Make it harder to delete issuables accidentally

Closes #62387

See merge request gitlab-org/gitlab-ce!32376

Use image proxy to mitigate stealing ip addresses

Closes #2812

See merge request gitlab/gitlabhq!2926

Ensure only authorised users can create notes on merge requests and issues

See merge request gitlab/gitlabhq!3137

Filter out old system notes for epics in notes api endpoint response

See merge request gitlab/gitlabhq!3224

Add direct upload support for personal snippets

See merge request gitlab/gitlabhq!3226

Fix HTML injection for label description

See merge request gitlab/gitlabhq!3250

Fix DNS rebind vulnerability for JIRA integration

See merge request gitlab/gitlabhq!3266

Limit the size of issuable description and comments

See merge request gitlab/gitlabhq!3267

Require a captcha after unique failed logins from the same IP

See merge request gitlab/gitlabhq!3270

Permission fix for MergeRequestsController#pipeline_status

See merge request gitlab/gitlabhq!3274

Enforce max chars and max render time in markdown math

See merge request gitlab/gitlabhq!3277

Project visibility restriction bypass

See merge request gitlab/gitlabhq!3306

Prevent disclosure of merge request id via email

See merge request gitlab/gitlabhq!3313

Add merge note type as cross reference

See merge request gitlab/gitlabhq!3319

admin_group authorization for Groups::RunnersController

See merge request gitlab/gitlabhq!3325

Restrict MergeRequests#test_reports to authenticated users with read-access on Builds

See merge request gitlab/gitlabhq!3329

Clear reset_password_tokens when login (email or username) change

See merge request gitlab/gitlabhq!3334

Introduce JobActivity limit for alive jobs

Closes gitlab-ee#376

See merge request gitlab/gitlabhq!3339

Re-escape the whole HTML content when finding HTML references

See merge request gitlab/gitlabhq!3340

Avoid exposing unaccessible repo data upon GFM post processing

See merge request gitlab/gitlabhq!3344

DNS Rebind SSRF in Kubernetes Integration

See merge request gitlab/gitlabhq!3345

Send TODOs for comments on commits correctly

See merge request gitlab/gitlabhq!3361

Gitaly: ignore git redirects

See merge request gitlab/gitlabhq!3373

Add a close issue slack slash command

See merge request gitlab-org/gitlab-ce!32150

Adds a slash command in slach for closing issues. See
https://docs.gitlab.com/ee/integration/slash_commands.html
for documentation on the wider feature set.

CE: Update the ES indexer to v1.3.0

See merge request gitlab-org/gitlab-ce!32406

Previously submitting a DELETE request to an issuable URL would be
enough to destroy it, but this should require human confirmation.  We
now require that the `destroy_confirm` parameter is set to a truthy
value before this can complete.

In addition, we log a Sentry error if a deletion arrived without
confirmation.

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/62387

fix: show preferred commit email in empty project page

See merge request gitlab-org/gitlab-ce!32182

Bring text mail for new issue & MR more in line

See merge request gitlab-org/gitlab-ce!32254

Revert "Cache branch and tag names as Redis sets"

See merge request gitlab-org/gitlab-ce!32408

Fix dropdown closing when mouseup is outside

See merge request gitlab-org/gitlab-ce!32084

Use new location for gitlab-runner helm charts

See merge request gitlab-org/gitlab-ce!32384

make test of note app with comments disabled dry

Closes #62673

See merge request gitlab-org/gitlab-ce!32383

Resolve "Install specific visual review tools NPM package version"

Closes #66766

See merge request gitlab-org/gitlab-ce!32404

Remove the caret from the visual-review-tools
version so that we don't accidentally
introduce bugs on new releases.

Add custom endpoint for new registrations

See merge request gitlab-org/gitlab-ce!32233