Props jankimoradiya, afercia, SergeyBiryukov, audrasjb, ocean90, xkon, dinhtungdu.
Fixes #47053.

Coding Standards: Correct the `get_plugin_page_hook()` check in `wp-admin/admin.php`.

The condition is meant to check for a non-empty string, however `get_plugin_page_hook()` can return null, in which case the strict check doesn't work as expected.

Follow-up to [47218].

See #48455, #49222.

Coding Standards: Use Yoda conditions where appropriate.

See #49222.

Coding Standards: Use Yoda conditions in some `wp-admin` files.

Props subrataemfluence, marcio-zebedeu, bookdude13, 1naveengiri, alishankhan.
Fixes #44365, #48455.

Accessibility: Media: Make the toolbar and inline uploader visual order always match the DOM order.

Depending on the specific media view, the media UI elements are placed in a
different visual order. This change makes sure their visual order always
matches the DOM order.

Propos syhc, audrasjb, afercia.
See #37188.
Fixes #48403.

Embeds: Add support for TikTok.

Props audrasjb, jblz, peterwilsoncc, felipeloureirosantos.
Fixes #49083.

Site Health: Only get MySQL server information in tests where it's actually needed.

This resolves an issue with plugins like HyperDB, which doesn't have a database connection until a query is made.

Props xkon, Otto42, Clorith.
See #47606.

Twenty Nineteen: Improve code organization in `template-functions.php` by moving helper functions into their own file.

These functions are moved to `inc/helper-functions.php`:

* `twentynineteen_can_show_post_thumbnail()`
* `twentynineteen_image_filters_enabled()`
* `twentynineteen_get_avatar_size()`
* `twentynineteen_is_comment_by_post_author()`
* `twentynineteen_get_discussion_data()`
* `twentynineteen_hsl_hex()`

Additionally, `twentynineteen_add_dropdown_icons()` is moved to `inc/icon-functions.php` to join `twentynineteen_nav_menu_social_icons()`.

Props akshayar, allancole, grapplerulrich.
Fixes #45984.

Menus: When adding a label for special pages in `wp_setup_nav_menu_item()`, check if `get_post_states()` is available, to avoid fatal errors on front end.

Fixes #49374.

Tests: Add a basic test for `wp()` function.

Props pbearne, donmhico.
Fixes #48844.

Menus: Use `get_post_states()` to denote special pages on the added menu item accordions.

Front Page, Posts Page, or Privacy Policy Page should now be marked as such on the added menu items.

Props garrett-eclipse.
Fixes #49374.

Docs: Improve description for the `$editor_id` parameter of `wp_editor()` and `_WP_Editors::editor()`.

The restictions mentioned for the parameter value should be consistenct.

Props pbiron, SergeyBiryukov.
Fixes #49384.

Accessibility: Menus: Make tab panels in `Add menu items` section more accessible for keyboard users.

Props audrasjb, afercia.
Fixes #49211.

Accessibility: Customize: Improve focus styles for color picker and media upload button in Customizer.

Props audrasjb, timhavinga, afercia, karmatosed.
Fixes #48694.

Coding Standards: Adjust coding standards to always omit parentheses for `include`/`require` statements.

These are language constructs, not function calls, so the parentheses are unnecessary.

This updates the PHPCS configuration file the enforce the sniff until it is moved from the `WordPress-Extra` ruleset to the `WordPress-Core` ruleset upstream.

Follow-up to [47198].

Props desrosj, jrf, GaryJ.
Fixes #49376.

Posts, Post Types: Add a parameter to the `post_locked_dialog` action which contains a reference to the user who holds the lock.

Fixes #48443

Taxonomy: Clarify the docs for the return values of the `term_exists()` function.

Props dotancohen, sathyapulse

Fixes #43345

Script Loader: Fix a docblock so it points to the correct page on the developer reference.

Props joyously, pbiron

Fixes #48503

Posts, Post Types: Introduce a filter which allows the addition of `__trashed` suffixes on post slugs to be skipped.

Fixes #46433

Media: Add link to the original image in the image properties if it was scaled or rotated after uploading.

Fixes #49290.

Tests: Revert the `dirname( __FILE__ )` replacement in `wp-tests-config-sample.php` for now, to avoid breaking unit tests created with WP-CLI `scaffold` command.

Follow-up to [47198].

Props kaggdesign, danielbachhuber, bwmarkle.
Fixes #48082, #49377.

Tests: Change a few remaining `include_once` statements to `require_once`, for consistency.

See #48082.

Block Editor: Update WordPress Packages.

The following package versions were changed:
@wordpress/a11y: 2.6.0 -> 2.7.0
@wordpress/annotations: 1.10.0 -> 1.11.0
@wordpress/api-fetch: 3.9.0 -> 3.10.0
@wordpress/autop: 2.5.1 -> 2.6.0
@wordpress/blob: 2.6.0 -> 2.7.0
@wordpress/block-directory: 1.3.0 -> 1.4.0
@wordpress/block-editor: 3.5.0 -> 3.6.0
@wordpress/block-library: 2.12.0 -> 2.13.0
@wordpress/block-serialization-default-parser: 3.4.1 -> 3.5.0
@wordpress/blocks: 6.10.0 -> 6.11.0
@wordpress/components: 9.0.0 -> 9.1.0
@wordpress/compose: 3.10.0 -> 3.11.0
@wordpress/core-data: 2.10.0 -> 2.11.0
@wordpress/custom-templated-path-webpack-plugin: 1.5.0 -> 1.6.0
@wordpress/data: 4.12.0 -> 4.13.0
@wordpress/data-controls: 1.6.0 -> 1.7.0
@wordpress/date: 3.7.0 -> 3.8.0
@wordpress/dependency-extraction-webpack-plugin: 2.1.0 -> 2.2.0
@wordpress/deprecated: 2.6.1 -> 2.7.0
@wordpress/dom: 2.7.0 -> 2.8.0
@wordpress/dom-ready: 2.6.0 -> 2.7.0
@wordpress/e2e-test-utils: 4.1.0 -> 4.2.0
@wordpress/edit-post: 3.11.0 -> 3.12.0
@wordpress/editor: 9.10.0 -> 9.11.0
@wordpress/element: 2.10.0 -> 2.11.0
@wordpress/escape-html: 1.6.0 -> 1.7.0
@wordpress/format-library: 1.12.0 -> 1.13.0
@wordpress/hooks: 2.6.0 -> 2.7.0
@wordpress/html-entities: 2.5.0 -> 2.6.0
@wordpress/i18n: 3.8.0 -> 3.9.0
@wordpress/is-shallow-equal: 1.7.0 -> 1.8.0
@wordpress/keyboard-shortcuts: 0.2.0 -> 1.0.0
@wordpress/keycodes: 2.8.0 -> 2.9.0
@wordpress/library-export-default-webpack-plugin: 1.5.0 -> 1.6.0
@wordpress/list-reusable-blocks: 1.11.0 -> 1.12.0
@wordpress/media-utils: 1.5.0 -> 1.6.0
@wordpress/notices: 1.11.0 -> 1.12.0
@wordpress/nux: 3.10.0 -> 3.11.0
@wordpress/plugins: 2.10.0 -> 2.11.0
@wordpress/priority-queue: 1.4.0 -> 1.5.0
@wordpress/redux-routine: 3.6.2 -> 3.7.0
@wordpress/rich-text: 3.10.0 -> 3.11.0
@wordpress/scripts: 6.2.0 -> 7.0.0
@wordpress/server-side-render: 1.6.0 -> 1.7.0
@wordpress/shortcode: 2.5.0 -> 2.6.0
@wordpress/token-list: 1.8.0 -> 1.9.0
@wordpress/url: 2.9.0 -> 2.10.0
@wordpress/viewport: 2.11.0 -> 2.12.0
@wordpress/wordcount: 2.6.2 -> 2.7.0
Added these new packages:
@wordpress/warning
@wordpress/primitives
@wordpress/icons
Re-added keyboard-shortcuts to script loader removed by mistake on revision 47198.

Props gziolo, itsjonq, youknowriad, mcsf, andraganescu.
Fixes #49358.

Code Modernization: Replace `dirname( __FILE__ )` calls with `__DIR__` magic constant.

This avoids the performance overhead of the function call every time `dirname( __FILE__ )` was used instead of `__DIR__`.

This commit also includes:

* Removing unnecessary parentheses from `include`/`require` statements. These are language constructs, not function calls.
* Replacing `include` statements for several files with `require_once`, for consistency:
 * `wp-admin/admin-header.php`
 * `wp-admin/admin-footer.php`
 * `wp-includes/version.php`

Props ayeshrajans, desrosj, valentinbora, jrf, joostdevalk, netweb.
Fixes #48082.

Coding Standards: Move `WP_Object_Cache` to `wp-includes/class-wp-object-cache.php`.

This ensures the file containing the `WP_Object_Cache` class conforms to the coding standards.

For backward compatibility, the new file is included from `wp-includes/cache.php`.

Fixes #49373. See #49222.

Posts, Post Types: Add default `menu_icon` values for built-in post types.

This allows the icons to be retrieved via `get_post_type_object()`.

Props m.usama.masood, michael.ecklund, SergeyBiryukov.
Fixes #38844.

Tests: In `Tests_dbDelta`, only force MyISAM database engine on MySQL versions older than 5.7.

Since MySQL 5.7, InnoDB engine supports `FULLTEXT` indexes, so forcing MyISAM is unnecessary.

Follow-up to [47193], which addressed the issue in `Tests_dbDelta::setUp()`, but missed other tests.

Props xkon, joonasvanhatapio, SergeyBiryukov.
Fixes #49367.

Posts, Post Types: Change "Featured Image" post label to use sentence case: "Featured image".

This makes it more consistent with other UI elements in the block editor.

Props mcsf.
Fixes #49371.

Tests: In `Tests_dbDelta::setUp()`, only force MyISAM database engine on MySQL versions older than 5.7.

Since MySQL 5.7, InnoDB engine supports `FULLTEXT` indexes, so forcing MyISAM is unnecessary.

Props xkon, joonasvanhatapio, SergeyBiryukov.
Fixes #49367.

Bundled Themes: Twenty Twenty Menu rendering problem Unicode (Bangla).

Fixes a bug where certain words break on to a second line in the primary and footer menus, in certain languages.

Props smallprogrammers, Shital Patel, mukesh27, audrasjb.
Fixes #48970.

Posts, Post Types: Wrap text submitted via Quick Draft dashboard widget in the Paragraph block.

Props audrasjb, jeroenrotty.
Fixes #48120.

Menus: Introduce `wp_nav_menu_item_custom_fields` action that fires just before the move buttons of a nav menu item in the menu editor.

Props MikeSchinkel, birgire, sebastian.pisula, desrosj, helgatheviking.
Fixes #47056. See #38904, #18584.

Docs: Correct type for `$item` and $args` parameters in `Walker_Nav_Menu_Checklist` and `Walker_Nav_Menu_Edit` to match the parent `Walker_Nav_Menu` class.

Follow-up to [38559], [45537].

See #24587, #48303.

Site Health: Improve focus style for accordion items on Site Health screens.

The new style is more consistent with other elements like `.wp-core-ui` buttons.

Props audrasjb, mensmaximus, afercia, melchoyce, Clorith.
Fixes #48578.

Docs: Add a `@since` note for [47186].

See #48558.

Taxonomy: In `register_taxonomy()`, return the registered taxonomy object on success, for consistency with `register_post_type()`.

Props krynes, SergeyBiryukov.
Fixes #48558.

Coding Standards: Fix WPCS issue in [47184].

See #49344.

Tests: Allow `dbDelta()` tests to (mostly) run on MySQL 8.0.11+.

* MySQL 8.0.11 changed the `GeometryCollection` data type name to `GeomCollection`, with the latter being the preferred name.
* MySQL 8.0.17 removed support for the display width attribute for integer data types. Previously, default display width of 20 digits was used: `BIGINT(20)`.

The affected tests now check the MySQL server version and use the appropriate data types.

This leaves one unresolved failure on MySQL 8.0.17+ to be addressed in the future, caused by the same `BIGINT` display width discrepancy coming from `wp_get_db_schema()`.

Props kaggdesign, ottok, jeremyfelt, SergeyBiryukov.
Fixes #44384, #49344. See #49364.

Tests: Allow `wpdb::set_sql_mode()` tests to run on MySQL 8.0.11+.

MySQL 8.0.11 removed support for the `NO_AUTO_CREATE_USER` SQL mode, which was used in as an example of a mode compatible with WordPress.

`NO_AUTO_VALUE_ON_ZERO` is now used in the affected tests instead, which is supported on both MySQL 5.7.x and 8.0.x.

Props kaggdesign, jeremyfelt, afragen.
Fixes #44586. See #49344.

Docs: Clarify that `is_page_template()` accepts a template filename, not the `Template Name` file header.

Props mkaz.
Fixes #49362.

Posts, Post Types: Fail gracefully when checking whether a single post with an unregistered post status should be displayed in `WP_Query::get_posts()`.

If the post status is not registered, assume it's not public, but still allow access to users with edit permissions (same as for a protected post status, e.g. `draft`), so that they could recover orphaned content.

Add unit tests.

Follow-up to [47178].

Props roytanck, SergeyBiryukov.
Fixes #48653.

Posts, Post Types: Revert [47179] pending test failures investigation.

See #48653.

Posts, Post Types: Fail gracefully when checking whether the post should be displayed in `WP_Query::get_posts()` against unregistered post status.

If the post status is not registered, assume it's not public.

Follow-up to [47178].

Props roytanck.
See #48653.

Posts, Post Types: Fail gracefully when checking mapped cap against unregistered post status.

With `map_meta_cap` enabled for a post type, the `read_post` capability for posts with a public status is supposed to be mapped to the post type's `read` capability.

When a post is left in the database after the post status is no longer present, and WP does a `read_post` check against it, a PHP notice was thrown, and the cap check always failed.

As a more graceful fallback, the cap is now mapped onto `edit_others_posts`, which allows highly privileged users to be able to access orphaned content.

A `_doing_it_wrong()` notice is also added, so that developers and site administrators are aware that the cap mapping is failing in the absence of the registered post status.

Follow-up to [34091], which introduced a similar approach to checking mapped caps against an unregistered post type.

Props roytanck, SergeyBiryukov.
Fixes #48653.

Coding Standards: Fix WPCS issues in [47175].

See #49361.

Block Editor: Include navigation block server logic.

Core did not include the navigation block PHP files.
This commit fixes the issue referred, and now the navigation block is executed on the frontend. The block still does not work as expected and throws an error during frontend execution. That problem is going to be fixed on the next WordPress package update.
This commit adds the file as it is on the npm package used.

Props gziolo.
Fixes #49348.

Users: Pass the `$reassign` parameter to the `remove_user_from_blog` action.

Props Tivus.
Fixes #49361.

Docs: Improve description for `add_user_to_blog()` and `remove_user_from_blog()` parameters.

See #48303.

Users: In `remove_user_from_blog()`:

* Change default value of the `$blog_id` parameter to match the documented type.
* Change the type of the `$reassign` parameter for consistency with `$user_id` and `$blog_id`.
* Add documentation for the return value.

See #49361.

TinyMCE: Remove duplicate keys and strings from `langs/wp-langs-en.js`.

Props david.binda.
Fixes #49359.

Database: Add `ANSI` to the list of incompatible SQL modes.

Starting with MySQL 5.7.5, the `ANSI` mode implies `ONLY_FULL_GROUP_BY`, which is already listed in `wpdb` as incompatible per [27072].

When `ANSI` is enabled on MySQL 5.7.5+, `ONLY_FULL_GROUP_BY` remains enabled even after being "unset" by `wpdb::set_sql_mode()`.

To prevent this, the `ANSI` mode should also be listed as incompatible. It is not enabled on default MySQL installations.

Props jnylen0.
Fixes #48377.

Docs: Improve documentation for `WP_Dependencies`, `WP_Scripts`, and `WP_Styles` methods.

See #48303.

Canonical: When removing trailing punctuation from query string arguments, match the whole query var name.

Props daveslaughter.
Fixes #49347.

Build: Copy block metadata files for dynamic blocks.

For dynamic blocks, there are several blocks whose metadata needs to be loaded in PHP. The attributes that are loaded via PHP are not exposed to the ReactNative components when Gutenberg loads the index.js files in the Mobile Apps. To support one master set of metadata that can be used to register in the PHP files and the Javascript files; with this patch, the block.json files are copied over with their corresponding PHP files.

Props chipsnyder and azaozz.

Fixes #49196.

Plugins: Remove obsolete `plugin_slugs` transient from `WP_Plugins_List_Table::prepare_items()`.

The transient is only used in the `wp_dashboard_plugins_output()` function, which is deprecated and unused since [40607].

The function itself also sets the same transient, so it can be removed from `WP_Plugins_List_Table`.

Props aftabmuni.
Fixes #49340.

REST API: Merge "not allowed to create new terms" permission error message with an existing string.

Follow-up to [39309], [39313].

See #38857.

Docs: Fix typo in a comment with `WP_DEBUG_DISPLAY` description.

See #48303.

Editor: Remove back-compat stub for Classic Editor's old distraction-free writing mode.

The original script was deprecated in [30338] and removed in [32677].

Props Presskopp, ketuchetan.
Fixes #39448.

Tests: Adjust XML-RPC unit tests for [47160].

Follow-up to [47162].

See #40096.

Tests: Adjust XML-RPC unit tests for [47160].

See #40096.

Docs: Add more specific description for `WP_Http::processResponse()` return value.

Props marekdedic, takeshifurusato.
Fixes #48351.

Post Thumbnails: Make sure `get_post_thumbnail_id()` returns an integer, to match the documented return value.

This makes the function more consistent with `get_the_ID()` or `wp_get_post_parent_id()`, both returning an integer.

Props 0v3rth3d4wn.
Fixes #40096.

Docs: Improve inline comments in `wp-admin/options.php` per the documentation standards.

See #48303.

Administration: Include options page name in the "Options page not found" error message to provide better context for plugin developers.

Props tdlewis77, williampatton.
Fixes #42941.

Docs: Correct DocBlock formatting for `register_setting()`.

Document the full list of whitelisted option key names.

See #48303.

Accessibility: Text Changes: Use sentence case for the word `Error` in various error messages, instead of all caps.

Using all caps should be avoided for better readability and because screen readers may pronounce all-caps words as abbreviations.

Props afercia, ryokuhi, sabernhardt, garrett-eclipse.
See #47656, #43037, #42945.

Tests: Update the expected message in `test_with_draft_post()`.

Follow-up to [47154].

See #42945.

Text Changes: Capitalize error messages consistently.

Props Presskopp.
Fixes #42945.

Text Changes: Add missing periods to some error messages, for consistency.

Props Presskopp.
Fixes #42735.

Text Changes: Add missing periods to comment status update notices, for consistency.

Props Presskopp.
See #42735.

Networks and Sites: Reduce `max-width` for user and site search inputs on Dashboard screen in Network Admin.

This ensures that the inputs don't push the buttons to the next line.

Props williampatton, bordoni.
Fixes #49043.

Docs: Document the addition of `$json_report_pathname` parameter to the `wp_privacy_personal_data_export_file_created` action.

Follow-up to [47146].

Props xkon.
Fixes #49029.

Site Health: Rename `WP_Site_Health::initialize()` introduced in [47063] to `::get_instance()`, for clarity and consistency with other core classes.

Use `WP_Site_Health::get_instance()` where it's needed, instead of creating multiple instances of the class.

Props afercia, xkon, Clorith, SergeyBiryukov.
See #47606.

Privacy: Clarify bulk action labels for personal data export and removal requests.

Props garrett-eclipse, xkon, shariqkhan2012, websupporter, desrosj, JoshuaWold.
Fixes #44674.

Accessibility: Privacy: Improve the readability of the suggested text in Privacy Policy Guide.

Per WCAG 2.0 guidelines, big chunks of italic text should be avoided for better accessibility.

Props birgire, sabernhardt, xkon, garrett-eclipse, melchoyce, karmatosed, afercia, jepperask, SergeyBiryukov.
Fixes #44621. See #47327.

Privacy: Introduce a JSON file into the personal data export.

The produced ZIP archive will now include an `export.json` file along with the current `index.html`.

Props xkon.
Fixes #49029. See #46424.

Site Health: Add support for required WordPress and PHP versions to themes.

Follow-up to [45546] for plugins.

Props flixos90, afragen.
Fixes #44592. See #40934, #meta3718.

Privacy: Remove user's email address from personal data export filename.

Use `wp_unique_filename()` to avoid potential collisions instead.

Props xkon, garrett-eclipse, donmhico, Ov3rfly, Clorith, allendav.
Fixes #44197.

Administration: Add punctuation to "If you change this, we will send you an email" message on General Settings, Network Settings, and Profile screens.

Props kinjaldalwadi, donmhico.
Fixes #49235.

HTTP API: Add some basic tests for `wp_remote_fopen()`.

Props pbearne, donmhico.
Fixes #48845.

Tests: Rename `wpValidateBoolean.php` for consistency with other files.

See #30238.

Twenty Nineteen: Remove duplicate `font-size` property.

The theme does not use a `px` fallback for `rem` units anywhere else.

Follow-up to [47053] for Twenty Twenty.

See #49015.

Fixes PHPCS Introduced in [47135].

There was extra whitespace in the previous commit, this removes it.

See #48552

REST API: Reuse previously-generated embedded objects when building collection response.

Store each generated embedded object in a temporary cache when querying for linked resources so that repeated links to the same resource do not trigger repeated queries or processing.

Props TimothyBlynJacobs.
Fixes #48838.

Twenty Nineteen: Standardize the Required PHP and Tested Up To headers.

* Remove `WordPress` from `Requires at least` headers.
* Ensure the `Requires at least` and `Requires PHP` headers are present in the `style.css` file.

Follow-up to [46676], which updated `style-rtl.css`, but not `style.scss` or `style.css`.

See #48517.

Bundled Themes: Twenty Twenty add theme support for responsive embeds.

Adds the call to `responsive-embed` theme support in order to fix issues with facebook embeds not being responsive at certain screen widths.

Props williampatton, nielslange.
Fixes #48552.

Themes: Replace `—` with `–` as a separator between Monday and Friday in theme starter content.

The `ndash` standardly is the "through" indicator for showing inclusive dates and numbers, while the `mdash` is an interruptor and used as an aside.

Props mikejdent, garrett-eclipse.
Fixes #48286.

Bundled Themes: Twenty Twenty content font CSS selector is too important.

This makes the font family selector for `entry-content` less specific and thus easier to override.

Props alexandreb3, larrach, audrasjb.
Fixes #49318.

Dashboard: Improve the appearance of "WordPress Events and News" dashboard widget for multi-day events.

If an upcoming event spans over several days, this information is now properly reflected in the widget.

Props imath, casiepa, iandunn, hareesh-pillai, melchoyce, mapk, desrosj, audrasjb, SergeyBiryukov.
Fixes #47798.

Docs: Fix typos in `wp-admin/includes/class-pclzip.php`.

With the upstream library not updated in 10 years since the last time it was merged, it should be safe to treat it as "adopted" rather than external, and make these fixes.

Props passoniate, ottok.
Fixes #49163. See #38464.

Docs: Improve inline comments per the documentation standards.

Includes minor code layout fixes for better readability.

See #48303.

Docs: Improve DocBlocks in `phpunit/includes/object-cache.php` per the documentation standards.

See #48303.

Docs: Improve comments in `js/_enqueues/wp/revisions.js` per the documentation standards.

Props passoniate.
Fixes #49177.

Docs: Improve comments in some `wp-admin` files per the documentation standards.

Follow-up to [47084].

Props passoniate, apedog.
Fixes #49223, #49227.

Coding Standards: Disable WPCS warnings for `date_default_timezone_set()` and `current_time( 'timestamp' )` calls in Date/Time tests.

These calls are intentional and required for the tests.

See #49222.

Docs: Fix typo in a comment in `js/media/models/attachment.js`.

Props wptoolsdev.
Fixes #49303.

Customize: Fix typo in `CustomHeader.prototype.initialize()` DocBlock in `src/js/_enqueues/wp/custom-header.js`.

Props ankitmaru.
Fixes #49301.

Coding Standards: Use strict comparison in `wp-admin/user/admin.php`.

Apply the case-insensitive network-site comparisons added in [27725] for `wp-admin/network/admin.php` to `wp-admin/user/admin.php` too, for consistency.

Props rimadoshi.
Fixes #49300.

Comments: Add `In reply to: %s` parent comment link to new comment email notifications.

This information was previously available on the Moderate Comment screen in the admin, but was missing from moderation emails.

Props imath, danieltj, andraganescu, galbaras, SergeyBiryukov.
Fixes #43805. See #43429.

Docs: Remove extra trailing spaces from `wp_add_privacy_policy_content()` DocBlock to fix WPCS issues, apply minor formatting changes for consistency.

Follow-up to [47112].

See #49282.

Privacy: Cleanup `.wp-policy-help` CSS remnants and add back-compat when hiding the tutorial content before copying.

Props garrett-eclipse.
Fixes #49282.

Comments: Add `In reply to %s.` prefix to child comments in comments feed.

The prefix includes a link to the parent comment and the name of its author.

Props zodiac1978, imath, SergeyBiryukov.
Fixes #43429.

Twenty Twenty: Remove unnecessary escaping of `get_the_title()` in `comments.php`.

For users with the `unfiltered_html` capability, titles can contain legitimate markup.

The title is filtered on saving, so the content in the database is considered safe.

Props kjellr, joyously, peterwilsoncc.
Fixes #49190.

Docs: Improve documentation for `add_user_to_blog()`, `add_existing_user_to_blog()`, and `add_new_user_to_blog()`.

See #48303.

Toolbar: Remove leftover `@since` notations after [46678].

See #19647.

Cache API: Remove `WP_Object_Cache::__destruct()` and `wpdb::__destruct()`.

Originally added in [4686], these constructor/destructor pairings were designed to prevent the objects from being destroyed before shutdown, when output buffers are flushed.

A deeper investigation reveals that this approach didn't quite work as expected and was later made redundant by introducing `wp_ob_end_flush_all()` in [5462].

Props wonderboymusic, nacin, Mte90, SergeyBiryukov.
Fixes #21402.

Block Editor: Update WordPress Packages.

The following package versions were changed:
@wordpress/a11y: 2.5.1 -> 2.6.0
@wordpress/annotations: 1.9.0 -> 1.10.0
@wordpress/api-fetch: 3.8.0 -> 3.9.0
@wordpress/blob: 2.5.1 -> 2.6.0
@wordpress/block-directory: 1.2.0 -> 1.3.0
@wordpress/block-editor: 3.4.0 -> 3.5.0
@wordpress/block-library: 2.11.0 -> 2.12.0
@wordpress/blocks: 6.9.0 -> 6.10.0
@wordpress/components: 8.5.0 -> 9.0.0
@wordpress/compose: 3.9.0 -> 3.10.0
@wordpress/core-data: 2.9.0 -> 2.10.0
@wordpress/data: 4.11.0 -> 4.12.0
@wordpress/data-controls: 1.5.0 -> 1.6.0
@wordpress/dom: 2.6.0 -> 2.7.0
@wordpress/dom-ready: 2.5.1 -> 2.6.0
@wordpress/e2e-test-utils: 4.0.0 -> 4.1.0
@wordpress/edit-post: 3.10.0 -> 3.11.0
@wordpress/editor: 9.9.0 -> 9.10.0
@wordpress/format-library: 1.11.0 -> 1.12.0
@wordpress/i18n: 3.7.0 -> 3.8.0
@wordpress/is-shallow-equal: 1.6.1 -> 1.7.0
@wordpress/keycodes: 2.7.0 -> 2.8.0
@wordpress/list-reusable-blocks: 1.10.0 -> 1.11.0
@wordpress/media-utils: 1.4.0 -> 1.5.0
@wordpress/notices: 1.10.0 -> 1.11.0
@wordpress/nux: 3.9.0 -> 3.10.0
@wordpress/plugins: 2.9.0 -> 2.10.0
@wordpress/priority-queue: 1.3.1 -> 1.4.0
@wordpress/rich-text: 3.9.0 -> 3.10.0
@wordpress/scripts: 6.1.1 -> 6.2.0
@wordpress/server-side-render: 1.5.0 -> 1.6.0
@wordpress/viewport: 2.10.0 -> 2.11.0
The following package was added:
@wordpress/keyboard-shortcuts

Props gziolo.
Fixes #49204.

Multisite: Add `$context` parameter to `switch_blog` action.

The action is fired by both `switch_to_blog()` and `restore_current_blog()`, and previously it was difficult for callback functions to determine which function had fired it.

Props SergeyBiryukov, johnbillion, jeremyfelt.
Fixes #49265.

Docs: Expand `@return` value description for `wp_loginout()`, `wp_register()`, `get_calendar()`.

See #48303.

Docs: Expand `@return` description for `the_terms()`.

See #48303.

Docs: Correct `@return` value for `parent_dropdown()`.

Follow-up to [47100].

See #48303.

Docs: Adjust documentation for some `pre_*` filters for consistency.

See #48303.

Docs: Adjust `@return` value of `parent_dropdown()` for consistency with other dropdown functions.

See #48303.

Docs: Correct `@return` value for `update_core()` and `Core_Upgrader::upgrade()`.

See #48303.

Date/Time: In `wp_maybe_decline_date()`, add support for a range of days, e.g. `February 21–23`.

A potential use case is displaying multi-day events in the WordPress Events and News dashboard widget.

See #47798, #48934.

Docs: Expand `@return` value description for `wp_nav_menu()`.

See #48303.

Docs: Correct DocBlock formatting for filters accepting the `$parsed_args` parameter.

Follow-up to [45667].

See #48303.

I18N: Merge duplicate "you must be logged in to comment" strings.

Props ramiy.
Fixes #49251.

I18N: Synchronize MediaElement.js translation strings with the currently bundled version.

Some strings were previously removed in [43345] and accidentally reintroduced in [44163].

Props ramiy.
Fixes #49249. See #42139, #37453.

I18N: Add missing placeholders to some translators comments in `wp-admin`.

Props ramiy.
Fixes #49248.

I18N: Correct translator comment in `wp-admin/options-permalink.php`.

Props ramiy.
Fixes #49247.

I18N: Merge duplicate `%1$s is not of type %2$s` strings in `rest_validate_value_from_schema()`.

Props ramiy.
Fixes #49244.

I18N: Remove unnecessary HTML from "Active:" strings in `wp-admin/themes.php`.

Follow-up to [45435].

Props ramiy.
Fixes #49243.

I18N: Correct translator comments in `WP_Users_List_Table::get_views()` to provide information about each placeholder.

Props ramiy.
Fixes #49242.

Docs: Update links to https://secure.php.net/, they now redirect to https://www.php.net/.

See #48303.

Docs: Correct description for `shortcode_atts_{$shortcode}` filter.

Props glebkema.
Fixes #49225.

Mail: Remove angle brackets from password reset URL in emails sent by `retrieve_password()` and `wp_new_user_notification()`.

The brackets were originally added in [16285] per W3C recommendation in https://www.w3.org/Addressing/URL/5.1_Wrappers.html to avoid wrapping the URL across multiple lines in plain text in older email clients.

This doesn't seem like a common issue in modern email clients, and the current implementation causes more issues than it solves. Since the URL is on a line by itself, it should not require any delimiters.

The URL in recovery mode email introduced in [44973] doesn't have angle brackets, so it's time to retire them in password reset email too if they're not used consistently.

Props donmhico, Otto42, sproutchris, iandunn, dd32, DaveWP196, sebastian.pisula, tommix, sablednah, julian.kimmig, Rahe, clayisland, arenddeboer, nicole2292, nagoke, squarecandy, eatingrules, SergeyBiryukov.
Fixes #21095, #23578, #44589.

Networks and Sites: Clarify the recommendation to remove the `www` prefix from the site domain before creating a network.

The `siteurl` option reference was not quite clear, and the string actually refers to the domain name, not the full URL.

Props kharisblank, tobifjellner, ramiy.
Fixes #49214.

Docs: Improve comments in some `wp-admin` files per the documentation standards.

Props passoniate.
Fixes #49215, #49216.

Coding Standards: Remove unnecessary `// phpcs:ignore` instances in `WP_Debug_Data`.

`WP_Theme::__get()` accepts `Name`, `Version`, and `Author` theme properties in lower case too.

Additionally, remove one short ternary instance, not allowed per the coding standards.

See #49222.

Widgets: Remove extra padding from number inputs in Recent Posts and Recent Comments widgets.

Props marcio-zebedeu, audrasjb, SergeyBiryukov.
Fixes #49195.

Date/Time: Add some basic tests for `current_time()`.

Props pbearne, talldanwp, SergeyBiryukov.
Fixes #34378.

Tests: Replace `date()` with `gmdate()` in `WP_Test_REST_Posts_Controller` tests.

Follow-up to [45424], [46252].

See #46438, #44491, #39953.

Tests: Update the `wp_maybe_decline_date()` tests for [47078].

See #48934.

Date/Time: Pass the date format to `wp_maybe_decline_date()`.

This ensures that the function has enough context to determine the necessity of replacing the month name with the correct form in locales that require it.

Props SergeyBiryukov, Rarst.
Fixes #48934.

Tests: Revert [47076], this should have been committed with the related changes to the function.

Tests: Move `wp_maybe_decline_date()` tests to the `date` directory.

See #48934.

Accessibility: Login and Registration: Add a `role="main"` landmark to the container div in `wp-signup.php`.

Props SteelWagstaff, audrasjb.
Fixes #48657.

Login and Registration: Remove duplicate `<label>` tag from `show_blog_form()` in `wp-signup.php`.

Props vaishalipanchal, audrasjb.
Fixes #49174.

Date/Time: Use `wp_date()` to display the correct time of the next DST transition in Timezone setting on General Settings screen.

Props Rarst, autotutorial.
Fixes #49038.

Editor: Correct vertical alignment for "Published on" month dropdown in Classic Editor.

Props pratik-jain, justinahinon, audrasjb.
Fixes #49115.

File Editor: Remove extra padding on submit button for "Select plugin/theme to edit" dropdown on smaller screens.

Props passoniate.
Fixes #49197.

Upgrade/Install: Correct vertical alignment for "Continue" button on language selection during the install process.

Props garrett-eclipse, audrasjb.
Fixes #49018.

Site Health: Avoid "Undefined property" PHP notices in `wp_dashboard_site_health()` when the status result transient does not exist yet.

Props dlh for initial patch.
See #47606.

Cron API: Use `WEEK_IN_SECONDS` constant for the `weekly` schedule added in [47062].

Props afercia.
See #47606.

Networks and Sites: Use `warning` styles for 'Caution' and 'Warning' messages during Multisite installation.

Props dlh.
Fixes #49186.

Docs: Correct description for `show_in_admin_all_list` and `show_in_admin_status_list` arguments of `register_post_status()`.

Props audrasjb.
Fixes #49180.

Docs: Improve documentation for `wp_save_image_file()` and related functions.

See #48303.

Tests: In `Tests_Site_Health`, create a `WP_Site_Health` instance before clearing the cron array, as the constructor schedules its own task now.

See #47606.

Site Health: Introduce Site Health Status dashboard widget.

The widget informs administrators of any potential issues that should be addressed to improve the performance or security of their website, and directs them to the Site Health screen for more details.

Props Clorith, hedgefield, guddu1315.
See #47606.

Cron API: Add a new cron schedule for `weekly` events.

Props Clorith.
See #47606.

Upgrade/Install: Remove the suggestion for users to skip a minor update to keep their current translation.

With the introduction of asynchronous translation updates in WordPress 3.7+, the suggestion is no longer relevant.

Props casiepa, danieltj, tobifjellner, netweb.
Fixes #43242.

Docs: In various `@return` tags, list the expected type first, instead of `false`.

Follow-up to [46696].

See #48303.

Docs: Synchronize `@return` descriptions for `::handle_row_actions()` methods in list tables.

Make sure `WP_Comments_List_Table::handle_row_actions()` and `WP_MS_Sites_List_Table::handle_row_actions()` return a string, for consistency with other classes.

See #49170, #48303.

Docs: Correct `@return` description for `WP_List_Table::handle_row_actions()`.

Props pbiron.
Fixes #49170.

Docs: Correct `@return` type for `Theme_Upgrader::check_parent_theme_filter()`.

Props diddledan.
Fixes #48570.

Docs: Remove a reference to WordPress 2.7 from `readme.html`.

Props afercia, donmhico.
Fixes #47963.

Docs: Remove `@return void` from widget DocBlocks.

Per the documentation standards, it should not be used outside of the default bundled themes.

See #48303.

Coding Standards: Use strict comparison and Yoda conditions in the root directory files.

Props pikamander2.
Fixes #48965.

Bundled Themes: Remove duplicate `font-size` property in Twenty Twenty.

Props ankitmaru.
Fixes #49015.

Docs: Correct alphabetic order of parameters in `WP_Query::parse_query()` DocBlock.

See #48303.

Block Editor: Update WordPress Packages.

Updated packages:
@wordpress/annotations: 1.7.2 -> 1.9.0
@wordpress/api-fetch: 3.6.4 -> 3.8.0
@wordpress/block-directory: 1.0.5 -> 1.2.0
@wordpress/block-editor: 3.2.5 -> 3.4.0
@wordpress/block-library: 2.9.6 -> 2.11.0
@wordpress/blocks: 6.7.2 -> 6.9.0
@wordpress/components: 8.3.2 -> 8.5.0
@wordpress/compose: 3.7.2 -> 3.9.0
@wordpress/core-data: 2.7.5 -> 2.9.0
@wordpress/data: 4.9.2 -> 4.11.0
@wordpress/data-controls: 1.3.4 -> 1.5.0
@wordpress/date: 3.5.0 -> 3.7.0
@wordpress/dom: 2.5.2 -> 2.6.0
@wordpress/e2e-test-utils: 3.0.0 -> 4.0.0
@wordpress/edit-post: 3.8.6 -> 3.10.0
@wordpress/editor: 9.7.6 -> 9.9.0
@wordpress/element: 2.8.2 -> 2.10.0
@wordpress/escape-html: 1.5.1 -> 1.6.0
@wordpress/format-library: 1.9.5 -> 1.11.0
@wordpress/i18n: 3.6.1 -> 3.7.0
@wordpress/keycodes: 2.6.2 -> 2.7.0
@wordpress/list-reusable-blocks: 1.8.4 -> 1.10.0
@wordpress/media-utils: 1.2.4 -> 1.4.0
@wordpress/notices: 1.8.2 -> 1.10.0
@wordpress/nux: 3.7.2 -> 3.9.0
@wordpress/plugins: 2.7.2 -> 2.9.0
@wordpress/rich-text: 3.7.2 -> 3.9.0
@wordpress/scripts: 6.0.0 -> 6.1.1
@wordpress/server-side-render: 1.3.4 -> 1.5.0
@wordpress/shortcode: 2.4.1 -> 2.5.0
@wordpress/token-list: 1.6.1 -> 1.8.0
@wordpress/url: 2.8.2 -> 2.9.0
@wordpress/viewport: 2.8.2 -> 2.10.0

Props gziolo, youknowriad.
Fixes #49142.

Coding Standards: Use Yoda conditions in `wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php`.

Props jenilk.
Fixes #49150.

Docs: Indicate that `load_script_textdomain_relative_path` filter value can be `false`.

See #48303.

Build Tools: do not include assets for JS dependencies that do not exist.

This is a follow-up for #48154, where we started including *.asset.php files to declare package dependencies.
This works well but creates warnings in environments where the package does not exist because WordPress was not fully built.

Props jeherve, swissspidy.

Fixes #49144.

Site Health: Make sure the "Copied!" text is vertically centered to the "Copy site info to clipboard" button.

Props garrett-eclipse.
Fixes #49139.

REST API: Display the actual conflicting value in addition to the taxonomy name in the `_doing_it_wrong()` message for a conflicting `rest_base` or `name` property.

Follow-up to [47037] and [47045].

Props TimothyBlynJacobs.
See #48401.

REST API: Display the taxonomy name in the `_doing_it_wrong()` message for a conflicting `rest_base` or `name` property, to match the translator comment.

Follow-up to [47037].

See #48401.

I18N: Replace `rest_authentication_errors` filter name with a placeholder in a translatable string.

Follow-up to [38947] and [40038].

See #38446.

I18N: Replace `php.ini`, `post_max_size`, and `upload_max_filesize` with placeholders in "File is empty" error message.

Props ramiy.
Fixes #48868.

Docs: Remove duplicate inline comment in `wp_mail()`.

See [5639].
See #48303.

Docs: Improve documentation for `tests/phpunit/includes/testcase-ajax.php`.

Props andizer, SergeyBiryukov.
Fixes #47568.

Media: After [46375], enable JavaScript translations for the `media-views` script.

See #49134.

Docs: Fix typo in `media_post_single_attachment_fields_to_edit()` description.

Props mukesh27.
Fixes #49131.

Coding Standards: Add missing braces to `if` conditions in `js/_enqueues/wp/customize/base.js`.

Props ankitmaru.
Fixes #49122.

REST API: Issue doing_it_wrong if a taxonomy's specified rest_base is already in use by a different resource.

Props fgiannar, TimothyBlynJacobs, kingkool68, SergeyBiryukov.
Fixes #48401.

REST API: Short-circuit comment controller permissions check if commented-upon post type does not exist.

Props imani3011, dragosh635, subrataemfluence, timothyblynjacobs.
Fixes #42238.

Build Tools: Integrate DependencyExtractionWebpackPlugin in the JS build.

This patch integrates DependencyExtractionWebpackPlugin which was battle-tested in Gutenberg. 

This will greatly simplify the process of upgrading npm packages which change after every Gutenberg release. It might even useful during the WordPress release cycle as we might need to publish more often as we discover critical bugs and regressions.

Props jonsurrell, adamsilverstein, youknowriad, ocean90, netweb.

Fixes #48154.

REST API: Synchronize permission checks in `::get_items_permissions_check()` methods for post types, post statuses, and users:

* Only query post types with `'show_in_rest' => true` instead of looping over all post types and checking the `show_in_rest` property separately.
* Return from the `foreach()` loop as soon as the permission check succeeded.

Props pbiron, TimothyBlynJacobs, SergeyBiryukov.
Fixes #49118.

Link Manager: Use a strict `in_array()` check in `wp-links-opml.php`.

Props dkarfa.
Fixes #49106.

Docs: Synchronize "Default empty array" notes for `$args` parameter in `get_comment_text()` and `comment_text()`.

Props denisco.
See #48303.

Site Health: Fix typo in a variable name in `js/_enqueues/admin/site-health.js`.

Props nickylimjj.
Fixes #49112.

Coding Standards: Move assignment out of condition in `js/media/controllers/library.js`.

Props ankitmaru.
Fixes #49108.

Coding Standards: Move assignment out of condition in `js/media/views/settings.js`.

Props ankitmaru.
Fixes #49107.

Coding Standards: Use strict comparison in `wp-comments-post.php`.

Props dkarfa.
Fixes #49105.

Coding Standards: Use strict comparison and Yoda conditions in `wp-includes/widgets.php`.

Props jenilk.
Fixes #49104.

Happy New Year!

Update copyright year to 2020 in bundled themes' `readme.txt`.

Happy New Year!

Update copyright year to 2020 in `license.txt`.

Docs: Fix typo in `_crop_image_resource()` DocBlock.

Props mukesh27.
Fixes #49103.

Docs: Add missing descriptions and `@return` tags for `_WP_Editors::get_mce_locale()` and `::get_baseurl()`.

Props adnan.limdi.
Fixes #41869.

Docs: Add missing `@since` tags for `wp-includes/class-wp-editor.php`.

See #48303.

Docs: Fix typo in `.env` file description.

Props mujuonly, dkarfa.
Fixes #49095.

Coding Standards: Fix WPCS issue in [47019].

See #49091.

Twenty Twenty: Remove extra space from `arrow-down-circled` icon name in `TwentyTwenty_SVG_Icons::$ui_icons`.

Props kitchin.
Fixes #49091.

Bootstrap/Load: Make handling the `/favicon.ico` requests more flexible.

Previously, `wp_favicon_request()` was introduced in [13205] to avoid a performance hit of serving a full 404 page on every favicon request.

While working as intended, that implementation did not provide a way for theme or plugin authors to manage the behavior of favicon requests.

This changeset implements the following logic (only applied if WordPress is installed in the root directory):

* If there is a Site Icon set in Customizer, redirect `/favicon.ico` requests to that icon.
* Otherwise, use the WordPress logo as a default icon.
* If a physical `/favicon.ico` file exists, do nothing, let the server handle the request.

Handling `/favicon.ico` is now more consistent with handling `/robots.txt` requests.

New functions and hooks:

* Introduce `is_favicon()` conditional tag to complement `is_robots()`.
* Introduce `do_favicon` action to complement `do_robots` and use it in template loader.
* Introduce `do_favicon()` function, hooked to the above action by default, to complement `do_robots()`.
* Introduce `do_faviconico` action to complement `do_robotstxt`, for plugins to override the default behavior.
* Mark `wp_favicon_request()` as deprecated in favor of `do_favicon()`.

Props jonoaldersonwp, birgire, joostdevalk, mukesh27, SergeyBiryukov.
Fixes #47398.

Docs: Improve `@return` description for `wp_update_comment()` and `WP_UnitTest_Factory_For_Comment::update_object()`.

See #48303.

Coding Standards: Fix WPCS issue in [47015].

See #49082.

Docs: Fix typo in `wp_dashboard_cached_rss_widget()` documentation.

Props mukesh27.
Fixes #49082.

Tests: Set `network_id` instead of `site_id` in `WP_UnitTest_Factory_For_Blog` defaults.

Follow-up to [47011], [47013].

See #47195.

Tests: Update legacy arguments passed to `WP_UnitTest_Factory_For_Blog::create_object()`.

This converts the arguments originally meant for `wpmu_create_blog()` to the ones used by `wp_insert_site()`.

Follow-up to [47011].

Fixes #47195.

Tests: Replace most instances of `wpmu_delete_blog()` not specifically testing that function with `wp_delete_site()`.

Follow-up to [47011].

See #47195.

Tests: Switch `WP_UnitTest_Factory_For_Blog::create_object()` to use `wp_insert_site()`.

Map some arguments for backward compatibility with `wpmu_create_blog()` previously used there.

Props davidbaumwald, danielbachhuber, jeremyfelt, SergeyBiryukov.
See #47195.

Media: Make sure `attachment_url_to_postid()` performs a case-sensitive search for the uploaded file name.

Previously, the first available match was returned, regardless of the case, which was not always the expected result.

Props archon810, ben.greeley, tristangemus, vsamoletov, SergeyBiryukov.
Fixes #39768.

Docs: Use a third-person singular verb for comment template function descriptions, per the documentation standards.

See #48303.

Docs: Improve documentation for `get_comment_author_url()`.

Props stevenlinx.
Fixes #49076.

Docs: Correct the note about the `CORE_UPGRADE_SKIP_NEW_BUNDLED` constant in `$_new_bundled_files` global description.

In order to tell WordPress not to install new bundled themes on update, `CORE_UPGRADE_SKIP_NEW_BUNDLED` should be set to `true`, as the name suggests, not `false`.

Follow-up to [39064].

Props tomgreer, knutsp, crdunst.
See #49056.

Docs: Improve documentation for admin menu functions:

* `get_admin_page_parent()`
* `get_admin_page_title()`
* `get_plugin_page_hook()`
* `get_plugin_page_hookname()`
* `user_can_access_admin_page()`

Add missing descriptions and `@since` tags.

Props subrataemfluence, kennithnichol, stevenlinx, SergeyBiryukov.
Fixes #44253, #49067.

Upgrade/Install: When creating the `.htaccess` file in `insert_with_markers()`, make sure it has `0644` as a minimum set of permissions.

Props rcutmore, dd32, i3anaan.
Fixes #40572.

Shortcodes: Introduce `apply_shortcodes()` as an alias for `do_shortcode()`.

This better aligns with the semantics of applying filters to the input and returning a result, rather than performing an action and outputting to the current buffer.

Props ljasinskipl, thefarlilacfield.
Fixes #37422.

Shortcodes: Make sure `wp.shortcode.string()` accepts the `attrs` array keys in any order.

Props yale01, georgestephanis, adamsilverstein, zsusag, mircoraffinetti, SergeyBiryukov.
Fixes #36263.

Administration: Add `doing_wp_cron` to `wp_removable_query_args()`.

It's a single-use URL parameter that does not need to be passed to canonical URLs in the admin.

Props dlh.
Fixes #49017.

Tests: Don't fail the test in `WP_UnitTestCase_Base::skipOnAutomatedBranches()` if Travis environment variables are unavailable, it prevents from running the test locally.

Follow-up to [47000].

See #49050.

Tests: Correct the check for pull requests in `WP_UnitTestCase_Base::skipOnAutomatedBranches()`.

Mark the test as failed if the environment variables are unavailable.

Fixes #49050.

Build/Test Tools: Pass the `TRAVIS_BRANCH` and `TRAVIS_PULL_REQUEST` environment variables along to the Docker container.

This ensures that `WP_UnitTestCase::skipOnAutomatedBranches()` has access to these variables.

See #49050, #47767.

Tests: Skip external HTTP test for recommended PHP and MySQL versions on 503 errors.

Fixes #49049.

Editor: Add unit tests for v5.3.1 block serialization functions

r46896 was intended to have included unit tests for the block serialization functions added as part of the changeset.

Props: @aduth.
Fixes: #49048

Tests: In `test_readme()`, if the HTTP request to `secure.php.net` or `dev.mysql.com` failed, include response code in the error message.

See #40533, #44613.

Tests: Remove unused cache keys from `data_get_site_caches()`.

Follow-up to [46990].

See #40363.

Networks and Sites: Remove invalidation of unused cache keys in `clean_blog_cache()`.

Props spacedmonkey, flixos90, thamaraiselvam.
Fixes #40363.

Users: When creating the first user on installation, populate the Website profile field with the site URL.

Skip setting the field if the user already exists, which is the case when the user tables are being shared among multiple sites.

Props EFAREM, eclare, darrenlambert, zachflauaus, viralsampat.
Fixes #35778.

I18N: Make the minimum input length to start searching posts in the "Insert/edit link" modal localizable.

Props Toro_Unit, birgire, miyauchi, swissspidy, ocean90.
Fixes #44662.

Docs: Improve comments in `tests/formatting/redirect.php` per the documentation standards.

See #48303.

Docs: Add `@method` notation for `WP_UnitTest_Factory_For_Term::create_and_get()` for consistency with other factories.

See #48303.

Docs: Various documentation fixes for unit test factories.

See #48303.

Tests: Use delta comparison in `test_should_fall_back_to_last_post_modified()` to avoid race conditions.

See #48957.

Upload: Run the final file name collision test in `wp_unique_filename()` for each existing file + 1.

Props pbiron.
See #48975.

Date/Time: Ensure that `get_feed_build_date()` correctly handles a modified post object with invalid date.

* Clarify in the documentation that the function returns `false` on failure.
* Consistently pass the return value through the `get_feed_build_date` filter.

Props Rarst, dd32, azaozz, tellyworth.
Fixes #48957.

Docs: Clarify that `get_lastpostdate()` and `get_lastpostmodified()` can return `false` on failure.

The both use `_get_last_post_time()` internally.

Props Rarst.
See #48957.

Upgrade/Install: Remove unused global in `upgrade_430_fix_comments()`.

Props adnan.limdi.
Fixes #41970.

Login/Registration: Pass the error data to the `wp_login_failed` action.

Props hamedmoodi, rixeo.
Fixes #49007.

Docs: Correct `@type` for `timeout` argument in `WP_Http::request()`.

Props georgestephanis, benedictsinger.
Fixes #49005.

Date/Time: Add a unit test for [46968].

See #48145.

Date/Time: In `wp_insert_post()`, when checking the post date to set `future` or `publish` status, use a proper delta comparison.

[3525] allowed a difference up to 59 seconds between the post date/time and the current time to consider the post published instead of scheduled, but that didn't take start of a new minute into account.

Rapidly creating post fixtures in unit tests could encounter a one-second discrepancy between `current_time( 'mysql' )` and `gmdate( 'Y-m-d H:i:s' )`, returning values like `2019-12-16 23:43:00` vs. `2019-12-16 23:42:59`, respectively, and setting the post to a `future` status instead of `publish`.

[45851], while working as intended, made the issue somewhat more likely to occur.

This caused all sorts of occasional random failures in various tests on Travis, mostly on PHP 7.1.

Fixes #48145.

Fix the colors in all color schemes for the `.active` class for buttons.

Props ryelle, audrasjb.
Fixes #49003 for trunk.

Upload: Fix the final file name collision test in `wp_unique_filename()` when uploading a file with upper case extension. Add a unit test to catch that in the future.

Fixes #48975 for trunk.

Upload:

- Fix PHP warnings in `wp_unique_filename()` when the destination directory is unreadable.
- Run the final name collision test only for files that are saved to the uploads directory.
- Update the unit tests to match.

Props eden159, audrasjb, azaozz.
Fixes #48960 for trunk.

Coding Standards: Use strict comparison in `wp-admin/widgets.php`.

Props jenilk.
Fixes #49000.

Coding Standards: Use strict comparison in `wp-admin/includes/network.php`.

Props ataurr.
Fixes #48994.

Coding Standards: Use strict comparison in `wp-admin/edit-tags.php`.

Props passoniate.
Fixes #48985.

Coding Standards: Use strict comparison in `wp-admin/term.php`.

Props vinita29.
Fixes #48983.

Coding Standards: Add missing braces to `if` conditions in `js/_enqueues/wp/util.js`.

Props ankitmaru.
Fixes #48980.

Formatting: Return early from `wp_kses_attr_check()` if the element is not in the list of allowed elements and attributes.

Props krynes, tristanleboss.
Fixes #48549.

Docs: Clarify descriptions for `get_gmt_from_date()` and `get_date_from_gmt()`.

Props johnbillion, Rarst.
Fixes #48650.

I18N: Replace file names in translatable strings on Permalink Settings screen with placeholders.

Props ramiy.
Fixes #48863.

Bundled Themes: Bump version number and update changelog in Twenty Twenty for WordPress 5.3.1.

This bumps the Twenty Twenty version number to `1.1` and update the `readme.txt` changelog.

Props audrasjb, sinatrateam, SergeyBiryukov
Fixes #48944.

Prevent stored XSS in the block editor.

Prevent escaped unicode characters become unescaped in unsafe HTML during JSON decoding.

Props: aduth, epiqueras,

Update `wp_kses_bad_protocol()` to recognize `&colon;` on uri attributes,

`wp_kses_bad_protocol()` makes sure to validate that uri attributes don’t contain invalid/or not allowed protocols. While this works fine in most cases, there’s a risk that by using the colon html5 named entity, one is able to bypass this function.

Props: xknown, nickdaugherty, peterwilsoncc.

Prevent stored XSS through wp_targeted_link_rel().

Props: vortfu, whyisjake, peterwilsoncc, xknown,  SergeyBiryukov, flaviozavan.

Ensure that a user can publish_posts before making a post sticky.

Props: danielbachhuber, whyisjake, peterwilson, xknown.

Docs: Update description for `get_categories()` to avoid suggesting the deprecated `type` argument.

Follow-up to [13754].

Props dingo_d.
Fixes #48913.

Upgrade/Install: Improve the appearance of language selection on install:

* Remove a stray chevron.
* Improve focus and hover styles.

Props garrett-eclipse, audrasjb.
Fixes #48927.

Comments: Avoid a PHP notice in `comment_form()` if the `email` field is not set.

Follow-up to [46090].

Props mat-lipe.
Fixes #48943.

Fixes in `admin-bar.js`:

- Silence errors when a node doesn't exist similarly to jQuery.
- Add "feature testing" and fallbacks for old browsers as this may run on the front-end.
- Improve inline docs.

Props dinhtungdu, azaozz.
Fixes #47069.

Tests: Docs: Correct `@param` formatting in `SpeedTrapListener` after [35226] and [45607].

See #48303.

Tests: Correct the `slowThreshold` option name for `SpeedTrapListener`.

The previous change in [45607] appears to be accidental.

Props Rarst.
Fixes #48933.

Docs: Improve documentation for `wp_dashboard_browser_nag()` and `dashboard_browser_nag_class()`.

Props grapplerulrich.
Fixes #48932.

TinyMCE: remove CSS map reference from `/tinymce/skins/lightgray/skin.min.css`.

Props AlexHolsgrove.
Fixes #48577.

Comments: Optimize the query for pending comments count in `wp_notify_moderator()` for better performance on large tables.

Props sgoen.
Fixes #48514.

Coding Standards: Fix WPCS and JSHint issues in [46872].

See #47069.

Fix the admin toolbar js when jQuery is not present and replace the jQuery based hoverIntent.js with a native implementation. Introduces the "hoverintent" (no dependencies) package.

Props dinhtungdu, audrasjb, azaozz.
Fixes #47069.

Block Editor: Resolve `@wordpress/block-directory` to the expected version, 1.0.6.

Follow-up to [46860].

Props aduth, garrett-eclipse, audrasjb, azaozz.
Fixes #48884.

Menus: Avoid a PHP warning in `add_submenu_page()` when the same value is passed for both `$parent_slug` and `$menu_slug` parameters.

Props welcher, ispreview, ayeshrajans, NextScripts, adamsilverstein, garrett-eclipse, 123host.
Fixes #48599.

Administration: Standardize form control height and alignment across the admin.

This improves the appearance of various form controls in the admin and addresses some visual inconsistencies in WordPress 5.3.

Props afercia, audrasjb, jameskoster, GDragoN, azaozz, michaelarestad, murgroland, SamuelFernandez, chetan200891, veminom, dlh.
Fixes #48420.

Date/Time: XML-RPC: Сalculate the proper offset for GMT in `wp.newPost`, `wp.editComment`, `mw.newPost`, `mw.editPost` when `post_date` or `comment_date` is set.

Previously, `post_date` or `comment_date` was assumed to be GMT, which is only true if the timezone string for the site matches GMT.

Add unit tests.

Props Rarst, smerriman, justdaiv, wonderboymusic, noyle.
Fixes #30429.

Date/Time: When determining whether to decline the month name in `wp_maybe_decline_date()`, take word boundaries into account.

Add more unit tests.

Props Rarst, Clorith, timon33, Xendo, SergeyBiryukov.
Fixes #48606.

Block Editor: Bug fixes targeted for WordPress 5.3.1.

The list of included fixes:

- Edge scrolling issues https://github.com/WordPress/gutenberg/pull/17707
- Intermittent JavaScript issues https://github.com/WordPress/gutenberg/pull/18559
- Remove embed CollegeHumor https://github.com/WordPress/gutenberg/pull/18591 

Updated packages:

- @wordpress/[email protected]
- @wordpress/[email protected]
- @wordpress/[email protected]
- @wordpress/[email protected]
- @wordpress/[email protected]
- @wordpress/[email protected]
- @wordpress/[email protected]

Props youknowriad, ellatrix, epiqueras, audrasjb, gziolo, mcsf, kyliesabra.
Fixes #48884.

Upgrade/Install: Update sodium_compat to v1.12.1.

This includes a speedup for signature verification on most platforms and bugfixes for 32-bit platforms.

Props paragoninitiativeenterprises, lukaswaudentio.
Fixes #48371.

Media: Use consistent width for Scale and Crop inputs.

Follow-up to [46359].

Props sabernhardt, audrasjb.
Fixes #48907.

Twenty Twenty: Adjust the comment in [46851] per the documentation standards.

See #48876.

Help/About: Add a hover effect for links on About pages.

* Add a color that passes WCAG color contrast criteria to every link.
* Add an underline for links in credits list only on hover/focus.

Props audrasjb, ixkaito, mukesh27, melchoyce, SergeyBiryukov.
Fixes #48582.

Bundled Themes: Misaligned input placeholder text Twenty Twenty.

This fixes placeholder misalignment in Firefox when a `height` is added as an inline style to the input field.

Props aljullu, subratamal.
Fixes #48876.

Twenty Twenty: Remove redundant `echo` for `bloginfo()` call in `footer.php`.

Props acosmin.
Fixes #48918.

Administration: Correct checkbox width in list tables on smaller screens.

Previously, checkboxes for pending comments were partially hidden due to an added `4px` border.

Props audrasjb, jeremyfelt, talldanwp, melchoyce, marcelo2605, waleedt93.
Fixes #48815.

Bundled Themes: Make checkbox in comment form larger Twenty Twenty.

This makes the checkbox in the comment form larger and more consistent with other checkboxes.

Props kharisblank, audrasjb.
Fixes #48652.

Accessibility: Menus: Properly disable form controls on the Menus screen that cannot be used until at least one menu is created.

This ensures that the actual UI controls state matches the visually conveyed state.

Props afercia, audrasjb, dinhtungdu, sathyapulse, simonjanin, welcher, SergeyBiryukov.
Fixes #48409.

Twenty Twenty: Correct alignment for embedded Instagram posts.

Props SGr33n, audrasjb, nielslange, JarretC.
Fixes #48688.

Users: Introduce `admin_email_remind_interval` filter for dismissing the admin email confirmation screen.

Props desrosj, birgire.
Fixes #48334.

Docs: Correct DocBlock formatting for `admin_email_confirm` and `admin_email_confirm_form` hooks.

See #48303.

Tests: Change `group` annotation for `test_unique_filename_with_dimension_like_filename()` to `ticket.

See #42437.

Twenty Twenty: Pass `$post_meta` and `$location` values to `twentytwenty_start_of_post_meta_list` and `twentytwenty_end_of_post_meta_list` actions to provide better context.

Props msaari, SergeyBiryukov.
Fixes #48906.

Tests: Make sure network factory returns an integer ID for created objects, for consistency with other factories and the documented value.

See #48145.

Tests: Pad incrementors used in factories with leading zeros to make sure MySQL sorting works as expected.

Previously, tests could create sequential objects with names like `Term 99`, `Term 100`, which by default would be returned in reverse order when sorted by name alphabetically, causing seemingly random test failures that are extremely hard to debug.

See #48145.

Tests: Speed up comment submission unit tests by creating less fixtures and reusing them where possible.

See #30017, #48145.

Twenty Twenty: Use duplicate hook references for `page_css_class` and `page_menu_link_attributes` filters in `TwentyTwenty_Walker_Page`.

See #48303.

Bundled Themes: Correct `@since` tags to refer to the theme version instead of WordPress version.

This makes `@since` notations in Twenty Seventeen, Twenty Nineteen, and Twenty Twenty consistent with the previous bundled themes.

See #48303.

Docs: Further docblock corrections and improvements.

See #48303

Twenty Twenty: Replace Smooth Scroll JS implementation with `scroll-behavior` CSS property.

The JS implementation had multiple issues and did not work as expected.

This change includes an accessibility enhancement by using `prefers-reduced-motion: reduce` media query property for users that don't want motion effects. For further explanation on this media query, see MDN documentation: https://developer.mozilla.org/en-US/docs/Web/CSS/scroll-behavior#Accessibility_concerns

Props audrasjb, melchoyce, joostdevalk, Anlino, mauteri, sergiomdgomes, littlebigthing, williampatton, netweb, andraganescu, joyously, acosmin, mukesh27, hareesh-pillai.
Fixes #48763, #48551, #48866.

Docs: Increase the specificity of various docblock parameter types and return types.

See #48303

Upload: fix `wp_unique_filename()` to prevent name collisions with existing or future image sub-size file names, and add unit tests.

Props Viper007Bond, pbiron, azaozz.
Fixes #42437.

Docs: Correct various docblocks documentation.

See #48303

Text Changes: Rename Comment Blacklist option to be more inclusive

This doesn't change the underlying option name as that would be a backcompat break, but it makes the UI a bit more inclusive.

Props dartiss, jeremyfelt, aaronjorbin.
Fixes #48900.

Tests: Remove duplicate `test_get_page_by_path_priority()` test.

The test was moved into its own file in [37478], but never removed from its previous location.

See #36711.

Accessibility: Administration: Correct active button color for the alternative color schemes.

Follow-up to [46815].

Props melchoyce, ryelle, larrach, audrasjb, studiotwee, afercia, azaozz.
Fixes #48598.

Accessibility: Administration: Apply a unified design to all secondary buttons across all color schemes.

This ensures that secondary buttons have an appropriate color contrast in the alternative color schemes.

Props melchoyce, ryelle, audrasjb, ate-up-with-motor, afercia, sabernhardt.
Fixes #48585.

XML-RPC: Unify some "could not be created/updated/deleted" error messages for consistency.

Props ramiy, SergeyBiryukov.
Fixes #48883.

Bundled Themes: Adds Customizer option to show or hide author bio Twenty Twenty.

This adds an option to the Customizer that allows you to turn the author bio on or off, sitewide.

Props williampatton, nielslange acosmin, dlh.
Fixes #48550.

I18N: Change context for the "Add New" string on Themes screen for consistency with other similar strings.

Props ramiy.
Fixes #48875.

Docs: Move the canonical DocBlock for `handle_bulk_actions-{$screen}` action to `wp-admin/edit.php`.

* Document accepted values for the `$items` parameter.
* Use interpolated syntax for the filter name.

Props dilipbheda, johnbillion, SergeyBiryukov.
Fixes #48857.

Taxonomy: Remove redundant caching from `get_all_category_ids()`, deprecated in favor of `get_terms()` in [28679].

The `all_category_ids` cache key it relied on was removed in [5555] and never repopulated, causing invalid or unexpected results when using a persistent object cache.

Props itowhid06, johnjamesjacoby.
Fixes #48176.

Upload: Exclude PNG images from scaling after uploading. Fixes a case where resizing a very large PNG may create a scaled image that has smaller dimensions but larger file size than the original.

Fixes #48736.

Widgets: Remove `WP_Widget_Factory::$hashed_class_counts` property, unused since [46220].

The `spl_object_hash()` function was introduced in PHP 5.2.0. As of PHP 5.3, the PHP SPL extension can no longer be disabled, so the `WP_Widget_Factory::hash_object()` workaround was removed in [46220].

See #48074.

Administration: Correct font size for comment count in "At a Glance" dashboard widget on mobile.

Props donmhico, jeremyfelt.
Fixes #48799.

Tests: Merge [24251] from `_wp_filter_build_unique_id()` to `_test_filter_build_unique_id()`, for consistency.

See #47407.

Plugins: In `_wp_filter_build_unique_id()`, remove `$wp_filter` global and `$filter_id_count` static variable, unused since [46220].

See #47407, #48074.

REST API: Use strict `in_array()` checks for the list of usernames blacklisted via `illegal_user_logins` filter.

See #48839.

REST API: Use a strict `in_array()` check in `WP_REST_Request::get_parameter_order()`.

See #48839.

REST API: Use a strict `in_array()` check in `WP_REST_Meta_Fields::get_registered_fields()`.

Props dkarfa.
Fixes #48839.