- https://www.drupal.org/project/drupal/issues/2949017
- Allows user/1 to delete or update file entities created by other users

new module - rebuild_cache_access: This module provides a new permission: rebuild cache access. Every role with this permission set will have a nice and big "Rebuild Cache" admin toolbar button. Clicking this button simply fires drupal_flush_all_caches()

1.0 is no longer supported, by security team or otherwise

And update role-based-email-access patch to 8.7 version

modules - google tag manager module: allows non-technical stakeholders to manage the analytics for their website by triggering the insertion of tags and tracking systems onto their page(s) via Google's Tag Manager (GTM) hosted application.
Also adding -- zaporylie/composer-drupal-optimizations: Make composer operations with Drupal way faster and easier on RAM

asc_bootstrap - patch for entity embed to add link around img but not give option to open in new window

new module - redirect: Common API for loading, saving, and deleting redirects (https://www.drupal.org/project/redirect)

new module - menu block title: This module adds an option to make menu_block  block title a link back to the menu parent

new module - ckeditor_indentblock: integrates the CKEditor IndentBlock plugin with the CKEditor in Drupal 8 core

Per Scott Cantor, via Justin Slauson, 2/15/2019:
Justin Slauson [2:18 PM]
 Cool.  As for signing: Scott says it doesn't matter to him, and that if you wanted to disable signing everywhere and use the key for encryption-only that's fine with him, and it would actually make a key rotation much easier to manage if we did have a serious compromise.