Update CHANGELOG.md for 12.3.0

[ci skip]

CHANGELOG.md

@@ -2,6 +2,275 @@
 documentation](doc/development/changelog.md) for instructions on adding your own
 entry.
 
+## 12.3.0
+
+### Security (23 changes)
+
+- Filter out old system notes for epics in notes api endpoint response.
+- Fix SSRF via DNS rebinding in Kubernetes Integration.
+- Fix project import restricted visibility bypass via API.
+- Prevent disclosure of merge request ID via email.
+- Use admin_group authorization in Groups::RunnersController.
+- Gitaly: ignore git redirects.
+- Prevent DNS rebind on JIRA service integration.
+- Make sure HTML text is always escaped when replacing label/milestone references.
+- Fix HTML injection for label description.
+- Avoid exposing unaccessible repo data upon GFM post processing.
+- Remove EXIF from users/personal snippet uploads.
+- Fix weak session management by clearing password reset tokens after login (username/email) are updated.
+- Added image proxy to mitigate potential stealing of IP addresses.
+- Restrict MergeRequests#test_reports to authenticated users with read-access on Builds.
+- Ensure only authorised users can create notes on Merge Requests and Issues.
+- Send TODOs for comments on commits correctly.
+- Check permissions before responding in MergeController#pipeline_status.
+- Limit the size of issuable description and comments.
+- Enforce max chars and max render time in markdown math.
+- Speed up regexp in namespace format by failing fast after reaching maximum namespace depth.
+- Add :login_recaptcha_protection_enabled setting to prevent bots from brute-force attacks.
+- Upgrade pages to 1.8.1.
+- Show cross-referenced MR-id in issues' activities only to authorized users.
+
+### Removed (1 change)
+
+- Removed redundant index on releases table. !31487
+
+### Fixed (78 changes, 25 of them are from the community)
+
+- Avoid Devise "401 Unauthorized" responses. !16519
+- Allow close status to be shown on locked issues. !16685
+- Changed todo/done quick actions to work not only for first usage. !16837 (Marc Schwede)
+- Adds missing error handling. !16896 (toptalo)
+- Prevent the user from seeing an invalid "Purchase more minutes" prompt. !16979
+- Fix missing board lists when other users collapse / expand the list. !17318
+- Uses projects_authorizations.access_level in MembersFinder. !28887 (Jacopo Beschi @jacopo-beschi)
+- Let project reporters create issue from group boards. !29866
+- Remove margin from user header. !30878 (lucyfox)
+- Improve application settings API. !31149 (Mathieu Parent)
+- Fix encoding of special characters in "Find File". !31311 (Jan Beckmann)
+- Avoid conflicts between ArchiveTracesCronWorker and ArchiveTraceWorker. !31376
+- Disable "Transfer group" button when no group is selected. !31387 (Jan Beckmann)
+- Prevent archived projects from showing up in global search. !31498 (David Palubin)
+- Fixed embeded metrics tooltip inconsistent styling. !31517
+- Fix 500 errors caused by pattern matching with variables in CI Lint. !31719
+- Fixed removing directories in Web IDE. !31727
+- All of discussion expand/collapse button is clickable. !31730
+- Only show /copy_metadata quick action when usable. !31735 (Lee Tickett)
+- Read pipelines from public projects through API without an access token. !31816
+- fix charts scroll handle icon to use gitlab svg. !31825
+- Remove "Commit" from pipeline status tooltips. !31861
+- Fix top-nav search bar dropdown on xl displays. !31864 (Kemais Ehlers)
+- Fix loading icon causing text to jump in file row of Web IDE. !31884
+- Fix MR reports section loading icon alignment. !31897
+- Fix broken git clone box on wiki git access page. !31898
+- Exempt user gitlab-ci-token from rate limiting. !31909
+- Fix search preserving space when change branch. !31973 (minghuan lei)
+- Fix file header style and position during scroll in a merge conflict resolution. !31991
+- Allow latency measurements of sidekiq jobs taking > 2.5s. !32001
+- Return correct user for manual deployments. !32004
+- Fix style of secondary profile tab buttons. !32010 (Wolfgang Faust)
+- Fix serverless entry page layout. !32029
+- Fix HTML rendering for fast-forward rebases in merge request widget. !32032
+- Update the timestamp in Operations > Environments to show correct deployment date for manual deploy jobs. !32072
+- Fix dropdowns closing when click is released outside the dropdown. !32084
+- Hide duplicate board list while dragging. !32099
+- Don't check external authorization when disabling the service. !32102 (Robert Schilling)
+- Makes custom Pages domain open as external link in new tab. !32130 (jakeburden)
+- Change default visibility level for FogBugz imported projects to Private. !32142
+- Move visual review toolbar code to NPM. !32159
+- Fix parsing of months in time tracking commands. !32165
+- Wrong format on MS teams integration push events with multi line commit messages. !32180 (Massimeddu Cireddu)
+- Guard against deleted project feature entry in project permissions. !32187
+- Fix ref switcher separators from conflicting with branch names. !32198
+- Fix performance bar on Puma. !32213
+- Remove token field from runners edit form. !32231
+- Fix 500 error in CI lint when included templates are an array. !32232
+- Fix users cannot access job detail page when deployable does not exist. !32247
+- Do not translate system notes into author's language. !32264
+- Fix moving issues API failing when text includes commit URLs. !32317
+- Fix issue due notification emails not being threaded correctly. !32325
+- Allow project feature permissions to be overridden during import with override_params. !32348
+- Handle invalid mirror url. !32353 (Lee Tickett)
+- New project milestone primary button. !32355 (Lee Tickett)
+- Display `more information` docs link on error tracking page when users do not have permissions to enable that feature. !32365 (Romain Maneschi)
+- Quick action label must be first in issue comment. !32367 (Romain Maneschi)
+- Fix for missing avatar images dislpayed in commit trailers. !32374 (Jesse Hall @jessehall3)
+- Make it harder to delete issuables accidentally. !32376
+- Replaced vue resource to axios in the  Markdown field preview component. !32386 (Prakash Chokalingam @prakash_Chokalingam)
+- Fix create MR from issue using a tag as ref. !32392 (Jacopo Beschi @jacopo-beschi)
+- Add X-GitLab-NotificationReason header to note emails. !32422
+- Expand textarea for CA cert in cluster form. !32508
+- Prevent empty external authorization classification labels from overriding the default label. !32517 (Will Chandler)
+- Allow not resolvable urls when dns rebind protection is disabled. !32523
+- Avoid checking dns rebind protection when validating. !32577
+- Passing job rules downstream and E2E specs for job:rules configuration. !32609
+- Quote branch names in how to merge instructions. !32639 (Lee Tickett)
+- Fix removal of install pods. !32667
+- Fix sharing localStorage with all MRs. !32699
+- Default the asset proxy whitelist to the installation domain. !32703
+- Add some padding to details markdown element. !32716
+- Use `ChronicDuration` in a thread-safe way. !32817
+- Fix watch button styling and notifications buttons consistency. !32827
+- Fix encoding error in MR diffs when using external diffs. !32862 (Hiroyuki Sato)
+- Add bottom margin to snippet title. !32877
+- Bump markdown cache version to fix any incorrect links from asset proxy defaults.
+- Persist `needs:` validation as config error.
+
+### Changed (39 changes, 6 of them are from the community)
+
+- Extend pipeline graph scroll area to full width. !14870
+- Frontend support for saving issue board preferences on the current user. !16421
+- Switch Milestone and Release to a many-to-many relationship. !16517
+- Align project selector search box better with design system. !16795
+- Adds the runners_token of the group if the user that requests the group info is admin of it. !16831 (Ignacio Lorenzo Subirá Otal nachootal@gmail.com)
+- Upgrade to Gitaly v1.65.0. !17135
+- Make flash notifications sticky. !30141
+- Add Issue and Merge Request titles to Todo items. !30435 (Arun Kumar Mohan)
+- Remove wiki page slug dialog step when creating wiki page. !31362
+- Improve system notes for Zoom links. !31410 (Jacopo Beschi @jacopo-beschi)
+- Updated WebIDE default commit options. !31449
+- Remove oauth form from GitHub CI/CD only import authentication. !31488
+- Update assignee (cannot merge) style. !31545
+- Updated latest pipeline tag tooltip to be more descriptive. !31624
+- Add optional label_id parameter to label API for PUT and DELETE. !31804
+- Updates issues REST API to allow extended sort options. !31849
+- Fix to show renamed file in mr. !31888
+- Replaced expand diff icons. !31907
+- Upgrade to Gitaly 1.60.0. !31981
+- Make MR pipeline widget text more descriptive. !32025
+- Fix wording on milestone due date when milestone is due today. !32096
+- Improve search result labels. !32101
+- Limit access request emails to ten most recently active owners or maintainers. !32141
+- Improve chatops help output. !32208
+- Update merge train documentation. !32218
+- Add caret icons to the monitoring dashboard. !32239
+- Install cert-manager v0.9.1. !32243
+- Bring text mail for new issue & MR more in line. !32254
+- Add cluster domain warning. !32260
+- Rename epic column state to state_id. !32270
+- Use moved instead of closed in issue references. !32277 (juliette-derancourt)
+- Standardize use of `content` parameter in snippets API. !32296
+- Show meaningful message on /due quick action with invalid date. !32349 (Jacopo Beschi @jacopo-beschi)
+- Remove dynamically constructed feature flags starting with prometheus_transaction_. !32395 (Jacopo Beschi @jacopo-beschi)
+- Indicate on Issue Status if an Issue was Duplicated. !32472
+- Avoid dns rebinding checks when the domain is whitelisted. !32603
+- Upgrade to Gitaly v1.62.0. !32608
+- Unified presentation of the filter input field for projects listings. !32706
+- Hide resolve thread button from guest. !32859
+
+### Performance (20 changes)
+
+- Lower search counters. !11777
+- Considerably improve the query performance for MR discussions load. !16635
+- Eliminate Gitaly N+1 queries with notes API. !32089
+- Optimise UpdateBuildQueueService. !32095
+- Remove N+1 SQL query loading project feature in dashboard. !32169
+- Reduce the number of SQL requests on MR-show. !32192
+- Makes LFS object linker process OIDs in batches. !32268
+- Preload routes information to fix N+1 issue. !32352
+- Reduce N+1 when doing project export. !32423
+- Skip requesting diverging commit counts if no branches are listed. !32496
+- Support selective highlighting of lines. !32514
+- Replace indexes for counting active users. !32538
+- Create partial index for gitlab-monitor CI metrics. !32546
+- Optimize queries for snippet listings. !32576
+- Preprocess wiki attachments with GitLab-Workhorse. !32663
+- Create index for users.unconfirmed_email. !32664
+- Optimize /admin/applications so that it does not timeout. !32852
+- Replace events index with partial one. !32874
+- Partial index for namespaces.type. !32876
+- Fix member expiration not always working. !32951
+
+### Added (42 changes, 10 of them are from the community)
+
+- Enable modsecurity in nginx-ingress apps. !15774
+- Database table for tracking programming language trends over time. !16491
+- Add DAST full scan domain validation. !16680
+- Add not param to Issues API endpoint. !16748
+- Allow specifying timeout per-job in .gitlab-ci.yml. !16777 (Michał Siwek)
+- Document forwarding CI variables to docker build in Auto DevOps. !16783
+- Add links for latest pipelines. !20865 (Alex Ives)
+- New interruptible attribute for CI/CD jobs. !23464 (Cédric Tabin)
+- API: Promote project labels to group labels. !25218 (Robert Schilling)
+- Introduced Build::Rules configuration for Ci::Build. !29011
+- Notification emails can be signed with SMIME. !30644 (Diego Louzán)
+- Allow milestones to be associated with a release (backend). !30816
+- Enable serving static objects from an external storage. !31025
+- Save collapsed option for board lists in database. !31069
+- Apply quickactions when modifying comments. !31136
+- Add SwaggerUI Pages template for .gitlab-ci.yml. !31183 (mdhtr)
+- Add ability to see project deployments at cluster level (FE). !31575
+- Create component to display area and line charts in monitor dashboards. !31639
+- Add persistance to last choice of projects sorting on projects dashboard page. !31669
+- Run Pipeline button & API for MR Pipelines. !31722
+- Add service to transfer Group Milestones when transferring a Project. !31778
+- Allow $CI_REGISTRY_USER to delete tags. !31796
+- Support adding and removing labels w/ push opts. !31831
+- Enable line charts in dashbaord panels and embedded charts. !31920
+- Add First and Last name columns to User model. !31985
+- Add option to allow OAuth providers to bypass two factor. !31996 (Dodocat)
+- Expose namespace storage statistics with GraphQL. !32012
+- Add usage pings for merge request creating. !32059
+- Add warning about initial deployment delay for GitLab Pages sites. !32122
+- Allow Knative to be installed on group and instance level clusters. !32128
+- Add a close issue slack slash command. !32150
+- Support chat notifications to be fired for protected branches. !32176
+- Add system hooks for project/group membership updates. !32371 (Brandon Williams)
+- Add source and merge_request fields to pipeline event webhook. !32373 (Bian Jiaping)
+- Allow ECDSA certificates for pages domains. !32393
+- Show link to cluster used on job page. !32446
+- Group level JupyterHub. !32512
+- Creates utility parser for the job log. !32555
+- Expose update project service endpoint JSON. !32759
+- Expose 'protected' field for Tag API endpoint. !32790 (Andrea Leone)
+- Create table `alerts_service_data`. !32860
+- Creates base components for the new job log.
+
+### Other (42 changes, 13 of them are from the community)
+
+- Setting NOT NULL constraint to users.private_profile column. !14838
+- Schedule productivity analytics recalculation for EE. !15137
+- Document Lambda deploys via GitLab CI/CD. !16858
+- Add Redis interceptor tracing. !30238
+- Encrypt existing and new deploy tokens. !30679
+- Clean up keyboard shortcuts help modal, removing and adding as needed. !31642
+- Add warning to pages domains that obtaining/deploying SSL certificates through Let's Encrypt can take some time. !31765
+- Add new API method in Api.js: projectUsers. !31801
+- Upgrade babel to 7.5.5. !31819 (Takuya Noguchi)
+- Update docs to reflect the rename of gitlab-monitor to gitlab-exporter. !31901
+- Count comments on commits and merge requests. !31912
+- Resolve Badge counter: Very low contrast between foreground and background colors. !31922
+- Add index to improve group cluster deployments query performance. !31988
+- Replace finished_at with deployed_at for the internal API Deployment entity. !32000
+- Update to GitLab Shell v9.4.0. !32009
+- Default clusters namespace_per_environment column to true. !32139
+- Remove deprecation message for milestone tabs. !32252
+- Refactored Karma spec to Jest for mr_widget_auto_merge_failed. !32282 (Illya Klymov)
+- Update GitLab Runner Helm Chart to 0.8.0. !32289
+- Refactor showStagedIcon property to reflect the behavior its name represents. !32333 (Arun Kumar Mohan)
+- Upgrade pages to 1.8.0. !32334
+- Change prioritized labels empty state message. !32338 (Lee Tickett)
+- make test of note app with comments disabled dry. !32383 (Romain Maneschi)
+- Use new location for gitlab-runner helm charts. !32384
+- Mention in docs how to disable project snippets. !32391 (Jacopo Beschi @jacopo-beschi)
+- delete animation width on global search input. !32399 (Romain Maneschi)
+- Remove vue resource from sidebar service. !32400 (Lee Tickett)
+- Remove vue resource from issue. !32421 (Lee Tickett)
+- Remove vue resource from remove issue. !32425 (Lee Tickett)
+- Remove vue-resource from PerformanceBarService. !32428 (Lee Tickett)
+- Added warning note on the project container registry setting informing users that the registry is public for public projects. !32447
+- Admin dashboard: Fetch and render statistics async. !32449
+- Update GitLab Workhorse to v8.10.0. !32501
+- Remove Users.support_bot column. !32554
+- Add padding to left of "Sort by" in members dropdown. !32602
+- Log errors for failed pipeline creation in PostReceive. !32633
+- Avoid prefilling target branch when source branch is the default one. !32701
+- Bump Kubeclient to 4.4.0. !32811
+- Remove vue-resource from notes service. !32934 (Lee Tickett)
+- Added board name to page title in boards view.
+- Remove vue resource from group service. (Lee Tickett)
+- Updates tooltip of 'detached' label/state.
+
+
 ## 12.2.5
 
 ### Security (1 change)

changelogs/unreleased/21505-quickactions-update-pd.yml

----
-title: Apply quickactions when modifying comments
-merge_request: 31136
-author:
-type: added

changelogs/unreleased/28643-access-request-emails-limit-to-ten-owners.yml

----
-title: Limit access request emails to ten most recently active owners or maintainers
-merge_request: 32141
-author:
-type: changed

changelogs/unreleased/29155-fix-devise-401-responses.yml

----
-title: Avoid Devise "401 Unauthorized" responses
-merge_request: 16519
-author:
-type: fixed

changelogs/unreleased/31735-only-show-copy_metadata-when-usable.yml

----
-title: Only show /copy_metadata quick action when usable
-merge_request: 31735
-author: Lee Tickett
-type: fixed

changelogs/unreleased/32032-html-code-shown-in-merge-request.yml

----
-title: Fix HTML rendering for fast-forward rebases in merge request widget
-merge_request: 32032
-author:
-type: fixed

changelogs/unreleased/32156-fix-ci_usage_warning_message-message-builder.yml

----
-title: Prevent the user from seeing an invalid "Purchase more minutes" prompt.
-merge_request: 16979
-author:
-type: fixed

changelogs/unreleased/32390-some-board-lists-missing-for-some-users-minimal.yml

----
-title: Fix missing board lists when other users collapse / expand the list
-merge_request: 17318
-author:
-type: fixed

changelogs/unreleased/34338-details-element.yml

----
-title: Add some padding to details markdown element
-merge_request: 32716
-author:
-type: fixed

changelogs/unreleased/35060-remove-token-field.yml

----
-title: Remove token field from runners edit form
-merge_request: 32231
-author:
-type: fixed

changelogs/unreleased/36383-improve-search-result-labels.yml

----
-title: Improve search result labels
-merge_request: 32101
-author:
-type: changed

changelogs/unreleased/36765-flash-notification.yml

----
-title: Make flash notifications sticky
-merge_request: 30141
-author:
-type: changed

changelogs/unreleased/40096-allow-ci-token-to-delete-from-registry.yml

----
-title: Allow $CI_REGISTRY_USER to delete tags
-merge_request: 31796
-author:
-type: added

changelogs/unreleased/46299-wiki-page-creation.yml

----
-title: Remove wiki page slug dialog step when creating wiki page
-merge_request: 31362
-author:
-type: changed

changelogs/unreleased/46686-bump-kubeclient-version-qa.yml

----
-title: Bump Kubeclient to 4.4.0
-merge_request: 32811
-author:
-type: other

changelogs/unreleased/49392-exempt-jwt-auth-for-user-gitlab-ci-token-from-rate-limiting.yml

----
-title: Exempt user gitlab-ci-token from rate limiting
-merge_request: 31909
-author:
-type: fixed

changelogs/unreleased/50847-automatically-created-mr-uses-wrong-source-branch-when-branching-fr.yml

----
-title: Fix create MR from issue using a tag as ref
-merge_request: 32392
-author: Jacopo Beschi @jacopo-beschi
-type: fixed

changelogs/unreleased/51123-error-500-viewing-admin-page-due-to-statement-timeout-on-counting-t.yml

----
-title: 'Admin dashboard: Fetch and render statistics async'
-merge_request: 32449
-author:
-type: other

changelogs/unreleased/51372-remove-milestone-tabs-deprecation-message.yml

----
-title: Remove deprecation message for milestone tabs
-merge_request: 32252
-author:
-type: other

changelogs/unreleased/51470-webide-default-commit.yml

----
-title: Updated WebIDE default commit options
-merge_request: 31449
-author:
-type: changed

changelogs/unreleased/54331-pipeline-graph-extend-scroll-area.yml

----
-title: Extend pipeline graph scroll area to full width
-merge_request: 14870
-author:
-type: changed

changelogs/unreleased/55095-show-cluster-on-job.yml

----
-title: Show link to cluster used on job page
-merge_request: 32446
-author:
-type: added

changelogs/unreleased/55360-redundant-index-in-the-releases-table_v2.yml

----
-title: Removed redundant index on releases table
-merge_request: 31487
-author:
-type: removed

changelogs/unreleased/55999-misleading-pipeline-tooltip-messages-and-misleading-ci-status-icons.yml

----
-title: Remove "Commit" from pipeline status tooltips
-merge_request: 31861
-author:
-type: fixed

changelogs/unreleased/56130-deployed_at.yml

----
-title: Replace finished_at with deployed_at for the internal API Deployment entity
-merge_request: 32000
-author:
-type: other

changelogs/unreleased/56130-operations-environments-shows-incorrect-deployment-date-for-manual-.yml

----
-title: Update the timestamp in Operations > Environments to show correct deployment
-  date for manual deploy jobs
-merge_request: 32072
-author:
-type: fixed

changelogs/unreleased/56295-some-avatars-not-visible-in-commit-trailers.yml

----
-title: Fix for missing avatar images dislpayed in commit trailers.
-merge_request: 32374
-author: Jesse Hall @jessehall3
-type: fixed

changelogs/unreleased/57402-upate-issues-list-sort-options.yml

----
-title: Updates issues REST API to allow extended sort options
-merge_request: 31849
-author:
-type: changed

changelogs/unreleased/57538-not-null-constraint-on-users-private-profile.yml

----
-title: Setting NOT NULL constraint to users.private_profile column
-merge_request: 14838
-author:
-type: other

changelogs/unreleased/57657-promote-label-to-group-label-via-api-endpoint.yml

----
-title: 'API: Promote project labels to group labels'
-merge_request: 25218
-author: Robert Schilling
-type: added

changelogs/unreleased/57783-better-indication-that-an-issue-has-been-duplicated.yml

----
-title: Indicate on Issue Status if an Issue was Duplicated
-merge_request: 32472
-author:
-type: changed

changelogs/unreleased/59053-no-oauth-for-cicd-github-fe.yml

----
-title: Remove oauth form from GitHub CI/CD only import authentication
-merge_request: 31488
-author:
-type: changed

changelogs/unreleased/59729-estimate-quick-action-does-not-produce-correct-time-for-1mo.yml

----
-title: Fix parsing of months in time tracking commands
-merge_request: 32165
-author:
-type: fixed

changelogs/unreleased/59786-show-renamed-file-in-mr.yml

----
-title: Fix to show renamed file in mr
-merge_request: 31888
-author:
-type: changed

changelogs/unreleased/60141-mr-resolve-conflicts-file-headers-bad-positioning-on-scroll.yml

----
-title: Fix file header style and position during scroll in a merge conflict resolution
-merge_request: 31991
-author:
-type: fixed

changelogs/unreleased/60372-milestone-link-prevent-delete-issue-after-move-it-to-another-projec.yml

----
-title: Add service to transfer Group Milestones when transferring a Project
-merge_request: 31778
-author:
-type: added

changelogs/unreleased/60561-quick-action-label-first-for-issue.yml

----
-title: Quick action label must be first in issue comment
-merge_request: 32367
-author: Romain Maneschi
-type: fixed

changelogs/unreleased/60724-watch-button.yml

----
-title: Fix watch button styling and notifications buttons consistency
-merge_request: 32827
-author:
-type: fixed

changelogs/unreleased/61385-replace-vue-resource.yml

----
-title: Replaced vue resource to axios in the  Markdown field preview component
-merge_request: 32386
-author: Prakash Chokalingam @prakash_Chokalingam
-type: fixed

changelogs/unreleased/61841-fix-encoding-error-in-mr-diffs.yml

----
-title: Fix encoding error in MR diffs when using external diffs
-merge_request: 32862
-author: Hiroyuki Sato
-type: fixed

changelogs/unreleased/62055-find-file-links-encoding.yml

----
-title: Fix encoding of special characters in "Find File"
-merge_request: 31311
-author: Jan Beckmann
-type: fixed

changelogs/unreleased/62122-hide-resolve-thread-button-from-guest.yml

----
-title: Hide resolve thread button from guest
-merge_request: 32859
-author:
-type: changed

changelogs/unreleased/62284-follow-up-from-resolve-api-to-get-all-project-group-members-returns-duplicates.yml

----
-title: Uses projects_authorizations.access_level in MembersFinder
-merge_request: 28887
-author: Jacopo Beschi @jacopo-beschi
-type: fixed

changelogs/unreleased/62322-add-optional-id-to-label-api-put-delete-pd.yml

----
-title: Add optional label_id parameter to label API for PUT and DELETE
-merge_request: 31804
-author:
-type: changed

changelogs/unreleased/62373-badge-counter-very-low-contrast-between-foreground-and-background-c.yml

----
-title: 'Resolve Badge counter: Very low contrast between foreground and background
-  colors'
-merge_request: 31922
-author:
-type: other

changelogs/unreleased/62402-milestone-release-be.yml

----
-title: Allow milestones to be associated with a release (backend)
-merge_request: 30816
-author:
-type: added

changelogs/unreleased/62591-fix-milestone-due-date-today-wording.yml

----
-title: Fix wording on milestone due date when milestone is due today
-merge_request: 32096
-author:
-type: changed

changelogs/unreleased/62673-clean-note-app-tests.yml

----
-title: make test of note app with comments disabled dry
-merge_request: 32383
-author: Romain Maneschi
-type: other

changelogs/unreleased/63262-notes-are-persisted-with-the-user-s-locale.yml

----
-title: Do not translate system notes into author's language
-merge_request: 32264
-author:
-type: fixed

changelogs/unreleased/63502-encrypt-deploy-token.yml

----
-title: Encrypt existing and new deploy tokens
-merge_request: 30679
-author:
-type: other

changelogs/unreleased/63905-discussion-expand-collapse-button-is-only-clickable-on-one-side.yml

----
-title: All of discussion expand/collapse button is clickable
-merge_request: 31730
-author:
-type: fixed

changelogs/unreleased/64009-show-a-meaningful-error-message-when-due-quick_actions-command-fail.yml

----
-title: Show meaningful message on /due quick action with invalid date
-merge_request: 32349
-author: Jacopo Beschi @jacopo-beschi
-type: changed

changelogs/unreleased/64122-documentation-lacks-how-to-enable-project-snippets.yml

----
-title: Mention in docs how to disable project snippets
-merge_request: 32391
-author: Jacopo Beschi @jacopo-beschi
-type: other

changelogs/unreleased/64213-not_filtering.yml

----
-title: Add not param to Issues API endpoint
-merge_request: 16748
-author:
-type: added

changelogs/unreleased/64269-pipeline-api-fails-with-401.yml

----
-title: Read pipelines from public projects through API without an access token
-merge_request: 31816
-author:
-type: fixed

changelogs/unreleased/64383-pattern-matching-with-variables-causes-gitlabs-ci-lint-to-throw-500.yml

----
-title: Fix 500 errors caused by pattern matching with variables in CI Lint
-merge_request: 31719
-author:
-type: fixed

changelogs/unreleased/64385-charts-scroll-handle-icon-has-disappeared.yml

----
-title: fix charts scroll handle icon to use gitlab svg
-merge_request: 31825
-author:
-type: fixed

changelogs/unreleased/64630-add-warning-to-pages-domains-that-obtaining-deploying-ssl-certifica.yml

----
-title: Add warning to pages domains that obtaining/deploying SSL certificates through
-  Let's Encrypt can take some time
-merge_request: 31765
-author:
-type: other

changelogs/unreleased/64677-delete-directory-webide.yml

----
-title: Fixed removing directories in Web IDE
-merge_request: 31727
-author:
-type: fixed

changelogs/unreleased/64764-fix-serverless-layout.yml

----
-title: Fix serverless entry page layout
-merge_request: 32029
-author:
-type: fixed

changelogs/unreleased/64799-disable-transfer-group.yml

----
-title: Disable "Transfer group" button when no group is selected
-merge_request: 31387
-author: Jan Beckmann
-type: fixed

changelogs/unreleased/65063-Embeded-metrics-inconsistent-styles.yml

----
-title: Fixed embeded metrics tooltip inconsistent styling
-merge_request: 31517
-author:
-type: fixed

changelogs/unreleased/65152-unfolded-lines-perf-improvement.yml

----
-title: Support selective highlighting of lines
-merge_request: 32514
-author:
-type: performance

changelogs/unreleased/65192-enable-modsecurity-in-ingress.yml

----
-title: Enable modsecurity in nginx-ingress apps
-merge_request: 15774
-author:
-type: added

changelogs/unreleased/65251-default-clusters-namespace_per_environment-column-to-true.yml

----
-title: Default clusters namespace_per_environment column to true
-merge_request: 32139
-author:
-type: other

changelogs/unreleased/65304-add-pages-first-deployment-message.yml

----
-title: Add warning about initial deployment delay for GitLab Pages sites
-merge_request: 32122
-author:
-type: added

changelogs/unreleased/65389-wrong-format-on-ms-teams-integration-push-events-with-multi-line-commit-messages.yml

----
-title: Wrong format on MS teams integration push events with multi line commit messages
-merge_request: 32180
-author: Massimeddu Cireddu
-type: fixed

changelogs/unreleased/65412-add-support-for-line-charts.yml

----
-title: Create component to display area and line charts in monitor dashboards
-merge_request: 31639
-author:
-type: added

changelogs/unreleased/65427-improve-system-notes-for-zoom-links.yml

----
-title: Improve system notes for Zoom links
-merge_request: 31410
-author: Jacopo Beschi @jacopo-beschi
-type: changed

changelogs/unreleased/65764-add-missing-error-handling-to-add-list-dropdown-in-issue-boards.yml

----
-title: Adds missing error handling
-merge_request: 16896
-author: toptalo
-type: fixed

changelogs/unreleased/65940-run-pipeline.yml

----
-title: Run Pipeline button & API for MR Pipelines
-merge_request: 31722
-author:
-type: added

changelogs/unreleased/65988-optimize-snippet-listings.yml

----
-title: Optimize queries for snippet listings
-merge_request: 32576
-author:
-type: performance

changelogs/unreleased/66022-git-clone-url-box-on-wiki-git-access-page-is-broken.yml

----
-title: Fix broken git clone box on wiki git access page
-merge_request: 31898
-author:
-type: fixed

changelogs/unreleased/66037-deployment-user.yml

----
-title: Return correct user for manual deployments
-merge_request: 32004
-author:
-type: fixed

changelogs/unreleased/66061-update-tooltip-of-detached-label-state.yml

----
-title: Updates tooltip of 'detached' label/state
-merge_request:
-author:
-type: other

changelogs/unreleased/66067-pages-domain-doesnt-set-target-blank.yml

----
-title: Makes custom Pages domain open as external link in new tab
-merge_request: 32130
-author: jakeburden
-type: fixed

changelogs/unreleased/66073-use-time-series-chart-instead-of-area-chart-in-panel_types.yml

----
-title: Enable line charts in dashbaord panels and embedded charts
-merge_request: 31920
-author:
-type: added

changelogs/unreleased/66150-remove-dynamically-constructed-feature-flags-starting-with-promethe.yml

----
-title: Remove dynamically constructed feature flags starting with prometheus_transaction_
-merge_request: 32395
-author: Jacopo Beschi @jacopo-beschi
-type: changed

changelogs/unreleased/66161-replace-expand-icons.yml

----
-title: Replaced expand diff icons
-merge_request: 31907
-author:
-type: changed

changelogs/unreleased/66264-moved-issue-reference.yml

----
-title: Use moved instead of closed in issue references
-merge_request: 32277
-author: juliette-derancourt
-type: changed

changelogs/unreleased/66402-use-visual-review-tools-npm-package.yml

----
-title: Move visual review toolbar code to NPM
-merge_request: 32159
-author:
-type: fixed

changelogs/unreleased/66443-unrecoverable-configuration-loop-in-external-auth-control.yml

----
-title: Don't check external authorization when disabling the service
-merge_request: 32102
-author: Robert Schilling
-type: fixed

changelogs/unreleased/66454-base-components.yml

----
-title: Creates base components for the new job log
-merge_request:
-author:
-type: added

changelogs/unreleased/66454-utils-parser.yml

----
-title: Creates utility parser for the job log
-merge_request: 32555
-author:
-type: added

changelogs/unreleased/66467-enable-error-tracking-only-user-can-read-sentry-logs.yml

----
-title: Display `more information` docs link on error tracking page when users do not have permissions to enable that feature
-merge_request: 32365
-author: Romain Maneschi
-type: fixed

changelogs/unreleased/66524-issue-due-notification-emails-are-threaded-incorrectly.yml

----
-title: Fix issue due notification emails not being threaded correctly
-merge_request: 32325
-author:
-type: fixed

changelogs/unreleased/66616-follow-up-documentation-for-merge-trains-cancel-when-running.yml

----
-title: Update merge train documentation
-merge_request: 32218
-author:
-type: changed

changelogs/unreleased/66637-use-chronic-duration-in-thread-safe-way.yml

----
-title: Use `ChronicDuration` in a thread-safe way
-merge_request: 32817
-author:
-type: fixed

changelogs/unreleased/66701-done-quick-action-is-available-even-no-To-Do-exists.yml

----
-title: Changed todo/done quick actions to work not only for first usage
-merge_request: 16837
-author: Marc Schwede
-type: fixed

changelogs/unreleased/66715-delete-search-animation.yml

----
-title: delete animation width on global search input
-merge_request: 32399
-author: Romain Maneschi
-type: other

changelogs/unreleased/66986-milestone-release-many-to-many.yml

----
-title: Switch Milestone and Release to a many-to-many relationship
-merge_request: 16517
-author:
-type: changed

changelogs/unreleased/67037-user-content-gitlab-static-net-brings-back-404-only.yml

----
-title: Default the asset proxy whitelist to the installation domain
-merge_request: 32703
-author:
-type: fixed

changelogs/unreleased/67248-snippet-title-whitespace.yml

----
-title: Add bottom margin to snippet title
-merge_request: 32877
-author:
-type: fixed

changelogs/unreleased/ab-add-index-for-ci-builds-metrics.yml

----
-title: Create partial index for gitlab-monitor CI metrics
-merge_request: 32546
-author:
-type: performance

changelogs/unreleased/ab-admin-page-user-active-count.yml

----
-title: Replace indexes for counting active users
-merge_request: 32538
-author:
-type: performance

changelogs/unreleased/ab-partial-events-index.yml

----
-title: Replace events index with partial one
-merge_request: 32874
-author:
-type: performance

changelogs/unreleased/ab-partial-index-for-namespaces-type.yml

----
-title: Partial index for namespaces.type
-merge_request: 32876
-author:
-type: performance

changelogs/unreleased/ab-remove-support-bot-column.yml

----
-title: Remove Users.support_bot column
-merge_request: 32554
-author:
-type: other

changelogs/unreleased/ab-routable-nplus1.yml

----
-title: Preload routes information to fix N+1 issue
-merge_request: 32352
-author:
-type: performance

changelogs/unreleased/ab-unconfirmed-email-index.yml

----
-title: Create index for users.unconfirmed_email
-merge_request: 32664
-author:
-type: performance

changelogs/unreleased/ac-accelerate-wiki-attachments.yml

----
-title: Preprocess wiki attachments with GitLab-Workhorse
-merge_request: 32663
-author:
-type: performance

changelogs/unreleased/ac-graphql-root-namespace-stats.yml

----
-title: Expose namespace storage statistics with GraphQL
-merge_request: 32012
-author:
-type: added

changelogs/unreleased/add-dast-full-scan-domain-validation.yml

----
-title: Add DAST full scan domain validation
-merge_request: 16680
-author:
-type: added

changelogs/unreleased/add-label-push-opts.yml

----
-title: Support adding and removing labels w/ push opts
-merge_request: 31831
-author:
-type: added

changelogs/unreleased/add-notification-reason-to-note-emails.yml

----
-title: Add X-GitLab-NotificationReason header to note emails
-merge_request: 32422
-author:
-type: fixed

changelogs/unreleased/add-source-and-merge_request-to-pipeline-webhook.yml

----
-title: Add source and merge_request fields to pipeline event webhook
-merge_request: 32373
-author: Bian Jiaping
-type: added

changelogs/unreleased/add-warning-note-to-project-container-registry-setting.yml

----
-title: Added warning note on the project container registry setting informing users
-  that the registry is public for public projects
-merge_request: 32447
-author:
-type: other

changelogs/unreleased/add_links_to_latest_pipelines.yml

----
-title: 'Add links for latest pipelines'
-merge_request: 20865
-author: Alex Ives
-type: added

changelogs/unreleased/ak-rename-gitlab-monitor.yml

----
-title: Update docs to reflect the rename of gitlab-monitor to gitlab-exporter
-merge_request: 31901
-author:
-type: other

changelogs/unreleased/an-fix-sidekiq-histogram-buckets.yml

----
-title: Allow latency measurements of sidekiq jobs taking > 2.5s
-merge_request: 32001
-author:
-type: fixed

changelogs/unreleased/api_settings.yml

----
-title: Improve application settings API
-merge_request: 31149
-author: Mathieu Parent
-type: fixed

changelogs/unreleased/avoid-race-condition-of-archive-trace-cron-worker.yml

----
-title: Avoid conflicts between ArchiveTracesCronWorker and ArchiveTraceWorker
-merge_request: 31376
-author:
-type: fixed

changelogs/unreleased/backport-schedule-productivity-analytics-backfill.yml

----
-title: Schedule productivity analytics recalculation for EE
-merge_request: 15137
-author:
-type: other

changelogs/unreleased/bump-pages-1-8.yml

----
-title: Upgrade pages to 1.8.0
-merge_request: 32334
-author:
-type: other

changelogs/unreleased/bvl-mr-commit-note-counter.yml

----
-title: Count comments on commits and merge requests
-merge_request: 31912
-author:
-type: other

changelogs/unreleased/bw-asset-proxy-markdown-bump.yml

----
-title: Bump markdown cache version to fix any incorrect links from asset proxy defaults
-merge_request:
-author:
-type: fixed

changelogs/unreleased/bw-show-closed-move.yml

----
-title: Allow close status to be shown on locked issues
-merge_request: 16685
-author:
-type: fixed

changelogs/unreleased/ce-22058-improve-ux-multi-assignees-in-mr.yml

----
-title: Update assignee (cannot merge) style
-merge_request: 31545
-author:
-type: changed

changelogs/unreleased/ce-60465-prevent-comments-on-private-mrs.yml

----
-title: Ensure only authorised users can create notes on Merge Requests and Issues
-type: security

changelogs/unreleased/ce-indicator-for-pipeline-for-merge-train.yml

----
-title: Make MR pipeline widget text more descriptive
-merge_request: 32025
-author:
-type: changed

changelogs/unreleased/ce-slack-close-command.yml

----
-title: Add a close issue slack slash command
-merge_request: 32150
-author:
-type: added

changelogs/unreleased/ce-xanf-move-auto-merge-failed-to-jest.yml

----
-title: Refactored Karma spec to Jest for mr_widget_auto_merge_failed
-merge_request: 32282
-author: Illya Klymov
-type: other

changelogs/unreleased/cert_manager_v0_9.yml

----
-title: Install cert-manager v0.9.1
-merge_request: 32243
-author:
-type: changed

changelogs/unreleased/change-prioritized-labels-empty-state-message.yml

----
-title: Change prioritized labels empty state message
-merge_request: 32338
-author: Lee Tickett
-type: other

changelogs/unreleased/change-role-system-hook.yml

----
-title: Add system hooks for project/group membership updates
-merge_request: 32371
-author: Brandon Williams
-type: added

changelogs/unreleased/ci-config-on-policy.yml

----
-title: Introduced Build::Rules configuration for Ci::Build
-merge_request: 29011
-author:
-type: added

changelogs/unreleased/clean-obsolete-css.yml

----
-title: Fix MR reports section loading icon alignment
-merge_request: 31897
-author:
-type: fixed

changelogs/unreleased/cluster-form-ca-cert-larger.yml

----
-title: Expand textarea for CA cert in cluster form
-merge_request: 32508
-author:
-type: fixed

changelogs/unreleased/cluster_deployments.yml

----
-title: Add index to improve group cluster deployments query performance
-merge_request: 31988
-author:
-type: other

changelogs/unreleased/defect-ref-switcher-separators.yml

----
-title: Fix ref switcher separators from conflicting with branch names
-merge_request: 32198
-author:
-type: fixed

changelogs/unreleased/docs-document-auto-devops-docker-build-secret-forwarding.yml

----
-title: Document forwarding CI variables to docker build in Auto DevOps
-merge_request: 16783
-author:
-type: added

changelogs/unreleased/document-lambda-deploy.yml

----
-title: Document Lambda deploys via GitLab CI/CD
-merge_request: 16858
-author:
-type: other

changelogs/unreleased/ecdsa_pages_certificates.yml

----
-title: Allow ECDSA certificates for pages domains
-merge_request: 32393
-author:
-type: added

changelogs/unreleased/ee-2502-refactor-ee-app-assets-javascripts-approvals-components-approvers_select-vue-to-remove-approverusers.yml

----
-title: 'Add new API method in Api.js: projectUsers'
-merge_request: 31801
-author:
-type: other

changelogs/unreleased/enabling_runners_token_for_groups.yml

----
-title: Adds the runners_token of the group if the user that requests the group info is admin of it
-merge_request: 16831
-author: Ignacio Lorenzo Subirá Otal nachootal@gmail.com
-type: changed

changelogs/unreleased/fe-fix-merge-url-params-with-plus.yml

----
-title: Fix search preserving space when change branch
-merge_request: 31973
-author: minghuan lei
-type: fixed

changelogs/unreleased/feat-smime-signed-notification-emails.yml

----
-title: Notification emails can be signed with SMIME
-merge_request: 30644
-author: Diego Louzán
-type: added

changelogs/unreleased/fix-create-milestone-btn-success.yml

----
-title: Fix style of secondary profile tab buttons.
-merge_request: 32010
-author: Wolfgang Faust
-type: fixed

changelogs/unreleased/fix-dropdown-closing.yml

----
-title: Fix dropdowns closing when click is released outside the dropdown
-merge_request: 32084
-author:
-type: fixed

changelogs/unreleased/fix-file-row-styling.yml

----
-title: Fix loading icon causing text to jump in file row of Web IDE
-merge_request: 31884
-author:
-type: fixed

changelogs/unreleased/fix-nil-deployable-exception-on-job-controller-show.yml

----
-title: Fix users cannot access job detail page when deployable does not exist
-merge_request: 32247
-author:
-type: fixed

changelogs/unreleased/fix-peek-on-puma.yml

----
-title: Fix performance bar on Puma
-merge_request: 32213
-author:
-type: fixed

changelogs/unreleased/fix-regression-remove-installation-pod.yml

----
-title: Fix removal of install pods
-merge_request: 32667
-author:
-type: fixed

changelogs/unreleased/fix-search-input-dropdown.yml

----
-title: Fix top-nav search bar dropdown on xl displays
-merge_request: 31864
-author: Kemais Ehlers
-type: fixed

changelogs/unreleased/fj-11777-lower-search-count-limits.yml

----
-title: Lower search counters
-merge_request: 11777
-author:
-type: performance

changelogs/unreleased/fj-62807-not-prefill-target-branch.yml

----
-title: Avoid prefilling target branch when source branch is the default one
-merge_request: 32701
-author:
-type: other

changelogs/unreleased/fj-66723-add-dns-rebinding-protection-check.yml

----
-title: Allow not resolvable urls when dns rebind protection is disabled
-merge_request: 32523
-author:
-type: fixed

changelogs/unreleased/fj-66950-avoid-dns-checkings-domain-whitelisted.yml

----
-title: Avoid dns rebinding checks when the domain is whitelisted
-merge_request: 32603
-author:
-type: changed

changelogs/unreleased/fj-remove-dns-protection-when-validating.yml

----
-title: Avoid checking dns rebind protection when validating
-merge_request: 32577
-author:
-type: fixed

changelogs/unreleased/generic-alertsettings-model.yml

----
-title: Create table `alerts_service_data`
-merge_request: 32860
-author:
-type: added

changelogs/unreleased/georgekoltsov-13698-override-params.yml

----
-title: Allow project feature permissions to be overridden during import with override_params
-merge_request: 32348
-author:
-type: fixed

changelogs/unreleased/georgekoltsov-18720-persistent-dashboard-sort.yml

----
-title: Add persistance to last choice of projects sorting on projects dashboard page
-merge_request: 31669
-author:
-type: added

changelogs/unreleased/georgekoltsov-54023-fogbugz-visibility-level.yml

----
-title: Change default visibility level for FogBugz imported projects to Private
-merge_request: 32142
-author:
-type: fixed

changelogs/unreleased/gitaly-version-v1.62.0.yml

----
-title: Upgrade to Gitaly v1.62.0
-merge_request: 32608
-author:
-type: changed

changelogs/unreleased/gitaly-version-v1.65.0.yml

----
-title: Upgrade to Gitaly v1.65.0
-merge_request: 17135
-author:
-type: changed

changelogs/unreleased/group_level_jupyterhub.yml

----
-title: Group level JupyterHub
-merge_request: 32512
-author:
-type: added

changelogs/unreleased/handle-invalid-mirror-url.yml

----
-title: Handle invalid mirror url
-merge_request: 32353
-author: Lee Tickett
-type: fixed

changelogs/unreleased/id-autosave-for-new-mr.yml

----
-title: Fix sharing localStorage with all MRs
-merge_request: 32699
-author:
-type: fixed

changelogs/unreleased/id-code-review-smau.yml

----
-title: Add usage pings for merge request creating
-merge_request: 32059
-author:
-type: added

changelogs/unreleased/id-optimize-sql-requests-mr-show.yml

----
-title: Reduce the number of SQL requests on MR-show
-merge_request: 32192
-author:
-type: performance

changelogs/unreleased/improve-chatops-help.yml

----
-title: Improve chatops help output
-merge_request: 32208
-author:
-type: changed

changelogs/unreleased/instance-group-level-knative.yml

----
-title: Allow Knative to be installed on group and instance level clusters
-merge_request: 32128
-author:
-type: added

changelogs/unreleased/issue-32741.yml

----
-title: New interruptible attribute for CI/CD jobs
-merge_request: 23464
-author: Cédric Tabin
-type: added

changelogs/unreleased/issue-64738.yml

----
-title: Prevent archived projects from showing up in global search
-merge_request: 31498
-author: David Palubin
-type: fixed

changelogs/unreleased/issue-67127.yml

----
-title: Expose 'protected' field for Tag API endpoint.
-merge_request: 32790
-author: Andrea Leone
-type: added

changelogs/unreleased/issue_10770.yml

----
-title: Rename epic column state to state_id
-merge_request: 32270
-author:
-type: changed

changelogs/unreleased/issue_40630.yml

----
-title: Save collapsed option for board lists in database
-merge_request: 31069
-author:
-type: added

changelogs/unreleased/issue_54042.yml

----
-title: Let project reporters create issue from group boards
-merge_request: 29866
-author:
-type: fixed

changelogs/unreleased/je-add-cluster-domain-warning.yml

----
-title: Add cluster domain warning
-merge_request: 32260
-author:
-type: changed

changelogs/unreleased/je-add-group-deployments-page-fe.yml

----
-title: Add ability to see project deployments at cluster level (FE)
-merge_request: 31575
-author:
-type: added

changelogs/unreleased/jivanvl-add-caret-icon-dashboard.yml

----
-title: Add caret icons to the monitoring dashboard
-merge_request: 32239
-author:
-type: changed

changelogs/unreleased/job-rules-e2e.yml

----
-title: Passing job rules downstream and E2E specs for job:rules configuration
-merge_request: 32609
-author:
-type: fixed

changelogs/unreleased/kamil-improve-import-export.yml

----
-title: Reduce N+1 when doing project export
-merge_request: 32423
-author:
-type: performance

changelogs/unreleased/keyboard-shortcuts-2.yml

----
-title: Clean up keyboard shortcuts help modal, removing and adding as needed
-merge_request: 31642
-author:
-type: other

changelogs/unreleased/labkit-cache-tracing.yml

----
-title: Add Redis interceptor tracing
-merge_request: 30238
-author:
-type: other

changelogs/unreleased/language-trends-over-time.yml

----
-title: Database table for tracking programming language trends over time
-merge_request: 16491
-author:
-type: added

changelogs/unreleased/latest-pipeline.yml

----
-title: Updated latest pipeline tag tooltip to be more descriptive
-merge_request: 31624
-author:
-type: changed

changelogs/unreleased/mishunov-master-patch-90654.yml

----
-title: Unified presentation of the filter input field for projects listings
-merge_request: 32706
-author:
-type: changed

changelogs/unreleased/ms-implement-build-specific-timeout.yml

----
-title: Allow specifying timeout per-job in .gitlab-ci.yml
-merge_request: 16777
-author: Michał Siwek
-type: added

changelogs/unreleased/new-project-milestone-primary-button.yml

----
-title: New project milestone primary button
-merge_request: 32355
-author: Lee Tickett
-type: fixed

changelogs/unreleased/oauth_bypass_two_factor.yml

----
-title: Add option to allow OAuth providers to bypass two factor
-merge_request: 31996
-author: Dodocat
-type: added

changelogs/unreleased/optimise-build-queue-service.yml

----
-title: Optimise UpdateBuildQueueService
-merge_request: 32095
-author:
-type: performance

changelogs/unreleased/osw-improve-discussions-query.yml

----
-title: Considerably improve the query performance for MR discussions load
-merge_request: 16635
-author:
-type: performance

changelogs/unreleased/pb-update-gitlab-shell-9-4-0.yml

----
-title: Update to GitLab Shell v9.4.0
-merge_request: 32009
-author:
-type: other

changelogs/unreleased/persist-needs-error.yml

----
-title: Persist `needs:` validation as config error
-merge_request:
-author:
-type: fixed

changelogs/unreleased/pl-project-service-json.yml

----
-title: Expose update project service endpoint JSON
-merge_request: 32759
-author:
-type: added

changelogs/unreleased/project-selector-use-gitlab-ui-search-input.yml

----
-title: Align project selector search box better with design system
-merge_request: 16795
-author:
-type: changed

changelogs/unreleased/quote-branch-names-in-instructions.yml

----
-title: Quote branch names in how to merge instructions
-merge_request: 32639
-author: Lee Tickett
-type: fixed

changelogs/unreleased/refactor-showStagedIcon.yml

----
-title: Refactor showStagedIcon property to reflect the behavior its name represents.
-merge_request: 32333
-author: Arun Kumar Mohan
-type: other

changelogs/unreleased/remove-margin-from-user-header.yml

----
-title: Remove margin from user header
-merge_request: 30878
-author: lucyfox
-type: fixed

changelogs/unreleased/remove-vue-resource-from-group-service.yml

----
-title: Remove vue resource from group service
-merge_request:
-author: Lee Tickett
-type: other

changelogs/unreleased/remove-vue-resource-from-issue.yml

----
-title: Remove vue resource from issue
-merge_request: 32421
-author: Lee Tickett
-type: other

changelogs/unreleased/remove-vue-resource-from-notes-service.yml

----
-title: Remove vue-resource from notes service
-merge_request: 32934
-author: Lee Tickett
-type: other

changelogs/unreleased/remove-vue-resource-from-performance-bar-service.yml

----
-title: Remove vue-resource from PerformanceBarService
-merge_request: 32428
-author: Lee Tickett
-type: other

changelogs/unreleased/remove-vue-resource-from-remove-issue.yml

----
-title: Remove vue resource from remove issue
-merge_request: 32425
-author: Lee Tickett
-type: other

changelogs/unreleased/remove-vue-resource-from-sidebar-service.yml

----
-title: Remove vue resource from sidebar service
-merge_request: 32400
-author: Lee Tickett
-type: other

changelogs/unreleased/runner-chart-repo-use-new-location.yml

----
-title: Use new location for gitlab-runner helm charts
-merge_request: 32384
-author:
-type: other

changelogs/unreleased/security-12-3-bump-pages.yml

----
-title: Upgrade pages to 1.8.1
-merge_request:
-author:
-type: security

changelogs/unreleased/security-59549-add-capcha-for-failed-logins.yml

----
-title: Add :login_recaptcha_protection_enabled setting to prevent bots from brute-force attacks.
-merge_request:
-author:
-type: security

changelogs/unreleased/security-61974-limit-issue-comment-size-2.yml

----
-title: Speed up regexp in namespace format by failing fast after reaching maximum namespace depth
-merge_request:
-author:
-type: security

changelogs/unreleased/security-61974-limit-issue-comment-size.yml

----
-title: Limit the size of issuable description and comments
-merge_request:
-author:
-type: security

changelogs/unreleased/security-64711-fix-commit-todos.yml

----
-title: Send TODOs for comments on commits correctly
-merge_request:
-author:
-type: security

changelogs/unreleased/security-ci-metrics-permissions.yml

----
-title: Restrict MergeRequests#test_reports to authenticated users with read-access
-  on Builds
-merge_request:
-author:
-type: security

changelogs/unreleased/security-enable-image-proxy.yml

----
-title: Added image proxy to mitigate potential stealing of IP addresses
-merge_request:
-author:
-type: security

changelogs/unreleased/security-epic-notes-api-reveals-historical-info-ce-master.yml

----
-title: Filter out old system notes for epics in notes api endpoint response
-merge_request:
-author:
-type: security

changelogs/unreleased/security-exposed-default-branch.yml

----
-title: Avoid exposing unaccessible repo data upon GFM post processing
-merge_request:
-author:
-type: security

changelogs/unreleased/security-fix-html-injection-for-label-description-ce-master.yml

----
-title: Fix HTML injection for label description
-merge_request:
-author:
-type: security

changelogs/unreleased/security-fix-markdown-xss.yml

----
-title: Make sure HTML text is always escaped when replacing label/milestone references.
-merge_request:
-author:
-type: security

changelogs/unreleased/security-fix_jira_ssrf_vulnerability.yml

----
-title: Prevent DNS rebind on JIRA service integration
-merge_request:
-author:
-type: security

changelogs/unreleased/security-gitaly-1-61-0.yml

----
-title: "Gitaly: ignore git redirects"
-merge_request:
-author:
-type: security

changelogs/unreleased/security-group-runners-permissions.yml

----
-title: Use admin_group authorization in Groups::RunnersController
-merge_request:
-author:
-type: security

changelogs/unreleased/security-hide_merge_request_ids_on_emails.yml

----
-title: Prevent disclosure of merge request ID via email
-merge_request:
-author:
-type: security

changelogs/unreleased/security-id-filter-timeline-activities-for-guests.yml

----
-title: Show cross-referenced MR-id in issues' activities only to authorized users
-merge_request:
-author:
-type: security

changelogs/unreleased/security-katex-dos-master.yml

----
-title: Enforce max chars and max render time in markdown math
-merge_request:
-author:
-type: security

changelogs/unreleased/security-mr-head-pipeline-leak.yml

----
-title: Check permissions before responding in MergeController#pipeline_status
-merge_request:
-author:
-type: security

changelogs/unreleased/security-personal-snippets.yml

----
-title: Remove EXIF from users/personal snippet uploads.
-merge_request:
-author:
-type: security

changelogs/unreleased/security-project-import-bypass.yml

----
-title: Fix project import restricted visibility bypass via API
-merge_request:
-author:
-type: security

changelogs/unreleased/security-sarcila-fix-weak-session-management.yml

----
-title: Fix weak session management by clearing password reset tokens after login (username/email)
-  are updated
-merge_request:
-author:
-type: security

changelogs/unreleased/security-ssrf-kubernetes-dns.yml

----
-title: Fix SSRF via DNS rebinding in Kubernetes Integration
-merge_request:
-author:
-type: security

changelogs/unreleased/sh-add-delete-confirmation.yml

----
-title: Make it harder to delete issuables accidentally
-merge_request: 32376
-author:
-type: fixed

changelogs/unreleased/sh-add-index-members-expires.yml

----
-title: Fix member expiration not always working
-merge_request: 32951
-author:
-type: performance

changelogs/unreleased/sh-add-margin-member-list.yml

----
-title: Add padding to left of "Sort by" in members dropdown
-merge_request: 32602
-author:
-type: other

changelogs/unreleased/sh-add-sidekiq-logging-for-bad-ci.yml

----
-title: Log errors for failed pipeline creation in PostReceive
-merge_request: 32633
-author:
-type: other

changelogs/unreleased/sh-eliminate-gitaly-nplus-one-notes.yml

----
-title: Eliminate Gitaly N+1 queries with notes API
-merge_request: 32089
-author:
-type: performance

changelogs/unreleased/sh-fix-ci-lint-500-error.yml

----
-title: Fix 500 error in CI lint when included templates are an array
-merge_request: 32232
-author:
-type: fixed

changelogs/unreleased/sh-fix-issue-move-api.yml

----
-title: Fix moving issues API failing when text includes commit URLs
-merge_request: 32317
-author:
-type: fixed

changelogs/unreleased/sh-fix-oauth-application-page.yml

----
-title: Optimize /admin/applications so that it does not timeout
-merge_request: 32852
-author:
-type: performance

changelogs/unreleased/sh-guard-against-orphaned-project-feature.yml

----
-title: Guard against deleted project feature entry in project permissions
-merge_request: 32187
-author:
-type: fixed

changelogs/unreleased/sh-lfs-object-batches.yml

----
-title: Makes LFS object linker process OIDs in batches
-merge_request: 32268
-author:
-type: performance

changelogs/unreleased/sh-project-feature-nplus-one.yml

----
-title: Remove N+1 SQL query loading project feature in dashboard
-merge_request: 32169
-author:
-type: performance

changelogs/unreleased/sh-support-content-for-snippets-api.yml

----
-title: Standardize use of `content` parameter in snippets API
-merge_request: 32296
-author:
-type: changed

changelogs/unreleased/sh-suppress-diverging-count-commits-request.yml

----
-title: Skip requesting diverging commit counts if no branches are listed
-merge_request: 32496
-author:
-type: performance

changelogs/unreleased/slack-protected-branch-notification.yml

----
-title: Support chat notifications to be fired for protected branches
-merge_request: 32176
-author:
-type: added

changelogs/unreleased/ss-add-board-name-to-page-title.yml

----
-title: Added board name to page title in boards view
-merge_request:
-author:
-type: other

changelogs/unreleased/ss-collapsed-issue-boards-per-user-ee.yml

----
-title: Frontend support for saving issue board preferences on the current user
-merge_request: 16421
-author:
-type: changed

changelogs/unreleased/static-objects-external-storage.yml

----
-title: Enable serving static objects from an external storage
-merge_request: 31025
-author:
-type: added

changelogs/unreleased/swagger-ui-ci-page-template.yml

----
-title: "Add SwaggerUI Pages template for .gitlab-ci.yml"
-merge_request: 31183
-author: mdhtr
-type: added

changelogs/unreleased/tc-cleanup-issue-created-text-mail.yml

----
-title: Bring text mail for new issue & MR more in line
-merge_request: 32254
-author:
-type: changed

changelogs/unreleased/todos-include-issue-mr-titles.yml

----
-title: Add Issue and Merge Request titles to Todo items
-merge_request: 30435
-author: Arun Kumar Mohan
-type: changed

changelogs/unreleased/uncomment_commit_signatures_feature_flag.yml

----
-title: Upgrade to Gitaly 1.60.0
-merge_request: 31981
-author:
-type: changed

changelogs/unreleased/update-babel-to-7-5-5.yml

----
-title: Upgrade babel to 7.5.5
-merge_request: 31819
-author: Takuya Noguchi
-type: other

changelogs/unreleased/update-gitlab-runner-helm-chart-to-0-8-0.yml

----
-title: Update GitLab Runner Helm Chart to 0.8.0
-merge_request: 32289
-author:
-type: other

changelogs/unreleased/update-workhorse.yml

----
-title: Update GitLab Workhorse to v8.10.0
-merge_request: 32501
-author:
-type: other

changelogs/unreleased/use_default_external_auth_label_empty.yml

----
-title: Prevent empty external authorization classification labels from overriding
-  the default label
-merge_request: 32517
-author: Will Chandler
-type: fixed

changelogs/unreleased/user_name_migration.yml

----
-title: Add First and Last name columns to User model
-merge_request: 31985
-author:
-type: added

changelogs/unreleased/winh-deduplicate-board-headers.yml

----
-title: Hide duplicate board list while dragging
-merge_request: 32099
-author:
-type: fixed