Fix LDAP external user/group bug on first sign in

See merge request gitlab/gitlab-ee!569

[10.3] Check milestone access before persisting it on boards

See merge request gitlab/gitlab-ee!566

[10.3] Prevent login with disabled OAuth providers

See merge request gitlab/gitlabhq!2296

Port of [10.2] Sanitizes IPython notebook output

See merge request gitlab/gitlabhq!2285

[10.3] Fix RCE via project import mechanism

See merge request gitlab/gitlabhq!2294

Merge branch '41293-fix-command-injection-vulnerability-on-system_hook_push-queue-through-web-hook' into 'security-10-3'

Don't allow line breaks on HTTP headers

See merge request gitlab/gitlabhq!2277

[10.3] Migrate `can_push` column from `keys` to `deploy_keys_project`

See merge request gitlab/gitlabhq!2276

check project access on MR create

See merge request gitlab/gitlabhq!2273

[10.3] Fix path traversal in gitlab-ci.yml cache:key

See merge request gitlab/gitlabhq!2270

Validate project path in Gitlab import - 10.3 port

See merge request gitlab/gitlabhq!2268

Remove order param from the MilestoneFinder

See merge request gitlab/gitlabhq!2259

[10.3] Fix XSS in issue label dropdown

See merge request gitlab/gitlabhq!2253

[10.3] Fix XSS vulnerability in Pipeline job trace

See merge request gitlab/gitlabhq!2258

Merge branch 'security-10-3-do-not-expose-passwords-or-tokens-in-service-integrations-api' into 'security-10-3'

Filter out sensitive fields from the project services API

See merge request gitlab/gitlabhq!2281

CE upstream - Monday

Closes gitaly#907

See merge request gitlab-org/gitlab-ee!4098

Geo Logger should use the same log level defined in Rails

Closes #4497

See merge request gitlab-org/gitlab-ee!4066

Signed-off-by: Rémy Coutable <remy@rymai.me>

EE port of dispatcher-milestones

See merge request gitlab-org/gitlab-ee!4100

EE projects tree tags dispatcher refactor

See merge request gitlab-org/gitlab-ee!4081

Add system notes when moving issues between epics

Closes #4261

See merge request gitlab-org/gitlab-ee!3972

Signed-off-by: Rémy Coutable <remy@rymai.me>

Ensure CI pipelines and builds have the correction project associations

See merge request gitlab-org/gitlab-ee!4094

# Conflicts:
#	app/assets/javascripts/dispatcher.js
#	app/assets/stylesheets/framework.scss
#	doc/ci/autodeploy/index.md
#	doc/ci/examples/README.md
#	doc/ci/examples/dast.md
#	doc/ci/examples/sast_docker.md
#	doc/install/README.md
#	doc/topics/autodevops/index.md
#	spec/spec_helper.rb

[ci skip]

CE upstream - Monday

See merge request gitlab-org/gitlab-ee!4085