Disallow read user scope to read project events

See merge request gitlab/gitlabhq!3067

[ci skip]

[ci skip]

Prevent leaking information when issue is moved

Closes #2830

See merge request gitlab/gitlabhq!3050

Add ApplicationRecord#safe_ensure_unique method

See merge request gitlab/gitlabhq!3054

Stop sending emails to users who can't read commit

See merge request gitlab/gitlabhq!3060

Escape path in new merge request mail

See merge request gitlab/gitlabhq!3066

Fix new issue header text

See merge request gitlab-org/gitlab-ce!27662

Ensure that we only request blobs in one batch

Closes #60829

See merge request gitlab-org/gitlab-ce!27625

Fix typo in blob_spec.rb

See merge request gitlab-org/gitlab-ce!27661

Get rid of the user_namespace API helper method

See merge request gitlab-org/gitlab-ce!27636

Without the leading `=`, this is just interpreted as literal text, so it
won't be translated.

Add support for baseUrl in ApolloClient instance within GraphQL helper

See merge request gitlab-org/gitlab-ce!27657

Resolve "Autocomplete dropdown for usernames shows HTML if you attempt to search for a username that starts with a period"

Closes #60552

See merge request gitlab-org/gitlab-ce!27533

Fixes #60552

Add support for providing baseUrl/rootUrl within `uri` while
creating ApolloClient instance.

Client side changes for ListLastCommitsForTree response update

See merge request gitlab-org/gitlab-ce!26880

Updates the gitaly client to use path_bytes field instead of the
deprecated path field in list_last_commits_for_tree_response.
Also adds a test to guard against non-utf8 path data

Avoid loading Wiki Pages content when listed

Closes #53523

See merge request gitlab-org/gitlab-ce!22801

Inside a wiki, when we show the sidebar or browse to the `pages`,
all page contents are retrieved from Gitaly and that is a waste
of resources, since no content from that pages are going to be
showed.

This MR introduces the method `ProjectWiki#list_pages`,
which uses new wiki_list_pages RPC call to retrieve
pages without content

Also in the `WikisController` we're using the method to show
pages in the sidebar and also on the `pages` page.

Fix Metrics environments dropdown

Closes #60687

See merge request gitlab-org/gitlab-ce!27586

Fix API and IDE path with `/` relative_url_root

See merge request gitlab-org/gitlab-ce!27635

Adding ability to specify helm chart repo using environment variables

Closes #49520

See merge request gitlab-org/gitlab-ce!27123

Show category icons in user popover

Closes #60387

See merge request gitlab-org/gitlab-ce!27254

Put some flaky specs in quarantine

See merge request gitlab-org/gitlab-ce!27633

**Why?**
Previously we simply concatenated our paths, which led
to requesting `//api/v4/...` and obviously failed. The BE
supports a relative_url_root of `/`. It's a bug that the FE
does not.

i18n: externalize strings from 'app/views/projects/forks'

See merge request gitlab-org/gitlab-ce!27497

Update Workhorse to v8.7.0

See merge request gitlab-org/gitlab-ce!27630

Signed-off-by: Rémy Coutable <remy@rymai.me>

Signed-off-by: Rémy Coutable <remy@rymai.me>

Backport EE cache update

See merge request gitlab-org/gitlab-ce!27626

Resolve "500 error on save of general pipeline settings timeout"

Closes gitlab-ee#11281

See merge request gitlab-org/gitlab-ce!27416

Fix bug when project export to remote url fails

Closes #60827

See merge request gitlab-org/gitlab-ce!27614

Refactor api events class to use external helper

Move specs from old class

Add changelog and magic string

Refactor events class to be more explicit

Remove blank line

Add CI variable CI_REF_PROTECTED

See merge request gitlab-org/gitlab-ce!26716

Resolve "Add rule to Danger to detect possible CE/EE Vue <template> issues"

Closes #60475

See merge request gitlab-org/gitlab-ce!27328