Allow HEAD requests for read_api and read_user scope tokens

See merge request gitlab-org/gitlab!53088

> The HEAD method is identical to GET except that the server MUST NOT
> send a message body in the response (i.e., the response terminates at
> the end of the header section)

https://tools.ietf.org/html/rfc7231#section-4.3.2

Judging from that section of the RFC 7231 it should be safe to allow
HEAD requests in the read_api and read_user scopes

Generate Deeply Nested Frontend Fixtures

See merge request gitlab-org/gitlab!53070

Refactored the compliance framework forms

See merge request gitlab-org/gitlab!53046

- Created a constants file to hold common values
- Created new FormStatus component to separate the status of the form
and the form inputs themselves
- Updated the create form to use the FormStatus component
- Updated the edit form to use the FormStatus component
- Updated the create and edit forms to sync form data and store the
form data in the parent
- Updated the SharedForm to emit value changes rather than storing it
- Updated tests

Remove unnecessary override in `Projects::GitGarbageCollectWorker`

See merge request gitlab-org/gitlab!53144

[RUN-AS-IF-FOSS] Add security_dashboard_access_level into ProjectFeatures

See merge request gitlab-org/gitlab!52551

This change will allow users to enable/disable the features provided
under the "Security & Compliance" roof for projects.

Add scanner data to vulnerability pages

See merge request gitlab-org/gitlab!51696

Update hamlit to v2.14.4

See merge request gitlab-org/gitlab!53085

Update Code Quality to 0.85.22

See merge request gitlab-org/gitlab!52913

Apply new GitLab UI for commit browse file button

See merge request gitlab-org/gitlab!51805

Merge branch '296136-stop-deploying-to-pages-legacy-storage-if-feature-flag-is-enabled' into 'master'

Stop deploying to Pages legacy storage if feature flag is disabled

See merge request gitlab-org/gitlab!50683

Change "to-do" formatting in Design error messages and sidebar

See merge request gitlab-org/gitlab!53040

To follow the format in issues, MRs, epics, and alerts.

Resolve "Filter count does not get reflected in Test Cases"

See merge request gitlab-org/gitlab!52889

Applied a fix to test cases count
Fixed a query shape

Fixed a loading state test

Made test passing

Removed unnnecessary $apollo properties

Added changelog entry

Add user secure scan pings

See merge request gitlab-org/gitlab!49444

Turn "To-Do" to "to do" in alert sidebar and error

See merge request gitlab-org/gitlab!53037

Pipeline Graph Structural Update: Add space to right edge

See merge request gitlab-org/gitlab!53076

Remove blocked_by code

See merge request gitlab-org/gitlab!52675

Apply new GitLab UI for buttons in MR resolve conflicts page

See merge request gitlab-org/gitlab!52783

Sync scss-lint rules and stylelint

See merge request gitlab-org/gitlab!53122

Apply new GitLab UI for form inputs project settings page

See merge request gitlab-org/gitlab!52097

Add board_new_list feature flag and placeholder [RUN AS-IF-FOSS]

See merge request gitlab-org/gitlab!52869

Button currently doesn't do anything

Don't raise CrossSlotError when no keys given

See merge request gitlab-org/gitlab!52887

Resolve "Issue/MR list tabs - Icons sometimes display as ?"

See merge request gitlab-org/gitlab!52698

Merge branch '300532-document-feature-flags-for-tracking-to-be-owned-by-group-adding-the-tracking' into 'master'

Document feature flags for tracking to be owned by group adding the tracking

See merge request gitlab-org/gitlab!53012

Added backend for requesting a new review

See merge request gitlab-org/gitlab!52321

When no keys are passed to a Redis command that accepts multiple keys,
that's an error. But it's not a cross-slot violation, as there are no
slots. By raising this error we were masking the true
Redis::CommandError underneath, which is bad for two reasons:

1. It's confusing to developers.
2. It leads to a different failure in production to development and
   test.

To elaborate a bit more on the second point: the purpose of the
CrossSlotError is to only be an _additional_ error in development and
test, but it shouldn't _replace_ underlying errors as that can cause
issues like this one.

Merge branch '289973-refactor-jquery-to-vanilla-js-app-assets-javascripts-jira_connect-index-js' into 'master'

Refactor jQuery to Vanilla JS: app/assets/javascripts/jira_connect/index.js

See merge request gitlab-org/gitlab!52286