We reference the `saas_user_caps` feature flag inside
`app/views/groups/settings/_permissions.html.haml` even though it is a
EE feature. To avoid CE failures, move this feature flag into the CE
directory.

Sample failure:
https://gitlab.com/gitlab-org/gitlab-foss/-/jobs/1538073660

Fix visibility reference check

See merge request gitlab-org/gitlab!68174

Remove subtransaction from OverwriteProjectService

See merge request gitlab-org/gitlab!69079

Remove "not_used" and add "active" metric statuses.

See merge request gitlab-org/gitlab!68592

Add missing GraphQL ids

See merge request gitlab-org/gitlab!68948

Update list of forbidden tables when creating indexes

See merge request gitlab-org/gitlab!68913

Docs: remove duplicated "project bot user" section

See merge request gitlab-org/gitlab!69033

When all references in a system note are checked, it's not reliable to
check if there was any not-visible reference returned by an individual
parser because that reference could be satisfied by another parser.

Instead we check if in the end all nodes were visible.

Changelog: fixed

Enable `assumeImmutableResults` in test-case create form

See merge request gitlab-org/gitlab!68971

Removes load_balancing_for_expire_job_cache_worker FF

See merge request gitlab-org/gitlab!69004

Update Content Editor Packages

See merge request gitlab-org/gitlab!69081

Use linear version of groups_including_descendants_by

See merge request gitlab-org/gitlab!68835

Group Settings Default initial branch h4 expand

See merge request gitlab-org/gitlab!68667

Require a LoadBalancer for service discovery

See merge request gitlab-org/gitlab!68856

Fetch project capacity and usage items for all types of storage

See merge request gitlab-org/gitlab!68741

Click on 1st button in cluster health dashboard spec

See merge request gitlab-org/gitlab!68722

Fix old occurrences of QA::Support::Api

See merge request gitlab-org/gitlab!68992

Enable `assumeImmutableResults` in project merge options

See merge request gitlab-org/gitlab!69066

Update CI/CD index and get started pages

See merge request gitlab-org/gitlab!69046

Use Gitlab::Ci::Lint in /ci/lint API endpoint

See merge request gitlab-org/gitlab!68860

There is no need for requires_new: true here because any error in the
inner transactions are not rescued anyway so the parent transaction will
still be aborted

Update Gitaly version

See merge request gitlab-org/gitlab!69074

Remove scannerType argument from Mutations::Vulnerabilities::Create

See merge request gitlab-org/gitlab!68951

Refactor push rules to allow for bulk checks

See merge request gitlab-org/gitlab!68836

Update network policy request

See merge request gitlab-org/gitlab!68990

Adds missing ids to avoid caching issues

Changelog: fixed

Move "Allow users to request access" setting to a new subsection "Membership"

See merge request gitlab-org/gitlab!68544

Enable the FF ci_idempotent_pipeline_process_worker by default

See merge request gitlab-org/gitlab!69068

Translate "by <AVATAR LINK>" in Environments

See merge request gitlab-org/gitlab!69009

Update Gitaly version

See merge request gitlab-org/gitlab!69070

Update GitLab Shell to v13.21.0

See merge request gitlab-org/gitlab!68985

The FileSizeCheck push rule loads all new blobs for a given change and
checks whether any of these blobs is bigger than a certain threshold.
This push rule is quite expensive: loading new blobs requires a revwalk
of all preexisting references and thus scales with the number of refs in
a repository. This may easily take a few dozen seconds to compute, and
repeating this computation for each change doesn't help either.

Refactor the FileSizeCheck to be implemented atop the BaseBulkChecker
such that we can fix this shortcoming in the future: instead of loading
blobs for each change, we may load them once for all changes. While this
would already amortize the costs because we have to perform the walk of
negative refs once only, we can eventually tweak this even further and
use the quarantine directory to enumerate all pushed objects directly
without doing a revwalk at all. This optimization will bring down the
time to load blobs from dozens of seconds to a few milliseconds.

Note that this commit doesn't yet change behaviour, but instead only
prepares the infrastructure to allow for batch loading. Batch loading
will require some additional changes to our infrastructure first, which
will be done in a separate patch series.

Deny access for repository coverage info for guests

See merge request gitlab-org/gitlab!68947