diff -u b/core/CHANGELOG.txt b/core/CHANGELOG.txt
--- b/core/CHANGELOG.txt
+++ b/core/CHANGELOG.txt
@@ -128,7 +128,8 @@
   to purge them any more. [Empty field deletion is now performed
   immediately](https://www.drupal.org/node/2884202) instead to avoid this
   scenario.
-* @todo [Clearing cache via UI in translated language resets config translation of field labels to default language](https://www.drupal.org/node/2650434)
+* When clearing caches in a translated interface, the field labels would
+  [return to the default language](https://www.drupal.org/node/2650434).
 
 ### New stable modules
 
@@ -353,7 +354,9 @@
   be thrown. [See the change record for information about how to update
   `phpunit.xml` and how to test deprecated
   code](https://www.drupal.org/node/2811561).
-* @todo [Break BrowserTestBase & children dependency on Simpletest, deprecate stub BC traits](https://www.drupal.org/node/2803621)
+* BrowserTestBase is [no longer dependent on traits from
+  Simpletest](https://www.drupal.org/node/2803621). Backwards
+  compatibility is preserved.
 * [Resolved random test failures](https://www.drupal.org/node/2866056) due to
   ResourceTestBase's HTTP client timeout of 30 seconds.
 
@@ -378,14 +381,19 @@
   development version higher than 2.1.0.1](https://www.drupal.org/node/2898808)
   to resolve an upstream incompatibility with jQuery 3. We will update to
   Joyride 2.1.1 once it is available with the needed fix.
-* [zendframework/zend-diactoros has been updated from 1.3.10 to 1.4.0](https://www.drupal.org/node/2874817).
+* [zendframework/zend-diactoros has been updated from 1.3.10 to 1.4.1](https://www.drupal.org/node/2874817).
 * [jQuery UI has been updated from 1.11.4 to 1.12.1](https://www.drupal.org/node/2809427).
 * [jQuery Once has been updated from 2.1.1 to 2.2.0](https://www.drupal.org/node/2899156).
 * [CKEditor has been updated from 4.6.2 to 4.7.2](https://www.drupal.org/node/2904142).
 * [asm89/stack-cors has been updated from 1.0 to 1.1](https://www.drupal.org/node/2853201).
 * [The minimum phpsec/prophecy requirement is now 1.4](https://www.drupal.org/node/2900800).
-* @todo [Update non-Symfony dependencies in lock file before 8.4.0](https://www.drupal.org/node/2900112)
-* @todo [Again update non-Symfony dependencies in lock file before 8.4.0](https://www.drupal.org/node/2909743)
+* [composer/installers has been updated from 1.2.0 to 1.4.0](https://www.drupal.org/node/2900112).
+* [wikimedia/composer-merge-plugin has been updated from 1.4.0 to 1.4.1](https://www.drupal.org/node/2900112).
+* [guzzlehttp/guzzle has been updated from 6.2.3 to 6.3.0](https://www.drupal.org/node/2900112).
+* [mikey179/vfsstream has been updated from 1.6.4 to 1.6.5](https://www.drupal.org/node/2900112).
+* [phpunit/phpunit has been updated from 4.8.35 to 4.8.36](https://www.drupal.org/node/2900112).
+* [masterminds/html5 has been updated from 2.2.2 to 2.3.0](https://www.drupal.org/node/2909743).
+* [symfony-cmf/routing has been udpated from 1.4.0 to 1.4.1](https://www.drupal.org/node/2909743).
 
 ### Experimental modules