saml/auth_hash: Allow 2FA bypass for SAML 2.0 responses

See merge request gitlab-org/gitlab-ce!22568

Resolve "Add a `/create_merge_request` quick action"

Closes #40085

See merge request gitlab-org/gitlab-ce!22485

Change project cache key to depend on ID instead of full path

Closes #42191

See merge request gitlab-org/gitlab-ce!23135

Improve FF "pick after the 7th" docs

See merge request gitlab-org/gitlab-ce!23185

Externalize strings from `/app/views/projects/environments`

See merge request gitlab-org/gitlab-ce!23210

Externalize strings from `/app/views/u2f`

See merge request gitlab-org/gitlab-ce!23201

Drop default value on status column in deployments table

Closes #53702

See merge request gitlab-org/gitlab-ce!22971

Make the table of tech writers and stages more compact

See merge request gitlab-org/gitlab-ce!23153

[master] Prevent templated services from being imported

See merge request gitlab/gitlabhq!2634

[master] Escape user fullname while rendering autocomplete template to prevent XSS

See merge request gitlab/gitlabhq!2605

Resolve "Incorrect project list order select default label"

Closes #53290

See merge request gitlab-org/gitlab-ce!23058

Resolve "Further UI improvements to Profile "Overview" tab"

Closes #52712

See merge request gitlab-org/gitlab-ce!22977

Stub Rails.application.env_config to prevent spec failures

Closes gitlab-ee#8488

See merge request gitlab-org/gitlab-ce!23222

Change link to help broken link checker

See merge request gitlab-org/gitlab-ce!23220

When we modify env_config, that is on the global Rails.application, and
we need to stub it and allow it to be modified in-place, without
polluting later tests.

When we modify env, then the context is a request, or something else
that only lives for a single spec.

Closes https://gitlab.com/gitlab-org/gitlab-ee/issues/8488

Refine cursor positioning in Markdown Editor for wrap tags.

Closes #54015

See merge request gitlab-org/gitlab-ce!23085

Remove unused partial

See merge request gitlab-org/gitlab-ce!23180

Show what RPC is called in the performance bar

See merge request gitlab-org/gitlab-ce!23140

Update docs for include to mention 'allow requests to local network' requirement

Closes #53595

See merge request gitlab-org/gitlab-ce!23055

Enable even more frozen string for lib/gitlab

See merge request gitlab-org/gitlab-ce!23161

Templated services should only be created by admins and does not
apply to project import/export.

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/54189

Bump nokogiri, loofah, and rack gems for security updates

See merge request gitlab-org/gitlab-ce!23204

Bump ruby_parser to 3.11.0 for Ruby 2.5 compatibility

See merge request gitlab-org/gitlab-ce!23209

Rails5 deprecation: Passing a class as a value in an Active Record query is deprecated

See merge request gitlab-org/gitlab-ce!23164

loofah: CVE-2018-16468:
https://github.com/flavorjones/loofah/issues/154

nokogiri: CVE-2018-14404 and CVE-2018-14567
https://github.com/sparklemotion/nokogiri/blob/master/CHANGELOG.md

rack: CVE-2018-16471
https://github.com/rack/rack/commit/e5d58031b766e49687157b45edab1b8457d972bd

i18n: https://github.com/svenfuchs/i18n/releases

concurrent-ruby: https://github.com/ruby-concurrency/concurrent-ruby/blob/master/CHANGELOG.md

CE port of "qa-staging-15-use-existing-users-ee"

See merge request gitlab-org/gitlab-ce!22864

add guide for creating runbook

See merge request gitlab-org/gitlab-ce!22885

See https://github.com/seattlerb/ruby_parser/blob/master/History.rdoc

Fix typo in js (props, specs)

See merge request gitlab-org/gitlab-ce!23103

Increase rspec parallelization to 50

See merge request gitlab-org/gitlab-ce!23149