* master: (106 commits)
  Merge branch '10-7-security_issue_42029' into 'security-10-7'
  Merge branch 'security-45689-fix-archive-cache-bug' into 'security-10-7'
  Add developer documentation on diff handling and limits
  Use fast timeouts for Gitaly FooInProgress RPC's
  Use GitLab Pages v0.9.1
  Docs: review product categories in doc/README
  Define custom base controller for Doorkeeper
  Use grpc 1.11.0
  Update index.md
  Makes namespaceless project destroy worker spec not depend on a specific migration version
  Docs: update Pages for newbies
  Remove legacy storage path call
  InvaildStateError -> InvalidStateError
  Don't automatically remove artifacts for pages jobs after pages:deploy has run
  Resolve "Add how to use nip.io to Auto DevOps and Kubernetes documentation"
  Fix example config miss-alignment in uploads.object_store.connection
  Remove IDE image upload spec
  Add gitlab-pages admin ping rake task
  Don't run JS lint for QA either
  Add sha filter to list pipelines
  ...

Sanitize user name to avoid XSS attacks

See merge request gitlab/gitlabhq!2373

Serve archive requests with the correct file in all cases (10.7)

See merge request gitlab/gitlabhq!2376

Skip `authenticate_user!` for Doorkeeper controllers

Closes #44639

See merge request gitlab-org/gitlab-ce!18599

Use fast timeouts for Gitaly FooInProgress RPC's

See merge request gitlab-org/gitlab-ce!18655

Add developer documentation on diff handling and limits

Closes #43614

See merge request gitlab-org/gitlab-ce!18269

Use grpc 1.11.0

See merge request gitlab-org/gitlab-ce!18652

Backports EE changes from disabling branch unprotect UI

See merge request gitlab-org/gitlab-ce!18262

Don't automatically remove artifacts for pages jobs after pages:deploy has run

Closes #45481

See merge request gitlab-org/gitlab-ce!18628

Use GitLab Pages v0.9.1

Closes #45639

See merge request gitlab-org/gitlab-ce!18654

Makes namespaceless project destroy worker spec not depend on a specific migration version

See merge request gitlab-org/gitlab-ce!18650

Docs: review product categories in doc/README

Closes #45496

See merge request gitlab-org/gitlab-ce!18517

Remove legacy storage path call

See merge request gitlab-org/gitlab-ce!18598

Since we only need the `can?` view helpers there, it's better to
include those in a separate controller.

If we inherit from `ApplicationController` we also need to deal with
authentication, that needs to be done in some, but not all doorkeeper controllers.

Update index.md

See merge request gitlab-org/gitlab-ce!18450

Ports omniauth-jwt gem onto GitLab OmniAuth Strategies suite

See merge request gitlab-org/gitlab-ce!18580

Docs: update Pages for newbies

See merge request gitlab-org/gitlab-ce!18629

Resolve "Members invitations scheduled before commit"

Closes #45572

See merge request gitlab-org/gitlab-ce!18538

Move NotificationService calls to Sidekiq

Closes #43106

See merge request gitlab-org/gitlab-ce!18535

Storage shards should only be used, the exact paths are the
responsibilty of Gitaly. This will create deprecation warning, and in
this instance the path is initialized, but never used so it could be
removed.

Add sha filter to list pipelines

Closes #44880

See merge request gitlab-org/gitlab-ce!18125

Fix example config miss-alignment in uploads.object_store.connection

Closes gitlab-development-kit#342

See merge request gitlab-org/gitlab-ce!18622

Resolve "Add how to use nip.io to Auto DevOps and Kubernetes documentation"

Closes #45561

See merge request gitlab-org/gitlab-ce!18494

Remove IDE image upload spec

Closes #45045

See merge request gitlab-org/gitlab-ce!18617

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/45045

Remove comma from the time system notes

See merge request gitlab-org/gitlab-ce!18593

Repository#exists? can only be queried with Gitaly

Closes gitaly#314

See merge request gitlab-org/gitlab-ce!18567

Don't run JS lint report for QA

See merge request gitlab-org/gitlab-ce!18621