Deny localhost requests on fogbugz importer

See merge request gitlab-org/security/gitlab!295

Ignore empty remote_id params from Workhorse

See merge request gitlab-org/security/gitlab!314

In https://gitlab.com/gitlab-org/security/gitlab-workhorse/-/merge_requests/3
we're changing Workhorse to always send empty values for unused fields,
to avoid any injected client parameters overriding them.

This causes an error in Rails because we're not checking for empty
strings in `remote_id` and attempting to store a remote file:

```
ObjectStorage::RemoteStoreError - Bad file path:
  app/uploaders/object_storage.rb:353:in `cache_remote_file!'
```

Restrict access to project pipeline metrics reports

See merge request gitlab-org/security/gitlab!323

Add permission check for pipeline status of MR

See merge request gitlab-org/security/gitlab!336

Exclude carrierwave remote url methods from import

Closes #97

See merge request gitlab-org/security/gitlab!364

UploadRewriter Path Traversal Security Fix

See merge request gitlab-org/security/gitlab!365

Improve discord messages

See merge request gitlab-org/gitlab!27812

Ensure VSM stage has relative position

See merge request gitlab-org/gitlab!27801

Fix broadcast message rendering

See merge request gitlab-org/gitlab!27755

Revert has_parent? optimization

Closes #36938

See merge request gitlab-org/gitlab!27668

Separate code review, design, group module into own module files

See merge request gitlab-org/gitlab!27860

Attribute background migrations to database category

See merge request gitlab-org/gitlab!27777

Remove state column ignore rule

See merge request gitlab-org/gitlab!27690

Migrate security-dashboard vulnerability mutations specs to Jest

See merge request gitlab-org/gitlab!27286

#30526 (B) [BE] Wiki Events (services)

See merge request gitlab-org/gitlab!26533

Cache ES enabled namespaces and projects

See merge request gitlab-org/gitlab!27348

SELECT query involving `elasticsearch_indexed_projects` table
consumes a lot of resources. The query itself is not slow
(13.224 ms/call), but it happens almost 100 times per second.

This change implements caching of `elasticsearch_indexed_projects` and
`elasticsearch_indexed_namespaces`.

De-duplicate groups_controller spec

See merge request gitlab-org/gitlab!27874

Expose created_at property in Groups API

See merge request gitlab-org/gitlab!27824

Prevent creation of .env file

See merge request gitlab-org/gitlab!21174

Use `license_scanning` licensed feature in tests

See merge request gitlab-org/gitlab!27752

All code related to `license_management` is scheduled
to be deprecated after 13.0 https://gitlab.com/gitlab-org/gitlab/-/issues/8912

Add toggle all discussions button to MRs

Closes #15328

See merge request gitlab-org/gitlab!24670

New button 'Toggle all discussions' next to 'Jump to next unresolved
thread', toggles expanded / not expanded state of all discussions

Add issues to graphQL group endpoint

See merge request gitlab-org/gitlab!27789

Multiple Evidences for a Release

See merge request gitlab-org/gitlab!26509

Part of https://gitlab.com/gitlab-org/gitlab/issues/199065

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/26509

Add notification dot on user avatar

See merge request gitlab-org/gitlab!27626

- prepping for new experiment pipeline

Add rake task for reindexing

See merge request gitlab-org/gitlab!27772

Updating Groups API unit tests and documentation

Migrate spec/javascripts/locale/ to Jest

Closes #194243

See merge request gitlab-org/gitlab!26737

Support V2 Feature Flags GET and POST Controller Actions

See merge request gitlab-org/gitlab!27463

Hide behind feature flag

Remove ignore_column from Package::PackageFile

Closes #197480

See merge request gitlab-org/gitlab!27809

- add issues to group enpoint
- change issues resolver to handle both groups and projects

Add charts to the trigger-build-docs script

See merge request gitlab-org/gitlab!27821