[master] SSRF - Scan Internal Ports and GCP/AWS endpoints

See merge request gitlab/gitlabhq!2689

[master] Prevent private snippet from being embeddable

See merge request gitlab/gitlabhq!2692

[master] Escape label and milestone titles to prevent XSS in GFM autocomplete

See merge request gitlab/gitlabhq!2693

[master] Guest users have access to all Job information via the API

See merge request gitlab/gitlabhq!2717

[master] SSRF in project imports with LFS

See merge request gitlab/gitlabhq!2720

[master] Group Ex-Maintainer Could maintain Access to Project's Source Code/Jobs/Pipelines/Artifacts if it had Shared Group Runner Configured

See merge request gitlab/gitlabhq!2721

[ci skip]

Don't hide CI dropdown behind diff summary

See merge request gitlab-org/gitlab-ce!24014

Update condition to visibility collaboration status text, #44642.

Closes #44642

See merge request gitlab-org/gitlab-ce!23104

Occurs on a repository commit page

Support both 0 and NULL lock_versions

See merge request gitlab-org/gitlab-ce!24050

Add kubeclients stub methods on `KubernetesHelpers`

See merge request gitlab-org/gitlab-ce!24054

Fix timeout issues retrieving branches via API

Closes #55724

See merge request gitlab-org/gitlab-ce!24034

Stub methods were added for:
- GET service account
- PUT service account
- GET role binding
- PUT role binding

Fix tooltip titles for pipeline flags

See merge request gitlab-org/gitlab-ce!24027

Resolve "Redesign project lists UI: Further improvements"

Closes #55669

See merge request gitlab-org/gitlab-ce!24011

47d4890d changed the order of pagination so that the full list of
branches would be passed to Gitaly to determine which ones had been
merged, but this operation can timeout for large repositories with
many branches. We only need to determine whether the found branches have
been merged, so limit the scan to those.

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/55724

Removing workhorse_set_content_type feature flag

See merge request gitlab-org/gitlab-ce!23930

Use system paths for appearance logos

Closes gitlab-ee#6778

See merge request gitlab-org/gitlab-ce!24024

Considerably improve the loading time on merge request's discussion page

Closes #52950

See merge request gitlab-org/gitlab-ce!23857

Handle nil terminals in Clusters::Platforms::Kubernetes

Closes #55551

See merge request gitlab-org/gitlab-ce!23925

Add % prefix to milestone reference link text

Closes #53907

See merge request gitlab-org/gitlab-ce!23928

Reorder sidebar menu item for group clusters

Closes #55536

See merge request gitlab-org/gitlab-ce!24001

Bump CarrierWave to 1.3.0 and remove monkey patches

See merge request gitlab-org/gitlab-ce!24019

Return an ApplicationSetting in CurrentSettings

See merge request gitlab-org/gitlab-ce!23766

Fix clone dropdown parent inheritance issues in HAML

See merge request gitlab-org/gitlab-ce!24029

Add word-break to issue title to fix edit button disspearing

Closes #55484

See merge request gitlab-org/gitlab-ce!23948

Using find_elements instead of all_elements

Closes gitlab-org/quality/staging#18

See merge request gitlab-org/gitlab-ce!23977

Merge remote-tracking branch 'upstream/master' into 54953-error-500-viewing-merge-request-due-to-nil-commit_email_hostname

* upstream/master: (115 commits)
  [CE] Speed up login page usage
  Add new line and comments
  Fix the seeder 24_forks.rb cannot find public project
  Milestones on community contribution issues
  Removed Gitlab Upgrader found in /lib/gitlab/upgrader.rb
  Fix and move specs into admin_disables_git_access_protocol_spec.rb
  Fix HTTP/SSH clone panel for mobile
  Add spec for HTTP/SSH clone panel
  Fix missing Git clone button when protocol restriction setting enabled
  Fix deprecation: Using positional arguments in integration tests
  Extend override check to also check arity
  Update tm cli version
  Bump Gitaly version to v1.12.0
  Add @dbalexandre to CODEOWNERS
  Update verbiage for clarity
  Change group-cluster beta to regular note
  Change alpha states to use note instead of warning
  Update registry section. Update serverless.yaml formatting
  Clarify obtaining application URL
  Add @godfat to CODEOWNERS
  ...

Resolve "Extend `override` check to also check arity"

Closes #42125

See merge request gitlab-org/gitlab-ce!23498

The change in https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/24015
caused some parent relationships to be incorrect. This caused a failure
in the EE failure the Geo button was added because the modal stopped
showing.

[CE] Speed up login page usage

See merge request gitlab-org/gitlab-ce!24021