debian-mirror-gitlab/CHANGELOG.md

Note: This file is automatically generated. Please see the developer documentation for instructions on adding your own entry.

15.8.4 (2023-03-02)

Security (12 changes)

• Using builds metadata to determine debug_mode (merge request)
• Fix pagination limits for Commits API (merge request)
• Mask Google IAP account details in Prometheus integration (merge request)
• Stop Group Transfer Service if SAML Provider or SCIM token is present (merge request)
• Protect Datadog API key by changing Datadog site (merge request)
• Protect integrations' sensitive information exposed via API (merge request)
• Disallow maintainer to create an owner access token (merge request)
• Paste only text content in work items title (merge request)
• Jira DVCS OAuth Open Redirect Vulnerability (merge request)
• Block private personal snippet from unauthorized users (merge request)
• Verify Kroki diagram type (merge request)
• Check read_release permission before showing releases in Tags API (merge request)

15.8.3 (2023-02-15)

Fixed (3 changes)

• Attempt reading schema file instead of a file named #{report_version} (merge request)
• Revert changes on wiki replication/verification legacy code (merge request) GitLab Enterprise Edition
• Revert changes on wiki replication/verification legacy code (merge request) GitLab Enterprise Edition

Changed (1 change)

• Upgrade Alert - Add proper API support (merge request)

15.8.2 (2023-02-10)

No changes.

15.8.1 (2023-01-30)

Security (5 changes)

• Remove parameter validation for registry notification request [15.8] (merge request)
• Add size validation for Chart.yaml during file extraction (merge request)
• Prevent default branches from storing paths (merge request)
• Validate Issuable description max length on update (merge request)
• Security fix dynamic child pipeline zip extraction (merge request)

15.8.0 (2023-01-20)

Added (120 changes)

• Expose user emails via GraphQL (merge request)
• Describe possible solutions for curl 92 HTTP/2 error (merge request)
• Add report abuse category to merge requests (merge request)
• Add storage admin control columns to plan limits table (merge request)
• Add unique index to ci_builds (merge request)
• Add partitioning tmp indexes to ci_sources_pipelines table (merge request)
• Add SCIM Token section to Admin Area for instance-level SCIM (merge request) GitLab Enterprise Edition
• Drop unused index in ci_builds (merge request)
• Use healthStatusUpdated subscription in frontend (merge request) GitLab Enterprise Edition
• Expose ability to import groups without projects (merge request)
• Add an option to select 180 days of data (merge request) GitLab Enterprise Edition
• Add tmp indexes for CI partitioning (merge request)
• Add GraphQL subscription for health status updates (merge request) GitLab Enterprise Edition
• Add dast_pre_scan_verification field to ProfileType (merge request) GitLab Enterprise Edition
• Add index on created_at and id to ci_runner_machines (merge request)
• Finalize todo sanitization (merge request)
• Expose legacy requirement IID in Work Items GraphQL API (merge request) GitLab Enterprise Edition
• Import 'Allow specified actors to bypass required pull requests' rule (merge request) GitLab Enterprise Edition
• Add report abuse category to issue & incident (merge request)
• Count approval project rule created monthly (merge request) GitLab Enterprise Edition
• Add 'migrate_projects' bool flag for group bulk imports' (merge request)
• Add user and fingerprint to ssh signature (merge request)
• Add create achievement GraphQL mutation (merge request)
• Make frequently projects/groups list editable (merge request)
• Add updatedAt field to Vulnerabilities (merge request) GitLab Enterprise Edition
• Support … and $$… syntax math in markdown (merge request)
• feat: Bump Code-Quality image to 0.89.0 (merge request)
• Default enable jira_connect_oauth_self_managed (merge request)
• Expose uses legacy iid flag in test report GraphQL type (merge request) GitLab Enterprise Edition
• Add create/update/delete endpoints for instance SCIM (merge request) GitLab Enterprise Edition
• Open Web IDE in new tab in all contexts (merge request)
• Add uses legacy iid flag to test reports table (merge request)
• No-op migration for pm package partitioning (merge request)
• Push language aggregation feature flag to front-end (merge request)
• Refresh pipelines when target branch changes (merge request)
• Extend API spec helper for new admin_mode PAT scope by @wwwjon (merge request)
• Improve the performance of PipelineScheduleWorker (merge request)
• Add 'migrate_projects' column to bulk_import_entities table (merge request)
• Add work_item_iid to requirement update mutation (merge request) GitLab Enterprise Edition
• Add new github import stats elements (merge request)
• Add partitioning for package metadata (merge request)
• Add work_item_iid to requirement update mutation (merge request) GitLab Enterprise Edition
• Add API to stop stale environments (merge request)
• Adds Singlestatistic Option to Visualization Designer (merge request) GitLab Enterprise Edition
• Display error message in BulkImport initial page (merge request)
• Add admin_mode scope for PATs (merge request)
• Adds Candidate Show page (merge request)
• Add Runner performance insights modal (merge request) GitLab Enterprise Edition
• Add reported from URL field to the report abuse form (merge request)
• Add OR filter support for labels (merge request)
• Support rate limiting by user on GitLab shell (merge request)
• mail_room: Make it possible to configure delete after delivery behavior (merge request)
• Add GET endpoints for instance-level SCIM (merge request) GitLab Enterprise Edition
• Add runner_machine_id column to ci_builds_metadata (merge request)
• Migrations to clean up vulnerabilities with overlong html titles (merge request)
• Add customer_health_score performance indicator type (merge request)
• Create logic to find branch rules without protected branches (merge request) GitLab Enterprise Edition
• Add admin role to access level enum in graphql (merge request) GitLab Enterprise Edition
• Add UI to retry failed external MR status checks (merge request) GitLab Enterprise Edition
• Intercept repository archive hotlinking (merge request)
• Support rate limiting by IP on GitLab shell (merge request)
• Support automatic approve deployment by @luzhiyuan.deer (merge request)
• Adding todos on project request access (merge request)
• Store approving user for access requests by @Taucher2003 (merge request)
• Add config column to ci_runner_machines (merge request)
• Add pwa icon to appearance / api by @TrueKalix (merge request)
• Adds support for passing :allow_duplicate option (merge request)
• Work Item activity widget - sorting and pagination (merge request)
• Adds pagination to candidates (merge request)
• Group recent activity metrics are now clickable (merge request) GitLab Enterprise Edition
• Adds section for metadata on CandidateDetails (merge request)
• [385087] GitHub repos fetch by relation type (merge request)
• Add param regex to api branches by @lyb124553153 (merge request)
• Add incident attribute to slack notif settings (merge request)
• Add tag_list to DastScannerProfileType (merge request)
• Remove use_api_for_payment_validation (merge request) GitLab Enterprise Edition
• Add ApplicationSetting for private profile (merge request)
• Add allow_runner_registration_token namespace setting (merge request)
• Add username in the OIDC preferred_username claim by @janLo (merge request)
• Add mirror_branch_regex to api by @lyb124553153 (merge request) GitLab Enterprise Edition
• Trigger merge status subscription when a new discussion is created (merge request)
• GraphQL: Add RunnersJobsStatisticsResolver (merge request) GitLab Enterprise Edition
• Add PATCH method for /user/status REST API (merge request)
• Expose milestone ID in the milestone page (merge request)
• Includes batch-details.json to database sampling artifacts (merge request)
• Remove Feature Flag from Runners Finder (merge request)
• Add incident hooks col to integrations (merge request)
• Create Ci::RunnerMachine model (merge request)
• Add worker to sync repository data types in SSF (merge request) GitLab Enterprise Edition
• Add AnalyticsDashboardPointer model (merge request)
• Send GraphQL triggers on discussion un/resolution (merge request)
• Add allow_runner_registration_token application setting (merge request)
• GraphQL: Add CI jobs statistics types (merge request) GitLab Enterprise Edition
• Add fk details to postgres_foreign_keys view (merge request)
• Show new "Your work" sidebar on Projects dashboard (merge request)
• Add noteable commenters GraphQL field (merge request)
• Added timelogs pagination and total time spent retrieval by @zillemarco (merge request)
• Add noteable commenters GraphQL field (merge request)
• Enable promote to incident quick action for issue creation (merge request)
• Allow TeleSign credentials to be configure via ApplicationSetting API (merge request) GitLab Enterprise Edition
• Index members member_namespace_id and other columns (merge request)
• Allow aggregating CE events with EE events (merge request)
• Add SkipDelete option to the direct upload authorize response (merge request)
• Schedule async index on ci_builds (merge request)
• Add member_namespace async indexes (merge request)
• Added sorting option to timelogs GraphQL resolver by @zillemarco (merge request)
• Create UserAchievement model by @Taucher2003 (merge request)
• Add system notes metadata to GraphQL NoteType (merge request) GitLab Enterprise Edition
• Adds keyword to opt-out of cache isolation (merge request)
• Add import all gists to snippets endpoint (merge request)
• Adds run_name to mlflow/runs/create (merge request)
• Respect bulk_import_enabled application setting when using BulkImports (merge request)
• Add management of streamed audit event filtering (merge request)
• Add index and foreign_keys including partition_id (merge request)
• Issue event filter also includes WorkItem events (merge request)
• Add mindmap support to Mermaid diagrams by @auke- (merge request)
• Add abuse category selector when reporting a user for abuse (merge request)
• Support filtering job_artifacts replicables by keyword via GraphQL (merge request) GitLab Enterprise Edition
• Health status not filter (merge request) GitLab Enterprise Edition
• Reschedule epic cache count migration (merge request)

Fixed (108 changes)

• Add missing incident trigger label (merge request) GitLab Enterprise Edition
• Do not show CI/CD button when user has no permissions (merge request)
• Update styling in admin jobs page (merge request)
• Fix "triggered by" link for pipeline job by @winniehell (merge request)
• Group Owner to remove shared project (merge request)
• Fix missing VueApollo in project importers (merge request)
• Move tilde into inline code by @PeterTillema (merge request)
• Check time before starting reindex action (merge request)
• Display loading icon when destination is unknown (merge request)
• Fix expose of readme_url and forks_count in API (merge request)
• Prevent repository storage move workers from running simultaneously (merge request)
• Fixes Candidate name not being set (merge request)
• Remove CodeQuality Widget duplication in copy text (merge request)
• Fixed the broadcast message text color by @zillemarco (merge request)
• Update NuGet group level permissions requirements (merge request)
• Add migration to rename column (merge request)
• Removes collapsible sections that don't render correctly (merge request) GitLab Enterprise Edition
• Fix 404 when clicking 'Cancel' from fork project page (merge request)
• Add regex validation to bulk import post params (merge request)
• Search API should respect the global search feature_flag (merge request)
• Exclude trailing spaces from commit message search queries (merge request)
• [385860] Fix ProjectImportWorker record not-found (merge request)
• Fix double validation error for project deploy keys (merge request) GitLab Enterprise Edition
• Fix relative repository file link with percent sign (merge request)
• Allow DAST profiles to be modified/removed when not referenced (merge request) GitLab Enterprise Edition
• Fix cache-miss bug in MultiStore (merge request)
• Batch migration to set OauthAccessToken#expires_in (merge request)
• Add regex validation to bulk import post params (merge request)
• Fix when coverage_report is set to null (merge request)
• Handling locked partitions when truncating legacy tables (merge request)
• Fix jira_connect_proxy_url blank setting bug (merge request)
• Fix work item comments not loading by iid (merge request)
• Adapt helpers to use policy instead of admin? (merge request)
• Fix richtext editor buttons in work item modal (merge request)
• Don't open help link in new tab (merge request) GitLab Enterprise Edition
• Do not check for signup info on pwa controller (merge request)
• Fix manual variable inputs width (merge request)
• Group-level project templates do not import various settings (merge request)
• Changing ActiveRecord to ApplicationRecord in spec (merge request)
• Fix amount_used column precision (merge request)
• Geo Sites - Fix invalid href prop (merge request) GitLab Enterprise Edition
• Fix error when validating SBoMs with licenses (merge request)
• Fix Container Repository Geo replication when media type is absent (merge request)
• Fix Import/Export protected branch access levels associated with user (merge request) GitLab Enterprise Edition
• Eliminate certain instances of NoMethodError (merge request)
• Fix time formatting on Container Registry by @giggsey (merge request)
• Fix repoPushed field in contributions GraphQL API (merge request) GitLab Enterprise Edition
• Add CSP Concern to CI/CD Settings (merge request) GitLab Enterprise Edition
• Update vulnerability report when bulk-dismissing (merge request) GitLab Enterprise Edition
• Fix cache-miss bug in MultiStore (merge request)
• Deduplicate increments during a refresh (merge request)
• Cleans-up extra attributes set in clipboard_button helper by @afzal442 (merge request)
• Fix :unknown executor_type (merge request)
• Fixed the URL generation for new MR from IDE (merge request)
• Don't prepend commit SHA with # in registries (merge request)
• Prevent nav text clipping (merge request) GitLab Enterprise Edition
• Fix NoMethodErrors when there is no slack_application (merge request) GitLab Enterprise Edition
• Truncate long vulnerability flag description while ingesting (merge request) GitLab Enterprise Edition
• Fix review summary tabs in dark mode (merge request)
• Fix days used on first day of trial display (merge request) GitLab Enterprise Edition
• Reset Container Repository Sync status on secondary (merge request)
• Update CodeQuality MR Widget Message with no findings (merge request)
• Update classes for CI status icons in deployments (merge request)
• Enforce memory-watchdog by default (merge request)
• Prevent erroring when time is somehow nil (merge request)
• Use the same exclusive lease key name for all indexing actions (merge request)
• Update epic tree count on add and remove epic (merge request) GitLab Enterprise Edition
• Fix typo for environments edit path (merge request)
• Sobelow support for nested Elixir projects (merge request)
• Geo Sites - Update Container Repo Data Type (merge request) GitLab Enterprise Edition
• Drop justify-content-center class in favor of align prop (merge request)
• Supplementary logic for inherit_group_setting by @luzhiyuan.deer (merge request)
• Fix --extra-index-url usage by @usdResponsibleDisclosure (merge request)
• Drop injects' default values (merge request)
• Fix LocalJumpError when an MR has no diff (merge request)
• Fix undefined method error (merge request)
• Fix undefined method error for CI::Pipeline (merge request)
• Clean up prevent_outdated_deployment_jobs feature flag (merge request)
• Geo: Container Repository push events don't work (merge request)
• Fix create epic REST endpoints (merge request) GitLab Enterprise Edition
• Skip rendering of empty admin notes on group page (merge request)
• Fix ContainerRepository graphql in admin area (merge request)
• Fix maintain member for Advanced Search (merge request) GitLab Enterprise Edition
• Change sign in button to use isGitlabCom (merge request)
• Workhorse: Fix code nav relative path calculation (merge request)
• Relax FIPS constraints on PyPi packages (merge request)
• Workaround a segfault due to array GC bug (merge request)
• Fix Maven packages not working on FIPS kernels (merge request)
• Set default OauthAccessToken#expires_in (merge request)
• Rescue BulkImports::NetworkError on bulk import creation (merge request)
• Highlight Python syntax with Rouge (merge request)
• Allow member creator service to handle existing access requests (merge request)
• Fix creating JIRA issue URL for security findings (merge request) GitLab Enterprise Edition
• Fix remove parent epic quick command (merge request) GitLab Enterprise Edition
• Move vulnerability creation out of transaction (merge request) GitLab Enterprise Edition
• Add notebook viewer (merge request)
• Fix the Container Registry tag filter (merge request)
• Return bare hostname for importing a project (merge request)
• Remove breadcrumb border on repository > files view (merge request)
• Fix regression on cyclic definition in GraphQL GroupType by @zillemarco (merge request)
• Only render GFM when the element exists (merge request)
• Fix repository ref encoding issue (merge request)
• Fix WorkItem URL when listing user activity from contributions graph (merge request)
• Remove Geo Replication sidebar nav link (merge request) GitLab Enterprise Edition
• Handle Net::HTTPBadResponse in Gitlab::HTTP (merge request)
• Fix 500 error when artifact file is missing (merge request)
• Fix error in API due to locking mechanism (merge request)
• Use BigInt for Graphql Blob type to cover huge files (merge request)

Changed (141 changes)

• Add clarification for source of username and email info (merge request)
• Adds namespace filtering for group and project searches (merge request) GitLab Enterprise Edition
• Provide an existing namespace when importing project from GitHub (merge request)
• Update UI for image repositories scheduled for deletion (merge request)
• Update permissions for Epic add dropdown action (merge request) GitLab Enterprise Edition
• Converting commit branches dropdown to GlCollapsibleListbox (merge request)
• Move project storage app to core codebase (merge request)
• Improve partial github import display (merge request)
• Add tooltip to epic actions dropdown (merge request) GitLab Enterprise Edition
• Remove the vue_broadcast_messages feature flag (merge request)
• Use RetryError for DeleteBranchWorker (merge request)
• Removed the template type selector (merge request)
• Switch draft state toggle to use a checkbox (merge request)
• Remove Code-quality counter badge when report is not loaded (merge request) GitLab Enterprise Edition
• Improve spacing for DAST profile summary (merge request) GitLab Enterprise Edition
• Order children within Work Items Hierarchy Widget by created_at (merge request)
• Improve escalation policies experience in the add/edit form help text by @daelmo (merge request) GitLab Enterprise Edition
• Migrate runner buttons to pajamas (merge request)
• Block outgoing Chrome connections in Capybara tests (merge request)
• Move dollar math handling to markdown pipeline (merge request)
• Add Gitlab::Redis::RepositoryCache Redis instance (merge request)
• Update permissions to add child issue (merge request) GitLab Enterprise Edition
• Experiment to add tier badge (merge request) GitLab Enterprise Edition
• Rename filepath in Releases APIs to direct_asset_path (merge request)
• Set context header height to auto (merge request) GitLab Enterprise Edition
• DAST path to display on vulnerabilities list (merge request) GitLab Enterprise Edition
• Adapt Debian distributions API to consider package registry access level (merge request)
• Remove solved issues from Package Registry docs by @wwwjon (merge request)
• Raise a BadRequest error when escaping invalid URL (merge request)
• Updates installation docs about plpgsql extension (merge request)
• Remove compatibility_alert from Jira connect app (merge request)
• Add mergeRequest to PipelineSecurityReporyFinding (merge request) GitLab Enterprise Edition
• Fix toggle button in MR collapsible extension (merge request)
• Adds documentation for migration helpers (merge request) GitLab Enterprise Edition
• Version Check - Add feature flag (merge request)
• Display neutral Icon when CodeQuality report did not change (merge request)
• Remove ci_pipeline_triggers_settings_vue_ui feature flag (merge request)
• Default enable validate release with author ff (merge request)
• Add preview alert on invite members modal (merge request)
• Limit abuse reports to one per reporter per category (merge request)
• Globally enable dependency_list_exporter FF (merge request) GitLab Enterprise Edition
• Update dependency auto-deploy-image to v2.45.0 (merge request)
• Remove two_line_mention_enabled feature flag (merge request)
• Update branch rules according to changes in API (merge request) GitLab Enterprise Edition
• Use TimezoneDropdown in oncall schedule create (merge request) GitLab Enterprise Edition
• Set up modal navigating on work items (merge request)
• Migrate ToolbarTextStyle to GlListbox (merge request)
• Align CodeQuality MR Widget wording (merge request)
• Migrate application delete button to Pajamas component (merge request)
• Update approvers_select to use gl-listbox (merge request) GitLab Enterprise Edition
• Limiting Apple App Store Integration to the project level (merge request)
• Cleanup update_oauth_registration_flow feature flag (merge request)
• Add empty state to the pipeline schedules page (merge request)
• Migrate user settings away from select2 (merge request)
• Escape snowplow js asset url (merge request)
• Update contributions GraphQL API date validation (merge request) GitLab Enterprise Edition
• Updates copy for namespace storage enforcement locking banner (merge request) GitLab Enterprise Edition
• Allow multiple users to report a user for abuse (merge request)
• Update notifications.md to be accurate (merge request)
• Closed and expired milestone should show as closed (merge request)
• Made document title descriptive for Web IDE by @mehulsharma (merge request)
• chore: Limit MarkDroppedAsResolved lookup to primary_ids only (merge request)
• Simplify signature badge popover (merge request)
• Remove send_traversal_ids_to_indexer flag (merge request) GitLab Enterprise Edition
• Update 422 page styling (merge request)
• Add audit events for protected environments (merge request) GitLab Enterprise Edition
• Update permissions to relate epics (merge request) GitLab Enterprise Edition
• Add validation for State in purchase flow (merge request) GitLab Enterprise Edition
• Add message to modal explaining that sole owners can't be removed (merge request)
• Enable cyclonedx_sbom_ingestion by default (merge request) GitLab Enterprise Edition
• Migrate error tracking settings dropdown to Listbox (merge request)
• Add system check for pending advanced search migrations (merge request) GitLab Enterprise Edition
• Improve security report schema deprecation message (merge request) GitLab Enterprise Edition
• Remove the vue_group_select feature flag (merge request) GitLab Enterprise Edition
• Simplifies the design for todo mentions (merge request)
• Add spec and refactor null check by @daelmo (merge request)
• Update SYNTAX_OPTIONS_DOCUMENT path for the drawer document (merge request)
• Improve contrast of secondary text in dark mode (merge request)
• Update edit policy page titles (merge request)
• Adding Apple App Store Integration (merge request)
• Add content for retried manual builds (merge request)
• Update link ot TYPO3 distribution template (merge request)
• Set filename when the file is not stored locally (merge request) GitLab Enterprise Edition
• Rename sidebar component to drawer (merge request) GitLab Enterprise Edition
• Use GlCollapsibleListbox in ci_environments_dropdown (merge request)
• Add pipeline name to job webhook event payload (merge request)
• Remove association between ChatName and Integration (merge request)
• Rename short_title to pwa_short_name by @TrueKalix (merge request)
• Exposing BatchedMigration feature_category to metrics (merge request)
• Improve UX of Clear status after field (merge request)
• Migrate deploy token settings button (merge request)
• Add data to shouldCollapse method of MR Widget Extension (merge request)
• Remove update_vuln_identifiers_flag (merge request)
• Add variables argument to PlayJob (merge request)
• Removed the references to schema_linting flag (merge request)
• Add frontend code for dependency list export (merge request) GitLab Enterprise Edition
• This MR migrates Dropdown to Listbox (merge request)
• Unify response from UI and API for rebase operation (merge request)
• Move outdated deployment warning to FOSS (merge request)
• feat: Suppress deprecation warning if ingesting GitLab-vendored reports (merge request) GitLab Enterprise Edition
• Swap button for dropdowns (merge request) GitLab Enterprise Edition
• Add event type information for email address confirmation after sign in by @daelmo (merge request) GitLab Enterprise Edition
• Remove deprecation notice in POST /runners (merge request)
• Add index_status for groups (merge request)
• This MR migrates Dropdown to Listbox (merge request)
• Update indexes on ChatNames (merge request)
• Remove optimized-housekeeping feature flag (merge request)
• Add text input field to trigger_field.vue (merge request)
• Move admin menu jobs under CI/CD section by @Taucher2003 (merge request)
• Update internal notes policy names (merge request) GitLab Enterprise Edition
• Enable utilize_finding_data feature flag by default (merge request) GitLab Enterprise Edition
• Remove package registry migration survey banner by @ali_o_kan (merge request)
• Delegate profile fields to user details by @brianjaustin (merge request)
• Update default preferred_language value of user by @icbd (merge request)
• Add event name for merge method (merge request)
• Refactor user type scopes (merge request)
• Update occurrences rather than appending new ones (merge request)
• Move admin runners menu (merge request)
• Update user documents in elasticsearch when certain fields change (merge request) GitLab Enterprise Edition
• Turn gzip errors into structured log events (merge request)
• Add Gitlab::Redis::RepositoryCache Redis instance (merge request)
• Fix(Subscription Card): add disabled state to sync (merge request) GitLab Enterprise Edition
• Persist artifacts:public to Ci::JobArtifact table (merge request)
• Add custom error for gitaly unavailable (merge request)
• Update rails-html-sanitizer to v1.4.4 (merge request)
• Update CI error message when pipeline has no jobs to run (merge request)
• Cleanup members table layout and buttons (merge request)
• Open api users (merge request)
• Replace gl-dropdown with gl-collapsible-list-box for pipelines List (merge request)
• Make todos where you are mentioned two lined (merge request)
• Allow null only/except keywords to be combined with rules (merge request)
• Migrate to GlCollapsibleListbox in jira-connect page (merge request)
• ci: Build Workhorse with FIPS Go compiler (merge request)
• Move richtext editor switcher to toolbar (merge request)
• Update spam log buttons to pajamas (merge request)
• Add issueLinks to PipelineSecurityReportFinding (merge request) GitLab Enterprise Edition
• Update sign-up registration buttons to pajamas (merge request)
• Add synch' portion of multi-step index creation (merge request)
• Migrate status badge to Pajamas (merge request)
• Adapt Debian API to consider package registry access level by @wwwjon (merge request)
• Adapt Ruby gems API to consider package registry access level by @wwwjon (merge request)

Deprecated (4 changes)

• Projects API: Mark operations_access_level as deprecated (merge request)
• Announce planned removal of openSUSE 15.3 packages (merge request)
• Deprecate approvers and approval_group fields (merge request)
• Deprecate security report schemas versions 14.. (merge request) GitLab Enterprise Edition

Removed (8 changes)

• Remove tmp index for vulnerabilities with cluster image scanning (merge request) GitLab Enterprise Edition
• Delete scheduled jobs for Vulnerabilities::Feedback migration (merge request)
• Remove group_export_ndjson, group_import_ndjson FFs (merge request) GitLab Enterprise Edition
• Remove unused VSA use_aggregated_backend endpoint (merge request) GitLab Enterprise Edition
• Replace housekeeping setting with a single one in API (merge request)
• Deduplicate lock-retries helpers in migration modules (merge request)
• Remove phabricator_import feature flag (merge request)
• Remove temp index on project_statistics (merge request)

Security (12 changes)

• Update Gitaly version
• Limit the size of user agent to reduce ReDos attack
• Avoid regex with potential for poorly performing backtracking
• Protect Sentry auth-token after changing URL
• Fix "Race condition enables verified email forgery"
• Validate token scopes in bulk_import service (merge request)
• Policy change to read and destroy token without license for .com
• Pages version bump SHA for 15.8
• Restrict Grafana API access on public projects
• Delete project specific licenses when license policy is deleted
• Protect web-hook url variables after changing URL
• Restrict user avatar availability based on visibility restrictions

Performance (8 changes)

• Add index for environments on project_id and id (merge request)
• Expand compound index on members to include member_role (merge request)
• Add partial index in namespaces (merge request)
• Replace index_ci_runners_on_runner_type to include id (merge request)
• Remove vulnerability state migration (merge request)
• Improve the performance of count queries for replicator class (merge request) GitLab Enterprise Edition
• Remove cache_project_integrations feature flag (merge request)
• Optimize code owners file section regex (merge request) GitLab Enterprise Edition

Other (41 changes)

• Remove obsolete Redis test helper (merge request)
• Adding feature_category to pods related specs (merge request)
• Add sync database indexes to events table (merge request)
• Remove cyclonedx_sbom_ingestion feature flag (merge request) GitLab Enterprise Edition
• Bump Gitlab Shell to 14.15.0 (merge request)
• Fix Style/FormatString offenses (merge request)
• Remove pipeline_name feature flag (merge request)
• Log pipelines that exceed includes maximum (merge request)
• Refactor Gitaly client stub to reduce the number of connections (merge request)
• Move disabled message to LearnGitlabHelper, set default in Vue (merge request) GitLab Enterprise Edition
• Update users stat making billable users consistent (merge request) GitLab Enterprise Edition
• Sets feature_category as :database for existing bg migrations (merge request)
• Update when storage banner can be dismissed (merge request) GitLab Enterprise Edition
• Remove the FF ci_raw_variables_in_yaml_config (merge request)
• Remove unused code from UpdateAllMirrorWorker (merge request) GitLab Enterprise Edition
• Bump default partition_id value for CI tables to 101 (merge request)
• Raise an exception when fail to delete a branch (merge request)
• Remove feature flag limit_assigned_issues_count (merge request)
• Remove paginated_mr_discussions feature flag (merge request)
• Remove hide notification feature flag for free user cap (merge request)
• Remove feature flag 'delay_for_repository_update_mirror' (merge request)
• Fixing Database/MultipleDatabases offenses in specs (merge request)
• Add Gitaly grpc client-side load-balancing configs (merge request)
• Remove dispensable_render feature flag (merge request)
• Backfil migration for releases with empty author_id (merge request)
• Remove bulk_update_membership_roles feature flag (merge request)
• Remove display_merge_conflicts_in_diff feature flag (merge request)
• Fix Graphql/Descriptions offenses in 'app/graphql/mutations/' by @Ashvith (merge request)
• Fix Style/SymbolProc offenses by @mhdasm3 (merge request)
• Remove container_repository_updated_event_id from geo_event_log (merge request)
• Remove the log file_variable_is_referenced_in_another_variable (merge request)
• Remove has_many :sourced_pipelines from Ci::Bridge (merge request)
• Unify namespace storage limits view (merge request) GitLab Enterprise Edition
• Cleans up ssh commit sign by @afzal442 (merge request)
• Remove the FF ci_refactoring_external_mapper (merge request)
• Remove ci_build_partition_id_token_prefix feature flag (merge request)
• Fix Rspec/AnyInstanceOf offenses by @mhdasm3 (merge request)
• Remove _test from objectstore tests (merge request)
• Factor out S3 API types (merge request)
• Do not use _test when not necessary (merge request)
• Add config/redis.yml unified config file (merge request)

15.7.5 (2023-01-12)

No changes.

15.7.4 (2023-01-12)

No changes.

15.7.3 (2023-01-11)

Fixed (3 changes)

• Reset Container Repository Sync status on secondary (merge request)
• Enforce memory-watchdog by default (merge request)
• Geo: Container Repository push events don't work (merge request)

15.7.2 (2023-01-09)

Security (9 changes)

• Avoid regex with potential for poorly performing backtracking (merge request)
• Protect web-hook url variables after changing URL (merge request)
• Limit the size of user agent to reduce ReDos attack (merge request)
• Protect Sentry auth-token after changing URL (merge request)
• Delete project specific licenses when license policy is deleted (merge request)
• Restrict user avatar availability based on visibility restrictions (merge request)
• Policy change to read and destroy token without license for .com (merge request)
• Restrict Grafana API access on public projects (merge request)
• Fix "Race condition enables verified email forgery" (merge request)

15.7.1 (2023-01-05)

Fixed (2 changes)

• Relax FIPS constraints on PyPi packages (merge request)
• Workaround a segfault due to array GC bug (merge request)

Performance (1 change)

• Remove vulnerability state migration (merge request)

15.7.0 (2022-12-21)

Added (182 changes)

• Get timeline event tag and display on list (merge request)
• Add tag_list to dast_profiles (merge request)
• Serialize image attributes for content editor (merge request)
• Add CI_PROJECT_NAMESPACE_ID to predefined variables by @vadrin (merge request)
• Add project language search/filter (merge request)
• Creating tasks counts towards user contribution graph (merge request)
• Process requirements_v2 artifacts on CI Jobs (merge request) GitLab Enterprise Edition
• Add health status selection widget for work items (merge request) GitLab Enterprise Edition
• Add metrics for number of created merge requests (merge request)
• Remove feature flag allow audit event type filtering (merge request) GitLab Enterprise Edition
• Create StateTransitions for dismissed Vulnerabilities (merge request)
• Count approval project rules metrics (merge request) GitLab Enterprise Edition
• Add meaningful names for project feature updates (merge request) GitLab Enterprise Edition
• Add class for retrieving SBOM Components (merge request) GitLab Enterprise Edition
• Add forkDetails GraphQL field to ProjectType (merge request)
• Add possibility to import all gists (merge request)
• Add api endpoints for dependency list exports (merge request) GitLab Enterprise Edition
• Add Sidekiq worker to re-enable pull mirror configuration (merge request) GitLab Enterprise Edition
• Add ability to cancel github project improt (merge request)
• Expose Alert (global) ID in GraphQL queries (merge request)
• Add semgrep as a supported analyzer for Scala (merge request)
• Update feature flag to be enabled by default (merge request)
• Add GraphQL mutation to unlink alert from incident (merge request)
• Allow pipelines to have custom names (merge request)
• Add pipeline_hierarchy_size (merge request)
• Counter merged merge requests using approval rules (merge request) GitLab Enterprise Edition
• Add dast_pre_scan_verifications_steps table (merge request)
• Add Package registry visibility toggle (merge request)
• Retry api for failed status checks (merge request) GitLab Enterprise Edition
• Add mutation to update progress (merge request) GitLab Enterprise Edition
• Work Item widget notes (merge request)
• Allow filtering requirements by work_item IID (merge request) GitLab Enterprise Edition
• Filtering TODOs by Issue type includes tasks (merge request)
• Add pipelineScheduleCreate mutation by @batu (merge request)
• Remove the markdown_image_attributes feature flag (merge request)
• Embed observability in GitLab (merge request)
• Add short_title attribute to appearance by @TrueKalix (merge request)
• Require approvals in case of pre-existing vulnerabilities (merge request) GitLab Enterprise Edition
• Exclude uploads_size from project_statisitcs#storage_size (merge request)
• Enable optimized housekeeping by default (merge request)
• Remove require_approval_on_scan_removal feature flag (merge request)
• GraphQL approveDeployment permission (merge request)
• Update importers group select dropdowns to use GraphQL (merge request)
• Add Terraform state size limit to admin UI (merge request)
• Add pipelineSchedulePlay mutation (merge request) GitLab Enterprise Edition
• Global alert when reach the dashboard limit (merge request)
• Allow filtering work items by key result type (merge request)
• Add token sub-keyword to CI config (merge request) GitLab Enterprise Edition
• Add gists importer to schedule each gist import (merge request)
• Add unique index to ci_builds (merge request)
• Add new ci job artifact requirement_work_items (merge request) GitLab Enterprise Edition
• Get tag signature via Tags API (merge request)
• Disable Gitlab migration form when it is disabled (merge request)
• Migrate incident_management to events (merge request)
• Add ability to add read_code to custom roles (merge request)
• Create achievements model and database table (merge request)
• Add PATCH /groups/:id/members/:user_id/member_role (merge request) GitLab Enterprise Edition
• Update import group dropdown to use graphql (merge request)
• Enable hash_based_cache_for_protected_branches FF by default (merge request)
• Added documentation about adding time entries using the UI by @zillemarco (merge request)
• Add bulk_import_enabled to application_settings db table (merge request)
• Add Packages::Debian::ProcessPackageFileWorker by @sathieu (merge request)
• Add admin settings for default preferred language by @icbd (merge request)
• Add GraphQL mutation to link alerts to incidents (merge request)
• Add expanded attribute to variables settings (merge request)
• Allow provisioning group to view member email addresses via API (merge request) GitLab Enterprise Edition
• Add edit_path to pipeline_schedules_type (merge request)
• Add support for CI_ENVIRONMENT_NAME var to be used in job:rules (merge request)
• Add instrumentation for LDAP requests (merge request)
• Added a UI to create timelogs by @zillemarco (merge request)
• Expose Alert (global) ID in GraphQL queries (merge request)
• Commit committer name check with the commit author_name by @zhzhang93 (merge request) GitLab Enterprise Edition
• Extend environment field in GraphQL to expose deploy freezes (merge request)
• Cascade partition_id to Ci::Sources::Pipeline (merge request)
• Add negated health status filtering in GraphQL API (merge request) GitLab Enterprise Edition
• Add hasChildren field to work items hierarchy widget (merge request)
• Add unique index to ci_builds (merge request)
• Add index for author_id and created_at on merge_requests (merge request)
• Add a Search Within token to issues list search (merge request)
• Expose work item iid on requirement type for GraphQL (merge request) GitLab Enterprise Edition
• Migration: add column to project_settings by @luzhiyuan.deer (merge request)
• Add switch to toggle between current and new nav (merge request)
• Link to jobs tab from runner list (merge request)
• Add unit tests for redirection (merge request)
• Add worker to import gist to snippet (merge request)
• Adds execution status badge (merge request)
• Add behavior for self-assigning to reviewers in the sidebar (merge request)
• Add last_seat_refresh_at to gitlab subscriptions (merge request)
• Extend Actions in Scan Execution Policy to include Runner Tags (merge request) GitLab Enterprise Edition
• Document how to specify Git ref in agentk config (merge request)
• Allows user to navigate directly to the jobs tab (merge request)
• Add specific state name URI requirements (merge request)
• Update project GraphQL query to support nested environments (merge request)
• Add support for merge request template variables by @davebarr (merge request)
• Admin toggle individual group runner registration by @markus.ferrell (merge request)
• Add dependency_list_exports table (merge request) GitLab Enterprise Edition
• Remove webhook_form_mask_url feature flag (merge request)
• Ensure new signups complete steps using DB field (merge request)
• Enable the FF ci_raw_variables_in_yaml_config by default (merge request)
• Allow creating SSH keys with usage types via API (merge request)
• Expose Issue.relatedVulnerabilities on GraphQL (merge request) GitLab Enterprise Edition
• Finalize group member namespace id migration (merge request)
• GraphQL Deployment permissions (merge request)
• Manage default compliance frameworks (merge request)
• Implement Git repository housekeeping in SSF (merge request) GitLab Enterprise Edition
• Finalize namespace_id backfilling on issues table (merge request)
• Add $CODE_QUALITY_IMAGE_TAG to Code-Quality template (merge request)
• Adds Candidate Detail page (merge request)
• Add background migration to reset status on container repositories (merge request)
• Check if parent epic is exportable (merge request) GitLab Enterprise Edition
• Display Usage type field for SSH keys (merge request)
• Update email partipants for moved service desk issues (merge request)
• Compare results for scan_finding approval rules from multiple pipelines (merge request) GitLab Enterprise Edition
• Allow commits to be signed with SSH keys (merge request)
• Feat: signin signup locale switcher frontend by @JeremyWuuuuu (merge request)
• Verify user's phone number using TeleSign (merge request) GitLab Enterprise Edition
• Add support for rendering comments in content editor (merge request)
• Allow img size attributes to be specified (merge request)
• Record timestamp of status updates for container repositories by @Ashvith (merge request)
• Add health status sort option to group/project issues list (merge request)
• Update deployment data builder with relevant environment information by @rick.nu (merge request)
• Add HealthStatus Widget to WorkItems (merge request) GitLab Enterprise Edition
• Add key to visible_attributes by @icbd (merge request)
• Filter runners by project (merge request)
• Add warning to invite group modal (merge request)
• Stores MLFlow tags for experiments and runs (merge request)
• Add GRAPQHL option to ScanMethodTypeEnum (merge request) GitLab Enterprise Edition
• Audit Group SAML extern_uid changes (merge request) GitLab Enterprise Edition
• Add default hierarchy restrictions (merge request)
• Add index for vulnerability_feedback.comment processing (merge request)
• Rollout feature: webhook support regex by @luzhiyuan.deer (merge request)
• Add application limits to CI Variables settings (merge request)
• Mirror web_ide_commits metric to Snowplow (merge request)
• Send phone verification SMS to user via TeleSign (merge request) GitLab Enterprise Edition
• Implement new diffs REST API endpoint (merge request)
• Adds count badge for package other versions tab (merge request)
• Add readEnvironment field to GraphQL API (merge request)
• GraphQL Environment permissions (merge request)
• Use the routing table by default for Ci::BuildMetadata (merge request)
• Add async index for MRs on author_id and created_at (merge request)
• Overwrite header of blob viewer for JH-only feature by @LXY1226 (merge request)
• Add index for approval_merge_request_rules with MR ID and Created At (merge request)
• Add jitsu_key to EE::ProjectType (merge request) GitLab Enterprise Edition
• Add length limit to comment attribute (merge request) GitLab Enterprise Edition
• Initialized from Pages/Bridgetown project template (merge request)
• Geo: Replicate Dependency Proxy Manifests (merge request)
• Add dashboard status to namespace details and record (merge request)
• Add merge_requests to OpenAPI documentation (merge request)
• GraphQL: Add job_execution_status to CiRunner (merge request)
• Add SSH signature to GraphQL (merge request)
• Add job retry dropdown for manual jobs (merge request)
• Add filtering option to vulnerabilityGrades field (merge request) GitLab Enterprise Edition
• Add Usage Type to SSH keys (merge request)
• Add wildcard search for Branches and Tags (merge request)
• Add instance audit event for enabling admin mode (merge request) GitLab Enterprise Edition
• Add /license/:id REST API endpoint (merge request) GitLab Enterprise Edition
• Add work item notes widget (merge request)
• Add id_tokens CI keyword (merge request)
• Redis counter for streaming audit event types (merge request) GitLab Enterprise Edition
• Add query parameter to query environments by environment_type (merge request)
• Add work items hierarchy restrictions table (merge request)
• Capture suggested reviewers accepted (merge request)
• Add GraphQL Scan method to DastSiteProfile (merge request) GitLab Enterprise Edition
• Add /labels alias to /label quick action (merge request)
• Add a new reviewed_by variable for commit messages (merge request)
• Show divergence counts for a fork on project page (merge request)
• Add partition_id to ci_resources (merge request)
• Tooltip for description edit button on tasks (merge request)
• Add skeleton loader to Product analytics dashboard (merge request) GitLab Enterprise Edition
• Add JSONB data type with indifferent access (merge request)
• Add dast_pre_scan_verifications table (merge request)
• Add Packages::Debian::ProcessPackageFileService by @sathieu (merge request)
• Query change to include sub-folders in search (merge request)
• Add package metadata tables and models (merge request)
• Add a "reopen" tertiary action to the MR Closed Widget (merge request)
• Track and display all types of invalid approval rules (merge request) GitLab Enterprise Edition
• Add index for namespaces (merge request)
• Merge trains GET merge request API by @markus.ferrell (merge request) GitLab Enterprise Edition
• Add source_enterprise column to BulkImports table (merge request)
• Add partition_id to ci models referenced by fk (merge request)
• Update project iterations query to accept sort (merge request) GitLab Enterprise Edition
• Release Jira Connect application settings (merge request)

Fixed (173 changes)

• Add string validation to trigger:project (merge request)
• Show dismissed finding for query (merge request) GitLab Enterprise Edition
• Fix max width for milestone widget for work items (merge request)
• Deduplicate geo:geo_project_sync jobs (merge request) GitLab Enterprise Edition
• Fix update templates Rake task for development environment (merge request)
• Only verify signatures which use the git namespace (merge request)
• GraphQL: Fix off-by-1 JOB_COUNT_LIMIT limit (merge request)
• Fixes list view of group merge request (merge request)
• Fix GitHub PR comments are out of order after import (merge request)
• Fix serialized import_sources on application_settings (merge request)
• Increase max limit on url_variables token length (merge request)
• Fix board sidebar in focus mode (merge request)
• Add migration to fix approval_project_rules without protected branches (merge request)
• Fix race condition when syncing mutable data types in SSF (merge request) GitLab Enterprise Edition
• Add transparent sso override feature flag (merge request) GitLab Enterprise Edition
• Add QA selector to all vulnerablity filters (merge request) GitLab Enterprise Edition
• Pluralize the entire sentence of "thanks alert" by @luzhiyuan.deer (merge request) GitLab Enterprise Edition
• Add export_path in order to make export api (merge request) GitLab Enterprise Edition
• Adapt specs to not use admin unnecessarily by @wwwjon (merge request)
• Removed pre-set branch in revert modal (merge request)
• Fix empty vendor header for tool filter (merge request) GitLab Enterprise Edition
• Only refresh indexes that exist (merge request) GitLab Enterprise Edition
• [332123] Fetch GitHub repos via GraphQL API (frontend) (merge request)
• [332123] Fetch GitHub repos via GraphQL API (backend) (merge request)
• Update BulkImports models to failed state on exception (merge request)
• Urlencode TF state name in init cmd modal (merge request)
• Show only active milestones in the dropdown (merge request)
• Markdow-drawer top position fix (merge request)
• Fixed output of error msg when editing a blob (merge request)
• Fix update servie desck with project_key by @lyb124553153 (merge request)
• GraphQL: Fix N+1 issue in jobCount (merge request)
• Prevent reload of pipelines table on job run (merge request)
• Allow support_bot assigning issues to epics (merge request) GitLab Enterprise Edition
• GraphQL: Fix N+1 issues with RunnerGroupsResolver (merge request)
• Ensure deploy tokens expires_at does not accept invalid dates (merge request)
• Rescue connection refused error (merge request)
• Raising error response for invalid identity (merge request) GitLab Enterprise Edition
• Improve query to fetch pipelines with given sha in scope of the project (merge request) GitLab Enterprise Edition
• Update prometheus-client-mmap to v0.17.0 (merge request)
• GraphQL: Fix N+1 queries in RunnerJobsResolver (merge request)
• Change relative position assigns for epic boards (merge request) GitLab Enterprise Edition
• Use finding_data to generate response (merge request) GitLab Enterprise Edition
• Ensure Gitlab::Metrics::Subscribers::Ldap is loaded (merge request)
• Show locked icon only for project runner (merge request)
• Display an error when repository has an ambiguous head branch (merge request)
• The packages_size metric is now handled by a counter attribute (merge request)
• Remove feature flag ci_run_bridge_for_pipeline_duration_calculation (merge request)
• GraphQL: Fix N+1 issue in RunnerOwnerProjectResolver (merge request)
• GraphQL: Fix N+1 issue in RunnerProjectsResolver (merge request)
• Do not reset fork visibility to private when possible by @KyleFromKitware (merge request)
• Fix NPE when no DB replicas available (merge request)
• Fix help link not being used in storage card (merge request) GitLab Enterprise Edition
• Fix excessive page updates at GitLab migration (merge request)
• Fix projects API preloader (merge request)
• Fix markdown import attachments in GitHub Import (merge request)
• Filter group_approvers in scan result policies by full_path (merge request)
• Return HTTP 400 for multipart header without boundary (merge request)
• Remove disable_pagination_counts_on_jobs_api feature flag (merge request)
• Revert "Merge branch 'sc1-track-allowed-crossslot-ops' into 'master'" (merge request)
• Fix vulnerability counts height changing when loading new data (merge request) GitLab Enterprise Edition
• Fix link to downstreams in MR (merge request)
• Prevent errors for conflicting pending escalations (merge request) GitLab Enterprise Edition
• Avoid preview request if quantity is not valid (merge request) GitLab Enterprise Edition
• Update check on purchase quantity for add-ons (merge request) GitLab Enterprise Edition
• Ensure TooManyIps exception returns 403 forbidden for GraphQL (merge request)
• Fixed a very small typo in GraphQL style guide by @zillemarco (merge request)
• Use sentence casing for Full report button in merge request widgets (merge request) GitLab Enterprise Edition
• Allow downloading files tracked with Git LFS via API (merge request)
• Add dependent: :destroy to associations in project (merge request)
• Switch from GlBadge to StrategyLabel for FeatureFlags (merge request)
• Fix long strings in incident timeline to break into multiple lines (merge request)
• Fix redirect when cancel GitHub OAuth (merge request)
• Fix integration tests to display extra test data (merge request)
• Fix scan approval when user does not have edit approval rule permission (merge request) GitLab Enterprise Edition
• Version Check - Properly handle bad API response (merge request)
• Adapt APIs to use policy instead of admin? by @wwwjon (merge request)
• Consider Feedback type when creating Vulnerabilities from pipeline (merge request) GitLab Enterprise Edition
• Fixes removal of "paused" parameter in URL (merge request)
• Fix corrupted security_scans statuses (merge request)
• Added correct call for setAssignees on FOSS (merge request)
• Make admin bot confirmed (merge request)
• Fixed wiki condition (merge request)
• Use pagination to limit the number of users returned (merge request)
• Margin between commit widget and colors of programming language (merge request)
• Fix padding (merge request)
• Validate variable key (merge request)
• Include detached partition tables in truncate_legacy_tables (merge request)
• Ensure SSO enforcement is only active when SAML is enabled (merge request) GitLab Enterprise Edition
• Fix empty password submitting failure on admin editing user page by @qk44077907 (merge request) GitLab Enterprise Edition
• Fix auditor users to use filters in the audit event search bar (merge request) GitLab Enterprise Edition
• Update parsing to support v3 pagerduty (merge request)
• Use run_after_commit when triggering GraphQL subscription (merge request)
• Fix filtering by release_tag when ordering by milestone (merge request)
• Indicate that DAG limit can't be disabled by @Taucher2003 (merge request)
• Hide marketing-related entries (merge request)
• Fix agent unique user count (merge request)
• Fix inclusion validation for CI entries (merge request)
• Adapt PAT Finder to use policy instead of admin? by @wwwjon (merge request)
• Reflect the selected insights page in the dropdown (merge request) GitLab Enterprise Edition
• Adapt Ci::JobsFinder to use policy instead of admin? by @wwwjon (merge request)
• Conditionally disable fastupdate on GIN indexes (issues, merge_requests) (merge request)
• Fix Todo GraphQL type which always had null project and group fields by @zillemarco (merge request)
• Update pmg dropdown ci icon size (merge request)
• Lowercase package paths before generating links (merge request)
• Fixed the misalignment of the dropdown item (merge request)
• Show 100% complete if 0 expected documents (merge request) GitLab Enterprise Edition
• Split ee and ce queries, uncomment specs (merge request)
• Hide card actions on boards when user does not have edit permission (merge request)
• Remove dast_api_scanner feature flag (merge request)
• Fix pages internal cache to not use app settings in the cache key (merge request)
• Project cannot belong to bot user namespace (merge request)
• Adapt RoutesFinder to use policy instead of admin? by @wwwjon (merge request)
• Make Work Items breadcrumb icon and URL dynamic (merge request)
• Improve Dast site profile creation error message (merge request) GitLab Enterprise Edition
• Prevent service hooks from being disabled (merge request)
• Migrate away from select2 in User Preferences (merge request)
• Fix securityReportFinding when no pipeline finding (merge request) GitLab Enterprise Edition
• [217925] LFS import in batches (merge request)
• Allow authorization submit from Swagger UI documentations by @W_S (merge request)
• Fix VulnerabilityScannerType to resolve scanners (merge request) GitLab Enterprise Edition
• Remove custom CORS controller for JiraConnect (merge request)
• Fix NoMethodError when showing X.509 signature users (merge request)
• Ignore scan_finding rule for MR against unprotected branches (merge request) GitLab Enterprise Edition
• Fix default value for pipeline logger observations (merge request)
• On user delete associate releases to ghost user (merge request)
• Use pajamas for SSH key delete button (merge request)
• Fix purging scans by build_id (merge request) GitLab Enterprise Edition
• Fixing quick action styling for draft notes (merge request) GitLab Enterprise Edition
• Automatically locking newly created tables on the database (merge request)
• Fix query timeout issues on Security::Scans::PurgeWorker (merge request)
• Adapt UsersFinder to use policy instead of admin? by @wwwjon (merge request)
• Rapture source enterprise info & skip EE data when importing from CE (merge request)
• Paginate group runners in CI/CD settings (merge request)
• Fixed skip option (merge request)
• Fix non menu-item button styles in dropdowns (merge request)
• Sync scan result policies on link/unlink of policy project (merge request) GitLab Enterprise Edition
• Memoize Pages::LookupPath fields to prevent heavy recalculations (merge request)
• Fix: taskable item status locale issue by @JeremyWuuuuu (merge request)
• In 53fb7663 (Support structured error for UserCommitFiles, (merge request)
• Fix localization for Outbound Requests Settings by @Taucher2003 (merge request)
• Fix memory limit for RssMemoryLimit monitor (merge request)
• Fix group deploy token access for Git LFS by @MariusSchiffer (merge request)
• Add rescue to gracefully handle missing namespaces (merge request) GitLab Enterprise Edition
• Use indifferent_keys for WAL locations (merge request)
• Update colors in the user activity calendar (merge request)
• Fix group transfer not transfering groups (merge request) GitLab Enterprise Edition
• Database saved audit events now stream with primary key id (merge request) GitLab Enterprise Edition
• Fix scroll to line number range (merge request)
• Limit project download limit to group namespaces (merge request)
• Fix Sidekiq::Worker::EnqueueFromTransactionError in audit event stream (merge request) GitLab Enterprise Edition
• Fix Group SAML mismatched extern_uid redirect loop (merge request) GitLab Enterprise Edition
• Added classes to hide HR on mobile (merge request)
• Handle ambiguous reference error (merge request)
• Use ind_jsonb type class directly for ApplicationSetting (merge request) GitLab Enterprise Edition
• Register custom Active Record types earlier during boot (merge request)
• Add security_policy_bot user for scan execution policies (merge request) GitLab Enterprise Edition
• Fix Chat Integrations TEST endpoint (merge request)
• GitLab Migration - fail early if export status on source is empty for 5m (merge request)
• Fix deleting protected branch (merge request)
• Fix: kroki settings locale issue by @JeremyWuuuuu (merge request)
• Fix: spam locale issue by @JeremyWuuuuu (merge request)
• Always hide the loader spinner when clicking a tab (merge request)
• Validate UserDetail#website_url only on update (merge request)
• Properly change the URL when changing MR tabs (merge request)
• Fix invite members shared examples (merge request)
• Show how many commits behind an MR is when merge controls are visible (merge request)
• Document how to fix PDF views with LFS and proxy_download disabled (merge request)
• Fix: todos due date locale issue by @JeremyWuuuuu (merge request)
• Highligh classes tweak (merge request)
• Fix: jobs table header locale issue by @JeremyWuuuuu (merge request)
• Fix: locale on admin dashboard by @JeremyWuuuuu (merge request) GitLab Enterprise Edition
• Fixing misspelled stories file name (merge request)
• Remove feature flag ci_retry_job_fix for retry job fix (merge request)

Changed (261 changes)

• Adjusting the default attachment size on self hosted instances (merge request)
• Doc changes for housekeeping documentation (merge request)
• Add vulnerability in PipelineSecurityReportFinding (merge request) GitLab Enterprise Edition
• Make repository snapshotting configurable per replicable (merge request) GitLab Enterprise Edition
• Associate iteration to a work item during creation (merge request)
• Filter out insights charts based on settings (merge request) GitLab Enterprise Edition
• Refresh Slack app home with notifications (merge request) GitLab Enterprise Edition
• Allow Define Tags for Scan Execution Policies (merge request)
• Switch to use a button click to start a new thread (merge request)
• Update user preference Web IDE terminology (merge request)
• Update dotnetcore project template (merge request)
• Sidebar - remove legacy code and feature flag refs (merge request)
• Show add activation code for all subscriptions (merge request) GitLab Enterprise Edition
• Update site_profile to accept file path for graphql scans (merge request)
• Update enabled default value from false to true (merge request)
• Set GOGC for gitlab-metrics-exporter (merge request)
• Run SAST and Dependency Scanning from enforced policies in same pipeline (merge request) GitLab Enterprise Edition
• Migrate to ref_selector.vue (merge request)
• Replace bootstrap dropdown (merge request)
• Change help page path for job timeouts by @Taucher2003 (merge request)
• Add event type information for name attribute by @daelmo (merge request) GitLab Enterprise Edition
• Remove markup_rendering_timeout feature flag (merge request)
• Store slack authorized scopes (merge request)
• Update permissions for epic quick actions (merge request) GitLab Enterprise Edition
• Restrict access to a CI/CD tunnel to specific environments (merge request)
• Restrict changing of issue type (merge request)
• Apply suggested documentation change (merge request)
• Remove feature flag ci_reuse_build_in_seed_context (merge request)
• Cascade partition_id to Ci::Resource (merge request)
• Add event name information for external status check changes by @daelmo (merge request) GitLab Enterprise Edition
• Squash housekeeping period options into a single one (merge request)
• Improve system note for alert resolution from incidents closing (merge request)
• Remove manage subscription button (merge request) GitLab Enterprise Edition
• Remove stage-cell class (merge request)
• Flipped the editable flag on the form for Slack (merge request)
• Improve CI config timeout error message and Update error title (merge request)
• Increase contrast ratio of buttons (merge request)
• Migrate trial's namespace selector away from select2 (merge request) GitLab Enterprise Edition
• Moves done button for to-dos on small devices (merge request)
• Remove gl-card related styles (merge request)
• Move title for todo to beginning of line (merge request)
• This MR migrates Dropdown to Listbox (merge request)
• Do not enable advanced user search if the level is group or project (merge request) GitLab Enterprise Edition
• Refactor group overview tabs empty state (merge request)
• Skip create project push rule by @lyb124553153 (merge request) GitLab Enterprise Edition
• Enable pipeline_tabs_vue by default (merge request)
• Update permissions to add child epics (merge request) GitLab Enterprise Edition
• Removed hierarchy_db_restrictions flag (merge request)
• Support just one node version for from-source install (merge request)
• Add resolved Indicator to CodeQuality MR Widget (merge request)
• Improve NTP check converting to multi_check (merge request) GitLab Enterprise Edition
• Exclude Bots from Billable Members on SaaS (merge request)
• Update send_user_confirmation_email usage (merge request)
• Update UI text for push events (merge request)
• Migrate pajamas buttons in invitation template (merge request)
• Coupon code input for new SaaS purchase (merge request) GitLab Enterprise Edition
• Remove quotes from hash keys by @daelmo (merge request) GitLab Enterprise Edition
• Apply rubocop, lint and team suggestions by @daelmo (merge request) GitLab Enterprise Edition
• Add event type information for branch_name_regex attribute by @daelmo (merge request) GitLab Enterprise Edition
• Add event type information for commit_message_regex attribute by @daelmo (merge request) GitLab Enterprise Edition
• Add event type information for commit_message_negative_regex attribute by @daelmo (merge request) GitLab Enterprise Edition
• Add event type information for author_email_regex attribute by @daelmo (merge request) GitLab Enterprise Edition
• Add event type information for file_name_regex attribute by @daelmo (merge request) GitLab Enterprise Edition
• Add event type information for max_file_size attribute by @daelmo (merge request) GitLab Enterprise Edition
• Migrate GlDropdown in source_branch_dropdown.vue to GlCollapsibleListbox (merge request)
• Add new project features to API (merge request)
• Implement max limit for assigned issues count (merge request)
• Include max_terraform_state_size_bytes in the Application Settings API (merge request)
• Add syntax options drawer to topBar component (merge request)
• Increase partition size of security_findings table (merge request) GitLab Enterprise Edition
• Ignore tags for child pipeline in scan execution policy (merge request) GitLab Enterprise Edition
• Simplify getFormattedScanners logic for vulnerability report tool filter (merge request) GitLab Enterprise Edition
• Add disable personal access tokens to ApplicationSettings (merge request)
• Bump kas version to v15.7.0 (merge request)
• Output gitaly addresses instead of gitaly storage directories (merge request)
• Cleanup run_pipeline_graphql feature flag (merge request)
• Update storage purchase messages (merge request) GitLab Enterprise Edition
• Remove sync button in subscription details footer (merge request) GitLab Enterprise Edition
• Only run sampling for batched background migrations for the current MR (merge request)
• Add Remember me in the SAML workflow (merge request) GitLab Enterprise Edition
• Remove skip trial links for trials/new (merge request) GitLab Enterprise Edition
• Unscope i18n strings that are incorrectly scoped in HAML files by @JonstonChan (merge request)
• This MR migrates Dropdown to Listbox (merge request)
• Add services and workers related to (merge request) GitLab Enterprise Edition
• Add api scope validation for access token (merge request)
• Move todo state to beginning (merge request)
• Fix the delete container repositories background job (merge request)
• Removed milestone widget completely out of FF (merge request)
• Show runner stats only when some runners are found (merge request)
• GitLab Upgrade Alert - Security Upgrade Alert Modal (merge request)
• Update global alert for notification read-only namespace (merge request) GitLab Enterprise Edition
• Add smaller thresholds for development environment (merge request) GitLab Enterprise Edition
• Remove GitHub Import rule from Danger (merge request)
• Use ALL_PROTECTED_BRANCHES text in rule editor for scan result policies (merge request) GitLab Enterprise Edition
• Improves layout of to do items (merge request) GitLab Enterprise Edition
• Remove adding Redis metrics from known_events (merge request)
• Remove ci_secure_files feature flag (merge request)
• Add max_terraform_state_size_bytes column to application_settings (merge request)
• Add index curator debug improvements (merge request) GitLab Enterprise Edition
• Set deduplication strategy :until_executed (merge request) GitLab Enterprise Edition
• This MR migrates button to pajamas component (merge request)
• Disable vulnerability feedback preloading when deprecated (merge request) GitLab Enterprise Edition
• Improve UX of Clear status after field (merge request)
• Fix image filter tooltip and remove tooltip show delay (merge request) GitLab Enterprise Edition
• Clean up image filter and cluster filter isLoading and error message (merge request) GitLab Enterprise Edition
• Add Limitable to project and group CI variables (merge request)
• Use CleanupTagsService in ContainerRepository::ContainerRepository (merge request)
• Create work item with iteration (merge request) GitLab Enterprise Edition
• Add filtering of pipelines by name to PipelinesFinder (merge request)
• Shows "No description" when description is missing (merge request)
• Move settings.scss to page_bundles (merge request) GitLab Enterprise Edition
• Run model validations when importing from GitHub (merge request)
• Update button component in the security banner (merge request)
• Ensure vulnerability issues are marked confidential (merge request) GitLab Enterprise Edition
• Add Snowplow context to ecosystem_total_unique_counts_monthly events (merge request)
• Adds feature_category attribute to BatchedMigrationJob (merge request)
• Add a popover to uploads row in storage usage (merge request) GitLab Enterprise Edition
• Update parser gem to 3.1.3.0 (merge request)
• Enable display_merge_conflicts_in_diff feature flag by default (merge request)
• Add index for health status ordering (merge request)
• Replace the rocket icon with the deployments icon by @dabian.versalle (merge request)
• Manual migration of createFlash to createAlert (merge request)
• Move issuable.scss into page_bundles (merge request) GitLab Enterprise Edition
• Add Helm version policy to agent instructions (merge request)
• Diagnostic reports: compress files (merge request)
• Update button on _todo partial to Pajamas component (merge request)
• Present all GitLab for Slack triggers as unchecked (merge request) GitLab Enterprise Edition
• This MR migrates submit buttons to pajamas component (merge request)
• Add correct event type information for user update service by @daelmo (merge request) GitLab Enterprise Edition
• Unscope i18n strings that are incorrectly scoped in Ruby files by @JonstonChan (merge request)
• Make existing scope use outbound (merge request)
• Exit with failure code when sidekiq-cluster child process fails (merge request)
• Update the button component in the page domains (merge request)
• Add dependency_list_export model (merge request) GitLab Enterprise Edition
• Convert invalid AR scope to class method (merge request)
• Delete repo immediately (merge request)
• Display createdAt in releases overview page when sorting by release date by @n0rdlicht (merge request)
• Move pipeline_editor to ~/ci/ by @ali_o_kan (merge request)
• Replace 'pipeline' with 'quota' icon in user profile (merge request)
• Add migration for unique scope links (merge request)
• Scope i18n strings that are incorrectly unscoped by @JonstonChan (merge request)
• Update vendored .NET Core project to match project template by @JonstonChan (merge request)
• Update vendored Rails project to match project template by @JonstonChan (merge request)
• Update vendored Middleman project to match project template by @JonstonChan (merge request)
• Update GitLab Pages to v1.64.0 (merge request)
• This MR adds GRAPHQL option (merge request) GitLab Enterprise Edition
• Remove the new prefix in all gl-new-dropdown- instances by @gitlab-dependency-update-bot (merge request)
• Disable pagination counts for Jobs API (merge request)
• Batched bg migrations to pick feature-category from calling context (merge request)
• Adapt Conan API to consider the package registry access level by @wwwjon (merge request)
• Set Sidekiq default max concurrency to 20 (merge request)
• Refactor CodeQuality Finding Detail List (merge request)
• Add context to PostReceive and MergeRequestActivity Snowplow events (merge request)
• Fix webhook redirects (merge request)
• Bump doorkeeper-openid_connect to v1.8.3 (merge request)
• Update gitlab-shell to 14.14.0 (merge request)
• Update remove to use Pajamas button component (merge request)
• Introduce progress widget for work items (merge request)
• Remove feature_flags/form.scss and .rollout-percentage classes (merge request)
• Adjust alignment of Codequality inline Icons (merge request)
• Adds index as a key to the cache key (merge request)
• This MR request fix stuck validation (merge request) GitLab Enterprise Edition
• Remove orphans for approval project and (merge request) GitLab Enterprise Edition
• This MR migrates submit buttons to pajamas component (merge request)
• Redesign Package Registry project setting by @wwwjon (merge request)
• Block weak passwords by default and remove the feature flag (merge request)
• Support finished before and after in Deployments API (merge request)
• Enable dependency proxy blob replication by default (merge request) GitLab Enterprise Edition
• Improve help-text for Monitor visibility setting by @ali_o_kan (merge request)
• Highlight go.sum files on client, add links (merge request)
• This MR adds functionality to toggle sidebars (merge request) GitLab Enterprise Edition
• Remove th classes in job/sidebar/trigger table (merge request)
• Add last login to billable members sorting options (merge request) GitLab Enterprise Edition
• Renamed haml vars (merge request)
• Move ee/reports/ to ee/ci/reports/ by @ali_o_kan (merge request) GitLab Enterprise Edition
• Add data to the search context (merge request)
• Add last login date to billable members table (merge request) GitLab Enterprise Edition
• Move ~/ci_lint to ~/ci/ci_lint by @ali_o_kan (merge request)
• Add documentation for Advanced Search and AWS permissions (merge request)
• Remove default value for agent in policy editor (merge request) GitLab Enterprise Edition
• Update copy in sign up enabled alert (merge request)
• Rename GitLab for Slack app in integration copy (merge request) GitLab Enterprise Edition
• Increase limit on State Transitions comment column (merge request)
• Revised headings to be more consistent (merge request)
• Default enable FF for environments search within folders (merge request)
• Put Users category after Projects category (merge request)
• Install two versions of Sentry Client SDK (merge request)
• This MR adjusts padding for a sidebar content (merge request) GitLab Enterprise Edition
• Improve hint for repository access (merge request)
• Update agent installation command (merge request)
• Open api members (merge request)
• Open api groups (merge request)
• Remove the webhooks_failed_callout feature-flag (merge request)
• Update doorkeeper and doorkeeper-openid_connect gems (merge request)
• GitLab Upgrade Alert - Security Upgrade Alert (merge request)
• Remove secure_files_metadata_parsers feature flag (merge request)
• Add index for group paths (merge request)
• Install two versions of Sentry (merge request)
• This MR migrates submit buttons to pajamas component (merge request)
• Fix error when pushing to a contributor's branch on a fork (merge request)
• Enhance load-error event handling for ZuoraSimple Component (merge request) GitLab Enterprise Edition
• Add mirror_branch_regex to projects and remote_mirrors by @lyb124553153 (merge request) GitLab Enterprise Edition
• Event type for framework is updated (merge request) GitLab Enterprise Edition
• Add limit to recent group activity numbers (merge request) GitLab Enterprise Edition
• Inactive project deletion now uses admin bot user account (merge request)
• Limit group activity metrics value to 999 (merge request) GitLab Enterprise Edition
• Vertical Navigation counter over limit mark (merge request)
• This MR adds pre-scan verification sidebar (merge request) GitLab Enterprise Edition
• Enable require_approval_on_scan_removal by default (merge request) GitLab Enterprise Edition
• Add user autocompletion to search bar (merge request)
• Advanced search for the users scope (merge request) GitLab Enterprise Edition
• Avoid collisions of ids for stream only audit events (merge request) GitLab Enterprise Edition
• Enabled locally hosted schema by default (merge request)
• Open API events (merge request)
• Rename integration to GitLab for Slack app (merge request)
• Enable usage_quotas_pipelines_vue by default (merge request) GitLab Enterprise Edition
• Allow pipeline logger to instrument observations once (merge request)
• Add debug_trace to ci_builds_metadata (merge request)
• Show masked aws secret key if set for Advaced Search (merge request) GitLab Enterprise Edition
• Index users as part of indexing rake task (merge request) GitLab Enterprise Edition
• Show more details in branch rules (merge request)
• Upgrade VersionSorter to 2.3.0 (merge request)
• Switch the order of info and navigation block on project detail page (merge request)
• Improve stale runners cleanup toggle help text (merge request) GitLab Enterprise Edition
• Adapt Composer API to consider the package registry access level by @wwwjon (merge request)
• Add Gon variables when rendering devise two factor by @icbd (merge request)
• Set migration when when dismissing Findings (merge request) GitLab Enterprise Edition
• Allow agents to authorize projects in the same user namespace (merge request)
• Right align expand MR sidebar button on small-medium screens (merge request)
• Remove web_hooks_disable_failed feature-flag (merge request)
• Add runtime warning for group and sub-group scan result policies (merge request) GitLab Enterprise Edition
• Skip auto-cancelation when child pipeline is created (merge request)
• Add Codequality multiple findings indicator (merge request)
• Make merger_requests documentation more consistent (merge request)
• Switched Web IDE to local schema for CI config (merge request)
• Do not display package details if package's status is not default (merge request)
• Move the logic for determining which groups user search is performed on (merge request)
• Remove flag exemption for webhook rate limits (merge request)
• Read GraphQL PackageLinks to render link to package details page (merge request)
• Move from one-to-one to one-to-many for issue alert (merge request)
• Paginate shared runners in CI/CD settings (merge request)
• Make createAlert clears all previous alerts (merge request)
• Remove temp index from vulnerability_occurrences on id and scanner_id (merge request)
• Add branch name to BranchCheck error message (merge request) GitLab Enterprise Edition
• Remove use_introspect_parser feature flag (merge request)
• Creates stages for fixtures 14_pipelines (merge request)
• Test cases: Update empty state copy (merge request) GitLab Enterprise Edition
• Add arm64 URL for MacOS runner to Runner settings (merge request)
• Fix LockedWarning error message when epic by @ali_o_kan (merge request)
• Add default value to the scanner column within (merge request)
• Adapt NuGet API to consider the package registry access level by @wwwjon (merge request)
• Improved project and group home page header by @zillemarco (merge request) GitLab Enterprise Edition
• Move container scanning template to Jobs folder (merge request) GitLab Enterprise Edition
• Add search curation to :elastic trait (merge request) GitLab Enterprise Edition
• Introduce timeout for SyntaxHighlight filter (merge request)
• Sync UI content with tab label (merge request)
• Schedules: Remove card from empty state (merge request)
• Add index for sorting issues by health status (merge request)
• Add inclusion parameter for Search::IndexCurator (merge request) GitLab Enterprise Edition
• Move location of binary for coverage fuzzing (merge request) GitLab Enterprise Edition
• Remove Sidekiq standalone references from systemd examples (merge request)

Deprecated (4 changes)

• Update deprecation documents (merge request)
• Deprecation announcement for registration token reset (merge request)
• Remove add_column_with_default (merge request)
• Remove Timecop (merge request)

Removed (35 changes)

• Remove project_list_filter_bar (merge request)
• Revert - multi_pipeline_scan_result_policies feature (merge request) GitLab Enterprise Edition
• Remove google code as an import source (merge request)
• Removed metrics_dashboard_exhaustive_validations feature flag by @mhdasm3 (merge request)
• Do not show "No license. All rights reserved" on repository pages by @zehkira (merge request)
• Remove upgrade status badge in runner list (merge request) GitLab Enterprise Edition
• Remove Measurable feaure flags (merge request)
• Removes usage_data_diff_searches flag definition (merge request)
• Remove Profile CI minutes usage old app (merge request) GitLab Enterprise Edition
• Remove broken metric for unique authors (merge request)
• Remove Group CI minutes usage old app (merge request) GitLab Enterprise Edition
• Remove remaining old ruby code for usage quotas - pipelines (merge request) GitLab Enterprise Edition
• Remove vulnerability management survey (merge request) GitLab Enterprise Edition
• Remove usage_quotas_pipelines_vue feature flag (merge request) GitLab Enterprise Edition
• Remove an old scope (merge request)
• Removed prometheus_computed_alerts feature flag by @mhdasm3 (merge request)
• Remove Flowdock integration (merge request)
• Removed introductory tasks message (merge request)
• Drop deprecated experiment tables (merge request)
• Removed feature flag for coverage_report (merge request)
• Remove disable_metric_dashboard_refresh_rate feature flag & feature by @ali_o_kan (merge request)
• Drop job_artifact_registry.success column (merge request)
• Remove Flowdock integration records (merge request)
• Remove legacy ContainerRepository replication (merge request)
• Remove vulnerability report export button popover (merge request) GitLab Enterprise Edition
• Remove banner that links Group Runners page (merge request)
• Remove another unused index on vulnerabilities (merge request)
• Remove unused index on vulnerabilities table (merge request)
• Remove global_search_error_rate_sli feature flag (merge request)
• Remove unnecessary index for Feedback migration (merge request)
• Revert "Merge branch 'mk/geo-fix-saml-redirect-after-sign-in' into 'master'" (merge request) GitLab Enterprise Edition
• Remove pagination_without_next_page_query FF (merge request)
• Remove namespaces.tmp_project_id column (merge request)
• Remove jira_raise_timeouts feature flag (merge request)
• Remove feature flag root_statistics_worker_read_replica (merge request)

Security (17 changes)

• HTML content injection in README file
• Send resolved_address param to gitaly during repository import
• Redact user emails from project webhook data
• Sync canonical into security
• Deny all package permissions when group access is restricted by IP
• Update security with canonical changes
• Cross-site scripting in Jira Integration
• Brings canonical changes into security master
• Resolve merge confict of !103570
• Prevent deploy token bypass for external authentication
• Redact secret tokens from web-hook logs
• Protect web-hook secret tokens after changing URL
• Add defense in depth escape calls (merge request)
• Update after_import to expire cache before removing prohibited branches
• Add size validation during nuspec file extraction
• Prevent unauthorized users from seeing Release information on tag pages
• Disallow local URls for build_runner_session if dictated by app setting

Performance (17 changes)

• GraphQL: Preload merge_mequest if needed (merge request)
• Improve billable users query (merge request)
• Remove two unnecessary queries from Unleash endpoint (merge request)
• Add worker to prune old export jobs (merge request)
• Cache project integration records for hooks (merge request)
• Cleanup ci_assign_job_token_on_scheduling feature flag (merge request)
• Fix preload_associations for projects (merge request) GitLab Enterprise Edition
• Use single request for runners list (merge request)
• Improve performance of CounterUserAuth metric (merge request)
• Allow IssuePolicy.can_read_confidential to be preloaded (merge request)
• Use EventedFileUpdateChecker as file_watcher (merge request)
• Remove conditional from line loop (merge request)
• Remove additional loop from highlighter rendering (merge request)
• Faster feature flag readout (merge request)
• Preload access levels and nested fields using lookahead (merge request) GitLab Enterprise Edition
• Remove lazy_load_commits feature flag (merge request)
• Limit Project.environments field call count (merge request)

Other (94 changes)

• Remove the automated_email_provision feature flag (merge request) GitLab Enterprise Edition
• Clean up split_operations_visibility_permissions feature flag (merge request)
• Fix RSpec/LeakyConstantDeclaration cop violations by @mhdasm3 (merge request)
• Improve license text on subscription page (merge request) GitLab Enterprise Edition
• Fix Style/ClassAndModuleChildren offenses by @mhdasm3 (merge request)
• Refactor Workhorse failed request handling (merge request)
• Update /duplicate action description (merge request)
• Remove feature flag ci_update_unlocked_job_artifacts (merge request)
• Fix Style/StringConcatenation offenses by @mhdasm3 (merge request)
• Fix RSpec/LeakyConstantDeclaration cop violations by @mhdasm3 (merge request)
• Fix RSpec/LeakyConstantDeclaration cop violations by @mhdasm3 (merge request)
• Making Gitlab::Database::Migration[2.1] the default migration version (merge request)
• Background migration for environment tiers (merge request)
• Fix Rails/TimeZone offenses by @mhdasm3 (merge request) GitLab Enterprise Edition
• Fix Rails/ActiveRecordCallbacksOrder offenses by @mhdasm3 (merge request)
• Change copy of all report abuse links to 'Report abuse to administrator' (merge request)
• Use list_refs to implement find_all_branch_names and find_all_tag_names (merge request)
• Fix RSpec/LeakyConstantDeclaration cop violations by @mhdasm3 (merge request)
• Add popover to uploads cell in namespace storage (merge request) GitLab Enterprise Edition
• Fix Style/RedundantRegexpEscape offenses by @mhdasm3 (merge request)
• Fix Style/EmptyMethod offenses by @mhdasm3 (merge request)
• Fix Rspec/ExampleWording offenses by @mhdasm3 (merge request)
• Add back index_issues_on_work_item_type_id issues index (merge request)
• Changes Gitlab::UrlBlocker to make schemes a required field (merge request)
• Fixing Database/MultipleDatabases offenses in specs (merge request)
• Remove purge_stale_security_findings feature flag (merge request) GitLab Enterprise Edition
• Fix Style/IfUnlessModifier offenses by @mhdasm3 (merge request)
• Remove HeaderClone helper (merge request)
• Use request.Clone for CI long polling (merge request)
• Use director for reverse proxy headers (merge request)
• Fix Style/GuardClause offenses by @mhdasm3 (merge request)
• Enable & Fix Layout/SpaceInsideParens by @mhdasm3 (merge request)
• Fix Rspec/ScatteredLet offenses by @mhdasm3 (merge request)
• Log when Gitlab::URLBlocker.validate! is used with blank scheme (merge request)
• Fix Gitlab/StrongMemoizeAttr offenses by @mhdasm3 (merge request)
• Fix Style/KeywordParametersOrder offenses by @hayanaaz.n (merge request)
• Fix Style/KeywordParametersOrder offenses by @mhdasm3 (merge request)
• Fix Style/ExplicitBlockArgument offenses by @mhdasm3 (merge request)
• Fix Style/PercentLiteralDelimiters offenses by @mhdasm3 (merge request)
• Fix Layout/FirstHashElementIndentation offenses by @mhdasm3 (merge request)
• Fix Rspec/ExpectChange offenses by @mhdasm3 (merge request)
• Fix Layout/SpaceInLambdaLiteral offenses by @mhdasm3 (merge request)
• Fix Rspec/ReturnFromStub offenses by @mhdasm3 (merge request)
• Added delay for touch drag on board (merge request)
• Remove background_upload config setting (merge request)
• Fix Rspec/DescribedClass offenses by @mhdasm3 (merge request)
• Remove actors_aware_gitaly_calls flag (merge request)
• Fix Rspec/LetBeforeExamples offenses by @mhdasm3 (merge request)
• Fix Rspec/HooksBeforeExamples offenses by @mhdasm3 (merge request)
• Fix Performance/BindCall offenses by @mhdasm3 (merge request)
• Fix Style/IfInsideElse offenses by @mhdasm3 (merge request)
• Fix Style/RedundantInterpolation offenses in app & ee by @mhdasm3 (merge request)
• Remove stub for obsolete config setting (merge request)
• Remove stub for obsolete feature flag (merge request)
• Cleanup work_item_type_id issues table backfill (merge request)
• Remove feature flag "approval_rules_pagination" (merge request)
• Remove duplicate Workhorse logging code (merge request)
• Add batched background mg to prune export jobs (merge request)
• Remove ObjectStorage::BackgroundMove concern (merge request)
• Add service and worker to export projects in parallel (merge request)
• Add migration for jobs, update schema_migrations (merge request)
• Add more logs into config_compose to track CI slowness (merge request)
• Adding API::Admin::BatchedBackgroundMigratioins to OpenApiV2 docs (merge request)
• Remove unused issue trigram indexes (merge request)
• Enforce HTTP/HTTPS schemes in RestClient (merge request)
• Enforce URL schemes in mirror services (merge request) GitLab Enterprise Edition
• Enforce HTTP/HTTPS schemes in HTTPConnectionAdapter (merge request)
• Cleanup all Rubocop todo files that do not exist (merge request)
• Workhorse: simplify gRPC call metadata propagation (merge request)
• Remove jira_connect_oauth_self_managed_setting flag (merge request)
• Validate NOT NULL constraint on issues.work_item_type_id column (merge request)
• Workhorse: add call_metadata to GitalyServer (merge request)
• Remove feature flag "subgroups_approval_rules" (merge request)
• Verify method name in MailScheduler::NotificationServiceWorker (merge request)
• Enable the feature flag by default (merge request)
• Add job artifacts api to OpenAPI (merge request)
• Remove Repositories::TreeFinder inheritance (merge request)
• Add link to PA docs on admin settings section (merge request) GitLab Enterprise Edition
• RuboCop: Enable previously disabled Rails/Pluck by @edith007 (merge request)
• Create a GitAbuse::BaseThrottleService (merge request) GitLab Enterprise Edition
• Remove feature flag (merge request)
• Run migrations for index (merge request)
• Remove ObjectStorage::BackgroundMoveWorker (merge request)
• Update the language of the storage alerts copy (merge request) GitLab Enterprise Edition
• Remove background_upload documentation (merge request)
• Remove background_upload from Package uploaders (merge request)
• Mark background_upload metrics as broken (merge request)
• Adding partial index on project settings (merge request)
• Move the Etags check before writing the diff cache (merge request)
• Documenting DELETED_TABLES (merge request)
• Update docs for predefined CI/CD variables (merge request)
• Enforces HTTP/HTTPS schemes in KubeClient (merge request)
• Propagate RemoteIP to Gitaly via Workhorse (merge request)
• Documentation to reflect 100MB upload limit (merge request)

15.6.6 (2023-01-12)

No changes.

15.6.5 (2023-01-12)

No changes.

15.6.4 (2023-01-09)

Security (9 changes)

• Avoid regex with potential for poorly performing backtracking (merge request)
• Protect web-hook url variables after changing URL (merge request)
• Limit the size of user agent to reduce ReDos attack (merge request)
• Protect Sentry auth-token after changing URL (merge request)
• Delete project specific licenses when license policy is deleted (merge request)
• Restrict user avatar availability based on visibility restrictions (merge request)
• Policy change to read and destroy token without license for .com (merge request)
• Restrict Grafana API access on public projects (merge request)
• Fix "Race condition enables verified email forgery" (merge request)

15.6.3 (2022-12-21)

No changes.

15.6.2 (2022-12-05)

Added (1 change)

• Finalize group member namespace id migration (merge request)

Fixed (4 changes)

• Conditionally disable fastupdate on GIN indexes (issues, merge_requests) (merge request)
• Hide marketing-related entries (merge request)
• Fix memory limit for RssMemoryLimit monitor (merge request)
• Fix deleting protected branch (merge request)

15.6.1 (2022-11-30)

Fixed (1 change)

• Do not save PipelineMetadata if name is blank [15.6] (merge request)

Security (12 changes)

• Send resolved_address param to gitaly during repository import (merge request)
• Add size validation during nuspec file extraction (merge request)
• Cross-site scripting in Jira Integration (merge request)
• Protect web-hook secret tokens after changing URL (merge request)
• HTML content injection in README file (merge request)
• Redact secret tokens from web-hook logs (merge request)
• Prevent unauthorized users from seeing Release information on tag pages (merge request)
• Update after_import to expire cache before removing prohibited branches (merge request)
• Deny all package permissions when group access is restricted by IP (merge request)
• Redact user emails from project webhook data (merge request)
• Disallow local URls for build_runner_session if dictated by app setting (merge request)
• Prevent token bypass for extenal authorisation (merge request)

15.6.0 (2022-11-21)

Added (150 changes)

• Migration to backfill users into elastic index (merge request) GitLab Enterprise Edition
• Enable Group-level Scan Result Policies feature by default (merge request) GitLab Enterprise Edition
• Create the first dynamic partition for builds metadata (merge request)
• Allows cascading package forward settings from admin to group (merge request)
• Add enterprise information to Metadata API (merge request)
• Introduce a limit of 200 assignees to issues/MRs (merge request)
• Add a rake task to sanitize internal note todos (merge request)
• Create Telesign services for phone verification (merge request)
• Add trend indicators to the Exec dashboard comparative table (merge request)
• Add database migrations for dependency proxy blobs in SSF (merge request) GitLab Enterprise Edition
• Bulk delete packages for package list (merge request)
• Add global alert for non-owners read-only namespace (merge request) GitLab Enterprise Edition
• [355137] Migrate MR review requests (merge request)
• Merge trains GET API by @markus.ferrell (merge request) GitLab Enterprise Edition
• Add issue health status sorting to GraphQL (merge request) GitLab Enterprise Edition
• Support for highlighting text in content editor (merge request)
• Add UserCounts to the OpenAPI documentation (merge request)
• Removes ci_variable_expansion_in_rules_exists (merge request)
• Add supporting index for Feedback migration (merge request)
• Add Projects::WikiRepository model (merge request)
• Support creation of Objective via work-items (merge request) GitLab Enterprise Edition
• Add index to vulnerability reads to account for no status filtering (merge request)
• Add matchingBranchesCount to branch rules endpoint (merge request)
• Add keyboard shortcut for review requests page (merge request)
• Add a service to create a merge request from a security finding (merge request) GitLab Enterprise Edition
• Add repository actor support to Feature api (merge request) GitLab Enterprise Edition
• Add API::Wikis to OpenAPI V2 (merge request)
• Add top level securityReportFinding query (merge request) GitLab Enterprise Edition
• Upgrade Pages to v1.63.0 (merge request)
• Log CI artifact size when downloaded via UI (merge request)
• Branch rules status check integration (merge request)
• Audit log when a merge request is merged with invalid approval rules (merge request)
• Allow caching of mergeability checks (merge request)
• Allow delete runners in bulk in group runner page (merge request)
• Support Google Cloud CDN for Web UI artifacts downloads (merge request)
• Provide support for multiple approval rules (merge request) GitLab Enterprise Edition
• API annotations for status checks apis (merge request) GitLab Enterprise Edition
• Save vulnerability findings data into security_findings table (merge request) GitLab Enterprise Edition
• Re-enqueue update of epic cached counts (merge request)
• Add temporary column ci_project_monthly_usages.new_amount_used (merge request)
• Fix robocop failures (merge request) GitLab Enterprise Edition
• Readd member namespace id not null (merge request)
• Add querystring sync component for vulnerability report (merge request) GitLab Enterprise Edition
• Add disable_download_button settings for JH-only feature by @LXY1226 (merge request)
• Truncate the title of the issue while creating from vulnerability (merge request)
• Add committer name check to push_rules by @zhzhang93 (merge request) GitLab Enterprise Edition
• Add associations alert to Delete user and contributions modal (merge request)
• Add API::VulnerabilityFindings to OpenApi V2 (merge request) GitLab Enterprise Edition
• Add purl_type to sbom_components (merge request)
• Update deployment tags to only match the current deployment commit (merge request)
• Add OpenApi documentation for CiLint (merge request)
• Add external status checks failed MR widget (merge request) GitLab Enterprise Edition
• Realtime updates for task descriptions (merge request)
• Add API::ProjectSnippets to OpenAPI V2 (merge request)
• Update GroupActivityAnalytics docs for OpenAPI (merge request) GitLab Enterprise Edition
• Background migrations split and retry on ActiveRecord::QueryCanceled (merge request)
• Add externalStatusChecks to graphql endpoint (merge request) GitLab Enterprise Edition
• Include iteration on create issue page by @songhuangcn (merge request) GitLab Enterprise Edition
• Add Rss Memory Growth monitor for Watchdog (merge request)
• Rollout incident_timeline_events_for_severity feature flag (merge request)
• Add AddIndexOnPasswordLastChangedAtToUserDetails migration by @qt-gith (merge request)
• Add API::PersonalAccessToken to OpenAPI V2 (merge request)
• Add OpenAPI documentation for keys (merge request)
• Added pagination to Other Versions packages list by @geriley (merge request)
• Contribution analytics, expose user contributions (merge request) GitLab Enterprise Edition
• Add limited capacity job to destroy container repositories (merge request)
• Add create mutation for timeline event tags (merge request)
• Allow Releases to be published without giving access to source code (merge request)
• Import 'Allow force pushes - everyone' GitHub branch protection rule (merge request)
• Recreate async index for vulnerability reads location image (merge request)
• Add product analytics admin section (merge request) GitLab Enterprise Edition
• Add API::PersonalAccessTokens::SelfInformation to OpenAPI V2 (merge request)
• Added temporary index for uploads_size (merge request)
• Create GroupCommitEmail model and database table (merge request)
• Track users updating milestone for work items (merge request)
• Add GIT_SUBMODULES_DEPTH variable documentation by @bollenn (merge request)
• Add the Geo::ProjectWikiRepositoryRegistry model (merge request) GitLab Enterprise Edition
• Add the registry table to track replication/verification state (merge request) GitLab Enterprise Edition
• Adds search bar to Usage Quotas > Storage tab (merge request) GitLab Enterprise Edition
• Map 'Require review from Code Owners' GitHub rule with GitLab setting (merge request) GitLab Enterprise Edition
• Add error message to insights when query times out (merge request) GitLab Enterprise Edition
• Add OpenAPI documentation for Keys (merge request)
• Add create service, finder for tags (merge request)
• Add findings_data column to security_findings table (merge request)
• Add default_preferred_language to application_settings by @icbd (merge request)
• Prepare for uuid type change (merge request)
• Event type information for group merge request setting updates (merge request) GitLab Enterprise Edition
• Implemented get RPM repository files endpoint by @Mshab (merge request)
• Allow OR params in GraphQL issue resolvers (merge request)
• Add API::Suggestions to OpenAPI V2 (merge request)
• Add API::ResourceAccessToken to OpenAPI V2 (merge request)
• Add project headers to release notifications (merge request)
• Implement Check constraint preventing redundant state transitions (merge request)
• Add status checks must succeed setting to project merge request settings (merge request) GitLab Enterprise Edition
• Add commit_committer_name_check to push_rules by @zhzhang93 (merge request)
• Add 'mirror_branch_regex' to 'project_settings' and 'remote_mirrors' by @lyb124553153 (merge request)
• Allow setting max PG replicas rails process connects to (merge request)
• Add query param to remove deprecated GraphQL schema items by @fabsrc (merge request)
• Adds ml candidate and experiment lists (merge request)
• Add detailed_merge_status to web hooks (merge request)
• Add API annotations for Product Analytics APIs (merge request) GitLab Enterprise Edition
• Add a foreign key on Project#creator_id (merge request)
• Enable dast_api_scanner feature flag (merge request) GitLab Enterprise Edition
• Add detailed_merge_status to REST API (merge request)
• Add anon and file-backed RSS metrics (merge request)
• Add GraphQL subscription for milestone assignment (merge request)
• Add API::MergeRequestDiffs to OpenApi V2 (merge request)
• Add confidential quick command for epics (merge request)
• Add secure schemas version 15.0.4 (merge request)
• Migration and model for audit event type streaming filter (merge request)
• Configure branch name for creating MR from an issue (merge request)
• GraphQL: add commit signature field by @brianjaustin (merge request)
• Add admin OAuth limit setting (merge request)
• Add work item milestone widget (merge request)
• Add take ownership mutation (merge request)
• Expose id field for protected ref API entities (merge request)
• Lock tables for partitioning (merge request)
• Add assignRunner to user permissions (merge request)
• Add index for id on scan finding approval_merge_request_rules (merge request)
• Add languages field to GraphQL Project type by @fabsrc (merge request)
• Add metrics for users creating MRs with applied scan result policies (merge request)
• Update(webhook): support both wildcard & regex by @JeremyWuuuuu (merge request) GitLab Enterprise Edition
• Improve CRM contacts quick actions suggestions by @zillemarco (merge request)
• Add JC proxy_url application setting (merge request)
• Add instrumentation for cache efficiency metrics (merge request)
• Add info popover MR security report widget (merge request) GitLab Enterprise Edition
• Add descending index for vulnerability reads group filters (merge request)
• Allow epics having child issues from different group hierarchies (merge request) GitLab Enterprise Edition
• Add API::AccessRequests to OpenAPI V2 (merge request)
• New API endpoint to display the user's count of associations (merge request)
• Add Rake task to migrate queued jobs (merge request)
• Cascading settings for package forwarding (merge request)
• Add database and model support for "Group-level Protected Branches" by @songhuangcn (merge request)
• Added the ability to move issues in bulk by @zillemarco (merge request)
• Enables MLFlow artifact storage (merge request)
• Update issue references during GitLab Migration (merge request)
• Add product_analytics_enabled application setting (merge request)
• Allow filtering work items by status widget (merge request) GitLab Enterprise Edition
• Backfill project namespace metadata (merge request)
• Group owners to disable 2FA auth for members (merge request) GitLab Enterprise Edition
• Add GraphQL APIs for updating the group's default compliance framework (merge request) GitLab Enterprise Edition
• Add metrics for user merge request with assigned security policy project (merge request)
• Partition ci_builds_metadata table (merge request)
• Add AI Assist allowed status endpoint (merge request) GitLab Enterprise Edition
• Add duration and queued duration to runner jobs (merge request)
• Trigger mergeRequestMergeStatusUpdated when MR gets approved/unapproved (merge request)
• Add basic JSON helpers (merge request)
• Graphql query for deployment approval summary (merge request)
• Add unprotectAccessLevels to EE graphql endpoint (merge request) GitLab Enterprise Edition
• Pull mirror GET API by @markus.ferrell (merge request) GitLab Enterprise Edition

Fixed (131 changes)

• Improve delete merged branches modal UX (merge request)
• Use project full_path and project iterations query rather than group (merge request)
• Fix: new merge request locale issue by @JeremyWuuuuu (merge request)
• Do not allow forward usage of .strong_memoize_attr() by @KyleFromKitware (merge request)
• Fix: devops adoption locale issue by @JeremyWuuuuu (merge request) GitLab Enterprise Edition
• Don't use redundant validation in ChangedLabel importer (merge request)
• Fix: pipeline minigraph wrong offset issue by @JeremyWuuuuu (merge request)
• Do not allow the last direct owner to leave top-level group (merge request)
• Convert relative repository file link into absolute link by @wwwjon (merge request)
• GitHub integration: use unique context for each pipeline by @KyleFromKitware (merge request) GitLab Enterprise Edition
• Fix sub-language highlighting (merge request)
• Improve statistic calculation for Vulnerabilities (merge request) GitLab Enterprise Edition
• Fix OpenAPI V2 document generation (merge request)
• Ensure Gitlab::Json::RailsEncoder fails the same on invalid UTF-8 (merge request)
• Set max limit to items in suggestions to 15 (merge request)
• Ignores ingress fetch failure for k8s less than 1.19 (merge request)
• Fix tabbing issue on the agents' list (merge request)
• Allow SCIM deprovision when user is not a group member (merge request) GitLab Enterprise Edition
• Dont fail RepositoryImportWorker when ImportService returns an error (merge request) GitLab Enterprise Edition
• Fix Environment Nil error in allowed_agents API (merge request)
• Handle case where selecting a tree entry parent may not have a tree (merge request)
• Keep job expanded while deleting artifact from it (merge request)
• Increase X509 subject attribute column limit by @L11R (merge request)
• Guard On-call Schedule and Escalation Policies URLs if disabled (merge request) GitLab Enterprise Edition
• Update oj-introspect to 0.7.1 (merge request)
• Fix 500 error when tag_name or ref_name are empty (merge request)
• Add auto-scrolling to dropdown during keyboard nav by @kbal11 (merge request)
• Fix a link to incident management configuration docs (merge request) GitLab Enterprise Edition
• Fix undefined method error when merge request is missing (merge request)
• GraphQL: Fix error when bulk deleting runners (merge request)
• Correct text colours on the dark-mode billing page (merge request) GitLab Enterprise Edition
• Revert Sidekiq default routing rules (merge request)
• Allow rollout of older deployment jobs if it's the same SHA (merge request)
• Remove "currently" from some UI text (merge request)
• Prevent impersonation of users with expired passwords (merge request)
• Geo: Fix redirect to secondary after SAML sign in (merge request) GitLab Enterprise Edition
• Show group access tokens in admin cred inventory (merge request) GitLab Enterprise Edition
• Show link to Terms of Use on Sign In only if terms exist by @wwwjon (merge request)
• Associate iteration with work item only when the FF is on (merge request)
• Fix redeploy button behavior (merge request)
• Improve source file syntax highlighting (merge request)
• Update create merge request service to be compatible with transactions (merge request)
• Allow links to be opened from Swagger UI (merge request)
• Update cache keyword for the JSON schema (merge request)
• Fix pipeline state machine when retrying by @qt-gith (merge request)
• Clean up feature flag ajax_new_deploy_token (merge request)
• Fix checkboxes on work item descriptions (merge request)
• Fix TF_STATE_NAME default value in Terraform ci templates (merge request)
• Fix artifacts available for terraform template latest by @benjamincerigo (merge request)
• Allow '..' in resource group keys for use in the API (merge request)
• Avoid streaming audit events when there is no change (merge request) GitLab Enterprise Edition
• Remove the foreign key on Project#creator_id (merge request)
• Update broken heading link (merge request) GitLab Enterprise Edition
• Update verification state in the project_wiki_repository_state (merge request) GitLab Enterprise Edition
• Avoid empty metadata render in container registry (merge request)
• Add partial index for security_scans on id for non-purged records (merge request)
• Fix support for nil values for push rules validations (merge request) GitLab Enterprise Edition
• Update pg_query to v2.2.0 (merge request)
• Allow underscores in full text search query (merge request)
• Add project information to scanner for authorize (merge request) GitLab Enterprise Edition
• Use the same sanitize method for advanced and basic search (merge request) GitLab Enterprise Edition
• Prevent rewriting of joined table in statements to make queries work (merge request)
• Hide delete branch button when user doesn't have permission (merge request)
• Bump the size of elastic query for getting migrations (merge request) GitLab Enterprise Edition
• Fix markdown editor autofocus behavior (merge request)
• Issue: Fix spacing on emoji status in title (merge request)
• Add Hashie::Array to allowed YAML serialization classes (merge request)
• Keep milestone status when a project is transferred (merge request)
• Fix MR notes not showing author badges (merge request)
• Handle events that target vulnerabilities (merge request) GitLab Enterprise Edition
• Iterations bug fixed for task without a parent (merge request)
• Audit security policy project changes (merge request) GitLab Enterprise Edition
• Update loading state styling (merge request)
• Allow all http and https sources for media-src (merge request)
• Prevent search for when under 3 characters (merge request)
• Fix merge request header button alignment (merge request)
• Gracefully ignore non-string search parameters (merge request)
• Ensure additional_params is passed through (merge request)
• Approvers group does not persist after adding it to the approval rules (merge request)
• Container Repository, implement delete event (merge request) GitLab Enterprise Edition
• Test coverage: Extract source path OS-agnostically (merge request)
• Fix Opensearch compatibility check (merge request) GitLab Enterprise Edition
• Support Markdown in Jupyter output (merge request)
• Nullify created_projects relation on User delete (merge request)
• Refetch stage jobs in job log (merge request)
• Hide Tree view button on epics for Premium (merge request) GitLab Enterprise Edition
• Fix to allow empty array of associatedProjects (merge request)
• Correctly position tree view with performance bar (merge request)
• Remove deprecated attribute from cve_value logic (merge request) GitLab Enterprise Edition
• Show play button on environment detail page to deployment-only users (merge request) GitLab Enterprise Edition
• Fix GitHub company name on import page by @Taucher2003 (merge request)
• Adds block to label dropdown (merge request)
• Handle password manager auto-fill-then-submit (merge request) GitLab Enterprise Edition
• Add auditor access for group CI/CD Analytics (merge request) GitLab Enterprise Edition
• Fix comment preview of issuable link+ on epics (merge request) GitLab Enterprise Edition
• Wrap artifact names (merge request)
• Fix Jira namespace subscription bug (merge request)
• Add auditor access for group container registry (merge request) GitLab Enterprise Edition
• Include version suffix in agent install command (merge request)
• Fix audit event date-range inputs responsiveness (merge request) GitLab Enterprise Edition
• Truncate Legacy Tables should error on multiple-shared databases (merge request)
• Fix: locale on commits detail page by @JeremyWuuuuu (merge request)
• Fix header create new button vertical alignment (merge request)
• Add ability for top-level group owners to unban subgroup members (merge request)
• Improve mobile layout of MR widget (merge request)
• Vertically align MR badge and branch info (merge request)
• Fix issues with some scopes not being sent during token creation (merge request)
• Optimize UnestedInFilters query rewriter (merge request)
• GitLab Version - Fix nested links in help dropdown (merge request)
• Fixing cotaining => containing typo (merge request)
• Show re-deploy/rollback button to deployment-only users (merge request) GitLab Enterprise Edition
• Prevent web_hooks.recent_failures overflowing (merge request)
• Fix Ci::RegisterJobService return value (merge request)
• Fix design management styling in MR diff (merge request)
• Updated bulk move issues milestone in the docs by @zillemarco (merge request)
• Disable commenting on lines that will fail to save the comment (merge request)
• Preload indexing records in batches (merge request) GitLab Enterprise Edition
• Show mergedYaml content whenever available (merge request)
• Ensure schemas are up-to-date after migration tests complete (merge request)
• Admin email form - disable submit until required fields are completed (merge request) GitLab Enterprise Edition
• Update scrolling issue (merge request)
• Specify certificates when connecting to KAS using TLS (merge request)
• Fix vertical alignment of system note icon (merge request)
• Fix wrong behavior when CI keyword "when" is an array (merge request)
• Updates the PlayBuildService to use can_enqueue (merge request)
• Add terms disclaimer to Group SAML sign in page (merge request) GitLab Enterprise Edition
• Allow dashes in datadog site (merge request)
• Fix flaky tests for git rate-limiting services (merge request) GitLab Enterprise Edition
• Paths that aren't strings are considered invalid (merge request)
• Fix: locale on create protected tag page by @JeremyWuuuuu (merge request) GitLab Enterprise Edition
• Delete state transtions with no state change (merge request)

Changed (195 changes)

• Clean up ci_variable_settings_graphql ff (merge request)
• Improve user impersonation button UX by @geriley (merge request)
• Remove unusable feature flag (merge request)
• Remove index_user_callback feature flag (merge request)
• Fix a typo in suggestions REST API doc (merge request)
• Service account list links back to Google Cloud Console (merge request)
• Removed duplicated build package information (merge request)
• Pass search curation flag to elasticsearch indexer (merge request) GitLab Enterprise Edition
• Disable spellcheck on CI variables value field (merge request)
• Change validation for name in scan finding approval rules (merge request)
• Update merge request loading error message (merge request)
• Enable watchdog by default for Puma (merge request)
• This MR transfers method to vue_shared (merge request) GitLab Enterprise Edition
• Add highlight.js plugin to highlight podspec.json files (merge request)
• Add status checks and approval rules to branch details (merge request)
• Remove misleading strong emphasis in MR widget for vulnerabilities (merge request) GitLab Enterprise Edition
• Locked files: Update copy and UI (merge request) GitLab Enterprise Edition
• Update topics open api (merge request)
• Remove project-key-support conditional (merge request)
• Enable split_operations_visibility_permissions by default (merge request)
• Hide env scope field in Admin CI/CD variables (merge request)
• Add updated_at datetime to billable users blocks (merge request) GitLab Enterprise Edition
• Add dry_run parameter to Search::IndexCurator (merge request) GitLab Enterprise Edition
• Add namespace to token access (merge request)
• Implement AccessLevel User and Group types with limited fields (merge request) GitLab Enterprise Edition
• Update suggestions REST API documentation and include batch_apply (merge request)
• Add max_seats_used_changed_at index (merge request)
• Add title to runner delete error alert (merge request)
• Enable use_introspect_parser feature flag by default (merge request) GitLab Enterprise Edition
• Add highlight.js plugin to highlight podspec.json files (merge request)
• Adapt Maven API to consider the package registry access level by @wwwjon (merge request)
• Contributes to https://gitlab.com/gitlab-org/gitlab/-/issues/376870 (merge request)
• Adapt npm API to consider the package registry access level by @wwwjon (merge request)
• Refactor vulnerability report status filter (merge request) GitLab Enterprise Edition
• Add pipeline name to Slack pipeline messages (merge request)
• Remove Sidekiq jobs migration in 15.6 (merge request)
• Add new field webUrl to VulnerabilityType (merge request) GitLab Enterprise Edition
• Drop use_cdn_with_job_artifacts_ui_downloads feature flag (merge request)
• Pass column name to mount_file_store_uploader by @sathieu (merge request)
• Support structured error for UserCommitFiles (merge request)
• This MR alert message for pre-scan verification (merge request) GitLab Enterprise Edition
• Update messages for CI include validation errors (merge request)
• Allow using different icons for the help popover (merge request)
• Hide webhook value in chat integrations (merge request)
• Fixed broken links (merge request)
• Update global alert for read-only namespace (merge request)
• Open api invitations (merge request)
• Add new field webUrl to Code Quality Reports API response (merge request) GitLab Enterprise Edition
• Skip create rule for group when creating group by @lyb124553153 (merge request) GitLab Enterprise Edition
• Remove trigger_mr_subscription_on_merge_status_change feature flag (merge request)
• Open api badges (merge request)
• Clean up temporary code that fixed the wrongly backfilled expire_at (merge request)
• Project events open api (merge request)
• Remove temporary index on project_features (merge request)
• Move usage_quotas/pipelines directory (merge request) GitLab Enterprise Edition
• Update CI/CD variable value textarea maxRow to 10 (merge request)
• Require security approval when scans are removed in MR (merge request)
• Fix SSO enforcement for public projects (merge request) GitLab Enterprise Edition
• Remove highlighting from new issues (merge request)
• Add highlight.js plugin to highlight gemfiles (merge request)
• Include database name in Unsupported PostgreSQL warning (merge request)
• Update star_count on hooks and user state transitions by @bufferoverflow (merge request)
• Polish the UI for the projects list (merge request)
• Change job limit message (merge request) GitLab Enterprise Edition
• This MR migrates submit buttons to pajamas component (merge request) GitLab Enterprise Edition
• Search Page Vue vertical navigation (merge request)
• Add h1 to user profile page (merge request)
• Add raw to CI variable REST endpoints (merge request)
• Refactor vulnerability report image filter tooltip into image filter (merge request) GitLab Enterprise Edition
• Search Page Vue vertical navigation (merge request)
• Add notes summary into csv export (merge request) GitLab Enterprise Edition
• This MR adds stepped list for pre-scan verification (merge request) GitLab Enterprise Edition
• Migrate email_confirmation_setting value (merge request)
• Move usage_quotas/ci_minutes_usage directory (merge request) GitLab Enterprise Edition
• Bump gitlab-metrics-exporter version (merge request)
• Exclude Sidekiq retry errors from reportable Sentry events (merge request)
• Removes unused feature flag (merge request)
• Improve error handling of runners bulk deletion (merge request)
• Enabled purge_stale_security_findings flag by default (merge request) GitLab Enterprise Edition
• Update toggle description button to pajamas (merge request)
• Update delete milestone button to pajamas (merge request)
• Add tooltip to issue header ellipsis button (merge request)
• Recognize 'time' for time tracking quick actions by @Taucher2003 (merge request)
• Add custom context to active_users_project_repo event (merge request) GitLab Enterprise Edition
• Move API::BroadcastMessages endpoint (merge request)
• Enable new test summary widget (merge request)
• Squelch "Can't verify CSRF token authenticity" messages (merge request)
• Update access levels from protected branch api (merge request) GitLab Enterprise Edition
• Add search index curation (merge request) GitLab Enterprise Edition
• Remove End-of-Support analyzers from SAST config UI (merge request)
• Bump gitlab-metrics-exporter version (merge request)
• Add a keyword mapping for username (merge request) GitLab Enterprise Edition
• Add job to /api/v4/job/allowed_agents context (merge request)
• Email says user was banned only when auto-ban setting is enabled (merge request) GitLab Enterprise Edition
• Move pipeline_schedules directory (merge request)
• Track wiki verification in the project_wiki_repository_registry table (merge request) GitLab Enterprise Edition
• Track wiki replication in the project_wiki_repository_registry table (merge request) GitLab Enterprise Edition
• Add validationStartedAt to DastSiteProfileType (merge request) GitLab Enterprise Edition
• Remove GitHub Import from database codeowners (merge request)
• Drop Go 1.17 support and mandate Go 1.18 (merge request)
• Adapt Go API to consider the package registry access level by @wwwjon (merge request)
• Limit all Sentry responses for Error Tracking (merge request)
• Remove refactor_code_quality_extension feature flag (merge request)
• Rename columns and add tooltip to path column (merge request)
• Add i18n support to default brand title by @icbd (merge request)
• Removed work_items_hierarchy ff (merge request)
• Add token endpoint to the alllowed sources (merge request)
• Highlight Godeps.json on client (merge request)
• Enable lazy_load_commits feature flag by default (merge request)
• Display incident's severity name and label in timeline events (merge request)
• Change timeline event length validation to 280 on user input (merge request)
• Reduce cleanup package registry worker cadence to every hour (merge request)
• Removed work_items_hierarchy definition (merge request)
• Migrate Sidekiq jobs outside of current routing rules (merge request)
• Drop ci_job_artifacts_cdn feature flag (merge request)
• Update related items empty states (merge request)
• Remove stroke from contrib calender (merge request)
• Move ci_minutes_usage directory (merge request) GitLab Enterprise Edition
• Adding metadata to Secure Files API response (merge request)
• Change the wording of retry button for passed jobs (merge request)
• This MR migrates legacy html button to Pajamas button (merge request)
• Updated the placeholder logic for trigger fields (merge request)
• Backward compatible behavior in alert management client side router by @dannyelcf (merge request)
• Add feature flags user lists endpoints to OpenApi v2 docs (merge request)
• Add Objective and Keyresult to work item types (merge request)
• Remove dast_ui_redesign feature flag (merge request)
• Update documentation for troubleshooting limited job pipelines (merge request)
• Mask the "Secret token" input in the webhook form (merge request)
• Add MigrateSharedVulnerabilityScannersV2 background migration (merge request)
• Use full-text search with in param (merge request)
• Add new columns into vulnerability export (merge request) GitLab Enterprise Edition
• Improve UX for release assets screen (merge request)
• Guard for when user index migration has not been completed (merge request) GitLab Enterprise Edition
• Use inline error when adding existing item to linked items (merge request)
• Remove project_id from sprints (merge request)
• Re-linked Preview tab to live-preview on .md files (merge request)
• Move and refactor PATCH endpoint (merge request)
• Moving default branch setting to branch default (merge request)
• Update CI/CD variables table (merge request)
• Add has_many alerts association to issues (merge request)
• Update user cap description (merge request) GitLab Enterprise Edition
• Change order of items in deployment sidebar (merge request)
• Clean up and tie PBKDF2+SHA512 user passwords to FIPS (merge request)
• Create a user elasticsearch index and index users (merge request)
• Update CLI messages when action is rejected due to storage limit (merge request) GitLab Enterprise Edition
• Improve issuable confirm modal by @ali_o_kan (merge request)
• Update gitlab-labkit to v0.26.0 (merge request)
• Display formatted health status in issue sidebar (merge request) GitLab Enterprise Edition
• Backfill existing user_details fields from users table by @brianjaustin (merge request)
• Allow rollback with Prevent Outdated Deployment Job feature (merge request)
• Add details to security finding type (merge request) GitLab Enterprise Edition
• Remvs redundant var temp_deployment_associations by @afzal442 (merge request)
• This MR adds summary component to a drawer (merge request) GitLab Enterprise Edition
• Replace token indices in ci_runners table (merge request)
• Revisit padding in test suite report table (merge request)
• Remove min_access_level check (merge request)
• Add back in migration (merge request)
• Enable masking the newly created access tokens (merge request)
• Update cluster management project template (merge request)
• Remove agent_authorization_include_descendants feature flag (merge request)
• Drop fingerprint column from sbom sources (merge request)
• Update commit note action buttons (merge request)
• Add DeletePackageModal shared component by @ali_o_kan (merge request)
• Display container image shortened path (merge request)
• Update VSA max date range tooltip text (merge request)
• Less padding for sidebar subfolders on diffs (merge request)
• Add DAST_API_EXCLUDE_URLS variable for api scans (merge request) GitLab Enterprise Edition
• Adapt PyPI API to consider the package registry access level by @wwwjon (merge request)
• Allow only project/group reporters to read confidential notes (merge request)
• Update elastic search filter for confidential notes (merge request) GitLab Enterprise Edition
• GitLab Version - Event naming changes (merge request)
• Add environment keyword to deploy jobs in CI/CD templates by @anshulriyal (merge request)
• Add a meaningful event name for path in Project (merge request) GitLab Enterprise Edition
• Improve alert management client-side router usage by @dannyelcf (merge request)
• Add email confirmation setting enum (merge request)
• Update dependency auto-build-image to v1.21.0 (merge request)
• Group SAML Group Sync retains default membership (merge request) GitLab Enterprise Edition
• Stop returning alerts from prometheus alerts endpoint (merge request)
• Update dependency auto-deploy-image to v2.42.1 (merge request)
• Adds package registry migration survey banner (merge request)
• Create merge_request_diff asynchronously (merge request)
• Extract values and add them to constants by @TrueKalix (merge request)
• Remove remove_extra_primary_submenu_options feature flag (merge request)
• Remove new_navbar_layout feature flag (merge request)
• Add support for group level scan result policies (merge request) GitLab Enterprise Edition
• Update various buttons to use pajamas component (merge request)
• Add API_REQUEST_HEADERS variable for api scans (merge request) GitLab Enterprise Edition
• Show only active users on Starrers page of a project by @wwwjon (merge request)
• Cleanup admin/subscription page tables (merge request) GitLab Enterprise Edition
• Change "Self monitoring" to "Self-monitoring" by @scootergrisen (merge request)
• Optimise remediation ingestion with bulk insertion (merge request) GitLab Enterprise Edition
• Rename ci_pipeline_metadata.title to name (merge request)
• Remove unnecessary horizontal lines (merge request)
• Clean up logged_out_marketing_header (merge request)
• Remove without_deleted param (merge request)

Deprecated (2 changes)

• Deprecation notice for merge_status field (merge request)
• Deprecate registration token in Runner Operator (merge request)

Removed (6 changes)

• Remove temp index invalid member (merge request)
• Remove unused method to check if we should re-download data (merge request) GitLab Enterprise Edition
• Remove missing_security_scan_types feature flag (merge request)
• Remove old product analytics features (merge request)
• Remove temp index on approval_merge_request_rules (merge request)
• Remove new layout feedback banner (merge request)

Security (13 changes)

• Handle JSON input correctly for swagger-ui (merge request)
• Redact confidential references in Jira issue descriptions (merge request)
• Forbid reading emojis on internal notes (merge request)
• Fix Running Upstream Pipelines Jobs Without Permission (merge request)
• Same-site redirect vulnerability (merge request)
• Update Gitaly Version (merge request)
• Resolve users can view audit events from other members (merge request)
• Add a redirect wall before artifact redirect to pages (merge request)
• Sandbox swagger-ui to prevent injection attacks (merge request)
• BYPASS: Stored-XSS with CSP-bypass via scoped labels' color (merge request)
• Fix external project permission when using CI prefill variables (merge request)
• Path traversal fix for Secure Files (merge request)
• Add length limit to addressable URLs (merge request)

Performance (22 changes)

• Remove group_overview_tabs_vue feature flag (merge request)
• Use efficient in operator query for fetching group & project activities (merge request)
• Add in_product_marketing_emails index (merge request)
• Cleanup cache_unleash_client_api feature flag (merge request)
• Memoize Project#has_group_hooks? check (merge request) GitLab Enterprise Edition
• Only build MR hook data when needed (merge request)
• Fix Projects list API preloaders (merge request)
• Switch transfer group dropdown to API data source (merge request)
• Remove duplicate_jobs_cookie feature flag (merge request)
• Remove user_destroy_with_limited_execution_time_worker feature flag (merge request)
• Use partial GIN index for non-latin issue searches (merge request)
• Improve performance of MR changes count (merge request)
• Improve issue search performance for recent items (merge request)
• Change ActiveSupport::JSON to use Gitlab::Json (merge request)
• Add GhostUserMigration#consume_after column (merge request)
• Render first chunk immediately (merge request)
• Memoize Project#has_active_integrations? check (merge request)
• Replace Sidekiq JSON methods with Gitlab::Json (merge request)
• Optimize source viewer rendering (merge request)
• Add server-side pagination to SearchFilesByName (merge request)
• Optimize source viewer rendering (merge request)
• Disable fastupdate on issues and merge_requests GIN indexes (merge request)

Other (60 changes)

• Fix Style/Next offenses by @mhdasm3 (merge request)
• Propagate feature flag actors in all Gitaly RPC services (merge request)
• Add migration for new index (merge request)
• Enforce HTTP/HTTPS schemes in Octokit Middleware (merge request)
• RuboCop: Enable previously disabled Rails/ContentTag by @edith007 (merge request)
• RuboCop: Enable previously disabled Rails/LexicallyScopedActionFilter by @edith007 (merge request)
• Remove ci_job_jwt feature flag (merge request)
• Stop tracking errors when deleting branches (merge request)
• Improve the specs in invitations_spec.rb (merge request)
• Prepare removal of old issue trigram indexes (merge request)
• Propagate user_id to Gitaly via gRPC metadata (merge request)
• Remove experiment_users table (merge request)
• Removed realtime labels FF (merge request)
• Add more logs for CI config external files V2 (merge request)
• Removes truncate_long_blobs_in_search flag by @sd5869 (merge request)
• Deprecate merge_status from api and webhooks (merge request)
• Add post migration for deleting tag data (merge request)
• Propagate feature flag actors in Gitaly RPC calls (merge request) GitLab Enterprise Edition
• Add new job for solely deleting branchs from gitaly (merge request)
• Update invisible_captcha gem from 1.1.0 to 2.0.0 (merge request)
• Updated OAuth example links to https by @zillemarco (merge request)
• Documentation changes for latest release and release asset download API by @zillemarco (merge request)
• RuboCop: Enable Style/Lambda and change to EnforcedStyle: literal by @edith007 (merge request)
• Validate environment_id foreign key on deployments table (merge request)
• RuboCop: Disable Rails/HasManyOrHasOneDependent permanently by @edith007 (merge request)
• Add more logs for CI config external files (merge request)
• Put requirements filter by test reports under feature flag (merge request) GitLab Enterprise Edition
• Removes ipynb_semantic_diffs feature flag (merge request)
• Add rubocop cop Graphql/EnumNames by @fabsrc (merge request)
• Stub license to fix JH integration factory spec by @chaomao (merge request)
• Change DuplicateJobs cookie key (merge request)
• Fix Style/RedundantInterpolation offenses in spec/ by @mhdasm3 (merge request)
• Add index to support filtering issues by last test report state (merge request)
• Remove externally_stored_diffs_caching_export feature flag (merge request)
• Consolidate Wiki model methods (merge request) GitLab Enterprise Edition
• Ensure that requirement belongs to same project of work item (merge request) GitLab Enterprise Edition
• Fix Style/CaseLikeIf offenses by @mhdasm3 (merge request)
• Another attempt to create issue trigram indexes (merge request)
• Update fogbugz gem to 0.3.0 (merge request)
• Edit pipeline-triggers API annotation (merge request)
• Remove FF ci_stop_expanding_file_vars_for_runners (merge request)
• Remove FF ci_requeue_with_dag_object_hierarchy (merge request)
• Remove outdated gocloud.dev backport (merge request)
• Use MessagePack for DuplicateJobs cookies (merge request)
• Improve Upgrade Path tool visibility by @zillemarco (merge request)
• Expose the raw attribute of ci-variables models (merge request)
• Cleanup task system note renaming background migration (merge request)
• Change DuplicateJobs Redis format (merge request)
• Move work item weight counters to CE (merge request)
• Update graph button to pajamas (merge request)
• Remove unused haml file that was moved to Vue (merge request)
• Remove default-enabled hash_oauth_tokens feature flag (merge request)
• Remove 'audit_event_streaming_git_operations' feature flag (merge request)
• Update profile buttons to pajamas (merge request)
• Remove disable_load_entire_blob_for_diff_viewer feature flag (merge request)
• Move the stale etag check before highlighting cache (merge request)
• Add variable name to file-variable logging (merge request)
• Add delay when performing refresh with delay (merge request)
• Update Gitlab Shell to 14.13.0 (merge request)
• Migrate card to Pajamas (merge request) GitLab Enterprise Edition

15.5.9 (2023-01-12)

No changes.

15.5.8 (2023-01-12)

No changes.

15.5.7 (2023-01-09)

Security (10 changes)

• Avoid regex with potential for poorly performing backtracking (merge request)
• Protect web-hook url variables after changing URL (merge request)
• Limit the size of user agent to reduce ReDos attack (merge request)
• Only allow safe params for diff helper (merge request)
• Protect Sentry auth-token after changing URL (merge request)
• Delete project specific licenses when license policy is deleted (merge request)
• Restrict user avatar availability based on visibility restrictions (merge request)
• Policy change to read and destroy token without license for .com (merge request)
• Restrict Grafana API access on public projects (merge request)
• Fix "Race condition enables verified email forgery" (merge request)

15.5.6 (2022-12-07)

No changes.

15.5.5 (2022-11-30)

Security (11 changes)

• Send resolved_address param to gitaly during repository import (merge request)
• Add size validation during nuspec file extraction (merge request)
• Cross-site scripting in Jira Integration (merge request)
• Protect web-hook secret tokens after changing URL (merge request)
• Redact secret tokens from web-hook logs (merge request)
• Prevent unauthorized users from seeing Release information on tag pages (merge request)
• Update after_import to expire cache before removing prohibited branches (merge request)
• Deny all package permissions when group access is restricted by IP (merge request)
• Redact user emails from project webhook data (merge request)
• Disallow local URls for build_runner_session if dictated by app setting (merge request)
• Prevent token bypass for extenal authorisation (merge request)

15.5.4 (2022-11-11)

Fixed (3 changes)

• Allow links to be opened from Swagger UI documentations (merge request)
• Add Hashie::Array to allowed YAML serialization classes (merge request)
• Revert Sidekiq default routing rules (merge request)

15.5.3 (2022-11-07)

Fixed (1 change)

• Fix Opensearch compatibility check (merge request) GitLab Enterprise Edition

15.5.2 (2022-11-02)

Security (11 changes)

• Redact confidential references in Jira issue descriptions (merge request)
• Forbid reading emojis on internal notes (merge request)
• Same-site redirect vulnerability (merge request)
• BYPASS: Stored-XSS with CSP-bypass via scoped labels' color (merge request)
• Fix Running Upstream Pipelines Jobs Without Permission (merge request)
• Add length limit to addressable URLs (merge request)
• Add a redirect wall before artifact redirect to pages (merge request)
• Sandbox swagger-ui to prevent injection attacks (merge request)
• Fix external project permission when using CI prefill variables (merge request)
• Resolve users can view audit events from other members (merge request)
• Path traversal fix for Secure Files (merge request)

15.5.1 (2022-10-24)

Fixed (2 changes)

• Batch records when preloading for indexing (merge request) GitLab Enterprise Edition
• Specify certificates when connecting to KAS using TLS (merge request)

15.5.0 (2022-10-21)

Added (159 changes)

• Render labels correctly in content editor (merge request)
• Add "use_legacy_web_ide" to "user_preferences" (merge request)
• Set default compliance framework during project creation (merge request) GitLab Enterprise Edition
• Expose created_by in the Users API (merge request)
• Add models for tag and tag links (merge request)
• Adding migration for backfilling namespaces metadata (merge request)
• Add metrics for projects with applied scan result policies (merge request) GitLab Enterprise Edition
• Moved label and date widgets out of FF (merge request)
• Add GraphQL field to preview billable user changes (merge request) GitLab Enterprise Edition
• Additional Gitlab::Json method aliases (merge request)
• Enhance review app modal instructions (merge request)
• [18052] Gitlab import: Issue attachments (merge request)
• Namespace package forward settings in GraphQL (merge request)
• Allow automatic runner authentication token rotation (merge request)
• Add RaspberryPi OS 11 (Bullseye) to the list of supported OS (merge request)
• Add bulk destroy mutation for Packages (merge request)
• Add approvalProjectRules to graphql endpoint (merge request) GitLab Enterprise Edition
• Track work item iteration update (merge request) GitLab Enterprise Edition
• Add environment key to pages jobs by @k0jak (merge request)
• Sync profile fields to user_details and truncate by @brianjaustin (merge request)
• [373705] Configurable optional stages list API (merge request)
• Add scan file path to dast site profile (merge request)
• Removed upload_size from storage_size (merge request) GitLab Enterprise Edition
• Add GIT_SUBMODULE_PATHS documentation by @bollenn (merge request)
• Show edited at for work item descriptions (merge request)
• Add health status filter on issue boards (merge request) GitLab Enterprise Edition
• Autogenerate OpenApi using grape-swagger (merge request)
• Create API to fetch all Github organizations for the user (merge request)
• Only merge when all the status checks have passed (merge request)
• Improved CRM contacts autocomplete service to include state and set by @zillemarco (merge request)
• Add metrics for groups with assigned security policy project (merge request) GitLab Enterprise Edition
• Add metrics for merge requests witj applied scan result policies (merge request) GitLab Enterprise Edition
• Enable JWT authentication for Gitlab Shell (merge request)
• Add new storage type for DSL field (merge request)
• Prepare async index for index on author_id and id in merge_requests (merge request)
• Map 'Require pull request before merging' GitHub rule with access_levels (merge request)
• Add default_compliance_framework_id column to namespace_settings table (merge request)
• Autocomplete support for work items (merge request)
• Feature password expiration migration by @qt-gith (merge request)
• Disable creation of all types of personal tokens with FIPS enabled (merge request) GitLab Enterprise Edition
• After a milestone from the new release form, redirect back (merge request)
• Add cancel projects import from github (merge request)
• Support for suggestions in content editor (merge request)
• Prepare index async for merge requests on author and target project id (merge request)
• Add an owner of a runner to the runners list (merge request)
• Trigger mergeRequestMergeStatusUpdated when MR gets closed (merge request)
• Add support for quick actions in content editor (merge request)
• Allow admins to limit registration of project and group runners (merge request)
• Speed up usage ping count for projects with incident SLAs enabled (merge request)
• Include release ci variables (merge request)
• Map 'Require signed commits' GH rule with project's push_rule attribute (merge request)
• Adding remaining MLFlow endpoints (merge request)
• Add pipelineScheduleDestroy mutation by @batu (merge request)
• Add Push Rule for DCO Signoff (merge request) GitLab Enterprise Edition
• Add jitsu key to project when created (merge request)
• Add metrics for projects with assigned security policy project (merge request) GitLab Enterprise Edition
• Consume Google Cloud Services within GitLab (merge request)
• Update requirement verification status mutation (merge request)
• Filter group runners by tags (merge request)
• [18052] Support img tags in GitHub markdown attachment importers (merge request)
• [18052] Gitlab import: note attachments (merge request)
• Authentication in private registry in code quality (merge request)
• Add user preference to turn off automatically adding a new list item (merge request)
• Add free_user_cap_over_limit_notified_at to NS details (merge request)
• Add Geo::ProjectWikiRepositoryState model (merge request) GitLab Enterprise Edition
• Add project_wiki_repository_states table (merge request)
• Delete orphaned operational vulnerabilities (merge request)
• Add migrated_to_state_transition column (merge request)
• Destroy invalid members (merge request)
• Add advanced settings support to import projects Vue app (merge request)
• Allow admins to delete runners in bulk (merge request)
• Trigger mergeRequestMergeStatusUpdated when MR marked as draft/ready (merge request)
• Create tmp index members on id where namespace id null (merge request)
• Add avatar to user dropdown items (merge request)
• Enable issuable_description_updated subscription in GraphQL (merge request)
• Add project_wiki_repository_states table (merge request)
• Add health filter for board lists (merge request) GitLab Enterprise Edition
• Add labels widget input to work item update mutation (merge request)
• Show empty state for external CI config in pipeline editor (merge request)
• Add inbound_job_token_scope to ci cd settings (merge request)
• Remove FF email_for_two_factor_otp_failure (merge request)
• Add DORA4 charts to Insights by default (merge request) GitLab Enterprise Edition
• Add the ability to sort iterations by due date (merge request) GitLab Enterprise Edition
• feat: Add resolved_on_default_branch index to vuln reads (merge request)
• Add glm values for trials (merge request)
• Add isDefault to BranchRule type objects in GraphQL endpoint (merge request)
• Remove forward_deployment_enabled feature flag (merge request)
• RpmRepositoryFile model with uploader and spec (merge request)
• Add X-Gitlab-Instance header to webhooks (merge request)
• Add support for emojis suggestions (merge request)
• Add Scheduled badge to pipeline detail view by @Taucher2003 (merge request)
• Add migration for direction column of ci scope (merge request)
• Trigger mergeRequestReviewersUpdated when reviewer state change (merge request)
• REST API filter issues by any/none health status (merge request) GitLab Enterprise Edition
• Add mailer with templates (merge request) GitLab Enterprise Edition
• Enable Releases feature toggle (merge request)
• Disable all types of personal access tokens when FIPS enabled (merge request) GitLab Enterprise Edition
• Add resource groups API endpoint to list upcoming jobs (merge request)
• Enable skip_default_scope_for_events FF by default (merge request)
• Add suppport for suggestions in content editor (merge request)
• Trigger mergeRequestReviewersUpdated subscription when reviewers change (merge request)
• Shift can_create_group to ApplicationSetting (merge request)
• Create table and model to store user's phone number validations (merge request)
• Map 'Require conversation resolution' GitHub rule with project setting (merge request)
• Add ci_pipeline_metadata table to hold title strings (merge request)
• Add and fill foreign key for approval rules (merge request) GitLab Enterprise Edition
• Add timing when we use caching in certain api/controller endpoints (merge request)
• Add timing for mergeability checks (merge request)
• Support GraphQL subscription for iteration assignment (merge request) GitLab Enterprise Edition
• Add unprotectAccessLevels to EE graphql endpoint (merge request) GitLab Enterprise Edition
• Jitsu/GitLab Connection PoC (merge request)
• Project setting for suggested Reviewers (merge request)
• Add CI_JOB_NAME_SLUG predefined CI variable by @jdoubleu (merge request)
• Allow users to create annotated tags from release (merge request)
• Allow autosaving wiki content (merge request)
• Send email notification when a personal access token is revoked (merge request)
• GraphQL: Add ALL_AVAILABLE membership value (merge request)
• Include tag specific additional CI variables (merge request)
• Prepares ci_builds_metadata to partitioning (merge request)
• Email user when their 2FA OTP attempt is wrong (merge request)
• Backfill epic cache counts (merge request)
• Adds log-parameter and log-batch MLFlow endpoints (merge request)
• Prepare async index for vulnerability reads location image (merge request)
• Add issuableDescriptionUpdated to the GQL subscription type (merge request)
• Expose if user can mark notes as confidential (merge request)
• Add Any and None options to filter issues by health status (merge request)
• Expose BulkImports::Failure#exception_message in the API (merge request)
• Add real time capability for work item assignees widget (merge request)
• Support secure schemas version 15.0.2 (merge request) GitLab Enterprise Edition
• Add X-Gitlab-Instance header to webhooks (merge request)
• Display blocking items on Roadmap (merge request)
• Fetch Iteration widget as well for work items type task (merge request)
• Add unique indexes to facilitate bulk upserts (merge request)
• Add note when child epic gets moved (merge request) GitLab Enterprise Edition
• Add jobs endpoint by @TrueKalix (merge request)
• Add glm values for trials (merge request)
• Allow epics having child issues from different group hierarchies (merge request) GitLab Enterprise Edition
• Schedule index removal for ci_builds_metadata (merge request)
• Add GET /personal_access_tokens/self endpoint (merge request)
• Add a timeline event preview markdown endpoint (merge request)
• Add indexes to ci_builds_metadata (merge request)
• Metrics for GitLab for Jira App (merge request)
• Display permission alert on epic tree count popovers (merge request) GitLab Enterprise Edition
• Add issue resource_iteration_events to Project Import/Export (merge request) GitLab Enterprise Edition
• Use Google CDN if enabled for CI job artifacts (merge request)
• Adds LogMetric endpoint to MLFlow (merge request)
• Frontend for Environment Search (merge request)
• Add pipeline_schedule GraphQL type (merge request)
• Added straight mode to compare view by @DracoBlue (merge request)
• Show Slack App Home (merge request)
• Show “Merged date” sort option for dashboard MRs (merge request)
• Extend GraphQL query for protected environments (merge request) GitLab Enterprise Edition
• Add source_id to BulkImports::Entity table (merge request)
• Add filters for PAT by @TrueKalix (merge request)
• Add group shares in group transfer locations API (merge request)
• Add any, none filters for issue health status (merge request)
• Add any, none filters for issue health status (merge request)
• Add REST API filters for issue health status (merge request)
• Add REST API filters for issue health status (merge request)

Fixed (164 changes)

• Fix: locale on sidebar items when collapsed by @JeremyWuuuuu (merge request) GitLab Enterprise Edition
• Don't fail project export if upload file doesn't exist (merge request)
• Prevent JobArtifactsDestroy whilst refreshing by @leetickett (merge request)
• GitLab Version - Properly track link clicks (merge request)
• Fix naming issue with Test Summary widget (merge request)
• Ensure current user owns table to partition (merge request)
• Check for path traversals in the debian distribution regex by @sathieu (merge request)
• Fix spurious requests when viewing PDF blobs (merge request)
• Pass additional_params to search API logging (merge request)
• Fix scoped label styles in activity feed (merge request)
• Gitlab Migration - retry ExportRequest & RequestStatus network requests (merge request)
• Fix 500 error when namespace path is a negative integer (merge request)
• Prevent outdated deployments from running before execution (merge request)
• Persist page size for group migration (merge request)
• Use configured namespace when generating Kubeconfig (merge request)
• Add the labels to the cache key for merge request api (merge request)
• Don’t append base to links with old wiki path (merge request)
• Ensure schemas are up-to-date after migration tests complete (merge request)
• Fix broken trial registration spec (merge request) GitLab Enterprise Edition
• Fixed commit messages not wrapping when too long by @zillemarco (merge request)
• Hide Reviewers Edit Button when no permissions by @Taucher2003 (merge request)
• Allow grouping more than 1 label of same scope in iteration reports (merge request)
• Fix site profile edit with empty fields (merge request) GitLab Enterprise Edition
• Fix remove epic modal to include children info (merge request) GitLab Enterprise Edition
• Fix: locale on todo filter by @JeremyWuuuuu (merge request) GitLab Enterprise Edition
• Remove auto_accept_terms from OAuth::User (merge request)
• Fix alignment of internal note header (merge request)
• Fix glm param dropping in the company controller (merge request) GitLab Enterprise Edition
• GitLab Version - Properly import on dashboard (merge request)
• Fix internal note background styling when using dark mode (merge request)
• Fix alignment issues on agent activity list (merge request)
• Add internal_id allocation for GitHub Import (merge request)
• Show error when removing epic or issue from epic (merge request)
• Fix: admin subscription time format locale issue by @JeremyWuuuuu (merge request) GitLab Enterprise Edition
• Fix mis-alignment of the action buttons in extensions (merge request)
• Support username in assign push options (merge request)
• Enable read_runner permission for auditors, also for instance runners (merge request) GitLab Enterprise Edition
• Enable read_group_all_available_runners permission for auditors (merge request) GitLab Enterprise Edition
• fix: Improve shell variable quoting in Coverage-Fuzzing templates (merge request)
• Fix grammatical error in exclusive keys validator (merge request)
• Do not show banner if SM subscription is renewed (merge request) GitLab Enterprise Edition
• Remove and add ci_job_variables.raw (merge request)
• Fix feature flag file location (merge request) GitLab Enterprise Edition
• Fix markdown for iteration description (merge request) GitLab Enterprise Edition
• Fix line height on project and group lists (merge request)
• Allocate InternalId for importing issues (merge request)
• Remove outdated migration steps (merge request)
• Add scrolling support for jupyter notebooks (merge request)
• Fix HLJS multi-line-rendering (merge request)
• Fix runner instructions with disabled registration (merge request)
• Fix RunnerPolicy to allow group maintainers to see shared runners (merge request)
• Fix Wiki feature raises exception when titles start with ~ (merge request)
• Fix duplicate key errors during GitHub Import (merge request)
• Fix case where Merge Request change tab shows incorrect number by @hyperhtml (merge request)
• Avoid loading entire blob without limit for displaying diffs (merge request)
• Migrate bulk sidebar subscriptions dropdown to pajamas (merge request)
• Add bottom margin to "Protect a tag" card (merge request)
• Fix epic items not loading for signed out users (merge request) GitLab Enterprise Edition
• fix: Don't fetch environments on Admin variables page (merge request)
• Render markdown for snippets if links contain hash to anchor by @fabsrc (merge request)
• Enable the FF ci_requeue_with_dag_object_hierarchy (merge request)
• Fix closing of external issues (merge request)
• Improve error message when providing an invalid deploy key by @davebarr (merge request)
• Fix indentation of children epics on Roadmap (merge request) GitLab Enterprise Edition
• Use custom logo on sign in page again by @wwwjon (merge request)
• Fix lock retries for the partition helper (merge request)
• Fix alignment issues of resolved with issue system note (merge request)
• This MR fixes cron parsing bug (merge request) GitLab Enterprise Edition
• Don't change escalations if neither status nor policy changed (merge request) GitLab Enterprise Edition
• Hide Analytics features based on project settings (merge request)
• Set default link color to blue-500 (merge request)
• Fix project create service to use known columns (merge request) GitLab Enterprise Edition
• Fix alignment on changed line in multiline suggestion comment (merge request)
• fix: Compare email addresses case insensitively by @DerAstronaut (merge request)
• Deal with multiple filters in query builder (merge request) GitLab Enterprise Edition
• Better memoize BulkImports::ExportStatus#export_status (merge request)
• Fix variables alignment (merge request)
• Add retriable exceptions & dont raise if wiki is disabled (merge request)
• Fix encoding issues with plantuml blocks (merge request)
• Removing single quotes to avoid harbor help text being rendered as math by @orozot (merge request)
• Show notifications toggle when mr merged by @leetickett (merge request)
• Fix 500 errors in Projects::AutocompleteSourcesController (merge request)
• Add missing tooltip for deployment name (merge request)
• Fix ES settings form localization by @Taucher2003 (merge request) GitLab Enterprise Edition
• Add WikiLinkFilter to AsciiDocPipeline (merge request)
• Fix serialization of tables in Content Editor (merge request)
• Prevent creation of duplicate deploy tokens on page refresh (merge request)
• Fix two expand buttons on MR widgets when page width is narrow (merge request)
• Avoid linking CVE IDs as Jira tickets by @kelunik (merge request)
• Hide Contributors menu item by @TrueKalix (merge request)
• Fix ExternalDatabaseChecker tests for geo and PG11 (merge request)
• When getting container repository tags, use a fixed page size (merge request)
• This MR closes drawer when project changed (merge request) GitLab Enterprise Edition
• Fix REST/GRAPHQL APIs handling TODOs WorkItem target (merge request)
• Remove usage of Geo::FileRegistryRemovalWorker worker (merge request) GitLab Enterprise Edition
• Avoid runaway queue growth of Geo::DestroyWorker (merge request) GitLab Enterprise Edition
• Fix initial value set on TimezoneDropdown (merge request)
• Fix the epics search query for displaying roadmap (merge request) GitLab Enterprise Edition
• Allow auditors read-only access to Alerts (merge request) GitLab Enterprise Edition
• Fix flash margin in Web IDE (merge request)
• Discussion: Fix font-size and highlight (merge request)
• Add missing licensed feature flag to frontend (merge request) GitLab Enterprise Edition
• Update project member styles in GFM (merge request)
• ExternalDatabaseChecker to support CI Database (merge request)
• Allow multiple drafts on a single line in MR reviews (merge request)
• Add the diverged commits when displaying the merge controls (merge request)
• Fix DAST profile names for group security policies (merge request) GitLab Enterprise Edition
• Changes how project export tarballs are uploaded to an external website (merge request)
• NuGet case-insensitive version search (merge request)
• Hide add oncall schedule buttons for unauthorized users (merge request)
• Fix CI JSON schema for variables (merge request)
• Fix 500 errors when sorting by merged date with approvers (merge request)
• Apply push rules to squash commit messages (merge request) GitLab Enterprise Edition
• Update GitLab Migration to use source_id when requesting relation export (merge request)
• LockWrites Rake Task to support DRY_RUN mode (merge request)
• Hide harbor registy in menu if uncheck active by @orozot (merge request)
• Fix wrong CLRF rendering by @TrueKalix (merge request)
• Exclude tiers if a protected environment exist from creation form (merge request) GitLab Enterprise Edition
• Hide MR Callout when MRs disabled for project by @Taucher2003 (merge request)
• Use toolbar buttons for indent/outdent (merge request)
• Fix unlocking previous pipeline artifacts (merge request)
• Fix alignment issues on agent activity list (merge request)
• Improve work item detail accessibility (merge request)
• Render form submit button using Pajamas::ButtonComponent (merge request)
• Render form submit button using Pajamas::ButtonComponent (merge request) GitLab Enterprise Edition
• Rescue exception when exporting MR diffs (merge request)
• Set BulkImports::Tracker as skipped if entity is failed (merge request)
• Monkey patch Licensee::License to properly cache (merge request)
• License overview incorrectly shows 'Expired: never' for expired license (merge request) GitLab Enterprise Edition
• Update View latest projects and View latest groups links (merge request)
• Reloading the classes runs the LoadBalancer again (merge request)
• Revert "Merge branch 'toon-no-more-licensee' into 'master'" (merge request)
• Fix escaping for references with special characters (merge request)
• Do not save duplicate notes when importing pipelines (merge request)
• Add shortcuts and permalink updater to vue blob controls (merge request)
• Show tasks in dashboard issue list (merge request)
• Simplify line link (merge request)
• Update custom tag reference in CI schema (merge request)
• Ensure that stage name and record are in sync for page deployments (merge request)
• Fix bugs around file attach button (merge request)
• Keep pipeline editor commit info when changing tabs (merge request)
• Fix wrong inverse_of in vulnerability_state_transitions association (merge request)
• Fix label events being grouped incorrectly (merge request)
• Resolve failure path issue on creating leads (merge request) GitLab Enterprise Edition
• Filter all settings sections and show empty state if no results (merge request)
• Avoid preloading nil root_ancestor in ProjectRootAncestorPreloader (merge request)
• Fix undismissable error alert on contact list by @leetickett (merge request)
• Remove attach file button from toolbar (merge request) GitLab Enterprise Edition
• Remove vulnerability approval rules (merge request) GitLab Enterprise Edition
• Fix N+1 queries when fetching labels of child epics (merge request) GitLab Enterprise Edition
• Add navbar to empty search results (merge request)
• Show emoji in user_popover when status text is empty by @n0rdlicht (merge request)
• Only focus search in dropdown if it has artifacts (merge request)
• Improve specs (merge request)
• Replace visitUrl with Gl-Link in ci-badge-link by @leetickett (merge request)
• Move the index removal migration to a regular migration (merge request)
• Sorted project members by user name (merge request)
• Only mark vulnerabilities on default branch as disappeared (merge request) GitLab Enterprise Edition
• Allow read-only access to escalation policies for auditors (merge request) GitLab Enterprise Edition
• Fix codeowners for sections with the same patterns (merge request)
• Fix: locale on project repo settings by @JeremyWuuuuu (merge request) GitLab Enterprise Edition
• Use the MR data to determine if the branch was deleted (merge request)
• Make Wiki operations target default branch instead of HEAD (merge request)
• Fix spacing in commit view of MR (merge request)

Changed (194 changes)

• Update google-protobuf to v3.21.7 (merge request)
• Add validationStartedAt to DastSiteValidationType (merge request) GitLab Enterprise Edition
• Allow specifying document types to reindex (merge request) GitLab Enterprise Edition
• Changes dormant user setting input minimum to 90 days (merge request)
• Fix an issue where the delete button would always delete the fist item (merge request)
• Migrate old sidekiq queues (merge request)
• Update sign in preview page and new label page (merge request)
• Permit to create/update/delete protected branches without repository (merge request)
• Use issue type in user activity for issue or work item events (merge request)
• Track wiki verification in the project_wiki_repository_states table (merge request) GitLab Enterprise Edition
• Fix alert text for rate limiting (merge request)
• Remove RubyProf in favor of StackProf from Gitlab::Profiler (merge request)
• This MR adds agents option for humanized rules (merge request) GitLab Enterprise Edition
• Revert changes to manual actions on environments (merge request)
• Show copy button for unsafe external URLs (merge request)
• Removes experimental feature flag (merge request)
• This MR adds agents option for schedule rule component (merge request) GitLab Enterprise Edition
• Reset form button if error encountered (merge request)
• Remove runners_finder_all_available feature flag (merge request)
• This MR adds new pre-scan verification status (merge request) GitLab Enterprise Edition
• Update pact to v1.63 and rack-test to v2.0.2 (merge request)
• Add pipeline iid to pipeline event webhook by @fabsrc (merge request)
• Make releases_access_level equal repository_access_level when higher (merge request)
• Search Page Layour change (merge request)
• Let go get response http semantic status code by @icbd (merge request)
• Render a dotted line for missing DORA insights data (merge request) GitLab Enterprise Edition
• Add finder for scan result policies and update (merge request) GitLab Enterprise Edition
• Update "last used" date for PATs if used in git operations by @fabsrc (merge request)
• Allow to toggle inbound job token (merge request)
• Extend scan_finding rules to group level (merge request) GitLab Enterprise Edition
• Update IDE pipeline styling (merge request)
• Shows project storage limit notifications only to owners (merge request) GitLab Enterprise Edition
• Exposed current_sign_in_at as last login at for billable members (merge request) GitLab Enterprise Edition
• Correct copy on Project Access Token scope page (merge request)
• Improve SAML SSO wording (merge request)
• Add browseArtifactsPath to GraphQL CiJob (merge request)
• GitLab Version - Badge Tracking (merge request)
• Fix: notify locale on project was not exported email by @qt-gith (merge request)
• Adding .mobileprovision file parser to Project-level Secure Files (merge request)
• Add columns about MR checks to namespace_settings by @luzhiyuan.deer (merge request)
• Convert Octokit response in Github Integration to hash (merge request) GitLab Enterprise Edition
• Adding .p12 file parser to Project-level Secure Files (merge request)
• Updates Config::Entry::Variable value to support array (merge request)
• Update Jitsu authenticator to production endpoint (merge request) GitLab Enterprise Edition
• Remove confusing runners summary text (merge request)
• Replace release notes form in new tag page with a link (merge request)
• Fix issue header alignment (merge request)
• Reduce the size of the initial backoff duration for web-hooks (merge request)
• Store future subscriptions on instance activation (merge request) GitLab Enterprise Edition
• Expose licenses in dependencies API (merge request) GitLab Enterprise Edition
• Allow /page to be used in description on incident creation (merge request)
• Update Work item cannot be accessed (merge request)
• Add localization to markdown actions (merge request)
• Fix padding for draft notes (merge request)
• Moves classes into variables (merge request)
• Improves modal copy when deleting page assets leads to package deletion (merge request)
• Remove container_registry_new_cleanup_service feature flag (merge request)
• Global Search vertical navigation search helper (merge request) GitLab Enterprise Edition
• Add approver for group level scan result policies (merge request) GitLab Enterprise Edition
• Nullify duplicate runner authentication tokens (merge request)
• This MR adds new feature flag for DAST pre-scan verification (merge request) GitLab Enterprise Edition
• Secure Files Metadata Parser (merge request)
• Update alert and incident table styles by @briankabiro (merge request)
• Govern Metric Updates (merge request) GitLab Enterprise Edition
• Productivity Analytics - Migrate url-sync mixin by @ali_o_kan (merge request) GitLab Enterprise Edition
• Update max helm charts to 1000 (merge request)
• Update shared runners summary text (merge request)
• Enable float values in cost factor (merge request) GitLab Enterprise Edition
• Improve MergeService log messages (merge request)
• Update dependency auto-deploy-image to v2.39.0 (merge request)
• Don't pre-fill markdown table with cells in issue (merge request)
• Remove ci_destroy_unlocked_pipeline_artifacts feature flag (merge request)
• Show view-only audit events filter for users with the developer role (merge request) GitLab Enterprise Edition
• Remove participant status from epic participants (merge request)
• Improve copy on delete modale in package by @ali_o_kan (merge request)
• Prevent login using autogenerated passwords (merge request)
• Replace Wiki service list_pages by normal repository RPCs (merge request) GitLab Enterprise Edition
• Update dependency auto-deploy-image to v2.38.1 (merge request)
• Show warning if code search mappings are outdated (merge request) GitLab Enterprise Edition
• Replace Wiki service find_page RPC by normal repository RPCs (merge request)
• Replace Wiki service find_page RPC by normal repository RPCs (merge request)
• Replace Wiki service find_page RPC by normal repository RPCs (merge request)
• Update UI text in insights dropdown list + dropdown sizing (merge request) GitLab Enterprise Edition
• Change design comments cancel confirmation (merge request)
• Debian package API: do not enqueue jobs directly by @sathieu (merge request)
• Fixes top padding for skeleton notes (merge request)
• Remove user attributes from notes (merge request) GitLab Enterprise Edition
• Use inline code for varaiables in harbor text (merge request)
• Deprecate AWS host connection parameter (merge request)
• Migrate card component - user list in admin page (merge request)
• Pull apart emoji and activity controls (merge request) GitLab Enterprise Edition
• Exclude loopback and link local addresses from Google CDN use (merge request)
• Update runner settings styling (merge request)
• Enforce active jobs limit earlier in pipeline creation (merge request)
• Adapt Helm API to consider the package registry access level by @wwwjon (merge request)
• Adapt Generic Packages to consider the package registry access level by @wwwjon (merge request)
• Global Search vertical navigation search helper (merge request)
• Enabled realtime labels FF (merge request)
• Hide Action column when revokePath is missing (merge request)
• Remove use_gitaly_pagination_for_refs feature flag (merge request)
• Upgrade Sourcegraph integration to 0.0.82 by @philipp-spiess (merge request)
• Do not show blocked states (merge request) GitLab Enterprise Edition
• Remove iteration_cadences FF (merge request) GitLab Enterprise Edition
• Update colors in the user activity calendar (merge request)
• Tighten Google CDN URL config requirements (merge request)
• Geo - Update no subscription banner message (merge request) GitLab Enterprise Edition
• Geo - Update URL text to External URL (merge request) GitLab Enterprise Edition
• Update unknown ci_pipeline_artifacts.locked column values (merge request)
• Add codeowners collapse, use vue component instead of haml (merge request) GitLab Enterprise Edition
• Fixes highlighting color for first diff reply (merge request)
• Change Version API to mirror Metadata API (merge request)
• Reduced lease from 1.5hrs to 1 hr (merge request)
• Update extensions in Gitpod configuration by @gtsiolis (merge request)
• Geo: Migrate Container Registry replication to use SSF (merge request) GitLab Enterprise Edition
• Do not user select2 for mirror user id (merge request)
• Don't pre-fill markdown table with cells (merge request)
• Fix invalid runner REST v4 deprecations (merge request)
• Harmonise warning message in Settings < Variables by @ali_o_kan (merge request)
• Update trial status popover title (merge request) GitLab Enterprise Edition
• Harmonise warning message in Settings < Pipeline triggers by @ali_o_kan (merge request)
• Add tmp indx null member namespace id (merge request)
• Default on :operational_vulnerabilities_filters ff (merge request)
• Default on :scan_execution_rule_mode feature flag (merge request)
• Remove dropdown to add members from admin area (merge request)
• Update cards in the milestone view (merge request)
• Ensure PostgreSQL versions are memoized at start of tests (merge request)
• Allow to submit wiki form using ctrl enter (merge request)
• Store dependency scanning SBoMs as reports (merge request)
• ref_service: Clean up find_local_branches_response (merge request)
• Do not restrict epics child issues group structure (merge request) GitLab Enterprise Edition
• This MR stores list of form fields in constant (merge request) GitLab Enterprise Edition
• Use Pajamas alert component for Rails flash (merge request)
• Update code analyzers (merge request) GitLab Enterprise Edition
• Migrate groups' projects settings card to ViewComponent (merge request)
• Harmonise warning in Protected environments by @ali_o_kan (merge request) GitLab Enterprise Edition
• Migrate to GlButton (merge request) GitLab Enterprise Edition
• GraphQL: Rename verification status to status (merge request) GitLab Enterprise Edition
• Hides cleanup policy admin notification while loading (merge request)
• Refetch deployments on user interaction (merge request)
• Migrate groups "Protect environment" card to ViewComponent (merge request) GitLab Enterprise Edition
• Allow updating users.pronouns property in REST API by @drumm (merge request)
• Migrate "Protect a tag" card to ViewComponent (merge request)
• Migrate "Protect environment" card to ViewComponent (merge request) GitLab Enterprise Edition
• Hide delete button when user cannot delete runner (merge request)
• Adding metadata and expires_at to Secure Files (merge request)
• Limit maximum number of child epics (merge request) GitLab Enterprise Edition
• Remove tmp_index_system_note_metadata_on_attention_request_actions (merge request)
• Rename WebHook service_id to integration_id (merge request)
• Migrate issue/MR bulk edit checkboxes to be Pajamas compliant (merge request)
• Migrate LDAP Remember me checkbox to be Pajamas compliant (merge request)
• Migrate OmniAuth Remember me checkbox to be Pajamas compliant (merge request)
• Update dependency auto-deploy-image to v2.38.0 (merge request)
• Migrate card component - admin note in admin area (merge request)
• Migrate pj component - card in the profile SSH page (merge request)
• Allow updating users.commit_email property in REST API by @drumm (merge request)
• Migrate custom attributes card to ViewComponent (merge request)
• Add new alert for creating new top-level group (merge request)
• Autofocus on Markown Editor (merge request)
• Removes spacing from system and discussion notes (merge request) GitLab Enterprise Edition
• Remove temp index that no longer needed (merge request)
• Update deployment rollback buttons (merge request)
• Remove unused db fields from assignees (merge request)
• Remove unused styles on subscription seats table (merge request) GitLab Enterprise Edition
• Drop ci_update_unlocked_job_artifacts feature flag (merge request)
• Update Busy checkbox copy (merge request)
• Update dependency auto-build-image to v1.19.0 (merge request)
• Update successful purchase banner (merge request) GitLab Enterprise Edition
• Remove cleanup_extract_mr_diff_deletions feature flag (merge request)
• Default-enable :hash_oauth_tokens feature flag (merge request)
• GitLab Version - Badge CTA (merge request)
• Backfill internal column on notes (merge request)
• Block userless CI (merge request)
• Remove cache_issue_sums flag (merge request) GitLab Enterprise Edition
• Do not treat warnings as errors (merge request) GitLab Enterprise Edition
• Add warning when Token Access disabled by @ali_o_kan (merge request)
• Add reject_non_dco_commits to push_rules (merge request)
• Added parameter to participants query (merge request)
• Rename timeline event note's validation error message (merge request)
• Remove tmp idx null project namespace id (merge request)
• Hide subgroup milestones on Roadmap when filtered by group (merge request) GitLab Enterprise Edition
• Remove unused updated_state_by_user_id from merge_request_reviewers (merge request)
• Add index on internal notes (merge request)
• Remove multiple iteration cadences license check (merge request) GitLab Enterprise Edition
• Check feature flag in bulk imports API for consistency (merge request)
• Enable auditor access to group runners (merge request)
• GitLab Version - Increase cache life (merge request)
• Adds last downloaded date to package registry UI (merge request)
• Drop tmp_index_user_callouts_on_attention_request_feature_names (merge request)
• Clean up successful experiment promote_mr_approvals_in_free (merge request)
• Add iteration to Issues Analytics table by @ali_o_kan (merge request) GitLab Enterprise Edition
• Finalize member namespace id cleanup (merge request)
• Remove allow non-blocking member refresh feature flag (merge request) GitLab Enterprise Edition
• Ignore fingerprint column on sbom_sources (merge request)
• Clean up read_package_policy_rule feature flag by @wwwjon (merge request)

Removed (18 changes)

• Remove contraint check_508774aac0 (merge request)
• Remove default_scope for the Event model (merge request)
• Drop free user cap columns from namespace settings (merge request)
• Remove FF override_group_level_protected_environment_settings_permission (merge request)
• Remove Feature Flag for artifacts reports junit (merge request)
• Geo Sites - Remove Current Site Badge (merge request) GitLab Enterprise Edition
• Revert "Merge branch 'pages-lets-encrypt-ecdsa' into 'master'" (merge request)
• Remove incident_resource_links_widget feature flag (merge request) GitLab Enterprise Edition
• Delete remove invalid member migrations (merge request)
• Drop index on ci_builds_metadata (merge request)
• Remove unused partial (merge request)
• Remove unused VSA label_ids param (merge request) GitLab Enterprise Edition
• Remove WorkItemUpdateWidgets mutation from GraphQL API (merge request)
• Remove application limits for Jira import (merge request)
• Remove global_search_custom_slis feature flag (merge request)
• Remove contribution_analytics_optimized_base_query (merge request) GitLab Enterprise Edition
• Remove unused experience_level DB column (merge request)
• Remove legacy memory killer (merge request)

Security (19 changes)

• Fix CVE-2022-32149 in workhorse dependency (merge request)
• Validate the scheme of project import URLs (merge request)
• Respect instance level rule for editing approval rules (merge request)
• Update TodoPolicy to handle confidential notes (merge request)
• Fixes XSS in widget extensions (merge request)
• Redact user's private email in group member event webhook (merge request)
• Sanitize Url and check for valid numerical errorId in error tracking (merge request)
• Manually sync canonical to security (merge request)
• Fix conflict between canonical and security (merge request)
• Enforce group IP restriction on Dependency Proxy (merge request)
• Prevent serialization of sensible attributes from JsonCache by @jbobadilla-ext (merge request)
• Restrict max duration to 1 year for trace display (merge request)
• Forbid creating a tag using default branch name (merge request)
• Add security protection for Github (merge request)
• Redact secrets from WebHookLogs (merge request)
• Prevent users creating issues in ay project via board/issues controller (merge request)
• Use UntrustedRegexp for upload rewriter (merge request)
• Fix leaking emails in WebHookLogs (merge request)
• Validate httpUrlToRepo to be http or https only (merge request)

Performance (19 changes)

• Avoid query for next page check (merge request)
• Refactor BitBucket importer (merge request)
• Nullify and delete some user associations in batches (merge request)
• Nullify merge request metrics user in batches on user deletion (merge request)
• Nullify merge request and user associations in batches on user deletion (merge request)
• Removing feature flag config files (merge request)
• Fix N+1 when loading labels on issue, epic, mrge_request lists (merge request)
• Fix labels N + 1 query in WorkItemsResolver (merge request)
• Remove n+1 queries for participants policy checks (merge request)
• Fix votes N+1 when loading issues, epics, merge requests lists (merge request)
• Ensure primary key index is used for Geo::Replicable (merge request) GitLab Enterprise Edition
• Remove feature flags related to diff highlight expiration (merge request)
• Destroy unlocked and expired pipeline artifacts (merge request)
• Load all license details from Gitaly (merge request)
• Load all license details from Gitaly (merge request)
• Avoid N+1 in GraphQL WorkItemsResolver (merge request)
• Add delay during project authorizations refresh (merge request)
• Enable background closure of issues from commit messages (merge request)
• Fix Workhorse Redis Sentinel role checks (merge request)

Other (63 changes)

• Add logging for file variable expansion (merge request)
• Remove gitlab_shell_jwt_token feature flag (merge request)
• Deploy tiers named nonprod no longer marked as production (merge request)
• Remove FF gl_listbox_for_sort_dropdowns (merge request)
• Remove duplicated read_confidential_notes policy (merge request)
• Drop index_notes_on_note_gin_trigram index where exists (merge request)
• Add diagnostic reports uploader (merge request)
• Clean up legacy Gitaly Wiki RPCs in Rails (merge request) GitLab Enterprise Edition
• Add message and importer type to logs (merge request)
• Update task system note background migration batch sizes (merge request)
• RuboCop: Enable previously disabled Rails/ActiveRecordCallbacksOrder by @edith007 (merge request)
• RuboCop: Enable previously disabled Style/SoleNestedConditional by @edith007 (merge request)
• RuboCop: Enable previously disabled Rails/InverseOf by @edith007 (merge request)
• RuboCop: Enable previously disabled Rails/RedundantForeignKey by @edith007 (merge request)
• RuboCop: Enable previously disabled Style/KeywordParametersOrder by @edith007 (merge request)
• RuboCop: Enable previously disabled Style/NumericLiteralPrefix by @edith007 (merge request)
• RuboCop: Enable previously disabled Rails/IndexWith by @edith007 (merge request)
• Add bulk_import_id to bulk_import logs (merge request)
• RuboCop: Enable previously disabled Style/SingleArgumentDig by @edith007 (merge request)
• Use bulk_import_entity_id in all logs (merge request)
• Prepare partial non-latin index for issues (merge request)
• Remove incident_timeline feature flag (merge request)
• Enable wiki feature flags by default (merge request)
• Ignore column with typo on NamespaceDetails (merge request)
• Remove the about your company feature flag and commit code (merge request) GitLab Enterprise Edition
• Remove block_emails_with_failures feature flag (merge request)
• Removes the gl_avatar_for_all_user_avatars FF (merge request)
• Remove the non supported google_client_email (merge request)
• Remove background trial application feature flag (merge request)
• Remove the FF ci_project_pipeline_config_refactoring (merge request)
• Add snowplow event tracking to group imports (merge request)
• Add columns for package forward cascade settings (merge request)
• Update profile page buttons to pajamas (merge request)
• Increase branch expiry from 10 minutes to 60 (merge request)
• Revert "Merge branch '371986-introduce-ff' into 'master'" by @kwiebers (merge request)
• Bump Gitlab Shell to v14.12.0 (merge request)
• Remove unused members awaiting index (merge request)
• Change card to Pajamas (merge request)
• RuboCop: Enable previously disabled Style/StringLiteralsInInterpolation by @edith007 (merge request)
• Validate entity type used in Gitlab Migration (merge request)
• Modifications to adding delay logic (merge request)
• Remove unnecessary card component (merge request)
• Remove orphan project bots (merge request)
• Remove FF ci_rules_changes_compare (merge request)
• Remove and add raw of ci-variables tables with new default (merge request)
• Ignore unused columns on requirements (merge request) GitLab Enterprise Edition
• Remove trace column from ci_builds table (merge request)
• Remove unused free user cap data feature flag (merge request) GitLab Enterprise Edition
• Limit the number of active jobs early in the pipeline creation (merge request) GitLab Enterprise Edition
• GraphQL fetch stage by id (merge request)
• RuboCop: Enable previously disabled Style/AccessorGrouping by @edith007 (merge request)
• RuboCop: Enable previously disabled Style/EmptyMethod by @edith007 (merge request)
• RuboCop: Enable previously disabled Rails/FilePath by @edith007 (merge request)
• RuboCop: Enable previously disabled Style/ExplicitBlockArgument by @edith007 (merge request)
• Use Gitlab UI empty state in Roadmap by @rajatgitlab (merge request) GitLab Enterprise Edition
• Cleanup task system note renaming background migration (merge request)
• RuboCop: Enable previously disabled Style/CaseLikeIf by @edith007 (merge request)
• RuboCop: Enable previously disabled Rails/HelperInstanceVariable by @edith007 (merge request)
• Add dashboard limit to enable free user management (merge request)
• Decommission BatchPopQueueing class (merge request)
• Remove create_approval_todos_on_mr_update FF (merge request)
• Add environment keyword to pages job by @edith007 (merge request)
• Remove feature flag ci_variables_refactoring_to_variable (merge request)

15.4.6 (2022-11-30)

Security (11 changes)

• Send resolved_address param to gitaly during repository import (merge request)
• Add size validation during nuspec file extraction (merge request)
• Cross-site scripting in Jira Integration (merge request)
• Protect web-hook secret tokens after changing URL (merge request)
• Redact secret tokens from web-hook logs (merge request)
• Prevent unauthorized users from seeing Release information on tag pages (merge request)
• Update after_import to expire cache before removing prohibited branches (merge request)
• Deny all package permissions when group access is restricted by IP (merge request)
• Redact user emails from project webhook data (merge request)
• Disallow local URls for build_runner_session if dictated by app setting (merge request)
• Prevent token bypass for extenal authorisation (merge request)

15.4.5 (2022-11-15)

Fixed (1 change)

• Revert Sidekiq default routing rules (merge request)

15.4.4 (2022-11-02)

Security (12 changes)

• Datadog API key leak by changing integration URL (merge request)
• Redact confidential references in Jira issue descriptions (merge request)
• Forbid reading emojis on internal notes (merge request)
• Same-site redirect vulnerability (merge request)
• BYPASS: Stored-XSS with CSP-bypass via scoped labels' color (merge request)
• Fix Running Upstream Pipelines Jobs Without Permission (merge request)
• Add length limit to addressable URLs (merge request)
• Add a redirect wall before artifact redirect to pages (merge request)
• Sandbox swagger-ui to prevent injection attacks (merge request)
• Fix external project permission when using CI prefill variables (merge request)
• Resolve users can view audit events from other members (merge request)
• Path traversal fix for Secure Files (merge request)

15.4.3 (2022-10-19)

Fixed (4 changes)

• Sign in: use custom logo again (merge request)
• Fix closing of external issues (merge request)
• Sign in: use custom logo again (merge request)
• Fix REST/GRAPHQL APIs handling TODOs WorkItem target (merge request)

15.4.2 (2022-10-04)

Fixed (1 change)

• Ensure that stage name and record are in sync for page deployments (merge request)

15.4.1 (2022-09-29)

Security (15 changes)

• Redact user's private email in group member event webhook (merge request)
• Redact secrets from WebHookLogs (merge request)
• Forbid creating a tag using default branch name (merge request)
• Sanitize Url and check for valid numerical errorId in error tracking (merge request)
• Add security protection for Github (merge request)
• Fix leaking emails in WebHookLogs (merge request)
• Restrict max duration to 1 year for trace display (merge request)
• Use UntrustedRegexp for upload rewriter (merge request)
• Validate httpUrlToRepo to be http or https only (merge request)
• Respect instance level rule for editing approval rules (merge request)
• Prevent users creating issues in ay project via board/issues controller (merge request)
• Prevent serialization of sensible attributes from JsonCache (merge request)
• Update TodoPolicy to handle confidential notes (merge request)
• Enforce group IP restriction on Dependency Proxy (merge request)
• Fixes XSS in widget extensions (merge request)

15.4.0 (2022-09-21)

Added (162 changes)

• Add git tags from last deployment to environment detail page (merge request)
• Background worker for suggested reviewers (merge request)
• Maven request forwarding (merge request)
• Add edited by information to GraphQL WorkItem type (merge request)
• RPM initial upload and package creation (merge request)
• Add codeOwnerReviewRequired to EE (merge request) GitLab Enterprise Edition
• Added REST APIs to fetch latest release and download release assets by @zillemarco (merge request)
• Add iterations cadences to Gitlab Migration (merge request) GitLab Enterprise Edition
• Expose user and group for branch protection access levels in EE (merge request) GitLab Enterprise Edition
• Add cluster_agent_id and image to GraphQL vulnerabilitySeveritiesCount (merge request) GitLab Enterprise Edition
• Add unique index to ci_builds_metadata (merge request)
• Add job field to ProjectType (merge request)
• Enable search option for environments (merge request)
• Added markdown support for solution (merge request) GitLab Enterprise Edition
• Support delivery of emails using Microsoft Graph API (merge request)
• Expose CI variable limits through GraphQL (merge request)
• Add checkbox supported by Autosave and autosave confidential in Issuable form by @ali_o_kan (merge request)
• Backfill namespace_id on issues table (merge request)
• Add issue resource_iteration_events to Project Import/Export (merge request) GitLab Enterprise Edition
• Enabling feature flag immediate_delete_subgroup_api by default (merge request)
• Add harbor registry tags page by @orozot (merge request)
• Add the resource state events REST API endpoint for epics (merge request) GitLab Enterprise Edition
• Add last_downloaded_at to packages (merge request)
• Documentation of Move to start/end of list actions (merge request)
• Add monthly count_user_auth metric (merge request)
• Add auth_type to jwt controller tokens (merge request)
• Add column to store over user limit notification status (merge request)
• Domain Verification MVC (merge request) GitLab Enterprise Edition
• Add default project for epics (merge request) GitLab Enterprise Edition
• Extend packages project policy to consider access level by @wwwjon (merge request)
• Add system note service for resource links (merge request)
• Add group shares in group transfer locations API (merge request)
• Removes group_ip_restrictions_allow_global feature_flag (merge request)
• GraphQL query for last and upcoming deployment (merge request)
• Add clear status after dropdown to profile set status form (merge request)
• Migrate merge request review_requested/removed events (merge request)
• Memoize search_environments finder (merge request)
• Add state field to environments varchar name index (merge request)
• Add version sort to tags API (merge request)
• Show better errors from GraphQL on Releases (merge request)
• Debian Acquire-By-Hash (to avoid Hash Sum Mismatch errors) by @sathieu (merge request)
• Add cube proxy API request (merge request)
• Adds endpoints for MLFlow client Run entity (merge request)
• Optimize the pending todos check query (merge request)
• Load more for task assignees when user scrolls (merge request)
• Add pushAccessLevels to graphql endpoint (merge request)
• Add mergeAccessLevels to graphql endpoint (merge request)
• Support variable expansion on environment auto_stop_in (merge request)
• Add dismissal_reason to StateTransitions (merge request)
• Add branchProtection under project.branchRules in graphql endpoint (merge request)
• Updates container registry project settings (merge request)
• Add support for semantic versioning tags sort (merge request)
• New GraphQL mutation for dismiss security finding (merge request) GitLab Enterprise Edition
• Add rpm package type (merge request)
• Update groups api to accept parameter for ip_restriction_range (merge request) GitLab Enterprise Edition
• Allow users to filter issues by health status (merge request)
• Moved assignees to work_items feature flag (merge request)
• Add support for Google CDN (merge request)
• Use ListCommits rpc to fetch context commits by @akumar1503 (merge request)
• Create international phone input component in Vue (merge request) GitLab Enterprise Edition
• Create ultimate feature removal banner (merge request)
• Add basic DORA configuration model (merge request)
• Autosave due_date in Issuable form by @ali_o_kan (merge request)
• Remove not allowed epics properties from issue CSV export (merge request) GitLab Enterprise Edition
• Add View entire blame button (merge request)
• Support … and $$… syntax math in markdown (merge request)
• Add integration status area to the agent details (merge request) GitLab Enterprise Edition
• Add support for sorting project and group members Graphql resolvers (merge request)
• Add id, size and expiry to GraphQL Job Artifact by @leetickett (merge request)
• Add count field to the GraphQL EpicConnection type (merge request) GitLab Enterprise Edition
• Add instrumentation for MAU visiting environments pages (merge request)
• Add edit confirmation popover in sidebar dropdown widget (merge request) GitLab Enterprise Edition
• Adding graphQL parameters for move to start and end for boards (merge request)
• Autosave weight in Issuable form by @ali_o_kan (merge request) GitLab Enterprise Edition
• Move embedded Zoom calls to Linked Resources (merge request) GitLab Enterprise Edition
• Allow the creation of scan result policies (merge request) GitLab Enterprise Edition
• Add ArtifactDestroy GraphQL mutation by @leetickett (merge request)
• Introduce backend updates for toggle of diff preview by @joe-snyder (merge request)
• Add a search bar to the list of assigned projects (merge request)
• GraphQL: Add resolver to runner projects (merge request)
• Add partition_id column to selected CI database tables (merge request)
• Adds first endpoints for MLFlow Integration (merge request)
• Add index to todos the improve query performance (merge request)
• Graphql query for environment information (merge request)
• Allow admins to merge topics [API] by @wwwjon (merge request)
• Add autosave on design notes (merge request)
• Add new Katalon ci/cd template for partnership program by @philip.becker (merge request)
• Add JobArtifactsDestroy GraphQL mutation by @leetickett (merge request)
• Default-enable Pipeline Wizard for pages (merge request)
• Add a work item widget for iteration (merge request) GitLab Enterprise Edition
• Expose dates where DORA data is missing (merge request) GitLab Enterprise Edition
• Rollout shimo integration by @icbd (merge request)
• Add streaming audit event for work item and MR deletion (merge request)
• Add mutation to move to start / end of board lists (merge request)
• Migration for creating ghost_user_migrations table (merge request)
• Add pipelined Redis commands to performance bar (merge request)
• Add hasEpic to issue type (merge request) GitLab Enterprise Edition
• Add id, size and expiry to GraphQL Job Artifact by @leetickett (merge request)
• Make Short Sha in Deployments Page a Link (merge request)
• Add harbor registry list page by @orozot (merge request)
• Monitor memory growth in memory-watchdog (merge request)
• Enable escape_gitaly_refs by default (merge request)
• Add Debian endpoints for Sources by @sathieu (merge request)
• Add Debian endpoints for D-I Packages by @sathieu (merge request)
• Add support for task item status tooltip (merge request)
• Support Group Avatar Removal in REST API by @tuxtimo (merge request)
• Align namespace of DeployAccessLevel model (merge request)
• Show epics blocking info on list & boards (merge request) GitLab Enterprise Edition
• Create API endpoint to update a protected environment (merge request) GitLab Enterprise Edition
• Add work item weight widget subscription (merge request)
• Add security finding dismiss service (merge request) GitLab Enterprise Edition
• Add branchRules to project in graphql endpoint (merge request)
• Introduce etag caching for diff batches endpoint (merge request)
• Set forked source cost factor to .008 (merge request) GitLab Enterprise Edition
• Add auto_ban_user_on_excessive_projects_download to group settings (merge request)
• Support GraphQL subscription for weight update (merge request) GitLab Enterprise Edition
• Utilize dormant user period in application settings by @joe-snyder (merge request)
• Extend deployments graphql query for index page (merge request)
• Add resource events to Import/Export (merge request) GitLab Enterprise Edition
• Add sorting/filtering/paging to CRM organizations by @leetickett (merge request)
• Add helper method to prevent default action on submit in feature specs by @mehulsharma (merge request)
• Backfill values for cluster_agents.has_vulnerabilities (merge request)
• Display health status on issue board cards (merge request)
• Adds a Cleanup class for unused still-active Personal Access Tokens (merge request)
• Relate BroadcastMessage and Namespace models (merge request)
• Adds CiConfigVariableType to ProjectType (merge request)
• Update Import/Export for iterations cadences (merge request) GitLab Enterprise Edition
• Record cache data about api/web cache helpers (merge request)
• Add clusterAgent.vulnerabilityImages to GraphQL API (merge request) GitLab Enterprise Edition
• Allow to specify the fields to search for when querying work items (merge request) GitLab Enterprise Edition
• Support lowercase query string status (merge request)
• Add new instance setting to UI and controller (merge request)
• Support Project Avatar removal in REST API by @tuxtimo (merge request)
• Add external_url field to Environment GraphQL Type by @Taucher2003 (merge request)
• Introduce REST API for group transfer locations (merge request)
• Show alert for email exposure for service desk (merge request)
• Add work type icon to boards and color gray for icons (merge request)
• Implement Vuln Scanner reportTypeHumanized for easier frontend use (merge request) GitLab Enterprise Edition
• REST API for project transfer locations (merge request)
• Re-introduce manual iteration management (merge request) GitLab Enterprise Edition
• Add GraphQL query for deployment details (merge request)
• Add auto_ban_user_on_excessive_projects_download to application settings (merge request)
• Add support for snippet spam (merge request)
• Added loading state to "Commit changes" button in the single file editor by @payal-jain (merge request)
• Allow admins to merge topics [frontend] by @wwwjon (merge request)
• Fetch child epics with colour when FF is enabled (merge request) GitLab Enterprise Edition
• Thread Google Chat messages by topic by @csarva (merge request)
• Add query string filtering (merge request)
• Add Vulnerabilities Finding Create Issue mutation (merge request) GitLab Enterprise Edition
• Add selected state for ellipsis button in last commit (merge request)
• Set public open source cost factor to .5 (merge request) GitLab Enterprise Edition
• Add GraphQL query for deployments (merge request)
• Support line chart for DORA charts (merge request) GitLab Enterprise Edition
• Add GraphQL custom emoji schema, flagged (merge request)
• Provide ability to move a board card to the top/bottom of the list (merge request)
• Enables track_work_items_activity feature flag by default (merge request)
• Add GraphQL sort/filter/page crm organizations by @leetickett (merge request)
• Track CI/CD Tunnel usage (merge request)
• Add present on default branch to project_id_and_id_active_cis index (merge request)
• Log JWT authentication failures (merge request)
• Show tooltip on hover on work item icons (merge request)
• Add Iteration Cadences to Group Import/Export (merge request) GitLab Enterprise Edition

Fixed (163 changes)

• Remove vulnerability approval rules (merge request) GitLab Enterprise Edition
• Fix default date timezone for VSA (merge request)
• Fixing Deduplication of ProcessSyncEventsWorkers (merge request)
• List groups from group shares on project transfer (merge request)
• Remove extra padding on every 8th participant in sidebar (merge request)
• Handle large offset more gracefully (merge request)
• Show add button when user has sufficient permissions (merge request) GitLab Enterprise Edition
• Don't show View entire blame button for a single blame page (merge request)
• Resolve web hook edit page timeout (merge request)
• Fix selective code owner removals by @leetickett (merge request)
• Fix gitaly ref replication on project fork (merge request)
• Add a new ability for reading billable members (merge request) GitLab Enterprise Edition
• Fill missing dates on VSA duration chart (merge request) GitLab Enterprise Edition
• Resetting form doesn't affect submit button (merge request)
• Fix group IP allowlist update bug (merge request) GitLab Enterprise Edition
• Fix 500 error sorting merge requests with approvers by milestone (merge request)
• Show test reports immediately on pipeline tests tab (merge request)
• Improve fast-forward merge service reliability (merge request)
• Fixes spacing for issue widgets (merge request) GitLab Enterprise Edition
• Fix feature flag link in related feature flags (merge request) GitLab Enterprise Edition
• Fixes spacing for design management (merge request)
• Fix json payload for external status check feature (merge request) GitLab Enterprise Edition
• Fix group name in memberships export email (merge request) GitLab Enterprise Edition
• Prevent error when user has approved the merge request by @batu (merge request)
• Fix: locale issues on repository settings by @JeremyWuuuuu (merge request) GitLab Enterprise Edition
• Create authroizations record for personal projects (merge request)
• Remove search bar from project/group hook log pages (merge request)
• Fix: milestones sidebar locale issue by @JeremyWuuuuu (merge request) GitLab Enterprise Edition
• Geo: Avoid runaway queue growth (merge request) GitLab Enterprise Edition
• Use distinct location fingerprints for manually created vulnerabilities (merge request) GitLab Enterprise Edition
• Add flex wrap tp prevent aws logo from overflowing by @beverett (merge request)
• Add db fixtures for providers (merge request) GitLab Enterprise Edition
• CI npm template: Fix comparison of pre-release versions by @the_s (merge request)
• Update the Changes tab with the real file count when it loads (merge request)
• Override ancestor icon background for dark mode (merge request)
• Use first day of week in roadmap (merge request) GitLab Enterprise Edition
• Prevent outdated manual deployment jobs from being ran (merge request)
• Remove unintended "#" from push_to_merge_request_email (merge request)
• Fix trial applying bug in .com (merge request) GitLab Enterprise Edition
• Fix paste markdown feature in Content Editor (merge request)
• Improve VSA edit modal responsiveness (merge request) GitLab Enterprise Edition
• Give blob header buttons correct spacing (merge request)
• Fix GitHub import un/assigned events (merge request)
• Fix deploy freezes when period overlaps with itself (merge request)
• Hide Auto DevOps button on the project page (merge request)
• Show visibility level when creating subgroup (merge request)
• Remove hidden checkboxes when not needed (merge request)
• Ensure the VSA duration chart renders all dates (merge request) GitLab Enterprise Edition
• Fix: pipeline reports missing secret detection report by @JeremyWuuuuu (merge request) GitLab Enterprise Edition
• Fix: repository analytics time rendering locale issue by @JeremyWuuuuu (merge request) GitLab Enterprise Edition
• Geo: Realign concurrency limits (merge request) GitLab Enterprise Edition
• This MR fixes bug with missing banner (merge request)
• Fix environment auto stop in assignment when former value present (merge request)
• Fix: locale on reviewer sidebar by @JeremyWuuuuu (merge request)
• Fix sha argument passing of ProjectType.ci_config_variables (merge request)
• Sort timeline events by occurred_at then by id (merge request)
• Return 0 when credit_card_validation.holder_name is nil (merge request)
• Fix: locale on assignee sidebar by @JeremyWuuuuu (merge request)
• Fix padding for text editors (merge request) GitLab Enterprise Edition
• Switch 'b' shortcut to not ever focus or click an in-page element (merge request)
• Fix boards switcher for unauthorized user (merge request)
• Fix subgroup support for approval rules (merge request) GitLab Enterprise Edition
• Handling Database Timeouts in gitlab:db:truncate_legacy_tables:* (merge request)
• Fix: new compare merge request locale issues by @JeremyWuuuuu (merge request)
• Removed detached prefix from mr pipelines by @leetickett (merge request)
• Prevent race condition when jobs acquire resource groups (merge request)
• Invalidate the merge request cache when assignee/reviewer changes (merge request)
• Fix stage name escaping in pipeline views by @fabsrc (merge request)
• Fix wrapping in source files (merge request)
• Call .length rather than .size so another query isn't executed (merge request)
• Trigger hooks when updating assignees via GraphQL (merge request)
• Multiline blockquote leading/trailing newline (merge request)
• Update region codes on gtag analytics (merge request)
• Fix oauth password to not be forced to be lowercase by @mtan-gitlab (merge request)
• Update squash commit SHA outside of merge method (merge request)
• Fix visual regression in top toolbar (merge request)
• Improve toolbar performance (merge request)
• Clean up orphaned invited members
• Fix parsing commit trailers without specified email (merge request)
• Fix link bubble menu bug (merge request)
• Remove any broken symlink before creating it for .gitlab_shell_secret (merge request)
• Use FIFO as pending builds strategy for group runners by @wwwjon (merge request)
• Fix 500 error for Commits API (merge request)
• Fixed note buttons spacing on issues by @zillemarco (merge request)
• Fix markdown tabs alignment on issue/MR create pages (merge request)
• Geo: Fix redirects of LFS transfer downloads (merge request) GitLab Enterprise Edition
• Fixes todo button in sticky header not working (merge request)
• Fix start_line/end_line link values (merge request) GitLab Enterprise Edition
• Fix page javascript after a deploy token got created (merge request)
• Fix for broken tag/branch switcher (merge request)
• Use dynamic select dropdown on forks form (merge request)
• Fix/Add css selector by @TrueKalix (merge request)
• Fix/Add css selector by @TrueKalix (merge request)
• Enable geo_batch_count feature flag (merge request) GitLab Enterprise Edition
• Save repository size limit set in admin group page correctly (merge request) GitLab Enterprise Edition
• Fix incorrect job artifacts expire_at (merge request)
• Fix language mapping in the Source Viewer (merge request)
• Fix SVGs not rendering in issuables (merge request)
• Do not prefill new form again with successfully created deploy token (merge request)
• Fix custody report CSV for projects inside subgroup (merge request) GitLab Enterprise Edition
• Fix not showing "job dependencies" view when all jobs are bridges (merge request)
• Fix 'Assign yourself' visibility for users without permissions by @zillemarco (merge request)
• Fix missing metadata for system notes (merge request)
• Fix: issue list assignees label translation by @JeremyWuuuuu (merge request)
• Board card location row breaks incorrectly fix (merge request)
• Add screen reader only text to content editor dropdowns (merge request)
• Handle the exception in case of large yml (merge request) GitLab Enterprise Edition
• Fix empty state MR pipeline run (merge request)
• Fix: merge request editing page wrong translations by @JeremyWuuuuu (merge request)
• Update 2FA requirements async for group members (merge request)
• Add missing runner variables to predefined list by @bbodenmiller (merge request)
• Fix search_files_by_name escaping names twice (merge request)
• Automatically remove leading spaces in project names (merge request)
• Fix clear icon alignment (merge request)
• Prevent invalid characters from causing diffs to error out (merge request)
• Removing mixin from mr widget pipeline (merge request)
• Alter when to send releasedAt when release created (merge request)
• Fix broken UI text in selector in dashboard milestones by @tnir (merge request)
• Ensure the VSA form loading state is rendered (merge request) GitLab Enterprise Edition
• Fix hash order issue test in DORA reducer (merge request) GitLab Enterprise Edition
• Improve the performance of bubble menus (merge request)
• Fix missing project for included remote file including with rules:exists (merge request)
• Fix NoMethodError in IssueResolverArguments (merge request)
• Include reserved report_approvers rule names as (merge request) GitLab Enterprise Edition
• Fix board sidebar links color (merge request)
• Fix hardcode text on new branch page by @icbd (merge request)
• Fix nested ordered task list styling in issue description (merge request)
• Add gray color on component icon to fix all use cases (merge request)
• Fix fetching epics when changing sort option (merge request)
• Fix timelog type policy check by @leetickett (merge request)
• Remove extra space after dismissing free cap alert (merge request) GitLab Enterprise Edition
• Localize dateformat text (merge request)
• Improve blame link feature (merge request)
• Skip file removal if GitLab managed replication is disabled (merge request) GitLab Enterprise Edition
• Fixed fullPath for assignees and labels (merge request)
• Open task in new window when doing ctrl/cmd+click (merge request)
• Upgrade three.js dependency (merge request)
• Fix issue searches using Russian characters (merge request)
• Fix: untranslated merge request consent box by @JeremyWuuuuu (merge request)
• Remove redundant class name from group template by @tnir (merge request)
• Added lowercase to the actual con-reg api call (merge request)
• Fixed alignment of MR activity dropdowns on mobile by @zillemarco (merge request)
• Handle all uploads instead of a hardcoded list (merge request)
• Bypass earliest date validation in importing of iteration cadences (merge request) GitLab Enterprise Edition
• Fix Geo removing uploads on object storage (merge request) GitLab Enterprise Edition
• Set all attachments to Content-Type application/octet-stream (merge request)
• Do not update approval rules for merge request (merge request) GitLab Enterprise Edition
• Rake Task gitlab:db:lock_writes more efficient (merge request)
• Update subscription service for new hashed OAuth tokens (merge request) GitLab Enterprise Edition
• Ignore accents in search term when searcing issues (merge request)
• Update Oj to v3.13.21 (merge request)
• Make compliance report email html_safe (merge request)
• Quick fix for the move to position (merge request)
• Fix Redis pipeline/multi-exec deprecation errors (merge request)
• Geo: Fix registry backfilling (merge request) GitLab Enterprise Edition
• Fix user recent activity links for work item actions (merge request)
• Restore transaction block while extracting sync (merge request) GitLab Enterprise Edition
• Fix issue description list item reordering indentation (merge request)
• Fix boards alignment and dark mode issues (merge request)
• Fix visual bugs from !95073 (merge request)
• Fix CI/CD legacy variables fetching group projects (merge request)
• Hide copy failed tests button when endpoint returns null files (merge request)
• Fix detection of URLs in markdown selection (merge request)

Changed (167 changes)

• Rename last_run_date to next_run_date (merge request)
• Update pg_query to v2.1.4 (merge request)
• Convert issues analytics table to graphql by @ali_o_kan (merge request) GitLab Enterprise Edition
• Hash Oauth application secrets (merge request)
• Fix: notify locale on new user email by @qt-gith (merge request)
• Cleanup attention request related system notes (merge request)
• Remove temp index group membership namespace id (merge request)
• Add graphql feature flag for job_app (merge request)
• Account for inherited runners in RunnerPolicy (merge request)
• Allow job token configuration while disabled by @ali_o_kan (merge request)
• Use a stacked layout for runners list (merge request)
• Adjust codequality inline severity icon (merge request) GitLab Enterprise Edition
• Add project harbor registry feature flag by @orozot (merge request)
• Fix: notify locale on pipeline fixed email by @qt-gith (merge request)
• Hide information for blocked user in popover (merge request)
• Add new MR environment auto-stop logic (merge request)
• Add epoch column to rpm metadata (merge request)
• Merge branch '359067-rename-package-files-to-assets' into 'master' (merge request)
• Add bot badge in user list for admins (merge request)
• Issuable title updates no longer update last_edited values (merge request)
• Move Google IP fetch into a separate service with rate limiting (merge request)
• Fix: notify locale on remote mirror update failed email by @qt-gith (merge request)
• Enable restyle_login_page by default (merge request)
• Changed draft text by @mehulsharma (merge request)
• Use default project for epic issue creation (merge request) GitLab Enterprise Edition
• Add bot badge in project and group member lists (merge request)
• Feat(Subscripion activation): add error handling (merge request) GitLab Enterprise Edition
• Adds redirection when cleanup policy is saved (merge request)
• GraphQL Max Call field extension (merge request)
• Update SubscriptionUpgradeInfoCard title when group is in a trial (merge request) GitLab Enterprise Edition
• Move file editor CSS to its own page bundle (merge request)
• Remove the markdown_corrected_blockquote (merge request)
• Unlock CI pipeline artifacts when pipeline is unlocked (merge request)
• Updated show work item page title (merge request)
• Remove exess buttons (merge request)
• Update default initializer value for Sidekiq routing_rules (merge request)
• Update Service Desk settings help text (merge request)
• Update Service Desk settings help text (merge request)
• Mass update legacy Slack integrations (merge request)
• Update third party login styles (merge request)
• Narrow the definition of an OSS contribution (merge request)
• Allow to sort tags by semantic version (merge request)
• Splits feature flag for removing note attributes (merge request) GitLab Enterprise Edition
• Rename last_used_before scope to last_used_before_or_unused by @TrueKalix (merge request)
• Add prefix comment on note in backend (merge request)
• Update license compliance docs (merge request) GitLab Enterprise Edition
• Add setting for max pages custom domains per project (merge request)
• This MR enables feature flag (merge request) GitLab Enterprise Edition
• Simplify primary navigation bar and align global search to the left (merge request)
• Simplify primary navigation by removing infrequently used options (merge request)
• Removed vuln training message (merge request) GitLab Enterprise Edition
• Removed and-Separators with comma-separators by @anshulriyal (merge request)
• Cleanup «New tag» page (merge request)
• Pipeline job pill alignment (merge request)
• Update controller update to allow clean MD render (merge request)
• Lower the default Rails.cache ttl to 8 hours (merge request)
• Improve account limit settings text (merge request)
• Update dependency auto-deploy-image to v2.37.0 (merge request)
• Improve UI text of FloC setting (merge request)
• Fix: notify locale on push to merge request email by @qt-gith (merge request)
• Remove extra whitespace in buildkite.rb (merge request)
• Update group runners Edit page look and feel (merge request)
• Update removal date in clusters deprecation alert (merge request)
• Replace the term homepage with dashboard (merge request)
• Dropzone: Change border-radius to default radius (merge request)
• Call update_web_hook! for buildkite when ensuring ssl validation (merge request)
• Update copy text for self metrics toggle (merge request)
• Add locked column to Ci::PipelineArtifact (merge request)
• Advanced Search: Index label_ids for issues (merge request) GitLab Enterprise Edition
• Remove after_save callback to create integration webhooks (merge request)
• Replace Wiki service find_page RPC by normal repository RPCs (merge request)
• Add column 'branch_filter_strategy' to 'web_hooks' by @luzhiyuan.deer (merge request)
• First pass legacy license compliance widget removal (merge request) GitLab Enterprise Edition
• Remove file edit actions from blame view (merge request)
• Fix: notify locale on resolved all discussions email by @qt-gith (merge request)
• Handle 429 response for the integration testing (merge request)
• Improve bulk issue creation on epics (merge request) GitLab Enterprise Edition
• Limit number of branches/tags loaded from Gitaly (merge request)
• EE Group Settings General headers expand on click by @quatauta (merge request) GitLab Enterprise Edition
• Fix case of DAST UI text (merge request) GitLab Enterprise Edition
• Fix migration type (merge request)
• Update packages registries menu as sentence case by @parkourkarthik (merge request)
• Allow tokens with any scope to use the self-revocation API by @fabsrc (merge request)
• Update Runner UI badges (merge request)
• Add days as unit to VSA duration chart (merge request) GitLab Enterprise Edition
• Do not show revoke button if revoke_path is absent (merge request)
• Change code block border-radius to default (merge request)
• Hide mirror repos list when not available by @parkourkarthik (merge request)
• Modify scope to avoid table join (merge request)
• Conclude the combined registration experiment (merge request) GitLab Enterprise Edition
• Cleans up the edit form for issuables (merge request)
• This MR adds warning modal for unsaved changes (merge request) GitLab Enterprise Edition
• Destroy invalid project members (merge request)
• Update successful plan purchase message and variant (merge request) GitLab Enterprise Edition
• Remove s3_omit_multipart_urls feature flag (merge request)
• Feat: Increase stats margin on the project home page by @nadia_sotnikova (merge request)
• Add vulnerability_advisories and vulnerable_component_versions tables (merge request)
• Update blocking issues system note text (merge request) GitLab Enterprise Edition
• Refactored time tracking widget to be more reactive by @zillemarco (merge request)
• Use the standard dynamic segment for Debian packages by @sathieu (merge request)
• Add similar credit cards counts to external PVS payload (merge request)
• Edit profile tooltip for style compliance (merge request) GitLab Enterprise Edition
• Reset access token form selectively (merge request)
• Show an additional warning text on SaaS for removing license (merge request) GitLab Enterprise Edition
• Change text Elasticsearch to OpenSearch in AWS search service config (merge request) GitLab Enterprise Edition
• Update stackprof to v0.2.21 (merge request)
• Hide Register Runner button when user is not permitted to do the action (merge request)
• Update case for Manually added text (merge request) GitLab Enterprise Edition
• Show deployment approval options for read access (merge request)
• Always show deployment approval options (merge request) GitLab Enterprise Edition
• Updates UI for package duplicate settings (merge request)
• Clarify lifetime setting that affects all tokens (merge request) GitLab Enterprise Edition
• Add environment tier to allowed agents API response (merge request)
• Removes spacing from system note (merge request)
• Hide create project tile for some users (merge request)
• Remove FF for seat count usage alerts (merge request) GitLab Enterprise Edition
• Adds skeleton loader to Usage Quotas Seats page (merge request) GitLab Enterprise Edition
• Expose ci_job_token_scope_enabled in job API by @paulbry (merge request)
• Remove the Show Details button for Deployments (merge request)
• Changes column width on package side by side settings (merge request)
• Update tabs line-height to match Pajamas (merge request)
• Event type information in saml auth audit event stream (merge request) GitLab Enterprise Edition
• Extend approvers_select component to group level (merge request) GitLab Enterprise Edition
• Updated copy around tasks (merge request)
• Move Slack Events code to EE (merge request) GitLab Enterprise Edition
• Add description_html to SecurityReportFindingType (merge request) GitLab Enterprise Edition
• Update Puma to v5.6.5 (merge request)
• Disallow the rebase without pipeline on certain settings (merge request)
• Rename existing task system notes (merge request)
• Dont generate pipeline reports if the base pipeline is not complete (merge request)
• Add generic cost factor logging (merge request) GitLab Enterprise Edition
• Update error message (merge request) GitLab Enterprise Edition
• Update breadcrumbs of packages and registries under settings by @parkourkarthik (merge request)
• Add prefix to trigger tokens (merge request)
• Remove execute_build_hooks_inline feature flag (merge request)
• Autocomplete dropdown optimization (merge request)
• Fix canary badge styling (merge request)
• Enable async_after_approval feature flag (merge request)
• Combine sort and filter into one dropdown (merge request)
• Use static terraform-images version in Terraform template (merge request)
• Don't create EE::Member audit events when there is no change (merge request) GitLab Enterprise Edition
• Update haml-lint to v0.40.1 (merge request)
• Highlight runner name and move locked icon (merge request)
• Update thrift to v0.16.0 (merge request)
• Use ProtectedBranch service to destroy the branch (merge request)
• Extract 'read_package' rule into separate policy by @wwwjon (merge request)
• Remove self managed wiki notes (merge request)
• This MR adds schedule rule component (merge request) GitLab Enterprise Edition
• Change the way autoclosing issues is checked (merge request)
• Reduce header and footer height of comments (merge request)
• Update redis gem to v4.7.1 (merge request)
• Update Cluster Managed project template (merge request)
• Redesign runners stats (merge request)
• Allow verification token when creation external audit event destination (merge request) GitLab Enterprise Edition
• Replace native date input field to GlDatePicker (merge request)
• Geo Replicables - Enhaced Empty States (merge request) GitLab Enterprise Edition
• Consolidate pipeline mini graph code (merge request) GitLab Enterprise Edition
• Move Group Push Rules to Settings/Repository (merge request) GitLab Enterprise Edition
• Query group descendants using comparison operators (merge request)
• Disable DAST profile name field when configured (merge request) GitLab Enterprise Edition
• Add job logs collection to Datadog Integration by @AdrianLC (merge request)
• Reorganize runner tags in runners table (merge request)
• Add support for MulanPSL-2.0 in license detection by @tnir (merge request)
• Destroy invalid group membership records (merge request)
• Allow Invite button to be enabled by default (merge request)
• Add skip_users as param for members rest api (merge request) GitLab Enterprise Edition
• Rename web_hooks service_id to integration_id (merge request)

Deprecated (5 changes)

• Deprecate draft quick action toggle (merge request)
• Add feature flag for /draft toggle (merge request)
• GraphQL: Deprecate RunnerMembershipFilter (merge request)
• Document CS environment variable deprecations (merge request)
• Deprecate security related confidence fields (merge request) GitLab Enterprise Edition

Removed (17 changes)

• Remove unused VSA aggregation DB columns (merge request)
• Analyzer consolidation in SAST CI template (merge request) GitLab Enterprise Edition
• Remove free user cap awaiting user logic (merge request)
• Remove nonexistent index from schema (merge request)
• Remove awaiting members from billable user finder (merge request) GitLab Enterprise Edition
• Put DAST Basic-auth option behind feature flag (merge request) GitLab Enterprise Edition
• Weekend migration for dropping an empty index (merge request)
• Remove pipeline insights experiment (merge request)
• Remove mr_attention_requests feature flag (merge request)
• Remove temporary todos index for attention request (merge request)
• Remove unused /scan_execution_policies internal API (merge request) GitLab Enterprise Edition
• Drop Project#build_coverage_regex (merge request)
• Remove other_role column from user_details (merge request)
• chore: Cleanup report_artifact_build_completed FF (merge request)
• Remove the use_vsa_aggregated_tables FF (merge request) GitLab Enterprise Edition
• Deprecations in SAST template (merge request)
• Remove tmp_index_merge_requests_draft_and_status (merge request)

Security (19 changes)

• No overriding methods for Sawyer class
• Optimize handling repositories with huge trees
• HTML escape the label background color
• Fix unauthorized GFM references in Incident Timeline
• Sandbox jupyter notebook HTML output
• Prevent long loops when generating suggested branch name
• Validate description length for snippets
• Prevent brute force vuln for Git over HTTP(S) requests
• Replaced smooshpack to fix the vulnerability in LivePreview
• Check for pathological markdown input
• Update package auth for group IP allowlist
• IDOR in Zentao integration issue show page
• Patch VULNDB-255039 (potential Rack cache poisoning)
• Don't show pipeline status
• Parse commit trailers without using regexp
• Sanitize img attributes in Banzai::Filter::ImageLinkFilter
• Validate if values to be saved in Redis can be converted to string
• Enable SSL certification verification by default with Fog access (merge request)
• Update diffy to v3.4.2 (merge request)

Performance (19 changes)

• Optimize GraphQL next page check (merge request)
• Introduce rate-limiting for namespace exists API (merge request)
• Optimize contribution analytics queries (merge request) GitLab Enterprise Edition
• Broadly restrict downstream pipeline tree size (merge request)
• Remove ci_namespace_mirrors sync_children_namespaces (merge request)
• Remove Workhorse pubsub feature flags (merge request)
• Place trial creation on user registration in background (merge request) GitLab Enterprise Edition
• Speed up environments search (merge request)
• Refactor diff_view to include diff_line (merge request)
• Enable async project authroizations by default (merge request)
• Remove the feature flag remove_branch_caching_feature_flag (merge request)
• Add performance optimization for Insights queries (merge request)
• Introduce rate-limiting for namespace exists API (merge request)
• Place learn gitlab creation into background and measure (merge request) GitLab Enterprise Edition
• Prevent CounterJobWorker from exceeding 300 seconds (merge request)
• Fix N+1 in runner jobs API (merge request)
• Update container repositories migration index (merge request)
• Drop database_async_index_creation feature flag (merge request)
• Skip repository disconnect if project is pending delete (merge request)

Other (54 changes)

• RPM initial upload and package creation (merge request)
• Remove feature flags for tracking jetbeans and cli api requests (merge request)
• Helper to convert a table to its first partition (merge request)
• Workhorse: Bump gitaly version (merge request)
• RuboCop: Enable previously disabled Style/BarePercentLiterals by @edith007 (merge request)
• Enable FF ci_stop_expanding_file_vars_for_runners (merge request)
• Add internal column to notes (merge request)
• Clean up attention_requested states (merge request)
• Reschedule work_item_type backfill on issues (merge request)
• Disable ultimate for projects less than 1 MB in size (merge request)
• Remove duplicated % in sprintf (merge request)
• Update the Harbor registry doc by @zhaoqi01 (merge request)
• Remove FF group_level_protected_environment_settings_permission (merge request)
• Cleanup rebalance_issues feature flag (merge request)
• Quarantine flaky test in redis_interceptor_spec.rb (merge request)
• Remove find_epics_performance_improvement feature flag (merge request) GitLab Enterprise Edition
• Add menu headers in primary navigation dropdown (merge request)
• Remove redis caching for diff_batches endpoint (merge request)
• Update the Harbor registry doc by @zhaoqi01 (merge request)
• Remove unnecessary gl-alert-dismiss class (merge request)
• Add the Harbor registry doc by @zhaoqi01 (merge request)
• Remove GITLAB_LEGACY_BACKGROUND_UPLOADS (merge request)
• Remove user callouts that are related to attention request (merge request)
• Add not null constraint for board recent visits columns (merge request)
• Remove feature flag inactive_projects_deletion (merge request)
• Remove reads from ci_builds.stage (merge request)
• Improve error message while validating config/database.yml (merge request)
• Delete the FF ci_variable_for_group_gitlab_deploy_token (merge request)
• Geo: Remove geo_file_transfer_validation FF (merge request) GitLab Enterprise Edition
• Create partitioned security_findings table (merge request)
• Prevent updating requirement deprecated attributes (merge request) GitLab Enterprise Edition
• Finalize removal of incorrect issue indexes (merge request)
• Refactor Groups Rest API to use workhorse for avatar upload by @tuxtimo (merge request)
• Fix flaky tests in ee/spec/models/ee/group_spec.rb (merge request) GitLab Enterprise Edition
• Change copy on issues empty state for logged users by @pjjakubowska (merge request) GitLab Enterprise Edition
• Remove not null constraint for confidence columns (merge request)
• Add extended open issues index (merge request)
• Use the new mergeability check framework (merge request)
• Migrate cadence start date to automation start date (merge request)
• Cleanup old work item type id backfill on issues table (merge request)
• Vertically align the revoke button (merge request)
• Remove registry deploy_token feature flag (merge request)
• Remove code to limit inviting groups in hierarchy for free user cap (merge request)
• Use keyset pagination for Tags API (merge request)
• Rake Task to truncate Legacy tables on Main and CI Database (merge request)
• Remove the feature flag ci_docker_image_pull_policy (merge request)
• Move data-reference-type attribute into a constant (merge request)
• Improve how fields can bre preloaded for WidgetInterface (merge request)
• Avoid using group's web_url in issue_analytics QA by @tnir (merge request)
• Update trial alert to follow design system (merge request) GitLab Enterprise Edition
• Fix group authorization when searching epics (merge request) GitLab Enterprise Edition
• Drop unused security findings index (merge request)
• Improve specs with shared examples (merge request) GitLab Enterprise Edition
• Fix Style/Next offenses (merge request)

15.3.5 (2022-11-02)

Security (12 changes)

• Datadog API key leak by changing integration URL (merge request)
• Redact confidential references in Jira issue descriptions (merge request)
• Forbid reading emojis on internal notes (merge request)
• Same-site redirect vulnerability (merge request)
• BYPASS: Stored-XSS with CSP-bypass via scoped labels' color (merge request)
• Fix Running Upstream Pipelines Jobs Without Permission (merge request)
• Add length limit to addressable URLs (merge request)
• Add a redirect wall before artifact redirect to pages (merge request)
• Sandbox swagger-ui to prevent injection attacks (merge request)
• Fix external project permission when using CI prefill variables (merge request)
• Resolve users can view audit events from other members (merge request)
• Path traversal fix for Secure Files (merge request)

15.3.4 (2022-09-29)

Security (15 changes)

• Redact user's private email in group member event webhook (merge request)
• Redact secrets from WebHookLogs (merge request)
• Forbid creating a tag using default branch name (merge request)
• Sanitize Url and check for valid numerical errorId in error tracking (merge request)
• Add security protection for Github (merge request)
• Fix leaking emails in WebHookLogs (merge request)
• Restrict max duration to 1 year for trace display (merge request)
• Use UntrustedRegexp for upload rewriter (merge request)
• Validate httpUrlToRepo to be http or https only (merge request)
• Respect instance level rule for editing approval rules (merge request)
• Prevent users creating issues in ay project via board/issues controller (merge request)
• Prevent serialization of sensible attributes from JsonCache (merge request)
• Update TodoPolicy to handle confidential notes (merge request)
• Enforce group IP restriction on Dependency Proxy (merge request)
• Fixes XSS in widget extensions (merge request)

15.3.3 (2022-09-01)

Fixed (5 changes)

• Skip file removal if GitLab managed replication is disabled (merge request) GitLab Enterprise Edition
• Geo: Fix redirects of LFS transfer downloads (merge request) GitLab Enterprise Edition
• Improve blame link feature (merge request)
• Bypass earliest date validation in importing of iteration cadences (merge request) GitLab Enterprise Edition
• Fix user recent activity links for work item actions (merge request)

15.3.2 (2022-08-30)

Security (17 changes)

• No overriding methods for Sawyer class (merge request)
• Update Oj to v3.13.21 (merge request)
• Prevent long loops when generating suggested branch name (merge request)
• IDOR in Zentao integration issue show page (merge request)
• Patch VULNDB-255039 (potential Rack cache poisoning) (merge request)
• HTML escape the label background color (merge request)
• Sandbox jupyter notebook HTML output (merge request)
• Fix unauthorized GFM references in Incident Timeline (merge request)
• Optimize handling repositories with huge trees (merge request)
• Parse commit trailers without using regexp (merge request)
• Check for pathological markdown input (merge request)
• Replaced smooshpack to fix the vulnerability in LivePreview (merge request)
• Update package auth for group IP allowlist (merge request)
• Don't show pipeline status (merge request)
• Sanitize img attributes in Banzai::Filter::ImageLinkFilter (merge request)
• Validate description length for snippets (merge request)
• Prevent brute force vuln for Git over HTTP(S) requests (merge request)

15.3.1 (2022-08-22)

Security (1 change)

• Validate if values to be saved in Redis can be converted to string (merge request)

15.3.0 (2022-08-19)

Added (147 changes)

• Added delete release audit event by @patnaikshekhar (merge request)
• Adds data models for ML Experiment Tracking (merge request)
• Allow access to project-level packages API with CI job token by @nejc (merge request)
• Add tooltip on task item confidential badge (merge request)
• Add recent events to group hooks (merge request) GitLab Enterprise Edition
• Add parent_full_path to GraphQL WorkItemType (merge request)
• Enable job log search (merge request)
• Update task item status icon & add tooltip support (merge request)
• Expose work item timestamps in GraphQL (merge request)
• Add sorting/filtering/paging to CRM contacts by @leetickett (merge request)
• Make fork targets searchable (merge request)
• Add MR Approvals to Project Import/Export (merge request)
• Add alpha detailed_mergeability_status attribute to graphql (merge request)
• Add documentation link for project and group insights (merge request) GitLab Enterprise Edition
• Add GraphQL epic list metadata weight (Alpha) (merge request) GitLab Enterprise Edition
• Add GraphQL timelog categories Alpha schema (merge request)
• Display SCIM identities in the identity table (merge request) GitLab Enterprise Edition
• Provide GraphQL API for select in fork form (merge request)
• Add Fortify on Demand (FoD) SAST template (merge request)
• Add GraphQL sort/filter/page crm contacts by @leetickett (merge request)
• Add support for owasp (merge request) GitLab Enterprise Edition
• Surface work item type in popovers, work item detail view, issue lists (merge request) GitLab Enterprise Edition
• Update task children icon and display count (merge request)
• Track CI build failures with Snowplow (merge request)
• Rollout Datadog logs collection (merge request)
• Update Web IDE tooltip (merge request)
• Add pause logic to Jira imports (merge request)
• Support conversion to and from manual cadence via API (merge request) GitLab Enterprise Edition
• Add support for updating task confidentiality (merge request)
• Add variables to RetryJob mutation (merge request)
• Add MR reviewers to Project Import/Export (merge request)
• Hash OAuth access tokens (merge request)
• Add Pumble integration by @vojko.pribudic (merge request)
• Add support for toggling contact/org states by @leetickett (merge request)
• Add internal API to fetch policies_configuration for agent (merge request) GitLab Enterprise Edition
• Implement mergeRequestSetReviewers mutation (merge request)
• Allow to merge topics [backend] by @wwwjon (merge request)
• Add cyclonedx to job validation schema (merge request)
• Pause batched migrations when WAL pending archive above a threshold (merge request)
• Add id_tokens field to ci_builds_metadata (merge request)
• Show inherited permission in protected environment (merge request)
• Add merge request assignees to Import/Export (merge request)
• Add async index on ci job artifacts (merge request)
• Add present on default branch to project_id, id index (merge request)
• Add CI_TEMPLATE_REGISTRY_HOST to predefined CI variables by @zhzhang93 (merge request)
• Add state transition entry (merge request) GitLab Enterprise Edition
• Create banner and tool tip (merge request) GitLab Enterprise Edition
• Add timestamp fields to project_statistics table (merge request)
• Add database migration to update deletion adjourned period (merge request)
• Add CI/CD setting for Run pipelines in the parent project (merge request)
• Add dormant user period setting to application settings by @joe-snyder (merge request)
• Add extra information to issue popover (merge request)
• Allow Linked items widget to be collapsible (merge request)
• Add comment to vulnerability_state_transitions (merge request)
• Merge branch 'feat/mr_webhooks' into 'master' (merge request)
• feat: Update SAST-IaC.lates template to support MR pipelines (merge request)
• Enable FF ci_rules_changes_compare (merge request)
• api: Expose merge request reviewers (merge request)
• Allow SE Vue component to install exts (merge request)
• Support updatable automatic scheduling start date (merge request) GitLab Enterprise Edition
• Add CreateFromFindings Service (merge request) GitLab Enterprise Edition
• Support the DORA data source from Insights (merge request) GitLab Enterprise Edition
• Add "Scroll to first failure" button (merge request)
• Allow deletion of deployments via the API (merge request)
• Add search box to artifacts dropdown (merge request)
• Add release link to the tag show page (merge request)
• Add author_id column to vulnerability_state_transitions table by @svdj (merge request)
• Add upgrade status filter for group runners (merge request) GitLab Enterprise Edition
• Replaced local mutation with real mutation (merge request)
• Remove the custom_headers_streaming_audit_events_ui feature flag (merge request) GitLab Enterprise Edition
• Display table of contents in content editor (merge request)
• Allow omniauth username claim to be configurable (merge request)
• Add Authentication options (merge request) GitLab Enterprise Edition
• Add the environment keyword CI/CD template (merge request)
• Enables mr_review_submit_comment by default (merge request)
• GraphQL: Add bulkRunnerDelete mutation (merge request)
• Add support for selective code owner resets by @leetickett (merge request)
• Add all protected branches option to project-level MR approval rules (merge request) GitLab Enterprise Edition
• Add without_projects parameter to Topics API by @wwwjon (merge request)
• Bulk delete package files (merge request)
• Add tracking of unique CI Tunnel interactions from KAS (merge request)
• Allow users to manage Owners via UI (merge request)
• Enable Changelog API commit limitation by default (merge request)
• Support filtering registries by verification status via GraphQL (merge request) GitLab Enterprise Edition
• Introduce project setting for enforcing auth check on image uploads (merge request)
• Add index for PAT filter by @TrueKalix (merge request)
• Exposed timelog categories through GraphQL by @zillemarco (merge request)
• Add cyclonedx report type (merge request) GitLab Enterprise Edition
• Backup/Restore Rake Tasks to support Decomposed Database (merge request)
• Create service to delete runners in bulk (merge request)
• GraphQL docs: Show descriptions for :alpha items (merge request)
• Support filtering registries by replication status via GraphQL (merge request) GitLab Enterprise Edition
• Add RedisCommands::Recorder to detect N+1 commmands in Redis (merge request)
• Event type info in group deploy token audit events (merge request) GitLab Enterprise Edition
• Clean up simulate_pipeline feature flag (merge request)
• Show warning when sharing public project with internal group (merge request)
• Added support for links to markdown file code lines by @zillemarco (merge request)
• Better Vuln Feedback pagination implementation per review (merge request) GitLab Enterprise Edition
• Add ProtectedBranches::CacheService for efficient caching (merge request)
• Index vulnerability reads on filter columns for group-level queries (merge request)
• Show runner projects description and ownership (merge request)
• Upgrade Pages to v1.62.0 (merge request)
• Allow to create tables with JSON (merge request)
• Add unique_project_download_limit_allowlist to namespace_settings (merge request)
• Add Snowplow database changes tracking (merge request)
• Add graphql mutation for deleting file uploads (merge request)
• Vuln Feedback optional pagination review suggestions (merge request) GitLab Enterprise Edition
• Add memory killer running jobs to prometheus (merge request)
• Warn before closing the Diffs if there's a pending batch review (merge request)
• Add models for customizable roles (merge request)
• Add project-link to vulnerability details (merge request) GitLab Enterprise Edition
• Added service to create timelogs by @zillemarco (merge request)
• Implement API to get details of pipelines within a schedule (merge request)
• Make query nesting for the insights YAML (merge request) GitLab Enterprise Edition
• Arrange the indices and PK of security_findings table (merge request)
• Create and edit releases for tags with new form (merge request)
• Add validation to Default Branch Image when parsing CS vulnerability (merge request) GitLab Enterprise Edition
• Add account age to MR experience survey (merge request)
• DOMPurify: Allow links target attribute securely (merge request)
• Initial add of indeterminate checkboxes to GLFM (merge request)
• Add ability to delete deployments via the API (merge request)
• Add ability for group owner to unban banned users in a group (merge request) GitLab Enterprise Edition
• Implement Vuln Feedback count route to enable intelligent pagination (merge request) GitLab Enterprise Edition
• Enable non-default pagination for vulnerability feedback index (merge request) GitLab Enterprise Edition
• Add labels support to incident timeline events (merge request)
• New Audit Event for custom HTTP header changes (merge request) GitLab Enterprise Edition
• Introduce an onboarding view for GitLab Pages (merge request)
• Add a service to turn a security finding into a vulnerability (merge request) GitLab Enterprise Edition
• Add namespace_id to vulnerability_reads table (merge request)
• Create annotated tags in CI using the release:tag_message keyword (merge request)
• Show deployment approval comments (merge request) GitLab Enterprise Edition
• Enable performant artifact expiration by default (merge request)
• Add benchmark timing to search api (merge request)
• Add async index destruction (merge request)
• Import github 'un/assigned' issue events (merge request)
• Add mem_total_bytes gauge to Prometheus (merge request)
• Add background migration to backfill casted_cluster_agent_id (merge request)
• Move agent GitOps access check to core (merge request)
• Add access token information to API log (merge request)
• Expose verification timestamps (merge request) GitLab Enterprise Edition
• Show pipeline parsing error in the Vulnerability Report (merge request) GitLab Enterprise Edition
• Event type information in deploy key audit event (merge request) GitLab Enterprise Edition
• Import github 'de/milestoned' issue events (merge request)
• Show a badge that a release is historical (merge request)
• Support variables in the project property of triggers (merge request)
• Allow last issue board to be deleted via API by @tuxtimo (merge request)
• Enable linear queries (merge request)

Fixed (128 changes)

• Prevent errors saving alerts with non-string inputs for string fields (merge request)
• Unify Personal Access Token expiration behavior (merge request)
• Fix the Consistency Check Maximum Function (merge request)
• Add blame link to the file blob view (merge request)
• Fix JS error and UI for manual vulnerabilities (merge request) GitLab Enterprise Edition
• Refresh task list on parent confidentiality change (merge request)
• Fix board sidebars enter animation (merge request)
• Fix spelling of "address" in several places (merge request)
• Restore label on the email field (merge request)
• Fix stale user highest role stats on dormant user deactivation (merge request)
• Exclude vulnerable dependencies from go.mod (merge request)
• Show failure message when task list fails to load (merge request)
• Fix 500 error when Commit action is missing (merge request)
• Show work items correctly on activity feed (merge request)
• Expire protected branches cache after branch cache expiration (merge request)
• Shifting blank line right should add spaces (merge request)
• docs: Add notice for libravatar in FIPS mode by @tnir (merge request)
• Accept pending invitations for SSO signups (merge request)
• Set correct default for ApplicationSetting#personal_access_token_prefix (merge request)
• Fix global search code search results (merge request)
• Ensure errors deleting a deployment are always returned as bad request (merge request)
• Use Gitlab::Utils::UsageData to count replicables (merge request) GitLab Enterprise Edition
• Fix namespace icon for images with transparent background (merge request)
• Truncate long issue title in tasks (merge request)
• Fix productivity analytics not filters (merge request) GitLab Enterprise Edition
• Fix passing of dry_run to pipeline simulation (merge request)
• Fix overflow in second navbar in group detail top by @tnir (merge request)
• Remove extra space in create MR diff (merge request)
• Geo: Ensure one MetricsUpdateWorker runs at a time (merge request) GitLab Enterprise Edition
• Update commits entry point in Discussions API documentation by @ivan23kor1 (merge request)
• Fix 500 from ci_variables field (merge request)
• Move admin_protected_environment policy to owners alone (merge request) GitLab Enterprise Edition
• Ignore key modifiers except meta for shifting text (merge request)
• Fix VSA consistency worker cursor generator (merge request) GitLab Enterprise Edition
• Add merge_status to merge request cache key (merge request)
• Clarify Description for SSO enforcement for Git activity in groups (merge request) GitLab Enterprise Edition
• Sanitize sort params in Roadmap (merge request) GitLab Enterprise Edition
• Fix issue description list item reordering indentation (merge request)
• Update pull mirror interval wording by @orozot (merge request) GitLab Enterprise Edition
• Disable toggle editing mode while content editor loads (merge request)
• Update scoped labels template to fix tooltips (merge request)
• Bump Oj to v3.13.20 to fix illegal instruction errors (merge request)
• Handle timeout in Gitlab::Ci::RunnerReleases (merge request)
• Redirect back after rejecting a pending user (merge request)
• Fix the merged at dates being used by the compliance report (merge request) GitLab Enterprise Edition
• Fix VersionInfo.parse when receiving VersionInfo (merge request)
• Follow redirects when doing network requests with BulkImports::Http (merge request)
• Fix rename_column_concurrently to work with decomposed DB (merge request)
• Fixed return value when token not found by @TrueKalix (merge request)
• This adds a dependency condition to the base auto merge service (merge request) GitLab Enterprise Edition
• Add present on default branch to common_finder_query index (merge request) GitLab Enterprise Edition
• Fix missing file upload progress in GFM footer (merge request)
• Update api endpoint for approval rules (merge request) GitLab Enterprise Edition
• Handle race condition in creating alerts (merge request)
• Restrict to upgrade status filters to Ultimate (merge request) GitLab Enterprise Edition
• Better format MR failed to merge error message in mr widget failed vue (merge request)
• Fix OpenAPI viewer for dark mode by @fabsrc (merge request)
• Reverts the datadog fields DSL refactor (merge request)
• Fix spacing for pipeline editor header buttons by @Anna_pds31 (merge request)
• Change the order of search autocomplete items (merge request)
• Fix paginatable namespace search where users can create projects (merge request)
• Use updated docs link for the Validate tab popover (merge request)
• Upgrade Oj to v3.13.19 to fix a seg fault (merge request)
• Do not group env and folders that share a name on the project env page (merge request)
• Gracefully handle nil created_at values in CI pipelines (merge request)
• Fix emoji autocomplete when leading with a space (merge request)
• Don't allow negative values for pagination (merge request)
• Fix publish_event rspec helper (merge request)
• Ensures we fetch the stage events when there are no value streams (merge request) GitLab Enterprise Edition
• Fix CI artifact sizes not logged for some runner endpoints (merge request)
• Remove inaccessible artifacts from release evidence (merge request) GitLab Enterprise Edition
• Hide ip address label when ip address is missing (merge request)
• Use unnested_in_filters for Group-level vulnerability reads finder (merge request) GitLab Enterprise Edition
• Clean build directory before gitlab:gitaly:install Rake task (merge request)
• Ensures we show the count of selected projects (merge request) GitLab Enterprise Edition
• Add auditor access for group runners (merge request) GitLab Enterprise Edition
• Fix: notify locale on merge request unmergeable by @JeremyWuuuuu (merge request)
• Fix pipeline cancellation not cascading to children (merge request)
• Check group last owner before assigning default membership role (merge request) GitLab Enterprise Edition
• Fix CI_ENVIRONMENT_TIER if tier is updated (merge request)
• Fix issues board list movements (merge request)
• Expose DAST artifact directory (merge request) GitLab Enterprise Edition
• Add present on default branch to project id and id index (merge request) GitLab Enterprise Edition
• Do not show user popover when user is not signed in (merge request)
• Attempting to delete last package file directs user to delete package (merge request)
• Tags search does not work with Gitaly pagination (merge request)
• Fix ActiveRecord::StaleObjectError where pipeline is updated twice (merge request)
• Fixed link on Pages page (merge request)
• Fix URLs in user_auto_banned_email (merge request) GitLab Enterprise Edition
• Prevent new line insertion while attaching a file (merge request)
• Gracefully handle missing project feature row in API (merge request)
• Make repository analytics graphs responsive (merge request)
• Add two more classes allowed for YAML deserialization (merge request)
• Fix RescheduleBackfillImportedIssueSearchData migration (merge request)
• Show mr pipeline tab when pipelines are enabled (merge request)
• Add tracking event for rendering the error details page content (merge request)
• Prevent guests from assigning issues from notes by @zillemarco (merge request)
• Update vulnerabilities Finder to filter on present on default branch (merge request)
• Upgrade oj to v3.3.18 to fix illegal instruction errors (merge request)
• Fix: notify locale on member invite accepted email by @JeremyWuuuuu (merge request)
• Fix atwho keypress cancel Issue (merge request)
• Fix pipeline cancel to also cancel child pipelines (merge request)
• Replace magic string to constant by @orozot (merge request) GitLab Enterprise Edition
• Disable rate limiting when transferring epics (merge request) GitLab Enterprise Edition
• Remove duplicated false positives alert (merge request) GitLab Enterprise Edition
• Use GitLab UI Tooltip for Environment Metrics Link (merge request)
• Fix workflow rules changes when not using paths (merge request)
• Enable read on demand permission for auditor (merge request) GitLab Enterprise Edition
• Prevent default template from overwriting autosave (merge request)
• The rake task gitlab:db:lock_writes should not lock shared databases (merge request)
• Fix extra leading space in task title created from checklist (merge request)
• GraphQL: Return latest job in Pipeline.job by @roblabla (merge request)
• Fix missing relative_url_root settings update (merge request)
• Fix timestamp of "cloned from" system note (merge request)
• Use CREATE OR REPLACE FUNCTION to define vulnerability reads triggers (merge request)
• Handle ldap blocking when no servers exist (merge request) GitLab Enterprise Edition
• Select upstream project by default when creating MR from fork (merge request)
• Fixes time in container registry partial cleanup tooltip (merge request)
• Fix epic transfer when transfering a project (merge request) GitLab Enterprise Edition
• Return an error if merge request fails to merge (merge request)
• Fix graphql double fetch (merge request)
• Do not copy awarded emoji when cloning issues (merge request)
• Fixes alignment of package details files action column (merge request)
• Prohibit maintainers from starting trial subscription (merge request) GitLab Enterprise Edition
• Fix incorrect Runner#with_upgrade_status scope (merge request)
• Take lease in UpdateProjectStatisticsWorker (merge request)
• Fix system note timestamp for moved issue (merge request)
• List groups from group shares on project transfer (merge request)

Changed (182 changes)

• Escaping the header search bar closes dropdown (merge request)
• Support owasp security training (merge request)
• Updated incorrect UI link (merge request)
• Fixed outdated runners link (merge request)
• Set skip_rugged_auto_detect to default to true (merge request)
• Render failed job item pills with different background in Pipeline view (merge request)
• Add background to internal notes (merge request)
• Disabled related items expand button when no items (merge request)
• Add collapsing for many invite modal errors (merge request)
• Disable Rugged auto-detection by default (merge request)
• Enable rebase without ci (merge request)
• Avoid usage of toBeTruthy/toBeFalsy in iterations_spec.js by @anshulriyal (merge request)
• Default enable group level protected environment settings (merge request)
• Remove duplicated help link in top bar (merge request)
• Rename methods and variables for clarity and legibility (merge request)
• Simplify project_statistics test for column size (merge request)
• Improvements to the audit events streaming UI (merge request) GitLab Enterprise Edition
• Generate chain of custody CSV reports asyncronously (merge request) GitLab Enterprise Edition
• Dart.gitlab-ci.yml: Switch to new docker image for Dart by @mcmahonjohn (merge request)
• Add tooltip to Tanuki logo (merge request)
• Validate with latest vendored patch schema version (merge request) GitLab Enterprise Edition
• Migrate project branches cards to use pajamas (merge request)
• Show project homepage only in group page package registry view by @parkourkarthik (merge request)
• Release changes for CI Secure Files Geo Replication (merge request) GitLab Enterprise Edition
• Increase animation speed of sticky issue header (merge request)
• Docs: Remove Debian 9 from supported os list (merge request)
• Refactor runner pagination (merge request)
• Enable update_vuln_identifiers_flag by default (merge request)
• Preload and cache child work items (merge request)
• Rename service_id to integration_id (merge request)
• Update linked items widget header (merge request)
• Rename service_id to integration_id (merge request)
• Find superset of descendant scope queries (merge request)
• Adds user callouts dismissed by Project (merge request)
• Update linked item buttons to match tasks (merge request)
• Speed up sidebar transition (merge request)
• Geo Replicables - Add margin to pagination (merge request) GitLab Enterprise Edition
• Fixed outdated text (merge request)
• Event type for squash commit template is updated by @abhi_arora (merge request) GitLab Enterprise Edition
• Rename IssueTrackerData service to integration (merge request)
• Rename IssueTrackerData service to integration (merge request)
• Mark pull mirroring for projects without the license as hard-failed (merge request) GitLab Enterprise Edition
• Geo Replicables - True Up Projects Statuses (merge request) GitLab Enterprise Edition
• Change cost factor for open source (merge request) GitLab Enterprise Edition
• Reformat the user identity table (merge request) GitLab Enterprise Edition
• Remove backend code for attention request notifications (merge request)
• Frontend changes from task to checklist item (merge request)
• Add missing skip_ci param (merge request)
• Remove description html text limit (merge request)
• Remove temp index on project membership namespace id (merge request)
• Remove temp index on project membership namespace id (merge request)
• Remove attention request related API references (merge request) GitLab Enterprise Edition
• Moved View in admin area button tooltip placement to top by @PaarthAgarwal (merge request)
• Auditor for FOSS edition (merge request) GitLab Enterprise Edition
• Use branches bulk creation for Pull Mirroring (merge request)
• Update custom card to Pajamas compliant alert (merge request)
• Update Users API call was not updating auditor flag for user (merge request) GitLab Enterprise Edition
• Change response of the api PUT /merge when branch unmergable (merge request)
• Get highest level member on members all API call (merge request)
• Add a tooltip to merge requests shortcut (merge request)
• Enable MR discussions HTTP caching by default (merge request)
• Remove description field from new blank project creation (merge request)
• Fixed backfill code to burst root_namespace cache (merge request)
• Update project pages usage card to be pajamas compliant (merge request)
• Remove settings_ci_cd.scss file (merge request)
• Migrate pages domains card to use pajamas compliant version (merge request)
• Event type for framework is deleted (merge request) GitLab Enterprise Edition
• Event type for allow merge on skipped pipeline (merge request) GitLab Enterprise Edition
• Event type for squash option updated (merge request) GitLab Enterprise Edition
• Add checkbox ViewComponent that can be use outside of form builder (merge request)
• Change task list item system note from task to checklist item (merge request)
• Order security_findings by scan_id (merge request) GitLab Enterprise Edition
• Updated retry pipeline jobs button tooltip by @zillemarco (merge request)
• Create a preflight check for MigrationWorker (merge request) GitLab Enterprise Edition
• Create NamespaceDetails table (merge request)
• Update QR code helper to gl-card utility by @yo (merge request)
• Create ci_runner_versions record on demand (merge request)
• Moved the package tags to the sub-header by @zillemarco (merge request)
• Updates package project settings to use side-by-side layout (merge request)
• Remove duplicate association in has_web_hook_shared_examples (merge request)
• Update gitlab-license gem to the latest version (merge request)
• Update plan widgets grey backgrounds (merge request)
• Use primary btn variant for finish review dropdown (merge request)
• Remove service_hook link from SlackMattermostNotifier (merge request)
• Move webhook association from Integration model (merge request)
• Improve false positive alert UX (merge request) GitLab Enterprise Edition
• Update dependency auto-deploy-image to v2.33.0 (merge request)
• Changes styling of timeline icons (merge request)
• Add invite token indications for partial failure (merge request)
• Rename ReplicableStateEnum to ReplicationStateEnum (merge request) GitLab Enterprise Edition
• Replace remove with close on operations dashboard (merge request)
• Move topics location on project overview (merge request)
• Added gl-flex-basis-third style to the cluster creation page by @NIKU-SINGH (merge request)
• Use GlSegmentedControl to switch between Rich/Source text editor by @shamvi050801 (merge request)
• Update preview assets for copy and terminology consistency (merge request)
• Repositioned the insert suggestion button for better visibility by @zillemarco (merge request)
• Add Google Authenticator to 2FA page (merge request)
• Geo Replication - Last verified data (merge request) GitLab Enterprise Edition
• Geo Replicables - Unboxing the UI (merge request) GitLab Enterprise Edition
• Migrate form_errors in saml_providers (merge request) GitLab Enterprise Edition
• Use refreshed look and feel in group runner view (merge request)
• Refactor description for the IP allow list field (merge request)
• Improve ancestor scope queries (merge request)
• Clean up audit_event_streaming_git_operations_deploy_key flag (merge request)
• Refactor hook log index view (merge request)
• Fix warning when user is unable to create project (merge request)
• Add cloud-based 2FA apps to documentation (merge request)
• Add MigrateSharedVulnerabilityScanners batched migration job (merge request)
• Fix approval visible groups detection (merge request)
• Update PyPI package page with access token docs link by @brianjaustin (merge request)
• Migrate project nothing to compare card to be pajamas compliant (merge request)
• Add info message to Operations Dashboard (merge request) GitLab Enterprise Edition
• Do not display 'Clear cache' dropdown when user isn't permitted to do it (merge request)
• Verify LFS OID (merge request)
• Make ssh_signatures.key_id nullable (merge request)
• Forbid calls with potential to take long sleeps (merge request)
• Sync approvals required after syncing rules (merge request) GitLab Enterprise Edition
• Update metrics settings alert to pajamas (merge request)
• Enable paginated_mr_discussions feature by default (merge request)
• Removed incorrect spacing used by btn-margin-5 variable (merge request)
• Allow Sbom::Occurence.component_version to be nullable (merge request)
• This MR adds header with status of DAST scan (merge request) GitLab Enterprise Edition
• Update alerts to pajamas design system (merge request)
• Move and rename SAML troubleshooting page (merge request)
• GraphQL: Rename CiRunnerUpgradeStatusType (merge request)
• Move feedback issue (merge request)
• This MR allows user to see saved profiles (merge request) GitLab Enterprise Edition
• Add upgrade status badges in runners (merge request) GitLab Enterprise Edition
• This MR adds pipeline rule component (merge request) GitLab Enterprise Edition
• Migrate pages no domains card to be pajamas compliant (merge request)
• Migrate commit list card to be pajamas compliant (merge request)
• Migrate admin notes view partial card to use pajamas compliant version (merge request)
• Migrate pages access card to use pajamas compliant version (merge request)
• Apply secure defaults for access tokens (merge request)
• Update design of security approvals in mr approval settings (merge request) GitLab Enterprise Edition
• Align runner details when viewing runner (merge request)
• Change how ownership works in pipeline schedules (merge request)
• Order list of latest users by descending signup date by @axel-loewe (merge request)
• Convert email badges to a list (merge request)
• Update subgroup creation page (merge request)
• Validate timeline event note on update (merge request)
• Change runner cron job to run daily (merge request)
• Clean up soft_validation_on_external_url feature flag (merge request)
• Collect metrics from all pull mirrors (merge request) GitLab Enterprise Edition
• Create folder for Logs to prepare for nesting of other pages (merge request)
• Update docker logo path (merge request)
• Set required nullable for weight argument (merge request) GitLab Enterprise Edition
• Update UX for attaching files in GFM input fields (merge request)
• Do not disable cadence start date field (merge request) GitLab Enterprise Edition
• Fix ES client for nil password (merge request) GitLab Enterprise Edition
• Imported and used the monaco API explicitly (merge request)
• Modifies storage email notifications delivery (merge request) GitLab Enterprise Edition
• Update google-protobuf to v3.21.3 (merge request)
• Adding Geo support of Project-level Secure Files (merge request) GitLab Enterprise Edition
• Update new list on boards page to match Pajamas specs (merge request)
• Move deployment approval from popover to modal (merge request) GitLab Enterprise Edition
• Trigger KeepAroundRefsCreatedEvent event only if SHAs are passed (merge request) GitLab Enterprise Edition
• Update Salesforce logo for OAuth (merge request)
• Add loading icon to audit event pages (merge request) GitLab Enterprise Edition
• Generate links for escaped content (merge request)
• Update External wiki to use sections (merge request)
• Update JWT OAuth logo (merge request)
• Use #use_open_file for Packages::Debian::ExtractDebMetadataService by @sathieu (merge request)
• Adjust buckets for Pull Mirroring metrics (merge request) GitLab Enterprise Edition
• Bump Gitlab Shell to 14.10.0 (merge request)
• Update database migration helper (merge request)
• Drop /api/v4 suffix in GitLab OmniAuth documentation (merge request)
• Add Gitlab Contribution Cost Factor (merge request) GitLab Enterprise Edition
• Update Discord notifications to use sections (merge request)
• Updated Linked issues to Linked items (merge request)
• Synchronize vulnerability findings temporary index (merge request)
• Allow pagination=none for recursive tree API (merge request)
• Remove log messages (merge request)
• Default enable linear root ancestor query (merge request)
• Add new move to project modal (merge request)
• Migrate card class to Pajamas::CardComponent (merge request)
• Updates puma to 5.6.4 (merge request)
• Remove personal_access_tokens_scoped_to_projects feature flag (merge request)
• Enable feature flag approval_rules_pagination (merge request)
• Bump to major version 3 for kics (merge request)
• Use the latest pipeline for a branch instead of (merge request) GitLab Enterprise Edition
• Add allowlisted users to Abuse::ExcessiveProjectsDownloadBanService (merge request) GitLab Enterprise Edition

Deprecated (3 changes)

• Deprecate confidential attribute for notes (merge request)
• Add deprecation warning for Redis 5 by @tnir (merge request)
• Remove build_coverage_regex from project (merge request)

Removed (15 changes)

• Disable support for delayed project deletion for personal projects (merge request) GitLab Enterprise Edition
• Removed unused graphql field issuesCount (merge request) GitLab Enterprise Edition
• Remove shared runner usage tab (merge request)
• Remove clients column (merge request)
• Remove sorting vulnerabilities by report_type (merge request) GitLab Enterprise Edition
• Remove additional_amount_available column (merge request)
• Removes ci_retry_downstream_pipeline feature flag (merge request)
• Remove the use_keyset_aware_user_search_query FF (merge request)
• Remove uncached_mr_attention_requests_count feature flag (merge request)
• Remove the new_graphql_keyset_pagination FF (merge request)
• Remove pat and ssh enforcement database columns (merge request)
• Remove sorting vulnerabilities by state (merge request) GitLab Enterprise Edition
• Remove unused semver column on ci_runners (merge request)
• Drop migrated_to_new_structure column (merge request)
• Remove streaming_audit_event_headers feature flag (merge request) GitLab Enterprise Edition

Security (22 changes)

• Drop soft enforcement of restricted YAML deserialization classes (merge request)
• Add additional condition to accept invitation
• Prevent users who cannot admin a public project from viewing deploy keys
• Protect Grafana and Sentry integrations
• Check permissions when filtering by contact or organization
• Maintainer can change the visibility of Project and Group
• Protect integration secrets
• Fix IDOR in Jira issue show action
• Do not link unverified secondary emails with any users
• Update gitaly version
• Update Rails to v6.1.6.1 (merge request)
• Update version of Gitaly
• Remove group_bot_user and group_access_token after group delete
• Security datadog integration leaking
• Add html_escape to build_details_entity
• Remove todos from confidential notes when user loses access
• Remove feature flag ci_yaml_limit_size
• Forbid exchanging access token for ROP flow to users required 2FA setup
• Use author to run subscribed pipeline
• Update GITLAB_PAGES_VERSION
• Remove prohibited branches after project import
• Limit proxied requests to Grafana API

Performance (12 changes)

• Prevent n+1s when fetching epics on big group hierarchies (merge request) GitLab Enterprise Edition
• Move transfer project namespace dropdown to GraphQL (merge request)
• Cleaup import_relation_object_persistence feature flag (merge request)
• Expire branch cache for bulk creation only once (merge request)
• Add index to fix integration metrics performance (merge request)
• Improve loading of blobs from paginated diffs (merge request)
• Skip extra VSA requests when theres no value stream (merge request) GitLab Enterprise Edition
• Increase rendered elements while loading large files (merge request)
• Improve participants loading performance (merge request)
• Improve blob rendering time (merge request)
• Generate links to dependencies in gemspec files (merge request)
• Refresh smaller TTL for highlighting diffs cache (merge request)

Other (70 changes)

• Track pipeline simulation in the pipeline editor (merge request)
• Create Imageable concern for CI Image and Service config by @ali_o_kan (merge request)
• Remove feature flag lfk_automatic_partition_dropping (merge request)
• Clean up attention request related todos (merge request)
• Update google-cloud-env from 1.5.0 to 1.6.0 in /qa by @tnir (merge request)
• Cleanup feature flags and env vars for cross_database_modification (merge request)
• Backfill project import level on namespace settings (merge request)
• Improve Import/Export logs (merge request)
• RuboCop: Enable previously disabled Style/IfInsideElse by @edith007 (merge request)
• RuboCop: Enable previously disabled Style/PercentLiteralDelimiters by @edith007 (merge request)
• RuboCop: Enable previously disabled Style/FormatString by @edith007 (merge request)
• RuboCop: Enable previously disabled Style/EmptyElse by @edith007 (merge request)
• RuboCop: Enable previously disabled Style/GuardClause by @edith007 (merge request)
• RuboCop: Enable previously disabled Style/RedundantInterpolation by @edith007 (merge request)
• RuboCop: Enable previously disabled Style/IfUnlessModifier by @edith007 (merge request)
• RuboCop: Enable previously disabled Style/RedundantRegexpEscape by @edith007 (merge request)
• RuboCop: Enable previously disabled Style/RedundantSelf by @edith007 (merge request)
• RuboCop: Enable previously disabled Style/StringConcatenation by @edith007 (merge request)
• Add links to instance fingerprints by @TrueKalix (merge request)
• RuboCop: Enable previously disabled Style/HashAsLastArrayItem by @edith007 (merge request)
• RuboCop: Enable previously disabled Style/HashEachMethods by @edith007 (merge request)
• RuboCop: Enable previously disabled Style/SymbolProc by @edith007 (merge request)
• Add yml definitions for metric (merge request)
• Update "working with uploads" dev docs (merge request)
• Schedule index removal for security findings (merge request)
• Switch back to license_finder and update to 7.0.1 by @tnir (merge request)
• No-op migrations to backfill namespace/project mirror tables (merge request)
• RuboCop: Enable previously disabled Style/Next by @edith007 (merge request)
• RuboCop: Enable previously disabled Style/MissingRespondToMissing by @edith007 (merge request)
• Remove feature flag incremental_repository_backup (merge request)
• Exclude gin and bluemonday package from dependencies (merge request)
• Update octokit from 4.21.0 to 4.25.1 in /qa by @tnir (merge request)
• Update signet from 0.14.0 to 0.17.0 by @tnir (merge request)
• Update google-cloud-env from 1.5.0 to 1.6.0 by @tnir (merge request)
• Update acme-client from 2.0.9 to 2.0.11 by @tnir (merge request)
• Disable ultimate features for public projects with 1 member and no repo (merge request)
• Rollout use_redis_hll_instrumentation_classes ff (merge request)
• Update Jira Deployment Type by @lenikadali (merge request)
• Remove RequirementsManagement::CreateRequirementService (merge request) GitLab Enterprise Edition
• Improve gravatar service administration docs by @tnir (merge request)
• Use update_work_item mutation for removing WI (merge request)
• Remove enforce_security_report_validation flag (merge request)
• Add partial GIN indexes for issues table (merge request)
• Convert final angle icons to chevrons (merge request)
• Removing the FF remove-fix_sliding_list_partitioning (merge request)
• Remove highlight_diffs_optimize_memory_usage feature flag (merge request)
• Reschedule migration to remove ultimate license from non-public projects (merge request)
• Decrease the urgency of unleash endpoint (merge request)
• Delete FF ci_fix_rules_if_comparison_with_regexp_variable (merge request)
• Bump yajl-ruby gem version (merge request)
• Remove analytics_devops_adoption_codeowners feature flag (merge request) GitLab Enterprise Edition
• Reference forked, FIPS-compatible NGINX (merge request)
• Revert "Merge branch 'mmj-async-all-project-auth-refreshes' into 'master'" (merge request)
• Update cluster details alert to pajamas (merge request)
• Remove pending builds covering index (merge request)
• Disable ultimate features for public projects with no issues and no repo (merge request)
• No-op old migration disable_job_token_scope_when_unused (merge request)
• No-op old migration associate_existing_dast_builds_with_variables (merge request)
• No-op old migration copy_ci_builds_columns_to_security_scans2 (merge request)
• Backfill the namespace_id of existing vulnerability_reads records (merge request)
• Delete FF ci_expand_environment_name_and_url (merge request)
• Add start_date to issues table (merge request)
• Use utility classes in test report (merge request)
• Prepare partial issue trigram indexes (merge request)
• Remove FF batch_load_environment_last_deployment_group (merge request)
• Update user API docs to better indicate SaaS availability by @zillemarco (merge request)
• Remove token column from ci_builds table (merge request)
• Drop unused index on ci_builds (merge request)
• Remove FF import_release_authors_from_github (merge request)
• Remove unused feature (merge request)

15.2.5 (2022-09-29)

Security (16 changes)

• Geo: Do not delete object stored files when not GitLab managed (merge request)
• Redact user's private email in group member event webhook (merge request)
• Redact secrets from WebHookLogs (merge request)
• Forbid creating a tag using default branch name (merge request)
• Sanitize Url and check for valid numerical errorId in error tracking (merge request)
• Add security protection for Github (merge request)
• Fix leaking emails in WebHookLogs (merge request)
• Restrict max duration to 1 year for trace display (merge request)
• Use UntrustedRegexp for upload rewriter (merge request)
• Validate httpUrlToRepo to be http or https only (merge request)
• Respect instance level rule for editing approval rules (merge request)
• Prevent users creating issues in ay project via board/issues controller (merge request)
• Prevent serialization of sensible attributes from JsonCache (merge request)
• Update TodoPolicy to handle confidential notes (merge request)
• Enforce group IP restriction on Dependency Proxy (merge request)
• Fixes XSS in widget extensions (merge request)

15.2.4 (2022-08-30)

Security (18 changes)

• No overriding methods for Sawyer class (merge request)
• Update Oj to v3.13.21 (merge request)
• Bump yajl-ruby gem version (merge request)
• Prevent long loops when generating suggested branch name (merge request)
• IDOR in Zentao integration issue show page (merge request)
• Patch VULNDB-255039 (potential Rack cache poisoning) (merge request)
• HTML escape the label background color (merge request)
• Sandbox jupyter notebook HTML output (merge request)
• Fix unauthorized GFM references in Incident Timeline (merge request)
• Optimize handling repositories with huge trees (merge request)
• Parse commit trailers without using regexp (merge request)
• Check for pathological markdown input (merge request)
• Replaced smooshpack to fix the vulnerability in LivePreview (merge request)
• Update package auth for group IP allowlist (merge request)
• Don't show pipeline status (merge request)
• Sanitize img attributes in Banzai::Filter::ImageLinkFilter (merge request)
• Validate description length for snippets (merge request)
• Prevent brute force vuln for Git over HTTP(S) requests (merge request)

15.2.3 (2022-08-22)

Security (2 changes)

• Validate if values to be saved in Redis can be converted to string (merge request)
• Fix CSS selector used in specs (merge request)

15.2.2 (2022-08-01)

Fixed (6 changes)

• Upgrade Oj to v3.13.19 to fix a seg fault (merge request)
• Gracefully handle nil created_at values in CI pipelines (merge request)
• Fix CI artifact sizes not logged for some runner endpoints (merge request)
• Fix RescheduleBackfillImportedIssueSearchData migration (merge request)
• Upgrade oj to v3.3.18 to fix illegal instruction errors (merge request)
• Use CREATE OR REPLACE FUNCTION to define vulnerability reads triggers (merge request)

Changed (1 change)

• Fix ES client for nil password (merge request) GitLab Enterprise Edition

15.2.1 (2022-07-28)

Security (18 changes)

• Security datadog integration leaking (merge request)
• Prevent users who cannot admin a public project from viewing deploy keys (merge request)
• Add additional condition to accept invitation (merge request)
• Update GITLAB_PAGES_VERSION (merge request)
• Add html_escape to build_details_entity (merge request)
• Check permissions when filtering by contact or organization (merge request)
• Use author to run subscribed pipeline (merge request)
• Remove prohibited branches after project import (merge request)
• Remove feature flag ci_yaml_limit_size (merge request)
• Maintainer can change the visibility of Project and Group (merge request)
• Do not link unverified secondary emails with any users (merge request)
• Forbid exchanging access token for ROP flow to users required 2FA setup (merge request)
• Remove todos from confidential notes when user loses access (merge request)
• Remove group_bot_user and group_access_token after group delete (merge request)
• Protect Grafana and Sentry integrations (merge request)
• Protect integration secrets (merge request)
• Fix IDOR in Jira issue show action (merge request)
• Limit proxied requests to Grafana API (merge request)

15.2.0 (2022-07-21)

Added (171 changes)

• Add user id to profile page by @TrueKalix (merge request)
• [API] Get endpoint for latest TF module version by @renehernandez (merge request)
• Adds package cleanup policy project settings (merge request) GitLab Enterprise Edition
• Display users that have been banned in a namespace (merge request) GitLab Enterprise Edition
• Introduce :gitlab_geo schema for Geo tracking DB (merge request) GitLab Enterprise Edition
• Add request-URL to vulnerability details (merge request) GitLab Enterprise Edition
• Add link to change failure rate chart from tile (merge request)
• Add watchdog to observe memory fragmentation (merge request)
• Add background jobs for cleanup policies for packages (merge request)
• Adds sidekiq_jobs_interrupted counter (merge request)
• Add timeline feature to incidents (merge request)
• Respect parent namespace for gitlab migration (merge request)
• Allow users to delete releases from edit page (merge request)
• Add verification token to audit events streams list (merge request) GitLab Enterprise Edition
• Add index on security_findings(uuid id DESC) (merge request)
• Add environment_scope to VariableType (merge request)
• Add manual_variables field to JobType (merge request)
• Work Items - Tasks First Time Experience (merge request)
• Add unique contraint for parent link work_item_id (merge request)
• Upgrade GitLab Pages to 1.61.0 (merge request)
• Event type information in approval rule audit event streaming (merge request) GitLab Enterprise Edition
• Include epic color widget on epic board sidebar by @espadav8 (merge request) GitLab Enterprise Edition
• Hash passwords with PBKDF2+SHA512 (merge request)
• Add upgrade status filter to runners (merge request) GitLab Enterprise Edition
• Preview free user cap only for specific namespaces (merge request)
• Add frontend form password complexity validation (merge request) GitLab Enterprise Edition
• Pipeline Performance insights (merge request)
• Add partition_number and related indices to security_findings table (merge request)
• Enable the use_unnested_queries by removing the FF globally (merge request) GitLab Enterprise Edition
• Allow passing arrays of labels in Epic GraphQL mutations by @espadav8 (merge request) GitLab Enterprise Edition
• Add GraphQL support for removing namespace bans (merge request) GitLab Enterprise Edition
• Copy failed spec names to clipboard from MR widget (merge request)
• Add 3 dot menu in work item link (merge request)
• Add frontend form password complexity validation (merge request) GitLab Enterprise Edition
• Event type information for ci variable audit event (merge request) GitLab Enterprise Edition
• Limit number of project and group CI variables (merge request)
• Adding search bar to group MR search with no results (merge request)
• Expose CI_MERGE_REQUEST_TARGET_BRANCH_PROTECTED as CI Variable by @Taucher2003 (merge request)
• Add Members page link to Project settings (merge request)
• Add the packages execute cleanup policy service (merge request)
• Consume new id format for security training (merge request) GitLab Enterprise Edition
• Generate package.json links (merge request)
• Introduce new jobs table (merge request)
• Event type information in streaming access token audit events (merge request) GitLab Enterprise Edition
• Enable use_keyset_aware_user_search_query FF (merge request)
• Add Vulnerabilities::MergeRequestLink model (merge request)
• Add vulnerability_merge_request_links table (merge request)
• Add group audit event keyset pagination (merge request) GitLab Enterprise Edition
• Event type information in protected branch audit event stream (merge request) GitLab Enterprise Edition
• Ensure namespace_id is set when issue is saved (merge request)
• Upgrade GitLab Pages to 1.60.0 (merge request)
• Add evidence fields to Vulnerability Issue template (merge request) GitLab Enterprise Edition
• Add error_tracking_access_token to application settings (merge request)
• Include commit message templates when forking project by @nejc (merge request)
• Create new rake task with Advanced Search integration details (merge request) GitLab Enterprise Edition
• Periodically reconcile ci_runner_versions (merge request)
• Cleanup BackfillDraftStatusOnMergeRequests migration (merge request)
• Implement granular access for Protected Tags API (merge request) GitLab Enterprise Edition
• [issue-354239] Import github 'renamed' issue events (merge request)
• Format multiple quick actions with
  for MD preview by @espadav8 (merge request)
• Track when user uses a verify action on an environment (merge request)
• Add sbom_occurrences table and model (merge request)
• Expose historical_release in GraphQL API (merge request)
• GraphQL: Add upgrade_status filter (merge request)
• Add update of the number of required approvals (merge request) GitLab Enterprise Edition
• Add BanFromNamespaceService and policies to prevent read access (merge request) GitLab Enterprise Edition
• Disable legacy OpenSource license for inactive public projects (merge request)
• Enable coverage report from child pipelines (merge request)
• Add praefect list virtual storages subcommand documentation (merge request)
• Show epic colours on epic boards by @espadav8 (merge request) GitLab Enterprise Edition
• Create index on security_findings asynchronously (merge request)
• Add tooltip to Colour label on new epic page by @espadav8 (merge request) GitLab Enterprise Edition
• [issue-354235] Import github 'un/labeled' issue eventsq: (merge request)
• Add vulnerableMethod to vulnerability details (merge request) GitLab Enterprise Edition
• Add metrics for runner authentication success/failure by @KyleFromKitware (merge request)
• Add a service to promote security findings to vulnerability findings (merge request) GitLab Enterprise Edition
• Add deployment tier to CI_JOB_JWT (merge request)
• Stream audit event for project group link create/destroy/update actions by @zhanglinjie (merge request) GitLab Enterprise Edition
• Add import_creation_level to namespace settings (merge request)
• [API] Get endpoint for a specific TF module version by @renehernandez (merge request)
• Add security report ingestion information to dashboard seed data (merge request)
• Add heap fragmentation metric (merge request)
• Add the 'first_contribution' attribute to the MR webhook event (merge request)
• Add GitLab Error Tracking to /admin settings (merge request)
• Add NamespaceBan model (merge request)
• Stream audit event on project fork by @zhanglinjie (merge request) GitLab Enterprise Edition
• Adds change failure rate charts to ci/cd analytics (merge request) GitLab Enterprise Edition
• Add 'never' option to auto_stop_in for an environment (merge request)
• Submit rename/new modal in web IDE on enter by @leetickett (merge request)
• Add namespace_id column to issues table (merge request)
• Add canceled state to import state and stage methods (merge request)
• Add approved_by_usernames param to merge request api (merge request) GitLab Enterprise Edition
• Stream audit event on merge request create by @zhanglinjie (merge request) GitLab Enterprise Edition
• Add topic_id attribute to Projects API by @wwwjon (merge request)
• Add due_date and improve CSV issue import docs by @leetickett (merge request)
• Add page size selector to issues list having options for 20, 50 and 100 (merge request)
• Added BackgroundMigration for ProjectStatistics (merge request)
• Add settings for rate limiting unique project downloads per namespace (merge request)
• Add crashType to vulnerability details (merge request) GitLab Enterprise Edition
• Add security trial actions (merge request)
• GraphQL: lists the groups to where a project can be transferred to (merge request)
• Require email verification (merge request)
• Added Civo logo to the create cluster page (merge request)
• Add super/subscript support in content editor (merge request)
• Add cycle and lead times time series endpoint (merge request)
• Improved search bar tokens for CRM contacts and organizations by @zillemarco (merge request)
• Add ci_runner_versions table (merge request)
• Add sbom_sources table and model (merge request)
• Displays the queued duration of a job (merge request)
• Disable Conan registry in FIPS mode (merge request)
• Allow editing of the released at date for Releases (merge request)
• Query vulnerability_reads by the cartesian product of given filters (merge request) GitLab Enterprise Edition
• Extend the DAST-Default-Branch-Deploy template to support ECS (merge request) GitLab Enterprise Edition
• Add project export relations models to Import/Export (merge request)
• Add false-positive alert to vulnerability details (merge request) GitLab Enterprise Edition
• [epic 354234] Import github closed issue events (merge request)
• Include inherited group links on project members page by @wwwjon (merge request)
• Add crashState to vulnerability details (merge request) GitLab Enterprise Edition
• Add has_vulnerabilities argument to ClusterAgent GraphQL API (merge request) GitLab Enterprise Edition
• Support TLS in dedicated metrics servers (merge request)
• Add "all protected branches" as a project approval (merge request) GitLab Enterprise Edition
• Add instrumentations for average number of approvals required (merge request) GitLab Enterprise Edition
• Add VariableType and variables fields (merge request)
• Enable ci_docker_image_pull_policy (merge request)
• Add member limit banner to usage quota seats page (merge request) GitLab Enterprise Edition
• Add Pages::PageDeployedEvent (merge request)
• Added ability to sort issues by closed date on frontend by @zillemarco (merge request)
• Enable streaming audit event headers by default (merge request) GitLab Enterprise Edition
• Add freeUserCapEnforced field to Group type (merge request) GitLab Enterprise Edition
• Finalise member_namespace_id migration (merge request)
• Provide deletion of project topics in UI by @wwwjon (merge request)
• Add SBoM Component tables and models (merge request)
• Add columns for operations toggle split (merge request)
• Add multiple tiers aggregaion to DORA API (merge request) GitLab Enterprise Edition
• Enable Blame page pagination by default (merge request)
• Return build failure_reason in pipeline's webhooks by @albertvaka (merge request)
• Enable highlight_js by default (merge request)
• Ban user when they exceed projects download limit within a time period (merge request) GitLab Enterprise Edition
• Remove temporary index and validate constraint on routes table (merge request)
• Enable closed_as_duplicate_of in issues API (merge request)
• Add colour widget to epic create form and epic sidebar by @espadav8 (merge request) GitLab Enterprise Edition
• Reject Maven md5 requests in FIPS mode (merge request)
• Add clusterAgents field to Project/Group/Security Dashboard GraphQL API (merge request) GitLab Enterprise Edition
• [API] Endpoint to download latest Terraform module version by @renehernandez (merge request)
• Add schedule delay for RepositoryUpdateMirrorWorker (merge request)
• Finalize cleanup orphaned routes migration (merge request)
• Add GraphQL API to list resource links (merge request) GitLab Enterprise Edition
• Add GraphQL API to delete resource links (merge request) GitLab Enterprise Edition
• Add documentation for CWE 209.2 (merge request)
• Prevent users from using known insecure public key (merge request)
• Add Query.todo(id) to GraphQL API by @Taucher2003 (merge request)
• Link cc from service desk emails to CRM contacts by @leetickett (merge request)
• Add git abuse rate limit settings for admins (merge request)
• Make ECS Review apps work with DAST (merge request) GitLab Enterprise Edition
• Always respect namespace_id for OAuth-based importers (merge request)
• Allow ci_separated_caches to be updated from API by @Taucher2003 (merge request)
• Persist markdown editor type in wikis (merge request)
• Add filtering security policies to return only inherited policies (merge request) GitLab Enterprise Edition
• Add a toggle for opt-in JWT to project settings (merge request)
• Add an overflow button in content editor (merge request)
• Render link-name on vulnerability details (merge request) GitLab Enterprise Edition
• Add state transition entry (merge request) GitLab Enterprise Edition
• Implement /metadata REST API endpoint by @tuxtimo (merge request)
• Added previously prepared indexes for issues to sort on closed_at by @zillemarco (merge request)
• GraphQL: Add lazy load for blocking epics count (merge request) GitLab Enterprise Edition
• Add PATCH /users/:id/disable_two_factor API (merge request)
• Display disabled card state for non ultimate users (merge request)
• Update Rails project template with BUNDLE_FROZEN (merge request)
• Enable rebalance_issues feature flag by default (merge request)
• Make FF default enabled and fix additional N+1 queries (merge request)
• Enable feature flag 'tag_list_keyset_pagination' by default (merge request)

Fixed (149 changes)

• Fix move deploy keys during project imports in FIPS mode (merge request)
• Fixes container registry popover not displaying on all rows (merge request)
• Fixed some alignments on the pipeline page by @zillemarco (merge request)
• Group audit event keyset pagination order (merge request) GitLab Enterprise Edition
• Fix blob binary state detection for preloaded files (merge request)
• Don't allow notes created_at too much in past (merge request)
• Remove full stops from end of checkboxes (merge request) GitLab Enterprise Edition
• Fixed some margins and widths on the issue page by @zillemarco (merge request)
• GraphQL: Fix filtering for INVALID runners (merge request) GitLab Enterprise Edition
• Update approval count options to include 0 (merge request) GitLab Enterprise Edition
• Fix description list item reorder for incidents (merge request)
• Prefer non-expired licenses first (merge request) GitLab Enterprise Edition
• Fix AR scopes to support keyset pagination (merge request)
• Fixed loading spinner misalignment on fork page by @zillemarco (merge request)
• Fixes all visible mentions of work items in UI (merge request)
• Fix gitlab project imports releases having nil authors (merge request)
• Track description change when creating a task from markdown (merge request)
• Add second event handler oninput to help mitigate the issue (merge request)
• Retain checklist item when deleting task (merge request)
• Fix recommendation for unpublished runner release (merge request)
• Change color for inherited classes (merge request)
• Improved layout of the create merge request's contribution section by @zillemarco (merge request)
• Corrected the logic on duplicate package toggles (merge request)
• Corrected the logic on duplicate package toggles (merge request)
• Made paths lowercase for deduplicated_size api (merge request)
• Use current time as created_at when cloning issues (merge request)
• Properly fail LDAP logins if GitLab user not persisted (merge request)
• Fix artifact empty state (merge request)
• Fix attribute validations for the Vulnerabilities::FindingLink model (merge request) GitLab Enterprise Edition
• Don't fail StoreSecurityReportsWorker if the pipeline does not exist (merge request) GitLab Enterprise Edition
• Refactor Header Search bar event handlers out of requestIdleCallback (merge request)
• Delete MR files separately on project deletion (merge request)
• Aligns order of sidebar items in bulk update (merge request)
• Make /merge quick action to work in GraphQL via createDiffNote (merge request)
• Migration to correct vulnerability state (merge request)
• Add blame link to the file blob view (merge request)
• Fix deploy keys breaking protected branch dropdown in FIPS mode (merge request)
• Fix scrolling to anchor tags on wiki pages (merge request)
• Fix double scroll in labels dropdown on MR sidebar (merge request)
• Retrieve pageSize from local storage as soon as possible (merge request) GitLab Enterprise Edition
• Make dark scroll bar in Chromium-based browsers by @rakleed (merge request)
• Fix the sentry URL in the CSP (merge request)
• Fix exception when Group relation is empty (merge request) GitLab Enterprise Edition
• Mark environments as available when restarting a deployment build (merge request)
• Fix streaming audit event for sub group event and project destroy event by @zhanglinjie (merge request) GitLab Enterprise Edition
• Fix the broken member search GraphQL query (merge request)
• Default project path to empty when creating from group template (merge request) GitLab Enterprise Edition
• Fix broken syntax highlight for shell scripts (merge request)
• Parse conflict lines with CRLF endings correctly (merge request)
• Fix broken external links by @leetickett (merge request)
• Load TLS intermediate certificates in metrics exporter (merge request)
• Render 404 when Jira issue not found (merge request) GitLab Enterprise Edition
• Fix: notify locale on changed milestone email by @JeremyWuuuuu (merge request)
• Correcting the spelling of 'receive' (merge request)
• Update diffs export for backwards compatibility (merge request)
• Fix pagniator issue in different timezone by @chaomao (merge request) GitLab Enterprise Edition
• Handle errors fetching GitLab Runner releases (merge request) GitLab Enterprise Edition
• Fix creating epic in scoped epic board (merge request) GitLab Enterprise Edition
• Fixed small misalignment on releases card footer by @zillemarco (merge request)
• Do not allow to override jobs defined by Security Policies (merge request) GitLab Enterprise Edition
• Remove stray gl-mt-2 from Label input on new epic page by @espadav8 (merge request)
• Fix contributing to EE link by @leetickett (merge request)
• Fix scss syntax highlighting (merge request)
• Fix BulkImport pipeline retries (merge request)
• Fix group access dropdown failure if no subgroups are available (merge request) GitLab Enterprise Edition
• License feature availability checks in Auditor (merge request) GitLab Enterprise Edition
• Fix 500 error for Tags API when repository is missing (merge request)
• Fix group name conflict when migrating groups via BulkImport (merge request)
• Fix resolving cluster image scanning vulnerabilities (merge request) GitLab Enterprise Edition
• This MR removes sticky footer from sidebar (merge request) GitLab Enterprise Edition
• Allow job tokens to access internal packages (merge request) GitLab Enterprise Edition
• Collapse Edit lock form when clicked outside sidebar in issues (merge request)
• Error Tracking: Disable show next button when next pagination is empty (merge request)
• Fix SSH mirrors not working in FIPS mode (merge request)
• This MR fixes list of corpuses (merge request) GitLab Enterprise Edition
• Correct padding for change password screen (merge request)
• Only show Changes to free tier open source projects banner to members (merge request) GitLab Enterprise Edition
• Fixes diff case where .ipynb line contains '\n' (merge request)
• Fix deployment approval popup to support multiple approval rules (merge request) GitLab Enterprise Edition
• Fixes Semantic diffs displaying twice (merge request)
• Fix vertical alignment of compliance report rows so they are centred (merge request) GitLab Enterprise Edition
• Query only distinct OAuth access tokens by application ID (merge request)
• Fix duplicates in pages when sorting members by last_activity_on (merge request)
• Remove attention request docs (merge request)
• Fix avatar size for issue and MR placeholder notes (merge request)
• Correct call to computed hasSelectedColor by @espadav8 (merge request)
• Upgrade version of Swagger UI by @mulka (merge request)
• Add spec for buildkit cache image replication (merge request) GitLab Enterprise Edition
• Index vulnerability_reads on casted_cluster_agent_id (merge request)
• Fix GraphQL API to fetch clusterAgents from instanceSecurity Dashboard (merge request) GitLab Enterprise Edition
• Do not show guest users as participants when mentioned on internal note (merge request)
• Require project membership for merge request approvals (merge request)
• Use UTC for trial end date in popover (merge request) GitLab Enterprise Edition
• Does not generate ipynb diff if file is collapsed (merge request)
• Fix avatars displaying as block elements (merge request)
• Allow filtering by multiple negated milestones (merge request)
• Allow 16 character SubjectKeyIdentifier for x509 signed commits feature by @.wolf (merge request)
• Add sanity check for inputs (merge request)
• Update Vulnerabilities::DismissService (merge request) GitLab Enterprise Edition
• Sets vulnerability state properly (merge request) GitLab Enterprise Edition
• Simplify issue policy, allow bots metadata access (merge request)
• Fixes the remove group button to look correct (merge request)
• Fix Integration#boolean_accessor to work with data fields (merge request)
• Update Vulnerabilities Confirm Service (merge request) GitLab Enterprise Edition
• Fix plural name "Failed jobs" for the pipeline failed email (merge request)
• Improve keyboard UX for toggle replies widget (merge request)
• gitaly_client: Fix error handling for structured AlreadyApplied error (merge request)
• Fix env var check for DISABLE_PUMA_WORKER_KILLER (merge request)
• Maintain namespace_id when connection error occurs in fogbugz importer (merge request)
• Fix LDAP sign in button padding (merge request)
• Remove valid epic check (merge request) GitLab Enterprise Edition
• Fix incorrect links when coming to 'Find file' from a file view by @shelld3v (merge request)
• Improve performance of loading OAuth apps and tokens (merge request)
• Patched Rails model generator to use GitLab template by @zillemarco (merge request)
• Allow epic_color_highlight flag to be applied to groups by @espadav8 (merge request) GitLab Enterprise Edition
• Add auditor access for group compliance report (merge request) GitLab Enterprise Edition
• Fix performance regression in issuable lists (merge request)
• Fix bitbucket cloud importer (merge request)
• Update Vulnerabilities::RevertToDetected Service (merge request) GitLab Enterprise Edition
• Fix nil error for last deployment group (merge request)
• Respect namespace_id for bitbucket server importer (merge request)
• Adjust members index flex spacing for longer text (merge request)
• Fix future iterations not being scheduled correctly (merge request)
• Show only top-level epics in roadmap page (merge request) GitLab Enterprise Edition
• Fix querying vulnerability_reads by cluster_agent_id (merge request) GitLab Enterprise Edition
• Poll for linked pipelines (merge request)
• Cancelling a merge request edit does not reset the autosaver (merge request)
• Revert Only send signed upload params from Wkhse (merge request)
• Fix deploy boards for Kubernetes 1.22 (merge request)
• Respect namespace_id in fogbugz importer (merge request)
• Improves css in ipynb mrs (merge request)
• GlTabsBehavior - Support hash updating (merge request)
• Merge details in audit event json log (merge request) GitLab Enterprise Edition
• Use i18n translations on reassigned issueable emails by @JeremyWuuuuu (merge request)
• Fix autocomplete in wikis (merge request)
• Insert job taggings in batches (merge request)
• Allow public access to awardables API (merge request)
• Fix GET /groups/:id to include runners token (merge request)
• Update Vulnerabilities::ResolveService (merge request) GitLab Enterprise Edition
• Fix agent token modal (merge request)
• Fix private contributions missing on the calendar if user leaves project by @eggerd (merge request)
• Pass status explicitly to Deployment Hook Worker (merge request)
• Fix eslint error (merge request)
• Prevent popovers from showing on group references (merge request)
• Queue Terraform state destroy worker outside of transaction (merge request)
• Fix Auth#token_bot_in_resource? check (merge request)
• Expand diff when navigating to pending comment by @JonstonChan (merge request)
• Migrate Group name and Group URL fields to Vue (merge request)
• Update color preview shades to match header color (merge request)

Changed (224 changes)

• Update project stats for container reg deletes (merge request)
• Update triggers creating vulnerability_reads records (merge request)
• Adds project-scoped callouts for failed web-hooks (merge request)
• Added creation time-range filters for Snippets API by @spmarisa (merge request)
• Update runners form error to pajamas (merge request)
• Changed instances of (Any )[Ee]ligible user to All eligible users (merge request) GitLab Enterprise Edition
• Hide expand button for empty simple widgets (merge request)
• Add config file param to repository changelog api by @zhanglinjie (merge request)
• Show reports immediately after job completes by @kdabrowski (merge request)
• Remove commits from the main Advanced Search index (merge request) GitLab Enterprise Edition
• Add warning next to public projects shared with a private group (merge request)
• Remove omniauth_login_minimal_scopes feature flag (merge request)
• Create vulnerability state transitions as a better form of tracking (merge request) GitLab Enterprise Edition
• Disable creation of vulnerability feedback when dismissing vulns (merge request) GitLab Enterprise Edition
• Added snowplow tracking for package assets (merge request)
• Apply the VSA filters to the task by type charts (merge request) GitLab Enterprise Edition
• Give 300k minutes to contributors to spend on GitLab contributions (merge request) GitLab Enterprise Edition
• Use field level validation errors (merge request) GitLab Enterprise Edition
• Move header search events out of main.js (merge request)
• Prevent hidden projects to be downloaded via git actions (merge request) GitLab Enterprise Edition
• Bump Gitlab Shell version to v14.9.0 (merge request)
• Increase number of includes from 100 to 250 (merge request)
• Migrate mirror repos form errors (merge request)
• Migrate protected tag error form (merge request)
• Allow escalation for all incidents (merge request) GitLab Enterprise Edition
• Migrate CI/CD settings form error (merge request)
• Migrate errors form for autodeops settings (merge request)
• Return if FIPS enabled (merge request)
• Admin App-Settings Network header expand/collapse by @quatauta (merge request) GitLab Enterprise Edition
• Define LDAP omniauth_callbacks routes from GitLab config (merge request)
• Show all errors on invites for invite modal (merge request)
• Improve Admin Area settings UI text (merge request)
• Improve alert UX when updating existing design (merge request)
• Add tmp index for vuln findings with potentially mismatched scanners (merge request)
• Add Rebase without CI button to MR rebase widget by @KevSlashNull (merge request)
• Stop syncing alert and incident statuses (merge request)
• Add indices for protected environments and approval rules on created_at (merge request)
• Removes ci_value_change_for_processable_and_rules_entry ff (merge request)
• Remove standard_context_type_check ff (merge request)
• Remove refactor_blob_viewer FF references (merge request)
• Migrates the spacing for icon of related item (merge request)
• Migrate form_errors in integration settings page (merge request)
• Create Vue form to configure git abuse rate limits (merge request) GitLab Enterprise Edition
• Migrates spacing classes for approval checks (merge request) GitLab Enterprise Edition
• Bump omniauth-oauth version to v1.2.0 (merge request)
• Update admin edit group layout (merge request)
• Migrate form_errors in creations/new_compare form to Pajamas alert (merge request)
• Bump prometheus-client-mmap to v0.16.1 (merge request)
• Remove banner about free project changes (merge request)
• Replace ci_runner_versions indices (merge request)
• Make CI/CD form error to be Pajamas compliant (merge request)
• Update gitlab_omniauth-ldap to v2.2.0 (merge request)
• Promote 'New identity' button as a primary action (merge request)
• Update Node.js from 10 to 14 used in CI by @tnir (merge request)
• Updated Secure Files Settings UI (merge request)
• Disable DS auto-remediate when FIPS mode (merge request) GitLab Enterprise Edition
• Make Application Settings sections headers collapsible (merge request)
• Use approvers information which are available (merge request) GitLab Enterprise Edition
• Add uuid to VulnerabilityFindingDismiss (merge request) GitLab Enterprise Edition
• Disable OAuth access token reuse (merge request)
• Move Title and Format fields in the same row by @ssurbhi560 (merge request)
• Migrate form_errors in two_factor_auths/show form to Pajamas alert (merge request)
• Move link to the last item in formatting toolbar (merge request)
• Allow members invited by email to be re-invited (merge request)
• Application Settings General h4 Expand/Collapse by @quatauta (merge request) GitLab Enterprise Edition
• This MR replaces outdated skeleton-loading (merge request) GitLab Enterprise Edition
• Adds package group settings side-by-side layout (merge request)
• Track process commit limit overflow (merge request)
• Application Settings General h4 Expand/Collapse by @quatauta (merge request)
• Migrate error alert in user identity form (merge request)
• Migrate error alert in doorkeeper application form (merge request)
• Admin App-Settings Templates header expand by @quatauta (merge request) GitLab Enterprise Edition
• Refactor user popover to use GlAvatarLabeled (merge request)
• Improve label of delete comment button (merge request)
• Use user_application_theme helper instead of hard-coded theme classes by @dreedy (merge request)
• Simplify scanner logic for security reports (merge request) GitLab Enterprise Edition
• Increase Webauthn credential XID length by @spotlightishere (merge request)
• Use Pajamas alert in milestones form (merge request)
• Add tooltip to shortcut element in navbar search field (merge request)
• Migrate form errors to Pajamas for grafana setting (merge request)
• Add the merge date to the Chain of Custody report (merge request) GitLab Enterprise Edition
• Rename CycloneDX artifact files (merge request) GitLab Enterprise Edition
• Feature search bar scope tokens (merge request)
• Add git_rate_limit_users_allowlist column to application_settings (merge request)
• Update supported browser versions (merge request)
• Warn user of feature flags risks (merge request)
• Migrate errors in new password to Pajamas alert (merge request)
• Send root_namespace_id to the Projects::ProjectDeletedEvent (merge request)
• Disable Geo proxy internal API polling when Geo not enabled (merge request)
• Apply rate limiting for paid plan customer hooks (merge request) GitLab Enterprise Edition
• Use auditor when auditing using audit changes (merge request) GitLab Enterprise Edition
• Omit MD5 fingerprints in deploy key API response (merge request)
• Replace deprecated createFlash, add loading icon and tabs query param (merge request) GitLab Enterprise Edition
• Drop empty fingerprint attribute in Vue access dropdown (merge request)
• Add hover state for button and remove border (merge request)
• Parse GitLab Runner release version suffixes (merge request)
• Add quick action support for group members (merge request)
• Move commit documents to new index (merge request) GitLab Enterprise Edition
• Removes noisy lines from transformed notebook (merge request)
• Support language filter for blob searches (merge request) GitLab Enterprise Edition
• Migrates spacing class for board card loader (merge request)
• Fix status box styling on Jira issue details page (merge request)
• Migrate errors in GPG keys to Pajamas alert (merge request)
• Container registry: stop appending Root image (merge request)
• Use Pajamas alert in repository check form (merge request)
• Consider versions with suffix in runner upgrades (merge request)
• Show more details for testing integration error (merge request)
• Migrate button to delete account (merge request)
• Vendor omniauth-gitlab gem to provide backwards compatibility (merge request)
• Use Pajamas alert in gitpod settings (merge request)
• Migrate buttons to switch stl viewer type (merge request)
• Replace Geo node with Geo site (merge request) GitLab Enterprise Edition
• Add ignore rule for migrated_to_new_structure (merge request) GitLab Enterprise Edition
• Change group recent activity window to 30 days (merge request) GitLab Enterprise Edition
• Add a keyword for default values in the CSP (merge request)
• Fixes the spacing of buttons on the compare page (merge request)
• Remove variable override on related tree item (merge request)
• Have Security Policies Enabled by Default (merge request) GitLab Enterprise Edition
• Hide the 'Resync' button when there are no results by @shelld3v (merge request)
• Hide 'New Epic' button on roadmap for unauthorized users by @shelld3v (merge request) GitLab Enterprise Edition
• Admin App-Settings Preferences header expand/collapse by @quatauta (merge request)
• Allow using pre tag outside of code blocks (merge request)
• Add queued_duration to the job entity (merge request)
• Migrates modal to delete pipeline (merge request)
• Update text for rollback modal (merge request)
• Admin App-Settings Advanced Search header expand by @quatauta (merge request) GitLab Enterprise Edition
• Add new column vulnerability_reads.casted_cluster_agent_id as bigint (merge request)
• Remove feature flag ci_build_finished_worker_namespace_changed (merge request)
• Replace YAML approver info with persisted data (merge request) GitLab Enterprise Edition
• In email footers, explicitly link to the GitLab host by @smokris (merge request)
• Updated agent status icons (merge request)
• Add root_namespace_id to Pages::PageDeletedEvent (merge request)
• Use Pajamas alert in repository mirroring settings (merge request)
• DB additions for CI Secure Files Replicator (merge request)
• Consolidate pipeline mini graph code (merge request) GitLab Enterprise Edition
• Migrates view seat usage button in alert (merge request) GitLab Enterprise Edition
• Migrates button to promote milestone (merge request)
• Remove GraphQL check for feature flag and return null by @espadav8 (merge request) GitLab Enterprise Edition
• Use Pajamas alert in visibility and access settings (merge request)
• Change in wording related to SAML experience (merge request) GitLab Enterprise Edition
• Fix: notify locale on failed builds by @JeremyWuuuuu (merge request)
• Migrates the spacing for icon in user dropdown (merge request)
• This MR enables sticky footer in Drawer (merge request) GitLab Enterprise Edition
• Modifies Package Registry group settings (merge request)
• Migrate LDAP sync buttons on member page (merge request) GitLab Enterprise Edition
• Convert admin users and admin group edit/new to be Pajamas compliant (merge request)
• Add Expand/Collapse to application settings CI/CD h4 by @quatauta (merge request)
• This adds the queued_at field to the job entity (merge request)
• Remove form_errors from the groups settings ci_cd form (merge request)
• Migrates the spacing class for job name (merge request)
• Migrates the spacing for buttons in dashboard (merge request)
• Use Pajamas alert in webhooks form (merge request)
• Replace repeat icon with retry icon for jobs (merge request)
• Migrate form errors (merge request) GitLab Enterprise Edition
• Migrates button to add previously merged commits (merge request)
• Accept runner patch upgrades from newer major releases (merge request)
• More informative timeout message (merge request)
• Replace jQuery in init_details_button.js by @quatauta (merge request)
• Remove callouts_trials_link_url (merge request) GitLab Enterprise Edition
• Update oauth2 gem to v2.0.2 (merge request)
• This MR migrates legacy html button to Pajamas button (merge request)
• Migrates spacing classes in modal to add commits (merge request)
• Add terminating newline to /:username.keys and /:username.gpg (merge request)
• Take migration state into account for size by @jeffpearce (merge request)
• Rewrote Project settings (merge request)
• Fixes truncation and tooltip on group selection (merge request)
• This MR migrates radio button to pajamas radio component (merge request)
• Change the revoke button to type tertiary (merge request)
• Default on group_level_security_policies (merge request)
• Return :invalid for an invalid runner version (merge request)
• Modifies Dependency Proxy group settings (merge request)
• Use Pajamas alert in new application form (merge request)
• API: Backend support for manipulating web-hook variables (merge request)
• Migrate errors in group settings to Pajamas alert (merge request)
• Add Job ID to RepositoryUpdateMirrorWorker logs (merge request) GitLab Enterprise Edition
• Migrates spacing class on web ide tree (merge request)
• Remove artifacts storage warning (merge request) GitLab Enterprise Edition
• Improve UI text - group Permissions settings (merge request)
• Remove renamed workers and feature flag (merge request)
• Replace the menu icon on mobile (merge request)
• Remove custom override of breadcrumb separator (merge request) GitLab Enterprise Edition
• Migrate errors in password update to Pajamas alert (merge request)
• This MR enables sticky header in Drawer (merge request) GitLab Enterprise Edition
• Remove legacy /-/integrations routes from renamed controller (merge request)
• Rollout prevent_abusive_searches feature flag (merge request)
• Migrates spacing classes for code review analytics (merge request) GitLab Enterprise Edition
• This MR defines behaviour of sidebar view mode (merge request) GitLab Enterprise Edition
• Update asana gem to v0.10.13 to relax oauth2 dependency (merge request)
• Remove usage of MD5 by wikicloth gem for FIPS (merge request)
• Migrates the spacing class for add commits button (merge request)
• Consider the certs specified via SSL_CERT_{DIR,FILE} variables (merge request)
• Backend support for manipulating web-hook variables (merge request)
• Migrates spacing classes to add related issue (merge request)
• Update gitaly_cgroups metric name (merge request)
• Use new cost factor 0.008 for public SaaS projects (merge request) GitLab Enterprise Edition
• Remove migrate_vulnerability_finding_uuids flag (merge request)
• Migrate edit profile errors to use Pajamas compliant alert (merge request)
• Migrates button to unprotect an environment (merge request) GitLab Enterprise Edition
• Admin App-Settings Metrics header expand/collapse by @quatauta (merge request)
• Update omniauth-oauth2 to v1.7.3 (merge request)
• Remove fallback calc of last sec report pipeline (merge request) GitLab Enterprise Edition
• Migrates buttons in warning to apply template (merge request)
• Default enable FF import_release_authors_from_github (merge request)
• Cleanup Project Settings > Repository > Protected branches (merge request)
• Adjust migration update query and refactor specs (merge request) GitLab Enterprise Edition
• Replace runners token indices in projects table (merge request)
• Migrates spacing class for requirements title (merge request) GitLab Enterprise Edition
• Migrates spacing class for commits author search (merge request)
• Migrates spacing on icon for hidden approvers (merge request) GitLab Enterprise Edition
• Admin App-Settings Reporting header expand/collapse by @quatauta (merge request)
• Application Settings Repository h4 Expand/Collapse by @quatauta (merge request)
• EE Application Settings CI/CD h4 Expand/Collapse by @quatauta (merge request) GitLab Enterprise Edition
• Migrate spacing class for reverify button in geo (merge request) GitLab Enterprise Edition
• Migrates spacing for applying suggestions message (merge request)
• Migrates spacing classes on snippets empty state (merge request)
• Migrates spacing class for clone button (merge request)
• Migrates spacing class on performance bar (merge request)
• Migrates the spacing class for discussion filters (merge request)
• Use popover for On-demand scans tooltip (merge request) GitLab Enterprise Edition
• Add upgrade indicators to runner details (merge request) GitLab Enterprise Edition
• Stop creating resolved alerts for self-recovering notifications (merge request)
• Update form to use pajamas_alert in spam application settings (merge request)
• Remove projects_build_artifacts_size_refresh flags (merge request)
• Clean up merge_request_pipelines_in_target_project feature flag (merge request)

Removed (23 changes)

• Remove onboarding experience survey and email from onboarding (merge request)
• Remove tracing ff and delete yml (merge request)
• Delete monitor logging ff (merge request)
• Add migrations to remove fk (merge request)
• Delete frontend code related to logs (merge request)
• Remove code for trigger job show page (merge request)
• Remove design resolved discussions popover (merge request)
• Add migrations for table and fk (merge request)
• Removethe optimized_followed_users_queries FF (merge request)
• Remove unused Projects::JobsController#status (merge request)
• Remove dead code from gitlab_ci settings (merge request)
• Remove old route for DAST profiles (merge request) GitLab Enterprise Edition
• Remove pod logs backend code (merge request)
• Remove pod logs service (merge request)
• Remove semver usage (merge request)
• Remove clusters_integrations_elastic_stack metric (merge request)
• Remove projects_enabled_with_tracing metric (merge request)
• Remove elastic cluster section on UI (merge request)
• Remove the infinitely_collapsible_sections feature flag (merge request)
• Geo Sites Form - Remove Beta Badge (merge request) GitLab Enterprise Edition
• Remove old Sidekiq error logging fields (merge request)
• Remove file_identifier_hash feature flag by @feistel (merge request)
• Remove vsa_reaggregation_worker FF (merge request)

Security (17 changes)

• Allow inviting only groups with subset of allowed domains to groups
• Sanitize ZenTao breadcrumb links
• Gitlab Runner version upgrade
• Update ProjectAttributesTransformer to use fixed number of attributes
• Fix open redirect vulnerability
• Escape deploy key title to prevent XSS
• Fix group IP restrictions not enforced for container registry requests (merge request) GitLab Enterprise Edition
• Filter milestone release by user access
• Adds a filter based on user access to Runner jobs endpoint
• Security fix sentry issue leaks and access level check
• Check permissions before exposing user two factor enabled
• Fix permissions in the project labels API
• Fix the required access level in the Conan packages finder
• Restrict CI lint access to pipeline creators
• Catch endless headers when reading HTTP responses
• Prevent runners from picking IP restricted jobs
• Add rate limit on integration testing feature (merge request)

Performance (22 changes)

• Implement hit ration for diff caching (merge request)
• Do not allow waiting project authorizations refreshes (merge request)
• Improve DependencyLinker sanitization (merge request)
• Reduce queries in revert / cherry pick button (merge request)
• Use paginated tree for the last commit query (merge request)
• Remove unnecessary Redis calls in issue endpoints (merge request)
• Improve performance of related branches finder (merge request)
• Improve logs tree fetching performance (merge request)
• Improve performance of users API under load (merge request)
• Uses OJ Saj Parser to speed up Ipynbdiff (merge request)
• Remove delayed_project_import_schedule_worker flag (merge request)
• Remove sticky_ci_archive_trace_worker feature flag (merge request)
• Do not allow waiting project authorizations refreshes (merge request)
• Reduce queries for adding members (merge request)
• Improve performance of finding related branches (merge request)
• Schedule index to improve performance of contribution analytics (merge request)
• Preload rich viewer (merge request)
• Set expire_in for protected branch cache keys (merge request)
• Remove paginated_issue_discussions FF (merge request)
• Enable full-text search of issues by default (merge request)
• Prevent N+1 queries when rendering pipeline stage (merge request)
• Move incident closing for recovery alerts into a background job (merge request)

Other (49 changes)

• Remove plaintext token index from ci_builds (merge request)
• Disallow any database calls, or connections in routes (merge request)
• Drop unused ci builds index (merge request)
• Revert "Merge branch 'soft-validation-on-environment-external-url' into 'master'" (merge request)
• Drop post migration test table (merge request)
• Clean up confidential_notes feature flag (merge request)
• Add uuid to Service Ping medatada report (merge request)
• Turn Project authorizations refresh on changes in ProjectMember async (merge request)
• Fix usage of distance_of_time_in_words_to_now by @edith007 (merge request)
• Use correct styling for clear user status button (merge request)
• Remove measure_service_ping_metric_collection ff (merge request)
• Move finalize background migration to post-deploy (merge request)
• Update delayed_project_removal to NULL for UserNamespaces (merge request)
• Cache payload for unleash clients (merge request)
• Remove legacy queuing code (merge request)
• Remove group_name_path_vue feature flag (merge request)
• Move integration channel placeholder var into constant by @chaomao (merge request)
• Update docs to mention Epic Colours by @espadav8 (merge request)
• Reschedule batched background migration (merge request)
• Remove the gitlab_sli_new_counters feature flag (merge request)
• Remove not null constraints from requirements columns (merge request)
• Pass License sha256 in usage data (merge request) GitLab Enterprise Edition
• Validate requirements.requirement_issue NOT NULL constraint (merge request)
• Cache external MR diffs on disk for faster Project Export (merge request)
• Put migration on hold when autovacuum is active (merge request)
• Use lazy Workhorse upload preauth for fallback routes (merge request)
• Update multiple admin alerts to pajamas (merge request)
• Add Feishu Integration Foundation by @chaomao (merge request)
• Drop unused ci builds index (merge request)
• Rename queues for finishing and achiving workers (merge request)
• Switch ActiveSupport::HashDigest to SHA256 (merge request)
• Ignore ci_triggers.ref before removal (merge request)
• Moves ipynbdiff to vendor (merge request)
• Setting sliding-list Partition Fix FF to True (merge request)
• Moves ipynbdiff to vendor (merge request)
• Add background migration to backfill missing search_data (merge request)
• Add post-migration test table (merge request)
• Clean up fallbacks in Emails::MergeRequests#push_to_merge_request_email (merge request)
• Hide dependency proxy for personal namespaces (merge request) GitLab Enterprise Edition
• Remove prerecord_service_ping_data feature flag (merge request)
• Add skeleton loader for usage_quota's storage (merge request) GitLab Enterprise Edition
• Backfill runner semver column (merge request)
• Remove contacts_autocomplete feature flag (merge request)
• Only send signed upload params from Workhorse (merge request)
• Revert "Merge branch 'jnnkl-codequality-findings-diff-inline' into 'master'" (merge request)
• Fix display of times in access and deploy token table by @edith007 (merge request)
• Support push options when creating merge request pipelines (merge request) GitLab Enterprise Edition
• Update GitLab Runner Helm Chart to 0.42.0 (merge request)
• Address database documentation Vale warningss by @cgives (merge request)

15.1.6 (2022-08-30)

Security (17 changes)

• No overriding methods for Sawyer class (merge request)
• Bump yajl-ruby gem version (merge request)
• Prevent long loops when generating suggested branch name (merge request)
• IDOR in Zentao integration issue show page (merge request)
• Patch VULNDB-255039 (potential Rack cache poisoning) (merge request)
• HTML escape the label background color (merge request)
• Sandbox jupyter notebook HTML output (merge request)
• Fix unauthorized GFM references in Incident Timeline (merge request)
• Optimize handling repositories with huge trees (merge request)
• Parse commit trailers without using regexp (merge request)
• Check for pathological markdown input (merge request)
• Replaced smooshpack to fix the vulnerability in LivePreview (merge request)
• Update package auth for group IP allowlist (merge request)
• Don't show pipeline status (merge request)
• Sanitize img attributes in Banzai::Filter::ImageLinkFilter (merge request)
• Validate description length for snippets (merge request)
• Prevent brute force vuln for Git over HTTP(S) requests (merge request)

15.1.5 (2022-08-22)

Security (2 changes)

• Validate if values to be saved in Redis can be converted to string (merge request)
• Fix CSS selector used in specs (merge request)

15.1.4 (2022-07-28)

Security (18 changes)

• Security datadog integration leaking (merge request)
• Prevent users who cannot admin a public project from viewing deploy keys (merge request)
• Add additional condition to accept invitation (merge request)
• Update GITLAB_PAGES_VERSION (merge request)
• Add html_escape to build_details_entity (merge request)
• Check permissions when filtering by contact or organization (merge request)
• Use author to run subscribed pipeline (merge request)
• Remove prohibited branches after project import (merge request)
• Remove feature flag ci_yaml_limit_size (merge request)
• Maintainer can change the visibility of Project and Group (merge request)
• Do not link unverified secondary emails with any users (merge request)
• Forbid exchanging access token for ROP flow to users required 2FA setup (merge request)
• Remove todos from confidential notes when user loses access (merge request)
• Remove group_bot_user and group_access_token after group delete (merge request)
• Protect integration secrets (merge request)
• Protect Grafana and Sentry integrations (merge request)
• Fix IDOR in Jira issue show action (merge request)
• Limit proxied requests to Grafana API (merge request)

15.1.3 (2022-07-19)

Added (1 change)

• Add praefect list virtual storages subcommand documentation (merge request)

Fixed (1 change)

• Fix group access dropdown failure if no subgroups are available (merge request) GitLab Enterprise Edition

15.1.2 (2022-07-05)

Fixed (3 changes)

• Resolve "White screen of death on creating new project" (merge request)
• Fix agent token modal (merge request)
• Resolve "Gitlab doesn't detect the deployment pods after K8s cluster upgrade to v1.22" (merge request)

Changed (2 changes)

• Update gitaly_cgroups metric name in docs (merge request)
• Refactor add populate commit permission migration (merge request) GitLab Enterprise Edition

Removed (1 change)

• Geo Sites Form - Remove Beta Badge (merge request) GitLab Enterprise Edition

15.1.1 (2022-06-30)

Security (16 changes)

• Fix group IP restrictions not enforced for container registry requests (merge request)
• Gitlab Runner version upgrade (merge request)
• Update ProjectAttributesTransformer to use fixed number of attributes (merge request)
• Escape deploy key title to prevent XSS (merge request)
• Sanitize ZenTao breadcrumb links (merge request)
• Fix permissions in the project labels API (merge request)
• Security fix sentry issue leaks and access level check (merge request)
• Check permissions before exposing user two factor enabled (merge request)
• Filter milestone release by user access (merge request)
• Fix the required access level in the Conan packages finder (merge request)
• Allow inviting only groups with subset of allowed domains to groups (merge request)
• Fix open redirect vulnerability (merge request)
• Adds a filter based on user access to Runner jobs endpoint (merge request)
• Prevent runners from picking IP restricted jobs (merge request)
• Restrict CI lint access to pipeline creators (merge request)
• Catch endless headers when reading HTTP responses (merge request)

15.1.0 (2022-06-21)

Added (147 changes)

• Add GraphQL API to create resource links (merge request) GitLab Enterprise Edition
• Add support for collecting jemalloc stats (merge request)
• Add audit event for disabling 2FA (merge request) GitLab Enterprise Edition
• Add auditEventsStreamingHeadersDestroy Mutation (merge request) GitLab Enterprise Edition
• Add backend changes to sort issues by closed at by @zillemarco (merge request)
• Display invalid approvals on merge request widget (merge request)
• Add ownerProject field to RunnerType (merge request)
• Mutation to delete multiple package files (merge request)
• GraphQL: Add lazy load for blocking epics count (merge request) GitLab Enterprise Edition
• Add git protocol configuration to groups (merge request)
• Prevent users from using known insecure public key (merge request)
• Preview plantuml/kroki diagrams in content editor (merge request)
• Add scan_execution_policies endpoint to the Kubernetes internal API (merge request) GitLab Enterprise Edition
• Add opened/closed epic issue weights (merge request)
• Added possibility to search CRM contacts and organizations by ids by @zillemarco (merge request)
• Adds timestamps to compliance frameworks (merge request)
• Clean up group_level_protected_environment feature flag (merge request)
• Remove downstream_retry_action ff (merge request)
• Audit event for group level merge request settings (merge request) GitLab Enterprise Edition
• Added token-selector to WI assignees (merge request)
• Introduce database metric batch average operation (merge request)
• Add counts.saml_group_links metric (merge request) GitLab Enterprise Edition
• Remove customer_relations feature flag by @leetickett (merge request)
• Provide HooksExecution task to ensure Slack integrations are called (merge request) GitLab Enterprise Edition
• Introduce gitlab_internal for Rails and pg tables (merge request)
• Add sortable description list items on epic page (merge request)
• Add support for delayed project deletion for personal projects (merge request) GitLab Enterprise Edition
• Create audit stream HTTP header model (merge request)
• Prevent users from adding known, weak keys by @kyrie.31415926535 (merge request)
• Add password complexity checkbox in application settings pages (merge request)
• List children in hierarchy widget (merge request)
• Added remove button to time tracking report entries by @zillemarco (merge request)
• PyPI simple repository API PEP 503 (merge request)
• Create Geo replication events for Terraform state deletions (merge request) GitLab Enterprise Edition
• Add metric for unique MRs with invalid approvers (merge request) GitLab Enterprise Edition
• Add empty state to branch selection when creating an MR (merge request)
• Added a waning alert to the project (merge request)
• Add confidential notes index (merge request)
• Update documentation to reflect current project migration status (merge request)
• Upgrade GitLab Pages to 1.59.0 (merge request)
• Create merged result pipelines when MR is git mergeable (merge request)
• Switch legacy_open_source_license_available for non-public projects (merge request)
• Add upgrade status badge to runners (merge request) GitLab Enterprise Edition
• Internal error tracking check endpoint (merge request)
• User api endpoint for project deploy keys (merge request)
• Added intents.json to act as a multiplier to the emojis score (merge request)
• Add password complexity to application settings API by @mtan-gitlab (merge request) GitLab Enterprise Edition
• Add time to restore service chart to CI/CD analytics (merge request) GitLab Enterprise Edition
• Add new empty state to group overview (merge request)
• Add container_images to Project/Group GraphQL API (merge request)
• Event type information in streaming audit event for deploy token (merge request) GitLab Enterprise Edition
• Create Button ViewComponent (merge request)
• Introduce new Colour Select Widget by @espadav8 (merge request)
• Create release evidence post GitLab Migration (merge request)
• Prepare confidential notes index on .com (merge request)
• Add metric to count number of requirements that require approval (merge request) GitLab Enterprise Edition
• Skip sending pipeline hooks and notifications for blocked users (merge request)
• Add not null constraint on routes#namespace_id column (merge request)
• Add submit license usage data banner (merge request) GitLab Enterprise Edition
• Add version part columns to ci_runners table (merge request)
• Add seat count usage alerts to group pages (merge request) GitLab Enterprise Edition
• Show Terraform state deleted status in UI (merge request)
• Add event type information in merge request approval audit event (merge request) GitLab Enterprise Edition
• Add logic to reset submit license usage data banner data (merge request) GitLab Enterprise Edition
• Removes container_registry_project_statistics FF (merge request)
• Remove updated_diff_expansion_buttons feature flag (merge request)
• Add GraphQL support to manage the Packages Cleanup policy (merge request)
• WIP add filename arguement to allow filtering by file language (merge request) GitLab Enterprise Edition
• Added contacts and organizations resolvers by @zillemarco (merge request)
• graphql: Add merge_request_event_type field to pipeline_type (merge request)
• Add container registry to Namespace usage quotas page (merge request) GitLab Enterprise Edition
• Log GitHub Commit Status API responses by @hchouraria (merge request) GitLab Enterprise Edition
• Add GraphQL operation name to performance bar (merge request)
• Add Note to Todo GraphQL Type by @Taucher2003 (merge request)
• Add maintenance notes in runner view (merge request) GitLab Enterprise Edition
• Log sql query in Sidekiq error logs (merge request)
• Displays embedded images on ipynb diffs (merge request)
• Adds the end event column to the VSA stage table (merge request)
• Add drop_sequence migration helper (merge request)
• Cleanup orphaned routes (merge request)
• Log email delivery failures (merge request)
• Enable escalations of incidents created manually (merge request)
• Add option to backup specified groups (merge request)
• Add a index for vulnerability_state_transitions table (merge request) GitLab Enterprise Edition
• Add tooltip to the downstream expand btn (merge request)
• Adds raw column to all ci variable tables (merge request)
• Add Pages::PageDeletedEvent (merge request)
• Expose epic links properties on GraphQL (merge request) GitLab Enterprise Edition
• Add documentation for CWE 319.1 (merge request)
• Introduce execute_background_migrations feature flag (merge request)
• Add runner status to external pipeline validation payload (merge request)
• Add validation for epic issue group hieararchy (merge request) GitLab Enterprise Edition
• Implement GET API to fetch single issue link by @tuxtimo (merge request)
• Add seat count usage alerts to group pages (merge request) GitLab Enterprise Edition
• Add totalWeight to epic board list (merge request) GitLab Enterprise Edition
• Link service desk issues to CRM contacts by @leetickett (merge request)
• Add event type in audit event streaming (merge request) GitLab Enterprise Edition
• Improve group issues list empty state (merge request)
• Allow creation of annotated tags with the Release API (merge request)
• Add resource links db table migration (merge request) GitLab Enterprise Edition
• Add Pages/Pelican project template (merge request)
• Add and expose Jira app OAuth application ID (merge request)
• Add Developer Documentation for the Pipeline Wizard (merge request)
• Add 'Package registry' visibility setting to project settings by @wwwjon (merge request)
• Allow custom language type in code blocks (merge request)
• Add Milestone.releases GraphQL field (merge request)
• Add index to ci_job_artifacts (merge request)
• Add closed_as_duplicate_of to issues Graphql type (merge request)
• Introduce source versions for BulkImport trackers configuration (merge request)
• Add VulnerabilityStateTransition model (merge request)
• Implement new PAT API endpoint 'id' by @TrueKalix (merge request)
• GraphQL: Allow filtering epics by top level only (merge request) GitLab Enterprise Edition
• Remove updated_mr_header feature flag (merge request)
• Add registry migration Guard dynamic pre import timeout (merge request)
• Add CRM filtered search tokens on group/project issues page (merge request)
• Added mocked assignees to work item (merge request)
• Prepare async index to for Ci::JobArtifact (merge request)
• GraphQL: Add maintenance_note_html field (merge request)
• Prepare new Slack events processing API (merge request)
• Add backup option to filter for specific projects (merge request)
• Add designs migration to GitLab Project Migration (merge request)
• Uplift limit on Math diagrams on wiki pages (merge request)
• Add email to send to admin when a user is auto banned (merge request)
• Work item Hierarchy widget - Empty state (merge request)
• Add models for SSH signed commits (merge request)
• Finalize routes backfilling for projects (merge request)
• Add parent-child work item table (merge request)
• Add designs repository export to relations export API (merge request)
• Display artifact expired page for TestSuite (merge request)
• Update Gitlab Shell to 14.6.1 (merge request)
• Add new inactive project deletion section to admin settings (merge request)
• Add container registry storage type to project storage list (merge request) GitLab Enterprise Edition
• Added timelog categories table and model by @zillemarco (merge request)
• TLS support for metrics endpoints (pprof, prometheus) (merge request)
• Added method to perform api call to get container_registry_size (merge request)
• Default audit_event_streaming_git_operations to true (merge request) GitLab Enterprise Edition
• Self-managed SAML Group Sync (merge request) GitLab Enterprise Edition
• Add epic board list resolver (merge request) GitLab Enterprise Edition
• Add PWA manifest.json (merge request)
• The batched migrations should enforce requirements (merge request)
• Support multi-actor args in the feature API (merge request)
• Feature: dingtalk integration by @chaomao (merge request)
• Cache namespace traversal path in traversal_ids (merge request)
• Allow creation of annotated tags with the GraphQL Release API (merge request)
• Create notes confidential index synchronously (merge request)
• Clean up pipeline_editor_file_tree feature flag (merge request)
• Removes feature flag :rendered_diffs_viewer (merge request)

Fixed (212 changes)

• Enable FF ci_variable_for_group_gitlab_deploy_token (merge request)
• Fix scoped labels bug on group/project issues list (merge request)
• Allowlist OAuth application redirect URI in CSP (merge request)
• Update MergeRequestDiffFile#utf8_diff to not call #diff multiple times (merge request)
• Validation for author during release creation (merge request)
• Bump Gitlab Shell version to v14.7.4 (merge request)
• Send only group namespace with Owner role (merge request) GitLab Enterprise Edition
• Do not double escape release tags with slashes in release URL (merge request)
• Fix code block language related issues (merge request)
• Move "Create an MR" test to different line (merge request) GitLab Enterprise Edition
• Add PipelineReplicator and handle pipeline ref created event (merge request) GitLab Enterprise Edition
• OCI image fix: UI representation and Geo replication (merge request) GitLab Enterprise Edition
• Stop Wiki clone when Wiki is disabled (merge request)
• Make sure there is a separator between commits (merge request)
• Fix sticky position in project compare and commits (merge request)
• Disable project_key validation for inactive Jira integrations (merge request)
• Move checks from mergeable to mergeable_state? (merge request)
• Fixes line mapping for ipynb diffs (merge request)
• Do not mark generic vulnerabilities as "resolved on default branch" (merge request) GitLab Enterprise Edition
• Group Projects settings width does not respect fixed width (merge request)
• Group Repository Settings does not respect fixed with setting (merge request)
• Override HLJS selectors from Sourcegraph (merge request)
• Adding with_lock_retries to the gitlab:db:lock_writes rake task (merge request)
• Fix middle click on todos (merge request)
• Fix static translations in integrations (merge request)
• Improve scrolling tabs (merge request)
• Translate quick action's messages (merge request)
• Add missing padding to confirmation email login box (merge request)
• Fix themes in code blocks in content editor (merge request)
• Preserve language when retrieving cached security training urls (merge request) GitLab Enterprise Edition
• Prevent frozen modification in email encoding patch (merge request)
• Include release authors during Github imports (merge request)
• Refetch subscription after removing a user (merge request) GitLab Enterprise Edition
• Display sec training configu with license helper (merge request)
• Update workhorse local path for Issuable metrics (merge request)
• Take into account for the default merge request template (merge request)
• Fix alignment of action button icons in mini pipelines (merge request)
• Always pass current_user to project search results (merge request) GitLab Enterprise Edition
• Forward invalid feedback prop on EE invite modal (merge request) GitLab Enterprise Edition
• Geo: Fix JobArtifact verification when object storage is used (merge request)
• Fix alignment of delete button on linked items (merge request)
• Remove captcha check GET endpoint (merge request) GitLab Enterprise Edition
• Fix UTF-8 conversion in reply parser (merge request)
• Improve design loading state by @leetickett (merge request)
• Fix a bug in MergeRequests::UpdateService (merge request)
• Remove unused ci_job_artifact_states_job_artifact_id_seq (merge request)
• Fix iteration reports with cadence rollover (merge request) GitLab Enterprise Edition
• Propagate scan result rules related attributes (merge request) GitLab Enterprise Edition
• Use loose foreign key for deployment_clusters.cluster_id (merge request)
• Fixing SlidingListStrategy default value of the partitioning column (merge request)
• Properly handle the PG::ReadOnlySqlTransaction error (merge request)
• Fix API Security registry name in DAST On Demand API template (merge request) GitLab Enterprise Edition
• Fix API Security registry name in Secure Binaries template (merge request) GitLab Enterprise Edition
• Correctly display MR analytics Avg and Max values (merge request) GitLab Enterprise Edition
• Remove unused ci_pipelines_config_pipeline_id_seq (merge request)
• Fix source_project for Ci::Sources::Project (merge request) GitLab Enterprise Edition
• Hide /remove_contacts if issue has no contacts by @leetickett (merge request)
• Do not use custom SVG logo for email header (merge request)
• Fix artifact downloads on Security tab (merge request) GitLab Enterprise Edition
• Add support for sentry request with no content-type by @leetickett (merge request)
• Removed component destroy on mouseout (merge request)
• Respect namespace for phabricator importer (merge request)
• Respect namespace for manifest importer (merge request)
• Use loose foreign key for deployments.cluster_id (merge request)
• Allow OPTIONS method for OAuth2 token endpoints (merge request)
• Update search data when :issues_full_text_search is enabled (merge request)
• Use header logo for merge request emails by @wwwjon (merge request)
• Exclude Requirements & Test Cases from Issues list (merge request) GitLab Enterprise Edition
• Update pipeline mini graph border (merge request)
• Add timestamp columns to VSA aggregated RecordsFetcher (merge request)
• Fix button height on group issues list page (merge request)
• Default to the current group when importing from gitea (merge request)
• Only transition environment to stopped once stop action has succeeded (merge request)
• Update LFS objects export to not fail if file on disk is missing (merge request)
• Fix gitlab:db:validate_config to store db_config_name of a database (merge request)
• Fix namespace_id being lost for github import (merge request)
• Fix rewriting epic in Issues move service (merge request) GitLab Enterprise Edition
• Provide project path to refetched Terraform state GraphQL queries (merge request)
• Use DAST_API_EXCLUDE_URLS with DAST API on-demand scans (merge request) GitLab Enterprise Edition
• Close Epic Label dropdown when clicking on header X by @espadav8 (merge request)
• DeactivateDormantUsersWorker will not deactivate recently created users (merge request)
• Remove unused ci_build_report_results_build_id_seq (merge request)
• Prevented issues designs reordering when on mobile by @zillemarco (merge request)
• Fix MR title link styles (merge request)
• Convert captcha check endpoint to POST request (merge request) GitLab Enterprise Edition
• Retain top level group default membership with SAML Group Sync (merge request) GitLab Enterprise Edition
• Enable FF ci_fix_rules_if_comparison_with_regexp_variable by default (merge request)
• Add auditor access for group wiki (merge request) GitLab Enterprise Edition
• Add GitLab agent image tag to install command (merge request)
• Guard email receiver from empty From and To fields (merge request)
• Allow public terraform modules to anonymous users (merge request)
• Fix error when creating Policy Schedule with invalid cron expression (merge request) GitLab Enterprise Edition
• Show manual actions from matching environments on environment page (merge request)
• Add auditor access for on call schedules (merge request) GitLab Enterprise Edition
• Do not aggregate TestReport when using matrix job (merge request)
• Fix 404 when purchasing storage from a subgroup (merge request) GitLab Enterprise Edition
• Fix 404 when purchasing storage from a subgroup (merge request) GitLab Enterprise Edition
• Fix 404 when purchasing storage from a subgroup (merge request) GitLab Enterprise Edition
• Fix 404 when purchasing storage from a subgroup (merge request) GitLab Enterprise Edition
• Fix 404 when purchasing storage from a subgroup (merge request) GitLab Enterprise Edition
• Fix 404 when purchasing storage from a subgroup (merge request) GitLab Enterprise Edition
• Fix incorrect open issue count in project sidebar (merge request) GitLab Enterprise Edition
• Update deployment status when a build fails due to data integrity (merge request)
• Do not allow last human owner to leave (merge request)
• Disconnect alternates when unlinking from a repository pool (merge request)
• Clean up Terraform state files on deletion (merge request)
• Fix linked pipeline expand cutoff on focus (merge request)
• Always destroy webhooks synchronously (merge request)
• Fix vulnerability report project filter loading icon (merge request) GitLab Enterprise Edition
• Add Cancel buttons to CSV import and export modals (merge request)
• Fix 500 on issues list page (merge request)
• Add !reference support for workflow keyword (merge request)
• New Issue: Fix description label alignment (merge request)
• Fix deployment chat notifications for tags by @rstxn (merge request)
• Fix merge_request should_remove_source_branch by @guillaume.chauvel (merge request)
• Make Plain diff button downloadable (merge request)
• Improve comemnts discussion header (merge request)
• Fix 500 error for CompareController (merge request)
• Fix vanishing design versions by @leetickett (merge request)
• Upgrade fog-aws to v3.14.0 by @hchouraria (merge request)
• Dismiss file tree popover when clicking outside the element (merge request)
• Hide commit form based on pipeline editor path's tab query param (merge request)
• Prevent project maintainers from approving Owner access requests (merge request)
• Add btn-link class back (merge request)
• Correct project coverage graph dates on x axis (merge request)
• Add support for the !reference tag in CI schema (merge request)
• Address ux quota problems (merge request) GitLab Enterprise Edition
• Change page titles from h3 to h1 to be semantically correct (merge request)
• Fix epics list bulk editing by using intersection (merge request) GitLab Enterprise Edition
• Do not store security scans for already purged pipelines (merge request) GitLab Enterprise Edition
• Update binary button links platform changes (merge request)
• Fixed mis-aligment of expanded header-search-bar (merge request)
• Fix Advanced Search Opensearch detection (merge request) GitLab Enterprise Edition
• Use #persisted_environment for agent impersonation (merge request)
• Do not allow mailers to be enqueued from within a transaction (merge request)
• Use live preview extension no matter the first file opened (merge request)
• Fix NoMethodError in Integrations::Prometheus#test by @moofkit (merge request)
• Fix routing for /info/refs (merge request)
• Resolve issues emoji selector missing focus border (merge request)
• Add JobArtifactCreatedAt to build_artifacts_size_refresh table (merge request)
• Prevent project maintainers from creating Owner access tokens (merge request)
• Separate query params for Members and Groups by @wwwjon (merge request)
• Set timestamps correctly when propagating (merge request)
• Patch ActiveRecord::Generators::Migration#configured_migrated_path (merge request) GitLab Enterprise Edition
• Geo: Mark object stored as verification disabled (merge request) GitLab Enterprise Edition
• Update BulkImports to handle empty relation status responses (merge request)
• Fix mail notifications not being sent when requesting access (merge request)
• Include inherited owners in User#solo_owned_groups (merge request)
• Fixes forgotten base class (merge request)
• Prevent project maintainers from creating or modifying Project Owners (merge request)
• Fix bug on Pipeline#has_expired_test_reports? (merge request)
• Fix project packages and registries menu active state (merge request)
• Lower session expiry when user is unauthenticated (merge request)
• Guard clause for no external destinations (merge request) GitLab Enterprise Edition
• Skip orphaned pool repositories even when there's a fork network (merge request)
• Add spacing between threat monitoring breadcrumb and policy section (merge request) GitLab Enterprise Edition
• Allow references to scoped labels by title (merge request)
• Fix Emoji picker button background in highlighted comment (merge request)
• Merge branch 'fix-last-pipeline-fecth-in-web-ide' into 'master' (merge request)
• Ensure last pipeline is fetched on render of Web IDE status bar (merge request)
• Drop defunct unique namespaces name index (merge request)
• Fix issue description list item styling (merge request)
• Improve design consistency of buttons in some modals (merge request)
• Fix overflow on comments (merge request)
• Don't fail extension API getter (merge request)
• Align DAST Site Token URL validation (merge request) GitLab Enterprise Edition
• Add auditor access for dependency proxy (merge request) GitLab Enterprise Edition
• Sets Gon variables in response to requests with invalid reCAPTCHA (merge request)
• Fix 2-factor QR code on small screens (merge request)
• Fix padding regression for SAML SSO sign in (merge request) GitLab Enterprise Edition
• Fix SFE commit message focus (merge request)
• Fix drag and drop issue description list item bugs (merge request)
• Fix REST runner API status filter documentation (merge request)
• Fix inconsistent focus on comment field (merge request)
• Added check for GraphQL ID on popover (merge request)
• Fix focus ring for linked issues input field (merge request)
• Remove streams tab from subgroups audit events UI (merge request) GitLab Enterprise Edition
• Set MailRoom's postback request content type to text/plain (merge request)
• Update account deletion instructions (merge request)
• Remove superfluous whitespace in link to pipeline by @KevSlashNull (merge request)
• Highlight active CRM page in navigation menu by @leetickett (merge request)
• Fix vertical alignemnt of comment icons (merge request)
• docs: Use clear deprecation/removal as examples by @tnir (merge request)
• Hide a dropdown tooltip when toggling by @petewaitforletters (merge request)
• Fix focus overflow on create new label (merge request)
• Delete the duplicate job even in case of errors (merge request)
• docs: Fix DS_DEFAULT_ANALYZERS variable docs by @tnir (merge request)
• Fix custom notification settings for releases (merge request)
• gitaly_client: Fix handling of custom hook errors in UserMergeBranch (merge request)
• Remove existing repository backups when creating a full backup (merge request)
• Fix multiple modals showing when canceling comment in diff (merge request)
• Fix references in wiki pages (merge request)
• Resolve invite member trigger qa selector ambiguity (merge request)
• Update test case and MR popover status badges (merge request)
• Move LFK scheduling out from EE check (merge request)
• Allow users to reset DAST submit field (merge request) GitLab Enterprise Edition
• Fix LabelToken selecting wrong label (merge request)
• Add support for configuring internal IPs (merge request)
• Fix fogbugz ignoring target name and group change (merge request)
• Fix duplicate results in MR pipelines resolver (merge request)
• Fix UTF-8 handling issue for internal mailroom endpoint (merge request)
• Hide internal note checkbox on unsupported types (merge request) GitLab Enterprise Edition
• Grant auditor role read-access to policies (merge request) GitLab Enterprise Edition
• Fix missing action buttons when editing Requirements (merge request)
• Sanitize user input on the harbor registry list page by @orozot (merge request)
• Cleanup backup staging files on failure (merge request)
• Fix issues list previous page bug (merge request)
• Geo Sites - Unknown WAL bug (merge request) GitLab Enterprise Edition
• Fix button text color in dark mode (merge request)
• Use merge_head_diff for code owners (merge request)
• Disallow guests from updating an issue promoted to incident by @nfason (merge request)
• Add correct Default.md MR template precedence handling (merge request)

Changed (453 changes)

• Extend logging for Mirror jobs (merge request)
• Consider patches for eligible runner releases (merge request)
• Introduced /ready quick action by @stingrayza (merge request)
• Use Labkit for checking and enabling FIPS (merge request)
• Migrates spacing class for edit button on release (merge request)
• Migrates spacing class for authenticating github (merge request)
• Enable Geo proxying for separate URLs by default (merge request) GitLab Enterprise Edition
• Migrate spacing classes for feature flag form (merge request)
• Migrates spacing class for commit sidebar of ide (merge request)
• Update CiJobConnection.count to limited count (merge request)
• Migrate link button to tertiary in design management (merge request)
• Drop permissions column from ci_secure_files table (merge request)
• Change form_errors to be pajamas compliant in admin settings (merge request)
• Migrates spacing classes on release overview page (merge request)
• Removed useCustomErrorHandler and callback options (merge request)
• Migrate spacing classes on search overview page (merge request)
• Apply standard registration flow to single-sign on registrations (merge request)
• Fixes the spacing for the contributors buttons (merge request)
• Migrates custom classes for project search (merge request)
• Migrates the spacing for milestone icon analytics (merge request) GitLab Enterprise Edition
• Migrate errors in create user to Pajamas alert (merge request)
• Adds loading for package details additional metadata (merge request)
• Migrates spacing classes for empty approval rule (merge request) GitLab Enterprise Edition
• Fixes spacing for buttons of broadcast message (merge request)
• Migrates spacing class of assignee of related item (merge request)
• Migrates to gl class for checkbox to select commit (merge request)
• Migrates spacing class in security dashboard (merge request) GitLab Enterprise Edition
• This MR updated CI/CD configuration flow (merge request) GitLab Enterprise Edition
• Add has_vulnerabilities to cluster_agents (merge request)
• Update gray-10 from #fafafa to #f5f5f5 (merge request)
• Improve error messages when fetching Jira user information (merge request)
• Migrate repo storage errors to Pajamas alert (merge request)
• Update docs milestone description for alpha (merge request)
• Decrease spacing between checkbox and button (merge request)
• Conditional dropdown value in invite modals (merge request)
• Migrates the spacing for icon in web ide header (merge request)
• Update group deletion protection settings (merge request) GitLab Enterprise Edition
• Migrates the spacing class for sort dropdown (merge request) GitLab Enterprise Edition
• Disable reading remdiation records (merge request) GitLab Enterprise Edition
• Migrates the spacing classes for label search (merge request)
• Support footnotes in client-side deserializer (merge request)
• Migrate the prioritize button (merge request)
• Updated servicedesk callout to BannerComponent (merge request)
• Migrates the spacing class for error severity (merge request)
• Env Folder component icon migration (merge request)
• Right sidebar improvements for collapsed state (merge request)
• Migrate pipeline_schedules/_form.html.haml to Pajamas::ButtonComponent (merge request)
• Enable dast_ui_redesign feature flag by default (merge request) GitLab Enterprise Edition
• Removes unused code for modal close button (merge request) GitLab Enterprise Edition
• Replace pencil-square icon with pencil icon (merge request)
• Migrates to gl class for right margin (merge request)
• Add approval_required entry to widget endpoing (merge request) GitLab Enterprise Edition
• Use RedHat OpenJDK packages in gemnasium-maven FIPS (merge request) GitLab Enterprise Edition
• Migrate the edit button (merge request)
• Backfill project feature 'package_registry_access_level' by @wwwjon (merge request)
• Improve Insights UI text (merge request) GitLab Enterprise Edition
• Migrates the button to request attention (merge request)
• Use chevron icon in mr_collapsible_extension.vue (merge request)
• Migrates the modal to remove related item (merge request) GitLab Enterprise Edition
• Update MR feature callout to BannerComponent (merge request) GitLab Enterprise Edition
• Enable feature flag for renamed integrations workers (merge request)
• Migrates the modal to discard changes in web ide (merge request)
• Allow CI_JOB_TOKEN auth for release links API by @tuxtimo (merge request)
• Event type information in streaming audit event for project download (merge request) GitLab Enterprise Edition
• Update Coverage-Fuzzing.gitlab-ci.yml (merge request)
• Migrate the deprioritize button (merge request)
• Migrate sidebar buttons for bulk update (merge request) GitLab Enterprise Edition
• Unbox Group audit events (merge request)
• Migrates the modal to reset webhook for pagerduty (merge request)
• Prevent page reload on switch board (merge request)
• Update banner implementation to use Pajamas banner (merge request) GitLab Enterprise Edition
• Migrate buttons to add/remove commits (merge request)
• Adjust empty runners state svg height (merge request)
• Migrates button to open sidebar for bulk updates (merge request) GitLab Enterprise Edition
• Update administrator settings for deletion protection (merge request) GitLab Enterprise Edition
• Removes incorrect gl-padding-50 variable (merge request)
• Update omniauth-dingtalk-oauth2 gem to v1.0.1 (merge request)
• Migrates modal to delete iteration (merge request) GitLab Enterprise Edition
• Enable FIPS mode for digest algorithms (merge request)
• Support autolink serialization in Content Editor (merge request)
• Update WebIDE job chevron icon (merge request)
• Migrate button to search projects on dashboard (merge request)
• Rename the "Dark" and "Light" theme to avoid confusion with "Dark Mode" (merge request)
• Migrates the modal to discard all changes (merge request)
• Migrate button component (merge request) GitLab Enterprise Edition
• Rename discussion comment button title (merge request)
• Update buttons on new project from CI/CD pane (merge request) GitLab Enterprise Edition
• Migrates button to revoke validation for dast (merge request) GitLab Enterprise Edition
• Migrates the button to add rotation for schedule (merge request) GitLab Enterprise Edition
• Migrates the button to expand sidebar (merge request)
• This MR migrates legacy html button to Pajamas button (merge request)
• Migrates the default value for deleting a design (merge request) GitLab Enterprise Edition
• Project Owners can approve access requests (merge request)
• Migrates modal to download test coverage report (merge request) GitLab Enterprise Edition
• Removed container_registry_namespace_statistics ff (merge request)
• Migrates the button to edit a blob file (merge request)
• Cleanup Child issues and epics (merge request)
• Update specs for integrations API to check all modifiable fields (merge request)
• Move IrkerWorker into Integrations:: namespace and rename queue (merge request)
• This MR migrates bootstrap legacy component to pajamas (merge request)
• Add Slack app installations to Service Ping (merge request) GitLab Enterprise Edition
• This MR migrates bootstrap legacy component to pajamas (merge request)
• Update MS Teams form to use sections (merge request)
• Migrate button to confirm user (merge request)
• Migrates the button to add on call schedule (merge request) GitLab Enterprise Edition
• Migrates the button to add an escalation policy (merge request) GitLab Enterprise Edition
• Migrates close button in details for test case (merge request)
• Migrates button to restart Web IDE terminal (merge request)
• Migrates the button to extend trial (merge request) GitLab Enterprise Edition
• Migrates button to view full dashboard (merge request)
• Migrates button to view documentation (merge request)
• Migrates button to view dashboard documentation (merge request)
• Migrates the guidance in docs for buttons (merge request)
• Migrates button to manage plan for subgroups (merge request) GitLab Enterprise Edition
• Migrates buttons to resync and reverify projects (merge request) GitLab Enterprise Edition
• Migrate access token form errors to be Pajamas compliant (merge request)
• Update admin error alerts to pajamas (merge request)
• Migrate the subscribe dropdown button (merge request)
• Updated icons in the group contributions table (merge request) GitLab Enterprise Edition
• Updated buttons in the project settings (merge request)
• Migrate the ellipsis button (merge request)
• Add url variables to web hooks (merge request)
• Migrate group visibility form errors to be Pajamas compliant (merge request)
• Migrate Admin -> Topic -> New form errors to be Pajamas compliant (merge request)
• Migrate alert in the onboarding flow (merge request) GitLab Enterprise Edition
• Migrate button in sidebar for bulk issues update (merge request)
• Migrate button in the group creation (merge request) GitLab Enterprise Edition
• Migrates buttons in labels nav partial (merge request)
• Migrate alert in the SSH key settings (merge request)
• Use Pajamas::AlertComponent for maintenance message by @ali_o_kan (merge request) GitLab Enterprise Edition
• Migrates 'Stop all jobs' button to Pajamas::ButtonComponent (merge request)
• This MR migrates legacy html button to Pajamas button (merge request)
• Migrate alert docs icon (merge request)
• Add pattern validation for cadence in Scan Execution Policy Schema (merge request) GitLab Enterprise Edition
• Migrate button to create branch (merge request)
• Add a descriptive empty state for runners (merge request)
• Migrate angle icon to chevron in deploy_board_wrapper.vue (merge request)
• Updated repository callout to BannerComponent (merge request) GitLab Enterprise Edition
• Updated buttons in the Repository mirror settings (merge request) GitLab Enterprise Edition
• Remove separator slot from new project breadcrumb (merge request)
• Remove require_auth_for_graphql_user_resolver feature flag (merge request)
• Disable job log checksums when FIPS enabled (merge request)
• Migrate angle icons to chevron icons in Paginator (merge request)
• Migrate angle icons to chevron icons in GraphGroup (merge request)
• Log worker_id for Puma and Sidekiq (merge request)
• Remove records for removed integrations (merge request)
• Migrate angle icons to chevron icons Kaminari (merge request)
• Bump Auto Deploy Image to v2.30.0 (merge request)
• This MR migrates legacy html button to Pajamas button (merge request)
• Migrate chevron icon compliance docs (merge request)
• Migrate angle to chevron in responsive header (merge request)
• Migrate chevrons in pagination buttons (merge request)
• Migrate chevrons in breadcrumbs (merge request)
• Update confidential issue permissions docs (merge request)
• Updated buttons in the group settings (merge request) GitLab Enterprise Edition
• Remove language arg (merge request) GitLab Enterprise Edition
• Determine security training feature accessibility (merge request)
• Replace terms angle icon for a chevron one (merge request)
• Change resolved -> detected on subsequent scans (merge request) GitLab Enterprise Edition
• Removes OpenStruct use by @mehulsharma (merge request)
• Rename cluster integration workers and their queues (merge request)
• Migrate chevron DM docs (merge request)
• Migrate web ide icon docs (merge request)
• Autodevops docs chevron icon migration (merge request)
• Unbox & Cleanup Compare merge request (merge request)
• Replaced generic inputs in the Web IDE (merge request)
• Restore md spinner in MR status widget (merge request)
• Make captcha check over POST rather than GET (merge request) GitLab Enterprise Edition
• Update contextual sidebar background and border (merge request)
• Add missing page-title & font-size-h-display classes (merge request)
• Supported 'language' editor instance option (merge request)
• Change what makes migrations completed (merge request) GitLab Enterprise Edition
• Clean up group_member_inherited_group feature flag by @wwwjon (merge request)
• Update h1 to use .gl-font-size-h-display class (merge request)
• Migrates the create commit button in Web IDE (merge request)
• Replace angle icons for chevron in registry breadcrumb (merge request)
• Migrates the learn more about AWS button (merge request)
• Migrates the export requirements modal (merge request) GitLab Enterprise Edition
• Replace angle icons for chevron in groups (merge request)
• Use tertiary button for alert sidebar assignee (merge request)
• Fix attribute inheritance in workers (merge request)
• Revert data consistency to always (merge request)
• Remove branch names from conflict count (merge request)
• Cleanup Schedule a new pipeline form page (merge request)
• Cleanup New environment page (merge request)
• Migrates the skeleton in terraform MR widget (merge request)
• Migrates the modal to delete an integration (merge request)
• Cleanup New Test Case page (merge request)
• Cleanup New/Edit feature flag form (merge request)
• Add limits on number of scheduled security scan pipelines (merge request)
• Migrates the run pipeline modal in commit (merge request)
• Remove async_mr_close_issue feature flag (merge request)
• Remove use_received_header_for_incoming_emails feature flag (merge request)
• Change loading state (merge request)
• Migrates the feature flag modal to not use ok (merge request)
• Update search settings placeholder text (merge request)
• Improve Debian version regexp by @sathieu (merge request)
• Migrates the skeleton loader for requirements (merge request) GitLab Enterprise Edition
• Update group compliance framework labels (merge request) GitLab Enterprise Edition
• Replace angle icons for chevron in package details (merge request)
• Finally get rid of all btn-warning code (merge request)
• Migrates the configure regions button for GCP (merge request)
• Don't delete expired artifacts undergoing refresh (merge request)
• Change awards active item state (merge request)
• Limit the response being logged from the WebhookWorker (merge request)
• Migrates the download test coverage report button (merge request) GitLab Enterprise Edition
• Refactor storage helper date checking (merge request)
• Update to bundler v2.3.15 (merge request)
• Add phone_verification_code_enabled to ApplicationSettings by @zhzhang93 (merge request)
• Change angle icon (merge request)
• Add invalid approvers to be further used by (merge request) GitLab Enterprise Edition
• Graduate update_storage_usage_design feature flag (merge request) GitLab Enterprise Edition
• Replace angle icons to chevron in admin dashboard (merge request)
• Bump Gitlab Shell version (merge request)
• Cleanup New user form (merge request)
• Improve sidebar styling (merge request)
• Expose alert status (merge request)
• Make sidebar in MRs sticky (merge request)
• This MR replaces outdated skeleton-loading (merge request)
• Use agent name in the agent installation command (merge request)
• Bring DAST templates back inline (merge request) GitLab Enterprise Edition
• Improve editing experience of footnotes (merge request)
• Migrate to tertiary buttons in DropdownContentsCreateView (merge request)
• Update premailer gem to v1.16.0 (merge request)
• Add focus ring to all links (merge request)
• Enable route_hll_to_snowplow_phase2 FF by default (merge request)
• Cleanup New/Edit Label pages (merge request)
• Update gitlab-fog-azure-rm for Ruby 3.0 compatibility (merge request)
• Update more in-app checkout CSS utility classes (merge request)
• Unbox Label pages for Group & Projects (merge request)
• Require authentication when enumerating users via GraqhQL (merge request)
• Left align CTAs and remove background color (merge request)
• Added count in project_type (merge request)
• Clean up feature flag for release path fix (merge request)
• Migrate to a tertiary button in DropdownContentsLabelsView (merge request)
• Cache container repositories size on namespace (merge request)
• Remove unwanted title attribute (merge request) GitLab Enterprise Edition
• Migrate push rules edit alert to Pajamas ViewComponent (merge request) GitLab Enterprise Edition
• Add trigger section definition to form (merge request)
• Enable new issue reference popovers (merge request)
• Report warnings from the timebox resolver (merge request)
• Upgrade re2 gem to v1.4.0 (merge request)
• Update auto-deploy-image to v2.28.2 (merge request)
• Migrates the skeleton in overview discussion notes (merge request)
• Remove integrations.properties column (merge request)
• Migrates the analytics on group overview page (merge request) GitLab Enterprise Edition
• Rename ProjectServiceWorker to Integrations::ExecuteWorker (merge request)
• Migrate to a tertiary button in Dependency List (merge request) GitLab Enterprise Edition
• Run RubySampler and ThreadSampler in Puma primary (merge request)
• Move VSA task by type description into dropdown (merge request) GitLab Enterprise Edition
• Migrate skeleton loader in MR popover (merge request)
• Enable Slack app OauthV2 flow (merge request) GitLab Enterprise Edition
• Migrate skeleton in Web IDE file tree list (merge request)
• Migrate skeleton loader for test coverage summary (merge request) GitLab Enterprise Edition
• Migrates skeleton loader in issuables list (merge request)
• Add text related to policy status (merge request) GitLab Enterprise Edition
• Migrates the buttons when adding a metrics panel (merge request)
• Use the minimal layout for the in-app checkout flows (merge request) GitLab Enterprise Edition
• Improve styling of dropzone (merge request)
• Add reason for unauthorized in jira connect API (merge request)
• Migrate resolve button in error tracking (merge request)
• Migrates more details button in error tracking (merge request)
• Migrates the edit policy button in drawer (merge request) GitLab Enterprise Edition
• Migrates the modal to promote a milestone (merge request)
• Migrates the modal to edit LDAP user (merge request) GitLab Enterprise Edition
• Remove "other role" details during signup (merge request)
• Migrates radio buttons for strategy of auto devops (merge request)
• Migrate issuable form branch chooser alert to Pajamas ViewComponent (merge request)
• Improve focus states of downstream cards (merge request)
• Migrates the save changes button to edit geo site (merge request) GitLab Enterprise Edition
• Improve UI text of group Templates setting (merge request) GitLab Enterprise Edition
• Migrates skeleton loader for projects in runner (merge request)
• Migrates radio buttons in add license form (merge request) GitLab Enterprise Edition
• Migrate path skeleton in value stream analytics (merge request)
• This MR replaces outdated skeleton-loading (merge request)
• Migrates the resolve conflict button in diff view (merge request)
• Migrates the display anyway button for math (merge request)
• Increase margin in Sec. Dashboard cards (merge request) GitLab Enterprise Edition
• Migrates skeleton for cluster details in table (merge request)
• Remove orphaned commits from Advanced Search index (merge request) GitLab Enterprise Edition
• Migrates the skeleton for notes in diffs (merge request)
• Migrates the save changes button to add metric (merge request)
• Migrate button to go to Confluence (merge request)
• Migrates the add button in form for stream (merge request) GitLab Enterprise Edition
• Migrate action buttons in security (merge request) GitLab Enterprise Edition
• Migrates the add stream button in audit events (merge request) GitLab Enterprise Edition
• Migrates the skeleton for system notes (merge request)
• Migrates the create service account button for gcp (merge request)
• Remove failed_jobs_tab_vue feature flag (merge request)
• Migrate skeleton loader in runner jobs list (merge request)
• Migrates the button to archive a test case (merge request) GitLab Enterprise Edition
• Remove minutes quota copy from banner (merge request)
• Remove unnecessary ExecStop from sidekiq service file by @behrmann (merge request)
• Migrates button in modal for hand raise leads (merge request) GitLab Enterprise Edition
• Migrates the skeleton loader in markdown preview (merge request)
• Migrate wiki/issue rebalancing alert to Pajamas ViewComponent (merge request)
• Clean up background migration BackfillIntegrationsEnableSslVerification (merge request)
• This MR replaces outdated skeleton-loading (merge request) GitLab Enterprise Edition
• This MR replaces outdated skeleton-loading (merge request) GitLab Enterprise Edition
• Use CreateOrchestrationPolicyWorker to schedule SyncScanPoliciesWorker (merge request) GitLab Enterprise Edition
• Migrates the submit button to add a new license (merge request) GitLab Enterprise Edition
• Migrates dropdown item in options for error (merge request)
• Change pending text on members page for awaiting members (merge request) GitLab Enterprise Edition
• Allow delete of protected tags if user has authority by @eggerd (merge request)
• Migrates the button in burndown charts (merge request) GitLab Enterprise Edition
• New issue visual cleanup (merge request)
• Migrates skeleton loader in value stream analytics (merge request)
• Remove unused helper method with warning button (merge request) GitLab Enterprise Edition
• Migrates the install button for mattermost teams (merge request)
• Provide can_admin_vulnerability attribute to instance security dash (merge request) GitLab Enterprise Edition
• Migrates the button in the leave group modal (merge request)
• Migrates revoke approval button in merge request (merge request)
• Migrates the dismiss vulnerability button in modal (merge request) GitLab Enterprise Edition
• Sets "Dismiss selected" button variant to default (merge request) GitLab Enterprise Edition
• This MR migrates radio button to pajamas radio component (merge request)
• Migrates the radio to say who is using gitlab (merge request) GitLab Enterprise Edition
• Create index for deployment_approvals on created_at and id (merge request)
• No-op FixMergeRequestDiffCommitUsers background migration (merge request)
• Enable 'automaticLayout' option for Source Editor (merge request)
• Cleanup New merge request selection step (merge request)
• Migrates the clone dropdown (merge request)
• Cleanup New Epic (merge request)
• Remove 'delayed_repository_update_mirror_worker' feature flag (merge request)
• Update empty state of Slack Application page (merge request) GitLab Enterprise Edition
• Migrates the example in docs from success (merge request)
• Migrate angle to chevron in group templates (merge request) GitLab Enterprise Edition
• Migrates the button in the promote label modal (merge request)
• Migrates button to cherry pick commits (merge request)
• Migrate skeleton for unconfigured security rules (merge request) GitLab Enterprise Edition
• Migrates the save changes button for value streams (merge request) GitLab Enterprise Edition
• Migrates the skeleton in usage counts (merge request)
• Migrates the radio mention in cascading settings (merge request)
• Migrates the radio to say who will be using group (merge request)
• Migrates the radio buttons in whats new settings (merge request)
• Align Webhooks settings entry order (merge request) GitLab Enterprise Edition
• Migrate button to view issue for error (merge request)
• Migrates the start web terminal button in web ide (merge request)
• Migrate use template button for custom templates (merge request) GitLab Enterprise Edition
• Migrate pages domain alert to Pajamas ViewComponent (merge request)
• Migrates try out pipeline button in mr widget (merge request)
• Migrates the save changes button for new geo site (merge request) GitLab Enterprise Edition
• Migrate button to confirm users email (merge request)
• Migrate push rules edit alert to Pajamas ViewComponent (merge request) GitLab Enterprise Edition
• Reject some requests that may conflict with project stats refresh (merge request)
• Migrates button to add approval rule in MR (merge request)
• Migrate project new tag alert to Pajamas ViewComponent (merge request)
• Migrates the revoke oauth button for GCP (merge request)
• Migrates the CLI Commands dropdown for containers (merge request)
• Migrates the button to trigger a manual job (merge request)
• Add script keyword link in tooltip (merge request)
• Migrates the configure button for feature flags (merge request)
• Change order of displayed years in CI minutes app (merge request) GitLab Enterprise Edition
• Rearrange user popover content for better overview (merge request)
• Migrate admin emails to Pajamas ViewComponent (merge request) GitLab Enterprise Edition
• Enforce Migration[2.0] to make all migrations decomposition supported (merge request)
• Clean up vulnerabilities over time chart and improve tests (merge request) GitLab Enterprise Edition
• Migrate storage limit alert to Pajamas (merge request) GitLab Enterprise Edition
• Migrate remove cluster buttons (merge request)
• Refine mini pipeline graph states (merge request)
• Migrate above size limit alert to Pajamas ViewComponent (merge request) GitLab Enterprise Edition
• Add upstream pipeline attributes in pipeline hooks by @AdrianLC (merge request)
• Migrates the upload file button for secure files (merge request)
• Migrates the clear cluster cache button (merge request)
• Removes the configure later button (merge request)
• Make ci_owned_runners_* FF on by default (merge request)
• Header add focus ring to more elements (merge request)
• Update MR widget styling (merge request)
• Update Gitlab Shell version to 14.7.1 (merge request)
• Clean up security dashboard layout (merge request) GitLab Enterprise Edition
• Improve error display for Zentao issue by @icbd (merge request) GitLab Enterprise Edition
• Remove execute_batched_migrations_on_schedule_ci_database (merge request)
• Update incident escalation policy when alert status is first synced (merge request)
• Update all versions of n/a or N/A to Not applicable by @ali_o_kan (merge request)
• Migrates the Elasticsearch retry migration button (merge request) GitLab Enterprise Edition
• Migrates the button for updating the username (merge request)
• Contribution Analytics - Deprecate seg control (merge request) GitLab Enterprise Edition
• Add validation for namespace on compliance frameworks (merge request) GitLab Enterprise Edition
• Remote h1 from site logo (merge request)
• Add end_event_timestamp to the stage records JSON response (merge request)
• Unbox Designs on issues (merge request)
• Disable Content-MD5 when FIPS is enabled (merge request)
• Migrate archive button in design (merge request)
• Make improvements to group repo analytics UX (merge request) GitLab Enterprise Edition
• Align note actions to Pajamas icon button styles (merge request)
• Migrates the button to add approval rule (merge request) GitLab Enterprise Edition
• Migrates the unprotect environment button (merge request) GitLab Enterprise Edition
• Geo Sites - Link to replication views (merge request) GitLab Enterprise Edition
• Sort projects by CI minutes usage in Usage Quotas page (merge request) GitLab Enterprise Edition
• Migrates the button to change group URL (merge request)
• Migrate the lock button in the sidebar (merge request)
• Migrate button in inline collapsed files alert (merge request)
• Migrate button in alert for collapsed files (merge request)
• Change next_aborted_repository take to limit(2)[0] (merge request)
• Added trigger for namespace_aggregation_worker (merge request)
• Migrate button in alert for mermaid limit (merge request)
• Migrate add project button in operations dashboard (merge request) GitLab Enterprise Edition
• Container Registry: cleanup expire icon changed by @TrayHard (merge request)
• Rename Projects::ServicesController and change routes (merge request)
• Migrate checkbox for mattermost with new group (merge request)
• Remove unused state and function by @JonstonChan (merge request)
• Migrate confirm user button (merge request)
• Migrate service ping consent button (merge request)
• Migrate trigger cluster reindexing button (merge request) GitLab Enterprise Edition
• Migrate buttons in user count alert (merge request) GitLab Enterprise Edition
• Migrate purchase storage button in alert (merge request) GitLab Enterprise Edition
• Migrate enable Service Desk button in info (merge request)
• Update Gitlab Shell version to 14.6.0 (merge request)
• Use backend to send security training status instead of using GraphQL (merge request)
• Forbid creating streaming destinations for subgroups (merge request) GitLab Enterprise Edition
• Add structured error parsing for user_cherry_pick (merge request)
• Verify group name is valid inside of the purchase flow (merge request) GitLab Enterprise Edition
• Add filters by milestone, author, and assignee to task by type (merge request) GitLab Enterprise Edition
• Change edit profile inputs to be full width on mobile (merge request)
• Add shared runner duration to table (merge request) GitLab Enterprise Edition
• Backfill project member namespace id (merge request)
• In emails, style implicit links too by @smokris (merge request)
• Bump Gitlab Shell version to 14.5.0 (merge request)
• Add focus to old form elements (merge request)
• Adjust placement of DAST profile conflict banner (merge request) GitLab Enterprise Edition
• Allow version conflicts in commits migration (merge request) GitLab Enterprise Edition
• Migrate enable service desk button to confirm (merge request)
• Clarify required permission for GitLab Migration by @qb60 (merge request)
• Ghost-userize Threat Insights models on deletion (merge request) GitLab Enterprise Edition
• Migrate save edited snippets comment to confirm (merge request)
• Rename storage to project storage (merge request)
• Exclude date-range controls from loading state (merge request) GitLab Enterprise Edition
• Change group usage quota ux (merge request)
• Update Slack application settings form labels (merge request) GitLab Enterprise Edition
• Redesign package details history loading experience (merge request)
• Bump Gitlab Shell version to 14.4.0 (merge request)
• Fix the odd spacing in the sidebar between Milestone and Iteration (merge request)
• Adding ordered scope to Project-level Secure Files (merge request)
• Increase size of sidebar nav sidebar (merge request)
• Define states parameter in environments api interface (merge request)
• Update commits migration options (merge request) GitLab Enterprise Edition
• Update report schema selection process description (merge request)
• Add enhanced schema for security policies (merge request) GitLab Enterprise Edition
• Scope batched background migrations to current gitlab_schema (merge request)
• Pipeline quota: Sort projects by CI minutes (merge request) GitLab Enterprise Edition
• Swap FK web_hook_logs to web_hooks for LFK (merge request)
• Bump Gitlab Shell version to 14.3.1 (merge request)
• Migrates start free trial button to confirm (merge request) GitLab Enterprise Edition
• Update expires at field to remove the current date from possible options (merge request)
• Migrate save identity button to confirm variant (merge request)
• Migrate new identity button to confirm variant (merge request)
• Added docs links to the keyword tooltips in the pipeline editor by @shridharbhat1998 (merge request)
• Change logo to use tanuki-only (merge request)
• Change navbar height to 48px (merge request)
• Approvals summary content font-weight fix (merge request)
• Add breadcrumb link to release when editing (merge request)
• Generalize Mailgun webhook endpoints (merge request)
• Update icons and text (merge request)
• Improve container registry image copy tooltips (merge request)

Deprecated (4 changes)

• Deprecate project_fingerprint from finding (merge request) GitLab Enterprise Edition
• PipelineSecurityReportFinding.name deprecated flag (merge request) GitLab Enterprise Edition
• Remove geo_lfs_object_delete_events table and references (merge request)
• Deprecate ApiFuzzingCiConfigurationCreate mutation (merge request) GitLab Enterprise Edition

Removed (24 changes)

• Remove the vsa_consistency_worker FF (merge request)
• Remove remove_diff_header_icons feature flag (merge request)
• Remove already used worker as part of a previous (merge request) GitLab Enterprise Edition
• Remove the manual renewal banner (merge request) GitLab Enterprise Edition
• Remove sandboxed_mermaid feature flag (merge request)
• Revert "Merge branch 'ag/348481-saas-seats-count-alert-member-numbers' into 'master'" (merge request)
• Remove the vsa_incremental_worker feature flag (merge request)
• Remove metrics for SSE feature (merge request)
• Remove old Prometheus::CreateDefaultAlertsWorker (merge request)
• Remove prometheus alert index path and usage (merge request)
• Remove container_security_policy_selection related code (merge request) GitLab Enterprise Edition
• Remove ci_owned_runners_unnest_index feature flag (merge request)
• Remove ci_owned_runners_cross_joins_fix feature flag (merge request)
• Remove Cluters Schedule update service (merge request)
• Remove all SSE references (merge request)
• Drop token column from deploy_tokens table (merge request)
• Merge branch 'feat/remove-project-daily-statistics-worker' into 'master' (merge request)
• Remove 'namespaces_cache_first_auto_devops_config' feature flag (merge request)
• Remove 'group_projects_api_preload_groups' feature flag (merge request)
• Remove compliance_framework_setting from project edit API (merge request) GitLab Enterprise Edition
• Remove ignore_column for security_scan_succeeded by @svdj (merge request)
• Remove Pages legacy storage rake tasks by @feistel (merge request)
• Delete threat_monitoring alerts (merge request)
• Drop compliance frameworks regulated column (merge request) GitLab Enterprise Edition

Security (11 changes)

• Remove access_token_ajax feature flag (merge request)
• Update rack gem to version 2.2.3.1 (merge request)
• Subgroup member can list members of parent group
• Fix content injection in Jira issue title
• Trigger token should respect group IP restrictions
• Do not allow project member import when membership is locked
• Disable changing user attributes when updating SCIM provisioned user
• Escape contact details correctly in quick actions
• Allow only job owner to run interactive terminal
• Remove sha from releases internal API (merge request)
• Fix IP restrictions not applying to deploy tokens

Performance (24 changes)

• Add index to improve open issues count query (merge request)
• Introduce timeout to markup rendering (merge request)
• Replace API order by created_at with order by id (merge request)
• Move Elasticsearch project transfer to async worker (merge request) GitLab Enterprise Edition
• Delete repositories without renaming them first (merge request)
• Reduce response cost of deploy keys autocompleter by @hchouraria (merge request)
• Fix N+1 queries for Changelog generation (merge request)
• Prevent processing markdown when copying notes (merge request)
• Preload avatar_url for CompareController (merge request)
• Preload associations for RepositoryUpdateMirrorWorker (merge request) GitLab Enterprise Edition
• Finalize new index and update schema (merge request)
• Fix SQL statement timeout while fetching inactive projects (merge request)
• Add traversal_ids index when type is group using btree (merge request)
• Fix N+1 issue for CompareController (merge request)
• access_checks: Always enable use of quarantine directory (merge request)
• Preload commits markdown cache for CommitsController (merge request)
• Improve performance of namespace existence lookup (merge request)
• Reduce N+1 queries in deployment_group of environment model (merge request)
• Use request cache for protected tags (merge request)
• Create new index for removing artifacts with unknown locked status (merge request)
• Remove redundant issues list GraphQL queries by @leetickett (merge request)
• Extract ServicePing payload persistance (merge request)
• Optimizations for CommitReferenceFilter (merge request)
• Preload deployment associations to reduce N+1 queries (merge request)

Other (60 changes)

• Only do LSIF processing on artifacts (merge request)
• Use OS tempdir for LSIF parsing (merge request)
• Add yml files for tracking incident timeline actions (merge request)
• Remove omit_epic_subscribed feature flag (merge request) GitLab Enterprise Edition
• Remove ci_jwt_signing_key feature flag (merge request)
• Remove faster_owner_access feature flag (merge request)
• Adding listing feature flags command to documentation (merge request)
• Change destination_name to destination_slug (merge request)
• Remove ignore rule from test reports (merge request) GitLab Enterprise Edition
• Remove stale runner cleanup feature flag (merge request)
• Update hook settings error alert (merge request)
• Removed unused gl-col-padding variable (merge request)
• Add caching for group activity counters (merge request) GitLab Enterprise Edition
• Add CI_PROJECT_DESCRIPTION to predefined variables by @nejc (merge request)
• Remove paginated_notes feature flag (merge request)
• Improve performance of Issuable finder (merge request)
• Skip CSRF protection on Workhorse internal API (merge request)
• Rename confidential refs to internal (merge request) GitLab Enterprise Edition
• Remove usage_data_i_incident_management_oncall_notification_sent FF by @feistel (merge request)
• Add database column and setting logic for license_usage_data_exported (merge request)
• Prepare index to improve counting of open issues (merge request)
• Remove rake task to set up EE specific database functionality (merge request)
• Remove the CI mirror tables consistency checks Feature Flags (merge request)
• Delete invalid epic_issue records migration (merge request)
• Add workhorse internal upload API, observation only (merge request)
• Update manual cadence deprecation message (merge request) GitLab Enterprise Edition
• Finalize issue search data migration (merge request)
• Remove enqueue twice option from EnqueuerWorker (merge request)
• Fix Style/OpenStructUse offenses by @edith007 (merge request)
• Rename 'repo by url' to repository by url' by @feistel (merge request)
• Track clicks on the pipeline editor help drawer (merge request)
• Remove gitaly_replace_wiki_create_page flag (merge request)
• Add sketch blob viewer by @mihes3d (merge request)
• Guard worker application setting timeouts (merge request)
• Delete vue_issues_list feature flag (merge request)
• Remove FF ci_trigger_forward_variables (merge request)
• Remove omniauth_initializer_fullhost_proc FF (merge request)
• Delete unused report_not_configured_operational.vue and its test (merge request) GitLab Enterprise Edition
• Drop temporary index not needed anymore (merge request)
• Remove touch_project_repository_state_updated_at FF (merge request)
• Finalize background migration for discussion IDs (merge request)
• Fix callouts test by @chaomao (merge request) GitLab Enterprise Edition
• Support push options when creating merge request pipelines (merge request) GitLab Enterprise Edition
• Rename ci runner migration (merge request)
• Defer database query in favor of cached value check (merge request)
• Use application settings for pipeline creation rate limit (merge request)
• Prepare for lazy upload preauth (merge request)
• Do not vary upload tempfile prefix (merge request)
• Workhorse: fix TestUploadProcessingFile (merge request)
• Create ClusterEnabledGrant model and populates table (merge request)
• Debug batch update (merge request)
• Fix countries controller test by @chaomao (merge request)
• Cleanup phase 4 feature flag and env vars (merge request)
• Remove cross-db modification from destroy_batch_service (merge request) GitLab Enterprise Edition
• Cleanup the database_geo.yml stuff (merge request) GitLab Enterprise Edition
• Mark stale security_scans as purged (merge request) GitLab Enterprise Edition
• Fix confirm email service test by @chaomao (merge request)
• Restructure free user cap under model for better scoping (merge request)
• Fix JH skipped subscription portal spec by @chaomao (merge request)
• Add not null constraint to requirements.issue_id validate:false (merge request)

15.0.5 (2022-07-28)

Security (18 changes)

• Security datadog integration leaking (merge request)
• Prevent users who cannot admin a public project from viewing deploy keys (merge request)
• Add additional condition to accept invitation (merge request)
• Update GITLAB_PAGES_VERSION (merge request)
• Add html_escape to build_details_entity (merge request)
• Check permissions when filtering by contact or organization (merge request)
• Use author to run subscribed pipeline (merge request)
• Remove prohibited branches after project import (merge request)
• Remove feature flag ci_yaml_limit_size (merge request)
• Maintainer can change the visibility of Project and Group (merge request)
• Do not link unverified secondary emails with any users (merge request)
• Forbid exchanging access token for ROP flow to users required 2FA setup (merge request)
• Remove todos from confidential notes when user loses access (merge request)
• Remove group_bot_user and group_access_token after group delete (merge request)
• Protect integration secrets (merge request)
• Protect Grafana and Sentry integrations (merge request)
• Fix IDOR in Jira issue show action (merge request)
• Limit proxied requests to Grafana API (merge request)

15.0.4 (2022-06-30)

Security (17 changes)

• Fix group IP restrictions not enforced for container registry requests (merge request)
• Update rack gem to version 2.2.3.1 (merge request)
• Gitlab Runner version upgrade (merge request)
• Update ProjectAttributesTransformer to use fixed number of attributes (merge request)
• Escape deploy key title to prevent XSS (merge request)
• Sanitize ZenTao breadcrumb links (merge request)
• Fix permissions in the project labels API (merge request)
• Security fix sentry issue leaks and access level check (merge request)
• Check permissions before exposing user two factor enabled (merge request)
• Filter milestone release by user access (merge request)
• Fix the required access level in the Conan packages finder (merge request)
• Allow inviting only groups with subset of allowed domains to groups (merge request)
• Fix open redirect vulnerability (merge request)
• Adds a filter based on user access to Runner jobs endpoint (merge request)
• Prevent runners from picking IP restricted jobs (merge request)
• Restrict CI lint access to pipeline creators (merge request)
• Catch endless headers when reading HTTP responses (merge request)

15.0.3 (2022-06-16)

Fixed (2 changes)

• Disconnect alternates when unlinking from a repository pool (merge request)
• Add GitLab agent image tag to install command (merge request)

15.0.2 (2022-06-06)

Added (1 change)

• Add event type in audit event streaming (merge request) GitLab Enterprise Edition

Fixed (10 changes)

• Fix Advanced Search Opensearch detection (merge request) GitLab Enterprise Edition
• Fix 500 on issues list page (merge request)
• Include inherited owners when calculating User#solo_owned_groups (merge request)
• Fix issue description list item styling (merge request)
• Fix focus for linked issues input field & IDE cursor (merge request)
• docs: Fix DS_DEFAULT_ANALYZERS variable docs (merge request)
• Remove existing repository backups when creating a full backup (merge request)
• Move LFK scheduling out from EE check (merge request)
• Fix drag and drop list item bugs (merge request)
• Hide internal note checkbox on unsupported issuable types (merge request) GitLab Enterprise Edition

Changed (1 change)

• Update auto-deploy-image to v2.28.2 (merge request)

15.0.1 (2022-06-01)

Security (8 changes)

• Fix IP restrictions not applying to deploy tokens (merge request)
• Trigger token should respect group IP restrictions (merge request)
• Fix content injection in Jira issue title (merge request)
• Escape contact details correctly in quick actions (merge request)
• Subgroup member can list members of parent group (merge request)
• Do not allow project member import when membership is locked (merge request)
• Disable changing user attributes when updating SCIM provisioned user (merge request)
• Allow only job owner to run interactive terminal (merge request)

15.0.0 (2022-05-20)

Added (147 changes)

• Self-managed SAML Group Links and Membership Updater (merge request) GitLab Enterprise Edition
• Show error message in pipeline alert (merge request)
• Upgrade GitLab Pages to 1.58.0 (merge request)
• Drag and drop list items on issue page (merge request)
• Default enable automated_email_provision feature flag (merge request) GitLab Enterprise Edition
• Bump Gitlab Shell version to 14.3.0 (merge request)
• Add documentation for inactive project deletion feature (merge request)
• Enable confidential_notes FF by default (merge request)
• Add slack_app_signing_secret to settings (merge request)
• Add a 409 error page (merge request)
• Store pipeline creation rate limit into application settings (merge request)
• Add REPOSITORIES_STORAGES option to backups (merge request)
• Add option to disable seperated caches by @Taucher2003 (merge request)
• Merge Agents and Agent Tokens API docs by @tuxtimo (merge request)
• Enable poetry.lock dependency scanning (merge request) GitLab Enterprise Edition
• Add exclude from free user cap to namespace settings (merge request)
• Add infinite scrolling to project dropdown (merge request) GitLab Enterprise Edition
• Enable feature flag iteration_cadences (merge request) GitLab Enterprise Edition
• GraphQL: Add maintenance_note to RunnerType (merge request)
• Use Gemnasium FIPS images automatically (merge request)
• Default CRM feature flags to on by @leetickett (merge request)
• Add link from issue contacts to issues list by @leetickett (merge request)
• Add alert banner to usage quota seats page (merge request) GitLab Enterprise Edition
• Extend /help/instance_configuration with CI/CD limits by @wwwjon (merge request)
• Make group import history page size persistent by @wspwebben (merge request)
• Add registry migration guard timeout settings (merge request)
• Add group push rule changes to audit log (merge request) GitLab Enterprise Edition
• Bump Gitlab Shell version to 14.2.0 (merge request)
• Add inactive projects deletion feature (merge request)
• GraphQL: Add allowStaleRunnerPruning to Group (merge request) GitLab Enterprise Edition
• Add merge_request.draft to push options by @svdj (merge request)
• Add NamespaceCiCdSettingsUpdate mutation (merge request) GitLab Enterprise Edition
• Add API to set membership state (merge request) GitLab Enterprise Edition
• Add export size limit for projects by @wwwjon (merge request)
• Add API endpoint for repository size recalculation (merge request)
• Convert newline symbols in description push options to actual newlines by @svdj (merge request)
• Support security report schema version 14.1.2 (merge request)
• Add Runner separation by plan PoC (merge request)
• Display a cancel button in policies page (merge request) GitLab Enterprise Edition
• Implement Cluster Agent Tokens REST API by @tuxtimo (merge request)
• Increased the time tracking report modal size by @zillemarco (merge request)
• Allow pruning of stale group runners (merge request) GitLab Enterprise Edition
• Add index to namespace_ci_cd_settings table (merge request)
• Allow linking CRM organizations to contacts by @leetickett (merge request)
• Backfill draft status column using corrected regex (merge request)
• Validate a tag does not have an existing release (merge request)
• Exposed user permissions for each timelog entry by @zillemarco (merge request)
• Bump Gitlab Shell to 14.1.1 (merge request)
• Add 2 last DORA metric tiles to VSA (merge request) GitLab Enterprise Edition
• Add Architecture and Platform to runner details (merge request)
• Add Follow/Unfollow button to user popover (merge request)
• Enable ServicePing timings reporting (merge request)
• Support storage_size_limit in PlanLimits API (merge request)
• Add project's shared_runners_duration to GraphQL (merge request) GitLab Enterprise Edition
• Add group_inheritance_type to deploy access level and approval rule API (merge request) GitLab Enterprise Edition
• Add deployment metadata when firing hooks (merge request)
• CI: update cluster-integration/auto-build-image by @willianpaixao (merge request)
• Enable the querying of security training urls by language (merge request) GitLab Enterprise Edition
• Add namespace_ci_cd_settings table (merge request)
• Update Project stats on Container Registry event (merge request)
• Add PREVIOUS_BACKUP option to backup.rake (merge request)
• Enable aggregated VSA by default (merge request)
• Add CRM argument handling for issue list filters by @leetickett (merge request)
• Enable updated_diff_expansion_buttons by default (merge request)
• Remove related_epics_widget feature flag (merge request)
• GraphQL: Add platform/arch runner fields (merge request)
• Background job to trim namespaces over limit (merge request) GitLab Enterprise Edition
• Adds container_registry_size to namespace_root_storage_statistics (merge request)
• Start storing changed_at in seat statistics worker (merge request)
• Background Migrations - Mutli DB Admin UI (merge request)
• Allow editing media URL and alt in content editor (merge request)
• Add last_cleanup_deleted_tags graphql field (merge request)
• Record blocked epics removed on usage data (merge request) GitLab Enterprise Edition
• Add deletion warning email template for inactive projects (merge request)
• Add page description to pipeline security tab (merge request) GitLab Enterprise Edition
• Enable Group Level Security Policies in GraphQL API (merge request) GitLab Enterprise Edition
• Allow users to enforce auth checks on upload on a project level (merge request)
• Moving approval notifications from EE to FOSS (merge request)
• Add the packages cleanup policy model (merge request)
• Add tracking events to group and project pages (merge request)
• Handle timeout status in GitLab migration (merge request)
• Add GraphQL API to fetch Group Security Policies (merge request) GitLab Enterprise Edition
• Added prefetching for tasks in issue description (merge request)
• Prepare notes confidential index (merge request)
• Expose container_registry_size via GraphQL (merge request)
• Add CRM arguments to GraphQL issue resolver by @leetickett (merge request)
• Fix pipelines field performance in the package GraphQL type (merge request)
• Add support for sticky header on scroll for epics (merge request) GitLab Enterprise Edition
• Allow (un)following someone in the user popover by @KevSlashNull (merge request)
• Add API endpoint for fetching all resource groups for a project (merge request)
• Add last_cleanup_deleted_tag count column (merge request)
• Add access action for environments (merge request)
• Set custom error budgets (merge request)
• Edit environments tier with API (merge request)
• Expose environments tier over API (merge request)
• Audit IP allowlist editing (merge request) GitLab Enterprise Edition
• Send blocked users to Arkose (merge request) GitLab Enterprise Edition
• Add inherited group membership option for protected environment auth (merge request)
• Add active/state to CRM graphql queries/mutations by @leetickett (merge request)
• Extend Plan limits API with CI/CD limits properties by @wwwjon (merge request)
• Scroll to top of vulnerability list when filters changed (merge request) GitLab Enterprise Edition
• Add group wiki visibility toggle to group settings by @fjsanpedro (merge request)
• Add verify action for environments (merge request)
• Add auditing of runner token reset operations (merge request) GitLab Enterprise Edition
• Add BackgroundMigrationRecord cop to avoid ActiveRecord::Base (merge request)
• Expose billable members membership_state (merge request) GitLab Enterprise Edition
• Refactor the usage quotas -> ci/cd minutes page (merge request) GitLab Enterprise Edition
• Added autofocus on 'Search projects' input by @maksimanisimov1 (merge request)
• Log downstream pipeline creation (merge request)
• Show deployment approval on deployments page (merge request) GitLab Enterprise Edition
• Allow editing link URL and title in content editor (merge request)
• Over limit members in namespaces with a free plan (merge request) GitLab Enterprise Edition
• Revoke agent token from the UI (merge request)
• Enable touch_project_repository_state_updated_at FF by default (merge request) GitLab Enterprise Edition
• Enable VSA reggregation worker by default (merge request)
• Add Workhorse support for FIPS encryption (merge request)
• Backfill all ProjectSetting records (merge request)
• Add delete button to runner details page (merge request)
• Make ArkoseLabs namespace configurable (merge request)
• feat: Add SAST.latest and Secret-Detection.latest templates (merge request)
• Add audit events for merge request settings (merge request) GitLab Enterprise Edition
• Ensure max_seats_used_changed_at stays up to date (merge request)
• Start storing change date for max_seats_used (merge request)
• Add documentation link to CI/CD Variables Form (merge request)
• Support for TLS config on Workhorse (merge request)
• Move MigrationRecord into V1_0 (merge request)
• Add RuboCop::Cop::Migration::MigrationRecord rule (merge request)
• Add releases to GitLab Project Migration (merge request) GitLab Enterprise Edition
• Update container registry size in project stats (merge request)
• Add runner executor to runner details page (merge request)
• Add executorName to GraphQL API (merge request)
• Add delayed group deletion application setting (merge request)
• Quickly copy code blocks in the Content Editor (merge request)
• Add option for submit field in DAST Configuration (merge request) GitLab Enterprise Edition
• Add topics title (model, management, API) by @wwwjon (merge request)
• Auto continue markdown lists (merge request)
• Expose _links.cluster_agents field in project REST API by @tuxtimo (merge request)
• GraphQL: filter group members by access level (merge request)
• Add scan_finding rules into project settings (merge request) GitLab Enterprise Edition
• Added the possibility to remove a timelog from an issuable by @zillemarco (merge request)
• Measure metric collection time (merge request)
• Add group attributes pipeline to group bulk import (merge request) GitLab Enterprise Edition
• Add namespace settings attributes pipeline to group bulk imports (merge request) GitLab Enterprise Edition
• Distribute GitHub import jobs by default (merge request)
• Improve Geo project-out-of-date detection mechanism (merge request)
• Add iteration quickaction displays ID format on autocomplete (merge request) GitLab Enterprise Edition
• Draft: Allow a subset of a blame to be requested from the REST API (merge request)

Fixed (133 changes)

• Fix incident sticky header status badge (merge request)
• Ensure present_on_default_branch is set to true when branch is merged (merge request) GitLab Enterprise Edition
• Fix VerificationStateBackfillWorker re-enqueue process (merge request) GitLab Enterprise Edition
• Downgrade auto-deploy-image to v2.25.0 (merge request)
• Added condition for opening modal (merge request)
• Rename Dismiss VulnerabilitiesFinding mutation (merge request) GitLab Enterprise Edition
• Backfill notes that have null discussion_id (merge request)
• Do not try to create issue links without issues while ingesting reports (merge request) GitLab Enterprise Edition
• Fix error on issues list due to restricted visibility level (merge request)
• Fix comment form action button title (merge request) GitLab Enterprise Edition
• Fix state badge icon and link text color (merge request) GitLab Enterprise Edition
• Correct wrapping on PMG (merge request)
• Start the next ConsistencyWorker run from where it left (merge request)
• Add removed Dependency Scanning jobs as dummies (merge request)
• Update upstream/downstream borders (merge request)
• Change confidential comments doc to internal notes by @leetickett (merge request)
• Display SSO link prior to save (merge request) GitLab Enterprise Edition
• Remove unused batch_size in ExpireOAuthTokens (merge request)
• Add top margin to auto fix card on vulnerability report (merge request) GitLab Enterprise Edition
• Fix user popover overflow and follow/unfollow button alignment (merge request)
• Fix file include-type for CI lint Graphql endpoint (merge request)
• Fix haml conditional logic parsing error in master (merge request) GitLab Enterprise Edition
• Compare agent version against KAS version (merge request)
• Fix scroll to hash (merge request)
• Do not export and import max_pages_size from groups (merge request)
• Fix associated release link on tag page (merge request)
• Preserve branch filter state after delete (merge request)
• Ensure base work item types are created where needed (merge request)
• Fix redirect loop when requiring verification and experiment is inactive (merge request)
• Gracefully handle invalid states when filtering environments (merge request)
• Fix awards focus style overflow (merge request)
• Change cancel button variant/color to danger/red by @leetickett (merge request)
• Backfill finished_at when it is nil for successful deployments (merge request)
• Keep fragment identifier when performing an OAuth redirect (merge request)
• Fix error with initializiation of protected environments feature (merge request)
• Fix group path suggestion bug (merge request)
• Fix Create Vulnerability button height on mobile view (merge request) GitLab Enterprise Edition
• Fix operations dashboard card pipeline background by @mrtgncr733 (merge request)
• Fix assignee filtering on group/issues list (merge request)
• Only poll environment folder if expanded (merge request)
• Change prop type inside the cleanup_status component (merge request)
• Added update to epicsCount (merge request) GitLab Enterprise Edition
• Add DeployTokenAuthor as new type of NullAuthor (merge request) GitLab Enterprise Edition
• Fix error when fetching inherited security execution policy in GraphQL (merge request) GitLab Enterprise Edition
• Fix redirect anchor on Web IDE admin settings by @vaiil (merge request)
• Format dates as UTC (merge request) GitLab Enterprise Edition
• Preserve roadmap timeframe type in page URL (merge request) GitLab Enterprise Edition
• Address several edge cases in ProcessSupervisor (merge request)
• Fixes DAST Profile not found issue (merge request) GitLab Enterprise Edition
• Replicate deletion of remote stored files (merge request) GitLab Enterprise Edition
• Update column name for consistency (merge request) GitLab Enterprise Edition
• Make group scope consistent for scan_finding rules (merge request) GitLab Enterprise Edition
• Re-add usage_data_diff_searches flag (merge request)
• Increase read timeout for Jira requests (merge request)
• Fix the button distance on the milestone page (merge request)
• Fix DORA metric Graphql type (merge request) GitLab Enterprise Edition
• Enable admin to see project level MR analytics (merge request) GitLab Enterprise Edition
• Return 404 on Jira issues if integration inactive (merge request) GitLab Enterprise Edition
• Find feedback based on UUID (merge request) GitLab Enterprise Edition
• Set ProjectAttributesPipeline to be a file extraction pipeline (merge request)
• Add deploy token handling in audit event generation (merge request) GitLab Enterprise Edition
• Include only opened epics in issue bulk actions (merge request) GitLab Enterprise Edition
• Add missing restrict_gitlab_migration to migration (merge request)
• Add error handling for sec config license fetch (merge request) GitLab Enterprise Edition
• Keep "No parent" when page is refreshed (merge request)
• Fix bug when reinstalling Slack app (merge request) GitLab Enterprise Edition
• Remove duplicate records to fix PG::CardinalityViolation on ingestion (merge request) GitLab Enterprise Edition
• Skip initializers in the doctor:secrets task for encrypted data (merge request)
• Fix wiki form not rendering on validation error (merge request)
• Show operation id's by default (SwaggerUI) (merge request)
• Fix typo in event destination GQL docs (merge request) GitLab Enterprise Edition
• Update modal token when its resetting (merge request)
• Forbid recursion during Feature.enabled? (merge request)
• Make minute limit banner dismissible (merge request)
• Load group Vulnerability Report when only subgroups have projects (merge request) GitLab Enterprise Edition
• Fix modal backdrop in dark mode (merge request)
• Fix blob header responsiveness (merge request)
• Fix CRM issue search with vue_issues_list by @leetickett (merge request)
• Use initialTitle prop as is for title component (merge request)
• Allow auditor to read project MR analytics (merge request) GitLab Enterprise Edition
• Fix CRM drawer positioning by @leetickett (merge request)
• Fix transparent table header background on vulnerability report (merge request) GitLab Enterprise Edition
• Migrate form to allow render of UI components (merge request) GitLab Enterprise Edition
• Prevent CRM actions when feature disabled by @leetickett (merge request)
• Move CI pipelines migration to a lower stage during Gitlab Migration (merge request)
• Fix next badge margin (merge request)
• Fix quota counting issue on invite quota limits (merge request) GitLab Enterprise Edition
• Fix browser history for group/project issues page (merge request)
• Fix ZenTao integration when api_url is setup by @chaomao (merge request)
• Allow create_merge_request_in when download_code is allowed (merge request)
• Enable the FF ci_expand_environment_name_and_url (merge request)
• Remove outdated loop prevention check by @andreas.kloeckner (merge request)
• Allow admin to edit requirements (merge request) GitLab Enterprise Edition
• More consistent copy to clipboard buttons (merge request)
• Use pathIdSeparator to format linked epic ref (merge request)
• Fix eslint errors and jest snapshot test by @Ffinnis (merge request)
• Parse only the related artifacts (merge request) GitLab Enterprise Edition
• Hide iteration menu from user namespaced project (merge request) GitLab Enterprise Edition
• Fix mermaid copy to clipboard button by @leetickett (merge request)
• Resolve "Reorder HEAD tags for better performance" (merge request)
• Remove create_project_settings feature flag (merge request)
• Use root ancestor group in buy minutes path (merge request) GitLab Enterprise Edition
• Expose url on discussion award emoji (merge request)
• Nullify merge_request_metrics pipeline_id on pipeline deletion (merge request)
• Fix alignment of cannot merge icon in sidebar (merge request)
• Resolve project filter dropdown overflowing on long names (merge request)
• Fix left over resources when unassigning (merge request) GitLab Enterprise Edition
• Fix mappings errors for ES6.8 (merge request) GitLab Enterprise Edition
• Fix ee css bundles not loading (merge request)
• Fix missing DB duration keys for multiple databases (merge request)
• Use the authoritative file sort to order discussions (merge request)
• Prevent orphaned JobArtifacts in SSF (merge request) GitLab Enterprise Edition
• Fix color picker focus when clicking on a label by @FFxSquall (merge request)
• Fix regression in reactive cache implementation for Environment model (merge request)
• Match dotenv variable limits across subscription plans (merge request)
• Fix check in license load rake task (merge request) GitLab Enterprise Edition
• Resolve group_path to full_path when creating compliance frameworks (merge request) GitLab Enterprise Edition
• Disable STI behavior on MigrationRecord (merge request)
• Use execCommand(‘insertText’) to fix undo (merge request)
• Run repository checks if Geo is not enabled (merge request) GitLab Enterprise Edition
• Fix font weight for snippet count (merge request)
• Add newDirectoryPath computed prop (merge request)
• Fix unintended line breaks were inserted using Japanese IME on MacOS by @hiroponz (merge request)
• Set started_at only once by @Taucher2003 (merge request)
• Fix manual pipeline icons in dark mode (merge request)
• Assign commands should be case insensitive (merge request)
• Fix repository analytics ref dropdown (merge request)
• Use primary for internal registry migration API (merge request)
• Fix raising error in reactive cache setter of kubernetes platform (merge request)
• Fix test case by avoiding lazy evaluation (merge request) GitLab Enterprise Edition
• Show Infrastructure menu item for auditors (merge request) GitLab Enterprise Edition
• Wait until ArkoseLabs token is set before resubmitting (merge request)
• Group analytics lookup group by full_path only (merge request) GitLab Enterprise Edition

Changed (239 changes)

• Allow MR approvals API endpoint for auditors (merge request) GitLab Enterprise Edition
• Enable feature and clean up feature flags (merge request)
• Added link to invite users to contribute to translations by @anshulriyal (merge request)
• Reset skipped container repositories (merge request)
• Moves locking of merge request to dropdown (merge request)
• Moves the To Do button down (merge request)
• internal/git: Pass in GL_ID, GL_USERNAME to receive-pack and upload-pack (merge request)
• Project-level Secure Files upload/remove UI (merge request)
• Move backend documentation paths to frontend for vulnerability report (merge request) GitLab Enterprise Edition
• Split text for kbd shortcut (merge request)
• feature_flags: Default-enable use of filtered quarantine commits (merge request)
• Add permissions to pre-existing commit documents (merge request) GitLab Enterprise Edition
• Change way default CSP is loaded from config (merge request)
• Remove logic from Secret Detection script (merge request)
• Remove vertical padding on branch names (merge request)
• Expose RootStorageStatistics#container_registry_size vis GQL (merge request)
• Update ServicePing metric category to Operational (merge request)
• Hides images on ipynb diff (merge request)
• Improve vulnerability report mobile layout (merge request) GitLab Enterprise Edition
• Turn resolved threads badge green when resolved (merge request)
• Update order of MR header buttons (merge request)
• Add shared runner data to usage quota (merge request)
• Update SAST IaC analyzer major version (merge request)
• Changed :deletion_adjourned_period to a number field (merge request) GitLab Enterprise Edition
• Remove unused CSS class by @mehulsharma (merge request)
• Use active sidekiq router's queues for sidekiq/queue_metrics API (merge request)
• Rename confidential notes to internal notes (merge request) GitLab Enterprise Edition
• Change the text is made bold (merge request) GitLab Enterprise Edition
• Migrate create label button (merge request)
• Update MR merge conflict HTML email (merge request)
• Change certificate_based_clusters FF default to false (merge request)
• Add error alert for Elasticsearch version incompatible (merge request) GitLab Enterprise Edition
• Move backend documentation paths to frontend for vulnerability report (merge request) GitLab Enterprise Edition
• Test one remediation solving two vulnerabilities (merge request) GitLab Enterprise Edition
• Improve Security::Validators::SchemaValidator specs (merge request)
• Update issuable state badge style (merge request)
• Change style of trigger job in pipeline graph (merge request)
• Add props for cancel button by @HerrShmulke (merge request)
• Migrate todo button in collapsed sidebar (merge request) GitLab Enterprise Edition
• Background Migrations - Cleanup Margins (merge request)
• Expand navbar search field when focused (merge request)
• Removes status checks add status field feature flag (merge request) GitLab Enterprise Edition
• Persist group name and use path for destination name (merge request)
• Migrate button in service desk settings (merge request)
• Update GITLAB_KAS_VERSION to 15.0.0 (merge request)
• Fix invalid automatic cadence records (merge request)
• API: Runner status can return "stale" (merge request)
• Enable enhanced_notify_css by default (merge request)
• Migrate purchase storage buttons to confirm (merge request)
• Migrate create jira issue button (merge request) GitLab Enterprise Edition
• Use tertiary confirm dropdown for version switcher (merge request)
• Change discussions to threads in mr settings (merge request)
• Update SAST analyzer major versions (merge request)
• git: Parse and display gitaly limit error (merge request)
• Removing permissions attribute from Secure Files model (merge request)
• Enable approval status new names feature (merge request) GitLab Enterprise Edition
• Update stable Terraform and add stable SAST-IaC template (merge request)
• Migrate button in move for test cases (merge request)
• Update lock invite options (merge request)
• Update package namespace settings permissions (merge request)
• Remove head-variant from GlTable (merge request)
• Migrate create iteration button to confirm (merge request)
• Migrate approve with password modal (merge request) GitLab Enterprise Edition
• Migration with access_token for approval project (merge request) GitLab Enterprise Edition
• Replace issuable sort dropdown (merge request)
• Remove sudo runner registration instructions macos (merge request)
• Add GlBadge with link to Jira vulnerabilities (merge request) GitLab Enterprise Edition
• Do not update project stats for incremental repack (merge request)
• Migrate empty state button for needs (merge request)
• Move report not configured components into specific folders (merge request) GitLab Enterprise Edition
• Upgrade DAST templates to version 3 (merge request) GitLab Enterprise Edition
• Bring Container Scanning to Free (merge request)
• Fix(Subscription errors): handle expired + general (merge request) GitLab Enterprise Edition
• Update dependency proxy settings permissions (merge request)
• Migrate button in vulnerability history (merge request)
• Migrate merge button to confirm (merge request)
• Migrate create incident button (merge request)
• Migrate fork button in diff file (merge request)
• Migrate checkbox to require Jira issue (merge request) GitLab Enterprise Edition
• Update container cleanup policy permissions (merge request)
• Migrate cluster buttons to confirm (merge request)
• Update auto-deploy-image to v2.26.0 (merge request)
• Prevent changing out of hierarchy sharing (merge request) GitLab Enterprise Edition
• Changes labels on merge request dropdown (merge request)
• Geo - Remove legacy redirects (merge request) GitLab Enterprise Edition
• Update documentation for environment multiple stop actions (merge request)
• Deprecate GraphQL type for Network Policies (merge request) GitLab Enterprise Edition
• Deprecate threat_monitoring from GraphQL enum for alerts (merge request) GitLab Enterprise Edition
• Migrate checkboxes when editing runners (merge request)
• Reduce frequently visited projects/groups timeout (merge request)
• Migrate view incident button to confirm (merge request)
• Migrate button in increase storage modal (merge request)
• Migrate apply button in date picker (merge request)
• Update prometheus to 15.x in cluster-management template (merge request)
• Migrate checkboxes for deploy tokens (merge request)
• Migrate success button to confirm (merge request)
• Remove directly addressed references (merge request) GitLab Enterprise Edition
• Update documentation for failed status checks (merge request)
• Migrate use template button (merge request) GitLab Enterprise Edition
• Migrates button in vulnerability header (merge request)
• Migrate create label button in sidebar (merge request)
• Migrate add projects button to confirm (merge request)
• Remove security_scan_succeeded column by @svdj (merge request)
• Migrate add framework button to confirm (merge request)
• Migrate add to review button to confirm (merge request)
• Remove FF for environment multiple stop actions (merge request)
• Hides package delete action for users without permission (merge request)
• Change warning message on partial cleanup runs (merge request)
• Add select all option for scanners (merge request) GitLab Enterprise Edition
• Add dependency proxy total size inside usage quotas (merge request)
• Remove new_vulnerability_form feature flag (merge request) GitLab Enterprise Edition
• Update edit profile page form styling (merge request)
• Add awaiting memberhips in billable members API (merge request) GitLab Enterprise Edition
• Remove integrations.type column (merge request)
• Separate Sidekiq metrics and health-checks server (merge request)
• Feat(Legacy License): move to admin/settings page (merge request) GitLab Enterprise Edition
• Update Vulnerability Management database docs (merge request)
• Update text for the existing mr widget (merge request) GitLab Enterprise Edition
• Reset the original color for security rules (merge request) GitLab Enterprise Edition
• Update search SystemCheck to latest versions (merge request) GitLab Enterprise Edition
• This MR adds new empty state (merge request) GitLab Enterprise Edition
• Add updated date to to-do sort options (merge request)
• Update scan result policies related (merge request) GitLab Enterprise Edition
• Allow Slack app to be reinstalled (merge request) GitLab Enterprise Edition
• Clean up error logging in integrations (merge request)
• Display feature flag name in edit page's title (merge request)
• Use field DSL in CI integrations (merge request)
• Replace Pages confirmation modals with GlModal (merge request)
• Initial commit for skipped to created state (merge request)
• Upgrade warnings about deprecated commands (merge request)
• Add margin to year dropdown (merge request)
• Enable omniauth_initializer_fullhost_proc by default for Geo SSO (merge request)
• Improve shared runner toggle interations (merge request)
• Return back to runner view after successful edit (merge request)
• Visually separate DORA metrics from key VSA metrics (merge request)
• Remove use of md5 by @mehulsharma (merge request)
• Boards - Make scope indicator dynamic (merge request)
• Added Don’t filter milestone option to board scope (merge request) GitLab Enterprise Edition
• Lock invite options when reaches user limit (merge request)
• Update GenericCommitStatus badges (merge request)
• Improved title-related warning on test case (merge request)
• Remove redirection of outdated status by @mehulsharma (merge request)
• Updates delete icon button in runner table by @mehulsharma (merge request)
• Remove .thead-white class from GlTables (merge request) GitLab Enterprise Edition
• Update runner status summary upon filtering (merge request)
• Boards: Polish top buttons on mobile (merge request)
• Gitaly: Increase timeout for repository_size to long_timeout (merge request)
• Improve loading for work item detail (merge request)
• Stops hiding dependency proxy image prefix data behind loader (merge request)
• Remove h2 from breadcrumbs by @KevSlashNull (merge request)
• Remove usages of deprecated self_signed_cert option (merge request)
• Migrate checkbox to GitLabUI (merge request) GitLab Enterprise Edition
• Update copy text for self metrics toggle (merge request)
• Boards - Fix click on label adds filter with new filtered search (merge request)
• Fix broken docs UI links (merge request)
• Display loading spinner instead of text (merge request)
• Use gitlab-ui checkbox for signin oauth settings (merge request)
• Decrease priority of run pipeline button (merge request)
• This MR adds new feature flag for DAST redesign (merge request) GitLab Enterprise Edition
• Limit group invites from projects to also use prevent setting (merge request)
• Prevent projects creating group links outside hierarchy (merge request)
• Allow Reporters to admin milestones and iterations (merge request)
• Update issuable confidentiality UI & status text (merge request)
• Refactor On-demand scans page header section (merge request) GitLab Enterprise Edition
• Upgrade Container Scanning analyzer version (merge request) GitLab Enterprise Edition
• Geo Sites Form - Cleanup Learn more links (merge request) GitLab Enterprise Edition
• Geo Sites - Cleanup Learn more links (merge request) GitLab Enterprise Edition
• Refresh vulnerabilities on vulnerability list after bulk select is done (merge request) GitLab Enterprise Edition
• Flip order of packages and monitor in project sidebar (merge request) GitLab Enterprise Edition
• Use topic title instead of name in UI by @wwwjon (merge request)
• Do not disable snippet form submit button to enforce validation (merge request)
• Replace filter field with search-box-by-click on import repositories by @Xubunter (merge request)
• Hide confirmation required error state by @HerrShmulke (merge request)
• Use button-group on vulns-over-time chart (merge request) GitLab Enterprise Edition
• Replace approved with passed in status check api (merge request) GitLab Enterprise Edition
• Adjust sign in columns and padding to accommodate Arkose (merge request) GitLab Enterprise Edition
• Display security training config based on license (merge request)
• Add border radius (merge request)
• This MR changes layout of new/edit DAST scanner configuration (merge request) GitLab Enterprise Edition
• Make status param required (merge request) GitLab Enterprise Edition
• Update Security Policy Configuration to not exclude rules from pipeline (merge request) GitLab Enterprise Edition
• Update avatar counter styles (merge request)
• Move path navigation below filters for VSA (merge request)
• Remove vulnerability_report_pagination feature flag (merge request) GitLab Enterprise Edition
• Change elements order on the import project page by @cheshirecat902 (merge request)
• Correct styles for select project split button (merge request)
• Adds Ci::Bridge to RetryJobService (merge request)
• Allow pages root domain to be used as custom domain by @mlegner (merge request)
• Improve UI text of sign-up restrictions (merge request)
• Move .thead-white to apply to GlTable as well (merge request)
• Unbox issue board lists (merge request)
• Hide security rules for non ultimate licenses (merge request) GitLab Enterprise Edition
• Remove a question that’s irrelevant for invitation (merge request) GitLab Enterprise Edition
• Updated personal access token references (merge request) GitLab Enterprise Edition
• Allow to delete error packages from package registry (merge request)
• Feat(Subcsription): update general error message (merge request) GitLab Enterprise Edition
• This MR changes the order of elements (merge request)
• Remove fixed bar from merge request page (merge request)
• Update the gitlab-pages documentation (merge request)
• Fix GlTable not displaying styles properly (merge request)
• Remove .service-installation class and polish UI (merge request)
• Use tertiary category for content editor bubble menu (merge request)
• Fix function and view for autovacuum activity (merge request)
• Fix misleading error for job dependencies (merge request)
• Updates anchor links UI (merge request)
• Use new serialized started_at on job in the ui (merge request)
• Don't track Jupiter notebook exceptions (merge request)
• Repeat failed migrations with fix (merge request)
• Wrap toolbar, increase size, and remove dividers (merge request)
• Change pipeline editor branch terminology (merge request)
• Deprecate old Advanced Search migrations (merge request) GitLab Enterprise Edition
• Correct mattermost slash commands integration clipboard buttons (merge request)
• Dropped Runner features column by @mehulsharma (merge request)
• Change how cached images set for deletion are displayed (merge request)
• Replace generic checkbox with GitLab UI element (merge request)
• Use tertiary button for file header actions (merge request)
• Make fingerprint nullable for group_deploy_keys table (merge request)
• Remove hover animation from downstream pipelines (merge request)
• Migrate all checkboxes (merge request) GitLab Enterprise Edition
• Reduce padding to match alignment (merge request)
• Improve runner edit form design (merge request)
• Remove job list in runner Edit page (merge request)
• Enable route_hll_to_snowplow by default (merge request)
• Use deferrable constraint to bulk cadence update (merge request)
• Remove secure_vulnerability_training feature flag (merge request)
• Improve trial only CTAs in Learn GitLab (merge request)
• Use systemd notification and watchdog feature for sidekiq service by @behrmann (merge request)
• Update right sidebar design (merge request)
• Fix default job_arguments for batched migrations (merge request)
• Add "ee" type to projectionist config (merge request)
• Migrate DAST profile library links with new route (merge request) GitLab Enterprise Edition
• Limit number of related epics (merge request) GitLab Enterprise Edition
• Praefect docs: update list-untracked-repositories subcommand (merge request)
• Warn if database connections opened in routes file (merge request)
• Globally enable enforce_security_report_validation (merge request) GitLab Enterprise Edition
• Remove history and upload btns from project page (merge request)
• Replace generic checkbox with GitLab UI component (merge request) GitLab Enterprise Edition
• Use pajamas checkbox for admin application form (merge request)
• Migrate unique index from MD5 to SHA256 fingerprints (merge request)

Deprecated (3 changes)

• Create deprecation entry for legacyMode (merge request)
• Remove coverage CI detection at project setting level (merge request)
• Move required pipeline configuration to GitLab Ultimate (merge request) GitLab Enterprise Edition

Removed (64 changes)

• Update post-deploy migration in order to only (merge request) GitLab Enterprise Edition
• Remove temporary traversal_id indexes (merge request)
• Geo: Remove Legacy Job Artifact replication (merge request)
• Remove tracing feature via feature flag (merge request)
• Replace clusters with agents in scan execution policies (merge request) GitLab Enterprise Edition
• Drop sorting by title functionality from the vulnerability report page (merge request) GitLab Enterprise Edition
• Remove sorting vulnerabilities by title functionality (merge request) GitLab Enterprise Edition
• Remove Monitor Logs feature (merge request)
• Remove elastic stack from cluster management template (merge request)
• Remove the pipelines field (merge request)
• Remove deprecated Dependency Scanning analyzers (merge request)
• Remove omniauth-kerberos gem (merge request) GitLab Enterprise Edition
• Add background migration to expiry all OAuth tokens (merge request)
• Remove support for Cluster Image Scanning Analyzer (merge request) GitLab Enterprise Edition
• Remove namespaces partial index (merge request)
• Remove 'not_connected' status value (merge request)
• Remove ability for SSH key expiration to be optional (merge request) GitLab Enterprise Edition
• Remove OAuth 2.0 Implicit grant flow (merge request)
• Drop support for deprecated security report schemas (merge request)
• Remove Vulnerability-Check from the backend (merge request) GitLab Enterprise Edition
• Remove dynamic check for feature flag (merge request)
• Remove namespaces partial index (merge request)
• Remove background migration with potential data loss (merge request)
• Remove container security charts from the Cluster Management template (merge request) GitLab Enterprise Edition
• Removes types and type keyword (merge request)
• Enforce token expiry for OAuth applications (merge request)
• Remove Vulnerability-Check from frontend (merge request) GitLab Enterprise Edition
• Object storage: Remove background_upload configurations (merge request)
• Remove Network Policies from Policies Controller (merge request) GitLab Enterprise Edition
• Remove deprecated DS_DEFAULT_ANALYZERS (merge request)
• Remove epic feature discovery moment on EE (merge request) GitLab Enterprise Edition
• Remove Network Policies routes and controller (merge request) GitLab Enterprise Edition
• Remove Managed-Cluster-Applications.gitlab-ci.yml (merge request)
• Remove vulnerability_reads_table feature flag (merge request) GitLab Enterprise Edition
• Remove network alerts (merge request) GitLab Enterprise Edition
• Remove cobertura from artifacts:reports (merge request)
• Do not allow expired personal access tokens to work (merge request)
• Remove Network Policies metrics (merge request) GitLab Enterprise Edition
• Remove the form-based GKE / EKS creation page (merge request)
• Remove disabled alerts section from settings page (merge request)
• Remove Serverless from GitLab (merge request)
• Remove artifacts:reports:cluster_applications (merge request)
• Remove orphaned route users/pipeline_quota (merge request) GitLab Enterprise Edition
• Remove ignored column for Test Reports (merge request)
• Omit tags when retrieving a list of registry repositories in a group by @feistel (merge request)
• Remove workhorse_use_sidechannel feature flag (merge request)
• Remove Versions on base PackageType by @feistel (merge request)
• Remove deprecated GraphQL query (merge request)
• Remove unused Prometheus Alert crud code (merge request)
• Remove group_releases_finder_inoperator feature flag (merge request)
• Remove lfk_fair_queueing feature flag (merge request)
• Remove all code related to Gitlab::RequestProfile (merge request)
• Remove defaultMergeCommitMessageWithDescription GraphQL field (merge request)
• Remove env_last_deployment_by_finished_at feature flag (merge request)
• Remove repository push audit event feature (merge request) GitLab Enterprise Edition
• Remove job_deployment_count feature flag (merge request)
• Remove all documentation related to Gitlab::RequestProfile (merge request)
• Remove eye icon on package detail page by @Ffinnis (merge request)
• Remove tmp index used for data migration (merge request)
• Remove ability to change type of a shared runner (merge request)
• Remove support for uses_legacy_database_config (merge request)
• Remove deprecated geo:db:* rake tasks (merge request) GitLab Enterprise Edition
• Remove clusterAgentTokenDelete GraphQL mutation (merge request)
• Remove temporary max seats used in subscription indices (merge request)

Security (16 changes)

• Sanitize URL for project selection button (merge request)
• Remove sha from project/releases.json (merge request)
• Sanitize error input to prevent HTML/CSS injection in messages
• Allow rate limiting of deploy tokens
• Prevent maintainers from editing PipelineSchedule
• Invalidate markdown cache to clear up stored XSS
• Verify that mentioned user can read TODO's note
• Update Import/Export merge/push access levels & exclude ci config path
• Add validation to pypi file sha256 values
• [security] Fix markdown API disclosing issue titles of limited projects
• Conan Token uses PAT rather than ID in payload
• Disable wiki access with CI_JOB_TOKEN when improper access level
• Secure debug trace artifact download
• Add suffix to cache name to add isolation
• Use password type for all secret integration properties
• Limit CI job group_name regexp

Performance (11 changes)

• Use efficient in operator query for fetching group & project activities (merge request)
• Restrict unique index for alerts with fingerprints (merge request)
• Add index to vulnerability_feedback.finding_uuid (merge request)
• changes_access: Speed up commit-based access checks for new refs again (merge request)
• Re-use already collected ServicePing data (merge request)
• Remove subscribed key from epic initial data (merge request) GitLab Enterprise Edition
• Improve epics finder authorization performance (merge request) GitLab Enterprise Edition
• Simplify query to find existing alert (merge request)
• Remove extra GraphQL query when loading alert list (merge request)
• Optimize followed users tabs (merge request)
• Preload some associations in EnvironmentSerializer (merge request)

Other (92 changes)

• Add Pages public folder check (merge request)
• Enable geo_use_clone_on_first_sync by default (merge request) GitLab Enterprise Edition
• Fix saas test by @chaomao (merge request)
• Add notes temp index synchronously (merge request)
• Move Rails/HasManyOrHasOneDependent into separate TODO file by @anshulriyal (merge request)
• Move Style/CaseLikeIf into separate TODO file by @anshulriyal (merge request)
• Move Rails/CreateTableWithTimestamps into separate TODO file by @anshulriyal (merge request)
• Move Style/EmptyMethod into separate TODO file by @anshulriyal (merge request)
• Fix sidekiq config test by @chaomao (merge request)
• Log result for ci_runners_stale_group_runners_prune_worker_cron (merge request) GitLab Enterprise Edition
• Move RSpec/RepeatedExampleGroupBody into separate TODO file by @anshulriyal (merge request)
• Move Style/HashAsLastArrayItem into separate TODO file by @anshulriyal (merge request)
• Move Rails/WhereExists into separate TODO file by @anshulriyal (merge request)
• Move Rails/InverseOf into separate TODO file by @anshulriyal (merge request)
• Move Rails/ActiveRecordCallbacksOrder into separate TODO file by @anshulriyal (merge request)
• Move Rails/NegateInclude into separate TODO file by @anshulriyal (merge request)
• Move Style/KeywordParametersOrder into separate TODO file by @anshulriyal (merge request)
• Moved Rails/ApplicationController into separate TODO file by @anshulriyal (merge request)
• Moved Style/Lambda into separate TODO file by @anshulriyal (merge request)
• Move RSpec/PredicateMatcher into separate TODO file by @anshulriyal (merge request)
• Move Rails/ContentTag into separate TODO file by @anshulriyal (merge request)
• Move RSpec/ExpectChange into separate TODO file by @anshulriyal (merge request)
• Move Style/AccessorGrouping into separate TODO file by @anshulriyal (merge request)
• Moved Style/RedundantRegexpEscape into separate TODO file by @anshulriyal (merge request)
• Move Rails/IndexWith into separate TODO file by @anshulriyal (merge request)
• Move Style/BarePercentLiterals into separate TODO file by @anshulriyal (merge request)
• Move RSpec/ScatteredLet into seprate TODO file by @anshulriyal (merge request)
• Move Performance/ConstantRegexp into separate TODO file by @anshulriyal (merge request)
• Move Rails/HelperInstanceVariable into separate TODO file by @anshulriyal (merge request)
• Move RSpec/ReturnFromStub into separate TODO file by @anshulriyal (merge request)
• Move Rails/RakeEnvironment into separate TODO file by @anshulriyal (merge request)
• Move Style/FormatString into separate TODO file by @anshulriyal (merge request)
• Move Performance/CollectionLiteralInLoop into separate TODO file by @anshulriyal (merge request)
• Moved Style/SingleArgumentDig into separate TODO file by @anshulriyal (merge request)
• Cleanup ci_reduce_persistent_ref_writes feature flag (merge request)
• Move Rails/LexicallyScopedActionFilter into separate TODO file by @anshulriyal (merge request)
• Moved Style/NumericLiteralPrefix into separate TODO file by @anshulriyal (merge request)
• Move Rails/FilePath into separate TODO file by @anshulriyal (merge request)
• Move Naming/RescuedExceptionsVariableName into separate TODO file by @anshulriyal (merge request)
• Moved Style/StringConcatenation into separate TODO file by @anshulriyal (merge request)
• Prevent incorrect usage of tracking_attrs helper (merge request)
• Nullify label events in batches when user is deleted (merge request)
• Fix namespaces helper test by @chaomao (merge request)
• Fix trial status widget test by @chaomao (merge request)
• Cap MR diff render tracking events to 24h (merge request)
• Remove gitaly_replace_wiki_update_page flag (merge request)
• Use OS tempdir for artifact metadata (merge request)
• Remove the packages_graphql_pipelines_resolver feature flag (merge request)
• Remove fix_related_environments_for_merge_requests feature flag (merge request)
• Improve snowplow function by returning bool type (merge request)
• Validate work_item_type_id is NOT NULL for new issue records (merge request)
• Move Rails/SquishedSQLHeredocs into separate TODO file by @anshulriyal (merge request)
• Remove gitlab-shell sidechannel feature flag (merge request)
• Remove ci_variables_builder_config_variables feature flag (merge request)
• Remove tabs_normal and use tab_single partial instead (merge request)
• Moved Style/RedundantInterpolation into separate TODO file by @anshulriyal (merge request)
• Move Style/HashEachMethods into separate TODO file by @anshulriyal (merge request)
• Move Rails/RedundantForeignKey into separate TODO file by @anshulriyal (merge request)
• Move Rails/Pick into separate TODO file by @anshulriyal (merge request)
• Add an empty newline test to Ansi2Json (merge request)
• Remove dependency_proxy_for_private_groups feature flags by @feistel (merge request)
• Add temporary index deployments (merge request)
• Clean up after fixing regression (merge request)
• Find projects affected when membership changes are made in group (merge request)
• Remove runner_read_only_admin_view feature flag (merge request)
• Let /page quick action to support case-insensitive escalation policy names (merge request) GitLab Enterprise Edition
• Bump Gitlab Shell to v14.0.0 (merge request)
• Remove container_registry_expiration_policies_throttling feature flag by @feistel (merge request)
• Remove ci_pending_builds_table_resiliency feature flag (merge request)
• Fix various kwargs issues (merge request)
• Clean up FixMergeRequestDiffCommitUsers background migration (merge request)
• Add repository push audit event worker (merge request) GitLab Enterprise Edition
• Fix RSpec/TimecopTravel offenses (Part 1/2) by @KevSlashNull (merge request)
• Expose CI include links (merge request)
• Add documentation for merge request setting audit events (merge request)
• Use vulnerability_report.vue for agent and pipeline reports (merge request) GitLab Enterprise Edition
• Clean up deployment_approval_rules feature flag (merge request)
• Remove container_registry_follow_redirects_middleware feature flag by @feistel (merge request)
• Extend reduced cost factor to all public projects (merge request) GitLab Enterprise Edition
• Drop, then create function (merge request)
• Bump Gitlab Shell to v13.25.2 (merge request)
• Add documentation for mr settings audit events part 1 (merge request)
• Backfill SSL verification for integrations with known-good hostnames (merge request)
• Limit to current PG user (merge request)
• Make vulnerability report more reusable (merge request) GitLab Enterprise Edition
• Remove feature flag scan_result_policy (merge request) GitLab Enterprise Edition
• Remove runner_list_group_view_vue_ui feature flag (merge request)
• Add VulnerabilityReportTab component (merge request) GitLab Enterprise Edition
• Add view containing autovacuum information (merge request)
• Clean up selection summary (merge request) GitLab Enterprise Edition
• Move methods to build email unsubscribe link to helper (merge request) GitLab Enterprise Edition
• Deprecate push_rules_supersede_code_owners feature flag (merge request)

14.10.5 (2022-06-30)

Security (17 changes)

• Fix group IP restrictions not enforced for container registry requests (merge request)
• Update rack gem to version 2.2.3.1 (merge request)
• Gitlab Runner version upgrade (merge request)
• Update ProjectAttributesTransformer to use fixed number of attributes (merge request)
• Escape deploy key title to prevent XSS (merge request)
• Sanitize ZenTao breadcrumb links (merge request)
• Fix permissions in the project labels API (merge request)
• Security fix sentry issue leaks and access level check (merge request)
• Check permissions before exposing user two factor enabled (merge request)
• Filter milestone release by user access (merge request)
• Fix the required access level in the Conan packages finder (merge request)
• Allow inviting only groups with subset of allowed domains to groups (merge request)
• Fix open redirect vulnerability (merge request)
• Adds a filter based on user access to Runner jobs endpoint (merge request)
• Prevent runners from picking IP restricted jobs (merge request)
• Restrict CI lint access to pipeline creators (merge request)
• Catch endless headers when reading HTTP responses (merge request)

14.10.4 (2022-06-01)

Security (7 changes)

• Fix IP restrictions not applying to deploy tokens (merge request)
• Trigger token should respect group IP restrictions (merge request)
• Fix content injection in Jira issue title (merge request)
• Subgroup member can list members of parent group (merge request)
• Do not allow project member import when membership is locked (merge request)
• Disable changing user attributes when updating SCIM provisioned user (merge request)
• Allow only job owner to run interactive terminal (merge request)

14.10.3 (2022-05-20)

Added (1 change)

• Add option to disable seperated caches by @Taucher2003 (merge request)

Fixed (1 change)

• Fix assignee filtering on group/project issues list (merge request)

14.10.2 (2022-05-04)

Fixed (2 changes)

• Resolve "Fork relationship is not respected for certain projects" (merge request)
• Fix mappings errors for ES6.8 (merge request) GitLab Enterprise Edition

Other (1 change)

• Add documentation for mr settings audit events part 1 (merge request)

14.10.1 (2022-04-29)

Security (14 changes)

• Add suffix to cache name to add isolation (merge request)
• Update Import/Export merge/push access levels & exclude ci config path (merge request)
• Prevent maintainers from editing PipelineSchedule (merge request)
• Add validation to pypi file sha256 values (merge request)
• Conan Token uses PAT rather than ID in payload (merge request)
• [security] Fix markdown API disclosing issue titles of limited projects (merge request)
• Verify that mentioned user can read TODO's note (merge request)
• Invalidate markdown cache to clear up stored XSS (merge request)
• Allow rate limiting of deploy tokens (merge request)
• Disable wiki access with CI_JOB_TOKEN when improper access level (merge request)
• Sanitize error input to prevent HTML/CSS injection in messages (merge request)
• Secure debug trace artifact download (merge request)
• Use password type for all secret integration properties (merge request)
• Limit CI job group_name regexp (merge request)

14.10.0 (2022-04-21)

Added (141 changes)

• Add a dropdown to switch language in code blocks (merge request)
• Wraps Jupyter Notebook Diff in a feature flag (merge request)
• Track related epics blocked added on usage data (merge request) GitLab Enterprise Edition
• Optimize followed users queries (merge request)
• Enable feature flag by default (merge request)
• Enable policy type selection page by default (merge request) GitLab Enterprise Edition
• Add DS_IMAGE_SUFFIX to enable Gemnasium FIPS (merge request)
• feat: Add SAST/SD template support for FIPS images (merge request)
• Enable FF ci_trigger_forward_variables (merge request)
• Add gitlab-pages http server timeout options documentation (merge request)
• Namespace onboarding action for license scanning (merge request) GitLab Enterprise Edition
• Enable feature flag by default (merge request) GitLab Enterprise Edition
• Default to the current group when importing from GitHub (merge request)
• Add metrics image UI for Alerts (merge request)
• Extend decomposition prometheus metric with information about CI (merge request)
• Introduce a onboarding_complete setting for GitLab Pages (merge request)
• Nullify dependent associations in batches on user deletion (merge request)
• Add option to add DAST_SUBMIT_FIELD (merge request) GitLab Enterprise Edition
• Default group/project issues list page to Vue refactor (merge request)
• Move arkose settings into database (merge request)
• Bump GitLab Pages to 1.57.0 (merge request)
• Update Security Policy to use FIPS images when FIPS Mode is enabled (merge request) GitLab Enterprise Edition
• Add ttl expiration to user otp_secrets (merge request)
• Implement wiki async page load (merge request)
• Allow uploading audio and video in content editor (merge request)
• Add identifer to response (merge request) GitLab Enterprise Edition
• Implement first iteration of the agents REST API by @tuxtimo (merge request)
• Backfill routes namespace_id for projects (merge request)
• Add periodic re-aggregation worker for VSA (merge request)
• Fire a Snowplow events with its definition on FE (merge request)
• Added MATLAB template by @nbhoski (merge request)
• Add new route for DAST profile library (merge request) GitLab Enterprise Edition
• Allow SKIP=remote option to be specified during backup by @kakakikikeke (merge request)
• Add a feature flag to control when we could prevent users to login (merge request) GitLab Enterprise Edition
• Allow bypassing registration when joining project (merge request) GitLab Enterprise Edition
• Track blocking epics removed on usage data (merge request) GitLab Enterprise Edition
• Add application settings to support inactive project deletion feature (merge request)
• Add epics.relative_position column if missing (merge request)
• Include inherited group links on group members page by @wwwjon (merge request)
• Implement wiki page async load (merge request)
• Add omniauth provider AliCloud by @zhanglinjie (merge request)
• Different copy on trial/registration flow (merge request) GitLab Enterprise Edition
• Add support for the deduplicated container repositories size (merge request)
• Fire a Snowplow events with its definition on BE (merge request) GitLab Enterprise Edition
• Adding FIPS support to DAST API/API Fuzzing latest CI template (merge request) GitLab Enterprise Edition
• Repeat the captcha check during the login (merge request) GitLab Enterprise Edition
• Allow Invitations API to receive user_ids (merge request)
• Add groups release API (merge request)
• Adds container_registry_size to project_statistics (merge request)
• Add not null and delete cascade constraints on project_namespace_id (merge request)
• Enable incremental repository backups (merge request)
• Add minute limit banner (merge request)
• Create unique index on projects namespace_id and name (merge request)
• Add resolve thread to permission table (merge request)
• Add audit events for merge request settings (merge request) GitLab Enterprise Edition
• Support security report schema version 14.1.1 (merge request)
• Add ability to query awaiting billable members (merge request)
• Add arkose verify response details to custom attributes (merge request) GitLab Enterprise Edition
• Implement detailed github status reporting (merge request)
• Allow invitation service to receive user_ids (merge request)
• Create status index for batched migrations (merge request)
• Allow to put migrations on hold for some time (merge request)
• Add dast_submit_field to DAST site profile (merge request)
• Add missing authorization (merge request) GitLab Enterprise Edition
• Add Commit Author to Pipeline List Page by @Taucher2003 (merge request)
• Track blocking epics added on usage ping (merge request) GitLab Enterprise Edition
• Add clear cache button to dependency proxy (merge request)
• Track linked epics removed on usage ping (merge request) GitLab Enterprise Edition
• Added deprecation notice to cluster creation pages (merge request)
• Created new feature flags for free and paid users (merge request) GitLab Enterprise Edition
• Add new CI/CD template for Liquibase by @szandany (merge request)
• Added a clipboard button to the "Branches" page in "Repository" by @DavidRotert (merge request)
• Add changed_by field to API members entities by @remyj38 (merge request)
• Support executable flag in repository files API by @tuxtimo (merge request)
• Adds kind field to JobType (merge request)
• Merge branch 'ahmetkaramercan17-master-patch-18116' into 'master' (merge request)
• awardEmoji: Display custom emoji (merge request)
• Enable Value Stream Analytics consistency check (merge request) GitLab Enterprise Edition
• Create index on security_findings(scan_id, id) (merge request)
• Display the tier of the environment on page (merge request)
• Use the remote ip for the captcha check (merge request) GitLab Enterprise Edition
• Add page size selector to vulnerability report (merge request) GitLab Enterprise Edition
• Add a temporary specialized index on project_namespace_id (merge request)
• Support template button focus state by @ahmetkaramercan17 (merge request)
• Remove pipeline_schedules_with_tags feature flag by @KevSlashNull (merge request)
• Introduce new Group Feature model and database structure (merge request)
• Search the user by username or email (merge request) GitLab Enterprise Edition
• Add collapsed comparer for license_scanning (merge request) GitLab Enterprise Edition
• Add harbor registry list page by @orozot (merge request)
• Add commit diff stats (merge request)
• Fix project name duplicates and missing project namespace ids (merge request)
• Add user limit notification for invite members modal (merge request)
• Add Runner releases API URL to ApplicationSetting (merge request)
• Add link to create group in general project settings (merge request)
• Implement sort param for bulk imports API (merge request)
• Add notification_level to namespace_root_storage_statistics table (merge request)
• Detect projects built for Apple iOS platform (merge request)
• feat: Add CI_GITLAB_FIPS_MODE to predefined CI variables (merge request)
• Add a test group cleanup worker to remove test groups on production (merge request)
• Allow administrators to set active pipelines limits (merge request)
• New Group Runners administration view (merge request)
• Allow restore tasks to be skipped using SKIP (merge request)
• Track api usage of the gitlab cli (merge request)
• Add support for the nested repositories container registry access token (merge request)
• Handle auth error for container registry (merge request) GitLab Enterprise Edition
• Introduce API for Change Failure Rate DORA metric (merge request)
• Added a create cluster page for the FF (merge request)
• Ensure project backfilling has finished (merge request)
• Add endpoint to decide if the ArkoseLabs integration should be triggered (merge request)
• Add delete endpoint for related epics (merge request) GitLab Enterprise Edition
• FIPS SSH key configuration settings (merge request)
• Add creator_id to deploy_tokens (merge request)
• Mark Import trackers as timed out with entities (merge request)
• Add ArkoseLabs verify request service (merge request)
• Add DB Grafana config as application settings (merge request)
• When no iterations are present show empty state by @sstern (merge request) GitLab Enterprise Edition
• Add timeout status to bulk importer (merge request)
• Remove improved_emoji_picker feature flag (merge request)
• Expose github stats in realtime_changes private API (merge request)
• Trigger an email when seat overage occurs (merge request) GitLab Enterprise Edition
• Implement GET API for GATs and PATs by @tuxtimo (merge request)
• Implement history for project imports (merge request)
• Expose import url and status in projects API (merge request)
• Render plantuml/kroki diagrams in content editor (merge request)
• Add "Created on" & "Last activity" columns to groups and projects page (merge request)
• Implement API to get single Project Remote Mirror by @tuxtimo (merge request)
• Extend workers and services to support namespace for Security Policies (merge request) GitLab Enterprise Edition
• Graceful degradation for refs endpoint (merge request)
• Add create endpoint for related epics (merge request) GitLab Enterprise Edition
• Expose namespace_id in users GET API for admins by @tuxtimo (merge request)
• Add Project template for Middleman (merge request)
• Implement DELETE API for Remote Mirrors by @tuxtimo (merge request)
• Add target_id option to TodosMarkAllDone mutation (merge request)
• Add ability to enable SAST at project creation (merge request)
• Implement API to get single MR rule by @tuxtimo (merge request) GitLab Enterprise Edition
• Add Migration[2.0] that enforces restrict_gitlab_migration (merge request)
• Allow administrators to change plan limits via the UI (merge request)
• Enable service ping for error tracking features (merge request)
• Show expired security report information on "pipeline security tab" (merge request) GitLab Enterprise Edition
• Send a notification email when a new email address is added by @rpadovani (merge request)
• Include code_coverage in presented build for runner (merge request)

Fixed (147 changes)

• Remove geo database from db_config_names (merge request)
• Fixed spacing for the loading icon in time tracker (merge request)
• Increase the visibility of the keyboard shortcut for Global Search (merge request)
• Update stage name to use truncate (merge request)
• banzai: Get Custom Emoji from group as well (merge request)
• Add scope to CustomEmoji to find emoji for resource (merge request)
• AwardEmoji: Don't look up url for built-in emoji (merge request)
• Fix rendering failure for the 'Verified' badge (merge request)
• Update links to CI/CD docs (merge request)
• Add default scan execution policies stage to pipeline (merge request) GitLab Enterprise Edition
• Move VSA aggregation migration to migrate folder (merge request)
• Enable fix_related_environments_for_merge_requests FF by default (merge request)
• Fix the conditions when we scope to gitlab-org (merge request) GitLab Enterprise Edition
• Use lowercase values in user search ordering (merge request)
• Always select an environment's last deployment by deploy date (merge request)
• Fix infinite activities requests on profile (merge request)
• Adds timeout to notebook rendering (merge request)
• Fix query params parsing when NOT operator is used (merge request) GitLab Enterprise Edition
• Fix regression with logic to add user primary email to emails (merge request)
• Updated the terraform empty state (merge request)
• Allow empty future subscriptions on seat link sync (merge request) GitLab Enterprise Edition
• Fix import button width on Issue list page (merge request)
• Fixes infinite loop when rendering Ipynb Diffs (merge request)
• Merged MR notification: Fix sprintf evaluation by @inakimalerba (merge request)
• Guard against Deployment#deployed_by being nil (merge request)
• Search Autocomplete: Review how icons are generated (merge request)
• Switch from respond_with_navigational to redirect_to (merge request)
• Adds timeout for notebook rendering on CustomDiff (merge request)
• Change Create commit button variant to confirm (merge request)
• Remove ci_destroy_all_expired_service feature flag (merge request)
• Fix tooltip and truncation on incident list (merge request)
• Fix "sticky" user popovers (merge request)
• Include *.jira.com in Jira Connect CSP frame ancestors (merge request)
• Fix doc link to code suggestions in MR diff tab (merge request)
• Fix impersonation created_at audit event field (merge request) GitLab Enterprise Edition
• Add validation for invalid protected branches for (merge request) GitLab Enterprise Edition
• Keep edited timestamp when reacting to old notes (merge request)
• Remove early exit to allow marking as complete (merge request)
• Fix scroll to line number (merge request)
• Change pipeline status to canceled (merge request)
• Fix Value Stream Analytics doc links (merge request) GitLab Enterprise Edition
• Change button variant to confirm (merge request) GitLab Enterprise Edition
• Add ability to pre/post-date audit events (merge request)
• Fix undefined method error for Compare, Commit controllers (merge request)
• Do not try to update a deleted record (merge request)
• Hide New Epic button on boards for guest users (merge request) GitLab Enterprise Edition
• Fix Licensee::InvalidLicense exception (merge request)
• Revert mergeability check changes (merge request)
• Add the ability to parse CWE-{number} format (merge request) GitLab Enterprise Edition
• Fix required data for referenced commands (merge request)
• Fix missing clear cache text inside the dependency proxy dropdown (merge request)
• Add search keyboard shortcut to docs (merge request)
• Fix for code search bug in Safari when zoomed (merge request)
• Fix the rubygems extraction service to not create subtransactions (merge request)
• Fix package file cleanup worker with PyPI files (merge request)
• Fix stale object error in Environment Stop (merge request)
• Remove Milestone token wildcard values (merge request) GitLab Enterprise Edition
• Fix incorrect empty state for filtered tag list (merge request)
• Reconfigure DB load balancing connection on code reload (merge request)
• Fix URL blocker when object storage enabled but type is disabled (merge request)
• Count nil artifact size as zero when recalculating (merge request)
• Remove FF ci_fix_order_of_subsequent_jobs (merge request)
• Remove pending builds from the queue on conflict (merge request)
• Add polling for commit pipeline status (merge request)
• Include X-Forwarded-Host when proxying and rewriting Host in Workhorse (merge request)
• Fixed UX bug in agent creation modal (merge request)
• Do not use GOPATH in default CI template (merge request)
• Move checks from mergeable to mergeable_state? (merge request)
• Use article tag on embedded snippets by @joshbouganim (merge request)
• Fix iteration dates adding timezone offset (merge request) GitLab Enterprise Edition
• Add polling to commit box graph (merge request)
• Add customers-dot URL to CSP not only in dev (merge request)
• Preserve sibling elements in settings search (merge request)
• Show quick actions link when editing comments (merge request)
• Test scanner creation (merge request) GitLab Enterprise Edition
• Fix null argument handling in background migration Rake task (merge request)
• Quote project key in Jira JQL queries (merge request) GitLab Enterprise Edition
• Handle commit being nil (merge request)
• Check task with no-break space by @tchandelle (merge request)
• Avoid milestone icon shrinking (merge request)
• Update BulkImports::EntityWorker deduplication strategy (merge request)
• Handle nil values in Grape length limit validator (merge request)
• Add SAML default membership asynchronously (merge request)
• Set account string when 2fa creation fails (merge request)
• Fix scope of project export download throttling by @eggerd (merge request)
• Preload group root ancestor for Group Projects API (merge request)
• Update secret detection template to remove fetch on historic scan (merge request)
• Fix bug when decrementing open MR count (merge request)
• Do not schedule project import when migrating using GitLab Migration (merge request)
• Mark token encryption job as completed when there are no users (merge request)
• Allow ConnectionNotEstablished for DB rake tasks using validate_config (merge request)
• Fix link deletion (merge request)
• Allow auditor to view group VSA analytics (merge request) GitLab Enterprise Edition
• Allow auditor to read group contribution analytics (merge request) GitLab Enterprise Edition
• Handle escaped underscores in usernames (merge request)
• Fix 500 error when visiting a non-existing integration (merge request)
• Expire relevant ETag caches for realtime_changes endpoints (merge request)
• Allow auditor to view repository analytics (merge request) GitLab Enterprise Edition
• Fix GraphQL pagination for vulnerabilities (merge request) GitLab Enterprise Edition
• Use cached column list for members union query (merge request)
• Add unique keyField for Blob types (merge request)
• Allow auditor to view devops adoption analytics (merge request) GitLab Enterprise Edition
• Fixed receiveDashboardValidationWarningsFailure by @gotounix (merge request)
• Handle BulkImports::ExportStatus incorrect export status value (merge request)
• Refactor environment empty state to use scope (merge request)
• Remove attempted redirection on non-HTML requests (merge request)
• Fix project permission toggle behavior (merge request)
• Fix project permission toggle behavior
• Fixed crm db seed trying to seed non-root groups by @leetickett (merge request)
• Don't include compliance pipeline definition in scheduled security orchestration pipelines (merge request) GitLab Enterprise Edition
• Fix code quality report display by @nanmu42 (merge request)
• Raise exception when gitaly-backup could not be found (merge request)
• Replace success variant with the confirm (merge request) GitLab Enterprise Edition
• Updated ComplianceViolation merged_at where checks to use DATE() (merge request) GitLab Enterprise Edition
• Fix missing metrics for Sidekiq exporter server (merge request)
• Fix incorrect new group path in import history (merge request)
• Scope Geo replication details progressbar popup target by site ID (merge request) GitLab Enterprise Edition
• Allow auditor to view grop productivity analytics (merge request) GitLab Enterprise Edition
• Fix credentials detection for UrlSanitizer (merge request)
• Revert Protected Environment group access inheritence (merge request)
• Add an example path for gitaly_backup_path setting (merge request)
• Suggestions: use template from target project instead of source project by @trakos (merge request)
• Fix issue with delete project container text (merge request) GitLab Enterprise Edition
• Fix error in table when text is too long (merge request)
• Ensure ci_environment_status always return latest deployment status (merge request)
• Fix create issue in board with weight (merge request) GitLab Enterprise Edition
• Fix GraphQlController not logging sessionless user (merge request)
• Limit audit events controller to 31 days date range (merge request) GitLab Enterprise Edition
• Fix ComplianceViolationResolver pagination with sorting (merge request) GitLab Enterprise Edition
• Fix PA for projects in nested groups (merge request) GitLab Enterprise Edition
• Improve topic avatar copy (merge request)
• Handle CRM objects when moving groups by @leetickett (merge request)
• Always pass data payloads as a hash for hooks (merge request)
• Adding a forced UTF-8 conversion to prevent encoding errors (merge request)
• Allow admins to invite groups they are not a member of for group (merge request)
• Update manual job message for protected jobs (merge request) GitLab Enterprise Edition
• Use last focused markdown field for quoted reply (merge request)
• Retain membership record for a personal project’s owner after transfer (merge request)
• Improve backup logging (merge request)
• Refetch runners list data after runner is updated (merge request)
• Fix markdown header toolbar showing in compact preview view (merge request)
• Fix vulnerability list clearing when already-selected filter is clicked (merge request) GitLab Enterprise Edition
• Upgrade rack-proxy to v0.7.2 (merge request)
• Convert seconds to minutes for the shared runner usage chart (merge request) GitLab Enterprise Edition
• Fix NoMethodError for CommitController (merge request)
• Fix backups not working when feature_flags table does not exist (merge request)
• SAST flawfinder + semgrep: add missing extensions by @blueur (merge request)

Changed (227 changes)

• Geo Sites - Empty Search State (merge request) GitLab Enterprise Edition
• Use GlAvatar in environments dashboard (merge request)
• Reduce size of file header buttons (merge request)
• Remove setting link from branches page (merge request)
• Bump Gitaly to v14.10.0.pre.rc1 by @nick.thomas (merge request)
• Downgrade coverage-check approval rule to premium (merge request) GitLab Enterprise Edition
• Migrate localization checkbox (merge request)
• Remove security_scan_succeeded from code by @svdj (merge request) GitLab Enterprise Edition
• Make OmniAuth initializer return Geo proxied URL when it exists (merge request) GitLab Enterprise Edition
• Replace generic checkbox with GitLab UI component (merge request) GitLab Enterprise Edition
• This MR replaces generic checkbox (merge request) GitLab Enterprise Edition
• Update variant to confirm (merge request)
• Use GlBroadcastMessage in Broadcast Message admin settings page (merge request)
• Change snippet award emoji state from active to selected (merge request)
• Disable image deletion during registry migration (merge request)
• Use Pajamas components for checkboxes in webhook forms (merge request)
• Update GITLAB_KAS_VERSION to 14.10.0 (merge request)
• Update icon to long arrow (merge request)
• Pass hash instead of URI to Elasticsearch client (merge request) GitLab Enterprise Edition
• Port checkboxes in spam settings to pajamas (merge request)
• Add spotbugs to analyzer order (merge request)
• Update variant to confirm (merge request)
• Allow invitations API to handle user invites as well as emails (merge request)
• Use pajamas checkbox for group owners can manage default branch checkbox (merge request)
• Migrate button to GlButton variants (merge request)
• Updates checkboxes in Admin -> Settings -> General (merge request)
• Use Pajamas styled checkbox in Admin help page form (merge request)
• Migrate checkboxes on user preferences page to be Pajamas compliant (merge request)
• Change variant to confirm (merge request) GitLab Enterprise Edition
• Update auto-deploy-image to v2.23.0 (merge request)
• Change delete project confirmation modal to default size (merge request)
• Migrate checkboxes on admin group edit page to be Pajamas compliant (merge request)
• Change subgroups to use official subgroup icon (merge request)
• Prevent global user searches (merge request)
• Move diff overflow warning into component (merge request)
• Add more helpful error when not authorized to update (merge request)
• Hide IP Address label when no space is available (merge request)
• Re-backfill escalation statuses (merge request)
• Update monitor deprecation notices (merge request)
• Update unprotect branch button variant and size (merge request)
• Update checkbox third party offers to be Pajamas compliant (merge request)
• Migrate checkboxes on user notifications page to be Pajamas compliant (merge request)
• Migrate pipeline setting checkbox to Pajamas design system (merge request)
• Use pajamas checkbox for appearance header and footer form (merge request)
• Improve readability for MR review emails (merge request)
• Update brand header logo to match tanuki height (merge request)
• Port admin hooks form to be pajamas compliant (merge request)
• Migrate account limits checkboxes (merge request)
• Update corpus management file size formatting to appear cleaner (merge request) GitLab Enterprise Edition
• Migrate admin pages settings to GitLab UI (merge request)
• Replace generic checkbox with GitLab UI element (merge request)
• Replace generic checkbox with GitLab UI component (merge request)
• Replace generic chackbox with GitLab UI element (merge request)
• Enable vulnerability_reads_table by default (merge request) GitLab Enterprise Edition
• Replace generic checkbox with GitLab UI component (merge request)
• Allow unconfirmed users in non-admin searches (merge request) GitLab Enterprise Edition
• Replace generic checkbox with GitLab UI element (merge request)
• Run all deployment jobs for the common pipeline with same environment (merge request)
• Replace generic checkbox with GitLab UI component (merge request)
• Remove group_import_export feature flag (merge request)
• Migrate checkbox for performance optimization settings (merge request)
• Recommend Helm for installing the GitLab agent (merge request)
• Read encrypted properties (merge request)
• Use Pajamas checkbox for ldap_access_setting.html.haml (merge request) GitLab Enterprise Edition
• Geo status: Explicate item counts (merge request) GitLab Enterprise Edition
• Add GlButton classes to complete button migration (merge request)
• Change button label (merge request)
• Add remaining storage size to namespace storage email notification (merge request)
• Make WebIDE dropdown fullwidth (merge request)
• Modify container-scanning template to automatically apply FIPS image (merge request)
• This MR adds info badge to DAST configuration card (merge request) GitLab Enterprise Edition
• Move Alerts metric image API to CE (merge request)
• Migrate form checkbox in the Grafana admin settings (merge request)
• This MR replaces generic checkbox (merge request) GitLab Enterprise Edition
• This MR replaces generic checkbox (merge request) GitLab Enterprise Edition
• Add help link for escalation status dropdown (merge request) GitLab Enterprise Edition
• Use GlAvatar in environments dashboard (merge request)
• Enable vulnerability_report_pagination feature flag by default (merge request) GitLab Enterprise Edition
• Replace generic checkbox with GitLab UI component (merge request)
• Use pajamas checkbox for user access level form (merge request)
• Add HTML5 validation to about your company form (merge request) GitLab Enterprise Edition
• Document Kubernetes 1.21 as supported (merge request)
• Migrate snowplow checkbox (merge request)
• Migrate sourcegraph checkboxes (merge request)
• Add more verbose error message if 2FA required (merge request)
• Port app settings checkboxes (merge request)
• Port checkbox in pipeline schedules (merge request)
• Change variant to confirm (merge request)
• Change variant to confirm (merge request)
• Change variant to confirm (merge request)
• Add validation for confidentiality notes (merge request)
• Add status to DependencyProxy::Manifest type in GraphQL (merge request)
• Migrate admin email checkboxes (merge request)
• Migrate group auto devops form to GitLab UI (merge request)
• Change variant to confirm (merge request)
• Change variant to confirm (merge request)
• Update to rails 6.1.4.7 (merge request)
• Change variant to confirm (merge request)
• Adds a project scoped unique file name constraint for Secure Files (merge request)
• Improve accessibility of Admin application settings page (merge request)
• Updated encyption key generation for Secure Files (merge request)
• Find topic by case insensitive name for detail page by @wwwjon (merge request)
• Bump Gitaly server to v14.10.0.pre.rc1 (merge request)
• Update GlButton variant to confirm in test cases (merge request) GitLab Enterprise Edition
• Added educational text about K8s deployments (merge request)
• Polish Jira issue fields UI (merge request) GitLab Enterprise Edition
• Use SHA256 fingerprint instead of MD5 for LFS token secret (merge request)
• Fix: notify service i18n for MR and Issues by @JeremyWuuuuu (merge request)
• Remove the ip check from the captcha challenge check (merge request) GitLab Enterprise Edition
• Polish UI of epic roadmap view (merge request) GitLab Enterprise Edition
• Only admins can search blocked and banned users (merge request) GitLab Enterprise Edition
• Polish jira_connect users UI (merge request)
• Remove support for file checksum to Secure File uploads (merge request)
• Updated Kubernetes clusters UI (merge request)
• Ignore unindexed projects that have no repository (merge request) GitLab Enterprise Edition
• Add repository size to Plan Limits by @zhzhang93 (merge request)
• Refactor DAST Profiles to use GraphQL fragments (merge request) GitLab Enterprise Edition
• Keep labels sorted by title after mutation (merge request)
• Move liquibase template up one directory (merge request)
• Show UsageData buttons only if cache exists (merge request)
• Extend namespace gitlab_subscription API (merge request) GitLab Enterprise Edition
• Serialize and deserialize by default for LocalStorageSync component (merge request)
• Update group overview icons to match sidebar icons (merge request)
• Don't generate MD5 fingerprint in FIPS mode (merge request)
• Log deprecated/unsupported report schema versions (merge request) GitLab Enterprise Edition
• Update DAST site profile mutations to return payload (merge request) GitLab Enterprise Edition
• Update DAST Scanner Profile Mutations to return payload (merge request) GitLab Enterprise Edition
• Replace compliance dashboard with new compliance violations report (merge request) GitLab Enterprise Edition
• Do not allow to change note's confidentiality (merge request)
• Removing the ignored column project_pages_metadata.artifacts_archive_id (merge request)
• Merge topics with same name by @wwwjon (merge request)
• Updated language on vulnerability report page (merge request) GitLab Enterprise Edition
• Remove gray background from milestone page (merge request)
• Replace runners 'active' filters with 'paused' (merge request)
• Merge branch '356485-refactor-detected-licenses' into 'master' (merge request) GitLab Enterprise Edition
• Migrate alert to shared partial in import group (merge request)
• Ensure Workhorse AWS endpoint is only used for S3 (merge request)
• Use GlAvatar in design note (merge request)
• Change license compliance to use warning alert (merge request)
• Migrate alert to shared partial in notifications (merge request)
• Change user popover avatar to supported size (merge request)
• gitlab/setup_helper: Migrate Gitaly to use runtime directory (merge request)
• Feat(License): update license type names (merge request) GitLab Enterprise Edition
• Add binaries folder and remove build flags in Go CI-Template (merge request)
• Roadmap App with Tree View (merge request) GitLab Enterprise Edition
• Remove link to content editor feedback issue (merge request)
• Remove user_email_lookup_limit column (merge request)
• Change container registry policy banner (merge request)
• FIPS support for API keys endpoint (merge request)
• Migrate diff stats view to component (merge request)
• Adds status popover in runners table header (merge request)
• Add labels to the 'Note on MR' webhook payload (merge request)
• Update locked tooltip for project runners (merge request)
• Update the translations (merge request)
• Filter out project bots from user results on invite members (merge request)
• Switch grad hat icon with bulb for learn gitlab (merge request)
• Remove go to profile text from tooltips (merge request)
• Update "locked" tooltips and text (merge request)
• Add index to improve speed of vulnerabilities (merge request)
• Update button text in pipeline editor (merge request)
• Make the shared/groups/_dropdown Pajamas compliant (merge request)
• Update help popover icon (merge request)
• Support attn alias for attention (merge request)
• Issue 323331 - createFlash called twice in search fetchProjects (merge request)
• Update help link in UI to remove 'ee' (merge request)
• Issue 351689 - Prevent autocomplete searches under X characters (merge request)
• Update DAST profile summary to hide empty values (merge request) GitLab Enterprise Edition
• Updated wording for the agent token instructions (merge request)
• Optimise ci_namespace_mirrors_for_group_members to search prefix (merge request)
• Relocate runner IP Address to Runner column (merge request)
• Redirect deprecated SSE to Web IDE (merge request)
• Migrate export group alerts to be Pajamas compliant (merge request)
• Adjust ProjectExportWorker urgency (merge request)
• Specify that the committer email is checked (merge request) GitLab Enterprise Edition
• Use GlAvatar in project_list_item component (merge request)
• Remove the jira_connect_installation_update flag (merge request)
• Add stricter e-mail validation for on push notification by @lenikadali (merge request)
• Geo migrations settings are included by default (merge request) GitLab Enterprise Edition
• Default multi_json to Oj (merge request)
• Update button text for DAST On-demand scans (merge request) GitLab Enterprise Edition
• gitlab/setup_helper: Migrate Gitaly to use runtime directory (merge request)
• Hide "Users in Subscription" card for Ultimate plans (merge request) GitLab Enterprise Edition
• Update copy for DAST Profile library page (merge request) GitLab Enterprise Edition
• Period limit default Insights yaml (merge request) GitLab Enterprise Edition
• Change default search rate limits (merge request)
• Adjust icons and button wording for license compliance (merge request)
• Generalize empty array for all scanners (merge request) GitLab Enterprise Edition
• Update mutation to unassign security policy from a group (merge request) GitLab Enterprise Edition
• Force Host header rewrite in Workhorse for Geo proxying (merge request) GitLab Enterprise Edition
• Order projects by real last update by @wwwjon (merge request)
• Use neutral colours for nav background (merge request)
• Capture user feedback in Feedback not Meta for Google Cloud app (merge request)
• Remove unnecessary html respond (merge request)
• Use instrumentation classes for Service Ping metrics (merge request)
• Expose membership_lock on group detail API by @jtymes (merge request) GitLab Enterprise Edition
• Remove block_namespace_serialization feature flag (merge request)
• Update mutation to create and assign security policy to a group (merge request) GitLab Enterprise Edition
• This MR adds new empty state for corpus management (merge request) GitLab Enterprise Edition
• Adding upload checksum to Secure Files API (merge request)
• Update tooltips for runner statuses (merge request)
• Ignore format of unmatched route (merge request)
• Remove feature flag ci_use_new_monthly_minutes (merge request) GitLab Enterprise Edition
• Add overage check for members and groups (merge request) GitLab Enterprise Edition
• Global Search - Enable Header Search Default (merge request)
• More helpful empty states for milestones (merge request)
• Remove omniauth_login_minimal_scopes feature flag (merge request)
• Link to previous path when viewing blame on renamed files by @tchandelle (merge request)
• Use gl-drawer for pipeline editor help drawer (merge request)
• Limit the number of commits in push merge request emails (merge request)
• Remove integration_form_sections feature flag (merge request)
• Enable refactor_blob_viewer by default (merge request)
• Enforce schema validation for security reports (merge request) GitLab Enterprise Edition
• Use GraphQL alias to simplify vulnerability list id property (merge request) GitLab Enterprise Edition
• Ignore search param for autosave on issue new form (merge request)
• Remove reliance on Flash styling (merge request) GitLab Enterprise Edition
• Add BlocksUnsafeSerialization to Namespace (merge request)
• Update mutation to commit security policy to a group (merge request) GitLab Enterprise Edition
• Increase remote import URL character length limit from 512 to 2048 (merge request)
• Migrate alert to gitlab-ui (merge request)
• Add empty state for Instance OAuth app page (merge request)
• Prevent encrypted fields from being serialized by default (merge request)
• Added severity to issues REST API by @stingrayza (merge request)
• Don't trigger a sentry error for Gitaly exceptions (merge request)
• Add index to improve speed of vulnerability_reads (merge request)
• Update the runner page alerts (merge request)
• Alias user_email_lookup_limit to search_rate_limit (merge request)
• Create about your company page for registration flow (merge request) GitLab Enterprise Edition

Deprecated (4 changes)

• Deprecate modifying notes confidentiality on API (merge request)
• Deprecate updating an iteration's attributes via GraphQL (merge request) GitLab Enterprise Edition
• Deprecate manual iteration creation (merge request) GitLab Enterprise Edition
• Deprecate deleting iterations via the GraphQL API (merge request) GitLab Enterprise Edition

Removed (16 changes)

• Remove the "Upgrade {rocket-emoji}" link from the user dropdown menu (merge request) GitLab Enterprise Edition
• Remove runner list in group settings (merge request)
• Remove diff_settings_usage_data flag (merge request)
• Remove bitmap creation housekeeping option (merge request)
• Remove unused MD5 generation logic for InsecureKey (merge request)
• Remove users_expanding_widgets_usage_data feature flag (merge request)
• Remove mrc_api_use_raw_diffs_from_gitaly flag (merge request)
• Remove usage_data_diff_searches feature flag (merge request)
• Remove remove_import_data_on_failure feature flag (merge request)
• Removal notice for rerequest review (merge request)
• Cleanup api_kaminari_count_with_limit feature flag by @jaspreet-3911 (merge request)
• Remove invite_team_email experiment code (merge request)
• Remove new_dir_modal feature flag (merge request)
• Remove feature flag gitaly_backup (merge request)
• Remove Balsamiq File Preview (merge request)
• Revert "Add Sbom Survey Banner" (merge request)

Security (25 changes)

• Add authorization to composer package archive download by @trakos (merge request)
• Remove ci_safe_artifact_content_type feature flag (merge request)
• Fix artifact content-type raw endpoint (merge request)
• Disallow login if password matches a fixed list (merge request)
• Upgrade swagger-ui dependency (merge request)
• Update devise-two-factor to 4.0.2 (merge request)
• Fix kroki exploit (merge request)
• GitLab Pages Security Updates for 14.9 (merge request)
• Revert "JH need more complex passwords" (merge request)
• Escape original content in reference redactor (merge request)
• Fix blind SSRF when looking up SSH host keys for mirroring (merge request)
• Hide features a user shouldn't be able to see in a list of forks (merge request)
• Modify release link format check to avoid regex if string is too long (merge request)
• Project import maps members' created_by_id users based on source user ID (merge request)
• Monkey patch of RDoc to prevent Ruby segfault (merge request)
• Escape user provided string to prevent XSS (merge request)
• Masks variables in error messages (merge request)
• Security fix for CI/CD analytics visibility (merge request)
• Limit the number of tags associated with a CI runner (merge request)
• Latest commit exposed through fork of a private project (merge request)
• Redact InvalidURIError error messages (merge request)
• Fix access for approval rules API (merge request)
• Fix Asana integration restricted branch filter (merge request)
• Add state param validation for Bitbucket OAuth flow (merge request)
• Fix artifacts content-type (merge request)

Performance (19 changes)

• Optimise Security::Finding cleanup by clearing build_id scope (merge request) GitLab Enterprise Edition
• Drop trace-inclusive artifact removal index from ci_job_artifacts (merge request)
• Make User#ci_owned_runners to use unnest index instead of GIN (merge request)
• Fix remaining N+1 queries in EnvironmentSerializer (merge request)
• Remove ci_artifact_fast_removal_large_loop_limit feature flag (merge request)
• Finalize asynchronously built index (merge request)
• Resolve "ActionView::Template::Error: 4:Deadline Exceeded." (merge request)
• Optimize the query on Environment Detail page (merge request)
• Improve query performance of attention requests count (merge request)
• Fix discussions N+1 queries (merge request)
• Optimize User#ci_owned_runners query V3 (merge request)
• Do not include highlighted_diff_email css for each note (merge request)
• Schedule async index build for ci_job_artifacts (merge request)
• Registry import enqueuer uses migration_plan (merge request) GitLab Enterprise Edition
• Prevent loading wiki content for destroy and diff actions (merge request)
• Make the Invite Modal load conditionally (merge request)
• Load highlight.js languages asynchronously (merge request)
• Move updating statistics logic outside of the transaction (merge request) GitLab Enterprise Edition
• Caches the by email lookup logic for user in member creation (merge request)

Other (66 changes)

• Finalize traversal_ids background migrations (merge request)
• Add tests for vulnerability_report.vue (merge request) GitLab Enterprise Edition
• Use StatisticsCard in usage_quotas/seats (merge request) GitLab Enterprise Edition
• Add new packages build infos finder (merge request)
• Fix usage of distance_of_time_in_words_to_now by @edith007 (merge request)
• Add unique index for work item type names with no namespace (merge request)
• Fix Style/OpenStructUse offenses by @edith007 (merge request)
• Fix Style/OpenStructUse offenses by using Struct by @edith007 (merge request)
• Refactor pipeline schedule variables (merge request)
• Bump Gitlab Shell version (merge request)
• Refactor: Introduce BaseThirdPartyWiki by @chaomao (merge request)
• Update RelationExportService to not export if recently exported (merge request)
• Makes BackfillWorkItemTypeIdOnIssues migration more efficient (merge request)
• Backfill dependency proxy size in namespace stats (merge request)
• Use statistics card in storage app (merge request) GitLab Enterprise Edition
• Set usage_activity_by_stage_monthly.create.merge_requests to removed (merge request)
• Remove obsolete wiki notes (merge request)
• Chore: remove track_editor_edit_actions FF (merge request)
• Removes ci_validate_job_length ff (merge request)
• Update BulkImports::PipelineWorker Ndjson perform delay (merge request)
• Remove import_project_from_remote_file ff (merge request)
• Add temp index for notes without discussion_id (merge request)
• Document how to add a new built-in project template (merge request)
• Fix Style/OpenStructUse offenses by @edith007 (merge request)
• Geo: (SSF) State machine refactoring (merge request)
• Run project after import when GitLab Migration is complete (merge request)
• Fix Style/OpenStructUse offenses by @edith007 (merge request)
• When building from source, require nodeJS >= 14.15.0 (merge request)
• Remove switch editing controls feature flag (merge request)
• Simplify third party container repository delete tags services by @edith007 (merge request)
• Remove the unused instance variable from the controller by @edith007 (merge request)
• Expose HTTP code during GitHub importer errors (merge request)
• Workhorse: bump gitaly client (merge request)
• Bump Gitlab Shell version (merge request)
• Remove header_read_timeout_buffered_io featureflag (merge request)
• Move compliance framework auditor to a new class (merge request) GitLab Enterprise Edition
• Cleanup secret variables refactoring in variables builder (merge request)
• Resolve Performance/DeletePrefix rubocop offenses by @edith007 (merge request) GitLab Enterprise Edition
• Fix typo in milestones empty state (merge request)
• Added read_usage_quotas ability to ProjectPolicy (merge request)
• Update API doc to show correct return type (merge request) GitLab Enterprise Edition
• Clean up after fixing issue when admin changes email (merge request)
• Remove use_model_load_balancing feature flag (merge request)
• Lazy initialization for user popovers by @cyberap (merge request)
• Migrate groups show page to GlTabs (merge request)
• Track related epics added on usage ping (merge request) GitLab Enterprise Edition
• Remove verify_protected_tags_for_pull_mirror feature flag (merge request)
• Remove feature flag spread_parallel_import (merge request)
• Resolve Rails/FindById rubocop offenses by @edith007 (merge request) GitLab Enterprise Edition
• Remove admin_application_settings_service_usage_data_center feature flag (merge request)
• Cleanup draft column data (merge request)
• Resolve Rails/BelongsTo rubocop offenses by @edith007 (merge request)
• Remove bulk_expire_project_artifacts feature flag (merge request)
• Backfill work_item_type_id for all Issues (merge request)
• Remove geo_token_user_authentication feature flag (merge request) GitLab Enterprise Edition
• Modeling for Multi Access Levels in Deployment Approval (merge request)
• Update GitLab Runner Helm Chart to 0.39.0 (merge request)
• Cleanup show_report_validation_warnings flag (merge request)
• Add tests for vulnerability report pagination feature (merge request) GitLab Enterprise Edition
• Remove temp index on id in vulnerability_occurrences (merge request)
• Fix the offences introduced by Performance/OpenStruct by @edith007 (merge request)
• Move BASE_FILTERS from filters/constants to security_dashboard/helpers (merge request) GitLab Enterprise Edition
• Add migration_plan to container_repositories (merge request)
• Bump Gitlab Shell version (merge request)
• Convert ci_builds-runner_id FK to LFK (merge request)
• Fix related epic links and issue links specs fixtures (merge request)

14.9.5 (2022-06-01)

Security (7 changes)

• Fix IP restrictions not applying to deploy tokens (merge request)
• Trigger token should respect group IP restrictions (merge request)
• Fix content injection in Jira issue title (merge request)
• Subgroup member can list members of parent group (merge request)
• Do not allow project member import when membership is locked (merge request)
• Disable changing user attributes when updating SCIM provisioned user (merge request)
• Allow only job owner to run interactive terminal (merge request)

14.9.4 (2022-04-29)

Security (15 changes)

• Fixes infinite loop when rendering Ipynb Diffs (merge request)
• Update Import/Export merge/push access levels & exclude ci config path (merge request)
• Prevent maintainers from editing PipelineSchedule (merge request)
• Add validation to pypi file sha256 values (merge request)
• Conan Token uses PAT rather than ID in payload (merge request)
• [security] Fix markdown API disclosing issue titles of limited projects (merge request)
• Verify that mentioned user can read TODO's note (merge request)
• Invalidate markdown cache to clear up stored XSS (merge request)
• Allow rate limiting of deploy tokens (merge request)
• Add suffix to cache name to add isolation (merge request)
• Disable wiki access with CI_JOB_TOKEN when improper access level (merge request)
• Sanitize error input to prevent HTML/CSS injection in messages (merge request)
• Secure debug trace artifact download (merge request)
• Use password type for all secret integration properties (merge request)
• Limit CI job group_name regexp (merge request)

14.9.3 (2022-04-12)

Fixed (4 changes)

• Revert Protected Environment group access inheritence (merge request)
• Fix URL blocker when object storage enabled but type is disabled (merge request)
• Remove pending builds from the queue on conflict (merge request)
• Fix null argument handling in background migration Rake task (merge request)

14.9.2 (2022-03-31)

Security (20 changes)

• Quarantine UsageDataNonSqlMetrics failing test (merge request)
• Disallow login if password matches a fixed list (merge request)
• Update devise-two-factor to 4.0.2 (merge request)
• Limit the number of tags associated with a CI runner (merge request)
• GitLab Pages Security Updates for 14.9 (merge request)
• Upgrade swagger-ui dependency (merge request)
• Modify release link format check to avoid regex if string is too long (merge request)
• Masks variables in error messages (merge request)
• Escape user provided string to prevent XSS (merge request)
• Monkey patch of RDoc to prevent Ruby segfault (merge request)
• Project import maps members' created_by_id users based on source user ID (merge request)
• Redact InvalidURIError error messages (merge request)
• Fix access for approval rules API (merge request)
• Fix kroki exploit (merge request)
• Fix blind SSRF when looking up SSH host keys for mirroring (merge request)
• Escape original content in reference redactor (merge request)
• Security fix for CI/CD analytics visibility (merge request)
• Latest commit exposed through fork of a private project (merge request)
• Fix Asana integration restricted branch filter (merge request)
• Revert "JH need more complex passwords" (merge request)

14.9.1 (2022-03-23)

Fixed (1 change)

• Fix backups not working when feature_flags table does not exist (merge request)

Changed (1 change)

• Alias user_email_lookup_limit to search_rate_limit (merge request)

14.9.0 (2022-03-21)

Added (119 changes)

• Toggle the related_epics_widge feature flag (merge request) GitLab Enterprise Edition
• Add Time to Restore Service DORA metric (merge request) GitLab Enterprise Edition
• Added possiblity to create new token from the UI (merge request)
• Add param to Wiki REST endpoint to retrieve different page versions (merge request)
• Add Harbor integration by @prajnamas (merge request)
• MR widget: update merge commit message when default changed by @trakos (merge request)
• Support agent registration without config (merge request)
• Add RestrictGitlabSchema that enforces restrict_gitlab_migration (merge request)
• Enable the vsa_incremental_worker FF by default (merge request)
• Add deployment approval comment field (merge request) GitLab Enterprise Edition
• Support iteration property for issues api (merge request) GitLab Enterprise Edition
• Filter archived issues / MRs from GraphQL (merge request)
• Purge security_findings records periodically (merge request) GitLab Enterprise Edition
• Upgrade GitLab Pages to 1.56.0 (merge request)
• Stream audit event on merge request approval (merge request) GitLab Enterprise Edition
• Use batches for pull request import jobs (merge request)
• Verify protected tags permissions for pull mirroring (merge request)
• Document how to use CI dependencies and parallel:matrix together (merge request)
• Add security training urls (merge request) GitLab Enterprise Edition
• Add Enterprise filter to members search bar (merge request) GitLab Enterprise Edition
• Add VulnerabilityReadsFinder to speed up API responses (merge request) GitLab Enterprise Edition
• Copy metric images from alert to new incident (merge request) GitLab Enterprise Edition
• Expose UserInteractions for participants of a merge request (merge request)
• Remove wiki_front_matter FF (merge request)
• Add default branch to Pipelines page filter if no search term provided (merge request)
• Creates asynchronously index on ci_job_artifacts table (merge request)
• GraphQL: Add notificationEmail to GroupMembers (merge request)
• Add external status checks total to ping (merge request) GitLab Enterprise Edition
• Add CAPTCHA to REST API (merge request)
• Implement GET APIs for Deploy Tokens by @tuxtimo (merge request)
• Add namespace to Security Policy Orchestration Configuration (merge request) GitLab Enterprise Edition
• Add deployment approval UI MVC (merge request) GitLab Enterprise Edition
• Add support for failure status status checks (merge request) GitLab Enterprise Edition
• Allow to list related epics on REST API (merge request) GitLab Enterprise Edition
• Add coverage_report keyword to CI config (merge request)
• Add audit logs when unassigning CI runner from a project (merge request) GitLab Enterprise Edition
• Permalink to the latest release (merge request)
• Allow the /merge quick action through graphql create note (merge request)
• Add projects with status checks to ping (merge request) GitLab Enterprise Edition
• Add security training providers (merge request)
• Add OpenSSL FIPS mode detection and env var (merge request)
• Support Vault EE namespaces by @aleksanderzak (merge request)
• Add free user cap feature flag and controls (merge request) GitLab Enterprise Edition
• Add support stackprof in GitLab profiler (merge request)
• Include invited groups into protected environments API (merge request) GitLab Enterprise Edition
• Add wiki page render option to wiki API (merge request)
• Remove rate_limit_user_sign_up_endpoint feature flag (merge request)
• Expose committers on mergeRequest GraphQL type (merge request)
• Add backend interface to look up for security training (merge request) GitLab Enterprise Edition
• Show security report warnings on pipeline security tab (merge request) GitLab Enterprise Edition
• Allow to destroy related epics association on internal API (merge request) GitLab Enterprise Edition
• Add frontend routing to Geo GraphQL specific sites (merge request) GitLab Enterprise Edition
• Add audit logs when assigning CI runner to project (merge request) GitLab Enterprise Edition
• Merge/squash commit templates: add %{all_commits} variable by @trakos (merge request)
• Add size to image details heade (merge request)
• Feat(Licesing): update upload to activate (merge request) GitLab Enterprise Edition
• Send a notification when a new access token is created by @rpadovani (merge request)
• Add audit event for project deploy tokens (merge request) GitLab Enterprise Edition
• Add audit event for group deploy tokens (merge request) GitLab Enterprise Edition
• Add suggestion to use short-living tokens to end-users (merge request)
• Add comment to Deployment Approvals (merge request) GitLab Enterprise Edition
• Parse pasted markdown (merge request)
• Remove rate_limit_user_by_id_endpoint feature flag (merge request)
• Remove rate_limit_username_exists_endpoint feature flag (merge request)
• Remove rate_limit_profile_update_username feature flag (merge request)
• Expose sum of weights for epic board lists on GraphQL endpoint (merge request) GitLab Enterprise Edition
• Add security scan status to GraphQL API (merge request) GitLab Enterprise Edition
• Add saved replies (merge request)
• Backfill all project namespaces (merge request)
• Implement API endpoint to get single SSH key for specific user by @tuxtimo (merge request)
• Add job_variables_attributes to play build API (merge request)
• Use fair queueing for Loose Foreign Keys (merge request)
• Add application setting for cleanup policy caching (merge request)
• Add GraphQL Todoable interface for to-do targets by @KevSlashNull (merge request)
• Add circuit breaker for gitlab experimentation (merge request)
• Add delete endpoint for Alert metric images (merge request) GitLab Enterprise Edition
• Enable Loose Foreign Keys partition rotation (merge request)
• Add scan method to dast site profile GraphQL API (merge request) GitLab Enterprise Edition
• Filter a pipeline by author by @genctys (merge request)
• Allow to pass suggestedColors to ColorPicker by @wwwjon (merge request)
• Add security_and_compliance_access_level to Projects API by @ytans (merge request)
• Add user and system note filters to note_authors association (merge request)
• Add analytics to detect deployment jobs being executed (merge request)
• Add filters and sorting to compliance violations GraphQL type (merge request) GitLab Enterprise Edition
• Add encoding field to wiki API (merge request)
• Add ingestion for Finding Evidence (merge request) GitLab Enterprise Edition
• Feat(Licensing): add Offline cloud type (merge request) GitLab Enterprise Edition
• Add webhook delivery method options to config/mail_room.yml (merge request)
• Improve strikethrough in Markdown editor by @smokris (merge request)
• Created compliance violation GraphQL type and added to Group type (merge request) GitLab Enterprise Edition
• Implement colour attribute for epics by @espadav8 (merge request)
• Add basic FIPS class (merge request)
• Add Dark Mode support to the image_tag helper (merge request)
• Add upload & update endpoints for alert metrics (merge request) GitLab Enterprise Edition
• API: Add endpoint to reset runner token with old token by @KyleFromKitware (merge request)
• Added updated_state_by_user to reviewers and assignees (merge request)
• Swapable cleaner/raw diffs for Notebooks (merge request)
• Upgrade GitLab Pages to 1.55.0 (merge request)
• Enable pending builds table queuing strategy (merge request)
• Add a timeline event pipeline filter to TimelineEvent (merge request) GitLab Enterprise Edition
• Add read API for Alert Metric Images (merge request) GitLab Enterprise Edition
• Support scoped iteration report (merge request) GitLab Enterprise Edition
• Add mutation to promote timeline event from a note (merge request) GitLab Enterprise Edition
• Add active and passive profiles (merge request) GitLab Enterprise Edition
• Support scoping for timebox report via GraphQL (merge request) GitLab Enterprise Edition
• Add aggregated VSA consistency check service (merge request)
• Return runner editUrl via GraphQL API (merge request)
• Add the total time chart to each VSA stage (merge request) GitLab Enterprise Edition
• Workhorse: Allow HTTPS for backends (merge request)
• Adds cross_project_pipeline_available to NamespaceType (merge request)
• Add readme in repo creation for reg flow (merge request) GitLab Enterprise Edition
• Hide markdown preview tab if editing non-markdown formats by @espadav8 (merge request)
• Log CI runner unregistration audit events (merge request) GitLab Enterprise Edition
• Add a consolidated button to edit blobs (merge request)
• Calculate storage statistics for dependency proxy (merge request)
• Latest release badge documentation inclusion (merge request)
• Add slash command to page incident (merge request) GitLab Enterprise Edition
• Expose container repository sizes (merge request)
• Create RelatedEpic table and model (merge request)

Fixed (132 changes)

• Cleaned up clusters_helper and cluster index haml (merge request)
• Update holder name column to 50 limit constraint (merge request)
• Improve wording for vulnerabilities_allowed (merge request) GitLab Enterprise Edition
• Add missing input box for search rate limiting configuration (merge request)
• Handle Jira Connect installation updates (merge request)
• Return a 422 error for Changelog::Error exception (merge request)
• Fix empty state pipelines page (merge request)
• Update attribute indirection (merge request) GitLab Enterprise Edition
• Fixed incorrect minimum number of users on subscription purchase flow (merge request) GitLab Enterprise Edition
• Refactor remove topic avatar (merge request)
• Fix default Ci config path (merge request)
• Fix ci.json: Remove Nesting from Secrets Rule (merge request)
• Fix DevopsAdoption usage metric gathering (merge request) GitLab Enterprise Edition
• Fix Epic and Label != filtered search suggestions not showing (merge request)
• Handle recursion when creating ApplicationSettings (merge request)
• Fall back to avaiable scope if scope is invalid (merge request)
• Fix sourcegraph breaking on projects/:id (merge request)
• Find or initialize Scanners using project_id (merge request) GitLab Enterprise Edition
• Add responsive property to area charts in CI minutes (merge request) GitLab Enterprise Edition
• Additional spec to capture bug in latest release permalink and fix same (merge request)
• Global Search - Fix ref based searches (merge request)
• Remove duplicate new cluster button (merge request)
• Increase token preview length in runner audit logs (merge request) GitLab Enterprise Edition
• Fix unexpected height stretch of CI job duration badge by @nanmu42 (merge request)
• Allow setting push events branch filter for group hooks (merge request) GitLab Enterprise Edition
• Support CRM contacts only in root groups by @leetickett (merge request)
• UI Bug Fix: Expand the early checks when using /merge quick action (merge request) GitLab Enterprise Edition
• Fix an inaccurate help page link (merge request)
• Add validation for rule/yaml modes switch (merge request) GitLab Enterprise Edition
• Fix namespace usage quotas storage pagination (merge request)
• Replace applications destroy alert with GlModal (merge request)
• Don't allow filtering by in alone on issue/MR dashboard (merge request)
• Allow invite group modal to render when membership is locked (merge request) GitLab Enterprise Edition
• Scan MR description when syncing builds with Jira (merge request)
• Set resoure_iteration_events to ghost user (merge request) GitLab Enterprise Edition
• Update BulkImports Export to handle unexpected failure (merge request)
• Fix UsageDataQueries API not returning a query (merge request) GitLab Enterprise Edition
• Fixed user cap evaluation for all OAuth login (merge request) GitLab Enterprise Edition
• Fix retrying of batched background migrations (merge request)
• Allow merge commits for SD (merge request)
• Fix startup crash in Puma single mode (merge request)
• Decouple policy name update from yaml/rule modes (merge request) GitLab Enterprise Edition
• Poll folder for changes in new environments page (merge request)
• Remove empty approvers in regards to (merge request) GitLab Enterprise Edition
• Check authorization to view billableMembersCount (merge request) GitLab Enterprise Edition
• Refactor repo deletion existence checking (merge request)
• Make hr in markdown visible in darkmode by @dianapaula19 (merge request)
• Fix filters presence check to take value into consideration (merge request)
• Param requires_python is optional for pypi (merge request)
• Ensure that the spaces between frontmatter are kept by @tchandelle (merge request)
• Fix sourcemap recovery error in Content Editor (merge request)
• Users who can read group should read group token (merge request)
• Fix bot token name in issues (merge request)
• Allow inherited members of groups to deploy protected environments (merge request)
• Update group bulk edit issues user docs (merge request)
• Fix variable in _prometheus.html.haml so it shows as a code block (merge request)
• Project settings: fix semi-linear merge description by @trakos (merge request)
• Fix rake task to seed Geo tracking database (merge request) GitLab Enterprise Edition
• Fix remove button overlap with other components (merge request) GitLab Enterprise Edition
• Include merge-requests in RESERVED_REFS_NAMES (merge request)
• Pass issue ID to merge request creation form (merge request)
• Apply omniauth defaults when no arguments are given (merge request)
• Fix Verify SAML Configuration button (merge request) GitLab Enterprise Edition
• Replace success variant with the confirm (merge request) GitLab Enterprise Edition
• Modify Union sql construction (merge request)
• Restart Action Cable server when Redis disconnects (merge request)
• Cache namespace first Auto DevOps config (merge request)
• Global Search - Header Search Snippets (merge request)
• Fix NoMethodError when visiting repo analytics (merge request) GitLab Enterprise Edition
• Skip navigation modal for cancel button (merge request)
• Handle not existing training ID for securityTrainingUpdate mutation (merge request) GitLab Enterprise Edition
• Fix VSA error with scoped labels (merge request) GitLab Enterprise Edition
• Fix markdown serialization in content editor (merge request)
• Fix the month view on CI usage by minutes bar chart by @parkourkarthik (merge request)
• Hard delete bulk snippets (merge request)
• Allow popups and links within mermaid diagrams (merge request)
• Fixed bug preventing agent creation from agent tab (merge request)
• Prevent database deadlocks when deleting projects (merge request)
• Fix mermaid background in dark mode (merge request)
• Change Edit to Open in Blob view to maintain consistency by @rajanamistry (merge request)
• Fix loading spinner for legacy Filtered search dropdown (merge request)
• Replace RegistrySearch component with PersistedSearch by @orozot (merge request)
• Fix sending BlobContent query with empty variables (merge request)
• Add container to qrtly reconciliation banner (merge request) GitLab Enterprise Edition
• Add container for manual renewal banner (merge request) GitLab Enterprise Edition
• Make loading spinner Pajamas compliant (merge request)
• Reset paging when sort is changed on vulnerability report (merge request) GitLab Enterprise Edition
• Fix job page copy source branch button by @leetickett (merge request)
• Raise error when diff note import fails (merge request)
• Fix group members tooltip label by @ali_o_kan (merge request)
• Fix loading icon in activity calendar (merge request)
• Fix rendering vulnerability markdown description (merge request) GitLab Enterprise Edition
• Filter commented_approvers for user note authors (merge request)
• Remove fix_comment_scroll feature flag (merge request)
• Fix error from invalid sha for include files (merge request)
• Fix GRPC 500 from BlobsResolver (merge request)
• Add error for cross pipeline dependencies (merge request)
• Handle received header fallback for missing Delivered-To (merge request)
• Fix erroneous all warning from race condition (merge request)
• Remove unnecessary margin to the right of the Show comment only dropdown by @rajanamistry (merge request)
• Expose merge request flag as boolean in the pipeline entity (merge request)
• Fix pull/push mirror authentication fields (merge request)
• Allow admin to register group runners at all times (merge request)
• Fix cross-database modification when resetting CI minutes (merge request)
• Ensures audit events are visible to auditor (merge request) GitLab Enterprise Edition
• Enable removing import data on failure by default (merge request)
• Fix flash color when there is an error by @ali_o_kan (merge request)
• Allow assigning users with private profiles (merge request)
• Fix multiple modals showing when canceling note (merge request)
• Allow admin to register project runners at all times (merge request)
• Block execution of cyclical pipelines (merge request)
• Ensures audit events are visible to auditor (merge request) GitLab Enterprise Edition
• Truncate Jira app key to be no longer than 64 (merge request)
• Ensure cleanup job artifacts task does not include pipeline artifacts (merge request)
• Avoid idling in transaction when fetching source for merge requests (merge request)
• Fix response of securityTrainingUpdate mutation (merge request) GitLab Enterprise Edition
• Remove CachingArrayResolver from epic issues (merge request) GitLab Enterprise Edition
• Do not mirror protected tags restricted for a creation (merge request) GitLab Enterprise Edition
• Hide white box at bottom of MR diff page (merge request)
• Stop backup files from requiring directories to exist when skipped (merge request)
• Fix the Content Editor strikethrough shortcut docs by @smokris (merge request)
• Fix TypeError from Tags::Reference (merge request)
• Fix copy button in Enable Review App modal by @aeboyaci (merge request)
• Pass all options from member entity (merge request)
• Automatically adapt the CSP when snowplow is enabled (merge request)
• Fix toolbar buttons in Markdown field (merge request)
• Fix Replace button form path (merge request)
• Allow project admin to read project approvals (merge request) GitLab Enterprise Edition
• Dynamically add AWS URLs to CSP on EKS auth page (merge request)
• Do not count group bot users from shared group towards seat usage (merge request) GitLab Enterprise Edition
• Make contribution graph email grouping ignore case (merge request)
• Don't return 500 error in Commits API when repository is missing (merge request)

Changed (194 changes)

• Add iteration selector to board scope (merge request) GitLab Enterprise Edition
• Block limited broadcast address (255.255.255.255) in UrlBlocker (merge request)
• Migrate to unique indices in projects runners tokens (merge request)
• Track git blame clicks from code search results (merge request)
• Split cluster creation page into two pages (merge request)
• Prevent group owners from deleting certain project runners (merge request)
• Remove unnecessary Edit tab in WebIDE by @Bisht13 (merge request)
• Switch AWS "easy button" icons with radio buttons (merge request)
• Update error message with importing container repository (merge request)
• Update runner Pause/Resume button labels (merge request)
• Update Jira integration form to have sections (merge request)
• Set geo_job_artifact_replication default to true (merge request) GitLab Enterprise Edition
• Use checkboxes to select target roles for broadcast messages (merge request)
• Add frontend validation to avoid duplicate asset link names by @emanuelfarias (merge request)
• Adding Secure Files upload limit (merge request)
• Promote exp: change_continuous_onboarding_link_urls (merge request)
• Move two-factor authentication callout to the todo-list page (merge request)
• Use new vulnerability report for pipeline security tab (merge request) GitLab Enterprise Edition
• Update job page for blocked deployments (merge request) GitLab Enterprise Edition
• Remove block_project_serialization feature flag (merge request)
• Migrate two-factor auth error message to shared HAML partial (merge request)
• Enable the geo_token_user_authentication FF by default (merge request)
• Do not ensure HEAD is default_branch on snippets (merge request)
• Project authorization is unique per user, project (merge request)
• Change CI lint primary button style by @gtsiolis (merge request)
• Add pipeline editor walkthrough feature permanently (merge request)
• Add error when acccess denied due to credit card (merge request) GitLab Enterprise Edition
• Turn the subscribable banner into an alert (merge request) GitLab Enterprise Edition
• Add configurable search rate limits (merge request)
• Improve email notification styling by @smokris (merge request)
• Enable API kaminari count with limit by @jaspreet-3911 (merge request)
• Bump GITLAB_KAS_VERSION to 14.9.0 (merge request)
• Revise merge-conflict modal text (merge request)
• Rename remove user action (merge request)
• Search presenter is a noop when given empty results (merge request)
• Restyle project deletion and restoration containers (merge request) GitLab Enterprise Edition
• Remove new environments table feature flag (merge request)
• Add link to incident title (merge request)
• Remove type from ruby template (merge request)
• Enable feature flags to resume artifact removal (merge request)
• Validate urls before attempting to download (merge request)
• Parse Snowplow value as Number (merge request)
• Remove placeholder and move error message in the form (merge request)
• Update auto-build-image to v1.9.1 (merge request)
• Remove feature flag to read finding evidence model (merge request) GitLab Enterprise Edition
• Removed compliance_violations_graphql_type feature flag (merge request) GitLab Enterprise Edition
• Enable show_report_validation_warnings by default (merge request)
• Use follow redirects middleware in the Container Registry clients (merge request)
• Use SAX parser for cobertura coverage reports (merge request)
• Migrate spinners in approver suggestion partial (merge request) GitLab Enterprise Edition
• Release chat notification branch filter for deployments (merge request)
• Add no-sort-reset prop to vulnerability list (merge request) GitLab Enterprise Edition
• Update placeholder text in import projects table (merge request)
• Reduce the number of buckets in Sidekiq histograms (merge request)
• Wrap alert in a DIV by @gitlab-dependency-update-bot (merge request) GitLab Enterprise Edition
• Remove vulnerability_finding_replace_metadata flag (merge request) GitLab Enterprise Edition
• Update group-level compliance framework to match project settings (merge request) GitLab Enterprise Edition
• Merge injected KUBECONFIGs for clusters and agents (merge request)
• Fallback to basic search on archived projects (merge request) GitLab Enterprise Edition
• Added cluster Actions menu to group and admin view (merge request)
• Remove feature flags for runner token prefix (merge request)
• Fix RSpec/TimecopTravel offenses (Part 2/2) by @KevSlashNull (merge request)
• Disallow integrated error tracking by default (merge request)
• Improve and internationalize Deployment Approval error messages (merge request) GitLab Enterprise Edition
• Update new issue form to match Pajamas specs (merge request)
• Refactor(Groups SSO): migrate to gl-tabs (merge request) GitLab Enterprise Edition
• Enable cleanup policies throttling by default (merge request)
• Global Search - Support non-js searches (merge request)
• Update icon, remove text, and switch (merge request)
• Allow to hide deployment target on New Project page by @wwwjon (merge request)
• Support GraphQL authentication with project tokens (merge request)
• Migrate Epic Tabs to use Button Group (merge request) GitLab Enterprise Edition
• Extend billable members count to accept requested hosted plan parameter (merge request) GitLab Enterprise Edition
• Bump Auto Deploy Image verion to v2.22.0 (merge request)
• Consider non-default config files for Security UI (merge request)
• Migrate loading spinners (merge request)
• Update project compliance frameworks settings (merge request) GitLab Enterprise Edition
• Issue 349398 - Update search field in Global Search (merge request)
• Header Search Refactor - Handle Errors in the component (merge request)
• Migrate spinners in archived projects partial (merge request)
• Migrate spinners in user's overview (merge request)
• Migrate spinners in explore groups partial (merge request)
• Creates audit event when approval rule is deleted (merge request) GitLab Enterprise Edition
• Creates audit event on approval rule creation (merge request) GitLab Enterprise Edition
• Update Auto DevOps docker versions to 20.x (merge request)
• Remove constraints from sprints table (merge request)
• Move Geo repository updated event creation into a worker (merge request) GitLab Enterprise Edition
• Migrate loading icon to be Pajamas compliant (merge request)
• Migrate loading spinners (merge request)
• Move default branch protection to repository settings (merge request)
• Migrate loading spinners (merge request)
• Update registration enabled callout (merge request)
• Migrate loading spinners (merge request)
• Iteration search uses cadence and iteration titles (merge request) GitLab Enterprise Edition
• Display license ID retrieved from CustomersDot (merge request) GitLab Enterprise Edition
• Re-introduce role-targeted broadcast messages (merge request)
• Use GlAvatar in security dashboard (merge request) GitLab Enterprise Edition
• Remove personal_project_owner_with_owner_access feature flag (merge request)
• Use the environment tier for jira connect deployment environment type by @alanandrade (merge request)
• Add unique index for security training providers (merge request)
• Allow tags as target of pipeline scheduled by @KevSlashNull (merge request)
• Migrate group/project member spinners (merge request)
• Migrate legacy spinner (merge request)
• Disable multi-project viz for free users (merge request)
• Update Import object persistence approach (merge request)
• Correct text of Banner message label (merge request) GitLab Enterprise Edition
• Remove non-human created tokens from PAT list (merge request) GitLab Enterprise Edition
• Remove non-human created tokens from PAT list (merge request) GitLab Enterprise Edition
• Update maximum allowable lifetime message for PAT (merge request) GitLab Enterprise Edition
• Disable the PA commit button when there are no changes (merge request)
• Add the "Support Ukraine" tanuki (merge request)
• Link new issue to original via checkbox by @smokris (merge request)
• Migrate gfm loading spinner (merge request)
• Use report-declared version of the schema (merge request) GitLab Enterprise Edition
• Migrate MAINTAINER access memberships to OWNER (merge request)
• Surface validation errors as warnings (merge request) GitLab Enterprise Edition
• Migrate loading icon (merge request)
• Geo secondary proxying: serve assets locally (merge request) GitLab Enterprise Edition
• Replace n/a with a hyphen in the runners table (merge request)
• Update Secret Detection template (merge request)
• Add alert and disable active checkbox (merge request)
• Improve UI text of sign-in restrictions (merge request)
• Put deprecated serverless features behind feature flag (merge request)
• Add BlocksUnsafeSerialization to Project (merge request)
• Add default_branch to KAS responses (merge request)
• Use GlButtonGroup instead of GlSegmentedControl (merge request) GitLab Enterprise Edition
• Change loading state jobs tab (merge request)
• Increase pipeline editor debounce to 500ms (merge request)
• Set danger variant and label to delete WA Device (merge request)
• Set danger variant and label to destroy oauth app (merge request)
• Set variants and labels to abuse report buttons (merge request)
• Set danger variant to delete artifact button (merge request)
• Set danger variant & labels for appearance buttons (merge request)
• Improve Sourcegraph settings text (merge request)
• Remove pipeline editor button from blob view (merge request)
• Refine copy for Jira integration (merge request)
• Project quality summary: add test runs empty state (merge request)
• Backfill member_namespace_id for GroupMember (merge request)
• Merge branch 'user-validation-failed-message' into 'master' (merge request)
• Improve user validation failed message (merge request)
• Remove releases with NULL tags and add not-NULL constraint (merge request)
• Replace success with confim variant (merge request)
• Suggest backend reviewer for erb and haml files (merge request)
• Add Gitlab.revision to Gitlab::JsonCache cache_key by default (merge request)
• Replace window.confirm with GlModa in environment actions (merge request)
• Use instrumentation classes for Service Ping generation (merge request)
• Remove null constraint from security_scan_succeeded column by @svdj (merge request)
• Improve the labels on Kubernetes Agent UI (merge request)
• Expose created_at when serializing Deployment Approvals (merge request) GitLab Enterprise Edition
• Split rebase action buttons into two separate buttons by @KevSlashNull (merge request)
• Reword 'build' to 'pipeline' in todos by @KevSlashNull (merge request)
• Update pipeline labels (merge request)
• Re-position the erase log button (merge request)
• Adjust incident list column widths and truncation (merge request)
• Replace the gitlab import haml modal with a GlModal (merge request)
• Adds a notification for a future dated license (merge request) GitLab Enterprise Edition
• Use strong params for ProjectsController by default (merge request)
• Update iteration lists (merge request) GitLab Enterprise Edition
• Improve accessibility on empty project page (merge request)
• Use GlAvatar in operations dashboard (merge request) GitLab Enterprise Edition
• Update trial status reminder design (merge request) GitLab Enterprise Edition
• Hide issue header dropdown button if there are no actions by @KevSlashNull (merge request)
• Use groups API for Approvals form by default (merge request) GitLab Enterprise Edition
• Remove the VSA duration chart stage dropdown (merge request) GitLab Enterprise Edition
• Introduce new jobs tab (merge request)
• Rate limit epic create service (merge request) GitLab Enterprise Edition
• Use sentence case for trigger events (merge request)
• Remove GlAlert contained prop (merge request) GitLab Enterprise Edition
• Switched title to h1 on issues (merge request)
• Improve Amazon EKS settings text (merge request)
• Stop using type, and use type_new instead (merge request)
• Drop show_diff_preview_in_email column (merge request)
• Add aria-label and tooltip to the emoji picker (merge request)
• Update cleanup policy parameters (merge request)
• Increase text limit of maintainer_note field (merge request)
• Clear future subscriptions info on license destroy (merge request) GitLab Enterprise Edition
• Change button variant to confirm in Web IDE modals (merge request)
• Allow only topic names that are case insensitive unique by @wwwjon (merge request)
• Return project delete errors (merge request)
• Replace GlSegmentedControl with GlDropdown (merge request)
• Change the order column of topics to non_private_projects_count by @wwwjon (merge request)
• Removed rate_limited_service_issues_create flag (merge request)
• Migrate create protected branch form to GlToggle (merge request)
• Deprecate test reports relationship with requirements (merge request) GitLab Enterprise Edition
• Update registry regex to allow 4 levels (merge request)
• Validate NOT NULL on security_findings.uuid column (merge request)
• Migrate edit protected branch form to GlToggle (merge request)
• Clean up feature flag publish_project_deleted_event to enable by default (merge request)
• Default to delayed deletion for projects not in personal namespace (merge request)
• Enable scan_result_policy by default (merge request) GitLab Enterprise Edition
• Append URL issue description to template by @smokris (merge request)
• Remove fork_project_form feature flag (merge request)
• Add SUPPORTED_VERSIONS and DEPRECATED_VERSIONS to SchemaValidator (merge request)
• Update documentation for Usage quota (merge request)

Deprecated (3 changes)

• Deprecate VALIDATE_SCHEMA configuration variable (merge request)
• Add deprecation notice to NetworkPolicyConnection (merge request) GitLab Enterprise Edition
• feat: Update SECURE_ANALYZER_PREFIX in all Sec Section templates (merge request)

Removed (10 changes)

• Clean up import and other invite members modal rollout pieces (merge request)
• Untrack external_pull_requests row deletions (merge request)
• Remove support for unsafe regular expressions (merge request)
• Drop unused partitioned_foreign_keys table (merge request)
• Cleanup Code Quality Walkthrough experiment (merge request)
• Cleanup Ci Runner Templates experiment (merge request)
• Remove :cluster_vulnerabilities feature flag (merge request) GitLab Enterprise Edition
• Clean up forcibly_show_trial_status_popover experiment (merge request)
• Remove security_report_ingestion_framework feature flag (merge request) GitLab Enterprise Edition
• Remove cache_shared_runners_enabled FF (merge request)

Security (16 changes)

• Set nosniff header on assets requests (merge request)
• Default enable header_read_timeout_buffered_io (merge request)
• Escape branch names in push instructions (merge request)
• Create Error.rb, update ProcessPolicyService by @FacVain (merge request) GitLab Enterprise Edition
• Add Integration.encrypted_properties (merge request)
• Warn when snippet contains unretrievable files
• Change runners_token prefix for Group and Project
• Add runners_token prefix to Group and Project
• Only expose id and name attributes when serializing deploy token (merge request)
• Prevent DOS when rendering math markdown
• Limit commands_changes to certain keys
• Reset password field on page load
• Check permission when creating members through service
• Check for unsafe characters in email addresses before sending
• Anonymous user can enumerate all users through GraphQL endpoint
• Exif metadata not stripped when uploading image attachments via Emails (merge request)

Performance (10 changes)

• Improve performance of group releases endpoints (merge request)
• Load highlight.js languages asynchronously (merge request)
• Add index on releases table to resolve cicd settings page timeout (merge request)
• Fix slow query for "All" tabs in "Your projects" activity page (merge request)
• Drop old index for security ci builds on name and id parser (merge request)
• Create new index for security ci builds with new features (merge request)
• Recreate index for security builds to include fuzzing jobs (merge request)
• Schedule async weekend build of index for job traces (merge request)
• Decrease the default fast statement timeout (merge request)
• GlTableLite in favor of GlTable for runners list (merge request)

Other (82 changes)

• Adjust NullifyOrphanRunnerIdOnCiBuilds batch parameters (merge request)
• Remove duplicate releases from projects (merge request)
• Pass formats explicitly when rendering .html format by @edith007 (merge request)
• Complete environments GET API docs by @tuxtimo (merge request)
• Add statistics seats card (merge request) GitLab Enterprise Edition
• Remove maxlength limit from the project description textarea (merge request)
• Add support for relating epics (merge request) GitLab Enterprise Edition
• Revert changes about moving methods to base class (merge request) GitLab Enterprise Edition
• Add list related epic links API documentation (merge request)
• Remove restrict_special_characters_in_project_path feature flag (merge request)
• Update import manifest alert (merge request)
• Update gcp signup offer to alert partial (merge request)
• Update runner edit alert to use partial (merge request)
• Fix GraphQL/FieldMethod offense (Part 1/2) by @KevSlashNull (merge request)
• Remove dependency list usage data from Redis (merge request) GitLab Enterprise Edition
• Remove corpus management feature flags (merge request) GitLab Enterprise Edition
• Fix artifacts with wrong expire_at date (merge request)
• Update data in batches while deleting a user (merge request) GitLab Enterprise Edition
• Document performance implication of the feature flags (merge request)
• Remove real-time feature flags (merge request)
• Move reactive cache methods to base class (merge request) GitLab Enterprise Edition
• This enables the pipeline_schedules_with_tags feature flag (merge request)
• Remove the invite members modal feature flag (merge request) GitLab Enterprise Edition
• Remove feature flag project_owners_list_project_pending_deletion (merge request) GitLab Enterprise Edition
• Update Web IDE copy (merge request)
• Add dispensable_render methods (merge request)
• Remove ci_pipeline_merge_request_presence_check feature flag (merge request)
• Remove default_merge_ref_for_diffs feature fflag (merge request)
• Remove rearrange_pipeline_table feature flag (merge request)
• Add RelatedEpicsLinks::DestroyService (merge request) GitLab Enterprise Edition
• Ignore requirements_management_test_reports.requirement_id column (merge request) GitLab Enterprise Edition
• Add nullify job for orphan runner_id columns of ci_builds (merge request)
• Rerun ConvertStringifiedRawMetadataHashToJson inline (merge request)
• Update GlAlert in security dashboard table (merge request) GitLab Enterprise Edition
• Fix GraphQL/OrderedFields offenses by @edith007 (merge request)
• Remove context_commits feature flag (merge request)
• Remove deprecated package application setting (merge request)
• Remove feature flag for bulk inserting job tags (merge request)
• Cleanup back-filling CI queuing tables migration (merge request)
• Fix GraphQL/OrderedFields offenses by @edith007 (merge request)
• Fix GraphQL/OrderedFields offenses by @edith007 (merge request)
• Fix GraphQL/OrderedFields offenses by @edith007 (merge request)
• Remove snippets_binary_blob FF (merge request)
• Remove usage_data_i_snippets_show FF (merge request)
• Implement Gitlab mirror scheduling tracker (merge request)
• Add certificate_based_clusters FF to Service Ping (merge request)
• danger: Use changelog rule from gitlab-dangerfiles (merge request)
• Resolve Rails/LinkToBlank rubocop offenses by @edith007 (merge request) GitLab Enterprise Edition
• Resolve Rails/IndexBy rubocop offenses by @edith007 (merge request) GitLab Enterprise Edition
• Fix Rails/SaveBang offenses by @edith007 (merge request) GitLab Enterprise Edition
• Remove feature flag group_merge_request_approval_settings_feature_flag (merge request) GitLab Enterprise Edition
• Move shared code for related epic links (merge request) GitLab Enterprise Edition
• Remove the container_expiration_policies_historic_entry feature flag (merge request)
• Fix GraphQL/OrderedFields offenses by @edith007 (merge request)
• Fix GraphQL/OrderedFields offenses by @edith007 (merge request)
• Fix GraphQL/OrderedFields offenses by @edith007 (merge request)
• Fix GraphQL/OrderedFields offenses by @edith007 (merge request) GitLab Enterprise Edition
• Fix GraphQL/OrderedFields offenses by @edith007 (merge request)
• Fix GraphQL/OrderedFields offenses by @edith007 (merge request) GitLab Enterprise Edition
• Support load timings for non-Chromium browsers by @davebarr (merge request)
• Resolve Rails/ShortI18n rubocop offenses by @edith007 (merge request)
• Migrate projects create from template page to GlTabs (merge request)
• Memoize group secret variables on the variables builder (merge request)
• Resolve Performance/Sum rubocop offenses by @edith007 (merge request) GitLab Enterprise Edition
• Resolve Performance/DeleteSuffix rubocop offenses by @edith007 (merge request)
• Remove feature flag for Group Projects API Plan Preloading (merge request) GitLab Enterprise Edition
• Show an IPv6 sample in placeholder text (merge request) GitLab Enterprise Edition
• Fix GraphQL/OrderedArguments offense (Part 6/6) by @KevSlashNull (merge request)
• Add advanced_search metrics to the dictionary (merge request) GitLab Enterprise Edition
• Rename usage column in storage projects-list (merge request) GitLab Enterprise Edition
• Set worker resource boundary for ImportRequirementsCsvWorker by @edith007 (merge request) GitLab Enterprise Edition
• Clean up roadmap_settings feature flag (merge request)
• Fix GraphQL/FieldDefinitions offense (Part 4/4) by @KevSlashNull (merge request)
• Fix GraphQL/OrderedArguments offense (Part 5/6) by @KevSlashNull (merge request)
• Simplify container repository delete tags services by @edith007 (merge request)
• Make labels sort dropdown pajamas compliant (merge request)
• Fix Style/OpenStructUse offenses in auth provider specs by @edith007 (merge request)
• Remove the generic_packages feature flag (merge request)
• Remove delegate as it's redundant due to SimpleDelegator by @edith007 (merge request)
• Remove unneeded override in Ci::PipelinePresenter by @edith007 (merge request)
• Clean up issue_boards_filtered_search feature flag (merge request)
• Add table for storing issue tsvector (merge request)

14.8.6 (2022-04-29)

Security (14 changes)

• Update Import/Export merge/push access levels & exclude ci config path (merge request)
• Prevent maintainers from editing PipelineSchedule (merge request)
• Add validation to pypi file sha256 values (merge request)
• Conan Token uses PAT rather than ID in payload (merge request)
• [security] Fix markdown API disclosing issue titles of limited projects (merge request)
• Verify that mentioned user can read TODO's note (merge request)
• Invalidate markdown cache to clear up stored XSS (merge request)
• Allow rate limiting of deploy tokens (merge request)
• Add suffix to cache name to add isolation (merge request)
• Disable wiki access with CI_JOB_TOKEN when improper access level (merge request)
• Sanitize error input to prevent HTML/CSS injection in messages (merge request)
• Secure debug trace artifact download (merge request)
• Use password type for all secret integration properties (merge request)
• Limit CI job group_name regexp (merge request)

14.8.5 (2022-03-31)

Security (21 changes)

• Update to commonmarker 0.23.4 (merge request)
• Revert merge request approval groups behavior (merge request)
• Disallow login if password matches a fixed list (merge request)
• Update devise-two-factor to 4.0.2 (merge request)
• Limit the number of tags associated with a CI runner (merge request)
• GitLab Pages Security Updates for 14.9 (merge request)
• Upgrade swagger-ui dependency (merge request)
• Modify release link format check to avoid regex if string is too long (merge request)
• Masks variables in error messages (merge request)
• Escape user provided string to prevent XSS (merge request)
• Monkey patch of RDoc to prevent Ruby segfault (merge request)
• Project import maps members' created_by_id users based on source user ID (merge request)
• Redact InvalidURIError error messages (merge request)
• Fix access for approval rules API (merge request)
• Fix kroki exploit (merge request)
• Fix blind SSRF when looking up SSH host keys for mirroring (merge request)
• Escape original content in reference redactor (merge request)
• Security fix for CI/CD analytics visibility (merge request)
• Latest commit exposed through fork of a private project (merge request)
• Fix Asana integration restricted branch filter (merge request)
• Revert "JH need more complex passwords" (merge request)

14.8.4 (2022-03-16)

Added (1 change)

• Detect and fix artifacts with backfilled expire_at (merge request)

Fixed (1 change)

• Pass issue ID to merge request creation form (merge request)

Changed (1 change)

• Enable feature flags to resume artifact removal on self-managed (merge request)

14.8.3 (2022-03-14)

Fixed (3 changes)

• Fix rake task to setup the Geo tracking database (merge request) GitLab Enterprise Edition
• Fix handling of resource iteration events when deleting a User (merge request) GitLab Enterprise Edition
• Ensure cleanup job artifacts task does not include pipeline artifacts (merge request)

Changed (1 change)

• Remove runners token prefix feature flags (merge request)

14.8.2 (2022-02-25)

Security (8 changes)

• Limit commands_changes to certain keys (merge request)
• Add runners_token prefix to Group and Project (merge request)
• Anonymous user can enumerate all users through GraphQL endpoint (merge request)
• Check for unsafe characters in email addresses before sending (merge request)
• Warn when snippet contains unretrievable files (merge request)
• Prevent DOS when rendering math markdown (merge request)
• Check permission when creating members through service (merge request)
• Reset password field on page load (merge request)

14.8.1 (2022-02-23)

Fixed (3 changes)

• Allow assigning users with private profiles with quick-actions (merge request)
• Stop backup files from requiring directories to exist when skipped (merge request)
• Fix toolbar buttons in Markdown field (merge request)

14.8.0 (2022-02-21)

Added (134 changes)

• Add fields to PipelineSecurityReportFindingType (merge request) GitLab Enterprise Edition
• Add overage confirmation modal (merge request) GitLab Enterprise Edition
• Add custom tags to the Datadog integration by @AdrianLC (merge request)
• Save sort on querystring for vulnerability report (merge request) GitLab Enterprise Edition
• Pipeline and other fixes to community contribution (merge request)
• Allow broadcast messages to be targeted to the current user's role (merge request)
• Provide FF to project edit action (merge request) GitLab Enterprise Edition
• Stream audit events using audit event JSON (merge request) GitLab Enterprise Edition
• Add CI minutes usage charts to group usage quotas (merge request) GitLab Enterprise Edition
• Defaulted roadmap_settings to true (merge request)
• GraphQL: Expose token_expires_at property and sorting by @KyleFromKitware (merge request)
• Add scan method to dast site profile (merge request)
• Enable admin runner read-only runner view (merge request)
• Enable corpus management for self-managed installs (merge request) GitLab Enterprise Edition
• Fix(SM: Subscription): Refresh local state (merge request) GitLab Enterprise Edition
• Enable Service Usage data page by default (merge request)
• Exclude pending memberships from billable members count (merge request) GitLab Enterprise Edition
• Make granting of open-source license to public projects configurable (merge request)
• Enable prohibition of hex branch names (merge request)
• Add dependency_proxy_size to GraphQL type (merge request)
• Removed work_items_hierarchy feature flag (merge request)
• Add the ability to ban users in the Admin Area (merge request)
• Add "Delete" group button to the groups dashboard (merge request)
• Registry import enqueuer (merge request)
• Add crm system notes by @leetickett (merge request)
• Extend the GraphQL interface with securityTrainingUpdate mutation (merge request) GitLab Enterprise Edition
• Add alert metric image table and basic model (merge request)
• Add required approvals to Protected Environment settings (merge request) GitLab Enterprise Edition
• Add GEMNASIUM_LIBRARY_SCAN_ENABLED variable (merge request)
• Allow to list project group ancestors on REST API (merge request)
• Upgrade GitLab Pages to 1.54.0 (merge request)
• Add public_projects_count counter to topics by @wwwjon (merge request)
• Registry import observer worker (merge request)
• Add support for contacts autocompletion (merge request)
• Add the registry migration guard job (merge request)
• Save audit events for start/stop user impersonation to group level (merge request) GitLab Enterprise Edition
• Add ability to download Service Ping payload (merge request)
• Backfill route namespace_id for namespaces (merge request)
• Support position params in issue creation mutation (merge request)
• Add dependency proxy migrate rake task (merge request)
• Add script to track clicks for RF offer (merge request) GitLab Enterprise Edition
• Add owner_valid to Dast::ProfileScheduleType (merge request) GitLab Enterprise Edition
• Add deprecation notice to the Serverless UI (merge request)
• Add Project Access Tokens to credentials inventory (merge request) GitLab Enterprise Edition
• Copy contacts when moving an issue (merge request)
• Request deployment target info from users (merge request)
• Add utility method to add parameters to a URL (merge request)
• Enable invite member modal by default (merge request)
• Add GraphQL API endpoint access from primary to secondary Geo nodes (merge request) GitLab Enterprise Edition
• Add epic sort by last created or updated (merge request) GitLab Enterprise Edition
• Add epic sort by last created or updated (merge request) GitLab Enterprise Edition
• Add simple multi select for when the number of (merge request) GitLab Enterprise Edition
• Cache shared runners enabled check (merge request)
• Implement fair queueing for LFK (merge request)
• Add max_batch_size to batched migrations table (merge request)
• Add setting to not display code diffs in MR review emails by @joe-snyder (merge request)
• Add attention requests to the MR list view (merge request)
• Add version column to the Agent listing page (merge request)
• Add owners array to webhook data (merge request)
• Enable searching for MRs by updated_at (merge request)
• Support "ecdsa-sk" and "ed25519-sk" SSH keys (merge request)
• Promote the trial_registrations_with_reassurance experiment (merge request) GitLab Enterprise Edition
• Record and publish application boot time (merge request)
• Add GraphQL create API for incident timeline events (merge request) GitLab Enterprise Edition
• Populate data for vulnerability_reads from vulnerabilities (merge request)
• Remove deployment_approvals feature flag (merge request) GitLab Enterprise Edition
• Added Qualys IaC Security template by @mbachhav (merge request)
• CI/CD analytics: Add metric tiles (merge request) GitLab Enterprise Edition
• Show KAS version on admin dashboard (merge request)
• Add validation to check if branches are valid for security policy (merge request) GitLab Enterprise Edition
• Add Container Registry migration notification APIs (merge request)
• Allow group maintainers to list provisioned users for a group (merge request) GitLab Enterprise Edition
• Upgrade GitLab Pages to 1.53.0 (merge request)
• Enable Configure with a MR button for Container Scanning (merge request) GitLab Enterprise Edition
• Enable json_limited_encoder ff by default (merge request)
• Add Blob#symlink? boolean method (merge request)
• Feat(SM: Subscription History): add future subscr (merge request) GitLab Enterprise Edition
• Remove extract_mr_diff_commit_deletions FF (merge request)
• Add enabling container-scanning for project with GraphQL (merge request) GitLab Enterprise Edition
• Add median to CI/CD lead time chart (merge request) GitLab Enterprise Edition
• Feat(SM: Subscription Activation): size + text GitLab Enterprise Edition
• Bump GitLab pages to 1.52.0 (merge request)
• Feat(SM: Subscription Activation): size + text (merge request) GitLab Enterprise Edition
• Remove vue_epics_list and legacy code (merge request) GitLab Enterprise Edition
• Add triggers to sync vulnerability_reads (merge request)
• Add ability to search for an escalation policy by name (merge request) GitLab Enterprise Edition
• Expose language field in GraphQL blob type (merge request)
• Adds mergeRequestInteraction to GraphQL MemberInterface type (merge request)
• Ask for feedback on the Agent listing page (merge request)
• Re-remove foreign keys on GitLab.com (merge request)
• Add Planning Hierarchy page (merge request)
• Enable Gitlab Shell rate limit by default (merge request)
• Enable bulk job tags insertion by default (merge request)
• GraphQL: Add jobs field to CiRunner (merge request)
• Add a GraphQL resolvers to get pipeline counts by scope (merge request)
• Pass custom slots from HelpPopover to GlPopover (merge request)
• Enable project owners to list their projects pending deletion by default (merge request) GitLab Enterprise Edition
• Hide ancestor groups in group invites (merge request)
• Track api usage of the jetbrains plugin (merge request)
• Indicate locked users in Admin Area users list (merge request)
• Add metric tile component (merge request)
• Support iteration search by cadence title (merge request) GitLab Enterprise Edition
• Add badge for invited user (merge request)
• Remove import_redis_increment_by feature flag (merge request)
• Submit ServicePing generation errors to Version app (merge request)
• Add mutation for updating user preferences (merge request)
• Add Graphql mutation to update timeline event (merge request) GitLab Enterprise Edition
• Log project export timings (merge request)
• Re-enable sanboxed mermaid FF with a fix (merge request)
• Redirect in-app trial users to the feature (merge request) GitLab Enterprise Edition
• Add more issue due_date filters to API by @leetickett (merge request)
• Add support for the gitlab container registry API (merge request)
• CI Runners: Support sorting by token_expires_at by @KyleFromKitware (merge request)
• Restrict JWT requests when importing repositories (merge request)
• Show deprecation notification in pipeline page (merge request)
• Allow project owners to list & restore their projects pending deletion (merge request) GitLab Enterprise Edition
• Allow merge requests to be sorted by title (merge request)
• Add everage to CI/CD deployment chart (merge request) GitLab Enterprise Edition
• Add improved readme content for all new projects (merge request)
• Adds dependency_proxy_size to namespace statistics (merge request)
• GraphQL: Add projects property to CiRunner type (merge request)
• Add identifier to VSA summary metrics (merge request)
• GraphQL: Add groups property to Runner type (merge request)
• Add verification header for streamed events (merge request)
• Hide issue contacts and quick actions by @leetickett (merge request)
• Update templates for repository size RF CTA (merge request) GitLab Enterprise Edition
• Adds dependency_proxy_size to root storage stats (merge request)
• CI Runners: Add token expiration field by @KyleFromKitware (merge request)
• Add state/province selector to trials (merge request) GitLab Enterprise Edition
• Add audit logging for runner registration (merge request) GitLab Enterprise Edition
• Support default templates for issues/MRs via .gitlab/ folders by @davebarr (merge request)
• Allow querying recent boards in a group or project (merge request)
• Add url_text column to issuable metric images (merge request)
• Add migration for backfilling project namespaces (merge request)

Fixed (168 changes)

• Allow specifying project name on importing an exported GitLab project by @zhzhang93 (merge request)
• Clean up wrong max_seats_used batch two (merge request)
• Fix Date::Error exception when viewing audit logs for an invalid date (merge request) GitLab Enterprise Edition
• Revert "Merge branch 'if-personal_project_owners' into 'master'" (merge request)
• Fix unit display for VSA charts (merge request) GitLab Enterprise Edition
• Added merge policy for design collection (merge request)
• Fix merge request tabs background leakage (merge request)
• Fix position when creating issue in issue boards (merge request)
• Delete issue contacts if project root changed by @leetickett (merge request)
• Revert user already exists to members API (merge request)
• Avoid exceptions from un-symbolizable job names (merge request)
• Block external fork mirrors (merge request)
• Allow testing of disabled hooks (merge request)
• Fix duplicate draft help text (merge request)
• Stop browser from caching learn gitlab (merge request) GitLab Enterprise Edition
• Add ref param to project level ci/lint by @thadc23 (merge request)
• Apply PJs styling to Pages DNS badge (merge request)
• Fix missing discussion_id in GitHub imports (merge request)
• Allows invite modal to re-invite single users (merge request)
• Add encoding for url params for board filtered search by @sstern (merge request)
• Handle Gitaly error on fetching total-branches for pipeline editor (merge request)
• Fix typo in Pull mirror verification (merge request) GitLab Enterprise Edition
• Allow to toggle requirements_access_level on REST API (merge request) GitLab Enterprise Edition
• Allow GC to run if deduplication service runs into an error (merge request)
• Render submit button only once in Pages settings (merge request)
• Update GitHub PRs Importer to force update repository (merge request)
• Use strong parameters for CompareController (merge request)
• Fix default sort for tags page (merge request)
• Update namespace statistics when project is destroyed (merge request)
• Don't rebase when the branch protected from force push (merge request)
• fix: Reintroduce top-level SAST_ANALYZER_IMAGE_TAG for SCS (merge request)
• Fix typo in Gitlab::Changelog::Release (merge request)
• Merge branch... (merge request)
• Fix corpus delete by updating corpus fetch (merge request) GitLab Enterprise Edition
• Return an error for an invalid ref_name (merge request)
• Fix Geo checksummable check failing when file is nil (merge request) GitLab Enterprise Edition
• Fix layout issues for project tokens in credentials inventory (merge request) GitLab Enterprise Edition
• Use StrongParameters for ExtractsRef (merge request)
• Remove label hover state css override in right sidebars (merge request)
• Change minutes field to shared_runners_duration (merge request) GitLab Enterprise Edition
• Don't record the exception when the repostory already exists (merge request)
• Allow sorting epics by created & updated dates (merge request) GitLab Enterprise Edition
• Use StrongParameters for ProjectsController (merge request)
• Reject reply by email to notification if the from email is not verified (merge request)
• Fix Typo in Protected Tags Settings by @Taucher2003 (merge request)
• Roadmap - Fix today indicator alignment (merge request) GitLab Enterprise Edition
• MacOS remove horizontal scroll in left navigation by @OmerFarukMerey (merge request) GitLab Enterprise Edition
• Remove secondary variant from agent modal cancel button (merge request)
• Add width and alt tag to image in trial flow second step (merge request)
• Fix provisioned_users API endpoint with full_path (merge request) GitLab Enterprise Edition
• Verify project id in API (merge request)
• Fix NoMethodError for calling modified_paths on nil pipeline (merge request)
• Introduce concept of parse errors for quick actions (merge request)
• Test the logical path rather than the real path (merge request)
• Fix merge requests page dark mode (merge request)
• Remove container-image: from location on the Dependency List (merge request) GitLab Enterprise Edition
• Remove dangling running entries from ci running builds table (merge request)
• Reject MIME parts with unsupported encoding (merge request)
• Drop legacy finished at in Deployment (merge request)
• Use strong_parameters for RefsController (merge request)
• Check for group confidential access in EpicsFinder (merge request) GitLab Enterprise Edition
• Allow searching of users using less than 3 chars (merge request)
• Fix label links in MR system notes (merge request)
• Epic boards - Hide toggled off Open column (merge request)
• Fix for rate lmiting test errrors (merge request) GitLab Enterprise Edition
• Catch GitLab::HTTP:ERRORS while streaming auditevents (merge request) GitLab Enterprise Edition
• Fix missing upvote/downvote counts on Epics list (merge request) GitLab Enterprise Edition
• Roadmap - Fix bar width for week layout (merge request) GitLab Enterprise Edition
• Improve dashboard projects blank state code (merge request)
• Fix how busy is displayed in group/project members list (merge request)
• Fix NoMethodError for RefsController (merge request)
• Merge stable Jobs/Deploy.gitlab-ci.yml into latest (merge request)
• Create specific CE display_public_email? user helper (merge request)
• REST: Fix scope of GET /projects/:id/runners endpoint (merge request)
• Validate that reference exists for atom format (merge request)
• Fix reverse tabnabbing vulnerability with improper URL protocol (merge request)
• Allow mergeability check when merge_status is already checking (merge request)
• Validate sort parameter for branches page and branches API (merge request)
• Fix deep linking into settings panels (merge request)
• Deduplicate findings by comparing the UUIDs (merge request) GitLab Enterprise Edition
• Fix Popen not always returning error code (merge request)
• REST: Follow shared runners setting (merge request)
• Fix spacing issue in the packages version details (merge request)
• REST: Fix scope of /groups/:id/runners?type endpoint (merge request)
• Add darkmode variant for black-normal color (merge request)
• Enable Zip64 support (merge request)
• Fix arrow that was overlapping button in Admin -> Users by @orozot (merge request)
• Fix search term case sensitivity for transfer namespace (merge request)
• Show underscores in branch name in merge request by @brcampbell1 (merge request)
• Fix editor browser modal when creating new MR (merge request)
• Fix NoMethodError when commit is missing (merge request)
• Fix incorrect render in JUnit merge UI with null or blank name value (merge request)
• Add id to user of ZentaoSerializers by @icbd GitLab Enterprise Edition
• Remove invalid groups from sharing in invite group modal
• Add id to user of ZentaoSerializers by @icbd (merge request) GitLab Enterprise Edition
• Remove invalid groups from sharing in invite group modal (merge request)
• Revert "Merge branch 'revert-b59c6630' into 'master'" (merge request)
• Geo: Mark object stored files verified (merge request) GitLab Enterprise Edition
• Fix exception when epic has no author (merge request)
• Use finding signatures in deduplication logic (merge request) GitLab Enterprise Edition
• Use strong parameters for CommitsController (merge request)
• Don't return 500 error for tags in atom format (merge request)
• Use strong_parameters for ForksController#index (merge request)
• Fix NoMethodError for empty changelog (merge request)
• Fix typo in RepositoryController#cleanup (merge request)
• Restrict pagination per_page possible values (merge request)
• Fix input parameter validation for tags controller (merge request)
• Fix NoMethodError for UnfoldPresenter (merge request)
• Deprecate and replace MR with approval rules metric (merge request) GitLab Enterprise Edition
• Sign out before redirecting to login page (merge request)
• Restore the lost success event handler for hiding the verification modal (merge request) GitLab Enterprise Edition
• Dedup Ci::RunnerProjects (merge request)
• Allow searching of users using less than 3 chars (merge request)
• Allow all users within a group to view all compliance frameworks (merge request) GitLab Enterprise Edition
• Sort vulnerability identifiers on ingestion to prevent Deadlock errors (merge request) GitLab Enterprise Edition
• Refactor issue move to not require group_id param (merge request)
• Pass URI to elasticsearch client instead of string (merge request) GitLab Enterprise Edition
• Add rouge-ruby Comment.Doc style support by @zsgsdesign (merge request)
• Fix long label overflow in the sidebar by @smortex (merge request)
• Fix hidden notifications dropdown on smaller screens (merge request)
• Change epic list payload variable to uppercase by @orozot (merge request) GitLab Enterprise Edition
• Change trials_link_url name to callouts_trials_link_url by @orozot (merge request) GitLab Enterprise Edition
• Only call the resolved service if we resolve all the active notes (merge request)
• Gracefully handle unexpected severities in code quality report (merge request)
• Ensure mergeability check runs on specific cases (merge request)
• Re-align "Register" and "Cancel" buttons in Agent installation modal (merge request)
• Geo: Fix verification failures of remote stored files (merge request) GitLab Enterprise Edition
• Update project export job status upon failure (merge request)
• GitLab Version - CE Admin Dashboard (merge request)
• Ensure git url validation is always performed (merge request)
• Bump default auto-deploy-image to 2.18.1 (merge request)
• Set class name for the proxy ingestion tasks (merge request) GitLab Enterprise Edition
• Show issuable reference title in milestone description by @wwwjon (merge request)
• Prevent Group API N+1 loading group plans (merge request) GitLab Enterprise Edition
• Fix issue sticky header doesn't align left in fluid layout (merge request)
• Enable ci_order_subsequent_jobs_by_stage by default (merge request)
• Exempt bot users for groups from license seat usage by @fh1ch (merge request) GitLab Enterprise Edition
• Fix incorrect max_seats_used values (merge request)
• Fix the primary button on KAS installation modal (merge request)
• Fix typo in message (merge request)
• Fix broken references when previewing SP payload (merge request)
• Use Bitbucket repo description over project description when importing by @nicosullivan (merge request)
• Guard create issue button in boards against submitting spaces by @sstern (merge request)
• Replace offsetTop with getBoundingClientRect for roadmap_setting panel by @orozot (merge request)
• Fix import/export not checking upload result (merge request)
• Update resolved_on_default_branch attribute in batches (merge request) GitLab Enterprise Edition
• Add missing Git authentication support for group level bot build tokens by @fh1ch (merge request)
• Update Project.updated_at if other timestamps change by @wwwjon (merge request)
• Remove project loads for dast profiles policy checks (merge request) GitLab Enterprise Edition
• Do not require credit card validation when it is present (merge request) GitLab Enterprise Edition
• Fix CI instance variable cache misses (merge request)
• Fix cluster integration HTTP adapter (merge request)
• Clear childrenEpic state when changing roadmap sort order by @espadav8 (merge request) GitLab Enterprise Edition
• Prevent compliance pipelines from overwriting child pipelines (merge request) GitLab Enterprise Edition
• Fix selection summary not showing on vulnerability report (merge request) GitLab Enterprise Edition
• Fix runner count when tabs are used (merge request)
• fix: Fix incorrect il8n referenece for Vulnerability Dismissal (merge request) GitLab Enterprise Edition
• Allow strings and nested arrays of strings for before/after script by @guillaume.chauvel (merge request)
• Extract MergeRequestDiffCommit deletions (merge request)
• Reject MIME parts with unsupported encoding (merge request)
• Add user's preferred language to cache key of MR title partial (merge request)
• Transition abuse_reports_controller spec by @leetickett (merge request)
• Calculate location fingerprint by signature for findings if available (merge request) GitLab Enterprise Edition
• Extend Google Cloud Storage max transfer timeout to 60 minutes (merge request)
• Add spacing for pipeline editor alert close button (merge request)
• Fix check for valid custom pages domains by @mlegner (merge request)
• Add missing tooltip and aria-label for commit description toggle by @nicosullivan (merge request)
• Users who can read project can read bot names (merge request)

Changed (216 changes)

• Use GlAvatar in env dashboard project header (merge request) GitLab Enterprise Edition
• Remove legacy license compliance approval_status (merge request) GitLab Enterprise Edition
• Allow setting feature flag for a single namespace (merge request)
• No-coverage lines more prominent than covered lines by @MMSandal (merge request)
• Global Search - Optimize SearchContext (merge request)
• Geo: Job Artifacts replication using SSF (merge request)
• Update to Puma 5.6.2 (merge request)
• Handle invalid URL for DAST Site Profile (merge request)
• Use system-err if no failure/error message was given in JUnit output by @jdyl (merge request)
• Use pagination for vulnerability report (merge request) GitLab Enterprise Edition
• Handle invalid URL for DAST Site Profile (merge request)
• Handle invalid URL for DAST Site Profile (merge request)
• Updated the docs to include new agent information (merge request)
• Fixed constant wording for clearer understanding (merge request) GitLab Enterprise Edition
• Remove feature flag for the container registry Google CDN feature (merge request)
• Add jobs template for Dependency Scanning and License Scanning (merge request)
• Replicate integrations indices for type_new (merge request)
• Add missing translations (merge request) GitLab Enterprise Edition
• Replace the bitbucket import modal with a GlModal (merge request)
• Update status icons for requirements (merge request) GitLab Enterprise Edition
• Bump cluster management project template for 14.8 (merge request)
• Remove dast_sharded_cloned_ci_builds feature flag (merge request) GitLab Enterprise Edition
• Switch to GlTabs for markdown header component (merge request)
• Link by commit and name for pipeline (merge request)
• Add approvers when editing scan result policies (merge request) GitLab Enterprise Edition
• Move findings deletion into a worker (merge request) GitLab Enterprise Edition
• Replace window.confirm with GlModa in deployment actions (merge request)
• Modify upload license error language (merge request) GitLab Enterprise Edition
• Make integrations type_new trigger null-safe (merge request)
• Default on :cluster_vulnerabilities feature flag (merge request)
• Improve UI message for unfinished pipelines (merge request)
• Drop temporary index on vulnerability_occurrences (merge request)
• Change file input on upload license page to a dropzone (merge request) GitLab Enterprise Edition
• Allow offline cloud license upload (merge request) GitLab Enterprise Edition
• Improve UI text of group settings page (merge request)
• Edit UI text to comply with standards (merge request)
• Show default value in squash and merge commit template textareas by @trakos (merge request)
• Treat API requests from the frontend as web traffic in the rate limiter (merge request)
• Update KAS to v14.8.1 (merge request)
• Put feature flag for reading from finding_evidence (merge request) GitLab Enterprise Edition
• Remove the border from the signub box on the trial registration page (merge request) GitLab Enterprise Edition
• Upgrade CI images to Debian bullseye (merge request)
• Update confirmation button variant and label (merge request)
• Limit on-demand scans tabs counts (merge request) GitLab Enterprise Edition
• Bump Gitlab Shell version to 13.23.2 (merge request)
• Geo Sites - Filter by Search (merge request) GitLab Enterprise Edition
• Add feature flag toggle for elastic migration worker (merge request) GitLab Enterprise Edition
• Add a memory report link in the Performance Bar (merge request)
• Add vue js fork confirmation modal (merge request)
• Jira create branch: Alert when lacking permissions (merge request)
• Replace window.confirm with GlModa in pipeline manual actions (merge request)
• Exclude guests being billable for ultimate trials (merge request) GitLab Enterprise Edition
• Add message for user count overage (merge request) GitLab Enterprise Edition
• Refactor NamespaceStatistics into CE (merge request)
• Remove limited class from global_alert (merge request)
• Changed the deployment target option (merge request)
• Remove ci_skip_require_credit_card_for_addon_ci_minutes feature flag (merge request)
• Make rate limiting of /users/:id configurable (merge request)
• Use better colors for activity calendar in darkmode (merge request)
• Convert timestamps to utc in license usage export (merge request) GitLab Enterprise Edition
• Update copy for API Security in DAST (merge request)
• Exclude pending_destruction packages when creating one (merge request)
• Set danger variant and label to leave group (merge request)
• Clean up Create Branch from Jira form (merge request)
• Improve retry tooltip for failed pipeline (merge request)
• Deprecate custom geo:db:* rake tasks in favor of built-in tasks (merge request) GitLab Enterprise Edition
• Make squash/rebase failed messages better (merge request)
• Enable storage purchase via GitLab by default (merge request)
• Remove early_prepare_for_mergeability feature flag (merge request)
• Add tooltip to project variables in CI/CD settings (merge request)
• feat: Bump major security-code-scan sast version for 15.0 (merge request)
• Add link to group pipeline usage quota (merge request)
• Update auto-build-image to v1.5.0 (merge request)
• Update Go to version 1.17.6, workhorse (merge request)
• Simplify CI_DEPLOY_FREEZE conditions in Auto DevOps (merge request)
• Replace window.confirm with GlModal for noteable notes delete and edit (merge request)
• Add severity level to compliance violations table (merge request)
• Move VSA metrics to shared analytics (merge request) GitLab Enterprise Edition
• Remove redundant index_epic_issues_on_epic_id (merge request)
• Remove vue_integration_form feature flag (merge request)
• Remove enable_ci_variable_caching feature flag (merge request)
• Improve the project deletion UI text (merge request)
• Improve copy on Slack app delete project modal (merge request) GitLab Enterprise Edition
• Improve delete webhook modal copy (merge request)
• Change protected branches selector internals (merge request) GitLab Enterprise Edition
• Alias wip* methods to -> draft* (merge request)
• Remove new_route_ci_minutes_purchase feature flag (merge request)
• Remove WIP support from commits (merge request)
• Add tooltips for pipeline icons (merge request)
• Hide None & Any token wildcards (merge request) GitLab Enterprise Edition
• Give immediate feedback when awarding an issuable by @KevSlashNull (merge request)
• Remove WIP support from Merge Requests (merge request)
• Undo filter milestones dropdown in boards by state by @sstern (merge request)
• Fix Kubernetes Agent label capitalization (merge request)
• Add quickSuggestions to Pipeline Editor (merge request)
• Update bitbucket logo (merge request)
• Update Atlassian logo (merge request)
• Update Twitter logo (merge request)
• Update Facebook logo (merge request)
• Remove github_importer_use_diff_note_with_suggestions feature flag (merge request)
• Error on delete tag when importing repository (merge request)
• Treat API requests from the frontend as web traffic in the rate limiter (merge request)
• Enable jobs tab vue by default (merge request)
• Update Auth0 logo (merge request)
• Hide user cap alert if viewing pending members (merge request) GitLab Enterprise Edition
• Geo Sites - Filter By Status (merge request) GitLab Enterprise Edition
• Add indeterminate state to select all checkbox on vulnerability report (merge request) GitLab Enterprise Edition
• Update to ruby-magic v0.5.4 (merge request)
• Add combined registration to trial registration flow (merge request)
• Update rubyzip gem to v2.3.2 (merge request)
• Don't notify Sentry about PreReceiveErrors (merge request)
• Show disabled CI action icon when unauthorized (merge request)
• Enable the pipelines table redesign by default (merge request)
• Change settings copy (merge request)
• Edit UI text of project permissions (merge request)
• Add instrumentation class to by-stage-secure metrics (merge request) GitLab Enterprise Edition
• Return pretty error validation messages for Security Policy (merge request) GitLab Enterprise Edition
• Hide search bar when registry is empty by @KevSlashNull (merge request)
• Bump Gitlab Shell version (merge request)
• Update styling of date range indicator (merge request)
• Show error message for permissions (merge request)
• Show error message for permissions
• Change contact details for support (merge request)
• Skip redundant checks for runners already scoped to a project (merge request)
• Swap FK ci_pipelines to projects for LFK (merge request)
• Reorganize Kubernetes clusters action button menu (merge request)
• feat(badge): Migrate diff LFS badge to glbadge (merge request)
• Enable linear roots in UpdateAllMirrorsWorker (merge request) GitLab Enterprise Edition
• Default enable issue_boards_filtered_search by @sstern (merge request)
• Add confirmation modal for merge (merge request)
• Update navigation badge to pajamas styling (merge request)
• Allow developers to read Kubernetes clusters (merge request)
• Enable security_report_ingestion_framework FF by default (merge request) GitLab Enterprise Edition
• Add text for all branches (merge request) GitLab Enterprise Edition
• Swap FK ci_pipeline_schedules to projects for LFK (merge request)
• Content for hand raise leads (merge request) GitLab Enterprise Edition
• Improve UI text for style compliance (merge request)
• Swap FK ci_builds to projects for LFK (merge request)
• Packages list sort by Published and store pref (merge request)
• Remove projects that are marked for deletion from UI (merge request)
• Swap FK ci_sources_projects to projects for LFK (merge request)
• Swap FK ci_job_token_project_scope_links to projects for LFK (merge request)
• Add alert after Slack application is installed (merge request) GitLab Enterprise Edition
• Swap FK ci_runner_projects to projects for LFK (merge request)
• Swap FK ci_job_artifacts to projects for LFK (merge request)
• Update UI for MR pipeline rename (merge request)
• Swap FK vulnerability_feedback to ci_pipelines for LFK (merge request)
• Only fetch namespaces if search value changes (merge request)
• Add error code to project export command status log (merge request)
• Swap FK dast_site_profiles_pipelines to ci_pipelines for LFK (merge request)
• Add compatibility alert to Jira Connect App (merge request)
• Swap FK ci_subscriptions_projects to projects for LFK (merge request)
• Replace window.confirm with GlModal for noteable discussions (merge request)
• Replace window.confirm with GlModal for board setting sidebar (merge request)
• Swap FK ci_project_monthly_usages to projects for LFK (merge request)
• Add IDE preview success metrics (merge request)
• Swap FK ci_stages to projects for LFK (merge request)
• Improve UI text for style compliance (merge request) GitLab Enterprise Edition
• Replace window.confirm with GlModal for repository index (merge request)
• Hide subs expiration banner before eligible (merge request) GitLab Enterprise Edition
• Remove export_reduce_relation_batch_size feature flag (merge request)
• Update runner registration token reset modal (merge request)
• Swap FK ci_pipelines to merge_requests for LFK (merge request)
• Swap FK ci_job_token_project_scope_links to projects for LFK (merge request)
• Add Cluster Image Scanning to AutoDevOps (merge request)
• Update iteration dropdowns in sidebars/board list (merge request) GitLab Enterprise Edition
• Add unit test for trials_link_url by @orozot (merge request) GitLab Enterprise Edition
• Refactor hello_deferred path to jh_else_ce by @orozot (merge request)
• Extract callout content trails link to variable by @orozot (merge request) GitLab Enterprise Edition
• Boards - Fix top elements alignment (merge request)
• Swap FK ci_refs to projects for LFK (merge request)
• Swap FK ci_sources_pipelines to projects for LFK (merge request)
• Hide user avatar for blocked and unconfirmed users (merge request)
• Swap FK ci_builds_metadata to projects for LFK (merge request)
• Improve OmniAuth sign in description by @scootergrisen (merge request)
• Swap FK ci_variables to projects for LFK (merge request)
• Swap FK ci_subscriptions_projects to projects for LFK (merge request)
• Swap FK ci_triggers to projects for LFK (merge request)
• Swap FK external_pull_requests to projects for LFK (merge request)
• Add Pajamas badge for diverged from upstream (merge request)
• Refactor system notes for alerts and incidents for consistentcy (merge request)
• Improve explanation for Advanced Project settings (merge request)
• Handle path not found without throwing, accept array as path (merge request)
• Add scan result policy into policy editor (merge request) GitLab Enterprise Edition
• Use gl-badge for web IDE activity bar (merge request)
• Geo Sites - NA Verification Help (merge request) GitLab Enterprise Edition
• Disable sync for offline cloud licenses (merge request) GitLab Enterprise Edition
• Geo Sites - Update replication button (merge request) GitLab Enterprise Edition
• Geo Forms - Fix Buttons (merge request) GitLab Enterprise Edition
• VSA metrics: Only render decimal places for floats (merge request)
• Swap FK vulnerability_statistics to ci_pipelines for LFK (merge request)
• Remove instructions to install Agent if KAS is not set up (merge request)
• Update iteration changed notification format (merge request) GitLab Enterprise Edition
• Lowercased runner because it's referring to agent (merge request)
• Keep branch when going to Pipeline Editor through nav (merge request)
• Swap FK vulnerability_occurrence_pipelines to ci_pipelines for LFK (merge request)
• Swap FK dast_profiles_pipelines to ci_pipelines for LFK (merge request)
• Limit the length of generated anchor URL for markdown headers (merge request)
• Treat API requests from the frontend as web traffic in the rate limiter (merge request)
• Handle members who are existing hierarchy members (merge request) GitLab Enterprise Edition
• Fix empty line to contain two values (merge request) GitLab Enterprise Edition
• Swap FK merge_trains to ci_pipelines for LFK (merge request)
• Add Pajamas complient "whats new" badge (merge request)
• Swap FK ci_triggers to users for LFK (merge request)
• Extract container registry page common component by @orozot (merge request)
• Update secret detection template to be more robust (merge request)
• Remove feature flag for auto-linking LFS objects in forks (merge request)
• Enable ci_skip_require_credit_card_for_addon_ci_minutes by default (merge request)
• Loosen rule to detect cyclical pipelines (merge request)
• Swap FK merge_requests to ci_pipelines for LFK (merge request)
• Swap FK ci_sources_pipelines to projects for LFK (merge request)
• Remove summary from Finding Evidence (merge request)
• Geo UI - Rename Nodes to Sites (merge request) GitLab Enterprise Edition
• Remove FF custom_preloader_for_deployments (merge request)
• Update group#shared_externally to include projects (merge request) GitLab Enterprise Edition
• Improve the labels on Kubernetes Agent UI (merge request)

Deprecated (12 changes)

• Add warning for deprecation notice on logs page (merge request)
• feat: Update SECURE_ANALYZER_PREFIX in all Sec Section templates (merge request)
• Require auto-deploy use_kube_context to be present (merge request)
• Change merged_by deprecation to breaking change (merge request)
• Deprecate /groups/:id/runners?type=project_type (merge request)
• REST API: Deprecate active/paused values in status filters (merge request)
• GraphQL: Deprecate active field in RunnerUpdateInput (merge request)
• REST API: Deprecate ‘active’ property for Runners (merge request)
• GraphQL: Deprecate active field for RunnerType (merge request)
• GraphQL: Deprecate active filter for Runners resolver (merge request)
• Deprecate Runner API maintainer_note (merge request)
• Deprecate Gitlab Shell's self_signed_cert setting (merge request)

Removed (21 changes)

• Remove deprecated CanMutateSpammable (merge request)
• Remove unused partial remove_approver (merge request)
• git: Stop calling Gitaly's Cleanup RPC (merge request)
• Remove the billing in side nav experiment (merge request) GitLab Enterprise Edition
• Remove unique index (merge request)
• rake/info: Stop reporting Git version (merge request)
• system_check: Remove Git version check (merge request)
• system_check: Remove Git configuration check (merge request)
• Remove unused WIP regex (merge request)
• Remove the loose_foreign_key_cleanup FF (merge request)
• Remove feature flag (merge request)
• Remove security_finding_build_disable_joins feature flag (merge request)
• Remove vulnerability_history feature flag (merge request)
• Remove instance_security_dashboard feature flag (merge request)
• Remove all code related to Gitlab::RequestProfile (merge request)
• Remove duplicate data_category: entry (merge request)
• Remove paid feature callout badge (merge request)
• Disable sandboxed_mermaid feature flag (merge request)
• Remove incident labeled metric (merge request)
• Drop position column from security_findings table (merge request)
• Remove username suggestion for trial registration (merge request) GitLab Enterprise Edition

Security (8 changes)

• Upgrade to Rails v6.1.4.6 (merge request)
• Fixes typo on pipeline model
• Add Gitlab::BufferedIo with header read timeout (merge request)
• Ignore spoofable Reply-To address in Service Desk (merge request)
• Enable Secure attribute for frontend cookies (merge request)
• Block recursive webhooks (merge request)
• Sanitize link markup for vulnerability chat messages (merge request) GitLab Enterprise Edition
• Adding a conditional to prevent an unauthorized route (merge request)

Performance (17 changes)

• Refactor building project secret variables (merge request)
• Enable branches API rate limit cache (merge request)
• Enable caching on tags API (merge request)
• Enable JSON limited encoder (merge request)
• Enable repository API rate limit cache (merge request)
• Enable caching on merge requests API (merge request)
• Enable Grape/Gitlab::Json hook (merge request)
• Add partial index for active Cluster Image Scanning vulnerabilities (merge request)
• Reduce Redis calls for instance level variables (merge request)
• Optimize User#ci_owned_runners query (merge request)
• Add compound index for vulnerabilities table on project_id and id (merge request)
• Cache CI expire_in parsing (merge request)
• Speed up project exports by moving the archive to the cache dir (merge request)
• Fix cross join query for Ci::Runner#projects (merge request)
• Remove ci_preload_runner_tags feature flag (merge request)
• Optimize decryption of CI variables (merge request)
• Improve Sidekiq jobs that use DB load balancing (merge request)

Other (66 changes)

• Revert "Merge branch 'role-targeted-broadcast' into 'master'" (merge request)
• Add foreign key to ci_builds runner_id (merge request)
• Fix Style/OpenStructUse offenses for import service and spec helpers by @edith007 (merge request)
• Remove new_route_storage_purchase feature flag (merge request)
• Fix Style/OpenStructUse offenses in project cluster_controller_spec by @edith007 (merge request)
• Fix Style/OpenStructUse offenses in project clusters_spec by @edith007 (merge request)
• Fix Style/OpenStructUse offenses in group cluster controller specs by @edith007 (merge request)
• Backfill CI queuing tables (merge request)
• Mentioned breaking change label in contribution guide (merge request)
• Migration for deleting service template records by @lenikadali (merge request)
• Make starrers sort dropdown Pajamas-compliant (merge request)
• Remove track_application_boot_time FF (merge request)
• Add statistics card component with tests (merge request) GitLab Enterprise Edition
• Moving gitlab_loose_foreign_key to config/ directory by @edith007 (merge request)
• Remove Geo proxying metrics feature flag (merge request) GitLab Enterprise Edition
• Update comment for ActiveModel::Serializers::JSON in presenter by @edith007 (merge request)
• Truncate before vulnerability link index creation (merge request)
• Remove the FF ci_find_runners_by_ci_mirrors (merge request)
• Remove ::Gitlab::Utils::StrongMemoize inclusion as it's duplicate by @edith007 (merge request)
• Remove Gitlab::Utils::StrongMemoize inclusion as it's duplicate by @edith007 (merge request)
• Add documentation links to Merge Request settings page (merge request)
• Remove FF ci_order_subsequent_jobs_by_stage (merge request)
• Remove the packages_installable_package_files feature flag (merge request)
• Update badge in accessibility issue body (merge request)
• Unify image pin style for diffs/design management (merge request)
• Cleanup after variables builder (merge request)
• Update external authorization docs (merge request)
• Cleanup PopulateTestReportsIssueId background migration jobs (merge request)
• Set type of Web IDE commit button to submit by @tchandelle (merge request)
• Remove redundant index on clusters_kubernetes_namespaces (merge request)
• Fix Rails/SaveBang offenses by @edith007
• Fix Rails/SaveBang offenses by @edith007 (merge request)
• Pass formats explicitly when rendering .md file by @edith007 (merge request) GitLab Enterprise Edition
• Fix Rails/SaveBang offenses by @edith007 (merge request)
• Finalize backfilling ci mirror tables (merge request)
• Delete tributejs for autocomplete (merge request)
• Remove feature flags for configuring object store files deletion (merge request)
• Fixes OpenStruct use in design_management specs by @mehulsharma (merge request)
• Fix Style/OpenStructUse offenses by @edith007 (merge request)
• Remove FF ci_namespace_project_mirrors (merge request)
• Remove ci_runner_projects_disable_joins feature flag (merge request)
• Fix Rails/SaveBang offenses by @edith007 (merge request)
• Update seat_usage references (merge request) GitLab Enterprise Edition
• Add World.prepend_mod to allow JH override by @chaomao (merge request) GitLab Enterprise Edition
• Fix Rails/SaveBang offenses by @edith007 (merge request)
• Fix OpenStruct use in metadata_extraction_service by @mehulsharma (merge request)
• Fix Rails/SaveBang offenses by @edith007 (merge request)
• Remove feature flag ff_external_audit_events_namespace by @davebarr (merge request) GitLab Enterprise Edition
• Add gl-pr-3 to top_nav_menu_item to account for chevron (merge request)
• Fix Rails/SaveBang offenses by @edith007 (merge request) GitLab Enterprise Edition
• Remove ci_decompose_for_namespace_monthly_usage_query feature flag (merge request)
• Fix RSpec/TimecopFreeze offenses (Part 1/2) by @KevSlashNull (merge request)
• Fix display of times in access and deploy token table by @edith007 (merge request)
• Fix GraphQL/OrderedArguments offense (Part 4/6) by @KevSlashNull (merge request)
• Fix GraphQL/FieldDefinitions offense (Part 1/4) by @KevSlashNull (merge request)
• Update missing branch widget text to include branch name (merge request)
• Revert frontend API rate limits change (merge request)
• Separate deployments creation from pipeline job creation (merge request)
• Move the merge train helper icon to near the merge button (merge request)
• Reschedule migration for self-managed (merge request) GitLab Enterprise Edition
• Remove unnecessary index on cluster_agent_tokens (merge request)
• Remove net-ssh, ed25519, and bcrypt_pbkdf gems from dependencies (merge request)
• Update GitLab Runner Helm Chart to 0.37.1 (merge request)
• Update GitLab Runner Helm Chart to 0.37.0 (merge request)
• Use ssh_data gem instead of net-ssh and sshkey where possible (merge request)
• Remove feature flag already default enabled (merge request) GitLab Enterprise Edition

14.7.7 (2022-03-31)

Security (21 changes)

• Update to commonmarker 0.23.4 (merge request)
• Revert merge request approval groups behavior (merge request)
• Disallow login if password matches a fixed list (merge request)
• Update devise-two-factor to 4.0.2 (merge request)
• Limit the number of tags associated with a CI runner (merge request)
• GitLab Pages Security Updates for 14.9 (merge request)
• Upgrade swagger-ui dependency (merge request)
• Modify release link format check to avoid regex if string is too long (merge request)
• Masks variables in error messages (merge request)
• Escape user provided string to prevent XSS (merge request)
• Monkey patch of RDoc to prevent Ruby segfault (merge request)
• Project import maps members' created_by_id users based on source user ID (merge request)
• Redact InvalidURIError error messages (merge request)
• Fix access for approval rules API (merge request)
• Fix kroki exploit (merge request)
• Fix blind SSRF when looking up SSH host keys for mirroring (merge request)
• Escape original content in reference redactor (merge request)
• Security fix for CI/CD analytics visibility (merge request)
• Latest commit exposed through fork of a private project (merge request)
• Fix Asana integration restricted branch filter (merge request)
• Revert "JH need more complex passwords" (merge request)

14.7.6 (2022-03-24)

Added (1 change)

• Detect and fix artifacts with backfilled expire_at (merge request)

Changed (2 changes)

• Enable feature flags to resume artifact removal on self-managed (merge request)
• Remove runners token prefix feature flags (merge request)

14.7.5 (2022-03-09)

Fixed (1 change)

• Ensure cleanup job artifacts task does not include pipeline artifacts (merge request)

Other (1 change)

• Change to truncate table before adding finding_link_url_idx (merge request)

14.7.4 (2022-02-25)

Security (8 changes)

• Limit commands_changes to certain keys (merge request)
• Add runners_token prefix to Group and Project (merge request)
• Anonymous user can enumerate all users through GraphQL endpoint (merge request)
• Check for unsafe characters in email addresses before sending (merge request)
• Warn when snippet contains unretrievable files (merge request)
• Prevent DOS when rendering math markdown (merge request)
• Check permission when creating members through service (merge request)
• Reset password field on page load (merge request)

14.7.3 (2022-02-15)

Fixed (2 changes)

• Update GitHub PRs Importer to force update repository (merge request)
• Fix Geo checksummable check failing when file is nil (merge request) GitLab Enterprise Edition

Changed (1 change)

• Properly exclude pending_destruction packages when creating one (merge request)

14.7.2 (2022-02-08)

Added (1 change)

• Allow self-hosted instances to render same-origin Iframe (merge request)

Fixed (4 changes)

• Geo: Fix reverify object stored files (merge request) GitLab Enterprise Edition
• Geo: Fix verification failures of remote stored files (merge request) GitLab Enterprise Edition
• GitLab Version - CE Admin Dashboard [RUN ALL RSPEC] [RUN AS-IF-FOSS] (merge request)
• Fix cluster integration HTTP adapter (merge request)

Changed (1 change)

• Update to ruby-magic v0.5.4 (merge request)

Removed (1 change)

• Disable sandboxed_mermaid feature flag by default (merge request)

14.7.1 (2022-02-03)

Security

See https://about.gitlab.com/releases/2022/02/03/security-release-gitlab-14-7-1-released/

14.7.0 (2022-01-21)

Added (84 changes)

• Add verification before namespace creation (merge request)
• Add GraphQL mutation to destroy timeline events (merge request) GitLab Enterprise Edition
• ApplicationSetting: Add runner_token_expiration_interval field by @KyleFromKitware (merge request)
• Rate limit Gitlab Shell operations (merge request)
• Add Delete button to label edit view (merge request)
• Enable autocomplete on cadence iteration create/edit pages by @espadav8 (merge request) GitLab Enterprise Edition
• Extend GraphQL API interface with securityTrainingProviders field (merge request) GitLab Enterprise Edition
• Hierarchy page to show work items (merge request)
• Add group level access token UI by @fh1ch (merge request)
• Remove ci_archived_build_trace_checksum feature flag (merge request)
• Add scan result policies into the policy (merge request) GitLab Enterprise Edition
• Enable logging when recursive webhook detected (merge request)
• Enable sandboxed_mermaid feature flag (merge request)
• Feat(SM Subscription History): trim table size (merge request) GitLab Enterprise Edition
• Add subsidized cost factor for Open Source plan (merge request) GitLab Enterprise Edition
• Remove expired agent activity events as new events are created (merge request)
• Add docs for pages domain rate-limits (merge request)
• Add a temporary index for Member.state (merge request)
• Adding Secure Files data model and file uploader (merge request)
• Expose internal_url setting for Geo secondaries (merge request) GitLab Enterprise Edition
• Add the draft argument to GraphQL MergeRequestsResolver (merge request)
• Send a rejection email if incoming emails are too large (merge request)
• Clean up escalations after changing incident proj (merge request) GitLab Enterprise Edition
• Support default templates for issues/MRs via .gitlab/ folders by @davebarr (merge request)
• Add link to the self-managed trial flow from SaaS trial signup (merge request) GitLab Enterprise Edition
• feat: Bump Code-Quality image to 0.85.26 (merge request)
• Allow issue contacts from parent groups by @leetickett (merge request)
• Allow to wrap inline code in other marks (merge request)
• Registration features info for ip restriction (merge request) GitLab Enterprise Edition
• Add approve button on pending members table (merge request) GitLab Enterprise Edition
• Upgrade GitLab Pages to 1.51.0 (merge request)
• Indicate locked users in Admin Area (merge request)
• Include the project name VSA stage records (merge request) GitLab Enterprise Edition
• Accept maintainer_note in REST runner registration (merge request)
• Enforce unique contact email for group hierarchy by @leetickett (merge request)
• Add maintainer_note field to CI runners table (merge request)
• GitLab Version - Help Dropdown Version (merge request)
• Add support for backing up Packages (merge request)
• Allow to configure log level of Gitlab:Logger (by env variable) by @wwwjon (merge request)
• REST API: add field merge_user to MR response by @trakos (merge request)
• Add index for selecting active agent tokens (merge request)
• Add vulnerabilityFindingDismiss GraphQL mutation (merge request) GitLab Enterprise Edition
• Enable filtering agent tokens by status (merge request)
• Add customer relations group setting by @leetickett (merge request)
• Add namespace_id reference to routes (merge request)
• Add scan result policy into policy list (merge request) GitLab Enterprise Edition
• Add package managers api paths to details type (merge request)
• Adds API feature configuring default mr target (merge request)
• Enable autocomplete features on iteration forms by @espadav8 (merge request) GitLab Enterprise Edition
• Add editAdminUrl to Runner GraphQL API (merge request)
• Expose iteration ordinal number via APIs (merge request) GitLab Enterprise Edition
• Add enable and disable advanced search rake tasks (merge request) GitLab Enterprise Edition
• Allow to hide personalization questions on New Group page by @wwwjon (merge request)
• Registration features info for sending emails (merge request) GitLab Enterprise Edition
• Add Group Access Token API endpoints by @fh1ch (merge request)
• GraphQL: Add count property to RunnerType’s connection (merge request)
• Add GraphQL mutation to revoke an agent token (merge request)
• Schedule recalculating UUID for all Vulnerabilities::Finding records (merge request)
• Add migration to enqueue background worker (merge request)
• Add createdAt to Runner GraphQL API (merge request)
• Add search and sorting to tags (merge request)
• Update gitlab-omniauth-openid-connect gem to support ECSDA keys (merge request)
• Remove dependency proxy feature flag (merge request)
• Upgrade GitLab Pages to 1.50.0 (merge request)
• Add HTTP status to LFS push client error messages (merge request)
• Add group crm settings by @leetickett (merge request)
• Add co_authored_by to merge commit templates by @trakos (merge request)
• Allow filtering epics by author_username and not[author_username] by @espadav8 (merge request) GitLab Enterprise Edition
• Add ref_path to PipelineType by @genctys (merge request)
• Allow LDAP failover by @sathieu (merge request)
• Add Backup and Restore tasks for Terraform States (merge request)
• Handle syncing alert escalation status to incident (merge request)
• Added possibility to remove agent from UI (merge request)
• Add "Scan library" tab (merge request) GitLab Enterprise Edition
• Enable github_importer_use_diff_note_with_suggestions by default (merge request)
• Rename projects set for delayed deletion (merge request)
• Add unique userid count for Geo proxied requests (merge request) GitLab Enterprise Edition
• Add rate limiting for user email lookup (merge request)
• Export Project LFS Objects as part of GitLab Migration (merge request)
• Add GraphQL query to retrieve timeline events (merge request) GitLab Enterprise Edition
• Limit Sidekiq push_bulk to a maximum of 1000 jobs in one go by default (merge request)
• Add revoked status to cluster agent tokens (merge request)
• Allow passing in an epic parent_id when updating epics by @espadav8 (merge request) GitLab Enterprise Edition
• Add database.flavor to usage data (merge request)

Fixed (98 changes)

• Fix copying/pasting images in the Content Editor (merge request)
• Fix security dashboard showing wrong count for more than 100 projects (merge request) GitLab Enterprise Edition
• Fix default emaildomain when creating RAT users by @cruelsmith (merge request)
• Show blocked status label in deployments view (merge request) GitLab Enterprise Edition
• Dependency proxy settings are built on access (merge request)
• Allow git protocol to be used for repository imports (merge request)
• Show "Issues" menu when Jira issues is enabled (merge request) GitLab Enterprise Edition
• Order child epics in roadmap by configured sort order by @espadav8 (merge request) GitLab Enterprise Edition
• Fix disabled style for mirror settings field (merge request)
• Destroy trace chunks and data when deleting pipelines (merge request)
• Fix authorized_groups to include sub groups as well by @wwwjon (merge request)
• Fix margin for submit button with captcha (merge request)
• Migrate Epics tabs to Vue (merge request) GitLab Enterprise Edition
• Fix N+1 issue when associating DAST profiles and CI Builds (merge request) GitLab Enterprise Edition
• Geo: Fix undefined separate_verification_state_table? (merge request) GitLab Enterprise Edition
• Error Tracking: Fix collecting errors for golang by @bastianccm (merge request)
• Notify admins 15 days prior to license expiration (merge request) GitLab Enterprise Edition
• Fix auditor user able to bulk select vulns on vulnerability report (merge request) GitLab Enterprise Edition
• Fix autoscroll to comments on issues (merge request)
• Strip + reference format from HTML links (merge request)
• Allow developers to fork into group (merge request)
• Use normal font weight and border for 'Subscribe' buttons by @KevSlashNull (merge request)
• Improve visibility radio option text on new project page (merge request)
• Fix schema registration in the pipeline editor (merge request)
• Boards - Fix weight assigned to wrong card (merge request) GitLab Enterprise Edition
• Remove unnecessary CSS in VSA (merge request)
• Fix shift after VSA path load (merge request)
• Fix Incident sidebar on issue boards (merge request)
• Always autofill group slug (merge request)
• Update excon to v0.90.0 (merge request)
• Format issue list counts (merge request)
• Ignore multiple when syntax highlighting (merge request)
• Waive credit card validation if project has paid CI/CD minutes (merge request) GitLab Enterprise Edition
• Fix toggle code block button in Content Editor (merge request)
• Use the same email validation for User and Email (merge request)
• Expose new monthIso8601 GraphQL option to fix CI minutes usage sorting by @davebarr (merge request)
• Improve ReadTotalTimeout to start with reading (merge request)
• Update excon gem to v0.89.0 (merge request)
• Fix infinite loop in Content Editor codeblocks (merge request)
• Only show owners & admins CI minutes purchase notifications (merge request) GitLab Enterprise Edition
• Restric access to crm to reporter+ by @leetickett (merge request)
• Fix destruction of projects with pipelines (merge request)
• Fix invalid raw_metadata being persisted (merge request)
• Disable copy-code button for mermaid diagrams (merge request)
• Return 401 when using invalid tokens in oauth/token/info (merge request)
• Fix the text on Kubenetes Agent modal (merge request)
• Add patch for WikiCloth Lua vulnerability (merge request)
• Notify admins 15 days prior to license expiration (merge request) GitLab Enterprise Edition
• Fix image comment note submission (merge request)
• Fix last update time for project in group page by @orozot (merge request)
• Fix missing autosave support in Epic create form (merge request) GitLab Enterprise Edition
• Remove menu when is not possible to delete (merge request)
• Correctly pass instance in EDITOR_READY_EVENT (merge request)
• Merge/squash commit templates: avoid breaking Git trailers by @trakos (merge request)
• Prevent design discussions without login (merge request)
• Remove cluster image scanning dropdown item from scanner filter (merge request) GitLab Enterprise Edition
• Fix hook log path for service hooks (merge request)
• Fix pipeline schedule resets to UTC on edit by @JonstonChan (merge request)
• Use correct namespace method (merge request)
• Re-add EachBatch include for failed_verification_timeouts (merge request) GitLab Enterprise Edition
• Fix Sidekiq reporting to Sentry outside of job contexts (merge request)
• Fix sticky filters not working on vulnerability report (merge request) GitLab Enterprise Edition
• Fix Kubernetes Agent Link on Project page (merge request)
• Externalize strings for translation in todos (merge request)
• Update Rails to v6.1.4.4 (merge request)
• Fix input group text border color (merge request)
• Match address of host when checking whether to login (merge request) GitLab Enterprise Edition
• Improve LFS client performance and fix compatibility with Azure DevOps (merge request)
• Do not fail report ingestion if there is an invalid finding (merge request) GitLab Enterprise Edition
• Update acme-client to v2.0.9 (merge request)
• Update rouge gem version (merge request)
• Adjust bottom margin for loose markdown lists (merge request)
• Remove running build entries when calling doom on a build (merge request)
• Fix migration for cases with empty strings (merge request)
• Fix 500 errors when renaming projects with underscores (merge request)
• Geo: adapt verification timed out query to use state table (merge request) GitLab Enterprise Edition
• Allow admins to foce confirm emails (merge request)
• Ignore new line differences when deciding whether to squash MR by @trakos (merge request)
• Fix re-use of extensions between instances (merge request)
• Fix nil actor errors in Sentry API handler (merge request)
• Removes the dismiss button from the pipeline header alert (merge request)
• Call dependency proxy cleanup workers in purge (merge request)
• Add Auth0, JWT, and Shibboleth to list of providers with icons (merge request)
• Fix Prometheus endpoint to return created alerts (merge request)
• Make time track help state top margin consistent (merge request)
• Validate against duplicates in job needs (merge request)
• Fix MergeRequest's MergeUser for non-MWPS merges in GraphQL API by @trakos (merge request)
• Align roadmap quarters to calendar quarters by @espadav8 (merge request) GitLab Enterprise Edition
• checks: Fix revalidation of preexisting commits (merge request)
• Fix project import from remote to import from S3 (merge request)
• Mark vulnerabilities as not resolved on default branch on ingestion (merge request) GitLab Enterprise Edition
• Skip updating vulnerability statistics if there are no new records (merge request) GitLab Enterprise Edition
• Remove legacy pages config updates (merge request)
• Do not check SSO session for git operations originating from CI/CD jobs (merge request) GitLab Enterprise Edition
• MR Documentation suggestions by @lzampier (merge request)
• Drop reindexing leftovers only if exclusive lease is granted (merge request)
• Fix import project from gitlab.com error by @orozot (merge request)
• Fix filename overflowing modal when importing by @KevSlashNull (merge request)

Changed (135 changes)

• Change hashing algorithm in webpack (merge request)
• Swap FK ci_pipeline_artifacts to projects for LFK (merge request)
• Remove permitted_attributes_for_import_export feature flag (merge request)
• Do not add a failed build todo before auto-retry (merge request)
• Redesign new policy form (merge request) GitLab Enterprise Edition
• Labels widget - focus first item on search (merge request)
• Add shared runner tab to group CI/CD analytics (merge request) GitLab Enterprise Edition
• Update sort name from Last updated to Updated date (merge request)
• Warn when mention all users in a group (merge request)
• Check for removed external issues before creation (merge request) GitLab Enterprise Edition
• Replace Member created state with active (merge request)
• Polish Slack application edit page UI (merge request) GitLab Enterprise Edition
• Enable feature flag bulk_expire_project_artifacts (merge request)
• Make pipeline badges Pajamas-complient (merge request)
• Format email code blocks and code blocks in emails by @smokris (merge request)
• Geo Sites - Icon Actions (merge request) GitLab Enterprise Edition
• Geo - Rename routes from Nodes to Sites (merge request) GitLab Enterprise Edition
• Cleanup after AddPrimaryEmailToEmailsIfUserConfirmed (merge request)
• Change default shallow clone depth to 20 (merge request)
• Update webhook badges to pajamas (merge request)
• Update button text to expand all files (merge request)
• Ignnore Finding Evidence summary column (merge request) GitLab Enterprise Edition
• Add LFK ci_daily_build_group_report_results to projects (merge request)
• Enable by default the feature flag to track Geo proxy events (merge request) GitLab Enterprise Edition
• Update on-demand scans breadcrumbs (merge request) GitLab Enterprise Edition
• Change pipeline page layout to fluid (merge request)
• Default to fluid layout for the pipeline editor (merge request)
• Skip failed builds (merge request) GitLab Enterprise Edition
• Redirect to on-demand scan form after editing a DAST profile (merge request) GitLab Enterprise Edition
• Conditionally disable group user cap enablement (merge request) GitLab Enterprise Edition
• Use normalized license data in csv export (merge request) GitLab Enterprise Edition
• Enable vue-router in package registry (merge request)
• Replace window.confirm with GlModal for registration token reset (merge request)
• Enable packages_installable_package_files by default (merge request)
• Labels widget - focus first item on search (merge request)
• Increase exclusive lease timeout (merge request) GitLab Enterprise Edition
• Add offline, stale count to runner admins section (merge request)
• Enable trial onboarding flow for other sources (merge request) GitLab Enterprise Edition
• Add member_namespace_id to members table (merge request)
• Convert trial lead creation form to Vue (merge request) GitLab Enterprise Edition
• Update approval settings to toast on success (merge request) GitLab Enterprise Edition
• Format total count of runners in tabs by locale (merge request)
• Updated Group/Project home panel ID copy-on-click by @stingrayza (merge request)
• Update MR head pipeline when pipeline event is published (merge request)
• Removes FK for ci_pipeline_schedules to users (merge request)
• Removes FK for ci_job_token_project_scope_links to users (merge request)
• Swap FK ci_build_report_results to projects for LFK (merge request)
• Swap FK ci_resource_groups to projects for LFK (merge request)
• Swap FK ci_freeze_periods to projects for LFK (merge request)
• Add LFK ci_unit_tests to projects on project_id (merge request)
• Enable new rich text/source toggle in self-managed (merge request)
• Nullify project_namespace_id reference (merge request)
• Geo Nodes Form - Object Storage Beta Badge (merge request) GitLab Enterprise Edition
• Update total count of runners for each type (merge request)
• Clean up add GitLab to Slack app (merge request) GitLab Enterprise Edition
• Fix help text for checkboxes on integrations form (merge request)
• Encrypt static_object_token_encrypted field via background migration (merge request)
• Migrate enable Gitpod confirmation modal to GlModal (merge request)
• Allow skipping CI when rebasing in UI by @KevSlashNull (merge request)
• Update Nokogiri to v1.12.5 (merge request)
• Use badges for branches/tags in commit page (merge request)
• Update DAST On-demand scan template (merge request) GitLab Enterprise Edition
• Update secret-detection git log command (merge request)
• Add validation for new_user_signups_cap enabling (merge request) GitLab Enterprise Edition
• Update upload a license file docs (merge request) GitLab Enterprise Edition
• Reposition and restyle integration reset button (merge request)
• Add merge trains copy to ff merge (merge request)
• Remove carat from dropdown button (merge request)
• Convert OAuth2 authorization panel to GitLab UI utility classes (merge request)
• Translate settings string in user preferences (merge request)
• Replaced browser confirm modal with GlModal for lock button (merge request) GitLab Enterprise Edition
• Enable linear versions in GroupDescendantsFinder (merge request)
• Create Deployments in Separate Transaction (merge request)
• Improve UI text of external authentication (merge request)
• Update search badges to pajamas (merge request)
• Switch from confirm to default (merge request)
• Improve UI text of group webhooks page (merge request)
• Refactor admin labels to use shared HAML partial (merge request)
• Update flash alerts of Admin Runner UI (merge request)
• Sort followed users events by id desc (merge request)
• GitLab Version - Update Version Status Indicator (merge request)
• Prevent raising validation errors for SyncDashboardsWorker (merge request)
• Update snippet search badge to use pajamas (merge request)
• Improve outbound requests settings UI text (merge request)
• Remove Geo pages verification feature flag (merge request) GitLab Enterprise Edition
• Geo: Verify LFS objects (merge request) GitLab Enterprise Edition
• Add support for user_id, group_id and group_path (merge request) GitLab Enterprise Edition
• Remove log_import_export_relation_creation feature flag (merge request)
• Remove feature flag optimize_merge_request_parser (merge request)
• Update look and feel of runner heading (merge request)
• Move the Runner edit page to an /edit path (merge request)
• User linear version UserGroupNotificationSettingsFinder#execute (merge request)
• Refactored sidebar jobs details container badge (merge request)
• Remove deployments_archive feature flag (merge request)
• Update Coverage-Fuzzing yml and use last package file in corpus (merge request) GitLab Enterprise Edition
• Make strings in user preferences translatable (merge request)
• Deprecate plaintext field static_objects_external_storage_auth_token (merge request)
• Add createAlert as alternative to createFlash (merge request)
• Increase icon size for categories in emoji picker (merge request)
• Update acts-as-taggable-on gem version (merge request)
• Refactored Badges on environment items (merge request)
• Update nuget version regex (merge request)
• Remove commit templates variable placeholders from settings by @trakos (merge request)
• Externalize strings for translation on dashboard (merge request)
• Make strings in top nav translatable (merge request) GitLab Enterprise Edition
• Fail remote mirror if LFS sync fails (merge request)
• Update Azure storage Gem dependencies (merge request)
• Add Pajamas-complient badge for runners (merge request)
• Translate labels in user main settings (merge request)
• Allow hidden pacakge files to be downloaded (merge request)
• Externalize strings for translation user's chat settings (merge request)
• Use "never contacted" wording in runner's frontend (merge request)
• Rename routes for project services (merge request)
• Update button variant and category (merge request)
• Alter phone constraint bigger by @memorycancel (merge request)
• Set feature flag lfs_auto_link_fork_source to true by default (merge request)
• Registration Flow - Don't pre-select role by @tarunvelli (merge request)
• Remove find_tag_via_gitaly feature flag (merge request)
• Adjusts Member awaiting scope to be distinct (merge request) GitLab Enterprise Edition
• Add fail flag to pipeline trigger examples (merge request)
• Release Geo: Treat missing blobs as sync failed (merge request) GitLab Enterprise Edition
• Delete events in batches when project is destroyed (merge request)
• Add limitation warning for permission export (merge request) GitLab Enterprise Edition
• Change texts about credit card verification (merge request) GitLab Enterprise Edition
• Treat API requests from the frontend as web traffic in the rate limiter (merge request)
• Restyle "hints" on appearance settings by @KevSlashNull (merge request)
• Do not show participants invisible to the user (merge request)
• Use connects_to to connect to the Geo tracking DB (merge request) GitLab Enterprise Edition
• Add CI_JOB_JWT_V2 with iss and aud format changes (merge request)
• Migrate the visibility change confirmation to vue (merge request)
• Drop jira_use_first_ref_by_oid feature flag (merge request)
• Update button variant to confirm (merge request)
• Remove OAuth paths from protected paths rate limit (merge request)
• Add vulnerability_states for scan_result_policies (merge request) GitLab Enterprise Edition
• Add toggle method to control use_minimum_char_limit by @orozot (merge request)

Removed (13 changes)

• Remove feedback link in discover security point (merge request) GitLab Enterprise Edition
• Revert "Merge branch 'rajat/work-hierarchy' into 'master'" (merge request)
• Remove cached_mr_widget feature flag (merge request)
• Remove automatic addition of incident label (merge request)
• Delete paginatable_namespace_drop_down_for_project_creation FF (merge request)
• Remove redis MultiStore implementation (merge request)
• Remove "Saved scans" tab from DAST configuration (merge request) GitLab Enterprise Edition
• Remove EXMOD experiment documentation (merge request)
• Remove delete_branch_confirmation_modals feature flag (merge request)
• Remove problematic query from obselete open environment in diff feature (merge request)
• Remove LooseIndexScanDistinctCount class (merge request)
• Delete vue_issuables_list feature flag (merge request)
• Remove vulnerability_location_image_filter feature flag (merge request)

Security (4 changes)

• Upgrade mermaid js library (merge request)
• Rate limit /users/sign_up (merge request)
• Rate limit update username action (merge request)
• Enforce rate limit per IP on /users/:username/exists (merge request)

Performance (12 changes)

• Avoid extra Sidekiq jobs for expiring CI etags (merge request)
• Optimize query for issue neighbors (merge request)
• Improve on-demand scans polling performances (merge request) GitLab Enterprise Edition
• Remove ci_decompose_belonging_to_parent_group feature flag (merge request)
• Optimize protected branches/tags matching (merge request)
• Add index for resolving timeouts on environments page (merge request)
• Inline diff line rendering (merge request)
• Utilize C version of CommonMark renderer (merge request)
• Improve epic swimlanes query performance for group board (merge request) GitLab Enterprise Edition
• Fix slow events query for followed users (merge request)
• Read running builds from denormalized table upon assignment (merge request)
• Introduce an optimized labels query on group transfer (merge request)

Other (68 changes)

• Geo: Verify uploads (merge request) GitLab Enterprise Edition
• Add columns in prep of registry import (merge request)
• Remove ci_running_builds FK to projects (merge request)
• Remove scim_token_vue feature flag (merge request)
• Remove FK security_scans.build_id as we have LFK (merge request)
• Add backfill migrations for ci namespace/project mirrors (merge request)
• Add package file cleanup jobs (merge request)
• Remove ci_store_trace_outside_transaction feature flag (merge request)
• Fix Rails/SaveBang offenses by @edith007 (merge request) GitLab Enterprise Edition
• Remove FK dast_scanner_profiles_builds.ci_build_id as we have LFK (merge request)
• Remove FK requirements_management_test_reports.build_id as we have LFK (merge request)
• Remove FK dast_site_profiles_builds.ci_build_id as we have LFK (merge request)
• Fix GraphQL/FieldDefinitions offense (Part 3/4) by @KevSlashNull (merge request)
• Fix GraphQL/ArgumentName offense by @KevSlashNull (merge request)
• Fix Rails/SaveBang offenses by @edith007 (merge request)
• Fix Rails/SaveBang offenses by @edith007 (merge request) GitLab Enterprise Edition
• Fix Gitlab/DelegatePredicateMethods offenses by @edith007 (merge request)
• Remove alllow database cross join from runner_matchers (merge request)
• Remove opt_in_sidekiq_status feature flag (merge request)
• chore: Mark previous Recalculation background migrations as succeeded (merge request)
• Limit subscription page container to 990px (merge request) GitLab Enterprise Edition
• Improve SSH key format validation (merge request)
• Remove admin_deploy_keys_vue feature flag (merge request)
• Remove hide_access_tokens feature flag (merge request)
• Remove show.html.erb as Rails 5 now supports nonce-based CSP headers by @edith007 (merge request)
• Fix Rails/SaveBang offenses by @edith007 (merge request)
• Remove ci_pending_builds FK to projects (merge request)
• Truncate ci_namespace_mirrors and ci_project_mirrors (merge request)
• Remove feature flag multiple_gpg_signatures (merge request)
• Backfill TestReports issue_id column (merge request)
• Fix Style/OpenStructUse offenses for users and package specs by @edith007 (merge request)
• Fix Style/OpenStructUse offense for Gitlab::Database::Migrations::Runner by @edith007 (merge request)
• Fix Style/OpenStructUse offenses by @edith007 (merge request)
• Pass formats explicitly when rendering .html file by @edith007 (merge request) GitLab Enterprise Edition
• Fix Rails/SaveBang offenses by @edith007 (merge request) GitLab Enterprise Edition
• Pass formats explicitly when rendering kerberos error by @edith007 (merge request) GitLab Enterprise Edition
• Fix Style/OpenStructUse offenses in gitlab_controller_spec by @edith007 (merge request)
• Pass formats explicitly when rendering .md file by @edith007 (merge request) GitLab Enterprise Edition
• Adjust license upload page style (merge request) GitLab Enterprise Edition
• Pass formats explicitly when rendering html by @edith007 (merge request)
• Remove index_merge_requests_on_title index from merge_requests table by @edith007 (merge request)
• Improve 'Add an SSH key' page (merge request)
• Fix Rails/SaveBang offenses by @edith007 (merge request) GitLab Enterprise Edition
• Remove "show_relevant_approval_rule_approvers" feature flag (merge request)
• Cleanup pipeline logger feature flags (merge request)
• Remove the dast_view_scans feature flag (merge request) GitLab Enterprise Edition
• Refactor all the specs to use :integration rather than :service by @edith007 (merge request)
• Fix Gitlab/DelegatePredicateMethods offenses by @edith007 (merge request) GitLab Enterprise Edition
• Remove foreign key constraint ci_runner_namespaces.namespace_id (merge request)
• Remove foreign key ci_daily_build_group_report_results.group_id (merge request)
• Deprecate agent token deletion mutation (merge request)
• Use an enum for agent token statuses (merge request)
• Remove foreign key ci_pending_builds.namespace_id (merge request)
• Pass formats explicitly when rendering .md file by @edith007 (merge request) GitLab Enterprise Edition
• Raise custom errors when backup creation fails (merge request)
• Pass formats explicitly when rendering .md file by @edith007 (merge request) GitLab Enterprise Edition
• Use design system badges for project domains (merge request)
• Add package file status attribute (merge request)
• Remove foreign key ci_minutes_additional_packs.namespace_id (merge request)
• Remove foreign key ci_group_variables.group_id as we have loose fK (merge request)
• Remove feature flag ff_limit_ssh_key_lifetime (merge request)
• Cleanup after DropInvalidSecurityFindings migration (merge request)
• Remove foreign key project_pages_metadata.ci_job_artifacts (merge request)
• Update GitLab Runner Helm Chart to 0.36.0 (merge request)
• Fix GraphQL/OrderedArguments offense (Part 3/6) by @KevSlashNull (merge request)
• Pass formats explicitly when rendering .html format by @edith007 (merge request)
• Fix Gitlab/DelegatePredicateMethods offenses by @edith007 (merge request)
• Fix Rails/SaveBang offenses by @edith007 (merge request) GitLab Enterprise Edition

14.6.7 (2022-03-31)

Changed (1 change)

• Remove runners token prefix feature flags (merge request)

14.6.6 (2022-03-01)

Fixed (3 changes)

• Ensure cleanup job artifacts task does not include pipeline artifacts (merge request)
• Fix Geo checksummable check failing when file is nil (merge request) GitLab Enterprise Edition
• Resolve "Imports fail in 14.5.2 fail with HTTParty::UnsupportedURIScheme error" (merge request)

14.6.5 (2022-02-25)

Security (8 changes)

• Limit commands_changes to certain keys (merge request)
• Add runners_token prefix to Group and Project (merge request)
• Anonymous user can enumerate all users through GraphQL endpoint (merge request)
• Check for unsafe characters in email addresses before sending (merge request)
• Warn when snippet contains unretrievable files (merge request)
• Prevent DOS when rendering math markdown (merge request)
• Check permission when creating members through service (merge request)
• Reset password field on page load (merge request)

14.6.4 (2022-02-03)

Security

See https://about.gitlab.com/releases/2022/02/03/security-release-gitlab-14-7-1-released/

14.6.3 (2022-01-18)

Fixed (4 changes)

• Fix destruction of projects with pipelines (merge request)
• Geo: Resolve "undefined method each_batch" (merge request) GitLab Enterprise Edition
• Fix migration for cases with empty strings (merge request)
• Geo: adapt verification timed out query to use state table (merge request) GitLab Enterprise Edition

14.6.2 (2022-01-10)

No changes.

14.6.1 (2022-01-04)

Fixed (2 changes)

• Ignore new line differences when deciding whether to squash MR (merge request)
• Fix re-use of extensions between instances (merge request)

14.6.0 (2021-12-21)

Added (76 changes)

• Create table to store merge request compliance violations (merge request)
• Upgrade GitLab Pages to 1.49.0 (merge request)
• Add create crm organization component by @leetickett (merge request)
• Registration features info for setting repo size (merge request) GitLab Enterprise Edition
• Log structured message when LFS object is auto-linked from parent (merge request)
• Enable display_outdated_line_diff by default (merge request)
• Default enable webauthn feature flag by @kingjan1999 (merge request)
• Update return type for previousStageJobsOrNeeds (merge request)
• Add support for Rel-License microformat (merge request)
• Add error alerts and badge for webhooks (merge request)
• Add alert for rate limited webhooks (merge request)
• Expose iid in pipelines api (merge request)
• Implement separate status for bulk imports (merge request)
• Include parent_iid and parent link in epic responses by @espadav8 (merge request) GitLab Enterprise Edition
• Add ClusterImageScanningType to VulnerabilitiesResolver (merge request) GitLab Enterprise Edition
• Add ability to retry scans from on-demand scans list (merge request) GitLab Enterprise Edition
• Add ability to cancel on-demand scans (merge request) GitLab Enterprise Edition
• Add Geo proxied/local events service ping (merge request) GitLab Enterprise Edition
• Allow use of when and rules (merge request)
• Add Workhorse metrics for secondary proxy requests (merge request) GitLab Enterprise Edition
• Delete project events before the project (merge request)
• Capture job executor value in ci_runners table (merge request)
• Add markdown support for Vulnerability Description (merge request) GitLab Enterprise Edition
• ADd deprecation warning for group import/export (merge request)
• Add sticky header to group migration table (merge request)
• Add a total number of jobs run by a runner (merge request)
• GraphQL: Allow filtering runners by active status (merge request)
• Log an activity event when an Agent connects (merge request)
• Added tracking events for the validation errors (merge request)
• Add handling for pending incident escalations (merge request) GitLab Enterprise Edition
• Add future_subscriptions column (merge request)
• Create data model for Deployment Approvals (merge request)
• Add event streaming metrics (merge request) GitLab Enterprise Edition
• Enable bulk delete in tags list (merge request)
• Encrypt plaintext static_objects_external_storage_auth_token (merge request)
• Enable SSH key lifetime settings by default (merge request) GitLab Enterprise Edition
• Adds graphql markdown field for Vulnerability Description (merge request) GitLab Enterprise Edition
• Add first_commit and first_multiline_commit to commit template by @trakos (merge request)
• Add the "Scheduled" tab to the on-demand scans page (merge request) GitLab Enterprise Edition
• Add index snippets on project_id and title (merge request)
• Put vuln finding link ingest behind feature flag (merge request)
• Add stale runners filters and badge (merge request)
• Add feature to limit the lifetime of SSH keys (merge request)
• Add Task work item type to the database (merge request)
• Remove importer usage ping feature flag (merge request)
• Enable FF multiple_gpg_signatures (merge request)
• Fixed sign-in via LDAP when a user cap is set (merge request) GitLab Enterprise Edition
• Support expanded reference formats for URLs (merge request)
• Create vulnerability read model (merge request)
• Execute build hooks on pending status (merge request)
• Include Last Activity in User Permissions CSV export (merge request) GitLab Enterprise Edition
• Introduce API to transfer groups to a new parent group (merge request)
• Added Snowplow events to the Clusters page (merge request)
• Return job failure reason in API responses by @albertvaka (merge request)
• Add project CI CD tab tracking (merge request)
• Add incident_management_timeline_events table (merge request)
• Set CS_DEFAULT_BRANCH_IMAGE in Auto DevOps template (merge request)
• Add confidential filter to board list in GraphQL (merge request)
• Add canCurrentUserPushToBranch permission (merge request)
• Use Keyset pagination for Groups API by default (merge request)
• Add GraphQL type and resolver for agent activity events (merge request)
• Create default squash commit message using customizable template by @trakos (merge request)
• Display issue crm contacts in UI by @leetickett (merge request)
• Create a note when replied to the email creating the service desk issue (merge request)
• Update Member entity to expose member state (merge request) GitLab Enterprise Edition
• Remove tag limit feature flag (merge request)
• Migrate remaining U2fRegistrations to WebauthnRegistrations (merge request)
• Create agent_activity_events table for storing Agent activity (merge request)
• Invite members for tasks (merge request)
• Add issue customer relations contacts quick actions by @leetickett (merge request)
• Allow board issue filtering by iteration cadence ID in GraphQL (merge request) GitLab Enterprise Edition
• Make invite members in quick menu permanent (merge request)
• Partition pruning for the web_hook_logs table (merge request)
• Moved user cap worker logic to User (merge request) GitLab Enterprise Edition
• Validate batched migration jobs (merge request)
• Track created_at on CI minutes records (merge request)

Fixed (93 changes)

• Fix foreign key and index names in ci_sources_pipelines (merge request)
• Strip leading and trailing whitespace from user's name (merge request)
• Ensure all scanners are translated in alerts (merge request)
• Fixed cache_key ids by @akumar1503 (merge request)
• Fix N+1 problem for system notes metadata association (merge request)
• Fix updating emails for group notifications (merge request)
• Handle nil services error in external pipeline validation (merge request)
• Fix expose status in Runners API (merge request)
• Fix N+1 problem for notes association (merge request)
• Copy auth field objects when serializing values (merge request) GitLab Enterprise Edition
• Update gitlab-markup gem to 1.8.0 (merge request)
• Expose finished_at in job details JSON by @KevSlashNull (merge request)
• Fix OlderDeploymentsDropService drops manual deployments (merge request)
• Unescape and sanitize protected tag name on create and update (merge request)
• Gracefully handle bad dependency scanner input (merge request) GitLab Enterprise Edition
• Fix CI/CD settings available when CI/CD is off by @KevSlashNull (merge request)
• Add new line to code nav popover (merge request)
• Error Tracking: Allow event payload to contain null bytes (merge request)
• Only trigger housekeeping once per push (merge request)
• Link existing LFS objects from parent fork during uploads (merge request)
• Fix SMIME signed email sending, do not overwrite Content-Disposition by @bufferoverflow (merge request)
• GithubImporter: Fallback to LegacyDiffNote when DiffNote fails (merge request)
• Fixed NoMethodError on import from GitHub Enterprise on RFC1918 IP by @colinbarr (merge request)
• Fix issue sidebar keyboard shortcuts (merge request)
• Fix 'Erase job log' button is misleading by @KevSlashNull (merge request)
• Generate human readable message on duplicate dotenv variables (merge request)
• Optimize query for issue neighbors (merge request)
• Fix commit sha being used instead of tag for tagged pipelines (merge request)
• Ensure Jira users and labels have id attribute (merge request) GitLab Enterprise Edition
• Present pipeline coverage in pipeline API entity as string (merge request)
• Fix user list selection is not in sync with UI by @KevSlashNull (merge request)
• Fix schedule ID is show on schedule edit page by @KevSlashNull (merge request)
• Use additional headers for matching service desk email (merge request)
• Fix vulnerability report tab querystring removed when filters changed (merge request) GitLab Enterprise Edition
• Fix occasional failure when updating labels from sidebar (merge request)
• Fix wrong end date in query for contributions (merge request)
• Copy manual variables when retrying job (merge request)
• Fix some private contributions being hidden on the contribution calendar by @eggerd (merge request)
• Fix permissions for label promotion via API (merge request)
• Fix serverity and alert sidebar edit button style by @orozot (merge request)
• Pass current_user when rendering Markdown in email (merge request)
• Fix infinite loop on saml login of a blocked user (merge request)
• Add ci_status.scss for commit piplines page by @orozot (merge request)
• Fix button variant in maintenance mode settings by @KevSlashNull (merge request)
• Fix epic date changes without user input (merge request)
• Fix cut off focus ring in commit container by @KevSlashNull (merge request)
• Add patch for WikiCloth (merge request)
• Fix pride flag emoji rendering (merge request)
• Fix order in monthly events boundary query (merge request)
• Do not run service discovery for DB load balancing for rake tasks (merge request)
• Ensure current user and variables are updated when playing a job (merge request)
• Allow creating a group access token for a group with SSO enforcement (merge request) GitLab Enterprise Edition
• Fixes pending note avatar size in diff view (merge request)
• Fix link to docs in the "Transfer Group" section by @gizero (merge request)
• Fix Wiki Pipeline network error if wiki does not exist (merge request)
• Fix for hexadecimal branch deletion (merge request)
• Fix column order in jobs tab in the pipelines details page (merge request)
• Fix import from remote object storage documentation (merge request)
• Fix Gitlab Pages deployment wrong if a project has a public folder by @sodepr (merge request)
• Catch YAML errors when parsing security policies (merge request) GitLab Enterprise Edition
• Fix Debian Sources file name by @sathieu (merge request)
• Fix the SSL_CERT_DIR logging on git operations (merge request)
• Fix cross database transaction when blocking users (merge request)
• Support Action Cable on GCP Memorystore (merge request)
• Update dependency proxy copy and help text (merge request)
• Only display user bio for confirmed and active users (merge request)
• Heartbeat runner only for specific job-context requests (merge request)
• Sort months of the CI minutes chart app (merge request) GitLab Enterprise Edition
• Fix broken project creation without import sources (merge request)
• Do not try to auto-complete vulnerabilities if the user is nil (merge request) GitLab Enterprise Edition
• Do not show primary email as secondary email in admin view (merge request) GitLab Enterprise Edition
• Ensure coverage approval rule sync is successful (merge request) GitLab Enterprise Edition
• Fix Sidekiq sleep time for jobs that use replicas (merge request)
• Fix border spacing on multi-line comments (merge request) GitLab Enterprise Edition
• Add retries to github importer on client errors (merge request)
• Update dotNET-Core.gitlab-ci.yml template image by @softis-software (merge request)
• Fix wrong default branch imported with Bitbucket Server (merge request)
• Upgrading ipynbdiff to 0.3.8 (merge request)
• Allow to create issues by email when it contains only quotes (merge request)
• Grant permissions for oauth users based on scopes (merge request)
• Fix security report schema validation logic (merge request) GitLab Enterprise Edition
• Fix docs error in NuGet API by @wwwjon (merge request)
• Allow uploading up to 10 files (merge request)
• Fix issue and MR exports to support NOT filters (merge request)
• Create missing /root/.gnupg dir in Scala.gitlab-ci.yml by @carlosrogue (merge request)
• Don't try to generate url for an finding records (merge request) GitLab Enterprise Edition
• Use gpg --recv-keys instead of curl in Scala.gitlab-ci.yml by @carlosrogue (merge request)
• Error Tracking: Support exceptions from Python's repl (merge request)
• Move VSA stage options to footer (merge request) GitLab Enterprise Edition
• Fix discussions filter not working (merge request)
• Remove deprecated apt-key usage on Scala.gitlab-ci.yml by @carlosrogue (merge request)
• Fix display of times in access and deploy token table by @edith007 (merge request)
• Add emoji aliases for :) and :( (merge request)

Changed (95 changes)

• Use linear version GroupsWithTemplatesFinder#extended_group_search (merge request) GitLab Enterprise Edition
• Add Pajamas badge for pipelines license tab (merge request) GitLab Enterprise Edition
• Add copy issue URL button to vulnerability error message (merge request) GitLab Enterprise Edition
• Make badge in admin/users/_access_levels.html.haml Pajamas compliant (merge request)
• Update badges for ci builds to use helper (merge request)
• Update project runner badges to pajamas (merge request)
• Removes all ci_optimize_project_records_destruction ff (merge request)
• Update user signups cap to allow values greater than licensed user count (merge request) GitLab Enterprise Edition
• Make use of the project data served by Rails (merge request)
• Remove Analytics menu item from unlicensed EE (merge request) GitLab Enterprise Edition
• Geo: Treat missing files as sync failures (merge request) GitLab Enterprise Edition
• Remove FF avoid_cross_joins_environments_in_self_and_descendants (merge request)
• Remove cached_mr_title feature flag (merge request)
• Update cluster badge to pajamas (merge request)
• Hide user avatar for blocked and unconfirmed users (merge request)
• Order jobs returned desc (merge request)
• Enhance the sidebar to use gl-link focus styling (merge request)
• Default improved_container_scan_matching to true (merge request)
• Add Pajamas-complient protected tags badge (merge request)
• Split up yaml and humanized policy previews (merge request) GitLab Enterprise Edition
• Use finding_evidence over raw_metadata (merge request) GitLab Enterprise Edition
• When dependency proxy is disabled remove the menu (merge request)
• Clean up clone_job_variables_at_job_retry (merge request)
• Remove branches_pagination_without_count FF (merge request)
• Enable deployments_archive feature flag by default (merge request)
• Migrate auto-devops setting to GlBadge abstraction (merge request)
• Geo - Use Rails 6 many databases support (merge request) GitLab Enterprise Edition
• Tanuki Emoji: switch fallback emoji to Noto Emoji (merge request)
• Display tag messages with line endings by @KevSlashNull (merge request)
• Migrate badges to be compliant with the Pajamas design system (merge request)
• Merge feature flags related to new CI minutes tracking (merge request) GitLab Enterprise Edition
• Add loose foreign key for Terraform state versions (merge request)
• Remove load_balancing_for_update_all_mirrors_worker FF (merge request)
• Separate CI minutes notification levels between new and legacy (merge request) GitLab Enterprise Edition
• Allow external Spamcheck API key to be blank (merge request)
• Migrate badges in Admin -> Groups -> Show (merge request)
• Migrate badge in Group -> CI/CD -> Auto DevOps (merge request)
• Migrate badge component in the admin -> projects area (merge request)
• Fix: web ide text color in dark theme by @orozot (merge request)
• Make DORA data visible for admins (merge request)
• Improve runner deletion modal (merge request)
• Handle query timeouts better (merge request)
• Add cleanup migration for BackfillUserNamespace (merge request)
• Modify pending member approval endpoint (merge request) GitLab Enterprise Edition
• Use confirm variant for 'New requirement' button by @KevSlashNull (merge request) GitLab Enterprise Edition
• Add title with the file name to file_row component by @ruben.meza (merge request)
• Enable linear version User#membership_groups (merge request)
• UI text updates in new OAuth applications view (merge request)
• Change job duration label to 'Elapsed time' when in progress by @KevSlashNull (merge request)
• Add link for failed pipelines (merge request)
• Pipelines show full job names by @albertvaka (merge request)
• Cleanup unaccessible todos when user leaves public project (merge request)
• Add space between columns in runner table (merge request)
• Fixed an event for focus (merge request)
• Remove feature flag create_vulnerabilities_via_api (merge request)
• Adapt to size changes when displaying tooltips (merge request)
• Rework markdown footnote processing (merge request)
• Add Helm-chart storage limits to API and UI by @mlegner (merge request)
• Default jira_use_first_ref_by_oid feature flag to true (merge request)
• Remove chevron for menu button (merge request)
• Change icon to review-list (merge request)
• Expose failed import error through API (merge request)
• Remove ci_new_query_for_pending_stuck_jobs feature flag (merge request)
• Enable job trace store outside database transaction by default (merge request)
• Change namespace type default to 'User' (merge request)
• Load only one scan_finding_rule per policy (merge request) GitLab Enterprise Edition
• Add line number and import_type to the import status API (merge request)
• Refine the take-out-of-draft message (merge request)
• Improve copy when no iteration found in sidebar (merge request) GitLab Enterprise Edition
• Update UI message for merge conflicts (merge request)
• Change remediated badge icon from wrench to check-circle-dashed (merge request) GitLab Enterprise Edition
• Do not require startDate when creating a manual iteration cadence (merge request)
• Show disabled fork button for user without enough permissions (merge request)
• Copy variables when retrying job (merge request)
• Relocate online runners count in search bar (merge request)
• Prevent runner list IP and version overflow (merge request)
• Add more merging messages from the community (merge request)
• Remove diff limiting feature flags (merge request)
• Add URL to rejection_message if terms_not_accepted by @jgay (merge request)
• Drop FindingPipelines and Findings in bg migration (merge request)
• Enable preserve_latest_wal_locations_for_idempotent_jobs by default (merge request)
• Enable linear version of groups_including_descendants_by (merge request)
• Migrate snippets tabs to rails helper (merge request)
• Remove surface_environment_creation_failure feature flag (merge request)
• Improve UI message: creating branch from fork (merge request)
• Add Shimo integration sidebar menu and landing page by @icbd (merge request)
• Enable External MR diff verification by default (merge request) GitLab Enterprise Edition
• Remove support for sticking to old and new keys (merge request)
• Add BaseEdge base class (merge request)
• Split out main, and geo DB out of CI transactions (merge request) GitLab Enterprise Edition
• Migrate button variants (merge request) GitLab Enterprise Edition
• Update gl-modal buttons in user status modal by @yo (merge request)
• Do not select "My company or team" radio box by default (merge request)
• Allow squashing in MRs with single commit by @trakos (merge request)
• Start using v1.x of our IAC analyzer (merge request)

Deprecated (2 changes)

• Ignore position column (merge request) GitLab Enterprise Edition
• Deprecate ApiFuzzingCiConfigurationCreate fields (merge request) GitLab Enterprise Edition

Removed (4 changes)

• Remove force_company_trial experiment (merge request)
• Remove the configureIacScanningViaMr feature flag (merge request)
• Remove sast_entry_points experiment (merge request)
• Remove reference to lower_relation_max_count_limit (merge request)

Security (5 changes)

• Enable visibility filter on Epics menu pill count (merge request) GitLab Enterprise Edition
• Use Gitlab::Json to serialize sessions (merge request)
• Update Puma to version 5.5.2 (merge request)
• Disallow non-members unlocking project files (merge request) GitLab Enterprise Edition
• Use a more precise Sourcegraph URL in CSP (merge request)

Performance (18 changes)

• Limit the amount of ids loaded when using package build infos (merge request)
• Update dependency proxy API to use cleanup worker (merge request)
• Utilize C version of CommonMark renderer (merge request)
• Add index to projects on marked_for_deletion_at field is null (merge request)
• Only enqueue Jira workers when configured (merge request)
• Add index to improve contribution graph query (merge request)
• Simplify sanitizing emojis from localStorage (merge request)
• Optimize finding environment for BlobController (merge request)
• Improve index for calendar query (merge request)
• Replace Banzai based label rendering in VSA (merge request)
• Bulk insert job tags when creating a CI pipelines (merge request)
• Enable load balancing for update all mirrors by default (merge request)
• Avoid N+1 issue linking DAST profiles and builds (merge request) GitLab Enterprise Edition
• Reduce variables transformations when creating a new pipeline (merge request)
• Replace Ci::Runner with linear scopes (merge request)
• Enable perform FindTag RPC request for a single tag (merge request)
• Use linear version of User#ci_owned_runners (merge request)
• Remove trigram index on notes (merge request)

Other (59 changes)

• Use design system badge in admin project page (merge request)
• Fix GraphQL/OrderedArguments offense (Part 1/6) by @KevSlashNull (merge request)
• Fix GraphQL/FieldDefinitions offense (Part 2/4) by @KevSlashNull (merge request)
• Remove abort_deleted_project_pipelines flag (merge request)
• Remove vulnerability_occurrences_location_temp_index (merge request)
• Snowplow ED first run for data-attributes (merge request) GitLab Enterprise Edition
• Remove additional vulnerability finding links (merge request)
• Merge CI queuing denomalization feature flags into a single one (merge request)
• Fix Gitlab/DelegatePredicateMethods offenses by @edith007 (merge request) GitLab Enterprise Edition
• Delegate Requirement model attributes (merge request) GitLab Enterprise Edition
• Use rails helper to render mark_for_deletion badge (merge request) GitLab Enterprise Edition
• Delete invalid epic_issue records migration (merge request)
• Fix Gitlab/DelegatePredicateMethods offenses by @edith007 (merge request)
• Fix Gitlab/DelegatePredicateMethods offenses by @edith007 (merge request)
• Fix Rails/SaveBang offenses by @edith007 (merge request)
• Make projects storage badge pajamas compliant (merge request)
• Fix Gitlab/DelegatePredicateMethods offenses by @edith007 (merge request) GitLab Enterprise Edition
• Make milestone page tabs Pajamas-compliant (merge request)
• Implement syncing ci_project_mirrors and ci_namespace_mirrors tables (merge request)
• Convert single tab partial to Pajamas (merge request)
• Fix Rails/SaveBang offenses by @edith007 (merge request)
• Fix Rails/SaveBang offenses by @edith007 (merge request) GitLab Enterprise Edition
• Fix Rails/SaveBang offenses by @edith007 (merge request) GitLab Enterprise Edition
• Fix Rails/SaveBang offenses by @edith007 (merge request) GitLab Enterprise Edition
• Remove ::VisibleApprovable inclusion as it's duplicate by @edith007 (merge request)
• Pass formats explicitly when rendering .html format by @edith007 (merge request)
• Apply feedback to Snowplow event definitions (merge request) GitLab Enterprise Edition
• Hide search settings component in usage quota page (merge request) GitLab Enterprise Edition
• Fix Style/OpenStructUse offenses by @edith007 (merge request)
• Fix Style/OpenStructUse offenses by @edith007 (merge request)
• Fix Style/OpenStructUse offenses by @edith007 (merge request)
• Fix Style/OpenStructUse offenses by @edith007 (merge request)
• Merge branch '341849_cleanup_reference_cache_memoization_ff' into 'master' (merge request)
• Cleanup feature flag "reference_cache_memoization" (merge request)
• Prepare projects and namespaces loose foreign keys (merge request)
• Fix Style/OpenStructUse offenses by @edith007 (merge request)
• Fix Style/OpenStructUse offenses by @edith007 (merge request)
• Merge maintain feature flags for new queuing mechanism (merge request)
• Remove decoupling projects-runners feature flags (merge request)
• Fix Style/OpenStructUse offenses by @edith007 (merge request)
• Make design note pin compliant with Pajamas (merge request)
• Remove the validate_namespace_parent_type feature flag (merge request)
• Fill TestReport#issue_id field when creating new objects (merge request) GitLab Enterprise Edition
• Remove ci_predefined_vars_in_builder feature flag (merge request)
• Fix Style/OpenStructUse offenses by @edith007 (merge request)
• Make Service Desk Pajamas Design compliant (merge request)
• Improve Blame Page rendering performance by @cyberap (merge request)
• Fix OpenStruct use by @mehulsharma (merge request) GitLab Enterprise Edition
• Update GitLab Runner Helm Chart to 0.35.0 (merge request)
• Improve service desk service settings input tips (merge request)
• Remove PropagateServiceTemplateWorker and queue by @lenikadali (merge request)
• Remove unused CommitsBetween wrapper (merge request)
• Enhance SSO enforcement warning message (merge request) GitLab Enterprise Edition
• Fix offenses introduced by Style/OpenStructUse by @edith007 (merge request)
• Fix OpenStruct use by @mehulsharma (merge request)
• Fix OpenStruct use by @mehulsharma (merge request)
• Fix OpenStruct use by @mehulsharma (merge request)
• Fix OpenStruct use by @mehulsharma (merge request)
• Update Sidekiq to 6.3.1 (merge request)

14.5.4 (2022-02-03)

Security

See https://about.gitlab.com/releases/2022/02/03/security-release-gitlab-14-7-1-released/

14.5.3 (2022-01-11)

No changes.

14.5.2 (2021-12-03)

No changes.

14.5.1 (2021-12-01)

Fixed (4 changes)

• Check validation for license only if new record (merge request) GitLab Enterprise Edition
• Fix for hexadecimal branch deletion (merge request)
• Fix the SSL_CERT_DIR logging on git operations (merge request)
• Support Action Cable on GCP Memorystore (merge request)

14.5.0 (2021-11-19)

Added (113 changes)

• Show warning for markdown structure changes (merge request)
• Implement Pipeline Editor Walkthrough experiment (merge request)
• Add endpoint for activating all pending members (merge request) GitLab Enterprise Edition
• Add Yaml Source Editor Extension (merge request)
• Introduced the Source Editor Instance module (merge request)
• Add total counters in each runner type tab (merge request)
• Add customer relations organizations viewer by @leetickett (merge request)
• Add customer relations contacts viewer by @leetickett (merge request)
• Add endpoint for activating an waiting member (merge request) GitLab Enterprise Edition
• Add keyset pagination for tags API (merge request)
• Enable loose_foreign_key_cleanup FF by default (merge request)
• Allow reporters to see the service desk email address (merge request)
• Upgrade GitLab Pages to 1.48.0 (merge request)
• Implement deep linking for project VSA filters (merge request)
• Feature: Let OmniAuth support DingTalk by @icbd (merge request)
• Add group SAML configuration changes to group audit events (merge request) GitLab Enterprise Edition
• Add migration for backfilling project namespaces (merge request)
• Audit changes to compliance frameworks (merge request) GitLab Enterprise Edition
• Enable dependency_proxy_manifest_workhorse by dflt (merge request)
• Upgrade GitLab Pages to 1.47.0 (merge request)
• Add exists support to includes:rules CI config (merge request)
• Enable configure_iac_scanning_via_mr by default (merge request)
• Allow Minimal Access role for top-level SAML Group Links (merge request) GitLab Enterprise Edition
• Add slash command to promote issue to incident (merge request)
• Add member approval service (merge request) GitLab Enterprise Edition
• Enable linear GroupPlanPreloader ancestors queries (merge request) GitLab Enterprise Edition
• Create default merge commit message using customizable template by @trakos (merge request)
• GithubImporter: Thread diff notes (merge request)
• Query all partitions when loading loose FK records (merge request)
• Remove flag that hides event streaming from graphQL schema (merge request) GitLab Enterprise Edition
• Add opensource plan to database (merge request)
• Add wiki migration to projects and groups (merge request) GitLab Enterprise Edition
• Send invite team email after a root group is created (merge request)
• Render inherited templates from group in service desk (merge request)
• Add indexes to aggregated VSA tables (merge request)
• Add required label to tag name in release form (merge request)
• Add modal to warn group owners the impact of changing user cap (merge request) GitLab Enterprise Edition
• Add issues set crm contacts service and graphql mutation by @leetickett (merge request)
• Add pagination support for FindAllTagsRequest (merge request)
• Enable linear ancestors for groups (merge request)
• Add note regarding topic visibility to admin doc by @wwwjon (merge request)
• Track Shared Runners duration separate from CI minutes consumption (merge request) GitLab Enterprise Edition
• Show blocked icon on epic blocked issues (merge request) GitLab Enterprise Edition
• Add Sentry configs to application settings (merge request)
• Add helpful text to project select modal (merge request)
• Enable linear ApplicationSettings ancestors queries (merge request) GitLab Enterprise Edition
• Enable pipeline_editor_mini_graph feature flag by default (merge request)
• Limit issues one user can quickly create using service desk (merge request)
• Add Helm metadata to GraphQL by @sathieu (merge request)
• Enable linear EE Group ancestors queries (merge request) GitLab Enterprise Edition
• Remove redundant index_events_on_target_type_and_target_id (merge request)
• Rollout user namespace & project tracking (merge request)
• Unblock LDAP blocked user on sign-in with other auth methods (merge request)
• Add queuing mechanic for reindexing (merge request)
• Topic management: add link to topic detail page by @wwwjon (merge request)
• Add jobArtifacts to PipelineType by @genctys (merge request)
• Track processed loose FK records (merge request)
• Update user attributes for Group SAML enterprise users (merge request) GitLab Enterprise Edition
• Add 'show' page for topic by @wwwjon (merge request)
• Record transaction duration during migrations (merge request)
• Add corpus create mutation and service (merge request) GitLab Enterprise Edition
• Update scroll position to synchronize the Jump To Next button (merge request)
• Add created_at to the GraphQL LicenseType (merge request) GitLab Enterprise Edition
• Speed up searching environments by ref deployed (merge request)
• Add customer relations menu item and root apps by @leetickett (merge request)
• Enable linear ParticipantsService ancestors queries (merge request)
• Enable linear MembersFinder ancestors queries (merge request)
• Promote empty_repo_upload experiment (merge request)
• Adding Special diff rendering for .ipynb notebooks (merge request)
• VSA: Add deployment frequency links (merge request) GitLab Enterprise Edition
• Enables the mr_changes_fluid_layout flag by default (merge request)
• Adds vulnerability state to Vulnerability-Check (merge request)
• Enable logging of Sidekiq bulk job insertions (merge request)
• Remove group_authorized_agents feature flag (merge request)
• Add Prometheus metrics for loose foreign keys (merge request)
• Include state_id when gathering VSA data (merge request)
• Loose foreign key definition experiment (merge request)
• Enable real-time issue assignees by default (merge request)
• Feature: add user track script entry point by @orozot (merge request)
• Fix spec to properly support many databases (merge request)
• Enable group-level MR approval settings by default (merge request) GitLab Enterprise Edition
• Enable linear GroupTree ancestors queries (merge request)
• Annotate DAST models strings for localization (merge request) GitLab Enterprise Edition
• Persist credit card network (merge request)
• Adds DB column for merge request assignee state (merge request)
• Add native systemd units by @behrmann (merge request)
• Clean up migration to populate commit users (merge request)
• Enabled variables for CI services by @ST-Apps1 (merge request)
• Add runtime_runner_features column to ci_builds_metadata (merge request)
• Add metric for users associating group milestones to releases (merge request)
• Loose foreign key worker implementation (merge request)
• Added kaniko ci template to build docker images (merge request)
• Invite members for task experiment (merge request)
• Remove FF verification_state_backfill_worker (merge request) GitLab Enterprise Edition
• Add 'tencent_serverless_framework' to built-in project template (merge request)
• Merge branch 'mw/clearup-ff_group_membership_export' into 'master' (merge request) GitLab Enterprise Edition
• Allow custom support email without configuring custom project suffix (merge request)
• Add median lead time for changes to VSA (merge request) GitLab Enterprise Edition
• Remove ff_group_membership_export flag (merge request) GitLab Enterprise Edition
• Move Agent usage metrics to Core (merge request)
• Enable Agent creation in Core (merge request)
• Move Agent KUBECONFIG variable generation to core (merge request)
• Sync creating requirements with requirements issue (merge request) GitLab Enterprise Edition
• Add user caps to group's membership settings (merge request) GitLab Enterprise Edition
• Remove the rails_apdex_counters feature flag (merge request)
• Add CustomerRelations::IssueContact model by @leetickett (merge request)
• Cleanup project_storage_ui feature flag (merge request)
• Add created_at filters to MR resolver (merge request)
• Add integration with ZenTao by @icbd (merge request)
• Move Agent CI tunnel functionality to Core (merge request)
• Add Debian endpoint for distribution key by @sathieu (merge request)
• Filter issues by releaseTag in GraphQL (merge request)
• Add 'Explore topics' page by @wwwjon (merge request)

Fixed (123 changes)

• Fix SAML SSO redirects for pseudonymized URLS (merge request)
• Add suggestion_commit_message length validation by @trakos (merge request)
• GithubImporter: Fix import duration metric (merge request)
• Fix a bug with the metadata during the npm package upload (merge request)
• Fix error when Origin header is null (merge request)
• Fix loading authors in issues list (merge request)
• Fix regression in code blocks in the Content Editor (merge request)
• Fix sysvinit Sidekiq logging (merge request)
• Fix setting block animation issues (merge request)
• Remove presence validator on name on WebauthnRegistration (merge request)
• Fix common errors in AuthorizedProjectsWorker (merge request)
• Fix widget dropdown title overflow (merge request)
• Don't transform empty .ipynb diffs (merge request)
• Allow destruction of records in archived pending_delete projects (merge request)
• Allow to create service desk issues for all quoted emails (merge request)
• Fix bug due to fuzzy matching in Infrastructure Registry (merge request)
• Fix no repo error message for group-level wikis (merge request) GitLab Enterprise Edition
• Fix commit msg color for dark mode graph (merge request)
• Fixes broken trigger layout (merge request)
• Fix agent install page paths (merge request)
• Reduce noise in cluster cleanup workers (merge request)
• Fix scoped board milestone/iteration Timebox global ID (merge request) GitLab Enterprise Edition
• Prevent overflowing of runner tags (merge request)
• Fix manifest workhorse upload (merge request)
• Extend the OverrideUuids service logic (merge request) GitLab Enterprise Edition
• Fix foreign_key of using on data_fields by @icbd (merge request)
• Vulnerability Report: Fix typo in description text (merge request) GitLab Enterprise Edition
• Fix built-in template import creating duplicate audit logs (merge request) GitLab Enterprise Edition
• Fix merge requests not importing for older projects (merge request)
• Add sidebar highlight and fix link by @icbd (merge request)
• Fix 2FA setup for LDAP users (merge request)
• Recalculate project authorizations on group transfer by @vfazio (merge request)
• Clear closure references when issue is reopened (merge request)
• Prevent Git operations from checking replication lag on non-Geo sites (merge request) GitLab Enterprise Edition
• Allow non-group Agent projects to authorize themselves (merge request)
• Vulnerability Modal: Fix issue with long URLs (merge request) GitLab Enterprise Edition
• Fix Type error about namespace through provides on members page (merge request)
• Fix pipeline editor crashing the browser when getting a 500 error (merge request)
• Reset subscription max seats used on new term (merge request) GitLab Enterprise Edition
• Fix issue rebalance banner (merge request)
• Disable query cache when outside Rails executor (merge request)
• Fix todo API when used with Alerts (merge request)
• Add remediation based on cve or id by @ssarka (merge request) GitLab Enterprise Edition
• Wrap Sidekiq scheduler threads in Rails reloader (merge request)
• Fix quick action permissions to match UI (merge request)
• Skip retrying for reads on connection errors if primary only (merge request)
• Fix illustration paths in survey response page (merge request) GitLab Enterprise Edition
• Fix MR commits with missing committers/authors (merge request)
• Fix: update broken pipeline layout (merge request)
• Use the To header when sending pipeline emails (merge request)
• Cleanup sticky_environments_in_job_retry feature flag (merge request)
• Improve tracking of requests in rate limiter (merge request)
• Check correct permissions before showing Release Evidence link (merge request)
• Fix ghost button on payment step for subscriptions (merge request) GitLab Enterprise Edition
• Allow SSO callbacks through maintenance mode (merge request) GitLab Enterprise Edition
• Fix error on environment rollback (merge request)
• Fix permission check for confidential quick action (merge request)
• Fix Geo: Secondaries may be orphaning Upload files (merge request) GitLab Enterprise Edition
• Add better error handling to BulkImports::GroupLoader (merge request)
• Ensure that GlSingleStat animates (merge request)
• Fix tasklist header counts in Test Cases (merge request) GitLab Enterprise Edition
• Allow relative WebP image embed in markdown by @KevSlashNull (merge request)
• Fix uninitialized constant STICK_OBJECT by @leetickett (merge request)
• Increase file import size validator timeout (merge request)
• Fix breadcrumb click event handling (merge request)
• Do not update feedback when it is persisted (merge request) GitLab Enterprise Edition
• Increase the deduplication TTL for future jobs (merge request)
• Fix filtering of "Not connected" runners (merge request)
• Exclude project bots from deactivation in DeactivateDormantUsersWorker (merge request)
• Fix 2FA management on Safari (merge request)
• Fix slight scroll bounce when jumping between unresolved discussions (merge request)
• Don't limit number of Gitaly client keepalives (merge request)
• Silence unknown PostgreSQL OIDs warnings (merge request)
• Do not auto-retry unrecoverable job failure (merge request)
• Fix: filename display when copy/paste in comment by @orozot (merge request)
• Do now unescape branch name when deleting branch (merge request)
• Enable surface_environment_creation_failure feature flag by default (merge request)
• Prevent timeouts when updating share_with_group_lock of a group (merge request)
• Fix epic board scope text (merge request)
• Standardize error message field in structured logs (merge request)
• Make LoadBalancer to configure pool sizes of all classes (merge request)
• Sort epic ancestors in hierarchical order in graphQL endpoint (merge request) GitLab Enterprise Edition
• Fix cascading settings attr reader behavior by @gizero (merge request)
• Don't fail DeleteStoredFilesWorker if one of the files is missing (merge request)
• Schedule AutoFix background job after ingesting the security reports (merge request) GitLab Enterprise Edition
• Move yaml processor secrets configuration to EE (merge request) GitLab Enterprise Edition
• Remove the pipelines link from Auto DevOps toast (merge request)
• Fix 'private method 'load' called' when posting non-whitelisted webhook by @perlun (merge request)
• Change manage events metric counter method (merge request)
• Fix canUpdate console error on external issues (merge request) GitLab Enterprise Edition
• Show captcha verification on issue boards (merge request)
• Fix error when archiving requirements (merge request) GitLab Enterprise Edition
• Persist solution, message and description fields (merge request) GitLab Enterprise Edition
• Skip st_diff setting on LegacyDiffNote during import (merge request)
• Use overridden_uuid as primary lookup for the report finding (merge request) GitLab Enterprise Edition
• Remove duplicate text from create group description (merge request)
• Add reschedule option to Resource Group worker (merge request)
• Fix SMIME signature for emails on push (merge request)
• Fix error 500 loading branch with UTF-8 characters with performance bar (merge request)
• Fix file mode changes not always visible in MRs by @hypemc (merge request)
• Allow job token to perform all release REST API operations by @guillaume.chauvel (merge request)
• Fix 2+ discussions on one line not working (merge request)
• Fix issues with frame-src CSP directive (merge request)
• Fix shared runners form injections (merge request)
• Fix deployment merge request link creation (merge request)
• Add latest commit hash to compare cache key (merge request)
• Move DAST CI Job keys to the EE Variant (merge request) GitLab Enterprise Edition
• Fix issue with CSP using Safari in dev mode (merge request)
• Remove compliance framework section for unlicensed EE (merge request) GitLab Enterprise Edition
• Fix unnecessary epics fetch req with empty filters (merge request) GitLab Enterprise Edition
• Fix object deduplication on Geo first sync (merge request) GitLab Enterprise Edition
• Allow newlines in HTTP URLs (merge request)
• Fix Security::OverrideUuidsService matching logic (merge request) GitLab Enterprise Edition
• Add cloak-startup class and apply to mobile overlay by @leetickett (merge request)
• Stop polling when checking task lists on an issue (merge request)
• Modify error message for clarity (merge request)
• Ensure Azure-related gems are loaded (merge request)
• Ensure commits limit is always positive (merge request)
• Add DEFAULT_CERT_DIR handling to Spamcheck and fix Gitaly GRPC Bug (merge request)
• Fix a join in the postgres_indexes view (merge request)
• Fix spacing around code quality problem icon in diff view by @antonykor.ak (merge request) GitLab Enterprise Edition
• Transaction metrics from workers are not collected (merge request)
• Fix nil value in location column in vulnerability_occurrences (merge request) GitLab Enterprise Edition

Changed (142 changes)

• Update deprecation notice (merge request)
• Increase LFS token entropy for keys/deploy keys (merge request)
• Fixes cross-db modification for Ci::JobArtifacts::DestroyBatchService (merge request)
• Remove query_project_ci_feature_usages_for_coverage flag (merge request) GitLab Enterprise Edition
• Replace window.confirm with GlModal confirmation (merge request)
• Update audit events to filter by username (merge request) GitLab Enterprise Edition
• Fix OpenStruct use by @mehulsharma (merge request)
• Fix OpenStruct use by @mehulsharma (merge request)
• Move API fuzzing YAML generation to the client (merge request) GitLab Enterprise Edition
• Use after_commit in Vulnerabilities::Feedback (merge request)
• Use allowlist of allowed attributes for imported models (merge request)
• Use image digest for Auto DevOps deployments by @kinolaev (merge request)
• Make capitalization of incident management objects uniform in modal (merge request)
• feat: Update default PAT prefix when not set (merge request)
• Use rectangular avatar on topic detail page by @wwwjon (merge request)
• Fix OpenStruct use by @mehulsharma (merge request)
• Fixed OpenStruct use offense by @mehulsharma (merge request)
• Fix OpenStruct usage by @mehulsharma (merge request)
• Release the NPM metadata abbreviated support (merge request)
• Deprecation of the cert-based K8s integration (merge request)
• Use token authentication in the Debian distribution APIs by @sathieu (merge request)
• Get cluster_id from kubernetes_resource for CIS (merge request) GitLab Enterprise Edition
• Remove Apollo error suppression feature flag (merge request)
• Show validation error for setting project suffix (merge request)
• Update admin deploy keys table to comply with Pajamas design system (merge request)
• Go back denylist for importing project (merge request)
• Add shared_runners_duration field to NamespaceMonthlyUsageType (merge request)
• Update vendored cluster management project template (merge request)
• Move creation of external cross-references into background worker (merge request)
• Enable by default new refactored page (merge request)
• Remove cached_loading_hints feature flag (merge request)
• Restore TagsFinder class interface (merge request)
• Refactor profile authentication log to show relevent events (merge request)
• Redirect to Pipeline Editor from Suggest Pipeline banner CTA (merge request)
• Fixed OpenStruct use by @mehulsharma (merge request) GitLab Enterprise Edition
• Create ProjectNamespace when a Project is created (merge request)
• Source Editor Extension module (merge request)
• Update workflow propeties in CI json schema (merge request)
• Avoid sending send-data headers in API response body (merge request)
• Fixed OpenStruct use by @mehulsharma (merge request)
• Add tooltip and commit title to pipeline editor's status header (merge request)
• Add user popup to CI pipeline header by @KevSlashNull (merge request)
• Redirect to continuous onboarding after trial reg (merge request) GitLab Enterprise Edition
• Add read_at to dependency proxy objects (merge request)
• Add pipeline artifacts size to admin area project statistics by @guillaume.chauvel (merge request)
• Spin reviewer on UX label (merge request)
• Refactor fetching board scope to GraphQL (merge request) GitLab Enterprise Edition
• Use allowlist for importing project attributes (merge request)
• Filter runner type via tabs (merge request)
• Update runner status badges and locked icon (merge request)
• Reorganise Jira Connect UI (merge request)
• Update Rugged to v1.2.0 (merge request)
• Vulnerability Chart: Fix selected state of buttons (merge request) GitLab Enterprise Edition
• Log when primary host for DB load balancing is marked offline (merge request)
• Review Adv Search admin UI text (merge request)
• Load MR widget artifacts on mount (merge request)
• Change API permissions to set epic of an issue (merge request) GitLab Enterprise Edition
• Use path_with_namespace for delete confirmation phrase (merge request)
• Flash a warning when not using index aliases (merge request) GitLab Enterprise Edition
• Toggle file tree bolding based on file "Viewed" status (merge request)
• Change Geo SSH proxy to internal primary URL (merge request) GitLab Enterprise Edition
• Add empty state for CI mintues (merge request) GitLab Enterprise Edition
• Runner status won't return "paused" (merge request)
• Add policy name to ScanExecutionPolicyCommit mutation (merge request) GitLab Enterprise Edition
• Update omniauth-oauth2 and remove error verification monkey-patch (merge request)
• Add optional include_jobs param for CI lint APIs (merge request)
• Shift a user's contribution calendar based on their timezone setting by @davebarr (merge request)
• Updated texts and illustrations on Kubernetes page (merge request)
• Improve run pipeline ux (merge request)
• Add project count and coverage count to tooltip (merge request) GitLab Enterprise Edition
• Remove not_null constraint and default for public_email (merge request)
• Replaced v-html with v-safe-html by @mehulsharma (merge request)
• Refactor manual variables form (merge request)
• Remove jira_connect_asymmetric_jwt feature flag (merge request)
• Revert temporary change for sending expiration email for all ssh keys (merge request)
• Add clarification of repo size limits (merge request)
• Pluralize DevOps Report to DevOps Reports (merge request)
• Add limit-container-width to Jira create branch (merge request)
• Restore namespace requirement for project deletion confirmation (merge request)
• Handle Errno::ENETUNREACH in Gitlab::HTTP (merge request)
• Enable terms_of_service_vue feature flag by default (merge request)
• Add links to Jira-related error messages (merge request)
• Update breadcrumb toggle to inline (merge request)
• Use GlAvatar in approval rule selector (merge request) GitLab Enterprise Edition
• Change the active link color in the sidebar (merge request)
• Moved clusters empty state to Vue component (merge request)
• Store trace files outside of a database transaction (merge request)
• Exclude internal API and Geo git_ssh routes from secondary proxying (merge request) GitLab Enterprise Edition
• Remove jQuery from Jira connect app (merge request)
• Add GITLAB_CDN_HOST to frame-src and worker-src (merge request)
• Only delete data from Elasticsearch 30 days after subscription expires (merge request) GitLab Enterprise Edition
• feat: Set PersonalAccessToken default prefix (merge request)
• Turn on Feature Flag of ZenTao by @icbd (merge request)
• Skip already imported merge requests on importer (merge request)
• Say when MR was approved by me by @KevSlashNull (merge request)
• Update clusters index help paths (merge request)
• Change question marks to Learn More in Settings (merge request)
• Enable dependency proxy by default (merge request)
• Re-position merge train help icon (merge request) GitLab Enterprise Edition
• Rename crm related policies and consider feature flag status by @leetickett (merge request)
• Remove skip_legacy_diff_note_callback_on_import feature flag (merge request)
• Use secured analyzer image for cluster image scanning (merge request) GitLab Enterprise Edition
• Edit UI text (merge request)
• Add response in Publish a package file endpoint (merge request)
• Update copy of branches_to_be_notified label (merge request)
• Migrate Terraform template to use rules syntax by @willianpaixao (merge request)
• Link Pipeline Editor button to open in correct branch (merge request)
• Admin: card match can have different holder name (merge request) GitLab Enterprise Edition
• Fix translation of title of ZenTao by @icbd (merge request) GitLab Enterprise Edition
• Add "Load more" button to environment dropdown (merge request) GitLab Enterprise Edition
• Convert dropdowns in Admin / Visiblity and access to radio buttons (merge request)
• Make cosmetic improvements to Geo Admin UI (merge request) GitLab Enterprise Edition
• Remove the left-overs of use-deprecated-sizes attributes (merge request)
• Remove stage default from CI schema (merge request)
• Enable feature flag default on (merge request)
• Replace registration token in registration modal (merge request)
• Move register runner information to a dropdown (merge request)
• Run GraphQL docs rake task on changes (merge request)
• Removes cross-joins FF in MergeRequest#environements (merge request)
• Redirect Geo HTTP(s) pulls to different path with missing repo (merge request) GitLab Enterprise Edition
• Hide private group name when access request is denied (merge request)
• Improve empty state when artifacts fail to load by @mehulsharma (merge request)
• Change enforcement label to status (merge request) GitLab Enterprise Edition
• Remove retarget_merge_requests feature flag (merge request)
• Handle MissingPersonalAccessTokenError on Go middleware (merge request)
• Add missing labels when password is filled out (merge request)
• UI polish on the webhook log page (merge request)
• Fix ZenTao spelling by @icbd (merge request) GitLab Enterprise Edition
• Update audit events date range filter (merge request) GitLab Enterprise Edition
• Improve merge blocked text (merge request) GitLab Enterprise Edition
• Show CSV and json artifact download on security tab and merge request (merge request)
• Add custom label GitHub status check checkbox (merge request) GitLab Enterprise Edition
• Use default timeouts for Jira calls (merge request)
• Deduplicate http transport creation (merge request)
• Update Terraform.latest.gitlab-ci.yml template by @willianpaixao (merge request)
• Does not update Geo node if running on a primary site (merge request) GitLab Enterprise Edition
• Remove roadmap_daterange_filter ff & legacy code (merge request) GitLab Enterprise Edition
• Use Gitlab::HTTP in download method (merge request)
• Order Deployments by Finish Time (merge request)
• Enable flag group_authorized_agents by default (merge request)
• Drop Vulnerabilites that would be invalid as well (merge request)
• Rename Import Uploader Extension Allowlist Constant (merge request)

Deprecated (1 change)

• Remove include MR description checkbox and deprecate related API field by @trakos (merge request)

Removed (6 changes)

• Remove chat_names -> ci_pipeline_chat_data FK (merge request)
• Remove deprecated WIP from GraphQL (merge request)
• Remove frontend for editing of Jira labels (merge request) GitLab Enterprise Edition
• Remove jobs and projects columns (merge request)
• Remove the DORA DF feature flag in VSA (merge request)
• Remove product analytics tracking (merge request)

Security (15 changes)

• Add reCAPTCHA to password reset and confirmation email forms (merge request)
• Highlight usage of unicode bidi characters
• Fix dompurify.js to prevent path traversal attacks
• Refresh authorizations on transfer of groups having project shares
• Don't allow author to resolve discussions when MR is locked via GraphQL
• Workhorse: Allow uploading only a single file
• Adding a '[redacted]' to mask private email addresses
• Avoid decoding the whole tiff image on isTIFF check
• Respect visibility level settings when updating project via API
• Only include visible groups a project is shared with
• Stop using 'self' in the CSP's frame-src directive (merge request)
• Do not display the root password by default
• Group owners should see SCIM token only once GitLab Enterprise Edition
• Set PipelineSchedules to inactive
• Do not allow Applications API to create apps with blank scopes

Performance (25 changes)

• Enable API v3 branches/:sha partial response (merge request)
• Avoid cross-joins in PipelinesForMergeRequestFinder (merge request)
• Improve ETag caching for issue discussions (merge request)
• GraphQL user.groups node authorization DB query count optimization (merge request)
• Remove unused index index_for_resource_group on ci_builds (merge request)
• Remove startup JS call for issue notes (merge request)
• Use keyset pagination when fixing diff commits (merge request)
• Enable workhorse_use_sidechannel by default (merge request)
• Omit query params for discussions.json (merge request)
• Add index to events table support UMAU metric (merge request)
• Use new worker/service to refresh authorizations of project members (merge request)
• Add an index on vulnerability_occurrence_pipelines (merge request)
• Add index for cluster_id in vulnerability_occurrences location (merge request)
• Default enable new_graphql_keyset_pagination (merge request)
• Omit WHERE clause for NOT labels filter when empty (merge request)
• Remove releases author_id index (merge request)
• Optimize JIRA ref lookup (merge request)
• Recreate broken ci_builds index (merge request)
• Fix N+1 query in VulnerabilitiesResolver (merge request) GitLab Enterprise Edition
• Cleanup update_deployment_after_transaction_commit feature flag (merge request)
• Search for group descendants through a btree (merge request)
• Improve TBT on file source view (merge request)
• Cache CI variables used for rules evaluation (merge request)
• Speed up Sidekiq size limiter middleware (merge request)
• Remove use of Redis multi in Sidekiq client (merge request)

Other (78 changes)

• Fix the offenses introduced by Style/OpenStructUse by @edith007 (merge request)
• Fix OpenStruct use by @mehulsharma (merge request) GitLab Enterprise Edition
• Fix OpenStruct use by @mehulsharma (merge request)
• Set total of Progress bar nil when replication is disabled by @edith007 (merge request) GitLab Enterprise Edition
• Add post deploy migration to remove open_project_data by @lenikadali (merge request)
• Create pipeline trigger application limits (merge request)
• Convert admin users page tabs to Pajamas (merge request)
• Geo: Remove legacy code for upload sync (merge request)
• Cleanup feature flag gitaly_tags_finder (merge request)
• Remove paginated_tree_graphql_query feature flag (merge request)
• Convert labels page tabs to Pajamas (merge request)
• Set user's highlight theme for the Blame page during SSR by @cyberap (merge request)
• Convert projects dashboard tabs to Pajamas (merge request)
• Convert snippets page tabs to Pajamas (merge request)
• Convert projects explore page tabs to Pajamas (merge request)
• Convert admin users page tabs to Pajamas (merge request)
• Convert pipeline schedules page tabs to Pajamas (merge request)
• Convert commit tabs to pajamas (merge request)
• Decouple group's storage table from feature flag (merge request) GitLab Enterprise Edition
• Add with_highest_role_minimal_access to statistics (merge request)
• Update GlTab helpers (merge request)
• Hide details for invited members in seats usage (merge request) GitLab Enterprise Edition
• Adds margin to billings page (merge request) GitLab Enterprise Edition
• Enabling jupyter_clean_diff by default (merge request)
• Remove report_on_long_redis_durations flag (merge request)
• Replace dotenv constants with application limits (merge request)
• Convert search tabs to pajamas (merge request)
• Convert blob editor tabs to pajamas (merge request)
• Convert markdown field tabs to pajamas (merge request)
• Convert credential inventory tabs to pajamas (merge request) GitLab Enterprise Edition
• Migrate requirement to work items (merge request)
• Convert explore tabs to pajamas (merge request)
• Convert explore tabs to pajamas (merge request)
• Remove rate limiter feature flag (merge request)
• Improve Blame Page rendering performance by @cyberap (merge request)
• Convert product analytics tabs to pajamas (merge request)
• Drop ci_build_trace_sections table and related (merge request)
• Changed the chronological order of Job history sequence on CI Job by @edith007 (merge request)
• Remove FF ci_create_external_pr_pipeline_async (merge request)
• Remove FF ci_new_artifact_file_reader (merge request)
• Fix the Style/OpenStructUse Cop offense for Guardfile by @edith007 (merge request)
• Remove the packages_remove_cross_joins_to_pipelines feature flag (merge request)
• Remove the container_registry_expiration_policies_caching feature flag (merge request)
• Remove include_sti_condition flag (merge request)
• Expose 'blocked' attribute on epic issues endpoint (merge request) GitLab Enterprise Edition
• Removed new_customersdot_staging_url feature flag (merge request)
• Remove variable_inside_variable feature flag (merge request)
• Add spacing at top of project/group blank new forms (merge request)
• Exclude ProjectNamespaces from GraphQL namespace results (merge request)
• Pass formats explicitly when rendering .md.erb by @edith007 (merge request) GitLab Enterprise Edition
• Remove pipeline association from Vulnerabilities::Finding (merge request) GitLab Enterprise Edition
• Remove release_evidence feature flag (merge request)
• Fix the offences introduced by Performance/OpenStruct by @edith007 (merge request)
• Add icons to project's storage table (merge request)
• Cleanup unused tagging records (merge request)
• Backfill default namespace as User namespace (merge request)
• Pass formats explicitly when rendering svg icons by @edith007 (merge request)
• Pass formats explicitly when rendering svg icons by @edith007 (merge request)
• Pass formats explicitly when rendering svg icons by @edith007 (merge request)
• Enable quarantined service ping metrics (merge request) GitLab Enterprise Edition
• Replace v-html with v-safe-html to improve frontend security posture by @edith007 (merge request)
• Improve User Exprience for Blame page by @cyberap (merge request)
• Mark all time events ServicePing metric as broken (merge request)
• Restore MR to populate MR diff commit users (merge request)
• Fixing the deprecation warning as using . in template has deprecated by @edith007 (merge request)
• Drop redundant broken index (merge request)
• Refactor protected paths UI and documentation (merge request)
• Update GitLab Runner Helm Chart to 0.34.0 (merge request)
• Update gitlab-dangerfiles to 2.3.1 (merge request)
• Remove the dast_on_demand_scans_scheduler feature flag (merge request) GitLab Enterprise Edition
• Fix storage row line height (merge request) GitLab Enterprise Edition
• Remove managed cluster alerts feature flag (merge request)
• Schedule migration to remove duplicate Findings (merge request)
• Show all storage types in project's storage usage (merge request)
• Remove ci_synchronous_artifact_parsing feature flag (merge request)
• Add pipeline artifacts, packages and uploads size to group REST API by @guillaume.chauvel (merge request)
• Add pipeline artifacts and uploads sizes to project REST API by @guillaume.chauvel (merge request)
• Remove not used parameter from epics finder (merge request) GitLab Enterprise Edition

14.4.5 (2022-01-11)

No changes.

14.4.4 (2021-12-03)

No changes.

14.4.3 (2021-12-01)

Fixed (6 changes)

• Check validation only if new record of license (merge request) GitLab Enterprise Edition
• Fix for hexadecimal branch deletion (merge request)
• Geo - Fix no repo error message for group-level wikis (merge request) GitLab Enterprise Edition
• Prevent Git operations from checking replication lag on non-Geo-secondary sites (merge request) GitLab Enterprise Edition
• Allow SSO callbacks through maintenance mode by @dzaporozhets (merge request) GitLab Enterprise Edition
• Fix 2FA setup for LDAP users (merge request)

14.4.2 (2021-11-08)

Fixed (3 changes)

• Skip retrying for reads on connection errors if primary only (merge request)
• Fix error 500 loading branch with UTF-8 characters with performance bar (merge request)
• Skip st_diff callback setting on LegacyDiffNote when importing (merge request)

Changed (1 change)

• Remove skip_legacy_diff_note_callback_on_import from legacy diff note (merge request)

Performance (1 change)

• Prevent Sidekiq size limiter middleware from running multiple times on the same job (merge request)

14.4.1 (2021-10-28)

Security (13 changes)

• Highlight usage of unicode bidi characters (merge request)
• Fix dompurify.js to prevent path traversal attacks (merge request)
• Refresh authorizations on transfer of groups having project shares (merge request)
• Adding a '[redacted]' to mask private email addresses (merge request)
• Do not allow Applications API to create apps with blank scopes (merge request)
• Don't allow author to resolve discussions when MR is locked via GraphQL (merge request)
• Workhorse: Allow uploading only a single file (merge request)
• Set PipelineSchedules to inactive (merge request)
• Do not display the root password by default (merge request)
• Group owners should see SCIM token only once (merge request) GitLab Enterprise Edition
• Respect visibility level settings when updating project via API (merge request)
• Avoid decoding the whole tiff image on isTIFF check (merge request)
• Remove external_webhook_token from exported project (merge request)

14.4.0 (2021-10-21)

Added (79 changes)

• Upgrade GitLab Pages to 1.46.0 (merge request)
• Support math expressions in the Content Editor (merge request)
• Add Reviewer names (merge request)
• Geo: Enable Upload replication using SSF by default (merge request) GitLab Enterprise Edition
• Add username attribute support for GitLab.com Group SAML SSO (merge request) GitLab Enterprise Edition
• Expose issue contacts via GraphQL by @leetickett (merge request)
• Add source instance version validation for project (merge request)
• Add top-level GraphQL query for single board list (merge request)
• Allow to setup Documentation pages URL for help pages redirects (merge request)
• DevOps Adoption: Add "trend over time" graph (merge request) GitLab Enterprise Edition
• Improve data zoom on contribution analytics (merge request) GitLab Enterprise Edition
• Add cluster_image_scanning CI parser to update location data (merge request) GitLab Enterprise Edition
• Enable on-demand scans scheduler (merge request) GitLab Enterprise Edition
• Add EE variant of Resolvers::ProjectPipelinesResolver (merge request) GitLab Enterprise Edition
• Implement PostUploadPackWithSidechannel client in Workhorse (merge request)
• Introduce status column for the security_scans table and populate it (merge request)
• Add contact update mutation to GraphQL by @leetickett (merge request)
• Add support for load balancing multiple databases (merge request)
• Admin: listing matching card details of an user (merge request) GitLab Enterprise Edition
• Import repository with project migration (merge request)
• Graceful degradation for Branches controller (merge request)
• Add ability to set iteration on issue creation via GraphQL API (merge request) GitLab Enterprise Edition
• Avoid cross-joins in PipelinesForMergeRequestFinder (merge request)
• Remove ci_resource_group_process_modes feature flag (merge request)
• Add customer relations contact create mutation by @leetickett (merge request)
• Sync requirement and requirement issues state (merge request) GitLab Enterprise Edition
• Keep credit card non-sensitive info (merge request) GitLab Enterprise Edition
• Subscriptions hand raise lead API client (merge request) GitLab Enterprise Edition
• Add metric for users associating milestones to releases (merge request)
• Add meta data in user_credit_card_validations (merge request)
• Link to a search for feature flag name in project (merge request) GitLab Enterprise Edition
• Add includeSubepics argument to issue filters in GraphQL (merge request) GitLab Enterprise Edition
• Warn users of impacted escalation policies on leave/delete (merge request) GitLab Enterprise Edition
• Add confidential issues filtering for GraphQL API (merge request)
• Measure Sidekiq enqueue latency for scheduled jobs (merge request)
• Add ability to set iteration on issue creation via GraphQL API (merge request) GitLab Enterprise Edition
• Add issue_customer_relations_contacts linking table by @leetickett (merge request)
• Add config field gitlab_kas.external_k8s_proxy_url (merge request)
• Add DependencyProxySettings mutation (merge request)
• Added feature flag to show terraform banner (merge request)
• Promote jobs_to_be_done experiment (merge request)
• Feat(Cloud Activation Form Modal): loading button (merge request) GitLab Enterprise Edition
• Return runner webUrl via GraphQL API (merge request)
• Add option of 60 days to container image expiration policy by @pataar (merge request)
• Add missing keywords to CI schema (merge request)
• BulkImports: Handle network errors (merge request)
• Add sorting to DA overview table (merge request) GitLab Enterprise Edition
• Document how to migrate off Gitaly Cluster (merge request)
• Make it possible to define custom request duration thresholds (merge request)
• Implement rate-limiting for a deprecated API endpoint (merge request)
• Extend EE::Types::Ci::PipelineType with dast_profile (merge request) GitLab Enterprise Edition
• Add links and message field to VulnerabilityType (merge request) GitLab Enterprise Edition
• Allow relate quick action on issue create (merge request)
• Allow plus character in project names by @lzampier (merge request)
• Render frontmatter codeblock in the Content Editor (merge request)
• Add support for wbr in content editor (merge request)
• Enable live tracking and enforcement of CI minutes (merge request) GitLab Enterprise Edition
• Send "setup for company" in trial form to CustomersDot (merge request)
• Perform validations on the parent of a namespace/group by default (merge request)
• Added support for test coverage badge color configuration by @szaboi (merge request)
• Move cluster agent GraphQL mutations and supporting services to core (merge request)
• Move cluster agent GraphQL types and resolvers to core (merge request)
• Address the PK Overflow risk for the taggins - Step 3 (merge request)
• Remove i_testing_metrics_report_artifact_uploaders feature flag (merge request)
• Remove usage_data_i_testing_test_case_parsed feature flag (merge request)
• Enable FF "paginated_tree_graphql_query" by default (merge request)
• Add user permissions for runners in GraphQL API (merge request)
• Always enable the database load balancer (merge request)
• Add endpoints for project relations exports (merge request)
• Upgrade Pages to 1.45.0 (merge request)
• Support FIFO/LIFO process modes to Resource Group (merge request)
• Add documentation to Files API Rate Limits (merge request)
• Add security_orchestration_policy to pipeline source filter (merge request) GitLab Enterprise Edition
• Add sign-in count to external pipeline validation (merge request)
• Add negated issueType filter to issue resolver (group and project) (merge request)
• Add clone issue to REST API (merge request)
• Add runner_features column to ci_builds_metadata (merge request)
• Extend /help/instance_configuration with Git LFS rate limit by @wwwjon (merge request)
• API: Add endpoint to reset runner authentication token by @KyleFromKitware (merge request)

Fixed (96 changes)

• Fix Analytics Author filters (merge request)
• Allow maintainers to set MR approval settings (merge request) GitLab Enterprise Edition
• Fix: update links in billing page by @orozot (merge request) GitLab Enterprise Edition
• Update onboarding template project (merge request) GitLab Enterprise Edition
• Fix handling Service Ping response DevOps metrics (merge request)
• Add guard clause to ensure incoming params (merge request)
• MR Analytics: Add pipelines sanity check (merge request) GitLab Enterprise Edition
• Replace calls to LoadBalancing with ::Gitlab::Database::LoadBalancing (merge request)
• Change shared runner settings on import on conflict with group (merge request)
• Fix undefined method `use_primary!' error in GDK by @leetickett (merge request)
• Guard against exceptions from unfound DiffNotes (merge request)
• Replace success button in the add linked issue (merge request)
• Ensure correct group for DA chart (merge request) GitLab Enterprise Edition
• Fix cut-off dropdown in board breadcrumbs (merge request)
• Fix non-restarted skipped bridge jobs (merge request)
• Don't run WAL queries when not using replicas (merge request)
• Enable syntax highlighting for new files (merge request)
• Add go, nuget, and sbt to Dependencies API filters (merge request) GitLab Enterprise Edition
• Present sbt, nuget, and go in Dependency List page (merge request) GitLab Enterprise Edition
• Fix detail page of NuGet package with missing metadata by @wwwjon (merge request)
• Remove local form errors flash (merge request)
• Make CI minutes consumption increment idempotently (merge request) GitLab Enterprise Edition
• Boards - Sort closed issues by closedAt date (merge request)
• Gracefully track errors raised by sending CI minutes notifications (merge request) GitLab Enterprise Edition
• Add IssuesFieldExtension to set relative positions (merge request)
• Update strategies used for DB count approximation for read-only DB (merge request)
• Mark the created_at attribute as read-only to prevent updating it (merge request)
• Disable caching of MergeToRefService call in mergeability check (merge request)
• Return the correct project in job/allowed_agents API response (merge request)
• Use pessimistic locking when accessing Terraform state (merge request)
• Sanitize given scan types before querying the security_scans (merge request)
• Fix auto-renew of LetsEncrypt domains for Pages (merge request)
• Show hint if input value is invalid (merge request) GitLab Enterprise Edition
• Fix inline JavaScript HAML linter not working (merge request)
• Add ON DELETE constraint to security_policy_management_project_id (merge request)
• Fix merge request approvals accordion (merge request) GitLab Enterprise Edition
• Fix undefined method error in validate_remote_git_endpoint service (merge request)
• Hide filters UI in Roadmap within epic page (merge request) GitLab Enterprise Edition
• Fix storing first_mentioned_in_commit_at attribute (merge request)
• Redirect Geo git push operations to primary external URL (merge request) GitLab Enterprise Edition
• Fix spacing between note badges by @TaehyeokKang (merge request)
• Fix project statistics Uploads by @guillaume.chauvel (merge request)
• Move required styles for issue-token to core by @michael.telgkamp (merge request)
• Fix default values for the deprecated API throttle (merge request)
• Fix dependency proxy image prefix (merge request)
• Upgrade mermaid-js to v8.13.2 (merge request)
• Don't retry errors when there are no replicas (merge request)
• Delete issues css (merge request)
• Use GlAlert for external issues list errors (merge request) GitLab Enterprise Edition
• Fix tabs switching between tree and roadmap (merge request) GitLab Enterprise Edition
• Fix: change dropdown background to transparent by @orozot (merge request)
• Use GlAlert for integrations table errors (merge request)
• Removes reporting on non-existant failures for import rake task (merge request)
• Fix compliance framework labels readability (merge request) GitLab Enterprise Edition
• Fix clipped broadcast message on login page when using custom header (merge request)
• Fix issue search optimization in GraphQL (merge request)
• Expand template names when tracking inclusion (merge request)
• Fix incorrect date in type of work chart (merge request) GitLab Enterprise Edition
• Fix: translate upload license tips by @orozot (merge request) GitLab Enterprise Edition
• Reapply table-layout fixed in repository file list (merge request)
• Global Search - Upvote Tooltip Alignment (merge request)
• Prevent group wiki writes on read-only DBs (merge request) GitLab Enterprise Edition
• Fix incorrect trigger of issue/epic autocomplete (merge request) GitLab Enterprise Edition
• Fix Web IDE renaming empty content (merge request)
• Fix milestone references in group context (merge request)
• Value of lock_memberships_to_ldap should not affect authorizations (merge request)
• Remove file upload type restirction (merge request)
• Fixed post merge ci status bug (merge request)
• Generate startup css as if com_and_canary by @leetickett (merge request)
• Disable form on admin appearance sign-in page preview (merge request)
• Add connection fallback to ActiveRecordProxy (merge request)
• Update GitLab Shell to v13.21.1 (merge request)
• Fix Australian timezone abbreviations in tooltips (merge request)
• Merge branch 'jswain_combined_registration_auto_trial_params' into 'master' (merge request) GitLab Enterprise Edition
• Provide namespace_id default value (merge request)
• Fix CSV issues import max file size message by @JonstonChan (merge request)
• Fix unmet prerequisites help URL (merge request)
• Fix polling on vuln details page (merge request) GitLab Enterprise Edition
• Fix rule all branches not using monospace font (merge request) GitLab Enterprise Edition
• Fix sum of LFS objects size with identical value by @guillaume.chauvel (merge request)
• Fix project group share setting wording (merge request)
• Fix gitaly-backup TLS connections (merge request)
• Fix Content-Disposition header not working in Azure Blob storage (merge request)
• Handle ConnectionNotEstablished in the DB LB (merge request)
• MR Analytics: Add yAxis formatter (merge request) GitLab Enterprise Edition
• Remove unnecessary route (merge request)
• Fix address requires string literal i18n helpers by @elcordova (merge request)
• Fix DB connection check for Geo user routing (merge request) GitLab Enterprise Edition
• Update to commonmarker gem 0.23.2 (merge request)
• Focus on input when dropdown is shown on issue creation page (merge request)
• Replace public_send with send in doctor rake task (merge request)
• Open sidebar after user creates a new item in boards (merge request)
• Geo: Fix maintenance mode causing Unhealthy secondary status (merge request) GitLab Enterprise Edition
• Allow BoardListType.issues to filter by negated issueType in GraphQL (merge request)
• Add additional properties to policy_details helper (merge request) GitLab Enterprise Edition
• Persist feedback alert for SAST Configuration (merge request) GitLab Enterprise Edition

Changed (80 changes)

• Implement Dependency proxy via Workhorse injectors (merge request)
• Added v-scrolling to both editors by @mehulsharma (merge request)
• Update auto-deploy-image to v2.14.0 (merge request)
• Adjust update_runners_registration_token permission (merge request)
• Remove feature flag member_destroy_async_auth_refresh (merge request)
• Disable create list button after clicked once (merge request)
• Preselect all projects in group coverage analytics (merge request) GitLab Enterprise Edition
• Allow longer Helm channel names by @sathieu (merge request)
• Enable create_vulnerabilities_via_api by default (merge request) GitLab Enterprise Edition
• Use allowlist of allowed attributes for imported models (merge request)
• Refactor the usage of Secret Scanning to Secret Detection (merge request)
• Improve Git HTTPS message given when Gitaly unavailable (merge request)
• Remove performance_roadmap ff and legacy code (merge request) GitLab Enterprise Edition
• Respect security scanner schema (merge request) GitLab Enterprise Edition
• Default enable use_upsert_query_for_mr_metrics FF (merge request)
• Support Jira Connect asymmetric JWTs (merge request)
• Improve translatability of email confirmation page (merge request)
• Remove vulnerability flags feature flag (merge request)
• Styling updates of the protected environments edit access dropdown (merge request) GitLab Enterprise Edition
• Clean up oauth buttons on sign in/up (merge request)
• Improve merge train help text (merge request) GitLab Enterprise Edition
• Update branch name to use monospace (merge request) GitLab Enterprise Edition
• Remove redundant help text from runners (merge request)
• Proxy Geo secondary HTTP pushes + lfs through Workhorse (merge request) GitLab Enterprise Edition
• Update compliance report title and navigation (merge request) GitLab Enterprise Edition
• Change MR draft status notification from flash to tast (merge request)
• Allow minimal access value for UserHighestRole (merge request) GitLab Enterprise Edition
• Add jsonb field for Finding Evidence (merge request)
• Geo: Increase reliability of certain one-time jobs (merge request) GitLab Enterprise Edition
• Geo: Reduce unnecessary resource usage (merge request) GitLab Enterprise Edition
• Geo: Reduce unnecessary resource usage (merge request) GitLab Enterprise Edition
• GithubImporter: Format diff note suggestions to the gitlab format (merge request)
• system_check: Bump minimum required Git version to v2.33.0 (merge request)
• Update SAST config primary action button variant (merge request) GitLab Enterprise Edition
• Add rake task to pause or resume elastic indexing (merge request) GitLab Enterprise Edition
• Changed cluster type badge to gitlab-ui element (merge request)
• Move advanced_search_multi_project_select FF to user actor (merge request) GitLab Enterprise Edition
• Implement Dependency proxy via Workhorse injectors (merge request)
• Replace namespaces unique index on name and parent_id (merge request)
• Remove orchestration policies feature flag (merge request) GitLab Enterprise Edition
• Redirect threat_monitoring policies endpoints (merge request) GitLab Enterprise Edition
• Add tooltips to runners badges (merge request)
• Remove beta badge from GitLab Migration (merge request)
• Show author badge in comments (merge request)
• Toggle banner using suggest_pipeline_enabled application setting (merge request)
• Enable merge requests discussions cache (merge request)
• Edit UI text of Abuse reports settings (merge request)
• Prevent Workhorse panics when Geo proxy URL is unset (merge request) GitLab Enterprise Edition
• Improve deployment information on Jira Cloud app by @rbordignon (merge request)
• Migrate branches nav from Bootstrap tabs to GlTabs (merge request)
• Allow dots in Helm channel, but forbid repeated dots by @sathieu (merge request)
• Remove analyzer_pipeline metrics join to ci_builds (merge request) GitLab Enterprise Edition
• Update cluster management project template with new version of Falco (merge request)
• Update UI text in Group general settings (merge request)
• Allow removal of cloud licenses (merge request) GitLab Enterprise Edition
• Remove default value for time zone user preference (merge request)
• Exclude secret_detection findings from autoresolution (merge request) GitLab Enterprise Edition
• Enable repo size limit and ip restriction (merge request) GitLab Enterprise Edition
• Remove async_filtering feature flag (merge request)
• Convert ee/geo/db/schema.rb to ee/geo/db/structure.sql (merge request) GitLab Enterprise Edition
• Updated the Cluster Agent Token table heading (merge request) GitLab Enterprise Edition
• Fix DB load balance autoloading/code-reloading (merge request)
• Remove "files" from end of default commit message in Web IDE by @scootergrisen (merge request)
• Ensure merge request header strings are internationalized (merge request)
• Add namespace_ancestry_ids migration (merge request) GitLab Enterprise Edition
• Update Copy on License Compliance CTA (merge request) GitLab Enterprise Edition
• Remove download text from pipeline artifact dropdown items by @fabsrc (merge request)
• Add suggest_pipeline_enabled to application_settings (merge request)
• Update deprecated GlIcon size in IDE preview navigator by @jameschensmith (merge request)
• Block move and clone of requirement issues (merge request) GitLab Enterprise Edition
• Remove owner validation in AdditionalPack transfer (merge request) GitLab Enterprise Edition
• Update Rouge syntax highlighting gem (merge request)
• Check anonymous search access in API endpoints (merge request) GitLab Enterprise Edition
• Merge boards Apollo client (merge request)
• Bump swagger-ui-dist to 3.52.3 by @bufferoverflow (merge request)
• Assign trial to only eligible namespace (merge request) GitLab Enterprise Edition
• Remove cutoff logic for expiration message (merge request) GitLab Enterprise Edition
• Replace "Any branch" with "All branches" (merge request)
• Re-organize Environment Action Buttons (merge request)
• Fix multiple translation strings by @scootergrisen (merge request)

Removed (9 changes)

• Remove shared runners CTE FF (merge request)
• Remove bio-html and cached_markdown_version from user_details (merge request)
• Remove obsolete column for DevOps analytics (merge request)
• Drop Delayed Project Removal column from Namespaces (merge request)
• Remove ignoring framework column for compliance project settings (merge request) GitLab Enterprise Edition
• Remove unused Debian distribution methods by @sathieu (merge request)
• Remove project_level_issues_analytics FF (merge request)
• Removed instance level serverless domains feature (merge request)
• Remove feature flag ci_parallel_minutes_reset (merge request) GitLab Enterprise Edition

Security (34 changes)

• Add autocomplete attribute to most password fields (merge request)
• Rename profile password fields so password managers understand (merge request)
• Fix reverse tabnabbing issue (merge request)
• Use v-safe-html in project_list_item.vue by @Fall1ngStar (merge request)
• Require password confirmation when user changes their primary email (merge request)
• Fix XSS in Jira link GitLab Enterprise Edition
• Return 404 if model id wasn't passed to UploadsController
• Scrub artifacts signed URL in SendEntry logs
• Prevent double-impersonation and impersonation breakout
• Clear session access tokens when starting/stopping impersonation
• Require password param for 2FA changes
• Prevent users from bypassing 2FA on certain pages
• Use validated URL when sending request to Gitea Importer
• Fix permissions check on project members import
• Fix fogbugz importer DNS Rebind SSRF
• Require group admin access to list pending invites
• Do not export and import repository_size_limit
• Escapes MR approval rule names correctly
• Disable exporting pipeline triggers on project export
• Add pagination to dependencies API GitLab Enterprise Edition
• Filter shared groups autocomplete by permitted GitLab Enterprise Edition
• Apply account locking to password reset page
• Verify state before using errors from OAuth2 OmniAuth providers
• Fix GFM autocomplete xss
• Remove related project access tokens when a project is deleted
• Do not allow status checks to exist with external protected branches GitLab Enterprise Edition
• Permission check issuable template API data GitLab Enterprise Edition
• Require access token for git when 2fa is required
• Prohibit anonymous access for specific user API endpoint
• Respect disabled import sources when initiating import via API
• Prevent showing not allowed subgroup epics GitLab Enterprise Edition
• Prevent moving epic issues to different group hierarchy GitLab Enterprise Edition
• Fix denial-of-service attack in Markdown parser
• Enforce configured scopes for Oauth applications

Performance (27 changes)

• Set X-Requested-With for startup JS requests (merge request)
• Use Group linear ancestor scopes (merge request) GitLab Enterprise Edition
• Skip secure product metrics in service ping (merge request) GitLab Enterprise Edition
• Clean up failed archive when no more attempts left (merge request)
• Render gitaly-unavailable error for Tags page (merge request)
• Enable FF "reference_cache_memoization" by default (merge request)
• Enable FF "tags_finder_gitaly" by default (merge request)
• Quarantine broken security_products_usage metrics (merge request) GitLab Enterprise Edition
• Preload user project access in group API (merge request)
• User ParticipantService linear ancestor scopes (merge request)
• Use GroupPlansPreloader linear ancestor scopes (merge request) GitLab Enterprise Edition
• Use specialized worker to refresh authorizations on group-share update (merge request)
• Disable BatchLoader replace_methods by default (merge request)
• Avoid loading project namespace for id (merge request)
• Use MembersFinder ancestors linear scopes (merge request)
• Use ApplicationSetting ancestors linear scopes (merge request) GitLab Enterprise Edition
• Disable replace_methods in users autocomplete (merge request)
• Remove priority sort from board list issues (merge request)
• Use GroupTree ancestors linear scopes (merge request)
• Replace Group ancestors scope with linear version (merge request)
• Add concurrent index for selecting resource_group from ci_builds (merge request)
• Skip keep_around commit callback if skip_keep_around_commits is true (merge request)
• Add index for vulnerability_occurrences image location (merge request)
• Improve retrieving default branch of empty repos (merge request)
• Update pending builds namespace traversal ids (merge request)
• Use specialized worker to refresh authorizations on project transfer (merge request)
• Add a uniq filter to SHAs passed to the keep around service (merge request)

Other (41 changes)

• Remove feature flag for pipeline editor drawer (merge request)
• Improve UX of group two factor grace period input (merge request)
• Remove metrics that keeps count of deleted container images by @edith007 (merge request) GitLab Enterprise Edition
• Remove metric that keeps track of published Debian packages by @edith007 (merge request) GitLab Enterprise Edition
• Remove the FF ci_idempotent_pipeline_process_worker (merge request)
• Remove metric that keeps track of downloaded container images by @edith007 (merge request) GitLab Enterprise Edition
• Add Google Analytics ID to gitlab_standard schema for snowplow (merge request)
• Remove metric that keeps track of published container images by @edith007 (merge request) GitLab Enterprise Edition
• Remove the FF ci_include_rules (merge request)
• Always use rate limiting Redis (merge request)
• Cleanup delete orphaned deployments background migration (merge request)
• Remove feature flag disable_joins_upstream_downstream_projects (merge request)
• Do not append hash to pseudonymized URL (merge request)
• Remove test summary widget usage ping feature flag (merge request)
• Remove sync_namespace_name_with_cdot flag (merge request)
• Set assumeImmutableResults to true in access tokens Apollo config by @imrishabh18 (merge request)
• Remove unused struct field (merge request)
• Re Reschedule Delete Orphaned Deployments BG migration (merge request)
• Refactor compliance framework UI and documentation (merge request) GitLab Enterprise Edition
• Remove the FF ci_pipeline_add_job_with_lock (merge request)
• Remove project authorizations API FF (merge request)
• Revise UI text for Usage Statistics (merge request)
• Removes track_epic_boards_activity feature flag (merge request)
• Remove pages_smart_check_outdated_sha feature flag (merge request)
• Additional tests of #work_in_progress? (merge request)
• Use varchar_pattern_ops indexes for labels (merge request)
• Update runner status descriptions (merge request)
• Make build_id param as required when updating CI minutes async (merge request) GitLab Enterprise Edition
• Remove FF ci_remove_update_retried_from_process_pipeline (merge request)
• Filter Welcome to GitLab console message from capybara by @leetickett (merge request)
• Remove redundant index on taggings table (merge request)
• Update additional CI minute docs (merge request)
• Drop old int4 PK column for push_event_payloads (merge request)
• Drop old int4 PK column for events (merge request)
• Remove foreign key from terraform_state_versions to ci_builds (merge request)
• Drop old int4 PK columns for ci_sources_pipelines (merge request)
• Drop old int4 PK columns for ci_job_artifacts (merge request)
• Cleanup bigint conversion for ci_builds_metadata (merge request)
• Remove pipeline foreign keys from package tables (merge request)
• Cleanup bigint conversion for ci_builds (merge request)
• Drop support for data-track-event (merge request)

14.3.6 (2021-12-03)

No changes.

14.3.5 (2021-11-26)

Fixed (6 changes)

• Allow SSO callbacks through maintenance mode (merge request) GitLab Enterprise Edition
• Geo - Fix no repo error message for group-level wikis (merge request) GitLab Enterprise Edition
• Prevent Git operations from checking replication lag on non-Geo-secondary sites (merge request) GitLab Enterprise Edition
• Fix error 500 loading branch with UTF-8 characters with performance bar (merge request)
• Remove defaultAuthors from MR Analytics and VSA (merge request)
• Allow SSO callbacks through maintenance mode (merge request) GitLab Enterprise Edition

14.3.4 (2021-10-28)

Security (13 changes)

• Highlight usage of unicode bidi characters (merge request)
• Fix dompurify.js to prevent path traversal attacks (merge request)
• Refresh authorizations on transfer of groups having project shares (merge request)
• Do not allow Applications API to create apps with blank scopes (merge request)
• Don't allow author to resolve discussions when MR is locked via GraphQL (merge request)
• Workhorse: Allow uploading only a single file (merge request)
• Group owners should see SCIM token only once (merge request) GitLab Enterprise Edition
• Respect visibility level settings when updating project via API (merge request)
• Avoid decoding the whole tiff image on isTIFF check (merge request)
• Adding a '[redacted]' to mask private email addresses (merge request)
• Do not display the root password by default (merge request)
• Set PipelineSchedules to inactive (merge request)
• Remove external_webhook_token from exported project (merge request)

14.3.3 (2021-10-12)

Fixed (3 changes)

• Disable caching of MergeToRefService call in mergeability check (merge request)
• Fix 2FA setup for users with no password (merge request)
• Fix dependency proxy image prefix (merge request)

14.3.2 (2021-10-01)

Fixed (1 change)

• Update GitLab Shell to v13.21.1 (merge request)

Changed (1 change)

• Remove async_filtering feature flag (merge request)

14.3.1 (2021-09-30)

Security (29 changes)

• Fix permissions check on project members import (merge request)
• Require password param for 2FA changes (merge request)
• Respect disabled import sources when initiating import via API (merge request)
• Return 404 if model id wasn't passed to UploadsController (merge request)
• Scrub artifacts signed URL in SendEntry logs (merge request)
• Prevent double-impersonation and impersonation breakout (merge request)
• Clear session access tokens when starting/stopping impersonation (merge request)
• Prevent users from bypassing 2FA on certain pages (merge request)
• Use validated URL when sending request to Gitea Importer (merge request)
• Fix XSS in Jira link (merge request) GitLab Enterprise Edition
• Fix fogbugz importer DNS Rebind SSRF (merge request)
• Remove related project access tokens when a project is deleted (merge request)
• Require group admin access to list pending invites (merge request)
• Do not export and import repository_size_limit (merge request)
• Escapes MR approval rule names correctly (merge request)
• Filter shared groups autocomplete by permitted (merge request) GitLab Enterprise Edition
• Require access token for git when 2fa is required (merge request)
• Prohibit anonymous access for specific user API endpoint (merge request)
• Disable exporting pipeline triggers on project export (merge request)
• Add pagination to dependencies API (merge request) GitLab Enterprise Edition
• Do not allow status checks to exist with external protected branches (merge request) GitLab Enterprise Edition
• Permission check issuable template API data (merge request) GitLab Enterprise Edition
• Apply account locking to password reset page (merge request)
• Enforce configured scopes for Oauth applications (merge request)
• Verify state before using errors from OAuth2 OmniAuth providers (merge request)
• Prevent moving epic issues to different group hierarchy (merge request) GitLab Enterprise Edition
• Fix GFM autocomplete xss (merge request)
• Prevent showing not allowed subgroup epics (merge request) GitLab Enterprise Edition
• Fix denial-of-service attack in Markdown parser (merge request)

14.3.0 (2021-09-21)

Added (111 changes)

• Add organizations update mutation to GraphQL by @leetickett (merge request)
• Auto-scope board to iteration cadence (merge request)
• Decouple project runners queuing query from projects table (merge request)
• Add owner validation for project namespaces (merge request)
• Add ProjectNamespace model and DB relationships (merge request)
• Upgrade Pages to 1.44.0 (merge request)
• Add docs on how to use AWS server side encryption for backups (merge request)
• Persist projects configured to use an Agent (merge request)
• Enable Pages replication with Geo by default (merge request) GitLab Enterprise Edition
• Address the PK Overflow risk for the ci_build_needs - Step 3 (merge request)
• Extend marginalia to provide db_config_name (merge request)
• Enable Roadmap daterange presets (merge request) GitLab Enterprise Edition
• Test project namespace is destroyed with project_namespace.rb (merge request)
• Add DastSiteValidations status filter (disabled) (merge request) GitLab Enterprise Edition
• Allow using inherited description templates on service desk (merge request) GitLab Enterprise Edition
• Gitaly repository tree keyset pagination (merge request)
• Sort scoped labels first in issuable sidebar by @leetickett (merge request)
• Enable surfacing false positives for vulnerabilities (merge request)
• Remove related todos when a design is archived (merge request)
• Updated vendored cluster management project tpl (merge request)
• Configure the sidekiq job limits through settings (merge request)
• GraphQL for dependency proxy ttl policies (merge request)
• Track CI minutes usage on a monthly basis (merge request) GitLab Enterprise Edition
• Added connectivity status to Kubernetes Agents (merge request) GitLab Enterprise Edition
• Display icon for hidden issues on group/project issue boards (merge request)
• Add milestoneWildcardId to board issues graphQL endpoint (merge request)
• Support multiple dbs in MigrationHelpers (merge request)
• Add unauthenticated API throttle settings to admin area (merge request)
• Apply throttling settings for unauthenticated API requests (merge request)
• Add throttle_unauthenticated_api_* columns to application settings (merge request)
• Track resolving a thread through a new issue action (merge request)
• Reject pending approval users via API (merge request)
• Add connected agents to cluster agents GraphQL response (merge request) GitLab Enterprise Edition
• Introduce max saml message size setting (merge request) GitLab Enterprise Edition
• Add group contacts query to GraphQL by @leetickett (merge request)
• Merge branch '322839-dp-graphql-image-prefix' into 'master' (merge request)
• Enable ci_build_tags_limit by default (merge request)
• Reimplement tree pagination for Rugged (merge request)
• Address the PK Overflow risk for the ci_build_trace_chunks - Step 3 (merge request)
• Address the PK Overflow risk for the ci_builds_runner_session - Step 3 (merge request)
• Apply throttling settings to Files API (merge request)
• Add more details to Protected Branches Audit Events by @adrien.gooris (merge request) GitLab Enterprise Edition
• Allow sorting issues by their title by @espadav8 (merge request)
• Added filter bar to project VSA (merge request)
• Track CI minutes notifications for new monthly tracking (merge request)
• Support refname in external repo CI configuration by @jspricke (merge request)
• Keyset pagination for Groups API (merge request)
• repository: Always use ListBlobs() to enumerate new blobs (merge request)
• Add latest column into security_scans table (merge request)
• Add not filters for MR Analytics (merge request) GitLab Enterprise Edition
• Validate user website_url (merge request)
• Adding terraform fmt to the Terraform template by @willianpaixao (merge request)
• Address the PK Overflow risk for the ci_sources_pipelines - Step 3 (merge request)
• Added /unapprove quick-action by @lzampier (merge request) GitLab Enterprise Edition
• Split diff commit migrations into smaller chunks (merge request)
• Add hidden field to GraphQL Issue type (merge request)
• Add ProjectNamespace model and DB relationships (merge request)
• Add dependency proxy image prefix to group type (merge request)
• Backfill projects with CI coverage usage (merge request)
• Add Mailgun endpoint for receiving permanent failures (merge request)
• Clean up group_level_protected_environments feature flag (merge request)
• Add paginated tree graphQL query (merge request)
• Auto-DevOps: respect deploy freezes (merge request)
• Add new VSA partitioned tables (merge request)
• Readding state column for members table (merge request)
• Address the PK Overflow risk for the ci_job_artifacts - Step 3 (merge request)
• Add organizations to GraphQL by @leetickett (merge request)
• Mark the PostReceive worker as idempotent (merge request)
• Added connectivity status to Kubernetes Agents (merge request) GitLab Enterprise Edition
• Use Gitaly API to sort tags (merge request)
• Promote continuous onboarding A variant (merge request)
• Allow support for description lists in content editor (merge request)
• Support AWS SSE-KMS in backups (merge request)
• Add new methods to support the PK migration - STEP 3 (merge request)
• Add ability to Delete Freeze Periods by @jayaddison (merge request)
• Add DevOps Adoption Overview table (merge request) GitLab Enterprise Edition
• Render video in content editor by @leetickett (merge request)
• Upgrade GitLab Pages to 1.43.0 (merge request)
• Requirement migration: Sync title and description changes (merge request) GitLab Enterprise Edition
• Render audio in content editor by @leetickett (merge request)
• Adds k8s 1.20 to EKS list (merge request)
• API: Add endpoint to reset runner registration token by @KyleFromKitware (merge request)
• Add personalization questions to group creation (merge request)
• Fix unban specs (merge request)
• Log backtrace when SAVEPOINT is discovered (merge request)
• Improve serialization of content editor extensions (merge request)
• Removes load_balancing_for_expire_job_cache_worker FF (merge request)
• Enable the FF ci_include_rules by default (merge request)
• Allow arbitrary html tags in content editor (merge request)
• Expose web_url to Compare API endpoint (merge request)
• Add configure integrations button to project view (merge request)
• Steal pending merge request diff commit user jobs (merge request)
• Database work to support inherited templates on service desk (merge request)
• Add param to allow scoped caching of Repo#merge_to_ref (merge request)
• Allow to create epic from ancestor board (merge request) GitLab Enterprise Edition
• BG migration for populating stage event hash (merge request)
• Add VulnerabilityCreate GraphQL mutation (merge request) GitLab Enterprise Edition
• Add direct group dependency proxy env variable (merge request)
• Persist groups configured to use an Agent (merge request)
• Test case return 404 instead of 500 error (merge request) GitLab Enterprise Edition
• Add approvalRules to MergeRequest GraphQL API (merge request) GitLab Enterprise Edition
• Add Files API throttling to application settings (merge request)
• Add support for fetching merge requests via RSS / Atom by @kingjan1999 (merge request)
• Enable new vulnerability report project filter by default (merge request)
• Allow title attribute in elements in content editor (merge request)
• Allow editing the structure of tables (merge request)
• Adds a button to retry a failed migration (merge request)
• Add system note for issue type changes (merge request)
• Add contacts table and model by @leetickett (merge request)
• Add oncall_users to oncall schedule Graphql type (merge request) GitLab Enterprise Edition
• Add gauge metric on ci queue size (merge request)

Fixed (120 changes)

• Fix AddUpvotesToMergeRequests migration (merge request) GitLab Enterprise Edition
• Add yAxis formatter (merge request)
• Fix composer package version regex by @leopold.jacquot (merge request)
• Use configurable page size for jobs in stages (merge request)
• Fix for approval check popover bug (merge request) GitLab Enterprise Edition
• Shorten session TTL of anonymous blob access (merge request)
• Makes kubectl annotate work in Helm 2to3 migration Jobs by @erik.forsberg (merge request)
• Use the correct project path in generated KUBECONFIG file (merge request) GitLab Enterprise Edition
• Removes cleanup job from Terraform.latest (merge request)
• Geo Nodes - Fix flex alignment (merge request) GitLab Enterprise Edition
• Do not cache user email from github if email is nil/private (merge request)
• Change non-breaking space to space in email by @scootergrisen (merge request)
• Add metric to service ping if has defintion (merge request)
• Open reply box on resolved design discussions (merge request)
• Add GraphQL type for agent metadata (merge request) GitLab Enterprise Edition
• Include author in commit message from core team community members by @leetickett (merge request)
• Refactor the helm presenter (merge request)
• Prevent vuln table header from cutting off dropdown (merge request) GitLab Enterprise Edition
• Only render "No artifacts found" when not loading (merge request)
• Upgrade fog-aws to v3.12.0 (merge request)
• Fix Geo Pages replication for selective sync (merge request) GitLab Enterprise Edition
• Dynamically read pool sizes for LB configurations (merge request)
• tags: Always enable fix for verification of long tag messages (merge request)
• Fix editing network policies without policy management project (merge request) GitLab Enterprise Edition
• Fix not being able to delete unparseable policies (merge request) GitLab Enterprise Edition
• Check if root ancestor has an active trial (merge request)
• Fix text ellipsis on linked issues/MRs (merge request)
• Fix overlap of error message and sidebar on boards (merge request)
• Use global ids when updating board scope (merge request) GitLab Enterprise Edition
• Fix displaying label text in labels dropdown in dark mode (merge request)
• Don't release primary connections in the DB LB (merge request)
• Add epic board scope to newly created epic (merge request) GitLab Enterprise Edition
• Invalidate ES namespace cache when transferring groups (merge request) GitLab Enterprise Edition
• Use SafeRequestStore in the DB LB (merge request)
• Fix display of relative/absolute time in PAT and deploy token tables (merge request)
• Symbolize load balancer configuration keys (merge request)
• Fix GitHub Importer outdated diff notes not showing (merge request)
• Fix Elastic::MigrationWorker current_migration (merge request) GitLab Enterprise Edition
• Fix comments cutting off the left side of wide characters (merge request)
• Make group and project fields fullPath argument case-insensitive (merge request)
• Prevent opening sidebar when clicking on board card title (merge request)
• Do not cache .terraform.lock.hcl (merge request)
• Prevent creation of too long file name (merge request)
• Ensure Milestones Are Displayed With Few Results (merge request)
• Replace vsa stage slug with id (merge request) GitLab Enterprise Edition
• Load config variables from external project (merge request)
• Fix creating issue in milestone list (merge request) GitLab Enterprise Edition
• Fix header order in CI/CD pipeline's job tab by @JonstonChan (merge request)
• Make RepositoryUpdateMirrorWorker idempotent (merge request)
• Fix selected for User#commit_email input (merge request)
• Allow additional minute transfer for Users (merge request) GitLab Enterprise Edition
• Fix labels applied to a wrong issue (merge request)
• Max width for sidebar dropdown widgets (merge request)
• Fix yaml viewer padding not changing color (merge request) GitLab Enterprise Edition
• Remove paste event listener on destroy (merge request)
• Fix formatting bubble menu in Content Editor (merge request)
• Fix group membership CSV export for invited users (merge request)
• Remove table-layout: fixed style from the tree table of files (merge request)
• Remove the existing duplicates of DastSiteTokens (merge request)
• Update Audit Logging for Feature Flags (merge request)
• Error on newlines in sidekiq-cluster arguments (merge request)
• Reduce DA pagerefresh rate (merge request) GitLab Enterprise Edition
• Fix security report schema validation (merge request) GitLab Enterprise Edition
• Fix disappearing badge in commit image thread edit (merge request)
• Fix - Some users cannot move issues in epic swimlanes (merge request) GitLab Enterprise Edition
• Logged out users can view public group epic boards (merge request) GitLab Enterprise Edition
• Reschedule 'ExtractProjectTopicsIntoSeparateTable' post migration by @wwwjon (merge request)
• Update relative positions on querying board issues (merge request)
• Patch grape-entity to prevent having NameError loop (merge request)
• Catch Helm invalid versions by @sathieu (merge request)
• Fix broken image for runner templates (merge request)
• Disallow editing the environment name (merge request)
• Fix visibility reference check (merge request)
• Add missing graphQL ids (merge request)
• Don't override setup_for_company in subscription flow (merge request)
• Skip highlighting cache for diffs with unsupported characters (merge request)
• Use the last Helm chart when downloading by @sathieu (merge request)
• Fix OrphanedInviteTokensCleanup migration (merge request)
• Fix downstream counter badge link (merge request) GitLab Enterprise Edition
• Only set User#commit_email with user input (merge request)
• Fix Connection#exists? when using the DB LB (merge request)
• Fix contributors detection in changelog generation (merge request)
• Downgrade grpc from 1.38.0 to 1.30.2 (merge request)
• Let non-members set confidential flag on issue (merge request)
• Fix displaying weight of 0 for issues in epic tree (merge request) GitLab Enterprise Edition
• Fix epic swimlanes list drag drop reordering (merge request) GitLab Enterprise Edition
• Show create-jira on pipeline and MR when enabled (merge request) GitLab Enterprise Edition
• Fix new project page in dark mode (merge request)
• Move service_desk_setting to CE in project import export by @leetickett (merge request)
• Add default option to notification_email input (merge request)
• Fix overflowing text in OmniAuth login buttons (merge request)
• Use binary property on the file object (merge request)
• Handle errors without causes (merge request)
• Fix bug validating EE project features (merge request)
• Fix Live Markdown Preview in personal and subgroup projects (merge request)
• Send rotation email inline when deleting user (merge request) GitLab Enterprise Edition
• Use type to detect password fields in integrations instead of name (merge request)
• Use dynamic mapping in trigger to sync integrations.type_new (merge request)
• Fix Epic bulk updates leaking to other epics (merge request) GitLab Enterprise Edition
• Drop un-used db/ci_migrate symlink (merge request)
• Fix getAction is undefined bug in Web IDE markdown files (merge request)
• Remove substransaction from wiki event creation (merge request)
• Fix namespace checks for live quota consumption (merge request) GitLab Enterprise Edition
• Fix project importers pagination issues (merge request)
• Use binary property on the file object (merge request)
• Fix links to Jira docs (merge request)
• Enable the FF ci_new_artifact_file_reader by default (merge request)
• Remove redundant callbacks, rely instead on validations (merge request)
• Fix tooltip on issue sidebar (merge request)
• Reduce the spacing of list items for Content Editor (merge request)
• Respect namespaces with unlimited minutes (merge request)
• Fix some edge cases with Content Editor serializing (merge request)
• Geo: Replicate wiki and design repository HEAD ref (merge request) GitLab Enterprise Edition
• Fix designCollection object after design is uploaded (merge request)
• Wrap pipeline artifact dropdown item names (merge request)
• Fix SSO SAML redirection not including query string (merge request)
• Add fix for 'old' file type (merge request)
• Fix invite url on invited emails (merge request)
• Track build minutes for disabled shared runners (merge request) GitLab Enterprise Edition
• Validate the uniqueness of pipeline variables (merge request)

Changed (109 changes)

• Reset notification level when CI minutes limit change (merge request) GitLab Enterprise Edition
• Associate successful DAST validations with sites (merge request) GitLab Enterprise Edition
• Use new code quality version 0.85.24-gitlab.1 (merge request)
• Add notice when runner projects are updated (merge request)
• Change DAST url download text to button (merge request) GitLab Enterprise Edition
• Update expired message for namespace (merge request) GitLab Enterprise Edition
• Measure image scaler duration for cached images (merge request)
• Use allowlist of allowed attributes for imported models (merge request)
• Migrate admin projects tabs styles (merge request)
• Rebalance issues relative position without transaction (merge request)
• Show project suffix input as disabled (merge request)
• Update board list settings drawer style (merge request)
• Set different session cookie for Geo secondaries (merge request) GitLab Enterprise Edition
• Geo: Alternate redownload and normal design sync attempts (merge request) GitLab Enterprise Edition
• Geo: Alternate redownload and normal SSF sync attempts (merge request) GitLab Enterprise Edition
• Geo: Alternate redownload and normal project syncs (merge request) GitLab Enterprise Edition
• Geo: Reduce frequency of redownload attempts (merge request) GitLab Enterprise Edition
• Update Devise sign_in path for Geo secondaries (merge request) GitLab Enterprise Edition
• Fix policy editor performance (merge request) GitLab Enterprise Edition
• Fix DORA deployment frequency in VSA (merge request)
• Clean up settings_block.vue (merge request)
• Don't allow anonymous users to search with text (merge request)
• Add migrations to swap ci_builds.id column (merge request)
• Fix policy preview for non-parseable policies (merge request) GitLab Enterprise Edition
• Add CI/CD variables for Auto Build and Auto Deploy image versions (merge request)
• Update parser gem to 3.0.2.0 (merge request)
• Disable Sendfile interface for serving Sidekiq Web assets (merge request)
• Enable updated delete branch modal styles (merge request)
• Add worker_class argument to Sidekiq queues APIs (merge request)
• Change Ci::Minutes:AdditionalPack text limit (merge request) GitLab Enterprise Edition
• Remove package_details_apollo feature flag (merge request)
• Add migrations to swap ci_builds.id column (merge request)
• Add abuse actions to account lock email text (merge request)
• Security MR-widget: Clarify dismissed state (merge request) GitLab Enterprise Edition
• Default on policies feature flag (merge request) GitLab Enterprise Edition
• Update UI text for artifacts expiration setting (merge request)
• Use GlAlert instead of a custom alert class (merge request) GitLab Enterprise Edition
• Generate iids with implicit locking by default (merge request)
• Update profile conflict message (merge request) GitLab Enterprise Edition
• Add a link to site profiles management (merge request) GitLab Enterprise Edition
• Use similarity sort in search project dropdown (merge request)
• Diff stats dropdown styling update due to migration to GlDropdown (merge request)
• Update CODEOWNERS - Marcia - Configure (merge request)
• Review group general settings (merge request)
• Update UI text and link for variable warning (merge request)
• Retry archive if left in incomplete state (merge request)
• Remove File-By-File preference cookie (merge request)
• Add migration to swap ci_builds.stage_id column (merge request)
• Update Graphql dastProfileUpdate mutation to include Schedule (merge request)
• Support restoring repository backups in parallel (merge request)
• Roll back support for caching encoding detection (merge request)
• Allow to open table editing dropdown from headers (merge request)
• Rename throttle_unauthenticated_* attributes in application settings (merge request)
• Prepare the DB LB for always being enabled (merge request)
• Move group's "allow request access" to new section (merge request)
• Fix integer columns on new VSA table (merge request)
• Update GitLab User Doc for EKS supported version (merge request)
• Resize Jupyter images to fit within the parent box (merge request)
• Renders images on the repository of .ipynb files (merge request)
• Update help text for API Fuzzing Configuration (merge request) GitLab Enterprise Edition
• Eanble sort_by_project_users_by_project_authorizations_user_id FF (merge request)
• Move CI job token details to new page in CI docs (merge request)
• Improve UI text for maintenance mode (merge request)
• Update security policy editor rule button styling (merge request) GitLab Enterprise Edition
• Show up to 200 jobs per CI stage (merge request)
• Update project/clusters/ CODEOWNERS (merge request)
• Zoom into design image upto 100% of actual size (merge request)
• Adds DB fixtures to create base work item types (merge request)
• Add configurable maximum YAML file size and depth by @discinaround (merge request)
• Add customized README file when creating new Security Policy Project (merge request) GitLab Enterprise Edition
• Remove ci_job_trace_force_encode feature flag (merge request)
• Add pipeline_artifacts_size to projectSatisticsType (merge request)
• Enable bulk_import feature flag by default (merge request)
• Update Geo node to Geo site (merge request)
• Update to Ruby 2.7.4 (merge request)
• Group Settings CI/CD h4 expand by @quatauta (merge request)
• Catch all errors when processing Debian changes by @sathieu (merge request)
• Externalize messages on EKS settings page by @JonstonChan (merge request)
• Externalize page-title messages by @JonstonChan (merge request)
• Externalize add_to_breadcrumbs messages by @JonstonChan (merge request)
• Add warning to when converting runner to specific (merge request)
• Update incident management limits UI text (merge request) GitLab Enterprise Edition
• Scope i18n strings that are incorrectly unscoped by @JonstonChan (merge request)
• Unscope i18n strings that are incorrectly scoped by @JonstonChan (merge request)
• Externalize breadcrumb_title message by @JonstonChan (merge request)
• Externalize submit "Save changes" message by @JonstonChan (merge request)
• Use Gitlab::Ci::Lint in /ci/lint API endpoint (merge request)
• Require a LoadBalancer for service discovery (merge request)
• Only show tooltip on truncate (merge request)
• Remove scanner_type argument from GraphQL mutation (merge request) GitLab Enterprise Edition
• Remove runner "locked" toggle where not used (merge request)
• Fetch discussions using GraphQL (merge request)
• Prepopulate new issue with link to the parent by @smokris (merge request)
• Group Settings Default initial branch h4 expand by @quatauta (merge request)
• Always use SetFullPath RPC (merge request)
• Making cross-reference links distinctly visible (merge request)
• Pipeline Security: Rename "scanner" to "tool" (merge request) GitLab Enterprise Edition
• Set blocked Omniauth accounts to blocked_pending_approval by @vfazio (merge request)
• Stringify policy yaml response in scanExecutionPolicies graphql query (merge request) GitLab Enterprise Edition
• Improve error message for TransferService (merge request)
• Geo SSF: fix texting in admin area (merge request) GitLab Enterprise Edition
• Split for_project_paths into two queries (merge request)
• Migrate epic sidebar participants to widget (merge request) GitLab Enterprise Edition
• Remove the usage_data_design_action feature flag (merge request)
• Vulnerabilities CSV: Rename "scanner" to "tool" (merge request) GitLab Enterprise Edition
• Remove feature flags for DAST disable_joins (merge request) GitLab Enterprise Edition
• Migrate epic sidebar ancestors to widget (merge request) GitLab Enterprise Edition
• Disable Vulnerability Finding Link creation (merge request) GitLab Enterprise Edition
• Remove feature flag milestone_reference_pattern (merge request)

Deprecated (1 change)

• Consider repository_push_audit_events deprecated (merge request)

Removed (16 changes)

• Remove ci_templates_total_unique metrics (merge request)
• Disable method instrumentation initialization (merge request)
• Remove feature flag for env_vars_resource_group (merge request)
• Add migration to remove projects.container_registry_enabled (merge request)
• Update docs regarding pages legacy storage in 14.3 (merge request)
• Remove experience level functionality (merge request)
• Remove Markdown support for bio field (merge request)
• Remove FF load balancing for deployments hooks worker (merge request)
• Remove GitLab Pages legacy storage lease (merge request)
• Stop deploying GitLab Pages to legacy storage (merge request)
• Remove Clair deprecation warning (merge request) GitLab Enterprise Edition
• Remove feature flag gitaly_backup (merge request)
• Remove name parameter from pipeline finder (merge request)
• Remove seat_link_enabled from ApplicationSettings db table (merge request)
• Remove cloud_license_enabled database column (merge request)
• merge_request: Drop checks whether a squash is in progress (merge request)

Security (14 changes)

• OAuth Access Tokens generated by new applications have expiry (merge request)
• Sanitize emojis when reading from LocalStorage (merge request)
• Always include default config for DOMPurify (merge request)
• Deny access for repository coverage info for guests (merge request) GitLab Enterprise Edition
• Prevent non-admins from configuring Jira connect app
• Update apollo_upload_server dependency
• Ensure shared group members lose project access after group deletion
• Update Import/Export to use public email when mapping users GitLab Enterprise Edition
• Update mermaid to 8.11.5 by @bufferoverflow (merge request)
• Escape issue reference and title for Jira issues GitLab Enterprise Edition
• Fix stored XSS vulnerability in Datadog settings form
• Inherit user external status while creating project bots
• Require sign in for .keys endpoint on non-public instances
• Only create jira connect NS subscriptions for admins

Performance (43 changes)

• Add index for selecting resource_group from ci_builds (merge request)
• Perform FindTag RPC request for a single tag (merge request)
• Remove redundant permission checks for GraphQL job type (merge request)
• Avoid a duplicated SQL condition in the NPM metadata endpoint (merge request)
• Remove preload_repo_cache feature flag (merge request)
• Limit updates to Web Hook backoff interval (merge request)
• Fix N+1 in projects API (merge request)
• Remove cache_merge_to_ref_calls feature flag (merge request)
• Limit max pagination count for relations to 1000 (merge request)
• Batch loading of open issues count from Redis (merge request)
• Decrease WebHooks::LogExecutionWorker retries (merge request)
• Use specialized worker to refresh authorizations on group-share removal (merge request)
• Run UserRefreshFromReplicaWorker jobs on the replica db by default (merge request)
• push_rules: Implement bulk-checking of file sizes (merge request)
• Reduce DB queries when loading root_ancestor (merge request)
• Release cached merge_request show.json (merge request)
• Release diffs_batch cached rendering (merge request)
• Fix n+1 for award_emoji field when fetching epics (merge request) GitLab Enterprise Edition
• Remove pipeline variable unique validation (merge request)
• Splits up auto_cancelable_pipelines query, adds limit (merge request)
• Use linear version GroupsWithTemplatesFinder#extended_group_search (merge request) GitLab Enterprise Edition
• Use linear version ApplicationSettings#elasticsearch_limited_namespaces (merge request) GitLab Enterprise Edition
• Use linear version User#groups_with_developer_maintainer_project_access (merge request)
• Move vulnerability statistics update out of transaction (merge request) GitLab Enterprise Edition
• Use linear version of User#manageable_groups (merge request)
• Decrease epics, child epics and child issues max page size (merge request) GitLab Enterprise Edition
• Caching the protected branch check (merge request)
• Enable caching of MergeToRefService responses (merge request)
• Remove the npm_presenter_queries_tuning FF (merge request)
• Use linear version of User#membership_groups (merge request)
• Use linear version of groups_including_descendants_by (merge request)
• Optimize StuckCiJobsWorker running builds query (merge request)
• Use reference cache for iterations (merge request) GitLab Enterprise Edition
• Cache content_sha256 field for Files API (merge request)
• Eliminate N+1 queries for pipeline GraphQL endpoint (merge request)
• Upgrade grape-path-helpers to 1.7.0 (merge request)
• Remove safe_find_or_create_by! usage (merge request)
• Remove feature flag used to enable subtransactions counter (merge request)
• Remove safe_find_or_create_by! calls (merge request)
• checks: Always enable batched computation of commits (merge request)
• Never fetch more than 101 commits when processing a git push (merge request)
• Reduce Gitaly calls for keeping around refs of published notes (merge request)
• Use the ListCommits RPC, not CommitsBetween, when processing git push (merge request)

Other (56 changes)

• Remove optimized_issuable_label_filter flag (merge request)
• Snowplow event dictionary first run for Vue files (merge request) GitLab Enterprise Edition
• Add Snowplow event dictionary for Vue files (merge request) GitLab Enterprise Edition
• Remove track_all_ci_template_inclusions FF (merge request)
• Plain replace of track-event to track-action (merge request) GitLab Enterprise Edition
• Remove FF ci_daily_limit_for_pipeline_schedules (merge request)
• Remove FF ci_modified_paths_of_external_prs (merge request)
• Update the helm documentation (merge request)
• Finalize conversion to bigint for ci_builds_metadata (merge request)
• Add status columns to dependency proxy tables (merge request)
• Remove load performance widget usage data flag (merge request) GitLab Enterprise Edition
• Finalize conversion to bigint for taggings (merge request)
• Clean up feature flag for pipeline editor branch switcher (merge request)
• Track all CI template inclusions (merge request)
• Revert "Merge branch... (merge request)
• Remove the default enabled feature flag (merge request)
• Fix: update error budget documentation (merge request)
• Cleanup bigint conversion for geo_job_artifact_deleted_events (merge request)
• Cleanup bigint conversion for deployments (merge request)
• Cleanup bigint conversion for ci_stages (merge request)
• Remove use_insert_all_in_internal_id feature flag (merge request)
• Remove metrics report usage data feature flag (merge request) GitLab Enterprise Edition
• Remove the FF ci_fix_commit_status_retried (merge request)
• Remove bigint conversion triggers for events (merge request)
• Move usage_graph component to vue_shared folder (merge request)
• Prepare ci_builds swap indexes for async creation (merge request)
• Bump fast_gettext to the latest (merge request)
• Introduce versioned GitLab migration class (merge request)
• Remove bigint conversion triggers for push_event_payloads (merge request)
• Fix contextual help link and other minor improvements (merge request) GitLab Enterprise Edition
• Clean up :graphql_board_list feature flag (merge request)
• Revert "Merge branch 'stuck-ci-jobs-worker-optimize-running' into 'master'" (merge request)
• Cleanup used membership invites (merge request)
• Remove temp index on approval_project_rules (merge request)
• Add models for dependency proxy ttl policies (merge request)
• Bump prometheus-client-mmap to 14.0 (merge request)
• Update GitLab Shell to v13.21.0 (merge request)
• Remove enabled runner_graphql_query feature flag (merge request)
• Remove upsert_issue_metrics feature flag (merge request)
• Remove optimize_safe_find_or_create_by FF (merge request)
• Remove column from project_settings (merge request)
• Remove the "local file reviews" feature flag (merge request)
• Prepare async indexes for ci table int8 swaps (merge request)
• Remove store_mentions_without_subtransactions FF (merge request)
• Remove unused other_storage_counter (merge request)
• Remove enabled runner_detailed_view_vue_ui flag (merge request)
• Remove web performance widget usage data flag (merge request) GitLab Enterprise Edition
• Finalize conversion to bigint for events (merge request)
• Remove column from project_settings (merge request)
• Fix instrumentation meta method definition (merge request)
• Remove board_new_list feature flag (merge request)
• Prepare indexes on events for bigint column conversions (merge request)
• Remove track_unique_visits feature flag by @edith007 (merge request)
• Remove deprecated deployment workers by @edith007 (merge request)
• Remove the FF ci_reset_bridge_with_subsequent_jobs (merge request)
• Removes ci_same_stage_job_needs ff (merge request)

14.2.7 (2021-11-26)

Fixed (3 changes)

• Prevent Git operations from checking replication lag on non-Geo-secondary sites (merge request) GitLab Enterprise Edition
• Remove defaultAuthors from MR Analytics and VSA (merge request)
• Let non-members set confidential flag when creating an issue in public project (merge request)

Changed (4 changes)

• Geo: Alternate redownload and normal design sync attempts (merge request) GitLab Enterprise Edition
• Geo: Alternate redownload and normal SSF sync attempts (merge request) GitLab Enterprise Edition
• Geo: Alternate redownload and normal project syncs (merge request) GitLab Enterprise Edition
• Geo: Reduce frequency of redownload attempts (merge request) GitLab Enterprise Edition

14.2.6 (2021-10-28)

Security (13 changes)

• Highlight usage of unicode bidi characters (merge request)
• Fix dompurify.js to prevent path traversal attacks (merge request)
• Refresh authorizations on transfer of groups having project shares (merge request)
• Do not allow Applications API to create apps with blank scopes (merge request)
• Don't allow author to resolve discussions when MR is locked via GraphQL (merge request)
• Workhorse: Allow uploading only a single file (merge request)
• Group owners should see SCIM token only once (merge request) GitLab Enterprise Edition
• Respect visibility level settings when updating project via API (merge request)
• Avoid decoding the whole tiff image on isTIFF check (merge request)
• Adding a '[redacted]' to mask private email addresses (merge request)
• Do not display the root password by default (merge request)
• Set PipelineSchedules to inactive (merge request)
• Remove external_webhook_token from exported project (merge request)

14.2.5 (2021-09-30)

Security (28 changes)

• Require password param for 2FA changes (merge request)
• Fix permissions check on project members import (merge request)
• Respect disabled import sources when initiating import via API (merge request)
• Return 404 if model id wasn't passed to UploadsController (merge request)
• Scrub artifacts signed URL in SendEntry logs (merge request)
• Prevent double-impersonation and impersonation breakout (merge request)
• Clear session access tokens when starting/stopping impersonation (merge request)
• Use validated URL when sending request to Gitea Importer (merge request)
• Fix XSS in Jira link (merge request) GitLab Enterprise Edition
• Fix fogbugz importer DNS Rebind SSRF (merge request)
• Remove related project access tokens when a project is deleted (merge request)
• Require group admin access to list pending invites (merge request)
• Do not export and import repository_size_limit (merge request)
• Escapes MR approval rule names correctly (merge request)
• Filter shared groups autocomplete by permitted (merge request) GitLab Enterprise Edition
• Require access token for git when 2fa is required (merge request)
• Disable exporting pipeline triggers on project export (merge request)
• Add pagination to dependencies API (merge request) GitLab Enterprise Edition
• Permission check issuable template API data (merge request) GitLab Enterprise Edition
• Apply account locking to password reset page (merge request)
• Enforce configured scopes for Oauth applications (merge request)
• Verify state before using errors from OAuth2 OmniAuth providers (merge request)
• Prevent moving epic issues to different group hierarchy (merge request) GitLab Enterprise Edition
• Prevent showing not allowed subgroup epics (merge request) GitLab Enterprise Edition
• Do not allow status checks to exist with external protected branches (merge request) GitLab Enterprise Edition
• Fix GFM autocomplete xss (merge request)
• Prohibit anonymous access for specific user API endpoint (merge request)
• Fix denial-of-service attack in Markdown parser (merge request)

14.2.4 (2021-09-17)

Fixed (2 changes)

• Fix Elastic::MigrationWorker current_migration (2nd attempt) (merge request) GitLab Enterprise Edition
• Removes cleanup job from Terraform.latest (merge request)

14.2.3 (2021-09-01)

Fixed (4 changes)

• Fix Live Markdown Preview in personal and subgroup projects (merge request)
• Fix OrphanedInviteTokensCleanup migration (merge request)
• Reset severity_levels default (merge request)
• Geo: Replicate multi-arch containers (merge request) GitLab Enterprise Edition

14.2.2 (2021-08-31)

Security (9 changes)

• Prevent non-admins from configuring Jira connect app (merge request)
• Only create jira connect NS subscriptions for admins (merge request)
• Update apollo_upload_server dependency (merge request)
• Ensure shared group members lose project access after group deletion (merge request)
• Update Import/Export to use public email when mapping users (merge request) GitLab Enterprise Edition
• Require sign in for .keys endpoint on non-public instances (merge request)
• Inherit user external status while creating project bots (merge request)
• Escape issue reference and title for Jira issues (merge request) GitLab Enterprise Edition
• Fix stored XSS vulnerability in Datadog settings form (merge request)

14.2.1 (2021-08-23)

Fixed (1 change)

• Drop un-used db/ci_migrate symlink (merge request)

Changed (2 changes)

• Reorder vuln check criteria (merge request) GitLab Enterprise Edition
• Don't override vulnerability feedback UUID anymore (merge request) GitLab Enterprise Edition

14.2.0 (2021-08-20)

Added (128 changes)

• Add missing Ci::Build graphql mutations (merge request)
• Introduce a table to store job trace metadata (merge request)
• Promote the contact_sales_btn_in_app experiment to product feature (merge request)
• Upgrade GitLab Pages to v1.42.0 (merge request)
• Enable the instance-level overrides feature (merge request)
• Add support for inline diff in content editor (merge request)
• Update security policies pipeline processor to support secret detection (merge request) GitLab Enterprise Edition
• Render references in content editor (merge request)
• Add copy feature to CI job page (merge request)
• Limit number of files per pages site (merge request)
• Added new user callout for the Terraform banner (merge request)
• Markdown Live preview for Source Editor (merge request)
• Create table zentao_tracker_data (merge request)
• Start tracking project ci feature usages (merge request)
• Add support for task list in content editor (merge request)
• Add support for subscript/superscript (merge request)
• Enable agent registration UI (merge request) GitLab Enterprise Edition
• Add support for meta tag DAST site validation (merge request) GitLab Enterprise Edition
• Include reply in email egenrated notes (merge request)
• Allow sorting merge requests by latest closed at (merge request)
• Enable seat usage export (merge request) GitLab Enterprise Edition
• Show artifact downloads for security reports (merge request)
• Expose integrated error tracking to services (merge request)
• Render emojis in the Content Editor (merge request)
• Add dependency link to package type (merge request)
• Enabled diff virtual scrolling by default (merge request)
• Enables ci_same_stage_job_needs by default (merge request)
• Remove agent_kubeconfig_ci_variable feature flag (merge request)
• Prune database partitions older than a retention period (merge request)
• Add vulnerabilities_allowed into rules (merge request) GitLab Enterprise Edition
• Add organizations table and model (merge request)
• Support setting Rails asset host via gitlab.yml (merge request)
• Disable project/group sharing when User Cap set (merge request)
• Expose timelogs in GraphQL query type (merge request)
• Enable ci_daily_limit_for_pipeline_schedules by default (merge request)
• Track changes in merge request approval settings in Audit Events (merge request) GitLab Enterprise Edition
• Store hashcode for VSA stage events (merge request)
• Remove ci_jobs_trace_size_limit feature flag (merge request)
• Index issues on project_id, state_id, created, id (merge request)
• Feat: enable report abuse button for snippets (merge request)
• Add tooltip to No Target text in corpus management (merge request)
• Remove code quality usage feature flag (merge request)
• Add severity_levels validation and usage (merge request) GitLab Enterprise Edition
• Add support for adding attachments in Content Editor (merge request)
• Add expired tokens alert to personal access tokens profile page (merge request) GitLab Enterprise Edition
• Show topics in the project list (merge request)
• Add pipeline iid dropdown (merge request)
• Mark completed jobs as successful (merge request)
• Add namespace field to User type in GraphQL (merge request)
• Add view pipeline button in pipeline editor (merge request)
• Add a bubblemenu for text format to Content Editor (merge request)
• Adds APIs and their specs to projectionist example file (merge request)
• Add rule_index to security_orchestration_policy_rule_schedules (merge request)
• Extend graphql repository with paginated tree field (merge request)
• Add support for security policy project for Projects::CreateService (merge request) GitLab Enterprise Edition
• Expose vulnerabilities_allowed (merge request) GitLab Enterprise Edition
• Deploy token access for the Dependency Proxy (merge request)
• Remove compare_repo_dropdown feature flag (merge request)
• Add mutation to change namespace shared runners setting (merge request)
• Add severity_levels into approval_project_rules (merge request)
• Add admin_verify track to in-product marketing emails (merge request)
• Add instance setting for delayed project deletion (merge request) GitLab Enterprise Edition
• Add Snowplow Tracking to Environment Actions (merge request)
• Finalize converting geo_job_artifact_deleted_events (merge request)
• Remove feature flag search_sort_issues_by_popularity (merge request)
• Cancel pipelines before deleting (merge request)
• Add structured logging to MergeRequestMergeabilityCheckWorker (merge request)
• Allow immediate deletion of groups (merge request) GitLab Enterprise Edition
• Add application and DB layer validations for flag_type uniqueness (merge request) GitLab Enterprise Edition
• Add pronunciation to GitLab profile page (merge request)
• Add trial_short track to in-product marketing emails (merge request)
• Deploy token access for the dependency proxy (merge request)
• Generate Debian component files for udeb and source files (merge request)
• Log deprecations to dedicated log file (merge request)
• Add button for reactivating/extending trial (merge request) GitLab Enterprise Edition
• Add secret_detection to security_orchestration_policy JSON schema (merge request) GitLab Enterprise Edition
• Add assigned issue and pending todo counts to /users_count API (merge request)
• GraphQL: Add sharedRunnersSetting to Group/Namespace (merge request)
• feat: Add environments survey alert (merge request)
• Allow Limitable to use override feature flag (merge request)
• Retain trigger time of alerts (merge request)
• Add mutation to lock/unlock project paths (merge request) GitLab Enterprise Edition
• Use non-predefined variables inside CI include blocks (merge request)
• Allow resetting issue labels (merge request)
• Exposed created_at to billable members API (merge request) GitLab Enterprise Edition
• Add pagination support for get_tree_entries RPC (merge request)
• Introduce AutoDeleteCronWorker for Environments (merge request)
• Enable DAST runner site validation by default (merge request) GitLab Enterprise Edition
• Return signature in InRelease and Release.gpg endpoints (merge request)
• Add pages_file_entries to plan_limits (merge request)
• Add the compliance framework label to group projects listing (merge request) GitLab Enterprise Edition
• Adds ProjectSetComplianceFramework GraphQL Mutation (merge request) GitLab Enterprise Edition
• Add timelog summary to time tracking report (merge request)
• Plug Debian SignDistributionService in GenerateDistributionService (merge request)
• Add team_short track to in-product marketing emails (merge request)
• Add Mailgun endpoint for receiving permanent failures (merge request)
• Render CSV parsing errors (merge request)
• Added state column to members table (merge request)
• Trial onboarding for trial registrations (merge request) GitLab Enterprise Edition
• Display pending user count when modifying user cap (merge request) GitLab Enterprise Edition
• Search for epics by iid if search starts with & (merge request) GitLab Enterprise Edition
• Add PyPI package endpoints for project and group path (escaped) (merge request)
• Add Debian API endpoint for deb, udeb, ... files (merge request)
• Support setting timelog summary via API (merge request)
• Geo: Add verification of snippet repositories (merge request) GitLab Enterprise Edition
• Add support for propagation correlation IDs from trusted CIDRs (merge request)
• Debian CRUD group distribution endpoints (merge request)
• Added error classes for specific backup rake task (merge request)
• Automatically resync verification failures (merge request) GitLab Enterprise Edition
• Add log count of active jobs (merge request)
• Add saml_provider_id query param to Users API (merge request) GitLab Enterprise Edition
• Add vulnerability_amount column (merge request)
• Add error tracking client key (merge request)
• Add a badge for project invite members (merge request) GitLab Enterprise Edition
• Expose security scanners in MR approval rules API (merge request) GitLab Enterprise Edition
• Add overridden_uuid column to security_findings (merge request)
• Add Jira Connect branches controller (merge request)
• Add signed_file to Debian distributions (merge request)
• Add new BulkImports endpoint to start new migration (merge request)
• Add service to sign Debian distribution (merge request)
• Implement Scheduling Logic for DAST On-demand Scheduler (merge request)
• Sync vulnerability rules (merge request) GitLab Enterprise Edition
• Add Fuzz Testing to DevOps Adoption (merge request) GitLab Enterprise Edition
• Removes mr_collapsed_approval_rules feature flag (merge request)
• Add descendantGroups field to Group type (merge request)
• Added user_cap_reached? to Group (merge request) GitLab Enterprise Edition
• Add security scanners column into (merge request)
• Save visited URL to recent searches and update weight token list (merge request)

Fixed (137 changes)

• Resolve layout issues in notes form (merge request)
• Set db name when creating connection with new pool size (merge request)
• Project reporters can drag cards in group board (merge request)
• Added ability to create assignee list of descendants (merge request)
• Merge branch 'dreedy-fix-application_experiment-publish_to_database' into 'master' (merge request)
• Run serivce discovery on load balancing configuration (merge request)
• Fix intermittent 'branch not found' errors when pushing creates an MR (merge request)
• Fix reference pattern for iterations (merge request) GitLab Enterprise Edition
• Include all available groups as import target (merge request)
• Allow to apply issue inherited templates using URL (merge request) GitLab Enterprise Edition
• Increase spacing between buttons to 8px (merge request)
• Noop migrations containing faulty SQL regex (merge request)
• Add migration to update ultimate trial plan limits (merge request)
• Fix Security::FindingsFinder to return only the latest findings (merge request) GitLab Enterprise Edition
• Reset oncall-schedule form on cancel or close (merge request) GitLab Enterprise Edition
• Do not run refresh_member_authorized_projects callback when importing (merge request)
• Resolve todo when resolve button is clicked (merge request)
• Hide notification warning for private comments (merge request)
• Remove broken "default" storage initialiser (merge request)
• When ordering epics by title, do so case-insensitively (merge request) GitLab Enterprise Edition
• Fix spacing between dropdowns in policy editor (merge request) GitLab Enterprise Edition
• Fix: Container repository geo syncs stuck in started state (merge request) GitLab Enterprise Edition
• Use sub-batches in BackfillIntegrationsTypeNew background migration (merge request)
• Always use the newest commit in a branch for push events (merge request)
• Fix mirror repo table buttons in _mirror_repos.html.haml (merge request)
• Optimize #latest_successful_for_refs method (merge request)
• Github Importer: Ensure to fail and log imports on exceptions (merge request)
• Delete backups/tmp after restore (merge request)
• Enable the feature flag by default (merge request)
• Fix due date tooltip on milestone in sidebar (merge request)
• Add Conan to filters (merge request) GitLab Enterprise Edition
• Move audit events promo illustration and update text (merge request) GitLab Enterprise Edition
• Delete private subgroups todos when removing member (merge request) GitLab Enterprise Edition
• fix: Regenerate locale/gitlab.pot (merge request)
• Remove class to fix dark mode readability (merge request)
• Fix adding or updating vulnerability history comments (merge request)
• checks: Fix combinatorial explosion in #commits_for() (merge request)
• Fix code block input rules (merge request)
• Fix N+1 database queries in pipeline databuilder (merge request)
• Ensure service discovery runs before results are used (merge request)
• fix: Update locale/gitlab.pot (merge request)
• Fix basic search full count load (merge request)
• Update Pikaday colors for dark mode (merge request)
• copy: Clarify gift card currency in copy (merge request)
• Fix connection search path being reset (merge request)
• Fix policy_editor environment picker (merge request) GitLab Enterprise Edition
• Hide reference path on project board cards (merge request)
• Restrict Runner.locked to project runners (merge request)
• Refactor the nuget package updater service (merge request)
• Fix UI of project topics popover (merge request)
• Handle some WebHookService errors (merge request)
• Fix group runner sort dropdown (merge request)
• Get branches from rules using rule_index for security policy (merge request) GitLab Enterprise Edition
• Fix environments regex for etag restful (merge request)
• Fix feature flag check for security policy project (merge request) GitLab Enterprise Edition
• Fix punctuation on help line (merge request) GitLab Enterprise Edition
• Fix pipeline status layout in pipeline editor (merge request)
• Fix the npm package already taken validator (merge request)
• Ensure SAML Group Sync runs anytime SAML Group Links exist (merge request) GitLab Enterprise Edition
• Delete test cases when migrating project to a free group (merge request) GitLab Enterprise Edition
• Conditionally render create project button (merge request)
• checks: Fix mismatch in #new_commits() signature (merge request)
• Use correct fingerprint values in recalculate finding UUIDs migration (merge request) GitLab Enterprise Edition
• Fix displaying the actual plan name on the billings page (merge request) GitLab Enterprise Edition
• Refactor stop environments service (merge request)
• Fix StoreReportService by falling back to find by location approach (merge request) GitLab Enterprise Edition
• Fix preloading unrelated associations for CommitStatus (merge request)
• Accept all 2xx HTTP responses when testing the Datadog integration (merge request)
• Refactor init logic of merge request options on project settings page (merge request)
• Enable the FF ci_modified_paths_of_external_prs (merge request)
• Code-Quality.gitlab-ci.yml: automatically clean-up docker container (merge request)
• Update min selectable number for subscription buy process (merge request) GitLab Enterprise Edition
• Make DbCleaner and BeforeAllAdapter to support many connections (merge request)
• feat: Add one more i18n translation string (merge request)
• Fix double escaping when clicking WebIDE button (merge request)
• Fix some button border colors in dark mode (merge request)
• Reschedule latest_pipeline_id population with all artifact types (merge request)
• feat: Fix environments survey i18n strings (merge request)
• Set latest_pipeline_id and mark project as vulnerable first (merge request) GitLab Enterprise Edition
• Fix assignee avatar tooltip w special char names (merge request)
• Geo Node Form Regression - Realitive URLs broken (merge request) GitLab Enterprise Edition
• Fix Stickiness to Match Unleash API (merge request)
• Use new and old paths instead of just the new path for diff batching (merge request)
• Continue code quality widget polling while parsing (merge request)
• Fix empty recursive query for base_and_ancestors (merge request)
• fix: Atom feed for commit list should point to path (merge request)
• Add missing Delete user and contributions action in admin user view (merge request)
• Replace the success btn with the confirm button (merge request)
• Run sync BuildFinishedWorker operations always before (merge request) GitLab Enterprise Edition
• Prevent weightSum to be updated on child epic fetch (merge request) GitLab Enterprise Edition
• Fix Review App Multiple Deletion API payload (merge request)
• Fix redirect loop when relative url root is blank (merge request)
• Fix backup.rake from trying to tar non-existent directories (merge request)
• Fix Ci::Artifactable#selective_sync_scope cross-join DBs (merge request) GitLab Enterprise Edition
• Use parent integration settings when reverting from custom settings (merge request)
• Adjust documentation paths (merge request)
• Rescue stuck resource groups (merge request)
• Decode square brackets with "queryToObject" (merge request)
• Advanced Search should index trials regardless of seats (merge request) GitLab Enterprise Edition
• Validate timezone presence on schedule creation form (merge request) GitLab Enterprise Edition
• Update timeout help page URLs in job sidebar (merge request)
• Fix dates being incorrectly set on epic creation (merge request) GitLab Enterprise Edition
• Fix contribution analytics MR closed count param (merge request) GitLab Enterprise Edition
• Fix alert positioning and content for oncall schedules page (merge request) GitLab Enterprise Edition
• Delete pipeline subscriptions when migrating project to a free group (merge request) GitLab Enterprise Edition
• Remove trial suffix from plan titles that include it (merge request) GitLab Enterprise Edition
• Fix "Remove" button in Slack app integration (merge request)
• Fix :admin_compliance_framework to only be true if the user is an owner (merge request) GitLab Enterprise Edition
• Fix SAML SSO login redirects not working (merge request) GitLab Enterprise Edition
• Fix Error 500 viewing pipelines with invalid UTF-8 data (merge request)
• Map jira users for server version by 'key' attribute (merge request)
• Fix missing CSS variables in Darkmode (merge request)
• Fix whats new top positioning with system-header and performance-bar (merge request)
• GithubImporter: match user by external id only from github.com (merge request)
• Hide edit severity btn for users without permissions (merge request)
• Fix group level vulnerability permissions (merge request) GitLab Enterprise Edition
• Ignore searching in full path in GroupsFinder (merge request)
• Fix 400 errors not being logged in multipart middleware (merge request)
• Fix subgroup epic path on epic boards (merge request) GitLab Enterprise Edition
• Remove extra margin above issue navigation tabs (merge request)
• Activate correct nav item for Admin::LicensesController (merge request) GitLab Enterprise Edition
• Prevent terms from being created if blank (merge request)
• Delete PATs when transfering project to a free group (merge request) GitLab Enterprise Edition
• Fix epic tab dropdown menu overlay on mobile (merge request) GitLab Enterprise Edition
• Use the correct text for tooltip (merge request)
• Fix audit events empty space (merge request) GitLab Enterprise Edition
• Extend basic authentication detection for rate limiting (merge request)
• Fix labels dropdown causing form submission (merge request)
• Fix: Sidekiq workers delete each other's metrics (merge request)
• Drop invalid UTF-8 when displaying in job logs (merge request)
• Fix spam checking to consider updater of issue instead of author (merge request)
• Return error when moving issues between not authorized lists (merge request)
• Look up SSH keys by SHA256 fingerprint, not MD5 fingerprint (merge request)
• Skip already downloaded LFS objects in mirror updates (merge request)
• Bump gitlab-omniauth-openid-connect to v0.8.0 (merge request)
• Better links on the subscription details page (merge request) GitLab Enterprise Edition
• Allow group bot to http authenticate (merge request)

Changed (117 changes)

• Update create merge request button on last push event (merge request)
• Deprecate Secure user scan metrics (merge request) GitLab Enterprise Edition
• Move sast latest template to stable (merge request)
• Migrate epic sidebar todo button to widget (merge request) GitLab Enterprise Edition
• Remove optional languge from Compliance framework label (merge request)
• Add empty artifacts message (merge request)
• Flatten CI config rules (merge request)
• Provide more information in design version selector (merge request)
• Set immutable results to true (merge request)
• Renames the Base terraform template jobs for better scaling (merge request) GitLab Enterprise Edition
• Remove CI builds for test and staging stages in VSA (merge request)
• Update Auto DevOps' auto-deploy-image to v2.12.0 (merge request)
• Remove protocol from Dependency Proxy UI (merge request)
• Replace plain text application secret with copy button (merge request)
• Improve button layout (merge request)
• Open addon purchase in the same window (merge request) GitLab Enterprise Edition
• Remove efficient_counter_attribute flag (merge request)
• Updated message on DevOps Adoption Report (merge request) GitLab Enterprise Edition
• Move issue_type enum to WorkItem::Type base_type (merge request)
• Add group value stream metrics UI to project VSA (merge request)
• Count epics against issue creation rate limit (merge request) GitLab Enterprise Edition
• Migrate Markdown Editor toolbar buttons to GlButton (merge request)
• Change date time formatting for corpus managment (merge request)
• Global Search - Add spacing/border to code results (merge request)
• Standarize board column highlight style (merge request)
• Added linked pipelines to commit (merge request) GitLab Enterprise Edition
• Update nothing-here-block to utilize Pajamas spacing scale (merge request)
• Show due date in gray when issue is closed in issues list (merge request)
• Refactor the Ci::Minutes::Additional pack service (merge request) GitLab Enterprise Edition
• Enable ci_skip_before_parsing_yaml by default (merge request)
• Added cloneDeep to prevent mutating cache (merge request)
• Don't show due date in red on epic related issues if issue is closed (merge request)
• Deprecate build trace sections tables by renaming (merge request)
• Return API error when inviting restricted email (merge request) GitLab Enterprise Edition
• Migrate md header buttons to gl-buttons (merge request)
• Removed dependency on $ from the highlighter (merge request)
• Show tax line even when tax has zero amount (merge request) GitLab Enterprise Edition
• Update design management wording in activity feed (merge request)
• Revert Dependency Proxy permission (merge request)
• Placeholder for "Number of employees" in trial (merge request) GitLab Enterprise Edition
• Allow 10% overage for true-ups when uploading a license (merge request) GitLab Enterprise Edition
• Prepare On-Demand DAST for CI sharding initiative (merge request)
• Move DevOps Score callout to Vue (merge request)
• Change Evidence Supporting Messages to array (merge request) GitLab Enterprise Edition
• Remove feature flag (merge request)
• Make ci_structure.sql to be equal (merge request)
• Add deployment_id to deployment payloads (merge request)
• Allow downloading archives using PRIVATE-TOKEN (merge request)
• Global Search - Track top nav searches (merge request)
• Allow licenses with a 10% overage of users for renewals (merge request) GitLab Enterprise Edition
• Render base path error based on report status (merge request)
• Backfill type_new column on integrations (merge request)
• Configure Elasticsearch Ruby client without retry by default (merge request) GitLab Enterprise Edition
• Update copy in account recovery settings global alert (merge request)
• Allow setting of container registry visibility in project settings UI (merge request)
• Add Gitlab::GithubImport::Logger with default values (merge request)
• Expose iid in the pipelines entity (merge request)
• Added a hack to set labels (merge request)
• Update terms of service docs and UI text (merge request)
• Allow usage of severity quickaction on create (merge request)
• Implement JWT for customers-dot proxy (merge request)
• Use 'branch' icon instead of 'fork' (merge request)
• Remove dataBackground property from chart (merge request)
• Update UI help links (merge request) GitLab Enterprise Edition
• Update runner description text (merge request)
• Handle int and bigint namespaces.id column (merge request)
• copy: Update survey callout text (merge request)
• Changed the column order in the jobs table (merge request)
• Add field validations for Finding Evidence models (merge request) GitLab Enterprise Edition
• Use gitaly-backup for repository backups by default (merge request)
• Enhance UX on Environment Form with Loading Icon (merge request)
• Include retried jobs in pipeline payloads for Datadog integration (merge request)
• Expose mergeRequestCounts for Issue GraphQL type (merge request)
• Hide pull mirror update time from guest visitors (merge request)
• Use feature flag for finding links (merge request) GitLab Enterprise Edition
• Unified preloading stylesheets (merge request)
• Promote source activity as the invite email body (merge request)
• Include deployment_tier to pipeline environment hook attributes (merge request)
• Imrpove model validation when adding spent time (merge request)
• Boards sidebar design tweaks (merge request)
• Make experiments API a filter of features API (merge request) GitLab Enterprise Edition
• Add filitering by issue type in issue boards (merge request)
• Fix alt tag on participant avatars (merge request)
• Use popovers for inline code quality (merge request) GitLab Enterprise Edition
• Update UI text for CI/CD settings (merge request) GitLab Enterprise Edition
• Use gitaly-backup for repository backups by default (merge request)
• Add request and response to SupportingMessage (merge request)
• Remove DOMPurify attribute sanitization (merge request)
• Update documentation to use compliance report not compliance dashboard (merge request) GitLab Enterprise Edition
• Make vulnerability-dismissal error more descriptive (merge request) GitLab Enterprise Edition
• Increase contrast for successful pipelines in charts (merge request)
• Add labels as search token in Jira issues list (merge request) GitLab Enterprise Edition
• Add linked pipelines to component (merge request) GitLab Enterprise Edition
• ff: Remove :list_commits feature flag (merge request)
• flags: Drop fetch_remote_params feature flag (merge request)
• flags: Drop update_remote_mirror_inmemory feature flag (merge request)
• Migrate Edit Environments Form to Vue (merge request)
• Sort according to the field in Dependency List (merge request) GitLab Enterprise Edition
• Show minor ellipsis when loading large blobs (merge request)
• Polish tab count and create button in test cases (merge request) GitLab Enterprise Edition
• Edit Grafana UI text in admin area (merge request)
• Add link to GitLab Changelog With Version Check (merge request)
• The readme checkbox for new projects is checked by default (merge request)
• Add linked pipelines to component (merge request)
• Move the compliance framework selector to a new expandable section (merge request) GitLab Enterprise Edition
• Skip in-product marketing emails when on trial (merge request) GitLab Enterprise Edition
• Force user to re-enter integration password (merge request) GitLab Enterprise Edition
• Migrate the deprecated "urlParamsToObject" to "queryToObject" (merge request) GitLab Enterprise Edition
• Remove prevent_retry_of_retried_jobs feature flag (merge request)
• Add dast-runner-validation to Secure-Binaries YAML (merge request) GitLab Enterprise Edition
• Fix missing amount in Contribution Analytics (merge request) GitLab Enterprise Edition
• Migrate New Environments Form to Vue (merge request)
• Allow updating merged results pipelines and merge trains via API (merge request)
• Handle team-managed (next-gen) Jira projects (merge request) GitLab Enterprise Edition
• Remove badge cache (merge request)
• Enable writes to CI builds metadata table by default (merge request)
• Nginx: modernise TLS config (merge request)

Deprecated (2 changes)

• Deprecate sorting vulnerabilities by title in GraphQL API (merge request) GitLab Enterprise Edition
• Deprecate container_registry_enabled in projects public API (merge request)

Removed (11 changes)

• Cleanup group empty state experiment (merge request)
• Remove devops_adoption_feature feature flag (merge request)
• Remove sec_dependency_scanning_ui_enable Feature Flag (merge request)
• Remove scan_execution_policy_ui feature flag (merge request) GitLab Enterprise Edition
• Drop FF load_balancing_for_pipeline_notification_worker (merge request)
• Remove the similarity_search feature flag (merge request)
• Remove unused Gitlab::Database::MultiThreadedMigration (merge request)
• Remove 'one_megabyte_file_size_limit' feature flag (merge request)
• Remove group invites from new user registration (merge request) GitLab Enterprise Edition
• Remove not_null constraint on project_fingerprint (merge request) GitLab Enterprise Edition
• Remove marketing email opt-in for self-managed (merge request)

Security (19 changes)

• Sanitize default branch name in repo settings (merge request)
• Add project member validation for domain limitation
• Hide project-level CI/CD Analytics for Guests
• Only allow invite to be accepted by user with matching email
• Add html escaping for default branch name
• Filter todos whose target users no longer have access to
• Configure OmniAuth to use GitLab AppLogger
• Add permissions check to pipelines#show action
• Prevent impersonation in gitlab-shell SSH certs
• Do not show email address in error message GitLab Enterprise Edition
• Disallow non-members to set issue metadata on issue create
• Prevent guests from linking issues with errors
• Block impersonation token use if it is not permitted
• Fix Protected Environment Accesses Cleanup GitLab Enterprise Edition
• Updates oauth to 0.5.6
• Remove impersonation token from api response for non-admin user
• Use oauth_app id instead of uid GitLab Enterprise Edition
• Restrict access to instance-level security features for reporters GitLab Enterprise Edition
• Fix XSS in Mermaid Markdown rendering

Performance (23 changes)

• Use common namespace ancestor queries (merge request)
• Do not use subtransactions when updating ci minutes usage (merge request)
• Avoid subtransaction in UserInteractedProject (merge request)
• Reduce N+1 Gitaly queries when publishing multiple draft notes (merge request)
• Memoize namespace monthly usage to reduce SQL queries (merge request)
• Include database load balancing for Deployments HooksWorker (merge request)
• Use default project filter for issue/merge request project searches (merge request)
• Improve raw blobs downloading (merge request)
• Use common namespace ancestor queries (merge request)
• Query multiple group descendants at once (merge request)
• Use new service to refresh authorizations of project members (merge request)
• Cache commit stats for a single commit (merge request)
• Query ActiveRecord::Relation descendants (merge request)
• checks: Speed up retrieving commits via quarantine directory (merge request)
• Reduce Markdown cache updates during deploy (merge request)
• Query ActiveRecord::Relation descendants (merge request)
• Reduce repaints on blame page (merge request)
• geo: Pass authentication header via #fetch_remote (merge request) GitLab Enterprise Edition
• Disable creating user mentions during import (merge request)
• Remove flag guarding batched computation of changes size (merge request)
• Move merge-request merge_pipeline to cached_widget (merge request)
• Optimize scanning for references process (merge request)
• Move versions icon to CSS (merge request)

Other (87 changes)

• Make commit and design user mention indexes unique (merge request)
• Add index on historical_data (recored_at) to improve queries (merge request)
• Fix and reschedule background migration (merge request)
• Finalize conversion of ci_stages.id to bigint (merge request)
• Reschedules migration for uuid recalculation (merge request)
• Remove pipelineGraphLayersView feature flag (merge request)
• Pass **kwargs to the conn. for LB defined methods (merge request)
• Remove subscribable_subscription_banner flag (merge request) GitLab Enterprise Edition
• Finalize conversion to bigint for ci_sources_pipelines (merge request)
• Remove ci_skip_before_parsing_yaml FF (merge request)
• Cleanup invalid membership invites (merge request)
• Rename GraphQL query resource from "instanceDashboard" to "instance" (merge request) GitLab Enterprise Edition
• Disable updating the historical vulnerability statistics by default (merge request) GitLab Enterprise Edition
• Rename strip_attributes method (merge request)
• Updating the description for ecosystem metric (merge request)
• Add ResetJobTokenScopeEnabledAgain migration (merge request)
• Remove by default enabled feature flag (merge request)
• Remove docs redirects raketask (merge request)
• Remove pipelineGraphLayersView feature flag (merge request)
• Remove jira_issue_association_on_merge_request feature flag (merge request) GitLab Enterprise Edition
• Finalize ci_job_artifacts conversion to bigint (merge request)
• Migrate the deprecated "urlParamsToObject" to "queryToObject" (merge request) GitLab Enterprise Edition
• Include Puma worker PID in structured log (merge request)
• Denormalize ci_builds into security_scans (merge request) GitLab Enterprise Edition
• Bump factory_bot_rails for Ruby3 support (merge request)
• Additional namespace validation for AdditionalPack (merge request) GitLab Enterprise Edition
• Finalize job_id conversion to bigint for ci_job_artifacts (merge request)
• Use text links in MR approval settings section of UI (merge request) GitLab Enterprise Edition
• Remove jira_connect_create_branch feature flag (merge request)
• Refactor documentation links for SP disabled (merge request) GitLab Enterprise Edition
• Swap multiple_database_metrics FF for env var (merge request)
• Update limitations of members API docs (merge request)
• Migrate the deprecated "urlParamsToObject" to "queryToObject" GitLab Enterprise Edition
• Remove runner_list_view_vue_ui feature flag (merge request)
• Update internal API docs (merge request)
• Finalize conversion to bigint for ci_builds_runner_session (merge request)
• Migrate the deprecated "urlParamsToObject" to "queryToObject" (merge request)
• Finalize conversion to bigint for push_event_payloads (merge request)
• Finalize conversion to bigint for ci_build_needs (merge request)
• Refine Documentation pages URL UI and documentation (merge request) GitLab Enterprise Edition
• Prepare indexes for bigint column conversions (merge request)
• Revise UI text for PlantUML settings (merge request)
• Follow-up pass for renaming Usage Ping/Data (merge request)
• Finalize converting deployments to bigint (merge request)
• Remove the FF ci_wildcard_file_paths (merge request)
• Revise admin area Pages settings UI (merge request)
• Remove feature flag related to valid hosts list (merge request)
• Refactor timezone UI and documentation (merge request)
• Migrate the deprecated "urlParamsToObject" to "queryToObject" (merge request) GitLab Enterprise Edition
• Migrate the deprecated "urlParamsToObject" to "queryToObject" (merge request) GitLab Enterprise Edition
• Migrate the deprecated "urlParamsToObject" to "queryToObject" (merge request) GitLab Enterprise Edition
• Migrate the deprecated "urlParamsToObject" to "queryToObject" (merge request)
• Migrate the deprecated "urlParamsToObject" to "queryToObject" (merge request) GitLab Enterprise Edition
• Migrate the deprecated "urlParamsToObject" to "queryToObject" (merge request) GitLab Enterprise Edition
• For consistency do not use CSS calc for simple calculation of margin-top (merge request)
• Remove unused code (merge request) GitLab Enterprise Edition
• Reschedule Delete Orphaned Deployments BG migration (merge request)
• Finalize conversion to bigint for push_event_payloads (merge request)
• Finalize conversion to bigint for ci_build_trace_chunks (merge request)
• Remove gitlab_subscription_future_renewal feature flag (merge request) GitLab Enterprise Edition
• Remove dast_configuration_ui feature flag (merge request) GitLab Enterprise Edition
• Fix the offenses introduced by Style/RegexpLiteralMixedPreserve (merge request) GitLab Enterprise Edition
• Removes unused gitorious logos (merge request)
• Revised Package Registry settings text (merge request)
• Revert backfill on ci_build_trace_sections (merge request)
• Clean up evalute_protected_tag_for_release_permissions feature flag (merge request)
• Update service ping metric implementation guidelines (merge request)
• Add tracking events for the dependency proxy (merge request)
• Remove redundant indexes for devops adoption (merge request)
• Add area of focus to members (merge request)
• Fix up the docs warning detected by the vale latin term rule (merge request)
• Update help text in runner update form (merge request)
• Migrate the deprecated "urlParamsToObject" to "queryToObject" (merge request) GitLab Enterprise Edition
• Migrate the deprecated "urlParamsToObject" to "queryToObject" (merge request) GitLab Enterprise Edition
• Migrate the deprecated "urlParamsToObject" to "queryToObject" (merge request) GitLab Enterprise Edition
• Migrate the deprecated "urlParamsToObject" to "queryToObject" (merge request) GitLab Enterprise Edition
• Log when a container repository is selected (merge request)
• Expose init aux viewer (merge request)
• Remove service templates (merge request)
• Remove merge_request_draft_filter feature flag (merge request)
• Remove unused cluster application logos (merge request)
• Update GitLab Runner Helm Chart to 0.31.0 (merge request)
• Revise UI text for Kroki settings (merge request)
• Add Chrome to Jira connect working browsers (merge request)
• Refactor polling interval multiplier configuration UI and docs (merge request)
• Add helpful text to URL group validation and limit text (merge request) GitLab Enterprise Edition
• Refactor external storage admin area configuration UI and docs (merge request)

14.1.8 (2021-11-15)

Fixed (1 change)

• Prevent Git operations from checking replication lag on non-Geo-secondary sites (merge request) GitLab Enterprise Edition

Changed (4 changes)

• Geo: Alternate redownload and normal design sync attempts (merge request) GitLab Enterprise Edition
• Geo: Alternate redownload and normal SSF sync attempts (merge request) GitLab Enterprise Edition
• Geo: Alternate redownload and normal project syncs (merge request) GitLab Enterprise Edition
• Geo: Reduce frequency of redownload attempts (merge request) GitLab Enterprise Edition

14.1.7 (2021-09-30)

Security (28 changes)

• Require password param for 2FA changes (merge request)
• Fix permissions check on project members import (merge request)
• Respect disabled import sources when initiating import via API (merge request)
• Return 404 if model id wasn't passed to UploadsController (merge request)
• Scrub artifacts signed URL in SendEntry logs (merge request)
• Prevent double-impersonation and impersonation breakout (merge request)
• Clear session access tokens when starting/stopping impersonation (merge request)
• Use validated URL when sending request to Gitea Importer (merge request)
• Fix XSS in Jira link (merge request) GitLab Enterprise Edition
• Fix fogbugz importer DNS Rebind SSRF (merge request)
• Remove related project access tokens when a project is deleted (merge request)
• Require group admin access to list pending invites (merge request)
• Do not export and import repository_size_limit (merge request)
• Escapes MR approval rule names correctly (merge request)
• Filter shared groups autocomplete by permitted (merge request) GitLab Enterprise Edition
• Require access token for git when 2fa is required (merge request)
• Disable exporting pipeline triggers on project export (merge request)
• Add pagination to dependencies API (merge request) GitLab Enterprise Edition
• Permission check issuable template API data (merge request) GitLab Enterprise Edition
• Apply account locking to password reset page (merge request)
• Enforce configured scopes for Oauth applications (merge request)
• Verify state before using errors from OAuth2 OmniAuth providers (merge request)
• Prevent moving epic issues to different group hierarchy (merge request) GitLab Enterprise Edition
• Prevent showing not allowed subgroup epics (merge request) GitLab Enterprise Edition
• Do not allow status checks to exist with external protected branches (merge request) GitLab Enterprise Edition
• Fix GFM autocomplete xss (merge request)
• Prohibit anonymous access for specific user API endpoint (merge request)
• Fix denial-of-service attack in Markdown parser (merge request)

14.1.6 (2021-09-27)

Fixed (1 change)

• Fix Elastic::MigrationWorker current_migration (2nd attempt) (merge request) GitLab Enterprise Edition

14.1.5 (2021-09-02)

Fixed (1 change)

• Geo: Replicate multi-arch containers (merge request) GitLab Enterprise Edition

14.1.4 (2021-08-31)

Security (8 changes)

• Update apollo_upload_server dependency (merge request)
• Ensure shared group members lose project access after group deletion (merge request)
• Fix stored XSS vulnerability in Datadog settings form (merge request)
• Inherit user external status while creating project bots (merge request)
• Escape issue reference and title for Jira issues (merge request) GitLab Enterprise Edition
• Require sign in for .keys endpoint on non-public instances (merge request)
• Only create jira connect NS subscriptions for admins (merge request)
• Prevent non-admins from configuring Jira connect app (merge request)

14.1.3 (2021-08-17)

Fixed (2 changes)

• Geo 2.0 Regression - Add ability to remove primary (merge request) GitLab Enterprise Edition
• [RUN AS-IF-FOSS] AS Fix SAML SSO login redirects not working (merge request) GitLab Enterprise Edition

Changed (1 change)

• Resolve "operator does not exist: integer[] || bigint in... (merge request)

14.1.2 (2021-08-03)

Security (19 changes)

• Add project member validation for domain limitation (merge request)
• Hide project-level CI/CD Analytics for Guests (merge request)
• Only allow invite to be accepted by user with matching email (merge request)
• Add html escaping for default branch name (merge request)
• Configure OmniAuth to use GitLab AppLogger (merge request)
• Add permissions check to pipelines#show action (merge request)
• Prevent impersonation in gitlab-shell SSH certs (merge request)
• Fix Protected Environment Accesses Cleanup (merge request) GitLab Enterprise Edition
• Use oauth_app id instead of uid (merge request) GitLab Enterprise Edition
• Block impersonation token use if it is not permitted (merge request)
• Fix XSS in Mermaid Markdown rendering (merge request)
• Do not show email address in error message (merge request) GitLab Enterprise Edition
• Updates oauth to 0.5.6 (merge request)
• Fix tag ref detection for pipelines (merge request)
• Disallow non-members to set issue metadata on issue create (merge request)
• Prevent guests from linking issues with errors (merge request)
• Filter todos whose target users no longer have access to (merge request)
• Remove impersonation token from api response for non-admin user (merge request)
• Restrict access to instance-level security features for reporters (merge request) GitLab Enterprise Edition

14.1.1 (2021-07-28)

Added (1 change)

• RackAttack: extend basic authentication detection for rate limiting (merge request)

Fixed (3 changes)

• Prevent terms from being created if blank (merge request)
• Fix: Sidekiq workers delete each other's metrics (merge request)
• Resolve "Bulk dismissal checkboxes don't appear on group vulnerability report" (merge request) GitLab Enterprise Edition

Other (1 change)

• Revert backfill on ci_build_trace_sections (merge request)

14.1.0 (2021-07-21)

Added (123 changes)

• Add ability to set squash_option in the Project API (merge request)
• Add ref to pipeline graphql schema (merge request)
• Upsell the GitLab Managed Terraform state if the repo contains .tf files (merge request)
• Add mailgun endpoint for receiveing permanent failures (merge request)
• Add error tracking collector (merge request)
• Add Vulnerability Management metric for Devops Adoption API (merge request)
• Allow immediate deletion of projects (merge request) GitLab Enterprise Edition
• Make database changes to persist false_positive information (merge request)
• Added user_cap to setting update service (merge request)
• Audit successful GPG key creation and removal (merge request) GitLab Enterprise Edition
• Enable sidekiq load balancing by default (merge request)
• Add Pipeline Editor branch selector (merge request)
• Introduce multiple oncall schedules feature (merge request) GitLab Enterprise Edition
• Track secure scans (merge request) GitLab Enterprise Edition
• Redirect to the new default branch from a deleted default branch (merge request)
• Add button to insert images in content editor (merge request)
• Add support for rendering tables in content editor (merge request)
• Release the Helm charts registry (merge request)
• Allow configuring Redis trace chunks instance (merge request)
• Add warning when import url does not ends with .git (merge request)
• Adds ID to group, stage, and detailed status (merge request)
• Removed the compliance_dashboard_drawer feature flag (merge request) GitLab Enterprise Edition
• Upgrade GitLab Pages to 1.41.0 (merge request)
• Enable GraphQL Runner API (merge request)
• Add Collected Data Categories Service Ping metric (merge request)
• Show progress of an epic on epic board cards (merge request) GitLab Enterprise Edition
• Add graphql mutation to enable dependency scanning (merge request) GitLab Enterprise Edition
• Enable sec_dependency_scanning_ui_enable by default (merge request) GitLab Enterprise Edition
• Add policy type filter (merge request) GitLab Enterprise Edition
• Adds audit event when compliance framework changed (merge request) GitLab Enterprise Edition
• Allow copying Epic reference from sidebar (merge request) GitLab Enterprise Edition
• Audit successful key destroy action (merge request) GitLab Enterprise Edition
• Add observability to Snowplow tracking (merge request)
• Support providing kind to internal Network Policies edit API (merge request) GitLab Enterprise Edition
• Add Running Container Scanning CI Template (merge request) GitLab Enterprise Edition
• Add pause and resume to background migrations (merge request)
• Display Helm packages in the package registry (merge request)
• Feat(Blob): Add CSV render support for Blob Viewer (merge request)
• Added user_cap column to namespace_settings (merge request)
• Wiki repositories use default branch when creating the repo (merge request)
• Allow sort by popularity for issues via GraphQL (merge request)
• Allow sort by blocking issues via GraphQL (merge request) GitLab Enterprise Edition
• Expose GraphQL query complexity score (merge request)
• Extend NetworkPolicy GraphQL API with Environments field (merge request) GitLab Enterprise Edition
• Remove ff_external_status_checks feature flag (merge request) GitLab Enterprise Edition
• Accept GitHub source highlight URL argument format (merge request)
• Add emoji name to tooltip (merge request)
• Do not export certain models when using Relations Export API (merge request)
• Add Coverage fuzzing to DevopsAdoption API (merge request)
• Extend Plan limits API with terraform_module_max_file_size (merge request)
• Add dependency scanning to DevopsAdoption API (merge request)
• Add Bulk Imports API to view user initiated imports (merge request)
• Allow sort and expose expired field for milestones (merge request)
• Add group-level DORA metrics to GraphQL endpoint (merge request) GitLab Enterprise Edition
• Make the variable type for the GitLab CI secret configurable (merge request) GitLab Enterprise Edition
• Add GitLab revision to Prometheus metric (merge request)
• Add project-level DORA metrics to GraphQL endpoint (merge request) GitLab Enterprise Edition
• Remove project from Job Token Scope via GraphQL (merge request)
• Add timezone to web operations (merge request)
• Add CIJobToken project allow list resolver (merge request)
• Add ability to search for cluster image scanning jobs (merge request) GitLab Enterprise Edition
• Add target branch in pipeline editor for blank projects (merge request)
• Add jobCount and projectCount to GraphQL CiRunner (merge request)
• Remove gitlab_experiment_middleware feature flag (merge request)
• Add instance-level audit event when admin status changes (merge request) GitLab Enterprise Edition
• Add link to admin area on project view and group view (merge request)
• Add support for legacy blob viewers (merge request)
• Preserve user authorship during bulk imports (merge request)
• Add usage ping features frontend checkboxes (merge request)
• Remove kubernetes_agent_on_gitlab_com feature flag (merge request)
• Add system note when escalating to users (merge request) GitLab Enterprise Edition
• Remove project_finder_similarity_sort feature flag (merge request)
• Track usage data for Network Policies UI (merge request) GitLab Enterprise Edition
• Add compliance_frameworks_with_pipeline to usage ping (merge request) GitLab Enterprise Edition
• Remove ci_quota_check_on_retries feature flag (merge request) GitLab Enterprise Edition
• Add scan execution policies to the policy list (merge request) GitLab Enterprise Edition
• Allow passing PAT name and scopes via the URL (merge request)
• Add summary to timelogs (merge request)
• Allow specifying an access level for Project Access Tokens (merge request)
• Send purchase source to customers API (merge request) GitLab Enterprise Edition
• Sync destruction between requirements and issues (merge request) GitLab Enterprise Edition
• Add CI/CD templates picker for empty pipelines page (merge request)
• Save last_synced_at on licenses table (merge request)
• Add validate account button on CI/CD shared runners page (merge request) GitLab Enterprise Edition
• Relate issues and requirements (merge request)
• Add present_on_default_branch to Vulnerabilites (merge request)
• Helm charts index API endpoint (merge request)
• Add backup logger class (merge request)
• Add configuration for locating gitaly-backup (merge request)
• Adding raw_plain_data type to snippets (merge request)
• Allow to query discussion design on GraphQL (merge request)
• Converts the diff row component into a functional component (merge request)
• Add state argument for the PipelineSecurityReportFindingsResolver (merge request) GitLab Enterprise Edition
• Add NOT filtering to epic roadmap filtered search (merge request) GitLab Enterprise Edition
• Show access level of Project Access Token in UI and API (merge request)
• Add CI variable CI_MERGE_REQUEST_APPROVED (merge request) GitLab Enterprise Edition
• Add compliance framework label to compliance dashboard (merge request) GitLab Enterprise Edition
• Display Feature Flags Related to Issues (merge request) GitLab Enterprise Edition
• Update styling on policy editor page (merge request) GitLab Enterprise Edition
• Remove ci_drop_new_builds_when_ci_quota_exceeded feature flag (merge request) GitLab Enterprise Edition
• Adds sha argument to lint (merge request)
• Add Debian API endpoint for Packages files (merge request)
• Add option to order epics by title on list page (merge request) GitLab Enterprise Edition
• Add wal cached counter metric (merge request)
• Accept repository_update_events in SystemHooks API (merge request)
• Added omniauth_user check when verifying user cap GitLab Enterprise Edition
• Add the ability to deep link into group/project member tabs (merge request)
• Allow changing AdditionalPack namespace (merge request) GitLab Enterprise Edition
• BulkImports: Import Group Avatar (merge request)
• Allow admins to limit registration of project and group runners (merge request)
• Populate latest_pipeline_id values for vulnerability_statistics (merge request) GitLab Enterprise Edition
• Add support for horizontal rule in content editor (merge request)
• Add state of merge request diff to the entity (merge request)
• Associate Build with DAST Site and Scanner profile (merge request)
• Show pronouns in user popover (merge request)
• Create API to update upcoming reconciliations (merge request) GitLab Enterprise Edition
• Add layout for "first mile" (merge request)
• Adds status to StageType in gql (merge request)
• Expose SAST & DAST devops adoption metrics (merge request) GitLab Enterprise Edition
• Allow sorting by title in REST/GraphQL API (merge request) GitLab Enterprise Edition
• Add in-product marketing emails (merge request)
• Commit registration invite page to product (merge request)
• Support specifying a milestone for MR via push options (merge request)

Fixed (150 changes)

• Fix error when creating or deleting a board list (merge request)
• Skip LFS fragment on redirect (merge request)
• Fix scanner comparison error (merge request)
• Fix background color of markdown code in dark mode (merge request)
• Fix transposed rows and cols (merge request)
• Fix wiki repositories with wrong HEAD (merge request)
• Fix public selection of pages permissions (merge request)
• Geo: Replicate the HEAD ref (merge request) GitLab Enterprise Edition
• Remove useless delete button in group settings (merge request) GitLab Enterprise Edition
• Allow cleartext communication with KAS in production (merge request)
• Automatically create integration webhooks when missing (merge request)
• Fix snippet url helper when repository is not present (merge request)
• Adjust Groups API call used in Search Group Projects select (merge request)
• Fix snippets display issues on mobile devices (merge request)
• Fixed the header color in fly-outs for Dark mode (merge request)
• Fixed association between Finding, Finding Links (merge request) GitLab Enterprise Edition
• Correct check for displaying SubEpic counts on boards (merge request) GitLab Enterprise Edition
• Preload correct latest test report for requirements (merge request)
• Fix "Confirm user" button on tabs other than "Account" (merge request)
• Add trigger_source for empty page tracking event (merge request)
• Fix GET requests from graphql client when using relative url (merge request)
• Ensure pages visibility levels are correct (merge request)
• Fix the write permission of the Releases with Protected Tag (merge request)
• Fix labelFilterParam value in issuable_list_root (merge request) GitLab Enterprise Edition
• Fix filePath not being stored in GraphQL log tree cache (merge request)
• Fix user popovers in design management discussions (merge request)
• Update confirmation button text in edit modals (merge request) GitLab Enterprise Edition
• Revert to use merge requests count for group view (merge request)
• Remove transaction when migrating diff commits (merge request)
• Replace deprecated_project_avatar in create_issue_form.vue (merge request) GitLab Enterprise Edition
• Fix validation method regarding MIME type keys (merge request)
• Replace the success btn to the confirm btn in the preferences page (merge request)
• Use ProjectAvatar in frequent_items_list_item.vue (merge request)
• Strip whitespace from GraphQL queries using GET (merge request)
• Make job_token_scope_enabled project setting false by default (merge request)
• Use namespaced security report type for Cluster Image Scanning (merge request) GitLab Enterprise Edition
• Fix race condition on container repository create (merge request)
• Fix WebIDE image being base64 (merge request)
• Fix Issue check_for_spam? for bots (merge request)
• Fix scan execution policy selection (merge request) GitLab Enterprise Edition
• Advanced Search: Fix inaccessible ES server error (merge request) GitLab Enterprise Edition
• Migrate drawer titles to title slot (merge request)
• Fix timebox charts events computing (merge request) GitLab Enterprise Edition
• Fix bug in DORA GraphQL endpoint (merge request) GitLab Enterprise Edition
• Correctly positioned the is-above flyouts (merge request)
• Add another guard clause to password_expired_if_applicable (merge request)
• Allow Bulk Import to use relative GitLab URL (merge request)
• Hide Renew button if less than 15 days for term end date (merge request) GitLab Enterprise Edition
• Fix default url for Monitor sidebar menu (merge request)
• Fix vulnerability report filter dropdown button text truncation (merge request) GitLab Enterprise Edition
• Fixed broken ui link (merge request)
• Fix icon size for usage quotas and billing (merge request) GitLab Enterprise Edition
• Fix LFS objects not downloading from Bitbucket (merge request)
• Fix CAPTCHA modal for setting issue non-confidential (merge request)
• Fix typo for dismissible (merge request)
• Display correct label for named-list report types (merge request) GitLab Enterprise Edition
• Handle git exceptions in wiki create and update services (merge request)
• Do not create audit event for failed logins on read-only DB (merge request) GitLab Enterprise Edition
• Fix git clone for projects with a trailing dot over HTTP (merge request)
• Always encode group path for labels API (merge request) GitLab Enterprise Edition
• Return empty strings for Jira links when URL is not set (merge request)
• Fix pipeline count on merge request tab (merge request)
• Define deduplication strategy in Resource Group Worker (merge request)
• Allow users to setup Jenkins without username (merge request)
• Hide group-level DORA charts if not licensed (merge request) GitLab Enterprise Edition
• Fix uninitialized constant Audit::UpdateService (merge request) GitLab Enterprise Edition
• Add prefix to autocomplete path (merge request)
• Fix cache update for schedules and policies (merge request) GitLab Enterprise Edition
• Fix WebIDE dropdown background color (merge request)
• Add option to force notification on expired subscriptions (merge request) GitLab Enterprise Edition
• Fix alignment issues (merge request)
• Reduce noisy code quality diff errors on MR page (merge request) GitLab Enterprise Edition
• Only disable pause indexing when migration running needs indexing paused (merge request) GitLab Enterprise Edition
• Fix caching for pagination headers (merge request)
• Catch Git::CommandError in Branches::CreateService (merge request)
• Bugfix: Disable the ability from the FE to use Approver != in MR search (merge request)
• Raise the error when repository storage move fails (merge request)
• Fix PopulateLatestPipelineIds background migration (merge request) GitLab Enterprise Edition
• Add license check to status checks rendering (merge request) GitLab Enterprise Edition
• Fix create issue dropdown button wrapping (merge request)
• Fix plans cards width on lg screens (merge request) GitLab Enterprise Edition
• Return issue feedback from loader when there is no issue link (merge request) GitLab Enterprise Edition
• Fix deploy keys not working with LFS auth check (merge request)
• Fix review-bar-component height (merge request)
• Use small ellipsis button in DAST saved scans and profiles (merge request) GitLab Enterprise Edition
• Update a user highest role when removed from group (merge request)
• Fix wiki encoding error creating event (merge request)
• Update connect_instance_spec.rb (merge request)
• Default cableBackend to authBackend (merge request)
• Fix double scrollbar in some dropdowns (merge request)
• Wrap Labels and Members menu items with access levels checks (merge request)
• Takes per page setting into account when paginate (merge request)
• Show create-jira-issue when gitlab issues disabled (merge request) GitLab Enterprise Edition
• Guard Compliance CI evaluation against blank path (merge request) GitLab Enterprise Edition
• Skip saving the diffs whitespace setting if the user isn't logged in (merge request)
• Fix Group avatar API endpoint (merge request)
• Allow nil for remaining ci cd settings (merge request)
• Fix 2FA Download codes button (merge request)
• Fix breadcrumbs and page title for 2FA page (merge request)
• Fix return codes for getting an inexisting release (merge request)
• Show the default "default branch" in the API for empty projects (merge request)
• Persist Direct Asset Path on Release Updates (merge request)
• Fix svg logos for empty pipeline templates (merge request)
• Ensure displayNamespaceID is included (merge request) GitLab Enterprise Edition
• Drone hook API endpoint (merge request)
• Fix NuGet installs with symbol packages (merge request)
• Change PHP template for PHP 8 (merge request)
• Update embedded snippet file links to open in new tab (merge request)
• Fix typo with credit card (merge request) GitLab Enterprise Edition
• Fix error when loading incident issue with alert (merge request)
• Fix state value in the lfs_object_registry table (merge request) GitLab Enterprise Edition
• Fix broken Time Tracking Reports on Issuables (merge request)
• Fix frequent items timestamps not updated (merge request)
• Fix bug where Milestone page led to console error (merge request)
• Include hours into elapsed time in jobs (merge request)
• Fix retry-lock problem on pipeline cancel (merge request)
• Fix link for commit-type security report items (merge request) GitLab Enterprise Edition
• Fix submit button not being clickable (merge request) GitLab Enterprise Edition
• Fix top position on board sidebar (merge request)
• Carry line_range info forward on unchanged positions (merge request)
• Force ASCII-8BIT encodings in CI job trace (merge request)
• Fix pages deployment storage migration (merge request)
• Show warning when files are hidden in an MR (merge request)
• Allow ancestor milestones to be set to an MR via push options (merge request)
• Group Avatar API: ensure to send the remote filename (merge request)
• Bump the sys-filesystem version to prevent errors in System Info (merge request)
• Fix missing attributes on token audit events (merge request) GitLab Enterprise Edition
• Fix Zuora frame size after client-side error (merge request) GitLab Enterprise Edition
• Fix infrastructure menu link to the first visible menu item (merge request)
• Upgrade omniauth-azure-activedirectory-v2 to v1.0.0 (merge request)
• GithubImporter: Avoid failing when PullRequest has empty body (merge request)
• Update margin-left on widget attachment to match content start (merge request)
• Allow Projects with Freeze Periods to be Deleted (merge request)
• Fix expiring subscription message on subgroups (merge request) GitLab Enterprise Edition
• Constraint status checks to protected branches (merge request) GitLab Enterprise Edition
• Enable deep linking on environments page for tabs (merge request)
• Fix sidekiq:migrate_jobs tasks in production mode (merge request)
• Fix a bug where the displayNamespaceId (merge request) GitLab Enterprise Edition
• Remove add button from Devops Adoption (merge request) GitLab Enterprise Edition
• Create close issue event on issue move (merge request) GitLab Enterprise Edition
• Fix missing "Clear" button on namespace search (merge request)
• Remove disable_composer_callback feature flag (merge request)
• Fix group avatar API (merge request)
• Fix environment folder broken layout (merge request)
• Fix redirection for DAST Scanner Profile (merge request) GitLab Enterprise Edition
• Fix visibility of issue enforcement setting (merge request) GitLab Enterprise Edition
• Fix too many redirects during Geo check task (merge request) GitLab Enterprise Edition
• Format network policies update time (merge request) GitLab Enterprise Edition
• Use user permissions (merge request)
• Display license start date without special format (merge request) GitLab Enterprise Edition

Changed (137 changes)

• Move admin user actions from cards to a dropdown (merge request)
• Use configured browser locales for date formatting (merge request)
• Update GraphQL project type field container_registry_enabled (merge request)
• Enable load balancing for Jira Connect workers (merge request)
• ContainerRepositoriesFinder now checks container registry visibility (merge request)
• Drop support for Safari 13.0 (merge request)
• Add Finding Evidence Assets (merge request)
• Search epic by title in issues (merge request)
• Migrate Add To Do button to widget (merge request)
• Makes the feature_name field for UserCallout nullable (merge request)
• Add a runner cost factor for new public projects (merge request) GitLab Enterprise Edition
• Create environment column in policies list (merge request) GitLab Enterprise Edition
• Filter service ping payload by category (merge request)
• Schedule MergeRequestCleanupRefsWorker more efficiently (merge request)
• Update urlParams on Jira issues list page (merge request) GitLab Enterprise Edition
• Remove snippet_spam feature flag (merge request)
• Update DevOps Score doc and callout (merge request)
• Add sort by popularity to issues (merge request)
• Rename project / group removal to deletion (merge request) GitLab Enterprise Edition
• Swimlanes - Fetch more epics button (merge request)
• Change style of add button on License Compliance page (merge request) GitLab Enterprise Edition
• Change success color (merge request)
• Optimized blob view loading in repository (merge request)
• Require encryption on builds tokens (merge request)
• GithubImporter: Count fetched/import objects globally and by project (merge request)
• Improve Error Tracking models (merge request)
• Ignore cloud_license_enabled in ApplicationSetting (merge request) GitLab Enterprise Edition
• Extracted Admin E-mail notification code from EE to core (merge request)
• Update Admin Area's Runner Details Page UI (merge request)
• Add upvotes_count to issues (merge request)
• Update Admin Area's Runners Page UI (merge request)
• Increment DAST_VERSION in on-demand DAST template (merge request) GitLab Enterprise Edition
• Update the Discord integration embed (merge request)
• Update UI text for CI token scope setting (merge request)
• Optimised the hash retrieval from URL (merge request)
• Update warnings for ci minute quotas (merge request) GitLab Enterprise Edition
• Update gitlab-labkit to v0.20.0 (merge request)
• Update requirement import modal to show focus (merge request) GitLab Enterprise Edition
• Mask runner registration (merge request)
• Update DAST version for offline environments (merge request) GitLab Enterprise Edition
• Add Finding Evidence Supporting Messages (merge request)
• Update buildkite.rb (merge request)
• Use load balancing for Jira Connect workers (merge request)
• Start reading project_features.container_registry_access_level (merge request)
• Rearrange milestone form (merge request)
• Update license compliance icons (merge request) GitLab Enterprise Edition
• Improve consistency of admin user dropdown actions (merge request)
• Remove cloud_license_enabled application setting (merge request) GitLab Enterprise Edition
• Remove date from Seat Link data fields (merge request) GitLab Enterprise Edition
• Update dot style for DORA lead time graphs (merge request) GitLab Enterprise Edition
• Schedule devops adoption calculation only for pending namespaces (merge request) GitLab Enterprise Edition
• Move "Show latest version" button to the left (merge request)
• Allow wiki pages to be empty (merge request)
• Bump Nokogiri from v1.11.4 to v1.11.5 (merge request)
• Log and advise about push-rule-rejected commit (merge request) GitLab Enterprise Edition
• Update supported browser versions (merge request)
• Merge branch '334976-fix-misleading-upgrade-cta-jira-issues' into 'master' (merge request)
• Update timestamp fields to Standard (merge request)
• Update copy and type for sync subscription banner (merge request)
• Upgraded Monaco to 0.25.2 (merge request) GitLab Enterprise Edition
• Reintroduce lfs_link_existing_object feature flag (merge request)
• Show 'Delete' button to developers in Wiki (merge request)
• Switch back to pg_query (merge request)
• Use Gitaly long timeout for resolving conflicts (merge request)
• Add upvotes field to issues index (merge request) GitLab Enterprise Edition
• Identicon - Align GitLab UI Colors (merge request) GitLab Enterprise Edition
• Update color scheme of createFlash (merge request)
• Fix misleading upgrade CTA in Jira configuration (merge request)
• Sort fork form namespaces alphabetically (merge request)
• Present error when DAST profile not found (merge request)
• Add selected to description (merge request)
• Remove the sec_secret_detection_ui_enable feature flag (merge request) GitLab Enterprise Edition
• Block external pull mirrors for forks (merge request)
• DRY deactivate dormant user worker spec (merge request)
• Fix sorting bug in dependency list (merge request) GitLab Enterprise Edition
• Create or update a cloud license on sync/activate (merge request) GitLab Enterprise Edition
• Truncate body length (merge request) GitLab Enterprise Edition
• Update dictionary renderer to include data category (merge request)
• Add policy type column (merge request) GitLab Enterprise Edition
• Trial CTA source split (merge request) GitLab Enterprise Edition
• Change the number of pipelines per page to 15 (merge request)
• Revise the navbar to use sentence case (merge request)
• Update status column in Threat Monitoring (merge request) GitLab Enterprise Edition
• Bump import job status expiration to 24h (merge request)
• Promote new_repo experiment (merge request)
• Re-named the remaining EditorLite files (merge request)
• Update compliance dashboard empty state (merge request) GitLab Enterprise Edition
• Polish formatted_stage_count for analytics (merge request)
• VSA: Change item count to 1000+ (merge request) GitLab Enterprise Edition
• Move Scan PORO to CE [RUN AS-IF-FOSS] (merge request)
• Enable ci_job_trace_force_encode feature flag by default (merge request)
• Move migration to a pre-deployment migration (merge request) GitLab Enterprise Edition
• Remove access request controls in admin area (merge request)
• Revise UI text for third-party offers (merge request)
• Add documentation for billable member sorting (merge request)
• Add confirmation modal to "Sync now" LDAP button (merge request) GitLab Enterprise Edition
• Add correct extension to dotnet CI template (merge request)
• Rename ci examples readmes to index (merge request)
• Update copy for DAST code snippet modal (merge request) GitLab Enterprise Edition
• Add source version check to Bulk Import (merge request)
• Fix deprecated GlIcon size and property (merge request)
• Rename usage ping to service ping (merge request)
• Use minimal layout in trial flow (merge request)
• Fix admin mode when authenticating with LDAP (merge request)
• Simplify the sign in page after confirmation (merge request)
• Enable FF ci_reset_bridge_with_subsequent_jobs by default (merge request)
• Sort milestones by due date in filtered search (merge request)
• Add searchability to ci template dropdown (merge request) GitLab Enterprise Edition
• Remove deprecated API elements (merge request)
• Remove unncessary type options (merge request)
• Migrate top-centered toasts to bottom-left (merge request) GitLab Enterprise Edition
• Upgrade @gitlab/ui to v30.0.0 (merge request)
• Remove web_hooks_rate_limit feature flag (merge request)
• Default-enable :update_remote_mirror_inmemory feature flag (merge request)
• Default-enable :fetch_remote_params feature flag (merge request)
• Remove the regulated tab from compliance frameworks list (merge request) GitLab Enterprise Edition
• Move Debian regexp to ::Packages::Debian (merge request)
• Add Pending Alert Escalations table (merge request)
• Add parameters to in app purchase links (merge request)
• Search: add ability to sort epics (merge request) GitLab Enterprise Edition
• Support repository moved message with all container types (merge request)
• Allow billable member sorting by last activity (merge request) GitLab Enterprise Edition
• Render confidential icon in epic tree for epics (merge request)
• Sort epic list in issue sidebar by title (merge request) GitLab Enterprise Edition
• GithubImporter: Count and log each object imported (merge request)
• Standardize UI text for protected branches and protected tags (merge request)
• Allow to promote confidential issues into confidential epics (merge request)
• Sort by similarity in Search Group's Project dropdown (merge request)
• Refactor db selection in SidekiqServerMiddleware (merge request)
• Renamed EditorLite to SourceEditor (merge request) GitLab Enterprise Edition
• Remove job dependency for Vulnerability-Check (merge request) GitLab Enterprise Edition
• Reduce horizontal padding in new top nav (merge request)
• Add descriptions for EpicStateEnum (merge request) GitLab Enterprise Edition
• Relabel access token fields (merge request)
• Pajamas-compliant dismiss button for HAML alerts (merge request)
• Add validation to additional pack purchase_xid (merge request) GitLab Enterprise Edition
• Use standard filter for scanner filter on non-project level vuln report (merge request) GitLab Enterprise Edition

Deprecated (1 change)

• Deprecate GraphQL PrometheusServiceID argument (merge request)

Removed (24 changes)

• Remove securityScansSucceeded from DevOps Adoption (merge request) GitLab Enterprise Edition
• Remove old license page logic (merge request) GitLab Enterprise Edition
• Remove trace_memory_allocations FF (merge request)
• Undo CTE fix for PG11 (merge request)
• Delete framework column from project_compliance_framework_settings (merge request)
• Removed ff sidebar_refactor from views (merge request)
• Remove productivity_analytics_scatterplot flag (merge request) GitLab Enterprise Edition
• Remove cycle analytics scatterplot ff (merge request) GitLab Enterprise Edition
• Remove the approvals_commented_by feature flag (merge request)
• Remove the use_workhorse_s3_client feature flag (merge request)
• Remove the use_distinct_in_shas_cte FF (merge request)
• Remove un-used Event archived action (merge request)
• Remove Frontend to Edit Legacy Flags (merge request)
• Removes pipeline_filter_jobs feature flag (merge request)
• Remove Clusters Applications Fluentd Table (merge request)
• Drop deprecated Prometheus settings in gitlab.yml (merge request)
• Remove ability to enable/disable seat link from settings (merge request) GitLab Enterprise Edition
• Drop index_ci_builds_on_protected index (merge request)
• Remove Legacy Flags from Feature Flag Table (merge request)
• Enable the new project sidebar (merge request)
• Remove omit_commit_sha feature flag (merge request)
• Drop LB FF for ExpirePipelineCacheWorker (merge request)
• Remove new_release_page feature flag (merge request)
• Drop load-balancing FF in PipelineHooksWorker (merge request)

Security (17 changes)

• Update addressable gem to v2.8.0 (merge request)
• Disable file and network premailer strategies
• Add total http read timeout
• Update rdoc to 6.3.1
• Forbid GET requests with mutations
• Prevent GraphQL API access by deactivated users
• Add sanitizing for name field
• Fix XSS on audit log for feature flag actions
• Copy feature visibility settings to a fork
• Avoid disclosing project in web IDE
• Allow only same-origin URLs for Edit Release Cancel button
• Add new username validation
• Removes security_ci_lint_authorization code (merge request)
• Update Nokogiri to 1.11.4
• Fix deploy key fallback issue in protected branch
• Sanitize input on pasteGFM
• Fix merge request diff display issue with unsupported encoding

Performance (31 changes)

• Update anscestor deduplication in pipeline graph (merge request)
• Enqueue async, non-blocking jobs for group-group share actions (merge request)
• Immediately show parent row (merge request)
• Improve sort by popularity for issues board (merge request)
• Adjustments to compare caching (merge request)
• Move link icon to CSS (merge request)
• Lazy load avatars (merge request)
• Increase page size exponentially (merge request)
• Reduce space needed for merge request diff commits (merge request)
• Preload project user authorizations on REST API (merge request)
• Remove replica selection change FF (merge request)
• Remove redundant call to RenderService (merge request)
• Cache rendered compare entity (merge request)
• Use linear root_ancestor when possible (merge request)
• Schedule requirements processing conditionally (merge request) GitLab Enterprise Edition
• Fix Namespace#all_projects performance (merge request)
• Improve LoadBalancer#all_caught_up? logic (merge request)
• Drop full index on ci_builds.token (merge request)
• Linear traversal query for Namespace#self_and_ancestors (merge request)
• Use async job when creating/updating EpicIssue (merge request) GitLab Enterprise Edition
• Enable milestone reference caching (merge request)
• git_access: Use batched new blobs check (merge request)
• Eliminate some N+1 queries on project-pipeline GraphQL endpoint (merge request)
• Improve the performance of project/users API (merge request)
• Replacement partial index for ci_builds.token (merge request)
• Use materialied CTE to improve builds fair scheduling (merge request)
• Speed up initial page load on Releases page (merge request)
• Remove replica selection change FF for LB (merge request)
• Remove duplicate where condition (merge request)
• Implement pending builds queue builder in a separate class (merge request)
• Utilize load balancing for BuildQueueWorker (merge request)

Other (58 changes)

• Support reindexing unique indexes (merge request)
• Revise group Pages size UI text (merge request) GitLab Enterprise Edition
• First run for events dictionary for backend (merge request) GitLab Enterprise Edition
• Record message size transmitted over action cable (merge request)
• Migrate the deprecated "urlParamsToObject" to "queryToObject" (merge request) GitLab Enterprise Edition
• Rename License.usage_ping to License.customer_service_enabled (merge request) GitLab Enterprise Edition
• Remove codequality_mr_diff_annotations flag (merge request) GitLab Enterprise Edition
• Remove temporary feature flags (merge request)
• Remove the codequality_mr_diff feature flag (merge request) GitLab Enterprise Edition
• Add troubleshooting section to batched migrations docs (merge request)
• Migrate the deprecated "urlParamsToObject" to "queryToObject" (merge request)
• Fix security scan query timeout (merge request)
• Index batched migration jobs by max value (merge request)
• Delete legacy operations feature flags (merge request)
• Avoid splitting strings in repository maintenance UI (merge request)
• Fix GLIcon size property (merge request)
• Only reindex btree and gist indexes (merge request)
• Refactoring string literals used for snowplow tracking in the sidebar (merge request) GitLab Enterprise Edition
• Refactor health status widget to use Apollo (merge request) GitLab Enterprise Edition
• Migrate the deprecated "urlParamsToObject" to "queryToObject" (merge request)
• Improve gradle QA scenario (merge request)
• Update help for renamed documentation index (merge request)
• Improves repository storage-related UI and documentation (merge request)
• Refactor health status widget to use Apollo (merge request) GitLab Enterprise Edition
• Add rel property to help link (merge request)
• Initialize conversion of ci_builds_metadata.id for bigint migration (merge request)
• Remove project_statistics_sync feature flag (merge request)
• Improve repository maintenance UI and documentation (merge request)
• Migrate push_event_payloads.event_id back to integer (GitLab.com only) (merge request)
• Remove cached_markdown_blob feature flag (merge request)
• Remove sort_dependency_vulnerabilities feature flag (merge request) GitLab Enterprise Edition
• Move prometheus service creation to the background job (merge request)
• Add BG migration to delete orphaned deployments (merge request)
• Remove by default enabled feature flag (merge request)
• Enable new Rails connection handling (merge request)
• Review and revise Audit Events UI text (merge request) GitLab Enterprise Edition
• Add service desk project key validation error message (merge request)
• Remove FF ci_fix_pipeline_status_for_dag_needs_manual (merge request)
• Add FK for deployments.environment_id to environments table (merge request)
• Remove ci_artifacts_exclude feature flag (merge request)
• Finalize conversion to bigint for push_event_payloads (merge request)
• Log WaitableWorker inline job executions (merge request)
• Remove default-enabled cascading_namespace_settings feature flag (merge request)
• Track finished_at timestamp for schema migrations (merge request)
• Drop remove_on_close column from labels table in envs where it exists (merge request)
• Toggle codequality diff annotations flag (merge request)
• Remove usage_data_code_review_aggregation feature flag (merge request)
• Remove FF ci_workflow_rules_variables (merge request)
• Cleanup group_devops_adoption feature flag (merge request) GitLab Enterprise Edition
• Remove ci_pipeline_latest feature flag (merge request)
• Remove ci_runners_tokens_optional_encryption ff (merge request)
• Update GitLab Runner Helm Chart to 0.30.0 (merge request)
• Decrease epic issues and child epics page size (merge request) GitLab Enterprise Edition
• Remove invite_signup_page_interaction experiment (merge request)
• Add internal docs for changing CI minute namespace (merge request) GitLab Enterprise Edition
• Add more logging to track encoding errors appending CI traces (merge request)
• Remove diffs gradual load feature flag (merge request)
• Remove partial index for Hashed Storage migration (merge request)

14.0.12 (2021-11-05)

Changed (4 changes)

• Geo: Alternate redownload and normal design sync attempts (merge request) GitLab Enterprise Edition
• Geo: Alternate redownload and normal SSF sync attempts (merge request) GitLab Enterprise Edition
• Geo: Alternate redownload and normal project syncs (merge request) GitLab Enterprise Edition
• Geo: Reduce frequency of redownload attempts (merge request) GitLab Enterprise Edition

14.0.11 (2021-09-23)

Fixed (1 change)

• Fix Elastic::MigrationWorker current_migration (merge request) GitLab Enterprise Edition

14.0.10 (2021-09-02)

No changes.

14.0.9 (2021-08-31)

Security (9 changes)

• Update apollo_upload_server dependency (merge request)
• Ensure shared group members lose project access after group deletion (merge request)
• Fix stored XSS vulnerability in Datadog settings form (merge request)
• Inherit user external status while creating project bots (merge request)
• Escape issue reference and title for Jira issues (merge request) GitLab Enterprise Edition
• Require sign in for .keys endpoint on non-public instances (merge request)
• Update Import/Export to use public email when mapping users (merge request) GitLab Enterprise Edition
• Only create jira connect NS subscriptions for admins (merge request)
• Prevent non-admins from configuring Jira connect app (merge request)

14.0.8 (2021-08-25)

Fixed (1 change)

• Fix: Sidekiq workers delete each other's metrics (merge request)

Changed (1 change)

• Resolve "operator does not exist: integer[] || bigint in... (merge request)

Other (1 change)

• Revert backfill on ci_build_trace_sections (merge request)

14.0.7 (2021-08-03)

Security (18 changes)

• Add project member validation for domain limitation (merge request)
• Hide project-level CI/CD Analytics for Guests (merge request)
• Only allow invite to be accepted by user with matching email (merge request)
• Add html escaping for default branch name (merge request)
• Configure OmniAuth to use GitLab AppLogger (merge request)
• Add permissions check to pipelines#show action (merge request)
• Prevent impersonation in gitlab-shell SSH certs (merge request)
• Fix Protected Environment Accesses Cleanup (merge request) GitLab Enterprise Edition
• Do not show email address in error message (merge request) GitLab Enterprise Edition
• Disallow non-members to set issue metadata on issue create (merge request)
• Prevent guests from linking issues with errors (merge request)
• Block impersonation token use if it is not permitted (merge request)
• Updates oauth to 0.5.6 (merge request)
• Remove impersonation token from api response for non-admin user (merge request)
• Filter todos whose target users no longer have access to (merge request)
• Fix tag ref detection for pipelines (merge request)
• Restrict access to instance-level security features for reporters (merge request) GitLab Enterprise Edition
• Fix XSS in Mermaid Markdown rendering (merge request)

14.0.6 (2021-07-20)

Fixed (4 changes)

• Fix validation method regarding MIME type keys (merge request)
• Geo: Fix snippet verification by replicating the HEAD ref (merge request) GitLab Enterprise Edition
• Fix LFS objects not downloading with Bitbucket (merge request)
• Replace Excon with Faraday for requesting object storage (merge request)

14.0.5 (2021-07-08)

Fixed (4 changes)

• Return empty strings for Jira links when URL is not set (merge request)
• Add prefix to autocomplete path (merge request)
• Do not create audit event for failed logins on read-only DB (merge request) GitLab Enterprise Edition
• Fix git clone for projects with a trailing dot over HTTP (merge request)

Other (1 change)

• Initialize conversion of ci_builds_metadata.id for bigint migration (merge request)

14.0.4 (2021-07-07)

Security (1 change)

• Disable file and network premailer strategies (merge request)

14.0.3 (2021-07-06)

Fixed (7 changes)

• Fix deploy keys not working with LFS auth check (merge request)
• DevOps Adoption - ensure displayNamespaceId is included (merge request) GitLab Enterprise Edition
• Geo - Fix state value in the lfs_object_registry table (merge request) GitLab Enterprise Edition
• Fix broken Time Tracking Reports on Issuable sidebar (merge request)
• Fix bug where Milestone page led to console error (merge request)
• Fix frequent items timestamps not updated (merge request)
• Fix pages deployment storage migration (merge request)

Changed (2 changes)

• Geo - Move migration to a pre-deployment migration (merge request) GitLab Enterprise Edition
• Reintroduce recursive_approach_for_all_projects default-enabled (merge request)

14.0.2 (2021-07-01)

Added (1 change)

• Added omniauth_user check when verifying user cap (merge request) GitLab Enterprise Edition

Security (14 changes)

• Update rdoc to 6.3.1 (merge request)
• Forbid GET requests with mutations (merge request)
• Prevent GraphQL API access by deactivated users (merge request)
• Add sanitizing for name field (merge request)
• Copy feature visibility settings to a fork (merge request)
• Fix XSS on audit log for feature flag actions (merge request)
• Avoid disclosing project in web IDE (merge request)
• Sanitize input on pasteGFM (merge request)
• Fix merge request diff display issue with unsupported encoding (merge request)
• Fix deploy key fallback issue in protected branch (merge request)
• Add total http read timeout (merge request)
• Allow only same-origin URLs for Edit Release Cancel button (merge request)
• Update Nokogiri to 1.11.4 (merge request)
• Add new username validation (merge request)

14.0.1 (2021-06-24)

Fixed (3 changes)

• Remove add button from Devops Adoption (merge request) GitLab Enterprise Edition
• DevOps Adoption - ensure displayNamespaceId is included (merge request) GitLab Enterprise Edition
• Add Helm-2to3.gitlab-ci.yml to Auto DevOps (merge request)

14.0.0 (2021-06-21)

Added (116 changes)

• Add Packages::Helm::ProcessFileService (merge request)
• Add unique index for Helm packages (merge request)
• Disable policies linked to no container repositories (merge request)
• Allow storing detection_method in vulnerability findings (merge request)
• Expose humanTimeEstimate & humanTotalTimeSpent (merge request)
• Make max diff files and max diff lines configurable (merge request)
• Add GraphQL endpoint to list agent configurations (via KAS) (merge request) GitLab Enterprise Edition
• Add checkbox in group settings for prevent sharing outside hierarchy (merge request)
• Add "Enterprise" badge to users that are provisioned via SAML/SCIM (merge request) GitLab Enterprise Edition
• Update Bulk Import state more accurately (merge request)
• Enable DB Load-balancer flag USE_NEW_LOAD_BALANCER_QUERY by default (merge request)
• Allow toggle job_token_scope_enabled via GraphQL (merge request)
• Publish package hash on Package Page (merge request)
• Add backend support for Coverage-Check rule (merge request)
• Add project setting to toggle job token scope (merge request)
• Scope JobToken to only authorized projects (merge request)
• Scope JobToken to only authorized projects (merge request)
• Mark pending todo as done when resolving design discussions (merge request)
• Migration for fixing missing traversal ids (merge request)
• Add qrtly reconciliation alert (merge request) GitLab Enterprise Edition
• Enable by default FF sidebar_refactor (merge request)
• Add time_change in Issue, MR and Note webhook (merge request)
• Prepopulates the pipeline editor with a 3 stage template (merge request)
• Add commit type to generic security reports (merge request) GitLab Enterprise Edition
• Adjust indexes for iterations and iteration cadences (merge request)
• Epic Boards (merge request) GitLab Enterprise Edition
• Add order_project_path to package graphql API sort (merge request)
• Add provisioning group to pipeline validation payload (merge request) GitLab Enterprise Edition
• Add index for description in ci_runners table (merge request)
• Show security report scan errors on pipeline view (merge request) GitLab Enterprise Edition
• Upgrade GitLab Pages to 1.40.0 (merge request)
• Check hierarchy sharing settings in GroupLinks::CreateService (merge request)
• Allow user to create epics via epic board list (merge request) GitLab Enterprise Edition
• Create table for tracking ci minute purchases (merge request) GitLab Enterprise Edition
• Add epic's note system_note_meta to import/export (merge request) GitLab Enterprise Edition
• Add Group Avatar endpoint (merge request)
• Add Content Editor support for wikis (merge request)
• Enable CORS headers for OpenID Connect discovery endpoints (merge request)
• Add a GET endpoint to user preferences (merge request)
• Escaped markdown not interpreted as shortcuts (merge request)
• Allow to make test cases confidential (merge request) GitLab Enterprise Edition
• Add is_shared and runner_type to hooks and API responses (merge request)
• Enable reporting of usage data for Jira integration (merge request)
• Create metric events for service desk emails (merge request)
• Add option to disable printing of root password during DB seeding (merge request)
• Allow users to specify their pronouns (merge request)
• Gracefully handle query timeouts for project VSA (merge request)
• Add title and tooltip to diff preferences dropdown (merge request)
• Add group-level lead time charts (merge request) GitLab Enterprise Edition
• Change pipeline url to have underline (merge request)
• Add danger for merge trains (merge request)
• Optionally include trailers in the commits API (merge request)
• Add compliance tab to redesigned Security-Configuration Page (merge request)
• Instrumenting project sidebar menus (merge request)
• Add upcoming_reconciliations table and model (merge request)
• Support graceful shutdown of Workhorse connections (merge request)
• Add Clone with VS Code for SSH (merge request)
• Get ancestors of an Epic using GraphQL (merge request) GitLab Enterprise Edition
• Add wiki page diff url to Slack notification message (merge request)
• Allow administrators to enable automatic deactivation of dormant users (merge request)
• Add pipeline source to custom CI_JOB_JWT claims (merge request)
• Display credit card status in /admin/users/:id page (merge request) GitLab Enterprise Edition
• Allow users to delete items from the package file list (merge request)
• Show generic 'code' type on vuln details (merge request) GitLab Enterprise Edition
• Add ability to search instanceSecurityDashboard.projects GraphQL query (merge request) GitLab Enterprise Edition
• Add latest_pipeline_id column to vulnerability_statistics table (merge request)
• Import group boards & board lists via ndjson when using Bulk Import (merge request) GitLab Enterprise Edition
• Add an option to expose description_html in Release API (merge request)
• Render table types on generic vulnerability report (merge request) GitLab Enterprise Edition
• Remove Web Application Firewall related frontend files (merge request) GitLab Enterprise Edition
• Add link to navigate to profile settings page (merge request)
• Persist the page parameter for VSA pagination (merge request) GitLab Enterprise Edition
• Adds block_changes_at to LicenseType in GraphQL (merge request) GitLab Enterprise Edition
• Add .drafts scope to MergeRequests (merge request)
• Add delete branch modals behind feature flag (merge request)
• Add the documentation for sidekiq routing rules (merge request)
• Helm chart download API endpoint (merge request)
• Add custom header text to free personal namespaces billing page (merge request)
• Add delete escalation policy GraphQL mutation (merge request)
• Add file-location component for generic security reports (merge request) GitLab Enterprise Edition
• Store CI runner config data (merge request)
• Expose the state field for vulnerability findings (merge request) GitLab Enterprise Edition
• Add graphql API to list Scan Execution Policies (merge request) GitLab Enterprise Edition
• Support custom messages in the cherry-pick API (merge request)
• Add post migration to cleanup orphaned records (merge request)
• GraphQl: Allow filtering epics by negated parameters (merge request)
• Add finding evidence header (merge request)
• Add module-name component for generic security reports (merge request) GitLab Enterprise Edition
• Use assignee sidebar widget in the alert drawer (merge request) GitLab Enterprise Edition
• Add 'show_whitespace_in_diffs' to the UserPreferences endpoint (merge request)
• Update button variants alignment and spacing (merge request)
• Allow recording of experiment subjects (merge request)
• Set the git default branch to "main" (merge request)
• Add memory view to Performance Bar (merge request)
• Add user IP data to external pipeline validation service (merge request)
• Backfill primary key migration for self-managed instances (merge request)
• Makes the invite button on empty projects permanent (merge request)
• Restrict trial during free signup to company users (merge request)
• Add credit card validation checkbox to admin users panel (merge request)
• Delay worker execution for workers utilizing LB (merge request)
• Optionally start a trial during free signup (merge request)
• Adds content to createCommit mutation (merge request)
• Add dast_runner_site_validation feature flag (merge request)
• Add GraphQL types for escalation policies and rules (merge request)
• Debian Group and Project Distribution Keys schema (merge request)
• Compress oversized Sidekiq job payload before dispatching into Redis (merge request)
• Add metrics to calculate rate of project imports (merge request)
• Enable Kroki on reStructuredText and Textile documents (merge request)
• Add admin page for batched background migrations (merge request)
• Remove threat_monitoring_alerts feature flag (merge request)
• Add GraphQL types for escalation policies and rules (merge request)
• Update button variants and avatar layout (merge request)
• Add admin page for batched background migrations (merge request)
• Add Sidekiq payload compression log fields (merge request)
• Add Sidekiq payload decomression server middleware (merge request)
• Implement Sidekiq job payload compressor (merge request)

Fixed (161 changes)

• Only update required instance CI template when the parameter is present (merge request)
• Bugfix: avoid 500 when resending confirmation (merge request)
• Deal with invalid caches (merge request)
• Fix CI/CD > Pipelines active routes (merge request)
• Fix unreachable ES url exception (merge request) GitLab Enterprise Edition
• Fix problems with ldap users with expired password (merge request)
• Fix DA dropdown alignment (merge request) GitLab Enterprise Edition
• Normalize buttons whitespace to only rely on margins (merge request)
• JS error on continuous onboarding welcome page (merge request) GitLab Enterprise Edition
• Only show coverage fuzzing artifact download when the job exists (merge request)
• Align file line numbers for some Safari users (merge request)
• Use context-aware translation for cloud license (merge request) GitLab Enterprise Edition
• Fix Embedded Snippet CSS to remove unnecessary vertical scroll bar (merge request)
• Rebuild iterations automation index (merge request)
• Fix migration for SSH key expiration enforcement (merge request)
• Fix spacing between deploy buttons in MR widget (merge request)
• Fix blank state styling for welcome screens (merge request)
• Fix sidebar item on Jira issue details page (merge request) GitLab Enterprise Edition
• checks: Fix LFS pointer checks only verifying first reference (merge request)
• Fix NameError Admin::ApplicationSettings::UpdateService (merge request)
• Fix CI editor template not updating on commit (merge request)
• Add select_rows to the list of NON_STICKY_READS (merge request)
• Allow nil on delegated CI/CD settings (merge request)
• Fetch from all parent groups in issue epic select (merge request) GitLab Enterprise Edition
• Prevent CI schema from registering if schema_linting flag is off (merge request)
• Conditionally render create group buttons (merge request)
• Do not trim wiki content by default (merge request)
• Show the bytes when git reports the file as undiffable (merge request)
• Use unstranslated names for telemetry on membership (merge request)
• Hide search icon on larger breakpoints again (merge request)
• Use user config for first day of week in issue datepicker (merge request)
• Fix accessing the errors property of the scan objects (merge request) GitLab Enterprise Edition
• Gracefully handle unknown failure reason in runner CI job (merge request)
• Check Security::Scan resources to identify ran security jobs (merge request) GitLab Enterprise Edition
• Fix bug where disabling usage ping via gitlab.rb did not work (merge request)
• Add default_branch support for Project API (merge request)
• Avoid idling in transaction while saving project export object (merge request)
• Fix timeouts on expiring SSH keys (merge request)
• Only check for modified paths when the branch is updated (merge request) GitLab Enterprise Edition
• Change meta tag theme color to match theme (merge request)
• fix: VulnerabilityFinding equality should exclude other record types (merge request) GitLab Enterprise Edition
• Fix trendline error (merge request) GitLab Enterprise Edition
• Fix unintentional cleanup of Import/Export tmp files (merge request)
• Use issueable reference prefix in basic search results (merge request)
• Calculate mergeability check sync on first widget load (merge request)
• Fix fetch policy in pipeline editor branch switcher (merge request)
• Fix upload-file-experiment-trigger setting incorrect base route (merge request)
• Add guard - diff missing from merge_request_diffs (merge request)
• Resolve Yajl encoding incompatibility (merge request)
• Fix MR approval by reporters (merge request) GitLab Enterprise Edition
• Fix conflict resolve to handle FailedPrecondition error correctly (merge request)
• Repurpose Key.expired_today_and_not_notified scope (merge request)
• Fix escaping characters in authors name for "Pending Comments" dropdown (merge request)
• Fix links in code quality widget (merge request)
• Fix spam detection with Akismet client (merge request)
• Do not display bulk selection when user is auditor (merge request) GitLab Enterprise Edition
• Add guard condition for when cilium (merge request) GitLab Enterprise Edition
• Enable HTML labels in Mermaid (merge request)
• Upgrade gitaly dependency to use proper go modules versioning (merge request)
• Fix MR diff compare with previous version (merge request)
• Use tag helper to generate custom emojis (merge request)
• Allow GraphQL MemberInterface to support null users (merge request)
• Fix blank error message for codequality diff (merge request) GitLab Enterprise Edition
• Fix known issues with the CSP (merge request)
• Whitelist pages in mermaid rendering (merge request)
• Fix pipeline graph visualization lines disappearing (merge request)
• Set CSP back to disabled by default (merge request)
• Fix Advanced Search retry migration button (merge request) GitLab Enterprise Edition
• Permit symbols when loading mail_room.yml (merge request)
• Use #use_open_file for NuGet metadata extraction (merge request)
• Fix iteration wildcard id filtering for boards (merge request) GitLab Enterprise Edition
• Fix reference to isSquashReadOnly (merge request)
• Prevent error when accessing optional needs in pipeline graph (merge request)
• Prevent prepending single quote to issue CSV exports (merge request)
• Record impersonation details on Auditor (merge request) GitLab Enterprise Edition
• Set default retries for mailers to 3 (merge request)
• Fix non-custom Total stage in VSA (merge request) GitLab Enterprise Edition
• Do not enforce UTF-8 in any forms (merge request)
• Fix indexer running longer than lock timeout (merge request) GitLab Enterprise Edition
• Fix junit report attachment in tests with error (merge request)
• Force use of UTC in formatting seconds into MM:SS (merge request)
• Fix known issues with the CSP (merge request)
• Fix CSP issues related to captchas (merge request)
• Fix "Security & Compliance" access for auditors (merge request) GitLab Enterprise Edition
• Add the deduplication hash to the job payload (merge request)
• Authorize GraphQL Vulnerabilities::IssueLink type (merge request) GitLab Enterprise Edition
• Fix the requiring_cleanup scope (merge request)
• Do not remove export when uploading via URL (merge request)
• Set iteration state based on updated dates (merge request)
• Update google-protobuf to v3.17.1 (merge request)
• Fix CSS for MR widget for dark mode (merge request)
• Fix shared runner minutes reset on self-managed (merge request) GitLab Enterprise Edition
• Fix layout, spacing, and style of reaction emoji on issuables (merge request)
• fix: Update StoreReportService to better unique signature violations (merge request) GitLab Enterprise Edition
• Update startup css which fixes login pages (merge request)
• Make arrow on generic report section clickable (merge request) GitLab Enterprise Edition
• Determine Jira deployment_type based on URL (merge request)
• Fix ability for non project member to subscribe to an issue (merge request)
• Fix Releases page/GraphQL pagination (merge request)
• Overhaul CSS in performance bar in Dark mode (merge request)
• Fix Security::FindingsFinder for multiple report artifacts (merge request) GitLab Enterprise Edition
• Stop using basic auth for GKE cluster creation (merge request)
• Allow error-free deletion of orphaned group members (merge request)
• Fix "Leave this group" button for subgroups listed in group overview (merge request)
• Adds a conditional to not uncheck an unchecked MR (merge request)
• Fix alignment of global alerts (merge request)
• Fix vuln scanner filter not working when report type has no scanner IDs (merge request)
• Call RedisHllUserEvent only when a user is set (merge request)
• Fix Gitpod url in user preferences (merge request)
• Fix Jira issue fields not disabled when inheriting (merge request)
• Handle invalid project ID in reply-by-email (merge request)
• Fix tooltip positioning on job view list (merge request)
• Fix typo showing error message after destroy page (merge request)
• Process emails for projects with not unique service desk keys (merge request)
• Fix JavaScript initialization in readonly mode (merge request)
• Update Gitaly's binary path in init.d scripts (merge request)
• Pin the GKE version to 1.18 for cluster creation (merge request)
• Fix N+1 problem for ForksController#new (merge request)
• Fix missing system notes and system events on create issue (merge request)
• Avoid conflicting workers in authorized_projects namespace (merge request)
• Fix humanized size numbers for negative values (merge request)
• Fix double render in project's git URL redirect (merge request)
• Fix issue with frames not loading in Safari (merge request)
• Fix timeouts when destroying a project with many notes (merge request)
• Check user permissions for pipeline operations (merge request)
• Include environments from current and descendant pipelines (merge request)
• Render Discover link for Security & Compliance (merge request) GitLab Enterprise Edition
• Avoid updating Elasticsearch when project is pending_delete (merge request)
• Remove feature flag around policy alert creation (merge request) GitLab Enterprise Edition
• Fix bulk edit vulnerability dropdown layering issue (merge request) GitLab Enterprise Edition
• Bump Cluster Applications version which includes: (merge request)
• Only check index status if modifying Advanced Search form (merge request)
• Preserve epic labels association during Group Import/Export (merge request)
• Hide billing plans with truthy hide_card attribute (merge request)
• Check for credit card when playing manual jobs (merge request)
• Ensure post-update actions are applied when assignees change (merge request)
• Fix errors in instance and group-level integration pages for some integrations (merge request)
• Return 404 from branches API when repository does not exist (merge request)
• Fixed Rails Save Bang offenses in few spec/models/* files (merge request)
• Fix blob preview error (merge request)
• Fix atom feed with push events for multiple tags (merge request)
• Resolve Time tracking report is bugged on GraphQL boards (merge request)
• Fixed Rails Save Bang offenses in few spec/models/* files (merge request)
• Properly process stale ongoing container repository cleanups (merge request)
• Execute member hooks only if an associated user is present (merge request)
• Fix pry debugging location with pry-byebug and pry-shell by updating the pry-shell gem (merge request)
• Fix permission check when setting issue/merge request subscription in GraphQL API. (merge request)
• Fix pipeline graph undefined needs error (merge request)
• Prevent overflows in WebHook#backoff_count (merge request)
• Prevent overflows in WebHook#backoff_count (merge request)
• Ensure that we always run the update worker (merge request)
• Execute member hooks only if an associated user is present (merge request)
• Check for credit card when playing manual jobs (merge request)
• Added changelogfile (merge request)
• Fixed offenses in spec/models/* part 5 (merge request)
• Fix blob preview error (merge request)
• Return 404 from branches API when repository does not exist (merge request)
• Preserve epic labels association during Group Import/Export (merge request)
• Fix atom feed with push events for multiple tags (merge request)
• Fixed offenses in spec/models/* part 2 (merge request)
• Fix UI bug overflowing the text in TODO list (merge request)

Changed (155 changes)

• Move admin cohorts to separate controller (merge request)
• Improve beta state communication of content editor (merge request)
• DA use dropdown for adding groups (merge request) GitLab Enterprise Edition
• Remove ci_register_job_service_one_by_one feature flag (merge request)
• Use database as SSOT for diffs whitespace (merge request)
• Namespace translations in view switcher for clarity (merge request)
• Show update branch message when MR branch diverged from target branch (merge request) GitLab Enterprise Edition
• Backend support for multi-select project search (merge request) GitLab Enterprise Edition
• Use GraphQL for Time tracking info on Issuables (merge request)
• Bump DAST to use version 2 (merge request) GitLab Enterprise Edition
• Fix Helm version regexp to match unprefixed semver too (merge request)
• Add deprecation notice to Managed-Cluster-Applications.gitlab-ci.yml (merge request)
• Hide tooltips and popovers with escape key (merge request)
• Adds more identifiers to Seat Link (merge request) GitLab Enterprise Edition
• Usage dictionary: update name, Group Overview (merge request) GitLab Enterprise Edition
• Set PostgreSQL 12 as the minimum supported version (merge request)
• Fix: update incident sidebar severity title margin (merge request)
• Add webhook rate-limit threshold for Free plan on gitlab.com (merge request)
• Update instructions how to initialize/clone git repository (merge request)
• Add indices for created_at+id and contacted_at+id on ci_runners (merge request)
• Update Diff UI settings to match style guides (merge request)
• Relate Test Reports and Requirement Issues (merge request)
• Add verification for MR diffs using SSF (merge request) GitLab Enterprise Edition
• Make Alert details table attributes clickable (merge request)
• Add migrations for adding verification for MR diffs (merge request)
• Allow guest user to assign issue metadata on create (merge request)
• Replace plugin.log with file_hook.log (merge request)
• Restore previous month perspective (merge request) GitLab Enterprise Edition
• Update Styling of MR-Widget (merge request)
• Enforce SSH key expiration by default (merge request)
• Tidy up language on access tokens UI page (merge request)
• Move "Appearances" menu item into "Settings" in Admin Area (merge request)
• Geo: Remove feature flag geo_terraform_state_version_verification (merge request) GitLab Enterprise Edition
• Retry pipelines in the background (merge request)
• Remove feature flag introduce_marker_ranges (merge request)
• Add input rules for creating links (merge request)
• Add new way of encrypting tokens (merge request)
• Remove maven metadata CTE FF (merge request)
• Bump major version of auto-deploy-image in Auto Deploy template (merge request)
• Fix title, value spacing of various sidebar blocks (merge request) GitLab Enterprise Edition
• Expose include_ancestor_groups arg for epics query (merge request) GitLab Enterprise Edition
• Change vulnerability filters All option text to be "All " (merge request) GitLab Enterprise Edition
• Replace work_in_progress with draft (merge request)
• Successful sync should cause verification (merge request) GitLab Enterprise Edition
• Wait until DB is ready to list data on legacy storage (merge request)
• Add level four heading to text style dropdown (merge request)
• Reintroduce DA group max requests (merge request) GitLab Enterprise Edition
• Remove env var restriction for Database load balancing (merge request)
• Hide scanner filter vendor header when there's only the GitLab vendor (merge request) GitLab Enterprise Edition
• Add vulnerability activity filters in GraphQL (merge request) GitLab Enterprise Edition
• Update the vendored cluster management Project Template (merge request)
• Projects API show the project's squash option (merge request)
• Add git push counter to geo node status (merge request) GitLab Enterprise Edition
• Adjust Button Sizes on Secure MR Widget (merge request)
• Apply Slack's UI guide to channel placeholders (merge request)
• Remove DA max requests for groups (merge request) GitLab Enterprise Edition
• Rollout arel_package_scopes feature (merge request)
• Allow iteration cadence argument on iteration creation (merge request)
• Migrate board label select to Vue (merge request)
• Remove old Advanced Search migrations (merge request) GitLab Enterprise Edition
• Added a check for user: null (merge request)
• Enable :disable_service_templates FF by default (merge request)
• Remove load_balancing_atomic_replica feature flag (merge request)
• Replaces Klar by Trivy from the specs (merge request)
• Add vulnerability scanner ID filter in GraphQL (merge request) GitLab Enterprise Edition
• Right align action buttons on jobs index page (merge request)
• Move component and spec to static site editor (merge request)
• Geo Node 2.0 - Remove geo_nodes_beta FF (merge request) GitLab Enterprise Edition
• Remove geo_lfs_object_replication feature flag (merge request) GitLab Enterprise Edition
• Increase max groups fetched for DA (merge request) GitLab Enterprise Edition
• Update breadcrumbs for project imports (merge request)
• Revise UI phrasing around force pushes (merge request) GitLab Enterprise Edition
• Upgrade to Mermaid v8.10.2 (merge request)
• Enable validate_import_decompressed_archive_size feature flag by default (merge request)
• Improve VSM date tooltip (merge request) GitLab Enterprise Edition
• Pass through escaped variable values to Runner (merge request)
• Update deprecated GlIcon size in IDE branch search (merge request)
• Use application/octet-stream as Content-Type for files in CI artifacts (merge request)
• Rename Browser Performance template jobs (merge request)
• Rearrange 'Security & Compliance' menu items (merge request) GitLab Enterprise Edition
• Enable prevent_retry_of_retried_jobs feature flag on by default (merge request)
• Simplify npm.gitlab-ci.yml using new CI variables (merge request)
• Enable cross pipeline artifacts download (merge request)
• Rename read_vulnerability to read_security_resource policy (merge request) GitLab Enterprise Edition
• Remove feature flag usage_data_p_terraform_state_api_unique_users (merge request)
• Remove feature flag create_cloud_run_clusters (merge request)
• Remove ci-trace-read-consistency feature flag (merge request)
• Added path navigation to project VSA (merge request) GitLab Enterprise Edition
• Enable ci_fix_commit_status_retried by default (merge request)
• Change docs link style in group CI settings (merge request)
• Upgrade Sentry gem to 4.4.0 (merge request)
• Refactor performance bar cookie check (merge request)
• Database Load Balancing feature available in GitLab Free (merge request)
• Align titles and icons in Security pages (merge request) GitLab Enterprise Edition
• Prevent projects with same slug from having same project key (merge request)
• Allow reporters to read project statistics (merge request)
• Simplify network policy sidebar (merge request) GitLab Enterprise Edition
• Rename instance_statistics_measurements_table (merge request)
• Converted issuable id to string (merge request)
• Fixed scroll on todos (merge request)
• Replace Flash with GlAlert in Boards (merge request)
• Improve fork error message (merge request)
• Allow extra parameter for Snowplow events (merge request)
• Import group epics via ndjson when using Bulk Import (merge request) GitLab Enterprise Edition
• What's New content link opens in new tab (merge request)
• No Longer Send Legacy Feature Flags (merge request)
• Strip out junit screenshot path (merge request)
• Remove unused ProcessPrometheusAlertWorker worker (merge request)
• Rename experiment_subjects group_id column (merge request)
• Remove unused ProcessAlertWorker (merge request)
• Update pipeline failed notification emails to refer to jobs (merge request)
• Improve approvers text (merge request) GitLab Enterprise Edition
• Update securityReportSummary to avoid expensive operation (merge request) GitLab Enterprise Edition
• Redesign policy editor page (merge request) GitLab Enterprise Edition
• Enable builds queue on replicas by default (merge request)
• Update Unknown signin email timestamp to use 24 hour time (merge request)
• Move cluster management projects out of alpha (merge request)
• Update group creation UI (merge request)
• Remove group timelog mandatory arguments (merge request)
• Remove include_lfs_blobs_in_archive feature flag (merge request)
• Add BulkImports NdjsonExtractor & update labels pipeline to use it (merge request)
• Remove @service from integrations contollers (merge request)
• Allow url without .git suffix for import (merge request)
• Enforce maximum attachment size in project API uploads by default (merge request)
• Added path navigation to project VSA (merge request) GitLab Enterprise Edition
• Enable builds queue limit by default (merge request)
• Fix spacing for branch switcher in pipeline editor (merge request)
• Updates authorization for lint (merge request)
• Separate adoption segment namespaces (merge request)
• Use :latest image tag in default Ruby CI template (merge request)
• Globally enable better generic metrics comparison (merge request)
• Upgrade CQ for updated Rubocop for Ruby 3 (merge request)
• Remove Links header (merge request)
• Reduce queries when ticking the runner queue by default (merge request)
• Add codeowners to DevOps Adoption (merge request)
• Prevent retried builds from being retried again (merge request)
• Raise job rules without workflow warnings by default (merge request)
• Better errors to users for CustomersDot API calls (merge request)
• Enable live consumption for all paid plans (merge request)
• Remove webhooks_moved user callout (merge request)
• Use new location for container-scanning analyzer (merge request)
• Remove code owner ribbon move announcement from settings (merge request)
• Move gosec to alphabetical order (merge request)
• Update Operations settings forms to be UX consistent (merge request)
• Lock a newly created item card in boards (merge request)
• Simplify error code handling for external pipeline validation (merge request)
• Backfill clusters_integration_prometheus.enabled (merge request)
• Add ease score onboarding in-product marketing email (merge request)
• Allow issue type change for incidents (merge request)
• Observe secondary email addresses when adding a member (merge request)
• Left-align certain application-wide cancel buttons to conform to the GitLab Pajamas style guide (merge request)
• Remove old redirect rule for the usage trends feature (merge request)
• Simplify error code handling for external pipeline validation (merge request)
• Set minimum Redis version to 5.0 (merge request)
• Observe secondary email addresses when adding a member (merge request)

Deprecated (3 changes)

• Depreciate GMA from Logs view in Operations (merge request)
• Deprecate related projects_with_prometheus_alerts metrics (merge request)
• Remove OpenJDK-alpine Dockerfile template (merge request)

Removed (46 changes)

• Remove metrics dashboard alert functionality (merge request)
• Remove load_balancing_for_web_hook_worker FF (merge request)
• Drop license_management artifact (merge request) GitLab Enterprise Edition
• Remove ssh_key_expiration_email_notification feature flag (merge request)
• Remove support for creating/updating release notes via tags API (merge request)
• Drop support of legacy feature flag (merge request)
• Removes SAST_DEFAULT_ANALYZERS variable (merge request)
• Replace 'tag_list' with 'topic_list' attribute on project (merge request)
• Don't take fingerprints for the internal authorized_keys API (merge request)
• Remove redundant key/value pair from the payload of DORA metrics API (merge request)
• Remove canary_ingress_weight_control feature flag (merge request)
• Remove allow_group_deploy_token feature flag (merge request)
• Remove GitLab-managed applications UI (merge request)
• Remove GMAv1 Fluentd (merge request)
• Remove GraphQL deprecated fields (merge request)
• Remove GitLab WAF related models, services and workers (merge request) GitLab Enterprise Edition
• Remove legacy profile routes (merge request)
• Replace 'tags' with 'topics' association on project (merge request)
• Remove deprecated CI workers and arguments (merge request)
• Deprecate global usage of SAST_ANALYZER_IMAGE_TAG (merge request)
• Remove BuildsEmailService records from services (merge request)
• Remove metrics for Web Application Firewall (merge request)
• Remove documentation for GitLab WAF (merge request)
• Remove Unicorn support (merge request)
• Remove projects_with_prometheus_alerts and pod_logs_usages_total metrics (merge request)
• Remove code coverage tracking feature flag (merge request)
• Remove pick_into_project feature flag (merge request)
• Remove postgres hll batch counting ff (merge request)
• Remove trace parameter from PUT /api/jobs/:id (merge request)
• Remove CI_PROJECT_CONFIG_PATH variable (merge request)
• Remove inherited_issuable_templates feature flag (merge request)
• Remove deprecated --experimental-queue-selector flag for Sidekiq (merge request)
• Remove unused instance statistics workers (merge request)
• Remove Unicorn references from runtime logic (merge request)
• Remove unicorn-worker-killer gem and relations (merge request)
• Remove Unicorn detection in pid provider (merge request)
• Remove assigned open issue count background worker (merge request)
• Remove start-up scripts for Unicorn web server (merge request)
• Remove UnicornCheck service (merge request)
• Remove support for /wip quick action (merge request)
• Redirect some of deprecated repository routes (merge request)
• Remove some deprecated global routes (merge request)
• Remove Unicorn Sampler (merge request)
• Drop plugins directory support (merge request)
• Remove UnicornCheck service (merge request)
• Remove Unicorn Sampler and its dependencies (merge request)

Security (12 changes)

• Change button type so the form doesn't submit (merge request)
• Bump BinData version
• Use xpath search of Nokogiri instead of css search
• Truncate all non-blob markdown to 1MB by default
• Block access to GitLab for users with expired password
• Adds redirect page to OAuth
• Opt in to Atlassians new context qsh
• Limit oncall projects shown to scope of source GitLab Enterprise Edition
• Merge branch 'id-upgrade-rails-to-6.0.3.7' into 'master' (merge request)
• Update users two factor required from group
• Only verify commit signatures if the user email is verified
• Prevent XSS on notebooks

Performance (45 changes)

• Add post deployment migration for cleanup policies (merge request)
• Enable caching of PG typemap by default (merge request)
• Paginate diffs using Gitaly paths (merge request)
• Prevent refetching commit data (merge request)
• Use title, not full_title for commit mentionables (merge request)
• Add index for project_features.container_registry_access_level (merge request)
• Reduce number of gitaly calls in Snippet REST list Endpoints (merge request)
• Improve cache sharing between cached markdown fields and mentionables (merge request)
• Add protected pending build column and migrate data (merge request)
• Prevent fetching commits for next page (merge request)
• Retry traversal_ids backfill jobs (merge request)
• Enable label reference caching (merge request)
• chore: Drop optimize_sql_query_for_security_report feature flag (merge request) GitLab Enterprise Edition
• Add tracking of running shared runner builds (merge request)
• Use specialized project_authorization workers (merge request)
• Enable 'use_distinct_in_shas_cte' FF by default (merge request)
• Add background migration for unused expiration policies (merge request)
• Fix N+1 problem for fork controller (merge request)
• Preload blobs in repo view (merge request)
• Utilize load balancing capabilities for UserRefreshOverUserRangeWorker (merge request)
• Optimize queries that timeout in StuckCiJobsWorker (merge request)
• Linear traversal query for Namespace#root_ancestor (merge request)
• Cache open epics count in group sidebar (merge request) GitLab Enterprise Edition
• Cache sidebar merge requests count at group level (merge request)
• Moves the pipelines.json endpoint to startup js (merge request)
• Remove unreferenced lfs objects in batches (merge request)
• Remove preloading of forks in projects API (merge request)
• Enable pending builds parity by default (merge request)
• Refine linear queries in Namespace#all_projects (merge request)
• Reinstate branches keyset pagination (merge request)
• Optimize Nokogiri search for post-processing pipeline (merge request)
• Removes unneeded preloading in Markdown rendering (merge request)
• Cache branch_requires_code_owner_approval? (merge request) GitLab Enterprise Edition
• Switch group member max access to use bulk load (merge request)
• Utilize load balancing capabilities for BuildHooksWorker (merge request)
• Add viewer URL to StartupJS (merge request)
• Advanced Search: Allow indexing workers to use replicas (merge request)
• Reduce memory consumption when an API exception goes to Sentry (merge request)
• Use cache for CI::Build runners check (merge request)
• Optimize query for loading artifacts in pipeline (merge request)
• Accelerate builds queuing using a denormalized accelerated table (merge request)
• Remove the redundant update for API endpoint projects/:id/statuses/:sha (merge request)
• Contributes to https://gitlab.com/gitlab-org/gitlab/-/issues/325744 (merge request)
• Optimize query for loading artifacts in pipeline (merge request)
• Remove feature flag for "runners_cached_states" (merge request)

Other (70 changes)

• Update alert markup in runners page (merge request)
• Use a new worker in lieu of UserRefreshWithLowUrgencyWorker as safeguard (merge request)
• Update test_file_finder and Faraday (merge request)
• Remove notification_setting_recipient_refactor feature flag (merge request)
• Add Atlassian referrer to Jira links inside GitLab (merge request)
• Use the parent element to find elements to remove the child (merge request) GitLab Enterprise Edition
• Remove ci_dynamic_child_pipeline feature flag (merge request)
• Add tracking for epic boards (merge request)
• Remove feature flag release_mr_issue_urls (merge request)
• Standardize on roles term in UI (merge request)
• Add unique index on configuration for batched_background_migrations (merge request)
• Drop the web_hook_logs_archived table (merge request)
• Bump gitlab-fog-azure-rm version to 1.1.1 (merge request)
• Remove the nuget new file reader feature flag (merge request)
• Clenup deployments_finder_implicitly_enforce_ordering feature flag (merge request)
• Extract CSS from user calendar JS (merge request)
• Add data migration to update draft on merge_requests (merge request)
• Prepare ci_stages for bigint conversion (merge request)
• Add source tracking to invites (merge request)
• Track the validation error on Environment Update (merge request)
• Enable by default Allow force push option to Protected branches (merge request)
• Update GitLab Shell to v13.19.0 (merge request)
• Add the origin of squash merge feature to the docs (merge request)
• Ensure delay for all UserRefreshOverUserRangeWorker jobs enqueued (merge request)
• Rename DevOpsAdoptionSegment (merge request) GitLab Enterprise Edition
• Prepare geo_job_artifact_deleted_events table (merge request)
• Prepare deployments table for bigint conversion (merge request)
• Remove database_sourced_aggregated_metrics FF (merge request)
• Document and lint that trailers are case-sensitive (merge request)
• Change JiraTrackerData#deployment_type based on URL (merge request)
• Group-level Protected Environment Alpha Version (merge request)
• Upgrade Puma to 5.3.2 (merge request)
• Add subgroups and user namespaces spec examples (merge request)
• Add default value for merge_requests_author_approval (merge request)
• Place multiselect drag drop behind a feature flag (merge request)
• Remove obsolete Segment selections table (merge request)
• Explicitly destroy webhooks and logs before the project deletion (merge request)
• Remove :find_remote_root_refs_inmemory feature flag (merge request)
• Reschedules migration for uuid recalculation (merge request)
• Cleanup container_registry_enabled background migration (merge request)
• Update managed cluster template to avoid hardcoded master (merge request)
• Prepare ci_builds_metadata for int8 migration (merge request)
• Remove the usage of limit_projects_in_groups_api feature flag (merge request)
• Remove the check_maven_path_first feature flag (merge request)
• Prepare taggings table for bigint conversion (merge request)
• Update ffi from 1.13.1 to 1.15.1 (merge request)
• Remove DAST site profile related feature flags (merge request) GitLab Enterprise Edition
• Remove the FF *_unique_users_pushing_mr_ciconfigfile (merge request)
• Remove the FF ci_needs_optional (merge request)
• Remove the FF usage_data_unique_users_committing_ciconfigfile (merge request)
• Remove delayed_perform_for_build_hooks_worker feature flag (merge request)
• Update GitLab Runner Helm Chart to 0.29.0 (merge request)
• Remove threat_monitoring_alerts feature flag (merge request)
• VSA: Add decimal places to metrics (merge request)
• Prepare ci_build_trace_sections for int8 migration (merge request)
• Update button variants and alignment to align with the Pajamas Design System... (merge request)
• Removed packages_finder_helper_deploy_token feature flag (merge request)
• Update group/project member tabs to comply with Pajamas design system (merge request)
• Merge Request edit: make breadcrumbs consistent (merge request)
• Remove the feature flag for the external validation service (merge request)
• Add options events to Redis HLL metrics for filtering data (merge request)
• Track usage of the resolve conflict UI (merge request)
• Remove the packages_finder_helper_deploy_token feature flag (merge request)
• Prepare ci_build_trace_sections for int8 migration (merge request)
• Use @gitlab/ui color in member badges (merge request)
• Remove the feature flag for the external validation service (merge request)
• Update http-parser from 1.2.1 to 1.2.3 (merge request)
• Track usage of the resolve UI (merge request)
• Add missing metrics information (merge request)
• Track usage of the resolve UI (merge request)

13.12.15 (2021-11-03)

Fixed (2 changes)

• Allow nil for remaining ci cd settings (merge request)
• Allow nil on delegated CI/CD settings (merge request)

13.12.14 (2021-11-03)

This version has been skipped due to QA problems.

13.12.13 (2021-10-29)

This version has been skipped due to QA problems.

13.12.12 (2021-09-21)

No changes.

13.12.11 (2021-09-02)

No changes.

13.12.10 (2021-08-10)

Fixed (2 changes)

• Fix validation method regarding MIME type keys (merge request)
• Do not create audit event for failed logins on read-only DB (merge request) GitLab Enterprise Edition

Changed (1 change)

• Resolve "operator does not exist: integer[] || bigint in... (merge request)

13.12.9 (2021-08-03)

Security (15 changes)

• Add project member validation for domain limitation (merge request)
• Block impersonation token use if it is not permitted (merge request)
• Hide project-level CI/CD Analytics for Guests (merge request)
• Only allow invite to be accepted by user with matching email (merge request)
• Configure OmniAuth to use GitLab AppLogger (merge request)
• Fix Protected Environment Accesses Cleanup (merge request) GitLab Enterprise Edition
• Add permissions check to pipelines#show action (merge request)
• Prevent impersonation in gitlab-shell SSH certs (merge request)
• Prevent guests from linking issues with errors (merge request)
• Do not show email address in error message (merge request) GitLab Enterprise Edition
• Updates oauth to 0.5.6 (merge request)
• Remove impersonation token from api response for non-admin user (merge request)
• Filter todos whose target users no longer have access to (merge request)
• Fix tag ref detection for pipelines (merge request)
• Fix XSS in Mermaid Markdown rendering (merge request)

13.12.8 (2021-07-07)

Security (1 change)

• Disable file and network premailer strategies (merge request)

13.12.7 (2021-07-05)

Fixed (2 changes)

• Fix state value in the lfs_object_registry table (merge request) GitLab Enterprise Edition
• Fix pages deployment storage migration (merge request)

Changed (1 change)

• Move migration to a pre-deployment migration (merge request) GitLab Enterprise Edition

13.12.6 (2021-07-01)

Added (1 change)

• Added omniauth_user check when verifying user cap (merge request) GitLab Enterprise Edition

Security (14 changes)

• Bump rails gem version to 6.0.3.7 (merge request)
• Update rdoc to 6.3.1 (merge request)
• Add sanitizing for name field (merge request)
• Forbid GET requests with mutations (merge request)
• Copy feature visibility settings to a fork (merge request)
• Avoid disclosing project in web IDE (merge request)
• Add new username validation (merge request)
• Allow only same-origin URLs for Edit Release Cancel button (merge request)
• Update Nokogiri to 1.11.4 (merge request)
• Fix deploy key fallback issue in protected branch (merge request)
• Fix XSS on audit log for feature flag actions (merge request)
• Sanitize input on pasteGFM (merge request)
• Add total http read timeout (merge request)
• Fix merge request diff display issue with unsupported encoding (merge request)

13.12.5 (2021-06-21)

Fixed (3 changes)

• Fix failing spec (merge request)
• Advanced Search Settings page does not load if the ES url is unreachable (merge request) GitLab Enterprise Edition
• Fix Password expired error on git fetch via SSH for LDAP user (merge request)

13.12.4 (2021-06-14)

Fixed (3 changes)

• Add alias method usage_ping_enabled? (merge request)
• Fix MR diff compare with previous version (merge request)
• Fix double render in project's git URL redirect (merge request)

13.12.3 (2021-06-07)

Added (1 change)

• Add an option to expose description_html in Release API (merge request)

Fixed (5 changes)

• Fix spam detection with Akismet client (merge request)
• Set CSP back to disabled by default (merge request)
• Fix CSP issues related to captchas (merge request)
• Fix issue with frames not loading in Safari (merge request)
• Catch PgQuery::ParseError errors and log as-is (merge request)

Changed (1 change)

• Improve SSH key expiration warning emails (merge request)

13.12.1 (2021-05-25)

Fixed (3 changes)

• Merge branch 'fix/pin-gke-version-to-1-18' into 'master' (merge request)
• Merge branch '331562-fix-pipeline-security-tab-scanner-filter' into 'master' (merge request)
• Update Gitaly's binary path in init.d scripts (merge request)

13.12.0 (2021-05-22)

Security (3 changes)

• Prevent DOS from Chaining in Mermaid. !60382
• Report pipeline creation success only when warranted. !60746
• Fix XSS vulnerability in shared runner description. !60891

Removed (10 changes, 2 of them are from the community)

• Delete feature flag for usage_data_a_compliance_audit_events_api. !52947
• Remove feature flag api_always_use_application_json. !56777
• Remove unneeded index on packages_debian_{project,group}_architectures.distribution_id. !59615 (Mathieu Parent)
• Delete HipChat service database records. !59769
• Set Hipchat metric definitions status to removed. !59779
• Remove Legacy Group-Level DORA metrics API. !59858
• Remove Alerts service metric. !60149
• Remove description_html field from Release Rest API. !61327
• Removes multiple_cache_per_job feature flag and associated code. (Laura Montemayor)
• Remove support for WIP in merge request title toggle.

Fixed (108 changes, 32 of them are from the community)

• Add warning when locally stored description is out of date. !29438
• Disable unsupported task items in Markdown tables. !46060
• Flush statistics cache anytime it is updated. !52938
• Return an HTML response for a request with the Accept / header. !56288
• Resolve offense Performance/Count. !57007 (Shubham Kumar (@imskr))
• Don't show due dates in red if the issue is closed. !57647 (Daniel Ziegenberg daniel@ziegenberg.at)
• Fix Rails/SaveBang Rubocop offenses for wiki_page models. !57899 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix Rails/SaveBang rubocop offenses in spec/frontend. !57909 (Abdul Wadood @abdulwd)
• Fix Rails/SaveBang rubocop offenses in spec/graphql. !57912 (Abdul Wadood @abdulwd)
• Resolve RuboCop offenses for Style/RedundantRegexpCharacterClass. !57914 (Shubham Kumar @imskr)
• Fixes rubocop offenses Style/RescueStandardError. !57923 (Shubham Kumar (@imskr))
• Resolves rubocop offense Style/RedundantFileExtensionInRequire. !57963 (Shubham Kumar (@imskr))
• Fix Rails/SaveBang Rubocop offenses for project related models. !57983 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix Rails/SaveBang Rubocop offenses for member models. !57994 (Huzaifa Iftikhar @huzaifaiftikhar)
• Resolves offenses Style/RaiseArgs. !58009 (Shubham Kumar @imskr)
• Resolves offenses Style/RedundantBegin. !58017 (Shubham Kumar (@imskr))
• Resolves offenses Security/YAMLLoad. !58042 (Shubham Kumar (@imskr))
• Resolves rubocop offenses Rails/WhereEquals. !58067 (Shubham Kumar (@imskr))
• Fix EmptyLineAfterFinalLetItBe offenses for merge request module. !58185 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe Rubocop offenses for projects module. !58187 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe offenses for alert management module. !58191 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe offenses in spec/graphql/resolvers. !58239 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe offenses in spec/lib/gitlab/ci. !58249 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe offenses in spec/lib/gitlab/database. !58251 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe offenses in spec/lib/gitlab/git. !58254 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe offenses in spec/lib/gitlab/repository. !58308 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe offenses in spec/models/packages. !58370 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe offenses in spec/models/releases. !58384 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe offenses in spec/models/wiki_page. !58388 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe offenses in spec/presenters. !58405 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe offenses in spec/services/ci. !58411 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe offenses in spec/services/feature_flags. !58419 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in spec/workers. !58421 (Abdul Wadood @abdulwd)
• Prevent loss of timelogs when deleting notes. !58525 (Lee Tickett @leetickett)
• Fix multiline comment dragging in Firefox. !58692
• Update cached count for "done" todos when deleting todo targets. !58773
• Fix light label text color in dark mode. !59088
• Fix false positive for codequality mr diff report. !59421
• Fix for shell announcement banners. !59482
• Reschedule background migration to copy projects.container_registry_enabled to project_features.container_registry_access_level. !59513
• Fix images not showing in Jupyter Markdown tables. !59551
• Fix paginator of Environment Serializer. !59751
• Add generic avatar method for users and groups. !59758
• Set Web hook defaults to intended default values. !59814
• Fix restrictive permissions for ProjectMembers who are owners. !59844
• Users search: fix avatar size. !59883
• Fix cascading settings attr writer behavior. !59910
• Set a default region to Workhorse S3 client. !59932
• Fix invite banner display member count for subgroups page. !59948
• Fix LFS push mirroring for mirrors set up a long time ago. !59972
• Fix pipeline status when DAG jobs needs manual jobs. !59975
• Fix tag matching behavior on New Release page. !60035
• Fix bug that prevented searching for group/project members with multiple words. !60051
• Fix link to subgroup OAuth application. !60066
• Explicitly destroy webhooks and logs before the project deletion. !60122
• Upgrade omniauth_openid_connect gem to our own fork. !60181
• Fix bug when board card label is clicked. !60327
• Align help icon for code quality merge request widget. !60330
• Fast destroy job artifacts when destroying a pipeline. !60391
• Ensure we never error in web hook logs. !60408
• Fix bug where test report was not showing while pipeline was running. !60416
• Do not set experiment cookie on self managed and delete existing cookies. !60419
• Fix regression in GraphQL field MergeRequest.assignees.webUrl. !60428
• Fix usage ping misreporting consolidated object storage settings. !60526
• Fixes bug where variables are being filtered that do not have a value but a key. !60538
• Fix MR sidebar rendering on mobile. !60552
• Fix EnvironmentSerializer preloads unrelated pipelines/builds. !60562
• Don't email issue email participants confidential comments. !60594 (Lee Tickett @leetickett)
• Resolve Cannot Set Assignee in Boards View for self-managed GitLab with Relative URL. !60711
• Check duplicate package regex against version as well as name. !60760
• Fix Openshift template to run on main branch. !60811
• Fix downloadable artifacts for pipeline. !60836
• Fix SMTP errors when delivering service desk thank you emails with SMTP pool enabled. !60843
• Fix changelog Dangerfile to convert MR IID to a string before comparison. !60899
• Fix due date being randomly set in issue page. !60917
• Disable autocomplete for due date in issue sidebar to prevent triggering updates on Chrome. !60973
• Remove subscribed field from todos, related issues, and epic issues API. !60981
• Fixed quick actions link not showing in diff line comment forms. !61029
• Fixes merge request controls not visible when merge request has single commit. !61030
• Fixed preview review comment not working with single file diff mode. !61032
• Fixed dollar signs in suggestions getting replaced incorrectly. !61041
• Fix artifacts dropdown for merge request and commits pipelines tables. !61045
• Remove hyphen from Cloudrail CI template name. !61079
• Bust the cache for /whats-new. !61081
• Fix commit messages text color in dark mode. !61082
• Suppress all non-nullable field errors for assignee widget graphql queries to remove assignee fetching error messages in boards. !61091
• Correct the 'blocked' scope in 'Member' class. !61108
• Preserve user changes in the wiki editor if multiple people edit the page. !61120
• Fix multiple assignees checked in boards sidebar. !61227
• Fix incorrect issue and merge requests counts with filters. !61230
• Fix slack label filter behavior blank. !61236
• GithubImport: Fix Review importer when the author does not exist anymore. !61257
• Restrict issue creation via API by relevant permissions. !61281
• Merge Request API: Treat 0 as a non-assigning sentinel value. !61301
• Remove extra padding and margin from merge request widget review app dropdown chevron. !61302
• Fix a bug displaying project commit anchors. !61361
• Reset Source Editor's layout after Startup CSS. !61426
• GithubImporter: Fix "ArgumentError: string contains null byte". !61480
• Use correct scope when authorizing with Jira GitHub DVCS connector. !61496
• Fix user popover bio overflow. !61555
• Hide commit msg for package files without pipeline. !61571
• Fix position of note actions. !61594
• Inject Feature Flags Limit Value. !61621
• Fix services API returning non-existing services. !61646
• Fix Jira Connect sign in button style. !61665
• Filter out unconnected-to-user members from receiving on access request emails. !61819
• Fixed Rails Save Bang offenses in few spec/models/* files. !61862 (Suraj Tripathi @surajtripathy07)
• Fix issuable search optimization in PG12. !61880

Deprecated (4 changes, 1 of them is from the community)

• Deprecate Alerts service metric. !59899
• Add Managed Prometheus deprecation warning. !60560
• Deprecate SetWip GraphQL mutation and add SetDraft mutation. !60803
• Add GraphQL field 'Project.topics' and deprecate 'Project.tag_list'. !61250 (Jonas Wälter @wwwjon)

Changed (145 changes, 52 of them are from the community)

• Update admin users to use GitLab UI table by default. !54085
• Remove artifact expiry backfill temp index. !54252
• Enable the new pipeline form by default. !55250
• Add migration to update plans on new post-EoA subscriptions. !55625
• Add support for retries to Advanced Search reindexing. !55681
• Add missing parts of GraphQL schema to GraphQL documentation. !55944
• Update Keyboard shortcut help: adding search, update styling. !56400
• Redirect to activity page when accepting invitation. !56695
• Add external documentation references in GraphQL. !56704
• Send in-product marketing email usage data. !56752
• Enable new RPC to destroy wiki pages. !57106
• Always resolve GitLab alerts when recovery alert payload is received. !57302
• Add gl-badge for badges in pipeline schedules nav. !57937 (Yogi (@yo))
• Add gl-badge for badges in jobs page nav. !57938 (Yogi (@yo))
• Add gl-badge class for tag's badge. !57939 (Yogi (@yo))
• Add gl-badge for badges in MRs and issues nav. !57942 (Yogi (@yo))
• Add gl-badge for badges in todos nav. !57943 (Yogi (@yo))
• Add gl-badge for badges in admin users nav. !57951 (Yogi (@yo))
• Add gl-badge for storage badge in admin groups page. !57954 (Yogi (@yo))
• Add gl-badge for badges in milestone drawer. !57964 (Yogi (@yo))
• Add gl-badge for badges in snippets nav. !57966 (Yogi (@yo))
• Add gl-badge for badges in pipeline page nav. !57970 (Yogi (@yo))
• Add gl-badge for badges in project search page nav. !57971 (Yogi (@yo))
• Add gl-badge for badges in new MR nav. !57995 (Yogi (@yo))
• Apply gl-form-input for fields in ssh keys page. !58000 (Yogi (@yo))
• Apply gl-form-input for fields in preferences page. !58004 (Yogi (@yo))
• Apply gl-form-input for search field in milestone page. !58007 (Yogi (@yo))
• Apply gl-form-input for fields in new project milestone page. !58010 (Yogi (@yo))
• Move to btn-confirm from btn-success in emails directory. !58029 (Yogi (@yo))
• Move badge to vue component in project badges. !58045 (Yogi (@yo))
• Switch to gl-badge in whats new dropdown. !58235 (Yogi (@yo))
• Add gl-form-input class for fields in create project page. !58299 (Yogi (@yo))
• Move to btn-confirm from btn-success in create from template page. !58303 (Yogi (@yo))
• Add gl-form-input class for fields in gitlab import page. !58304 (Yogi (@yo))
• Add gl-form-input class for fields in bitbucket import page. !58309 (Yogi (@yo))
• Add gl-form-input class for fields in fogbugz import page. !58312 (Yogi (@yo))
• Add gl-form-input class for fields in gitea import page. !58313 (Yogi (@yo))
• Add gl-form-input class for fields in import page. !58316 (Yogi (@yo))
• Add gl-form-input class for fields in phabricator import page. !58318 (Yogi (@yo))
• Change text for incident auto-resolve setting to match behavior. !58515
• Move license history to gl-table utility class. !58531 (Yogi (@yo))
• Add margin top for clear repo check button in admin. !58536 (Yogi (@yo))
• Add more padding for whats new badge in drawer. !58544 (Yogi (@yo))
• Add pause_ms column to batched_background_migrations and batched_background_migration_jobs. !58583
• Geo: Add verification for Terraform States. !58800
• Disable automatic setup of alerts for Prometheus cluster integration. !58853
• Improve message for :project_not_found error to indicate possible cause. !58945 (Ignacy Moryc @ignacy)
• Rename 'no contributions' to 'No contributions' in profile activity graph helper. !59076 (Yogi (@yo))
• Center align project home navigation. !59079 (Yogi (@yo))
• Move to new GitLab UI for card in health check page. !59081 (Yogi (@yo))
• Update to question-o and change color in admin users. !59133 (Yogi (@yo))
• Update to question-o from question icon in navbar. !59134 (Yogi (@yo))
• Update to question-o from question icon in user stats. !59135 (Yogi (@yo))
• Move card in billing page to gl-card utility class. !59138 (Yogi (@yo))
• LibreOffice/OpenOffice file extensions in icon map. !59159 (Holzfeind, Daniel Georg)
• Export issues sorted by relative position and recompute issue relative position on project import. !59175
• Move 2fa recovery codes to GlCard component. !59219 (Yogi (@yo))
• Add gl-form-input utility class for pin code field in 2fa. !59220 (Yogi (@yo))
• Replace invite banner button with modal trigger. !59260
• Resolve Abstract participants dropdown to a shared component. !59358
• Make new project ui the only option. !59452
• Add space next to spinner in Preview payload button. !59458 (Yogi (@yo))
• Add btn-default class in seat link payload button. !59459 (Yogi (@yo))
• Add VulnerabiltyFindingEvidenceRequest model. !59539
• Add VulnerabiltyFindingEvidenceResponse model. !59563
• Add gl-badge utility class for deleted projects tab. !59590 (Yogi (@yo))
• Move npm and yarn to new dropdown UI. !59628
• Change artifacts download button to a vertical ellipsis menu. !59667
• Correct variant of Rebase button in MR widget. !59684
• Improve merge message UI text. !59693
• Use GlModal for Confirmation of Deploy Key Delete. !59697
• Add ability to order cluster token by last used. !59716
• Make new issue, merge request, and epic emails more consistent. !59718
• Add merge request interaction details to MergeRequest.assignees. !59770
• Expose enable_advanced_logs_querying in Environments API. !59772
• Increase note actions target size. !59776
• Redesign the DevOps Score report. !59856
• Bumped image in the CI-Template Jobs/Build.gitlab-ci.yml to 0.6.0. !59882 (Daniel Estermann (@d.esterman))
• Expose job and project queued duration in all APIs. !59901
• Include installable and/or displayable packages only in package finders. !59921
• Log exceptions in Lfs::PushService. !59960
• Container Registry Details: split details from tags call. !59969
• Add ability to include self in cascading setting lock check. !60031
• Remove workhorse_extract_filename_base feature flag. !60070
• Support worker_name predicate in Sidekiq queue selector. !60084
• Add Gradle Kotlin installations commands. !60097 (Cromefire_ (@cromefire_))
• Fix breadcrumbs and navigation in runner details pages. !60129
• Improve dropdown and search in the tags page. !60145
• Clarify image repository delete actions. !60154
• Update RubyGems and NuGet packages to error status upon metadata extraction failure. !60172
• Pre-fill user email address after confirming. !60179
• Retain timelog spent_at time. !60191 (Lee Tickett @leetickett)
• Update button variants to btn-confirm on MR page. !60254
• Rename default branch for empty project actions. !60258
• Remove visualization feature flag in pipeline editor. !60273
• Reorder source_project_id foreign key constraint in merge_requests table. !60313
• Update edit file buttons and spacing. !60318
• Keep consistent Global Search tab order. !60319
• Toggle subscribed state when clicking on icon in collapsed sidebar. !60345
• Add a Spamcheck API key application setting. !60385 (jdsalaro)
• Change product-marketing-email sending schedule. !60422
• Fix copy on webhook admin pages for "Issues events" and "Confidential issues events". !60453
• This change captures resizes of the runner installation instructions modal to make it usable on screens. !60588
• Create table user_credit_card_validations. !60626
• Update error tracking settings to use better copy and correct colors. !60627
• Add sha256 to package file API payload. !60631
• Github Importer: Add Cache to Pull Request Reviews importer. !60668
• Add username and password fields for Advanced Search. !60710
• Migrate DevOps Score empty state to Vue. !60715
• Adds field authorization to pipeline fields. !60754
• Change conan token expiration from 1 hour to 24 hours. !60763
• Remove mobsf service for mobsf SAST job. !60770
• Polish the "What's new" UI. !60804 (Kev @KevSlashNull)
• Disable web-hooks that fail repeatedly. !60837
• Add slack integration individual usage ping. !60847
• Extend branch support for Static Site Editor. !60848
• Store slice multiplier and max slices running for reindex in DB. !60861
• Keep new prometheus cluster integration in sync with old cluster application. !60877
• Validate release description length. !60892
• i18n: Show translation levels for each language in the UI. !60905
• Add kubernetes_agent_proxy_request to usage ping. !60978
• Validate CI pipeline jobs dependencies. !60999
• Update appearance of "Enable shared runners for this project" toggle in Project > Settings > CI/CD. !61043
• Add offset and limit to branch names resolver. !61061
• Require 3 or more characters in search term when searching groups in Jira Connect app. !61099
• Enforce .git suffix when importing git repo. !61115
• Improve field descriptions in the Jira integration form. !61205
• Migrate 'tags' to 'topics' for project in the database context. !61237 (Jonas Wälter @wwwjon)
• Rename master to main in views placeholders. !61252
• Make pipeline retry endpoint async. !61270
• Add relations export request when Bulk Import is initiated. !61365
• Fix :focus styles for What's New. !61398
• Add body to finding evidence requests. !61408
• Make semgrep generally available. !61412
• clicking backdrop closes modal for What's New. !61420
• Scroll to the top of a diff file when it is collapsed. !61432
• Wiki: Use FindAllCommits RPC to list page versions. !61459
• Allows masking ~ character. !61517 (Thomas Dallmair)
• Backfill clusters_integration_elastic_stack.enabled. !61521
• Update rails project template to rails 6.1. !61547
• Add body to finding evidence responses. !61631
• Support warning in pipeline creation by default. !61803
• Make find_remote_root_refs_inmemory feature flag enabled by default. !61824
• Add link to email notifying of MR changing draft status. !61891
• Remove success variant for primary button in upload file modal. (Yogi (@yo))

Performance (63 changes, 1 of them is from the community)

• Make MergeService idempotent. !55368
• Speed up save on New/Edit Release page. !57000
• Cache path lookups for namespaces. !57027
• Cache project tag list. !57031
• Linear traversal query for Namespace#ancestors. !57137
• Set traversal_ids for every namespace. !57318
• Resolve admin_group_member group policy n+1. !58948
• Optimize AvailableLabelsService for multiple labels search. !59032
• Reduce number of SQL queries when creating SystemNotes. !59102
• Enable pagination in the CompareController. !59162
• Fix N+1 for commits with pipelines. !59234
• Improve diff_files endpoint performance. !59489
• Create the merge request pipeline asynchronously on push. !59624
• Optimize CI Settings page to reduce N+1 queries. !59625
• Linear traversal query for Namespace#descendants. !59632
• Remove unnecessary validation avoiding N+1 queries when building integrations. !59635
• Improve the packages finder helper SQL queries when handling deploy tokens. !59739
• Improve shifting of positions when creating issues. !59745
• Remove the longer_count_cache_validity_period feature flag. !59746
• Recreate index for deployments updated_at and finished_at. !59771
• Exclude build dependency calculation when creating the pipeline. !59810
• Improve pagination of users in the admin panel. !59884
• Prevent loading of cohorts data in the admin users list. !59890
• Avoid loading user objects when bulk updating todos. !59909
• Fix N+1 queries in namespace#any_project_has_container_registry_tags?. !59916
• Replace OpenStruct with Struct in project_level_stage_adapter.rb. !59956 (Amit Patel @amit.savani)
• Recalculate assigned open issues count after cache invalidation. !59961
• Improve performance of LFS integrity checks. !59991
• Add new service to handle add_spent_time to MRs. !60043
• Stop exposing artifacts on pipelines.json. !60126
• Improve the Maven API file endpoints response time when a non existing package is requested. !60142
• Fix three N+1s in Releases API entity generation. !60189
• Remove string duplication in BlobStitcher. !60406
• Delete all label links asynchronously when issuable gets destroyed. !60487
• Fix releases API N+1 in sorted_links usage. !60561
• Refactor notification recipients builder for watchers. !60572
• Remove N+1 query from Issue::Metrics#record. !60589
• Fix repeating SQL queries when changing labels for a resource. !60718
• Fine tune a few queries found in GroupMembers#index. !60857
• Fix N+1 problem in CustomEmojiFilter. !60910
• Create partial indexes for pending/running builds. !60942
• Stop exposing has_downloadable_artifacts in pipelines.json. !60950
• Improve performance of project issues API. !60981
• Include other cols in index for pending builds. !60997
• Remove unnecessary query from close_issue method. !61087
• Partial index optimization for namespaces id. !61098
• Decrease load time of project select dropdowns. !61117
• Apply rate-limiting to webhook executions. !61151
• Update grape-path-helpers to v1.6.3. !61196
• Improve the performance of Release LIST v4 API endpoint by short-interval caching. !61223
• Ensure iid is set before skipping ci pipeline. !61231
• Stop exposing artifacts in pipelines.json. !61253
• Ensure project iid is set before saving pipeline from web terminal. !61311
• Sync traversal path of namespaces. !61329
• Enable notification settings recipient refactor by default. !61443
• Tie-breaker in Deployment Finder should respect the original sort direction. !61444
• Improve memory consumption of issuable APIs. !61561
• Fix environment filter of Deployments Finder. !61564
• Optimize merge request permission check for references. !61591
• Introduced granular control to Monaco tag. !61690
• Apply rate-limit cache to branches endpoint. !61723
• Enforce updated_at ordering in Deployment API for performance optimization. !61870
• Resolve Remove subscribed from GraphQL boards list query. !61881

Added (114 changes, 16 of them are from the community)

• Commit author for suggestions is note author. !39940
• Report summarized Gitaly Apdex via usage ping. !47040
• Allow disabling build stage for Auto Devops. !48638 (Shane Davidson @shanekdavidson)
• Allow access to registry API of the current project using the job token. !49750 (Mathieu Parent)
• Integrate with the Spamcheck anti-spam engine. !52385
• Add generating Speedscope flamegraphs for a request. !53288
• Add collapsible section shortcut to markdown controls. !54938
• Add Terraform Module Registry. !55018
• Clear group open issues count cache when bulk updating issues state. !56386
• Add options for Slack and Mattermost label filter behavior. !56657
• Create packages_helm_file_metadata table. !57017 (Mathieu Parent)
• Add "previously merged commits" dropdown in merge request compare dropdown. !57026
• Add specific rate limits for Package Registry (Package API). !57029 (Jonas Wälter @wwwjon)
• Expose merge request timelogs via GraphQL. !57322 (Lee Tickett @leetickett)
• Automate deactivation of dormant users for self-managed instances. !57778
• Add indexes for cleanup policies on container_repositories and container_expiration_policies. !58123
• Add CI runner counts to usage ping. !58197
• Add snoplow tracking to Releases API. !58221
• Add ConfigureSecretDetection graphql mutation. !58230
• Adds access token endpoints to OpenAPI. !58620 (jimcser)
• Add sorting for group and project packages type. !58657
• Add more fields to the GraphQL blob type. !58906
• Add commmit_pipeline_path to CreateCommit mutation. !58931
• Add cascading namespace setting database migration helper. !58940
• Add application setting for What's new. !59011 (Jonas Wälter @wwwjon)
• Create "projects/import-remote" to import a project using a remote object storage to fetch the exported project . !59033
• Add support to destroy iteration cadences in GraphQL. !59060
• Remove feature flag from invite members banner. !59203
• Send email to oncall rotation participants and project owners when user is removed. !59331
• Improve errors reporting for board lists update. !59549
• Add autocomplete to milestone description. !59564 (Jonas Wälter @wwwjon)
• Add "active" filter to deploy tokens API. !59582 (Devin Christensen)
• Implement Sidekiq queue re-routing in the application. !59604
• Added type field into Issues API. !59648 (Raimund Hook @stingrayza)
• Expose KAS metadata through GraphQL - enabled, version and externalUrl. !59696
• Support board issue filtering by iids in GraphQL. !59703
• Add note about SSH key title being public information. !59726
• Add missing data to CiJob type. !59805
• Add link to documentation in empty pipeline test reports. !59812
• Add table to store Security Orchestration Policy Schedules. !59842
• Add code owners metric to DevOps adoption page. !59874
• Search projects by topic via API. !59900
• Remove pages_serve_with_zip_file_protocol feature flag. !59908
• Implement variables for pipeline workflow rules. !59970
• Add Group relations export models. !59976
• Add Group relations export API. !59978
• Added tracking to diff view settings. !59979
• Remove pages_update_legacy_storage feature flag. !60005
• Remove pages_serve_from_legacy_storage feature flag. !60010
• Add project_id foreign key to timelogs. !60040 (Lee Tickett @leetickett)
• Lazy load artifacts on pipelines list page. !60058
• Create database table dast_site_profiles_pipelines. !60090
• Allow issueSetDueDate GraphQL mutation to accept null values. !60139
• Introduce limit to number of registered runners. !60157
• Add isuable time tracking report. !60161 (Lee Tickett @leetickett)
• Add internal API support for updating issue types on issues. !60173
• Allow merge request search via GraphQL. !60190 (Lee Tickett @leetickett)
• Add CI template field to project GraphQL type. !60276
• Keep latest pipeline artifact forever. !60400
• Expose user permissions on JobType. !60427
• Add description and roll_over columns to iterations_cadences. !60436
• Populate timelogs.project_id. !60439 (Lee Tickett @leetickett)
• Add Ci::Build graphql mutations. !60443
• Ensure highlighting limits are documented, configurable, and monitorable. !60445
• Add semgrep to SAST config UI. !60460
• Add ability to swap revisions when comparing. !60491
• Add status_changed_at to deployments webhooks. !60518
• Show a random predefined message while MR merging is in progress. !60521
• Add ability to view graph by job dependency. !60522
• Show Deploy Boards for Environments in Folders. !60525
• Allow frontend to observe Prometheus metrics. !60633
• Add setting to allow or disallow duplicates for generic packages. !60664
• Add Escalation policies and rule tables. !60685
• Add support for create, updating, and filtering issues based on issue type in REST API. !60687
• Improve logging in e-mail receiver processing. !60692
• Allow migrating scheduled and retried Sidekiq jobs to new queues. !60724
• Add support for creating/modifying different issue types via GraphQL API. !60747
• Add Maven to Package Graphql types. !60808
• Add API to set credit card validation timestamp for user. !60828
• Add asset links to release keyword. !60896
• Application setting for FloC participation (disabled by default). !60933
• Add API endpoint for deleting a package file. !60970
• Show total group counts in admin users table. !60998
• Package: group and project graphql types - add search. !61001
• Add missing status type and enum to package graphql type. !61002
• Expose blob plain data in GraphQL. !61016
• Lazy load artifacts dropdown in pipelines merge request widget. !61055
• Remove feature flag from upgrade link in user menu. !61057
• Show unit report attachments in the pipeline test report. !61075
• Add Elastic Stack cluster integration. !61077
• Implement bulk import for all groups on the page. !61097
• Add shared_visible_only option to project's groups API. !61118
• Add external status check responses. !61135
• Add more attributes to the blob GraphQL API. !61155
• Add complete field to indicate if a pipeline/job is complete. !61209 (Cong Chen @gentcys)
• Add stuck field to CiJob. !61247
• Add option to remove labels on issue close in the REST and GraphQL API. !61286
• Ban user state and UI. !61292
• Enable by default scheduled execution of batched background migrations. !61316
• Enable by default automatic optimization of batched background migrations. !61317
• Improve UX of the award emoji picker. !61384
• Add semgrep to Secure-Binaries and update support docs. !61411
• Add cron worker for cleaning up unit test tables. !61463
• Redirect to the last visited epic board. !61474
• Implement wildcard support for pipeline include file paths. !61507
• Add DS_EXCLUDED_ANALYZERS var to Dependency Scanning template. !61529
• Add fields to graphQL version type. !61567
• Add pipeline editor drawer for introduction to CI. !61620
• Add nuget metadata type to Package GraphQl type. !61695
• Add repository diskPath parameter to GraphQL API. !61725
• Upgrade Pages to v1.39.0. !61756
• Add 3 stage pipeline template. !61762
• Email users about SSH keys that are expired or expiring soon. !61812
• Observe limit to hours setting in timelog report. !61849 (Lee Tickett @leetickett)

Other (122 changes, 38 of them are from the community)

• Enable Content-Security-Policy header by default. !56923
• Fix Rails/SaveBang Rubocop offenses for user related models. !57901 (Huzaifa Iftikhar @huzaifaiftikhar)
• Externalise strings in _abuse.html.haml. !57968 (nuwe1)
• Externalise Strings in /application_settings/_gitaly.html.haml. !57976 (nuwe1)
• Externalise strings in application_settings/_plantuml.html.haml. !58023 (nuwe1)
• Externalise strings in /application_settings/_prometheus.html.haml. !58030 (nuwe1)
• Externalize strings in /application_settings/_signin.html.haml. !58066 (nuwe1)
• Externalize strings in application_settings/_spam.html.haml. !58076 (nuwe1)
• Externalize strings in application_settings/_terminal.html.haml. !58081 (nuwe1)
• Eternalize strings in application_settings/_usage.html.haml. !58088 (nuwe1)
• Externalise strings in /admin/users/_form.html.haml. !58096 (nuwe1)
• Externalize strings in admin/users/_profile.html.haml. !58106 (nuwe1)
• Externalise strings in users/_projects.html.haml. !58110 (nuwe1)
• Externalise strings in users/edit.html.haml. !58117 (nuwe1)
• Externalize strings in users/projects.html.haml. !58122 (nuwe1)
• Externalize strings in /users/show.html.haml. !58126 (nuwe1)
• Externalize strings in appearances/_form.html.haml. !58135 (nuwe1)
• Externalise strings in appearances/preview_sign_in.html.haml. !58138 (nuwe1)
• Externalize strings in /background_jobs/show.html.haml. !58141 (nuwe1)
• Externalize strings in broadcast_messages/_form.html.haml. !58143 (nuwe1)
• Externalize strings in requests_profiles/index.html.haml. !58161 (nuwe1)
• Externalizes strings in runners/show.html.haml. !58166 (nuwe1)
• Externalises strings in spam_logs/index.html.haml. !58170 (nuwe1)
• Externalise strings in confirmations/new.html.haml. !58173 (nuwe1)
• Externalize strings in _confirmation_instructions_secondary.html.haml. !58216 (nuwe1)
• Externalize strings in reset_password_instructions.html.haml. !58224 (nuwe1)
• Externalise strings in reset_password_instructions.text.erb. !58226 (nuwe1)
• Externalize strings in unlock_instructions.text.erb. !58229 (nuwe1)
• Externalise strings in shared/_links.erb. !58278 (nuwe1)
• Externalize strings in milestones/_header_title.html.haml. !58300 (nuwe1)
• Externalize strings in milestones/new.html.haml. !58311 (nuwe1)
• Externalize strings in viewers/_changelog.html.haml. !58446 (nuwe1)
• Externalize strings in viewers/_contributing.html.haml. !58447 (nuwe1)
• Externalize strings in viewers/_download.html.haml. !58450 (nuwe1)
• Externalize strings in viewers/_license.html.haml. !58452 (nuwe1)
• Externalise-strings-in-viewers/_readme.html.haml. !58456 (nuwe1)
• Remove the global default branch feature flag. !59024
• Review and revise custom issue tracker UI text. !59277
• Add specs ensuring all metric definition key paths are present in Usage Ping structure. !59314
• Review and revise EWM integration UI text. !59386
• Review UI text and docs for Flowdock integration. !59388
• Align UI of Merge Conflicts app with our design system. !59400
• Prepare to convert PK type for ci_build_needs. !59467
• Upgrade Bootstrap to v4.5.3. !59501
• Review UI text and docs - Google Chat. !59518
• Make Sentry processors for GitLab-internal error tracking compatible with new version of Sentry gem. !59565
• Upgrades the final few bootstrap buttons. !59641
• Remove the enabled by default feature flag for maven group level improvements. !59748
• Initialize int8 migration for ci_job_artifacts. !59786
• Do not require invited users to confirm their email address. !59790
• Update GitLab Runner Helm Chart to 0.28.0. !59802
• Update Create:Code Review metrics definitions. !59816
• Update Metrics Definitions for Runner. !59824
• Add group_level? and instance_level? helpers to Service model. !59838 (Amit Patel @amit.savani)
• Update UI text for confluence integration. !59839
• Revise project access tokens UI text. !59878
• Remove usage_data_track_quickactions feature flag. !59914
• Update, organize, and improve analytics metrics definition files. !59926
• Add --ee option to Usage Metric Definition generator to fill correct tier and distribution. !59942
• Initialize conversion of ci_sources_pipelines.source_job_id to bigint. !59951
• Review and revise YouTrack integration UI text. !59998
• Review UI text for pipeline error messages. !60018
• Drop Vulnerabilities without backing Finding. !60023
• Remove feature flags from known events. !60053
• Update KaTeX integration to v0.13.0. !60071
• Update Bugzilla integration UI text. !60080
• Drop Jira proxy setting columns. !60123
• Add index to support execution time order for batched migration jobs. !60133
• Remove gldropdown_tags feature flag. !60153
• Update active branch icon in IDE to conform to the Pajamas design guide. !60168 (Andreas Resch @reschandreas)
• Add migration to swap partitioned web_hook_logs. !60184
• Update UI links to docs. !60247
• Add index to batched migration jobs status. !60248
• Initialize int8 migration for ci_builds. !60265
• Update GitLab Shell to v13.18.0. !60288
• Remove not_issuable_queries feature flag. !60321
• Remove optimized_timebox_queries feature flag. !60326
• Initialize conversion of ci_build_trace_chunks.build_id to bigint. !60346
• Add user availability status to status modal and settings. !60351
• Align UI text for CI integrations with each other. !60352
• Update 5 min app metric defintions. !60364
• Initialize conversion of ci_builds_runner_session.build_id to bigint. !60366
• Update instance_auto_devops_enabled metric team metadata. !60374
• Update AWS deploy templates metrics. !60377
• Remove graphql_release_data, graphql_milestone_stats, and graphql_releases_page feature flags. !60390
• Remove invite_members_version_b experiment. !60426
• Remove feature flag for pipeline status in pipeline editor. !60463
• Review and revise project integration descriptions. !60510
• Validate foreign key on GroupHooks. !60527
• Bump capybara gem version. !60532
• Remove unused :auto_create_cluster_management_project feature flag. !60550
• Refactor Webex Teams integration settings text. !60565
• Removed feature flag for Pipeline editor merged YAML tab. !60659
• Invalid invite tokens should redirect to the GitLab product. !60666
• Remove search_track_unique_users feature flag. !60706
• Prepare devops adoption database structure for migration. !60733
• Remove optimize_shifting_relative_positions feature flag. !60792
• updating hover state to match other pipeline graph buttons. !60801 (Matt Saddington @mattsaddo)
• Make RecalculateProjectAuthorizations background migration no-op. !60825
• Create database structure to support project value streams. !60925
• Remove invalidated CI Syntax Templates Experiment. !60937
• Update messages when user cannot directly push code to project. !61071
• Remove feature flags related with tracking using Redis HyperLogLog for code review events. !61078
• Merge branch 'mo-update-artifact-documentation' into 'master'. !61084
• Update projects approval rules Usage Data metrics. !61106
• Add issue tracker integrations help text. !61158
• Update checkbox styles in "Group" -> "Settings" -> "General" -> "Permissions, LFS, 2FA". !61294
• Update usage ping metrics for group configure. !61373
• Decrease space between invite and import members buttons to align with Pajamas spacing. !61396
• Update button styles, spacing, variants and responsive behavior for the Tags page. !61413
• Remove sort_diffs feature flag. !61440
• Reschedule DropInvalidVulnerabilities and track jobs. !61491
• Geo: Remove released feature flag geo_package_file_verification. !61568
• Remove update merge request related feature flags. !61569
• Fix inconsistent cancel merge train button label. !61597
• Updating button variant and adding tooltip for the SSH delete key button. !61626
• Add draft column to merge_requests table. !61681
• Lowers the z-indexing of the pipeline drawer. !61683
• Update temporary NuGet packages to have processing status. !61724
• Log additional package extraction errors. !61745
• Remove issuable destroy service related FFs. !61764
• Change wording for design management upload. !61782

13.11.7 (2021-07-07)

Security (1 change)

• Disable file and network premailer strategies (merge request)

13.11.6 (2021-07-01)

Added (1 change)

• Added omniauth_user check when verifying user cap (merge request) GitLab Enterprise Edition

Security (15 changes)

• Bump rails gem version to 6.0.3.7 (merge request)
• Update rdoc to 6.3.1 (merge request)
• Prevent GraphQL API access by deactivated users (merge request)
• Add sanitizing for name field (merge request)
• Copy feature visibility settings to a fork (merge request)
• Avoid disclosing project in web IDE (merge request)
• Add new username validation (merge request)
• Allow only same-origin URLs for Edit Release Cancel button (merge request)
• Limit creation of issues based on issue type (merge request)
• Update Nokogiri to 1.11.4 (merge request)
• Fix deploy key fallback issue in protected branch (merge request)
• Fix XSS on audit log for feature flag actions (merge request)
• Sanitize input on pasteGFM (merge request)
• Add total http read timeout (merge request)
• Fix merge request diff display issue with unsupported encoding (merge request)

13.11.4 (2021-05-14)

Fixed (3 changes)

• Fix N+1 SQL queries in PipelinesController#show. !60794
• Omit trailing slash when proxying pre-authorized routes with no suffix. !61638
• Omit trailing slash when checking allowed requests in the read-only middleware. !61641

13.11.3 (2021-04-30)

Fixed (1 change)

• Fix Instance-level Project Integration Management page for GitLab FOSS. !60354

13.11.2 (2021-04-27)

Security (5 changes)

• Prevent tokens with only read_api scope from executing mutations.
• Do not allow deploy tokens in the dependency proxy authentication service.
• Disable keyset pagination for branches by default.
• Bump Carrierwave gem to v1.3.2.
• Restrict setting system_note_timestamp to owners.

13.11.1 (2021-04-22)

Changed (1 change)

• Change unsubscribe language for email campaign on self managed. !59121

Added (1 change)

• Add documentation about Pages deployment migration. !59475

13.11.0 (2021-04-22)

Security (3 changes)

• Update to Rails v6.0.3.6. !59328
• Update mermaid to version 8.9.2.
• Allow to disable exiftool depending on env variable.

Removed (10 changes, 1 of them is from the community)

• Redirect deprecated pipeline routes. !53990
• Remove CI lint button from Jobs page nav. !56854
• Remove graphql_individual_release_page feature flag. !56882
• Remove deprecated repository archive routes. !57236
• Remove add issues modal from issue boards (this has been disabled since 13.6). !57329
• Remove unused feature flag ':roadmap_buffered_rendering'. !57486
• Remove HipChat integration from frontend and docs. !57556
• Remove temporary index from vulnerabilities table. !57656 (Huzaifa Iftikhar @huzaifaiftikhar)
• Remove unused feature flag checks. !58469
• Remove ability to create new service templates. !58624

Fixed (175 changes, 90 of them are from the community)

• Update gatsby project template to address the pipeline failure. !37410 (Takuya Noguchi)
• Fixed an issue where the link commit message did not end with a newline. !49086 (Kazuya Kojima)
• Partially fix incorrect icons for non-standard license files. !53207
• Add language- prefix to CSS class of markdown code blocks. !55076 (Camil Staps)
• Filter out pipelines that were excluded in the relation scope in Ci::Pipeline#latest_pipeline_per_commit. !55657 (Cong Chen @gentcys)
• Fix mermaid diagrams in dark mode. !56183
• Catch network errors. !56457 (Shubham Kumar (@imskr))
• Fix the Maven sync worker to not fail if the versionless package is not found. !56514
• Fix #current_authenticated_job when used with .authenticate_with in Grape APIs. !56564
• Move graphql timelogs to CE. !56633 (Lee Tickett @leetickett)
• Fix bug in wiki link rewriter filter. !56636
• Fix bug in Gollum Tags filter. !56638
• Fix derivation of effective permissions (access level) of group members. !56677 (Jonas Wälter @wwwjon)
• Fix word wrapping in parallel diffs. !56713
• Don't close issue label select box on click if only mouseup outside. !56721 (Simon Stieger @sim0)
• Fix reference widget icon and text spacing. !56759
• Fix test report merge request widget summary and issues alignment. !56768
• Fix artifacts section from showing up when no artifacts are present. !56784
• Push confidential_notes feature flag to mr frontend. !56798 (Lee Tickett @leetickett)
• Fixed offenses Layout/BeginEndAlignment. !56827 (Shubham Kumar (@imskr))
• Close DropLab dropdowns on click instead of mousedown. !56847 (Simon Stieger @sim0)
• Add labels to UI toggles. !56848
• Fix offense Layout/RescueEnsureAlignment. !56870 (Shubham Kumar (@imskr))
• Fixes offense Lint/RedundantSafeNavigation. !56884 (Shubham Kumar (@imskr))
• In admin new user page, fix external checkbox warning hide with keyboard interaction. !56896
• Fix Conan project-level API to return correct download-urls and fix Conan project-level functionality. !56899
• Remove Kramdown patch and update to v2.3.1 gem. !56917
• Fixed styling of commit comment buttons. !56982
• Update weight transaltion for Russian locale. !56986 (Gennady Kovalev (@belolap))
• Fixes rubocop offense Migration/DepartmentName. !56997 (Shubham Kumar (@imskr))
• Do not render empty title in HelpPopover. !57025
• Validate import manifest url scheme. !57071
• Inherit default branch name for subgroups. !57101
• Fix ruby alpine CI template. !57109
• Fix rails binding for ruby alpine template. !57112
• Update admin edit button icon class. !57151
• Fix branch switch to be exact instead of partial match. !57197
• Add aria labels to icon buttons. !57261
• Ensure search param is kept in scrolled commit. !57307
• Fix remote_mirrors usage ping metric. !57332
• Remove calls to jQuery animations to fix infinite scrolling on the Repository commits page. !57379
• Hide project-specific views on group / instance level integrations. !57381
• A blocked URL for a push mirror is a hard failure. !57392
• Fix usage data count start/finish export issue. !57403
• Fix tooltip position in mini pipeline chart. !57425
• Use search param in refs call to filter revisions. !57442
• Update the Package settings to use the blue primary button. !57468
• Always save default on empty values in Exp Policies. !57470
• Allow all file types to be uploaded from the repo file upload tool. !57498
• Fix Assignee dropdown showing assignee(s) twice. !57513
• Fix inconsistent production environment definition on VSA. !57557
• Fix namespace validation (unique path) on group creation. !57563 (Jonas Wälter @wwwjon)
• Give better feedback when quick actions have no effect. !57570 (Hilco van der Wilk)
• Fix security report fetching in Merge Requests. !57574
• Display error message when runner installation instructions modal cannot be loaded correctly. !57588
• Fix two data races in the branch names cache. !57607
• Add aria labels to icon-only buttons. !57610
• Fix Rails/SaveBang rubocop offenses in spec/controllers/projects/*. !57643 (Abdul Wadood @abdulwd)
• Fix Rails/SaveBang Rubocop offenses for admin controllers. !57644 (Huzaifa Iftikhar @huzaifaiftikhar)
• Make NuGet SearchQueryService q parameter optional. !57654 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix MR Source Branch styling. !57662
• Fix updating GraphQL boards cards on assignees update. !57687
• Revert Ignore default_enabled value in Feature.enabled?. !57707
• Simplify Build Group name correction. !57739
• Fix force_random_password option when creating Users via API. !57751
• Fix issue where merge description not showing when merged with merge train. !57787
• Covert has-tooltip on commit page to pajamas. !57858
• Fix Rails/SaveBang rubocop offenses in spec/controllers/groups*. !57879 (Abdul Wadood @abdulwd)
• Fix Rails/SaveBang Rubocop offenses for requests module. !57883 (Huzaifa Iftikhar @huzaifaiftikhar)
• Disable trigger manual job button after click. !57885
• Fix Rails/SaveBang rubocop offenses in auth controllers. !57886 (Abdul Wadood @abdulwd)
• Fix Rails/SaveBang Rubocop offenses for requests/api module. !57887 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix Rails/SaveBang Rubocop offenses for presenters. !57888 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix Rails/SaveBang rubocop offenses in profiles & projects controllers. !57890 (Abdul Wadood @abdulwd)
• Fix Rails/SaveBang rubocop offenses in spec/features/admin. !57891 (Abdul Wadood @abdulwd)
• Fix Rails/SaveBang rubocop offenses in spec/features/dashboard. !57898 (Abdul Wadood @abdulwd)
• Fix Rails/SaveBang rubocop offenses in spec/features/issues. !57900 (Abdul Wadood @abdulwd)
• Fix Rails/SaveBang rubocop offenses in spec/features/projects. !57904 (Abdul Wadood @abdulwd)
• Fix Rails/SaveBang rubocop offenses in spec/features/. !57907 (Abdul Wadood @abdulwd)
• Fix Rails/SaveBang Rubocop offenses for hooks module. !57918 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fixes rubocop offenses Style/RedundantSelfAssignment. !57920 (Shubham Kumar (@imskr))
• Fix closed icon for merge requests to match close issue icon. !57981 (jesus beltran)
• Resolves offenses Style/ParallelAssignment. !57999 (Shubham Kumar (@imskr))
• Resolves offenses Style/RedundantAssignment. !58013 (Shubham Kumar (@imskr))
• Fix Rails/SaveBang Rubocop offenses for deployment modules. !58040 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix Rails/SaveBang Rubocop offenses for mattermost modules. !58048 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix Rails/SaveBang rubocop offenses in spec/initializers. !58049 (Abdul Wadood @abdulwd)
• Fix Rails/SaveBang Rubocop offenses for issue models. !58052 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix Rails/SaveBang Rubocop offenses for legacy github import. !58054 (Huzaifa Iftikhar @huzaifaiftikhar)
• Resolves rubocop offenses Rails/WhereNot. !58062 (Shubham Kumar (@imskr))
• Fix Rails/SaveBang Rubocop offenses for markdown cache modules. !58063 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix Rails/SaveBang Rubocop offenses for commit models. !58069 (Huzaifa Iftikhar @huzaifaiftikhar)
• Only link merge requests to successful deployments. !58072
• Fix Rails/SaveBang Rubocop offenses for gitaly client models. !58089 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix Rails/SaveBang Rubocop offenses for email handlers. !58095 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix Rails/SaveBang rubocop offenses in spec/factories_spec.rb. !58102 (Abdul Wadood @abdulwd)
• Fix Rails/SaveBang Rubocop offenses for ci models. !58104 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix Rails/SaveBang Rubocop offenses for banzai modules. !58108 (Huzaifa Iftikhar @huzaifaiftikhar)
• Ensures that the "Suggest GitLab CI" popover is shown after selecting a template type. !58120
• Fix EmptyLineAfterFinalLetItBe Rubocop offenses for groups controller. !58174 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe Rubocop offenses for boards module. !58180 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe offenses for error tracking module. !58182 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe Rubocop offenses for groups module. !58183 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe offenses for design management module. !58189 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe Rubocop offenses for metrics module. !58190 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe Rubocop offenses for helpers. !58192 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe Rubocop offenses for api entities. !58193 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe Rubocop offenses for api helpers. !58194 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix overflow UI bug with longer commit title on Wiki Page History. !58212 (Takuya Noguchi)
• Fix EmptyLineAfterFinalLetItBe offenses in spec/graphql/types. !58241 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe offenses in spec/lib/banzai. !58242 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe in spec/lib/gitlab/alert_management. !58244 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe offenses in spec/lib/gitlab/analytics. !58245 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe offenses in spec/lib/gitlab/auth. !58246 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe offenses in spec/lib/gitlab/checks. !58248 (Huzaifa Iftikhar @huzaifaiftikhar)
• Disable pages_serve_with_zip_file_protocol by default. !58253
• Fix EmptyLineAfterFinalLetItBe offenses spec/lib/gitlab/github_import. !58256 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe offenses in spec/lib/gitlab/graphql. !58261 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe offenses in spec/lib/gitlab/hook_data. !58262 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe offenses spec/lib/gitlab/import_export. !58264 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe offenses in spec/lib/gitlab/jira_import. !58266 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix visibility filter on explore projects page. !58293 (Jonas Wälter @wwwjon)
• Fix EmptyLineAfterFinalLetItBe in spec/lib/gitlab/phabricator_import. !58297 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe offenses in spec/lib/gitlab. !58314 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe offenses in spec/mailers. !58319 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe offenses in spec/models/blob_viewer. !58325 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe offenses in spec/models/ci. !58327 (Huzaifa Iftikhar @huzaifaiftikhar)
• Update the group permission check in packages finder helper. !58329
• Fix EmptyLineAfterFinalLetItBe offenses in spec/models/concerns. !58367 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe offenses in spec/models/project. !58372 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe offenses in spec/policies. !58393 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe offenses in spec/serializers. !58406 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe offenses in spec/services/award_emojis. !58407 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe offenses in spec/services/boards. !58413 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe in spec/services/design_management. !58416 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe offenses in spec/services/environments. !58418 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe offenses in spec/services/groups. !58423 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe offenses in spec/services/ide. !58424 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe offenses in spec/services/issues. !58425 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fix EmptyLineAfterFinalLetItBe offenses in spec/services/merge_requests. !58429 (Huzaifa Iftikhar @huzaifaiftikhar)
• Add aria labels to icon-only buttons. !58459
• Fixes admin ci variables not showing up. !58496
• Fix previous deployment fetches wrong deployment. !58567
• Fix delete source branch status message. !58605
• Fix member autocomplete sort order. !58652
• Show bottom border on milestones sidebar widget for incident issues. !58662
• Fix project access token creation group settings link. !58686
• Avoid listing snippets through GraphQL when user profile is private. !58739
• Fix notification when new Service Desk Issue is created. !58803
• Fix dark mode colors of retried jobs in job details page. !58855
• Fix Forward Deployment Worker causes deadlock. !58861
• Fix select2 dropdowns in dark mode. !58862
• Fix badge s and borders in dark mode info wells. !58875
• Dark mode nav improvements. !58891
• Fix style for adding a related issue in free tiers. !58893 (Michael Telgkamp @michael.telgkamp)
• Fix user reference transformation in EpicsPipeline. !58913
• Avoid inflating Redis memory when aborting pipelines. !59018
• Fix sign out button in error pages. !59030
• Add aria labels to icon-only buttons. !59037
• Skip Rack Attack rate limiting for container registry event API. !59085
• Fix loading pipelines by commit SHA for GraphQL. !59110
• Drop user pipelines async when user is blocked. !59129
• IPython KaTeX rendering of comparison operators for markdown. !59132 (Reinhold Gschweicher pyro4hell@gmail.com)
• Fix MR diff file tree being hidden behind review bar. !59150
• Add invited group members to search results on assignees widget. !59152
• Fix tooltip not rendering. !59202
• Fix revert commit query. !59356
• Do not show sort by project in Package project page. !59367
• Return 403 status code to the Runner when CI Job is deleted. !59382
• Fix character escaping in Resolved By tooltips. !59428
• Fix Jenkins integration for GitLab FOSS. !59476
• Exclude projects dropdown from revert modal. !59504
• Ensure all tooltips appear with a 500ms delay. !59561
• Added feature flag to show/hide assignees GraphQL widget. !59620
• Fix rare race condition in GitLab-internal feature flags with database load balancing enabled.

Deprecated (5 changes, 1 of them is from the community)

• Rename event to action in Snowplow helpers and FE event handlers. !55698
• Deprecate Product Intelligence test aggregated metrics. !57377
• Bump recommended Redis version from 4.0 to 5.0. !59072 (Takuya Noguchi)
• Deprecate Alerts for Managed Prometheus. !59433
• Deprecate assigneeUsername issue filter in GraphQL. !59538

Changed (211 changes, 76 of them are from the community)

• Adds CI pipeline and job features to GraphQL API. !44703
• Unify the Docker Image build CI template and use the default branch instead of hardcoded 'master'. !51931 (dnsmichi)
• Update performance bar background color to use Pajamas compliant colour palette. !52775 (Yogi (@yo))
• Remove extra tooltip from pipelines overview page. !52902 (Yogi (@yo))
• Update RubyGems metadata constraints and add gem metadata extraction. !53673
• Returns deep stringified keys for merged_yaml in linting endpoint. !54336
• Add space to graph in contributor page. !54431 (Yogi (@yo))
• Move from btn-success to btn-confirm in app/views/profiles directory. !54748 (Yogi (@yo))
• Add multi-line styling within contribution tooltip. !54765 (Yogi (@yo))
• Update import statuses texts and icons. !54957
• Add branch names field to repository GraphQL type. !55074
• Remove referencing TokenWithIv model in the codebase and dynamic nonce creation feature flag. !55209
• Move to btn-confirm from btn-success in views/invites directory. !55293 (Yogi (@yo))
• Add validation for emails on push recipients. !55550
• Migrate bootstrap modal to GlModal for repo single file uploads. !55587
• Record sent in-product marketing emails and don't send the same email twice. !55840
• Alerts integration form UX cleanup. !55892
• Sync single-file mode user preference when changed from the MR cog menu checkbox. !55931
• Remove group member: add option to also remove direct user membership from subgroups and projects. !55980 (Jonas Wälter @wwwjon)
• Move to btn-danger for delete button in applications. !56088 (Yogi (@yo))
• Apply new GitLab UI for badge in starrers page. !56091 (Yogi (@yo))
• Move to btn-confirm from btn-primary in wiki empty state. !56192 (Yogi (@yo))
• Move to btn-confirm in download directory dropdown. !56193 (Yogi (@yo))
• Add btn-default class for Service Desk toggle in settings. !56195 (Yogi (@yo))
• Move to confirm variant from success in pipeline_new directory. !56199 (Yogi (@yo))
• Move to confirm varient from success in pipeline_editor directory. !56200 (Yogi (@yo))
• Move from btn-success to btn-confirm in pipeline_schedules directory. !56201 (Yogi (@yo))
• Move to confirm variant from success in feature_flags directory. !56202 (Yogi (@yo))
• Move to confirm variant from success in alert_management directory. !56206 (Yogi (@yo))
• Move from btn-success to btn-confirm in tracings directory. !56209 (Yogi (@yo))
• Move from btn-success to btn-confirm in logs directory. !56211 (Yogi (@yo))
• Move from btn-success to btn-confirm in environments directory. !56212 (Yogi (@yo))
• Move from btn-success to btn-confirm in blob directory. !56213 (Yogi (@yo))
• BulkImports: Track pipeline worker with BulkImports::Tracker#status. !56242
• Update master to main inside monitor copy. !56264
• Project Settings Operations headers Alerts/Error tracking/Jeager tracing/Jeager tracing expand/collapse on-click/on-tap. !56269 (Daniel Schömer)
• Project Settings Operations header Grafana authentication expand/collapse on-click/on-tap. !56270 (Daniel Schömer)
• Add support for commit_email to Users API. !56272
• Project Settings Operations header Incidents expand/collapse on-click/on-tap. !56273 (Daniel Schömer)
• Project Settings Operations header Metrics dashboard expand/collapse on-click/on-tap. !56274 (Daniel Schömer)
• Clean up integration form titles and password fields. !56309
• Move from btn-success to btn-confirm in branches directory. !56325 (Yogi (@yo))
• Move from btn-success to btn-confirm in cleanup directory. !56329 (Yogi (@yo))
• Move from btn-success to btn-confirm in default_branch directory. !56330 (Yogi (@yo))
• Move from btn-success to btn-confirm in deploy_keys directory. !56331 (Yogi (@yo))
• Move from btn-success to btn-confirm in forks directory. !56333 (Yogi (@yo))
• Move from btn-success to btn-confirm in hooks directory. !56334 (Yogi (@yo))
• Move from btn-success to btn-confirm in imports directory. !56336 (Yogi (@yo))
• Allow setting the shard/replica separately for standalone indexes. !56344
• Move from btn-success to btn-confirm in network directory. !56345 (Yogi (@yo))
• Move usage of delayed_project_removal to namespace settings. !56397
• Update buttons on issue page. !56425
• Create new policies for read, destroy, and create tokens. !56464
• Update Jira issues list to use new UI components. !56465
• Move from btn-success to btn-confirm in protected_branches directory. !56477 (Yogi (@yo))
• Move from btn-success to btn-confirm in protected_tags directory. !56478 (Yogi (@yo))
• Move from btn-success to btn-confirm in runners directory. !56485 (Yogi (@yo))
• Enable new RPC call to retrieve wiki files. !56491
• Center the pipeline stages dropdown in the commit details page. !56505
• Update mini pipeline appearance in commit page to match other mini pipelines in the application. !56510
• Disable pipeline schedules when a user is blocked. !56513
• Add Username to Email From Header in Notifications. !56588
• WebIDE show fork button when cannot push code. !56608
• Add empty state CTA in pipeline editor section for new root CI files. !56665
• Support newlines for the chatops "run" command. !56668
• Adds skipped state to duration cell for single stage manual pipelines. !56669
• Support for --prefer-source option for Composer registry. !56693
• Allow Email Replies to Notes to Create Discussions. !56711
• Add id and short_sha GraphQL fields to jobType in the CI namespace. !56714
• Remove the commit message from the package details UI. !56716
• Assignee dropdown in issue page displays only participants by default. !56742
• Render Kramdown format using Gitlab markup. !56750
• Relax version validation on generic packages. !56755
• Show popovers on hover and focus by default. !56778
• Change icon size in the pipeline editor. !56780
• Show password hint only if password_authentication_enabled_for_web? on new location logins. !56783 (Roger Meier)
• Add Vulnerabilities::FindingEvidence model. !56790
• Update compare branches button to btn-confirm. !56791
• Update buttons and spacing on commit page. !56793
• Update secondary nav elements right margin to 8px. !56794
• Add created_at to job webhooks. !56835
• Rename pipelines setting to CI/CD and move out from under repository section. !56857
• Change the way deprecation information is presented in GraphQL documentation. !56864
• Validate null constraint for cluster token name. !56868
• Move from btn-success to btn-confirm in projects/services directory. !56937 (Yogi (@yo))
• Move from btn-success to btn-confirm in projects/settings directory. !56938 (Yogi (@yo))
• Move from btn-success to btn-confirm in projects/snippets directory. !56939 (Yogi (@yo))
• Move from btn-success to btn-confirm in projects/tags directory. !56940 (Yogi (@yo))
• Move from btn-success to btn-confirm in projects directory. !56943 (Yogi (@yo))
• Move from btn-success to btn-confirm in registrations directory. !56944 (Yogi (@yo))
• Move from btn-success to btn-confirm in users directory. !56945 (Yogi (@yo))
• Adjust gitlab_database_transaction_seconds histogram bucket. !56952
• Add extra fields to the external pipeline validation payload. !56969
• Change assignee dropdown invite to utilize invite modal. !57002
• Enable DISTINCT optimization for ObjectHierarchy globally. !57052
• Redirect to the pipeline editor when clicking on CI/CD quick links. !57085
• Update learn gitlab template for new registrations. !57098
• Add loading icon to create merge request button. !57105
• Move Pipeline Editor repo link outside of feature flag conditional. !57144
• Show the Contribution Analytics promotion page for users without permission. !57222
• Show skipped duration state for all skipped pipelines. !57242
• Add Runner ID as title in Runner details page. !57247
• Remove feature flag usage_data_track_ci_templates_unique_projects. !57280
• Deprecate but keep support for Klar up to version 3. A new analyzer based on Trivy will be used from version 4 onwards. !57281
• Hydrate some of the variables in the Overview tab suggestion commit placeholder by switching the Diffs data source for it. !57419
• Remove Slack attachment from new issues created via Slash commands. !57431
• Make VALIDATION_REQUEST_TIMEOUT configurable. !57521
• Remove programmatic access to registration tokens. !57524
• Update Jira subscriptions list to use Vue. !57561
• Update runner badges look and feel in admin runners table. !57566
• Rename jobs to promote a smoother transition between Klar and Trivy based scanners. !57593
• Do not trim input for sample & test payload on alerts integration form. !57617
• Allow a Global ID to be used when filtering issue by iterationId in GraphQL. !57620
• Add tags field to jobType in the CI namespace. !57631
• Expose createdAt and updatedAt fields for Board in the GraphQL API. !57645
• Update validation trigger flow on the alerts integration form. !57697
• Remove groupId and projectId arguments to Runner install instructions. !57720
• GraphQL: expose milestone iid. !57732
• Move commit neighbor buttons to sticky MR controls. !57743
• Update title on revoke member invite modal and hide unneeded related issues and merge requests checkbox. !57755
• Deprecate btn-warning on admin area delete user modal. !57761
• Remove deprecated button classes from issue detail view. !57763
• Utilize btn-tertiary for copy project id on project overview. !57766
• Remove top margin for print layout. !57824
• Fail batch-aborted pipelines with reason. !57838
• Replace deprecated Close Milestone button on list view. !57871
• Replace deprecated button on new epic creation form. !57874
• Hide pipeline filtered search when no pipeline exists. !57881
• Add gl-badge for badges in group members page. !57933 (Yogi (@yo))
• Add gl-badge for badges in project members page. !57934 (Yogi (@yo))
• Display error message when dashboard activity fetch fails. !57935
• Add gl-badge for badges in dashboard nav. !57936 (Yogi (@yo))
• Update GIicon size in geo_node_header.vue. !57952 (singhanshuman)
• Move to confirm variant for buttons in vulnerabilities page. !57961 (Yogi (@yo))
• Add gl-badge for badges in MR page nav. !57969 (Yogi (@yo))
• Align project stars and date to center of project in groups page. !57972 (Yogi (@yo))
• Add btn-icon class for GPG key delete button. !57974 (Yogi (@yo))
• Add btn-default for mirror update button. !57978 (Yogi (@yo))
• Update ruby-magic-static to v0.3.5. !57984
• Reduce button size for revoke button in PAT page. !57989 (Yogi (@yo))
• Apply gl-form-input for fields in GPG keys page. !58002 (Yogi (@yo))
• Apply gl-form-input for fields in new schedule page. !58015 (Yogi (@yo))
• Move to btn-confirm from btn-success in licenses directory. !58024 (Yogi (@yo))
• Move to btn-confirm from btn-success in geo directory. !58031 (Yogi (@yo))
• Move to btn-confirm from btn-success in push_rules directory. !58033 (Yogi (@yo))
• Move to btn-confirm from btn-success in devise directory. !58035 (Yogi (@yo))
• Add btn-default class for toggle button in admin templates. !58041 (Yogi (@yo))
• Move to btn-confirm from btn-success in ee project settings. !58047 (Yogi (@yo))
• Improve UI of Runner Installation instructions: add a loading indicator, use checkmark on selected options, reduce height of modal. !58055
• Update New Issue form description copy from 'wite a comment' to 'wite a description'. !58068
• BulkImports: Import milestone iid. !58107
• Replace deprecated buttons on epic detail view. !58152
• Replace deprecated buttons on board view. !58153
• Small text updates on the SAST Config UI page. !58188
• Update GlIcon size in environments.vue. !58208 (Md. Pial Ahamed (@root.pial))
• Link to revision in version on admin dashboard. !58225 (Yogi (@yo))
• Rename Gitlab to GitLab in admin dashboard. !58228 (Yogi (@yo))
• Remove underline in apply for credit button in k8s page alert. !58232 (Yogi (@yo))
• Add btn-default class for file picker button. !58238 (Yogi (@yo))
• Rename Submit issue to Create issue in boards and docs. !58243 (Yogi (@yo))
• Update label container background and border colour from dark grey to use the same light grey as the board's containers. !58279
• UI improvement of Admin Dashboard top page. !58373 (Takuya Noguchi)
• Add warning icon beside in progress text if pipeline is stuck. !58427
• Set workhorse_extract_filename_base feature flag to default. !58504
• Update resolving alert system notes to use term Recovery Alert. !58513
• Update default spinner color to pajamas. !58517
• Update ruby-magic to v0.3.2. !58537
• Fix HAML in _promote_issue_weights.html.haml. !58546 (Yogi (@yo))
• Update popover placement and cursor on warning icon in PB. !58552 (Yogi (@yo))
• Remove vertical-align-middle from user location and work in profile. !58554 (Yogi (@yo))
• Enable chronological sort order for other items in the performance bar. !58572
• Use GlTable design system component for pipelines table. !58581
• Update MobSF to version 3.4.0 in the SAST template. !58594
• Add count of unique users to receive on-call notification to usage ping. !58606
• Add global callout for Service template deprecation. !58613
• Remove cached_api_merge_request_version feature flag. !58670
• Bump minimum git version to v2.31.0. !58737
• Add a chaos endpoint that signals QUIT. !58755
• Improve runners status icon usability and accessibility in the project settings view. !58781
• Make ref parameter optional in get raw file api. !58787
• Centralize shared state in Authoring section. !58790
• Update default branch in divergence graph. !58871
• Update Pipeline Graph Visualization. !58889
• Move initial pipeline processing to Sidekiq. !58901
• Display runner token and description consistently in the job sidebar and admin list. !58904
• Update ruby-magic to v0.4.0. !58947
• Update search and sort from the branches page. !58951
• Return email confirmation time from email entity. !58957
• Update runner type indicators in view/edit pages. !59005
• Default enable cascading settings feature flag. !59026
• Fix gl-emoji in abuse report page. !59078 (Yogi (@yo))
• Adds new clusters_integrations_prometheus table and model for Prometheus Cluster Integration. !59091
• Include project and build ID in Pages tmp directory. !59106
• Deactivate prune webhook logs worker. !59120
• Reduce pipeline tooltip delay to 0. !59155
• Remove gldropdown_branches feature flag. !59179
• Clarify on welcome page that we do not share any data. !59183
• Schedule artifact expiry backfill again. !59270
• Create prometheus service asynchronously by default when creating a project. !59273
• Show archive notice on empty project. !59286
• Enable in-product emails only for free instances. !59290
• Log all API uploads that exceed max attachment size. !59292
• Pages: Add feature flag to disable deployment to legacy storage. !59298
• Hide What's New for unauthenticated users. !59330
• Add queue label to metrics dispatched by background transaction. !59344
• Update Ruby from 2.5 to 2.7 in Dockerfile templates. !59345 (Takuya Noguchi)
• Update profile SSH key labels to refer to expired keys as "Expired". !59381
• Display project settings runners identifiers consistently. !59383
• Migrate Start Review button on MRs to use confirm variant. !59523
• Update auto-build-image to v0.6.0, updating the included docker to 20.10.6 and pack to 0.18.0. !59525
• Apply new GitLab UI for buttons in create tag page. (Yogi (@yo))

Performance (107 changes, 1 of them is from the community)

• Cache namespace traversal path. !52854
• Use empty-query by default to check database connection. !54366 (Leandro Gomes @leandrogs)
• API JSON caching for tags endpoint. !54975
• Cache open merge requests count in group sidebar. !55971
• Add index on ci_stages to speed up batch pipeline cancellation. !56126
• Backfill traversal_ids for gitlab-org staging. !56293
• Linear version of Namespace#self_and_descendants. !56296
• Add database index for cancelable ci_pipelines on user and id. !56314
• Improve the performance of Merge Request Analytics table. !56380
• Move fetching projects and groups on todos page to API call. !56507
• Fix Workhorse acceleration for encoded project IDs in API. !56731
• Prevent sticking to DB primary when experiments are tracked. !56852
• Move link icon to CSS. !56980
• Drop unused preload from PipelineSerializer. !56988
• Speed up destroying of group Todos when user leaves group. !56995
• Optimise query for Deployment#previous_environment_deployment in LinkMergeRequestWorker. !57039
• Optimize database performance of loading assigned issue count on header bar. !57073
• Backfill traversal_ids for gitlab-org .com. !57075
• Check access only for requesting user when checking if subscribed. !57201
• Add gin index for namespaces.traversal_ids. !57207
• Accelerate uploads via API with Workhorse. !57250
• Add additional index to merge_requests table for project/status/created_at. !57267
• Preload group parent to fix N+1 queries for project search. !57277
• Preload additional data to fix N+1 queries for merge request search. !57284
• Remove N+1 for API commits/:sha/merge_requests. !57290
• Remove N+1 for API :id/deploy_keys. !57295
• Reduce query count for ExpirePipelineCacheWorker. !57304
• Remove N + 1 for milestones issues. !57349
• Add partial index to improve mirrors update. !57353
• Apply optimizations to JobsController#show.json. !57367
• Fix N+1 issue when loading merge request comments. !57374
• Perform more merge request creation tasks asynchronously to improve response times. !57453
• Fix N+1 for searching notes (comments) scope. !57460
• Resolve N + 1 for JIRA pulls. !57482
• Make ci_runner_builds_queue_on_replicas default. !57484
• Reduce queries on group labels controller. !57517
• Reduce number of queries in mergeRequestSetAssignees GraphQL mutation. !57523
• Reduce N+1 queries in creating todos after user mentions in a note. !57525
• Optimize Deploy Keys Presenter. !57551
• Add index to improve project deployments endpoint performance. !57554
• Resolve N + 1 for deployments API. !57558
• Cache merge request diff version API. !57568
• Reduce SQL requests number for issue links. !57602
• Avoid N+1 query when updating todo count cache. !57622
• Resolve N + 1 for commits notes API. !57641
• Resolve more N+1 issues in Jira pulls API. !57658
• Reduce number of SQL queries in Profiles::SlacksController#edit. !57674
• Preload all user callouts in a single request. !57679
• Add TargetProject And SourceBranch Index To MergeRequest. !57691
• Optimize group level Maven package finder query. !57692
• Remove ci_lower_frequency_trace_update feature flag. !57713
• Cache MRs count on milestone page. !57714
• Fix N+1 for searching milestone scope. !57715
• Avoid N+1 queries in breadcrumbs. !57725
• Move project hooks routes under /-/ scope. !57734
• Add composite index to support epic filtering by award emoji. !57759
• Reduce query count for popular worker ExpireJobCacheWorker. !57773
• Remove feature flag optimize_issue_filter_assigned_to_self. !57775
• Ensure a project iid is set before transitioning on pipeline error. !57783
• Fix N+1 in projects REST endpoint with forked projects. !57798
• Bulk-abort user pipelines on block. !57801
• Move pipelines calculation from widget.json to cached_widget.json. !57822
• Delete all issuable todos asynchronously when issuable is destroyed. !57830
• Reduce queries on projects labels controller. !57864
• Optimize database query for last deployment. !57979
• Fix N + 1 for MilestonesController#merge_requests. !57980
• Minor performance improvement for ref finder. !58099
• Reduce milestone issue list display limit to 500. !58168
• Partial index optimization for namespaces id. !58220
• Add caching to variables calculation of builds. !58286
• Reduce SQL requests on building artifacts. !58339
• Drop unused mirror_data index. !58349
• Add index on file_store for pages_deployments table. !58355
• Eliminage N+1 database queries on the user notifications page. !58397
• Create finder for searching branch names via redis. !58439
• Preload associations in Ci::Pipeline#cancel_running. !58484
• Add new MergeRequests::SyncCodeOwnerApprovalRulesWorker. !58512
• Create the pipelines asynchronously when refreshing merge requests. !58542
• Optimize searching cherry-picked merge requests for linking deployments. !58568
• Use object quarantine directory to enumerate new LFS pointers. !58634
• Resolve merge request todos asynchronously on update. !58647
• Enable cached avatar lookups by email. !58659
• Resolve group_member policy n+1. !58668
• Move CI related paths to cached MR widget. !58711
• Fix N+1 in REST projects and service desk. !58747
• Optimize environment serializer to reduce N+1 problems. !58748
• Handle assignee changes side effects asynchronously. !58783
• Remove paths from BuildArtifactEntity. !58818
• Use fast path helpers in BuildDetailsEntity. !58824
• Add framework for using specialized services to improve performance of MergeRequests::UpdateService. !58836
• Fix N+1 for searching commits. !58867
• Fix N+1 queries to find or initialize services. !58879
• Adjust indices to improve query performance for notification_settings. !58895
• Fix N+1 queries for issues search. !58915
• Optimize query for cherry picked merge requests. !58967
• Cache issues count in sidebar at group level. !59004
• Improve performance by moving TODO creation out of the jobs/request path. !59022
• Eliminate N+1 database queries on the user notifications page within the project notifications section. !59029
• Add migration to index members on user_id, source_id, and source_type. !59051
• Reduce the number of SQL queries executed on Maven file API endpoints. !59136
• Add user index on spam logs. !59151
• Limit number of GraphQL requests tracked in performance bar to 10. !59158
• Add index for the path column on the packages_maven_metadata table. !59241
• Reduce timeouts on tab counts for searches to 5s. !59435
• Add partial index on members to optimize highest access level query. !59455
• Optimize issuable updates. !59468
• Ensure the project iid is set before dropping pipeline. !59626

Added (108 changes, 11 of them are from the community)

• Support adding and removing assignees w/ push opts. !25904
• Add Go Packages as a cache for the Go proxy. !34558 (Ethan Reesor (@firelizzard))
• Allow admin users to define admin notes on groups. !47825
• Resolve nested variable values sent to the runner. !48627
• Hide "Resolve conflicts" button when source branch is protected. !51121 (Marcin Majkowski @marcinmajkowski)
• Allow Add Comment To Review. !51718 (Lee Tickett @leetickett)
• Add click to copy button over project ID. !53224 (Virgile MATHIEU @vmathieu)
• Convert admin mode feature flag to system application setting. !53610 (Diego Louzán)
• Send in-product marketing emails to guide users setting up their groups. !53715
• Automatically try to migrate gitlab pages to zip storage. !54578
• Add user-merge request interaction type. !54588
• Save usage_data_id from versions app in raw_usage_data. !54738
• Create UserPreferences API. !55033
• Support group applications. !55152 (Jonas Wälter @wwwjon, Bastian Blank)
• Ability to add Prometheus as cluster integration. !55244
• Add JavaScript, TypeScript, and React support to the semgrep analyzer. !55257
• Added local_store to Pages settings in gitlab.yml file. !55470
• Add additional fields to dast_site_profiles database table. !55579
• Cascade delayed project removal setting lookup to parent namespace. !55678
• Support automatic transitions of Jira issues. !55773
• Add blocked issues detail popover for boards cards. !55821
• Allow users to mark pages projects as not deployed during migration to zip storage. !55862
• Add dast_profile_secret_variables table. !56067
• Support daily DORA metrics API. !56080
• Track agent token last_used. !56143
• Add CI_COMMIT_AUTHOR predefined variable. !56144 (Craig Andrews @candrews)
• Linking to a single line number in Web IDE. !56159
• Migrate group badges when using Bulk Import. !56357
• Add Ability to Edit Freeze Periods. !56407
• Add GraphQL mutation to delete an existing release asset link. !56417
• Personal access token revoke for managed accounts (feature flag removed). !56427
• Migration: add trial extension type to gitlab_subscription. !56460
• Geo: Prepare snippet_repositories and snippet_repository_registry tables for adding verification. !56596
• User Availability - Allow users to schedule un-setting of their status values. !56649
• Add missing icon for files with .c++ extension. !56650 (Peter Kovář @peter.kovar)
• Add in-page search for all settings pages. !56659
• Support include_ancestors when querying group milestones via GraphQL. !56667
• Add recaptcha to top-level group creation behind feature flag. !56707
• Configure issue and merge request description templates at group level and rolldown description templates in the group hierarchy. !56737
• Enabled phabricator importer by default. !56765
• Generalize alert details status. !56800
• Create database table dast_profiles_pipelines. !56821
• Allow selecting a CI template by providing the template name as a URL param gitlab_ci_yml. !56861
• Group SAML - Check SSO status on Git activity. !56867
• Send email notification on SSH key expiration. !56888
• Support custom tag formats for changelogs. !56889
• Delete records from security_findings table with missing UUID values. !56975
• Link squashed commits using the changelog API. !56985
• Allow users to enable force push to protected branches. !57053
• Add rake tasks for Pages deployment migration. !57120
• Code suggestions correctly add based on multi-line comments. !57125
• BulkImports: Add BulkImports::PipelineWorker to process each BulkImport pipeline on its own background job. !57153
• Connect Registries searches to URL. !57251
• Sort code quality degradations in MR Widget comparison reports. !57258
• Add unified metrics definition YAML file API endpoint. !57270
• Clarify what coverage means on the merge request pipeline section. !57275
• Improve payload format of DORA metrics API. !57314
• Expose timelogs against issues and merge requests in GraphQL. !57321 (Lee Tickett @leetickett)
• Populate missing dismissal information for vulnerabilities. !57347
• Clarify the impact of selecting incidents in the new issue form. !57373
• Add jobs field to the project type. !57376
• When removing a user, warn Admin user is part of an on-call schedule. !57397
• Exposes schedulingType on CiJobType and adds usesNeeds to PipelineType. !57398
• '/projects/:id/repository/compare' supports comparing branches/commits on different projects. !57418 (Exchizz (@Exchizz))
• Add geo database changes for pipeline artifact replication. !57506
• Add more fields to the job type. !57530
• Capture test report summary widget views via usage ping. !57543
• Allow filtering GraphQL alertManagementIntegrations and alertManagementHttpIntegrations by ID. !57590
• Add search functionality to Jira Connect App namespaces. !57669
• Add Conan GraphQL type to package. !57719
• Log message when upload via API exceeds limit. !57774
• Migration: Add cloud column to licenses. !57781
• Re-add swap revisions feature (legacy). !57802
• Add support for SMTP connection pooling when sending emails. !57805
• Add a migration to insert trail plans within SAAS for Ultimate and Premium plans. !57814
• Add link to test case file in the test report for merge requests. !57911
• Upgrade GitLab Pages to v1.37.0. !57946
• Add negative filters for merge requests API. !58021
• Add setting to change default target project for merge requests from forks. !58093
• Support negated filtering of issues by iids, label_name, milestone_title, assignee_usernames and assignee_id in GraphQL. !58154
• User notification when SSH key is set to expire soon. !58171
• Allow user to filter epics by their reaction emoji via GraphQL. !58211
• Add config support for using Microsoft Graph with MailRoom. !58250
• Let users create groups and projects at signup and onboard them through issues on gitlab.com. !58301
• Reschedule background migration to copy projects.container_registry_enabled to project_features.container_registry_access_level. !58360
• Prettify JSON of sample alert payload. !58433
• Add spent quick action alias. !58539 (Lee Tickett @leetickett)
• Add GraphQL endpoint for test report summary for pipelines. !58596
• Show pipeline finished timestamp on MR widget. !58618
• Add Hello World CI Template. !58649
• Make blobs directly accessible through the graphql repository. !58677
• Add target_type column to dast_site_profiles database table. !58723
• Add GraphQL endpoint for a specific test suite in pipelines. !58924
• Add blob filename to attachment content disposition. !58977
• Rollout product_intelligence_metrics_names_suggestions feature flag. !58995
• Support filtering by assignee wildcard in GraphQL board list issues query. !58996
• Remove pages_serve_from_migrated_zip feature flag. !59002
• Enables multiple_cache_per_job feature flag by default. !59016
• Add CODECLIMATE_PREFIX variable to code quality template. !59041
• Add instance_url column to the jira_connect_installations table. !59148
• Remove codequality_backend_comparison feature flag. !59320
• Allow cherry-picking to a fork's parent. !59399
• Add kotlin support to spotbugs-sast job. !59431
• Upgrade GitLab Pages to 1.38.0. !59464
• Add documentation about Pages deployment migration. !59475
• Re-enable serving pages with zip file protocol. !59486
• Enable pipeline_status_for_pipeline_editor by default. !59495
• Extract creation of prometheus service from Projects::CreateService.

Other (160 changes, 74 of them are from the community)

• Resolve Improve text for error No issue found for given params in UI. !45064
• Update gon gem to 6.4.0. !51210
• Initialize conversion of events.id to bigint, and add execute_batched_migrations_on_schedule feature flag to control scheduled background migrations. !51332
• Apply new GitLab UI buttons in the webhooks list. !51977 (Yogi (@yo))
• Fix alignment of folder-caret and actions button in the subgroup list. !52400 (Yogi (@yo))
• Remove JSON endpoint for project container index. !52407 (Takuya Noguchi)
• Update HIPAA logo for project templates. !53270
• Apply GitLab UI button styles to buttons in app/views/shared directory. !53474 (Yogi (@yo))
• Drop non-partitioned audit_events_archived table. !53880
• Add message for repository backup skip. !54285
• Updated MR Approvals to specify settings section. !54985
• Remove markdown from comment search result. !55255
• Deduplicate issue_metrics table. !55285
• Document how to use custom omniauth button icon. !55388 (Diego Louzán)
• Create Cop to enforce using policies framework for administrators. !55693 (Diego Louzán)
• Remove tabindex on skip link that could negatively impact keyboard focus management and order. !55756
• Mark merge request as preparing on create. !56086
• Update Search and Apply buttons to confirm variant to align with Pajamas design system. !56122
• Decrease spacing between controls on the Commit page header. !56129
• Create new unit test tables. !56137
• Convert Commit dropdown to Vue. !56142
• Enable the instance variables UI. !56255
• Set the scope in search context from group issue and MR pages. !56383
• Remove On-call Edit feature flag. !56445
• Fix cop offenses for Style/HashTransformation in app directory. !56579 (Karthik Sivadas @karthik.sivadas)
• Fix cop offenses for Style/HashTransformation in ee directory. !56581 (Karthik Sivadas @karthik.sivadas)
• Fix cop offenses for Style/HashTransformation in lib directory. !56583 (Karthik Sivadas @karthik.sivadas)
• Fix cop offenses for Style/HashTransformation in spec directory. !56586 (Karthik Sivadas @karthik.sivadas)
• Track epic note created via usage ping. !56609
• Aggregate code review metrics. !56734
• Update android template to default branch. !56738
• Stop using json-schema gem for production. !56745
• Refactor docs and UI for Jaeger tracing. !56819
• Add support for the MATERIALIZED keyword when using WITH (CTE) queries in PostgreSQL 12. !56976
• Externalize project deploy keys (edit) strings. !57015 (Jonston Chan @JonstonChan)
• Migrates the expand button in MR reports to GitLab UI. !57021
• Update GitLab Runner Helm Chart to 0.27.0. !57048
• Remove unnecessary use of freeze. !57056 (Lee Tickett @leetickett)
• Remove unnecessary use of freeze. !57057 (Lee Tickett @leetickett)
• Remove unnecessary use of freeze. !57058 (Lee Tickett @leetickett)
• Remove unnecessary use of freeze. !57059 (Lee Tickett @leetickett)
• Remove unnecessary use of freeze. !57060 (Lee Tickett @leetickett)
• Remove the FF skip_dag_manual_and_delayed_jobs. !57086
• Remove the FF ci_trigger_payload_into_pipeline. !57087
• Updated documented K8s snippet to undeprecated API. !57100 (Raimund Hook (@stingrayza))
• Validate NOT NULL constraint on gitlab_subscriptions namespace_id. !57113
• Update button variants on the project boards controller to better align with the Pajamas Design System. !57129
• Remove the recursive_namespace_lookup_as_inner_join feature flag. !57131
• Only display focus mode button at md+ breakpoint and make it the tertiary style. !57139
• Remove feature flag for customize homepage banner. !57147
• Update issuable submit content order, button variants, and button alignment. !57172
• Send invited users to sign up instead of sign in when possible. !57240
• Updated UI text to match style guidelines. !57276
• Enable RedundantFreeze Cop and Remove Remaining Offenses. !57288 (Lee Tickett @leetickett)
• Review and revise Integrations/Asana UI text. !57362
• Add enqueueing of Onboarding Progress to the Invite Service. !57372
• Validate foreign key on ServiceHooks. !57483
• Removed migrate_delayed_project_removal feature flag. !57541
• Migration to cleanup after partitioned web_hook_logs backfill. !57580
• Update BulkImport default page size to 500 in order to process larger page of data. !57594
• Refactor member/invitation services to share common code. !57618
• Fix triggers page externalization. !57637 (Jonston Chan @JonstonChan)
• Add foreign key from web_hooks to groups. !57735
• Remove batch_suggestions feature flag. !57745
• Remove remove_resolve_note feature flag. !57757
• Remove deprecated info button from issue list view. !57762
• Track the different overflows for diff collections. !57790
• Update Jira plugin UI copy. !57793 (Russell Dickenson rdickenson@gitlab.com)
• Rename table/model vulnerability_finding_fingerprints to *_signatures. !57840
• Move to btn-confirm from btn-success in pipelines quotas page. !57861 (Yogi (@yo))
• Remove records without group from webhooks table. !57863
• Updated UI text to match style guidelines. !57884
• Add a template for using Indeni Cloudrail in GitLab. !57919
• Externalise-strings in _ip_limits.html.haml. !58003 (nuwe1)
• Externalise strings in application_settings/_pages.html.haml. !58011 (nuwe1)
• Externalize strings in _performance.html.haml. !58016 (nuwe1)
• Externalise strings in application_settings/_performance_bar.html.haml. !58018 (nuwe1)
• Externalise strings in /application_settings/_realtime.html.haml. !58039 (nuwe1)
• Externalise strings in _registry.html.haml. !58051 (nuwe1)
• Externalise strings in /application_settings/_repository_check.html.haml. !58058 (nuwe1)
• Update Design Management added design icon to be slightly smaller which conforms to the Pajamas design guide. !58086 (Andreas Resch @reschandreas)
• Externalise strings in admin/users/_head.html.haml. !58101 (nuwe1)
• Updating success button to confirm variant and reordering buttons per Pajamas Design System guidelines for buttons. !58112
• Externalize strings in /abuse_reports/index.html.haml. !58132 (nuwe1)
• Use Gitlab::AppLogger in settings. !58134 (Huzaifa Iftikhar @huzaifaiftikhar)
• Fill in all placeholder values in the apply suggestion commit message placeholder text. !58136
• Externalize strings in broadcast_messages/index.html.haml. !58146 (nuwe1)
• Externalize strings in deploy_keys/new.html.haml. !58148 (nuwe1)
• Externalize strings in hook_logs/_index.html.haml. !58155 (nuwe1)
• Externalize strings in projects/_projects.html.haml. !58158 (nuwe1)
• Externalize strings in projects/index.html.haml. !58160 (nuwe1)
• Externalize strings in services/index.html.haml. !58167 (nuwe1)
• Externalise strings in runners/_runner.html.haml. !58168 (nuwe1)
• Externalise strings in spam_logs/_spam_log.html.haml. !58169 (nuwe1)
• Fix EmptyLineAfterFinalLetItBe Rubocop offenses for projects controller. !58176 (Huzaifa Iftikhar @huzaifaiftikhar)
• Externalize strings in _confirmation_instructions_account.html.haml. !58214 (nuwe1)
• Externalize strings in _confirmation_instructions_account.text.erb. !58215 (nuwe1)
• Externalize strings in _confirmation_instructions_secondary.text.erb. !58218 (nuwe1)
• Externalise strings in password_change files. !58219 (nuwe1)
• Externalize strings in unlock_instructions.html.haml. !58227 (nuwe1)
• Externalize strings in passwords/edit.html.haml. !58233 (nuwe1)
• Externalize strings in passwords/new.html.haml. !58236 (nuwe1)
• Externalize strings in sessions/_new_ldap.html.haml. !58267 (nuwe1)
• Externalize strings in registrations/edit.html.erb. !58268 (nuwe1)
• Externalize strings in sessions/_new_crowd.html.haml. !58269 (nuwe1)
• Externalise strings in sessions/new.html.haml. !58274 (nuwe1)
• Externalize strings in sessions/two_factor.html.haml. !58275 (nuwe1)
• Externalize strings in shared/_omniauth_box.html.haml. !58281 (nuwe1)
• Externalize strings in shared/_sign_in_link.html.haml. !58283 (nuwe1)
• Externalise strings in shared/_tabs_ldap.html.haml. !58285 (nuwe1)
• Externalize strings in unlocks/new.html.haml. !58289 (nuwe1)
• Externalise strings in labels/edit.html.haml. !58294 (nuwe1)
• Externalize strings in milestones/_form.html.haml. !58298 (nuwe1)
• Externalize strings in milestones/edit.html.haml. !58306 (nuwe1)
• Externalise strings in runners/edit.html.haml. !58315 (nuwe1)
• Externalise strings in groups/_activities.html.haml. !58324 (nuwe1)
• Externalize strings in groups/_create_chat_team.html.haml. !58328 (nuwe1)
• Externalise strings in groups/_group_admin_settings.html.haml. !58331 (nuwe1)
• Externalises strings in groups/activity.html.haml. !58332 (nuwe1)
• Update pipeline email service UI text. !58377
• Update pot file. !58392
• Updated UI text for Assembla integration to match style guidelines. !58400
• Externalize strings in instance_configuration/_gitlab_ci.html.haml. !58435 (nuwe1)
• Externalize strings in instance_configuration/_gitlab_pages.html.haml. !58437 (nuwe1)
• Externalize strings in help/index.html.haml. !58441 (nuwe1)
• Externalize strings in instance_configuration.html.haml. !58443 (nuwe1)
• Externalize strings in chat_names/_chat_name.html.haml. !58444 (nuwe1)
• Externalizes strings in viewers/_empty.html.haml. !58451 (nuwe1)
• Externalize strings in viewers/_loading_auxiliary.html.haml. !58454 (nuwe1)
• Review and revise Pages settings-related UI text. !58479
• Updated Alert integration UI text to match style guidelines. !58507
• If creating a new issue fails in boards, remove the issue card from a list. !58558
• Enable Layout/SpaceAfterColon cop for HAML. !58564 (Takuya Noguchi)
• Update mattermost integration UI text. !58570
• Update Emails on push UI Text to match style guidelines. !58597
• Updated outdated UI text and docs. !58600
• Update UI text of Jenkins integration. !58623
• Track total_tuple_count for batched migrations. !58675
• Update Project Management metrics definitions. !58710
• Add correlation id in X-Request-ID for external pipeline validation. !58741
• Update UI text from timing to Duration. !58838
• Update Discord integration UI text. !58842
• Update UI text for slack notifications integration. !58845
• Review and revise Redmine Integration UI text. !58899
• Bump devise-two-factor version. !58929
• Update metric definition under verify testing group. !59028
• Remove issue_perform_after_creation_tasks_async feature flag. !59042
• Obtain pipeline validation service token from config not ENV. !59101
• Bump rspec-rails to 4.1.2. !59130
• Add index services on project and type where inherit is null. !59168
• Replace deprecated skeleton loader in the user popover with slightly darker SVG based skelton loader. !59180
• Bump rspec-rails to 5.0.1. !59194
• Update drone integration UI text. !59231
• Add index on (created_at, web_hook_id) to the partitioned web_hook_logs. !59261
• Add index on web_hook_id to partitioned web_hook_logs. !59266
• Add a foreign key from the partitioned web_hook_logs to web_hooks. !59282
• Bump minimum required Go version for workhorse to 1.15. !59347
• Update UI text for TeamCity integration. !59493
• Remove redundant index from epics. !59494
• Externalize strings in labels/new.html.haml. (nuwe1)

13.10.4 (2021-04-27)

Security (6 changes)

• Prevent tokens with only read_api scope from executing mutations.
• Update mermaid to version 8.9.2.
• Do not allow deploy tokens in the dependency proxy authentication service.
• Disable keyset pagination for branches by default.
• Bump Carrierwave gem to v1.3.2.
• Restrict setting system_note_timestamp to owners.

13.10.3 (2021-04-13)

Security (3 changes)

• Check image content type before running exiftool in workhorse.
• Clean only legitimate JPG and TIFF files.
• Update ruby-saml and rexml gems.

13.10.2 (2021-04-01)

Fixed (1 change)

• Fixed rendering of the image blobs. !57479

Added (1 change)

• Improve performance for composer v2 clients. !55169

13.10.1 (2021-03-31)

Security (6 changes)

• Leave pool repository on fork unlinking.
• Fixed XSS in merge requests sidebar.
• Fix arbitrary read/write in AsciiDoctor and Kroki gems.
• Prevent infinite loop when checking if collaboration is allowed.
• Disable arbitrary URI and file reads in JSON validator.
• Require POST request to trigger system hooks.

Removed (1 change)

• Make HipChat project service do nothing. !57434

Other (3 changes)

• Remove direct mimemagic dependency. !57387
• Refactor MimeMagic calls to new MimeType class. !57421
• Switch to using a fake mimemagic gem. !57443

13.10.0 (2021-03-22)

Security (3 changes)

• Workhorse: prevent escaped router path traversal.
• Workhorse: Stop logging when path is excluded.
• Patch Kramdown syntax highlighter gem.

Removed (2 changes)

• Remove Remove from board button from board sidebar. !53946
• Remove workaround for icon loading in Chrome 84. !56114

Fixed (99 changes, 23 of them are from the community)

• Fix button alignment in design management header. !48003
• Updated UI text to match style guidelines. !50383
• Don't close auto suggest select boxes on click if only the mouseup (but not the mousedown) event happened outside the box. !51139 (Simon Stieger @sim0)
• Fix Auto DevOps deploys that use a default branch that's not named 'master'. !53280 (Mitchell Cash @MitchellCash)
• Correct job artifacts API download for expired and locked files. !53567 (Fabio Huser)
• Fix project import error occurring due to default visibility. !53827 (Jonas Wälter @wwwjon)
• Fix relative URL with composer package. !53918
• Cleanup incorrect data in projects.has_external_issue_tracker. !53936
• Fix not skipped manual and delayed DAG jobs. !54073
• Skip orphaned pool repositories on restore. !54112
• Add space next to icons in epic issue list. !54138 (Yogi (@yo))
• Render version dropdowns in MR changes view above tab navbar. !54159 (Simon Stieger @sim0)
• Do not show button to resolve discussion opening an issue when issues are disabled. !54263
• Hide issue count and link in project list for projects with disabled issues. !54275 (Simon Stieger @sim0)
• Handle GlobalIDs with invalid resource names. !54290
• Fix overflowing width - at mention container. !54377
• Update k8s version for EKS cluster. !54389 (Vincent Firmin @winkies)
• React to new DOM nodes being added to the page to bind the user information popover to them. !54411
• move create_release_evidence sidekiq queue out of the cronjob namespace. !54432
• Fix copy to clipboard tooltip button. !54472
• Fix bold text mismatch in MR ⚙ menu. !54531
• Wrap long code lines in markdown. !54540
• Hide repeated trial offers on self-hosted instances. !54550
• Fix bug when snippet blobs array contain a nil value. !54552
• Fix the npm instance level API to exclude subgroups. !54554
• Fix the value of $CI_DEPENDENCY_PROXY_GROUP_IMAGE_PREFIX when used in group with a name containing uppercase letters. !54559 (Eric Engestrom @1ace)
• Fixed typo on Two-Factor Authentication page. !54565 (Jani Uusitalo @uusijani)
• Forcibly load OpenSSL::X509::DEFAULT_CERT_FILE. !54569
• Stop scrollbar stretching filtered search box. !54574
• Correctly style Dark Mode application header in profile preferences. !54575 (Simon Stieger @sim0)
• Prevent removal of the last group owner if the last group owner is a blocked user. !54587 (Jonas Wälter @wwwjon)
• Fix style issue with "reply" placeholder textarea in firefox. !54592
• Update batch_loader gem to v2.0.0. !54639
• Fix rendering of projects when the last pipeline changes during rendering. !54651
• Search: Log search.scope for the default scope. !54684
• Fix double scrollbar in ref selector dropdown. !54719
• Fix double scrollbar issue in milestone selector dropdown. !54734
• Skip two factor setup for help pages. !54739
• Fixed diff notes GraphQL mutation not allowing comments on deleted lines. !54801
• Expand left sidebar Issues when viewing project iterations. !54815
• Added a missing class to reply placeholder. !54817
• Renamed the second project panel to group. !54834 (Niklas van Schrick @Taucher2003)
• Fix double scrollbars in some dropdowns. !54837
• Fix pipeline notifications for Webex Teams / Unify Circuit integrations. !54852
• Github Importer: Import Pull request "merged_at" attribute. !54862
• Fix UTF-8 characters not working with Azure Blob storage. !54875
• Upgrade gitlab-sidekiq-fetcher for correctly detecting interrupted jobs when Sidekiq pods are restarted. !54881
• Include shared with groups in list of authorized groups. !54894
• Fix @ autocomplete selecting the loading icon. !54925
• Fix status cache for upstream pipelines. !54937
• Update gitlab-sidekiq-fetcher to 0.5.5 to handle namespaced queues. !55013
• Use gitlab_web_url (if it exists) for issue title links in Issue lists. !55021
• Fix issue with loading the repository compare page. !55058
• Fix argument type for background migration. !55097
• reconcile source installation and upgrade docs. !55170 (Jörg Behrmann @behrmann)
• Sync the maven metadata file upon package deletion through the UI. !55207
• Fix empty field in custom notification events modal. !55313 (Kev @KevSlashNull)
• Fix 500 error for long commit messages. !55320
• Include MRs for merge commits for changelogs. !55371
• GithubImporter: Add Merge request approval only if it does not exists yet. !55376
• Fix assignees search to show only project members. !55396
• Do not break word in the code blocks under Safari. !55405
• Fix typo in pipeline status email. !55412 (Gabriel Berke-Williams)
• Fix inconsistent heading style in email diffs. !55420
• Ensure Project Approvals API casts to boolean. !55492
• Update fog-aws to v3.9.0. !55528
• Handle relative position on issue move or clone. !55555
• Fix horizontal alignment of MR Changes cog menu dropdown checkboxes. !55591
• checks: Skip LFS checks when deleting refs. !55609
• Fix edited timestamp updated when transforming / resolving comments. !55671 (Mycroft Kang @TaehyeokKang)
• Allow saving repository weights after a storage has been removed. !55689
• Resolve project from branch in commit resolver. !55694
• Update validate_url gem. !55706
• Fixes: No such file or directory lib/pager_duty/validator/schemas/message.json. !55725
• Fix fork thumbnail overflow. !55764
• Change terraform_states.locked_by_user_id foreign key to SET NULL. !55813
• Fix invite member modal dropdown checkbox styling. !55832 (Kev @KevSlashNull)
• Reenable OAuth password grants without client credentials. !55873
• Fixed vestigial Anchor links in doc/development/usage_ping/dictionary.md. !55874 (Raimund Hook)
• Fix 'viewed' checkbox in single-file view mode. !55922
• Fix Web Project Export rate limiting scope. !55975
• Remove merge manually message. !56016
• fix stringify empty position object. !56037
• Fix diff comment hidden dropdown. !56072
• Handle RestClient errors in Discord integration. !56112
• Turn off native autocomplete for ref selector components. !56128
• Handle commits without descriptions for changelogs. !56224
• Support maven plugins packaging in the maven metadata sync worker. !56229
• Use gitlab-fog-google instead of upstream fog-google gem. !56245
• Fix styling of "Enabled OAuth sign-in sources" checkboxes. !56254
• Sanitize issue description in search result. !56256
• Fix bug in wiki page destroy API endpoint when an error is raised. !56285
• Correct generated maven repository instruction for Gradle Groovy DSL. !56318 (Cromefire_ (@cromefire_))
• Add labels to GlToggles. !56387
• Fixed error handling GraphQL API when issue board creation fails. !56467
• Hide fork count and link in project list where forks are disabled. !56520 (Simon Stieger @sim0)
• Fix upgrade banner for Jira issues showing on group / instance level integrations. !56628
• Fix tooltips failing to hide in commit graph on Firefox. !56631 (Jonathan Duncan)
• Hide MR count and link in project list where MRs are disabled. (Simon Stieger @sim0)

Changed (202 changes, 88 of them are from the community)

• Mark startDate and endDate arguments as deprecated in the GraphQL schema for Project.milestones and Group.milestones (FOSS and EE), and Project.iterations, Project.milestones, Group.epic, Group.epics, Group.iterations, Group.milestones, BoardEpic.children, and Epic.children fields (EE-only). Previously these arguments were marked as deprecated only in their descriptions. !45229
• Improve Linked Issues Usability. !50879 (Andrew Minion)
• Make new issue title look like wiki. !50940 (Jacopo Beschi @jacopo-beschi)
• Introduce WebIDE as an extension for Editor Lite. !51527
• Update LaTeX Docker image in CI Templates to TexLive 2020. !52043 (Michael Schmitt @schmitmd)
• Allow creation of iterations in the past. !52403
• Allow overlapping iteration dates with ancestor group iterations and restrict dates overlapping for iterations within same group. !52403
• Send gitlab_standard context with events from the frontend. !52959
• Prefill first multiline commit message for new MRs. !52984 (Max Coplan @vegerot)
• Auto-enable admin mode on privileged environments. !53015 (Diego Louzán)
• Add loading indicator to "Update username" button in account settings. !53142 (Kev @KevSlashNull)
• Replace btn-primary with btn-confirm in Start your free trial button. !53215 (Yogi (@yo))
• Update project page buttons to conform to design system. !53260
• Lift the NPM package naming convention for the project level API. !53266
• Adds ability to have multiple cache per job. !53410
• Improve Jira connect app styling and i18n. !53441
• Restyle the repository compare show page. !53523
• API: include external users in user search for non-admins. !53584 (Jonas Wälter @wwwjon)
• Record onboarding action for issue creation. !53611
• Merge Sentry's contexts into Gitlab::ApplicationContext. !53691
• Add divergedFromTargetBranch field to MergeRequestType to indicate the target branch has diverged from the source branch. !53759
• Provide name of expiring token in personal access token expiration mail. !53766
• Convert merge request widget state to use GraphQL. !53846
• Sidebar confidentiality component updates in real-time. !53858
• Add creator to custom emoji. !53879
• Migrate namespaces delayed_project_removal to namespace_settings. !53916
• Add name field to cluster agent token. !53920
• Apply new GitLab UI for request email button. !53966 (Yogi (@yo))
• Add support for ETag caching when using GraphQL. !53978
• Allow anonymous access to public Conan packages. !54047 (Steve Mokris @smokris)
• Make the Geo OAuth application trusted by default. !54079
• Add description field to cluster agent token. !54091
• Project Settings CI/CD headers expand/collapse on click / tap. !54114 (Daniel Schömer)
• Project Settings CI/CD Variables header expands/collapses on click / tap. !54117 (Daniel Schömer)
• Add Role and Rolebinding for CiliumNetworkPolicies. !54130
• Add btn-default and remove extra right margin. !54134 (Yogi (@yo))
• Update user avatar in sidebar realtime. !54135 (Yogi (@yo))
• Remove illustration in export/import CSV modal. !54136 (Yogi (@yo))
• Update to btn-confirm and align subscription banner. !54137 (Yogi (@yo))
• Remove service desk issue prefix. !54140 (Lee Tickett @leetickett)
• Apply new GitLab UI for learn more button in time tracking. !54142 (Yogi (@yo))
• Apply new GitLab UI for apply template button in new issue. !54143 (Yogi (@yo))
• Remove gl-overflow-scroll in merge instructions modal. !54144 (Yogi (@yo))
• Align merge conflict warning text to center. !54145 (Yogi (@yo))
• Deprecate instanceStatisticsMeasurements in favor of usageTrendsMeasurements GraphQL field. !54153
• Web IDE disallow commit when project has 'reject unsigned commits' rule. !54166
• Add space next to download icon in download artifacts button. !54228 (Yogi (@yo))
• Convert IDE nav form tab to GlTab. !54274
• Add btn-icon class for commit action buttons. !54286 (Yogi (@yo))
• Convert Threat Monitoring environment picker to GlDropdown. !54309
• Allow importing groups as new top-level groups. !54323
• Show user follow button first instead of center. !54326 (Yogi (@yo))
• Update 'Get Started with CI/CD' button with latest URL. !54344
• Log individual user usage of Slack service. !54347
• Add duration and finishedAt GraphQL fields to jobType in the CI namespace. !54358
• Show icon next to reviewers who have approved. !54365
• Add btn-icon for buttons in pipeline schedules. !54426 (Yogi (@yo))
• Restore Sentry functionaly to the frontend. !54441
• Github Importer: Validate repository size before importing. !54449
• Allow search for pipeline by SHA as well as IID via GraphQL. !54471
• Change default API content_type to JSON. !54479
• Added environment details to Job Hook and Pipeline Hook. !54480 (AdrianLC)
• GraphQL: Expose Label "created_at" and "updated_at". !54487
• Move CI_CONFIG_PATH as project variable and deprecate CI_PROJECT_CONFIG_PATH. !54498
• Registry: make delete icon buttons secondary. !54545
• Add GlToggle label in edit feature flag. !54546 (Yogi (@yo))
• Add GlToggle label in sidebar subscription toggle. !54548 (Yogi (@yo))
• Refine Registry Lists and Search Bar UI. !54549
• Remove outdated ci db columns. !54564
• BulkImports: Avoid import ProjectLabels in the Group import level. !54580
• Update default title of alerts to New: Alert. !54621
• Clear Environment Search in CI/CD Variables. !54626
• Only show 2FA badge to project maintainers and group owners. !54646
• Enable pages_serve_with_zip_file_protocol by default. !54650
• Auto-scroll to top of page upon committing in pipeline editor. !54657
• Remove Expiration Policy text from container registry header. !54665
• Reduce elements in Pipeline page dropdowns with lazy. !54674
• BulkImports: Import Label timestamps. !54678
• Improve at.js members autocomplete matching. !54681
• Use Root Image for images with missing name. !54693
• Change the order of action buttons in the configure feature flags modal. !54731
• Remove deprecated button variant in groups, projects and snippets. !54747 (Yogi (@yo))
• Add selected state for ellipsis button in a commit. !54754 (Yogi (@yo))
• Apply new GitLab UI for button in promotion link. !54755 (Yogi (@yo))
• Apply new GitLab UI for buttons in empty label placeholder. !54760 (Yogi (@yo))
• Add selected state for diff view in commit page. !54762 (Yogi (@yo))
• Add selected state for chart button in vulnerabilities dashboard. !54763 (Yogi (@yo))
• Add btn-default class for settings toggle button. !54764 (Yogi (@yo))
• Apply new GitLab UI for badge in runners list. !54766 (Yogi (@yo))
• Better error message when import fails due to backend validation. !54827
• Moved CODEOWNERS tip into approvals Vue app. !54830
• Add a new project feature called container_registry. !54831
• Relax tag requirements when generating changelogs. !54832
• Regroup alerts integration form into tabs. !54842
• Reverts default sort order for Explore Projects to Last updated. !54879
• Fix DOS on Math blocks. !54898
• Added non-null constraint to terraform state name. !54940
• Remove MergeRequestAssigneesMigrationProgressCheck background migration. !54943
• Adjust text explaining content of Operations menu from visibility section of project settings. !54963
• Use info colour for merged search results instead of primary. !55008
• Update button variant to confirm on integration settings page. !55017
• Allow $CI_JOB_TOKEN to access the "Download a single artifact file" endpoints of the Jobs Artifacts API. !55042 (Eric Engestrom @1ace)
• Ignore prerelease tags when generating changelogs. !55065
• Rename comment form textarea label to Comment. !55088
• Add runners api context metadata. !55089
• Reschedule artifact expiry backfill. !55093
• Small visual updates to Git ref selector dropdown on New/Edit Release page. !55121
• Group integration settings buttons to the left. !55139
• Optimize Metrics Dictionary. !55145
• Show nested environments when change tab, page. !55167
• Move to btn-confirm in app/views/devise directory. !55200 (Yogi (@yo))
• Move to btn-confirm in app/views/shared/empty_states directory. !55203 (Yogi (@yo))
• Change the button to Primary Blue. !55204 (Yogi (@yo))
• Update button to btn-confirm on merge requests page. !55218
• Add empty state to pipeline editor section. !55227
• Project Settings Repository Default branch header expand/collaps on click. !55228 (Daniel Schömer)
• Project Settings Repository Mirroring repositories header expands/collapses on click / tap. !55229 (Daniel Schömer)
• Project Settings CI/CD Variables header expands/collapses on click / tap. !55230 (Daniel Schömer)
• Project Settings Repository Protected tags header expands/collapses on click / tap. !55231 (Daniel Schömer)
• Project Settings Repository Cleanup header expands/collapses on click / tap. !55232 (Daniel Schömer)
• Project Settings Repository Deploy tokens header expands/collapses on click / tap. !55233 (Daniel Schömer)
• Project Settings Repository Deploy keys header expands/collapses on click / tap. !55234 (Daniel Schömer)
• Collapse deployments in merge request if many. !55239
• Move to btn-confirm from btn-success in abuse_reports folder. !55262 (Yogi (@yo))
• Move to btn-confirm from btn-success in admin application_settings directory. !55263 (Yogi (@yo))
• Move to btn-confirm from btn-success in admin/appearances directory. !55264 (Yogi (@yo))
• Move to btn-confirm from btn-success in admin/applications directory. !55265 (Yogi (@yo))
• Move to btn-confirm from btn-success in admin/broadcast_messages directory. !55266 (Yogi (@yo))
• Move to btn-confirm from btn-success in admin/deploy_keys directory. !55267 (Yogi (@yo))
• Move to btn-confirm from btn-success in admin/groups directory. !55268 (Yogi (@yo))
• Move to btn-confirm from btn-success in admin/hooks directory. !55272 (Yogi (@yo))
• Move to btn-confirm from btn-success in admin/labels directory. !55273 (Yogi (@yo))
• Move to btn-confirm from btn-success in admin/projects directory. !55274 (Yogi (@yo))
• Move to btn-confirm from btn-success in admin/serverless directory. !55275 (Yogi (@yo))
• Move to btn-confirm from btn-success in admin/users directory. !55276 (Yogi (@yo))
• Move to btn-confirm from btn-success in views/doorkeeper directory. !55277 (Yogi (@yo))
• Move to btn-confirm from btn-success in groups/milestones directory. !55278 (Yogi (@yo))
• Move to btn-confirm from btn-success in groups/settings directory. !55281 (Yogi (@yo))
• Move to btn-confirm from btn-success in groups directory. !55282 (Yogi (@yo))
• Move to btn-confirm from btn-success in views/import directory. !55291 (Yogi (@yo))
• Move from btn-success to btn-confirm in shared/access_token directory. !55298 (Yogi (@yo))
• Move from btn-success to btn-confirm in shared/deploy_keys directory. !55299 (Yogi (@yo))
• Move from btn-success to btn-confirm in shared/deploy_tokens directory. !55300 (Yogi (@yo))
• Move from btn-success to btn-confirm in shared/gitpod directory. !55301 (Yogi (@yo))
• Move from btn-success to btn-confirm in shared/groups directory. !55302 (Yogi (@yo))
• Move from btn-success to btn-confirm in shared/issuable directory. !55303 (Yogi (@yo))
• Move from btn-success to btn-confirm in shared/labels directory. !55304 (Yogi (@yo))
• Bump swagger-ui-dist to 3.44.1. !55310 (Roger Meier)
• Move from btn-success to btn-confirm in shared/members directory. !55315 (Yogi (@yo))
• Move from btn-success to btn-confirm in shared/wikis directory. !55316 (Yogi (@yo))
• Move from btn-success to btn-confirm in shared directory. !55317 (Yogi (@yo))
• Remove suggestions custom commit feature flag. !55344
• Use policies for group access rights as admin. !55349 (Diego Louzán)
• Increase contrast of Solarized Light in Web IDE. !55361
• Enable trace_memory_allocations by default. !55369
• Expose project access token value with create API. !55408
• Allow alert to link to incidents. !55426
• Send notifications to subscribers when merge request draft status removed. !55444
• Show number of files in snippet lists. !55452
• Use CodeQuality packaged with CodeClimate 0.85.23 by default in CI template. !55508
• Simplify notifications dropdown. !55522
• Improve Marginalia comments for API. !55564
• Clarify epic delete warning. !55574
• Exclude duplicates from emails on push recipients. !55588
• Move IDE routes to Rails. !55597
• Update cluster agent tokens with null names. !55673
• Expand nested stopped environments. !55676
• Add fields to BulkImports::Tracker for concurrent work. !55686
• Move to confirm variant from success in 2fa codes component. !55729 (Yogi (@yo))
• Move to confirm variant from success in badges component. !55730 (Yogi (@yo))
• Add Gradle instructions and instruction selector to package details. !55738
• Update text for email config under Incidents in Settings > Operations. !55753
• Display suite errors on test summary page. !55770
• Alert integrations UX cleanup. !55786
• Remove project_transactionless_destroy feature flag. !55795
• Update code owner approval tooltip message. !55842
• Sort milestones within autocomplete dropdown. !55850
• Adjust debug button icon size in job detail page. !55886
• Link fields to types in GraphQL reference documentation. !55901
• Remove vue_project_members_list feature flag. !55902
• Public generic packages can now be accessed by developer, guest and anonymous users. !55978 (Mathieu Parent)
• Port essential database metrics to Sidekiq. !56005
• Add API Fuzzing to Security Configuration page, and re-order scanners. !56022
• Add last_used_at field to cluster agent token. !56023
• Change the default batch_class_name for batched_background_migrations to the unqualified class name. !56036
• Improve styling of user access role badges. !56061
• Temporary make GC.compact no-op. !56079
• Move to btn-default and selected class in toggle comment button. !56090 (Yogi (@yo))
• Apply new GitLab UI for buttons in GitLab Import page. !56095 (Yogi (@yo))
• Apply new GitLab UI for buttons on GitHub Import page. !56096 (Yogi (@yo))
• Move to confirm variant from success in environments directory. !56203 (Yogi (@yo))
• Move from btn-success to btn-confirm in clusters directory. !56205 (Yogi (@yo))
• Remove security & compliance config page feature flag. !56219
• Display in progress for pipeline duration cell when pipeline has not finished running. !56266
• Add project_id to pipeline api. !56339
• Move from btn-success to btn-confirm in milestones directory. !56342 (Yogi (@yo))
• Move from btn-success to btn-confirm in mirrors directory. !56343 (Yogi (@yo))
• Move from btn-success to btn-confirm in pages directory. !56348 (Yogi (@yo))
• Move from btn-success to btn-confirm in pages_domains directory. !56349 (Yogi (@yo))
• Consume check if user is bot from Users API. !56362
• Hide archived projects from group boards project select dropdown. !56452
• Update mailroom to v0.0.9. !56592

Performance (32 changes)

• Limit Project Authorizations refresh for shared groups only to direct members of the group being shared with. !51869
• Remove unneeded transitions on MR for mark_as_unchecked event. !53537
• Preload certain data used in the updating of a merge request. !53802
• Enable codequality report comparison with backend. !54241
• Add preload attribute to markdown videos. !54350
• Improve pull mirroring performance. !54353
• Remove coverage_data_new_finder feature flag. !54486
• Improve performance of builds queuing by introducing a limit on the queue depth. !54579
• Added composite index to epic_issues table and improved performance of loading bigger epic roadmaps. !54677
• Consider only distinct user ids for project authorizations refresh jobs for group members. !54697
• Improve performance of validations when a group has a lot of runners. !54774
• Hardened "add" arithmetic for usage data. !54794
• Harden added metrics. !54805
• Cache /search/count requests in the browser. !55036
• Use recursive approach to query all projects for a namespace. !55043
• Fix N+1s related to per-build metadata lookups. !55053
• Fetch build one-by-one. !55194
• Improve build contention. !55202
• Move branch deletion on merge to async worker. !55390
• Improve performance of manual pipeline form by limiting the refs loaded on page load. !55394
• Fix N+1 queries in api/v3/repos/:namespace/:project/events endpoint. !55442
• Refactor blame view. !55488
• Reduce queries when ticking runner queue. !55496
• Shortcircuit expensive queries in Runner#can_pick?. !55518
• Preload runner tags for UpdateBuildQueueService. !55543
• Batch-load vulnerability findings by UUID. !55642
• Improve a11y of the new project form by marking required fields. !55682
• Reduce DB load when resetting CI minute notifications. !55765
• Remove latest_builds_report_results preloading in pipeline serializer. !56181
• Optimize branch commit resolution. !56204
• Use Namespace#all_projects for NPM package finder. !56415
• Project sharing to use specialized worker to calculate project authorizations. !56606

Added (91 changes, 11 of them are from the community)

• Add setting to control merge when pipeline succeeds notification. !37880 (Ravishankar)
• Adds Request CVE ID button to issue sidebar. !41203
• convert to GlTabs in app/assets/javascripts/ide/components/repo_tabs.vue. !42162 (Brandon Everett)
• Add invite_email Quick Action. !49264 (Lee Tickett)
• Add API endpoint for fetching a single job by CI_JOB_TOKEN. !51727 (ahmet2mir)
• Add API endpoint for deleting stale review envs. !52224
• Add active period columns to on-call rotations. !52998
• Add user preference to turn off selected text keystroke formatting. !53079
• Display success message after successfully adding a namespace in Jira Connect. !53332
• Add groups endpoint for Projects API. !53642
• Add suppport for an end time on on-call rotations. !53675
• Replace scss with stylelint in documentation. !53700
• Add composer cache rake task. !53772
• Limit the payload size of Sidekiq jobs before scheduling. !53829
• Expose failure_reasons in Build#features. !53964
• Create ExternalApprovalRule table and associations. !54002
• Jira Connect app: add ability to select namespace from list of available namespaces. !54037
• Expose container_registry_image_prefix to project API. !54090 (Mathieu Parent)
• Default confidentiality of replies. !54122 (Lee Tickett @leetickett)
• Add environment to custom CI_JOB_JWT claims. !54168
• Make to in the changelog API optional. !54229
• Add API endpoint /application/plan_limits for package file size limits. !54232 (Jonas Wälter @wwwjon)
• Add pagination of file diffs when viewing a large commit. !54236
• Add internal and external URL config for KAS. !54260
• Add Azure ActiveDirectory v2 OmniAuth provider. !54265
• Add application setting for enabling in-product marketing emails. !54324
• Enable customize homepage banner by default. !54357
• Expose epic board list collapsed value via GraphQL. !54541
• Implement passing trigger payload into pipeline variable. !54544
• Support "view_diffs_file_by_file" param in the Users create and update API. !54595
• Add GraphQL mutation to create release asset link. !54605
• Create tables to track auto-batched background migrations. !54628
• Create system note on alert when its auto-resolved via alert integration. !54645
• Add package list to group graphql type. !54672
• Add Import options to projects and groups dropdown. !54749
• Add mutation to accept merge requests. !54758
• Add Operating System details to usage ping. !54778
• Add is_removed column on Oncall Participant model. !54779
• Add reviewers detail to new merge request email. !54781
• Add wiki_size and storage_size to NamespaceStatistics. !54786
• Add branch_name to dast_profiles table. !54891
• Support composer v2 metadata-url. !54906
• Bump auto-deploy-image tag in Deploy.latest.gitlab-ci.yml to v2.6.0, which includes changes to ciliumnetworkpolicies. !54983
• Add CI_JOB_STARTED_AT and CI_PIPELINE_CREATED_AT variables. !54989 (Vincent Firmin @winkies)
• Add styling to de-emphasize nested test reports in merge requests. !55001
• Display parsing errors in test reports MR widget. !55037
• Add user callouts to GraphQL. !55099
• Add 'Followed User Activity' as dashboard user choices. !55165 (Benj Fassbind @randombenj)
• Improve Vulnerability Tracking: Store Fingerprints. !55173
• Cleanup invite_members_version_a experiment. !55178
• Incident management: add issue state to alerts table. !55185
• Document propagate_correlation_id configuration for GitLab Pages. !55205 (Ercan Ucan @ercan.ucan)
• Add Allow force push option to Protected branches. !55261 (Mycroft Kang @TaehyeokKang)
• Add a background migration to copy projects.container_registry_enabled to project_features.container_registry_access_level. !55327
• Add trigger support for matrix jobs. !55348
• Add more explanation about the presented data and show the last updated time on the DevOps Score page. !55357
• Query group projects by ids with GraphQL. !55383
• Allow users to work on non-default branch in pipeline editor. !55413
• Add reviewers detail to merge when pipeline succeeds email. !55463
• Implement needs:job:optional for CI pipelines. !55468
• Add tier column to the environments table. !55471
• Add DORA daily metrics modeling. !55473
• Add setting to control Rails.application.config.hosts. !55491
• Ignore reverted commits when generating changelogs. !55537
• Add reviewers detail to merge request unmergeable email. !55582
• Add reviewers detail to merge request status email. !55584
• Add reviewers detail to merged merge request email. !55589
• Add reviewers detail to text version of closed merge request email. !55594
• Add client_id to application context. !55683
• Allow release to be created on existing tag through the UI. !55697
• Add index for pages migration. !55757
• Remove improved_merge_diff_highlighting feature flag. !55771
• Usage ping: Histogram for enabled integrations per project. !55782
• Add Pages cache configuration settings. !55812
• Add package and quickaction metrics to Metrics Dictionary. !55846
• Enable serving GitLab Pages sites migrated to zip storage. !55847
• Log large multipart messages from Rack. !55933
• Add update GraphQL mutation for Oncall Rotations. !55955
• Cache open issues count in group sidebar. !55968
• Add the ability to cherry pick accross forks. !55970
• Migrate group milestones when using Bulk Import. !55981
• Introduce info column for the security_scans table. !55983
• Support environment deployment tier. !56081
• Add Prometheus metrics for ActionCable subscription events. !56157
• Add reviewers detail to new mention in merge request email. !56184
• Add more settings to group MR approval settings. !56215
• Automatically retarget merge requests upon merge (default on). !56233
• Add section headers for the test report widget on the merge request page. !56252
• Add GraphQL mutation to update existing release asset link. !56265
• Upgrade Pages to v1.36.0. !56295
• Add plan limit for Terraform Module package file size. !56414

Other (74 changes, 9 of them are from the community)

• Add a confirmation prompt to lock and unlock path locks. !44849
• Recalculate UUID for all Vulnerability::Findings. !47529
• Use Created instead of opened when describing issue creation. !49478
• Removes collect_package_events_redis feature flag. !49897
• Fix a crash when logging in using SAML for the first time when sign-ups are disabled. !50216
• Add iterations_cadences table and respective model. !50707
• Migrated Bootstrap dropdown to GitLab UI GlDropdown used for comment submit button. !50933
• Rename indexes to remove inconsistencies. !51011
• Notify issue email participants instead of external author. !51023 (Lee Tickett @leetickett)
• Remove usage_data_i_source_code_code_intelligence flag. !51765
• Apply GitLab UI button styles to buttons in ee/app/views/subscriptions/groups directory. !51784 (Yogi (@yo))
• Updated UI text to match style guidelines. !53179
• Update the Sign In button to use the new confirm button variant, migrate OAuth buttons to use the default variant of GlButton. !53254
• Apply new GitLab UI for button is project settings/repository page. !53346 (Yogi (@yo))
• Add btn-default class for edit buttons in admin projects and groups. !53453
• Add btn-default for cancel button in issueable form. !53458 (Yogi (@yo))
• Set MobSF version to 3.2.9 in SAST template. !53545
• Move add reaction button of note to gl-button. !53565 (Yogi (@yo))
• Improve Service Desk empty states. !54006
• Spell "npm" with lowercase letters in Package Registry UI. !54163 (Simon Stieger @sim0)
• Replace import/export CSV modal with Vue component. !54214
• Add quick action data to usage ping. !54293
• Add documentation for graphQL queries. !54302
• Add NOT NULL constraint to gitlab_subscriptions namespace_id. !54319
• Update accessibility of the "Reply to discussion" UX. !54380
• Remove temporary index on issues. !54387 (Lee Tickett @leetickett)
• Add Vue notifications dropdown component. !54422
• Move wiki helper alert to Vue. !54517
• Composer cache update worker. !54551
• Fix setting default cadences migration. !54598
• Update protected branches buttons to pajamas style. !54612
• Dry up notes build service spec. !54632 (Lee Tickett @leetickett)
• Updating general Chef .gitlab-ci.yml template. !54676
• Enable nakayoshi_fork by default. !54688
• Remove backup_labels table. !54856
• Update GitLab Runner Helm Chart to 0.26.0. !54863
• Add notification templates for merge request draft/WIP status change events. !54870
• Remove pipeline editor feature flag. !54971
• Remove graphql_logging feature flag. !54984
• Add tracking to merge request time estimate/spent changes. !55046
• Track usage pings when MR gets locked/unlocked. !55069
• Deemphasize comment and close button. !55075
• Log Optimistic Locks with retries. !55187
• Add environment_scope column to ci_group_variables. !55256
• Align heading style with subheadings in markdown. !55284
• Restore accidental changes to structure.sql. !55352
• Show API errors when a command-only comment fails. !55457
• Remove dashboard_pipeline_status feature flag. !55472
• Add tracking to merge request labels/milestone changes. !55484
• Add tracking to merge request assignees/reviewers changes. !55486
• Remove unique index and add composite key index to Security Orchestration. !55521
• Fix Sidekiq system check for cluster mode. !55530 (Horst Prote)
• Rename vulnerability fingerprints indexes. !55552
• Refactor docs and UI for embedding Grafana panels. !55567
• Remove the optimized_merge_request_count_with_merged_at_filter feature flag. !55600
• Add histogram for optimistic lock retries. !55614
• Replace Bootstrap popover with GitLab UI popover for merge conflict. !55652
• Use more common help icon in security report MR widget. !55741
• Schedule removal of duplicate Findings. !55749
• Update spacing between Notifications dropdown, New Subgroup button, and New Project buttons while using the new confirm variant instead of the deprecated success variant for the New Project button. Better left alignment of Notifications dropdown at smaller breakpoints. variant. !55819
• Update buttons on a job page to conform to the Pajamas design system. !55858
• Add web_hook_logs partitioning migration. !55938
• Updating usage dictionary generator. !55956
• Reorder user profile actions and use the confirm variant for the follow button. !55999
• Link to the merge request in its creation email notification. !56064
• Update UI text to CI/CD from CI / CD. !56070
• Harden Prometheus client usage data wrapper. !56210
• Update Pages template examples to default branch. !56298
• Update CI template examples to default branch. !56301
• Update templates to refer to default branch. !56304
• Remove bottom border from header. !56315
• Remove merge_request_rebase_nowait_lock flag. !56406
• Update mobsf version in the SAST template. !56413
• Convert mattermost alert to pajamas. !56556

13.9.7 (2021-04-27)

Security (6 changes)

• Prevent tokens with only read_api scope from executing mutations.
• Update mermaid to version 8.9.2.
• Do not allow deploy tokens in the dependency proxy authentication service.
• Disable keyset pagination for branches by default.
• Bump Carrierwave gem to v1.3.2.
• Restrict setting system_note_timestamp to owners.

13.9.6 (2021-04-13)

Security (2 changes)

• Clean only legitimate JPG and TIFF files.
• Update ruby-saml and rexml gems.

13.9.5 (2021-03-31)

Security (6 changes)

• Leave pool repository on fork unlinking.
• Fixed XSS in merge requests sidebar.
• Fix arbitrary read/write in AsciiDoctor and Kroki gems.
• Prevent infinite loop when checking if collaboration is allowed.
• Disable arbitrary URI and file reads in JSON validator.
• Require POST request to trigger system hooks.

Removed (1 change)

• Make HipChat project service do nothing. !57434

Other (3 changes)

• Remove direct mimemagic dependency. !57387
• Refactor MimeMagic calls to new MimeType class. !57421
• Switch to using a fake mimemagic gem. !57443

13.9.4 (2021-03-17)

Security (1 change)

• Patch Kramdown syntax highlighter gem.

13.9.3 (2021-03-08)

Fixed (4 changes)

• Upgrade gitlab-shell to v13.17.0. !55295
• Update Kroki to fix Wavedrom graphs. !55659
• Fix disabling of Kroki optional formats. !55665
• Rename asset_proxy_allowlist column. !55884

13.9.2 (2021-03-04)

Security (6 changes)

• Bump thrift gem to 0.14.0.
• Allow only owners to manage group variables.
• Do not store marshalled sessions ids in Redis.
• Fix XSS in wiki author email and name.
• Workhorse: prevent escaped router path traversal.
• Fix XSS vulnerability for swagger file viewer.

13.9.1 (2021-02-23)

Fixed (6 changes, 1 of them is from the community)

• Send SIGINT instead of SIGQUIT to puma. !54446 (Jörg Behrmann @behrmann)
• Reset description template names cache key to reload an updated templates structure. !54614
• Restore missing horizontal scrollbar on issue boards. !54634
• Fix keep latest artifacts checkbox being always disabled. !54669
• Fix Metric tab not showing up on operations page. !54736
• Fix S3 object storage failing when endpoint is not specified. !54868

Changed (1 change)

• Updates authorization for linting endpoint. !54492

Performance (1 change)

• Fix N+1 SQL regression in exporting issues to CSV. !54287

Other (1 change)

• Fix creating the idx_on_issues_where_service_desk_reply_to_is_not_null index before the post migration. !54346

13.9.0 (2021-02-22)

Security (1 change)

• Add token_with_iv table.

Removed (4 changes)

• Remove implicit FF check on Featurable. !52223
• Remove merge_request_reviewers feature flag. !52468
• Removed unused Text dropdown. !53464
• Remove legacy alerts service data and table. !53534

Fixed (131 changes, 29 of them are from the community)

• Allow to retrieve all jobs for a given pipeline. !48589 (Alexander Kutelev)
• Include submodule information for files in diff metadata. !50346 (Simon Stieger @sim0)
• Fix "Stay on Page" alert showing in empty snippet. !50400 (Kev @KevSlashNull)
• Add css to fix fluid layout for index file. !50626
• Make System OAuth app index table responsive and externalize text. !50979 (Kev @KevSlashNull)
• Prevent long variable names from overflowing the popover in CI/CD settings. !51018 (Kev @KevSlashNull)
• Fix long CI variable name overflows on origin. !51021 (Kev @KevSlashNull)
• Fix breadcrumb dropdown on mobile being too narrow. !51092 (Kev @KevSlashNull)
• Show correct ref name in code coverage statistics header. !51385 (Andreas Schmidt)
• Change Jira Connect update sequence id to use Unix Time. !51697
• Fix batch query issue when primary key is -1. !51716
• Allow versionless maven-metadata.xml file duplicates even when maven duplicates are disabled. !51758
• Fix comment form dropdown check alignment. !51787 (Lee Tickett @leetickett)
• Schedule artifact expiry date backfill background jobs. !51822
• Fix alignment and font issues in project operations settings page. !51825 (Yogi (@yo))
• Fix broken testsuite link if the suite contains a dot. !51828 (Michael Aigner @tonka3000)
• Move Social connect button to new GitLab UI. !51835 (Yogi (@yo))
• Fix border bottom color collapsed replies. !51871 (Yogi (@yo))
• Fix alignment of chevron-down icon in toggle replies. !51872 (Yogi (@yo))
• Remove container_class in project activity which removes extra padding. !51878 (Yogi (@yo))
• Add btn-default to MR edit button. !51879 (Yogi (@yo))
• Remove duplicates from related_commit_sha query. !51888
• Add btn-default class to button in project breadcrumb. !51910 (Yogi (@yo))
• Fix top border-radius of the login box. !51950 (Yogi (@yo))
• Improve duplication validation on Release Links. !51951
• Update Project/Group Exporter temp folder cleanup. !51969
• Migrate incorrect value stream group stage records. !51975
• Fixed notes polling incorrectly overwriting suggestions in the DOM. !51988
• Global Search - Project Filter sets Group. !52015
• Fix Y axis units of pipeline charts when values are small. !52024
• Apply new GitLab UI for report abuse button. !52049 (Yogi (@yo))
• Fix gitlab:cleanup:orphan_job_artifact_files rake task limit. !52056
• Remove extra border-top on pipeline quota in the settings page. !52059 (Yogi (@yo))
• Disable board configuration options for users without edit permission. !52077
• Fixed merge requests locked status not showing. !52078
• Fix reply box border on diffs. !52084
• Fixed sdiff suggestions not working when replying to comments. !52100
• Allow multiple comments on diff lines in inline view. !52111
• Breaking change: Prevent mutual recursion in GraphQL Package. !52131
• Update hamlit to v2.14.2. !52177
• Fix pipeline and stage show success without considering bridge status. !52192 (Cong Chen @gentcys)
• Update GitLab Workhorse to v8.61.0. !52195
• Scope milestones on swimlane boards to project and its ancestors. !52199
• Fixes GraphQl merge request types commits count. !52218
• Fix URL in JiraConnect feature flag serializer. !52221
• Allow user SSH public key endpoint to be publicly accessible again. !52227
• Update max number of NuGet packages returned. !52265
• Fix bug branch change with line selected. !52285
• Resolve User cannot merge an issue. !52311
• Fix Net::HTTP proxy encoding username and password. !52368
• Correct the egress 'deny all' policy preview from Allow to Deny. !52370
• Missing action prop on group page. !52379
• Improve search filter by taking space in file path into account. !52392
• Remove space next to the icon in email button on admin/users page. !52451 (Yogi (@yo))
• Fix assignee avatar alignment in edit board modal. !52453 (Yogi (@yo))
• Remove extra margin below tab on project template page. !52454 (Yogi (@yo))
• Fix retry option does not work in Merge Trains. !52463
• Fix action button alignment for application inside the table in oauth/applications. !52465 (Yogi (@yo))
• Fix viewing blobs for broken MRs. !52483
• Fix bug in personal snippet thread discussions. !52490
• Fix exclude path for backup rsync command. !52503
• Make CI Icon in merge request pipeline detail consistent with other widget icons. !52516
• Make text on Repository Cleanup page translatable. !52529
• Fix charts sometimes being hidden on milestone page. !52552
• Fix diff discussions rendering on the wrong side. !52579
• Add tooltips to requirement import and export buttons. !52582 (Kev @KevSlashNull)
• Allow dots in label names through REST API. !52591
• Fix tooltip when drag comment selection is enabled. !52595
• Allow Environment Scopes to Wrap on Feature Flags Table. !52617
• Allow cross-origin requests on /oauth/token. !52641
• Show more appropriate error message when merging fails. !52671
• Handle IPv6 hostname in ExternalHTTP instrumenter. !52691
• Remove MR List counts if they cannot be generated. !52698
• API: do not mangle dots when creating project with a name. !52725
• Fix size of group member user status emoji. !52730
• Fix bad request error when applying suggestions. !52735
• Update the database when moving repos between identical storages. !52743
• Don't expose project existence by redirecting from its .git URL. !52818
• Fill default commit message values in the placeholder instead of showing the variable slugs. !52851
• Make LifecycleEvents exceptions to be fatal. !52881
• BulkImports: avoid infinity recursion on group migration. !52931
• Fix to show auditor badging in admin user view. !52943
• Fix empty pipeline analytics charts when time_zone is non-UTC. !52971
• Fix fullscreen mode not working for comments in merge request changes view. !53009 (Simon Stieger @sim0)
• Fix formatting of "to do" in alert sidebar and error. !53037
• Change to-do formatting in Design error messages and sidebar. !53040
• Fix opensearch for anonymous users. !53056
• Allow HEAD requests for read_api and read_user scope tokens. !53088
• Adjust job report artifacts downloads to handle multiple types. !53141
• Fixed discussions on merge request commits not showing. !53143
• Send only latest jobs in pipeline webhook payload. !53159
• Fix snippet repository storage move API when snippet does not exist. !53211
• Use user-provided timestamp when updating issue and merge request milestones, iterations, and weights using the API. !53237
• Switch to correct localization function that strips namespaces. !53244
• Fix welcome page alignment on CE. !53265
• Fixes broken password reset link in account deletion message. !53274
• Support multi-line string variable values when running a manual pipeline in the UI. !53292
• Support fog-aws host options for Workhorse S3 client. !53326
• Vertically centre CI icons on pipeline page. !53427
• gitaly: Fix access checks with transactions and quarantine environments. !53449
• Back Button now switches to last active analytics tab. !53495
• Conditionally render test case file. !53497
• Remove dependency_proxy_manifests records with content_type to prevent Dependency Proxy failures. !53506
• Ensure note is promoted to discussion within reply create transaction. !53542
• Allow users to fork to a group when their personal namespace is full. !53632
• Fix some image diff URLs with special characters causing the diff to not show. !53638
• Adds only_group_labels and include_ancestor_labels and include_descendant_groups arguments to the project and group labels resolvers respectively. !53639
• Fix misalignment of assignee dropdown checkmark. !53664
• Fix timeouts affecting certain test webhooks. !53676
• Fix missing known usage data event. !53729
• Align note actions icons. !53753 (Claudius Ellsel (@clel))
• Fix left margin of Merge button in FF merge mode. !53756
• Fix spurious not-adjacent error when moving designs. !53771
• Cleanup incorrect data in projects.has_external_wiki. !53790
• Update column 'updated_at' in container after repository storage move. !53821
• Add post migration to backfill projects updated at after repository move. !53845
• Fix Web IDE open MR to show opened files consistently. !53927
• Removed ugly border around ellipsis dropdown Gitlab IDE. !53963 (Shubham Kumar @imskr)
• Fix bug rendering snippet activity. !53993
• Handle severity for generic payloads more gracefully. !53999
• Fix gap in tree table header. !54025
• Move GMA user badging in admin to EE only. !54125
• Fix alignment of 'Rebase in progress' label. !54189
• Fix incorrect breadcrumb path for import groups page. !54211
• Update Sample GitLab Project Template with MR conflicts fix. !54248
• Fix search functionality in Jira issues list. !54312
• Fix force-routing to Gitaly primary with empty hook env. !54317
• Fix pipeline test report not rendering when missing properties. !54363
• Safe guard repo compare when data is undefined. !54371
• Fix unneeded left margin in discussion filter container on mobile. !54379
• Fix overflowing design buttons on mobile. !54381

Deprecated (1 change)

• Deprecate GitLab-managed (v1) apps that will be removed in 14.0. !54162

Changed (107 changes, 16 of them are from the community)

• Migrate button to gitlab ui in note form. !42221
• Escaped markdown should not be interpreted as shortcuts. !45922
• Display the user busy status in the MR sidebar. !47769
• Move integration inheritance override dropdown above grid layout. !49325
• Code extraction - refactoring of MR services classes. !49827
• Create new assignees widget for boards. !50054
• Update the HEX values and names of the color options for labels. !50393
• Rename asset_proxy_whitelist column on application_settings. !50824
• Prevent creating duplicate pipelines manually. !51076 (Kev @KevSlashNull)
• Render WebP attachments as image by default. !51088 (Kev @KevSlashNull)
• Add warning message for GitLab group migration. !51214
• Display Terraform list errors to user. !51397
• Global Search - UX Cleanup of Search Bar. !51409
• Display full design name in tooltip. !51421
• Change the project avatar preview into a rectangle. !51511 (Austin Regnery)
• Add 'tags' field to runners in job/pipeline webhook payloads. !51633
• Move to CE: mutation to create MR for SAST Configuration. !51634
• Add converted_at(timestamp) & context(jsonb) columns to the experiment_subjects table. !51659
• Link to more helpful docs from alert management pages. !51665
• Move Cohorts page to Overiew-Users. !51707
• Web IDE shows alert and disable buttons when user cannot push code. !51710
• Add entity columns to vulnerability occurrences. !51739
• Add PostgreSQL trigger to maintain projects.has_external_issue_tracker. !51852
• Reduce vertical padding of registry list item. !51961
• Update Workhorse to v8.60.0. !51965
• Track exceptions when using Bulk Import. !52011
• Remove redundant text in Terraform Widget. !52013
• Add "What's new" item to the help dropdown. !52020
• Change UI text for failed pipeline on an MR. !52023
• Remove group owner data from webhooks. !52071
• Move btn-primary to btn-confirm class as a part of Pajamas migration. !52090 (Yogi (@yo))
• Add name validation to Terraform state. !52102
• Change error message for user approval error. !52103
• Admin dashboard basic stats redesign. !52176 (Yogi (@yo))
• Drop repository_read_only column from namespaces table. !52181
• Update styling of validation messages in New Feature Flag form. !52217
• Add callout disabling feature to cleanup policy alert. !52327
• Add pagination and filtering to htoup imports. !52340
• BulkImports: Add pipeline step to the failures log. !52345
• Improve accessibility of gray color CI status icons. !52356
• Global Search - UX Refresh for Sort Button. !52387
• Add 404 state to container registry details page. !52466
• Monitor RackAttack redis usage and enrich auth structured logs. !52471
• Remove compare switch revision button. !52547
• Improve merge failed error. !52555
• Add unique index on services project_id and type. !52563
• Clean up uniqueness validations for service type. !52565
• Redesign the search UI for the package list. !52575
• Fix margins in social connect button on account settings. !52581 (Yogi (@yo))
• Move the sub-section to gl-card in advanced search settings in admin. !52585 (Yogi (@yo))
• Update styles for terraform MR widget. !52627
• Bypass admin mode for internal api operations (ssh git & http rails). !52697 (Diego Louzán)
• Increase the complexity score of GraphQL detailedStatus#label as it can call Gitaly. !52708
• Migrate toggle button in subscription to GitLab UI component. !52717
• Migrate feature flags page toggles to GlToggle. !52728
• Migrate project settings to use GlToggle. !52729
• Run pipeline_schedule_worker at every 10th minute from 3 through 59. !52756 (Ben Bodenmiller (@bbodenmiller))
• Use realtime_changes endpoint for reporting group import status. !52796
• Add content_type column to dependency_proxy_manifests. !52805
• Replace erase job alert background color with color consistent with UI. !52810
• Fix protected branches/tags border. !52816
• Update download button size to sm from xs and add btn-default. !52867 (Yogi (@yo))
• Change DevopsAdoption feature to work with single group only. !52871
• Refactored admin user table headers. !52891 (Shubham Kumar (@imskr))
• Show helper link on a new line in GPG status popover. !52894 (Yogi (@yo))
• Fix bug, where the download email patches and plain diffs links did not download from the commit page. !52899 (Yogi (@yo))
• Update code quality template to use 0.85.22. !52913
• Remove ci_live_trace_use_fog_attributes feature flag. !52939
• Only Display One Chart at a Time. !52952
• Unwrap Sidekiq exceptions and jobs in the structured logs and metrics. !53006
• GraphQL: Add mergedYaml to CiConfigResolver response. !53081
• Add runner instructions modal in the CI/CD settings section. !53087
• Align action buttons in jobs page. Reduce icon buttons width in jobs, artifacts and environment pages. !53155
• Change the badge design in the jobs page. !53168
• Improve user dropdown items. !53175
• Update Rugged to v1.0.1. !53212
• Introduce automatic class path correction in Cobertura parser. !53236
• Sort milestone dropdown items by due date. !53242
• Change pipeline empty state language. !53281
• Stop notifying users of acknowledged alerts and stop changing the status of acknowledged Prometheus alerts to Triggered. !53330
• Enable suggestions custom commit message feature flag by default. !53342
• Redesign SSH keys list. !53351 (Yogi (@yo))
• Track YAML-less Auto DevOps inclusions separately. !53383
• Add sort argument to container_repositories graphql resolver. !53404
• Update Ruby detection rules for SAST. !53414
• Add loading display to Terraform lock action. !53475
• Search: Add Sort by Last Updated to Issue/MR. !53589
• Replace bootstrap modal in issuable_by_email HAML template. !53599
• Change UI text for 2FA setup. !53677
• Align and reorder boards search bar buttons. !53690
• Skip new note notifications when author is deleted. !53699
• Add release tooltip for guest users. !53722 (Jonas Wälter @wwwjon)
• Accept deeply nested arrays for CI script keyword. !53737
• Reset CI minutes only for namespaces that used minutes. !53740
• Update Sample GitLab Project Template to be clearer and adjust prominent placement. !53750
• Update blob page buttons to gitlab-ui pajamas styles. !53775
• Highlight board lists when they are added. !53779
• Add sort to container registry list page. !53820
• Filter deployments by finished_at in Value Stream Analytics. !53861
• Display loading when removing Terraform state. !53897
• Improve project members management, filtering, and sorting. !53935
• Add updated_at output to search results. !53958
• Prepend the Marginalia comment in SQL query. !54015
• Add OpenID SSO icon. !54026
• Select the newest records for webhook test payloads. !54030
• Upgrade Asciidoctor to 2.0.12. !54121 (Guillaume Grossetie)
• Remove position sticky polyfill. !54299

Performance (14 changes)

• Add database index to improve performance of usage ping metrics calculation. !48671
• Add indexes for onboarding progress table. !50679
• Support batch loading of merge head diffs. !51078
• Extend index on ci_builds_metadata. !52123
• Improve the performance of merge request and issue search by label(s). !52495
• Project creation to use specialized worker to calculate project authorizations. !52719
• Paginate single commit view. !52819
• Introduce a rendering limit for commit titles. !52904
• Add index to incident management oncall shifts table. !52961
• Lower allocations in _collapsed partial. !53233
• Memoize the fork suggestion button partial. !53256
• Optimized loading of descendant group labels. !53356
• Use Gitaly keyset pagination to optimize branches page. !53409
• Speed up update merge request worker by memoizing whether a push is a force or not. !53536

Added (107 changes, 15 of them are from the community)

• Add tag_list attribute to the JSON output for Jobs API. !44859 (Alon Liszt)
• Add follow each other model, API and UI(profile, activity view). !45451 (Roger Meier)
• Add Banzai filter for CustomEmoji. !47122 (Rajendra Kadam)
• Deployments::CreateService executions are idempotent for duplicate params. !47610
• Populate and migrate issue_email_participants. !48711 (Lee Tickett @leetickett)
• Enable local file reviews (marking files as viewed) by default and add documentation for that feature. !48976
• Add finder for getting commits with a trailer set. !49243
• Enable/disable additional diagram formats on Kroki. !49304 (Guillaume Grossetie)
• Allow opening projects with VS Code. !49460 (Kev @KevSlashNull)
• Allow users to re-request a review from a reviewer. !50068
• Add job to persist On-call shifts. !50239
• Improve visibility of time spent with external HTTP calls. !50696
• Add rake task to migrate Terraform states to object storage. !50740
• Map common severity values from a Prometheus alert payload. !50871
• Add keep latest artifact option for instances. !50889
• Add GraphQL query for single Terraform state. !51145
• Move "number of changed files" into Web IDE sidebar badge. !51166 (Kev @KevSlashNull)
• Allow reviewers to be updated via MergeRequest API. !51186
• Instrument CI parsers. !51241
• Add a commit message parameter for the suggestion endpoints. !51245
• Add dast_profiles database table. !51296
• Editor Lite: support for Diff Instance. !51470
• Populate the uuid attributes of the security_findings records and the finding_uuid attribute of the related vulnerability_feedback records. !51472
• Add the Manage::Import total GMAU metric. !51496
• Mark files as reviewed locally. !51513
• Sync pipeline builds to Jira. !51627
• Send deployment information to Jira. !51629
• Database migration for compliance pipeline configuration location. !51663
• Debian Group and Project Distribution Components. !51732 (Mathieu Parent)
• Add a /request_review alias for /assign_reviewer. !51751
• Log user approval/rejection in application logs. !51768
• Enable synchronization of feature flags to Jira. !51796
• Create Groups::RepositoryStorageMove table. !51803
• Keyboard shortcut for switching to GitLab next (Canary). !51834 (Yogi (@yo))
• Add On-call Rotations destroy mutation to GraphQL. !51860
• Add enforced SSH key expiration. !51921
• Pass dependency proxy credentials to runners to log in automatically. !51927
• Add captcha-related fields to snippet GraphQL mutations. !51956
• Support setting more attributes when forking a project. !51962
• Add delete functionality to the Image Repository detail view. !51980
• Expose if user is a bot in the REST api. !52003
• Add chat notification label support. !52105
• Support Project variables in include section of gitlab-ci.yml. !52108
• Add API for generating Markdown changelogs. !52116
• Add Jira proxy settings columns. !52119
• Project access token management via API. !52139
• BulkImports: Import Group Labels. !52260
• Add repository_read_only column to NamespaceSettings table. !52300
• Use a custom Ruby patch to instrument memory usage. !52306
• Added ability to re-request a review from a reviewer. !52321
• Add rake task to reset user password. !52347
• Track monthly active users for QuickActions. !52398
• Add patch_hard_limit_bytes_hit metric for monitoring diff patch size limit hits. !52456
• Show confirmation dialog when exiting pipeline editor. !52458
• Search across full name for mentions autocomplete. !52488
• Add site landmarks for screen readers. !52514
• Add security_and_compliance_access_level column into the project_features table. !52551
• Add OpenSearch support. !52583
• Show recent test case failures in the pipeline test report. !52606
• Display epic related events on user activity feed. !52611
• Adds README to OpenAPI docs. !52637 (Jim Cser @jimcser)
• Add rubygems metadata table. !52639
• Add subgroup_events column to web_hooks table. !52648
• Improve Vulnerability Tracking: Add fingerprints table. !52720
• Add git_two_factor_session_expiry column to application_settings table. !52761
• Add auto_delete_at to environments. !52788
• Matomo: Support the disabling of cookies. !52831 (otheus@gmail.com)
• Debian Group and Project Distribution Component Files. !52885 (Mathieu Parent)
• Adds jira issue enforcement field. !52896
• Track CI minutes for namespace on a monthly basis. !52915
• Debian Publications. !52916 (Mathieu Parent)
• Add bot to User GraphQL Type. !52933
• Support setting confidential note attribute in UI. !52949 (Lee Tickett @leetickett)
• Pipeline-level concurrency control with Cross-Project/Parent-Child pipelines. !53007
• Enable housekeeping for project and group wiki repos. !53011
• Add GFM reference format for feature flags. !53021
• BulkImports: Migrate Group Membership. !53083
• Add metrics for merge request approvals and revoking approvals. !53201
• Add empty jobs page with link to editor. !53240
• Add status attribute to packages and ability to set 'hidden' for generic packages. !53385
• Display unload warning if MR edit changed. !53438
• Track CI minutes on a monthly basis at project level. !53460
• Migration to add new Premium and Ultimate plan records. !53465
• Add group_id to ci_daily_build_group_report_result. !53494
• Enable group setting to allow or prevent duplicate Maven uploads. !53591
• Add application rate limit for Notes creation. !53637
• Add link to test case file in pipeline test report. !53650
• Automatically retarget merge requests. !53710
• Add Security Orchestration Policy Configuration. !53743
• Import epic award emojis when using Bulk Import. !53747
• Allow deploy keys to push to a protected branch. !53812
• Add semgrep SAST analyzer. !53815 (Daniel Paul Searles)
• Support Markdown for Feature Flags. !53816
• Add an allowlist to exclude users from the rate limit on notes creation. !53866
• Add user setting for opting into marketing emails. !53921
• Improve highlighting for merge diffs. !53980
• Add created_by_user to cluster agents. !54011
• Make merge-ref base the default comparison mode. !54017
• Add created_by_user to cluster agent tokens. !54019
• Add indicator in admin dashboard if user is group managed. !54027
• Add state events to merge request update mutation. !54133
• Display user busy status in issue sidebar. !54165
• Upgrade GitLab Pages to v1.35.0. !54167
• Add '!reference' YAML tag to help merge CI configurations. !54198
• Schedule user status cleanup after a given time interval via the REST API. !54207
• Add merged Yaml tab feature to Pipeline Editor. !54223
• Added warnings field to the pipelines GraphQL type. !54296

Other (170 changes, 101 of them are from the community)

• Apply GitLab UI button styles to buttons in app/views/projects/notes directory. !44107 (Lakshit)
• Remove duplicates from vulnerability_occurrences. !49937
• Edited UI copy wording to comply with GitLab style. !50676
• New Shared Partial for SSH Key Deletion. !50825 (Mehul Sharma)
• Update buttons in _hook.html.haml to use GitLab UI. !51065 (nuwe1)
• Adds GitLabUI button styles in _test_button.html.haml. !51070 (nuwe1)
• Adds GitLabUI button styles in deploy tokens _table.html.haml. !51082 (nuwe1)
• Apply GitLab UI styles to buttons in notification directory _new_button.html.haml. !51148 (nuwe1)
• Apply GitLab UI styles to buttons in _comment_button.html.haml. !51152 (nuwe1)
• Adds GitLab UI styles to button in _edit_form.html.haml. !51156 (nuwe1)
• Adds GitLab UI styles to button in _form.html.haml. !51160 (nuwe1)
• Add gl-button to Set up new device button in 2fa settings. !51283 (Yogi (@yo))
• Add gl-button to promotion buttons on issue sidebar. !51287 (Yogi (@yo))
• Add gl-button to personal access token page. !51294 (Yogi (@yo))
• Add gl-button to new issues and MR page. !51295 (Yogi (@yo))
• Updated UI text to match style guidelines. !51348
• Add gl-button to nav buttons in the project page. !51427 (Yogi (@yo))
• Add Composer cache classes and table. !51509
• Bump doorkeeper to 5.4.0. !51559
• [Commit Page] Migrate to GlModal for cherry-pick commit. !51650
• Updated UI text to match style guidelines. !51658
• Apply GitLab UI button styles to button in geo. !51777 (Yogi (@yo))
• Apply GitLab UI button styles to button _blank_state_ee_trial. !51778 (Yogi (@yo))
• Apply GitLab UI button styles to buttons in group settings. !51781 (Yogi (@yo))
• Apply GitLab UI button styles to buttons in ee/app/views/users directory. !51783 (Yogi (@yo))
• Improve Performance bar design. !51788 (Yogi (@yo))
• Apply new GitLab UI for buttons in admin settings. !51789 (Yogi (@yo))
• Update empty labels container background color. !51792 (Yogi (@yo))
• Update milestone badge to gl-badge. !51794 (Yogi (@yo))
• Apply GitLab UI for create file button in MR. !51795 (Yogi (@yo))
• Remove huge bottom margin for expand file button. !51802 (Yogi (@yo))
• Apply new GitLab UI for commit browse file button. !51805 (Yogi (@yo))
• Update CI general pipeline settings UI text. !51806
• Apply new GitLab UI style to mirror update button and add space after icon. !51808 (Yogi (@yo))
• Migrate old button classes to our Pajamas style GitLab button in multiple areas. !51826 (Yogi (@yo))
• Update links in Pages settings. !51847
• Update button style for consistency in Settings > Integrations, Mermaid Diagram warning, and No SSH warning. !51864
• Add empty state placeholder for milestones. !51887 (Yogi (@yo))
• Move user action card to new GitLab UI card in admin. !51914 (Yogi (@yo))
• Move email badges to new GitLab UI badges. !51915 (Yogi (@yo))
• Apply GitLab UI to email status badge. !51916 (Yogi (@yo))
• Remove fuzzy search for awards emoji and refactor GFM autocomplete emoji support. !51972 (Ethan Reesor (@firelizzard))
• [MR Page] Migrate to GlModal for revert MR. !52019
• Increase splay of Puma worker restarts. !52079
• Add btn-default class for btn-build buttons. !52093 (Yogi (@yo))
• Update GitLab Runner Helm Chart to 0.25.0. !52095
• Apply new GitLab UI for form inputs project settings page. !52097 (Yogi (@yo))
• When an MR diff is Too Large, highlight it like other collapsed diffs. !52146
• Updated UI text to match style guidelines. !52152
• Remove temp index in oauth_applications table. !52157
• Apply new GitLab UI for input fields in auth screens. !52167 (Yogi (@yo))
• Update doorkeeper to 5.5.0.rc2. !52171
• Remove Avatar from Comment Forms. !52180 (Lee Tickett @leetickett)
• Add gl-button class in relevant places on project html. !52183 (Gary Bell @garybell)
• Track suggestion add/apply metrics. !52189
• Track the number of users who are assigned and get requested for reviews. !52194
• Apply new GitLab UI for badge and button in project's protected branch settings. !52207 (Yogi (@yo))
• Disable nakayoshi_fork by default in examples. !52209
• Remove graphql_pipeline_header feature flag. !52247
• Updated UI text to match style guidelines. !52267
• Update bundler-audit gem to 0.7.0.1. !52269
• Update default_value_for gem to 3.4.0. !52271
• Convert deploy token button to pajamas. !52277
• Updated UI text to match style guidelines. !52284
• Apply new GitLab UI badge for users in the admin page. !52289 (Yogi (@yo))
• Apply new GitLab UI for inputs in admin/users directory. !52290 (Yogi (@yo))
• Fix Add a to do spelling on epics. !52292 (Yogi (@yo))
• Expose user availablility data on issuable pages. !52333
• Convert project runner buttons to pajamas. !52358
• Replace angle-double-left icon with chevron-double-lg-left. !52393
• Apply new GitLab UI for subscribe buttons in issues. !52401 (Yogi (@yo))
• Apply new GitLab UI for inputs in admin/application_settings directory. !52402 (Yogi (@yo))
• Apply new GitLab UI for buttons and card in admin/license. !52408 (Yogi (@yo))
• Apply new GitLab UI for input field in admin/appearance. !52409 (Yogi (@yo))
• Apply new GitLab UI for input field in admin/applications. !52410 (Yogi (@yo))
• Apply new GitLab UI for input field in admin/broadcast_messages. !52411 (Yogi (@yo))
• Apply new GitLab UI for input field in admin/hooks. !52412 (Yogi (@yo))
• Apply new GitLab UI for input field in admin/labels. !52413 (Yogi (@yo))
• Move vulnerability report counts to GlCard. !52416 (Yogi (@yo))
• Bold metricDetailsLabel in the performance bar. !52417 (Yogi (@yo))
• Apply new GitLab UI for input field in user profile settings. !52424 (Yogi (@yo))
• Apply new GitLab UI for input field in user applications. !52425 (Yogi (@yo))
• Apply new GitLab UI for input field in user personal access token settings. !52426 (Yogi (@yo))
• Apply new GitLab UI for input field in user email settings. !52427 (Yogi (@yo))
• Apply new GitLab UI for buttons in blob header. !52429 (Yogi (@yo))
• Add btn-default to settings toggle button in push rules. !52430 (Yogi (@yo))
• Replace OpenSSL constants with strings. !52432 (Takuya Noguchi)
• Fix spacing before toggle subscribe button on labels. !52459 (Yogi (@yo))
• Apply new GitLab UI for input fields in file editor. !52461 (Yogi (@yo))
• Improve variable settings ui text. !52462
• Update starred empty state with new GitLab UI classes. !52467 (Yogi (@yo))
• Track API requests from the the VS Code extension. !52484
• Create constants for bv::show::modal and bv::hide::modal. !52518 (Kev @KevSlashNull)
• Add additional instructions on deleting account on Gitlab.com. !52538
• Remove v-html from mr_widget_pipeline.vue. !52564 (Kev @KevSlashNull)
• Apply new GitLab UI for buttons in 2fa and changed deprecated info to confirm. !52580 (Yogi (@yo))
• Allow new docs badges in UI links. !52651
• Update (?) link to sprite question icon. !52655 (Yogi (@yo))
• Improve overall copy, remove redundant reassurance in the form, and fix empty %p rendered in the DOM of the welcome page. !52660
• Apply new GitLab UI class for U2F try again button. !52759 (Yogi (@yo))
• Update question mark icon while checking pipeline status. !52760 (Yogi (@yo))
• Update table and ellipsis button in performance bar metrics modal. !52762 (Yogi (@yo))
• Replace bootstrap event strings with constants. !52777 (Kev @KevSlashNull)
• Apply new GitLab UI style for todo button in the issuable sidebar. !52779 (Yogi (@yo))
• Apply new GitLab UI for buttons in MR resolve conflicts page. !52783 (Yogi (@yo))
• Review UI text - deploy keys settings. !52830
• Add btn-default class for the download button in graphs page. !52857 (Yogi (@yo))
• Add btn-default class for unlock button in locked files page. !52858 (Yogi (@yo))
• Add btn-default class for history button in the contributors page. !52861 (Yogi (@yo))
• Apply new GitLab UI for buttons in tags page. !52862 (Yogi (@yo))
• Apply new GitLab UI for buttons in the tag edit page. !52863 (Yogi (@yo))
• Apply new GitLab UI for buttons and input in the project graph page. !52864 (Yogi (@yo))
• Add btn-default to buttons in tag action on the single tag page. !52866 (Yogi (@yo))
• Apply new GitLab UI for badges in the project branch list. !52868 (Yogi (@yo))
• Update rspec-* gem versions. !52873
• Review UI text - deploy freezes. !52884
• Apply new GitLab UI for RSS button in commits page. !52900 (Yogi (@yo))
• Add btn-icon class for action buttons in the user profile. !52901 (Yogi (@yo))
• Open CI/CD settings help links in new tab by default. !52948
• Update links to redirected docs. !53004
• Cleanup composer cache pages. !53005
• Re-add migration to fix invalid merge request index. !53042
• Update mermaid.js to v8.9.0. !53123
• Move CleanupMultiprocDirService out of config.ru. !53139
• Apply new GitLab UI for buttons in empty project snippets placeholder. !53157 (Yogi (@yo))
• [MR Page] Migrate to GlModal for Cherry-pick MR. !53169
• Bump cluster applications CI template to v0.40.0. !53183
• Remove inconsistent index in backup_labels table. !53189
• Set projects.has_external_wiki default to null if default value is present. !53216
• Update bullet gem version to 6.1.3. !53217
• Updated UI text to be sentence case. !53323
• Add btn-default class for social buttons in login and signup page. !53347 (Yogi (@yo))
• Apply new GitLab UI for buttons in pipeline page. !53364 (Yogi (@yo))
• Apply new GitLab UI for search in frequent items search. !53368 (Yogi (@yo))
• Apply new GitLab UI for badge in job page sidebar. !53386 (Yogi (@yo))
• Geo - Update Patroni replication docs to automatic recover from a leader change on the primary site. !53424
• Change secondary text color on Gitpod editor dropdown button. !53437
• Apply new GitLab UI for new trial page. !53447 (Yogi (@yo))
• Apply new GitLab UI for buttons in create project page. !53454 (Yogi (@yo))
• Apply new GitLab UI for buttons in connect repo buttons in new project page. !53455
• Apply new GitLab UI for buttons in new group page. !53456 (Yogi (@yo))
• Show bottom tooltip for edit button in user profile. !53459 (Yogi (@yo))
• Add Space before loading icon in toggle todo button. !53463 (Yogi (@yo))
• Apply new GitLab UI for create mr button from issue. !53467 (Yogi (@yo))
• Apply GitLab UI button styles to buttons in gitlab_slack_application file. !53478 (Yogi (@yo))
• Remove namespace_onboarding_actions table. !53488
• Update grape gem to 1.5.2. !53547
• Apply new GitLab UI for buttons in empty issue placeholder. !53554 (Yogi (@yo))
• Apply new GitLab UI for buttons in commit page. !53555 (Yogi (@yo))
• Apply new GitLab UI for toggle buttons in CI/CD settings page. !53556 (Yogi (@yo))
• Add margin and remove padding in project graph page. !53557 (Yogi (@yo))
• Add btn-icon class for icon only buttons in issues header. !53562 (Yogi (@yo))
• Remove gl-text-black-normal from detailed metric which is not visible in dark mode. !53563 (Yogi (@yo))
• Improve error message reporting in snippet create or update. !53576
• Add URL help text and edit other UI text. !53578
• Apply new GitLab UI for no repo action buttons. !53580 (Yogi (@yo))
• Track 5 mins production app template usage. !53618
• Add clear_status_at column to user_status table. !53620
• Fix /-/readiness probe for Puma Single. !53708
• Prevent blocked user from triggering notifications. !53788
• Track when a merge request is created from an issue. !53808
• Allow running Puma in Single mode. !53830
• Update GitLab Workhorse to v8.62.0. !53864
• Remove caching_experiments feature flag. !53901
• Improve profile status emoji alignment. !54078
• Add tracking to measure the number of unique users committing CI config. !54192
• Enable sorting diffs by default. !54210
• Update GitLab Workhorse to v8.63.0. !54315
• Add btn-default to buttons in todos page. (Yogi (@yo))
• Apply new GitLab UI for buttons in pipeline schedules.

13.8.8 (2021-04-13)

Security (2 changes)

• Clean only legitimate JPG and TIFF files.
• Update ruby-saml and rexml gems.

13.8.7 (2021-03-31)

Security (5 changes)

• Fixed XSS in merge requests sidebar.
• Leave pool repository on fork unlinking.
• Fix arbitrary read/write in AsciiDoctor and Kroki gems.
• Prevent infinite loop when checking if collaboration is allowed.
• Require POST request to trigger system hooks.

Removed (1 change)

• Make HipChat project service do nothing. !57434

Other (3 changes)

• Remove direct mimemagic dependency. !57387
• Refactor MimeMagic calls to new MimeType class. !57421
• Switch to using a fake mimemagic gem. !57443

13.8.6 (2021-03-17)

Security (1 change)

• Patch Kramdown syntax highlighter gem.

13.8.5 (2021-03-04)

Security (6 changes)

• Fix XSS in wiki author email and name.
• Bump thrift gem to 0.14.0.
• Allow only owners to manage group variables.
• Do not store marshalled sessions ids in Redis.
• Workhorse: prevent escaped router path traversal.
• Fix XSS vulnerability for swagger file viewer.

13.8.4 (2021-02-11)

Security (9 changes)

• Cancel running and pending jobs when a project is deleted. !1220
• Prevent Denial of Service Attack on gitlab-shell.
• Prevent exposure of confidential issue titles in file browser.
• Updates authorization for linting API.
• Check user access on API merge request read actions.
• Limit daily invitations to groups and projects.
• Enforce the analytics enabled project setting for project-level analytics features.
• Perform SSL verification for FortiTokenCloud Integration.
• Prevent Server-side Request Forgery for Prometheus when secured by Google IAP.

13.8.3 (2021-02-05)

Fixed (2 changes)

• Revert multipart URL optimization for AWS S3. !52561
• Fix regression with old wiki image uploads. !52656

13.8.2 (2021-02-01)

Security (5 changes)

• Filter sensitive GraphQL variables from logs.
• Avoid exposing release links when the user cannot read git-tag/repository.
• Sanitize target branch on MR page.
• Fix DNS rebinding protection bypass when allowing an IP address in Outbound Requests setting.
• Add routes for unmatched url for not-get requests.

13.8.1 (2021-01-26)

Fixed (3 changes)

• Cancel artifact expiry backfill background jobs. !51821
• Fix LFS not working with S3 specific-storage settings. !52296
• Fix missing setting LDAP servers. !52512

13.8.0 (2021-01-22)

Security (4 changes, 1 of them is from the community)

• The NuGet endpoints will no longer ignore an invalid username when a personal access token or deploy token is passed via HTTP Basic authentication. !38627 (Ethan Reesor (@firelizzard))
• Update WEBrick to v1.6.1. !50720
• Prevent user-defined variables from being used by non-maintainers. !51682
• Upgrade Workhorse to 8.58.2.

Removed (2 changes)

• Drop group_id column from compliance_management_frameworks table. !50829
• Remove deprecated generic alert integration in favor of HTTP Integrations. !50913

Fixed (91 changes, 35 of them are from the community)

• Deduplicate labels with identical title and group. !37148
• Remove diff display preferences and file tree from changes empty state. !43467
• Upgrade to Grape v1.5.0. !44554
• Fix database timeout errors when removing expired job artifacts. !47496
• Return release milestones in predictable order. !47700
• Fix multiple simultaneous requests for vulnerabilities on pipeline security tab. !48426
• Remove duplicate service records. !49463
• Add LaTeX support for Jupyter Notebooks. !49497
• Fix confusing button text when importing from GitHub. !49684 (Kev @KevSlashNull)
• Fix identicon text color in dark mode. !49785 (@yo)
• Fix installation of Knative under Helm 3. !49843
• Hide inoperable group search Releases filter. !50010
• Fix visibility level validation for deep nested forks. !50081
• Change type of CiJob.needs. !50192
• Handle git errors when cleaning up MR refs. !50250
• Fix over-eagerly updating Web IDE Live Preview. !50255
• Persist updated_at value in state change events. !50272
• Enlarge the timeline toggle button. !50284
• Hide "Actions" label on group members view if no action buttons exist. !50304
• Fix bug with snippets in HEAD when default branch is not master. !50366
• Add project scope to ci clint graphql endpoint. !50418
• Fix the graphQL type for container repository tags. !50419
• Allow more actions on group members. !50445
• Don't allow filtering by release tag on groups. !50457
• Flash transfer errors in the admin project controller. !50541 (Vincent Fazio)
• Update cluster-applications to v0.37.0. !50548
• Fix codeowners superseding web ide and single file edit. !50608
• Update Terraform Pipline templaes to support 0.14 lockfile cache. !50647 (Aurelian Shuttleworth)
• Fix issue with the default_merge_refs feature flag removing version to version diffs. !50671
• Fix LDAP override throws 404 when member has Minimal access. !50680
• Maven will return the most recent maven-metadata.xml file if there are multiple matches accross different projects. !50700
• Avoid 409 StaleObjectError errors with /rebase. !50719
• New project guidelines are no longer displayed. !50736 (Roger Meier)
• Add RateLimit-* headers to RackAttack responses. !50833 (adam-moss)
• Fix 500 error on repository settings access when repository is empty. !50844 (Diego Louzán)
• Update toast position on set status. !50886
• Fix duplicated toggle button showing on right sidebar when signed out. !50892
• Fix fork icon shrinks if branch name is very long. !50915 (Kev @KevSlashNull)
• Fix 'copy sha' in 'add previous commits' modal doesn't copy. !50921 (Kev @KevSlashNull)
• Fix large S3 uploads failing to finalize. !50922
• Fix webhook badge color in darkmode. !50943 (Yogi (@yo))
• Remove border radius for sidekiq iframe card. !50955 (Yogi (@yo))
• Align checkbox in system hooks page in admin. !50958 (Yogi (@yo))
• Fix import issues button style. !50969 (Yogi (@yo))
• Fix mobile layout Error Tracking details page. !50970 (Kev @KevSlashNull)
• Fix cobertura parser when there is an empty sources node. !50971
• Fix branch name overflows in profile activity section. !50975 (Kev @KevSlashNull)
• Fix abuse reports contains html and does not show repoter. !50983 (Kev @KevSlashNull)
• Rename button "CI lint" to "CI Lint" on jobs page. !50987 (Kev @KevSlashNull)
• Align admin notes label to the left. !50992 (Kev @KevSlashNull)
• Fix multiple errors in custom server hook render improperly. !51001 (Kev @KevSlashNull)
• Fix Jira MR status not syncing by making workers idempotent. !51006
• Show status of snippet author in header. !51030 (Kev @KevSlashNull)
• Fix slack application helper card. !51034 (Yogi (@yo))
• Remove margin top for snippets empty state. !51038 (Yogi (@yo))
• Invalidate reviews counter cache when MR gets closed/merged/reopened. !51055
• Fix merge request analytics page filtering when multiple labels are given. !51060
• Fix admin project overview badge alignment. !51066 (Kev @KevSlashNull)
• Strip newline from commit description on project overview. !51099 (Kev @KevSlashNull)
• Fix alignment of protected tag and branch labels on mobile. !51100 (Kev @KevSlashNull)
• Fix 500 errors entering a webhook URL not encoded. !51109
• Fix long deploy token name overflows revocation modal. !51114 (Kev @KevSlashNull)
• Use an empty body when sending a file with X-Sendfile. !51115
• Ensure Rake DB create doesn't fail when LDAP is enabled. !51132
• Fix runner admin is missing CI status styles. !51158 (Kev @KevSlashNull)
• Fix jobs admin is missing CI status styles. !51161 (Kev @KevSlashNull)
• Fix color of hamburger in dark mode. !51168 (Kev @KevSlashNull)
• Fix padding of user admin search bar on mobile. !51170 (Kev @KevSlashNull)
• Make todo filter sort input full width on mobile. !51171 (Kev @KevSlashNull)
• Correctly handle Gitaly being unavailable in more locations. !51222
• Prevent rebase from being run in quick action when there are conflicts. !51243
• Fix cut off line number in file blame. !51259
• Add margin to user chat settings. !51282 (Yogi (@yo))
• Invalidate reviews counter cache when MR gets created. !51316
• Forbid snippet pushes when repo is read-only. !51318
• Fix tertiary button color in dark mode. !51349
• Fix table columm shift with table-layout fixed. !51416
• Conditionally show card footer in single group page in admin. !51426 (Yogi (@yo))
• Fix argument type for background migration. !51475
• Correct status indicator for jobs groups when failure is allowed. !51478 (Sune Keller (sirlatrom))
• In WebIDE switch files before closing the active one. !51483
• Fix behavior of maven_duplicates_allowed setting so new Maven packages can be uploaded. !51524
• Fix script typo in secret detection template causing the detection to be skipped. !51544 (Vicken Simonian @vicken.papaya)
• Rename Backlog list to Open in issue boards. !51562
• Update GraphqlExtractor return value to be original hash. !51596
• Fixed applied message showing before discussion gets resolved. !51605
• Generate page-info for connections of preloaded associations. !51642
• Fix typo in notice displayed when Design Management requires LFS to be enabled. !51644
• Fix coverage not showing for inline diffs. !51652
• Fix issues when Web IDE commits to new branch. !51654
• Remove EE references from FOSS code. !51832

Deprecated (2 changes)

• Deprecate prometheus.listen_address and prometheus.enable. !50500
• Refactor(opsgenie): remove Opsgenie integration frontend code from Incident management. !50525

Changed (75 changes, 9 of them are from the community)

• Increase the complexity score of GraphQL MergeRequest#approved, MergeRequest#approvalsLeft and Repository#exists fields as they can call Gitaly. !47039
• Move deploy boards to Core. !47147
• Improve error message when username and namespace conflict. !47537
• Improve error messages when adding namespaces in Jira Connect App. !48651
• Update puma & puma_worker_killer to upstream. !48897
• Replace dropdown-input-fa-color with gray-500. !49213
• Adds MergeRequest.reviewers to GraphQL API. !49707
• Reorganize project member management into tabs. !49764
• Standardize page title styles on all wiki pages. !49777
• Ensure container_expiration_policy keep_n is an integer. !49805 (Mathieu Parent)
• When retrying jobs associate subsequent jobs with triggering user. !49833
• Allow collaboration on merge requests across forks by default. !49904 (Jonston Chan @JonstonChan)
• Add PostgreSQL trigger to maintain projects.has_external_wiki. !49916
• Limit the number of container tags to delete when deleting them in bulk. !49961
• Remove extra space in API 403 Forbidden error message. !50016
• Enable collect_package_events_redis by default. !50092
• Remove total_pipeline_duration from project_type. !50093
• Use Patroni as the default in the replication docs. !50101
• Fix package event metrics aggregation. !50108
• Upgrade CodeQuality version in CI template to 0.85.19. !50118
• Defer tagsCount & add startup.js to container registry. !50147
• Update ci config type for GraphQL to use connection_type. !50160
• [RUN-AS-IF-FOSS] Move to createBoard mutation instead of REST API call + updateBoard. !50171
• Adjust container registry metadata during loading. !50181
• Allow group owners and auditors to login to SSO-enforced groups without SSO. !50199
• Update .net Project Template Archive. !50321
• Add button to edit custom Wiki sidebar. !50323 (Frank Li)
• Update Rails Project Template archive. !50325
• Updated Express Project Template archive. !50326
• Change clusters.helm_major_version default to 3. !50399
• More concise pipeline notification emails. !50405
• Rename coverage report sidekiq queue. !50424
• Use a dynamic segment not depending on the package id for Debian files. !50433 (Mathieu Parent)
• Remove lfs_chunked_encoding feature flag. !50557
• Adds annotations as part of metadata for CiliumNetworkPolicies wrapper. !50586
• Add manual bridge support to api. !50634
• Add issue link to due date emails. !50642
• Updates graphql gitlab-ci.yml linter implementation. !50664
• Add additional fields to diff_metadata.json endpoint. !50666
• Check namespace package settings when creating Maven packages. !50691
• Change onboarding actions table to use one record per namespace. !50711
• Improve the reliability and observability of the container registry client. !50750
• Remove inactive integrations indicator in index and show pages. !50753
• Add tags count and cleanup status to registry details. !50756
• Update merge request status box without reloading page. !50761
• Add error handling in the container registry delete tags service. !50763
• Update the maven package finder. !50774
• Move Group Migration entities import to individual sidekiq jobs. !50781
• Prevent locked Terraform states from being deleted. !50798
• API: Exposes errors in lint endpoint. !50891
• Indent child form elements in integrations form. !50929
• Wiki edit: automatically focus on the content field. !50941 (Jacopo Beschi @jacopo-beschi)
• Limit Group Migration extractors and loaders to 1 per pipeline. !50951
• Add space and helper to the group members page. !50954 (Yogi (@yo))
• Add access request endpoint to OpenAPI standard. !51000 (Jim Cser)
• Use GlBadge for badges in pipeline_url.vue. !51058 (Kev @KevSlashNull)
• Migrate deleteBoard board_store function to GraphQL mutation. !51069
• Skip secret_detection on tags. !51129
• Remove pagination from Deployment Frequency API endpoint. !51137
• Updates regex for group_name to support numbers in job name. !51157
• Migrate GitLab UI button for Merge Request Approvals settings. !51159 (George Tsiolis)
• Enable reviewer_approval_rules by default. !51183
• Remove limit of four features per plan. !51264
• Disable submit button on wiki if no title and content. !51272
• Wiki: Add author avatar and link. !51273
• Update the DAST latest template to run when configured even if the user doesn't have sufficient permission. !51279
• Resolve Grouping/swimlanes choice should persist after board has been edited. !51317
• Extract expired pipeline artifacts removal service into it's own background worker. !51323
• Bump workhorse to 8.59.0. !51329
• Update Issue Incidents to allow the milestones feature to be used in the sidebar and quick actions. !51456
• Remove test_failure_history flag. !51464
• Update pipeline graphs on CI/CD Analytics page to use GraphQL endpoint. !51504
• Redirect deprecated profile paths to scoped path. !51646
• Default enable set_user_availability_status. !51668
• Add visibility mismatch warning to the branch chooser. !51671

Performance (16 changes)

• Lower /explore page limit. !50233
• Cache license data in a process-memory cache. !50318
• Fix N+1 queries with loading group issues with GraphQL. !50328
• Performance improvements for CI GraphQL resources. !50386
• Index ci_pipelines on pipeline_schedule_id and id. !50478
• Fix N+1 when rendering snippets in the dashboard. !50569
• During group deletion, only enqueue jobs for project_authorizations refresh if the group being deleted has other groups shared with it. !50617
• Switch to 2x faster PRNG. !50811
• Improve the database query performance on the pipeline loading in merge requests. !50818
• Reduce per-page size in release index pages for loading faster. !50934
• Spread monthly CI minutes reset from 8 to 24 hours. !51084
• CI: use commit SHA in persistent refspec. !51208
• Use Puma nakayoshi_fork. !51467
• Limit rendering of commit messages. !51485
• Remove pipeline status from /explore page. !51621
• Lower allocations when building nav. !51628

Added (66 changes, 6 of them are from the community)

• Add ability to get admins via REST and GraphQL API. !46244
• Add flutter CI/CD template. !46968
• Add migration to swap partitioned audit_events. !47581
• Add the NuGet group level API. !48356
• Instrument viewing merge request diffs file by file. !48470
• Allow HTTP Basic Auth and deploy token authentication for generic packages. !48540 (Moshe Katz @kohenkatz)
• Stop unlinking the fork when changing visibility. !49013
• New user/issue specific email address for creating/forwarding to an issue. !49050
• Add GraphQL mutation to create on-call rotations. !49206
• Add ability for admins to create PAT for other users via API. !49222
• Add snippet repository storage move API endpoints. !49228
• Add keep latest artifact option for projects. !49256
• Debian Group and Project Distributions. !49405 (Mathieu Parent)
• Add table for tracking on-call shifts. !49423
• Add 5-minute-production-app CI template. !49487
• UI to opt out of keeping the artifacts from the last job at project level. !49500
• Debian File Metadata. !49692 (Mathieu Parent)
• Add epic board list table. !49728
• Enable OAuth PKCE flow. !49756
• Add artifacts:public boolean. !49775
• Add a quick action for /rebase. !49800
• Populate finding_uuid attribute for the existing vulnerability_feedback records. !49807
• Expose hide_backlog_list and hide_closed_list to project and group boards REST API. !49815 (Mathieu Parent)
• Expose notes resolved_at via API. !49821 (Lee Tickett)
• Add toggle to disable Operations in settings. !49919
• Add rake gitlab:git:checksum_projects. !49965
• Extend MergeRequestFinder to search by squash and merge commits. !49968
• Add delete metric image REST API endpoint. !50043
• Add namespace settings to allow or disallow duplicate Maven packages. !50104
• Add copy email to issue sidebar. !50127
• Add rake task for migrating legacy pages storage to zip deployments. !50153
• Project Template for Kotlin native. !50162
• Track usage for Terraform State API. !50224
• Add group MR approval settings table. !50256
• Add DevOps adoption end_time column. !50257
• Auto-assign merge request author when creating from issue. !50263
• Added epic board position database index. !50277
• Include the user id in the webhook payload. !50287
• Add project config path as a predefined project variable. !50301
• Send email when group member expiry is updated. !50310
• Implement variables for pipeline job rules. !50501
• Add DAST.latest.gitlab-ci.yml. !50539
• Add dismissal_reason column into the vulnerability_feedback table. !50632
• Add setting to enable Invisible Captcha. !50650
• Add include_versionless param to the Package API. !50669
• Allow custom response to be set when rate limits are exceeded. !50693
• Exposed web_path and web_url fields in Board's GraphQL API. !50947
• Add aggregate/union visit tracking for Compliance features. !50978
• Display Artifacts Dropdown on MR Pipeline Widget. !50998
• Add composer details GraphQL type and query. !51059
• Add skipped status to deployments. !51068
• Persist 'squash_commit_sha' when squashing. !51074
• Add confidentiality filtering to the epics REST API and GraphQL endpoints. !51105
• Add API command to remove pending member invitation. !51134
• Add configurable Gitpod button within projcet repository page. !51197
• Allow users to use IssueDeployedToProduction VSA event. !51199
• Show all quick actions in / autocomplete. !51239
• Debian Group and Project Distribution Architectures. !51265 (Mathieu Parent)
• Initially sync Merge Requests with Jira when a namespace is added through the GitLab for Jira app. !51341
• Adding /reviewer and /remove_reviewer aliases and specs. !51384
• Instrument CI template usage across projects. !51391
• Control job status using exit codes. !51439
• Enables the CI Pipeline Editor feature as a way to edit the GitLab CI/CD configuration. !51484
• Allow resetting group and instance level integrations. !51507
• Designate optional sections in the codeowners file. !51643
• Enable CI visualization by default. !51701

Other (74 changes, 37 of them are from the community)

• Add a new Ruby API for specifying allowed authentication mechanisms for REST API endpoints. !38627 (Ethan Reesor (@firelizzard))
• Migrate-Bootstrap-dropdown-to-GitLab-UI-GlDropdown-in-app/assets/javascripts/vue_shared/components/pikaday.vue. !41458 (nuwe1)
• Add Icons to headings in system info on admin panel. !46618 (Yogi (@yo))
• Backfill artifact expiry date. !47723
• Convert navigation_tabs.vue to gl-tabs. !47841
• Fix UI on global breadcrumb on Project/Group Container Registry. !48288 (Takuya Noguchi)
• Dynamically load gapi on GKE cluster creation pages. !49512
• Update pipeline alert text to be more readable. !49575
• Remove users#show.json completely. !49670 (Takuya Noguchi)
• Visually enhance the difference between code that has and does not have test coverage. !49724
• Updated UI text to match style guidelines. !49871
• Update documentation for setting up database replication with Patroni on a Geo secondary node. !49986
• Disable auto admin mode for lib specs. !50056 (Diego Louzán)
• Add documentation for new Snippet repository storage move API. !50151
• Propagate client identity to gitaly. !50161
• Centered Markdown Preview in Web IDE with a set max width to limit the container size. !50291 (Mehul Sharma)
• Migrates the alert on the new branch page. !50307
• Fully disable auto admin mode and migrate remaining specs. !50331 (Diego Louzán)
• Refactor specs around gpg_keys in users_controller_spec.rb. !50337 (Takuya Noguchi)
• Refactor specs around ssh_keys in users_controller_spec.rb. !50338 (Takuya Noguchi)
• Improve badges UI text. !50351
• Update error message used in boards sidebar subscription. !50352
• Update GitLab Runner Helm Chart to 0.24.0. !50377
• Update Auto DevOps UI text to match style guidelines. !50398 (Amy Qualls @aqualls)
• Updated UI text to match style guidelines. !50403
• Improve service desk UI text. !50407
• Replace user controller spec with its request spec. !50435 (Takuya Noguchi)
• Updated UI text to match style guidelines. !50475 (Amy Qualls @aqualls)
• Updated UI text to match style guidelines. !50476
• Updated UI text to make runner lowercase. !50477
• Change failure message of missing job needs. !50492
• [Commit Page] Migrate to GlModal for revert commit. !50522
• Updated link text to match style guidelines. !50555
• Fix text color for 'no estimate or time spent' message in time tracker component. !50558
• Migrate runner_setup_controller_spec.rb to request spec. !50600 (Takuya Noguchi)
• Sampler intervals can now be configured via env vars. !50625
• Add test to check if /users/User is redirected to /User. !50651 (Takuya Noguchi)
• Add metrics to creating, closing, reopening and merging merge requests. !50654
• Update Docker from 19.03.0 to 20.10.1 on CI/CD. !50732 (Takuya Noguchi)
• Migrate jwks_controller specs to request specs of them. !50767 (Takuya Noguchi @tnir)
• Update copy on Feature Flags List view to be more descriptive for users. !50813 (Sarah Rosenshine)
• Add metrics to creating, editing or removing comments on merge requests. !50849
• Use git packages from buster on build-qa-image. !50867 (Takuya Noguchi @tnir)
• Upgrade factory_bot_rails to 6.1.0. !50875
• Update net-ldap gem version. !50888
• Add version cache field to composer metadata. !50906
• Drop temporary index on ci_builds. !50961
• Remove unnecessary use of .freeze. !50963 (Adam Davies @adamd92)
• Update canary(next) badge style with new GitLab UI. !50965 (Yogi (@yo))
• Remove tmp_index_for_email_unconfirmation_migration index in the emails table. !50981
• Improve delete snippet feature spec. !51020 (Lee Tickett @leetickett)
• Update toggle button in repo general settings. !51036 (Yogi (@yo))
• Reduce heading font size in validate CI lint page. !51042 (Yogi (@yo))
• Remove unnecessary use of .freeze. !51073 (Adam Davies @adamd92)
• Update button style of expand/collapse button on Deploy Tokens page. !51077 (nuwe1)
• Update button style of Revoke button on Deploy Tokens page. !51079 (nuwe1)
• Apply GitLab UI button styles to buttons in transactions show.html.haml files. !51096 (nuwe1)
• Add metrics to creating, editing or removing multiline comments on merge requests. !51098
• Update default value of applications_settings.max_import_size to 0. !51229
• Add one welcome email for account provisioned by group. !51271
• Add gl-button to move issue button in issue sidebar. !51285 (Yogi (@yo))
• Update to new GitLab UI button in members invite page. !51300 (Yogi (@yo))
• Update grape-path-helpers gem version. !51320
• Drop tmp_index_for_email_unconfirmation index from the emails table again. !51440
• Add metrics to starting and publishing a review. !51521
• Add gl-badge to members list badges. !51546 (Yogi (@yo))
• Add gl-badge to CI badges. !51547 (Yogi (@yo))
• Add gl-badge to CI runners. !51548 (Yogi (@yo))
• Add gl-mt-3 to no schedules nothing-here-block. !51551 (Yogi (@yo))
• Add gl-button to Add Jaeger URL. !51553 (Yogi (@yo))
• Add gl-button to dismiss feature highlight button. !51555 (Yogi (@yo))
• Remove unneeded group label index. !51676
• Apply GitLab UI button styles to buttons in project wiki. !51780 (Yogi (@yo))
• Add verbiage + link sast to show it's in core. !51935

13.7.9 (2021-03-17)

Security (1 change)

• Patch Kramdown syntax highlighter gem.

13.7.8 (2021-03-04)

Security (5 changes)

• Bump thrift gem to 0.14.0.
• Allow only owners to manage group variables.
• Do not store marshalled sessions ids in Redis.
• Workhorse: prevent escaped router path traversal.
• Fix XSS vulnerability for swagger file viewer.

13.7.7 (2021-02-11)

Security (9 changes)

• Cancel running and pending jobs when a project is deleted. !1220
• Prevent Denial of Service Attack on gitlab-shell.
• Prevent exposure of confidential issue titles in file browser.
• Updates authorization for linting API.
• Check user access on API merge request read actions.
• Limit daily invitations to groups and projects.
• Enforce the analytics enabled project setting for project-level analytics features.
• Perform SSL verification for FortiTokenCloud Integration.
• Prevent Server-side Request Forgery for Prometheus when secured by Google IAP.

13.7.6 (2021-02-01)

Security (5 changes)

• Filter sensitive GraphQL variables from logs.
• Avoid exposing release links when the user cannot read git-tag/repository.
• Sanitize target branch on MR page.
• Fix DNS rebinding protection bypass when allowing an IP address in Outbound Requests setting.
• Add routes for unmatched url for not-get requests.

13.7.5 (2021-01-25)

Fixed (2 changes, 1 of them is from the community)

• New project guidelines are no longer displayed. !50736 (Roger Meier)
• Fix LFS not working with S3 specific-storage settings. !52296

13.7.4 (2021-01-13)

Security (1 change)

• Deny implicit flow for confidential apps.

13.7.3 (2021-01-08)

Fixed (7 changes)

• Fix Canary Ingress weight is not reflected on UI immediately. !50246
• Change pages deployments size to bigint. !50262
• Fix viewing container repositories with tags with corrupted manifest. !50362
• Fix the graphQL type for container repository tags. !50419
• Fix(eetrialbanner): fix EE trial banner to allow dismiss. !50436
• Update Helm 2 version to 2.17.0. !50547
• Fix project access token regression. !50800

13.7.2 (2021-01-07)

Security (7 changes)

• Forbid public cache for private repos.
• Deny implicit flow for confidential apps.
• Update NuGet regular expression to protect against ReDoS.
• Fix regular expression backtracking issue in package name validation.
• Fix stealing API token from GitLab Pages and DoS Prometheus through GitLab Pages.
• Update trusted OAuth applications to set them as confidential.
• Upgrade Workhorse to 8.58.2.

13.7.1 (2020-12-23)

Fixed (1 change)

• Fix project transfer corrupting shared runners state. !47316

13.7.0 (2020-12-22)

Security (1 change)

• Fix regular expression backtracking issue in custom emoji name validation.

Removed (2 changes, 1 of them is from the community)

• Remove Google Code importer. !48139 (Getulio Valentin Sánchez)
• Remove release notes from Tags page. !49979

Fixed (109 changes, 7 of them are from the community)

• Update user mentions when markdown columns are directly saved to DB. !38034
• Retain spinner when applying MR suggestions. !46203
• Skipped jobs no longer trigger a cancelled deployment. !46614 (David Barr @davebarr)
• Catch wiki timeouts when rendering pages. !46627
• Fix single file snippets display for Geo secondary sites. !46812
• Fix Jira Connect styles not loaded when startup_css is enabled. !47043
• Add migration that updated users that don't need to have 2fa established. !47193
• Fix project integration form validation when integration is inactive. !47201
• Fix project access token build authentication error. !47247
• Support S3 server side encryption in CI cloud native job logs. !47536
• Fix repository clone panel for wikis. !47676
• Hide Mark as draft button in a merged MR even on mobile. !47678 (Takuya Noguchi)
• Eliminate N+1 performance issues in MergeRequest.pipelines in GraphQL API. !47784
• Add cascade delete foreign key to web_hooks on service_id without validation. !47821
• Implement passing dotenv variables to bridge jobs. !47905
• Allow canceling all pipelines with auto-cancel. !47906
• Fix error in Issuable::ImportCsv::BaseService when CSV file is empty. !47918
• Fixed editing labels on the swimlanes sidebar. !47946
• Scroll exactly to the top of a discussion on the MR Overview tab. !47970
• Search page: fix empty results status. !48034
• Move fuzz license check to .pre stage. !48076
• Add link in Access Request API. !48081 (jimcser)
• Add gitlab:db:active task. !48083
• Fix overscroll for MR diffs in mobile view. !48091
• Fix incorrect line height in file header. !48117
• Repopulate historical vulnerability statistics. !48128
• Fixed image diff comments positioning. !48132
• Manually trigger pipelines correctly when branches and tags have the same name. Separate tags and branches in trigger pipeline form. !48142
• Allow failure for Secret Detection job. !48152
• Change services.inherit_from_id foreign key to ON DELETE CASCADE. !48163
• Avoid exception when validating diff_note support. !48187
• Avoid invalid notes on Project Import. !48189
• Update alert setting form to handle JSON payload submit when mapping builder is not enabled. !48231
• Adds id desc to index_ci_builds_on_runner_id_and_id_desc. !48241
• Adds type="button" to the close button for the issue type selector to prevent accidental form submission. !48249
• Remove orphan service hooks. !48263
• Fix console error being thrown when file is renamed. !48275
• Update alert details sidebar assignee dropdown to use correct styling and formatting. !48285
• Consider design repositories when determining if there is a git transfer in progress. !48304
• Set Retry-After header when RackAttack throttling. !48310
• Fix misaligned buttons for CI Jobs page. !48332 (mgandres)
• Use incident instead of issue for operation settings. !48406
• Fix missing item with same name in autocomplete suggestions. !48410 (Paul Ungureanu @ungps)
• Fix misalignment of commit search by message input. !48430
• Prometheus integration name should not have a modifiable input field. !48437
• Fix stretched flash in project commit show page. !48439
• Ensure job trace endpoint is not called if the current job has not started or the browser is not visible. !48516
• Update fog-aws to v3.6.7. !48519
• Fixed double-border style on WebIDE button. !48605
• Fix spacing between buttons on pipeline header. !48660
• Fix vulnerability deduplication logic for the "pipeline security tab". !48704
• Add type filtering in appearance page of the admin panel. !48709 (Paul Ungureanu @ungps)
• Fix confirmation modal showing on project integration. !48720
• Fix import of LFS files in GitHub import. !48722
• Github importer - Avoid touching MR when importing pull request merged by field. !48729
• Fix styling of various dropdowns. !48800
• Fix MR buttons when fork is deleted. !48813
• Add menu-item class to non-details-job-component. !48834
• GraphQL: Add gitlay field to CiStatusAction. !48892
• Global Search - Fix Dark Mode Font. !48927
• Fix flex overflow bug. !48931
• Restrict access to job page to developers only when use CI_DEBUG_TRACE is true. !48932
• Resolve Cannot remove namespace. !48973
• Resolve Save button should have a different color on press. !48975
• Fix last_value record in internal_ids for epics. !48988
• Fix failed group imports getting stuck by long error messages. !48989
• Avoid branch name checking when creating a new snippet. !48995
• Ensure default_branch from settings is not blank. !49018
• Make sure Sourcegraph asset always loads successfully. !49030
• Fix avatar size in profile activity. !49047
• Fix margin and selected state in file header. !49059
• Fix comment highlighting for unified diff components. !49061
• Fix Jupyter notebook code and image rendering. !49067
• Fix bug in ProjectRepositoryStorageMove transition to scheduled. !49105
• Do not crash the ingestion of all security reports if there is an invalid report artifact. !49181
• Do not automatically reapply incident label after user removes it. !49188
• Update fog-google to v1.12. !49196
• Check for a status in the current user dropdown. !49203
• Fix pipeline page in dark mode. !49214
• Handle prometheus-formatted alert notifications through HTTP integrations. !49268
• Update repository size after import. !49319
• Fix typo on merge locally step. !49330
• Fix getting security report information on merge requests from forks. !49354
• Conan packages show build and commit information when published using CI. !49426
• Clear emoji status in issue/mr header. !49439
• Hide extra breadcrumb arrow that overlaps with last breadcrumb item. !49456
• Fix division by error when upload max size is set to 0. !49482
• Capture subgroup creation failure during Group Import via archive file. !49484
• Alert Service integration only available for projects. !49561
• Update projects_imported.total usage metric. !49568
• Fix usage data tracking of some issue events. !49571
• Fix copy to clipboard on Firefox. !49648
• Fix outline on selected button in Snippets Rendered/Source buttons. !49676
• Add final newline on submit in blob editor. !49681
• Fail import state whenever repository import fails. !49682
• Fix author on /clone quickaction usage to be current user. !49830
• Upgrade mailroom to v0.0.8. !49834
• Fix the header name for basic auth authentication in package managers APIs. !49836
• Allow opsgenie manage form to be displayed when opsgenie is enabled. !49863
• Add custom cop to prevent invalid HTTParty usage. !49878 (Ethan Reesor (@firelizzard))
• Remove last-child bottom-margin: 0 from page-title class. !49884
• Fix wording of some 400 Bad request API responses. !49895
• Set Web IDE Live Preview default background to white. !49901
• Fix bug in snippets mark as spam mutation. !49912
• Make the strategies env wrap. !49951
• Fix get endpoint not returning members with minimal access. !49996
• Fix feature flag logging is not working on API. !50025
• Resolve No boards found message showing when loading boards. !50140
• Fix Markdown attachments in Releases not rendering with full URL. !50146

Deprecated (1 change)

• Drop unused feature_filter_type experiment column. !48221

Changed (124 changes, 12 of them are from the community)

• Move Jenkins to Core. !37797 (Ben Bodenmiller (@bbodenmiller))
• Migrate Bootstrap button to GitLab UI GlButton in IDE. !39988
• Replace bootstrap alerts in ee/app/views/admin/licenses/new.html.haml. !41275 (Gilang Gumilar)
• Replace bootstrap alerts in app/views/profiles/notifications/show.html.haml. !41310 (Gilang Gumilar)
• Replace bootstrap alerts in app/views/admin/runners/show.html.haml. !41378 (Gilang Gumilar)
• Replace Runner Page Title with Runner’s Hash. !44854 (Kev @KevSlashNull)
• Rename Piwik config items and layout file after rebranding to Matomo. !45658 (Kate Grechishkina @kategrechishkina)
• Improve clarity of admin Rate Limiting UI. !46142
• Replace fa-exclamation-triangle icons with GitLab SVG warning-solid icon. !47089
• Add converted_at timestamp column to experiment_users to record when the user performs an experiment's conversion action. !47093
• Preserve cross references in AsciiDoc documents. !47131 (Guillaume Grossetie)
• Darker background for dark mode, plus small fixes to MR page. !47359
• Add option to uninstall the legacy Tiller server for clusters added before GitLab 13.2. !47457
• Use GitLab UI styles on Integrations page. !47478
• Add a job to the DAST template that shows an error in the console if the user is not licensed to use DAST. !47484
• Add BulkImports::Failure to store import failures of the Group Migration (BulkImports) process. !47526
• Remove brackets in no scopes selected message in access and deploy tokens lists. !47628
• Begin auto-stop countdown for environment after initial creation. !47702
• Change default project listing sort order to name. !47734 (Lee Tickett)
• Finalize new create project UI experiment. !47804
• Make ImportIssuesCsvWorker idempotent. !47808
• Remove "Details" from breadcrumb item and LD+JSON from Project top. !47817 (Takuya Noguchi)
• Convert knative error alert to glalert. !47840
• Remember last used project ordering option across groups. !47850 (Lee Tickett)
• Remove "Details" from breadcrumb and JSON+JD on Group top page. !47854 (Takuya Noguchi)
• Hide open registration user callout on gitlab.com. !47865
• Make "How to merge" modal in merge requests conform to correct modal styling. !47889
• Remove Add Issues button and a related modal. !47898
• Remove Feature Flag that controls data limit on Deploy Boards, thus making 10MB limits mandatory. !47950
• Removed boards promotion. !47972
• Replace fa-chevron-down in template selector dropdown. !48015
• Remove http_integrations_list feature flag. !48030
• Add filtering by current iteration to issue lists and issue boards. !48040
• Implement smart cobertura class path correction. !48048
• Replace fa-chevron-down icon in pikaday. !48054
• Add User.location field to GraphQL API. !48059
• Add support for filtering direct group members by 2FA enabled/disabled. !48084
• Iterate on the copy in the “Novice or Experienced” page of the registration onboarding flow. !48086
• Add metrics for count of unique users of alerts and incidents to usage ping. !48087
• Allow Pages to define a storage-specific connection. !48098
• Replace fa-exclamation-triangle in users select. !48116
• Add a generic packages tab to the Packages UI. !48121
• Replace fa icons in single file diff. !48136
• Add checksum column into the vulnerability_remediations table. !48165
• Replace fa-chevron-down with GitLab SVG in dropdowns. !48171
• Add ldap encrypted credentials to the usage data. !48210
• Replace fa-spinner in metrics dashboard yaml definition. !48227
• Update Design of the Container Registry Cleanup Policy for tags. !48243
• Enable LFS chunked encoding. !48269
• Authorize the project for the cluster agent if it is the agent's project. !48314
• Add GlFormCheckbox to squash commits. !48338
• Add metric for dead Sidekiq jobs. !48361
• Make How to merge modal in merge requests widget conform to correct modal styling. !48370
• Allow filtering project and group members by relationship in GraphQL. !48372
• Add Attributes cleaner to Group Migration. !48374
• Add additional fields to GraphQl terraform state version. !48411
• Bumps Managed-Cluster-Applications CI template to v0.36.0, which upgrades Runner. !48444
• Expose public email field for user in GraphQL. !48468
• Add MAU counter for snippet show action. !48477
• Refine group creation form. !48490
• Geo: Remove unused indexes. !48504
• Update empty state for no commits result. !48538
• Github Importer - import the pull request merged by field. !48561
• Refactor container registry list page to grapqhl. !48602
• Transfer a project/group to a new namespace inheriting integrations. !48621
• Replace fa-chevron-down icons with GitLab SVG in gcp cluster form. !48656
• Add containerRepositoriesCount to project and group queries. !48685
• Track test failures on pipeline completion. !48695
• Include actual limit in pipeline limit errors. !48710
• Replace how to merge HAML with Vue component. !48766
• Global Search - Fix Sidebar Whitespace. !48832
• Move CanaryIngress to core. !48836
• Finish removing unused replication columns from terraform state. !48839
• The dependency proxy caches manifests and makes HEAD requests to help with rate limiting. !48845
• Update package_file table to display commits when present. !48882
• Avoid creating wiki empty repo when not present in export files. !48890
• Update nodejs-scan rule to wildcard prefix. !48902
• Add primary key to elasticsearch_indexed_projects. !48919
• Upgrade fog-aws to v3.7.0. !48921
• Add new column finding_uuid into vulnerability_feedback table. !48923
• Add primary key to elasticsearch_indexed_namespaces. !48944
• Add ability to type a number in related issues and prepend #. !48952
• Improve CI for external repo with configurable maximum mirroring frequency on self-hosted. !48955
• Enable pages_serve_from_deployments FF by default. !48974
• Replace fa-cirlce in runners helper. !48981
• Add GitHub Importer pagination. !48983
• Add primary key to merge_request_context_commit_diff_files. !49024
• Update template to use codequality 0.85.18-gitlab.1. !49034
• Display more pipelines info in package history. !49040
• Use a separate commit to store formatting changes in the Static Site Editor. !49052
• Delete manifests when purging the dependency proxy using the API. !49056
• Auto approve users if Admin approval after sign up setting is disabled. !49068
• Boards - Remove default labels lists generation. !49071
• Sort merge request diff files directory first. !49118
• Add user ID based allowlist for Rack::Attack. !49127
• Sort commit/compare diff files directory first. !49136
• Move IssueType notes and discussions count logic to resolvers. !49160
• Let rake gitlab:workhorse:install use vendored workhorse. !49250
• Allow alert list to be visible when alerts exist, even if alerting integrations are disabled. !49257
• EKS: Provide user feedback on AWS authorization errors. !49278
• Remove user_search_secondary_email feature flag. !49312
• Update gitlab-kas to v13.7.0. !49318
• Convert fa-caret-down icons to chevron-down SVG. !49332
• Enable file tree highlighting by default. !49356
• Merge 'Sample Data' and 'Built-in' tabs on Project Templates page. !49374
• Add Merge Train Setting to the graphql api. !49402
• Migrate HAML buttons to Pajamas in app/views/profiles/keys. !49421 (Jonston Chan @JonstonChan)
• Migrate createBoard away from boardStore. !49450
• Support merge requests filtered by reviewer in GraphQL API. !49464
• Gradually load more diffs async. !49476
• Require users to copy, download, or print 2FA recovery codes. !49493
• Convert group member filter dropdowns to filtered search bar. !49505
• Update GitLab Workhorse to v8.58.0. !49534
• Refactor container registry to use GraphQL API. !49584
• Remove unneeded pagination code for project importers. !49589
• Update deprecated button on pipeline security table. !49620
• Update ide pipeline alert to use gitlab ui. !49634
• Updates the copy on empty users list tabs. !49642
• Enable LFS chunked encoding by default. !49649
• Add visibility and last updated image repository details. !49703
• Allow updating hideBacklogList and hideClosedList board attributes. !49947
• Add expires_at param to GroupMemberBuilder data. !49981
• Change the unique index on security_findings table. !50046
• Remove dast_unlicensed job. !50129

Performance (24 changes, 2 of them are from the community)

• Remove redundant index. !47072
• Add database index for deployment rollback targets. !47159
• Add index for API Fuzzing usage data. !47692
• Paginate unit test report. !47953
• Remove .issue-box from static (classic) Issuable list. !47998 (Takuya Noguchi)
• Remove Bootstrap 4's Cards components from Issuables and Todos. !48004 (Takuya Noguchi)
• Fix N+1 when looking up user's solo owned groups. !48340
• Paginate first page of branches using Gitaly. !48595
• Add approvals created_at index. !48684
• Update index for notes to include system. !48864
• Remove unnecessary Gitaly calls from raw endpoint. !48917
• Reduce SQL queries when no pipeline hooks are active. !49186
• Improve query that finds all pipelines in the same family. !49240
• Rendering Loading State of Last Commit earlier. !49362
• Fix N+1 queries loading milestones when exporting CSVs. !49429
• Update snippet repository finder for namespace replication. !49518
• Reduce object allocations for large merge request. !49563
• Remove unnecessary Gitaly calls from projects#show. !49565
• Expand index on ci_pipelines. !49604
• Remove unnecessary queries in milestone page. !49662
• Improve the performance of the diff change access check. !49803
• Remove initial data check on project level value stream page. !49936
• Improve UI and performance of branches overview page. !50096
• Use the improved version of Value Stream Analytics backend on the project level. !50141

Added (125 changes, 13 of them are from the community)

• Configurable personal access token prefix. !20968 (Max Wittig & Diego Louzán)
• Add CI_OPEN_MERGE_REQUESTS environment variable. !38673 (Ben Bodenmiller @bbodenmiller)
• Add Kroki to support more diagrams in AsciiDoc and Markdown. !44851 (Guillaume Grossetie)
• Fix the unreachable CLI image in OpenShift CI template. !44933 (Klaus Mueller @klml)
• Add other role column in user details table. !45635
• Add encrypted ldap secrets support. !45712
• Add the gitlab-experiment gem, with configuration. !45840
• Support Git access for group wikis. !45892
• Add toggle to remove Analytics left nav item. !46011
• Add merge requests total time to merge field to the GraphQL API. !46040
• Cleanup webauthn background migration. !46179 (Jan Beckmann)
• Add GraphQL mutation to update a release. !46611
• Capture design detail views via usage ping. !46751
• Add metric image uploading to incidents via REST API. !46845
• Expose GraphQL resolver for processing CI config. !46912
• Limit maximum deployments per pipeline to 500. !46931
• Enable Crowd auth for git-over-https. !46935 (Thomas Mendoza @tgmachina)
• Create a new ExperimentSubject model, associated to the Experiment model, and related database migrations. !47042
• Add GraphQL mutations for Devops Adoption Segment. !47066
• Allow passing commit_id when creating MR discussions via the API and expose commit_id for MR diff notes. !47130 (Johannes Altmanninger @krobelus)
• Adds bulk project repository storage move API. !47142
• Add packages_size to ProjectStatistics API entity. !47156 (Roger Meier)
• Create vulnerability_findings_remediations and vulnerability_remediations tables. !47166
• Geo: Add verification state machine fields to package files table. !47260
• Add increment_counter to Usage Ping API. !47309
• Geo: Add verification indexes for package files. !47372
• Add SEO structured markup for groups. !47374
• Create incident_management_oncall_schedules table. !47407
• Add confirm modal to unblock user. !47442
• Add API endoint for Administrators to approve pending users. !47564
• Allow secondary emails in user search. !47587
• Frontend client for increment_counter API. !47622
• Schedule CreateEvidenceWorker jobs in a sliding window. !47638
• Send Static Site Editor events to Usage Ping API. !47640
• Add rake task to disable personal project and group creation. !47655
• Add assign self to group boards sidebar. !47705
• Toggle File-By-File setting from the MR settings dropdown. !47726
• Add regulated field to compliance management frameworks. !47761
• Add lock button to the Terraform State list view. !47842
• Adds migration for user permission uploads. !47846
• Add loading state to boards assignees header dropdown. !47848
• Use CS_ANALYZER_IMAGE in CS template. !47856
• Add cloud_license_enabled column to application_settings. !47882
• Add invitation reminders. !47920
• Create namespace onboarding actions table. !48018
• Expose creation/update times for issue links. !48051
• Add upcoming deployment column to Environments page. !48062
• Add service_desk_reply_to to issues list and header. !48089 (Lee Tickett)
• Add iteration_id column to lists. !48103
• Add Epic Board Position model to store relative positioning of epics on a board. !48120
• Add code coverage overall activity to group repository analytics. !48155
• Add confirm modal to reactivate user. !48173
• Email user when registration request is rejected. !48185
• Add artifacts field to JobType. !48207
• Add database index on deployments. !48265
• Add secondary indexes to partitioned audit_events. !48270
• Obfuscate user profile for unconfirmed users. !48271
• Add flash message for setAssignees on group issue boards. !48277
• Add an URL to get user's GPG key if registerd. !48321 (Shimura Rin @blackenedgold)
• Add Operations project setting logic. !48347
• Add GraphQL mutation to delete a release. !48364
• Track MAU for SSE edit. !48377
• Add loading state to assignees header. !48392
• Implement a /clone quick-action to quickly clone an Issue. !48394
• Expose upcoming deployment in environment.json. !48449
• Add Vulnerabilities External Link model. !48465
• Add migration to populate remaining dismissal information for vulnerabilities. !48472
• Mark SCIM-created accounts as provisioned by group. !48483
• Add delete button to terraform list vue. !48485
• Show if a Pipeline was Ran in a Fork. !48517
• Added email notifications when an Issue is cloned. !48534
• Add dependency_proxy_manifests table and associations. !48535
• Add usage metrics for issue clone. !48537
• Implement a /clone_with_notes quick-action to quickly clone an Issue will all its notes. !48539
• Tracks guest package events. !48547
• Retry rsync when source files vanish during backup. !48568
• Add Setting to disable feed_tokens. !48600
• Enable by default usage data API tracking. !48607
• Add GraphQL API to delete container repository tags. !48617
• Github Importer - import pull request reviews from Github. !48632
• Added epic boards and epic board labels tables. !48658
• Allow alerts to be filtered by monitoring tool. !48699
• Adds guest package events to usage data. !48734
• Render http and https URLs as clickable links in Job logs. !48758 (Łukasz Groszkowski @falxcerebri)
• Add Merge Request diff CI variables. !48764 (Jonas Hahnfeld)
• Add admin users serializer and entity. !48791
• Set vulnerability as dismissed when there is dismissal feedback. !48795
• Create package build_info records for Conan, NuGet, PyPI, and Composer packages and package files. !48811
• Add download action to the Terraform state listing. !48837
• Add context to the experiment user records. !48896
• Add index for the vulnerabilities table on project_id, state, and severity columns. !48930
• Add uuid column into security_findings table. !48968 (Harrison Brock @harrisonbrock)
• Detect corrupted build logs and report them by incrementing Prometheus counter. !49004
• Add details column to vulnerability findings table. !49005
• Add Project to ContainerRepository GraphQL type. !49019
• Add pipeline information to Terraform state list. !49042
• Add oncall rotations and participants tables. !49058
• Add domain column to alerts table. !49120
• Add dependency proxy predefined environment variables. !49133
• Add usage data rake tasks to prettify JSON output. !49137
• Resolve Transition ID section should include help text. !49204
• Support instance profiles for IAM role for Amazon EKS integration. !49212
• Add project_id column into the vulnerability_remediations table to scope the records with projects. !49219
• Add member_events column to web_hooks table. !49273
• Upgrade Pages to 1.31.0. !49352
• Add CI/CD analytics GraphQL types. !49384
• Truncate the security_findings table. !49385
• Add validating jsonb fields with json schema draft-07. !49451
• Adds sha checksum to composer URL. !49511
• Dependency Proxy for private groups and Dependency Proxy authentication. !49519
• Save usage ping payload in raw_usage_data table. !49559
• Allow downloading of security reports directly from merge request page. !49572
• Show upgrade popover in security widget in merge requests when the user is able to upgrade. !49613
• Introduce frontend for group migration MVC. !49709
• Add issue header mobile dropdown loading state. !49734
• Support extensions as configurable ES6 classes in Editor Lite. !49813
• Allow job to download artifacts in parent-child pipeline hierarchy. !49837
• Add ability to aggregated metrics in Usage Ping. !49886
• Add expiration policy completed at support in container repositories. !49924
• Allow to configure custom service desk email address suffix. !49932
• Add payload_example and payload_attribute_mapping columns to alert_management_http_integrations table. !49941
• Add prefilled variables for run pipeline page. !49985
• Add operations_access_level to project settings API. !50023
• Upgrade GitLab Pages to 1.32.0. !50062
• Add MergeRequest to VulnerabilityType in GraphQL. !50082

Other (49 changes, 15 of them are from the community)

• Replace-GlDeprecatedDropdown-with-GlDropdown-in-app/assets/javascripts/boards. !41410 (nuwe1)
• Migrate bootstrap dropdown to GlDropdown in app/assets/javascripts/diffs. !41451 (nuwe1)
• Migrate awards list buttons to new buttons. !43061
• Apply GitLab UI button styles to buttons in app/views/projects/graphs directory. !44295 (Lakshit)
• Use GitLab's standard dropdown for the review mode chooser in the WebIDE. !46820
• Replaces elements with the bs-callout class with gl-alert vue component. !47331 (Gary Bell @garybell)
• Add analytics_devops_adoption_snapshots table. !47388
• Add relation name to indexes view. !47422
• Migrate chevron-down icon to svg. !47591
• Disable auto admin mode in features. !47670 (Diego Louzán)
• Remove avg_cycle_analytics from usage ping. !47812
• Remove unused .issue-box CSS. !48002 (Takuya Noguchi)
• Convert shared runner limit alert to gl-alert. !48063
• Remove temporary blocking issues scheduling indexes. !48064
• Update icons to svg in several sort dropdowns. !48092
• Move Terraform state versioning default to database. !48194
• Replace wrong index definition on labels (project_id, title). !48238
• Update GitLab Runner Helm Chart to 0.23.0. !48284
• Add external_author alias to service_desk_reply_to. !48363 (Lee Tickett)
• Migrate bs-callout to GlAlert in …/unmet_prerequisites_block.vue. !48398
• Improve logging on feature flag modification. !48417
• Replace bootstrap caret-down with chevron-down. !48424
• Convert bootstrap carets to svg chevrons. !48492
• Rename "Cycle Analytics" with "Value Stream Analytics" under /spec. !48531 (Takuya Noguchi)
• Update GitLab Workhorse to v8.56.0. !48592
• Update gitaly gem to 13.6.1. !48601
• Rename "CYCLE_ANALYTICS_" variables for CI with "VSA_". !48675 (Takuya Noguchi)
• Adds gl button classes to manifest imports. !48697
• Add btree bloat estimation view. !48698
• Disable auto admin mode on requests and views specs. !48700 (Diego Louzán)
• Move users#show.json to users#activity.json. !48712 (Takuya Noguchi)
• Remove view_diffs_file_by_file feature flag. !48966
• Move profiles/keys#get_keys to users#ssh_keys. !48991 (Takuya Noguchi)
• Replace wiki fontawesome icons with emojis. !49097
• Add a project setting to allow editing commit messages. !49152
• Updated UI text to match style guidelines. !49275
• Move profiles/gpg_keys#get_keys to users#gpg_keys. !49448 (Takuya Noguchi)
• Remove references to cross_project_pipeline source in documentation. !49579
• Updated UI text to match style guidelines. !49632
• Migrate bs-callout to GlAlert for components using app/assets/javascripts/vue_shared/components/callout.vue. !49732 (Gary Bell @garybell)
• Bump gitlab-shell version to v13.14.0. !49810
• Track index bloat estimate. !49822
• Conver create merge request button to gl. !49864
• Adds gitlab ui classes to project dir buttons. !49939
• Removed count_uploads_size_in_storage_stats feature flag. !49998
• Delete MockDeploymentService records, used only in development environments. !50030
• Add feed_token specs to spec/features/profiles/personal_access_tokens_spec.rb. !50059
• Replace spec/controllers/ide_controller_spec.rb with request spec. !50075 (Takuya Noguchi)
• Update GitLab Workhorse to v8.57.0.

13.6.7 (2021-02-11)

Security (7 changes)

• Cancel running and pending jobs when a project is deleted. !1220
• Updates authorization for linting API.
• Prevent exposure of confidential issue titles in file browser.
• Check user access on API merge request read actions.
• Prevent Denial of Service Attack on gitlab-shell.
• Limit daily invitations to groups and projects.
• Prevent Server-side Request Forgery for Prometheus when secured by Google IAP.

13.6.6 (2021-02-01)

Security (5 changes)

• Filter sensitive GraphQL variables from logs.
• Avoid exposing release links when the user cannot read git-tag/repository.
• Sanitize target branch on MR page.
• Fix DNS rebinding protection bypass when allowing an IP address in Outbound Requests setting.
• Add routes for unmatched url for not-get requests.

13.6.5 (2021-01-13)

Security (1 change)

• Deny implicit flow for confidential apps.

13.6.4 (2021-01-07)

Security (7 changes)

• Forbid public cache for private repos.
• Deny implicit flow for confidential apps.
• Update NuGet regular expression to protect against ReDoS.
• Fix regular expression backtracking issue in package name validation.
• Upgrade GitLab Pages to 1.30.2.
• Update trusted OAuth applications to set them as confidential.
• Upgrade Workhorse to 8.54.2.

13.6.3 (2020-12-10)

Fixed (5 changes)

• Fix error 500s creating projects concurrently. !48571
• Fix container_registry url for relative urls. !48661
• Resolve Members page 500 error after Invitation sent via API. !48937
• Add different string encoding method in rack middleware. !49044
• Fix MR rendering issue when user is tool admin and not project member. !49258

Changed (1 change)

• Update Rake check and docs to require Ruby 2.7. !48552

13.6.2 (2020-12-07)

Security (10 changes)

• Validate zoom links to start with https only. !1055
• Require at least 3 characters when searching for project in the Explore page.
• Do not show emails of users in confirmation page.
• Forbid setting a gitlabUserList strategy to a list from another project.
• Fix mermaid resource consumption in GFM fields.
• Ensure group and project memberships are not leaked via API for users with private profiles.
• GraphQL User: do not expose email if set to private.
• Filter search parameter to prevent data leaks.
• Do not expose starred projects of users with private profile via API.
• Do not show starred & contributed projects of users with private profile.

13.6.1 (2020-11-23)

Fixed (5 changes)

• Fix project transfer corrupting shared runners state. !48032
• Fix project select split button bug. !48065
• Fix tags pages erroring for projects with private pipelines. !48184
• Ensure Alerts list loads when only HTTP integrations are enabled. !48247
• Does not track package events on a read-only instance. !48257

Changed (1 change)

• Re-name Instance Statistics as Usage Trends. !48183

13.6.0 (2020-11-22)

Removed (3 changes)

• Removed ACE editor from the codebase. !46420
• Remove storage limit column from application settings. !46676
• Remove the ability to resole individual notes. !46775

Fixed (140 changes, 11 of them are from the community)

• Fix rendering of markdown headings and floated images. !25442 (Gwen_)
• Fix release assets link redirection. !35381
• Fix chatbot replies not including job log. !42010
• Show tar warning message when file/folder changed during backup instead of failing whole backup operation. !42197
• Remove default EKS Region dropdown in cluster create form. !43017
• Remove all records from security_findings table. !44312
• Add position column into security_findings table. !44815
• Render script newlines in CI Lint view. !45087 (Nejc Habjan)
• Fix a race condition checking whether a project is read-only. !45160
• Limit number of times a background migration is rescheduled. !45298
• Improve project labels page card layout consistency. !45311
• Do not convert unicode versions of trademark, copyright, and registered trademark to emoji. !45457
• Gracefully recover from deleted LFS file. !45459
• Fix Bad Escape in Issue Board Empty State. !45465 (Kev @KevSlashNull)
• Update cluster applications CI template to 0.34.1. !45487
• Fixed multi line comment options in parallel mode. !45557
• Removed not equal filter option for drafts on merge requests. !45649
• Fixed target branch not filtering. !45652
• Fix Merge Request "Edit in Web IDE" dropdown link on MR diffs page. !45653
• Handle malformed strings in URL. !45701
• Reset the pagination cursor when a search result filter changes. !45708
• Fix aria label on IDE tab close button. !45709
• Fix danger-secondary button in the Web IDE dark theme. !45714
• Removes the hamburger icon in the Changes tab in Web IDE. !45717
• Fix exception when saving Jira integration info for an instance. !45718
• Make sure the http_requests_total and http_request_duration_seconds metrics are not empty on application start. !45755
• Configure CSP for displaying Youtube videos in the Static Site Editor. !45767
• Render correct URLs for uploads in service desk issues when custom template is used. !45772
• Upgrade Workhorse to v8.52.0. !45778
• Fix project callbacks when propagating integrations. !45781
• Fix project import search box and make it case insensitive. !45783
• Remove the native styles for modal-dialog - Currently off center. !45789
• Fix when Feature Flags link is shown in search bar results. !45803
• Reset search results filters whenever a user changes scope. !45808
• Project Access Tokens - Delete project bot after token expires. !45828
• Paginate project_runners in ci_cd settings. !45830
• Fix bug with robots and .git suffix. !45866
• Block LFS requests on snippets. !45874
• Fix an N+1 issue in Packages::GroupPackagesFinder. !45875
• Fix sticky header issue status not syncing. !45895
• Download LFS files when importing from Bitbucket Server. !45908
• Fix viewing GitHub-imported diff notes in discussions. !45920
• Boards - Fix Milestone icon alignment in header. !45965
• Reduce whitespace on MR page header. !45966
• Fix CSS for To-Do List on mobile. !45969 (Takuya Noguchi)
• Fix wide content overflow on Notebook output. !45971
• Fix auto-deploy-image fetches deprecated stable repository and causes an error. !45984
• Fixed long paths truncating in merge request sidebar incorrectly. !45994
• Remove positive tabindexes. !46003
• Remove "Report abuse" button from a merged Merge Request. !46031 (Takuya Noguchi)
• Fix single file editor patch branch name. !46044
• Updated list view MR icon. !46059
• Tolerate UTF8 BOM character during frontmatter rendering. !46062
• Fix dropzone paperclip and loading icons. !46093
• Copyedit Project Issue Boards API docs. !46110 (Takuya Noguchi)
• Fix typos when deleting a project repository. !46204 (Edstub207)
• Enable rendering avatars with full url. !46206
• Fix bug accessing import route with no user. !46215
• Fix transaction usage in ContainerExpirationPolicyWorker. !46217
• Remove page_title from single project and group pages. !46223
• Skip GMA and SSO validation when creating project access tokens for project bots. !46257
• Make loading icon on feature flag edit page larger. !46268
• Allow semver versions in composer packages. !46301
• Don't return target-specific broadcasts without a current path supplied. !46322
• Fix tracking of frequently visited projects / groups. !46348
• Do not query snippet infromation on the new snippet's creation. !46355
• Populate missing dismissed_at and dismissed_by_id attributes of vulnerabilities. !46370
• Add CI Status CSS to the Environments Page. !46382
• Allow project storage to be updated when no repositories exist. !46385
• Add licensed check for wip limits. !46387
• Fix problems with Groups API search query parameter. !46394
• Fix QuickActions not working if written before a codeblock. !46401
• Resolve User stuck in 2FA setup page even if group disable 2FA enforce. !46432
• Job dropdown: Hide tooltip explicitly on click. !46465
• Fix loading current directory when changing branches. !46479
• Allow to apply group labels with service desk templates. !46492
• Fix CI artifacts not uploading with tracing enabled and without NGINX. !46513
• Fix logging handling for API integer params. !46551
• Bugfix email notification recipients for comments on Designs. !46642
• Fix linebreak issue in last commit anchor. !46643
• Upgrade fog-google to v1.11.0. !46648
• Fix 'File name too long' error happening during Project Export when exporting project uploads. !46674
• container registry: show delete selected button on medium viewports. !46699
• Improve thread safety of Ci::BuildTraceChunk data stores. !46717
• Fix 404 error from Commit Signature API when using Rugged. !46736
• Fix example responses for Project Issue Board creation API in the docs. !46749 (Takuya Noguchi)
• Autofocus on search input within labels dropdown after labels are loaded. !46750
• Fix example responses for Group Issue Board creation API in the docs. !46760 (Takuya Noguchi)
• Make the Merge Train process flow more resilient by always refreshing merge requests from beginning. !46768
• Show "No user list selected" in feature flags. !46790
• Skip disabled features when importing a project from Gitea. !46800 (John Kristensen (@jerrykan))
• Fixed create merge request dropdown not re-opening after typing invalid source branch. !46802
• Fix broadcast notification close icon appearance. !46804
• Fix remove label inconsistency. !46805
• Assign new incoming diff lines for renamed files to the correct view type. !46823
• Display submodules in MR tree and file header. !46840
• Fix empty state message in explore projects page. !46860
• Better-behaved tooltips in pipeline dropdown. !46866
• Ensure security report is displayed correctly in merge requests with a lot of CI jobs. !46870
• Fix code lines being cut-off on failed job tab. !46885
• Populate values for has_vulnerabilities column of project_settings table. !46890
• Fix group destroy not working with Gitaly Cluster. !46934
• Fix setting Comment detail for Jira and modal for groups. !46945
• Fix retried builds icon sprite to use css_class. !46955
• Remove unnecessary expand sha button in pipelines page. !47012
• Fix operations settings when Pipelines are disabled. !47062
• Fix duplicate epic iids and add uniqueness constraint. !47081
• Fix relative path not found on production web server. !47090
• Moved template warning below type. !47103
• Fix top margin in new project page. !47109
• Make delete repo prompts consistent. !47117
• Make register_instructions optional for RunnerSetup. !47123
• Fix milestones param validation for releases API PUT method. !47169
• Fixed create branch button not hiding when issue is closed. !47187
• Fix config variables when having includes. !47189
• Handle nullbytes in auth headers. !47206
• Fix error when updating releases with milestone associations through the UI. !47222
• Fixed diff metadata endpoint being called twice. !47265
• Fix pipeline security tab filters not showing. !47294
• Fix unified component inline display. !47345
• Fix secure MR widget colors in dark mode. !47352
• Fix status emoji tooltip trigger. !47378
• Fix workflow:rules not accessing passed-upstream and trigger variables. !47399
• Fix internal lfs_authenticate API for non-project repositories. !47404
• Fix alerts integration list Snowplow tracking event. !47413
• Resolve Suggest Pipeline flow second step not loading. !47419
• Fix overly aggressive prevent call. !47455
• Fix syntax highlight issue with regular expressions. !47469
• Stop finding commit with empty ref. !47497
• Fix issues list when due date parameter is invalid. !47524
• Bump versions of secrets and klar in the Secure-Binaries template. !47531
• Fixed copy contents functionality for snippets. !47646
• Reject incomplete multibyte chars in UTF8 params. !47658
• Fix deploy token permissions for write_package_registry. !47675
• Fix comment cells not rendering in unified component inline view. !47693
• Replace poorly performing auth event providers query in usage ping. !47710
• Do not fail when cleaning up MR with no repository. !47744
• Clear cached merge_ref_sha on reopen. !47747
• Refactor and UI-polish around activity calendar on user profile. !47797 (Takuya Noguchi)
• Fix for missing user info for Terraform State. !47814

Deprecated (1 change)

• Deprecate support for Elasticsearch 6.x. !45619

Changed (143 changes, 5 of them are from the community)

• Match Jira users by email, username or name on jira issues import. !33883
• Use global IDs for GraphQL arguments accepting sentry IDs. !36098
• GraphQL Snippets: use Global-ID scalar. !36117
• Add Google Tag Manger to sign in/up and trial pages. !38395
• Prune loose objects during git garbage collection. !39592
• Throttle container cleanup policies execution by using a limited capacity worker. !40740
• Update leave group modal to gl-modal. !41817
• Split sign in and sign up pages. !42592
• Improve messaging for emails from alerts. !43054
• Replace fa-check icons with GitLab SVG check icon. !43353
• Manually collapsed diff files are now significantly shorter and less visually intrusive. !43911
• Update change username modal. !44325
• Add support for search and inclusion of project labels within Group Labels API. !44415
• Add usage ping for unique users importing issues via CSV. !44742
• Add default regexes and prevent blank regexes for container cleanup policies. !44757
• Enable Sidekiq argument logging by default. !44853
• Search Autocomplete add GFM support for issues. !44930
• New group and project invite mail design. !44940
• Make the repository read-only while running cleanup. !45058
• Use existing group label when promoting project label. !45122
• Update Rack to v2.2.3. !45183
• Remove feedback alert from on-demand scans form. !45217
• Expand scope of coverage badge query to all successful builds. !45321
• Forbid top-level route sitemap.xml. !45359
• Update GraphQL input ids for Board Lists and Issues to be more type specific. !45398
• Update copy branch keyboard shortcut to click sidebar button. !45436
• Rename "a whole number" to "an integer number" in feature flags strategies. !45444
• Expose humanTimeEstimate and humanTotalTimeSpent via graphql. !45508
• Add link to the note on the email sent after adding a comment on an issue. !45511
• Add usage ping for unique users importing groups and projects via the group migration tool. !45536
• Remove resolve comment functionality. !45549
• Render 404 to search engine crawlers instead of redirecting to login. !45552
• Use GitLab SVGs in audit_icon helper. !45562
• Remove temp index on job artifacts. !45565
• Move test report system output to modal. !45575
• Generate a longer Kuberntes Agent Token by default (was 20 characters, now 50). !45620
• Update system note when marking merge request as draft or ready. !45644
• Replaced GlDeprecatedBadge for GlBadge in requirements tabs. !45647
• Add EC2 to AutoDevOps template. !45651
• Replace external-link icons with GitLab SVG. !45685
• Update loading icon for buttons used in MR's set to merge automatically. !45693
• Add fuzzy-search on full path in Groups API. !45729
• Minor UI improvements to Wiki Delete Page button and modal. !45740
• Add canonical link for default explore route. !45746
• Replaced GlDeprecatedBadge for GlBadge in environment header. !45768
• Replace fa-refresh icon with GitLab SVG. !45777
• Allow user snippets to be indexed by search crawlers. !45793
• Add total count to Terraform state GraphQL API. !45798
• Adds feature flag to disable package events. !45802
• increase allowed dotenv variables from 10 to 20. !45815 (jrreid)
• Remove search_filter_by_confidential Feature Flag. !45819
• Replace fa-caret-down with chevron-down SVG in pipeline action buttons. !45881
• Add new search params to metadata. !45896
• Add suggest pipeline for viable merge requests without pipelines. !45926
• Change permanent routable redirect to 301. !45980
• Disallow realtime_changes route in robots.txt. !45986
• Limits the Deploy Boards data to 10 MB. This change is enabled by default behind a feature flag. !46043
• Migrate DeprecatedModal to GitLab UI Modal for promoted labels. !46047
• Remove admin_approval_for_new_user_signups feature flag. !46051
• Show error in pipeline when API Fuzzing not licensed. !46064
• Improving Container Registry Delete Tags Service to log number of successfully deleted tags even if deletion process was interrupted by a timeout. !46079 (Maksim Stankevic, @maksimstankevic)
• Remove scanned_resources_count column from security scan. !46108
• Resolve request IP address on audit event. !46114
• Disallow /autocomplete/projects route in robots.txt. !46115
• Disallow WebIDE route in robots.txt. !46117
• Replace fa-chevron-up with GitLab SVG icon. !46118
• Pre-fetched GraphQL queries for snippet view. !46130
• Make all Project Issue Boards API available even in CE. !46137 (Takuya Noguchi)
• Move Personal Access Token API to Core. !46145
• Update stop all jobs modal to latest modal. !46157
• Replaced GlDeprecated Badge in clusters.vue. !46165
• Update whitelist/blacklist to allowlist/denylist in Signup restrictions window. !46168
• Use allowlist/denylist in application settings backend. !46170
• Update detailed_metric.vue modal to match Pajamas guidelines. !46183
• Use toasts for wiki notifications. !46201
• Refresh design zooming buttons. !46205
• Replace fa-warning icons with GitLab SVG warning-solid icon. !46214
• Disallow some project routes in robots.txt. !46218
• Improve empty search results message for group and project scopes. !46237
• Add minimal access users to group members api endpoints. !46238
• Replace ACE with Editor Lite. !46250
• Use CodeQuality 0.85.18 in the CI template. !46253
• Add rate limit bypass. !46259
• Use Helm 3 by default for GitLab-managed apps in new clusters. !46267
• Update diff_max_patch_bytes from 100kb -> 200kb. !46276
• Expand Diff File collapsed UI to be significantly more obvious. !46286
• Use standard loading state for Design Upload button. !46292
• Allow for return of scoped broadcast messages on shell. !46333
• Add filtering by recorded date to instance statistics measurements GraphQL API. !46344
• Background migration for setting Jira tracker data deployment type. !46368
• Use updated base report for CodeQuality MergeRequest widdget. !46384
• Make files header responsive and remove truncate name. !46406
• Switch to admin clusterRole for GitLab created environment Kubernetes service account. !46417
• Require Git v2.29.0. !46433
• Generate canonical url and remove trailing slash. !46435
• Moves projects_with_error_tracking_enabled ping usage to Core. !46556
• Mark Sidekiq queue selector as no longer experimental. !46562
• Add new incident counts to usage ping. !46602
• Added code coverage regex for Scala Scoverage. !46638 (opensorceror)
• Show error in pipeline when Coverage Fuzzing not licensed. !46652
• Forbid top level route sitemap. !46677
• Package details: on mobile show all the tags. !46679
• Add message in CI linter that it was validated with all the includes. !46713
• Reschedule again background migration which convers 'blocked_by' issue links to 'block'. !46770
• Load CI lint checks without refreshing the page. !46801
• Show code quality severity rating in the merge request details page. !46829
• Move "New subgroup" and "New project" out of the dropdown into individual buttons. !46907
• Admin approval required on user registration by default. !46937
• Update merge request search results design. !46944
• Add emailsDisabled field for issue type. !46947
• Enable 'instance_statistics' feature flag by default. !46962
• Update image upload path (SSE). !46967
• Changes limit for lsif artifacts to 100MB. !46980
• Add user info to Terraform State List. !46984
• Improve the container registry client tags delete method. !46989
• Filter GitHub projects to import using GitHub Search API. !47002
• Add BulkImport::Tracker to store the pagination information of the Group Migration (BulkImport) requests. !47009
• Use new image details API in container registry details. !47054
• Hide apply suggestion button for anonymous users. !47071
• Change the mutation and permissions for image note reposition. !47161
• Extend GraphQL API to commit to a new branch in a single operation. !47203
• Add region field to AWS Role. !47209
• Cache repository raw endpoint. !47225
• Update the tag name field helper text on the Edit Release page. !47234
• Make Terraform/Base.latest.gitlab-ci.yml template safer to use in projects that have non-terraform jobs. !47254
• MR Analytics: Fix chart tooltip covering filter dropdown. !47274
• Replace fa-check icon in custom notifications. !47288
• Use dedicated signing key for CI_JOB_JWT by default. !47336
• Replace fa-check icon in importer status. !47373
• Add pagination to Terraform list view. !47412
• Add new text and tab name for DAG. !47415
• Enable vue_group_members_list feature flag by default. !47427
• Improve the look of wikis in search results. !47470
• Dependency proxy feature is moved to GitLab core. !47471
• Remove ci_trace_new_fog_store feature flag. !47522
• Make schema breadcrumb urls absolute. !47523
• Add type annotation for snippet resolvers. !47548
• Remove feature flag to enable tracking unique test cases parsed globally. !47662
• Replace font-awesome icons in prometheus config. !47713
• Replace fa-chevron-down in dropdown button. !47758
• Replace fa-exclamation-triangle in markdown field MERGE_REQUEST_ID. !47786
• Update rack-oauth2 to v1.16.0. !47839 (Vincent Fazio @vfazio)
• Replace fa-chevron-down in project level VSA. !47885

Performance (14 changes, 2 of them are from the community)

• Don't refresh all discussions for a new diff note on a merge request. !43015
• Add default_branch to ci_daily_build_group_report_result. !45702
• Upgrade labkit to 0.13.1. !45788
• Add Caching to BitBucket Server Import for pull requests. !45790 (Simon Schrottner)
• Resolve admin/license timeout on large instances. !46336
• Gracefully degrade when counting takes too long for a filtered search. !46350
• Add Batch Support for Importing Pull Requests from Bitbucket. !46696 (Simon Schrottner)
• Schedule clean up of merge request refs efficiently. !46758
• Only set an ETag for the notes endpoint after all notes have been sent. !46810
• Parallelize the removal of expired job artifacts. !46971
• Fix pipelines chart query timeout. !47069
• Add NULLS LAST to index on merge request metrics. !47300
• Add missing expression indexes. !47424
• Enable HTTP caching of repository raw, archive, and avatar endpoints. !47430

Added (119 changes, 6 of them are from the community)

• Show build status in tag list. !34307 (Lee Tickett)
• Enable the ability to upload images via the SSE. !36299
• Add webhooks for feature flag. !41863 (Sashi)
• Add until_executed deduplication strategy. !42223
• Add support for .md.erb files in Static Site Editor. !42353
• Add install GitLab runner popup. !42877
• Add Default Initial Branch Name for Repositories Group Setting. !43290
• Update the milestone dropdown combobox to display separated sections and badge counters. !43427
• Jira Connect automatically synchronizes up to 400 existing merge requests per project when a namespace is connected. !43880
• Add CI JWT signing key to application_setings. !43950
• Add GraphQL endpoints to lock, unlock and delete Terraform states. !43955
• Add ability to sort releases on Releases page. !43963
• Debian RFC822 and .deb metadata extractor. !44029 (Mathieu Parent)
• Add assignees multiselect wrapper. !44087
• Show the environment link on alert details page. !44130
• Associate multiple pipelines with packages and package files. !44348
• Add a stop review job for ECS. !44717
• Add assignee dropdown to group issue boards. !44830
• Add Total Duration to CI/CD Analytics Page. !44863 (Kev @KevSlashNull)
• Add webhooks for creating and updating a release. !44881 (David Barr @davebarr)
• GraphQL API for listing container repositories. !44926
• Add ability to sort search results for issues and merge requests. !45003
• Add db index for DastSiteValidation#state. !45019
• Store test failure data when build finishes. !45027
• Add GraphQL burnup endpoint under milestone and iteration reports. !45121
• Add hostname to GitHub import API. !45188
• GraphQL: Adds downstream, upstream, source job, path, and project to PipelineType. !45212
• Associate Terraform state versions with the CI job that created them. !45347
• Add sha256 and file count to pages_deployments. !45522
• Add basic top level keys license, settings, and counts_weekly for usage data payload. !45540
• Allow sorting of releases from GraphQL. !45577
• UsageData for issues added/removed/edited. !45609
• Enable dashboard security discover button and ignore feature_filter_type column cleanup. !45636
• Add Support for Canary-Weight ingress annotation via API. !45637
• Add default sitemap generator for gitlab-org group. !45645
• Add new Terraform state list page. !45700
• Add Search for User Lists in Strategy. !45820
• Add jobs field with secureReportTypes argument to Ci::PipelineType. !45837
• Add latest version field to Terraform state GraphQL type. !45848
• Add repository_read_only column to Snippets. !45868
• Add availability to user status. !45888
• Add secret detection token revocation columns. !45912
• Add has_vulnerabilities column into project_settings table. !45944
• Email user on admin account approval. !45947
• Add API post /invitations by email. !45950
• Add repositionImageDiffNote GraphQL mutation to specifically reposition DiffNotes on images. !45958
• Create snippet_repository_storage_moves database table. !45990
• Expose issue updated by on GraphQL. !46015
• Allow to create todo on GraphQL. !46029
• Add API get /invitations for project and group. !46046
• Migrate Configure Feature Flags Modal to GitLab UI. !46055
• Add User-Agent to web hook service. !46070
• Add links to GraphQL release object for searching related issues and merge requests. !46161
• Migrate Alert Service to HTTP Integrations model. !46188
• Determine image relative paths. !46208
• Add releaseCreate mutation to GraphQL endpoint. !46263
• Add migration to populate pipeline_id in Vulnerability Feedback. !46266
• Add a /draft alias to the /wip quick action. !46277
• Add usage ping for web users of geo secondaries. !46278
• Enable refactored union set operator. !46295
• Add userDiscussionsCount to issues and merge requests GraphQL. !46311
• Add a service for token revocation. !46356
• Forward deployment, add modal to warn users on Retry action. !46416
• Expose moved and movedTo attributes in Issues query. !46447
• Add merge request description templates to Static Site Editor. !46488
• Add container repositories API. !46495
• Track usage of CI Secrets Management (Vault secrets). !46515
• Added GraphQL mutation for creating project and group labels. !46534
• Add total projects imported usage ping. !46541
• Add structured markup for users. !46553
• Container repository details GraphQL API. !46560
• Add iid column to design_management_designs. !46596
• Add search param to Users GraphQL type. !46609
• Add metric count for projects with alerts created. !46636
• Add ability to sort to search API. !46646
• Enable MR CSV export. !46662
• Upgrade GitLab Pages to 1.29.0. !46665
• Add merge requests filters for filtering by environments and deployment dates. !46683
• Add projects_with_enabled_alert_integrations usage ping. !46693
• Remove graphql_lazy_authorization feature flag. !46819
• Allow setting the value of 'require_admin_approval_after_user_signup' via Settings API. !46851
• Add structured data for projects. !46858
• NPM project level API. !46867
• Send email notifications to admins about users pending approval. !46895
• Monokai theme for the Web IDE. !46901
• Enable issue and MR stat links on release progress review. !46910
• Default enable new_pipeline_form. !46915
• Add tooltips to design buttons. !46922 (Lee Tickett)
• Account for uploads as part of used repository storage. !46941
• Add SEO schema markup to breadcrumbs. !46991
• Add locked and confidential badge to issue sticky header. !46996
• Add Web IDE Solarized Light theme support. !46999
• Add POST project CI lint API endpoint. !47026
• Display Group SAML provider ID in admin. !47034
• Adds warnings to API response for /lint. !47037
• Filter jobs by security report type in GraphQL. !47095
• Update container_scanning to version 3 to support FIPS. !47099
• Adds rake task to generate package events file. !47118
• Add container repository destroy GraphQL mutation. !47175
• Add search assignees to group issue boards. !47241
• Add Redis version to admin page. !47242
• Add CI job to Terraform state version GraphQL type. !47339
• Add pipeline to CI job GraphQL type. !47347
• Add group-level integration management for external services. !47391
• Add cloud_license_auth_token column to application_settings. !47396
• Add user callout to alert admins that registration is open by default. !47425
• Include aggregated git-write usage counts. !47511
• Add cleanup status field to graphQL ContainerRepositoryType. !47544
• Global Search - Left Sidebar. !47561
• Add group name and link in admin identities. !47563
• Implement including multiple files from a project. !47609
• Expose GraphQL API for managing HTTP alerting intergations. !47687
• Convert issue header actions to an ellipsis dropdown menu. !47690
• Add alerting support for custom dashboards. !47704
• Support fuzzing HTTP headers with API Fuzzing. !47727
• Store pages content in zip format. !47763
• Upgrade GitLab Pages to 1.30.0. !47780
• Add variable expansion to rules:changes. !47783
• GraphQL: Expose uploads_size for project_statistics and root_storage_statistics. !47820

Other (68 changes, 26 of them are from the community)

• Migrate .fa-spinner to .spinner for app/helpers. !25033 (nuwe1)
• Remove new_variables_ui feature flag. !41412
• Replace-GlDeprecatedDropdown-with-GlDropdown-in-app/assets/javascripts/error_tracking. !41420 (nuwe1)
• Replace-GlDeprecatedDropdown-with-GlDropdown-in-app/assets/javascripts/monitoring. !41422 (nuwe1)
• Replace Deprecated Dropdown in Container Registry Explorer Page. !41425 (nuwe1)
• Replace-GlDeprecatedDropdown-with-GlDropdown-in-app/assets/javascripts/snippets/components/snippet_header.vue. !41428 (nuwe1)
• Replace-GlDeprecatedDropdown-with-GlDropdown-in-app/assets/javascripts/vue_merge_request_widget. !41429 (nuwe1)
• Migrate-Bootstrap-dropdown-to-GitLab-UI-GlDropdown-in-app/assets/javascripts/jobs/components/stages_dropdown.vue. !41452 (nuwe1)
• Replace v-html with GlSprintf in notes/.../discussion_filter_note.vue. !41482 (Takuya Noguchi)
• Update to Ruby v2.7.2. !44223
• Update haml_lint from 0.34.0 to 0.36.0. !44914 (Takuya Noguchi)
• Update Web IDE pipelines panel to use our design system component. !45007 (matejlatin)
• Replace existing Image Resizing FFs with a single of ops type enabled by default. !45050
• Remove Cycle Analytics message from en i18n message. !45178 (Takuya Noguchi)
• Specify primary key for tables without. !45198
• Update Tooltip in Groups to use gl-tooltip. !45305
• Print Ruby version in console greeting. !45370
• Fix Rails/SaveBang offenses for spec/services/* and spec/sidekiq/*. !45391 (matthewbried)
• Migrate collapsed notification tooltip. !45453 (artychan)
• Add database view for partitioned tables. !45591
• Add database view for partitions. !45592
• Remove duplicated BS display properties from Issue. !45628 (Takuya Noguchi)
• Replace quick_submit BSTooltip with GlTooltip. !45638 (Kristin Brooks @kristinbrooks)
• Add migration to add a new configuration option for setting the new user signups count. !45643
• Remove unnecessary index on services for usage data. !45655
• Update GitLab Runner Helm Chart to 0.22.0. !45664
• Replace bootstrap classes for alerts in ping consent. !45723
• Add analytics_devops_adoption_segment_selections and analytics_devops_adoption_segments database tables. !45748
• Refactor secondary_navigation_elements.scss. !45763 (Takuya Noguchi)
• Migrate toggle replies widget from Bootstrap to GlButton. !45780
• Simplify CSS for Merge Requests (list). !45785 (Takuya Noguchi)
• Add auto_rollback_enabled column to project_ci_cd_settings table. !45816
• Add merge trains enabled setting to project ci cd settings. !45834
• Fix incorrect code in Load Performance Testing docs. !45877
• Migrate services specs to consider admin mode. !45988 (Diego Louzán)
• Migrate tooltip in app/assets/javascripts/vue_merge_request_widget/components/mr_widget_author.vue. !46034
• Migrate Bootstrap buttons to GitLab UI buttons for attach a file form actions. !46041
• Replace chevron-down fa-icon in board sidebar. !46075
• Replace down chevron on invite member/group. !46076
• Clarify that external users cannot access all internal projects, groups, and snippets. !46087 (Ben Bodenmiller (@bbodenmiller))
• Declare and assign variable separately in Shell Script. !46121 (Peter Dave Hello @PeterDaveHello)
• Execute exit 1 when shell script cd fails. !46122 (Peter Dave Hello)
• Migrate tooltip in app/assets/javascripts/ide/components/commit_sidebar/list.vue. !46148
• Migrate tooltip in app/assets/javascripts/vue_merge_request_widget/components/mr_file_icon.vue. !46156 (46156)
• Migrate tooltip in app/assets/javascripts/vue_shared/components/awards_list.vue. !46171
• Replace close button in Scheduling Pipelines user notice with GlButton. !46264
• Add performance marks and measures to the MR Diffs app at critical moments. !46434
• Corrected grammar in Sign-in restrictions text. !46500
• Update access token fields to new input style. !46569
• Rename "cycle analytics" with "value stream analytics" under /spec. !46613 (Takuya Noguchi)
• Resolve Implement GraphQL Startup.js for Design Management app. !46660
• Bump workhorse to 8.53.0. !46666
• Remove columns no longer used for replicating terraform state. !46742
• Backfill cleanup schedules for old closed/merged MRs. !46782
• Bump gitlab-shell version to 13.12.0. !47084
• Remove duplicated BS display properties from Merge Request title. !47124 (Takuya Noguchi)
• Remove duplicated BS display properties from various Diffs. !47125 (Takuya Noguchi)
• Expand postgres_indexes view. !47304
• Update terminal empty state alert to gl component. !47340
• Guard against existence of project_features.requirement_access_level in migration. !47458 (Lee Tickett)
• Replace mirror chevron down icon with svg. !47459
• Update chevron-down icon on project branch page. !47460
• Update button styles in project tree header. !47562
• Update button styles in blob header. !47571
• Update icons to svg for issuable pages. !47596
• Update Workhorse version to 8.54.0. !47625
• Update GitLab Shell to v13.13.0. !47875
• Change wording on the project remove fork page. !47878

13.5.7 (2021-01-13)

Security (1 change)

• Deny implicit flow for confidential apps.

13.5.6 (2021-01-07)

Security (7 changes)

• Forbid public cache for private repos.
• Deny implicit flow for confidential apps.
• Update NuGet regular expression to protect against ReDoS.
• Fix regular expression backtracking issue in package name validation.
• Upgrade GitLab Pages to 1.28.2.
• Update trusted OAuth applications to set them as confidential.
• Upgrade Workhorse to 8.51.2.

13.5.5 (2020-12-07)

Security (10 changes)

• Validate zoom links to start with https only. !1055
• Require at least 3 characters when searching for project in the Explore page.
• Do not show emails of users in confirmation page.
• Forbid setting a gitlabUserList strategy to a list from another project.
• Fix mermaid resource consumption in GFM fields.
• Ensure group and project memberships are not leaked via API for users with private profiles.
• GraphQL User: do not expose email if set to private.
• Filter search parameter to prevent data leaks.
• Do not expose starred projects of users with private profile via API.
• Do not show starred & contributed projects of users with private profile.

13.5.4 (2020-11-13)

Fixed (4 changes)

• Fix Vue Labels Select dropdown keyboard scroll. !43874
• Hashed Storage: make migration and rollback resilient to exceptions. !46178
• Fix compliance framework database migration on CE instances. !46761
• Resolve problem when namespace_settings were not created for groups created via admin panel. !46875

13.5.3 (2020-11-03)

Fixed (3 changes)

• Fix IDE issues with special characters. !46398
• Ensure that copy to clipboard button is visible. !46466
• Auto Deploy: fixes issues for fetching other charts from stable repo. !46531

Added (1 change)

• Add environment variables to override backup/restore DB settings. !45855

13.5.2 (2020-11-02)

Security (9 changes)

• Add CSRF protection to runner pause and resume. !1021
• Do not expose Terraform state record in API.
• Path traversal to RCE via LFS upload.
• Update container_repository_name_regex to prevent catastrophic backtracking.
• Validate nuget package names.
• Prevent private repo from being accessed via internal Kubernetes API.
• Validate each upload param key in multipart.rb.
• Fix XSS vulnerability for job build dependencies.
• Fix unauthorized user is able to access schedule pipeline variables and values.

13.5.1 (2020-10-22)

Other (1 change)

• Update GitLab Shell to v13.11.0. !45660

13.5.0 (2020-10-22)

Security (1 change)

• Update GitLab Runner Helm Chart to 0.21.1.

Removed (3 changes, 2 of them are from the community)

• Drop Iglu registry URL column. !42939
• Remove coverage_report_view feature flag. !43711 (David Barr @davebarr)
• Remove release_evidence_collection feature flag. !44234 (David Barr @davebarr)

Fixed (118 changes, 9 of them are from the community)

• Include builds from child pipelines in latest sucessful build for ref/sha. !29710
• Fix branches_to_be_notified API param for hangouts chat service. !35599
• Add empty dependencies value to ECS Deploy job. !36862
• Fix issues with optional merge requests approval in CE. !42119 (Pavel Kuznetsov)
• Fix type of SentryErrorType global ID. !42185
• Remove linux arch only rule for coverage fuzzing. !42316
• Do not show retried builds in the MR code coverage. !42402 (Simon Lenz @koala7)
• Does not refresh project/snippet statistics on a read-only instance. !42417
• Rendering trailing slash in reference links (issue 205151). !42484
• Remove retry icon on failed job if merge pipeline. !42495
• Designs: return an error if uploading designs with duplicate names. !42514 (Sushil Khanchi)
• Unit Test Report: Fix icon for errored status. !42540
• Copy designs to issue when an issue with designs is moved. !42548
• Fix triggering multiple children pipeline with the same artifact. !42595
• Fix caret sizes in navigation. !42605
• Revert required encryption on CI runner tokens. !42623
• Fix Markdown "Preview" tab on New/Edit Release and New Snippet pages. !42640
• Fixed a bug causing 'Missing author note' to be added to notes for mapped users when importing project using GitLab Import. !42648
• Hides batch suggestions button if there is only 1 suggestion. !42681
• Fix GraphQL token authentication when installed under a relative URL. !42706
• Update pipeline failed notification e-mail warning. !42736
• Fix clickable width of release asset links. !42757
• Fix size of edit button on releases page. !42779
• Move before_script into script for CQ template. !42782 (Vicken Simonian @vicken.papaya)
• Resolve Error when quickly reordering designs. !42818
• Eliminate extra spacing on MR diffs from mobile/tablet screen. !42821 (Takuya Noguchi)
• Fix migrating some empty diffs. !42825
• Fix filtering epics when sorting by dates. !42827
• Fix edge case when updating snippet with no repo. !42964
• Fix group deploy tokens permissions for package access. !43007
• Empty state Packages UI links to user docs. !43009
• Allow Unleash clients to request feature flags when repository is private. !43059
• Show incident list for users who can read issues. !43060
• Auto-accept TOS if project bot. !43067
• Fix checking of task lists when MR description starts with a blank line. !43125
• Fix iteration validation not checking parent groups. !43234
• Fix theme selector not working immediately for some themes. !43239
• Reset labels select search text on Enter. !43285
• Ensure JobWaiter keys always expire. !43320
• Make git lfs for push mirrors work to GitHub.com. !43321
• Fix incorrect HTTP response in deactivate user API for internal user. !43356 (Sashi Kumar)
• Fix bug to allow container cleanup policies to properly run. !43359
• Delete project bot when token is revoked. !43373
• Allow to include project files in parent-child pipelines. !43404
• Fix button placement on pipeline graph. !43419
• Fix 500 error in block user API for internal user. !43461 (Sashi Kumar)
• Fix Web hook deletion not working when many hook logs are present. !43464
• Fix copy_indexes migration helper skipping the opclass for indexes with operator classes defined for them. !43471
• Add markdown icon to more file extensions. !43479
• Fix suggested squashed messages for MR. !43508
• Ensure code search results link to searched ref. !43510
• Fix broken user avatars in Jira Development Panel. !43563
• Update database helpers to set the current_schema. !43568
• Remove project bot user membership when project access token expires. !43605
• Improve the Commit box on the Merge Request Changs tab when browsing per commit. !43613
• GraphQL: No longer allows to omit ID when querying for a single board. !43627
• Fix group deploy tokens to return all projects and work with the Maven group endpoint. !43628
• Fix GraphQL backward pagination when merge requests are ordered by merged_at. !43701
• Fix approvedBy filed in MR GraphQL API. !43705
• Customize value of note_target_type for designs. !43727
• Fix displaying a message when design copying is in progress. !43749
• Fix verifying LFS uploads with GitHub. !43852
• Fix Delete User dialog formatted strings. !43871
• Add cleanup migration for JobWaiter Redis keys. !43882
• Include Design Management git repositories in GitLab Backup. !43947
• Add fuzzy search support to labels dropdown. !43969
• Fix broken button default class. !43977
• Fix full screen comment button on snippets. !44083
• Allow unauthenticated users access to public Personal Snippets via the REST API. !44135
• Fix the ability to assign labels based on license feature availability. !44171
• Recover gracefully when issuable counts are too expensive. !44184
• Fix attach file button not working in description fields. !44216
• Fix design scale bug when navigating to a design after zooming. !44262
• Prefer server-provided authentication for LFS push mirroring. !44284
• Return nil when fetching a wiki page with invalid arguments. !44302
• Update Design thumbnail after uploading an image with the same filename. !44305
• Add tooltip for pipeline actions. !44317
• Ensure suggestion works for number text. !44332
• Update NuGet version validation to allow for extended versions. !44335
• Respect DNT when tracking experiments. !44420
• Fix merge conflict button text if "None" code style selected. !44427 (David Barr @davebarr)
• Allow unauthenticated users access to public Project Snippets via the REST API. !44446
• Fix instance statistics GraphQL query with identifier. !44475
• Designs are moved with an Issue that is moved. !44524
• Fix Auto Deploy scale subcommand unintentionally recreates legacy PostgreSQL. !44535
• Fix emoji rendering in certain edge cases. !44542
• Return 422 error rather than 500 when composer.json is missing or malformed. !44587 (David Barr @davebarr)
• Use optimistic locking to safely migrate a build trace chunk. !44588
• Avoid New Environment button glitching when changing tabs. !44603
• Perform git actions with a user with elevated git permissions during a design copy. !44662
• Align badge with avatar in MR List. !44671
• Fix regression when uploading / viewing binary files in the Web IDE. !44699
• Exclude policies with no container repositories when executing them. !44748
• Fix unnecessarily escaped merge error text. !44844
• Fix button row margin on empty project. !44860
• Add note about cross site cookies browser limitaion to Jira App page. !44898
• Allow re-sending invite to minimal access user. !44936
• Fix dark mode for boards and swimlanes. !44951
• Fix dark mode for milestones. !44952
• Add missing 90x avatar size for image scaling. !45025
• Allow size limit to be available by default in the project pages settings form. !45054
• Fixed incorrect parameter in GraphQL startup call. !45115
• Fix table border hover for incidents and alerts. !45117
• Fix Jira Connect App update webhooks. !45151
• Fix scoped label markdown padding. !45153
• Fix redirects to issue sidebar JSON when visiting the login page. !45194
• Revert of Background migration for setting Jira tracker data deployment type. !45205
• Delete any outstanding BackfillJiraTrackerDeploymentType. !45219
• Fix mobile view of filtering bar. !45226
• Fix the maven md5 upload endpoint. !45271
• Redirect when no user is signed in when updating registration. !45276
• Class and markup cleanup to prevent SVG header bar overlap in Static Site Editor. !45334
• Update to Rack v2.1.4. !45340
• Avooid opening 2 modals for enabling review app. !45361
• Fix undefined tooltip text flashing on clipboard icon. !45482
• Fix error when cleaning up MR with no head ref. !45504
• Disable target branch filter option on merge requests dashboard.
• Fixed merge request tabs overlapping with system header.

Deprecated (2 changes, 1 of them is from the community)

• Set abuse_notification_email instead of admin_notification_email. !41319 (Hiromi Nozawa)
• Drop column instance_statistics_visibility_private. !42969

Changed (141 changes, 11 of them are from the community)

• Set default Referrer-Policy to strict-origin-when-cross-origin and set it in a header rather than HTML. !26065 (nhirokinet)
• Background migration for setting Jira tracker data deployment type. !37002
• Update clipboard button to use Pajamas. !38421
• Parallelize removal of expired artifacts. !39464
• Update styling of design comment pins. !39797
• Update confidential form buttons to gl-button. !40893
• Replace bootstrap alerts in app/views/admin/broadcast_messages/_form.html.haml. !41271 (Gilang Gumilar)
• Replace bootstrap alerts in app/views/import/shared/_errors.html.haml. !41288 (Gilang Gumilar)
• Replace bootstrap alerts in app/views/projects/diffs/_warning.html.haml. !41295 (Gilang Gumilar)
• Replace bootstrap alerts in app/views/profiles/accounts/show.html.haml. !41299 (Gilang Gumilar)
• Replace bootstrap alerts in app/views/admin/projects/show.html.haml. !41389 (Gilang Gumilar)
• Replace bootstrap alerts in app/views/projects/milestones/show.html.haml. !41396 (Gilang Gumilar)
• Update lock form buttons to gl-button. !41454
• Updated Discard Changes button in WebIDE. !41899
• Migrate DeprecatedModal to GitLab UI Modal. !42113
• Migrate custom Tabs to GlTabs. !42236
• Revert justified-content-end settings buttons. !42273
• Add Web IDE as dropdown item to diff file edit. !42275
• Expose the option to use namespace-per-project instead of namespace-per-environment for Kubernetes clusters. !42309
• Split name to first and last name for signup. !42346
• Move job token specs to core. !42374 (Mathieu Parent)
• Resolve Add filter capabilities to Incident list. !42377
• Remove angle brackets from empty name in U2F device settings. !42440
• Update sidebar operations order. !42493
• Add Gitpod enabled instance setting to Usage Data. !42563
• Add Gitpod enabled user setting to Usage Data. !42570
• Remove accept terms checkbox for signup. !42581
• Add user sign in indicator to Jira connect app. !42628
• Include monitoring tool from payload in system note for alert creation. !42631
• Rename Created to Published in package sort dropdown. !42677
• Breadcrumb like UI for project path in packages list. !42684
• Allow alerts to open on new tab. !42691
• Replace button component. !42716
• Add Issue Link to "Issue opened by" Integration Chat Message. !42785 (Kev @KevSlashNull)
• Hide instance-level integrations on GitLab.com. !42808
• Remove banner that suggests Web IDE for editing gitlab-ci.yml. !42815
• Updated the admin and user SSH key delete confirmation to use GlModal. !42824
• Add confirmation modal on instance-level integration form. !42840
• Use Conan recipe as package name in package API. !42860
• Show wiki tree structure in sidebar and pages overview. !42867
• Allow member mapping to map importer user on Group/Project Import. !42882
• Migrate environments folder tabs to GlTabs. !42894
• Update pypi install command to work with external dependencies. !42916
• Allow designs to be added, changed, or destroyed on locked and moved issues. !42935
• Add a title section to the Package Registry UI. !42963
• Allow time tracking in incidents. !42965
• Feature flags form: Replace fa-chevron-down with GitLab SVG. !42968
• Create a set of models to store the temporary data needed for a bulk import. !42978
• Adjusted deactivation threshold from 180 to 90 days. !42989
• Fix profile scoped label CSS. !43005
• Store pipeline counts by status for instance statistics. !43027
• Remove internal fields from alert details table. !43076
• Add hosts field to alert detail table. !43087
• Update alert GFM reference in highlight bar. !43104
• Replace fa-search with GitLab SVG search icon. !43110
• Update programming language colors and metadata. !43111
• Global Search - Bold Issue's Search Term. !43124
• Replace fa-external-link with GitLab SVG in group folder. !43128
• Add sort by similarity to getProjects GraphQL call. !43136
• Improve two button review submit in merge requests. !43149
• Update user feedback to a dedicated page as opposed to solely a button with a loader. !43189
• Enable project access tokens on GitLab.com. !43190
• VSA: Replace fa-warning with GitLab SVG. !43262
• Add assignee usernames to issue resolver. !43294
• Create ComplianceManagement::Framework Model. !43301
• Add invitation declined page. !43305
• Move approval MR filter and quick actions to CE. !43326 (Pavel Kuznetsov)
• Always set created_by_id when creating a user. !43342
• Description Templates: Replace fontawesome icons with GitLab SVGs. !43379
• Improve WebIDE error messages on committing. !43408
• Remove bootstrap usage from merge_requests/invalid. !43439
• Expose file path from XML Test Report artifact. !43594
• Always show the "Clear cluster cache" button among the advanced Kubernetes cluster configuration options. !43619
• Deprecate lowercase values for sort enums in GraphQL. !43650
• Replace double angle icons with GitLab SVG in issuables sidebar. !43655
• Set performance cookie to last for a year. !43692
• Add snippets to GitLab backups. !43694
• Restore snippet repositories from backups. !43696
• Update issue boards modal to gl-tabs. !43740
• Update nav icons to chevron-down. !43767
• Display alert for partially executed cleanup policies. !43831
• Show keep path for expired locked artifacts. !43866
• Replace fa-search fontawesome icons with GitLab SVG in Vue components. !43879
• Update toggle focus mode icon to gl-icon. !43888
• VSA: Replace fa-warning with GitLab SVG icon. !43994
• Add spam flag to snippet create/update mutations. !44010
• Include cached sql calls in performance bar. !44022
• Updated GraphQL mutation input ids to be more type specific. !44073
• Remove jquery tooltip API call from stop environment button. !44199
• Add filters on Milestone title in the GraphQL API. !44208
• Display conan recipe as package name on package detail page. !44294
• Respect Group's default branch name when present. !44370
• Enable automatic allocation of purchased storage. !44376
• Move remove board column button to sidebar. !44380
• Reposition wiki title on wiki pages. !44390
• Move wiki edit button inline with wiki title. !44391
• Allow users to navigate to the incidents show details page wrapper through /issues/incidents/:id from the Incident list. !44438
• Update delete badge modal to gl-modal. !44495
• Remove jquery tooltip from IDE activity bar. !44526
• Remove the store_instance_statistics_measurements feature flag. !44566
• Use GitLab SVG icons in file_type_icon_class helper. !44580
• Add pipeline_artifacts_size to RootStorageStatisticsType. !44595
• Copy project homepage default view for anonymous users. !44606 (George Tsiolis)
• Handle the blacklisted ip error in the Go middleware. !44614
• Add limit to number of test cases parsed by JUnit parser. !44615
• Track unique wiki page views in Usage Ping. !44622
• Automatically expand diffs for merge requests with changes to a single file. !44629
• Move feature flags to core. !44642
• Indicate on signin page instance is self-managed. !44681
• Replace fa icon with GitLab SVG in repository preview. !44696
• Replace fa-file-text-o icons with GitLab SVG doc-text icon. !44706
• Replace bootstrap alert in app/views/shared/milestones/_top.html.haml. !44731
• Back-port free instance review for instances with 50+ users from EE Core to CE. !44770
• Search for python packages with normalized name to allow installs of packages with periods and underscores. !44807
• Update integration descriptions to not be project-specific. !44893
• Projects created from templates inherits integrations. !44932
• Update issue and MR sidebar labels to use Vue instead of Haml. !44942
• Replaced blob-content-edit with editor-lite compoennt for Snippet edit form. !44994
• Replace fa-chevron-down with GitLab SVG in project visibility settings. !45021
• Allow more naming conventions for VSA production environment. !45069
• GraphQL: Changes fields in detailedStatus to be nullable. !45072
• Truncate over-long alert fields instead of return error response. !45099
• Raise Puma Worker Killer RAM limits. !45116
• Replace fa icons in CI build table. !45123
• Replace switcher fa- icons in blob viewer models. !45124
• Replace fa-calendar icon with GitLab SVG. !45175
• Minor UI improvements to Wiki edit page. !45247
• Replace fa-angle-double-left and fa-angle-double-right icons with GitLab SVG. !45251
• Remove CSS that ligthens texts in the pipeline. !45253
• Support all stackprof profiling modes. !45277
• Allow automatically selecting repository storage on move. !45338
• Updated GraphQL note mutation input ids to be more type-specific. !45341
• Update GraphQL discussionToggleResolve mutation input id to be more type-specific. !45346
• Update GitLab-Shell to v13.9.0. !45358
• Replace fa-file icons with GitLab SVG document icon. !45380
• Migrate '.fa-spinner' to '.spinner' for 'awards_list.vue'. !45393
• Update gitlab-shell to v13.10.0. !45408
• Replace fa-bitbucket-* icons with GitLab SVG. !45437
• Replace fa-google with GitLab SVG. !45506
• Replace fa-github with GitLab SVG MERGE_REQUEST_ID. !45533
• Move diff header actions into dropdown menu.

Performance (21 changes, 1 of them is from the community)

• Improve n+1 in pipeline serializer for triggered pipelines. !42421
• Load issues tab in the milestone page asynchronously. !42473
• Add state_id index for merge_requests list. !42481
• Cleanup request http method/code metrics. !42618
• Optimise cleaning up LFS objects. !42830
• Modify time_period for last 28 days to improve batch counting performance. !42972
• Less inconsistent Edit links in sidebar. !43106
• Performance fix for issue placement. !43315
• Reduce cached SQL for JobsController#show. !43559
• Add index for project_id and sha to deployments table. !43836
• Don't expose http_request_duration_seconds metrics in sidekiq exporter. !43941
• Remove index on issues.relative_position. !43991
• Loads cropper css only when needed. !44137
• Preloading of Fontawesome Icon Font. !44282
• Remove duplicate index from the Vulnerabilities table. !44422 (Borivoje Tasovac @borivojetasovac)
• Optionally use merge request metrics association for merge request diff stats in GraphQL. !44613
• Remove Sentry implementation to investigate performance impact. !44643
• Optimize the loading of diffStats in merge request GraphQL API. !44752
• Preload user_notes_count in MergeRequest GraphQL API. !44894
• Remove the commit count from the commits API. !44934
• Enable caching of markdown when viewing blob. !45367

Added (147 changes, 13 of them are from the community)

• Add canonical links for moved/duplicated issues. !34604
• Change transfer, update and create services for groups and projects to take in consideration shared runners settings. !36080 (Arthur de Lapertosa Lisboa)
• Add approval rules with approvers to usage ping. !36737
• Add index on ci_builds relation to improve Usage Ping metrics collection performance. !37581
• UI to disable shared runners by group. !39249
• Report auth events in manage stage usage ping. !39747
• Display youtube videos on the Static Site Editor. !39756
• Add LSIF to Go Auto DevOps gitlab-ci.yml. !40072
• Measure npm request forwarding usage. !40174
• Make URL links in job logs clickable. !40175 (Łukasz Groszkowski @falxcerebri)
• Add No Access Role for top group members. !40942
• Clean up unused LFS objects during repository housekeeping. !40979
• Send chat notification when deployment starts. !41214 (Sashi Kumar)
• Log failed BatchCount queries. !41552
• Add Group Import usage ping. !41663
• Add Sample Data. !41699
• Add Go(lang) to Packages. !41712 (Ethan Reesor (@firelizzard))
• Copy designs to new issue when issue is moved. !41714
• Add namespace setting to allow to mark if parent group allow subgroups to require 2FA. !41760
• Add cache:when keyword for ci yml config. !41822
• Adds package event tracking. !41846
• Add notification setting for merge request reviewers. !41851
• Track unique number of test cases parsed. !41918
• Introduce '.gitlab/static-site-editor.yml' config file, with support for 'static_site_generator' entry. !41957
• Migrate u2f registrations to webauthn registrations. !42159 (Jan Beckmann)
• Add internal API to download LFS objects. !42161
• Add state field to DastSiteValidation. !42198
• Pre-Collapsed Sections in CI Job Logs. !42231 (Kev @KevSlashNull)
• Improve issuable reaction search. !42321 (Ethan Reesor (@firelizzard))
• Show expanded CI config in CI lint API endpoint. !42380
• Display cluster list node information. !42396
• Validate not null file_store field on packages_package_files to maintain data integrity. !42400
• Add API endpoints to manage individual Terraform state versions. !42415
• Display Contributor badges on notes. !42576 (Mycroft Kang @TaehyeokKang)
• Add expiration policy started at support in container repositories. !42598
• Add a REST API endpoint to list group's descendants. !42620
• Match against description and unicode character when autocompleting GFM emoji. !42669 (Ethan Reesor (@firelizzard))
• Add Debian API skeleton. !42670 (Mathieu Parent)
• Use fuzzy matching for issuable awards. !42674 (Ethan Reesor (@firelizzard))
• Add Documentation URL to Admin Area. !42702
• Add close button to issue, MR, and epic sidebar labels. !42703
• Add :default_branch_name column to namespace_settings. !42778
• Add severity and published sorting for incident issues. !42800
• Replaced ACE with Editor Lite for CI linting. !42814
• Include used_fields and used_deprecated_fields in GraphQL logs. !42820
• Validate build traces using CRC32 checksums. !42829
• Reference pages_deployments in pages_metadata. !42834
• Display user project count on Admin Dashboard. !42871
• Add runner setup methods. !42878
• Add og:description meta tag to individual "Release" page. !42889
• Add validator for IP address/inet columns. !42893
• Add buttons in the Search page to clear Group and Project filters. !42897
• Update golang version in vendored Dockerfile template. !42917
• Strip markdown from og:description meta tags. !42918
• Add DesignCollection copyState GraphQL field. !42919
• Add projects_creating_incidents to usage ping counts. !42934
• Add project scoped CI lint API endpoint. !42998
• GrahphQL: Adds status to jobs, stages, and groups. !43069
• Destroy issue board list via GraphQL. !43081
• JS client for increment_unique_users API. !43084
• Add missing fontawesome file icon classes. !43091
• Adds button to update merge request draft status on merge request show page. !43098
• Sort incidents list by severity and published columns. !43121
• Update skeleton loader shape on releases pages. !43138
• Add security bot. !43147
• Redirect to documentation pages URL when configuration option is set. !43157
• Add on-demand DAST scan options (scanType, showDebugMessages, useAjaxSpider) ajax spider and set the scan type. !43240
• Enable snippet multiple files. !43246
• Add Debian regexps. !43259 (Mathieu Parent)
• Add sort parameter to Issue and Merge Request scopes. !43295
• Add timeline toggle button for incidents comments. !43302
• Add Gitpod Spring Petclinic to Project Templates. !43319
• Allow a users public GPG Keys to be API accessible. !43332
• Add file name column to CI unit test report. !43338
• Add GraphQL endpoint for Terraform state metadata. !43375
• Store user mentions to DB. !43393
• Upgrade GitLab Pages to 1.26.0. !43416
• Remove graphql_lookahead_support feature flag. !43438
• Introduce 'image_upload_path' entry support for '.gitlab/static-site-editor.yml' config file. !43481
• Introduce 'mounts' entry support for '.gitlab/static-site-editor.yml' config file. !43485
• Introduce required_code_owners_sections table. !43573
• Adds flexible rollout strategy UX and documentation. !43611
• Add table for alert http integrations for project. !43634
• Add a database column to enable or disable the setting that puts newly registered users in a pending state, requiring admin approval for their activation. !43661
• Seed initial version for non-versioned terraform states. !43665
• API support for a specific GPG Key for given user. !43693
• Enable design management reference filter. !43731
• Add GraphQL mutation to create an issue. !43735
• Enable wiki events on git push. !43738
• Adds a Terraform.latest.gitlab-ci.yml to support quick development of Terraform related features. !43802
• Store pipeline counts by status for instance statistics. !43857
• Show labels origin path on project labels page. !43858
• Enable querying for merge requests within a group. !43863
• Add API Fuzzing plan limits db column. !43934
• Enable Gitpod button on file tree view. !43961
• Accept issue filters when getting board lists in GraphQL. !43968
• Add system note on incident severity change. !43998
• Move Tracing usage data ping to Core. !44006
• Update Add Members API to accept user_id array. !44051
• GraphQL: Adds scheduledAt to CiJob. !44054
• IDE editor - Adding syntax highlighting for terraform / hcl. !44056
• Allow to update issue state on GraphQL. !44061
• Add merge request title and description UI to Static Site Editor submission flow. !44071
• GraphQL: Adds action to DetailedStatusType and StatusActioType. !44088
• Feature Flags limits UX and documentation. !44089
• Add Incident Sla timer columns to DB. !44099
• Add the ability to insert a YouTube video. !44102
• Include LFS blobs in archives. !44116
• Add sorting parameters to Releases API. !44118
• Add product analytics for design created and modified events. !44129
• Upgrade GitLab Pages to 1.27.0. !44162
• Add the Alerts integrations table to Alert integrations settings in the Operations section. !44181
• Add Issuable Service Level Agreement (SLA) table. !44253
• Use Web IDE to create new files in empty repos. !44287
• Create an issue board via GraphQL mutation. !44298
• Status icons for alerts integratiosn list. !44318
• Added UsageData metrics for issues added/removed from Epics. !44371
• Added UsageData metrics for Issue designs' usage. !44373
• Add unattended database migration option. !44392
• Add feature flag for a phased rollout of cleanup policies. !44444
• Sync LFS objects when push mirroring over HTTPS. !44457
• Snowplow count of clicks on timeline toggle for incident comments. !44487
• Allow to move issues between projects on GraphQL. !44491
• Support ci_forward_deployment_enabled in edit API. !44510
• Preserve the merge request title and description in the static site editor upon modal close. !44512
• Schedule adding "Missed SLA" label to issues. !44546
• Add usage ping to count Static Site Editor views. !44573
• Move Tracing feature to Core. !44574
• Added new editor-lite Vue component. !44577
• Add Middleman Logo for Project Templates. !44617
• Allow groups to disable 2FA requirement for subgroups. !44712
• Editor Lite to saupport extensions in instance constructor. !44723
• Enable core_security_mr_widget feature flag by default. !44764
• Add apply button when user changes assignees. !44812
• Make alerts searchable by assignee username in GraphQL API. !44911
• Include PostgreSQL system identifier in usage ping. !44972
• Snowplow tracking of Incident details views. !45011
• Show origin path of labels on subgroup labels page. !45040
• Enable one_dimensional_matrix feature flag by default. !45086
• Add support for Generic packages. !45102
• Expose created_at in Group and Project members API response. !45156 (Rajendra Kadam)
• Show all inherited labels in projects and subgroups. !45161
• Disallow NULL Bytes (U+0000) in requests. !45223
• Introduce 'admin approvals for new user signups' feature. !45233
• Upgrade GitLab Pages to 1.28.0. !45257
• Add vuex stores for milestone comboxbox. !45287
• Add support for manual bridges for CI pipelines. !45368

Other (114 changes, 53 of them are from the community)

• Replace-GIDeprecatedDropdown-in-app/assets/javascripts/alert_management. !41409 (nuwe1)
• Replace-GlDeprecatedDropdown-with-GlDropdown-in-app/assets/javascripts/ci_variable_list. !41413 (nuwe1)
• Replace deprecated cluster dropdowns with updated dropdowns. !41414 (nuwe1)
• Replace-GlDeprecatedDropdown-with-GlDropdown-in-app/assets/javascripts/confidential_merge_request/components/dropdown.vue. !41416 (nuwe1)
• Replace-GlDeprecatedDropdown-with-GlDropdown-in-app/assets/javascripts/logs. !41421 (nuwe1)
• Replace-GlDeprecatedDropdown-with-GlDropdown-in-app/assets/javascripts/pages/projects/graphs/components/code_coverage.vue. !41423 (nuwe1)
• Replace-GlDeprecatedDropdown-with-GlDropdown-in-app/assets/javascripts/pipelines/components/pipelines_list/tokens/pipeline_trigger_author_token.vue. !41424 (nuwe1)
• Replace GlDeprecatedDropdown with GlDropdown in app/assets/javascripts/repository/components/breadcrumbs.vue. !41427 (nuwe1)
• Replace GlDeprecatedDropdown with GlDropdown in app/assets/javascripts/vue_shared/components/split_button.vue. !41433 (nuwe1)
• Replace GlDeprecatedDropdown with GlDropDown in timezone-dropdown.vue. !41434 (nuwe1)
• Replace-GlDeprecatedDropdown-with-GlDropdown-in-ee/app/assets/javascripts/geo_node_form-and-ee/app/assets/javascripts/geo_replicable. !41438 (nuwe1)
• Remove bootrap alert from gcp offer. !41814
• Update database index on namespaces for type and id. !42128
• Populate issues blocking_issues_count. !42277
• Move shared logic into utils. !42407
• Update button to gl-button on GitLab for Slack page. !42426
• Refactor the invites controller member method. !42727
• Set hook_log css to gl-button. !42730 (Mike Terhar @mterhar)
• Remove an unnecessary element from every page. !42769 (Takuya Noguchi)
• Revise tooltip text of note role badge. !42771 (Mycroft Kang @TaehyeokKang)
• Fix Rails/SaveBang offenses for spec files in spec/services/milestones/*. !42775 (Rajendra Kadam)
• Fix Rails/SaveBang offenses for spec files in spec/services/issuable/*. !42780 (Rajendra Kadam)
• Fixes Rails/SaveBang cop for spec files in ee/spec/models/concerns/*. !42839 (Rajendra Kadam)
• Update GitLab Runner Helm Chart to 0.21.0. !42844
• Notifications icon: Render empty string for custom setting. !42848
• Update GitLab Workhorse to v8.47.0. !42855
• Remove duplicate index on cluster_agents. !42902
• Fixes Rails/SaveBang cop for spec files in spec/models/concerns/*. !42942 (Rajendra Kadam)
• Add issue_email_participants table and related model. !42943
• Add database view for postgres indexes. !42967
• Apply GitLab UI button styles to HAML buttons app/views/projects/blob. !42991 (Andrei Kyrnich @kyrnich)
• Fixes Rails/SaveBang cop for spec files in spec/lib/gitlab/git/*. !43013 (Rajendra Kadam)
• Migrate Recover hidden stage dropdown. !43032
• Remove unused cluster_providers_aws.created_by_user_id column. !43064
• Migrate badge list row buttons to new buttons. !43072
• Apply GitLab UI button styles to HAML buttons app/views/projects/forks. !43101 (Andrei Kyrnich @kyrnich)
• Remove temporary index for fixing broken CS fingerprints. !43126
• Track statistics for index rebuilds. !43156
• Allow get approvals on merge request by GraphQL in CE. !43325 (Pavel Kuznetsov)
• Apply GitLab UI styles to buttons in app/views/shared/labels directory. !43346 (Gary Bell @garybell)
• Update IDE compare changes view button to link style. !43403
• Remove bootstrap from pages/form. !43442
• Update popover to gl-popover on WebIDE commit message. !43499
• Update GitLab Workhorse to v8.48.0. !43586
• Add gl-button class to import and cancel buttons for project member import page. !43620 (Gary Bell @garybell)
• Update Design Management toolbar to use GitLab UI classes. !43682
• Remove type column on audit_events table. !43703
• Update button in modal_copy_button.vue to use GlButton from GitLab UI. !43714
• Migrate deprecated button to GlButton in ingress_modsecurity_settings.vue. !43717
• Migrate button in alert_widget_form.vue. !43720
• Migrate button in fluentd_output_settings.vue. !43724
• Apply GitLab UI button styles to HAML buttons app/views/projects/ci/builds. !43728 (Andrei Kyrnich @kyrnich)
• Log CarrierWave::IntegrityError without sending exception. !43750 (gaga5lala)
• Update node-sass from 4.12.0 to 4.14.1. !43808 (Takuya Noguchi)
• Replace in-repo SVGs with @gitlab/svgs in Cycle Analytics. !43823 (Takuya Noguchi)
• Add more issue change events to usage ping. !43828
• Limit postgres_indexes to owned schemas. !43834
• Add migration to validate design_management_designs.filename text limit constraint. !43952
• Enable track_unique_visits feature flag by default. !43989
• Update GitLab Workhorse to v8.49.0. !43999
• Rate limit documentation for non-configurable limits. !44003
• Fix spelling of PyPI. !44058 (Peter Bittner (@bittner))
• Apply gl-button class to projects/issues/export_csv directory. !44106 (Lakshit)
• Apply GitLab UI button styles to buttons in app/views/sherlock/file_samples. !44109 (Lakshit)
• Remove temporary index for container scanning findings. !44131
• Update doc links in app. !44134
• Add undo helpers for change_column_type_concurrently and cleanup_concurrent_column_type_change. !44155
• Add darkmode support for merge conflict page. !44168
• Remove jquery tooltip API call from delete environment button. !44191
• Add gl-button class to app/views/projects/deployments. !44203 (Lakshit)
• Update Cycle Analytics with Value Stream Analytics in University. !44244 (Takuya Noguchi)
• Apply GitLab UI button styles to buttons in app/views/invites directory. !44289 (Lakshit)
• Apply GitLab UI button styles to buttons in app/views/admin/jobs directory. !44291 (Lakshit)
• Apply GitLab UI button styles to buttons in app/views/projects/services/mattermost_slash_commands. !44293 (Lakshit)
• Apply GitLab UI button styles to buttons in app/views/projects/commits directory. !44331 (Lakshit)
• Apply GitLab UI button styles to buttons in app/views/shared/wikis directory. !44338 (Lakshit)
• Apply GitLab UI button styles to buttons in app/views/projects/compare directory. !44342 (Lakshit)
• Update buttons to use GitLab button class gl-button. !44361 (Gary Bell @garybell)
• Track issue time tracking events in usage ping. !44404
• Fix Rails/SaveBang offenses for spec files in spec/support/shared_example/*. !44424 (matthewbried)
• Bump mini_magick gem version. !44450
• Replace Font Awesome social icons with GitLab SVGs on user profile page. !44599
• Migrating deprecated buttons to GlButtons for modals that have not yet been migrated to the new GlModal component. !44611
• Add product analytics for group-level integrations. !44726
• Add migration helpers for copying check constraints. !44777
• Fix Rails/SaveBang offenses in spec/uploaders/* and spec/tasks/. !44820 (matthewbried)
• Remove d-md-none/d-sm-none when d-sm-none/d-none exists. !44845 (Takuya Noguchi)
• Remove duplicated BS display properties from Admin DevOps report' HAML. !44846 (Takuya Noguchi)
• Remove duplicated BS display properties from Commit's HAML. !44847 (Takuya Noguchi)
• Remove duplicated BS display properties from Diff's HAML. !44848 (Takuya Noguchi)
• Upgrade gitlab-shell to v13.8.0. !44852
• Bump kubeclient to 4.9.1 which includes ability to integrate Kubernetes clusters where their API url is on a sub-path. !44856
• Remove an outdated comment. !44861 (Robin Dupret)
• Migrate collapsed time tracking tooltip. !44874
• GitLab-managed apps: Use GitLab's repo as replacement for the Helm stable repo. !44875
• Fix Rails/SaveBang offenses in spec/support/*. !44884 (matthewbried)
• Track audit event searches via Snowplow. !44888
• Remove duplicated BS display property from Commit/Snippet's HAML. !44917 (Takuya Noguchi)
• Update the copy in the insert image modal to align with copy guidelines. !44949
• Fix Rails/SaveBang offenses in spec/services/projects/*. !44980 (matthewbried)
• Enable usage_data_api feature flag by default. !45004
• Copy profile route under - scope. !45045
• Replacing vue shared tooltip on calendar icon. !45059
• Remove duplicated BS display properties from Environments. !45167 (Takuya Noguchi)
• Remove duplicated BS display properties from Pipelines. !45171 (Takuya Noguchi)
• Populate blocking issues count. !45176
• Remove duplicated BS display properties from Issuables. !45177 (Takuya Noguchi)
• Migrate auto devops message from bootstrap. !45221
• Update Rouge to v3.24. !45225
• Update GitLab Workhorse to v8.51.0. !45256
• Migrate blocked_by issue links to blocks type by swapping source and target. !45262
• Fix documentation link, spacing, and error handling in alert integrations list. !45304
• Replace tooltip with GLTooltip in epic sidebar datepicker. !45392
• Bump cluster applications CI template. !45472

13.4.7 (2020-12-07)

Security (10 changes)

• Validate zoom links to start with https only. !1055
• Require at least 3 characters when searching for project in the Explore page.
• Do not show emails of users in confirmation page.
• Forbid setting a gitlabUserList strategy to a list from another project.
• Fix mermaid resource consumption in GFM fields.
• Ensure group and project memberships are not leaked via API for users with private profiles.
• GraphQL User: do not expose email if set to private.
• Filter search parameter to prevent data leaks.
• Do not expose starred projects of users with private profile via API.
• Do not show starred & contributed projects of users with private profile.

13.4.6 (2020-11-03)

Fixed (1 change)

• Auto Deploy: fixes issues for fetching other charts from stable repo. !46531

Other (1 change)

• GitLab-managed apps: Use GitLab's repo as replacement for the Helm stable repo. !44875

13.4.5 (2020-11-02)

Security (9 changes)

• Add CSRF protection to runner pause and resume. !1021
• Do not expose Terraform state record in API.
• Path traversal to RCE via LFS upload.
• Update container_repository_name_regex to prevent catastrophic backtracking.
• Validate nuget package names.
• Prevent private repo from being accessed via internal Kubernetes API.
• Validate each upload param key in multipart.rb.
• Fix XSS vulnerability for job build dependencies.
• Fix unauthorized user is able to access schedule pipeline variables and values.

13.4.4 (2020-10-15)

Fixed (2 changes)

• Fix rollback portion of migration that adds temporary index for container scanning findings. !44593
• Improve merge error when pre-receive hooks fail in fast-forward merge. !44843

Other (1 change)

• Revert 42465 and 42343: Expanded collapsed diff files. !43361

13.4.3 (2020-10-06)

Fixed (3 changes)

• Exclude 2FA from upload#show routes and 404s. !42784
• use create_wiki method on ensure_wiki_exists in update_service. !42910
• Fix large backups not working with Azure Blob storage. !44233

13.4.0 (2020-09-22)

Security (2 changes, 1 of them is from the community)

• Update lodash to 4.17.20. !41036 (Takuya Noguchi)
• Update GitLab Runner Helm Chart to 0.20.1.

Removed (6 changes, 1 of them is from the community)

• Remove secret_detection job from vendored SAST CI template. !40028
• Remove Docker-in-Docker mode from Dependency Scanning documentation. !40631
• Removes unused classes on initial Ci::Ref implementation. !41077 (Jacopo Beschi @jacopo-beschi)
• Drop Docker-in-Docker mode for SAST and Dependency Scanning. !41260
• Remove application settings for Snowplow iglu registry url. !41556
• Remove Value Stream Total stage. !42345

Fixed (160 changes, 41 of them are from the community)

• Conditionally render the packages scopes in deploy token settings. !35334
• Fix advanced filters in log explorer view for gitlab managed applications. !37926
• Fix RegExp for dotenv report artifact. !38562
• Fix composer 404 issues with http auth. !38641
• Update EKS Kubernetes versions. !38644
• Fix skipped status of DAG pipelines. !39205
• Fixes wrong MR pipeline link when FF-merge strategy is used. !39396
• Include also inherited project members in GraphQL API. !39444
• Refactor spec/support/shared_examples/services/* and ee/spec/support/shared_examples/services/* to fix Rails/SaveBang Cop. !39538 (Rajendra Kadam)
• Removes extra spaces on MR/Epic tabs-containers on mobile. !39549 (Takuya Noguchi)
• Milestone Dashboard: Move Gray Type Badge Next to the Milestone Title. !39617 (Kev @KevSlashNull)
• Bug fix GraphQL file uploads accepting non-file input. !39763
• Fix Metrics dashboard embeds when using new URLs. !39876
• Respect original visibility for instrumented methods. !39951
• Take relative_url_path into account when building URLs in snippets. !39960
• Fix non-retrying bridges after retried builds in CI pipelines. !39989
• Support X-Envelope-To header as a location for Service Desk key. !40001
• Fix bug where conan does not properly check package channel when returning file download urls. !40029
• Fix example within file_hooks documentation. !40071 (Roger Meier)
• Fix missing pipeline e-mails when job logs moved to object storage. !40075
• Bump gitlab-shell to v13.7.0. !40132
• Avoid raising errors when moving unpositioned items. !40152
• Refactor ee/spec/support/shared_examples/requests/* and spec/support/shared_examples/requests/* to fix Rails/SaveBang Cop. !40185 (Rajendra Kadam)
• Fix Jira importer user mapping limit. !40310
• Fix design management Archive Selected button label. !40325
• Allow snippet move action without an existing file name. !40343
• Resolve Design comments: Text wrapping behavior. !40359
• Fix incorrect merge request diff file count after deletion. !40384
• Fix the broken CSS on the pipeline graph. !40386
• Fix tracking of frequently visited projects and groups. !40415
• Fix snippets edit not loading JSON values. !40417
• Fix incorrect project path warning after failed project path rename. !40422
• Ensure design comment is highlighted when comment is in URL. !40477
• Fixed merge request review styles not loading in FOSS. !40479
• Resolve Fix Resolved threads popup link and placement. !40489
• Fix create & manage label actions in Labels dropdown. !40511
• Always attempt retry of job trace read when file is missing. !40516
• Fix delete confirm message not displaying trailing spaces. !40549
• Fix reading some merge request diffs. !40598
• Fix snowplow tracking event error for new user invite page. !40628
• Fix file file input top position cutoff. !40634
• allow project bot account to clone through http. !40635 (Philippe Vienne @PhilippeVienne)
• Fix spacing and borders in milestone title and description. !40649
• Don't send SameSite=None to incompatible browsers. !40667
• Remove the expiry on user passwords after a user resets their password. !40712
• Fix fork users cannot create pipelines in a fork project when parent project protects all branches. !40724
• Create IssueLink for Vulnerabilities that do not have them. !40726
• Fix auto-deploy-image external chart dependencies. !40730
• Fix client usage of max line rendering. !40741
• Fix docker file icon. !40785
• Fix GitLab file icon in Firefox. !40786
• Initialise charts when container display property is set. !40787
• Fix ActiveRecord::IrreversibleOrderError during restore from backup. !40789
• Fix the filtered search bar to work in the service desk issue list. !40797
• Validates pypi required_python size to avoid 500 error. !40803
• Fix wrong caching logic in ProcessRefChangesService. !40821
• Allow users with expired passwords to sign out. !40830
• Do not show all public groups in global notification settings page. !40879
• Flag errors from psql when restoring from backups. !40911
• Fix report abuse button in issues and mrs. !40918
• Fix issue causing 'Expand All' button to not work in MR diffs view (Remove autoExpandCollapsedDiffs feature flag). !40960
• Fix visibility param for ProjectSnippet REST endpoint. !40966
• Fixed an issue where not all URL query parameters would apply to the filter bar on initial load in the Value Stream Analytics page. !40975
• Make file upload button on MR edit page tab accessible. !40995
• Change merge request updated_at when assignees are changed. !41030 (Patrick Herlihy)
• Fix deadlock in backup repositories rake task. !41042
• Change the warning message on project transfer to another namespace. !41059 (Takuya Noguchi)
• Highlight design discussion if any comment in discussion is linked. !41062
• Update pipeline button SVG to be center aligned. !41066
• Fix Style/SelfAssignment cop. !41079 (Rajendra Kadam)
• Multi-project pipelines in Web IDE lead to 404. !41082
• Fix Layout/ClosingParenthesisIndentation cop. !41084 (Rajendra Kadam)
• Fix Layout/EmptyLinesAroundArguments cop. !41086 (Rajendra Kadam)
• Prevent duplicate system notes and events when an issue is moved. !41087
• MR API: Allow allow_{collaboration,maintainer_to_push} to be updated. !41088
• Fix Layout/FirstParameterIndentation cop. !41089
• Fix Layout/RescueEnsureAlignment cop. !41093 (Rajendra Kadam)
• Move Jobs/Deploy/ECS.gitlab-ci.yml to the top level of AutoDevOps template. !41096
• Fix Layout/SpaceBeforeFirstArg cop. !41097 (Rajendra Kadam)
• Fix Lint/NonDeterministicRequireOrder cop. !41098 (Rajendra Kadam)
• Fix Lint/RaiseException cop. !41099 (Rajendra Kadam)
• Fix unfinished merge by Merge Train process. !41106
• Fix Style/RedundantSort cop. !41108 (Rajendra Kadam)
• Fix Style/EmptyLiteral cop. !41110 (Rajendra Kadam)
• Fix RSpec/ItBehavesLike cop. !41111 (Rajendra Kadam)
• Fix Style/MultilineIfModifier cop. !41113 (Rajendra Kadam)
• Fix Lint/UriRegexp cop. !41117 (Rajendra Kadam)
• Fix Style/CommentedKeyword cop. !41119 (Rajendra Kadam)
• Fix todos hover style in dark mode. !41122
• Handle todos api argument error. !41167 (gaga5lala)
• Restore doorkeeper generator to hex due to breaking change. !41169
• Render reference definitions as code blocks. !41186
• Show default message in branch selection if none selected. !41211 (Jonston Chan)
• Fix Style/PerlBackrefs cop. !41246 (Rajendra Kadam)
• Fix Style/SingleLineMethods cop. !41247 (Rajendra Kadam)
• Fix Style/EmptyLambdaParameter cop. !41248 (Rajendra Kadam)
• Fix RSpec/LetBeforeExamples cop. !41250 (Rajendra Kadam)
• Drop one of duplicated limit-container-width classname. !41251 (Takuya Noguchi)
• Fix Style/AccessModifierDeclarations co cop. !41252 (Rajendra Kadam)
• Centerize text on Mark all as done button on To-Do List. !41269 (Takuya Noguchi)
• Fix Rails/SaveBang offenses for spec/serializers/*. !41309 (Rajendra Kadam)
• Fix Rails/SaveBang offenses for spec/services/issues/*. !41312 (Rajendra Kadam)
• Ensure issue creation is not blocked by positioning. !41313
• Propagate ENV variables to codequality template. !41318
• Fix Rails/SaveBang offenses for spec/models/project_services. !41320 (Rajendra Kadam)
• Fix Rails/SaveBang offenses for spec/requests/api/pages/*. !41324
• Fix Rails/SaveBang offenses for spec/models/cycle_analytics/*. !41326 (Rajendra Kadam)
• Update the 2FA user update check to account for rounding errors. !41327
• Fix Rails/SaveBang offenses for ee/spec/services/projects/*. !41332 (Rajendra Kadam)
• Fix Rails/SaveBang offenses for ee/spec/lib/gitlab/geo/*. !41338 (Rajendra Kadam)
• Correctly preserve LFS objects in design or wiki repositories. !41352
• Fix Rails/SaveBang offenses for ee/spec/lib/ee/gitlab/background_migration/*. !41357 (Rajendra Kadam)
• Fix Rails/SaveBang offenses for spec/requests/api/*. !41362 (Rajendra Kadam)
• Fixes Auto DevOps deploy script for multiple additional hosts separated by comma and space. !41404
• Only create issues if supposed to for Prometheus alerts. !41468
• Selection Highlight Oversteps Bounds of Actual Selection in Web IDE. !41553
• Resolve NoMethodError: undefined method invite_email. !41587
• Fixed repository browser not working with parentheses in branch name. !41591
• Add incident label for manually created incident issues. !41598
• Resolve Static Site Editor Flattens Mixed Lists. !41599
• NotificationsController - Handle mising parent notificationsetting. !41612
• Fail API Fuzzing CI/CD job when scanner errors. !41616
• Fix MR diff file counts for some historic data. !41676
• Fix always visible sidebar TODO button spinner. !41677
• Fixed image comments not showing on the changes tab. !41683
• Resolve design discussion bug where a comment is added twice. !41687
• Remove height limit on environments table. !41688
• Refuse to perform an LFS clean on projects that are fork roots. !41703
• Exclude tmp dirs from backups. !41706
• Fix padding on CI settings tables in mobile version. !41728
• Fixed note having wrong author after deleting. !41747
• Remove excess space above milestone titles. !41749
• Fix merge request chat messages for adding and removing approvals. !41775
• Use 'read' method to get request body in Conan to fix uploads when using Unicorn. !41801
• Improve design management not available message. !41818 (Ben Bodenmiller @bbodenmiller)
• Fix the tier of environment alerts feature. !41855
• Prevent merge requests from triggering coverage fuzzing jobs. !41906
• Fix upstream pipeline status when strategy dependent. !41930
• Remove virtual scroll list from pipeline test report. !41935
• Resolve Fix validation on External Wiki service template form. !41964
• Fix button color for merge request settings. !42052 (Mikhail Snetkov)
• Use the correct start time when polling for updated notes. !42124
• Fix max seats used not updated in billing summary. !42184
• Fix error when third level trigger pipeline. !42192
• Merge Requests are not blocked when their pipelines are waiting for manual actions unless 'Pipeline must succeed' is checked in the settings. !42207
• Stop applying Ctrl keyboard shortcuts inside Markdown editors on Mac. !42239
• Stop applying Ctrl+P shortcut on MR page on Mac. !42240
• Make SSH keys publicly accessible. !42288
• Fix incident list by restricting query on FOSS. !42301
• Do not add admins as owners to project authorizations during project creation. !42335
• Do not raise error when a member is not found by invite token. !42349
• Fix exception when saving Jira integration info for an instance. !42361
• Fix text overflow events issue name. !42370
• Fix error reporting for Web IDE commits. !42383
• Does not update repository statistics when running housekeeping and repository cleanup on a read-only instance. !42409
• Remove an extra spacing from Dashboard Issues. !42459 (Takuya Noguchi)
• Simplify StartupCSS JS Helper and fix autosize issues under StartupCSS. !42462
• Fix daemon memory killer jobs hash thread safety issue. !42468
• Resolve Design comments do not render the blockquotes correctly. !42498
• Resolve On design discussion note, icons are misaligned. !42672

Deprecated (1 change)

• Remove pipeline_id column from requirements_test_reports. !38924

Changed (153 changes, 30 of them are from the community)

• Add Service Templates deprecation warning banner. !25587
• Highlight un-focused/un-viewed file's in file tree. !27937
• Support JWT params set by Workhorse during uploads. !33277
• Add timeout support in the delete tags service for the GitLab Registry. !36319
• Store deployment_type of Jira server in jira_tracker_data table. !37003
• Split "Test settings" and "Save changes" to separate buttons. !37413
• Add spacing to design management toolbar buttons. !38889 (George Tsiolis)
• Migrate environments pin button. !38891 (George Tsiolis)
• Replace fa-tag(s) icons with GitLab SVG icons. !38979
• Re-order diff unfold buttons so that “show more lines above” appears first. !39060
• Replace fa-user(s) icons with GitLab SVG user(s) icon. !39165
• Update order of the Header Metadata in Package details. !39585
• Change active toggle on integration settings page to checkbox. !39586
• Group pipeline warnings and make them collapsible. !39634
• Adjust format for JUnit report duration times. !39644
• Use pointer:crosshair when hovering on the design view. !39671
• Update Prometheus helm chart version to 10.4.1. !39681
• Update GlDeprecatedButton with GlButton in deployment_action_button. !39700
• Add Alert Id to Alert list view. !39706
• Resolve Combine the Overview and Alert Detail sections. !39714
• Tweak file-by-file display and add file current/total display. !39719
• Replace fa-circle icon instances with GitLab SVG check icon. !39745
• Migration of old icon button to component button in Approval Rules (private groups). !39769
• Move related issues to core. !39779
• Change show more button to be a table row so to remove manual CSS styling. !39788
• Improve empty state for Cohorts to match DevOps Score. !39828
• Remove time tracking from incidents sidebar. !39837
• Add smtp_server to usage ping data. !39844
• Replace fa-download icon with GitLab SVG download icon. !39849
• Replace fa-caret-down with SVG icon in MR widget. !39852
• Remove redirection when snippet has a binary blob. !39858
• Search UI Allow issue scope results filtering by state. !39881
• Use dropdown for embed in snippets. !39885
• Update Managed Cluster Applications to v0.29.0, including WAF for ingress, a smaller CI template, and version updates to a few applications. !39890
• Add Flash spacing on merge request show page. !39903
• Rename DevOps Score to DevOps Report. !39953
• Prevent MRs to be dropped from Merge Trains for open discussions. !39957
• Change icon for branch delete button. !39968
• Replace Unicode Characters with ASCII Equivalent in New Project Slug. !39971 (Kev @KevSlashNull)
• Prevent form submission in search boxes on New Release and Edit Release pages. !40011
• Move package usage ping data to core. !40032
• Hide projects that are pending delete from the project index. !40035
• Bump swagger-ui-dist. !40077 (Roger Meier)
• Truncate job title on log page. !40107
• Add the unique search visits data to the usage ping. !40134
• Increase default page size for Alert and Incident management to 20 from 10. !40139
• Disallow awarding emojis to locked Issuables for users that are not member of the project. !40150
• Add 'kind' to differentiate between NetworkPolicy and CiliumNetworkPolicy Kubernetes network manifests. !40165
• Adjust badge key text and width limits. !40199 (Fabian Schneider @fabsrc)
• Improve click surface area of toggle buttons. !40231
• Track edit by editor action for Usage Ping. !40232
• Track unique web ide edit action for usage ping. !40246
• Replace fa-bugs icons with GitLab SVG bug icon. !40273
• Add Alert Management assignee avatar for list and details view. !40275
• Track snippet editor actions. !40277
• Moved Cluster Connect Form to Vue. !40295
• Update issue edit buttons. !40298
• Add filter to exclude non internal users in REST API. !40372
• Include draft merge request into filter response. !40376
• Update gitlab-puma to 4.3.5-gitlab-3. !40389
• Automatically create self monitoring project on new GitLab installations. !40404
• Update default plan limits for maximum package file sizes. !40410
• Re-name Analytics Workspace as instance-level analytics. !40436
• Update issue edit button to gl-button. !40438
• Migrating to gl-button in Environments table. !40444
• Bump marginalia gem version to 1.9.0. !40481
• Move Jira Development Panel integration to Core. !40485
• Update commit toggle description button to gl-button. !40524
• Render markdown attribute definitions as tooltips. !40541
• Bump doorkeeper to 5.1.1. !40546
• Replace fa-trash icons with GitLab SVG remove icon. !40579
• Replace fa-search-* icons with GitLab SVG icons. !40580
• Migrate DevOps Score empty state into Vue component. !40595
• Remove auto close incident feature flag. !40612
• Change invalid Snippet params status code from 403 to 422. !40619
• Migrating setup policy button in registry settings. !40668
• Replace notification icons with Gitlab SVGs. !40709
• Sort TestCase data by status and execution_time. !40722
• Remove file_name and content in snippet mutations. !40727
• GraphQL: Updates PipelineCancel mutation. !40764
• Retrieve security dashboard URL used on Project Severity status report from backend. !40801 (Kev @KevSlashNull)
• Track SFE actions in BlobController. !40846
• Replace fa-exclamation-circle and fa-lightbulb-o with GitLab SVG icons. !40857
• Remove frontend unit test report test case sorting. !40885
• Bump doorkeeper to 5.3.0. !40929
• Add IDE edit actions to Usage Data. !40939
• Show keep button for locked artifacts. !40962
• Add type selector dropdown to new issue form. !40981
• Global Search - Redesign Issue Results Title. !41016
• Increase Pypi required_version limit to 255. !41018
• Replace bootstrap alerts in ee/app/views/groups/push_rules/edit.html.haml. !41069 (Jacopo Beschi @jacopo-beschi)
• Migrate '.fa-spinner' to '.spinner' for 'app/views/projects/services/prometheus'. !41126 (Gilang Gumilar)
• Migrate '.fa-spinner' to '.spinner' for 'app/views/shared/issuable'. !41132 (Gilang Gumilar)
• Migrate '.fa-spinner' to '.spinner' for 'app/views/projects/find_file'. !41134 (Gilang Gumilar)
• Migrate '.fa-spinner' to '.spinner' for 'app/assets/javascripts/gpg_badges.js'. !41136 (Gilang Gumilar)
• Migrate '.fa-spinner' to '.spinner' for 'app/assets/javascripts/notes/components/note_header.vue'. !41140 (Gilang Gumilar)
• Migrate '.fa-spinner' to '.spinner' for 'app/assets/javascripts/vue_merge_request_widget/components/deployment/memory_usage.vue'. !41142 (Gilang Gumilar)
• Migrate '.fa-spinner' to '.spinner' for 'app/assets/javascripts/blob/file_template_selector.js'. !41146 (Gilang Gumilar)
• Migrate '.fa-spinner' to '.spinner' for 'app/assets/javascripts/ajax_loading_spinner.js'. !41147 (Gilang Gumilar)
• Migrate '.fa-spinner' to '.spinner' for 'app/views/projects/tree'. !41148 (Gilang Gumilar)
• Change logic behind new issues highlight. !41150
• Migrate '.fa-spinner' to '.spinner' for 'app/views/projects/imports'. !41151 (Gilang Gumilar)
• Migrate '.fa-spinner' to '.spinner' for 'app/views/imports'. !41153 (Gilang Gumilar)
• Replace fa-arrow-* with GitLab SVG icons. !41158
• Remove expired_pat_email_notification feature flag. !41166
• Display provider name for profile social sign-in connectors. !41198
• Adjust the Package Registry breadcrumb to match navigation. !41264
• Replace bootstrap alerts in app/views/projects/forks/error.html.haml. !41292 (Gilang Gumilar)
• Replace bootstrap alerts in app/views/projects/blob/edit.html.haml. !41298 (Gilang Gumilar)
• Add confirmation dialog when importing multiple projects. !41306
• Replace bootstrap alerts in app/views/shared/_project_limit.html.haml. !41335 (Gilang Gumilar)
• Replace bootstrap alerts in app/views/projects/_deletion_failed.html.haml. !41344 (Gilang Gumilar)
• Replace bootstrap alerts in app/views/shared/_group_form.html.haml. !41348 (Gilang Gumilar)
• Replace bootstrap alerts in app/views/projects/pages/_access.html.haml. !41360 (Gilang Gumilar)
• Update Secret-Detection template to use commits file. !41364
• Change 2FA to verify password hash instead of timestamp. !41366
• Replace bootstrap alerts in app/views/admin/groups/_form.html.haml. !41375 (Gilang Gumilar)
• Replace bootstrap alerts in app/views/profiles/two_factor_auths/create.html.haml. !41383 (Gilang Gumilar)
• Replace bootstrap alerts in app/views/profiles/two_factor_auths/show.html.haml. !41388 (Gilang Gumilar)
• Replace bootstrap alerts in app/views/shared/issuable/_form.html.haml. !41390 (Gilang Gumilar)
• Replace bootstrap alerts in app/views/shared/_no_password.html.haml. !41397 (Gilang Gumilar)
• Replace bootstrap alerts in app/views/projects/merge_requests/_mr_title.html.haml. !41399 (Gilang Gumilar)
• Remove pipeline warnings from pipeline view. !41419
• Package Registry: Adjust the max width for non-fluid screens to be 990. !41549
• Add help text to incident type select on new issue form. !41567
• Corrected some spelling mistakes in the project deletion confirmation modal. !41576
• Add ability to update only Snippet descriptions via REST endpoint. !41581
• Place older issues before more recent ones. !41602
• Change name of GitLab Instance Administrators group to GitLab Instance. !41684
• Replace fa-info-circle icons with GitLab SVG information-o icon. !41721
• Improve support for description field on CiliumNetworkPolicy. !41722
• Replace fa-trash-o icons with GitLab SVG remove icon. !41748
• Remove designs from incidents. !41757
• Introduce infinite scrolling to importers. !41789
• Remove email confirmation field on signup form. !41813
• Replaced ACE with Editor Lite on CI linting view. !41895
• Replace fa-question-circle icons with GitLab SVG question-o icon. !41970
• Migrate MR Deployment Widget to GlDropdown. !42004
• Filter the values for deployment platform metrics. !42116
• Present complete alert payload in detail and incident views. !42140
• Update template warning padding on New Issue form. !42154
• Updated gitlab:usage_data:dump_sql_in_yaml rake task with redis usage. !42189
• Update visual styling of container registry metadata. !42202
• Direct support for HTTP basic authentication in API Fuzzing. !42266
• Disable Sidekiq Exporter logs by default. !42267
• Hashed Storage: forced automatic migration of legacy projects via background jobs. !42313
• Add Missing slash in 'Registry setup' section of npm packages. !42360
• Remove job logs from notification e-mails. !42395
• Refactored snippets edit form to Vue. !42412
• Store object counts periodically for instance statistics. !42433
• Increase widget polling for closed and merged merge requests. !42458
• Remove successful signup flash message. !42512
• Update conan remote instructions snippet to show project-level remote. !42526

Performance (37 changes, 5 of them are from the community)

• Improve group search users scope performance. !38701
• Optimize counts.terraform_reports usage ping counter. !39499
• Fix slow group loading on forking page. !39640
• GlButton migrations for pipeline security tab. !39651
• Optimize markdown rendering in search results. !39833
• Make highlighting limits stricter. !39934
• Increase poll interval for merged MRs widget. !39961
• Reduce MergeRequest::RefreshService loops. !40135
• Improve performance of Gitlab::BacktraceCleaner. !40180
• Improve performance of Rails backtrace cleaner configuration. !40182
• Defer (certain) parts of setting up snowplow telemetry. !40299
• Reduce storage requirements for keeping track of pre-logged-in sessions. !40336
• Increase performance of rendering large amounts of markdown data. !40448
• Replace fa-times with GitLab SVG close icon in dropdowns. !40585
• Replace fa-times with GitLab SVG close icon in promotions. !40586
• Replace fa-times with GitLab SVG close icon in forms. !40587
• Reduce Redis usage when viewing repositories with lots of branches and tags. !40615
• Preload projects to prevent N+1 when populating project name. !40769
• Fix package API query performance when pipelines and multiple versions are present. !40770
• Apply GZip compression to discussion diffs. !40778
• Improve Productivity Analytics and Merge Request Analytics database queries. !40838
• Replace LoadingButton with GlButton for the comment dismissal modal. !40882
• Jdb/refactor inline diff table row. !40906
• Remove the async pages feature flags. !40980
• Graphql Issues - Fix N+1 for Assignees. !41233
• Clean up stale merge request HEAD ref. !41555
• Remove stale merge refs. !41572
• Jdb/refactor parallel diff table row. !41606
• Updates CiPlatformMetrics to do bulk insertions. !41617
• Verify only 1mb of existing LFS object to improve LfsDownloadService performance. !41770
• Drop one of duplicated classname from Project. !41830 (Takuya Noguchi)
• Drop one of duplicated classname from Projects. !41831 (Takuya Noguchi)
• Drop one of duplicated classname from Serverless Function. !41832 (Takuya Noguchi)
• Drop one of duplicated classname from Serverless Functions. !41833 (Takuya Noguchi)
• Pass project ID to issue placement worker. !42091
• Enable coverage_report_view feature flag by default. !42094 (fh1ch)
• Update MR index to include id. !42222

Added (135 changes, 12 of them are from the community)

• WebAuthn support (behind feature flag). !26692 (Jan Beckmann)
• Add ignore_skipped option for pipeline status badge. !28288 (Fabian Schneider @fabsrc)
• Geo: Add migrations for registry and details tables for external MR diff replication. !34248
• Display Merge Request's source branch name in sidebar. !34901 (Ethan Reesor (@firelizzard))
• Add validation to pypi package version. !35080 (Bola Ahmed Buari)
• Add ability to get an Issue using GraphQL and REST API. !35176
• Add versioning support to Terraform state backend. !35211
• Show expired milestones at the bottom of the list within dropdown. !36562
• Added EWM work item tracker integration. !36662
• Add user mapping by username when importing projects for Bitbucket Server importer. !36885
• Surround selected text in markdown fields on certain key presses. !37151
• Add json api endpoint that provides CI linting. !37344
• Include max artifact size in authorize response. !37632
• Add link to compare changes intoduced by a git submodule update. !37740 (Daniel Seemer @Phaiax)
• Add note to graphql timelog_type. !37748 (Lee Tickett)
• Add Gitpod integration. !37985 (Cornelius Ludmann @corneliusludmann)
• Geo: Added DB tables for snippets replication. !38688
• Add similarity sorting for projects for GraphQL API. !38916
• Automatically add AJAX API requests to the performance bar. !39069
• Send notification when merge request is set to merge when pipeline succeeds. !39297 (Ravishankar Gnanaprakasam)
• Expose group memberships under group via GraphQL. !39331
• Add alert when editing .gitlab-ci.yml. !39508
• Allow Conan packages to be scoped to project-level. !39541
• Add the artifact expiration help url. !39546 (Gilang Gumilar)
• Send email notification on disabling 2FA. !39572
• Add package file size limits to plan limits. !39633
• Add AuthenticationEvent to store sign-in events. !39652
• Add virtual actions tracker for Usage Ping. !39694
• GraphQL: Pipeline mutations for retry, cancel, and destroy. !39780
• Add ability to associate Environment with Alert with gitlab_environment_name payload key. !39785
• Add Conan lock file support to Dependency Scanning. !39811
• Add Summary tab for incident issues. !39822
• Incident severity widget. !39859
• Add dedicated SAST and DS CI image variables. !39875
• Add index for expire_at to ci_pipeline_artifacts. !39882
• Adds auto_close_incident column to project_incident_management_settings. !39980
• Adds CI Platform Metrics bookkeeping model. !40036
• Adds package count to usage data. !40039
• Add / as keyboard shortcut for search. !40057
• Add new "generic" package type. !40061
• Surface incident severity and icon in the Incident List table. !40112
• Add background worker to rebalance issues. !40124
• Add a system note on Alert creation. !40128
• Add usage pings for project import using various importers (GitLab, Bitbucket, Gitea, GitHub and more). !40130
• Sync LFS objects when push mirroring. !40137
• Add MergeRequest sort options to GraphQL API. !40138
• Add total count to GraphQL release data. !40147
• Add Atlassian Identity to store identity/credentials. !40176
• Add OmniAuth sign-in via Atlassian Cloud. !40178
• Add alert to Issue type in GraphQL. !40214
• Add usage ping and index for DAST On-Demand Scans. !40219
• Filter Merge Requests by author, assignee and milestone in GraphQL. !40265
• Add IssuableSeverity to store Incident severity level. !40272
• Paginate profile group notifications. !40326
• Add keyboard shortcuts for bold, italic, and link in markdown editors. !40328
• Password changed emails must specify that password was changed by admin. !40342
• Add merge_request_reviewers table. !40358
• Add table for storing user settings for board epic swimlanes. !40360
• Wrap dashboards dropdown items text. !40367
• Create security_findings table. !40368
• Add issue importers usage pings (FogBugz, Phabricator, Jira). !40382
• Add CI_COMMIT_TIMESTAMP CI variable. !40388 (Nasko Vasilev)
• Add admin UI for adjusting package file size limits. !40423
• Add pipeline_artifacts_size to root_storage_statistics. !40425
• Adds monthly package data to usage ping. !40452
• Show the comment authored time in comment search results. !40472
• Add incident management analytics events. !40475
• Make cloud native build logs more resilient. !40506
• Return builds with coverage in MR widget JSON response. !40533
• Expose the todos of the current user on relevant objects in GraphQL. !40555
• Save pages build artifact id in pages metadata. !40592
• Add issue filters when listing board issues in GraphQL. !40602
• Create table for storing Instance Statistics object counts. !40605
• Improve ability to navigate to child pipelines. !40650
• Support custom Azure Blob Storage domains. !40694
• Add toml and json front matter language support to Static Site Editor's WYSIWYG mode. !40718
• Add a warning when any diff files are collapsed. !40752
• Track downloads of group code coverage CSV in snowplow. !40754
• GraphQL: Add retryable and cancelable to PipelineType. !40780
• Format Conan package manager in Dependency List. !40811
• Allows to update incident severity via GraphQL. !40869
• Expose Instance Statistics measurements (object counts) via GraphQL. !40871
• Add job token authentication for the GitLab PyPI package repository. !40888
• Upgrade pages to v1.23.0. !40915
• Add GFM reference format for alerts. !40922
• Destroy issue board via GraphQL. !40930
• Exposes Incident's severity via GraphQL. !40945
• Expose a list of projects starred by the user to GraphQL API. !41076 (Pavel Kuznetsov)
• Parallel matrix jobs show relevant variables in job name. !41080
• Rake task to generate raw SQLs for usage ping. !41091
• Make the auto_link_user OmniAuth setting configurable by provider. !41133
• Add release direct asset link info to GraphQL endpoint. !41170
• Add "upcomingRelease" field to GraphQL endpoint. !41183
• Show multiple jobs contributing to code coverage. !41217
• Add update issue by id in vuex for boards. !41226
• Record package creator. !41258
• Make bridge/child pipelines clickable. !41263
• Optimise index on audit events for CSV export. !41266
• Search UI - Implement Merge Request scope results filter by state. !41282
• Migrate live traces before updating build state. !41304
• Export ActionCable metrics to Prometheus. !41358
• Display merged commit sha in fast-forward merge mode. !41369 (Mycroft Kang @TaehyeokKang)
• Add admin setting of Elasticsearch client request timeout. !41470
• Add support for environment_url.txt to API Fuzzing. !41523
• Check if usage ping enabled for all tracking using Redis HLL. !41562
• Introduce build states table / model / migration. !41585
• Add bottom spacing to static site editor UI to align with overall UI spacing. !41596
• Migration to cleanup after partitioned audit_events backfill. !41605
• DAST Site validation - Model Layer. !41639
• Automatically resolve alert when receiving end time. !41648
• Show welcome page after sign up. !41662
• Incident highlight bar widget. !41702
• Enable unique search users usage ping HLL metric by default. !41739
• New ActionCable Prometheus metrics added. !41771
• Upgrade GitLab Pages to 1.24.0. !41782
• Add pages_deployments table. !41785
• Surface alert details in a tab on incidents. !41850
• Add forum link to help menu. !41858
• Add namespace ID to user pages in the admin area. !41877
• Track projects using code intelligence. !41881
• Add a front matter editing UI in WYSIWYG mode of the Static Site Editor. !41920
• Add issues and merge_requests filtering by state for search API. !41989
• Log authentication events alongside existing audit events. !42033
• Validate not null external_diff_store field on merge_request_diffs to maintain data integrity. !42045
• Create and resolve To-Dos for designs. !42059
• Set incident severity when it is created from an alert. !42072
• Make Pipeline ID's always a link for downstream/upstream pipelines. !42107
• Create placeholder model for Vulnerability to reserve + as a reference prefix. !42147
• Add deduplicated column to security_findings table along with the compound index on scan_id and deduplicated and remove the index on scan_id. !42270
• Autocomplete recently viewed issues in the global search bar. !42302
• Upgrade GitLab Pages to 1.25.0. !42350
• Query projects by ids with GraphQL. !42372
• Database changes to support terraform state version replicaiton. !42492
• Add autocomplete search suggestions for recent merge requests. !42560
• Implement allowing child pipeline to have child pipeline. !42580

Other (116 changes, 60 of them are from the community)

• Migrate .fa-spinner to .spinner for app/views/projects/blob/viewers. !25046 (nuwe1)
• Replace issue-created icon with issues icon. !26409
• Remove skip_hased_storage_upgrade feature flag. !29364 (Lee Tickett)
• Add indexes to label_links database table. !34503
• Add first OpenAPI specification file. !35868 (winniehell)
• Replace deprecated button with new button. !38940
• Stricter default timeouts for outgoing HTTP requests. !39188
• Update dependency vuex to ^3.5.1. !39201
• Add the Query Apdex Prometheus metric to usage ping. !39256
• Update spec to glbutton. !39311
• Update prismjs from 1.6.0 to 1.21.0. !39593 (Takuya Noguchi)
• Reinstate 60s timeout in Cluster Prometheus. !39595
• Create a POC for 'immer' library. !39738
• Remove default column from services table. !39817
• Implement JSON response for project/pipelines create. !39839
• Syncronize use of maximize and minimize icons in order to deprecate duplicates with different names. !39889
• Add emails user_id foreign key with cascade delete. !39899
• Update GitLab Runner Helm Chart to 0.20.0. !39933
• Add temporary index for container scanning findings. !39962
• Replace some fa-trash icons with GitLab SVG remove icon. !39991
• Replacing deprecated buttons and loading buttons with new buttons. !40163
• Migrate Bootstrap button to GitLab UI GlButton in mr_widget_failed_to_merge. !40170
• Remove unused users.bio database column. !40269
• Remove milestone and iteration feature from Incidents sidebar. !40283
• Drop code_owner column from approval_merge_request_rules. !40322
• Add merge request usage to usage data. !40391
• Migrating buttons and classes to match GitLab UI. !40409
• Display informative messages when service desk is unsupported. !40454
• Add seats related columns for easier data analysis. !40470
• Remove keep latest artifact feature flags. !40478
• Add index on merge_request_id to approval_merge_request_rules. !40556
• Add kubernetes_agents usage metric. !40559
• Adds creator_id field to packages_packages table. !40562
• Add usage ping for distinct count for kubernetes agents for at least one token. !40563
• Add kubernetes_agent_gitops_sync usage ping metric. !40568
• Refactor ee/spec/support/shared_examples/models/* and spec/support/shared_examples/models/* to fix Rails/SaveBang Cop. !40695 (Rajendra Kadam)
• Change Vulnerabilities Count Data Retention to 1 year. !40766
• Add warning to stop Puma and Sidekiq when restoring from backup. !40791
• Add --if-exists to pg_dump command-line in backup creation. !40792
• Migrate remove description history button to new button. !40806
• Add NOT NULL constraint to merge_request_metrics.target_project_id. !40836
• Update empty state behavior for incidents list. !40872
• Remove attempt_group_search_optimizations feature flag. !40881 (gaga5lala)
• Add Issue actions to UsageData. !40904
• Hide the latest version of templates from the template selector. !40937
• Add target_id column to audit_events table. !40954
• Update Workhorse to v8.44.0. !40970
• Internal API for GitLab Kubernetes agent. !41045
• Use applogger in app/workers/*. !41046 (Rajendra Kadam)
• Use applogger in config/initializers/*. !41047 (Rajendra Kadam)
• Use applogger in ee/app/models, helpers and workers. !41048 (Rajendra Kadam)
• Use applogger in group.rb, access.rb and repo update mirror worker. !41049 (Rajendra Kadam)
• Use applogger in some files of lib/gitlab/ldap/sync/*. !41051 (Rajendra Kadam)
• Use applogger in lib/gitlab/. !41052 (Rajendra Kadam)
• Use applogger in spec/lib/ee/gitlab/. !41053 (Rajendra Kadam)
• Use applogger. !41055 (Rajendra Kadam)
• Use applogger in some files of ee/lib/* and spec files. !41056 (Rajendra Kadam)
• Use applogger in some files in lib/gitlab. !41058 (Rajendra Kadam)
• Use applogger in some files of auth/ldap dir. !41061 (Rajendra Kadam)
• Use applogger in lib/gitlab. !41063 (Rajendra Kadam)
• Use applogger in lib/gitlab/database. !41068 (Rajendra Kadam)
• Use applogger in lib/gitlab/. !41071 (Rajendra Kadam)
• Use applogger in lib/gitlab/. !41075 (Rajendra Kadam)
• Replace v-html with v-safe-html in delete_project_modal.vue. !41130 (Kev @KevSlashNull)
• Replace v-html with v-safe-html in fork_groups_list_item.vue. !41143 (Kev @KevSlashNull)
• Replace v-html with v-safe-html in list.vue. !41145 (Kev @KevSlashNull)
• Replace v-html with v-safe-html in popover.vue. !41197 (Kev @KevSlashNull)
• Replace v-html with v-safe-html in suggestions.vue. !41200 (Kev @KevSlashNull)
• Replace v-html with GlSprintf in memory_usage.vue. !41204 (Kev @KevSlashNull)
• Replace v-html with v-safe-html in parallel_diff_table_row.vue. !41206 (Kev @KevSlashNull)
• Replace v-html with v-safe-html in registry_breadcrumb.vue. !41207 (Kev @KevSlashNull)
• Replace v-html with v-safe-html in note_signed_out_widget_spec.js. !41219 (Kev @KevSlashNull)
• Externalize i18n strings from app/views/shared/web_hooks/_form.html.haml. !41234 (Takuya Noguchi)
• Externalize i18n strings from snippets/_header HAML. !41235 (Takuya Noguchi)
• Externalize i18n strings from app/views/shared/runners/show.html.haml. !41241 (Takuya Noguchi)
• Widen TODO list only on mobile to be mobile-friendly. !41244 (Takuya Noguchi)
• Widen issuable list only on mobile to be mobile-friendly. !41249 (Takuya Noguchi)
• Use GitLab AppLogger. !41261 (Rajendra Kadam)
• Add index to resource_iteration_events for add actions. !41280
• Use GitLab AppLogger. !41290 (Rajendra Kadam)
• Update Workhorse to v8.45.0. !41293
• Use GitLab AppLogger in files in lib/gitlab/*. !41302 (Rajendra Kadam)
• Replace v-html to v-safe-html directive. !41305 (Kazuya Kojima)
• Fix Rails/SaveBang offenses for /spec/services/merge_requests/. !41315 (Rajendra Kadam)
• Fix Rails/SaveBang offenses for /spec/services/ci/. !41317 (Rajendra Kadam)
• Adds an alert handler for bootstrap migration. !41323
• Replace v-html with v-safe-html in delete_user_modal.vue. !41328 (Kev @KevSlashNull)
• Fix Rails/SaveBang offenses for /spec/models/ci/. !41329 (Rajendra Kadam)
• Replace v-html with v-safe-html in description.vue. !41336 (Kev @KevSlashNull)
• Internationalize Admin Abuse Report. !41355 (suzu-1990)
• Internationalize Admin users new. !41367 (Takuya Noguchi)
• Externalize i18n strings from admin dashboard. !41387 (Takuya Noguchi)
• Fix Rails/SaveBang offenses for 3 files. !41392 (Rajendra Kadam)
• Fix Rails/SaveBang offenses for 3 files. !41394 (Rajendra Kadam)
• Fix Rails/SaveBang offenses for 3 files. !41395 (Rajendra Kadam)
• Fix Rails/SaveBang offenses for 3 files. !41398 (Rajendra Kadam)
• Replace GlDeprecatedDropdownDivider with GlDropdown in app/assets/javascripts/vue_shared/components/filtered_search_bar/tokens/author_token.vue. !41432 (nuwe1)
• Replace v-html with the gl-icon component in time_ago.vue. !41457 (Kev @KevSlashNull)
• Replace v-html with v-safe-html in no_changes.vue. !41471 (Kev @KevSlashNull)
• Rename job trace to job logs in IDE code. !41522 (Kev @KevSlashNull)
• Remove attempt_project_search_optimizations feature flag. !41550 (gaga5lala)
• Update gems to use Faraday v1.0.1. !41623
• Ensure namespace settings are backfilled via migration. !41679
• Update design discussions to use GitLab UI components. !41686
• Convert spec_helper to fast_spec_helper. !41755 (gaga5lala)
• Migrate Bootstrap button for environment_actions. !41844
• Make Daemon Memory Killer be the default for Sidekiq. !41847
• Refactor relative positioning to enable better testing. !41967
• Lighten header counter badge colors to be more vibrant. !42002
• Remove duplicated container scanning findings. !42041
• Remove .pkgr.yml as not used for 4 years. !42156 (tnir)
• Update deprecated software versions to the latest. !42158 (tnir)
• Upgrade vendored Dockerfile template to buster. !42169 (Takuya Noguchi)
• Add instance statistics visits to usage data. !42211
• Modify DevOps Score UI Text. !42256
• Expand the visible highlight for collapsed diffs (re: !41393). !42343

13.3.9 (2020-11-02)

Security (9 changes)

• Add CSRF protection to runner pause and resume. !1021
• Do not expose Terraform state record in API.
• Path traversal to RCE via LFS upload.
• Update container_repository_name_regex to prevent catastrophic backtracking.
• Validate nuget package names.
• Prevent private repo from being accessed via internal Kubernetes API.
• Validate each upload param key in multipart.rb.
• Fix XSS vulnerability for job build dependencies.
• Fix unauthorized user is able to access schedule pipeline variables and values.

13.3.8 (2020-10-21)

Fixed (2 changes)

• Make SSH keys publicly accessible. !42288
• Revert required encryption on CI runner tokens. !42623

Added (1 change)

• Add missing fontawesome file icon classes. !43091

Other (1 change)

• GitLab-managed apps: Use GitLab's repo as replacement for the Helm stable repo. !44875

13.3.4 (2020-09-02)

Security (1 change)

• Protect OAuth endpoints from brute force/password stuffing.

13.3.3 (2020-09-02)

Security (23 changes, 1 of them is from the community)

• Check validity of project's import_url before mirroring repository.
• Show on two-factor authentication setup page groups that are the cause of this requirement.
• Prevent interrupted 2FA sign-in from signing-in incorrect user.
• Create new 2FA code each time user is entering 2FA setup page.
• Remove all sessions but current while enabling 2FA.
• Invalidate two factor sign-in when user password changes.
• Delete members invites created by users being deleted.
• Prevent OmniAuth from rendering arbitrary error messages.
• Prevent not-2fa authenticated users that are supposed to use it to consume api via session.
• Invalidate remember me when an active session is revoked.
• Add rate limit on webhooks testing feature.
• Add scope presence validation to OAuth Application creation.
• Allow only running job tokens for API authentication.
• Prevent Deploy Tokens to read project resources when repository is disabled.
• Change conan api to use proper workhorse validation.
• Ensure global ID is of Snippet type in GraphQL destroy mutation.
• Fix Improper Access Control on Deploy-Key.
• Set maximum limit for profile events.
• Persist EKS External ID before presenting it to the user.
• Prevent project maintainers from editing group badges.
• Upgrade jquery to v3.5.
• Update websocket-extensions gem to 0.1.5. (Vitor Meireles De Sousa)
• Update GitLab Runner Helm Chart to 0.19.3.

13.3.2 (2020-08-28)

Removed (1 change)

• Display upcoming database deprecation warning only if current database version minimum is not met. !38225

Fixed (5 changes)

• Fix race condition in concurrent backups. !39894
• Prevent accidental group deletion if path rename fails. !40353
• Fix snippet save button disabled with empty file path. !40412
• Fix exception handling when a concurrent backup fails. !40451
• Scope incident issue counts by given project or group. !40700

13.3.1 (2020-08-25)

Fixed (2 changes)

• Fix bug when promoting an Issue with attachments to an Epic. !39654
• Avoid creating diff position when line-code is nil. !40089

13.3.0 (2020-08-22)

Security (2 changes)

• Improve path traversal validation checks. !33114
• Update GitLab Runner Helm Chart to 0.19.2.

Removed (3 changes)

• Remove Internet Explorer 11 from babel transpilation. !36840
• Remove namespace storage limit setting. !38108
• Geo: Drop tables related to vulnerability export replication. !38299

Fixed (116 changes, 14 of them are from the community)

• Fix filter by releases at group issues and merge requests search bar. !26740 (Gilang Gumilar)
• Disable commenting on lines in files that were or are symlinks or replace or are replaced by symlinks. !35371
• Fix icon alignment on board cards. !35710 (carolcarvalhosa)
• Make Add metrics button visible on self monitoring dashboard. !36169
• Keep large spinner while MR file tree is loading. !36446
• Bug Fix: Child pipelines are not found by API endpoints. !36494
• Show relevant error messages when failing to match a CI job entry. !36536
• Don’t show close icon on flash warning. !36581
• Updates to file table in package details UI. !36723 (Adam Alvis (@adamalvis))
• Add graceful timeout handling for analytics. !36811
• Resolve Pasting an image into a comment also uploads design. !37171
• Fix release evidence sometimes not being collected. !37184
• Fix editing note throws js error. !37216
• Fix merge request approvals for EE without a license. !37246
• Fixed ops settings titles. !37259
• Refactor all factories to fix SaveBang Cop. !37268 (Rajendra Kadam)
• Resolve Anchor tags to Designs is not working. !37307
• Fix content validation for existing wiki pages. !37310
• Alert management list spacing. !37320
• Fix issue with blank keyset pagination parameters. !37351
• Remove dashed border on designs hover. !37375
• Fix CSV downloads for multiple series in the same chart. !37377
• Fix Pypi and Nuget Storage Statistics. !37386
• Display files in tab counter same as diff stats. !37390
• Fix vertical alignment of design management toolbar buttons. !37398
• Allow LFS to be enabled in project settings even when Repository is disabled. !37401
• Update closed MRs on push. !37414
• Remove old export file when requesting new project export using API. !37427
• Refactor spec/helpers and ee/spec/helpers to fix SaveBang Cop. !37446 (Rajendra Kadam)
• Fix ambiguous query error when filtering for Any milestone in Value Stream Analytics. !37451
• Ensure User's preferred_language always has a value. !37464
• Wiki controller should not crash with non-html format. !37466
• Fix local Tiller not being default-enabled on the frontend. !37494
• Fix sizing of pins for new design comments. !37541
• Remove status dropdown in merged tab. !37544
• Resolve UX Polish: Fix icon styles. !37546
• UX Polish: Remove the header Designs on empty state. !37548
• Fix creating release asset links when using the API. !37557
• UX Polish: Update top right Upload button from Green to Grey. !37558
• Fix bio container width on profile page. !37572
• Fix bug in group runners filtered search. !37626 (Arthur de Lapertosa Lisboa)
• Move partitioning backfill migration to post-deployment. !37633
• Fix missing path for avatars of bots. !37671
• Fix merge ref head comments for removed lines. !37755
• Query Jira projects by key or name and return all Jira projects in one query. !37799
• Make file icons extension detection be case-insensitive. !37817
• Allow anonymous users to view embedded Grafana metrics in public project. !37844
• Fix dependency proxy not working with object storage. !37878
• Fix review app links are not shown in MR widgets in public projects. !37923
• Fix dark mode container registry text. !37940
• Refactor spec/policies and ee/spec/policies to fix SaveBang Cop. !37956 (Rajendra Kadam)
• Static Site Editor: Fix ordered list formatting bug and rendering bug in strong and emphasis nodes with softbreaks. !37964
• Fix overflow issues with monaco file editor. !37984
• Fix error when blob has no auxiliary viewer. !38018
• Fix HTML not rendering in last commit widget. !38047
• Fix 500 error when unconfirmed OAuth2 user with 2FA logs in. !38104
• Fix console errors due to monaco-yaml's outdated use of monaco.Promise. !38135
• Refactor spec/finders and ee/spec/finders to fix SaveBang Cop. !38173 (Rajendra Kadam)
• Align activity dropdown height with other dropdowns. !38208
• Fix 500 for pipeline charts page. !38226
• Resolve Pasting an image into a comment still uploades a design. !38280
• Refactor ee/spec/features/* to fix SaveBang Cop. !38289 (Rajendra Kadam)
• Add workaround for Chrome 84 SVG bug. !38304
• Fix a Gradle bug where a package without a version would be created and thus not displayed on the UI. !38338
• Fixes the history button link URL being encoded incorrectly. !38392
• Refactor spec/workers/* to fix SaveBang Cop. !38399 (Rajendra Kadam)
• Use Gitaly protobuf version as DiffStats cache key. !38414
• Fix highlight commented rows. !38420
• Fix vertical alignment of some svg icons. !38550
• Fix Incident and Alert mobile CSS and alignment. !38577
• Refactor spec/features/merge_requests/* to fix Rails/SaveBang Cop. !38591 (Rajendra Kadam)
• Add transparent background to remove button in tree item list. !38597
• Update password change sign-in banner text. !38606
• Display authored message correctly on public snippets viewed by unauthenticated users. !38614
• Fix vertical alignment of svg icons on Jobs page. !38656
• Fix URLs of issues in VSA dashboard. !38703
• Remove duplicate authorized_projects entries during refresh. !38715
• Fix multiline comment rendering. !38721
• Improve rendering of very large files in the Repo File Browser. !38733
• Optimize click area in design version dropdown. !38747
• Fix notification setting for group with dot in name. !38773
• Fix bug where filtering would sometimes display only open issues on different pages listing issues. !38906
• Refactor spec/views/* and ee/spec/views/* to fix Rails/SaveBang Cop. !38981 (Rajendra Kadam)
• Refactor spec/support/helpers/* and ee/spec/support/helpers/* to fix Rails/SaveBang Cop. !38995 (Rajendra Kadam)
• Fix parallel jobs dropdown from cutting off in small pipeline graphs. !39108
• Add expire_at to PipelineArtifact. !39114
• Add not null constraint for file to ci_pipeline_artifacts. !39118
• Fix gitlab-rake gitlab:license:info crashing when no license exists. !39143
• Fix cancel button on New Release page. !39144
• Fix submit button tooltips for forms with quick submit behavior. !39225
• Fix scroll stuck on editor in snippets. !39251
• Fix: New File page file name field unclickable in mobile view. !39310
• Fix CI job artifacts metadata not extracting on some S3 providers. !39345
• Add default value for file_store to ci_pipeline_artifacts. !39349
• Handle user mapping for Jira server instances. !39362
• Ignore the sources node from the cobertura XML. !39385
• Fix Composer installation code snippet to include package name and version. !39400
• Fix failing bitbucket server import when project slug differs from name. !39433
• Right-aligned Clone dropdown for snippets. !39446
• Fix missing scoped label borders for todos. !39459
• Move gitlab-managed alerts embeds to core as documented. !39509
• Allow crawler access to api. !39520
• Fix panel "more actions" button layout. !39534
• Use history icon on recent search filter tab only on mobile. !39557 (Takuya Noguchi)
• Conan packages allow for conan_sources.tgz and conan_export.tgz files. !39559
• Fix horizontal scrolling on blocked/private profile pages. !39568
• Fixed discussion not expanding when replying to a collapsed discussion. !39571
• Fix pagination for bitbucket server importer. !39598
• Fix missing resolve button when replying to notes in MRs. !39614
• Fix Conan recipe display in the package details page. !39643
• Fix bug when promoting an Issue with attachments to an Epic. !39654
• Fix broken date time picker hide button. !39755
• Fix time zone config not respected in multi-threaded servers. !39778
• Use correct order when repositioning existing designs. !39826
• Center align pipeline graph icons. !39848
• Coerce string object storage options to booleans. !39901

Deprecated (4 changes)

• Deprecation of ECS template. !36143
• Remove Jump to next unresolved thread button in merge request threads. !38375
• Deprecate blob field on GraphQL SnippetType. !39088
• Deprecate additions and deletions attributes in Repositories API. !39653

Changed (144 changes, 12 of them are from the community)

• Show full commit message by default in merge request diff. !27981 (Gilang Gumilar)
• Use fingerprint column on events to ensure event uniqueness. !31021
• Disable application_settings_tokens_optional_encryption feature flag. !31798 (Gilang Gumilar)
• Disable ci_runners_tokens_optional_encryption feature flag. !31800 (Gilang Gumilar)
• Update Buildkite Service for supported events, fields, and always verify SSL. !33697 (Juanito Fatas)
• Allow OAuth to auto link LDAP users via email address. !33767 (Niko Wenselowski)
• Pre-fill the email input on sign-in / sign up pages. !33851
• Store user mentions from merge request title or description in the DB. !34378
• Allow multiline Prometheus queries in metrics dashboards yaml. !34508
• Increase contrast between UTC label and input. !34998
• Increase CI instance variable value limit. !35063
• Rewrite integration form in Vue. !35453
• Improved fork page design. !35592
• Add sign_in_count to /users/:id API for admins. !35726 (Luc Didry)
• Updates GitLab managed app Ingress version to 1.40.2. !35924
• Make scoped snippet routing a default one. !36091
• Show clone button for activity on project page. !36147
• Replace fa-angle-up icons with GitLab SVG. !36429
• Migrate '.fa-spinner' to gl-loading-icon within shared boards haml. !36436
• Package feature moved to core. !36667
• Replace fa-history icons with GitLab SVG history icon. !36691
• Add serverless empty state illustration. !36762
• Allow an issue or MR to be locked and unlocked without page refresh. !36773
• Exclude todos from general analytics accumulator ping. !36813
• Migrate license_management artifacts to license_scanning type. !36817
• When generating markdown for ordered lists, the list marker should not increment. !36851
• Rename snippet GraphQL files field to blob_actions. !36852
• Track milestone and state changes in issues / MRs using resource events. !36936
• Update project remove modal to add additional warnings. !36962
• Replace fa-plus icons with GitLab SVG plus icon. !36972
• Limit database deprecation notice window. !37009
• Changes limit for terraform artifacts to 5MB. !37018
• Replace fa-ban icons with "cancel" from GitLab SVG. !37067
• Move service desk usage data to core. !37080
• Add concurrency support for Git repository backups. !37158
• Replace some FA icons on groups listing page with GitLab SVG icons. !37162
• Remove extraneous <br> tags from the source file when using the Static Site Editor. !37223
• Remove flag and document max artifact size plan limits. !37226
• Replacing View Full Report button with GitLab UI. !37236
• Show meaningful message when applying inapplicable suggestion. !37267
• Return SSH key details in /internal/allowed response. !37289
• Change PagerDuty webhook URL. !37321
• Shorten 'enable LFS' manage for design management. !37385
• Show all snippet files when embedding. !37412
• Add target_details column to AuditEvent table. !37430
• Improve the IA and styling of the Success screen in the Static Site Editor. !37475
• Add Cilium APIs as part of kube_client. !37526
• Introduce ci_needs_size_limit to fine control needs. !37568
• Migrate service desk setting button to gl-button. !37612
• External auth adheres to local request setting. !37622
• Remove feature flag managed_apps_local_tiller. !37641
• Bring SAST to Core - bandit, Flawfinder, Gitleaks, Gosec, Kubesec, NodeJsScan, phpcs-security-audit, PMD, Security Code Scan, Sobelow, SpotBugs. !37648
• Replace fa-bell icons with GitLab SVG notifications icon. !37676
• Update gitlab-shell to v13.4.0. !37677
• Move clone button out of blob header. !37696
• Use normal font weight for Design Management dropzone text. !37787
• Replace fa-sign-out icons with GitLab SVG leave icon. !37794
• Add relative positioning on designs. !37835
• Backfill relative positions on designs. !37837
• Add search bar for incidents. !37885
• Add composer tab and package type to package list. !37928
• Add closed issue icon to incidents list for closed incidents. !37949
• Update size limits for SCA artifacts. !37975
• Update label select vue gl button. !37986
• Update suggest gitlab ci popover to gl-button. !37987
• Add pagination to the incident list. !37993
• Rejects duplicated pypi files. !38006
• Use new badge style for 'archived' project badge. !38013
• Remove Duplicate Dashboard item from dashboards dropdown. !38053
• Replace fa-git icons with link svg. !38078
• Enforce namespace storage limit via app setting. !38094
• Replace fa-certificate icon with first-contribution svg. !38154
• Use the uploaded file set by middleware in Repositories::LfsStorageController. !38167
• Migrate new project item select FA icons. !38177
• Add sorting by date for incident list. !38178
• Consistent labels for new/edit group URL. !38180
• Change date time picker units. !38232
• Switch manifest importer to new UI. !38268
• Add incident count badge to the incident list. !38278
• In metrics view, change default dashboard name to Overview. !38292
• Hide languages with few translations. !38312
• Reorganize group member management into tabs. !38344
• Changed wording for optional approvals. !38393
• Upgrade to Gitaly v13.3.0-rc3. !38405
• Re-name "Delete" button to "Archive" in Design Management. !38446 (Getulio Valentin Sánchez @gvso)
• Allow users with developer access level for given project to view kubernetes pod logs. !38467
• Set minimum Redis version to 4 and recommended version to 5 in Redis check task. !38475
• Re-name project remove as project delete. !38489
• Replace fa-info-circle icons with GitLab SVG information icon. !38505
• Take DAG view out of beta. !38517
• Specify Ruby image in FailFast template. !38523
• Update color and vertical alignment of project feature toggle. !38537
• Remove repositories from previous storage when storage move succeeds. !38547
• Add database migrations to prepare for future Geo replication. !38549
• Added minimum value of 1KB to wiki_page_max_content_bytes. !38554 (Uday Aggarwal (uday.agg97))
• Stop using priority and weight keys in metrics dashboards. !38572
• Add copy for Jira issues integration to GitLab issues empty state. !38586
• Add Mark as done capability to Alert To Do's. !38595
• Button migration vulnerability charts. !38610
• Change the job stuck page to use UI library components. !38618
• Order projects within the project dropdown by relevance in analytics features. !38675
• Enable New Package details UI, remove feature flag and remove all old code. !38680
• Update the project deletion confirmation modal to be more specific, the confirmation phrase now includes the project full path. !38700
• Replace v-popover directive with GlPopover in ./app/assets/javascripts/pipelines/components/pipelines_list/pipeline_url.vue.vue. !38769 (Gilang Gumilar)
• Add installation instructions for Composer. !38779
• Track wiki page views in usage data. !38784
• Update incident_issues usage ping to use issue type column. !38864
• Migrate custom metric form buttons. !38896 (George Tsiolis)
• Migrate enable review app button in environments. !38897 (George Tsiolis)
• Add migration helper index for Vulnerabilities::Finding table. !38898
• Migrate maintenance mode settings button. !38901
• Replace with in app/assets/javascripts/pipelines/components/graph/action_component.vue. !38923
• Add a cache column for the number of changed files in a merge request diff. !38936
• Change UI and add new actions to monitor dashboard actions menu. !38946
• Support unitless single stat chart in metrics dashboards. !39067
• Update preferences for homepage/dashboard wording. !39092
• Update design mgmt navigation to use gl-button. !39104
• Enable design management reference filter by default. !39113
• Deprecated btn migration. !39154
• Update auto-build-image to v0.4.0 for an updated version of the pack CLI (v0.12.0) for Cloud Native Buildpack builds. !39159
• Change "gauge-chart" to "gauge" in YML panel configuration for gauge charts. !39184
• Enable FF ci_variables_api_filter_environment_scope by default. !39209
• Code navigation displays references when browsing repository. !39214
• Replace fa-book icon with GitLab SVG book icon. !39247
• Replace fa-close icons with GitLab SVG close icon. !39267
• Update auto-deploy-image to v1.0.0, including a locally vendored auto-deploy-app chart instead of charts.gitlab.io. !39272
• Improve environment dropdowns in operations metrics dashboard and highlight selected environment. !39303
• Replace Go Back with Collapse button for expanded Metric charts. !39307
• Replace issues icon with Gitlab SVG. !39313
• Replace fa-power-off icon with GitLab SVG power icon. !39330
• Remove transition animation from the Container Registry UI. !39337
• Replace mis-used CSS class in operations settings. !39338
• Enable Multiline Comments by default. !39370
• Enable delete button on Package group level view list. !39430
• Enabled monaco_blobs FF by default. !39441
• Import the new queries in common_metrics.yml into database. !39475
• Make View full report button open link in new tab. !39501
• Bump CodeQuality templates to version 0.85.10-gitlab.1. !39502
• Allow query/query_range keys in metrics dashboard to contain numbers. !39530
• Enable reorder_designs feature by default. !39555
• Return snippet binary blob content in GraphQL. !39583
• Add anchors to profile preferences. !39589
• Expose ID in Event object returned from the public API. !39669 (Killian Brackey @kbrackey)
• Rename create issue button to create incidents in ALert details. !39684

Performance (25 changes)

• Add mechanism that efficiently increments ActiveRecord counters using Redis. !35878
• Add limit for wiki page content size. !36729
• Reduce 'cached' query calls for Banzai. !36735
• Fix N+1 issue in Explore Projects controller. !36874
• Avoid N+1 of issue associations in Search. !36941
• Replace FontAwesome fa-clock icon with SVG icon. !37123
• Inverse pipeline for its build associations. !37478
• Fix N+1 for project/:id/issues API endpoint. !37508
• Preload build report results for pipeline builds. !37582
• Always use expanded env name to load persisted environment. !37585
• Improve performance of test report with summary and test suite endpoints. !37629
• Preload number of pipeline warnings for commits. !37669
• Add PipelineArtifact data model. !37969
• Replace index for service usage data. !38147
• Serialize fewer pipeline fields for MR widget. !38215
• Improve performance of Banzai reference filters. !38290
• Skip subsequent topology Prometheus queries if timeout occur. !38293
• Remove some unnecessary Redis calls on commit lists. !38343
• Speed up commit lists and file blob pages on repositories with huge amounts of branches or tags. !38484
• Add index for compliance merged MRs to events. !38885
• Swap RepositoryHashCache to UNLINK. !39105
• Increase sidebar performance by not rendering k8s highlight when not needed. !39228
• Use more-efficient indexing for the MergeRequestDiff storage migration. !39470
• Add secure index for coverage fuzzing. !39569
• Performance and robustness improvements for relative positioning. !39807

Added (138 changes, 6 of them are from the community)

• Add Rust Dockerfile to GitLab templates. !28167
• Add mutation to create a label or default backlog list for an issue board. !31233
• Allow labels argument for merge request create mutation. !32637
• Add btree_gist PGSQL extension and add DB constraints for Iteration date ranges. !33340
• Add cilium to Kubernetes apps list. !33703
• Define matrix builds for more complex pipelines. !33705
• Support getting a todo for an alert in GraphQL API. !34789
• Resolve Set a deploy freeze in the UI. !35163
• Display notes on merge ref head diff. !35422
• Add note_id to timelogs. !35916 (Lee Tickett)
• Prompt to resolve unresolved threads on an MR is a button that jumps to the first such thread. !36164
• Expose board list issues via GraphQL. !36259
• Add internal api for getting personal access tokens from gitlab-shell. !36302 (Taylan Develioglu @tdevelioglu)
• Add auto_link_user OmniAuth setting. !36664
• Add Draft to WIP for work in progress merge requests. !36666
• Add gauge chart type to the monitoring dashboards. !36674
• Add Prevent forking outside group feature. !36848
• Show Security Warning Modal for fork pipelines. !36951
• Add usage ping for coverage_fuzzing. !36960
• Use _ character for emphasis and * for strong in Static Site Editor markdown syntax. !36965
• Add migration for deployment_type of Jira server in jira_tracker_data table. !36992
• Add system note to alert when corresponding issue is closed. !37039
• Add locked as an argument to updateIssue. !37105
• Add PagerDuty incident integration. !37193
• Add container registry observations to usage ping. !37203
• Support dry-run cherry-picks and reverts via API. !37240
• Show full time range in metrics dashboard charts. !37243
• Geo: Add file store indexes. !37265
• Add ability to turn off "project moved" notifications. !37269
• Add basic incidents list. !37314
• Allow to create merge request pipelines in target project when user has permission. !37322
• Add external column to custom emoji table. !37346 (Rajendra Kadam)
• Add issue_type column to issues table. !37402
• Added webPath and descriptionHtml types to the repository GraphQL entities. !37416
• Add monthly usage ping data for analytics. !37417
• Added section names to code owner approvals in merge request form. !37425
• Add a new K8s Pod health metrics dashboard. !37482
• Update versions tab to other versions. !37513
• Add metrics dashboard templates for the standard file blob selector. !37519
• Add custom metrics dashboard templates supports. !37523
• Allow optional keyset pagination for branch list API. !37524
• Add default_membership_role column to saml_providers table. !37552
• Add NuGet lock files support to Dependency Scanning CI template. !37553
• Migrate vulnerability statistics historical data to vulnerability historical statistics. !37554
• Surface timeafo for created date in Incidents List. !37567
• Add parenthesis support for if: conditions. !37574
• Show mapped user in Jira import form dropdown. !37575
• Add GraphQL mutation to re-order designs. !37603
• Display assignees in Incident List. !37608
• Add ENV vars that expose source and target repository for CI Pipelines that run on an External Pull Requests. !37616 (Rafael Dohms @rdohms)
• Add DB table and model to track changes of the iterations on issues. !37617
• Migrate all 'incident' labelled issues to have issue type 'incident'. !37668
• Resolve Allow the ability to re-order designs. !37686
• Add target_project_id to merge_request_metrics table. !37713
• Allow user to update issue labels via GraphQL. !37728
• Sets issue type for incident issues to incident. !37781
• Create incident from the incidents list page. !37802
• Add personal_access_tokens list to REST API. !37806
• Allow user to simulate pipeline creation via CI Lint and go beyond syntax checks. !37828
• Adds clarifying documentation on EKS IAM roles. !37870
• Add API support for issue and merge request templates. !37890 (Jan Beckmann)
• Add confidential attribute to graphQL for notes update. !37920
• Add confidential attribute to public API for notes update. !37932
• Filter Issues in GraphQL by type of Issue. !38017
• Allows setting of issue subscribe status in GraphQL API. !38051
• Add deployment_events flag to web_hooks table. !38080
• Allow assign/unassign users to issues in GraphQL API. !38081
• Email notification for expired personal access token. !38086
• Upgrade CI to Git v2.28.0. !38152
• Add project milestones to GraphQL API. !38153
• Make the deploy freeze table responsive. !38213
• Add option to query a single board list with GraphQL API. !38216
• Add symlink label text to blob viewer. !38220
• Add support for runbook url to PrometheusAlert table. !38234
• Add dashboard_path to PrometheusMetric. !38237
• Add support for specifying AWS S3 Server Side Encryption (AWS-KMS). !38240
• Add issue status counts to Projects in GraphQL. !38263
• Auto expand collapsed diffs when viewing diffs file-by-file. !38296
• Add hide_backlog_list and hide_closed_list attributes to boards table. !38303
• GraphQL mutation to move issue within board lists. !38309
• Redirect to new metrics dashboard page. !38364
• Add experiments and experiment_users tables for tracking which users are enrolled for which experiments. !38397
• Save usage data in database. !38457
• Move old integrations to Settings > General and introduce instance-level integrations. !38488
• Expose runbook field in alert_management_alert GraphQL API. !38510
• Add CoverageReportsController#index CSV response. !38520
• Add support for never keyword in expire_in job artifacts. !38578 (Fabio Huser)
• Add attributes to filter project merge requests by merged at date in GraphQL. !38584
• Add resolved_on_default_branch column into vulnerabilities table. !38638
• Add alert url into incident issue markdown. !38649
• Return gitaly info in kubernetes internal API. !38654
• Add GraphQL query for a single milestone. !38682
• Add milestone_id param to issue update graphQL mutation. !38684
• Added pre-processing step to the Static Site Editor so code templates (ERB) are interpreted as code not content. !38694
• Backfill null values to prepare for Geo replication feature. !38719
• Update gitlab-shell to v13.5.0. !38720
• UI warning messages for pipeline configurations. !38734
• Enable state tracking for managed applications installed via the management project. !38759
• Set Incident issue type when creating issue. !38760
• Add pre-processing step so inline ERB and HTML syntax are wrapped in codeblocks for code vs. content editing in the static site editor's WYSIWYG mode. !38791
• Add protected branches count to usage ping. !38797
• Add include_parent_milestones param to project and group milestones API endpoints. !38800
• Clean up orphaned LFS file references during GC. !38813
• Add database migrations to ensure Geo replicates all package files when sync object storage is disabled. !38822
• Add pre-processing step so preexisting codeblocks are preserved prior to flagging content as code in the static site editor's WYSIWYG mode. !38834
• Add model for CiliumNetworkPolicy. !38848
• Expose alert information for environments. !38881
• Add Azure Blob Storage support. !38882
• Add webhooks for deployments. !38902
• Add "New Release" page to allow creation of releases through the interface. !38913
• Add GraphQL mutation for updating board list position and collapsed/expanded state. !38942
• Add due_date filter param to Issues REST API. !38973
• Support adding of API requests to the performance bar. !39057
• Expose counts (pipeline, commits) and approvers for a merge request in GraphQL. !39086
• Add total_weight and issues_count fields to the board list graphQL endpoint. !39110
• Make available new UI for adding a panel to a metrics dashboard. !39124
• Improve submission behavior of the New/Edit Release page. !39145
• Allows NuGet to authenticate with Job Token. !39147
• Upgrade Pages to 1.22.0. !39172
• Upgrade Workhorse to v8.38.0. !39223
• JUnit test report on pipeline detail page. !39260
• Allow GraphQL pipeline to resolve non-CI pipelines and expose configSource field. !39275
• GraphQL: Issues - Added 'include_subgroup' parameter. !39279
• Enable :resource_access_token feature flag by default. !39287
• Add runbook to metric chart dropdown. !39288
• Add runbooks to metric alerts. !39315
• Preserve active tab on alert details page reload. !39369
• GraphQL: Add user to pipeline + status and email to user + StatusType. !39402
• Add external link icon to list of repositories in importer. !39442
• Add target_type to audit_events. !39461
• Enable read SPDX catalogue from local copy. !39463
• Show runbook for alert in detail view. !39477
• Link to logs from GitLab-managed alert metrics. !39487
• Add SECRET_DETECTION_EXCLUDED_PATHS env var. !39523
• Add pipeline_artifacts_size to project_statistics. !39607
• Setup basic level telemetry for navigation. !39638
• Update gitlab-shell to v13.6.0. !39675
• Empty State for the Incident list. !39718

Other (69 changes, 9 of them are from the community)

• Remove globe icon from explore projects dropdown. !21659
• Remove mr_tabs_position feature flag. !29340 (Lee Tickett)
• Improve Elasticsearch Reindexing documentation. !29788
• Remove createIssues logic from list model. !32236 (nuwe1)
• Unify Prometheus metric initialization by always using inline transaction metrics. !32980
• Adds models and tables for cluster agent and cluster agent tokens. !33228
• Remove updated_at column on audit_events table. !35690
• Replace fa-pencil-square-o icons with GitLab SVG icons. !36059
• Replace fa-rss with GitLab SVG icon. !36553
• Limit project moved e-mails to maintainers/owners. !36665
• Backfill personal snippets statistics. !36801
• Set default bullet char character as - when generating markdown in Static Site Editor. !36820
• Replace with in app/assets/javascripts/pipelines/components/graph/linked_pipeline.vue. !36968
• Replace fa-link icons with GitLab SVG link icon. !36973
• Consolidate issuable_header_warning for both MR and issue. !37043
• Remove index from chat_names and service_id. !37054
• Making component diagram click-friendly. !37147 (Arjun Pravin @Sgt.Arjun)
• Replace fa-pause with pause svg. !37149
• Replace fa-replace icon with svg. !37228
• Replace fa-key icon with svg. !37251
• Remove app_server_type from top level usage ping. !37279
• Update GitLab Runner Helm Chart to 0.19.0. !37292
• Use ES6 methods instead of for loops. !37324 (allenlai18)
• Remove legacy pipeline processing service and FF ci_atomic_processing. !37339
• Cleanup migration to drop temporary table untracked_files_for_uploads if exists. !37352
• Fix the MR number in CHANGELOG. !37399
• Immediately update project statistics when running housekeeping or repository cleanup. !37579
• Update GitLab Runner Helm Chart to 0.19.1. !37583
• Add index to resource_milestone_events for add actions. !37636
• Capitalize CloudFlare in documentation. !37704 (Takuya Noguchi)
• Use Cloudflare in comments. !37764 (Takuya Noguchi)
• Update $gray-400 hex and replace instances of $gray-400 with $gray-200. !37813
• Add link to issue details page from Incident list page. !37814
• Remove link to Cloudflare cert for Pages. !37876 (Takuya Noguchi)
• Add incident state columns. !37889
• Move file store updates and mount_uploader into a concern. !37907
• Set appropriate timeouts for PrometheusClient. !37924
• Remove GitlabIssueTrackerService database records. !37931
• Remove title and description columns from services table. !37936
• Fix misalignment of download icon on jobs page. !37966
• Automatically calculate the database connection pool size. !38049
• Remove per-web-transaction redis metrics. !38101
• ee Updating $gray-500 hex value and replacing instances with $gray-300. !38229
• Removes the old UI page. !38277
• Log raw pre-receive message in fast-forward merge. !38354
• Replace times-circle with GitLab SVG clear icon. !38409
• Add telemetry for instance-level and template integrations. !38459
• Add group_id column to the services table. !38499
• Replace fa-play/pause icons with svg. !38535
• Add telemetry for projects inheriting instance settings. !38561
• Move button in Settings > Webhooks to the right. !38650
• Replace deprecated button on vulnerability details page. !38679
• Collect node CPU and memory utilization in usage ping. !38681
• Improve unfurling support for /search. !38699
• Add can_push column to group_deploy_keys_groups table. !38714
• Log raw pre receive error for create branch service. !38749
• Change to glbutton component in CI variables list. !38757
• Replace deprecated buttons in dashboard header. !38830
• Remove :gzip_diff_cache feature flag. !38838
• Replace some fa-trash icons with GitLab SVG remove icon. !38964
• Productivity Analytics: Improve error message when query takes too long to calculate. !39074
• Adds an environment variable override to disable unstructured logs. !39109
• Remove not-null constraint on type column in audit_events. !39192
• Set longer Prometheus timeouts in PrometheusService. !39318
• Use active version of Redis for an example. !39404 (Takuya Noguchi)
• Remove FF ci_composite_status and related codes. !39498
• Remove a card-small class from HAML files. !39550 (Takuya Noguchi)
• Provide versioning support to Sidekiq workers. !39562
• Replace fa-pencil icon with GitLab SVG. !39648

13.2.10 (2020-10-01)

Security (14 changes)

• Do not store session id in Redis.
• Fix permission checks when updating confidentiality and milestone on issues or merge requests.
• Purge unaccepted member invitations older than 90 days.
• Adds feature flags plan limits.
• Prevent SVG XSS via Web IDE.
• Ensure user has no solo owned groups before triggering account deletion.
• Security fix safe params helper.
• Do not bypass admin mode when authenticated with deploy token.
• Fixes release asset link filepath ReDoS.
• Ensure global ID is of Annotation type in GraphQL destroy mutation.
• Validate that membership expiry dates are not in the past.
• Rate limit adding new email and re-sending email confirmation.
• Fix redaction of confidential Todos.
• Update GitLab Runner Helm Chart to 0.19.4.

13.2.8 (2020-09-02)

Security (1 change)

• Protect OAuth endpoints from brute force/password stuffing.

13.2.7 (2020-09-02)

Security (23 changes, 1 of them is from the community)

• Check validity of project's import_url before mirroring repository.
• Show on two-factor authentication setup page groups that are the cause of this requirement.
• Prevent interrupted 2FA sign-in from signing-in incorrect user.
• Create new 2FA code each time user is entering 2FA setup page.
• Remove all sessions but current while enabling 2FA.
• Invalidate two factor sign-in when user password changes.
• Delete members invites created by users being deleted.
• Prevent OmniAuth from rendering arbitrary error messages.
• Prevent not-2fa authenticated users that are supposed to use it to consume api via session.
• Invalidate remember me when an active session is revoked.
• Add rate limit on webhooks testing feature.
• Add scope presence validation to OAuth Application creation.
• Allow only running job tokens for API authentication.
• Prevent Deploy Tokens to read project resources when repository is disabled.
• Change conan api to use proper workhorse validation.
• Ensure global ID is of Snippet type in GraphQL destroy mutation.
• Fix Improper Access Control on Deploy-Key.
• Set maximum limit for profile events.
• Persist EKS External ID before presenting it to the user.
• Prevent project maintainers from editing group badges.
• Upgrade jquery to v3.5.
• Update websocket-extensions gem to 0.1.5. (Vitor Meireles De Sousa)
• Update GitLab Runner Helm Chart to 0.18.3.

13.2.6 (2020-08-18)

• No changes.

13.2.5 (2020-08-17)

Security (2 changes)

• Stop deploy token being mis-used as user in ProjectPolicy and GroupPolicy.
• Project access is checked during deploy token authentication.

13.2.4 (2020-08-11)

Security (1 change)

• Add decompressed archive size validation on Project/Group Import. !38736

Fixed (1 change)

• Fix automatic issue creation via Prometheus alerts. !37884

13.2.3 (2020-08-05)

Security (12 changes)

• Update kramdown gem to version 2.3.0.
• Enforce 2FA on Doorkeeper controllers.
• Revoke OAuth grants when a user revokes an application.
• Refresh project authorizations when transferring groups.
• Stop excess logs from failure to send invite email when group no longer exists.
• Verify confirmed email for OAuth Authorize POST endpoint.
• Fix XSS in Markdown reference tooltips.
• Fix XSS in milestone tooltips.
• Fix xss vulnerability on jobs view.
• Block 40-character hexadecimal branches.
• Prevent a temporary access escalation before group memberships are recalculated when specialized project share workers are enabled.
• Update GitLab Runner Helm Chart to 0.18.2.

13.2.2 (2020-07-29)

Fixed (3 changes)

• Coerce repository_storages_weighted, removes repository_storages. !36376
• Fix JiraImportUsersInput startAt field. !37492
• Provide better git error message when the user is unconfirmed. !37944

Changed (1 change)

• Skip mass unconfirming users when send_user_confirmation_email setting is off. !38024

13.2.0 (2020-07-22)

Security (3 changes)

• Unconfirm wrongfully verified email addresses and user accounts. !35492
• Make logrotate run as git user for source installations. !35519
• Replace misleading text in re-confirmation emails. !36634

Removed (7 changes, 2 of them are from the community)

• Remove deprecated dashboard & group milestone pages. !13237
• Removed UltraAuth integration for OmniAuth. !29330 (Kartikey Tanna)
• Remove all search autocomplete for groups/projects/other. !31187
• Remove temporary datepicker position fix as it is no longer required. !31836 (Arun Kumar Mohan)
• Remove the ability to customize the title and description of some integrations (Bugzilla, Custom Issue Tracker, Redmine, and YouTrack). !33298
• Drop deprecated **_ANALYZER_IMAGE_PREFIX. !34325
• Remove Internet Explorer 11 specific polyfills. !36830

Fixed (300 changes, 79 of them are from the community)

• Remove broken hyperlink from close and reopen button. !22220 (Lee Tickett)
• Fix 'Active' checkbox text in Pipeline Schedule form to be a label. !27054 (Jonston Chan)
• Fix back button when switching MR tabs. !29862 (Lee Tickett)
• Remove ability to scroll Issue while in Design View. !29881
• Fix merge request note label URLs. !30428 (Lee Tickett)
• Fix default path when creating project from group template. !30597 (Lee Tickett)
• Fixed issue (#198424) that prevented k8s authentication with intermediate certificates. !31254 (Abdelrahman Mohamed)
• Fix group transfer service to deny moving group to its subgroup. !31495 (Abhisek Datta)
• Fix issuable listings with any label filter. !31729
• Move prepend to last in ee-app-services. !31838 (Rajendra Kadam)
• Fallback to lowest visibility level in snippet visibility radio. !31847 (Jacopo Beschi @jacopo-beschi)
• Add class stubs and fix leaky constant alert in query limit helper spec. !31949 (Rajendra Kadam)
• Remove usage of spam constants in spec. !31959 (Rajendra Kadam)
• Fix leaky constant issue in uninstall progress service check. !32036 (Rajendra Kadam)
• Fix leaky constant issue in commit entity spec. !32039 (Rajendra Kadam)
• Fix leaky constant issue in task completion status spec. !32043 (Rajendra Kadam)
• Fix leaky constant issue in admin mode migration spec. !32074 (Rajendra Kadam)
• Fix leaky constant issue in sidekiq middleware server metric spec. !32104 (Rajendra Kadam)
• Fix leaky constant issue in sidekiq middleware client metric spec. !32108 (Rajendra Kadam)
• Fix leaky constant issue in path regex spec. !32115 (Rajendra Kadam)
• Fix leaky constant issue importer and cache headers spec. !32122 (Rajendra Kadam)
• Fix leaky constant issue in relation factory spec. !32129 (Rajendra Kadam)
• Fix leaky constant issue in test coverage spec. !32134 (Rajendra Kadam)
• Prevent emails to user on expiry of impersonation token. !32140
• Fix leaky constant issue in diff collection spec. !32163 (Rajendra Kadam)
• Fix leaky constant issue in migration helpers, with lock retries and ignored cols spec. !32170 (Rajendra Kadam)
• Fix leaky constant issue in factory spec. !32174 (Rajendra Kadam)
• Fix leaky constant issue in creds factory spec. !32176 (Rajendra Kadam)
• Use applogger in project import state file. !32182 (Rajendra Kadam)
• Use applogger in project.rb. !32183 (Rajendra Kadam)
• Use applogger in chat_team.rb. !32184 (Rajendra Kadam)
• Use applogger in repository model. !32185 (Rajendra Kadam)
• Use applogger in build and ssh host key. !32187 (Rajendra Kadam)
• Use applogger in cache attrs and highest role ruby files. !32189 (Rajendra Kadam)
• Use applogger in legacy project and namespace. !32190 (Rajendra Kadam)
• Use applogger in base.rb. !32191 (Rajendra Kadam)
• Use applogger in usage ping and webhook service. !32192 (Rajendra Kadam)
• Use applogger in exclusive_lease_guard. !32194 (Rajendra Kadam)
• Use applogger in groups destroy service and label create service. !32195 (Rajendra Kadam)
• Use applogger in merge_service.rb. !32196 (Rajendra Kadam)
• Use applogger in project create service and after import service. !32198 (Rajendra Kadam)
• Use applogger in update stats service. !32200 (Rajendra Kadam)
• Use applogger in base attachment service. !32201 (Rajendra Kadam)
• Use applogger in export service. !32203 (Rajendra Kadam)
• Use applogger in akismet service. !32205 (Rajendra Kadam)
• Use applogger in file mover file. !32206 (Rajendra Kadam)
• Use applogger in commit signature worker. !32207 (Rajendra Kadam)
• Use applogger in delete user worker. !32209 (Rajendra Kadam)
• Use applogger in email receiver worker. !32211 (Rajendra Kadam)
• Use applogger in artifact worker. !32212 (Rajendra Kadam)
• Use applogger in new note worker. !32213 (Rajendra Kadam)
• Fix duplicate filename displayed in design todos. !32274 (Arun Kumar Mohan)
• Add value length validations for instance level variable. !32303
• Resolve image overflow at releases list panel. !32307
• Clean up shared/tmp folder after Import/Export. !32326
• Fix creating release evidence if release is created via UI. !32441
• GraphQL hasNextPage and hasPreviousPage return correct values. !32476
• Fix loading and empty state styling for alerts list. !32531
• Resolve incorrect x-axis padding on the Environments Dashboard. !32533
• Fix time_tracking help link. !32552
• Don't display confidential note icon on confidential issue public notes. !32571
• Update container expiration policy database defaults. !32600
• Fix rendering of emojis in status tooltips. !32604
• Remove :prevent_closing_blocked_issues feature flag. !32630 (Lee Tickett)
• Hid copy contents button when blob has rendering error. !32632
• Avoid refresh to show endedAt after mutation. !32636
• Fix for metrics creation when saving MR. !32668
• Skip the individual JIRA issues if failed to import vs failing the whole batch. !32673
• Hide "Import from Jira" option from non-entitled users. !32685
• Allow special characters in dashboard path. !32714
• Fix broken help link on operations settings page. !32722
• Allow different in bulk editing issues. !32734
• Fix whitespace changes overgrowing the diff container. !32774
• Improve spacing and wrapping of group actions buttons and stats in group list view. !32786
• Fix "Broadcast Messages" table overflow and button alignment. !32801
• Fix 404 when downloading a non-archive artifact. !32811
• Make commits author button confirm to Pajamas specs. !32821
• Fix filename duplication in design notes in activity feeds. !32823 (Arun Kumar Mohan)
• Prevent multiple Auto DevOps deployment jobs running concurrently when using manual rollout. !32824
• Implement displaying downstream pipeline error details. !32844
• Fix Runner heartbeats that results in considering them offline. !32851
• Conan package registry support for the conan_export.tgz file. !32866
• Fix plural message in account deletion section. !32868
• Fix atomic processing bumping a lock_version. !32914
• AsciiDoc: Add support for built-in alignment roles. !32928 (mnrvwl)
• Fix a bug where some Vue apps would be unable to load when DAG tab is disabled. !32966
• Fix undefined error in Gitlab::Git::Diff. !32967
• Fix spelling error on Ci::RunnersFinder. !32985 (Arthur de Lapertosa Lisboa)
• Fix polling for resource events. !33025
• Fix broken CSS classes inside alert management list. !33038
• Fix bug in snippet create mutation with non ActiveRecord errors. !33085
• Fix overflow issue in MR and Issue comments. !33100
• Fix alignment of button text on the Edit Release page. !33104
• Deduplicate URL parameters when requesting merge request diffs which causes diffs load to fail. !33117
• Fix tabbing through form fields in projects/new flow. !33209
• Fix incorrect commit search results returned when searching with ref. !33216
• Issue list page shows correct status for moved re-opened issues. !33238
• Fix NoMethodError by using the correct method to report exceptions to Sentry. !33260
• Fix KaTeX font paths. !33338
• Resolve Fix Incomplete Kubernetes Cluster Status List. !33344
• Fix auto-merge not running after discussions resolved. !33371
• Fix bug in snippets updating only file_name or content. !33375
• Resolve "WebIDE displays blank file incorrectly". !33391
• Fix invisible emoji modal on Set Status form when clicked the second time. !33398
• vertically center action icon in the CI pipeline. !33427 (Nathanael Weber)
• Wrap auto merge parameters update in database transaction. !33471
• Return 404 response when redirecting request with invalid url. !33492
• Fix ambiguous string concatenation on CleanupProjectsWithMissingNamespace. !33497
• Fix snippet repository import edge cases. !33506
• Rust CI template: Replace --all with --workspace on cargo test. !33517 (Markus Becker)
• Make markdown textarea links tab-accessible. !33518
• Pass hard delete option to snippets bulk destroy. !33520
• Fix CI rules for ECS related jobs. !33527
• Update GitLab Workhorse to v8.34.0. !33543
• Fix snippet repository import fail with older export files. !33584
• Web IDE: Create template files in the folder from which new file request was made. !33585 (Ashesh Vidyut)
• Improve header acccessibility. !33603
• Remove non migrated snippets from failed imports. !33621
• Prevent duplicate issues when importing from CSV. !33626
• Fix sidebar spacing for alert details. !33630
• Fix linking alerts to created issues for the Generic alerts intergration. !33647
• Resolve spacing ux debt on Release assets form field. !33684
• Fix pagination link header. !33714 (Max Wittig)
• When clicking multiple times to leave a single comment, the input field should remain focused. !33742
• Allow wiki pages with +<> characters in their title to be saved. !33803
• Fix force_remove_source_branch not working in API. !33804
• Fix prometheus alerts not being automatically created. !33806
• Fix pagination for resource label events. !33821
• Fix pagination for resource milestone events api. !33845
• Return code navigation path for nil diff_refs. !33850
• Record audit event when an admin creates a new SSH Key for a user via the API. !33859 (Rajendra Kadam)
• Do not create duplicate issues for exising Alert Management alerts. !33860
• Add link text to collapsed left sidebar links for screen readers. !33866
• Update text in error tracking list error message. !33872
• Ensure that alerts are shown when prometheus service is active. !33928
• Fixed dashboard YAML file validaiton for files which do not contain object as root element. !33935
• Fix design note scrolling. !33939
• Updated the Android CI Script. !34007 (s-ayush2903)
• Update validates_hostname gem with support for more TLDs. !34010
• Remove default "archived" parameter value from Groups API's projects endpoint. !34018 (Justin Sleep)
• Fix approval rule type when project rule has users/groups. !34026
• Update wording of addMultipleToDiscussionWarning. !34088
• Show all storages in settings. !34093
• Set author as nullable in snippet GraphQL Type. !34135
• Fix rendering of very long paths in merge request file tree. !34153
• Fix 500 errors and false positive warnings during metrics dashboard validation. !34166
• Remove not null constraint from events tables. !34190
• Ensure we always generate a valid wiki event URL. !34191
• Send information about attached files to the GraphQL mutation. !34221
• Update issue limits template to use minutes. !34254
• Add route for the lost-and-found group and update the route of orphaned projects. !34285
• Make markdown textarea buttons tab accessible. !34300
• GraphQL - properly handle pagination of millisecond-precision timestamps. !34352
• Fix 500 error in BlobController#delete. !34367
• Updated Auto DevOps with a fix to delete PostgreSQL PVC on environment cleanup, a fix for multiline K8S_SECRET variables, updated Helm to 2.16.7 and glibc to 2.31. !34399 (verenion)
• Updates Helm version to 2.16.7, which has some fixes. !34452
• Align "External" access level row in the user admin form. !34455 (Eduardo Sanz @esanzgar)
• Fix issues with scroll on iOS / iPad OS. !34486
• Add environment_scope filter to ci-variables API. !34490
• Fix order of integrations to be sorted alphabetically. !34501
• Fix undefined method error. !34522
• Fix static site editor raw (has front matter) <-> body (lacks front matter) content changes sync. !34523
• Use Keys::DestroyService for deleting an SSH key when an admin deletes a key via the API. !34535 (Rajendra Kadam)
• Removed default artifact name for Terraform template. !34557
• Record audit event when a user creates a new SSH Key for themselves via the API. !34645 (Rajendra Kadam)
• Restrict alert assignee user search to current project in alert management details. !34649
• Limit alert assignment to only users who can read alerts. !34681
• Use Keys::DestroyService for deleting an SSH key when a user deletes a key via the API. !34718 (Rajendra Kadam)
• Use GpgKeys::CreateService when an admin creates a new GPG key for a user. !34737 (Rajendra Kadam)
• Sort code coverage graph in ascending order. !34750
• Fix Issue sticky title URL hash offset. !34764
• Fix broken todo GraphQL API filtering when filtering by type. !34790
• Use GpgKeys::CreateService when a user creates GPG keys for themselves via the API. !34817 (Rajendra Kadam)
• Expand healtchecks 500s when DB is not available. !34844
• Assign plan_id when building a new plan limit. !34845
• Fix 500 errors with filenames that contain glob characters. !34864
• Avoid updating snippet content when snippet_files content is not present. !34865
• Ensure original repository is archived after a shard move. !34895
• Fix issue suggestion text color on dark mode. !34899
• Enclose release-cli steps in an array. !34913
• Add DestroyService for GPG keys and use for deleting GPG keys via API. !34935 (Rajendra Kadam)
• Resolve Misleading message displays when MR request is first submitted. !34958
• Cancel review app deployment when MR is merged. !34960
• Add RSpecs for Gitlab::Emoji module. !34980 (Rajendra Kadam)
• Fix directory and last commit not loading for some filenames. !34985
• Fix confidential warning not showing the issuable type. !34988
• Fixed mermaid not rendering when switching diff tabs. !35023
• Use GpgKeys::DestroyService when a user deletes GPG keys for themselves via the API. !35033 (Rajendra Kadam)
• Fix alignment of navigation theme options. !35041
• Support fenced code blocks in Atlassian Document Format converter. !35065
• Fixed size limit for too large snippets. !35076
• Don't include changes in webhook payload when old associations are empty. !35158
• Fix release assets for Guest users of private projects. !35166
• Properly set CI_DEPLOY_FREEZE variable in pipelines. !35226
• Move 'Delete comment' button to bottom of 'More actions' list. !35237
• Only run DAST job if Kubernetes active. !35259
• Add instrumentation to Gitaly streamed responses. !35283
• Fix pages_url for projects with mixed case path. !35300
• Ensure .git/config is updated for forks. !35305
• Defer updating .git/config for imported projects. !35308
• Redirect wiki edit actions for missing pages. !35350
• Fix styling bug for disabled merge button. !35365
• Static Site Editor can’t be opened in projects belonging to a subgroup. !35378
• Resolve timeout in admin/jobs. !35385
• Fix job log text color in dark mode. !35387
• Minor UI fixes for Issue page in dark mode. !35395
• Disable ILM on ELK vendor yaml. !35398
• Improve alert list spacing. !35400
• Fix path conflict for Ghost on UpdateRoutesForLostAndFoundGroupAndOrphanedProjects. !35425
• Add tiller.log to Auto DevOps deployment job artifacts when AUTO_DEVOPS_DEPLOY_DEBUG is set. !35458
• Resolve [Un]Assign Issue to/from Comment Author Action Visibility. !35459
• Add email and email_verified claims to OAuth ID token. !35468 (André Hänsel)
• Make ProjectUpdateRepositoryStorageWorker idempotent. !35483
• Project bot users should always have their emails confirmed by default. !35498
• Only show open Merge Requests in Web IDE. !35514
• Remove Edit dashboard button from self monitoring dashboard. !35521
• Guard against data integrity issues when canceling review app jobs. !35555
• Use FLOAT_TYPE for storage limit. !35559
• Enforce prometheus metric uniqueness across project scope. !35566
• Use full version instead of short version for Sentry Error Release links. !35623
• Propagate error on FF pre-receive failure. !35633
• Support multiple mailboxes incoming email check. !35639
• Fix Profile Applications page to be shown in correct locale. !35661
• Fix 404 when importing project with developer permission. !35667
• Fix incorrect text escaping in the Static Site Editor. !35671
• Use the user's preferred language as default. !35676
• Create associated routes when a new bot user is created. !35711
• Prevent autosave when reply comment via cmd+enter. !35716
• Fix border-radius-base SCSS value. !35740
• Fix alert sort styling issues. !35741
• Change the sort order for alert severity and status. !35774
• Fix unique case where static site editor's custom renderer for identifier syntax didn't robustly handle inline code. !35775 (Derek Knox)
• Save show whitespace changes. !35806
• Fix existing repository_storages_weighted migrations. !35814
• Fix error 500s creating new projects due to empty weights. !35829
• Fix rendering alert issue description field. !35862
• Fixed translation errors on MR Widget. !35888
• Fix 500 errors with invalid access tokens. !35895
• Change PrometheusMetrics identifier index. !35912
• Backfill missing routes for Bot users. !35960
• Add generic message when no pipeline in MR. !35980
• Conditionally render Docker row checkbox. !36000 (gfyoung)
• Fix missing avatar in MR widget. !36034
• Fix comment loading error in issues and merge requests. !36043
• Fix routing for paths starting with help and projects. !36048
• Fix infinite loading spinner for related merge requests on commit pipelines tab. !36077
• Use error.message instead of error in importer.log. !36104
• Remove hardcoded reference to gitlab.com in NPM .gitlab-ci.yml template. !36124
• Remove dashboard panels' tabindex where is not needed. !36168
• Fix Project#pages_url not to downcase url path. !36183
• Remove border from related merge requests/issues counter. !36272
• Fail jobs that fail to render registration response. !36274
• Sort metrics dashboard panels and groups using a stable sort. !36278
• Remove HTML link from plain text mail. !36301
• Fix wrong value of checkbox in integration form. !36329
• Add a Rake task to fix incorrectly-recorded external diffs. !36353
• Fix single file editor with long branch name. !36371
• Allow self monitoring dashboard to be duplicated. !36433
• Propagate DS_JAVA_VERSION for dependency scanning. !36448
• Fix to display speech bubble on hover over image on commits page. !36470 (Adam Alvis @adamalvis)
• Fix to remove speech bubble on hover over image on MR Overview tab. !36474 (Adam Alvis @adamalvis)
• Add DOCKERFILE_PATH to Auto DevOps workflow:rules. !36475
• Show symlink icon in repository browser. !36524
• Snippet comments where any line begins with a slash following an alphabetic character can't be published. !36563
• Exclude services relation from Project Import/Export. !36569
• Permanently close Jira import success alert. !36571
• Fix dashboard schema validation issue. !36577
• Refactor issues controller spec to fix SaveBang Cop. !36582 (Rajendra Kadam)
• Fix positioning of mr/issue count. !36621
• Update to Grape v1.4.0. !36628
• Fix API errors when null value is given for the bio. !36650
• Avoid 500 errors with long expiration dates in tokens. !36657
• Remove CI/CD variable validations on AWS keys. !36679
• Ensure to run unassign issuables worker when not in a transaction. !36680
• Mark existing Project Bot Users as confirmed. !36692
• Fix error message when saving an integration and testing the settings. !36700
• Do not depend on artifacts from previous stages in Auto DevOps deployments. !36741
• Delete tracking records on partitioning migration rollback. !36743
• Updates Helm version to 2.16.9 which has some fixes. !36746
• Web IDE: Page title should not be .editorconfig when the IDE is first loaded. !36783
• Removes fixes that broke the pipeline table. !36803
• Refactor group controllers specs to fix SaveBang Cop. !36853 (Rajendra Kadam)
• Fix the default metrics dashboard to work on K8s versions 1.12 to 1.16. !36863
• Fix incorrect marking MR as Draft. !36869
• Use an array for fetching same_family_pipeline_ids. !36883
• Remove extra Secret-Detection job on merge requests. !36884
• Remove Rails Optimistic Locking monkeypatch. !36893
• Refactor projects controllers specs to fix SaveBang Cop. !36920 (Rajendra Kadam)
• Fix background overflow when design note is selected. !36931
• Fix bulk editing labels bug. !36981
• Fix not being able to add more than one CI variable through the UI. !37001
• Uses --set-string to avoid Helm confusion over short SHA vs Scientific Notation. !37004 (Bryan H. @galador)
• Fix displaying import errors from server. !37073
• Fix failing dashboard schema validation calls. !37108
• Fix showing MLC form on replies. !37139
• Set experiementation cookie for GitLab domain only.
• Prevent duplicate health status text on epics.
• Add DS detection of build.gradle.kts.
• Fix for test report link in MR widget.
• Footer system message fix.

Deprecated (1 change, 1 of them is from the community)

• Remove the unused worker code and its queue. !32595 (Ravishankar)

Changed (191 changes, 9 of them are from the community)

• Deduplicate labels with identical title and project. !21384
• Add a GraphQL endpoint to fetch Jira projects through its REST API. !28190
• Change legends in monitor dashboards to tabular layout. !30131
• Move pipelines routing under /-/ scope. !30730
• Set markdown toolbar to use hyphens for lists. !31426
• Use sprites for comment icons on Commits. !31696
• Rate limit project export by user. !31719
• Reorder diffs compare versions dropdowns. !31770 (Gilang Gumilar)
• Enable the in this group action in the Search dropdown. !31939
• Externalize i18n strings from ./app/views/shared/_promo.html.haml. !32109 (Gilang Gumilar)
• Add Usage Ping count for all searches. !32111
• Add tags_count to container registry api and controller. !32141
• Externalize i18n strings from ./app/views/shared/milestones/_sidebar.html.haml. !32150 (Gilang Gumilar)
• Externalize i18n strings from ./app/views/shared/milestones/_form_dates.html.haml. !32162 (Gilang Gumilar)
• Improve Container Registry UI header. !32424
• Added node size to cluster index. !32435
• Enable display of wiki events in activity streams. !32475
• Update operations metrics settings title and description to make them general. !32494
• Track merge_requests_users usage data. !32562
• Adds cluster CPU and Memory to cluster index. !32601
• Allow the snippet create service to accept an array of files. !32649
• Move review related controllers/workers outside EE. !32663
• Move the Members section from settings to the side nav for projects. !32667
• Show more context in unresolved jump button. !32737
• Exclude extra.server fields from exceptions_json.log. !32770
• Improve new/unknown sign-in email styling. !32808
• Allow the snippet update service to accept an array of files. !32832
• Add new issue link to email notification header. !32833
• Bump cluster-applications to 0.17.0, which updates Runner to 0.17.0 and Cilium to 1.7.4. !32931
• Update artifacts section to show when an artifact is locked. !32992
• Show clone button on project page for readme preference. !33023
• Include tag count in the image repository list. !33027
• Clean up gitlab-shell install-from-source path. !33057
• Increase LFS token default time to 2 hours. !33140
• Add the unique visits data to the usage ping. !33146
• Add explicit mention of Merge request in Slack message. !33152
• Expose release_links.type via API. !33154
• Add link_type column to release_links table. !33156
• Move broadcast notification dismiss button to the top. !33174
• Remove null constraint for JID in GroupImportState. !33181
• Added provider type icon to cluster list. !33196
• Remove search icon from Project find file button. !33198
• Refine SAST language detection by frameworks. !33226
• Render Merge request reference as link. !33248
• Upgrade to Gitaly v13.1.0-rc1. !33302
• Render Merge request reference as link in email templates. !33316
• Show disabled suggestion button with tooltip message. !33357
• Add update validations to SnippetInputAction. !33379
• Add snippet DB visibility check in spec. !33388 (Jacopo Beschi @jacopo-beschi)
• Add Hugo logo to project templates. !33402
• Add GitBook logo to project templates. !33403
• Add GoMicro logo to project templates. !33404
• Add Jekyll logo to project templates. !33405
• Add Hexo logo to project templates. !33406
• Add UI to disable Service template when instance-level integration is active. !33490
• Rename Add Designs button. !33491
• Add CPU, memory usage charts to self monitoring default dashboard. !33532
• Add database migrations to design_management_designs.filename to enforce a 255 character limit, and modify any filenames that exceed that limit. !33565
• Track Sentry error status updates with dedicated actions. !33623
• Alert Managament: Change sorting order to have newest alerts first. !33642
• Add blobs field to SnippetType in GraphQL. !33657
• Move Usage activity by stage for Configure to Core. !33672
• Format metrics column chart x axis dates. !33681
• Emit Bitbucket Server Importer metrics. !33700
• Style ToastUI contextual menus. !33719
• Update Auto deploy image to v0.16.1, introducing support for AUTO_DEVOPS_DEPLOY_DEBUG. !33799
• Add whether instance has Auto DevOps enabled to usage ping. !33811
• Update local IP address and domain name allow list input label. !33812
• Add date time format to the monitor stacked-column chart. !33814
• Allow Tf Plan to genrate multiple reports. !33867
• Report all unique users for Secure scanners. !33881
• Remove async_merge_request_check_mergeability feature flag. !33917
• Filter potentially-sensitive Sidekiq arguments from logs and Sentry. !33967
• Update Static Site Editor toolbar to group inline-code and code-block buttons together. !34006
• Set default values for SAST_EXCLUDED_PATHS and DS_EXCLUDED_PATHS. !34076
• Add ability to filter self monitoring resource usage charts by instance name. !34084
• Add skeleton loader to cluster list. !34090
• Pick repository storage based on weight. !34095
• Use IP or cookie in known sign-in check. !34102
• Prevents editing of non-markdown kramdown content in the Static Site Editor's WYSIWYG mode. !34185
• Display error for YAML files that are too large. !34199
• Change copy of webhooks / integration help text. !34301
• Use CodeQuality 0.85.10 in the CI template. !34329
• Update board header icons. !34366
• Show Redis instance in performance bar. !34377
• Extend members REST API with the option to unassign Issues and Merge Requests when member leaves team. !34388
• Reorder snippets in lists using updated_at column. !34393 (Dibyadarshi Dash @ddash2)
• Add files argument to snippet create mutation. !34449
• Consolidate object storage config in one place. !34460
• Add secret detection template to Auto DevOps. !34467
• Add contextual menu to single stat panels. !34497
• Add allowed actions to snippet input action. !34499
• Add files argument to snippet update mutation. !34514
• Change from vendor specific to Gitlab. !34576
• Enable :ci_release_generation feature flag by default. !34633
• Update gl-toggles with deprecated attributes. !34660
• Adjust verbiage on repository storages settings page. !34675
• Change redirect path after integration save. !34697
• Refine UI of integration form. !34707
• Change CI variable font family to monospace. !34788 (Aaron Walker)
• Rename GraphQL AwardEmoji mutations to follow naming conventions, deprecating the old mutations. !34798
• Improve error message when unconfirmed user tries to log in. !34818
• Update LFS setting label. !34829 (George Tsiolis)
• Display error if metrics dashboard YAML is too large. !34834
• Add expand/collapse view to Terraform MR widget. !34879
• Expose storage size limit for namespaces in GraphQL. !34882
• Resolve Add no graph empty state for DAG. !35053
• Remove pending and running tabs from pipelines list and remove count from finished tab. !35062
• Stop removing NaN values from monitoring data series. !35086
• Multiple Kubernetes clusters now available in GitLab core. !35094
• Include snippets size in project statistics. !35120
• Add parallel persistence for author_name on AuditEvent. !35130
• Convert the Image tag UI from a table to a list view. !35138
• Add personal and project snippet monthly counters to usage data. !35155
• Exclude integrations (services) from Project Import/Export. !35249
• Parameterize PG deprecation notice. !35271
• Add inapplicable reason in MR suggestion Tooltip. !35276
• Add snippets_size to namespace_root_storage_statistics. !35311
• Rename Container Expiration Policies to Cleanup policy for tags. !35315
• Expose snippets_size in ProjectStatistics Entity. !35316
• Add snippets_size to ProjectStatistics GraphQL type. !35319
• Update snippet and project statistics after certain events. !35340
• Update the static site editor's markdown mode text to monospace to better reflect a code-editing experience. !35347 (Derek Knox)
• Resolve Remove button row from environments empty state. !35413
• Track last activity for Personal Access Token. !35471
• Add GitLab username and name to the import users from Jira mutation response. !35542
• Use local Tiller by default for GitLab-managed apps. !35562
• Hide cleanup button for clusters with management project. !35576
• Update integration form to use GitLab UI components. !35582
• Add snippets_size to Group entity. !35585
• Add snippets_size to RootStorageStatisticsType. !35586
• Move merge_requests_users metric to stage section. !35593
• Include snippets_size statistic inside RootStorageStatistics. !35601
• Accept multiple blobs in snippets. !35605
• Replace FA exchange icon with GitLab SVG. !35634
• Require namespace path (and username) to be at least 2 chars long. !35649
• Remove count for pending/running/finished pipelines in tabs. !35693
• Display commits search in mobile & adjust text. !35702
• Open source cluster health dashboard and make it available to all users. !35721
• Update snippet statistics after project import. !35730
• Remove the second prompt to accept or decline an invitation. !35777
• Track wiki page views in Snowplow. !35784
• Use the application's default_branch_name when available when initializing a new repo with a README. !35801
• Use native Gitaly pagination for Branch list API. !35819
• Move file link to bottom in Web IDE. !35847
• Package APIs moved to core. !35919
• Allow setting extra tags for Sentry exceptions with GITLAB_SENTRY_EXTRA_TAGS. !35965
• Include personal snippets size in RootStorageStatistics. !35984
• Change Alert fingerprint index to run when status is not resolved. !36024
• Update namespace statistics after personal snippet update/removal. !36031
• Add details rows to Container Registry Tags List. !36036
• Add raw snippet repository file endpoint to API. !36037
• Move monitor stage usage activity to CE. !36067
• Move release stage usage activity to CE. !36083
• Move create stage usage activity to CE. !36086
• Move plan stage usage activity to CE. !36087
• Move manage stage usage activity to CE. !36089
• Move verify stage usage activity to CE. !36090
• Move alert integrations setting to Vue. !36110
• Use new vuex store for code quality MR widget. !36120
• Remove non-unique index on merge_request_metrics.merge_request_id column. !36170
• Cleanup policies: display API error messages under form field. !36190
• Replace fa-comment / fa-comments icons with GitLab SVG. !36206
• Update rack-timeout to 0.5.2. !36289
• Bring SAST to Core - eslint. !36392
• Replace initial dashboard loading state with a loading spinner, show dashboard skeleton earlier with smaller loading indicators. !36399
• Merge tslint secure analyzer with eslint secure analyzer. !36400
• Expose issue ID via GraphQL. !36412
• Add broken tag state to tags list items. !36442
• Fix UI quirks with pipeline schedule cron options. !36471
• Update eslint secure analyzer to analyze jsx. !36505
• Display informative error for status updates on duplicate alerts. !36527
• Change default value in application_settings.issues_create_limit to be 0. !36558
• Expose approvals fields for FOSS FE. !36564
• Move service desk feature to core. !36613
• Check WIP status after all other possible statuses. !36624
• Add new models for DAST site profiles as part of DAST on-demand scans. !36659
• Add date to x-axes timestamps. !36675
• Make the Design Collection more visible in the Issue UI. !36681
• Add correlation between trigger job and child pipeline. !36750
• Static Site Editor: Set default sublist indent spaces to four space characters. !36756
• Add managed-apps section in log explorer. !36769
• Use a Confluence icon for the project Confluence integration nav item. !36780
• Remove file_path validation in snippet create action. !36809
• Improve animations of design note selection in design management. !36927
• Add entity_path column to audit_events table. !37041
• Make DAG annotations stick. !37068
• Support multiple files when editing snippets. !37079
• Change loading MR message wording. !37181
• Assign alerts sidebar base.
• Improved UX of the code navigation popover.

Performance (50 changes, 1 of them is from the community)

• Improve performance of commit search by limiting the number of results requested. !32260
• Add GraphQL lookahead support. !32373
• Update index_ci_builds_on_commit_id_and_artifacts_expireatandidpartial index for secret_detection. !32584
• Add index on id and type for Snippets. !32885
• Use build_stubbed to avoid interacting with the DB in todos helper specs. !32906 (Arun Kumar Mohan)
• Optimize SQL queries on Milestone index page. !32953
• Add build report results data model. !32991
• Improve the performance for loading large diffs on a Merge request. !33037
• Adjust condition for partial indexes on services table. !33044
• Add index to issues and epics on last_edited_by_id. !33075
• Fix preconnect typo in rel link. !33255
• Add project_id, user_id, status, ref index to ci_pipelines. !33290
• Move migration related to ci_builds to post_deployment. !33416
• Remove need to call commit (gitaly call) in ProjectPipelineStatus. !33712
• Reduce redundant queries for Search API users scope. !33795
• Speed up boot time in production. !33929
• Harden CI pipelines usage data queries with an index. !34045
• Use snapshot transfers for repository shard moves when possible. !34113
• Add partial index on locked merge requets. !34127
• Improve pipeline index controller performance by resolving Gitaly N+1 calls. !34160
• Lazy load commit_date and authored_date on Commit. !34181
• Optimize container repository for groups query. !34364
• Further improve the performance for loading large diffs on a Merge request. !34516
• Paginate the notes incremental fetch endpoint. !34628
• Optimize rolling 28 days snippets counter. !34918
• Only load project license if needed. !35068
• Improve query to retrieve job artifacts with files stored locally. !35084
• Preload commits markdown cache. !35314
• Use BatchLoader for Project.forks_count to limit calls to Redis. !35328
• Rework hardening CI pipelines usage data queries with an index. !35494
• Performance improvement for job logs. !35504
• Define a namespace traversal cache. !35713
• MR diff migration: perform I/O outside of database transaction. !35734
• Resolve N+1 in Search API projects scope. !35833
• Optimize deployment counters for last 28 days. !35892
• Trigger stackprof by sending a SIGUSR2 signal. !35993
• Improve the search performance for merge requests. !36072
• Reduce number of scanned commits for code intelligence. !36093
• Improve snippet finders queries. !36292
• Swap Grape over to Gitlab::Json. !36472
• Add oj gem for faster JSON. !36555
• Replace fa-eyes-slash icons with GitLab SVG eye-slash icon. !36602
• Avoid N+1 calls for image_path when rendering commits. !36724
• Enable BulkInsertSafe on Ci::BuildNeed. !36815
• Remove optimized_count_users_by_group_id feature flag. !36953
• Remove unindexed condition on label transfer. !37060
• Speed up project creation for users with many projects. !37070
• Split query for code-nav path into two queries. !37092
• Use memoized start/finish for metrics based on issues table. !37155
• Enable CI Atomic Processing by default.

Added (298 changes, 23 of them are from the community)

• Release generation via gitlab-ci.yml documentation. !19237
• Add rake task to verify encrypted data through secrets. !21851
• User can apply multiple suggestions at the same time. !22439 (Jesse Hall)
• Resolve Add a button to assign users who have commented on an issue. !23883
• Add custom emoji model and database table. !24229 (Rajendra Kadam)
• Resolve Graph code coverage changes over time for a project. !26174
• Add doc for custom validators in api styleguide. !26734 (Rajendra Kadam)
• Add Scheduled Job for Monitoring Monitor Group Demo Environments. !27360
• Add setting to allow merge on skipped pipeline. !27490 (Mathieu Parent)
• Add dark theme (alpha). !28252
• Show estimate on issues list. !28271 (Lee Tickett)
• Make Fixed Email Notification Generally Available. !28338 (jacopo-beschi)
• Add a link to the renamed viewer to fully expand the renamed file (if it's text). !28448
• Focus and toggle metrics dashboard panels via keyboard. !28603
• Remove scoped_approval_rules feature flag. !28864 (Lee Tickett)
• Create Group import UI for creating new Groups. !29271
• Add finder for group-level runners. !29283 (Arthur de Lapertosa Lisboa)
• Allow customization of badge key_text and key_width. !29381 (Fabian Schneider @fabsrc)
• Support Workhorse directly uploading files to S3. !29389
• Add frontend support for multiline comments. !29516
• Support first_name and last_name attributes in LDAP user sync. !29542
• Link to test reports from MR Widget. !29729
• Add link to status page detail view for status page published issues. !30249
• Add metrics dashboard name to document title. !30392
• Backfill StatusPage::Published incidents and enable a publish quick action for EE. !30906
• Add missing Merge Request fields. !30935
• Show build status on branch list. !30948 (Lee Tickett)
• Add mutation to create commits in GraphQL. !31102
• Support quick actions when editing issue, merge request, and epic descriptions. !31186
• Add GraphQL support for authored and assigned Merge Requests. !31227
• Add usage data metrics for terraform states. !31280
• Add usage data metrics for terraform reports. !31281
• Add API endpoint for listing bridge jobs. !31370 (Abhijith Sivarajan)
• SpamVerdictService can call external spam check endpoint. !31449
• Move Admin note feature to GitLab Core. !31457 (Rajendra)
• Add DAG serializer for pipelines controller. !31583
• Save repository storages in application settings with weights. !31645
• Add API endpoint for resource milestone events. !31720
• Show import in progress screen for group imports. !31731
• Add Verify/FailFast CI template. !31812
• Improve Add/Remove Issue Labels API. !31864 (Lee Tickett)
• Add mutation to create a merge request in GraphQL. !31867
• Add warning popup for Elastic Stack update. !31972
• Add API support for sharing groups with groups. !32008
• Add the container expiration policy attribute to the project GraphQL type. !32100
• Add GraphQL support for project and group labels. !32113
• Add number of database calls to Prometheus metrics and logs for sidekiq and request. !32131
• Filter pipelines by status. !32151
• Filter pipelines based on url query params. !32230
• Add metrics for Redis usage during Sidekiq job execution. !32265
• Add filters to merge request fields. !32328
• Support reading .editorconfig files inside of the Web IDE. !32378
• [Frontend] Resolvable design discussions. !32399
• Table index added to metrics_dashboard_annotations for future pruning of stale metrics Annotations for metrics dashboards are now checked for valid start and end dates. !32433
• Enable GitLab-Flavored Markdown processing for design links. !32446
• Filter Pipelines by Tag Name. !32470
• Adds sorting by column to alert management list. !32478
• Add project specific repository storage API. !32493
• Adapt Limitable for system-wide features. !32574
• Add application limits to instance level CI/CD variables. !32575
• Add model for project level security auto-fix settings. !32577
• Expose Jira imported issues count in GraphQL. !32580
• Organize alerts by status tabs. !32582
• Add note to ECS CI template. !32597
• Add metrics for Redis usage during web requests. !32605
• Add database and GraphQL support for alert assignees. !32609
• Set fingerprints and increment events count for Alert Management alerts. !32613
• Process stuck jira import jobs. !32643
• Allow user to add custom links to their metrics dashboard panels. !32646
• Add tags to experimental queue selector attributes. !32651
• Allow generic endpoint to receive alerts from external Prometheus. !32676
• Customize the Cloud Native Buildpack builder used with Auto Build. !32691
• Add timezone display to alert based issue start time. !32702
• Display dates on metrics dashboards in UTC time zone. !32746
• Store Todo resolution method. !32753
• Add Falco to the managed cluster apps template. !32779
• Add experience_level to user_preferences. !32784
• Add keyboard shortcuts to metrics dashboard. !32804
• Remove metrics dashboard annotations attached to time periods older than two weeks. !32838
• Monitor:Health metrics instrumenation. !32846
• Adds PostHog as a CI/CD Managed Application. !32856
• Groups API has top_level_only option to exclude subgroups. !32870
• Create operations_feature_flags_issues table. !32876
• Allow advanced API projects filtering for admins. !32879
• Add api.js methods to update issues and merge requests. !32893
• Render user-defined links in dashboard yml file on metrics dashboard. !32895
• Create group_deploy_keys_groups intermediate table. !32901
• Add accessibility report MR widget. !32902
• Add a GraphQL mutation for toggling the resolved state of a Discussion. !32934
• Added CI template for Dart. !32942 (agilob)
• Add container expiration policy objects to the GraphQL API. !32944
• Don't hide Commit tab in Web IDE when there are no changes yet. !32979
• Add column for alert slack notifications. !33017
• Add ability to insert an image via SSE. !33029
• Add user root query to GraphQL API. !33041
• Adds groupMembership and projectMembership to GraphQL API. !33049
• Alerts list pagination. !33073
• Add ApplicationSetting ui changes for repository_storages_weighted. !33096
• Resolve Feature proposal: API for import from BitBucket Server. !33097
• Add squash commits options as a project setting. !33099
• Display confirmation modal when user exits SSE and there are unsaved changes. !33103
• Add column dashboard_timezone to project_metrics_setting. !33120
• Allow the assignment of alerts to users from the alert detail view. !33122
• Add solarized dark for Web IDE. !33148
• Add support for artifacts/exclude configuration. !33170
• Add root users query to GraphQL API. !33195
• Added validation for YAML files with metrics dashboard definitions. !33202
• Create issue from alert. !33213
• Add max import file size option. !33215 (Roger Meier)
• Add system note when assigning user to alert. !33217
• Add count of alerts from all sources to usage ping. !33220
• Add button to create an issue from an alert management alert. !33221
• Add more detail to alert integration settings description. !33244
• Add Evidence to Releases GraphQL endpoint. !33254
• Add support for pasting images in the Web IDE. !33256
• Add ProjectAccessToken table. !33272
• Automatically resolve alert when associated issue closes. !33278
• Add Jira Importer user mapping form. !33320
• Add link_type to ReleaseLink GraphQL type. !33386
• Add setting to enable and disable shared Runners for a group and its descendants. !33411 (Arthur de Lapertosa Lisboa)
• Add members to project graphQL endpoint. !33418
• Update Static Site Editor WYSIWYG mode to hide front matter. !33441
• Added delete action for Dashboard Annotations in GraphQL. !33468
• Create graphQL endpoint for Jira users import. !33501
• Support IAP protected prometheus installations. !33508
• New instance-level variables UI. !33510
• Add design activity in event streams. !33534
• Allow developer role read-only access to Terraform state. !33573
• Add support for git filter-repo to repository cleanup. !33576
• Close open reply input fields in the design view sidebar when leaving a new comment. !33587
• Add dashboard schema validation warnings as metrics dashboard GraphQL field. !33592
• Add time range to user-defined links in metrics dashboard. !33663
• Increase events count for Prometheus alerts. !33706
• Add dashboard validation warning to metrics dashboard. !33769
• Track pod logs refresh action. !33802
• Expose all Jira projects endpoint through a GraphQL. !33861
• Add secret detection template. !33869
• Add new path to access project metrics dashboard. !33905
• Add new raw snippet blob endpoint. !33938
• Add DAG visualization MVC. !33958
• Introduce a feature flag for Vue-based UI for all import providers. !33980
• Add sticky title on Issue pages. !33983
• Allow policies to override parent rules. !33990
• Allow Release asset links to be associated with a type. !33998
• Support user-defined Grafana links in metrics dashboard. !34003
• Adds AWS guidance to CI/CD > Add Variable modal. !34009
• Show custom attributes within Admin Pages. !34017 (Roger Meier)
• Enable Slack notifications for alerts. !34038
• Container expiration policy regular expressions are now validated. !34063
• Add todo when alert is assigned to a user. !34104
• Track merge requests submitted by Static Site Editor. !34105
• Turn off alert issue creation by default. !34107
• Add detailed logs of each Redis instance usage during job execution and web requests. !34110
• Support metrics dashboard with file name. !34115
• Add API to schedule project repository storage moves. !34119
• Update diff discussion positions on demand. !34148
• Add ability for user to manually create a todo for an alert. !34175
• Add validation step on backend for metrics dashboard links. !34204
• Track when Static Site Editor is initialized. !34215
• Bring SAST to Core - brakeman. !34217
• Mask key comments when exposing SSH/Deploy Keys via the API. !34255
• Convert :release yaml to release-cli commands. !34261
• Validate regex before sending them to CleanupContainerRepositoryWorker. !34282
• Create vulnerability_statistics table. !34289
• Add secret_detection to DOWNLOADABLE_TYPES. !34313
• Enable ability to assign alerts to users with corresponding system notes and todos. !34360
• Rolling 28 day time period counters for snippets. !34363
• Add regex fields to the container expiration policy update mutation. !34389
• Display Multiple Terraform Reports in MR Widget. !34392
• Highlight commented rows. !34432
• Add ci_builds_metadata.secrets column. !34480
• Enable CI Inheriting Env Variables feature. !34495
• Show tooltip on error detail page when hovering over dates. !34506
• Show notification about empty stacktrace. !34517
• Add native code intelligence. !34542
• Add global setting to disable/enable email notification on unknown sign-ins. !34562
• Bump cluster-applications version to v0.20.0. !34569
• Send fixed pipeline notification by default. !34589
• Add search argument for AlertStatusCountsResolver. !34596
• Add clusters_applications_cilium DB table. !34601
• Fetch metrics dashboard templating variable options using a Prometheus query. !34607
• Add Jira users mapping to start Jira import mutation. !34609
• Allow CI_JOB_TOKEN for authenticating to the Terraform state API. !34618
• Search plain text in alert list frontend. !34631
• Trigger unsaved changes warning in snippets on navigating away. !34640
• Add Cilium to the ParseClusterApplicationsArtifactService. !34695
• Use new icon for api preview. !34700 (Roger Meier)
• Remove partial clone feature flag. !34703
• Ability to use an arbitrary YAML blob to create CI pipelines. !34706
• Upgrade GitLab Pages to 1.19.0. !34730
• Add CI_PROJECT_ROOT_NAMESPACE predefined environment variable. !34733
• Add override selector for project-level integrations. !34742
• Create namespace_limits table with additional purchase columns. !34746
• Add mutation to update merge requests. !34748
• Add plan limits for max size per artifact type. !34767
• Add package scope validation to Node.js template. !34778
• Expose project deploy keys for autocompletion. !34875
• Block invalid URLs in metrics dashboard chart links. !34888
• Add release data to GraphQL endpoint. !34937
• Add ref, released_at, milestones to release yml. !34943
• Add option to unassign member from issuables when removing them from a project. !34946
• Add diff stats fields to merge request type. !34966
• Bump Gitaly to v13.2.0-rc1. !34977
• Add prometheus_alert_id and environment_id to Alert management alerts. !34995
• Add full width to single charts in a row. !34999
• Support extensibility for Editor Lite. !35008
• Add snippets_size to ProjectStatistics. !35017
• Add SnippetStatistics model. !35026
• Add metrics settings menu to dashboard header. !35028
• Surface metrics charts on the alert detail page. !35044
• Add milestone stats to GraphQL endpoint. !35066
• Add a custom HTML renderer to the Static Site Editor for markdown identifier syntax. !35077
• Expose ref, milestones, released_at to releaser-cli. !35115
• Add snippet statistics logic. !35118
• Allow files with .md.erb extension for the Static Site Editor. !35136
• Add migration for experimental product analytics table. !35168
• Extend ECS Deploy template with Fargate jobs. !35173
• Upgrade Pages to 1.20.0. !35177
• Automatically close related issue when resolving Alert Management Prometheus Alert. !35208
• Create API to retrieve resource state events. !35210
• Allow diffs to be viewed file-by-file. !35223 (rinslow)
• Add indices for projects with disable_overriding_approvers_per_merge_request. !35224
• Log name of class that failed to obtain exclusive lease. !35228
• Render source job info in TriggeredPipelineEntity. !35232
• Add refresh rate options to dashboard header. !35238
• Add annotation component for DAG. !35240
• Add a custom HTML renderer to the Static Site Editor for embedded ruby (ERB) syntax. !35261
• Display metric label in single stat. !35289
• Add issue column to alert list. !35291
• Expose metrics dashboard URL for alert GraphQL query. !35293
• Allow diffing changes in wiki history. !35330 (gwhyte, Steve Mokris)
• Added support for reordering issues to the v4 API. !35349 (Joel @jjshoe, Lee Tickett @leetickett)
• Add 'not' params to MergeRequests API endpoint. !35391
• Implement GraphQL query to generate JSON for SAST config UI. !35397
• Add system notes for status updates on alerts. !35467
• Enable S3 Workhorse client if consolidated object settings used. !35480
• Rolling 28 day time period counter for deployments. !35493
• Add log statements to Projects::ContainerRepository::DeleteTagsService. !35539
• Provide a label for 'Scheduled Pipeline' in the pipelines overview page. !35554
• Add note about SSH key title being public information. !35574
• Add todo pill styling for resolved alert. !35579
• Add support for Markdown in the user's bio. !35604 (Riccardo Padovani)
• Introduce prepare environment action to annotate non-deployment jobs. !35642
• Add custom Dockerfile paths to Auto DevOps Build stage with DOCKERFILE_PATH. !35662 (thklein)
• Add MergeRequest.diffStatsSummary.fileCount to graphql API. !35685
• Introduces Group Level Delayed Project Removal Setting. !35689
• Update cluster-applications to 0.23.0. !35691
• Resolve user's todo when an alert is resolved. !35700
• Show when alert is new in the Alerts list. !35708
• Convert Import/Export rate limits to configurable application settings. !35728
• Add installed state metrics for Cilium cluster application. !35808
• Add support for linting based on schemas in WebIDE. !35838
• Add a metrics settings button to the dashboard header. !35848
• Prevent a project bot from being removed as member. !35899
• Add background_migration_jobs table to trace background migrations. !35913
• Allow prefixing with Draft to mark MR as WIP. !35940
• FindRemoteRepository is storage scoped. !35962
• Include project and subgroup milestones on Roadmap page. !35973
• Todo Mutations should return the mutated todos. !35998
• Add API support for instance-level Kubernetes clusters. !36001
• Add count to imported Jira issues message. !36075
• Add temporary storage increase column. !36107
• Remove generic_alert_fingerprinting feature flag. !36148
• Upgrade GitLab Pages to 1.21.0. !36214
• Move approvals endpoints to FOSS version. !36237
• Add initial custom HTML renderer to the Static Site Editor to prevent editing in WYSIWYG mode. !36250
• Open new alert when existing alert is resolved. !36261
• Add custom avatars for Alert and Support Bot. !36269
• Add PagerDuty integration columns to project_incident_management_settings table. !36277
• Enable Alerts dropdown in Operations Settings. !36296
• Add number of approval project rules to usage ping. !36316
• Add namespace settings table. !36321
• Add a custom HTML renderer to the Static Site Editor for HTML block syntax. !36330
• Expose gitlab managed apps logs inside log explorer. !36336
• Add keyboard shortcut ('b') to copy MR source branch name on MR page. !36338
• Add a custom HTML renderer to the Static Site Editor for font awesome inline HTML syntax. !36361
• Add system note for alert when creating issue. !36370
• Periodically update container registry type settings. !36415
• Expands Jira integration to allow viewing and searching a list of of Jira issues directly within GitLab. !36435
• Show Approve button on merge requests in Core. !36449
• Measure adoption of package registry. !36514
• If a user does not have write access to repo, but a fork exists, the Web IDE button should take them to the fork. !36548
• Enable Batch Suggestins feature flag by default. !36561
• Add default and non-default branch jobs for secret detection. !36570
• Add a custom HTML renderer to the Static Site Editor for markdown identifier instance syntax. !36574
• Add docs for Alert trigger test alerts. !36647
• Support short urls for custom metrics dashboards. !36740
• Update cluster-applications to 0.24.2. !36768
• Add new Confluence integration for projects. !36781
• Add confidential attribute to public API for notes creation. !36793
• Add confidential attribute to graphQL for notes creation. !36799
• Prometheus instances behind Google IAP can now be accessed via manual configurations. !36856
• GraphQL mutation for changing locked status of an issue. !36866
• Default the feature flag to true to always show the default initial branch name setting. !36889
• Enable feature flag 'sectional_codeowners' Sections for Code Owners. !36902
• Add pagination to iterations list. !37052
• Add Jsonnet template for GitLab. !37058
• Enable design activity events by default. !37107

Other (137 changes, 45 of them are from the community)

• Improve fast-forward merge is not possible message. !22834 (Ben Bodenmiller)
• Add node ci template. !25668
• Deduplicate merge_request_metrics table. !29566
• Remove unused WAF indexes from CI variables. !30021
• Update the visual design of badges in some areas. !31646
• Extract featurable concern from ProjectFeature. !31700 (Alexander Randa)
• Remove update function logic from list model. !31900 (nuwe1)
• Remove nextpage function logic from list model. !31904 (nuwe1)
• Squash database migrations prior to 2019 into one. !31936
• Update deprecated slot syntax in app/assets/javascripts/reports/components/grouped_test_reports_app.vue. !31975 (Gilang Gumilar)
• Replace slot syntax for Vue 3 migration. !31987 (gaslan)
• Update deprecated slot syntax in ./app/assets/javascripts/pages/admin/projects/index/components/delete_project_modal.vue. !31994 (Gilang Gumilar)
• Update deprecated slot syntax in ./app/assets/javascripts/pages/projects/labels/components/promote_label_modal.vue. !31995 (Gilang Gumilar)
• Update deprecated slot syntax in ./app/assets/javascripts/clusters/components/remove_cluster_confirmation.vue. !32010 (Gilang Gumilar)
• Update deprecated slot syntax in ./app/assets/javascripts/environments/components/environments_app.vue. !32011 (Gilang Gumilar)
• Remove setLoadingState logic from issue model. !32226 (nuwe1)
• Remove addAssignee logic from issue model. !32231 (nuwe1)
• Remove addLabel Logic from issue models. !32233 (nuwe1)
• Remove addMilestone logic from issue model. !32235 (nuwe1)
• Remove destroy function logic from list model. !32237 (nuwe1)
• Remove findAssignee logic from issue model. !32238 (nuwe1)
• Remove findLabel logic from issue model. !32239 (nuwe1)
• Remove findIssue logic from list model. !32241 (nuwe1)
• Remove moveIssue logic from list model. !32242 (nuwe1)
• Remove moveMultipleIssues logic from issue model. !32243 (nuwe1)
• Remove newIssue logic from list model. !32244 (nuwe1)
• Remove onNewIssueResponse logic from list model. !32245 (nuwe1)
• Remove removeAllAssignees logic from issue model. !32247 (nuwe1)
• Remove removeAssignee logic from issue model. !32248 (nuwe1)
• Clarify verbiage for stuck job messages. !32250
• Remove removeLabel logic from issue model. !32251 (nuwe1)
• Remove removeLabels logic from issue model. !32252 (nuwe1)
• Remove removeMilestone logic from issue model. !32253 (nuwe1)
• Remove removeMultipleIssues logic from list model. !32254 (nuwe1)
• Remove setFetchingState logic from issue model. !32255 (nuwe1)
• Remove updateData logic from issue model. !32256 (nuwe1)
• Update U2F docs for Firefox 67+. !32289 (Takuya Noguchi)
• Update alert management mobile table alignment. !32295
• Include available instance memory in usage ping. !32315
• Moves merge request reviews into Core. !32558
• Update GitLab Runner Helm Chart to 0.17.0. !32634
• Add snowplow tracking for logs page. !32704
• Extend "Remember me" token after each login. !32730
• Assign alerts sidebar container fix. !32743
• Add anchor for creating a branch. !32745
• Tidy. !32759 (Lee Tickett)
• Less verbose JiraService error logs. !32847
• Reduced padding and increased emphasis of titles within the epic tree. !32873
• Add source to resource state events. !32924
• Remove obsolete users.ghost column. !32957
• Move NoPrimary table def to last context in spec. !33015 (Rajendra Kadam)
• Document github rate limit behavior. !33090
• Added build_id column to requirements_management_test_reports table. !33184
• Add version history information on U2F support. !33229 (Takuya Noguchi)
• Convert IP spoofing errors into client errors. !33280
• Update docs to reflect move web IDE Terminal and file sync to Core. !33419
• Add hovering icon for sorting columns on alert management list. !33429
• Upgrade Grape v1.1.0 to v1.3.3. !33450
• Avoid javascript for omniauth logins. !33459 (Diego Louzán)
• Add opacity transition to active design discussion pins. !33493
• Update GitLab Runner Helm Chart to 0.17.1. !33504
• Store pipeline creation errors and warnings into Ci::PipelineMessage. !33762
• Make project selector in various dashboard more translatable. !33771
• Update Workhorse to v8.35.0. !33817
• Remove FF hide_token_from_runners_api. !33947
• Bump omniauth_openid_connect to 0.3.5. !34030 (Roger Meier)
• Specify tiers for SAML SSO at self-hosted plans. !34040 (Takuya Noguchi)
• Backfill failed imported snippet repositories. !34052
• Use GitLab SVG icon for file attacher action. !34196
• Suppress progress on pulling on Performance Test. !34368 (Takuya Noguchi)
• Update icon associated with attach a file actions. !34401
• Add GraphQL snippet FileInputType. !34442
• Move filter code into finder. !34470 (Ravishankar)
• Update blue hex values to match GitLab UI. !34530
• Remove legacy job log rendering. !34538
• Update red hex values to match GitLab UI. !34544
• Update green hex values to match GitLab UI. !34547
• Validate the existing not null constraints on columns for ci_job_artifacts, lfs_objects, and uploads tables. !34568
• Move HasStatus module to the Ci namespace. !34577 (blackst0ne)
• Update pinned links to use GlButton. !34620
• Add machine/sysname/release in topology usage ping. !34627
• Remove build dependencies on code quality and license scanning. !34659
• Add :section to approval_merge_request_rule unique index. !34680
• Replace double angle icons with double chevron. !34736
• Update Workhorse to v8.36.0. !34759
• Update heart icon from FontAwesome to GitLab SVG. !34777
• Fix broken CSS for system notes. !34870
• Fix Gitaly duration tracking of RefService RPCs. !34904
• Fix Gitaly duration timings of BlobService RPCs. !34906
• Fix Gitaly duration timings for conflicts and search RPCs. !34909
• Add validation for move action in SnippetInputAction. !34911
• Fix Gitaly duration timings for other CommitService RPCs. !34933
• Add project_key column to jira_tracker_data table. !34949
• Update GitLab Runner Helm Chart to 0.18.0. !34969
• Copy snippet route under - scope. !35020
• Copy project snippet routes under - scope. !35022
• Removes monkey patch to generate 6.0.3 style token. !35104
• Create time-space partitions in separate schema gitlab_partitions_dynamic. !35137
• Edit copy of DAG unsupported data alert. !35170
• Move configuration for Alerts endpoint from "Settings > Integration" to "Settings > Operations > Alerts". !35187
• Clean up GitlabIssueTrackerService database records. !35221
• Throttle ProjectUpdateRepositoryStorageWorker Jobs. !35230
• Suppress progress on docker pulling in builtin templates. !35253 (Takuya Noguchi)
• Create schema for static partitions. !35268
• Add default_branch_name to application_settings. !35282
• Upgrade Gitaly to 13.2.0-rc2. !35345
• Drop partitions_dynamic schema if it exists. !35426
• Avoid grouping statement timeouts in Sentry. !35479
• Database migration to add project_settings.has_confluence. !35485
• Update UI links to docs in core features. !35488
• Update Sidekiq to v5.2.9. !35495
• Move profiles/keys#get_keys to users#ssh_keys. !35507 (Takuya Noguchi)
• Add default_branch_name to ApplicationSettings visible attrs. !35681
• Update GitLab Runner Helm Chart to 0.18.1. !35712
• Prepare database for WebAuthn. !35797 (Jan Beckmann)
• Remove dead Elasticsearch indexing code. !35936
• Add alias expansion to Terraform documentation. !35941 (zmeggyesi)
• Hide dropdown header on list view. !35954
• Update GitLab Elasticsearch Indexer. !35966
• Restore the search autocomplete for groups/project/other. !35983
• Add issues_enabled column to jira_tracker_data table. !35987
• Normalize the 'thumb-up', 'thumb-down' icon. !35988
• Add migration to drop unused daily report results table. !36102
• Updating $gray-200 hex value and remapping current instances to $gray-100. !36128
• Removes ci_ensure_scheduling_type feature flag. !36140
• Update more UI links to docs in core features. !36174
• Format graphql files with prettier. !36244
• Replace FA play icon with svg in pipeline schedule and admin runner page. !36379
• Backfill project snippet statistics. !36444
• Expose blob mode in GraphQL for repository files. !36488
• Drop index of ruby objects in details on audit_events table. !36547
• Expand Operations > Alerts section by default via link follow through. !36649
• Update snippets housecleaning docs. !36715
• Update Rouge to v3.21.0. !36942
• Update GITLAB_WORKHORSE_VERSION to 8.37.0. !36988
• Track the number of unique users who push, change wikis and change design managerment.
• Remove removeIssue logic from list model. (nuwe1)

13.1.10 (2020-09-02)

Security (1 change)

• Protect OAuth endpoints from brute force/password stuffing.

13.1.9 (2020-09-02)

Security (23 changes, 1 of them is from the community)

• Check validity of project's import_url before mirroring repository.
• Show on two-factor authentication setup page groups that are the cause of this requirement.
• Prevent interrupted 2FA sign-in from signing-in incorrect user.
• Create new 2FA code each time user is entering 2FA setup page.
• Remove all sessions but current while enabling 2FA.
• Invalidate two factor sign-in when user password changes.
• Delete members invites created by users being deleted.
• Prevent OmniAuth from rendering arbitrary error messages.
• Prevent not-2fa authenticated users that are supposed to use it to consume api via session.
• Invalidate remember me when an active session is revoked.
• Add rate limit on webhooks testing feature.
• Add scope presence validation to OAuth Application creation.
• Allow only running job tokens for API authentication.
• Prevent Deploy Tokens to read project resources when repository is disabled.
• Change conan api to use proper workhorse validation.
• Ensure global ID is of Snippet type in GraphQL destroy mutation.
• Fix Improper Access Control on Deploy-Key.
• Set maximum limit for profile events.
• Persist EKS External ID before presenting it to the user.
• Prevent project maintainers from editing group badges.
• Upgrade jquery to v3.5.
• Update websocket-extensions gem to 0.1.5. (Vitor Meireles De Sousa)
• Update GitLab Runner Helm Chart to 0.18.3.

13.1.8 (2020-08-18)

• No changes.

13.1.7 (2020-08-17)

Security (2 changes)

• Stop deploy token being mis-used as user in ProjectPolicy and GroupPolicy.
• Project access is checked during deploy token authentication.

13.1.6 (2020-08-05)

Security (11 changes)

• Add decompressed archive size validation on Project/Group Import. !562
• Enforce 2FA on Doorkeeper controllers.
• Refresh project authorizations when transferring groups.
• Stop excess logs from failure to send invite email when group no longer exists.
• Verify confirmed email for OAuth Authorize POST endpoint.
• Revoke OAuth grants when a user revokes an application.
• Fix XSS in Markdown reference tooltips.
• Fix XSS in milestone tooltips.
• Fix xss vulnerability on jobs view.
• Block 40-character hexadecimal branches.
• Update GitLab Runner Helm Chart to 0.17.2.

13.1.5 (2020-07-23)

• No changes.

13.1.3 (2020-07-06)

• No changes.

13.1.2 (2020-07-01)

Security (18 changes)

• Update xterm js dependency to latest stable 3.x version.
• Do not show activity for users with private profiles.
• Fix stored XSS in markdown renderer.
• Upgrade swagger-ui to solve XSS issues.
• Fix group deploy token API authorizations.
• Check access when sending TODOs related to merge requests.
• Change from hybrid to JSON cookies serializer.
• Prevent XSS in group name validations.
• Disable caching for wiki attachments.
• Disable Github Importer API by settings.
• Fix null byte error in upload path.
• Update permissions for time tracking endpoints.
• Add snippet repository validation after bundle import.
• Update Kaminari gem.
• Fix note author name rendering.
• Sanitize bitbucket repo urls to mitigate XSS.
• Stored XSS on the Error Tracking page.
• Fix security issue when rendering issuable.

13.1.1 (2020-06-23)

Fixed (4 changes)

• Fix missing templating vars set from URL in metrics dashboard. !34668
• Fix edit status dropdown overflow. !34847
• Load user before logging git http-requests. !34923
• Do not mask key comments for DeployKeys. !35014

Added (1 change)

• Periodically recompute project authorizations. !34071

13.1.0 (2020-06-22)

Removed (4 changes, 2 of them are from the community)

• Remove deprecated dashboard & group milestone pages. !13237
• Removed UltraAuth integration for OmniAuth. !29330 (Kartikey Tanna)
• Remove all search autocomplete for groups/projects/other. !31187
• Remove temporary datepicker position fix as it is no longer required. !31836 (Arun Kumar Mohan)

Fixed (154 changes, 57 of them are from the community)

• Fix 'Active' checkbox text in Pipeline Schedule form to be a label. !27054 (Jonston Chan)
• Fix back button when switching MR tabs. !29862 (Lee Tickett)
• Remove ability to scroll Issue while in Design View. !29881
• Fix merge request note label URLs. !30428 (Lee Tickett)
• Fix default path when creating project from group template. !30597 (Lee Tickett)
• Group authorization refresh to consider shared groups. !31204
• Fix group transfer service to deny moving group to its subgroup. !31495 (Abhisek Datta)
• Fix issuable listings with any label filter. !31729
• Move prepend to last in ee-app-services. !31838 (Rajendra Kadam)
• Fallback to lowest visibility level in snippet visibility radio. !31847 (Jacopo Beschi @jacopo-beschi)
• Add class stubs and fix leaky constant alert in query limit helper spec. !31949 (Rajendra Kadam)
• Remove usage of spam constants in spec. !31959 (Rajendra Kadam)
• Fix leaky constant issue in uninstall progress service check. !32036 (Rajendra Kadam)
• Fix leaky constant issue in commit entity spec. !32039 (Rajendra Kadam)
• Fix leaky constant issue in task completion status spec. !32043 (Rajendra Kadam)
• Fix leaky constant issue in admin mode migration spec. !32074 (Rajendra Kadam)
• Fix leaky constant issue in sidekiq middleware server metric spec. !32104 (Rajendra Kadam)
• Fix leaky constant issue in sidekiq middleware client metric spec. !32108 (Rajendra Kadam)
• Fix leaky constant issue in path regex spec. !32115 (Rajendra Kadam)
• Fix leaky constant issue importer and cache headers spec. !32122 (Rajendra Kadam)
• Fix leaky constant issue in relation factory spec. !32129 (Rajendra Kadam)
• Fix leaky constant issue in test coverage spec. !32134 (Rajendra Kadam)
• Prevent emails to user on expiry of impersonation token. !32140
• Fix leaky constant issue in diff collection spec. !32163 (Rajendra Kadam)
• Fix leaky constant issue in migration helpers, with lock retries and ignored cols spec. !32170 (Rajendra Kadam)
• Fix leaky constant issue in factory spec. !32174 (Rajendra Kadam)
• Fix leaky constant issue in creds factory spec. !32176 (Rajendra Kadam)
• Use applogger in project import state file. !32182 (Rajendra Kadam)
• Use applogger in project.rb. !32183 (Rajendra Kadam)
• Use applogger in chat_team.rb. !32184 (Rajendra Kadam)
• Use applogger in repository model. !32185 (Rajendra Kadam)
• Use applogger in build and ssh host key. !32187 (Rajendra Kadam)
• Use applogger in cache attrs and highest role ruby files. !32189 (Rajendra Kadam)
• Use applogger in legacy project and namespace. !32190 (Rajendra Kadam)
• Use applogger in base.rb. !32191 (Rajendra Kadam)
• Use applogger in usage ping and webhook service. !32192 (Rajendra Kadam)
• Use applogger in exclusive_lease_guard. !32194 (Rajendra Kadam)
• Use applogger in groups destroy service and label create service. !32195 (Rajendra Kadam)
• Use applogger in merge_service.rb. !32196 (Rajendra Kadam)
• Use applogger in project create service and after import service. !32198 (Rajendra Kadam)
• Use applogger in update stats service. !32200 (Rajendra Kadam)
• Use applogger in base attachment service. !32201 (Rajendra Kadam)
• Use applogger in export service. !32203 (Rajendra Kadam)
• Use applogger in akismet service. !32205 (Rajendra Kadam)
• Use applogger in file mover file. !32206 (Rajendra Kadam)
• Use applogger in commit signature worker. !32207 (Rajendra Kadam)
• Use applogger in delete user worker. !32209 (Rajendra Kadam)
• Use applogger in email receiver worker. !32211 (Rajendra Kadam)
• Use applogger in artifact worker. !32212 (Rajendra Kadam)
• Use applogger in new note worker. !32213 (Rajendra Kadam)
• Fix duplicate filename displayed in design todos. !32274 (Arun Kumar Mohan)
• Add value length validations for instance level variable. !32303
• Resolve image overflow at releases list panel. !32307
• Clean up shared/tmp folder after Import/Export. !32326
• Fix creating release evidence if release is created via UI. !32441
• GraphQL hasNextPage and hasPreviousPage return correct values. !32476
• Fix loading and empty state styling for alerts list. !32531
• Resolve incorrect x-axis padding on the Environments Dashboard. !32533
• Fix time_tracking help link. !32552
• Don't display confidential note icon on confidential issue public notes. !32571
• Update container expiration policy database defaults. !32600
• Fix rendering of emojis in status tooltips. !32604
• Hid copy contents button when blob has rendering error. !32632
• Avoid refresh to show endedAt after mutation. !32636
• Fix for metrics creation when saving MR. !32668
• Skip the individual JIRA issues if failed to import vs failing the whole batch. !32673
• Hide "Import from Jira" option from non-entitled users. !32685
• Fix broken help link on operations settings page. !32722
• Allow different in bulk editing issues. !32734
• Fix whitespace changes overgrowing the diff container. !32774
• Improve spacing and wrapping of group actions buttons and stats in group list view. !32786
• Fix "Broadcast Messages" table overflow and button alignment. !32801
• Fix 404 when downloading a non-archive artifact. !32811
• Make commits author button confirm to Pajamas specs. !32821
• Fix filename duplication in design notes in activity feeds. !32823 (Arun Kumar Mohan)
• Prevent multiple Auto DevOps deployment jobs running concurrently when using manual rollout. !32824
• Implement displaying downstream pipeline error details. !32844
• Fix Runner heartbeats that results in considering them offline. !32851
• Conan package registry support for the conan_export.tgz file. !32866
• Fix plural message in account deletion section. !32868
• Fix atomic processing bumping a lock_version. !32914
• AsciiDoc: Add support for built-in alignment roles. !32928 (mnrvwl)
• Fix a bug where some Vue apps would be unable to load when DAG tab is disabled. !32966
• Fix undefined error in Gitlab::Git::Diff. !32967
• Fix spelling error on Ci::RunnersFinder. !32985 (Arthur de Lapertosa Lisboa)
• Fix polling for resource events. !33025
• Fix broken CSS classes inside alert management list. !33038
• Fix bug in snippet create mutation with non ActiveRecord errors. !33085
• Fix overflow issue in MR and Issue comments. !33100
• Fix alignment of button text on the Edit Release page. !33104
• Deduplicate URL parameters when requesting merge request diffs which causes diffs load to fail. !33117
• Fix tabbing through form fields in projects/new flow. !33209
• Fix incorrect commit search results returned when searching with ref. !33216
• Fix NoMethodError by using the correct method to report exceptions to Sentry. !33260
• Fix KaTeX font paths. !33338
• Resolve Fix Incomplete Kubernetes Cluster Status List. !33344
• Fix auto-merge not running after discussions resolved. !33371
• Fix bug in snippets updating only file_name or content. !33375
• Fix invisible emoji modal on Set Status form when clicked the second time. !33398
• vertically center action icon in the CI pipeline. !33427 (Nathanael Weber)
• Wrap auto merge parameters update in database transaction. !33471
• Return 404 response when redirecting request with invalid url. !33492
• Fix ambiguous string concatenation on CleanupProjectsWithMissingNamespace. !33497
• Fix snippet repository import edge cases. !33506
• Rust CI template: Replace --all with --workspace on cargo test. !33517 (Markus Becker)
• Make markdown textarea links tab-accessible. !33518
• Pass hard delete option to snippets bulk destroy. !33520
• Fix CI rules for ECS related jobs. !33527
• Update GitLab Workhorse to v8.34.0. !33543
• Fix snippet repository import fail with older export files. !33584
• Web IDE: Create template files in the folder from which new file request was made. !33585 (Ashesh Vidyut)
• Improve header acccessibility. !33603
• Remove non migrated snippets from failed imports. !33621
• Prevent duplicate issues when importing from CSV. !33626
• Fix sidebar spacing for alert details. !33630
• Fix linking alerts to created issues for the Generic alerts intergration. !33647
• Resolve spacing ux debt on Release assets form field. !33684
• Fix pagination link header. !33714 (Max Wittig)
• Fix Value Stream Analytics summary when using non-english locale. !33717
• Fix bug with variable substitution in alerts. !33772
• Allow wiki pages with +<> characters in their title to be saved. !33803
• Fix force_remove_source_branch not working in API. !33804
• Fix prometheus alerts not being automatically created. !33806
• Fix pagination for resource label events. !33821
• Fix relative URL root in wiki_base_path. !33841
• Return code navigation path for nil diff_refs. !33850
• Record audit event when an admin creates a new SSH Key for a user via the API. !33859 (Rajendra Kadam)
• Do not create duplicate issues for exising Alert Management alerts. !33860
• Add link text to collapsed left sidebar links for screen readers. !33866
• Update text in error tracking list error message. !33872
• Adjust wrong column reference for ResetMergeStatus (background job). !33899
• Fixed dashboard YAML file validaiton for files which do not contain object as root element. !33935
• Fix design note scrolling. !33939
• Update validates_hostname gem with support for more TLDs. !34010
• Update wording of addMultipleToDiscussionWarning. !34088
• Show all storages in settings. !34093
• Set author as nullable in snippet GraphQL Type. !34135
• Fix rendering of very long paths in merge request file tree. !34153
• Remove not null constraint from events tables. !34190
• Ensure we always generate a valid wiki event URL. !34191
• Send information about attached files to the GraphQL mutation. !34221
• Update issue limits template to use minutes. !34254
• Add route for the lost-and-found group and update the route of orphaned projects. !34285
• GraphQL - properly handle pagination of millisecond-precision timestamps. !34352
• Fix 500 error in BlobController#delete. !34367
• Updated Auto DevOps with a fix to delete PostgreSQL PVC on environment cleanup, a fix for multiline K8S_SECRET variables, updated Helm to 2.16.7 and glibc to 2.31. !34399 (verenion)
• Fix issues with scroll on iOS / iPad OS. !34486
• Fix order of integrations to be sorted alphabetically. !34501
• Fix undefined method error. !34522
• Use Keys::DestroyService for deleting an SSH key when an admin deletes a key via the API. !34535 (Rajendra Kadam)
• Removed default artifact name for Terraform template. !34557
• Footer system message fix.
• Set experiementation cookie for GitLab domain only.
• Add DS detection of build.gradle.kts.

Changed (76 changes, 5 of them are from the community)

• Add a GraphQL endpoint to fetch Jira projects through its REST API. !28190
• Change legends in monitor dashboards to tabular layout. !30131
• Move pipelines routing under /-/ scope. !30730
• Set markdown toolbar to use hyphens for lists. !31426
• Use sprites for comment icons on Commits. !31696
• Rate limit project export by user. !31719
• Reorder diffs compare versions dropdowns. !31770 (Gilang Gumilar)
• Enable the in this group action in the Search dropdown. !31939
• Externalize i18n strings from ./app/views/shared/_promo.html.haml. !32109 (Gilang Gumilar)
• Add Usage Ping count for all searches. !32111
• Add tags_count to container registry api and controller. !32141
• Externalize i18n strings from ./app/views/shared/milestones/_sidebar.html.haml. !32150 (Gilang Gumilar)
• Externalize i18n strings from ./app/views/shared/milestones/_form_dates.html.haml. !32162 (Gilang Gumilar)
• Improve Container Registry UI header. !32424
• Added node size to cluster index. !32435
• Update operations metrics settings title and description to make them general. !32494
• Track merge_requests_users usage data. !32562
• Adds cluster CPU and Memory to cluster index. !32601
• Allow the snippet create service to accept an array of files. !32649
• Move review related controllers/workers outside EE. !32663
• Move the Members section from settings to the side nav for projects. !32667
• Show more context in unresolved jump button. !32737
• Exclude extra.server fields from exceptions_json.log. !32770
• Improve new/unknown sign-in email styling. !32808
• Allow the snippet update service to accept an array of files. !32832
• Add new issue link to email notification header. !32833
• Bump cluster-applications to 0.17.0, which updates Runner to 0.17.0 and Cilium to 1.7.4. !32931
• Update artifacts section to show when an artifact is locked. !32992
• Include tag count in the image repository list. !33027
• Clean up gitlab-shell install-from-source path. !33057
• Increase LFS token default time to 2 hours. !33140
• Add explicit mention of Merge request in Slack message. !33152
• Expose release_links.type via API. !33154
• Add link_type column to release_links table. !33156
• Move broadcast notification dismiss button to the top. !33174
• Remove null constraint for JID in GroupImportState. !33181
• Added provider type icon to cluster list. !33196
• Remove search icon from Project find file button. !33198
• Refine SAST language detection by frameworks. !33226
• Render Merge request reference as link. !33248
• Upgrade to Gitaly v13.1.0-rc1. !33302
• Show disabled suggestion button with tooltip message. !33357
• Add update validations to SnippetInputAction. !33379
• Add snippet DB visibility check in spec. !33388 (Jacopo Beschi @jacopo-beschi)
• Add Hugo logo to project templates. !33402
• Add GitBook logo to project templates. !33403
• Add GoMicro logo to project templates. !33404
• Add Jekyll logo to project templates. !33405
• Add Hexo logo to project templates. !33406
• Rename Add Designs button. !33491
• Add CPU, memory usage charts to self monitoring default dashboard. !33532
• Add database migrations to design_management_designs.filename to enforce a 255 character limit, and modify any filenames that exceed that limit. !33565
• Track Sentry error status updates with dedicated actions. !33623
• Alert Managament: Change sorting order to have newest alerts first. !33642
• Add blobs field to SnippetType in GraphQL. !33657
• Format metrics column chart x axis dates. !33681
• Style ToastUI contextual menus. !33719
• Update Auto deploy image to v0.16.1, introducing support for AUTO_DEVOPS_DEPLOY_DEBUG. !33799
• Add whether instance has Auto DevOps enabled to usage ping. !33811
• Update local IP address and domain name allow list input label. !33812
• Add date time format to the monitor stacked-column chart. !33814
• Allow Tf Plan to genrate multiple reports. !33867
• Remove async_merge_request_check_mergeability feature flag. !33917
• Filter potentially-sensitive Sidekiq arguments from logs and Sentry. !33967
• Update Static Site Editor toolbar to group inline-code and code-block buttons together. !34006
• Set default values for SAST_EXCLUDED_PATHS and DS_EXCLUDED_PATHS. !34076
• Add ability to filter self monitoring resource usage charts by instance name. !34084
• Pick repository storage based on weight. !34095
• Display error for YAML files that are too large. !34199
• Change copy of webhooks / integration help text. !34301
• Update board header icons. !34366
• Show Redis instance in performance bar. !34377
• Add secret detection template to Auto DevOps. !34467
• Add allowed actions to snippet input action. !34499
• Change from vendor specific to Gitlab. !34576
• Assign alerts sidebar base.

Performance (19 changes, 1 of them is from the community)

• Improve performance of commit search by limiting the number of results requested. !32260
• Add GraphQL lookahead support. !32373
• Update index_ci_builds_on_commit_id_and_artifacts_expireatandidpartial index for secret_detection. !32584
• Add index on id and type for Snippets. !32885
• Use build_stubbed to avoid interacting with the DB in todos helper specs. !32906 (Arun Kumar Mohan)
• Optimize SQL queries on Milestone index page. !32953
• Add build report results data model. !32991
• Adjust condition for partial indexes on services table. !33044
• Add index to issues and epics on last_edited_by_id. !33075
• Fix preconnect typo in rel link. !33255
• Add project_id, user_id, status, ref index to ci_pipelines. !33290
• Move migration related to ci_builds to post_deployment. !33416
• Reduce redundant queries for Search API users scope. !33795
• Speed up boot time in production. !33929
• Harden CI pipelines usage data queries with an index. !34045
• Add partial index on locked merge requets. !34127
• Lazy load commit_date and authored_date on Commit. !34181
• Optimize container repository for groups query. !34364
• Enable CI Atomic Processing by default.

Added (149 changes, 14 of them are from the community)

• Add rake task to verify encrypted data through secrets. !21851
• User can apply multiple suggestions at the same time. !22439 (Jesse Hall)
• Resolve Add a button to assign users who have commented on an issue. !23883
• Resolve Graph code coverage changes over time for a project. !26174
• Add doc for custom validators in api styleguide. !26734 (Rajendra Kadam)
• Add Scheduled Job for Monitoring Monitor Group Demo Environments. !27360
• Add setting to allow merge on skipped pipeline. !27490 (Mathieu Parent)
• Add dark theme (alpha). !28252
• Show estimate on issues list. !28271 (Lee Tickett)
• Make Fixed Email Notification Generally Available. !28338 (jacopo-beschi)
• Add a link to the renamed viewer to fully expand the renamed file (if it's text). !28448
• Focus and toggle metrics dashboard panels via keyboard. !28603
• Remove scoped_approval_rules feature flag. !28864 (Lee Tickett)
• Create Group import UI for creating new Groups. !29271
• Add finder for group-level runners. !29283 (Arthur de Lapertosa Lisboa)
• Allow customization of badge key_text and key_width. !29381 (Fabian Schneider @fabsrc)
• Support Workhorse directly uploading files to S3. !29389
• Add frontend support for multiline comments. !29516
• Support first_name and last_name attributes in LDAP user sync. !29542
• Add link to status page detail view for status page published issues. !30249
• Add metrics dashboard name to document title. !30392
• Backfill StatusPage::Published incidents and enable a publish quick action for EE. !30906
• Add missing Merge Request fields. !30935
• Show build status on branch list. !30948 (Lee Tickett)
• Add mutation to create commits in GraphQL. !31102
• Add GraphQL support for authored and assigned Merge Requests. !31227
• Add usage data metrics for terraform states. !31280
• Add usage data metrics for terraform reports. !31281
• Add API endpoint for listing bridge jobs. !31370 (Abhijith Sivarajan)
• SpamVerdictService can call external spam check endpoint. !31449
• Move Admin note feature to GitLab Core. !31457 (Rajendra)
• Add DAG serializer for pipelines controller. !31583
• Save repository storages in application settings with weights. !31645
• Add API endpoint for resource milestone events. !31720
• Show import in progress screen for group imports. !31731
• Add Verify/FailFast CI template. !31812
• Improve Add/Remove Issue Labels API. !31864 (Lee Tickett)
• Add mutation to create a merge request in GraphQL. !31867
• Add warning popup for Elastic Stack update. !31972
• Add API support for sharing groups with groups. !32008
• Add the container expiration policy attribute to the project GraphQL type. !32100
• Add GraphQL support for project and group labels. !32113
• Add number of database calls to Prometheus metrics and logs for sidekiq and request. !32131
• Filter pipelines by status. !32151
• Filter pipelines based on url query params. !32230
• Add metrics for Redis usage during Sidekiq job execution. !32265
• Add filters to merge request fields. !32328
• Support reading .editorconfig files inside of the Web IDE. !32378
• [Frontend] Resolvable design discussions. !32399
• Table index added to metrics_dashboard_annotations for future pruning of stale metrics Annotations for metrics dashboards are now checked for valid start and end dates. !32433
• Enable GitLab-Flavored Markdown processing for design links. !32446
• Filter Pipelines by Tag Name. !32470
• Adds sorting by column to alert management list. !32478
• Add project specific repository storage API. !32493
• Adapt Limitable for system-wide features. !32574
• Add application limits to instance level CI/CD variables. !32575
• Add model for project level security auto-fix settings. !32577
• Expose Jira imported issues count in GraphQL. !32580
• Organize alerts by status tabs. !32582
• Add note to ECS CI template. !32597
• Add metrics for Redis usage during web requests. !32605
• Add database and GraphQL support for alert assignees. !32609
• Set fingerprints and increment events count for Alert Management alerts. !32613
• Process stuck jira import jobs. !32643
• Allow user to add custom links to their metrics dashboard panels. !32646
• Add tags to experimental queue selector attributes. !32651
• Allow generic endpoint to receive alerts from external Prometheus. !32676
• Customize the Cloud Native Buildpack builder used with Auto Build. !32691
• Add timezone display to alert based issue start time. !32702
• Display dates on metrics dashboards in UTC time zone. !32746
• Store Todo resolution method. !32753
• Add experience_level to user_preferences. !32784
• Remove metrics dashboard annotations attached to time periods older than two weeks. !32838
• Monitor:Health metrics instrumenation. !32846
• Adds PostHog as a CI/CD Managed Application. !32856
• Groups API has top_level_only option to exclude subgroups. !32870
• Create operations_feature_flags_issues table. !32876
• Add api.js methods to update issues and merge requests. !32893
• Render user-defined links in dashboard yml file on metrics dashboard. !32895
• Add accessibility report MR widget. !32902
• Add a GraphQL mutation for toggling the resolved state of a Discussion. !32934
• Add container expiration policy objects to the GraphQL API. !32944
• Don't hide Commit tab in Web IDE when there are no changes yet. !32979
• Add column for alert slack notifications. !33017
• Add ability to insert an image via SSE. !33029
• Add user root query to GraphQL API. !33041
• Adds groupMembership and projectMembership to GraphQL API. !33049
• Alerts list pagination. !33073
• Add ApplicationSetting ui changes for repository_storages_weighted. !33096
• Display confirmation modal when user exits SSE and there are unsaved changes. !33103
• Add column dashboard_timezone to project_metrics_setting. !33120
• Allow the assignment of alerts to users from the alert detail view. !33122
• Add solarized dark for Web IDE. !33148
• Add support for artifacts/exclude configuration. !33170
• Add root users query to GraphQL API. !33195
• Added validation for YAML files with metrics dashboard definitions. !33202
• Create issue from alert. !33213
• Add max import file size option. !33215 (Roger Meier)
• Add system note when assigning user to alert. !33217
• Add count of alerts from all sources to usage ping. !33220
• Add button to create an issue from an alert management alert. !33221
• Add more detail to alert integration settings description. !33244
• Add Evidence to Releases GraphQL endpoint. !33254
• Add support for pasting images in the Web IDE. !33256
• Add ProjectAccessToken table. !33272
• Automatically resolve alert when associated issue closes. !33278
• Add link_type to ReleaseLink GraphQL type. !33386
• Add members to project graphQL endpoint. !33418
• Update Static Site Editor WYSIWYG mode to hide front matter. !33441
• Added delete action for Dashboard Annotations in GraphQL. !33468
• Create graphQL endpoint for Jira users import. !33501
• Support IAP protected prometheus installations. !33508
• New instance-level variables UI. !33510
• Provide __range variable for Prometheus queries. !33521
• Add support for git filter-repo to repository cleanup. !33576
• Close open reply input fields in the design view sidebar when leaving a new comment. !33587
• Add dashboard schema validation warnings as metrics dashboard GraphQL field. !33592
• Add time range to user-defined links in metrics dashboard. !33663
• Increase events count for Prometheus alerts. !33706
• Track pod logs refresh action. !33802
• Add secret detection template. !33869
• Add DAG visualization MVC. !33958
• Introduce a feature flag for Vue-based UI for all import providers. !33980
• Add sticky title on Issue pages. !33983
• Allow Release asset links to be associated with a type. !33998
• Support user-defined Grafana links in metrics dashboard. !34003
• Adds AWS guidance to CI/CD > Add Variable modal. !34009
• Show custom attributes within Admin Pages. !34017 (Roger Meier)
• Enable Slack notifications for alerts. !34038
• Container expiration policy regular expressions are now validated. !34063
• Add todo when alert is assigned to a user. !34104
• Track merge requests submitted by Static Site Editor. !34105
• Turn off alert issue creation by default. !34107
• Add detailed logs of each Redis instance usage during job execution and web requests. !34110
• Add API to schedule project repository storage moves. !34119
• Add validation step on backend for metrics dashboard links. !34204
• Track when Static Site Editor is initialized. !34215
• Bring SAST to Core - brakeman. !34217
• Mask key comments when exposing SSH/Deploy Keys via the API. !34255
• Convert :release yaml to release-cli commands. !34261
• Validate regex before sending them to CleanupContainerRepositoryWorker. !34282
• Add secret_detection to DOWNLOADABLE_TYPES. !34313
• Enable ability to assign alerts to users with corresponding system notes and todos. !34360
• Enable CI Inheriting Env Variables feature. !34495
• Show tooltip on error detail page when hovering over dates. !34506
• Add native code intelligence. !34542
• Bump cluster-applications version to v0.20.0. !34569
• Add search argument for AlertStatusCountsResolver. !34596
• Allow CI_JOB_TOKEN for authenticating to the Terraform state API. !34618

Other (65 changes, 36 of them are from the community)

• Improve fast-forward merge is not possible message. !22834 (Ben Bodenmiller)
• Remove unused WAF indexes from CI variables. !30021
• Update the visual design of badges in some areas. !31646
• Extract featurable concern from ProjectFeature. !31700 (Alexander Randa)
• Remove update function logic from list model. !31900 (nuwe1)
• Remove nextpage function logic from list model. !31904 (nuwe1)
• Squash database migrations prior to 2019 into one. !31936
• Update deprecated slot syntax in app/assets/javascripts/reports/components/grouped_test_reports_app.vue. !31975 (Gilang Gumilar)
• Replace slot syntax for Vue 3 migration. !31987 (gaslan)
• Update deprecated slot syntax in ./app/assets/javascripts/pages/admin/projects/index/components/delete_project_modal.vue. !31994 (Gilang Gumilar)
• Update deprecated slot syntax in ./app/assets/javascripts/pages/projects/labels/components/promote_label_modal.vue. !31995 (Gilang Gumilar)
• Update deprecated slot syntax in ./app/assets/javascripts/clusters/components/remove_cluster_confirmation.vue. !32010 (Gilang Gumilar)
• Update deprecated slot syntax in ./app/assets/javascripts/environments/components/environments_app.vue. !32011 (Gilang Gumilar)
• Remove setLoadingState logic from issue model. !32226 (nuwe1)
• Remove addAssignee logic from issue model. !32231 (nuwe1)
• Remove addLabel Logic from issue models. !32233 (nuwe1)
• Remove addMilestone logic from issue model. !32235 (nuwe1)
• Remove destroy function logic from list model. !32237 (nuwe1)
• Remove findAssignee logic from issue model. !32238 (nuwe1)
• Remove findLabel logic from issue model. !32239 (nuwe1)
• Remove findIssue logic from list model. !32241 (nuwe1)
• Remove moveIssue logic from list model. !32242 (nuwe1)
• Remove newIssue logic from list model. !32244 (nuwe1)
• Remove removeAllAssignees logic from issue model. !32247 (nuwe1)
• Remove removeAssignee logic from issue model. !32248 (nuwe1)
• Clarify verbiage for stuck job messages. !32250
• Remove removeLabel logic from issue model. !32251 (nuwe1)
• Remove removeLabels logic from issue model. !32252 (nuwe1)
• Remove removeMilestone logic from issue model. !32253 (nuwe1)
• Remove removeMultipleIssues logic from list model. !32254 (nuwe1)
• Remove setFetchingState logic from issue model. !32255 (nuwe1)
• Remove updateData logic from issue model. !32256 (nuwe1)
• Update U2F docs for Firefox 67+. !32289 (Takuya Noguchi)
• Update alert management mobile table alignment. !32295
• Include available instance memory in usage ping. !32315
• Moves merge request reviews into Core. !32558
• Update GitLab Runner Helm Chart to 0.17.0. !32634
• Add snowplow tracking for logs page. !32704
• Extend "Remember me" token after each login. !32730
• Assign alerts sidebar container fix. !32743
• Add anchor for creating a branch. !32745
• Tidy. !32759 (Lee Tickett)
• Less verbose JiraService error logs. !32847
• Reduced padding and increased emphasis of titles within the epic tree. !32873
• Remove obsolete users.ghost column. !32957
• Move NoPrimary table def to last context in spec. !33015 (Rajendra Kadam)
• Document github rate limit behavior. !33090
• Added build_id column to requirements_management_test_reports table. !33184
• Add version history information on U2F support. !33229 (Takuya Noguchi)
• Convert IP spoofing errors into client errors. !33280
• Update docs to reflect move web IDE Terminal and file sync to Core. !33419
• Add hovering icon for sorting columns on alert management list. !33429
• Avoid javascript for omniauth logins. !33459 (Diego Louzán)
• Add opacity transition to active design discussion pins. !33493
• Update GitLab Runner Helm Chart to 0.17.1. !33504
• Make project selector in various dashboard more translatable. !33771
• Update Workhorse to v8.35.0. !33817
• Remove FF hide_token_from_runners_api. !33947
• Bump omniauth_openid_connect to 0.3.5. !34030 (Roger Meier)
• Specify tiers for SAML SSO at self-hosted plans. !34040 (Takuya Noguchi)
• Backfill failed imported snippet repositories. !34052
• Use GitLab SVG icon for file attacher action. !34196
• Add GraphQL snippet FileInputType. !34442
• Update red hex values to match GitLab UI. !34544
• Remove removeIssue logic from list model. (nuwe1)

13.0.14 (2020-08-18)

• No changes.

13.0.13 (2020-08-17)

Security (2 changes)

• Stop deploy token being mis-used as user in ProjectPolicy and GroupPolicy.
• Project access is checked during deploy token authentication.

13.0.12 (2020-08-05)

Security (10 changes)

• Add decompressed archive size validation on Project/Group Import. !562
• Enforce 2FA on Doorkeeper controllers.
• Refresh project authorizations when transferring groups.
• Stop excess logs from failure to send invite email when group no longer exists.
• Verify confirmed email for OAuth Authorize POST endpoint.
• Revoke OAuth grants when a user revokes an application.
• Fix XSS in Markdown reference tooltips.
• Fix XSS in milestone tooltips.
• Fix xss vulnerability on jobs view.
• Block 40-character hexadecimal branches.

13.0.11 (2020-08-05)

This version has been skipped due to packaging problems.

13.0.10 (2020-07-09)

Fixed (1 change)

• Fix gitlab:*:check Rake tasks. !35944

13.0.9 (2020-07-06)

• No changes.

13.0.8 (2020-07-01)

Security (18 changes)

• Update xterm js dependency to latest stable 3.x version.
• Do not show activity for users with private profiles.
• Fix stored XSS in markdown renderer.
• Upgrade swagger-ui to solve XSS issues.
• Fix group deploy token API authorizations.
• Check access when sending TODOs related to merge requests.
• Change from hybrid to JSON cookies serializer.
• Prevent XSS in group name validations.
• Disable caching for wiki attachments.
• Disable Github Importer API by settings.
• Fix null byte error in upload path.
• Update permissions for time tracking endpoints.
• Add snippet repository validation after bundle import.
• Update Kaminari gem.
• Fix note author name rendering.
• Sanitize bitbucket repo urls to mitigate XSS.
• Stored XSS on the Error Tracking page.
• Fix security issue when rendering issuable.

13.0.7 (2020-06-25)

Fixed (7 changes)

• Group authorization refresh to consider shared groups. !31204
• Fix Value Stream Analytics summary when using non-english locale. !33717
• Fix bug with variable substitution in alerts. !33772
• Fix relative URL root in wiki_base_path. !33841
• Adjust wrong column reference for ResetMergeStatus (background job). !33899
• Updated Auto DevOps with a fix to delete PostgreSQL PVC on environment cleanup. !34657
• Load user before logging git http-requests. !34923

Added (2 changes)

• Provide __range variable for Prometheus queries. !33521
• Periodically recompute project authorizations. !34071

13.0.6 (2020-06-10)

• No changes.

13.0.4 (2020-06-03)

Security (1 change)

• Prevent fetching repository code with unauthorized ci token.

13.0.3 (2020-05-29)

Fixed (8 changes, 1 of them is from the community)

• Fixed redirection to project snippets. !32530
• Fix Geo replication for design thumbnails. !32703
• Fix 404s downloading build artifacts. !32741
• Fix Auto DevOps manual rollout jobs not being allowed to fail. !32865
• Update deprecated routes in irker integration. !32923 (Marc Jeanmougin)
• Change format of variables parameter in Prometheus proxy API for metrics dashboard. !33062
• Fix issue and MR API performance regression when Markdown cache is stale. !33235
• Fix close issue when user created the issue. !33294

13.0.1 (2020-05-27)

Security (12 changes)

• Add an extra validation to Static Site Editor payload.
• Hide EKS secret key in admin integrations settings.
• Added data integrity check before updating a deploy key.
• Display only verified emails on notifications and profile page.
• Require confirmed email address for GitLab OAuth authentication.
• Kubernetes cluster details page no longer exposes Service Token.
• Fix confirming unverified emails with soft email confirmation flow enabled.
• Disallow user to control PUT request using mermaid markdown in issue description.
• Check forked project permissions before allowing fork.
• Limit memory footprint of a command that generates ZIP artifacts metadata.
• Fix file enuming using Group Import.
• Prevent XSS in the monitoring dashboard.

13.0.0 (2020-05-22)

Removed (20 changes, 5 of them are from the community)

• Remove project routes that were deprecated before 12.1. !26808
• Drop x-y-stable version pinning for Secure templates. !29603
• Remove logs from the admin pages. !30485
• Remove deprecated /admin/application_settings redirect. !30532
• Drop support for License-Management CI template. !30645
• Remove deprecated InfluxDB. !30786
• Remove deprecated Release Evidence endpoints. !30975
• Remove deprecated Release Evidence endpoints documentation. !30978
• Drop support for license_management artifact. !31247
• Remove deprecated container scanning report parser. !31294
• Remove rake task gitlab:track_deployment. !31404
• Remove token attribute from Runners API. !31448
• Remove support for Ruby format variable interpolation (%{variable}) in custom dashboards. !31581
• Remove JenkinsDeprecatedService. !31607 (tnwx)
• Remove ruby_memory_bytes metric, duplicate of ruby_process_resident_memory_bytes. !31705
• Remove project_list_show_mr_count feature flag. !31789 (Gilang Gumilar)
• Remove project_list_show_issue_count feature flag. !31793 (Gilang Gumilar)
• Remove set_user_last_activity feature flag. !31795 (Gilang Gumilar)
• Remove registrations_recaptcha feature flag. !31797 (Gilang Gumilar)
• Remove deprecated Sidekiq rake tasks.

Fixed (171 changes, 54 of them are from the community)

• Allow public access to pipeline schedules. !20806 (Lee Tickett)
• Add user last_activity logging in GraphQL. !23063
• Render TestReport parsing errors back to pipeline test summary. !24188
• Add user popovers to system notes. !24241
• Fix missing RSS feed events. !28054
• Resolve Text for future Release date grammatically incorrect. !28075
• Fix number of approvals given calculation. !28293 (Steffen Köhler)
• Always display new subgroup button when permission is granted. !28309 (Mattias Michaux)
• Correct the permission according to docs. !28657
• Fix duplicated activity and events on deletion of tag. !28861 (Sashi Kumar)
• Fix init.d script to correctly set web server PID. !29164
• Honor per_page in Search API. !29197
• fix: use the source project to generate commit links for un-persisted merge requests. !29243 (Chieh-Min Wang)
• Fix display of some overflowing merge request diffs. !29267
• Move prepend to last line in helper files. !29327 (Rajendra Kadam)
• Prevent duplicate tooltips when hovering over status emoji in comments. !29356
• Update Elastic Stack chart to 2.0.0 to support kubernetes 1.16. !29601
• Fix minor spacing issue at Snippet blob viewer. !29625 (Karthick Venkatesan)
• Eliminate errors in wiki controller during edit. !29645
• Fixed copy as GFM not copying upload links. !29683
• Bump max search depth from 2 to 4 when looking for files SAST analyzers can handle. !29732
• Move snippet raw_url attribute to base entity. !29776
• Return content from repo in snippet raw endpoint. !29781
• Return file name from repo in snippet endpoints. !29785
• Propagation of service templates also covers services with separate data tables. !29805
• Fix bug in personal snippets when somebody is mentioned. !29835 (Sashi Kumar)
• Embed metrics charts for both /metrics and /metrics_dashboard routes. !29838
• Fix admin mode access on GraphiQL controller. !29845 (Diego Louzán)
• Exclude html entities from haml lint. !29847 (Lee Tickett)
• Fixed JS error for anonymous views of a snippet. !29854
• Destroy Dropzone hidden input when form is destroyed. !29882
• Move prepend to last line in lib/gitlab files. !29938 (Rajendra)
• Match Jira keys with trailing characters. !29953
• Fixed Cancel action on Snippet edit for existing snippets. !29993
• Warn user before losing wiki content. !30037
• Move prepend to last line in lib/gitlab files. !30070 (Rajendra Kadam)
• Fix an issue where the Search dropdown results would not be clickable. !30087 (mbergeron)
• Capture all errors when updating repository storage. !30119
• Move alert management behind a feature flag. !30133
• Fix bug when services appear active even though they are not. !30160
• Fix moving an issue when there is a group reference. !30185
• Move prepend to last line in lib/gitlab files. !30194 (Rajendra Kadam)
• Move prepend to last line in lib/gitlab files. !30289 (Rajendra Kadam)
• Move prepend to last line in lib/gitlab files. !30291 (Rajendra Kadam)
• Set NULL lock_version values to 0 for CI objects. !30305
• Fix errors creating project with active Prometheus service template. !30340
• Add Activity icons for Wiki updated and destroyed events. !30349
• Gracefully handle orphaned member invites. !30355
• Fix incorrect commits number in commits list. !30412
• Fix second 500 error with NULL restricted visibility levels. !30414
• Move prepend to last line in ee/services. !30425 (Rajendra Kadam)
• Add LFS badge feature flag to RefsController#logs_tree. !30442
• Fix mirror repos docs link. !30443
• Added right margin to Clone Snippet button. !30471
• Fix blob link for the code search. !30473
• Use Jira import owner as the issue author when importing issues from Jira. !30504
• Correctly count wiki pages in sidebar. !30508
• Stretch heatmap metrics full column size. !30524
• Upgrade Unicorn to v5.5.1. !30541
• Avoid copying diffs as Markdown tables. !30572
• Fixes overlapping tooltips when clicking copy buttons. !30622
• Fix 500 error for non-existing snippet on graphql mutations. !30632 (Sashi Kumar)
• Change validation rules for profile email addresses. !30633
• Set timeout for Google OAuth to prevent 503 error. !30653
• Remove extra sleep when obtaining exclusive lease. !30654
• Fix GitLab CI/CD Scala template. !30667
• Fix checkmark position on dropdowns. !30685
• Remove Visibility from terraform widget. !30737
• Use migration bot user in snippet migration. !30762
• Fix discard button not showing for new empty files in Web IDE. !30767
• Disable schema dumping after migrations in production. !30812
• Fix mapping group membets as Jira issues authors/assignees. !30820
• Align styling of snippet search results. !30837
• Move daily create users statistics cronjob to CE. !30843
• Fixed alignment of Snippet Clone copy buttons. !30897
• Increase constrast ratio of text in some tables. !30903
• Ignore .gitattributes if they contain invalid byte sequences. !30922
• Fix bug in Snippet BlobViewer GraphQL definition. !30927
• Fix layout in issue view, on large screen some buttons were misaligned. !30947 (Michele (macno) Azzolari)
• Fix error renaming files using web IDE. !30969
• Handle Snippet file name errors in backfill. !30981
• Correctly track the store that external MR diffs are placed on. !31005
• Fix duplicate index removal on ci_pipelines.project_id. !31043
• Update recursive-open-struct to 1.1.1 to make it compatible with ruby 2.7. !31047
• Revert CODEOWNERS validation of Web requests in diff check. !31087
• Wrap wiki blob search result in its own object. !31155
• Allow multiple usage of EE extension/inclusion on last lines. !31183 (Rajendra Kadam)
• Fix 500 error loading environments index. !31184
• Fix 500 on creating an invalid domains and verification. !31190
• Fix redirect loop on .com when 2FA is required. !31229
• Fix regression and allow SCIM to create SAML identity. !31238
• Fix incorrect number of errors returned when querying sentry errors. !31252
• Fix RST rendering hanging on large files. !31287
• Trim whitespace in directory names in the Web IDE. !31305
• Fix 'not enough data' in Value Stream Analytics when low median values are returned. !31315
• Add tooltip to container registry tags last update column. !31317
• Fix Istio broken Istio metrics installation. !31382
• Link to subgroup milestones correctly from group milestones page. !31383
• Remove kwargs from storage move worker. !31412
• Make edit board text sentence case. !31418
• Katex render and vscode output improvements for markdown. !31433 (Reinhold Gschweicher pyro4hell@gmail.com)
• Fix overwrite check in GitLab import/export. !31439
• Fix API requests for branch names ending in .txt. !31446 (Daniel Stone)
• Avoid repository size checkings in snippet migrations for migration bot. !31473
• Use iso 8601 timestamp format in metrics dashboard annotations graphql resource to assure multi browser compatibility. !31474
• In WebIDE get files with relative path instead of web_url. !31478
• Fix snippet migration when user has invalid info. !31488
• Add elipsis to container registry tag name. !31584
• Add instance column to services table if it's missing. !31631
• Fix issue with broken images in Web IDE markdown. !31638
• Fixes bug where variables were not protected by default when using the correct CI/CD admin setting. !31655
• Decode dashboard_path when creating annotations. !31665
• Fix "how to checkout MR" help link. !31688
• Fixed redirection when deleting a project snippet. !31709
• Fix templates API endpoint when project name has dots. !31758
• Remove detection of file in Dependency Scanning template. !31819
• Move prepend to last line in app models. !31826 (Rajendra Kadam)
• Move prepend to last line in app models 2. !31827 (Rajendra Kadam)
• Move prepend to last line in app models 3. !31829 (Rajendra Kadam)
• Move include_if_ee to last line in ee/app 1. !31832 (Rajendra Kadam)
• Restore original sort order of the metrics dashboard select list. !31859
• Fix Snippet update error bug losing changes. !31873
• Replace the outdated link. !31874 (Renamoo)
• Replace let! with let_it_be in user api spec. !31901 (Rajendra Kadam)
• Replace let! with let_it_be in merge request spec. !31909 (Rajendra Kadam)
• angelog Replace let! with let_it_be in pipelines spec. !31916 (Rajendra Kadam)
• Fix public metrics dashboard visibility bug. !31925
• Add nested file detection for Dependency Scanning. !31932
• Add class stubs and fix leaky constant cop alert. !31938 (Rajendra Kadam)
• Add class stubs and fix leaky constant alert in content whitelist spec. !31946 (Rajendra Kadam)
• Fix broken heading of Vue 3 migration guide doc. !31951 (Gilang Gumilar)
• Add class stubs and fix leaky constant alert in query recorder spec. !31954 (Rajendra Kadam)
• Fix no scroll when overflow in IDE right pane. !31961
• Fix leaky constant cop issue in clone dashboard service spec. !31962 (Rajendra Kadam)
• Stub class constant in resolve discussion spec. !31965 (Rajendra Kadam)
• Fix leaky constant issue in upgrade progress service check. !31969 (Rajendra Kadam)
• Clear merge request error on push to source branch. !32001
• Allow only users with adminNote permission to edit the design note. !32035
• Fix leaky constant issue in retry build service check. !32038 (Rajendra Kadam)
• Fix leaky constant issue in env assignment spec. !32040 (Rajendra Kadam)
• Fix leaky constant issue in statistics api spec. !32042 (Rajendra Kadam)
• Fix leaky constant issue in merge request policy spec. !32044 (Rajendra Kadam)
• Fix leaky constant issue in tree spec. !32045 (Rajendra Kadam)
• Fix leaky constant issue in mentionable spec. !32049 (Rajendra Kadam)
• Fix leaky constant issue in json serialization spec. !32051 (Rajendra Kadam)
• Fix leaky constant issue in cluster spec. !32053 (Rajendra Kadam)
• Fix bug in Groups API when statistics are requested in an unauthenticated API call. !32057
• Fix leaky constant issue in nulls pt2 spec. !32058 (Rajendra Kadam)
• Fix leaky constant issue in application settings encrypt spec. !32066 (Rajendra Kadam)
• Fix leaky constant issue in system check spec. !32080 (Rajendra Kadam)
• Fix leaky constant issue in simple executor spec. !32082 (Rajendra Kadam)
• Fix leaky constant issue in jwt spec. !32093 (Rajendra Kadam)
• Update android template. !32096
• Fix leaky constant issue in factory spec. !32099 (Rajendra Kadam)
• Fix leaky constant issue in sidekiq middleware spec. !32101 (Rajendra Kadam)
• Fix leaky constant issue connection, master check and attr config spec. !32144 (Rajendra Kadam)
• Fix updating of Markdown fields when Markdown cache version is incremented. !32219
• Fix incorrect regex used in FileUploader#extract_dynamic_path. !32271
• Improve responses in the snippet create/update API endpoints. !32282
• Send Devise emails triggered from the 'Email' model asynchronously. !32286
• Re-enable negative filters for Boards. !32348
• Fix missing space character in alert header. !32395
• Fix display of embedded snippets. !32411 (Jan Beckmann)
• Fixed redirection to project snippets. !32530
• Rake task gitlab:cleanup:orphan_lfs_files should clear the cached value or repository size. !32541
• Fixed enabled merge button incorrectly showing to users who can't merge.
• Fixed misaligned avatar in commit discussion form.
• Fixed cancel reply button not alerting the user.
• Fixes commit message emojis not rendering in Vue file list.
• Fix logging of username in /jwt/auth.
• Fixes branch name not getting escaped correctly on frontend.

Deprecated (2 changes)

• Deprecate /plugins directory. !29678
• Implement external database checker in dashboard controller. !30389

Changed (121 changes, 42 of them are from the community)

• Support limits for offset based pagination. !28460
• Redirect issues routes under /-/ scope. !28655
• Add Fluentd into cluster apps page. !28847
• Disallow developers to delete builds of protected branches. !28881 (Alexander Kutelev)
• Store status of repository storage moves. !29095
• Update the example regex in the image expiration policy UI. !29348
• Add WAF and Cilium Log column for Fluentd table. !29457
• Update Fluentd model to support multiple logs. !29458
• Add Cilium to Fluentd UI controls on the Cluster Application page. !29511
• Use alerts instead of toasts in Image Repository details. !29685
• Avoid commit when snippet file_name and content are not present. !29761
• Recreate foreign key in project settings to use nullify instead of cascade. !29767
• Surface alerts add sidebar link. !29775
• Make setting alerts on the monitoring dashboard available to GitLab Core users. !29789
• Keep latest artifact for each ref. !29802
• Change placeholder in search input for Analytics features. !29858 (Gilang Gumilar)
• Test Jira connection before running import. !29926
• Remove snippet file_name from snippet lists. !29937
• Add new keep regex to expiration policy settings ui. !29940
• Alert management can user enable. !30024
• Expose the updated_at attribute in the todos API. !30035
• Update GitLab-managed helm from 2.16.3 to 2.16.6, improving the reliability of GitLab's Kubernetes integration. !30067
• Show correct label and count on Jira import form. !30072
• Copy pipelines routing under - scope. !30159
• Return validation errors for invalid pod name or container name when viewing pod logs. !30165 (Sashi Kumar)
• Move global autocomplete routes to /-/ scope. !30173
• Update the cancel comment note text to a less ambiguous statement. !30189
• Use stricter regex for broadcast target path. !30210
• Change wording of merge request threads counter. !30217
• Indicate topics are optional. !30264 (Ben Bodenmiller)
• Rename Client Side Evaluation to Live Preview. !30309
• Decouple partial clone config from max input size. !30354 (Son Luong Ngoc)
• Update managed jupyter chart to 0.9.0 (stable). !30393
• Hide broadcast messages until the end of the period. !30432
• Add severity icons for alert management. !30472
• Move to supported Elastic helm charts. !30528
• Updated snippet view to show path instead of name for a blob. !30550
• Handle possible RSA key exceptions when generating CI_JOB_JWT. !30702
• Update sidebar packages name. !30712
• Update cron job schedule to have a random time generated on page load. !30729
• Migrate Container-Scanning template to rules syntax. !30775
• Migrate DAST CI template to rules syntax. !30776
• Migrate License-Scanning CI template to rules syntax. !30784
• Code review analytics: Change margin between title and description. !30834
• Productivity Analytics: Remove separator and cleanup title margins. !30839
• Move Auto DevOps Test.gitlab-ci.yml template to rules syntax instead of only/except. !30876
• Change Var to Variable text. !30878
• Move Build.gitlab-ci.yml to rules syntax. !30895
• Move Code-Quality.gitlab-ci.yml to rules syntax. !30896
• Migrate Dependency-Scanning CI template to rules syntax. !30907
• Apply shared integrations view to project level. !30971
• Exposes description, hosts, details, and timestamps for Alert Management Alert GraphQL. !31091
• Update the example regex in the image expiration policy UI. !31104
• Add clear explanation to the MR widget when no CI is available and Pipeline must succeed option is activated. !31112
• Migrate SAST CI template to rules syntax. !31127
• Update style of buttons on the Releases page. !31129 (Özgür Adem Işıklı @iozguradem)
• Changed test success calculation to exclude skipped tests. !31154
• app:gitlab:check rake task now warns when projects are not in hashed storage. !31172
• Moves embedded metrics for Prometheus alerts to Core. !31203
• Move Deploy.gitlab-ci.yml to rules syntax. !31290
• Modify Snippet git path errors to be more helpful. !31333
• Move Browser-Perfomance-Testing.gitlab-ci.yml to rules syntax. !31413
• Use gsub instead of the Liquid gem for variable substitution in the Prometheus proxy API. !31482
• Changed terminology of security scanner status from configure to enable. !31503
• Update auto-deploy-image to v0.14.0 with helm 2.16.6, --atomic deployments and improved kubernetes 1.16 support. !31505
• Add ability to add or remove MR labels via API. !31522 (Lee Tickett)
• Disable Docker-in-Docker for Dependency Scanning by default. !31588
• Disable Docker-in-Docker for SAST by default. !31589
• Add migration to import changes to the system dashboard Prometheus queries into DB. !31618
• Ensure links generated by the copy link feature contain variables. !31636
• Migrate from Vue event hub to Mitt in issuables list. !31652 (Arun Kumar Mohan)
• URL params in the monitoring dashboard update variable values defined in yml file. !31662
• Migrate from Vue event hub to Mitt. !31666 (Arun Kumar Mohan)
• Add prefix to template variables in URL in the monitoring dashboard. !31690
• Add fields to GraphQL snippet blob type. !31710
• Make protected_ci_variables setting enabled by default. !31715
• Prepare group import feature to use ndjson. !31741
• Prepare group export feature to use ndjson. !31742
• Remove a lonely dot in Batch Comments. !31783 (Gilang Gumilar)
• Update auto-deploy-image to v0.15.0, with an upgraded PostgreSQL chart used by default for Auto DevOps deployments. !31799
• Force hashed storage to always be enabled. !31801
• Add alert counts by status to GraphQL API. !31818
• Show warning message to user if raw text search is used when filtering pipelines. !31942
• Update deprecated slot syntax in ./app/assets/javascripts/pages/milestones/shared/components/delete_milestone_modal.vue. !31990 (Gilang Gumilar)
• Update deprecated slot syntax in ./app/assets/javascripts/confidential_merge_request/components/dropdown.vue. !31999 (Gilang Gumilar)
• Update deprecated slot syntax in ./app/assets/javascripts/diffs/components/diff_discussions.vue. !32004 (Gilang Gumilar)
• Update deprecated slot syntax in ./app/assets/javascripts/boards/components/board_form.vue. !32005 (Gilang Gumilar)
• Update deprecated slot syntax in ./app/assets/javascripts/repository/components/breadcrumbs.vue. !32017 (Gilang Gumilar)
• Externalize i18n strings from ./app/views/users/calendar_activities.html.haml. !32094 (Gilang Gumilar)
• Externalize i18n strings from ./app/views/users/_deletion_guidance.html.haml. !32097 (Gilang Gumilar)
• Externalize i18n strings from ./app/views/shared/_ref_dropdown.html.haml. !32102 (Gilang Gumilar)
• Externalize i18n strings from ./app/views/shared/_recaptcha_form.html.haml. !32106 (Gilang Gumilar)
• Externalize i18n strings from ./app/views/shared/_project_limit.html.haml. !32110 (Gilang Gumilar)
• Externalize i18n strings from ./app/views/shared/_personal_access_tokens_table.html.haml. !32116 (Gilang Gumilar)
• Externalize i18n strings from ./app/views/shared/_milestones_filter.html.haml. !32120 (Gilang Gumilar)
• Externalize i18n strings from ./app/views/shared/_milestone_expired.html.haml. !32121 (Gilang Gumilar)
• Externalize i18n strings from ./app/views/shared/_label_row.html.haml. !32124 (Gilang Gumilar)
• Externalize i18n strings from ./app/views/shared/_group_tips.html.haml. !32127 (Gilang Gumilar)
• Externalize i18n strings from ./app/views/shared/_group_form.html.haml. !32132 (Gilang Gumilar)
• Externalize i18n strings from ./app/views/shared/_field.html.haml. !32136 (Gilang Gumilar)
• Externalize i18n strings from ./app/views/shared/_delete_label_modal.html.haml. !32138 (Gilang Gumilar)
• Externalize i18n strings from ./app/views/shared/_commit_message_container.html.haml. !32139 (Gilang Gumilar)
• Externalize i18n aria-label strings from ./app/views/shared/*. !32142 (Gilang Gumilar)
• Externalize i18n strings from ./app/views/shared/milestones/_top.html.haml. !32148 (Gilang Gumilar)
• Externalize i18n strings from ./app/views/shared/milestones/_milestone.html.haml. !32154 (Gilang Gumilar)
• Externalize i18n strings from ./app/views/shared/milestones/_merge_requests_tab.haml. !32158 (Gilang Gumilar)
• Externalize i18n strings from ./app/views/shared/milestones/_labels_tab.html.haml. !32159 (Gilang Gumilar)
• Externalize i18n strings from ./app/views/shared/milestones/_issues_tab.html.haml. !32160 (Gilang Gumilar)
• Externalize i18n strings from ./app/views/shared/milestones/_issuable.html.haml. !32161 (Gilang Gumilar)
• Externalize i18n strings from ./app/views/shared/issuable/_sidebar.html.haml. !32164 (Gilang Gumilar)
• Externalize i18n strings from ./app/views/shared/issuable/_nav.html.haml. !32165 (Gilang Gumilar)
• Externalize i18n strings from ./app/views/shared/issuable/label*. !32167 (Gilang Gumilar)
• Externalize i18n strings from ./app/views/shared/issuable/_close_reopen_report_toggle.html.haml. !32168 (Gilang Gumilar)
• Externalize i18n strings from ./app/views/shared/issuable/_close_reopen_button.html.haml. !32172 (Gilang Gumilar)
• Externalize i18n strings from ./app/views/shared/issuable/_bulk_update_sidebar.html.haml. !32173 (Gilang Gumilar)
• Add files param to snippet create mutation. !32309
• Cluster index refactor: Add missing pagination. !32338
• Refactored render errors for blob to Vue. !32345
• Format the alert payload into a table view. !32423
• Add presence validation to content and title in snippet rest endpoints. !32522
• Fix jump to definition linking to same file opening a new tab.

Performance (15 changes, 2 of them are from the community)

• Speed up NOT Issue filters. !27639
• Add indexes on ingress, enabled clusters and successful deployments. !28331
• Add clusters index to improve usage data queries. !28626
• Uses Kubernetes API conventions to create or update a resource leandrogs. !29010 (Leandro Silva)
• Cache TreeSummary response for logs_tree. !29828
• Move release notification from model callbacks to service. !29853 (Ravishankar)
• Delete orphaned rows in application_settings table. !29981
• Improve cacheability of monaco-editor code. !30032
• Project import queries are now partially batched. !30057
• Upgrade json gem to 2.3.0. !30852
• Use process-wide cache for application settings and performance bar. !31135
• Record usage ping finish time. !31222
• Use NOT VALID to enforce a not null constraint on file store columns. !31261
• Enable ref name caching for merge request diffs. !31530
• Skip mergeability check when listing MRs in the API. !31890

Added (146 changes, 13 of them are from the community)

• Graphql query for issues can now be sorted by priority. !18901
• Add test report API route. !24648
• Add GraphQL support for querying a board's lists. !24812
• Define remove_label quick action as alias of unlabel. !24962 (Jacopo Beschi @jacopo-beschi)
• Create Wiki activity events on pushes to Wiki git repository. !26624
• Allow users to download a CSV of the recent daily code coverage values per job. !27094
• Display x509 signed tags. !27211 (Roger Meier)
• Enabling git versioned snippets. !27705
• Add option to hide the default "thumbs up" and "thumbs down" buttons on issues, merge requests, and snippets. !27734 (Steve Mokris)
• Add sorting issues by label priority to graphQL endpoint. !27936
• Add certification revocation list download and certificate revoke. !28336 (Roger Meier)
• Add WebIDE Dark Theme Support. !28407
• Add secure binaries template. !28566
• LDAP authentication support for admin mode. !28572 (Diego Louzán)
• Add UI for exporting group data to the group settings. !28573
• Allow to assign milestones to a release on the "Edit Release page". !28583
• Add Previous and Next buttons for commit-by-commit navigation. !28596
• Add the global var SECURE_ANALYZERS_PREFIX. !28617
• Allow users to retry obtaining Let's Encrypt certificates for GitLab Pages. !28784
• Add support for cluster applications CI artifact report. !28866
• Add resource_state_events table. !28926
• Migration to add partitioned_foreign_keys table that tracks foreign keys for partitioned tables. !29064
• Collect object store config in usage data. !29149
• Add freeze period model. !29162
• Moved issue board focus mode to Core and available for for everyone. !29200
• Add freeze periods via CI_DEPLOY_FREEZE variable. !29244
• Add intermediate CAs capability to S/MIME email signature. !29352 (Diego Louzán)
• Add responding to ChatOps jobs triggered in Mattermost. !29366 (Brian Kintz)
• Expose Freeze Periods in REST API. !29382
• Add read/write_package_registry to deploy_tokens. !29383
• Add public API for feature flag user lists. !29415
• Create cluster annotations API endpoint. !29502
• Add ability to change metrics dashboard visibility. !29634
• Add percentage of actors feature flag rollout. !29698
• Add metric dashboard public visibility toggle. !29718
• Route to feature flags based on internal id. !29740
• Send email notification for unknown sign-ins. !29741
• Add search by name to registry image repositories. !29763
• Surface alerts add empty state. !29775
• Enable uploadpack filters by default. !29787
• Select the first option if there is only one metric option on alerts dropdown. !29857 (Gilang Gumilar)
• Add table for Alert Management alerts. !29864
• Add policies for managing 'default_branch_protection' setting in groups. !29879
• Add comment_detail column to services. !29891
• Add option to add custom profile image guidelines. !29894 (Roger Meier)
• View a details of a panel in 'full screen mode'. !29902
• Add database relation to preserve users starred metrics dashboard information. !29912
• Add jira imports to usage data. !29925
• Add issues_create_limit to settings api. !29960
• Map labels from Jira to labels in GitLab. !29970
• Add Deployment to ECS process to AutoDevOps. !29971
• GraphQL issue queries can now be sorted by milestone due date. !29992
• Add table for tracking issues published to status page. !29994
• Create Sprints table and barebones model. !30125
• When viewing a single panel, return to a full dashboard by pressing the Escape key. !30126
• Flesh out Sprints relationships and constraints. !30127
• Add GraphQL type for reading Alert Management Alerts. !30140
• Add ability to query Projects using GraphQL API. !30146
• Add web_url to branch API response. !30147
• Fix Jira importer URLs. !30155
• Add migrations for global CI variables. !30156
• Add vue routes support to Static Site Editor. !30163
• Integrate CI instance variables in the build process. !30186
• Add raw_blob_request_limit to Application Settings API. !30211
• Empty state for alerts list. !30215
• Create operations_strategies_user_lists table. !30243
• Adds URL parameter for confidential new issue creation. !30250
• Update Jira comment to include more information. !30258
• Add scheduled_at field to jira_imports table. !30284
• Alerts list loading & error state. !30315
• Deploy token authentication for API with Maven endpoints. !30332
• Add metrics dashboard annotations feature, which enables marking interesting events over metrics dashboard charts. !30371
• Add non_archived argument to issues API endpoint. !30381
• Add admin controller actions for interacting with instance variables. !30385
• Add mutation to create a new branch in GraphQL. !30388
• Introduce API for fetching shared projects in a group. !30461
• Display expanded dashboard from a panel's "Link to chart" URL. !30476
• Resolve Design Comment: Edit Comment text. !30479
• Map Jira issue assignee and author. !30498
• Add email notification on group export complete. !30522
• Add option to restrict emails that match a configured regular expression. !30548
• In metrics dashboard use custom variables from URL in queries. !30560
• Add mutation for AlertManagement's Alert status. !30576
• Multiple metrics edit navigates to prom edit page. !30666
• Update metrics dashboard url when a panel is expanded or contracted. !30704
• Add migration bot user. !30738
• Issues Analytics: Add title to page. !30836
• Contribution Analytics: Add title to page. !30842
• Insights Analytics: Add title to page. !30853
• Repository Analytics: Add title to page. !30855
• CI / CD Analytics: Add title to page. !30891
• Enable Monaco for editing Snippets by default. !30892
• Disabled Edit button for binary snippets. !30904
• Monokai and Solarized Dark syntax highlighting theme for Web IDE. !30931
• Updated deprecated buttons in release page. !30941 (Özgür Adem Işıklı @iozguradem)
• Add sorting to AlertManagement Alert Graphql. !30964
• Web IDE: Introduce syntax highlighting for .vue files. !30986
• Solarized light syntax highlighting theme for the Web IDE. !30989
• Deploy tokens can be used in the API with Basic Auth Headers enabling NuGet and PyPI to be used with deploy tokens. !31035
• Skip spam check for GitLab team members on gitlab.com. !31052
• None syntax highlighting theme for Web IDE. !31056
• Issues Analytics: Add title to group-level page. !31057
• Display metrics dashboards starred by user at the top of dashboard select field. !31059
• Add WYSIWYG editor to the Static Site Editor. !31099
• Conan registry is accessible using deploy tokens. !31114
• Add container registry settings to application_settings table. !31125
• Added provider icon to cluster index display. !31134
• Add a CI variable CI_KUBERNETES_ACTIVE as an alternative to only:kubernetes/except:kubernetes that works with the rules syntax. !31146
• Enable Alert Management functionality. !31171
• Allow monitoring dashboard users to open single panels in a new tab. !31206
• Create dashboard annotations via Graphql. !31249
• Enable deploy token authentication for the NPM registry. !31264
• Add read and write package registry scopes to deploy tokens. !31267
• Read only storage move API. !31285
• Add Design Management (via Designs tab on Issues) to GitLab FOSS. !31309
• Exposes issue IID in Alert Management Alert's GraphQL endpoint. !31313
• New API endpoint for starring metrics dashboards. !31316
• Add search bar to container registry image list. !31322
• Highlight focused Design discussion in image markers. !31323
• Allow showing merge request diffs compared to current version of target branch. !31325
• Add alert on project issues page to show Jira import is in progress. !31329
• Add API CRUD actions for instance-level CI/CD variables. !31342
• Add alert on project issues page to show Jira import has finished. !31375
• Filter pipelines by trigger author and branch name. !31386
• Add incident_labeled_issues to usage ping. !31406
• Refactored Snippet view to Vue. !31450
• Make report-type artifacts available for download. !31513
• Render dropdown and text elements based on variables defined in monitoring dashboard yml file. !31524
• Add expunge deleted messages option to mailroom. !31531 (Diego Louzán)
• Log Cloudflare request headers. !31532
• Allow Web IDE markdown to preview uncommitted images. !31540
• Add Webex Teams project integration service. !31543 (Sebastian Leuser)
• Add Rubocop cop to flag keyword arguments usage in Sidekiq workers. !31551 (Arun Kumar Mohan)
• Allow users to star/unstar dashboards which will appear at the top of their dashboards options. !31597
• Add ability to create merge request from vulnerability page. !31620
• Add confidential status support for comment and replies. !31622
• Add Web IDE pipelines usage counter. !31658
• Ruby metrics now include USS and PSS memory readings. !31707
• Add issues_created_gitlab_alerts to usage ping. !31802
• Add Alert Detail view. !31877
• New API endpoint for removing stars from metrics dashboards. !31892
• View raw file of any zip artifacts. !31912
• Add search to Alert Management Alerts GraphQL query. !32047
• Add "Keep divergent refs" option for push mirrors. !32381
• Add fields to Alert Details view. !32392
• Update GitLab Pages to 1.18.0.

Other (70 changes, 25 of them are from the community)

• Remove Admin -> Settings -> Geo navigation. !21005 (Lee Tickett)
• removes store logic from issue board models. !21400 (nuwe1)
• removes store logic from issue board models. !21408 (nuwe1)
• Moves updateIssue from issue model to board store. !21414 (nuwe1)
• Improve error handling of squash and rebase. !23740
• Remove obsolete bot_type column. !27076
• Remove obsolete columns from resource_milestone_events. !28536
• Add index to issue_id and created_at of resource_weight_events. !28930
• Clean up & Re-arrange the keyboard shortcuts modal. !28992
• Remove ci_expose_arbitrary_artifacts_in_mr feature flag. !29363 (Lee Tickett)
• Remove git_archive_path feature flag. !29369 (Lee Tickett)
• Rename Snippet search results title. !29599
• Update to Rails 6.0.2.2. !29743
• Log server responses of API bad requests in api_json.log. !29839
• Clean up refresh fix for cancel automatic merge. !29844
• Add snippet repository backfilling migration. !29927
• Remove the SIDEKIQ_REQUEST_STORE configuration. !29955
• Increase label list label column width. !29963
• Refactor count queries to single query on Projects::EnvironmentsController. !30073 (Sashi Kumar)
• Update text on self-managed sign in page. !30135
• Remove namespaces.plan_id column. !30351
• Migrate models and policies specs to consider admin mode. !30430 (Diego Louzán)
• Upgrade Nokogiri to v1.10.9. !30435
• Add snippet migration rake tasks. !30489
• Error tracking target blank empty state. !30525
• Remove elasticsearch_experimental_indexer column. !30628
• Update the template for Static Site Editor / Middleman. !30642
• Remove unused cluster configuration workers. !30695
• Remove deprecated Snippet code attribute from Project Snippets API. !30739
• Update merge request widget question mark icons. !30759
• Value Stream Analytics: Add title and remove separator. !30841
• Remove mention of github-markup in Wiki clone help. !30962
• Alert Management mobile styling. !31082
• Allow Auto DevOps Test stage to start immediately. !31185
• Enable async_merge_request_check_mergeability by default. !31196
• Cleanup background migration for populating user_highest_roles table. !31218
• Add docs for alert management list. !31225
• Remove extra spaces from markdown toolbar items. !31288
• Use cookies with metadata to prevent reuse as another cookie. !31311
• Add inherit_from_id column to services table. !31320
• Organize package models by package type. !31346 (Sashi Kumar)
• Apply active class on active link element in HAML pagination. !31396
• Update GitLab Runner Helm Chart to 0.16.1. !31492
• Log when container registry permissions are denied. !31536
• Add epic_id to resource_state_events. !31587
• Update doorkeeper to latest version 5.0.3. !31673
• Add Foreign Key on projects.namespaces_id. !31675
• Fix misalignment of author dropdown on the commits search page. !31686
• Update css-loader ^1.0.0 -> ^2.1.1. !31743 (Pirate Praveen)
• Fix database schema inconsistency with not-null checks. !31930
• Removes create_confidential_merge_request feature flag leandrogs. !31968 (Leandro Silva)
• Update deprecated slot syntax in ./app/assets/javascripts/issue_show/components/fields/description.vue. !31979 (Gilang Gumilar)
• Update deprecated slot syntax in ./app/assets/javascripts/pages/milestones/shared/components/promote_milestone_modal.vue. !31980 (Gilang Gumilar)
• Update group and project export info messages. !31981 (briankabiro)
• Relocate Nuget presenter helpers to presenters module. !31985 (Sashi Kumar)
• Update deprecated slot syntax in ./app/assets/javascripts/pages/admin/users/components/delete_user_modal.vue. !31992 (Gilang Gumilar)
• Update deprecated slot syntax in ./app/assets/javascripts/performance_bar/components/detailed_metric.vue. !32006 (Gilang Gumilar)
• Update deprecated slot syntax in ./app/assets/javascripts/profile/account/components/delete_account_modal.vue. !32007 (Gilang Gumilar)
• Update deprecated slot syntax in ./app/assets/javascripts/environments/components/stop_environment_modal.vue. !32012 (Gilang Gumilar)
• Update deprecated slot syntax in ./app/assets/javascripts/serverless/components/area.vue. !32015 (Gilang Gumilar)
• Update deprecated slot syntax in ./app/assets/javascripts/releases/components/app_edit.vue. !32018 (Gilang Gumilar)
• Update deprecated slot syntax in ./app/assets/javascripts/releases/components/evidence_block.vue. !32019 (Gilang Gumilar)
• Update deprecated slot syntax in ./app/assets/javascripts/ide/components/ide_review.vue. !32025 (Gilang Gumilar)
• Update deprecated slot syntax in ./app/assets/javascripts/ide/components/pipelines/list.vue. !32027 (Gilang Gumilar)
• Update alert management table background colour to correct gray. !32068
• Validate package types in package metadatum models. !32091 (Sashi Kumar)
• Update error tracking table background colour to correct gray. !32133
• Update GitLab Elasticsearch Indexer to v2.3.0. !32199
• Update asciidoctor-plantuml gem to v0.0.12. !32376
• Use visitUrl in Alert management. !32414

12.10.14 through 12.0.0

• See changelogs/archive-12.md

11.11.8 through 11.0.0

• See changelogs/archive-11.md

10.8.6 through 10.0.0

• See changelogs/archive-10.md

9.5.10 through 0.8.0

• See changelogs/archive.md