Move project repositories between namespaces when renaming users (9.5)

See merge request gitlab/gitlabhq!2202

Escape user name in filtered search bar

See merge request gitlab/gitlabhq!2195

[9.5] Prevent a persistent XSS in user-provided markup

See merge request gitlab/gitlabhq!2203

Treat newlines as separators for pipeline emails service

Closes #37759

See merge request gitlab-org/gitlab-ce!14250

Fix arbitrary redirect location vulnerability

See merge request gitlab/gitlabhq!2192

Fix arbitrary redirect location vulnerability

See merge request gitlab/gitlabhq!2192

[ci skip]

Fix fork button being disabled for users who can fork to group

Closes #38462

See merge request gitlab-org/gitlab-ce!14551

[ci skip]

Fix gitlab rake:import:repos task for 9.5.x

See merge request gitlab-org/gitlab-ce!14639

This backports !14597 for the 9.5.x branch.

Because of a change in GitLab 9.5.4 to prevent users from assuming control of
a repository already on disk, the import task broke. Imports would fail with
the message, "There is already a repository with that name on disk".

This change skips the validation when the import is done from the
command-line.

Closes #37682

[ci skip]

Handle error when fetching ref for MR with deleted source branch

See merge request gitlab-org/gitlab-ce!14550

Upgrade Nokogiri because of CVE-2017-9050

See merge request gitlab-org/gitlab-ce!14427

Update "x/x discussions resolved" checkmark icon to be green when all discussions resolved

Closes #37465

See merge request gitlab-org/gitlab-ce!14255

Fix MR widget with external CI services/integrations

Closes #33287

See merge request gitlab-org/gitlab-ce!13977

Fix MR widget with ready to merge buttons/controls at mobile breakpoint

Closes #37259

See merge request gitlab-org/gitlab-ce!14242

If the ref doesn't exist, and the source branch is deleted, we can't get it back
easily. Previously, we ignored this error by shelling out, so replicate that
behaviour.

[9.5] Prevent a persistent XSS in user-provided markup

See merge request gitlab/gitlabhq!2203

Move project repositories between namespaces when renaming users (9.5)

See merge request gitlab/gitlabhq!2202

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/38272

Escape user name in filtered search bar

See merge request gitlab/gitlabhq!2195

Upgrade Nokogiri because of CVE-2017-9050

See merge request gitlab-org/gitlab-ce!14427

[ci skip]

Resolve "New issue from failed build no longer links to failed build"

Closes #36907

See merge request !13790

Fix: GPG tmp dir removal race condition

Ignore any errors when removing the tmp directory, as we may run into a
race condition:
The `gpg-agent` agent process may clean up some files as well while
`FileUtils.remove_entry` is iterating the directory and removing all its
contained files and directories recursively, which could raise an error.

Closes #36998

See merge request !14194

# Conflicts:
#   db/schema.rb

Fix project feature being deleted when updating project with invalid visibility level

See merge request gitlab-org/gitlab-ce!14235

Merge branch 'fix/sm/37559-pipeline-triggered-through-api-not-showing-trigger-variables' into 'master'

Fix `ci_builds` to have an associated `trigger_request_id`

See merge request !14244