[SECURITY] Update drupal/core from 8.6.4 to 8.6.12

[violinist-bot]

If you have a decent test suite, and your tests pass, it should be both safe and smart to merge this update.

Here is a list of changes between the version you use, and the version this pull request updates to:

• f81e50dd61 Drupal 8.6.12
• bdafd644b9 Issue #3040210 by Spokje, phenaproxima, shaal, lauriii, hctom, a.dmitriiev, xjm, cilefen, eelkeblok: Updating twig/twig to v1.38.2 (included in Drupal 8.6.11) causes fatal error when embed tags are used in templates
• 9e88b68cc5 Back to dev.
• 95233343dc Drupal 8.6.11
• 3c3bf024be Issue #3037970 by Berdir, Baysaa: Custom serialized field's data should be normalized even if it's empty
• e5da90b828 Issue #3039408 by vijaycs85, WidgetsBurritos, alexpott, phenaproxima, Joseph Zhao, tstoeckler, kfritsche, mikelutz, fabpot: Updating twig/twig to v1.38.0 or v1.38.1 causes fatal error
• 842674f53a Revert "Issue #2135445 by dww, Sam152, jessebeach, Mile23, Kristen Pol, Wim Leers, larowlan: Toolbar displays Manage tab even if the user is not permitted to see it"
• c08049b504 Issue #2947517 by Lendude, jibran, alexpott, larowlan: Selenium driver: API to get remote file paths
• 2ea175e445 Issue #2999723 by hiway, pawandubey, shaal, kjay, MaddieC, lauriii: Umami's card layout broken in IE11
• 7187ec1025 Issue #3031710 by scor: Remove scor from MAINTAINERS.txt
• 6864b72815 Issue #3034913 by govind.maloo, wombatbuddy: Written 'Confuration' instead of 'Configuration' in the 'Typed Data API' article
• 46d003b372 Issue #3036197 by dww: REST FileUploadResource::streamUploadData() can call fclose(FALSE)
• c212995ffc Issue #2975081 by alexpott, amateescu, larowlan, mtodor, catch: UpdatePathTestBase fails to re-initialize the test site (rebuild container, clear caches) after running the database updates
• 230bd6e56c Issue #3035873 by Eli-T: Remove Eli-T from MAINTAINERS.TXT
• 2b6a179385 Issue #2870458 by Lendude, alexpott, jibran, vijaycs85, Wim Leers, dawehner, Gábor Hojtsy: Convert web tests to browser tests for quickedit module
• a1da6bbed3 Revert "Issue #2870458 by Lendude, jibran, alexpott, vijaycs85, Wim Leers, dawehner, larowlan: Convert web tests to browser tests for quickedit module"
• dd45beb7a4 Issue #2870458 by Lendude, jibran, alexpott, vijaycs85, Wim Leers, dawehner, larowlan: Convert web tests to browser tests for quickedit module
• 0d39506ed5 Issue #2937639 by hotwebmatter, hiway, andrewmacpherson, markconroy, shaal, cehfisher, mgifford, kjay, Eli-T, kbeck303: Umami Theme - a11y context is needed for read more links
• 947ee9a49a Issue #3021406 by ApacheEx, Lendude: Convert \Drupal\Tests\quickedit\FunctionalJavascript\QuickEditLoadingTest::testDisplayOptions to a kernel test
• 22c7e60918 Issue #3030929 by kiwimind, Kavichandran P, c.nish2k3, quietone: User migrations tests in wrong directory
• 1689c429e4 Issue #3008030 by quietone, masipila, maxocub: Migrate D7 i18n fields label and description
• 5d400ccab9 Issue #3032376 by alexpott, dww, Berdir: Files renamed by _file_save_upload_single() do not have the correct filename on the File entity
• 59c282e58d Issue #3032620 by alexpott, dww: \Drupal\file\Plugin\rest\resource\FileUploadResource uses basename() when it needs to use the Drupal version
• 4a092fa8ac Issue #3033494 by alexpott, dww, tim.plunkett: SiteConfigureForm can install the file module without the field module
• 1bb70b6460 Issue #3035318 by mpdonadio: DateFormatter() assumes 30 days per month, while February only has 28 days. Causes fails in tests
• 415dae75af Issue #2995200 by Sam152, sjancich: Defaults for publishing options do not save when workflow is enabled
• 9bbbf03315 Issue #3029661 by Lendude, dawehner: Move BrowserTestBase tests out of modules/simpletest into /tests
• 718752389f Issue #3027745 by claudiu.cristea, idimopoulos, wengerk, alexpott: UniqueFieldConstraint doesn't work for entities with string IDs
• b1be81b902 Issue #2903322 by gaurav.kapoor, levmyshkin: Change FAPI Container example class to an array
• f3b830d94e Issue #3034695 by xjm, neclimdul: Fix coding standard errors from SA-CORE-2019-003
• 5ef0ebca10 Issue #2994550 by tedbow, tim.plunkett, gapple, johndevman, Wim Leers, neclimdul, EclipseGc, catch: Filtering block plugins by context is slow
• 768c5abf70 Issue #3028490 by tim.plunkett, Kristen Pol, xjm, tedbow, r.aubin, phenaproxima: Users with "configure any layout" can see entities they don't have "view" access to
• e0f02111ca Issue #3032869 by alexpott, tim.plunkett, dww, tacituseu, xjm, Mixologic: \Drupal\Core\Update\UpdateKernel::fixSerializedExtensionObjects() caused test runs to double in duration
• c784c6a8e4 Back to dev.
• fc7e84dfa1 Merged 8.6.10.
• 59568ac029 Drupal 8.6.10
• 24b3fae89e SA-CORE-2019-003 by samuel.mortenson, Berdir, pwolanin, dawehner, cashwilliams, Wim Leers, xjm, larowlan, alexpott, plach, damiankloip, tstoeckler, tedbow, DamienMcKenna, effulgentsia, RobLoach, gabesullice, drumm, heshanlk, dsnopek, fago, miro_dietiker, truls1502
• e6f491dd5f Revert "Issue #3031740 by alexpott, tmanhollan, catch, collinhaines: Updating to 8.6.8 or 8.6.9 with Drush 8 causes data loss via update_fix_compatibility()"
• 1288d35430 Revert "Issue #3032869 by alexpott, tim.plunkett, dww, tacituseu, Mixologic: \Drupal\Core\Update\UpdateKernel::fixSerializedExtensionObjects() caused test runs to double in duration"
• 46403dd4d6 Issue #2672950 by Vj, ilya.no, Krzysztof Domański, elandirayan, Rijidij, amateescu, shahgm, larowlan: Notice: Undefined index: #default_value in Drupal\Core\Datetime\Element\Datetime::valueCallback() (line 103
• 1a5fe91055 Issue #3032869 by alexpott, tim.plunkett, dww, tacituseu, Mixologic: \Drupal\Core\Update\UpdateKernel::fixSerializedExtensionObjects() caused test runs to double in duration
• b6e11c7ac4 Issue #3019333 by tim.plunkett, julenmelgar, Ismail Cherri: If you translate the literal "inline blocks" to another language in the layout builder, it stops working
• 70c74db747 Issue #2992580 by Vj, Arez, andypost, jhedstrom: Custom callbacks doesn't work
• 8bd590f7ae Issue #3031740 by alexpott, tmanhollan, catch, collinhaines: Updating to 8.6.8 or 8.6.9 with Drush 8 causes data loss via update_fix_compatibility()
• 1feffcfd82 Issue #2135445 by dww, Sam152, jessebeach, Mile23, Kristen Pol, Wim Leers, larowlan: Toolbar displays Manage tab even if the user is not permitted to see it
• d2ea8e6f5b Issue #2964777 by tim.plunkett, tedbow: Method comment for \Drupal\layout_builder\Plugin\SectionStorage\DefaultsSectionStorage::getDisplay is wrong
• 70a3a1c5f1 Issue #3029614 by cdykstra, cilefen, andrewmacpherson, jrockowitz: Fix aria-required in states.js
• 0e8a2c29b6 Issue #3027236 by rachel_norfolk, kjay, tonypaulbarker, akshay_d, shaal, Eli-T, Not Real, babusaheb.vikas: Umami - hero block is identical on Home and Recipe pages, so potentially confusing
• 44ddeda12f Issue #3023729 by tim.plunkett, bkosborne, xjm: LayoutBuilderController should iterate over components in a region using Element::children()
• 6ee4f30517 Issue #3025865 by quietone, xurizaemon, mikelutz: i18ntaxonomy should be an array in d6 VocabularyPerType source plugin
• 801d178928 Issue #3030781 by shaal, mcannon, andrewmacpherson, Gábor Hojtsy: Umami - icon misaligned on warning and error messages
• 47eb39c8dd Back to dev.
• cac12e0ec1 Drupal 8.6.9
• ebbbc34715 Issue #2215857 followup by gaydamaka, timmillwood, alexpott, lauriii: Regression on Internet Explorer 11
• 43f41c38a8 Issue #3031128 by alexpott, TrevorBradley, indigoxela, catch, cilefen, larowlan, jibran: Update from 8.6.7 to 8.6.8 warnings - Drupal\Core\Extension\Extension has no unserializer
• a01225adc2 Revert "Issue #2924201 by tim.plunkett, tedbow, larowlan, xjm, jibran, Kristen Pol: Resolve random failure in LayoutBuilderTest so that it can be added to HEAD"
• b97ff441b9 Issue #2924201 by tim.plunkett, tedbow, larowlan, xjm, jibran, Kristen Pol: Resolve random failure in LayoutBuilderTest so that it can be added to HEAD
• 71a5e8f36d Back to dev.
• 0e0ccce552 Drupal 8.6.8
• 6ca1792ecd Issue #2975539 by mondrake, alexpott, marcoscano, desierto: Changing machine name of image style leads to WSOD when loading widgets that used the old name
• 61a300cc83 Issue #2859315 by quietone, heddn, jhodgdon: SQL error from profile_fields when migrating d6 (or d7) to d8 without Profile module
• c458921a71 Issue #2443165 by davidwbarratt, amateescu, HOG, kostyashupenko, yched, Berdir, andypost, alexpott, tstoeckler, xjm: Drupal\Core\Entity\EntityInterface\ContentEntityStorageBase::doCreate() assumes that the bundle is a string
• 48298dfac4 Issue #2849074 by decafdennis, alexpott, zuuperman, AdamPS, sagesolutions, tucho, xjm: SiteConfigureForm overrides value from install profile
• e187ee1dfe Issue #3007716 by Sam152, kevin.dutra, jhedstrom, larowlan: Security update introduces breaking changes to content moderation
• 64947e11bd Issue #2215857 by michielnugter, Lendude, gmercer, tim.plunkett, cferthorney, marabak, olli, ericmulder1980, TwoD, sanduhrs, stella, dww, nod_: Behaviors get attached to removed forms
• 34919d63d0 Issue #3017812 by ibustos, joachim: Language selector is immune to hook_entity_field_access in entity forms
• e070b9c227 Issue #2900883 by larskhansen, GaëlG, kalyansamanta, Chi, tim.plunkett, Gábor Hojtsy, joachim: Wrong documentation of Drupal\Component\Plugin\Derivative\DeriverInterface::getDerivativeDefinitions()
• a773ce446d Issue #3027595 by amateescu, pmelab: Incorrect blacklist condition in WorkspaceManager
• c30ad0be4a Issue #2725259 by sardara, andrewmacpherson, claudiu.cristea, tedbow, alwaysworking, droplet, techmsi, kwoxer, xjm, alexpott, lauriii, catch, cilefen, Cottser: [regression] Table Drag handles no longer respond to up/down arrow keys
• c748980643 Revert "Issue #2725259 by sardara, andrewmacpherson, claudiu.cristea, tedbow, alwaysworking, droplet, techmsi, kwoxer, xjm, alexpott, @catch, @cilefen, @cottser, @lauriii: [regression] Table Drag handles no longer respond to up/down arrow keys"
• 19f2e7702d Issue #2725259 by sardara, andrewmacpherson, claudiu.cristea, tedbow, alwaysworking, droplet, techmsi, kwoxer, xjm, alexpott, @catch, @cilefen, @cottser, @lauriii: [regression] Table Drag handles no longer respond to up/down arrow keys
• f818e2e409 Issue #2937073 by tim.plunkett, Saviktor, tedbow: Improve robustness of FieldBlockTest
• 54970b993f Issue #2973713 by quietone, Adita, etecjdo, apmsooner, mikeryan, gnuschichten, tstoeckler: cache_key source plugin configuration not documented
• 406c76e943 Issue #2949555 by quietone, ankitjain28may: Correct the documentation on method UserMigrationClassTest
• c0aca6e2a5 Issue #3025685 by quietone: Add error msg to assertions in MigrateSourceTestBase
• cf5c098a5f Issue #3026840 by izus: Fix plural typo in workspaces field
• fbfc387ca1 Issue #3024452 by kfritsche, hchonov, alexpott: DatabaseStorageExpirable:setWithExpireIfNotExists is not respecting expired
• 0692cf5b77 Issue #2999908 by penyaskito: View more link in recipe cards is not fully translated
• 0f3d5ce923 Issue #3028819 by alwaysworking: Update username
• 0c4fabd6fa Issue #2916021 by d.olaresko, wengerk, Chi, xjm, dawehner, idebr: Update "Running tests" section in core.api.php
• d57938f3af Issue #2953995 by kjay, starshaped, rachel_norfolk, Vidushi Mehta, cferthorney, HAL 9000, Eli-T, markconroy, steveparks: Update the Umami Vegan Chocolate Brownie recipe
• 138fd32c53 Issue #3028608 by danharper, Eli-T, markconroy, Not Real: Umami - favicon
• 9de33f32d9 Issue #2940027 by jmsosso: Add change record to @deprecated for AccountInterface
• 138c7d3b28 Issue #2995150 by msankhala, tim.plunkett: Command examples in core/tests/README.md are confusing and not executable
• 9a3dac1a66 Issue #3024184 by seanB, andrewmacpherson, Kristen Pol: Make the tabbing order match the visual reading order in MediaLibraryWidget
• 1441707fd1 Issue #2668416 by Krzysztof Domański, wheatpenny, Lendude, alexpott: Wrong assert in NodeTitleTest
• b46a1e11b5 Issue #2981870 by Lendude, alexpott: Duplicate BrokenSetUpTest for BrowserTestBase
• 4eb2721044 Issue #2809513 by Lendude, brentgees: Convert AJAX part of \Drupal\responsive_image\Tests\ResponsiveImageFieldUiTest to JavascriptTestBase and the rest to BrowserTestBase
• f86a89011b Issue #3027574 by tuutti: SqlContentEntityStorage no longer update entities with certain (id) fields
• b8f4f50927 Issue #3026043 by Berdir: ConfigEntityBase::__sleep() serializes plugin instances if they were not previously initialized
• bc1923b150 Issue #3021395 by quietone, alexpott: MigrateDrupalTestBase::migrateContent(['translations') does not migrate translations
• 57adbf1090 Revert "Issue #3003238 by Sam152, amateescu, Berdir: EntityStorageException: Default revision can not be deleted in content_moderation_entity_revision_delete()"
• 09d46eadd8 Issue #2987418 by quietone, Kristen Pol: Rename MigrateUpgrade tests
• 8876ac9962 Issue #3003238 by Sam152, amateescu, Berdir: EntityStorageException: Default revision can not be deleted in content_moderation_entity_revision_delete()
• 871eb5cd4a Issue #3026470 by alexpott, jrockowitz, Joseph Zhao: ArchiveTar is throwing fatal error
• 4c594172bd Back to dev.
• fdbb86e99f Merged 8.6.7.
• e0a09bda1d Drupal 8.6.7
• 025d732fea Issue #3026386 by dsnopek, samuel.mortenson, xjm, ydahi, alexpott, Fabianx, kferencz91, littlepixiez, greggles, cilefen: Drush fatal error after upgrading to 8.6.6, 8.5.9, or 7.62: PHP Fatal error: Uncaught TYPO3PharStreamWrapperException
• 0ae6421e8d Back to dev.
• 954d0c0cb4 Merged 8.6.6.
• 6736973f39 Drupal 8.6.6
• d8d246ca32 SA-CORE-2019-002 by greggles, cashwilliams, EclipseGc, larowlan, samuel.mortenson, alexpott, tedbow, effulgentsia, Fabianx, xjm, mlhess
• c4996d2600 SA-CORE-2019-001 by Ayesh, alexpott, larowlan, xjm, michieltcs, farisv
• 71551110f4 Issue #3015992 by Krzysztof Domański, alexpott, larowlan: Not affecting spacing in PhpTransliterationTest
• 43c08ed1aa Issue #2998769 by kiamlaluno, quietone, kkalaskar: @see directive used in the wrong place outputs the wrong HTML markup
• 8de6188753 Issue #3000677 by catch, Shane Birley, featherbelly, alexpott, larowlan: Fatal error after upgrade to 8.6x [due to regression in extension system]
• 4bcd11e206 Issue #2955457 by pfrenssen, Chewie, unrealauk, alexpott, Pol: ConfigFactory static cache gets polluted with data from config overrides
• ebb7029b82 Issue #3020142 by mglaman, tim.plunkett: Test module no_transitions_css has invalid hook_page_attachments
• 83bc30ac40 Issue #3007973 by tim.plunkett, lukasss, xopoc, bnjmnm, stompersly: Layout builder prevents the rendering of extra fields (like Links) on pages not using Layout Builder
• 5f1df65a2b Issue #3024259 by Pol, alexpott: [PHP 7.3] Fix EnvironmentTest::providerTestCheckMemoryLimit() notice
• c4da16ed3c Issue #3023747 by mikelutz, heddn: D6 profile migrations assume stubs, which fail
• 07c88d088d Issue #2978922 by brathbone, philipnorton42, msankhala, hardikpandya, alexpott, siliconmeadow: Improve batch_process() documentation
• e086c45235 Issue #2845975 by quietone, Jo Fitzgerald, aleevas, maxocub, Gábor Hojtsy: Migrate Drupal 6 user profile field value option translations
• 9b45c6b804 Issue #2701829 by alexpott, andypost, Soul88, Graber, Eduardo Morales, dawehner, pingwin4eg, catch, Berdir, jibran, httang12: Extension objects should not implement \Serializable
• 0c69b4b6f2 Issue #2693727 by mikelutz, sanduhrs, CalebD, ajlib, Lendude, tstoeckler, catch: Limiting options for exposed Language filters causes errors and doesn't work for special languages
• 2b2b206a3c Back to dev.
• b66c9334d4 Drupal 8.6.5
• 9b086ec4d7 Issue #3023402 by alexpott: \Drupal\Tests\Component\Datetime\DateTimePlusTest fails on latest PHP7.3 build
• 367360f85b Issue #3001997 by Krzysztof Domański, scott_euser, alexpott: Transliteration a string containing an unknown character (e.g. 0x80) is not valid
• 3045d014e1 Issue #3018942 by welly, alexpott, jibran, Krzysztof Domański, floydm: Domain URL language detection - InvalidArgumentException: The user-entered string must begin with a '/', '?', or '#'
• cd9ddeaed1 Issue #3020902 by Berdir, alexpott: PostgresqlDateSql fails to serialize
• 01554b3ad9 Revert "Issue #2986725 by Mile23, devitate, alexpott: doctrine common 2.9 has moved reflection"
• e1f678cbc6 Issue #3022183 by wengerk, benjifisher: Fix BlockContentAccessHandlerTest::providerTestAccess wrong coverage by early return
• 72de717cb0 Issue #2984072 by vijaycs85, Lendude, ApacheEx, dawehner: System: Convert ErrorHandlerTest to phpunit
• bdacc9e1be Issue #3019706 by hchonov, alexpott, sheanhoxie, jibran, dawehner: Functional JS Tests are broken if XDEBUG_CONFIG is set as an env variable
• 50bb957a91 Revert "Issue #3019706 by hchonov, jibran: Functional JS Tests are broken if XDEBUG_CONFIG is set as an env variable"
• f8a335daa1 Issue #3021204 by maxocub: Remove maxocub from Migrate maintainers
• 54e47b8a76 Issue #3019706 by hchonov, jibran: Functional JS Tests are broken if XDEBUG_CONFIG is set as an env variable
• 2daa8fe811 Issue #2986725 by Mile23, devitate, alexpott: doctrine common 2.9 has moved reflection
• 17c1d9bec4 Issue #2939908 by kjay, steveparks, spitzialist, cferthorney, danharper, Eli-T: Add an article to Umami - Dairy-free chocolate
• f438ecf57f Issue #3007439 by tim.plunkett, Wim Leers, xopoc: Layout builder renders Book navigation block on non-book pages
• 4a2f2da263 Issue #2927768 by justinlevi, Lendude, pritish.kumar, Wim Leers, dawehner: Update RestRegisterUserTest to use the ResourceTestBase base class instead of the deprecated RESTTestBase
• 5ebb2dcaf2 Issue #3020550 by catch: Passing commands as a string to Process is deprecated in Symfony 4
• 11a1071e65 Issue #3020579 by catch: TypeError: Argument 3 passed to Symfony\Component\HttpKernel\Event\FilterResponseEvent::__construct() must be of the type integer, string given [Symfony 4]
• b5fab3c700 Issue #2618606 by dawehner, rbayliss: Update.php - Reverse proxy settings not used
• 4157996237 Issue #2865344 by mpdonadio, Lendude, mbovan, organicwire, alexpott, jibran, jhedstrom, bobemoe, Berdir, larowlan: Exposed date filters 'empty' and 'not empty' are broken
• 8e87a74846 Issue #2974274 by mitrpaka, RumyanaRuseva, joachim: exception message for unrecognized source IDs in lookupDestinationIds() should have more detail
• c222b1e428 Issue #2809305 by Upchuk, Pavan B S, Jo Fitzgerald, tim.plunkett, Berdir: Block Context assignment form element shows even if no options are available
• 8dbf42a90c Issue #3018774 by xjm: hook_post_update_NAME() docs do not explain batching/ parameter
• 63aedc4581 Issue #3018539 by phenaproxima, rodrigoaguilera, alexpott: Media types cannot be created in the UI without JavaScript
• b7f261561d Issue #3018764 by Wim Leers: One test case in MediaUiFunctionalTest is not actually tested due to a duplicate key
• 92a39850a9 Issue #2998462 by AndyF, Baysaa, Siavash, tim.plunkett, millionleaves, fatmarker: Error adding Content Type Selection criteria or Context
• 36cf199562 Issue #3016501 by govind.maloo, andrewmacpherson, markconroy: Writing style - Umami should be capitalised when it is used as a proper noun in English
• b39d9c4a58 Issue #2916595 by phenaproxima, AdamPS, Wim Leers: File element discards attributes if #multiple
• c536c2040c Issue #2883260 by kiamlaluno, yogeshmpawar, msankhala, benjifisher, alexpott, bdlangton: Replace the schema example with one actually used from a module
• b1bb427608 Issue #2883553 by govind.maloo, msankhala, seanB, Berdir, xjm, alexpott: Obsolete argument for hasPermission in node_node_access()
• a481720c25 Issue #3016011 by mikelutz, quietone, alexpott: Reroll all migrate dump files
• 82b22da71a Issue #3017753 by mxr576, alexpott: MemoryBackend should validate the passed cids
• bd41ec0636 Back to dev.

---

This is an automated pull request from Violinist: Continuously and automatically monitor and update your composer dependencies. Have ideas on how to improve this message? All violinist messages are open-source, and can be improved here.