(cherry picked from commit 43150a1d)

Cherry-pick: Pin Jasmine version to avoid failing js tests

(cherry picked from commit 2499dc95)

Fix i18n for the page title in course tabs

Pin moment dependency

when serving course export tarball.

(cherry picked from commit 2f98f8af)

Adds settings.FEATURES['THIRD_PARTY_AUTH_HINT']

When provided, this setting appends tpa_hint=<value> to the `next` URL provided for /login and /register page URLs, which bypasses the Open edX Login/Register page with an an automatic redirection to the TPA login/register URL.

This allows the already implemented tpa_hint feature to be automatically added to login, registration, and enrolment URLs generated throughout the platform.

Avoids auto-appending the tpa_hint parameter when the request is already in the TPA pipeline, to prevent infinite redirect loops, and adds tests to verify this behaviour.

Allow i18n strings to be scraped from openedx/features

LEARNER-2304

Host poisoning vulnerability fix

LEARNER-2172

Applied as a patch from pull #15773 by @nedbat

(cherry picked from commit 4201a315)

Move the user_attribute creation for site from within the user creation transaction to outside

Strip `c` from `.pyc` for error message comparison

In Python 2.7, `__file__` returns `.pyc` by default, this breaks our
comparison so let's strip out the trailing `c`.

Cherry picked from #15742 f3faad7e.

Respect `BATCH_ENROLLMENT_NOTIFY_USERS_DEFAULT` setting for subsequen…

Dont fetch caption on getting translations

This fixes the endless loop of fetchCaptions ajax requests. fetchCaption on error calls fetchAvailableTranslations which again calls fetchCaption on success and so on. We don't see any significance for calling fetchCaption in fetchAvailableTranslations.

Cherry picked from #15683 22cc8afb.

learner-1521

(cherry picked from commit cc6f8be8)

(cherry picked from commit 66fdd2fb)

Upgrade xblock-lti-consumer

Collect translation strings from the openedx folder

LEARNER-2112

Cherry picked from #15614 4f00b85d.

(cherry picked from commit 6ea2ed92)

Default ORA2 storage settings use AWS, so no change required to aws envs.

(cherry picked from commit 0fcdcb02)

Cherry-pick import api ginkgo

Don't allow any user to create courses by default

* Change settings default
* Set `ENABLE_CREATOR_GROUP` to False for devstack
* Set `ENABLE_CREATOR_GROUP` to False for tests

In f095c5fe it was decided to enable
anyone to make courses in Studio by default in order to make things
easier in dev environments. This was before the code was open source.
This default is likely in effect for many Open edX instances, but almost
no one would want this setting outside of development.

Cherry picked from #15343 6b085281.

(cherry picked from commit c567add6)

(cherry picked from commit fdd974dd)
(cherry picked from commit 292502ba)

LEARNER-1798