Update CHANGELOG-EE.md for 11.6.0-ee

[ci skip]

CHANGELOG-EE.md

 Please view this file on the master branch, on stable branches it's out of date.
 
+## 11.6.0 (2018-12-22)
+
+### Security (7 changes)
+
+- Switch from CBC to GCM for Geo logout tokens. !8518
+- Prevent reporter roles from viewing the Jaeger tracing settings page.
+- Sanitize tracing external_urls before saving to DB and when displaying the URL to prevent XSS issues.
+- Fix IDOR at /drafts/publish.
+- Authorize users when listing board users and milestones.
+- Resolve: Guest can set weight of a new issue.
+- Fixes XSS with merge request approvers selection.
+
+### Fixed (27 changes, 2 of them are from the community)
+
+- Ensure that avatars in approvals have correct tooltip. !6269
+- Geo: Fix push to secondary over SSH for LFS. !8044
+- Don't show packages tab and settings for starter license. !8270
+- Makes the vulnerability name on the Group Security Dashboard a button for better A11y. !8341
+- Used the iid instead of the id for linked issues on the Group Security Dashboard. !8357
+- Show navigation line separator when instance etrics is disabled. !8379 (George Tsiolis)
+- Fix project deploy key creation and deletion as admin. !8432
+- Changes initial state for disabled prometheus integrations. !8434
+- Fix a typo in Admin: intergration -> integration. !8444 (Vincent AUBERT)
+- Geo: Moving registry deletion into the job that deletes the files and project record. !8480
+- Parameterize alerting rules with variables. !8481
+- Fix PostReceive failing for project mirrors missing local branch. !8495
+- Rails 5: Fix the check whether the database is in read-only mode. !8594
+- Raisl 5: Fix Gitlab::Database::LoadBalancing#caught_up? check. !8595
+- Renders upstream and downstream pipelines in the main pipeline graph. !8607
+- Fix issue board api with special milestones. !8653
+- fix pod dropdown not switching pod logs. !8660
+- Geo - Respect the next retry time when re-verifying failed repositories. !8661
+- Update elasticsearch system check to check for new supported versions. !8683
+- Handle null start or due dates for dates sourcing milestone in Epics. !8689
+- Fixed license managment path in MR widget for fork cases. !8700
+- Fix gitlab:geo:check rake task. !8714
+- Fix ability to choose shards for selective sync. !8717
+- Add Rails.version to the Geo cache keys. !8775
+- Support older NGINX version forwarding the client certificate for smartcard auth. !8784
+- Remove duplicated smartcard login button. !8793
+- Disable password autocomplete in mirror form fill.
+
+### Deprecated (1 change)
+
+- Deprecate non-hashed repository storage for Geo installations. !8739
+
+### Changed (17 changes, 1 of them is from the community)
+
+- Adds Group SAML metadata endpoint. !5782
+- Group SAML SSO page warns when linking account. !8295
+- Change the delete custom metric alert. !8430
+- Replace weight icon. !8448 (George Tsiolis)
+- Switch snowplows stateStorageStrategy to cookie. !8461
+- Move merge request approval settings. !8493
+- Geo: Constantly reverify repositories. !8550
+- Add file and line numbers to issues created from SAST vulnerabilities. !8578
+- Redesign MR header sections and approvals (EE). !8593
+- Add packages_enabled attribute to Projects API. !8604
+- Run geo check task from gitlab check. !8616
+- Change issue create weight dropdown to an input. !8648
+- Add epics state filtering in roadmap view. !8658
+- Users can unlink Group SAML from accounts page. !8682
+- Update casing in Built-in on project templates tab. !8688
+- Epic issue list and related issue list re-design.
+- Add sort direction button with sort dropdown for Epics and Roadmap.
+
+### Performance (5 changes, 3 of them are from the community)
+
+- Remove partial index for projects on mirror and mirror_last_update_at. !8585
+- Enable some frozen string in ee/app. !8667 (gfyoung)
+- Remove redundant indices for is_sample on push_rules and next_execution_timestamp on project_mirror_data. !8695
+- Enable some frozen string in ee/app. (gfyoung)
+- Enable some frozen string in ee/app. (gfyoung)
+
+### Added (10 changes)
+
+- Add support for Group-level project templates. !6878
+- Added web terminals to Web IDE. !7386
+- Promote an Issue to an Epic using quick action. !8051
+- Smartcard authentication. !8120
+- Adds Security dashboard empty state. !8443
+- Add vulnerability history at group level. !8603
+- Adds group security dashboard metrics chart. !8631
+- Add milestones autocomplete for epics. !8632
+- Parse and store dependency scanning reports in database. !8642
+- Adds EE store to handle upstream & downstream pipelines.
+
+### Other (13 changes, 4 of them are from the community)
+
+- Add subscription table to GitLab.com billing areas. !7885
+- UX improvements for the group security dashboard. !8217
+- Restyles the dismissed vulnerabilities. !8401
+- Adds PHILOSOPHY.md and references GitLab Product Handbook. !8515
+- Make sidekiq-cluster play well with Sidekiq 5.2.2+. !8522
+- Rails5: Passing a class as a value in an Active Record query is deprecated. !8540 (Jasper Maes)
+- render :nothing option is deprecated, Use head method to respond with empty response body. !8560 (Jasper Maes)
+- Add help page link for licence management in CI/CD settings. !8561 (George Tsiolis)
+- Re-orders the Group Security Dashboard. !8624
+- Move EE only differences for finders. !8629 (George Tsiolis)
+- Add count of projects with at least one package to a usage ping data. !8641
+- Added recommendations for handling deleted documents in Elasticsearch.
+- Use new information-o icon for Security Dashboard.
+
+
 ## 11.5.5 (2018-12-20)
 
 - No changes.

ee/changelogs/unreleased/1979-move-mr-approval-settings.yml

----
-title: Move merge request approval settings
-merge_request: 8493
-author:
-type: changed

ee/changelogs/unreleased/1979-redesign-mr-widget-approvals.yml

----
-title: Redesign MR header sections and approvals (EE)
-merge_request: 8593
-author:
-type: changed

ee/changelogs/unreleased/2122-transform-linked-into-button.yml

----
-title: Renders upstream and downstream pipelines in the main pipeline graph
-merge_request: 8607
-author:
-type: fixed

ee/changelogs/unreleased/2122-upstream-downstream-store.yml

----
-title: Adds EE store to handle upstream & downstream pipelines
-merge_request:
-author:
-type: added

ee/changelogs/unreleased/3777-promote-to-epic.yml

----
-title: Promote an Issue to an Epic using quick action
-merge_request: 8051
-author:
-type: added

ee/changelogs/unreleased/53989-remove-redundant-index.yml

----
-title: Remove redundant indices for is_sample on push_rules and next_execution_timestamp on project_mirror_data
-merge_request: 8695
-author:
-type: performance

ee/changelogs/unreleased/53991-remove-partial-index-for-projects.yml

----
-title: Remove partial index for projects on mirror and mirror_last_update_at
-merge_request: 8585
-author:
-type: performance

ee/changelogs/unreleased/5609-switch-from-cbc-to-gcm-for-geo-logout-tokens.yml

----
-title: Switch from CBC to GCM for Geo logout tokens
-merge_request: 8518
-author:
-type: security

ee/changelogs/unreleased/6309-faulty-username-tooltip.yml

----
-title: Ensure that avatars in approvals have correct tooltip
-merge_request: 6269
-author:
-type: fixed

ee/changelogs/unreleased/6718_store_dependency_scanning_results_in_db.yml

----
-title: Parse and store dependency scanning reports in database
-merge_request: 8642
-author:
-type: added

ee/changelogs/unreleased/6861-group-level-project-templates.yml

----
-title: Add support for Group-level project templates
-merge_request: 6878
-author:
-type: added

ee/changelogs/unreleased/6893-fix-issue-boards-api-with-upcoming-started-milestones.yml

----
-title: Fix issue board api with special milestones
-merge_request: 8653
-author:
-type: fixed

ee/changelogs/unreleased/6954-dashboard-chart.yml

----
-title: Adds group security dashboard metrics chart
-merge_request: 8631
-author:
-type: added

ee/changelogs/unreleased/6954-dashboard-rearrangement.yml

----
-title: Re-orders the Group Security Dashboard
-merge_request: 8624
-author:
-type: other

ee/changelogs/unreleased/6954_add_group_level_vulnerability_history_API_endpoint.yml

----
-title: Add vulnerability history at group level
-merge_request: 8603
-author:
-type: added

ee/changelogs/unreleased/7210-add-sort-direction-button-sort-dropdown.yml

----
-title: Add sort direction button with sort dropdown for Epics and Roadmap
-merge_request:
-author:
-type: changed

ee/changelogs/unreleased/726-smartcard_auth.yml

----
-title: Smartcard authentication
-merge_request: 8120
-author:
-type: added

ee/changelogs/unreleased/7347-geo-constantly-reverify-repositories.yml

----
-title: 'Geo: Constantly reverify repositories'
-merge_request: 8550
-author:
-type: changed

ee/changelogs/unreleased/7527-ci-variables-are-not-parameterized-for-alerting-rules.yml

----
-title: Parameterize alerting rules with variables
-merge_request: 8481
-author:
-type: fixed

ee/changelogs/unreleased/7757-fix-license-managment-path-for-forks.yml

----
-title: Fixed license managment path in MR widget for fork cases
-merge_request: 8700
-author:
-type: fixed

ee/changelogs/unreleased/7772-add-subscription-table-to-gitlab-com-billing-areas.yml

----
-title: Add subscription table to GitLab.com billing areas
-merge_request: 7885
-author:
-type: other

ee/changelogs/unreleased/7941-security-dashboard-empty-state.yml

----
-title: Adds Security dashboard empty state
-merge_request: 8443
-author:
-type: added

ee/changelogs/unreleased/7960-geo-address-the-update-delete-race.yml

----
-title: 'Geo: Moving registry deletion into the job that deletes the files and project
-  record'
-merge_request: 8480
-author:
-type: fixed

ee/changelogs/unreleased/8035-add-epics-state-filtering-in-roadmap.yml

----
-title: Add epics state filtering in roadmap view
-merge_request: 8658
-author:
-type: changed

ee/changelogs/unreleased/8111-snowplow-integration-cannot-find-variable-sesname.yml

----
-title: Switch snowplows stateStorageStrategy to cookie
-merge_request: 8461
-author:
-type: changed

ee/changelogs/unreleased/8145-consider-using-something-other-than-a-strike-for-dismissed-vulnerabilities.yml

----
-title: Restyles the dismissed vulnerabilities
-merge_request: 8401
-author:
-type: other

ee/changelogs/unreleased/8157_add_line_numbers_to_vuln_issues_be.yml

----
-title: Add file and line numbers to issues created from SAST vulnerabilities
-merge_request: 8578
-author:
-type: changed

ee/changelogs/unreleased/8316-maven-package-permissions-option-wrongly-available-in-starter.yml

----
-title: Don't show packages tab and settings for starter license
-merge_request: 8270
-author:
-type: fixed

ee/changelogs/unreleased/8320-add-usage-ping-for-package-management.yml

----
-title: Add count of projects with at least one package to a usage ping data
-merge_request: 8641
-author:
-type: other

ee/changelogs/unreleased/8340-use-iid-instead-of-id-when-displaying-link-to-issue-on-group-security-dashboard.yml

----
-title: Used the iid instead of the id for linked issues on the Group Security Dashboard
-merge_request: 8357
-author:
-type: fixed

ee/changelogs/unreleased/8341-use-hand-cursort-pointer-when-hovering-the-vulnerability-title-on-group-security-dashboard.yml

----
-title: Makes the vulnerability name on the Group Security Dashboard a button for better A11y
-merge_request: 8341
-author:
-type: fixed

ee/changelogs/unreleased/8492-add-packages_enabled-attribute-to-projects-api.yml

----
-title: Add packages_enabled attribute to Projects API
-merge_request: 8604
-author:
-type: changed

ee/changelogs/unreleased/8506-update-details-icon.yml

----
-title: Use new information-o icon for Security Dashboard
-merge_request:
-author:
-type: other

ee/changelogs/unreleased/8581-geo-the-geo-nodes-admin-page-display-secondary-database-state-incorrectly.yml

----
-title: 'Rails 5: Fix the check whether the database is in read-only mode'
-merge_request: 8594
-author:
-type: fixed

ee/changelogs/unreleased/8583-rails5-gitlab-database-loadbalancing-caught_up-returns-state-incorrectly.yml

----
-title: 'Raisl 5: Fix Gitlab::Database::LoadBalancing#caught_up? check'
-merge_request: 8595
-author:
-type: fixed

ee/changelogs/unreleased/8637-group-level-project-templates-mini-renaming.yml

----
-title: Update casing in Built-in on project templates tab
-merge_request: 8688
-author:
-type: changed

ee/changelogs/unreleased/8643-geo-fix-queries-to-retrieve-failed-verifications.yml

----
-title: Geo - Respect the next retry time when re-verifying failed repositories
-merge_request: 8661
-author:
-type: fixed

ee/changelogs/unreleased/8700-handle-empty-milestone-dates-epics.yml

----
-title: Handle null start or due dates for dates sourcing milestone in Epics
-merge_request: 8689
-author:
-type: fixed

ee/changelogs/unreleased/8765-geo-gitlab-geo-should-not-serialize-activerecord-objects.yml

----
-title: Add Rails.version to the Geo cache keys
-merge_request: 8775
-author:
-type: fixed

ee/changelogs/unreleased/8807-duplicated_smartcard_login_btn.yml

----
-title: Remove duplicated smartcard login button
-merge_request: 8793
-author:
-type: fixed

ee/changelogs/unreleased/_acet-weight-input.yml

----
-title: Change issue create weight dropdown to an input
-merge_request: 8648
-author:
-type: changed

ee/changelogs/unreleased/ashmckenzie-8114-geo-push-ssh-lfs-http-auth-bug.yml

----
-title: 'Geo: Fix push to secondary over SSH for LFS'
-merge_request: 8044
-author:
-type: fixed

ee/changelogs/unreleased/bw-elasticsearch-merge-policy-docs.yml

----
-title: Added recommendations for handling deleted documents in Elasticsearch
-merge_request:
-author:
-type: other

ee/changelogs/unreleased/ee-8805-smartcard_support_for_older_nginx.yml

----
-title: Support older NGINX version forwarding the client certificate for smartcard
-  auth
-merge_request: 8784
-author:
-type: fixed

ee/changelogs/unreleased/elastic-version-check-fix.yml

----
-title: Update elasticsearch system check to check for new supported versions
-merge_request: 8683
-author:
-type: fixed

ee/changelogs/unreleased/fj-5426-web-ide-terminal.yml

----
-title: Added web terminals to Web IDE
-merge_request: 7386
-author:
-type: added

ee/changelogs/unreleased/frozen-string-ee-app-controllers.yml

----
-title: Enable some frozen string in ee/app
-merge_request:
-author: gfyoung
-type: performance

ee/changelogs/unreleased/frozen-string-ee-app-helpers.yml

----
-title: Enable some frozen string in ee/app
-merge_request: 8667
-author: gfyoung
-type: performance

ee/changelogs/unreleased/frozen-string-ee-app-policies.yml

----
-title: Enable some frozen string in ee/app
-merge_request:
-author: gfyoung
-type: performance

ee/changelogs/unreleased/group-security-dashboard-action-button-improvements.yml

----
-title: UX improvements for the group security dashboard
-merge_request: 8217
-author:
-type: other

ee/changelogs/unreleased/gt-add-help-page-link-for-licence-management.yml

----
-title: Add help page link for licence management in CI/CD settings
-merge_request: 8561
-author: George Tsiolis
-type: other

ee/changelogs/unreleased/gt-move-ee-only-differences-for-finders.yml

----
-title: Move EE only differences for finders
-merge_request: 8629
-author: George Tsiolis
-type: other

ee/changelogs/unreleased/gt-replace-weight-icon.yml

----
-title: Replace weight icon
-merge_request: 8448
-author: George Tsiolis
-type: changed

ee/changelogs/unreleased/gt-show-navigation-line-separator.yml

----
-title: Show navigation line separator when instance etrics is disabled
-merge_request: 8379
-author: George Tsiolis
-type: fixed

ee/changelogs/unreleased/issue_5603.yml

----
-title: Add milestones autocomplete for epics
-merge_request: 8632
-author:
-type: added

ee/changelogs/unreleased/issue_6086.yml

----
-title: Epic issue list and related issue list re-design
-merge_request:
-author:
-type: changed

ee/changelogs/unreleased/jej-group-saml-metadata-endpoint.yml

----
-title: Adds Group SAML metadata endpoint
-merge_request: 5782
-author:
-type: changed

ee/changelogs/unreleased/jej-group-saml-sso-button-link-description.yml

----
-title: Group SAML SSO page warns when linking account
-merge_request: 8295
-author:
-type: changed

ee/changelogs/unreleased/jej-group-saml-unlink-from-account.yml

----
-title: Users can unlink Group SAML from accounts page
-merge_request: 8682
-author:
-type: changed

ee/changelogs/unreleased/jivl-add-empty-state-for-custom-metrics.yml

----
-title: Changes initial state for disabled prometheus integrations
-merge_request: 8434
-author:
-type: fixed

ee/changelogs/unreleased/jivl-add-vue-modal-delete-custom-metric.yml

----
-title: Change the delete custom metric alert
-merge_request: 8430
-author:
-type: changed

ee/changelogs/unreleased/jivl-fix-kubernetes-pod-dropdown.yml

----
-title: fix pod dropdown not switching pod logs
-merge_request: 8660
-author:
-type: fixed

ee/changelogs/unreleased/kcj-add-philosophy.yml

----
-title: Adds PHILOSOPHY.md and references GitLab Product Handbook.
-merge_request: 8515
-author:
-type: other

ee/changelogs/unreleased/mk-fix-gitlab-geo-check-task.yml

----
-title: Fix gitlab:geo:check rake task
-merge_request: 8714
-author:
-type: fixed

ee/changelogs/unreleased/mk-fix-selective-sync-by-shards.yml

----
-title: Fix ability to choose shards for selective sync
-merge_request: 8717
-author:
-type: fixed

ee/changelogs/unreleased/mk-geo-add-hashed-storage-system-checks.yml

----
-title: Deprecate non-hashed repository storage for Geo installations
-merge_request: 8739
-author:
-type: deprecated

ee/changelogs/unreleased/mk-refactor-gitlab-check-rake-tasks.yml

----
-title: Run geo check task from gitlab check
-merge_request: 8616
-author:
-type: changed

ee/changelogs/unreleased/rails5-active-record-class-value.yml

----
-title: 'Rails5: Passing a class as a value in an Active Record query is deprecated'
-merge_request: 8540
-author: Jasper Maes
-type: other

ee/changelogs/unreleased/rails5-ee-deprecation-render-nothing.yml

----
-title: render :nothing option is deprecated, Use head method to respond with empty
-  response body.
-merge_request: 8560
-author: Jasper Maes
-type: other

ee/changelogs/unreleased/security-357-tracing-stored-xss.yml

----
-title: Sanitize tracing external_urls before saving to DB and when displaying the URL to prevent XSS issues
-merge_request:
-author:
-type: security

ee/changelogs/unreleased/security-358-operations-page-visible-to-reporters.yml

----
-title: Prevent reporter roles from viewing the Jaeger tracing settings page
-merge_request:
-author:
-type: security

ee/changelogs/unreleased/security-IDOR-note-drafts-publish.yml

----
-title: Fix IDOR at /drafts/publish
-merge_request:
-author:
-type: security

ee/changelogs/unreleased/security-authorize-boards.yml

----
-title: Authorize users when listing board users and milestones.
-merge_request:
-author:
-type: security

ee/changelogs/unreleased/security-issue_7696.yml

----
-title: 'Resolve: Guest can set weight of a new issue'
-merge_request:
-author:
-type: security

ee/changelogs/unreleased/security-mr-approvers-xss.yml

----
-title: Fixes XSS with merge request approvers selection
-merge_request:
-author:
-type: security

ee/changelogs/unreleased/sh-disable-autocomplete-mirror-password.yml

----
-title: Disable password autocomplete in mirror form fill
-merge_request:
-author:
-type: fixed

ee/changelogs/unreleased/sh-fix-issue-50843.yml

----
-title: Fix PostReceive failing for project mirrors missing local branch
-merge_request: 8495
-author:
-type: fixed

ee/changelogs/unreleased/sh-fix-issue-53783.yml

----
-title: Fix project deploy key creation and deletion as admin
-merge_request: 8432
-author:
-type: fixed

ee/changelogs/unreleased/sh-fix-sidekiq-cluster-5-2-3.yml

----
-title: Make sidekiq-cluster play well with Sidekiq 5.2.2+
-merge_request: 8522
-author:
-type: other

ee/changelogs/unreleased/vincentaubert-gitlab-ee-fix_typo.yml

----
-title: 'Fix a typo in Admin: intergration -> integration'
-merge_request: 8444
-author: Vincent AUBERT
-type: fixed