Update CHANGELOG.md for 10.7.0

[ci skip]

CHANGELOG.md

@@ -2,6 +2,213 @@
 documentation](doc/development/changelog.md) for instructions on adding your own
 entry.
 
+## 10.7.0 (2018-04-22)
+
+### Security (6 changes, 2 of them are from the community)
+
+- Fixed some SSRF vulnerabilities in services, hooks and integrations. !2337
+- Update ruby-saml to 1.7.2 and omniauth-saml to 1.10.0. !17734 (Takuya Noguchi)
+- Update rack-protection to 2.0.1. !17835 (Takuya Noguchi)
+- Adds confidential notes channel for Slack/Mattermost.
+- Fix XSS on diff view stored on filenames.
+- Fix GitLab Auth0 integration signing in the wrong user.
+
+### Fixed (65 changes, 20 of them are from the community)
+
+- File uploads in remote storage now support project renaming. !4597
+- Fixed bug in dropdown selector when selecting the same selection again. !14631 (bitsapien)
+- Fixed group deletion linked to Mattermost. !16209 (Julien Millau)
+- Create commit API and Web IDE obey LFS filters. !16718
+- Set breadcrumb for admin/runners/show. !17431 (Takuya Noguchi)
+- Enable restore rake task to handle nested storage directories. !17516 (Balasankar C)
+- Fix hover style of dropdown items in the right sidebar. !17519
+- Improve empty state for canceled job. !17646
+- Fix generated URL when listing repoitories for import. !17692
+- Use singular in the diff stats if only one line has been changed. !17697 (Jan Beckmann)
+- Long instance urls do not overflow anymore during project creation. !17717
+- Fix importing multiple assignees from GitLab export. !17718
+- Correct copy text for the promote milestone and label modals. !17726
+- Fix search results stripping last endline when parsing the results. !17777 (Jasper Maes)
+- Add read-only banner to all pages. !17798
+- Fix viewing diffs on old merge requests. !17805
+- Fix forking to subgroup via API when namespace is given by name. !17815 (Jan Beckmann)
+- Fix UI breakdown for Create merge request button. !17821 (Takuya Noguchi)
+- Unify format for nested non-task lists. !17823 (Takuya Noguchi)
+- UX re-design branch items with flexbox. !17832 (Takuya Noguchi)
+- Use porcelain commit lookup method on CI::CreatePipelineService. !17911
+- Update dashboard milestones breadcrumb link. !17933 (George Tsiolis)
+- Deleting a MR you are assigned to should decrements counter. !17951 (m b)
+- Update no repository placeholder. !17964 (George Tsiolis)
+- Drop JSON response in Project Milestone along with avoiding error. !17977 (Takuya Noguchi)
+- Fix personal access token clipboard button style. !17978 (Fabian Schneider)
+- Avoid validation errors when running the Pages domain verification service. !17992
+- Project creation will now raise an error if a service template is invalid. !18013
+- Add better LDAP connection handling. !18039
+- Fix autolinking URLs containing ampersands. !18045
+- Fix exceptions raised when migrating pipeline stages in the background. !18076
+- Always display Labels section in issuable sidebar, even when the project has no labels. !18081 (Branka Martinovic)
+- Fixed gitlab:uploads:migrate task ignoring some uploads. !18082
+- Fixed gitlab:uploads:migrate task failing for Groups' avatar. !18088
+- Increase dropdown width in pipeline graph & center action icon. !18089
+- Fix `JobsController#raw` endpoint can not read traces in database. !18101
+- Fix `gitlab-rake gitlab:two_factor:disable_for_all_users`. !18154
+- Adjust 404's for LegacyDiffNote discussion rendering. !18201
+- Work around Prometheus Helm chart name changes to fix integration. !18206 (joshlambert)
+- Prioritize weight over title when sorting charts. !18233
+- Verify that deploy token has valid access when pulling container registry image. !18260
+- Stop redirecting the page in pipeline main actions.
+- Fixed IDE button opening the wrong URL in tree list.
+- Ensure hooks run when a deploy key without a user pushes.
+- Fix 404 in group boards when moving issue between lists.
+- Display state indicator for issuable references in non-project scope (e.g. when referencing issuables from group scope).
+- Add missing port to artifact links.
+- Fix data race between ObjectStorage background_upload and Pages publishing.
+- Fixes unresolved discussions rendering the error state instead of the diff.
+- Don't show Jump to Discussion button on Issues.
+- Fix bug rendering group icons when forking.
+- Automatically cleanup stale worktrees and lock files upon a push.
+- Use the GitLab version as part of the appearances cache key.
+- Fix Firefox stealing formatting characters on issue notes.
+- Include matching branches and tags in protected branches / tags count. (Jan Beckmann)
+- Fix 500 error when a merge request from a fork has conflicts and has not yet been updated.
+- Test if remote repository exists when importing wikis.
+- Hide emoji popup after multiple spaces. (Jan Beckmann)
+- Fix relative uri when "#" is in branch name. (Jan)
+- Escape Markdown characters properly when using autocomplete.
+- Ignore project internal references in group context.
+- Fix finding wiki file when Gitaly is enabled.
+- Fix listing commit branch/tags that contain special characters.
+- Ensure internal users (ghost, support bot) get assigned a namespace.
+- Fix links to subdirectories of a directory with a plus character in its path.
+
+### Deprecated (1 change)
+
+- Remove support for legacy tar.gz pages artifacts. !18090
+
+### Changed (22 changes, 2 of them are from the community)
+
+- Add yellow favicon when `CANARY=true` to differientate canary environment. !12477
+- Use human readable value build_timeout in Project. !17386
+- Improved visual styles and consistency for commit hash and possible actions across commit lists. !17406
+- Don't create permanent redirect routes. !17521
+- Add empty repo check before running AutoDevOps pipeline. !17605
+- Update wording to specify create/manage project vs group labels in labels dropdown. !17640
+- Add tooltips to icons in lists of issues and merge requests. !17700
+- Change avatar error message to include allowed file formats. !17747 (Fabian Schneider)
+- Polish design for verifying domains. !17767
+- Move email footer info to a single line. !17916
+- Add average and maximum summary statistics to the prometheus dashboard. !17921
+- Add additional cluster usage metrics to usage ping. !17922
+- Move 'Registry' after 'CI/CD' in project navigation sidebar. !18018 (Elias Werberich)
+- Redesign application settings to match project settings. !18019
+- Allow HTTP(s) when git request is made by GitLab CI. !18021
+- Added hover background color to IDE file list rows.
+- Make project avatar in IDE consistent with the rest of GitLab.
+- Show issues of subgroups in group-level issue board.
+- Repository checksum calculation is handled by Gitaly when feature is enabled.
+- Allow viewing timings for AJAX requests in the performance bar.
+- Fixes remove source branch checkbox being visible when user cannot remove the branch.
+- Make /-/ delimiter optional for search endpoints.
+
+### Performance (24 changes, 11 of them are from the community)
+
+- Move AssigneeTitle vue component. !17397 (George Tsiolis)
+- Move TimeTrackingCollapsedState vue component. !17399 (George Tsiolis)
+- Move MemoryGraph and MemoryUsage vue components. !17533 (George Tsiolis)
+- Move UnresolvedDiscussions vue component. !17538 (George Tsiolis)
+- Move NothingToMerge vue component. !17544 (George Tsiolis)
+- Move ShaMismatch vue component. !17546 (George Tsiolis)
+- Stop caching highlighted diffs in Redis unnecessarily. !17746
+- Add i18n and update specs for ShaMismatch vue component. !17870 (George Tsiolis)
+- Update spec import path for vue mount component helper. !17880 (George Tsiolis)
+- Move TimeTrackingComparisonPane vue component. !17931 (George Tsiolis)
+- Improves the performance of projects list page. !17934
+- Remove N+1 query for Noteable association. !17956
+- Improve performance of loading issues with lots of references to merge requests. !17986
+- Reuse root_ref_hash for performance on Branches. !17998 (Takuya Noguchi)
+- Update asciidoctor-plantuml to 0.0.8. !18022 (Takuya Noguchi)
+- Cache personal projects count. !18197
+- Reduce complexity of issuable finder query. !18219
+- Reduce number of queries when viewing a merge request.
+- Free open file descriptors and libgit2 buffers in UpdatePagesService.
+- Memoize Git::Repository#has_visible_content?.
+- Require at least one filter when listing issues or merge requests on dashboard page.
+- lazy load diffs on merge request discussions.
+- Bulk deleting refs is handled by Gitaly by default.
+- ListCommitsByOid is executed by Gitaly by default.
+
+### Added (38 changes, 7 of them are from the community)
+
+- Add HTTPS-only pages. !16273 (rfwatson)
+- adds closed by informations in issue api. !17042 (haseebeqx)
+- Projects and groups badges settings UI. !17114
+- Add per-runner configured job timeout. !17221
+- Add alternate archive route for simplified packaging. !17225
+- Add support for pipeline variables expressions in only/except. !17316
+- Add object storage support for LFS objects, CI artifacts, and uploads. !17358
+- Added confirmation modal for changing username. !17405
+- Implement foreground verification of CI artifacts. !17578
+- Extend API for exporting a project with direct upload URL. !17686
+- Move ci/lint under project's namespace. !17729
+- Add Total CPU/Memory consumption metrics for Kubernetes. !17731
+- Adds the option to the project export API to override the project description and display GitLab export description once imported. !17744
+- Port direct upload of LFS artifacts from EE. !17752
+- Adds support for OmniAuth JWT provider. !17774
+- Display error message on job's tooltip if this one fails. !17782
+- Add 'Assigned Issues' and 'Assigned Merge Requests' as dashboard view choices for users. !17860 (Elias Werberich)
+- Extend API for importing a project export with overwrite support. !17883
+- Create Deploy Tokens to allow permanent access to repository and registry. !17894
+- Detect commit message trailers and link users properly to their accounts on Gitlab. !17919 (cousine)
+- Adds cancel btn to new pages domain page. !18026 (Jacopo Beschi @jacopo-beschi)
+- API: Add parameter merge_method to projects. !18031 (Jan Beckmann)
+- Introduce simpler env vars for auto devops REPLICAS and CANARY_REPLICAS #41436. !18036
+- Allow overriding params on project import through API. !18086
+- Support LFS objects when importing/exporting GitLab project archives. !18115
+- Store sha256 checksum of artifact metadata. !18149
+- Limit the number of failed logins when using LDAP for authentication. !43525
+- Allow assigning and filtering issuables by ancestor group labels.
+- Include subgroup issues when searching for group issues using the API.
+- Allow to store uploads by default on Object Storage.
+- Add slash command for moving issues. (Adam Pahlevi)
+- Render MR commit SHA instead "diffs" when viable.
+- Send @mention notifications even if a user has explicitly unsubscribed from item.
+- Add support for Sidekiq JSON logging.
+- Add Gitaly call details to performance bar.
+- Add support for patch link extension for commit links on GitLab Flavored Markdown.
+- Allow feature gates to be removed through the API.
+- Allow merge requests related to a commit to be found via API.
+
+### Other (27 changes, 11 of them are from the community)
+
+- Send notification emails when push to a merge request. !7610 (YarNayar)
+- Rename modal.vue to deprecated_modal.vue. !17438
+- Atomic generation of internal ids for issues. !17580
+- Use object ID to prevent duplicate keys Vue warning on Issue Boards page during development. !17682
+- Update foreman from 0.78.0 to 0.84.0. !17690 (Takuya Noguchi)
+- Add realtime pipeline status for adding/viewing files. !17705
+- Update documentation to reflect current minimum required versions of node and yarn. !17706
+- Update knapsack to 1.16.0. !17735 (Takuya Noguchi)
+- Update CI services documnetation. !17749
+- Added i18n support for the prometheus memory widget. !17753
+- Use specific names for filtered CI variable controller parameters. !17796
+- Apply NestingDepth (level 5) (framework/dropdowns.scss). !17820 (Takuya Noguchi)
+- Clean up selectors in framework/header.scss. !17822 (Takuya Noguchi)
+- Bump `state_machines-activerecord` to 0.5.1. !17924 (blackst0ne)
+- Increase the memory limits used in the unicorn killer. !17948
+- Replace the spinach test with an rspec analog. !17950 (blackst0ne)
+- Remove unused index from events table. !18014
+- Make all workhorse gitaly calls opt-out, take 2. !18043
+- Update brakeman 3.6.1 to 4.2.1. !18122 (Takuya Noguchi)
+- Replace the `project/issues/labels.feature` spinach test with an rspec analog. !18126 (blackst0ne)
+- Bump html-pipeline to 2.7.1. !18132 (@blackst0ne)
+- Remove test_ci rake task. !18139 (Takuya Noguchi)
+- Add documentation for Pipelines failure reasons. !18352
+- Improve JIRA event descriptions.
+- Add query counts to profiler output.
+- Move Sidekiq exporter logs to log/sidekiq_exporter.log.
+- Upgrade Gitaly to upgrade its charlock_holmes.
+
+
 ## 10.6.4 (2018-04-09)
 
 ### Fixed (8 changes, 1 of them is from the community)

changelogs/unreleased/17516-nested-restore-changelog.yml

----
-title: Enable restore rake task to handle nested storage directories
-merge_request: 17516
-author: Balasankar C
-type: fixed

changelogs/unreleased/17939-osw-patch-support-gfm.yml

----
-title: Add support for patch link extension for commit links on GitLab Flavored Markdown
-merge_request:
-author:
-type: added

changelogs/unreleased/20394-protected-branches-wildcard.yml

----
-title: Include matching branches and tags in protected branches / tags count
-merge_request:
-author: Jan Beckmann
-type: fixed

changelogs/unreleased/23460-send-email-when-pushing-more-commits-to-the-merge-request.yml

----
-title: Send notification emails when push to a merge request
-merge_request: 7610
-author: YarNayar
-type: feature

changelogs/unreleased/27210-add-cancel-btn-to-new-page-domain.yml

----
-title: Adds cancel btn to new pages domain page
-merge_request: 18026
-author: Jacopo Beschi @jacopo-beschi
-type: added

changelogs/unreleased/31114-internal-ids-are-not-atomic.yml

----
-title: Atomic generation of internal ids for issues.
-merge_request: 17580
-author:
-type: other

changelogs/unreleased/31591-project-deploy-tokens-to-allow-permanent-access.yml

----
-title: Create Deploy Tokens to allow permanent access to repository and registry
-merge_request: 17894
-author:
-type: added

changelogs/unreleased/33803-drop-json-support-in-project-milestone.yml

----
-title: Drop JSON response in Project Milestone along with avoiding error
-merge_request: 17977
-author: Takuya Noguchi
-type: fixed

changelogs/unreleased/34604-fix-generated-url-for-external-repository.yml

----
-title: Fix generated URL when listing repoitories for import
-merge_request: 17692
-author:
-type: fixed

changelogs/unreleased/35475-lazy-diff.yml

----
-title: lazy load diffs on merge request discussions
-merge_request:
-author:
-type: performance

changelogs/unreleased/38167-ui-bug-when-creating-new-branch.yml

----
-title: Fixed bug in dropdown selector when selecting the same selection again
-merge_request: 14631
-author: bitsapien
-type: fixed

changelogs/unreleased/39584-nesting-depth-5-framework-dropdowns.yml

----
-title: Apply NestingDepth (level 5) (framework/dropdowns.scss)
-merge_request: 17820
-author: Takuya Noguchi
-type: other

changelogs/unreleased/39880-merge-method-api.yml

----
-title: 'API: Add parameter merge_method to projects'
-merge_request: 18031
-author: Jan Beckmann
-type: added

changelogs/unreleased/40781-os-to-ce.yml

----
-title: Add object storage support for LFS objects, CI artifacts, and uploads.
-merge_request: 17358
-author:
-type: added

changelogs/unreleased/41224-pipeline-icons.yml

----
-title: Increase dropdown width in pipeline graph & center action icon
-merge_request: 18089
-author:
-type: fixed

changelogs/unreleased/41436-use-simpler-env-vars-for-auto-devops-replicas.yml

----
-title: 'Introduce simpler env vars for auto devops REPLICAS and CANARY_REPLICAS #41436'
-merge_request: 18036
-author:
-type: added

changelogs/unreleased/41758-after-changing-username-url-still-redirects-to-old-route.yml

----
-title: Added confirmation modal for changing username
-merge_request: 17405
-author:
-type: added

changelogs/unreleased/41902-add-api-option-to-overwrite-project-description-on-project-export.yml

----
-title: Adds the option to the project export API to override the project description and display GitLab export description once imported
-merge_request: 17744
-author:
-type: added

changelogs/unreleased/41967_issue_api_closed_by_info.yml

----
-title: adds closed by informations in issue api
-merge_request: 17042
-author: haseebeqx
-type: added

changelogs/unreleased/42028-xss-diffs.yml

----
-title: Fix XSS on diff view stored on filenames
-merge_request:
-author:
-type: security

changelogs/unreleased/42037-long-instance-names-group-names-covers-namespace-dropdown.yml

----
-title: Long instance urls do not overflow anymore during project creation
-merge_request: 17717
-author:
-type: fixed

changelogs/unreleased/42448-change-commit-row-actions-and-sha-design-for-project-commit-list.yml

----
-title: Improved visual styles and consistency for commit hash and possible actions
-  across commit lists
-merge_request: 17406
-author:
-type: changed

changelogs/unreleased/42568-pipeline-empty-state.yml

----
-title: Improve empty state for canceled job
-merge_request: 17646
-author:
-type: fixed

changelogs/unreleased/42579-fix-sidebar-dropdown-hover-style.yml

----
-title: Fix hover style of dropdown items in the right sidebar
-merge_request: 17519
-author:
-type: fixed

changelogs/unreleased/42880-loss-of-input-text-on-comments-after-preview.yml

----
-title: Fix Firefox stealing formatting characters on issue notes
-merge_request:
-author:
-type: fixed

changelogs/unreleased/43098-controller-projects-issuescontroller-show-executes-more-than-100-sql-queries.yml

----
-title: Improve performance of loading issues with lots of references to merge requests
-merge_request: 17986
-author:
-type: performance

changelogs/unreleased/43215-update-design-for-verifying-domains.yml

----
-title: Polish design for verifying domains
-merge_request: 17767
-author:
-type: changed

changelogs/unreleased/43246-checkfilter.yml

----
-title: Require at least one filter when listing issues or merge requests on dashboard
-  page
-merge_request:
-author:
-type: performance

changelogs/unreleased/43316-controller-parameters-handling-sensitive-information-should-use-a-more-specific-name.yml

----
-title: Use specific names for filtered CI variable controller parameters
-merge_request: 17796
-author:
-type: other

changelogs/unreleased/43482-enabling-auto-devops-on-an-empty-project-gives-you-wrong-information.yml

----
-title: Add empty repo check before running AutoDevOps pipeline
-merge_request: 17605
-author:
-type: changed

changelogs/unreleased/43512-add-support-for-omniauth-jwt-provider.yml

----
-title: Adds support for OmniAuth JWT provider
-merge_request: 17774
-author:
-type: added

changelogs/unreleased/43525-limit-number-of-failed-logins-using-ldap.yml

----
-title: Limit the number of failed logins when using LDAP for authentication
-merge_request: 43525
-author:
-type: added

changelogs/unreleased/43552-user-owned-projects-query-performance-improvement.yml

----
-title: Improves the performance of projects list page
-merge_request: 17934
-author:
-type: performance

changelogs/unreleased/43603-ci-lint-support.yml

----
-title: Move ci/lint under project's namespace
-merge_request: 17729
-author:
-type: added

changelogs/unreleased/43702-update-label-dropdown-wording.yml

----
-title: Update wording to specify create/manage project vs group labels in labels dropdown
-merge_request: 17640
-author:
-type: changed

changelogs/unreleased/43717-breadcrumb-on-admin-runner-page.yml

----
-title: Set breadcrumb for admin/runners/show
-merge_request: 17431
-author: Takuya Noguchi
-type: fixed

changelogs/unreleased/43720-update-fe-webpack-docs.yml

----
-title: Update documentation to reflect current minimum required versions of node and
-  yarn
-merge_request: 17706
-author:
-type: other

changelogs/unreleased/43745-store-metadata-checksum-for-artifacts.yml

----
-title: Store sha256 checksum of artifact metadata
-merge_request: 18149
-author:
-type: added

changelogs/unreleased/43771-improve-avatar-error-message.yml

----
-title: Change avatar error message to include allowed file formats
-merge_request: 17747
-author: Fabian Schneider
-type: changed

changelogs/unreleased/43786-on-the-issuable-list-add-tooltips-to-icons.yml

----
-title: Add tooltips to icons in lists of issues and merge requests
-merge_request: 17700
-author:
-type: changed

changelogs/unreleased/43805-list-gitaly-calls-and-arguments-in-the-performance-bar.yml

----
-title: Add Gitaly call details to performance bar
-merge_request:
-author:
-type: added

changelogs/unreleased/43806-update-ruby-saml-to-1-7-2.yml

----
-title: Update ruby-saml to 1.7.2 and omniauth-saml to 1.10.0
-merge_request: 17734
-author: Takuya Noguchi
-type: security

changelogs/unreleased/43933-always-notify-mentions.yml

----
-title: Send @mention notifications even if a user has explicitly unsubscribed from
-  item
-merge_request:
-author:
-type: added

changelogs/unreleased/43949-verify-job-artifacts.yml

----
-title: Implement foreground verification of CI artifacts
-merge_request: 17578
-author:
-type: added

changelogs/unreleased/43976-fix-access-token-clipboard-button-style.yml

----
-title: Fix personal access token clipboard button style
-merge_request: 17978
-author: Fabian Schneider
-type: fixed

changelogs/unreleased/44022-singular-1-diff.yml

----
-title: Use singular in the diff stats if only one line has been changed
-merge_request: 17697
-author: Jan Beckmann
-type: fixed

changelogs/unreleased/44139-fix-issue-boards-dup-keys.yml

----
-title: Use object ID to prevent duplicate keys Vue warning on Issue Boards page during
-  development
-merge_request: 17682
-author:
-type: other

changelogs/unreleased/44160-update-foreman-to-0-84-0.yml

----
-title: Update foreman from 0.78.0 to 0.84.0
-merge_request: 17690
-author: Takuya Noguchi
-type: other

changelogs/unreleased/44191-reduce-redis-usage-from-merge-request-diffs-caching.yml

----
-title: Stop caching highlighted diffs in Redis unnecessarily
-merge_request: 17746
-author:
-type: performance

changelogs/unreleased/44218-add-internationalization-support-for-the-prometheus-merge-request-widget.yml

----
-title: Added i18n support for the prometheus memory widget
-merge_request: 17753
-author:
-type: other

changelogs/unreleased/44235-update-knapsack-to-1-16-0.yml

----
-title: Update knapsack to 1.16.0
-merge_request: 17735
-author: Takuya Noguchi
-type: other

changelogs/unreleased/44257-viewing-a-particular-commit-gives-500-error-error-undefined-method-binary.yml

----
-title: Fix viewing diffs on old merge requests
-merge_request: 17805
-author:
-type: fixed

changelogs/unreleased/44269-show-failure-reason-on-upgrade-tooltip-of-jobs.yml

----
-title: Display error message on job's tooltip if this one fails
-merge_request: 17782
-author:
-type: added

changelogs/unreleased/44280-fix-code-search.yml

----
-title: Fix search results stripping last endline when parsing the results
-merge_request: 17777
-author: Jasper Maes
-type: fixed

changelogs/unreleased/44291-usage-ping-for-kubernetes-integration.yml

----
-title: Add additional cluster usage metrics to usage ping.
-merge_request: 17922
-author:
-type: changed

changelogs/unreleased/44382-ui-breakdown-for-create-merge-request.yml

----
-title: Fix UI breakdown for Create merge request button
-merge_request: 17821
-author: Takuya Noguchi
-type: fixed

changelogs/unreleased/44383-cleanup-framework-header.yml

----
-title: Clean up selectors in framework/header.scss
-merge_request: 17822
-author: Takuya Noguchi
-type: other

changelogs/unreleased/44384-cleanup-css-for-nested-lists.yml

----
-title: Unify format for nested non-task lists
-merge_request: 17823
-author: Takuya Noguchi
-type: fixed

changelogs/unreleased/44386-better-ux-for-long-name-branches.yml

----
-title: UX re-design branch items with flexbox
-merge_request: 17832
-author: Takuya Noguchi
-type: fixed

changelogs/unreleased/44388-update-rack-protection-to-2-0-1.yml

----
-title: Update rack-protection to 2.0.1
-merge_request: 17835
-author: Takuya Noguchi
-type: security

changelogs/unreleased/44389-always-allow-http-for-ci-git-operations.yml

----
-title: Allow HTTP(s) when git request is made by GitLab CI
-merge_request: 18021
-author:
-type: changed

changelogs/unreleased/44392-resolve-projects-creation-silently-failing-on-after-create-error.yml

----
-title: Project creation will now raise an error if a service template is invalid
-merge_request: 18013
-author:
-type: fixed

changelogs/unreleased/44425-use-gitlab_environment.yml

----
-title: Fix `gitlab-rake gitlab:two_factor:disable_for_all_users`
-merge_request: 18154
-author:
-type: fixed

changelogs/unreleased/44508-fix-fork-namespace-images.yml

----
-title: Fix bug rendering group icons when forking
-merge_request:
-author:
-type: fixed

changelogs/unreleased/44657-reuse-root_ref_hash-on-branches.yml

----
-title: Reuse root_ref_hash for performance on Branches
-merge_request: 17998
-author: Takuya Noguchi
-type: performance

changelogs/unreleased/44665-fix-db-trace-stream-by-raw-access.yml

----
-title: Fix `JobsController#raw` endpoint can not read traces in database
-merge_request: 18101
-author:
-type: fixed

changelogs/unreleased/44712-update-asciidoctor-from-1-5-3-to-1-5-6-2.yml

----
-title: Update asciidoctor-plantuml to 0.0.8
-merge_request: 18022
-author: Takuya Noguchi
-type: performance

changelogs/unreleased/44774-migrate-upload-task-fails-for-upload-with-store-nil.yml

----
-title: Fixed gitlab:uploads:migrate task ignoring some uploads.
-merge_request: 18082
-author:
-type: fixed

changelogs/unreleased/44776-fix-upload-migrate-fails-for-group.yml

----
-title: Fixed gitlab:uploads:migrate task failing for Groups' avatar.
-merge_request: 18088
-author:
-type: fixed

changelogs/unreleased/44878-update-brakeman-3-6-1-to-4-2-1.yml

----
-title: Update brakeman 3.6.1 to 4.2.1
-merge_request: 18122
-author: Takuya Noguchi
-type: other

changelogs/unreleased/44902-remove-rake-test-ci.yml

----
-title: Remove test_ci rake task
-merge_request: 18139
-author: Takuya Noguchi
-type: other

changelogs/unreleased/45271-collpased-diff-loading.yml

----
-title: Fixes unresolved discussions rendering the error state instead of the diff
-merge_request:
-author:
-type: fixed

changelogs/unreleased/Link_to_project_labels_page.yml

----
-title: Always display Labels section in issuable sidebar, even when the project has no labels
-merge_request: 18081
-author: Branka Martinovic
-type: fixed

changelogs/unreleased/ab-37125-assigned-issues-query.yml

----
-title: Reduce complexity of issuable finder query.
-merge_request: 18219
-author:
-type: performance

changelogs/unreleased/ab-37462-cache-personal-projects-count.yml

----
-title: Cache personal projects count.
-merge_request: 18197
-author:
-type: performance

changelogs/unreleased/ab-43150-users-controller-show-query-limit.yml

----
-title: Remove N+1 query for Noteable association.
-merge_request: 17956
-author:
-type: performance

changelogs/unreleased/ab-44467-remove-index.yml

----
-title: Remove unused index from events table.
-merge_request: 18014
-author:
-type: other

changelogs/unreleased/ac-fix-use_file-race.yml

----
-title: Fix data race between ObjectStorage background_upload and Pages publishing
-merge_request:
-author:
-type: fixed

changelogs/unreleased/ac-lfs-direct-upload-ee-to-ce.yml

----
-title: Port direct upload of LFS artifacts from EE
-merge_request: 17752
-author:
-type: added

changelogs/unreleased/ac-pages-port.yml

----
-title: Add missing port to artifact links
-merge_request:
-author:
-type: fixed

changelogs/unreleased/adamco-gitlab-ce-move-issue-command.yml

----
-title: Add slash command for moving issues
-merge_request:
-author: Adam Pahlevi
-type: added

changelogs/unreleased/add-canary-favicon.yml

----
-title: Add yellow favicon when `CANARY=true` to differientate canary environment
-merge_request: 12477
-author:
-type: changed

changelogs/unreleased/add-cpu-mem-totals.yml

----
-title: Add Total CPU/Memory consumption metrics for Kubernetes
-merge_request: 17731
-author:
-type: added

changelogs/unreleased/add-milestone-path-to-dashboard-milestones-breadcrumb-link.yml

----
-title: Update dashboard milestones breadcrumb link
-merge_request: 17933
-author: George Tsiolis
-type: fixed

changelogs/unreleased/add-per-runner-job-timeout.yml

----
-title: Add per-runner configured job timeout
-merge_request: 17221
-author:
-type: added

changelogs/unreleased/add-query-counts-to-profiler-output.yml

----
-title: Add query counts to profiler output
-merge_request:
-author:
-type: other

changelogs/unreleased/ajax-requests-in-performance-bar.yml

----
-title: Allow viewing timings for AJAX requests in the performance bar
-merge_request:
-author:
-type: changed

changelogs/unreleased/blackst0ne-bump-html-pipeline-gem.yml

----
-title: Bump html-pipeline to 2.7.1
-merge_request: 18132
-author: "@blackst0ne"
-type: other

changelogs/unreleased/blackst0ne-rails5-update-state_machines-activerecord-gem.yml

----
-title: Bump `state_machines-activerecord` to 0.5.1
-merge_request: 17924
-author: blackst0ne
-type: other

changelogs/unreleased/blackst0ne-replace-spinach-project-issues-issues-feature.yml

----
-title: Replace the spinach test with an rspec analog
-merge_request: 17950
-author: blackst0ne
-type: other

changelogs/unreleased/blackst0ne-replace-spinach-project-issues-labels-feature.yml

----
-title: Replace the `project/issues/labels.feature` spinach test with an rspec analog
-merge_request: 18126
-author: blackst0ne
-type: other

changelogs/unreleased/bvl-export-import-lfs.yml

----
-title: Support LFS objects when importing/exporting GitLab project archives
-merge_request: 18115
-author:
-type: added

changelogs/unreleased/bvl-import-zip-multiple-assignees.yml

----
-title: Fix importing multiple assignees from GitLab export
-merge_request: 17718
-author:
-type: fixed

changelogs/unreleased/bvl-no-permanent-redirect.yml

----
-title: Don't create permanent redirect routes
-merge_request: 17521
-author:
-type: changed

changelogs/unreleased/bvl-override-import-params.yml

----
-title: Allow overriding params on project import through API
-merge_request: 18086
-author:
-type: added

changelogs/unreleased/ci-pipeline-commit-lookup.yml

----
-title: Use porcelain commit lookup method on CI::CreatePipelineService
-merge_request: 17911
-author:
-type: fixed

changelogs/unreleased/da-gitaly-calculate-repository-checksum.yml

----
-title: Repository checksum calculation is handled by Gitaly when feature is enabled
-merge_request:
-author:
-type: changed

changelogs/unreleased/dashboard-view-user-choices-issues-merge-requests.yml

----
-title: Add 'Assigned Issues' and 'Assigned Merge Requests' as dashboard view choices for users
-merge_request: 17860
-author: Elias Werberich
-type: added

changelogs/unreleased/deploy-tokens-container-registry-specs.yml

----
-title: Verify that deploy token has valid access when pulling container registry image
-merge_request: 18260
-author:
-type: fixed

changelogs/unreleased/direct-upload-of-uploads.yml

----
-title: Allow to store uploads by default on Object Storage
-merge_request:
-author:
-type: added

changelogs/unreleased/dm-deploy-keys-default-user.yml

----
-title: Ensure hooks run when a deploy key without a user pushes
-merge_request:
-author:
-type: fixed

changelogs/unreleased/dm-flatten-tree-plus-chars.yml

----
-title: Fix links to subdirectories of a directory with a plus character in its path
-merge_request:
-author:
-type: fixed

changelogs/unreleased/dm-internal-user-namespace.yml

----
-title: Ensure internal users (ghost, support bot) get assigned a namespace
-merge_request:
-author:
-type: fixed

changelogs/unreleased/docs-for-failure-reason-tooltip.yml

----
-title: Add documentation for Pipelines failure reasons
-merge_request: 18352
-author:
-type: other

changelogs/unreleased/dz-improve-app-settings-2.yml

----
-title: Redesign application settings to match project settings
-merge_request: 18019
-author:
-type: changed

changelogs/unreleased/escape-autocomplete-values-for-markdown.yml

----
-title: Escape Markdown characters properly when using autocomplete
-merge_request:
-author:
-type: fixed

changelogs/unreleased/expose-commits-mr-api.yml

----
-title: Allow merge requests related to a commit to be found via API
-merge_request:
-author:
-type: added

changelogs/unreleased/feature-gb-variables-expressions-in-only-except.yml

----
-title: Add support for pipeline variables expressions in only/except
-merge_request: 17316
-author:
-type: added

changelogs/unreleased/feature_detect_co_authored_commits.yml

----
-title: Detect commit message trailers and link users properly to their accounts
-  on Gitlab
-merge_request: 17919
-author: cousine
-type: added

changelogs/unreleased/fix-40798-namespace-forking.yml

----
-title: Fix forking to subgroup via API when namespace is given by name
-merge_request: 17815
-author: Jan Beckmann
-type: fixed

changelogs/unreleased/fix-42459---in-branch.yml

----
-title: Fix relative uri when "#" is in branch name
-merge_request:
-author: Jan
-type: fixed

changelogs/unreleased/fix-500-error-when-mr-ref-is-not-yet-fetched.yml

----
-title: Fix 500 error when a merge request from a fork has conflicts and has not yet
-  been updated
-merge_request:
-author:
-type: fixed

changelogs/unreleased/fix-auth0-unsafe-login.yml

----
-title: Fix GitLab Auth0 integration signing in the wrong user
-merge_request:
-author:
-type: security

changelogs/unreleased/fix-dashboard-sorting.yml

----
-title: Prioritize weight over title when sorting charts
-merge_request: 18233
-author:
-type: fixed

changelogs/unreleased/fix-emoji-popup.yml

----
-title: Hide emoji popup after multiple spaces
-merge_request:
-author: Jan Beckmann
-type: fixed

changelogs/unreleased/fix-mattermost-delete-team.yml

----
-title: Fixed group deletion linked to Mattermost
-merge_request: 16209
-author: Julien Millau
-type: fixed

changelogs/unreleased/fix-projects-no-repository-placeholder.yml

----
-title: Update no repository placeholder
-merge_request: 17964
-author: George Tsiolis
-type: fixed

changelogs/unreleased/fix-references-in-group-context.yml

----
-title: Ignore project internal references in group context
-merge_request:
-author:
-type: fixed

changelogs/unreleased/fix-wiki-find-file-gitaly.yml

----
-title: Fix finding wiki file when Gitaly is enabled
-merge_request:
-author:
-type: fixed

changelogs/unreleased/fj-15329-services-callbacks-ssrf.yml

----
-title: Fixed some SSRF vulnerabilities in services, hooks and integrations
-merge_request: 2337
-author:
-type: security

changelogs/unreleased/fj-174-better-ldap-connection-handling.yml

----
-title: Add better LDAP connection handling
-merge_request: 18039
-author:
-type: fixed

changelogs/unreleased/fj-41900-import-endpoint-with-overwrite-support.yml

----
-title: Extend API for importing a project export with overwrite support
-merge_request: 17883
-author:
-type: added

changelogs/unreleased/fj-42685-extend-project-export-endpoint.yml

----
-title: Extend API for exporting a project with direct upload URL
-merge_request: 17686
-author:
-type: added

changelogs/unreleased/fl-fix-annoying-actions.yml

----
-title: Stop redirecting the page in pipeline main actions
-merge_request:
-author:
-type: fixed

changelogs/unreleased/ide-file-row-hover-style.yml

----
-title: Added hover background color to IDE file list rows
-merge_request:
-author:
-type: changed

changelogs/unreleased/ide-folder-button-path.yml

----
-title: Fixed IDE button opening the wrong URL in tree list
-merge_request:
-author:
-type: fixed

changelogs/unreleased/ide-project-avatar-identicon.yml

----
-title: Make project avatar in IDE consistent with the rest of GitLab
-merge_request:
-author:
-type: changed

changelogs/unreleased/increase-unicorn-memory-killer-limits.yml

----
-title: Increase the memory limits used in the unicorn killer
-merge_request: 17948
-author:
-type: other

changelogs/unreleased/issue_25542.yml

----
-title: Improve JIRA event descriptions
-merge_request:
-author:
-type: other

changelogs/unreleased/issue_40915.yml

----
-title: Allow assigning and filtering issuables by ancestor group labels
-merge_request:
-author:
-type: added

changelogs/unreleased/issue_42443.yml

----
-title: Include subgroup issues when searching for group issues using the API
-merge_request:
-author:
-type: added

changelogs/unreleased/issue_44270.yml

----
-title: Show issues of subgroups in group-level issue board
-merge_request:
-author:
-type: changed

changelogs/unreleased/jej-commit-api-tracks-lfs.yml

----
-title: Create commit API and Web IDE obey LFS filters
-merge_request: 16718
-author:
-type: fixed

changelogs/unreleased/jej-mattermost-notification-confidentiality.yml

----
-title: Adds confidential notes channel for Slack/Mattermost
-merge_request:
-author:
-type: security

changelogs/unreleased/jivl-realtime-update-adding-file.yml

----
-title: Add realtime pipeline status for adding/viewing files
-merge_request: 17705
-author:
-type: other

changelogs/unreleased/jivl-summary-statistics-prometheus-dashboard.yml

----
-title: Add average and maximum summary statistics to the prometheus dashboard
-merge_request: 17921
-author:
-type: changed

changelogs/unreleased/jprovazn-issueref.yml

----
-title: Display state indicator for issuable references in non-project scope (e.g.
-  when referencing issuables from group scope).
-merge_request:
-author:
-type: fixed

changelogs/unreleased/jramsay-38830-tarball.yml

----
-title: Add alternate archive route for simplified packaging
-merge_request: 17225
-author:
-type: added

changelogs/unreleased/merge-request-widget-source-branch-improvements.yml

----
-title: Fixes remove source branch checkbox being visible when user cannot remove the
-  branch
-merge_request:
-author:
-type: changed

changelogs/unreleased/move-email-footer-info-to-single-line.yml

----
-title: Move email footer info to a single line
-merge_request: 17916
-author:
-type: changed

changelogs/unreleased/move-registry-after-cicd-project-nav-sidebar.yml

----
-  title: Move 'Registry' after 'CI/CD' in project navigation sidebar
-  merge_request: 18018
-  author: Elias Werberich
-  type: changed

changelogs/unreleased/optional-api-delimiter.yml

----
-title: Make /-/ delimiter optional for search endpoints
-merge_request:
-author:
-type: changed

changelogs/unreleased/osw-41401-render-mr-commit-sha-instead-diffs.yml

----
-title: Render MR commit SHA instead "diffs" when viable
-merge_request:
-author:
-type: added

changelogs/unreleased/osw-44295-adjust-authorization-for-discussions-show.yml

----
-title: Adjust 404's for LegacyDiffNote discussion rendering
-merge_request: 18201
-author:
-type: fixed

changelogs/unreleased/pages_force_https.yml

----
-title: Add HTTPS-only pages
-merge_request: 16273
-author: rfwatson
-type: added

changelogs/unreleased/poc-upload-hashing-path.yml

----
-title: File uploads in remote storage now support project renaming.
-merge_request: 4597
-author:
-type: fixed

changelogs/unreleased/reduce-query-count-for-mergerequestscontroller-show.yml

----
-title: Reduce number of queries when viewing a merge request
-merge_request:
-author:
-type: performance

changelogs/unreleased/refactor-move-assignee-title-vue-component.yml

----
-title: Move AssigneeTitle vue component
-merge_request: 17397
-author: George Tsiolis
-type: performance

changelogs/unreleased/refactor-move-mr-widget-memory-usage-and-graph-components.yml

----
-title: Move MemoryGraph and MemoryUsage vue components
-merge_request: 17533
-author: George Tsiolis
-type: performance

changelogs/unreleased/refactor-move-mr-widget-nothing-to-merge-vue-component.yml

----
-title: Move NothingToMerge vue component
-merge_request: 17544
-author: George Tsiolis
-type: performance

changelogs/unreleased/refactor-move-mr-widget-sha-mismatch-vue-component.yml

----
-title: Move ShaMismatch vue component
-merge_request: 17546
-author: George Tsiolis
-type: performance

changelogs/unreleased/refactor-move-mr-widget-unresolved-discussions-vue-component.yml

----
-title: Move UnresolvedDiscussions vue component
-merge_request: 17538
-author: George Tsiolis
-type: performance

changelogs/unreleased/refactor-move-time-tracking-comparison-pane-vue-component.yml

----
-title: Move TimeTrackingComparisonPane vue component
-merge_request: 17931
-author: George Tsiolis
-type: performance

changelogs/unreleased/refactor-move-time-tracking-vue-components.yml

----
-title: Move TimeTrackingCollapsedState vue component
-merge_request: 17399
-author: George Tsiolis
-type: performance

changelogs/unreleased/remove-pages-tar-support.yml

----
-title: Remove support for legacy tar.gz pages artifacts
-merge_request: 18090
-author:
-type: deprecated

changelogs/unreleased/sh-add-cleanup-rpc-gitaly.yml

----
-title: Automatically cleanup stale worktrees and lock files upon a push
-merge_request:
-author:
-type: fixed

changelogs/unreleased/sh-appearance-cache-key-version.yml

----
-title: Use the GitLab version as part of the appearances cache key
-merge_request:
-author:
-type: fixed

changelogs/unreleased/sh-gitlab-sidekiq-logger.yml

----
-title: Add support for Sidekiq JSON logging
-merge_request:
-author:
-type: added

changelogs/unreleased/sh-memoize-repository-empty.yml

----
-title: Memoize Git::Repository#has_visible_content?
-merge_request:
-author:
-type: performance

changelogs/unreleased/sh-move-sidekiq-exporter-logs.yml

----
-title: Move Sidekiq exporter logs to log/sidekiq_exporter.log
-merge_request:
-author:
-type: other

changelogs/unreleased/tc-re-add-read-only-banner.yml

----
-title: Add read-only banner to all pages
-merge_request: 17798
-author:
-type: fixed

changelogs/unreleased/ui-mr-counter-cache.yml

----
-title: Deleting a MR you are assigned to should decrements counter
-merge_request: 17951
-author: m b
-type: fixed

changelogs/unreleased/update-gitlab-ci-yml-services-docs.yml

----
-title: Update CI services documnetation
-merge_request: 17749
-author:
-type: other

changelogs/unreleased/update-spec-import-path-for-vue-mount-component-helper.yml

----
-title: Update spec import path for vue mount component helper
-merge_request: 17880
-author: George Tsiolis
-type: performance

changelogs/unreleased/update-unresolved-discussions-vue-component.yml

----
-title: Add i18n and update specs for ShaMismatch vue component
-merge_request: 17870
-author: George Tsiolis
-type: performance

changelogs/unreleased/use-chronic-duration-attribute-for-project-build-timeout.yml

----
-title: Use human readable value build_timeout in Project
-merge_request: 17386
-author:
-type: changed

changelogs/unreleased/winh-41174-projects-groups-badges-ui.yml

----
-title: Projects and groups badges settings UI
-merge_request: 17114
-author:
-type: added

changelogs/unreleased/winh-deprecate-old-modal.yml

----
-title: Rename modal.vue to deprecated_modal.vue
-merge_request: 17438
-author:
-type: other

changelogs/unreleased/workhorse-gitaly-mandatory.yml

----
-title: Make all workhorse gitaly calls opt-out, take 2
-merge_request: 18043
-author:
-type: other

changelogs/unreleased/zj-bump-gitaly.yml

----
-title: Upgrade Gitaly to upgrade its charlock_holmes
-merge_request:
-author:
-type: other

changelogs/unreleased/zj-feature-gate-remove-http-api.yml

----
-title: Allow feature gates to be removed through the API
-merge_request:
-author:
-type: added

changelogs/unreleased/zj-opt-out-delete-refs.yml

----
-title: Bulk deleting refs is handled by Gitaly by default
-merge_request:
-author:
-type: performance

changelogs/unreleased/zj-opt-out-list-commits-by-oid.yml

----
-title: ListCommitsByOid is executed by Gitaly by default
-merge_request:
-author:
-type: performance

changelogs/unreleased/zj-remote-repo-exists.yml

----
-title: Test if remote repository exists when importing wikis
-merge_request:
-author:
-type: fixed