Check merge requests read permissions before showing them in the pipeline widget

Closes #60

See merge request gitlab-org/security/gitlab!207

Forbid trigger pipeline requests with Gitlab-Event header

Closes #61

See merge request gitlab-org/security/gitlab!216

Prevent XSS in admin grafana url setting

Closes #25

See merge request gitlab-org/security/gitlab!218

Run badge images through asset proxy

Closes #33

See merge request gitlab-org/security/gitlab!232

This allows us to proxy URLs without going through
the HTML filter

Recalculate ProjectAuthorizations

Closes #75

See merge request gitlab-org/security/gitlab!272

* Validate the grafana URL setting to ensure it is a valid URL and does
not contain javascript.
* Add a rel='noopener noreferrer' attribute to the link on the frontend
so that when the link is opened in a new tab, it will not be able to
control the tab from which it was opened.
* Use the system_hook_validator for grafana_url since it is an admin
setting.
* Add migration to remove any javascript URLs from
application_settings.grafana_url.
* Add a blocked_message option to addressable_url_validator. The option
allows a custom error message to be added if the URL is blocked.
* Add a parse_url method to Gitlab::Util which returns an
Addressable::URI object.
* Add changelog entry.

Fix fixtures for Error Tracking Web UI

See merge request gitlab-org/security/gitlab!293

Signed-off-by: Takuya Noguchi <takninnovationresearch@gmail.com>

Move interest in contributing an app to the end of the app list

See merge request gitlab-org/gitlab!26180

Update GitLab Packages

See merge request gitlab-org/gitlab!26175

199134 - Update severity badges

See merge request gitlab-org/gitlab!25489

https://gitlab.com/gitlab-org/gitlab/issues/199134

Disable ci variables ff

See merge request gitlab-org/gitlab!26020

Add skeleton loaders to container registry

See merge request gitlab-org/gitlab!25994

- skeleton loader
- adjust tests

Ported existing spec from karma to jest

See merge request gitlab-org/gitlab!25934

https://gitlab.com/gitlab-org/gitlab/-/merge_requests/25934

Create a vulnerability-list component

See merge request gitlab-org/gitlab!25927

- Adds the dumb component for the vulnerability table
- Adds a smart wrapper around the above component
- Removes the haml table and replaces it with a loading state
- Adds pagination to the vue table
- Adds the alert component error state
- Hooks up the HAML data to the app

Group Deploy Tokens interface

See merge request gitlab-org/gitlab!24102

Added model and rspecs.
Updated DeployToken model associations.

Remove Puma notices from AdminArea banner

See merge request gitlab-org/gitlab!26137

Allow chart descriptions for Insights

Closes #11221

See merge request gitlab-org/gitlab!25686

Remove un accessible links from embded dashboards context menu

Closes #207184

See merge request gitlab-org/gitlab!25892

Update a11y testing docs to reflect current behavior

See merge request gitlab-org/gitlab!25906

Add docs for idempotent workers

Closes gitlab-com/gl-infra/scalability#179

See merge request gitlab-org/gitlab!25551

This mostly explains how to set a worker as
idempotent and add tests for it.

Create snippet repository content

See merge request gitlab-org/gitlab!23953

Fixes namespace_id for user with no groups import

See merge request gitlab-org/gitlab!26038

In the same operation where the snippet and
its repository is created, commit the file
into it.

Include tasks for tech evaluation template

See merge request gitlab-org/gitlab!26084

Code Review Analytics: Remove class from empty state

See merge request gitlab-org/gitlab!26155

Replace ACE with Monaco for Snippets editing/creation

Closes #198604

See merge request gitlab-org/gitlab!25465