[10.3] Fix path traversal in gitlab-ci.yml cache:key

See merge request gitlab/gitlabhq!2270

Validate project path in Gitlab import - 10.3 port

See merge request gitlab/gitlabhq!2268

Remove order param from the MilestoneFinder

See merge request gitlab/gitlabhq!2259

[10.3] Fix XSS in issue label dropdown

See merge request gitlab/gitlabhq!2253

[10.3] Fix XSS vulnerability in Pipeline job trace

See merge request gitlab/gitlabhq!2258

Merge branch 'security-10-3-do-not-expose-passwords-or-tokens-in-service-integrations-api' into 'security-10-3'

Filter out sensitive fields from the project services API

See merge request gitlab/gitlabhq!2281

CE upstream - Monday

Closes gitaly#907

See merge request gitlab-org/gitlab-ee!4098

Geo Logger should use the same log level defined in Rails

Closes #4497

See merge request gitlab-org/gitlab-ee!4066

Signed-off-by: Rémy Coutable <remy@rymai.me>

EE port of dispatcher-milestones

See merge request gitlab-org/gitlab-ee!4100

EE projects tree tags dispatcher refactor

See merge request gitlab-org/gitlab-ee!4081

Add system notes when moving issues between epics

Closes #4261

See merge request gitlab-org/gitlab-ee!3972

Signed-off-by: Rémy Coutable <remy@rymai.me>

Ensure CI pipelines and builds have the correction project associations

See merge request gitlab-org/gitlab-ee!4094

# Conflicts:
#	app/assets/javascripts/dispatcher.js
#	app/assets/stylesheets/framework.scss
#	doc/ci/autodeploy/index.md
#	doc/ci/examples/README.md
#	doc/ci/examples/dast.md
#	doc/ci/examples/sast_docker.md
#	doc/install/README.md
#	doc/topics/autodevops/index.md
#	spec/spec_helper.rb

[ci skip]

CE upstream - Monday

See merge request gitlab-org/gitlab-ee!4085

CE: Override module to specify that we're overriding

See merge request gitlab-org/gitlab-ce!16131

Override module to specify that we're overriding

Closes #1819

See merge request gitlab-org/gitlab-ee!3876

Docs: deprecates articles index

See merge request gitlab-org/gitlab-ee!4093

Docs: deprecates articles index

Closes #41138

See merge request gitlab-org/gitlab-ce!16469

This should reduce the number of SQL queries and lookups needed to look up a
project of a build and pipeline and vice versa.

Before:

```
[1] pry(main)> Ci::Build.reflect_on_association(:project).has_inverse?
=> false
[2] pry(main)> Project.reflect_on_association(:builds).has_inverse?
=> false
[3] pry(main)> Ci::Pipeline.reflect_on_association(:project).has_inverse?
=> false
[4] pry(main)> Project.reflect_on_association(:pipelines).has_inverse?
=> :project
```

After:

```
[1] pry(main)> Ci::Build.reflect_on_association(:project).has_inverse?
=> :builds
[2] pry(main)> Project.reflect_on_association(:builds).has_inverse?
=> :project
[3] pry(main)> Ci::Pipeline.reflect_on_association(:project).has_inverse?
=> :pipelines
[4] pry(main)> Project.reflect_on_association(:pipelines).has_inverse?
=> :project
```

Make forking protect default branch on completion

Closes #19493

See merge request gitlab-org/gitlab-ce!16449

Migrate importing repository to Gitaly

Closes gitaly#907

See merge request gitlab-org/gitlab-ce!16431