When the `changes` passed to `GitAccess` are the literal string `_any`,
which indicates that this is a pre-authorization check, we now check
whether the user can push to any branch in the project in question,
instead of running the per-change check with `oldrev` `_any`, `newrev`
`nil`, and `ref` `nil`.

Update gitlab runner helm chart to 0.1.43

See merge request gitlab-org/gitlab-ce!24083

Bump Ruby on Rails to 5.0.7.1

See merge request gitlab-org/gitlab-ce!23396

Resolve "Show the activity filter dropdown in discussion tab only, show all discussions always in changes tab"

Closes #54206

See merge request gitlab-org/gitlab-ce!24082

Resolve "Update `Milestone` sort to say say `Milestone due date`"

Closes #55369

See merge request gitlab-org/gitlab-ce!24080

Use directories.new when getting S3 directory

Closes gitlab-com/gl-infra/infrastructure#5807

See merge request gitlab-org/gitlab-ce!23981

Resolve "User activity is stuck loading when there is none"

Closes #55755

See merge request gitlab-org/gitlab-ce!24063

Upgrade GitLab QA image to Ruby 2.5

See merge request gitlab-org/gitlab-ce!24091

[master] Escape html entities when no label found

See merge request gitlab/gitlabhq!2706

[master] Secret CI variables can exposed by creating a tag with the same name as an existing protected branch

See merge request gitlab/gitlabhq!2596

[master] Set URL rel attribute for broken URLs

See merge request gitlab/gitlabhq!2695

[master] Security todos not redacted for guests

See merge request gitlab/gitlabhq!2697

Remove gem install bundler from Docker-based Ruby environments

Closes #55838

See merge request gitlab-org/gitlab-ce!24093

log text_filter arg of find_element

Closes gitlab-org/quality/nightly#52

See merge request gitlab-org/gitlab-ce!24064

Discussion filters will be hidden on Commits, Pipelines, and
Changes tabs on merge requests page.

This does not affect its behavior on issues page

Updating link to correctly point to environment scope docs

See merge request gitlab-org/gitlab-ce!24023

Update mysql.md - broken link

See merge request gitlab-org/gitlab-ce!23988

Explain how to use kaniko with a registry with a custom certificate

Closes #53656

See merge request gitlab-org/gitlab-ce!23875

[master] Adds validation to check if user can read project

See merge request gitlab/gitlabhq!2645

[master] Validate projects in MR build service

See merge request gitlab/gitlabhq!2678

[master] Project guests no longer are able to see refs page

See merge request gitlab/gitlabhq!2685

[master] SSRF - Scan Internal Ports and GCP/AWS endpoints

See merge request gitlab/gitlabhq!2689

[master] Prevent private snippet from being embeddable

See merge request gitlab/gitlabhq!2692

[master] Escape label and milestone titles to prevent XSS in GFM autocomplete

See merge request gitlab/gitlabhq!2693

[master] Guest users have access to all Job information via the API

See merge request gitlab/gitlabhq!2717

[master] SSRF in project imports with LFS

See merge request gitlab/gitlabhq!2720

[master] Group Ex-Maintainer Could maintain Access to Project's Source Code/Jobs/Pipelines/Artifacts if it had Shared Group Runner Configured

See merge request gitlab/gitlabhq!2721

bundler gem has been included in the Docker official Ruby image since 2.1.
Signed-off-by: Takuya Noguchi <takninnovationresearch@gmail.com>

Fix #55740:  Use the '--no-document' option instead of the 'gem' tool's deprecated options

Closes #55740

See merge request gitlab-org/gitlab-ce!24049

Fix commit SHA not showing in merge request compare dropdown

Closes #55822

See merge request gitlab-org/gitlab-ce!24084

Upgrade Omniauth and JWT gems to switch away from Google+ API

Closes #55668

See merge request gitlab-org/gitlab-ce!24068

`--no-rdoc` and `--no-ri` have been deprecated since RubyGems 2.0:
https://github.com/rubygems/rubygems/blob/v2.0.0/History.txt#L43

They were finally removed in a recent release:
https://github.com/rubygems/rubygems/pull/2354

GitLab is now shipping with Ruby 2.5.3, so we should make the
version consistent for the QA image as well.