Update CHANGELOG.md for 11.7.0

[ci skip]

CHANGELOG.md

@@ -2,6 +2,192 @@
 documentation](doc/development/changelog.md) for instructions on adding your own
 entry.
 
+## 11.7.0 (2019-01-22)
+
+### Security (14 changes, 1 of them is from the community)
+
+- Escape label and milestone titles to prevent XSS in GFM autocomplete. !2693
+- Bump Ruby on Rails to 5.0.7.1. !23396 (@blackst0ne)
+- Delete confidential todos for user when downgraded to Guest.
+- Project guests no longer are able to see refs page.
+- Set URL rel attribute for broken URLs.
+- Prevent leaking protected variables for ambiguous refs.
+- Authorize before reading job information via API.
+- Allow changing group CI/CD settings only for owners.
+- Fix SSRF with import_url and remote mirror url.
+- Don't expose cross project repositories through diffs when creating merge reqeusts.
+- Validate bundle files before unpacking them.
+- Issuable no longer is visible to users when project can't be viewed.
+- Escape html entities in LabelReferenceFilter when no label found.
+- Prevent private snippets from being embeddable.
+
+### Removed (3 changes, 1 of them is from the community)
+
+- Removes all instances of deprecated Gitlab Upgrader calls. !23603 (@jwolen)
+- Removed discard draft comment button form notes. !24185
+- Remove migration to backfill project_repositories for legacy storage projects. !24299
+
+### Fixed (42 changes, 7 of them are from the community)
+
+- Prevent awards emoji being updated when updating status. !23470
+- Allow merge after rebase without page refresh on FF repositories. !23572
+- Prevent admins from attempting hashed storage migration on read only DB. !23597
+- Correct the ordering of metrics on the performance dashboard. !23630
+- Display empty files properly on MR diffs. !23671 (Sean Nichols)
+- Allow GitHub imports via token even if OAuth2 provider not configured. !23703
+- Update header navigation theme colors. !23734 (George Tsiolis)
+- Fix login box bottom margins on signin page. !23739 (@gear54)
+- Return an ApplicationSetting in CurrentSettings. !23766
+- Fix bug commenting on LFS images. !23812
+- Only prompt user once when navigating away from file editor. !23820 (Sam Bigelow)
+- Display commit ID for discussions made on merge request commits. !23837
+- Stop autofocusing on diff comment after initial mount. !23849
+- Fix object storage not working properly with Google S3 compatibility. !23858
+- Fix project calendar feed when sorted by priority. !23870
+- Fix edit button disappearing in issue title. !23948 (Ruben Moya)
+- Aligns build loader animation with the job log. !23959
+- Allow 'rake gitlab:cleanup:remote_upload_files' to read bucket files without having permissions to see all buckets. !23981
+- Correctly externalize pipeline tags. !24028
+- Fix error when creating labels in a new issue in the boards page. !24039 (Ruben Moya)
+- Use 'parsePikadayDate' to parse due date string. !24045
+- Fix commit SHA not showing in merge request compare dropdown. !24084
+- Remove top margin in modal header titles. !24108
+- Drop Webhooks from project import/export config. !24121
+- Only validate project visibility when it has changed. !24142
+- Resolve About this feature link should open in new window. !24149
+- Add syntax highlighting to suggestion diff. !24156
+- Fix Bitbucket Server import only including first 25 pull requests. !24178
+- Enable caching for records which primary key is not `id`. !24245
+- Adjust applied suggestion reverting previous changes. !24250
+- Fix unexpected exception by failure of finding an actual head pipeline. !24257
+- Fix broken templated "Too many changes to show" text. !24282
+- Fix requests profiler in admin page not rendering HTML properly. !24291
+- Fix no avatar not showing in user selection box. !24346
+- Upgrade to gitaly 1.12.1. !24361
+- Fix runner eternal loop when update job result. !24481
+- Fix notification email for image diff notes.
+- Fixed merge request diffs empty states.
+- Fixed diff suggestions removing dashes.
+- Don't hide CI dropdown behind diff summary. (gfyoung)
+- Fix spacing on discussions.
+- Fixes missing margin in releases block.
+
+### Changed (22 changes, 8 of them are from the community)
+
+- Show clusters of ancestors in cluster list page. !22996
+- Remove unnecessary line before reply holder. !23092 (George Tsiolis)
+- Make the Pages permission setting more clear. !23146
+- Disable merging of labels with same names. !23265
+- Allow basic authentication on go get middleware. !23497 (Morty Choi @mortyccp)
+- No longer require email subaddressing for issue creation by email. !23523
+- Adjust padding of .dropdown-title to comply with design specs. !23546
+- Make commit IDs in merge request discussion header monospace. !23562
+- Update environments breadcrumb. !23751 (George Tsiolis)
+- Add date range in milestone change email notifications. !23762
+- Require Knative to be installed only on an RBAC kubernetes cluster. !23807 (Chris Baumbauer)
+- Fix label and header styles in the job details sidebar. !23816 (Nathan Friend)
+- Add % prefix to milestone reference links. !23928
+- Reorder sidebar menu item for group clusters. !24001 (George Tsiolis)
+- Support CURD operation for Links as one of the Release assets. !24056
+- Upgrade Omniauth and JWT gems to switch away from Google+ API. !24068
+- Renames Milestone sort into Milestone due date. !24080 (Jacopo Beschi @jacopo-beschi)
+- Discussion filter only displayed in discussions tab for merge requests. !24082
+- Make RBAC enabled default for new clusters. !24119
+- Hashed Storage: Only set as `read_only` when starting the per-project migration. !24128
+- Knative version bump 0.1.3 -> 0.2.2. (Chris Baumbauer)
+- Show message on non-diff discussions.
+
+### Performance (7 changes)
+
+- Fix some N+1 queries related to Admin Dashboard, User Dashboards and Activity Stream. !23034
+- Add indexes to speed up CI query. !23188
+- Improve the loading time on merge request's discussion page by caching diff highlight. !23857
+- Cache avatar URLs and paths within a request. !23950
+- Improve snippet search performance by removing duplicate counts. !23952
+- Skip per-commit validations already evaluated. !23984
+- Fix timeout issues retrieving branches via API. !24034
+
+### Added (29 changes, 6 of them are from the community)
+
+- Handle ci.skip push option. !15643 (Jonathon Reinhart)
+- Add NGINX 0.16.0 and above metrics. !22133
+- Add project milestone link. !22552
+- Support tls communication in gitaly. !22602
+- Add option to make ci variables protected by default. !22744 (Alexis Reigel)
+- Add project identifier as List-Id email Header to ease filtering. !22817 (Olivier Crête)
+- Add markdown helper buttons to file editor. !23480
+- Allow to include templates in gitlab-ci.yml. !23495
+- Extend override check to also check arity. !23498 (Jacopo Beschi @jacopo-beschi)
+- Add importing of issues from CSV file. !23532
+- Add submit feedback link to help dropdown. !23547
+- Send a notification email to project maintainers when a mirror update fails. !23595
+- Restore Object Pools when restoring an object pool. !23682
+- Creates component for release block. !23697
+- Configure Auto DevOps deployed applications with secrets from prefixed CI variables. !23719
+- Add name, author_id, and sha to releases table. !23763
+- Display a list of Sentry Issues in GitLab. !23770
+- Releases API. !23795
+- Creates frontend app for releases. !23796
+- Add new pipeline variable CI_COMMIT_SHORT_SHA. !23822
+- Create system notes on issue / MR creation when labels, milestone, or due date is set. !23859
+- Adds API documentation for releases. !23901
+- Add API Support for Kubernetes integration. !23922
+- Expose CI/CD predefined variable `CI_API_V4_URL`. !23936
+- Add Knative metrics to Prometheus. !23972 (Chris Baumbauer)
+- Use reports syntax for Dependency scanning in Auto DevOps. !24081
+- Allow to include files from another projects in gitlab-ci.yml. !24101
+- User Popovers for Commit Infos, Member Lists and Snippets. !24132
+- Add no-color theme for syntax highlighting. (khm)
+
+### Other (45 changes, 30 of them are from the community)
+
+- Redesign project lists UI. !22682
+- [Rails5.1] Update functional specs to use new keyword format. !23095 (@blackst0ne)
+- Update a condition to visibility a merge request collaboration message. !23104 (Harry Kiselev)
+- Remove framework/mobile.scss. !23301 (Takuya Noguchi)
+- Passing the separator argument as a positional parameter is deprecated. !23334 (Jasper Maes)
+- Clarifies docs about CI `allow_failure`. !23367 (C.J. Jameson)
+- Refactor issuable sidebar to use serializer. !23379
+- Refactor the logic of updating head pipelines for merge requests. !23502
+- Allow user to add Kubernetes cluster for clusterable when there are ancestor clusters. !23569
+- Adds explanatory text to input fields on user profile settings page. !23673
+- Externalize strings from `/app/views/shared/notes`. !23696 (Tao Wang)
+- Remove rails 4 support in CI, Gemfiles, bin/ and config/. !23717 (Jasper Maes)
+- Fix calendar events fetching error on private profile page. !23718 (Harry Kiselev)
+- Update GitLab Workhorse to v8.0.0. !23740
+- Hide confidential events in the API. !23746
+- Changed Userpopover Fixtures and shadow color. !23768
+- Fix deprecation: Passing conditions to delete_all is deprecated. !23817 (Jasper Maes)
+- Fix deprecation: Passing ActiveRecord::Base objects to sanitize_sql_hash_for_assignment. !23818 (Jasper Maes)
+- Remove rails4 specific code. !23847 (Jasper Maes)
+- Remove deprecated ActionDispatch::ParamsParser. !23848 (Jasper Maes)
+- Fix deprecation: Comparing equality between ActionController::Parameters and a Hash is deprecated. !23855 (Jasper Maes)
+- Fix deprecation: Directly inheriting from ActiveRecord::Migration is deprecated. !23884 (Jasper Maes)
+- Fix deprecation: alias_method_chain is deprecated. Please, use Module#prepend instead. !23887 (Jasper Maes)
+- Update specs to exclude possible false positive pass. !23893 (@blackst0ne)
+- Passing an argument to force an association to reload is now deprecated. !23894 (Jasper Maes)
+- ActiveRecord::Migration -> ActiveRecord::Migration[5.0]. !23910 (Jasper Maes)
+- Split bio into individual line in extended user tooltips. !23940
+- Fix deprecation: redirect_to :back is deprecated. !23943 (Jasper Maes)
+- Fix deprecation: insert_sql is deprecated and will be removed. !23944 (Jasper Maes)
+- Upgrade @gitlab/ui to 1.16.2. !23946
+- convert specs in javascripts/ and support/ to new syntax. !23947 (Jasper Maes)
+- Remove deprecated xhr from specs. !23949 (Jasper Maes)
+- Remove app/views/shared/issuable/_filter.html.haml. !24008 (Takuya Noguchi)
+- Fix deprecation: Using positional arguments in integration tests. !24009 (Jasper Maes)
+- UI improvements for redesigned project lists. !24011
+- Update cert-manager chart from v0.5.0 to v0.5.2. !24025 (Takuya Noguchi)
+- Hide spinner on empty activites list on user profile overview. !24063
+- Don't show Auto DevOps enabled banner for projects with CI file or CI disabled. !24067
+- Update GitLab Runner Helm Chart to 0.1.43. !24083
+- Fix navigation style in docs. !24090 (Takuya Noguchi)
+- Remove gem install bundler from Docker-based Ruby environments. !24093 (Takuya Noguchi)
+- Fix deprecation: Using positional arguments in integration tests. !24110 (Jasper Maes)
+- Fix deprecation: returning false in Active Record and Active Model callbacks will not implicitly halt a callback chain. !24134 (Jasper Maes)
+- ActiveRecord::Migration -> ActiveRecord::Migration[5.0] for AddIndexesToCiBuildsAndPipelines. !24167 (Jasper Maes)
+- Update url placeholder for the sentry configuration page. !24338
+
+
 ## 11.6.5 (2019-01-17)
 
 ### Fixed (5 changes)

changelogs/unreleased/18667-handle-push-opts.yml

----
-title: Handle ci.skip push option
-merge_request: 15643
-author: Jonathon Reinhart
-type: added

changelogs/unreleased/23367-clarify-docs-allow-failure.yml

----
-title: Clarifies docs about CI `allow_failure`
-merge_request: 23367
-author: C.J. Jameson
-type: other

changelogs/unreleased/27861-add-markdown-editing-buttons-to-the-file-editor.yml

----
-title: Add markdown helper buttons to file editor
-merge_request: 23480
-author:
-type: added

changelogs/unreleased/29951-issue-creation-by-email-without-subaddressing.yml

----
-title: No longer require email subaddressing for issue creation by email
-merge_request: 23523
-author:
-type: changed

changelogs/unreleased/34758-extend-can-create-cluster-logic.yml

----
-title: Allow user to add Kubernetes cluster for clusterable when there are ancestor clusters
-merge_request: 23569
-author:
-type: other

changelogs/unreleased/34758-list-ancestor-clusters.yml

----
-title: Show clusters of ancestors in cluster list page
-merge_request: 22996
-author:
-type: changed

changelogs/unreleased/40270-remove-gitlab-upgrader-completely.yml

----
-title: Removes all instances of deprecated Gitlab Upgrader calls
-merge_request: 23603
-author: '@jwolen'
-type: removed

changelogs/unreleased/40473-api-support-for-kubernetes-integration.yml

----
-title: Add API Support for Kubernetes integration
-merge_request: 23922
-author:
-type: added

changelogs/unreleased/41766-vue-component.yml

----
-title: Creates component for release block
-merge_request: 23697
-author:
-type: added

changelogs/unreleased/41766-vuex-store.yml

----
-title: Creates frontend app for releases
-merge_request: 23796
-author:
-type: added

changelogs/unreleased/42125-extend-override-check-to-also-check-arity.yml

----
-title: Extend override check to also check arity
-merge_request: 23498
-author: Jacopo Beschi @jacopo-beschi
-type: added

changelogs/unreleased/43623-add-submit-feedback-in-product-feedback-link.yml

----
-title: Add submit feedback link to help dropdown
-merge_request: 23547
-author:
-type: added

changelogs/unreleased/44353-improve-snippet-search-performance.yml

----
-title: Improve snippet search performance by removing duplicate counts
-merge_request: 23952
-author:
-type: performance

changelogs/unreleased/44984-use-serializer-for-issuable-sidebar.yml

----
-title: Refactor issuable sidebar to use serializer
-merge_request: 23379
-author:
-type: other

changelogs/unreleased/47052-merge-button-does-not-appear-after-rebase-ing.yml

----
-title: Allow merge after rebase without page refresh on FF repositories
-merge_request: 23572
-author:
-type: fixed

changelogs/unreleased/49056-configure-auto-devops-deployed-applications-with-secrets-that-aren-t-committed-to-the-repo.yml

----
-title: Configure Auto DevOps deployed applications with secrets from prefixed CI variables
-merge_request: 23719
-author:
-type: added

changelogs/unreleased/49231-import-issues-csv.yml

----
-title: Add importing of issues from CSV file
-merge_request: 23532
-author:
-type: added

changelogs/unreleased/51485-new-issue-labels-note.yml

----
-title: Create system notes on issue / MR creation when labels, milestone, or due date is set
-merge_request: 23859
-author:
-type: added

changelogs/unreleased/51606-expanding-a-diff-while-having-an-open-comment-form-will-always-scroll-down-to-the-comment.yml

----
-title: Stop autofocusing on diff comment after initial mount
-merge_request: 23849
-author:
-type: fixed

changelogs/unreleased/51944-redesign-project-lists-ui.yml

----
-title: Redesign project lists UI
-merge_request: 22682
-author:
-type: other

changelogs/unreleased/51970-correct-ordering-of-metrics.yml

----
-title: Correct the ordering of metrics on the performance dashboard
-merge_request: 23630
-author:
-type: fixed

changelogs/unreleased/51994-disable-merging-labels-in-dropdowns.yml

----
-title: Disable merging of labels with same names
-merge_request: 23265
-author:
-type: changed

changelogs/unreleased/52446-hide-ado-project-banner-for-ci-file-or-ci-disabled.yml

----
-title: Don't show Auto DevOps enabled banner for projects with CI file or CI disabled
-merge_request: 24067
-author:
-type: other

changelogs/unreleased/52620-fix-loader-animation-alignment.yml

----
-title: Aligns build loader animation with the job log
-merge_request: 23959
-author:
-type: fixed

changelogs/unreleased/52888-status-emoji-should-not-be-added-to-awards-section-on-issue-page-2.yml

----
-title: Prevent awards emoji being updated when updating status
-merge_request: 23470
-author:
-type: fixed

changelogs/unreleased/53020-user-specific-profile-page-settings-fields-don-t-have-help-text-placeholders.yml

----
-title: Adds explanatory text to input fields on user profile settings page
-merge_request: 23673
-author:
-type: other

changelogs/unreleased/53493-list-id-email-header.yml

----
-title: Add project identifier as List-Id email Header to ease filtering
-merge_request: 22817
-author: Olivier Crête
-type: added

changelogs/unreleased/53696-make-rbac-default.yml

----
-title: Make RBAC enabled default for new clusters
-merge_request: 24119
-author:
-type: changed

changelogs/unreleased/53796-discard-draft-comment-button-to-easy-to-accidentally-hit-on-mobile.yml

----
-title: Removed discard draft comment button form notes
-merge_request: 24185
-author:
-type: removed

changelogs/unreleased/53907-improve-milestone-links.yml

----
-title: Add % prefix to milestone reference links
-merge_request: 23928
-author:
-type: changed

changelogs/unreleased/53933-include-dates-in-milestone-change-email.yml

----
-title: Add date range in milestone change email notifications
-merge_request: 23762
-author:
-type: changed

changelogs/unreleased/53954-resolved-non-diff-discussions-on-merge-requests-no-longer-show-who-resolved-them-and-when-at-a-glance.yml

----
-title: Show message on non-diff discussions
-merge_request:
-author:
-type: changed

changelogs/unreleased/53966-hashed-storage-read-only.yml

----
-title: 'Hashed Storage: Only set as `read_only` when starting the per-project migration'
-merge_request: 24128
-author:
-type: changed

changelogs/unreleased/54142-pages-in-project-s-permission-should-be-named-pages-access-control.yml

----
-title: Make the Pages permission setting more clear
-merge_request: 23146
-author:
-type: changed

changelogs/unreleased/54146-fix-calendar-query.yml

----
-title: Fix project calendar feed when sorted by priority
-merge_request: 23870
-author:
-type: fixed

changelogs/unreleased/54206-show-the-activity-filter-dropdown-in-discussion-tab-only.yml

----
-title: Discussion filter only displayed in discussions tab for merge requests
-merge_request: 24082
-author:
-type: changed

changelogs/unreleased/54311-fix-board-add-label.yml

----
-title: Fix error when creating labels in a new issue in the boards page
-merge_request: 24039
-author: Ruben Moya
-type: fixed

changelogs/unreleased/54386-integrate-mobile-css-framework-into-specific-frameworks.yml

----
-title: Remove framework/mobile.scss
-merge_request: 23301
-author: Takuya Noguchi
-type: other

changelogs/unreleased/54427-label-xss.yml

----
-title: Escape html entities in LabelReferenceFilter when no label found
-merge_request:
-author:
-type: security

changelogs/unreleased/54736-sign-in-bottom-margin.yml

----
-title: Fix login box bottom margins on signin page
-merge_request: 23739
-author: '@gear54'
-type: fixed

changelogs/unreleased/54786-mr-empty-file-display.yml

----
-title: Display empty files properly on MR diffs
-merge_request: 23671
-author: Sean Nichols
-type: fixed

changelogs/unreleased/54814-sidebar-styling-updates.yml

----
-title: Fix label and header styles in the job details sidebar.
-merge_request: 23816
-author: Nathan Friend
-type: changed

changelogs/unreleased/54844-report-syntax-dep-scan-ado.yml

----
-title: Use reports syntax for Dependency scanning in Auto DevOps
-merge_request: 24081
-author:
-type: added

changelogs/unreleased/54953-error-500-viewing-merge-request-due-to-nil-commit_email_hostname.yml

----
-title: Return an ApplicationSetting in CurrentSettings
-merge_request: 23766
-author:
-type: fixed

changelogs/unreleased/54981-extended-user-centric-tooltips-add-missing-cases.yml

----
-title: User Popovers for Commit Infos, Member Lists and Snippets
-merge_request: 24132
-author:
-type: added

changelogs/unreleased/55191-update-workhorse.yml

----
-title: Update GitLab Workhorse to v8.0.0
-merge_request: 23740
-author:
-type: other

changelogs/unreleased/55192-about-link-in-new-window.yml

----
-title: Resolve About this feature link should open in new window
-merge_request: 24149
-author:
-type: fixed

changelogs/unreleased/55266-fix-incorrect-due-date-parsing.yml

----
-title: Use 'parsePikadayDate' to parse due date string
-merge_request: 24045
-author:
-type: fixed

changelogs/unreleased/55293-split-bio-into-individual-line-in-extended-user-tooltips.yml

----
-title: Split bio into individual line in extended user tooltips
-merge_request: 23940
-author:
-type: other

changelogs/unreleased/55344-only-prompt-user-once-when-navigating-away-from-file-editor.yml

----
-title: Only prompt user once when navigating away from file editor
-merge_request: 23820
-author: Sam Bigelow
-type: fixed

changelogs/unreleased/55369-update-milestone-sort-to-say-say-milestone-due-date.yml

----
-title: Renames Milestone sort into Milestone due date
-merge_request: 24080
-author: Jacopo Beschi @jacopo-beschi
-type: changed

changelogs/unreleased/55484-fix-edit-button.yml

-title: Fix edit button disappearing in issue title
-merge_request: 23948
-author: Ruben Moya
-type: fixed

changelogs/unreleased/55669-redesign-project-lists-ui-further-improvements.yml

----
-title: UI improvements for redesigned project lists
-merge_request: 24011
-author:
-type: other

changelogs/unreleased/55670-remove-app-views-shared-issuable-_filter-html-haml.yml

----
-title: Remove app/views/shared/issuable/_filter.html.haml
-merge_request: 24008
-author: Takuya Noguchi
-type: other

changelogs/unreleased/55716-update-cert-manager-chart-from-v0-5-0-to-v0-5-2.yml

----
-title: Update cert-manager chart from v0.5.0 to v0.5.2
-merge_request: 24025
-author: Takuya Noguchi
-type: other

changelogs/unreleased/55721-externalization-for-pipeline-tags.yml

----
-title: Correctly externalize pipeline tags
-merge_request: 24028
-author:
-type: fixed

changelogs/unreleased/55755-user-activity-is-stuck-loading-when-there-is-none.yml

----
-title: Hide spinner on empty activites list on user profile overview
-merge_request: 24063
-author:
-type: other

changelogs/unreleased/55836-docs-fix-navigation-style-in-docs.yml

----
-title: Fix navigation style in docs
-merge_request: 24090
-author: Takuya Noguchi
-type: other

changelogs/unreleased/55838-remove-gem-install-bundler-from-docker-based-ruby-environments.yml

----
-title: Remove gem install bundler from Docker-based Ruby environments
-merge_request: 24093
-author: Takuya Noguchi
-type: other

changelogs/unreleased/55883-modal-header-titles-have-an-unnecessary-top-margin.yml

----
-title: Remove top margin in modal header titles
-merge_request: 24108
-author:
-type: fixed

changelogs/unreleased/55958-inconsistent-spacing-between-note-and-user-avatar-in-discussions.yml

----
-title: Fix spacing on discussions
-merge_request: !24197
-author:
-type: fixed

changelogs/unreleased/56076-releases-margin.yml

----
-title: Fixes missing margin in releases block
-merge_request:
-author:
-type: fixed

changelogs/unreleased/ab-50763-persist-index.yml

----
-title: Add indexes to speed up CI query.
-merge_request: 23188
-author:
-type: performance

changelogs/unreleased/ac-releases-api-with-assets.yml

----
-title: Support CURD operation for Links as one of the Release assets
-merge_request: 24056
-author:
-type: changed

changelogs/unreleased/ac-releases-api.yml

----
-title: Releases API
-merge_request: 23795
-author:
-type: added

changelogs/unreleased/ac-releases-name-sha-author.yml

----
-title: Add name, author_id, and sha to releases table
-merge_request: 23763
-author:
-type: added

changelogs/unreleased/add-new-nginx-metrics.yml

----
-title: Add NGINX 0.16.0 and above metrics
-merge_request: 22133
-author:
-type: added

changelogs/unreleased/allow-basic-auth-on-go-get-middleware.yml

----
-title: Allow basic authentication on go get middleware
-merge_request: 23497
-author: Morty Choi @mortyccp
-type: changed

changelogs/unreleased/allow_collaboration_status_work.yml

----
-title: Update a condition to visibility a merge request collaboration message
-merge_request: 23104
-author: Harry Kiselev
-type: other

changelogs/unreleased/blackst0ne-bump-rails-cve-2018-16476.yml

----
-title: Bump Ruby on Rails to 5.0.7.1
-merge_request: 23396
-author: "@blackst0ne"
-type: security

changelogs/unreleased/blackst0ne-convert-specs-rails5-style.yml

----
-title: "[Rails5.1] Update functional specs to use new keyword format"
-merge_request: 23095
-author: "@blackst0ne"
-type: other

changelogs/unreleased/blackst0ne-improve-encoding-helper-spec.yml

----
-title: Update specs to exclude possible false positive pass
-merge_request: 23893
-author: "@blackst0ne"
-type: other

changelogs/unreleased/bvl-hide-confidential-events-take2.yml

----
-title: Hide confidential events in the API
-merge_request: 23746
-author:
-type: other

changelogs/unreleased/ccr-49289_milestone_link.yml

----
-title: Add project milestone link
-merge_request: 22552
-author:
-type: added

changelogs/unreleased/ci-dropdown-hidden-bug.yml

----
-title: Don't hide CI dropdown behind diff summary
-merge_request:
-author: gfyoung
-type: fixed

changelogs/unreleased/depracated-migration-inheritance.yml

----
-title: ActiveRecord::Migration -> ActiveRecord::Migration[5.0]
-merge_request: 23910
-author: Jasper Maes
-type: other

changelogs/unreleased/deprecated-actiondispatch-paramsparser.yml

----
-title: Remove deprecated ActionDispatch::ParamsParser
-merge_request: 23848
-author: Jasper Maes
-type: other

changelogs/unreleased/deprecated-alias-method-chain.yml

----
-title: 'Fix deprecation: alias_method_chain is deprecated. Please, use Module#prepend
-  instead'
-merge_request: 23887
-author: Jasper Maes
-type: other

changelogs/unreleased/deprecated-callback-false.yml

----
-title: 'Fix deprecation: returning false in Active Record and Active Model callbacks
-  will not implicitly halt a callback chain'
-merge_request: 24134
-author: Jasper Maes
-type: other

changelogs/unreleased/deprecated-comparing-actioncontroller-params-hash.yml

----
-title: 'Fix deprecation: Comparing equality between ActionController::Parameters and
-  a Hash is deprecated'
-merge_request: 23855
-author: Jasper Maes
-type: other

changelogs/unreleased/deprecated-delete-all-params.yml

----
-title: 'Fix deprecation: Passing conditions to delete_all is deprecated'
-merge_request: 23817
-author: Jasper Maes
-type: other

changelogs/unreleased/deprecated-directly-inheriting-migration.yml

----
-title: 'Fix deprecation: Directly inheriting from ActiveRecord::Migration is deprecated.'
-merge_request: 23884
-author: Jasper Maes
-type: other

changelogs/unreleased/deprecated-insert-sql.yml

----
-title: 'Fix deprecation: insert_sql is deprecated and will be removed'
-merge_request: 23944
-author: Jasper Maes
-type: other

changelogs/unreleased/deprecated-migration-inheritance-2.yml

----
-title: ActiveRecord::Migration -> ActiveRecord::Migration[5.0] for AddIndexesToCiBuildsAndPipelines
-merge_request: 24167
-author: Jasper Maes
-type: other

changelogs/unreleased/deprecated-passing-activerecord-objects.yml

----
-title: 'Fix deprecation: Passing ActiveRecord::Base objects to sanitize_sql_hash_for_assignment'
-merge_request: 23818
-author: Jasper Maes
-type: other

changelogs/unreleased/deprecated-positional-seperator-parameter.yml

----
-title: Passing the separator argument as a positional parameter is deprecated
-merge_request: 23334
-author: Jasper Maes
-type: other

changelogs/unreleased/deprecated-positional-spec-arguments.yml

----
-title: 'Fix deprecation: Using positional arguments in integration tests'
-merge_request: 24110
-author: Jasper Maes
-type: other

changelogs/unreleased/deprecated-redirect-back.yml

----
-title: 'Fix deprecation: redirect_to :back is deprecated'
-merge_request: 23943
-author: Jasper Maes
-type: other

changelogs/unreleased/diff-empty-state-fixes.yml

----
-title: Fixed merge request diffs empty states
-merge_request:
-author:
-type: fixed

changelogs/unreleased/dm-note-email-image-diff-discussion.yml

----
-title: Fix notification email for image diff notes
-merge_request:
-author:
-type: fixed

changelogs/unreleased/docs-releases-api.yml

----
-title: Adds API documentation for releases
-merge_request: 23901
-author:
-type: added

changelogs/unreleased/error_tracking_feature_flag_fe.yml

----
-title: Display a list of Sentry Issues in GitLab
-merge_request: 23770
-author:
-type: added

changelogs/unreleased/feature-gb-expose-ci-api-url-variable.yml

----
-title: Expose CI/CD predefined variable `CI_API_V4_URL`
-merge_request: 23936
-author:
-type: added

changelogs/unreleased/feature-option-to-make-variables-protected.yml

----
-title: Add option to make ci variables protected by default
-merge_request: 22744
-author: Alexis Reigel
-type: added

changelogs/unreleased/fix-55448.yml

----
-title: Remove deprecated xhr from specs
-merge_request: 23949
-author: Jasper Maes
-type: other

changelogs/unreleased/fix-calendar-events-fetching-error.yml

----
-title: Fix calendar events fetching error on private profile page
-merge_request: 23718
-author: Harry Kiselev
-type: other

changelogs/unreleased/fix-n-plus-1-queries-projects.yml

----
-title: Fix some N+1 queries related to Admin Dashboard, User Dashboards and Activity
-  Stream
-merge_request: 23034
-author:
-type: performance

changelogs/unreleased/fix-runner-eternal-loop-when-update-job-result.yml

----
-title: Fix runner eternal loop when update job result
-merge_request: 24481
-author:
-type: fixed

changelogs/unreleased/fix-udpate-head-pipeline-method.yml

----
-title: Fix unexpected exception by failure of finding an actual head pipeline
-merge_request: 24257
-author:
-type: fixed

changelogs/unreleased/fj-44679-skip-per-commit-validations.yml

----
-title: Skip per-commit validations already evaluated
-merge_request: 23984
-author:
-type: performance

changelogs/unreleased/fj-fix-lfs-image-comments-diffs.yml

----
-title: Fix bug commenting on LFS images
-merge_request: 23812
-author:
-type: fixed

changelogs/unreleased/force-reload-arguments-2.yml

----
-title: Passing an argument to force an association to reload is now deprecated
-merge_request: 23894
-author: Jasper Maes
-type: other

changelogs/unreleased/gt-externalize-app-views-shared-notes.yml

----
-title: Externalize strings from `/app/views/shared/notes`
-merge_request: 23696
-author: Tao Wang
-type: other

changelogs/unreleased/gt-remove-unnecessary-line-before-reply-holder.yml

----
-title: Remove unnecessary line before reply holder
-merge_request: 23092
-author: George Tsiolis
-type: changed

changelogs/unreleased/gt-reorder-group-sidebar-menu-items.yml

----
-title: Reorder sidebar menu item for group clusters
-merge_request: 24001
-author: George Tsiolis
-type: changed

changelogs/unreleased/gt-update-environment-breadcrumb.yml

----
-title: Update environments breadcrumb
-merge_request: 23751
-author: George Tsiolis
-type: changed

changelogs/unreleased/gt-update-navigation-theme-colors.yml

----
-title: Update header navigation theme colors
-merge_request: 23734
-author: George Tsiolis
-type: fixed

changelogs/unreleased/include-project.yml

----
-title: Allow to include files from another projects in gitlab-ci.yml
-merge_request: 24101
-author:
-type: added

changelogs/unreleased/include-templates.yml

----
-title: Allow to include templates in gitlab-ci.yml
-merge_request: 23495
-author:
-type: added

changelogs/unreleased/jivl-update-placeholder-sentry-config.yml

----
-title: Update url placeholder for the sentry configuration page
-merge_request: 24338
-author:
-type: other

changelogs/unreleased/jlenny-CI_COMMIT_SHORT_SHA.yml

----
-title: Add new pipeline variable CI_COMMIT_SHORT_SHA
-merge_request: 23822
-author:
-type: added

changelogs/unreleased/knative-prometheus.yml

----
-title: Add Knative metrics to Prometheus
-merge_request: 23972
-author: Chris Baumbauer
-type: added

changelogs/unreleased/knative-rbac-check.yml

----
-title: Require Knative to be installed only on an RBAC kubernetes cluster
-merge_request: 23807
-author: Chris Baumbauer
-type: changed

changelogs/unreleased/mk-avoid-read-only-error.yml

----
-title: Prevent admins from attempting hashed storage migration on read only DB
-merge_request: 23597
-author:
-type: fixed

changelogs/unreleased/none-syntax-highlighting.yml

----
-title: Add no-color theme for syntax highlighting.
-merge_request: !20170
-author: khm
-type: added

changelogs/unreleased/osw-cache-discussions-diff-highlighting.yml

----
-title: Improve the loading time on merge request's discussion page by caching diff
-  highlight
-merge_request: 23857
-author:
-type: performance

changelogs/unreleased/osw-fix-quick-suggestion-application-being-reverted.yml

----
-title: Adjust applied suggestion reverting previous changes
-merge_request: 24250
-author:
-type: fixed

changelogs/unreleased/pl-reactive-caching-primary_key.yml

----
-title: Enable caching for records which primary key is not `id`
-merge_request: 24245
-author:
-type: fixed

changelogs/unreleased/remote-mirror-update-failed-notification.yml

----
-title: Send a notification email to project maintainers when a mirror update fails
-merge_request: 23595
-author:
-type: added

changelogs/unreleased/remove-rails4-specific-code.yml

----
-title: Remove rails4 specific code
-merge_request: 23847
-author: Jasper Maes
-type: other

changelogs/unreleased/remove-rails4-support.yml

----
-title: Remove rails 4 support in CI, Gemfiles, bin/ and config/
-merge_request: 23717
-author: Jasper Maes
-type: other

changelogs/unreleased/s3-directories-get.yml

----
-title: Allow 'rake gitlab:cleanup:remote_upload_files' to read bucket files without
-  having permissions to see all buckets.
-merge_request: 23981
-author:
-type: fixed

changelogs/unreleased/security-48259-private-snippet.yml

----
-title: Prevent private snippets from being embeddable
-merge_request:
-author:
-type: security

changelogs/unreleased/security-53543-user-keeps-access-to-mr-issue-when-removed-from-team.yml

----
-title: Issuable no longer is visible to users when project can't be viewed
-merge_request:
-author:
-type: security

changelogs/unreleased/security-54377-label-milestone-name-xss.yml

----
-title: Escape label and milestone titles to prevent XSS in GFM autocomplete
-merge_request: 2693
-author:
-type: security

changelogs/unreleased/security-bvl-fix-cross-project-mr-exposure.yml

----
-title: Don't expose cross project repositories through diffs when creating merge reqeusts
-merge_request:
-author:
-type: security

changelogs/unreleased/security-fix-ssrf-import-url-remote-mirror.yml

----
-title: Fix SSRF with import_url and remote mirror url
-merge_request:
-author:
-type: security

changelogs/unreleased/security-master-group-cicd-settings-accessible-to-maintainer.yml

----
-title: Allow changing group CI/CD settings only for owners.
-merge_request:
-author:
-type: security

changelogs/unreleased/security-master-guests-jobs-api.yml

----
-title: Authorize before reading job information via API.
-merge_request:
-author:
-type: security

changelogs/unreleased/security-master-secret-ci-variables-exposed.yml

----
-title: Prevent leaking protected variables for ambiguous refs.
-merge_request:
-author:
-type: security

changelogs/unreleased/security-master-url-rel.yml

----
-title: Set URL rel attribute for broken URLs.
-merge_request:
-author:
-type: security

changelogs/unreleased/security-refs-available-to-project-guest.yml

----
-title: Project guests no longer are able to see refs page
-merge_request:
-author:
-type: security

changelogs/unreleased/security-todos_not_redacted_for_guests.yml

----
-title: Delete confidential todos for user when downgraded to Guest
-merge_request:
-author:
-type: security

changelogs/unreleased/sh-bump-omniauth-google-gem.yml

----
-title: Upgrade Omniauth and JWT gems to switch away from Google+ API
-merge_request: 24068
-author:
-type: changed

changelogs/unreleased/sh-cache-avatar-paths.yml

----
-title: Cache avatar URLs and paths within a request
-merge_request: 23950
-author:
-type: performance

changelogs/unreleased/sh-carrierwave-patch-google-acl.yml

----
-title: Fix object storage not working properly with Google S3 compatibility
-merge_request: 23858
-author:
-type: fixed

changelogs/unreleased/sh-drop-webhooks-project-export.yml

----
-title: Drop Webhooks from project import/export config
-merge_request: 24121
-author:
-type: fixed

changelogs/unreleased/sh-fix-branches-api-timeout.yml

----
-title: Fix timeout issues retrieving branches via API
-merge_request: 24034
-author:
-type: performance

changelogs/unreleased/sh-fix-github-import-without-oauth2-config.yml

----
-title: Allow GitHub imports via token even if OAuth2 provider not configured
-merge_request: 23703
-author:
-type: fixed

changelogs/unreleased/sh-fix-issue-55822.yml

----
-title: Fix commit SHA not showing in merge request compare dropdown
-merge_request: 24084
-author:
-type: fixed

changelogs/unreleased/sh-fix-issue-55914.yml

----
-title: Fix Bitbucket Server import only including first 25 pull requests
-merge_request: 24178
-author:
-type: fixed

changelogs/unreleased/sh-skip-validation-visibility-changed.yml

----
-title: Only validate project visibility when it has changed
-merge_request: 24142
-author:
-type: fixed

changelogs/unreleased/spec-positional-arguments.yml

----
-title: 'Fix deprecation: Using positional arguments in integration tests'
-merge_request: 24009
-author: Jasper Maes
-type: other

changelogs/unreleased/specs-positional-arguments.yml

----
-title: convert specs in javascripts/ and support/ to new syntax
-merge_request: 23947
-author: Jasper Maes
-type: other

changelogs/unreleased/support-gitaly-tls.yml

----
-title: Support tls communication in gitaly
-merge_request: 22602
-author:
-type: added

changelogs/unreleased/tc-remove-20181218192239-migration.yml

----
-title: Remove migration to backfill project_repositories for legacy storage projects
-merge_request: 24299
-author:
-type: removed

changelogs/unreleased/triggermesh-knative-version.yml

----
-title: Knative version bump 0.1.3 -> 0.2.2
-merge_request:
-author: Chris Baumbauer
-type: changed

changelogs/unreleased/tz-user-popover-follow-up.yml

-title: Changed Userpopover Fixtures and shadow color
-merge_request: 23768
-author:
-type: other

changelogs/unreleased/update-gitlab-runner-helm-chart-to-0-1-43.yml

----
-title: Update GitLab Runner Helm Chart to 0.1.43
-merge_request: 24083
-author:
-type: other

changelogs/unreleased/user-update-head-pipeline-worker.yml

----
-title: Refactor the logic of updating head pipelines for merge requests
-merge_request: 23502
-author:
-type: other

changelogs/unreleased/winh-dropdown-title-padding.yml

----
-title: Adjust padding of .dropdown-title to comply with design specs
-merge_request: 23546
-author:
-type: changed

changelogs/unreleased/winh-merge-request-commit-context.yml

----
-title: Display commit ID for discussions made on merge request commits
-merge_request: 23837
-author:
-type: fixed

changelogs/unreleased/winh-princess-mononospace.yml

----
-title: Make commit IDs in merge request discussion header monospace
-merge_request: 23562
-author:
-type: changed

changelogs/unreleased/winh-upgrade-gitlab-ui.yml

----
-title: Upgrade @gitlab/ui to 1.16.2
-merge_request: 23946
-author:
-type: other

changelogs/unreleased/zj-backup-restore-object-pools.yml

----
-title: Restore Object Pools when restoring an object pool
-merge_request: 23682
-author:
-type: added