Since Rails 5.0 the `protect_from_forgery` callback doesn't run first by
default anymore. [1]

Instead it gets inserted into callbacks chain where callbacks get
called in order.

This commit forces the callback to run first.

[1]: https://github.com/rails/rails/commit/39794037817703575c35a75f1961b01b83791191

Fall back to the first sign-in tab if the local storage value is bad

See merge request gitlab-org/gitlab-ce!20050

Don't generate `.mo` files

Closes #47979

See merge request gitlab-org/gitlab-ce!20048

If `current_signin_tab` is `#crowd`, then no tab will be active. Fix
this by using the first available tab.

Relates to https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/20049#note_82996324

Resolve "Web IDE "Commit" button should indicate when there's a subsequent step"

Closes #48133

See merge request gitlab-org/gitlab-ce!20030

Since we are only using `.po` files for translation we can shave off
some setup time.

Generating the `mo` files also regenerates the PO-files, including
fuzzy translations. Those cause a lot of bugs, and we don't need them
anymore since the `po` files are generated by an external translation service.

Ignore GitLab API hiccups in scripts/trigger-build

See merge request gitlab-org/gitlab-ce!20038

Merge branch '48159-qa-specs-features-login-ldap_spec-rb-is-failing-after-https-gitlab-com-gitlab-org-gitlab-ce-merge_requests-19964' into 'master'

Resolve "qa/specs/features/login/ldap_spec.rb is failing after https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/19964"

Closes #48159

See merge request gitlab-org/gitlab-ce!20027

Unify flay.rake and gettext.rake from EE

See merge request gitlab-org/gitlab-ce!20041

Notify only merge request unmergeable due to conflict

See merge request gitlab-org/gitlab-ce!19548

Added Wiki Scenario Automation gitlab-qa#263

Closes gitlab-qa#263

See merge request gitlab-org/gitlab-ce!19568

Resolve "Custom logo rendering improperly on sign-in page"

Closes #47964

See merge request gitlab-org/gitlab-ce!20037

Make the stubbed methods for SAML authorize paths more specific

See merge request gitlab-org/gitlab-ce!20009

Backport code from gitlab-ee!6182

See merge request gitlab-org/gitlab-ce!20001

Limit the action suffixes in transaction metrics

See merge request gitlab-org/gitlab-ce!20032

Remove remaining traces of the Allocations Gem

See merge request gitlab-org/gitlab-ce!20029

Highlight cluster settings message

Closes #41274

See merge request gitlab-org/gitlab-ce!19996

Resolve "Date selection dialog broken when creating a new milestone"

Closes #48153

See merge request gitlab-org/gitlab-ce!20033

Signed-off-by: Rémy Coutable <remy@rymai.me>

Use eslint to find unused directives

See merge request gitlab-org/gitlab-ce!19940

This now can happen because can_be_merged? is called
during MR merge_status transition to cannot_be_merged.
It is possible branch_name is invalid.

Revert "Merge branch 'jivl-fix-focused-links-missing-underline' into 'master'"

Closes #48171

See merge request gitlab-org/gitlab-ce!20035

There is still the edge case when 'no commits' changes to 'conflict'
would not trigger notification, which we ignore for now.

Calling can_be_merged? can cause exception (e.g. non-UTF8)
Ignore those by rescueing.

Remove unmergeable_reason as now only conflict is notified

Update spec

Signed-off-by: Rémy Coutable <remy@rymai.me>

Resolve "Milestone labels can be confusing"

Closes #48075

See merge request gitlab-org/gitlab-ce!19980

This reverts merge request !19873

Updates to the `gettext:updated_check`

Closes #48113

See merge request gitlab-org/gitlab-ce!20002

Move mergablility check to Gitaly

Closes gitaly#889

See merge request gitlab-org/gitlab-ce!20019

Fix: Serve favicon image always from the main GitLab domain to avoid issues with CORS

Closes #47802

See merge request gitlab-org/gitlab-ce!19810

In MR https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/15834 we
removed use of the data produced by the Allocations Gem. However, we
never removed the code that just enables tracking of allocations. In
this commit we remove all remaining traces of this Gem.

This makes the output in static analysis a bit more verbose.

Merge branch '47631-operations-kubernetes-option-is-always-visible-when-repository-or-builds-are-disabled' into 'master'

Operations and Kubernetes option should be omitted when repository or builds are disabled

Closes #47631

See merge request gitlab-org/gitlab-ce!19835

The blue shortcut commit button opens the commit interface to
actually perform the commit. The ellipsis indicates the button doesn't
immediately perform the commit.