- Bug #18051: Fix missing support for custom validation method in EachValidator (bizley)
- Bug #18051: Fix using `EachValidator` with custom validation function (bizley)
- Bug #18081: Fix for PDO_DBLIB/MSSQL. Set flag `ANSI_NULL_DFLT_ON` to ON for current DB connection (darkdef)
- Bug #18086: Fix accessing public properties of `ArrayAccess` via `ArrayHelper::getValue()` (samdark)
- Bug #18094: Add support for composite file extension validation (darkdef)
- Bug #18096: Fix `InlineValidator` with anonymous inline function not working well from `EachValidator` (trombipeti)
- Enh #18083: Add `Controller::$request` and `$response` (brandonkelly)
- Bug #18101: Fix behavior of `OUTPUT INSERTED.*` for SQL Server query: "insert default values"; correct MSSQL unit tests; turn off profiling echo message in migration test (darkdef)
- Bug #18105: Fix for old trigger in RBAC migration with/without `prefixTable` (darkdef)
- Enh #18120: Include the path to the log file into error message if `FileTarget::export` fails (uaoleg)
- Enh #15202: Add optional param `--silent-exit-on-exception` in `yii\console\Controller` (egorrishe)
- Bug #18110: Add quotes to return value of viewName in MSSQL schema. It is `[someView]` now (darkdef)
- Bug #17985: Convert migrationNamespaces to array if needed (darkdef)
- Bug #18031:`HttpBasicAuth` with auth callback now triggers login events same was as other authentication methods (samdark)
- Bug #18127: Resolve DI references inside of arrays in dependencies (hiqsol)
- Bug #18134:`Expression` as `columnName` should not be quoted in `likeCondition` (darkdef)
- Bug #18147: Fix parameters binding for MySQL when prepare emulation is off (rskrzypczak)
- Enh #15202: Add optional param `--silent-exit-on-exception` in `yii\console\Controller` (egorrishe)
- Enh #17722: Add action injection support (SamMousa, samdark, erickskrauch)
- Enh #18019: Allow jQuery 3.5.0 to be installed (wouter90)
- Enh #18048: Use `Instance::ensure()` to set `User::$accessChecker` (lav45)
- Enh #18083: Add `Controller::$request` and `$response` (brandonkelly)
- Enh #18120: Include the path to the log file into error message if `FileTarget::export` fails (uaoleg)
- Enh #18151: Add `Mutex::isAcquired()` to check if lock is currently acquired (rhertogh)
- Bug #18094: Add support for composite file extension validation (darkdef)
- Bug #18086: Fix accessing public properties of `ArrayAccess` via `ArrayHelper::getValue()` (samdark)
- Bug #18051: Fix using `EachValidator` with custom validation function (bizley)