Removes load_balancing_for_expire_job_cache_worker FF

See merge request gitlab-org/gitlab!69004

Update Content Editor Packages

See merge request gitlab-org/gitlab!69081

Use linear version of groups_including_descendants_by

See merge request gitlab-org/gitlab!68835

Group Settings Default initial branch h4 expand

See merge request gitlab-org/gitlab!68667

Require a LoadBalancer for service discovery

See merge request gitlab-org/gitlab!68856

Fetch project capacity and usage items for all types of storage

See merge request gitlab-org/gitlab!68741

Click on 1st button in cluster health dashboard spec

See merge request gitlab-org/gitlab!68722

Fix old occurrences of QA::Support::Api

See merge request gitlab-org/gitlab!68992

Enable `assumeImmutableResults` in project merge options

See merge request gitlab-org/gitlab!69066

Update CI/CD index and get started pages

See merge request gitlab-org/gitlab!69046

Use Gitlab::Ci::Lint in /ci/lint API endpoint

See merge request gitlab-org/gitlab!68860

Update Gitaly version

See merge request gitlab-org/gitlab!69074

Remove scannerType argument from Mutations::Vulnerabilities::Create

See merge request gitlab-org/gitlab!68951

Refactor push rules to allow for bulk checks

See merge request gitlab-org/gitlab!68836

Update network policy request

See merge request gitlab-org/gitlab!68990

Move "Allow users to request access" setting to a new subsection "Membership"

See merge request gitlab-org/gitlab!68544

Enable the FF ci_idempotent_pipeline_process_worker by default

See merge request gitlab-org/gitlab!69068

Translate "by <AVATAR LINK>" in Environments

See merge request gitlab-org/gitlab!69009

Update Gitaly version

See merge request gitlab-org/gitlab!69070

Update GitLab Shell to v13.21.0

See merge request gitlab-org/gitlab!68985

The FileSizeCheck push rule loads all new blobs for a given change and
checks whether any of these blobs is bigger than a certain threshold.
This push rule is quite expensive: loading new blobs requires a revwalk
of all preexisting references and thus scales with the number of refs in
a repository. This may easily take a few dozen seconds to compute, and
repeating this computation for each change doesn't help either.

Refactor the FileSizeCheck to be implemented atop the BaseBulkChecker
such that we can fix this shortcoming in the future: instead of loading
blobs for each change, we may load them once for all changes. While this
would already amortize the costs because we have to perform the walk of
negative refs once only, we can eventually tweak this even further and
use the quarantine directory to enumerate all pushed objects directly
without doing a revwalk at all. This optimization will bring down the
time to load blobs from dozens of seconds to a few milliseconds.

Note that this commit doesn't yet change behaviour, but instead only
prepares the infrastructure to allow for batch loading. Batch loading
will require some additional changes to our infrastructure first, which
will be done in a separate patch series.

Deny access for repository coverage info for guests

See merge request gitlab-org/gitlab!68947

It's already enabled on GitLabcom

This commit solves https://gitlab.com/gitlab-org/gitlab/-/issues/338568
It enables `assumeImmutableResults` in the project merge options.

Add personalization questions to New Group page

See merge request gitlab-org/gitlab!67249

Repository coverage information should be accessible
for Reporter+ role only

Changelog: security
EE: true

Update db:migrate-from-previous-major-version

See merge request gitlab-org/gitlab!68754

Migrate browser_spec to Jest

See merge request gitlab-org/gitlab!69011

Fix linked pipelines downstream counter badge link [RUN AS-IF-FOSS]

See merge request gitlab-org/gitlab!68962

Add a cleanup job for docs review apps

See merge request gitlab-org/gitlab!68718

Update the broken merge-request-types link on Dangerfile

See merge request gitlab-org/gitlab!69057

The PushRuleChecks are implemented as BaseSingleChecker, where they
always operate on a single change only. This is inefficient for a subset
of push rules, most namely for the file size rules: we could load all
blobs via a single RPC call and inspect their sizes instead of doing an
RPC call per change.

Prepare for this change by converting the PushRules to be implemented as
BaseBulkChecker. For now, nothing really changes: we just deconstruct
the bulk changes into SingleChangeAccesses and then pass those into our
subrules. But with this change in place, we can easily convert subsets
of our push rules to use batching.