Merge branch '5.4' into 6.0

* 5.4:
  [Security] Deprecate remaining anonymous checks
  [Security] Deprecate AnonymousToken, non-UserInterface users, and token credentials
  Fix deprecation messages
  Fix deprecation messages
  Do not use str_start_with
  Add the Path class
  Add Estonian (et) translations
  [SecurityBundle] Simplify LDAP factories

Author: wouterj

AppVariable.php

@@ -84,6 +84,7 @@ public function getUser(): ?object
 
         $user = $token->getUser();
 
+        // @deprecated since 5.4, $user will always be a UserInterface instance
         return \is_object($user) ? $user : null;
     }