Basic limiting complexity of GraphQL queries

Closes #58405

See merge request gitlab-org/gitlab-ce!26629

Resolve "Automatically set Prometheus step interval"

Closes #58839

See merge request gitlab-org/gitlab-ce!26441

By computing the step interval passed to the query_range Prometheus API
call we improve the performance on the Prometheus server and GitLab by
reducing the amount of data points sent back and prevent Prometheus
from sending errors when requesting longer intervals.

Resolve "Failing group transfer disables expandable sections"

Closes #45511

See merge request gitlab-org/gitlab-ce!26837

Extract confidential quick action spec to a shared example

Closes #59570

See merge request gitlab-org/gitlab-ce!26913

Add a link to S3 Permission Scopes for registry object storage

Closes #58881

See merge request gitlab-org/gitlab-ce!26067

Allow to use untrusted ruby syntax

See merge request gitlab-org/gitlab-ce!26905

This brings support for untrusted regexp for 'only:refs:' when
enabled via feature flag: alllow_unsafe_ruby_regexp.

This is by default disabled, and should not be used in production

Consider array params on rendering MR list on dashboard

See merge request gitlab-org/gitlab-ce!26623

This fixes the bug, when approver filter is provided,
but dashboard asks to enter any filter

Fix an order-dependent spec failure in spec/migrations/schedule_sync_issuables_state_id_spec.rb

Closes #60029

See merge request gitlab-org/gitlab-ce!26997

Change the way it is checked if the user is last group owner

Closes #38564

See merge request gitlab-org/gitlab-ce!26718

Chnage method used in model to make it
more efficient database-wise
Add additional spec

Revert "Merge branch 'fix/missing-border' into 'master'"

See merge request gitlab-org/gitlab-ce!26980

Monitor GraphQL with Prometheus (try 2)

See merge request gitlab-org/gitlab-ce!26917

Extends graphql's platform tracing class to observe duration
of graphql methods.

In graphql 1.8.11 is added prometheus class but it's not very useful
for us because it uses prometheus_exporter to export results.

It makes all Types::BaseField default to a complexity of 1.

Queries themselves now have limited complexity, scaled
to the type of user: no user, authenticated user, or an
admin user.

Exempt release automation MRs from Danger rules

Closes gitlab-org/release/framework#269

See merge request gitlab-org/gitlab-ce!26993

Support multi-line suggestions

Closes #53310

See merge request gitlab-org/gitlab-ce!25211

- added suggestions to mock data
- fixed props to be not required

Backport: Ignore merge if the status of the merge request pipeline is stale

See merge request gitlab-org/gitlab-ce!26975

Fix webpack dev-server crash caused by 1.5gb limit

Closes #59075

See merge request gitlab-org/gitlab-ce!26849

Speed up avatar URLs with object storage

Closes #43065

See merge request gitlab-org/gitlab-ce!26858

Add v2 to reserved top level routes

See merge request gitlab-org/gitlab-ce!26540

GraphQL Type authorization

Closes #54417

See merge request gitlab-org/gitlab-ce!25724

Add testing to feature proposal template

See merge request gitlab-org/gitlab-ce!26779

Filters branch and path labels for metrics

Closes #48090

See merge request gitlab-org/gitlab-ce!26744

With object storage enabled, calling `#filename` on an upload does this:

1. Call the `#filename` method on the CarrierWave object.
2. Generate the URL for that object.
3. If the uploader isn't public, do so by generating an authenticated
   URL, including signing that request.

That's all correct behaviour, but for the case where we use `#filename`,
it's typically to generate a GitLab URL. That URL doesn't need to be
signed because we do our own auth.

Signing the URLs can be very expensive, especially in batch (say, we
need to get the avatar URLs for 150 users in one request). It's all
unnecessary work. If we used the `RecordsUploads` concern, we have
already recorded a `path` in the database. That `path` is actually
generated from CarrierWave's `#filename` at upload time, so we don't
need to recompute it - we can just use it and strip off the prefix if
it's available.

On a sample users autocomplete URL, at least 10% of the time before this
change went to signing URLs. After this change, we spend no time in URL
signing, and still get the correct results.

Move tag quick action spec to shared example

Closes #59570

See merge request gitlab-org/gitlab-ce!26904

Extract merge quick action to a shared example

Closes #59570

See merge request gitlab-org/gitlab-ce!26925

Work around lack of HTML list support in topic

Closes #59338

See merge request gitlab-org/gitlab-ce!26964

Download a folder from repository

Closes #24704

See merge request gitlab-org/gitlab-ce!26532

Merge branch '59979-update-documentation-about-only-allow-merge-requests-to-be-merged-if-the-pipeline-succeeds-to-take-into-account-the-settings-page-reorganization' into 'master'

Update "Pipelines must succeed" documentation

Closes #59979

See merge request gitlab-org/gitlab-ce!26945