Manual merge of CE master into EE master

The merge train could not automatically merge CE into EE due to a
changelog file being removed in CE while it was modified in EE. To
resolve this, we removed the changelog file from EE as well.

CHANGELOG.md

@@ -2,6 +2,277 @@
 documentation](doc/development/changelog.md) for instructions on adding your own
 entry.
 
+## 12.1.0
+
+### Security (11 changes, 2 of them are from the community)
+
+- Update tar to 2.2.2. !29949 (Takuya Noguchi)
+- Update lodash to 4.7.14 and lodash.mergewith to 4.6.2. !30602 (Takuya Noguchi)
+- Correctly check permissions when creating snippet notes.
+- Gate MR head_pipeline behind read_pipeline ability.
+- Prevent Billion Laughs attack.
+- Add missing authorizations in GraphQL.
+- Fix Denial of Service for comments when rendering issues/MR comments.
+- Expose merge requests count based on user access.
+- Fix DoS vulnerability in color validation regex.
+- Prevent the detection of merge request templates by unauthorized users.
+- Persist tmp snippet uploads at users.
+
+### Removed (7 changes)
+
+- Disable Kubernetes credential passthrough for managed project-level clusters. !29262
+- Remove deprecated group routes. !29351
+- Remove support for creating non-RBAC kubernetes clusters. !29614
+- Remove Kubernetes service integration and Kubernetes service template from available deployment platforms. !29786
+- Remove MySQL support. !29790
+- Remove depreated /u/:username routing. !30044
+- Remove support for legacy pipeline triggers. !30133
+
+### Fixed (84 changes, 14 of them are from the community)
+
+- Update a user's routes after updating their name. !23272
+- Show poper panel when validation error occurs in admin settings panels. !25434
+- Expect bytes from Gitaly RPC GetRawChanges. !28164
+- Sanitize LDAP output in Rake tasks. !28427
+- Left align mr widget icons and text. !28561
+- Keep the empty folders in the tree. !29196
+- Fix incorrect emoji placement in commit diff discussion. !29445
+- Fix favicon path with uploads of object store. !29482 (Roger Meier)
+- Remove duplicate trailing +/- char in merge request discussions. !29518
+- Fix the signup form's username validation messages not displaying. !29678 (Jiaan Louw)
+- Fix broken environment selector and always display it on monitoring dashboard. !29705
+- Fix Container Scanning job timeout when using the kubernetes executor. !29706
+- Look for new branches more carefully. !29761
+- Fix nested lists unnecessary margin. !29775 (Kuba Kopeć)
+- Fix reports jobs timing out because of cache. !29780
+- Fix Double Border in Profile Page. !29784 (Yoginth <@yo>)
+- Remove minimum character limits for fuzzy searches when using a CTE. !29810
+- Set default sort method for dashboard projects list. !29830 (David Palubin)
+- Protect TeamCity builds from triggering when a branch has been deleted. And a MR-option. !29836 (Nikolay Novikov, Raphael Tweitmann)
+- Fix pipeline schedule does not run correctly when it's scheduled at the same time with the cron worker. !29848
+- Always shows author of created issue/started discussion/comment in HTML body and text of email. !29886 (Frank van Rest)
+- Build correct basenames for title search results. !29898
+- Resolve "500 error when forking via the web IDE button". !29909
+- Turn commit sha in monitor charts popover to link. !29914
+- Fix broken URLs for uploads with a plus in the filename. !29915
+- Retry fetching Kubernetes Secret#token (#63507). !29922
+- Enforce presence of pipeline when "Pipeline must succeed" project setting is enabled. !29926
+- Fix unresponsive reply button in discussions. !29936
+- Allow asynchronous rebase operations to be monitored. !29940
+- Resolve Avatar in Please sign in pattern too large. !29944
+- Persist the cluster a deployment was deployed to. !29960
+- Fix runner tags search dropdown being empty when there are tags. !29985
+- Display the correct amount of projects being migrated/rolled-back to Hashed Storage when specifying ranges. !29996
+- Resolve Environment details header border misaligned. !30011
+- Correct link to docs for External Dashboard. !30019
+- Fix Jupyter-Git integration. !30020 (Amit Rathi)
+- Update Mermaid to 8.1.0. !30036
+- Fix background migrations failing with unused replication slot. !30042
+- Disable Rails SQL query cache when applying service templates. !30060
+- Set higher TTL for write lock of trace to prevent concurrent archiving. !30064
+- Fix charts on Cluster health page. !30073
+- Display boards filter bar on mobile. !30120
+- Fix IDE editor not showing when switching back from preview. !30135
+- Support note position tracing on an image. !30158
+- Replace slugifyWithHyphens with improved slugify function. !30172 (Luke Ward)
+- 'Open' and 'Closed' issue board lists no longer display a redundant tooltip. !30187
+- Fix pipelines table to update without refreshing after action. !30190
+- Change ruby_process_start_time_seconds metric to unix timestamp instead of seconds from boot. !30195
+- Fix attachments using the wrong URLs in e-mails. !30197
+- Make sure UnicornSampler is started only in master process. !30215
+- Don't show image diff note on text file. !30221
+- Fix median counting for cycle analytics. !30229
+- In WebIDE allow adding new entries of the same name as deleted entry. !30239
+- Don't let logged out user do manual order. !30264
+- Skip spam check for task list updates. !30279
+- Make Housekeeping button do a full garbage collection. !30289
+- Removing an image should not output binary data. !30314
+- Fix spacing issues for toasts. !30345
+- Fix race in forbid_sidekiq_in_transactions.rb. !30359
+- Fixed back navigation for projects filter. !30373
+- Fix environments broken terminal. !30401
+- Fix invalid SSL certificate errors on Drone CI service. !30422
+- Fix subgroup url in search drop down. !30457
+- Make unicorn_workers to return meaningful results. !30506
+- Fix wrong URL when creating milestones from instance milestones dashboard. !30512
+- Fixed incorrect line wrap for assignee label in issues. !30523 (Marc Schwede)
+- Improves section header whitespace on the CI/CD Charts page. !30531
+- Prevent multiple confirmation modals from opening when deleting a repository. !30532
+- Aligns CI icon in Merge Request dashboard. !30558
+- Add text-secondary to controls in project list. !30567
+- Review Tools: Add large z-index to toolbar. !30583
+- Hide restricted and disallowed visibility radios. !30590
+- Resolve Label picker: Line break on long label titles. !30610
+- Fix a bug that prevented projects containing merge request diff comments from being imported. !30630
+- I fixed z index bug in diff page. !30657 (Faruk Can)
+- Allow client authentication method to be configured for OpenID Connect. !30683 (Vincent Fazio)
+- Fix commenting before discussions are loaded. !30724
+- Fix linebreak rendering in Mermaid flowcharts. !30730
+- Make httpclient respect system SSL configuration. !30749
+- Bump fog-aws to v3.5.2. !30803
+- API: Allow changing only ci_default_git_depth. !30888 (Mathieu Parent)
+- Search issuables by iids. (Riccardo Padovani)
+- Fix broken warnings while Editing Issues and Edit File on MR.
+- Make sure we are receiving the proper information on the MR Popover by updating the IID in the graphql query.
+
+### Changed (39 changes, 8 of them are from the community)
+
+- Improve group list UI. !26542
+- Backport and Docs for Paginate license management and add license search. !27602
+- Update merge requests section description text on project settings page. !27838
+- Knative version bump 0.5 -> 0.6. !28798 (Chris Baumbauer)
+- Add salesforce logo for salesforce SSO. !28857
+- Enforced requirements for UltraAuth users. !28941 (Kartikey Tanna)
+- Return 400 when deleting tags more often than once per hour. !29448
+- Add identity information to external authorization requests. !29461
+- Enable just-in-time Kubernetes resource creation for project-level clusters. !29515
+- renamed discussion to thread in merge-request and issue timeline. !29553 (Michel Engelen)
+- Changed HTTP Status Code for disabled repository on /branches and /commits to 404. !29585 (Sam Battalio)
+- Enable Git object pools. !29595 (jramsay)
+- Updated container registry to display error message when special characters in path. Documentation has also been updated. !29616
+- Allow developers to delete tags. !29668
+- Will not update issue timestamps when changing positions in a list. !29677
+- Include a link back to the MR for Visual Review feedback form. !29719
+- Improve discussion reply buttons layout and how jump to next discussion button appears. !29779
+- Renders a pre-release tag for releases. !29797
+- Migrate NULL values for users.private_profile column and update users API to reject null value for private_profile. !29888
+- Re-name files in Web IDE in a more natural way. !29948
+- Include events from subgroups in group's activity. !29953 (Fabian Schneider @fabsrc)
+- Upgrade to Gitaly v1.49.0. !29990
+- Remove group and instance clusters feature flag. !30124
+- Add support for creating random passwords in user creation API. !30138
+- Support CIDR notation in IP rate limiter. !30146
+- Add Redis call details in Peek performance bar. !30191
+- Create Knative role and binding with service account. !30235
+- Add cleanup migration for MR's multiple assignees. !30261
+- Updates PHP template to php:latest to ensure always targeting latest stable. !30319 (Paul Giberson)
+- Format `from` and `to` fields in JSON audit log. !30333
+- Upgrade to Gitaly v1.51.0. !30353
+- Modify cycle analytics on project level. !30356
+- Extract clair version as CLAIR_EXECUTABLE_VERSION variable and update clair executable from v8 to v11. !30396
+- Upgrade Rouge to 3.5.1. !30431
+- Move multiple issue boards to core. !30503
+- Upgrade to Gitaly v1.52.0. !30568
+- Upgrade to Gitaly v1.53.0. !30614
+- Open WebIDE in fork when user doesn't have access. !30642
+- Propagate python version variable. (Can Eldem)
+
+### Performance (25 changes, 1 of them is from the community)
+
+- Remove tooltip directive on project avatar image component. !29631 (George Tsiolis)
+- Use Rugged if we detect storage is NFS and we can access the disk. !29725
+- Add endpoint for fetching diverging commit counts. !29802
+- Cache feature flag names in Redis for a minute. !29816
+- Avoid storing backtraces from Bitbucket Cloud imports in the database. !29862
+- Remove import columns from projects table. !29863
+- Enable Gitaly ref name caching for discussions.json. !29951
+- Allow caching of negative FindCommit matches. !29952
+- Eliminate N+1 queries in Dashboard::TodosController. !29954
+- Memoize non-existent custom appearances. !29957
+- Add a separate endpoint for fetching MRs serialized as widgets. !29979
+- Use CTE to fetch clusters hierarchy in single query. !30063
+- Enable Gitaly ref caching for SearchController. !30105
+- Avoid loading pipeline status in search results. !30111
+- Improve performance of MergeRequestsController#ci_environment_status endpoint. !30224
+- Add a memory cache local to the thread to reduce Redis load. !30233
+- Cache Flipper persisted names directly to local memory storage. !30265
+- Limit amount of JUnit tests returned. !30274
+- Cache Flipper feature flags in L1 and L2 caches. !30276
+- Prevent amplification of ReactiveCachingWorker jobs upon failures. !30432
+- Allow ReactiveCaching to support nil value. !30456
+- Improve performance of fetching environments statuses. !30560
+- Do Redis lookup in batches in ActiveSession.sessions_from_ids. !30561
+- Remove catfile cache feature flag. !30750
+- Fix Gitaly auto-detection caching. !30954
+
+### Added (46 changes, 12 of them are from the community)
+
+- Document the negative commit message push rule for the API. !14004 (Maikel Vlasman)
+- Expose saml_provider_id in the users API. !14045
+- Improve Project API. !28327 (Mathieu Parent)
+- Remove Sentry from application settings. !28447 (Roger Meier)
+- Implement borderless discussion design with new reply field. !28580
+- Enable terminals for instance and group clusters. !28613
+- Resolve Multiple discussions per line in merge request diffs. !28748
+- Adds link to Grafana in Admin > Monitoring settings when grafana is enabled in config. !28937 (Romain Maneschi)
+- Bring Manual Ordering on Issue List. !29410
+- Added commit type to tree GraphQL response. !29412
+- New API for User Counts, updates on success of an MR the count on top and in other tabs. !29441
+- Add option to limit time tracking units to hours. !29469 (Jon Kolb)
+- Add confirmation for registry image deletion. !29505
+- Sync merge ref upon mergeability check. !29569
+- Show an Upcoming Status for Releases. !29577
+- Add order_by and sort params to list runner jobs api. !29629 (Sujay Patel)
+- Allow custom username for deploy tokens. !29639
+- Add a verified pill next to email addresses under the admin users section. !29669
+- Add rake task to clean orphan artifact files. !29681
+- Render GFM in GraphQL. !29700
+- Upgrade asciidoctor version to 2.0.10. !29741 (Rajendra Kadam)
+- Allow auto-completing scoped labels. !29749
+- Enable syntax highlighting for AsciiDoc. !29835 (Guillaume Grossetie)
+- Expose placeholder element for metrics charts in GFM. !29861
+- Added a min schema version check to db:migrate. !29882
+- Extract zoom link from issue and pass to frontend. !29910 (raju249)
+- GraphQL mutations for add, remove and toggle emoji. !29919
+- Labeled issue boards can now collapse. !29955
+- Allow Ingress to be uninstalled from the UI. !29977
+- Add permission check to metrics dashboards endpoint. !30017
+- Allow JupyterHub to be uninstalled from the UI. !30097
+- Allow GitLab Runner to be uninstalled from the UI. !30176
+- GraphQL mutations for managing Notes. !30210
+- Add API for CRUD group clusters. !30213
+- Add endpoint to move multiple issues in boards. !30216
+- Enable terminals button for group clusters. !30255
+- Prevent excessive sanitization of AsciiDoc ouptut. !30290 (Guillaume Grossetie)
+- Extend `MergeToRefService` to create merge ref from an arbitrary ref. !30361
+- Add CI variable to provide GitLab HOST. !30417
+- Add migration for adding rule_type to approval_project_rules. !30575
+- Enable section anchors in Asciidoctor. !30666 (Guillaume Grossetie)
+- Preserve footnote link ids in Asciidoctor. !30790 (Guillaume Grossetie)
+- Add support for generating SSL certificates for custon pages domains through Let's Encrypt.
+- Introduce default: for gitlab-ci.yml.
+- Move Multiple Issue Boards for Projects to Core.
+- Add Gitaly data to the usage ping.
+
+### Other (35 changes, 15 of them are from the community)
+
+- Remove unresolved class and fixed height in discussion header. !28440 (David Palubin)
+- Moved EE/CE code differences for file `app/views/search/_category.html.haml` into CE. !28755 (Michel Engelen)
+- Changes "Todo" to "To Do" in the UI for clarity. !28844
+- Migrate GitLab managed project-level clusters to unmanaged if a Kubernetes namespace was unable to be created. !29251
+- Migrate GitLab managed project-level clusters to unmanaged if they are missing a Kubernetes service account token. !29648
+- Add strategies column to operations_feature_flag_scopes table. !29808
+- Disallow `NULL` values for `geo_nodes.primary` column. !29818 (Arun Kumar Mohan)
+- Replace 'JIRA' with 'Jira'. !29849 (Takuya Noguchi)
+- Support jsonb default in add_column_with_default migration helper. !29871
+- Update pagination prev and next texts. !29911
+- Adds metrics to measure cost of expensive operations. !29928
+- Always allow access to health endpoints from localhost in dev. !29930
+- Update GitLab Runner Helm Chart to 0.6.0. !29982
+- Use darker gray color for system note metadata and edited text. !30054
+- Fix typo in docs about Elasticsearch. !30162 (Takuya Noguchi)
+- Fix typo in code comments about Elasticsearch. !30163 (Takuya Noguchi)
+- Update mixin-deep to 1.3.2. !30223 (Takuya Noguchi)
+- Migrate markdown header_spec.js to Jest. !30228 (Martin Hobert)
+- Remove istanbul JavaScript package. !30232 (Takuya Noguchi)
+- Centralize markdownlint configuration. !30263
+- Use PostgreSQL 9.6.11 in CI tests. !30270 (Takuya Noguchi)
+- Fix typo in updateResolvableDiscussionsCounts action. !30278 (Frank van Rest)
+- Change color for namespace in commit search. !30312
+- Remove applySuggestion from notes service. !30399 (Frank van Rest)
+- Improved readability of storage statistics in group / project admin area. !30406
+- Alignign empty container registry message with design guidelines. !30502
+- Remove toggleAward from notes service. !30536 (Frank van Rest)
+- Remove deleteNote from notes service. !30537 (Frank van Rest)
+- change the use of boardService in favor of boardsStore on footer for the board component. !30616 (eduarmreyes)
+- Update example Prometheus scrape config. !30739
+- Update GitLab Pages to v1.7.0.
+- Add token_encrypted column to operations_feature_flags_clients table.
+- Removes EE diff for app/views/profiles/preferences/show.html.haml.
+- Removes EE differences for app/views/layouts/fullscreen.html.haml.
+- Removes EE differences for app/views/admin/users/show.html.haml.
+
+
 ## 12.0.3 (2019-06-27)
 
 - No changes.

VERSION

-12.1.0-pre
+12.2.0-pre

app/models/concerns/taskable.rb

@@ -15,6 +15,7 @@ module Taskable
   INCOMPLETE_PATTERN = /(\[[\s]\])/.freeze
   ITEM_PATTERN       = %r{
     ^
+    (?:(?:>\s{0,4})*)         # optional blockquote characters
     \s*(?:[-+*]|(?:\d+\.))    # list prefix required - task item has to be always in a list
     \s+                       # whitespace prefix has to be always presented for a list item
     (\[\s\]|\[[xX]\])         # checkbox

app/models/personal_access_token.rb

@@ -7,6 +7,7 @@ class PersonalAccessToken < ApplicationRecord
   add_authentication_token_field :token, digest: true
 
   REDIS_EXPIRY_TIME = 3.minutes
+  TOKEN_LENGTH = 20
 
   serialize :scopes, Array # rubocop:disable Cop/ActiveRecordSerialize
 

changelogs/unreleased/11039-moved-code-difference-from-EE-to-CE.yml

----
-title: "Moved EE/CE code differences for file `app/views/search/_category.html.haml` into CE"
-merge_request: 28755
-author: Michel Engelen
-type: other

changelogs/unreleased/11448-fix-cs-with-k8s-runners.yml

----
-title: Fix Container Scanning job timeout when using the kubernetes executor
-merge_request: 29706
-author: 
-type: fixed

changelogs/unreleased/11888-regression-deploy-correlation-markers-on-monitoring-graphs-not-clickable.yml

----
-title: Turn commit sha in monitor charts popover to link
-merge_request: 29914
-author:
-type: fixed

changelogs/unreleased/12533-shared-runners-warning.yml

----
-title: Removes EE differences for app/views/admin/users/show.html.haml
-merge_request:
-author:
-type: other

changelogs/unreleased/12550-fullscrean.yml

----
-title: Removes EE differences for app/views/layouts/fullscreen.html.haml
-merge_request:
-author:
-type: other

changelogs/unreleased/12553-preferences.yml

----
-title: Removes EE diff for app/views/profiles/preferences/show.html.haml
-merge_request:
-author:
-type: other

changelogs/unreleased/17690-Protect-TeamCity-builds-for-triggering-when-a-branch-is-deleted-And-add-MR-option.yml

----
-title: Protect TeamCity builds from triggering when a branch has been deleted. And a MR-option
-merge_request: 29836
-author: Nikolay Novikov, Raphael Tweitmann
-type: fixed

changelogs/unreleased/29775-fix-nested-lists-unnecessary-margin.yml

----
-title: Fix nested lists unnecessary margin
-merge_request: 29775
-author: Kuba Kopeć
-type: fixed

changelogs/unreleased/30355-use-hours-only-for-time-tracking.yml

----
-title: Add option to limit time tracking units to hours
-merge_request: 29469
-author: Jon Kolb
-type: added

changelogs/unreleased/32452-multiple-discussions.yml

----
-title: Resolve Multiple discussions per line in merge request diffs
-merge_request: 28748
-author:
-type: added

changelogs/unreleased/35757-move-issues-in-boards-pderichs.yml

----
-title: Add endpoint to move multiple issues in boards
-merge_request: 30216
-author:
-type: added

changelogs/unreleased/38105-pre-release-tag.yml

----
-title: Renders a pre-release tag for releases
-merge_request: 29797
-author:
-type: changed

changelogs/unreleased/40379-CJK-search-min-chars.yml

----
-title: Remove minimum character limits for fuzzy searches when using a CTE
-merge_request: 29810
-author:
-type: fixed

changelogs/unreleased/42399-registry-confirm-deletion.yml

----
-title: Add confirmation for registry image deletion
-merge_request: 29505
-author:
-type: added

changelogs/unreleased/44106-include-subgroups-in-group-activity.yml

----
-title: Include events from subgroups in group's activity
-merge_request: 29953
-author: Fabian Schneider @fabsrc
-type: changed

changelogs/unreleased/44949-do-not-update-updated_at-on-an-issue-when-reordering-it.yml

----
-title: Will not update issue timestamps when changing positions in a list
-merge_request: 29677
-author:
-type: changed

changelogs/unreleased/45104-special-characters-in-project-name-path-prevent-users-from-using-the-container-registry.yml

----
-title: Updated container registry to display error message when special characters in path. Documentation has also been updated.
-merge_request: 29616
-author:
-type: changed

changelogs/unreleased/45120-fix-ide-editor-to-update-size-on-show-change.yml

----
-title: Fix IDE editor not showing when switching back from preview
-merge_request: 30135
-author:
-type: fixed

changelogs/unreleased/48771-label-picker-line-break-on-long-label-titles.yml

----
-title: 'Resolve Label picker: Line break on long label titles'
-merge_request: 30610
-author: 
-type: fixed

changelogs/unreleased/49814-display-in-admin-area-if-emails-are-verified-or-not.yml

----
-title: Add a verified pill next to email addresses under the admin users section.
-merge_request: 29669
-author:
-type: added

changelogs/unreleased/50228-deploy-tokens-custom-username.yml

----
-title: Allow custom username for deploy tokens
-merge_request: 29639
-author:
-type: added

changelogs/unreleased/50834-change-http-status-code-when-repository-disabled.yml

----
-title: "Changed HTTP Status Code for disabled repository on /branches and /commits to 404"
-merge_request: 29585
-author: Sam Battalio
-type: changed

changelogs/unreleased/51794-add-ordering-to-runner-jobs-api.yml

----
-title: Add order_by and sort params to list runner jobs api
-merge_request: 29629
-author: Sujay Patel
-type: added

changelogs/unreleased/51952-forking-via-webide.yml

----
-title: Resolve "500 error when forking via the web IDE button"
-merge_request: 29909
-author:
-type: fixed

changelogs/unreleased/51952-redirect-to-webide-in-fork.yml

----
-title: Open WebIDE in fork when user doesn't have access
-merge_request: 30642
-author:
-type: changed

changelogs/unreleased/52366-improved-group-lists-ui.yml

----
-title: Improve group list UI
-merge_request: 26542
-author:
-type: changed

changelogs/unreleased/52442-minimal-remove-mysql-support.yml

----
-title: Remove MySQL support
-merge_request: 29790
-author:
-type: removed

changelogs/unreleased/52954-allow-developers-to-delete-tags.yml

----
-title: Allow developers to delete tags
-merge_request: 29668
-author:
-type: changed

changelogs/unreleased/53357-fix-plus-in-upload-file-names.yml

----
-title: Fix broken URLs for uploads with a plus in the filename
-merge_request: 29915
-author:
-type: fixed

changelogs/unreleased/53811-issue-boards-to-core-projects-backend-ce.yml

----
-title: Move Multiple Issue Boards for Projects to Core
-merge_request:
-author:
-type: added

changelogs/unreleased/54117-transactional-rebase.yml

----
-title: Allow asynchronous rebase operations to be monitored
-merge_request: 29940
-author:
-type: fixed

changelogs/unreleased/54595-incorrect-reaction-emoji-placement-in-discussion.yml

----
-title: Fix incorrect emoji placement in commit diff discussion
-merge_request: 29445
-author:
-type: fixed

changelogs/unreleased/55487-enable-group-terminals-button.yml

----
-title: Enable terminals button for group clusters
-merge_request: 30255
-author:
-type: added

changelogs/unreleased/55623-group-cluster-apis.yml

----
-title: Add API for CRUD group clusters
-merge_request: 30213
-author:
-type: added

changelogs/unreleased/55902-disable-creation-of-non-rbac-kubernetes-clusters.yml

----
-title: Remove support for creating non-RBAC kubernetes clusters
-merge_request: 29614
-author:
-type: removed

changelogs/unreleased/55953-renamed-discussion-to-thread.yml

----
-title: "renamed discussion to thread in merge-request and issue timeline"
-merge_request: 29553
-author: Michel Engelen
-type: changed

changelogs/unreleased/57538-normalize-users-private-profile-field.yml

----
-title: Migrate NULL values for users.private_profile column and update users API to reject null value for private_profile.
-merge_request: 29888
-author:
-type: changed

changelogs/unreleased/57793-fix-line-age.yml

----
-title: Support note position tracing on an image
-merge_request: 30158
-author:
-type: fixed

changelogs/unreleased/57815.yml

----
-title: Enforced requirements for UltraAuth users
-merge_request: 28941
-author: Kartikey Tanna
-type: changed

changelogs/unreleased/57918-encrypt-feature-flags-tokens-changelog.yml

----
-title: Add token_encrypted column to operations_feature_flags_clients table
-merge_request:
-author:
-type: other

changelogs/unreleased/57973-errors-in-application-settings-panel-shows-wrong-panel.yml

----
-title: Show poper panel when validation error occurs in admin settings panels
-merge_request: 25434
-author:
-type: fixed

changelogs/unreleased/58065-uniform-html-txt-email.yml

----
-title: Always shows author of created issue/started discussion/comment in HTML body and text of email
-merge_request: 29886
-author: Frank van Rest
-type: fixed

changelogs/unreleased/58689-regroup-jump-button-in-discussion.yml

----
-title: Improve discussion reply buttons layout and how jump to next discussion button
-  appears
-merge_request: 29779
-author:
-type: changed

changelogs/unreleased/58802-rename-webide.yml

----
-title: Re-name files in Web IDE in a more natural way
-merge_request: 29948
-author:
-type: changed

changelogs/unreleased/58808-fix-image-diff-on-text.yml

----
-title: Don't show image diff note on text file
-merge_request: 30221
-author:
-type: fixed

changelogs/unreleased/59028-fix-extra-plus-in-diffs.yml

----
-title: Remove duplicate trailing +/- char in merge request discussions
-merge_request: 29518
-author:
-type: fixed

changelogs/unreleased/59257-find-new-branches-harder.yml

----
-title: Look for new branches more carefully
-merge_request: 29761
-author:
-type: fixed

changelogs/unreleased/60617-enable-project-cluster-jit.yml

----
-title: Enable just-in-time Kubernetes resource creation for project-level clusters
-merge_request: 29515
-author:
-type: changed

changelogs/unreleased/60666-kubernetes-applications-uninstall-runner.yml

----
-title: Allow GitLab Runner to be uninstalled from the UI
-merge_request: 30176
-author:
-type: added

changelogs/unreleased/60856-deleting-binary-file.yml

----
-title: Removing an image should not output binary data
-merge_request: 30314
-author:
-type: fixed

changelogs/unreleased/60859-upload-after-delete.yml

----
-title: In WebIDE allow adding new entries of the same name as deleted entry
-merge_request: 30239
-author:
-type: fixed

changelogs/unreleased/60860-keep-empty-folders-in-tree.yml

----
-title: Keep the empty folders in the tree
-merge_request: 29196
-author:
-type: fixed

changelogs/unreleased/60879-fix-reports-timing-out.yml

----
-title: Fix reports jobs timing out because of cache
-merge_request: 29780
-author:
-type: fixed

changelogs/unreleased/61005-grafanaInAdminSettingsMonitoringMenu.yml

----
-title: Adds link to Grafana in Admin > Monitoring settings when grafana is enabled in config
-merge_request: 28937
-author: Romain Maneschi
-type: added

changelogs/unreleased/61156-instance-level-cluster-pod-terminal-access.yml

----
-title: Enable terminals for instance and group clusters
-merge_request: 28613
-author:
-type: added

changelogs/unreleased/61201-pass-identities-to-external-authorization.yml

----
-title: Add identity information to external authorization requests
-merge_request: 29461
-author:
-type: changed

changelogs/unreleased/61284-frontend-follow-up-from-add-packages_size-to-projectstatistics.yml

----
-title: Improved readability of storage statistics in group / project admin area
-merge_request: 30406
-author:
-type: other

changelogs/unreleased/61342-commit-search-result-doesn-t-pass-wcag-color-audit.yml

----
-title: Change color for namespace in commit search
-merge_request: 30312
-author:
-type: other

changelogs/unreleased/61613-spacing-mr-widgets.yml

----
-title: Left align mr widget icons and text
-merge_request: 28561
-author: 
-type: fixed

changelogs/unreleased/62088-search-back.yml

----
-title: Fixed back navigation for projects filter
-merge_request: 30373
-author:
-type: fixed

changelogs/unreleased/62124-new-threaded-discussion-design.yml

----
-title: Implement borderless discussion design with new reply field
-merge_request: 28580
-author:
-type: added

changelogs/unreleased/62183-update-response-code-for-bulk-delete-api-for-container-registry.yml

----
-title: Return 400 when deleting tags more often than once per hour.
-merge_request: 29448
-author:
-type: changed

changelogs/unreleased/62772-disable-kubernetes-credential-passthrough.yml

----
-title: Disable Kubernetes credential passthrough for managed project-level clusters
-merge_request: 29262
-author:
-type: removed

changelogs/unreleased/62772-migrate-managed-clusters-to-unmanaged.yml

----
-title: Migrate GitLab managed project-level clusters to unmanaged if a Kubernetes
-  namespace was unable to be created
-merge_request: 29251
-author:
-type: other

changelogs/unreleased/62826-graphql-emoji-mutations.yml

----
-title: GraphQL mutations for add, remove and toggle emoji
-merge_request: 29919
-author:
-type: added

changelogs/unreleased/62826-graphql-note-mutations.yml

----
-title: GraphQL mutations for managing Notes
-merge_request: 30210
-author:
-type: added

changelogs/unreleased/62938-wcag-aa-edited-text-color.yml

----
-title: Use darker gray color for system note metadata and edited text
-merge_request: 30054
-author:
-type: other

changelogs/unreleased/62968-environment-details-header-border-misaligned.yml

----
-title: Resolve Environment details header border misaligned
-merge_request: 30011
-author:
-type: fixed

changelogs/unreleased/62980-username-availability-checker-breaks-inline-validation.yml

----
-title: Fix the signup form's username validation messages not displaying
-merge_request: 29678
-author: Jiaan Louw
-type: fixed

changelogs/unreleased/63079-migrate-clusters-with-no-token-to-unmanaged.yml

----
-title: Migrate GitLab managed project-level clusters to unmanaged if they are missing
-  a Kubernetes service account token
-merge_request: 29648
-author:
-type: other

changelogs/unreleased/63200-reply-button-broken.yml

----
-title: Fix unresponsive reply button in discussions
-merge_request: 29936
-author:
-type: fixed

changelogs/unreleased/63227-fix-double-border.yml

----
-title: Fix Double Border in Profile Page
-merge_request: 29784
-author: Yoginth <@yo>
-type: fixed

changelogs/unreleased/63247-add-conf-toast-and-link.yml

----
-title: Include a link back to the MR for Visual Review feedback form
-merge_request: 29719
-author:
-type: changed

changelogs/unreleased/63261-the-graphql-query-for-the-mr-popover-failes-on-the-frontend.yml

----
-title: Make sure we are receiving the proper information on the MR Popover by updating
-  the IID in the graphql query
-merge_request:
-author:
-type: fixed

changelogs/unreleased/63298-prevent-excessive-sanitization-asciidoc.yml

----
-title: "Prevent excessive sanitization of AsciiDoc ouptut"
-merge_request: 30290
-author: Guillaume Grossetie
-type: added
\ No newline at end of file

changelogs/unreleased/63438-oauth2-support-with-gitlab-personal-access-token.yml

+---
+title: Personal access tokens are accepted using OAuth2 header format
+merge_request: 30277
+author:
+type: added

changelogs/unreleased/63475-fix-n-1.yml

----
-title: Improve performance of MergeRequestsController#ci_environment_status endpoint
-merge_request: 30224
-author:
-type: performance

changelogs/unreleased/63479-jira-capitalization.yml

----
-title: Replace 'JIRA' with 'Jira'
-merge_request: 29849
-author: Takuya Noguchi
-type: other

changelogs/unreleased/63507-fix-race-condition-fetching-token.yml

----
-title: Retry fetching Kubernetes Secret#token (#63507)
-merge_request: 29922
-author:
-type: fixed

changelogs/unreleased/63559-remove-avatar-from-sign-in.yml

----
-title: Resolve Avatar in Please sign in pattern too large
-merge_request: 29944
-author:
-type: fixed

changelogs/unreleased/63590-pipeline-actions-cause-full-refresh.yml

----
-title: Fix pipelines table to update without refreshing after action
-merge_request: 30190
-author:
-type: fixed

changelogs/unreleased/63656-runner-tags-search-dropdown-is-empty.yml

----
-title: Fix runner tags search dropdown being empty when there are tags
-merge_request: 29985
-author:
-type: fixed

changelogs/unreleased/63667-hashed-storage-migration-count-correctly.yml

----
-title: Display the correct amount of projects being migrated/rolled-back to Hashed Storage when specifying ranges
-merge_request: 29996
-author:
-type: fixed

changelogs/unreleased/63691-fix-doc-link.yml

----
-title: Correct link to docs for External Dashboard
-merge_request: 30019
-author:
-type: fixed

changelogs/unreleased/63873-process-start-time.yml

----
-title: Change ruby_process_start_time_seconds metric to unix timestamp instead of
-  seconds from boot.
-merge_request: 30195
-author: 
-type: fixed

changelogs/unreleased/63945-update-mixin-deep-to-1-3-2.yml

----
-title: Update mixin-deep to 1.3.2
-merge_request: 30223
-author: Takuya Noguchi
-type: other

changelogs/unreleased/63971-remove-istanbul.yml

----
-title: Remove istanbul JavaScript package
-merge_request: 30232
-author: Takuya Noguchi
-type: other

changelogs/unreleased/64066-fix-uneven-click-areas.yml

----
-title: Fix spacing issues for toasts
-merge_request: 30345
-author:
-type: fixed

changelogs/unreleased/64070-asciidoctor-enable-section-anchors.yml

----
-title: "Enable section anchors in Asciidoctor"
-merge_request: 30666
-author: Guillaume Grossetie
-type: added
\ No newline at end of file

changelogs/unreleased/64091-fix-broken-terminal.yml

----
-title: Fix environments broken terminal
-merge_request: 30401
-author:
-type: fixed

changelogs/unreleased/64161-gitlab-fqdn.yml

----
-title: Add CI variable to provide GitLab HOST
-merge_request: 30417
-author:
-type: added

changelogs/unreleased/64176-fix-error-handling.yml

----
-title: Fix invalid SSL certificate errors on Drone CI service
-merge_request: 30422
-author:
-type: fixed

changelogs/unreleased/64249-align-container-registry-empty-state-with-design-guidelines.yml

----
-title: Alignign empty container registry message with design guidelines
-merge_request: 30502
-author:
-type: other

changelogs/unreleased/64314-ci-icon.yml

----
-title: Aligns CI icon in Merge Request dashboard
-merge_request: 30558
-author:
-type: fixed

changelogs/unreleased/64315-mget_sessions_in_chunks.yml

----
-title: Do Redis lookup in batches in ActiveSession.sessions_from_ids
-merge_request: 30561
-author:
-type: performance

changelogs/unreleased/64321-wrong-url-when-creating-milestones-from-instance-milestones-dashboard.yml

----
-title: Fix wrong URL when creating milestones from instance milestones dashboard
-merge_request: 30512
-author:
-type: fixed

changelogs/unreleased/64331-Assignee-field-in-a-new-issue-has-an-incorrect-line-wrap.yml

----
-title: Fixed incorrect line wrap for assignee label in issues
-merge_request: 30523
-author: Marc Schwede
-type: fixed

changelogs/unreleased/64407-vfazio-quirk-omniauth-strategies-openidconnect.yml

----
-title: Allow client authentication method to be configured for OpenID Connect
-merge_request: 30683
-author: Vincent Fazio
-type: fixed

changelogs/unreleased/64416-lodash-4-6-2-for-prototype-pollution.yml

----
-title: Update lodash to 4.7.14 and lodash.mergewith to 4.6.2
-merge_request: 30602
-author: Takuya Noguchi
-type: security

changelogs/unreleased/64645-asciidoctor-preserve-footnote-link-ids.yml

----
-title: "Preserve footnote link ids in Asciidoctor"
-merge_request: 30790
-author: Guillaume Grossetie
-type: added
\ No newline at end of file

changelogs/unreleased/64697-markdown-issues-checkbox-inside-blockquote-status-won-t-be-saved.yml

+---
+title: Better support clickable tasklists inside blockquotes
+merge_request: 30952
+author:
+type: fixed

changelogs/unreleased/9928ee-add-rule_type-to-approval-project-rules.yml

----
-title: Add migration for adding rule_type to approval_project_rules
-merge_request: 30575
-author:
-type: added

changelogs/unreleased/Remove-unresolved-class-in-discussion-header.yml

----
-title: Remove unresolved class and fixed height in discussion header
-merge_request: 28440
-author: David Palubin
-type: other

changelogs/unreleased/add-clusters-to-deployment.yml

----
-title: Persist the cluster a deployment was deployed to
-merge_request: 29960
-author:
-type: fixed

changelogs/unreleased/add-metrics-dashboard-permission-check.yml

----
-title: Add permission check to metrics dashboards endpoint
-merge_request: 30017
-author:
-type: added

changelogs/unreleased/add-salesforce-logo.yml

----
-title: Add salesforce logo for salesforce SSO
-merge_request: 28857
-author:
-type: changed

changelogs/unreleased/add-strategies-column-to-scopes-table.yml

----
-title: Add strategies column to operations_feature_flag_scopes table
-merge_request: 29808
-author:
-type: other

changelogs/unreleased/allow-reactive-caching-of-nil.yml

----
-title: Allow ReactiveCaching to support nil value
-merge_request: 30456
-author:
-type: performance

changelogs/unreleased/always-allow-prometheus-access-in-dev.yml

----
-title: Always allow access to health endpoints from localhost in dev
-merge_request: 29930
-author:
-type: other

changelogs/unreleased/always-display-environment-selector.yml

----
-title: Fix broken environment selector and always display it on monitoring dashboard
-merge_request: 29705
-author:
-type: fixed

changelogs/unreleased/api-doc-negative-commit-message-push-rule.yml

----
-title: "Document the negative commit message push rule for the API."
-merge_request: 14004
-author: Maikel Vlasman
-type: added

changelogs/unreleased/asciidoc-enable-syntax-highlighting.yml

----
-title: "Enable syntax highlighting for AsciiDoc"
-merge_request: 29835
-author: Guillaume Grossetie
-type: added
\ No newline at end of file

changelogs/unreleased/asciidoctor-upgrade.yml

----
-title: Upgrade asciidoctor version to 2.0.10
-merge_request: 29741
-author: Rajendra Kadam
-type: added

changelogs/unreleased/backstage-gb-improve-performance-environment-statuses-endpoint.yml

----
-title: Improve performance of fetching environments statuses
-merge_request: 30560
-author:
-type: performance

changelogs/unreleased/bjk-fix_prom_example.yml

----
-title: Update example Prometheus scrape config
-merge_request: 30739
-author:
-type: other

changelogs/unreleased/bvl-markdown-graphql.yml

----
-title: Render GFM in GraphQL
-merge_request: 29700
-author:
-type: added

changelogs/unreleased/bvl-rename-routes-after-user-rename.yml

----
-title: Update a user's routes after updating their name
-merge_request: 23272
-author:
-type: fixed

changelogs/unreleased/caneldem-master-patch-77839.yml

----
-title: Propagate python version variable
-merge_request:
-author: Can Eldem
-type: changed

changelogs/unreleased/ce-11098-update-merge-request-settings-description-text.yml

----
-title: Update merge requests section description text on project settings page
-merge_request: 27838
-author:
-type: changed
\ No newline at end of file

changelogs/unreleased/centralize-markdownlint-config.yml

----
-title: Centralize markdownlint configuration
-merge_request: 30263
-author:
-type: other

changelogs/unreleased/check-min-schema-migrate.yml

----
-title: Added a min schema version check to db:migrate
-merge_request: 29882
-author:
-type: added

changelogs/unreleased/ci_default_git_depth_only.yml

----
-title: 'API: Allow changing only ci_default_git_depth'
-merge_request: 30888
-author: Mathieu Parent
-type: fixed

changelogs/unreleased/clusters-group-cte.yml

----
-title: Use CTE to fetch clusters hierarchy in single query
-merge_request: 30063
-author:
-type: performance

changelogs/unreleased/create-merge-train-ref-ce.yml

----
-title: Extend `MergeToRefService` to create merge ref from an arbitrary ref
-merge_request: 30361
-author:
-type: added

changelogs/unreleased/db-update-geo-nodes-primary.yml

----
-title: Disallow `NULL` values for `geo_nodes.primary` column
-merge_request: 29818
-author: Arun Kumar Mohan
-type: other

changelogs/unreleased/dohtaset.yml

----
-title: Fix charts on Cluster health page
-merge_request: 30073
-author:
-type: fixed

changelogs/unreleased/ds-charts-whitespace.yml

----
-title: Improves section header whitespace on the CI/CD Charts page
-merge_request: 30531
-author:
-type: fixed

changelogs/unreleased/dz-remove-deprecated-group-routes.yml

----
-title: Remove deprecated group routes
-merge_request: 29351
-author:
-type: removed

changelogs/unreleased/dz-remove-deprecated-user-routes.yml

----
-title: Remove depreated /u/:username routing
-merge_request: 30044
-author:
-type: removed

changelogs/unreleased/embedded-metrics-be-2.yml

----
-title: Expose placeholder element for metrics charts in GFM
-merge_request: 29861
-author:
-type: added

changelogs/unreleased/expose-saml-provider-id-to-users-api.yml

----
-title: Expose saml_provider_id in the users API
-merge_request: 14045
-author:
-type: added

changelogs/unreleased/fe-delete-old-boardservice-on-component-modal-footer.yml

----
-title: change the use of boardService in favor of boardsStore on footer for the board
-  component
-merge_request: 30616
-author: eduarmreyes
-type: other

changelogs/unreleased/fe-issue-reorder.yml

----
-title: Bring Manual Ordering on Issue List
-merge_request: 29410
-author:
-type: added

changelogs/unreleased/feature-uninstall_cluster_ingress.yml

----
-title: Allow Ingress to be uninstalled from the UI
-merge_request: 29977
-author:
-type: added

changelogs/unreleased/feature-uninstall_jupyter_hub_app.yml

----
-title: Allow JupyterHub to be uninstalled from the UI
-merge_request: 30097
-author:
-type: added

changelogs/unreleased/fix-broken-vue-i18n-strings.yml

----
-title: Fix broken warnings while Editing Issues and Edit File on MR
-merge_request:
-author:
-type: fixed

changelogs/unreleased/fix-comment-race-condition.yml

----
-title: Fix commenting before discussions are loaded
-merge_request: 30724
-author:
-type: fixed

changelogs/unreleased/fix-facivon-url-if-uploads-object-store-enabled.yml

----
-title: 'Fix favicon path with uploads of object store'
-merge_request: 29482
-author: Roger Meier
-type: fixed

changelogs/unreleased/fix-jupyter-git-v3.yml

----
-title: Fix Jupyter-Git integration
-merge_request: 30020
-author: Amit Rathi
-type: fixed

changelogs/unreleased/fix-median-counting-for-cycle-analytics.yml

----
-title: Fix median counting for cycle analytics
-merge_request: 30229
-author:
-type: fixed

changelogs/unreleased/fix-pipeline-schedule-edge-case.yml

----
-title: Fix pipeline schedule does not run correctly when it's scheduled at the same
-  time with the cron worker
-merge_request: 29848
-author:
-type: fixed

changelogs/unreleased/fix-sidekiq-transaction-check-race.yml

----
-title: Fix race in forbid_sidekiq_in_transactions.rb
-merge_request: 30359
-author:
-type: fixed

changelogs/unreleased/fix-unicorn-sampler-workers-count.yml

----
-title: Make unicorn_workers to return meaningful results
-merge_request: 30506
-author:
-type: fixed

changelogs/unreleased/fj-fix-subgroup-search-url.yml

----
-title: Fix subgroup url in search drop down
-merge_request: 30457
-author:
-type: fixed

changelogs/unreleased/georgekoltsov-63955-fix-import-with-source-branch-deleted.yml

----
-title: Fix a bug that prevented projects containing merge request diff comments from being imported
-merge_request: 30630
-author:
-type: fixed

changelogs/unreleased/gitaly-version-v1-53-0.yml

----
-title: Upgrade to Gitaly v1.53.0
-merge_request: 30614
-author:
-type: changed

changelogs/unreleased/gitaly-version-v1.49.0.yml

----
-title: Upgrade to Gitaly v1.49.0
-merge_request: 29990
-author:
-type: changed

changelogs/unreleased/gitaly-version-v1.51.0.yml

----
-title: Upgrade to Gitaly v1.51.0
-merge_request: 30353
-author:
-type: changed

changelogs/unreleased/gitaly-version-v1.52.0.yml

----
-title: Upgrade to Gitaly v1.52.0
-merge_request: 30568
-author:
-type: changed

changelogs/unreleased/graphql-tree-last-commit.yml

----
-title: Added commit type to tree GraphQL response
-merge_request: 29412
-author:
-type: added

changelogs/unreleased/gt-remove-tooltip-directive-on-project-avatar-image-component.yml

----
-title: Remove tooltip directive on project avatar image component
-merge_request: 29631
-author: George Tsiolis
-type: performance

changelogs/unreleased/hfy-apply-knative-cluster-role-on-service-account-creation.yml

----
-title: Create Knative role and binding with service account
-merge_request: 30235
-author:
-type: changed

changelogs/unreleased/hide-restricted-visibility-radio.yml

----
-title: Hide restricted and disallowed visibility radios
-merge_request: 30590
-author:
-type: fixed

changelogs/unreleased/id-clean-up-mr-assignees.yml

----
-title: Add cleanup migration for MR's multiple assignees
-merge_request: 30261
-author:
-type: changed

changelogs/unreleased/id-extract-widget-into-different-request.yml

----
-title: Add a separate endpoint for fetching MRs serialized as widgets
-merge_request: 29979
-author:
-type: performance

changelogs/unreleased/id-stale-branches.yml

----
-title: Add endpoint for fetching diverging commit counts
-merge_request: 29802
-author:
-type: performance

changelogs/unreleased/issue-63222.yml

----
-title: Set default sort method for dashboard projects list
-merge_request: 29830
-author: David Palubin
-type: fixed

changelogs/unreleased/issue-zoom-url.yml

----
-title: Extract zoom link from issue and pass to frontend
-merge_request: 29910
-author: raju249
-type: added

changelogs/unreleased/issue_64021.yml

----
-title: Skip spam check for task list updates
-merge_request: 30279
-author:
-type: fixed

changelogs/unreleased/jc-detect-nfs-for-rugged.yml

----
-title: Use Rugged if we detect storage is NFS and we can access the disk
-merge_request: 29725
-author:
-type: performance

changelogs/unreleased/jc-remove-catfile-flag.yml

----
-title: Remove catfile cache feature flag
-merge_request: 30750
-author:
-type: performance

changelogs/unreleased/jramsay-enable-object-dedupe-by-default.yml

----
-title: Enable Git object pools
-merge_request: 29595
-author: jramsay
-type: changed

changelogs/unreleased/knative-0-6.yml

----
-title: Knative version bump 0.5 -> 0.6
-merge_request: 28798
-author: Chris Baumbauer
-type: changed

changelogs/unreleased/limit-amount-of-tests-returned.yml

----
-title: Limit amount of JUnit tests returned
-merge_request: 30274
-author:
-type: performance

changelogs/unreleased/mh-board-tooltips.yml

----
-title: "'Open' and 'Closed' issue board lists no longer display a redundant tooltip"
-merge_request: 30187
-author:
-type: fixed

changelogs/unreleased/mh-boards-filter-bar.yml

----
-title: Display boards filter bar on mobile
-merge_request: 30120
-author:
-type: fixed

changelogs/unreleased/mh-collapsible-boards.yml

----
-title: Labeled issue boards can now collapse
-merge_request: 29955
-author:
-type: added

changelogs/unreleased/mh-colon-autocomplete.yml

----
-title: Allow auto-completing scoped labels
-merge_request: 29749
-author:
-type: added

changelogs/unreleased/mh-mermaid-linebreaks.yml

----
-title: Fix linebreak rendering in Mermaid flowcharts
-merge_request: 30730
-author:
-type: fixed

changelogs/unreleased/move-all-configs-to-global.yml

----
-title: 'Introduce default: for gitlab-ci.yml'
-merge_request:
-author:
-type: added

changelogs/unreleased/mw-project-list-color-fix.yml

----
-title: Add text-secondary to controls in project list
-merge_request: 30567
-author:
-type: fixed

changelogs/unreleased/osw-persist-tmp-snippet-uploads.yml

----
-title: Persist tmp snippet uploads at users
-merge_request:
-author:
-type: security

changelogs/unreleased/osw-sync-merge-ref-upon-mergeability-check.yml

----
-title: Sync merge ref upon mergeability check
-merge_request: 29569
-author:
-type: added

changelogs/unreleased/paginate-license-management.yml

----
-title: Backport and Docs for Paginate license management and add license search
-merge_request: 27602
-author:
-type: changed

changelogs/unreleased/patch-29.yml

----
-title: Updates PHP template to php:latest to ensure always targeting latest stable
-merge_request: 30319
-author: Paul Giberson
-type: changed

changelogs/unreleased/po-raw-changes-encoding.yml

----
-title: Expect bytes from Gitaly RPC GetRawChanges
-merge_request: 28164
-author:
-type: fixed

changelogs/unreleased/pre-releases-38105a.yml

----
-title: Show an Upcoming Status for Releases
-merge_request: 29577
-author:
-type: added

changelogs/unreleased/prepare-cycle-analytics-for-group-level.yml

----
-title: Modify cycle analytics on project level
-merge_request: 30356
-author:
-type: changed

changelogs/unreleased/project_api.yml

----
-title: Improve Project API
-merge_request: 28327
-author: Mathieu Parent
-type: added

changelogs/unreleased/refactor-sentry.yml

----
-title: Remove Sentry from application settings
-merge_request: 28447
-author: Roger Meier
-type: added

changelogs/unreleased/registry-fix-multi-delete-modal.yml

----
-title: Prevent multiple confirmation modals from opening when deleting a repository
-merge_request: 30532
-author:
-type: fixed

changelogs/unreleased/remove-auto-ssl-ff.yml

----
-title: Add support for generating SSL certificates for custon pages domains through
-  Let's Encrypt
-merge_request:
-author:
-type: added

changelogs/unreleased/remove-kubernetes-service-deployment-platform.yml

----
-title: Remove Kubernetes service integration and Kubernetes service template from available deployment platforms
-merge_request: 29786
-author:
-type: removed

changelogs/unreleased/remove-support-for-legacy-pipeline-triggers.yml

----
-title: Remove support for legacy pipeline triggers
-merge_request: 30133
-author:
-type: removed

changelogs/unreleased/remove_group_and_instance_clusters_feature_flag.yml

----
-title: Remove group and instance clusters feature flag
-merge_request: 30124
-author:
-type: changed

changelogs/unreleased/require-pipeline-when-enabling-only-allow-merge-if-pipeline-succeeds.yml

----
-title: Enforce presence of pipeline when "Pipeline must succeed" project setting is enabled
-merge_request: 29926
-author:
-type: fixed

changelogs/unreleased/rj-fix-manual-order.yml

----
-title: Don't let logged out user do manual order
-merge_request: 30264
-author:
-type: fixed

changelogs/unreleased/sanitize_rake_ldap_check_output.yml

----
-title: Sanitize LDAP output in Rake tasks
-merge_request: 28427
-author:
-type: fixed

changelogs/unreleased/search-blob-basenames.yml

----
-title: Build correct basenames for title search results
-merge_request: 29898
-author:
-type: fixed

changelogs/unreleased/security-2858-fix-color-validation.yml

----
-title: Fix DoS vulnerability in color validation regex
-merge_request:
-author:
-type: security

changelogs/unreleased/security-59581-related-merge-requests-count.yml

----
-title: Expose merge requests count based on user access
-merge_request:
-author:
-type: security

changelogs/unreleased/security-DOS_issue_comments_banzai.yml

----
-title: Fix Denial of Service for comments when rendering issues/MR comments
-merge_request:
-author:
-type: security
\ No newline at end of file

changelogs/unreleased/security-bvl-enforce-graphql-type-authorization.yml

----
-title: Add missing authorizations in GraphQL
-merge_request:
-author:
-type: security

changelogs/unreleased/security-fp-prevent-billion-laughs-attack.yml

----
-title: Prevent Billion Laughs attack
-merge_request:
-author:
-type: security

changelogs/unreleased/security-mr-head-pipeline-leak.yml

----
-title: Gate MR head_pipeline behind read_pipeline ability.
-merge_request:
-author:
-type: security

changelogs/unreleased/security-notes-in-private-snippets.yml

----
-title: Correctly check permissions when creating snippet notes
-merge_request:
-author:
-type: security

changelogs/unreleased/security-prevent-detection-of-merge-request-template-name.yml

----
-title: Prevent the detection of merge request templates by unauthorized users
-merge_request:
-author:
-type: security

changelogs/unreleased/set-higher-ttl-for-trace-write.yml

----
-title: Set higher TTL for write lock of trace to prevent concurrent archiving
-merge_request: 30064
-author:
-type: fixed

changelogs/unreleased/sh-add-force-random-password-user-api.yml

----
-title: Add support for creating random passwords in user creation API
-merge_request: 30138
-author:
-type: changed

changelogs/unreleased/sh-add-gitaly-ref-caching-search-controller.yml

----
-title: Enable Gitaly ref caching for SearchController
-merge_request: 30105
-author:
-type: performance

changelogs/unreleased/sh-add-thread-memory-cache.yml

----
-title: Add a memory cache local to the thread to reduce Redis load
-merge_request: 30233
-author:
-type: performance

changelogs/unreleased/sh-audit-event-json-log-format-from-and-to.yml

----
-title: Format `from` and `to` fields in JSON audit log
-merge_request: 30333
-author:
-type: changed

changelogs/unreleased/sh-avoid-loading-pipeline-status.yml

----
-title: Avoid loading pipeline status in search results
-merge_request: 30111
-author:
-type: performance

changelogs/unreleased/sh-bump-fog-aws.yml

----
-title: Bump fog-aws to v3.5.2
-merge_request: 30803
-author:
-type: fixed

changelogs/unreleased/sh-cache-feature-flag-names.yml

----
-title: Cache feature flag names in Redis for a minute
-merge_request: 29816
-author:
-type: performance

changelogs/unreleased/sh-cache-flipper-checks-in-memory.yml

----
-title: Cache Flipper feature flags in L1 and L2 caches
-merge_request: 30276
-author:
-type: performance

changelogs/unreleased/sh-cache-flipper-names-memory-cache.yml

----
-title: Cache Flipper persisted names directly to local memory storage
-merge_request: 30265
-author:
-type: performance

changelogs/unreleased/sh-cache-negative-entries-find-commit.yml

----
-title: Allow caching of negative FindCommit matches
-merge_request: 29952
-author:
-type: performance

changelogs/unreleased/sh-clean-up-bitbucket-import-errors.yml

----
-title: Avoid storing backtraces from Bitbucket Cloud imports in the database
-merge_request: 29862
-author:
-type: performance

changelogs/unreleased/sh-disable-reactive-caching-automatic-retries.yml

----
-title: Prevent amplification of ReactiveCachingWorker jobs upon failures
-merge_request: 30432
-author:
-type: performance

changelogs/unreleased/sh-enable-ref-name-caching-discussions.yml

----
-title: Enable Gitaly ref name caching for discussions.json
-merge_request: 29951
-author:
-type: performance

changelogs/unreleased/sh-fix-gitaly-server-info-cache.yml

----
-title: Fix Gitaly auto-detection caching
-merge_request: 30954
-author:
-type: performance

changelogs/unreleased/sh-fix-httpclient-ssl.yml

----
-title: Make httpclient respect system SSL configuration
-merge_request: 30749
-author:
-type: fixed

changelogs/unreleased/sh-fix-issue-63349.yml

----
-title: Make Housekeeping button do a full garbage collection
-merge_request: 30289
-author:
-type: fixed

changelogs/unreleased/sh-fix-issue-63910.yml

----
-title: Fix attachments using the wrong URLs in e-mails
-merge_request: 30197
-author:
-type: fixed

changelogs/unreleased/sh-handle-nil-replication-lag.yml

----
-title: Fix background migrations failing with unused replication slot
-merge_request: 30042
-author:
-type: fixed

changelogs/unreleased/sh-improve-redis-peek.yml

----
-title: Add Redis call details in Peek performance bar
-merge_request: 30191
-author:
-type: changed

changelogs/unreleased/sh-optimize-todos-controller.yml

----
-title: Eliminate N+1 queries in Dashboard::TodosController
-merge_request: 29954
-author:
-type: performance

changelogs/unreleased/sh-remove-import-columns-from-projects.yml

----
-title: Remove import columns from projects table
-merge_request: 29863
-author:
-type: performance

changelogs/unreleased/sh-strong-memoize-appearances.yml

----
-title: Memoize non-existent custom appearances
-merge_request: 29957
-author:
-type: performance

changelogs/unreleased/sh-support-subnets-ip-rate-limiter.yml

----
-title: Support CIDR notation in IP rate limiter
-merge_request: 30146
-author:
-type: changed

changelogs/unreleased/sh-update-mermaid.yml

----
-title: Update Mermaid to 8.1.0
-merge_request: 30036
-author:
-type: fixed

changelogs/unreleased/sh-upgrade-rouge-3-5-1.yml

----
-title: Upgrade Rouge to 3.5.1
-merge_request: 30431
-author:
-type: changed

changelogs/unreleased/slugify.yml

----
-title: Replace slugifyWithHyphens with improved slugify function
-merge_request: 30172
-author: Luke Ward
-type: fixed

changelogs/unreleased/small-s-in-elasticsearch-in-code.yml

----
-title: Fix typo in code comments about Elasticsearch
-merge_request: 30163
-author: Takuya Noguchi
-type: other

changelogs/unreleased/small-s-in-elasticsearch.yml

----
-title: Fix typo in docs about Elasticsearch
-merge_request: 30162
-author: Takuya Noguchi
-type: other

changelogs/unreleased/support-jsonb-default-value.yml

----
-title: Support jsonb default in add_column_with_default migration helper
-merge_request: 29871
-author:
-type: other

changelogs/unreleased/tc-rake-orphan-artifacts.yml

----
-title: Add rake task to clean orphan artifact files
-merge_request: 29681
-author:
-type: added

changelogs/unreleased/transaction-metrics.yml

----
-title: Adds metrics to measure cost of expensive operations
-merge_request: 29928
-author:
-type: other

changelogs/unreleased/tz-update-mr-count-over-tabs.yml

----
-title: New API for User Counts, updates on success of an MR the count on top and in
-  other tabs
-merge_request: 29441
-author:
-type: added

changelogs/unreleased/unicorn-sampler-fix.yml

----
-title: Make sure UnicornSampler is started only in master process.
-merge_request: 30215
-author:
-type: fixed

changelogs/unreleased/update-clair-version.yml

----
-title: Extract clair version as CLAIR_EXECUTABLE_VERSION variable and update clair
-  executable from v8 to v11
-merge_request: 30396
-author:
-type: changed

changelogs/unreleased/update-gitlab-runner-helm-chart-to-0-6-0.yml

----
-title: Update GitLab Runner Helm Chart to 0.6.0
-merge_request: 29982
-author:
-type: other

changelogs/unreleased/update-pages-to-1-7-0.yml

----
-title: Update GitLab Pages to v1.7.0
-merge_request:
-author:
-type: other

changelogs/unreleased/update-pagination-texts.yml

----
-title: Update pagination prev and next texts
-merge_request: 29911
-author:
-type: other

changelogs/unreleased/update-tar-to-2-2-2.yml

----
-title: Update tar to 2.2.2
-merge_request: 29949
-author: Takuya Noguchi
-type: security

changelogs/unreleased/update-todo-in-ui.yml

----
-title: Changes "Todo" to "To Do" in the UI for clarity
-merge_request: 28844
-author:
-type: other

changelogs/unreleased/use-pg-9-6-11-on-ci.yml

----
-title: Use PostgreSQL 9.6.11 in CI tests
-merge_request: 30270
-author: Takuya Noguchi
-type: other

changelogs/unreleased/winh-jest-markdown-header.yml

----
-title: Migrate markdown header_spec.js to Jest
-merge_request: 30228
-author: Martin Hobert
-type: other

changelogs/unreleased/winh-multiple-issueboards-core.yml

----
-title: Move multiple issue boards to core
-merge_request: 30503
-author:
-type: changed

changelogs/unreleased/winh-notes-service-applySuggestion.yml

----
-title: Remove applySuggestion from notes service
-merge_request: 30399
-author: Frank van Rest
-type: other

changelogs/unreleased/winh-notes-service-deleteNote.yml

----
-title: Remove deleteNote from notes service
-merge_request: 30537
-author: Frank van Rest
-type: other

changelogs/unreleased/winh-notes-service-toggleAward.yml

----
-title: Remove toggleAward from notes service
-merge_request: 30536
-author: Frank van Rest
-type: other

changelogs/unreleased/winh-updateResolvableDiscussionsCounts-typo.yml

----
-title: Fix typo in updateResolvableDiscussionsCounts action
-merge_request: 30278
-author: Frank van Rest
-type: other

changelogs/unreleased/z-index-fix-for-diff-file-dropdown.yml

----
-title: I fixed z index bug in diff page
-merge_request: 30657
-author: Faruk Can
-type: fixed

changelogs/unreleased/z-index-tools.yml

----
-title: 'Review Tools: Add large z-index to toolbar'
-merge_request: 30583
-author:
-type: fixed

changelogs/unreleased/zj-gitaly-usage-data.yml

----
-title: Add Gitaly data to the usage ping
-merge_request:
-author:
-type: added

doc/api/README.md

@@ -272,6 +272,12 @@ Example of using the personal access token in a header:
 curl --header "Private-Token: <your_access_token>" https://gitlab.example.com/api/v4/projects
 ```
 
+You can also use personal access tokens with OAuth-compliant headers:
+
+```shell
+curl --header "Authorization: Bearer <your_access_token>" https://gitlab.example.com/api/v4/projects
+```
+
 Read more about [personal access tokens][pat].
 
 ### Session cookie

doc/user/project/packages/npm_registry.md

@@ -49,35 +49,32 @@ Registry.
 ## Authenticating to the GitLab NPM Registry
 
 If a project is private or you want to upload an NPM package to GitLab,
-credentials will need to be provided for authentication. Support is available
-only for [OAuth tokens](../../../api/oauth2.md#resource-owner-password-credentials-flow).
+credentials will need to be provided for authentication. Support is available for [OAuth tokens](../../../api/oauth2.md#resource-owner-password-credentials-flow) or [personal access tokens](../../profile/personal_access_tokens.md).
 
-CAUTION: **2FA not supported:**
-Authentication for personal access tokens is not yet supported
-([#9140](https://gitlab.com/gitlab-org/gitlab-ee/issues/9140)). If you have 2FA
-enabled, you won't be able to authenticate to the GitLab NPM Registry.
+CAUTION: **2FA is only supported with personal access tokens:**
+If you have 2FA enabled, you need to use a [personal access token](../../profile/personal_access_tokens.md) with OAuth headers. Standard OAuth tokens won't be able to authenticate to the GitLab NPM Registry.
 
 ### Authenticating with an OAuth token
 
-To authenticate with an [OAuth token](../../../api/oauth2.md#resource-owner-password-credentials-flow),
-add a corresponding section to your `.npmrc` file:
+To authenticate with an [OAuth token](../../../api/oauth2.md#resource-owner-password-credentials-flow)
+or [personal access token](../../profile/personal_access_tokens.md), add a corresponding section to your `.npmrc` file:
 
 ```ini
 ; Set URL for your scoped packages.
 ; For example package with name `@foo/bar` will use this URL for download
 @foo:registry=https://gitlab.com/api/v4/packages/npm/
 
-; Add the OAuth token for the scoped packages URL. This will allow you to download
+; Add the token for the scoped packages URL. This will allow you to download
 ; `@foo/` packages from private projects.
-//gitlab.com/api/v4/packages/npm/:_authToken=<your_oauth_token>
+//gitlab.com/api/v4/packages/npm/:_authToken=<your_token>
 
-; Add OAuth token for uploading to the registry. Replace <your_project_id>
+; Add token for uploading to the registry. Replace <your_project_id>
 ; with the project you want your package to be uploaded to.
-//gitlab.com/api/v4/projects/<your_project_id>/packages/npm/:_authToken=<your_oauth_token>
+//gitlab.com/api/v4/projects/<your_project_id>/packages/npm/:_authToken=<your_token>
 ```
 
 Replace `<your_project_id>` with your project ID which can be found on the home page
-of your project and `<your_oauth_token>` with your OAuth token.
+of your project and `<your_token>` with your OAuth or personal access token.
 
 If you have a self-hosted GitLab installation, replace `gitlab.com` with your
 domain name.

lib/gitlab/auth/user_auth_finders.rb

@@ -92,8 +92,8 @@ module Gitlab
       def find_personal_access_token
         token =
           current_request.params[PRIVATE_TOKEN_PARAM].presence ||
-          current_request.env[PRIVATE_TOKEN_HEADER].presence
-
+          current_request.env[PRIVATE_TOKEN_HEADER].presence ||
+          parsed_oauth_token
         return unless token
 
         # Expiration, revocation and scopes are verified in `validate_access_token!`
@@ -101,9 +101,12 @@ module Gitlab
       end
 
       def find_oauth_access_token
-        token = Doorkeeper::OAuth::Token.from_request(current_request, *Doorkeeper.configuration.access_token_methods)
+        token = parsed_oauth_token
         return unless token
 
+        # PATs with OAuth headers are not handled by OauthAccessToken
+        return if matches_personal_access_token_length?(token)
+
         # Expiration, revocation and scopes are verified in `validate_access_token!`
         oauth_token = OauthAccessToken.by_token(token)
         raise UnauthorizedError unless oauth_token
@@ -112,6 +115,14 @@ module Gitlab
         oauth_token
       end
 
+      def parsed_oauth_token
+        Doorkeeper::OAuth::Token.from_request(current_request, *Doorkeeper.configuration.access_token_methods)
+      end
+
+      def matches_personal_access_token_length?(token)
+        token.length == PersonalAccessToken::TOKEN_LENGTH
+      end
+
       # Check if the request is GET/HEAD, or if CSRF token is valid.
       def verified_request?
         Gitlab::RequestForgeryProtection.verified?(current_request.env)

spec/lib/gitlab/auth/user_auth_finders_spec.rb

@@ -138,6 +138,20 @@ describe Gitlab::Auth::UserAuthFinders do
         expect { find_user_from_access_token }.to raise_error(Gitlab::Auth::UnauthorizedError)
       end
     end
+
+    context 'with OAuth headers' do
+      it 'returns user' do
+        env['HTTP_AUTHORIZATION'] = "Bearer #{personal_access_token.token}"
+
+        expect(find_user_from_access_token).to eq user
+      end
+
+      it 'returns exception if invalid personal_access_token' do
+        env['HTTP_AUTHORIZATION'] = 'Bearer invalid_20byte_token'
+
+        expect { find_personal_access_token }.to raise_error(Gitlab::Auth::UnauthorizedError)
+      end
+    end
   end
 
   describe '#find_user_from_web_access_token' do

spec/services/task_list_toggle_service_spec.rb

@@ -114,6 +114,23 @@ describe TaskListToggleService do
     expect(toggler.execute).to be_falsey
   end
 
+  it 'properly handles tasks in a blockquote' do
+    markdown =
+      <<-EOT.strip_heredoc
+      > > * [ ] Task 1
+      > * [x] Task 2
+    EOT
+
+    markdown_html = Banzai::Pipeline::FullPipeline.call(markdown, project: nil)[:output].to_html
+    toggler = described_class.new(markdown, markdown_html,
+                                  toggle_as_checked: true,
+                                  line_source: '> > * [ ] Task 1', line_number: 1)
+
+    expect(toggler.execute).to be_truthy
+    expect(toggler.updated_markdown.lines[0]).to eq "> > * [x] Task 1\n"
+    expect(toggler.updated_markdown_html).to include('disabled checked> Task 1')
+  end
+
   it 'properly handles a GitLab blockquote' do
     markdown =
       <<-EOT.strip_heredoc

spec/support/shared_examples/taskable_shared_examples.rb

@@ -105,4 +105,25 @@ shared_examples 'a Taskable' do
       expect(subject.task_status_short).to match('1 task')
     end
   end
+
+  describe 'with tasks in blockquotes' do
+    before do
+      subject.description = <<-EOT.strip_heredoc
+        > - [ ] Task a
+        > > - [x] Task a.1
+
+        >>>
+        1. [ ] Task 1
+        1. [x] Task 2
+        >>>
+      EOT
+    end
+
+    it 'returns the correct task status' do
+      expect(subject.task_status).to match('2 of')
+      expect(subject.task_status).to match('4 tasks completed')
+      expect(subject.task_status_short).to match('2/')
+      expect(subject.task_status_short).to match('4 tasks')
+    end
+  end
 end