Escape username and password in UrlSanitizer#full_url

See merge request gitlab-org/gitlab-ce!20684

Use rugged to validate ref name

Closes #49043

See merge request gitlab-org/gitlab-ce!20669

Rails5 fix user sees revert modal spec

See merge request gitlab-org/gitlab-ce!20706

Delete UserActivities and related workers

Closes #43312

See merge request gitlab-org/gitlab-ce!20597

Add button to regenerate 2FA codes.

Closes #48408

See merge request gitlab-org/gitlab-ce!20295

If a user uses a password with certain characters (e.g. /, #, +, etc.)
UrlSanitizer#full_url will generate an invalid URL that cannot be
parsed properly by Addressable::URI. If used with UrlBlocker, this
will be flagged as an invalid URI.

Improve email address parsing

Closes #44676

See merge request gitlab-org/gitlab-ce!18192

Incorporate Gitaly's RefService.FindAllRemoteBranches RPC

See merge request gitlab-org/gitlab-ce!20701

If you enter the following RFC 2822 compliant address:
`John Doe <john@doe.com>`

Gitlab will attempt to send three emails:
1) John
2) Doe
3) john@doe.com

With this change given the following:
`John Doe <johndoe@example.com>`
`Jane Doe <janedoe@example.com>`

Gitlab will send emails to `johndoe@example.com` and `janedoe@example.com`

Limit the TTL for anonymous sessions to 1 hour

Closes #48101

See merge request gitlab-org/gitlab-ce!20700

By default, all sessions are given the same expiration time configured in the
session store (e.g. 1 week). However, unauthenticated users can generate a lot
of sessions, primarily for CSRF verification. It makes sense to reduce the TTL
for unauthenticated to something much lower than the default (e.g. 1 hour) to
limit Redis memory. In addition, Rails creates a new session after login,
so the short TTL doesn't even need to be extended.

Closes #48101

Proper icon validator

Closes #49236

See merge request gitlab-org/gitlab-ce!20620

Toggle Show / Hide Button for Kubernetes Password

Closes #49193

See merge request gitlab-org/gitlab-ce!20659

Resolve "Fix arrow for popovers on monitoring graph"

Closes #41784

See merge request gitlab-org/gitlab-ce!20655

Fix rendering context lines on MR diffs

Closes #49242 and #49343

See merge request gitlab-org/gitlab-ce!20642

Closes #49193.

Resolve "Add support for tar.gz AUTO_DEVOPS_CHART charts"

Closes #49324

See merge request gitlab-org/gitlab-ce!20691

Fix autosave issues for MR discussions

Closes #48876 and #48877

See merge request gitlab-org/gitlab-ce!20569

Merge branch '49369-failure-in-qa-specs-features-ee-geo-attachment_replication_spec-rb' into 'master'

Resolve "Failure in qa/specs/features/ee/geo/attachment_replication_spec.rb"

Closes #49369

See merge request gitlab-org/gitlab-ce!20692

Point to charts docs for beta limitations of the gitlab chart.

See merge request gitlab-org/gitlab-ce!20690

Fix serialization of LegacyDiffNote

Closes #49355

See merge request gitlab-org/gitlab-ce!20685

Remove background color from card-body style

Closes #49350

See merge request gitlab-org/gitlab-ce!20689

Fix filename for accelerated uploads

See merge request gitlab-org/gitlab-ce!20672

Remove RevList class

See merge request gitlab-org/gitlab-ce!20087

Signed-off-by: Rémy Coutable <remy@rymai.me>

Update _form.html.haml (deploy tokens) to improve display of scopes

See merge request gitlab-org/gitlab-ce!20578

Improve projects indexes

See merge request gitlab-org/gitlab-ce!20377

After trying to remove the whole method in
8f69014af2902d8d53fe931268bec60f6858f160, this is a more gentle
approach to the method. :)

Prior to this change, new commit detection wasn't implemented in Gitaly,
this was done through: https://gitlab.com/gitlab-org/gitaly/merge_requests/779

As the new implemented got moved around a bit, the whole RevList class
got removed.

Part of https://gitlab.com/gitlab-org/gitaly/issues/1233

Fix showing outdated discussions on Changes tab.

Closes #48167

See merge request gitlab-org/gitlab-ce!20445