Backport security-reports fixtures to CE

See merge request gitlab-org/gitlab-ce!25828

Docs: Adding Package Repository Permissions to permissions.md

See merge request gitlab-org/gitlab-ce!24676

CE FE Refactor PersistentUserCallout instantiation

See merge request gitlab-org/gitlab-ce!25484

Allow all snippets to be accessed by API

Closes #41888

See merge request gitlab-org/gitlab-ce!25772

Fix exports related to new templates

Closes #58570

See merge request gitlab-org/gitlab-ce!25794

This reverts commit 669d84356771682961ac6c416c3cbdb983ec0cd2

Fix typo in review-performance job

See merge request gitlab-org/gitlab-ce!25821

This reverts commit c9ecc71a, reversing
changes made to c3c8dbf8.

Adds Rubocop ReturnNil cop

Closes #57454

See merge request gitlab-org/gitlab-ce!25034

Allow GraphQL requests without CSRF token

Closes #57237

See merge request gitlab-org/gitlab-ce!25719

Document ChatOps for actor feature gates

See merge request gitlab-org/gitlab-ce!25815

Quarantine failing ssh key test

See merge request gitlab-org/gitlab-ce!25813

Quarantine: Update failure issue link

See merge request gitlab-org/gitlab-ce!25811

This style change enforces `return if ...` instead of
`return nil if ...` to save maintainers a few minor review points

The documentations only covered the percentage based feature gates.
These don't work really well for a number of reasons, for example; a new
visual element in GitLab would be weird to see only 25% of the time.

Allowing feature gates based on projects and groups has been supported,
now it's documented.

CE backport of ee-parallel-diff-view

See merge request gitlab-org/gitlab-ce!25734

With this we allow authentication using a session or using personal
access token.

Authentication using a session, and CSRF token makes it easy to play
with GraphQL from the Graphiql endpoint we expose.

But we cannot enforce CSRF validity, otherwise authentication for
regular API clients would fail when they use personal access tokens to
authenticate.

Re-add gitlab:ui:visual ci job

Closes gitlab-ui#192

See merge request gitlab-org/gitlab-ce!25808

These adjustments make sure our GraphQL helpers support rendering
queries for empty fields like this:

      {
        echo(text: "Hello world")
      }

Instead of like this:

     {
       echo(text: "Hello world") {
       }
     }

The latter would be an invalid query, causing parsing errors.

Making review-performance run on master in scheduled runs

Closes #57881

See merge request gitlab-org/gitlab-ce!25757

PUT MergeRequest API endpoint - accept labels as an array

See merge request gitlab-org/gitlab-ce!19914

Expose merge request entity for pipelines

See merge request gitlab-org/gitlab-ce!25679

Resolve "Introduce zoom and scroll functionality on metrics charts"

Closes #57085

See merge request gitlab-org/gitlab-ce!25388

Adds the ability to change data zoom for metrics graphs

Allow protected branch creation via web and API

Closes #53361

See merge request gitlab-org/gitlab-ce!24969

This commit includes changes to add `UserAccess#can_create_branch?`
which will check whether the user is allowed to create a branch even
if it matches a protected branch.

This is used in `Gitlab::Checks::BranchCheck` when the branch name
matches a protected branch.

A `push_to_create_protected_branch` ability in `ProjectPolicy` has been
added to allow Developers and above to create protected branches.

Use optional encryption strategy for Runners Tokens

Closes #54859

See merge request gitlab-org/gitlab-ce!25532

This makes code to support encrypted runner tokens.
This code also finished previously started encryption
process.

Uses a new factory method to DRY instantiation.

Fix object storage link in doc

See merge request gitlab-org/gitlab-ce!25791

CE FE Add PersistentUserCallout factory method

See merge request gitlab-org/gitlab-ce!25481

Resolve "Add Saturday to Localization first day of the week"

Closes #58023

See merge request gitlab-org/gitlab-ce!25509

Signed-off-by: Takuya Noguchi <takninnovationresearch@gmail.com>

* Support label parameter as comma separated and array of strings
for merge requests and issues api endpoints