• Adapt VERSION from 2.5.1-alpha to 2.6.0-alpha [#5605]
• Force the use of Mustache 2.14.1 security fix [#5604]
• Use proper WP_User_Query for fetching users [#5600]
• Fix Composer stack tests [#5599]
• Detect and ignore BOMs [#5597]
• Allow dealerdirect/phpcodesniffer-composer-installer [#5593]
• Check github.repository_owner in automerge workflow [#5591]
• Revert addition of the Mustache PHP 8.1 workaround and update dependency [#5590]
• Use Mustache work-around for PHP 8.1 compat [#5588]
• Use fork on schlessera for Mustache PHP 8.1 fix [#5587]
• Re-add subcommands on all composite commands that are overwritten [#5584]
• Fix default mysqli error reporting mode for PHP 8.1+ [#5582]
• Add --context flag [#5581]
• Make cache size and expiry configurable via environment variables [#5576]
• Updated default branch for roave/security-advisories [#5575]
• Fix wrong variable name used in argument parsing [#5564]
• Fix regression that broke extending existing commands [#5563]
• Add a SECURITY.md file [#5562]
• Update credits [#5556]
• Pass in args to before_run_command hook [#5554]
• Update Composer lock file [#5553]
• Change "Fake Site" site name to "WordPress" wp core multisite-install subcommand [#5552]
• Add missing docblocks [#5551]
• Update Composer lock file - 2021-07-26 [#5550]
• Make logger accessible and add colorization control to Quiet logger [#5549]
• Fix OOM issues when exporting to STDOUT [#5546]
• Update Composer lock file [#5545]
• Allow WP_DEBUG_LOG to override the debug.log location [#5511]