Ensure only authorised users can create notes on merge requests and issues

See merge request gitlab/gitlabhq!3137

Filter out old system notes for epics in notes api endpoint response

See merge request gitlab/gitlabhq!3224

Add direct upload support for personal snippets

See merge request gitlab/gitlabhq!3226

Fix HTML injection for label description

See merge request gitlab/gitlabhq!3250

Fix DNS rebind vulnerability for JIRA integration

See merge request gitlab/gitlabhq!3266

Limit the size of issuable description and comments

See merge request gitlab/gitlabhq!3267

Require a captcha after unique failed logins from the same IP

See merge request gitlab/gitlabhq!3270

Permission fix for MergeRequestsController#pipeline_status

See merge request gitlab/gitlabhq!3274

Enforce max chars and max render time in markdown math

See merge request gitlab/gitlabhq!3277

Project visibility restriction bypass

See merge request gitlab/gitlabhq!3306

Prevent disclosure of merge request id via email

See merge request gitlab/gitlabhq!3313

Add merge note type as cross reference

See merge request gitlab/gitlabhq!3319

admin_group authorization for Groups::RunnersController

See merge request gitlab/gitlabhq!3325

Restrict MergeRequests#test_reports to authenticated users with read-access on Builds

See merge request gitlab/gitlabhq!3329

Clear reset_password_tokens when login (email or username) change

See merge request gitlab/gitlabhq!3334

Introduce JobActivity limit for alive jobs

Closes gitlab-ee#376

See merge request gitlab/gitlabhq!3339

Re-escape the whole HTML content when finding HTML references

See merge request gitlab/gitlabhq!3340

Avoid exposing unaccessible repo data upon GFM post processing

See merge request gitlab/gitlabhq!3344

DNS Rebind SSRF in Kubernetes Integration

See merge request gitlab/gitlabhq!3345

Send TODOs for comments on commits correctly

See merge request gitlab/gitlabhq!3361

Gitaly: ignore git redirects

See merge request gitlab/gitlabhq!3373

[ci skip]

Also change test URL sequest to .test TLD

[ci skip]

[ci skip]

Update dependency @gitlab/svgs to ^1.70.0

See merge request gitlab-org/gitlab-ce!32162

Bump ruby-prof to 1.0.0

See merge request gitlab-org/gitlab-ce!29588

Install Unleash Client Gem

See merge request gitlab-org/gitlab-ce!32065

Backport expired job artifact trait

See merge request gitlab-org/gitlab-ce!32179

Add helpers to exactly undo cleanup_concurrent_column_rename

See merge request gitlab-org/gitlab-ce!32183

- Also add helper to undo rename_column_concurrently.

This is significant improvement over the previous releases:
https://github.com/ruby-prof/ruby-prof/blob/master/CHANGES

Preload tags when loading Ci::Pipeline

Closes #60925

See merge request gitlab-org/gitlab-ce!32149

Fix Serverless entry page layout

Closes #64764

See merge request gitlab-org/gitlab-ce!32029

Enable line charts in dashbaord panels and embedded charts

Closes #66073

See merge request gitlab-org/gitlab-ce!31920