Fixes #3197: Using `ActiveQuery::indexBy()` may cause relational AR queries to generate incorrect relational results

Fixes #3725: Fixed the bug that the filtering condition used in relation definition was ignored when calling `ActiveRecord::unlinkAll()`

Fixes #2380: Added `yii\widgets\ActiveForm::enableClientScript` to support turning on and off client side script generation

Fixes #5058: `yii\helpers\Html::activeCheckbox()` and `activeRadio()` will generate labels by default using the corresponding attribute labels

Fixed `yii\console\controllers\CacheController` does not check if cache component instance of 'yii\caching\Cache'

close #5055

Fixes #5058: Added `$pageSize` parameter to `Pagination::createUrl()` to allow creating URLs with arbitrary page sizes

Fixes #4454: Improved asset bundle managed and used composer-asset-plugin to manage the dependencies on 3rd-party JS libraries

Fixes #3581: Added `yii\validators\CompareValidator::type` to support type conversion before comparing values

Fixes #5039: `UniqueValidator` and `ExistValidator` did not respect query conditions added by default scope

Fixes #4938: When `yii\db\ActiveQuery` is used to build sub-queries, its WHERE clause is not correctly generated

Fixes #5001: `yii\rest\CreateAction`, `yii\rest\UpdateAction` and `yii\rest\DeleteAction` should throw 500 error if the model operation returns false without validation errors

Fixes #3511: Dropped `yii.allowAction()` and modified `yii.confirm()` in `yii.js` to support callbacks

Fixes #2914: `ActiveForm::fieldConfig` will be merged recursively with the `$options` parameter in `ActiveForm::field()`

Fixes #2380: `yii\widgets\ActiveForm` will register validation js even if there are not fields inside

Fixes #3240: Added support for assigning an anonymous function to `yii\widgets\ActiveForm::fieldConfig`

When an ID is found to be in both `Application::controllerMap` and `Application::modules`, the former will take precedence

Fixes #4920: `yii\filters\auth\CompositeAuth` should not trigger error as long as one of the methods succeeds
Fixes #3177: `yii\filters\auth\CompositeAuth` will send out challenges from all auth methods