Fix https://gitlab.com/gitlab-org/gitlab-ce/issues/42157
Fix https://gitlab.com/gitlab-org/gitlab-ce/issues/41989

Fix bug in security release with deploy keys migration

See merge request gitlab-org/gitlab-ce!16531

Further simplify app/views/projects/buttons/_dropdown.html.haml

See merge request gitlab-org/gitlab-ce!16503

Backport 10.3.4 security fixes into master

See merge request gitlab-org/gitlab-ce!16509

Open visibility help in new tab

Closes #39591

See merge request gitlab-org/gitlab-ce!16268

Resolve "Closed issue label in todo's styling is difficult to read"

Closes #41874

See merge request gitlab-org/gitlab-ce!16414

Resolve "Allow toggling of performance bar in development"

Closes #42006

See merge request gitlab-org/gitlab-ce!16495

Revert "Merge branch 'pre-commit-prettier' into 'master'"

See merge request gitlab-org/gitlab-ce!16217

The performance bar is still displayed by default in development.
Signed-off-by: Rémy Coutable <remy@rymai.me>

Fast blank can speed things up. Spotify uses it as well…

See merge request gitlab-org/gitlab-ce!16468

Add view elements to deploy keys pages

See merge request gitlab-org/gitlab-ce!16464

Resolve "Projects dropdown width and height shrinked, causes scrollbars wrapping around"

Closes #42035

See merge request gitlab-org/gitlab-ce!16507

Resolve "Enable ordering and sorting for the Deployments API"

Closes #41118

See merge request gitlab-org/gitlab-ce!16396

Fix JS bundle not running on the Cluster update/destroy pages -- CE backport

Closes gitlab-ee#4378

See merge request gitlab-org/gitlab-ce!16506

Remove unused methods from Gitlab::Git

See merge request gitlab-org/gitlab-ce!16494

Improved performance of merge requests target branch dropdown

See merge request gitlab-org/gitlab-ce!16428

Set target_branch to the ref branch when creating MR from issue

Closes #41727

See merge request gitlab-org/gitlab-ce!16422

Keep subscribers when promoting labels to group labels

Closes #37199

See merge request gitlab-org/gitlab-ce!16343

Resolve "Download button in pipelines table has wrong height"

Closes #41920 and #38653

See merge request gitlab-org/gitlab-ce!16488

Fix running manual action tooltip

Closes #41418

See merge request gitlab-org/gitlab-ce!16489

Adds sorting to deployments API through the `order_by` and sort
`fields`.

Resolve "Remove "remaining" word from artifacts information in job's page sidebar"

Closes #41929

See merge request gitlab-org/gitlab-ce!16405

Add missing 9.5.10 CHANGELOG entries

See merge request gitlab-org/gitlab-ce!16512

[ci skip]

[10.3] Prevent login with disabled OAuth providers

See merge request gitlab/gitlabhq!2296

(cherry picked from commit 4936650427ffc88e6ee927aedbb2c724d24b094c)

a0f9d222 Prevents login with disabled OAuth providers

Port of [10.2] Sanitizes IPython notebook output

See merge request gitlab/gitlabhq!2285

(cherry picked from commit 1c46e031c70706450a8e0ae730f4c323b72f9e4c)

aac035fe Port of [10.2] Sanitizes IPython notebook output

[10.3] Fix RCE via project import mechanism

See merge request gitlab/gitlabhq!2294

(cherry picked from commit dcfec507d6f9ee119d65a832393e7c593af1d3b2)

86d75812 Fix RCE via project import mechanism

Merge branch '41293-fix-command-injection-vulnerability-on-system_hook_push-queue-through-web-hook' into 'security-10-3'

Don't allow line breaks on HTTP headers

See merge request gitlab/gitlabhq!2277

(cherry picked from commit 7fc0a6fc096768a5604d6dd24d7d952e53300c82)

073b8f9c Don't allow line breaks on HTTP headers

[10.3] Migrate `can_push` column from `keys` to `deploy_keys_project`

See merge request gitlab/gitlabhq!2276

(cherry picked from commit f6ca52d31bac350a23938e0aebf717c767b4710c)

1f2bd3c0 Backport to 10.3