Release v6.0.20

[fabpot]

Changelog (v6.0.19...v6.0.20)

• bug [HttpFoundation] Fix bad return type in IpUtils::checkIp4() #49141 [HttpFoundation] Fix bad return type in IpUtils::checkIp4() (@tristankretzer)
• bug [DependencyInjection] Fix order of arguments when mixing positional and named ones #49126 [DependencyInjection] Fix order of arguments when mixing positional and named ones (@nicolas-grekas)
• bug [HttpClient] Fix collecting data non-late for the profiler #49104 [HttpClient] Fix collecting data non-late for the profiler (@nicolas-grekas)
• bug [Security/Http] Fix compat of persistent remember-me with legacy tokens #49103 [Security/Http] Fix compat of persistent remember-me with legacy tokens (@nicolas-grekas)
• security #cve-2022-24895 [Security/Http] Remove CSRF tokens from storage on successful login (@nicolas-grekas)
• security #cve-2022-24894 [HttpKernel] Remove private headers before storing responses with HttpCache (@nicolas-grekas)

[carsonbot]

Hey!

Oh no, it looks like you have made this PR towards a branch that is not maintained anymore. :/
Could you update the PR base branch to target one of these branches instead? 5.4, 6.2, 6.3.

Cheers!

Carsonbot