Treat API requests from the frontend as web traffic in the rate limiter

See merge request gitlab-org/gitlab!78082

This will allow us to impose stricter rate limits for general API
traffic, without affecting interactive API requests made by the
frontend during normal GitLab usage.

The frontend requests are identified by the inclusion of a CSRF token
in the headers.

Other rate limits that only affect a subset of API requests (e.g. the
Files and Packages APIs, or protected paths) still take precedence,
i.e. requests for these paths will always be matched even if they
include a CSRF token.

Changelog: changed

Add deployment IID to new environments table

See merge request gitlab-org/gitlab!78226

Add npm tests back to the reliable test suite

See merge request gitlab-org/gitlab!78657

Update GitLab Runner Helm Chart to 0.37.1/14.7.0

See merge request gitlab-org/gitlab!78584

Improve the labels on Kubernetes Agent UI

See merge request gitlab-org/gitlab!77845

Add deprecation information to type entry

See merge request gitlab-org/gitlab!78585

Verify in CI that fast unit specs load without errors

See merge request gitlab-org/gitlab!78554

Add e2e tests for cloud activation

See merge request gitlab-org/gitlab!77997

Extract MergeRequestDiffCommit deletions

See merge request gitlab-org/gitlab!75963

Projects will have at least one merge_request_diff_commit for every commit
contained in every MR, which deleting via `project.destroy!` and
cascading deletes may exceed statement timeouts, causing failures.
(see https://gitlab.com/gitlab-org/gitlab/-/issues/346166)

Changelog: fixed

Geo UI - Rename Nodes to Sites

See merge request gitlab-org/gitlab!78310

Fix a broken link in Download security scan outputs section

See merge request gitlab-org/gitlab!78535

Reject MIME parts with unsupported encoding

See merge request gitlab-org/gitlab!77688

Loosen rule to detect cyclical pipelines

See merge request gitlab-org/gitlab!78171

Docs: Add section about preventing tag creation matching branches

See merge request gitlab-org/gitlab!78520

To avoid having tags with the same name as branches, this doc
update shows how we can use protected tags to prevent it.

Show a deployment's IID to ensure users can refer to a specific
deployment easier.

Swap FK merge_trains.pipeline_id to ci_pipelines for LFK

See merge request gitlab-org/gitlab!78568

fix: remove duplicate sentence in  ci_job_token.md

See merge request gitlab-org/gitlab!78674

Add state to trial form

See merge request gitlab-org/gitlab!78484

- for canada and US

Changelog: added
EE: true

Follow-up of https://gitlab.com/gitlab-org/gitlab/-/merge_requests/78543

Fix specs which are incompatible with fast_spec_helper

See merge request gitlab-org/gitlab!78543

Swaps FK for merge_trains.pipeline_id to ci_pipelines

Changelog: changed

Replace usage of find/findAll in ee/spec/frontend/vulnerabilities

See merge request gitlab-org/gitlab!78642

Move addon related data to GraphQL

See merge request gitlab-org/gitlab!78426

Optimize decryption of CI variables

See merge request gitlab-org/gitlab!78440

Merge branch '344365-make-badges-in-app-views-layouts-header-_whats_new_dropdown_item-html-haml-pajamas-compliant' into 'master'

Make badge in _whats_new_dropdown_item partial Pajamas-compliant

See merge request gitlab-org/gitlab!78524

Changelog: changed

Extract container registry page common components

See merge request gitlab-org/gitlab!77833

Remove ci_preload_runner_tags feature flag

See merge request gitlab-org/gitlab!78663

Exclude revoked tokens from agent tokens list

See merge request gitlab-org/gitlab!78420

Swap FK merge_requests.head_pipeline_id to ci_pipelines for LFK

See merge request gitlab-org/gitlab!78566

Split Sidekiq development docs into separate files

See merge request gitlab-org/gitlab!78186

Fix ruby regexp syntax logger class name

See merge request gitlab-org/gitlab!78662

Contributes to https://gitlab.com/gitlab-org/gitlab/-/issues/340366

**Problem**

Golang `mime` package skips processing unsupported encodings (see
https://sourcegraph.com/github.com/golang/go@0fd0639e4c429e147d33bfc42654fcd651f4449f/-/blob/src/mime/mediatype.go?L247).

Because of that workhorse does not incercept the upload and skip
sanitization for filename.

**Solution**

Manually detect the charset of the `filename*` and reject the upload
when charset is unsupported.

Changelog: fixed

Add troubleshooting page to Snowplow guide

See merge request gitlab-org/gitlab!78666