Update CHANGELOG-EE.md for 12.5.0-ee

[ci skip]

CHANGELOG-EE.md

 Please view this file on the master branch, on stable branches it's out of date.
 
+## 12.5.0
+
+### Security (5 changes)
+
+- Fixes a Open Redirect issue in `InternalRedirect`.
+- Filter out packages the user does'nt have permission to see at group level.
+- Do not show private cross references in epic notes.
+- Redact search results based on Ability.allowed?.
+- Do not index system notes for issue update.
+
+### Removed (2 changes, 1 of them is from the community)
+
+- Remove the Geo Clone Modal. !18897 (Zack Cuddy)
+- Remove Pendo Snippet. !19400
+
+### Fixed (17 changes)
+
+- Fix notification button size in notification settings. !16672
+- Don't store full blob path in ES filename field. !18470
+- Add messages to warn and stop users when attempting to change the path of projects with NPM packages. !18515
+- Pass pipeline variables when expanding Bridge downstream variables. !18875
+- Fix equality operator for Prometheus alerts. !18919
+- Fix rake task to rollback Geo migrations. !18975
+- Default current user to mirror user when creating pipelines for GitHub pull requests. !19072
+- Fix overlapping `Skip Trial` block. !19218
+- Fix Dependency List is empty if last pipeline is retried. !19241
+- SCIM pagination startIndex handles string input. !19331
+- Display packages with multiple licenses. !19333
+- Expose commit sha on Vulnerabilities::Occurrence. !19668
+- Fix admin welcome image not found. !19676
+- Revert ES support for public/internal project snippets. !19715
+- Updated View documentation link on cluster page. !19780
+- Enable pod logs nav menu only for maintainers in projects with k8s environments. !19927
+- Hide labels from issue board cards. !20072
+
+### Changed (13 changes)
+
+- Inherit children epics start and due dates. !14366
+- Update the frontend diffing code to support v2 license scan reports. !18105
+- Implement pod logs page using Vue. !18567
+- Move DAST reports logic for the Merge Request widget to the backend. !18660
+- Add created_before/after filter to audit events. !19035
+- Get rid of unnecessary duplication of alert’s title from Alert Details. !19214
+- Hashed storage is now a requirement for Design Management. !19259
+- Expose epic in issues API. !19300
+- SCIM GET /Users supports requests without a filter. !19421
+- Enable Cycle Analytics Feature by default. !19484
+- Enforce a max size accepted for sentry issues list. !19649
+- Limit input size for Prometheus alert JSON payload. !19940
+- Adds in a URL field for DAST reports modal data. !20162
+
+### Performance (2 changes)
+
+- Fix new project page load performance. !18180
+- Geo - Improve query performance to determine LFS objects to sync when selective sync is enabled. !19051
+
+### Added (17 changes, 1 of them is from the community)
+
+- Add filter for dismissed vulnerabilities on security dashboards. !16692
+- Data API endpoint for tasks by type chart within the analytics workspace. !17944
+- Hide labels from issue board cards. !18533
+- Skip Onboarding feedback when tracking is disabled. !18671
+- API endpoint to list the packages of a group. !18871
+- Allow to create epics with GraphQL. !19030
+- CI_JOB_TOKEN can be accepted with 'Bearer ' prefix to allow for NPM registry usage. !19059
+- Add issue IID to a title of generic alerts with a default title. !19086
+- Update sidebar to differentiate between groups, subgroups, and projects. !19158
+- SCIM can be used to manage group membership. !19329
+- Expose number of sub-epics and epic issues in GraphQL API. !19450
+- Add logs menu item to the sidebar. !19471
+- Add public API for Feature Flags. !19547
+- Ignore project_ci_cd_settings.merge_trains_enabled column. !19695
+- Add a usage ping metric for number of activated Alert Services. !19765
+- New discussions on designs will generate a system note on the issue. !19990
+- Expose SHA of squashed commit via API when fast-forward merge is enabled. (minghuan lei)
+
+### Other (6 changes, 1 of them is from the community)
+
+- Migrated contributors charts to echarts. !16677
+- Added autogenerated Markdown support for Vulnerability title and description. !18283
+- Rename user_id to author_id in design_management_versions table. !18506
+- Revert notification for updated privacy policy. !18900
+- Remove plaintext tokens for feature flags clients. !18923
+- Remove IIFEs from jira_connect.js file. !19248 (nuwe1)
+
+
 ## 12.4.3
 
 ### Fixed (2 changes)

ee/changelogs/unreleased/10003-api-endpoint-to-list-the-packages-of-a-group.yml

----
-title: API endpoint to list the packages of a group
-merge_request: 18871
-author:
-type: added

ee/changelogs/unreleased/10242-1-create-vulnerability-from-finding.yml

----
-title: Added autogenerated Markdown support for Vulnerability title and description
-merge_request: 18283
-author:
-type: other

ee/changelogs/unreleased/10286-geo-sql-statement-times-out-whilst-determining-lfs-objects-to-sy.yml

----
-title: Geo - Improve query performance to determine LFS objects to sync when selective
-  sync is enabled
-merge_request: 19051
-author:
-type: performance

ee/changelogs/unreleased/11851-design-annotation-system-notes.yml

----
-title: New discussions on designs will generate a system note on the issue
-merge_request: 19990
-author:
-type: added

ee/changelogs/unreleased/12417-add-messages-to-warn-and-stop-users-when-attempting-to-change-th.yml

----
-title: Add messages to warn and stop users when attempting to change the path of projects with NPM packages
-merge_request: 18515
-author:
-type: fixed

ee/changelogs/unreleased/12785-more-accessible-epics-and-differentiation-between-groups-subgrou.yml

----
-title: Update sidebar to differentiate between groups, subgroups, and projects
-merge_request: 19158
-author:
-type: added

ee/changelogs/unreleased/12796-remove-merge_trains_enabled-column-from-project_ci_cd_settings-t.yml

----
-title: Ignore project_ci_cd_settings.merge_trains_enabled column
-merge_request: 19695
-author:
-type: added
-

ee/changelogs/unreleased/13070-bad-interpolation-of-ci_pipeline_id-when-passing-variables-to-an.yml

----
-title: Pass pipeline variables when expanding Bridge downstream variables.
-merge_request: 18875
-author:
-type: fixed

ee/changelogs/unreleased/13079-parse-v1-1-report.yml

----
-title: Display packages with multiple licenses
-merge_request: 19333
-author:
-type: fixed

ee/changelogs/unreleased/13083-js-diffing-v2-reports.yml

----
-title: Update the frontend diffing code to support v2 license scan reports
-merge_request: 18105
-author:
-type: changed

ee/changelogs/unreleased/13426-rename-design-management-version-user_id-to-author_id.yml

----
-title: Rename user_id to author_id in design_management_versions table
-merge_request: 18506
-author:
-type: other

ee/changelogs/unreleased/13428-make-hashed-storage-a-requirement-for-design-management.yml

----
-title: Hashed storage is now a requirement for Design Management
-merge_request: 19259
-author:
-type: changed

ee/changelogs/unreleased/13989-view-docs-on-cluster-page.yml

----
-title: Updated View documentation link on cluster page
-merge_request: 19780
-author:
-type: fixed

ee/changelogs/unreleased/14926-limit-amount-of-data-sent-with-sentry-list.yml

----
-title: Enforce a max size accepted for sentry issues list
-merge_request: 19649
-author:
-type: changed

ee/changelogs/unreleased/173-completely-remove-pendo-integration.yml

----
-title: Remove Pendo Snippet
-merge_request: 19400
-author:
-type: removed

ee/changelogs/unreleased/18900-revert-data-and-privacy-agreement-for-gitlab-users.yml

----
-title: Revert notification for updated privacy policy
-merge_request: 18900
-author:
-type: change

ee/changelogs/unreleased/24088-make-logs-directly-available-off-the-operations-tab.yml

----
-title: Add logs menu item to the sidebar
-merge_request: 19471
-author:
-type: added

ee/changelogs/unreleased/24711-obtain-merge-commit-via-api-for-ff-merge-with-squash.yml

----
-title: Expose SHA of squashed commit via API when fast-forward merge is enabled
-merge_request: !17052
-author: minghuan lei
-type: added

ee/changelogs/unreleased/29594-remove-plaintext-ff-tokens.yml

----
-title: Remove plaintext tokens for feature flags clients
-merge_request: 18923
-author:
-type: other

ee/changelogs/unreleased/31893-notification-buttons.yml

----
-title: Fix notification button size in notification settings
-merge_request: 16672
-author:
-type: fixed

ee/changelogs/unreleased/32454-tasks-by-type-chart-backend.yml

----
-title: Data API endpoint for tasks by type chart within the analytics workspace
-merge_request: 17944
-author:
-type: added

ee/changelogs/unreleased/32801-pipeline-by-external-pr-from-github-mirror-on-12-3-has-no-user-p.yml

----
-title: Default current user to mirror user when creating pipelines for GitHub pull requests
-merge_request: 19072
-author:
-type: fixed

ee/changelogs/unreleased/33537-refactor-env-pod-logs-to-vue.yml

----
-title: Implement pod logs page using Vue
-merge_request: 18567
-author:
-type: changed

ee/changelogs/unreleased/33698-dependency-list-unstable.yml

----
-title: Fix Dependency List is empty if last pipeline is retried
-merge_request: 19241
-author:
-type: fixed

ee/changelogs/unreleased/34776-enable-group-ca-by-default.yml

----
-title: Enable Cycle Analytics Feature by default
-merge_request: 19484
-author:
-type: changed

ee/changelogs/unreleased/36104-environment-pod-logs-in-menu-lands-in-404-if-the-user-has-no-per.yml

----
-title: Enable pod logs nav menu only for maintainers in projects with k8s environments
-merge_request: 19927
-author:
-type: fixed

ee/changelogs/unreleased/63988-convert-contributors-graph-to-echarts.yml

----
-title: Migrated contributors charts to echarts
-merge_request: 16677
-author:
-type: other

ee/changelogs/unreleased/7332-inherit-epic-dates.yml

----
-title: Inherit children epics start and due dates
-merge_request: 14366
-author:
-type: changed

ee/changelogs/unreleased/7832-only-store-basename-in-filename.yml

----
-title: Don't store full blob path in ES filename field
-merge_request: 18470
-author:
-type: fixed

ee/changelogs/unreleased/9102-hide-dismissed-be.yml

----
-title: Add filter for dismissed vulnerabilities on security dashboards.
-merge_request: 16692
-author:
-type: added

ee/changelogs/unreleased/9104-authenticate-with-ci_job_token-to-npm-registry.yml

----
-title: CI_JOB_TOKEN can be accepted with 'Bearer ' prefix to allow for NPM registry
-  usage
-merge_request: 19059
-author:
-type: added

ee/changelogs/unreleased/9838-hide-labels-from-issue-board-cards-bugfix.yml

----
-title: Hide labels from issue board cards
-merge_request: 20072
-author:
-type: fixed

ee/changelogs/unreleased/9838-hide-labels-from-issue-board-cards.yml

----
-title: Hide labels from issue board cards
-merge_request: 18533
-author:
-type: added

ee/changelogs/unreleased/add-issue-id-to-generic-alert-title.yml

----
-title: Add issue IID to a title of generic alerts with a default title
-merge_request: 19086
-author:
-type: added

ee/changelogs/unreleased/add-url-to-dast-modals.yml

----
-title: Adds in a URL field for DAST reports modal data
-merge_request: 20162
-author:
-type: changed

ee/changelogs/unreleased/bug-vulnerability-occurence-blob-path.yml

----
-title: Expose commit sha on Vulnerabilities::Occurrence
-merge_request: 19668
-author:
-type: fixed

ee/changelogs/unreleased/da-fix-geo-db-rollback.yml

----
-title: Fix rake task to rollback Geo migrations
-merge_request: 18975
-author:
-type: fixed

ee/changelogs/unreleased/dz-filter-audit-events.yml

----
-title: Add created_before/after filter to audit events
-merge_request: 19035
-author:
-type: changed

ee/changelogs/unreleased/epics-count.yml

----
-title: Expose number of sub-epics and epic issues in GraphQL API
-merge_request: 19450
-author:
-type: added

ee/changelogs/unreleased/feature-flag-documentation.yml

----
-title: Add public API for Feature Flags
-merge_request: 19547
-author:
-type: added

ee/changelogs/unreleased/issue_33778.yml

----
-title: Allow to create epics with GraphQL
-merge_request: 19030
-author:
-type: added

ee/changelogs/unreleased/jej-fix-scim-pagination-integer-handling.yml

----
-title: SCIM pagination startIndex handles string input
-merge_request: 19331
-author:
-type: fixed

ee/changelogs/unreleased/jej-remove-group-scim-feature-flag.yml

----
-title: SCIM can be used to manage group membership
-merge_request: 19329
-author:
-type: added

ee/changelogs/unreleased/jej-scim-without-filter.yml

----
-title: SCIM GET /Users supports requests without a filter
-merge_request: 19421
-author:
-type: changed

ee/changelogs/unreleased/limit-input-size-for-prometheus-alert-payload.yml

----
-title: Limit input size for Prometheus alert JSON payload
-merge_request: 19940
-author:
-type: changed

ee/changelogs/unreleased/maybe-fix-projects-newperformance.yml

----
-title: Fix new project page load performance
-merge_request: 18180
-author:
-type: performance

ee/changelogs/unreleased/move-dast-reports-logic-backend.yml

----
-title: Move DAST reports logic for the Merge Request widget to the backend
-merge_request: 18660
-author:
-type: changed

ee/changelogs/unreleased/remove-IIFEs-from-jira_connect-js.yml

----
-title: Remove IIFEs from jira_connect.js file
-merge_request: 19248
-author: nuwe1
-type: other

ee/changelogs/unreleased/remove-duplicated-title-from-alert-details.yml

----
-title: Get rid of unnecessary duplication of alert’s title from Alert Details
-merge_request: 19214
-author:
-type: changed

ee/changelogs/unreleased/remove-work-faster-modal.yml

----
-title: Remove the Geo Clone Modal
-merge_request: 18897
-author: Zack Cuddy
-type: removed

ee/changelogs/unreleased/security-33660-comment-search-should-not-show-system-notes.yml

----
-title: Do not index system notes for issue update
-merge_request:
-author:
-type: security

ee/changelogs/unreleased/security-33689-post-filter-search-results.yml

----
-title: Redact search results based on Ability.allowed?
-merge_request:
-author:
-type: security

ee/changelogs/unreleased/security-377-private-subgroup-path-visible-in-epic-timeline-when-child.yml

----
-title: Do not show private cross references in epic notes
-merge_request:
-author:
-type: security

ee/changelogs/unreleased/security-filter-member-only-packages-master.yml

----
-title: Filter out packages the user does'nt have permission to see at group level
-merge_request:
-author:
-type: security

ee/changelogs/unreleased/security-open-redirect-internalredirect.yml

----
-title: Fixes a Open Redirect issue in `InternalRedirect`.
-merge_request:
-author:
-type: security

ee/changelogs/unreleased/skip-onboarding-feedback-for-dnt.yml

----
-title: Skip Onboarding feedback when tracking is disabled
-merge_request: 18671
-author:
-type: added
\ No newline at end of file

ee/changelogs/unreleased/usage-ping-for-alerts.yml

----
-title: Add a usage ping metric for number of activated Alert Services
-merge_request: 19765
-author:
-type: added

ee/changelogs/unreleased/use-correct-prometheus-equality-operator.yml

----
-title: Fix equality operator for Prometheus alerts
-merge_request: 18919
-author:
-type: fixed

ee/changelogs/unreleased/vs-fix-skip-trial-link.yml

----
-title: Fix overlapping `Skip Trial` block
-merge_request: 19218
-author:
-type: fixed

ee/changelogs/unreleased/winh-issues-api-expose-epic.yml

----
-title: Expose epic in issues API
-merge_request: 19300
-author:
-type: changed