Do not validate CSRF token in API unless needed

Closes #35705

See merge request !13256

Remove test gitaly when older than version file

See merge request !13250

Fly-out dropdown menu in new sidebar

Closes #34026

See merge request !12938

Fix Prometheus application settings help link to point to Prometheus help page

Closes #33921

See merge request !13258

Disable the Rails/Delegate cop

Closes #35869

See merge request !13267

Empty project factory by default

See merge request !13260

See https://gitlab.com/gitlab-org/gitlab-ce/issues/35869 for the
rationale.
Signed-off-by: Rémy Coutable <remy@rymai.me>

Change project FK migration to skip existing FKs

Closes #35243

See merge request !13235

This reverts commit ba8bcdab.

This reverts commit a89231ca.

Move monaco loader init function to its own helper and moved repo vm init to its own file to be invoked by bundle entry point

Add icons to project sidebar

Closes #34027 and #35877

See merge request !13204

Uniquify reserved word usernames on OAuth user creation

See merge request !13244

Synchronous zanata community contribution translation

Closes #35003

See merge request !13242

Show auto-generated avatars in Groups dashboard tree for Groups without avatars

See merge request !13188

Make Delete Merged Branches handle wildcard protected branches correctly

Closes #35592

See merge request !13251