updated core to 8.6.1 via composer

core/modules/media/media.routing.yml

@@ -1,3 +1,8 @@
+# @deprecated in Drupal 8.6.x, to be removed before Drupal 9.0.0.
+#   This route is not used in Drupal core. As an internal API, it may also be
+#   removed in a minor release. If you are using it, copy the class
+#   and the related "entity.media.multiple_delete_confirm" route to your
+#   module.
 entity.media.multiple_delete_confirm:
   path: '/admin/content/media/delete'
   defaults:
@@ -19,3 +24,18 @@ entity.media.revision:
   requirements:
     _access_media_revision: 'view'
     media: \d+
+
+media.oembed_iframe:
+  path: '/media/oembed'
+  defaults:
+    _controller: '\Drupal\media\Controller\OEmbedIframeController::render'
+  requirements:
+    _permission: 'view media'
+
+media.settings:
+  path: '/admin/config/media/media-settings'
+  defaults:
+    _form: '\Drupal\media\Form\MediaSettingsForm'
+    _title: 'Media settings'
+  requirements:
+    _permission: 'administer media'