Backport of gitlab-org/gitlab-ee!6137

See merge request gitlab-org/gitlab-ce!20699

Add missing Gitaly branch_update nil checks

Closes #49263

See merge request gitlab-org/gitlab-ce!20711

Add a Gitlab::Profiler.print_by_total_time convenience method

See merge request gitlab-org/gitlab-ce!20715

Allow testAction to work for async actions that don't return a Promise

Closes #49413

See merge request gitlab-org/gitlab-ce!20718

This method uses Gitlab::Profiler::TotalTimeFlatPrinter internally, which is the
same as RubyProf::FlatPrinter, but the min_percent option (and new max_percent
option) applies to the _total_ time, not the _self_ time. This helps us figure
out if we're calling a library inefficiently, for instance.

Enable more frozen string in app/services/**/*.rb

See merge request gitlab-org/gitlab-ce!20702

Remove duplicated include IgnorableColumn in user model

See merge request gitlab-org/gitlab-ce!20710

Escape username and password in UrlSanitizer#full_url

See merge request gitlab-org/gitlab-ce!20684

Use rugged to validate ref name

Closes #49043

See merge request gitlab-org/gitlab-ce!20669

Rails5 fix user sees revert modal spec

See merge request gitlab-org/gitlab-ce!20706

Delete UserActivities and related workers

Closes #43312

See merge request gitlab-org/gitlab-ce!20597

Add button to regenerate 2FA codes.

Closes #48408

See merge request gitlab-org/gitlab-ce!20295

If a user uses a password with certain characters (e.g. /, #, +, etc.)
UrlSanitizer#full_url will generate an invalid URL that cannot be
parsed properly by Addressable::URI. If used with UrlBlocker, this
will be flagged as an invalid URI.

If a user uses a password with certain characters (e.g. /, #, +, etc.)
UrlSanitizer#full_url will generate an invalid URL that cannot be
parsed properly by Addressable::URI. If used with UrlBlocker, this
will be flagged as an invalid URI.

Improve email address parsing

Closes #44676

See merge request gitlab-org/gitlab-ce!18192

It's probably duplicated during resolving a conflict?

Incorporate Gitaly's RefService.FindAllRemoteBranches RPC

See merge request gitlab-org/gitlab-ce!20701

If you enter the following RFC 2822 compliant address:
`John Doe <john@doe.com>`

Gitlab will attempt to send three emails:
1) John
2) Doe
3) john@doe.com

With this change given the following:
`John Doe <johndoe@example.com>`
`Jane Doe <janedoe@example.com>`

Gitlab will send emails to `johndoe@example.com` and `janedoe@example.com`

If a user uses a password with certain characters (e.g. /, #, +, etc.)
UrlSanitizer#full_url will generate an invalid URL that cannot be
parsed properly by Addressable::URI. If used with UrlBlocker, this
will be flagged as an invalid URI.

Limit the TTL for anonymous sessions to 1 hour

Closes #48101

See merge request gitlab-org/gitlab-ce!20700

Partially addresses #47424.

By default, all sessions are given the same expiration time configured in the
session store (e.g. 1 week). However, unauthenticated users can generate a lot
of sessions, primarily for CSRF verification. It makes sense to reduce the TTL
for unauthenticated to something much lower than the default (e.g. 1 hour) to
limit Redis memory. In addition, Rails creates a new session after login,
so the short TTL doesn't even need to be extended.

Closes #48101

Proper icon validator

Closes #49236

See merge request gitlab-org/gitlab-ce!20620