Update CHANGELOG.md for 11.9.0

[ci skip]

CHANGELOG.md

@@ -2,6 +2,266 @@
 documentation](doc/development/changelog.md) for instructions on adding your own
 entry.
 
+## 11.9.0 (2019-03-22)
+
+### Security (24 changes)
+
+- Use encrypted runner tokens. !25532
+- Stop linking to unrecognized package sources. !55518
+- Disable issue boards API when issues are disabled.
+- Forbid creating discussions for users with restricted access.
+- Fix leaking private repository information in API.
+- Fixed ability to see private groups by users not belonging to given group.
+- Prevent releases links API to leak tag existance.
+- Display the correct number of MRs a user has access to.
+- Block local URLs for Kubernetes integration.
+- Fix arbitrary file read via diffs during import.
+- Check if desired milestone for an issue is available.
+- Don't allow non-members to see private related MRs.
+- Check snippet attached file to be moved is within designated directory.
+- Fix blind SSRF in Prometheus integration by checking URL before querying.
+- Fix git clone revealing private repo's presence.
+- Remove project serialization in quick actions response.
+- Don't show new issue link after move when a user does not have permissions.
+- Limit mermaid rendering to 5K characters.
+- Show only merge requests visible to user on milestone detail page.
+- Display only information visible to current user on the Milestone page.
+- Do not display impersonated sessions under active sessions and remove ability to revoke session.
+- Validate session key when authorizing with GCP to create a cluster.
+- Do not disclose milestone titles for unauthorized users.
+- Remove the possibility to share a project with a group that a user is not a member of.
+
+### Removed (1 change)
+
+- Remove HipChat integration from GitLab. !22223
+
+### Fixed (86 changes, 21 of them are from the community)
+
+- Fixes issue with AWS V4 signatures not working with some S3 providers. !21788
+- Validate 'include' keywords in gitlab-ci.yml configuration files. !24098 (Paul Bonaud)
+- Close More Actions tooltip when menu opens. !24285
+- API: Support Jira transition ID as string. !24400 (Robert Schilling)
+- Fixed navigation sidebar flashing open on page load. !24555
+- Fix username escaping when using assign to me for issues. !24673
+- commit page info-well overflow fix #56436. !24799 (Gokhan Apaydin)
+- Fix error tracking list page. !24806
+- Fix overlapping empty-header logo. !24868 (Jonas L.)
+- Resolve Jobs tab border top in pipeline's page is 1px off. !24878
+- Require maintainer access to show pages domain settings. !24926
+- Display error message when API call to list Sentry issues fails. !24936
+- Fix rollout status for statefulsets and daemonsets. !24972 (Sergej Nikolaev <kinolaev@gmail.com>)
+- Display job names consistently on pipelines and environments list. !24984
+- Update new password breadcrumb. !25037 (George Tsiolis)
+- Fixes functions finder for upgraded Knative app. !25067
+- Provide expires_in in LFS authentication payload. !25082
+- Fix validation of certain ed25519 keys. !25115 (Merlijn B. W. Wajer)
+- Timer and action name aligned vertically for delayed jobs in pipeline actions. !25117 (Gokhan Apaydin)
+- Fix the border style of CONTRIBUTING button when it exists. !25124 (Takuya Noguchi)
+- Change badges.svg example to pipeline.svg. !25157 (Aviad Levy)
+- API: Fix docs and parameters for hangouts-chat service. !25180 (Robert Schilling)
+- API: Expose full commit title. !25189 (Robert Schilling)
+- API: Require only one parameter when updating a wiki. !25191 (Robert Schilling)
+- Hide pipeline status when pipelines are disabled on project. !25204
+- Fix alignment of dropdown icon on issuable on mobile. !25205 (Takuya Noguchi)
+- Add left margin to 1st time contributor badge. !25216 (Gokhan Apaydin)
+- Use limited counter for runner build count in admin page. !25220
+- API: Ensure that related merge requests are referenced cross-project. !25222 (Robert Schilling)
+- Ensure the base pipeline of a Merge Request belongs to its target branch. !25226
+- Fix import_jid error on project import. !25239
+- Fix commenting on commits having SHA1 starting with a large number. !25278
+- Allow empty values such as [] to be stored in reactive cache. !25283
+- Remove vertical connecting line placeholder from diff discussion notes. !25292
+- Fix hover and active state colors of award emoji button. !25295
+- Fix author layouts in issuable meta line UIs on mobile. !25332 (Takuya Noguchi)
+- Fix bug where project topics truncate. !25398
+- Fix ETag caching not being used for AJAX requests. !25400
+- Doc - fix the url of pipeline status badge. !25404 (Aviad Levy)
+- Fix pipeline status icon mismatch. !25407
+- Allow users to compare branches on a read-only instance. !25414
+- Fix 404s when C++ .gitignore template selected. !25416
+- Always fetch MR latest version when creating suggestions. !25441
+- Only show borders for markdown images in notes. !25448
+- Bring back Rugged implementation of find_commit. !25477
+- Remove duplicate units from metrics graph. !25485
+- Fix project import error importing releases. !25495
+- Remove duplicate XHR request when requesting new pipeline page. !25506
+- Properly handle multiple X-Forwarded-For addresses in runner IP. !25511
+- Fix weekday shift in issue board cards for UTC+X timezones by removing local timezone to UTC conversion. !25512 (Elias Werberich)
+- Fix large table horizontal scroll and prevent side-by-side tables. !25520 (Dany Jupille)
+- Fix error when viewing group issue boards when user doesn't have explicit group permissions. !25524
+- Respect the should_remove_source_branch parameter to the merge API. !25525
+- Externalize markdown toolbar buttons tooltips. !25529
+- Fix method to mark a project repository as writable. !25546
+- fix group without owner after transfer. !25573 (Peter Marko)
+- Fix pagination and duplicate requests in environments page. !25582
+- Improve the JS pagination to handle the case when the `X-Total` and `X-Total-Pages` headers aren't present. !25601
+- Add right padding to the repository mirror action buttons. !25606
+- Use 'folder-open' from sprite icons for Browse Files button in Tag page. !25635
+- Make merge to refs/merge-requests/:iid/merge not raise when FF-only enabled. !25653
+- Fixed "Copying comment with ordered list includes extraneous newlines". !25695
+- Fix bridge jobs only/except variables policy. !25710
+- Allow GraphQL requests without CSRF token. !25719
+- Skip Project validation during Hashed Storage migration or rollback. !25753
+- Resolve showing squash commit edit issue when only single commit is present. !25807
+- Fix the last-ditch memory killer pgroup SIGKILL. !25940
+- Disable timeout on merge request merging poll. !25988
+- Allow modifying squash commit message for fast-forward only merge method. !26017
+- Fix bug in BitBucket imports with SHA shorter than 40 chars. !26050
+- Fix health checks not working behind load balancers. !26055
+- Fix 500 error caused by CODEOWNERS with no matches. !26072
+- Fix notes being marked as edited after resolving. !26143
+- Fix error creating a merge request when diff includes a null byte. !26190
+- Fix undefined variable error on json project views. !26297
+- GitHub import: Create new branches as project owner. !26335
+- Gracefully handles excluded fields from attributes during serialization on JsonCache. !26368
+- Admin section finds users case-insensitively.
+- Fixes not working dropdowns in pipelines page.
+- Do not show file templates when creating a new directory in WebIDE.
+- Allow project members to see private group if the project is in the group namespace.
+- Allow maintainers to remove pages.
+- Fix inconsistent pagination styles.
+- Fixed blob editor deleting file content for certain file paths.
+- Fix upcoming milestone when there are milestones with far-future due dates.
+- Fixed alignment of changed icon in Web IDE.
+
+### Changed (31 changes, 10 of them are from the community)
+
+- Improve snippets empty state. !18348 (George Tsiolis)
+- Remove second primary button on wiki edit. !19959 (George Tsiolis)
+- Allow raw `tls_options` to be passed in LDAP configuration. !20678
+- Remove undigested token column from personal_access_tokens table from the database. !22743
+- Update activity filter for issues. !23423 (George Tsiolis)
+- Use auto-build-image for build job in Auto-DevOps.gitlab-ci.yml. !24279
+- Error tracking configuration - add a Sentry project selection dropdown. !24701
+- Move ChatOps to Core. !24780
+- Implement new arguments `state`, `closed_before` and `closed_after` for `IssuesResolver` in GraphQL. !24910
+- Validate kubernetes cluster CA certificate. !24990
+- Review App Link to Changed Page if Only One Change Present. !25048
+- Show pipeline ID, commit, and branch name on modal while stopping pipeline. !25059
+- Improve empty state for starred projects. !25138
+- Capture due date when importing milestones from Github. !25182 (dstanley)
+- Add a spinner icon which is rendered using pure css. !25186
+- Make emoji picker bigger. !25187 (Jacopo Beschi @jacopo-beschi)
+- API: Sort tie breaker with id DESC. !25311 (Nermin Vehabovic)
+- Add iOS-fastlane template for .gitlab-ci.yml. !25395
+- Move language setting to preferences. !25427 (Fabian Schneider @fabsrc)
+- Resolve Create Project Template for Netlify. !25453
+- Sort labels alphabetically on issues and merge requests list. !25470
+- Add Project template for .NET Core. !25486
+- Update operations settings breadcrumb trail. !25539 (George Tsiolis)
+- Add Project template for go-micro. !25553
+- Jira: make issue links title compact. !25609 (Elan Ruusamäe @glensc)
+- Project level filtering for JupyterHub. !25684 (Amit Rathi (amit1rrr))
+- Clean up vendored templates. !25794
+- Mask all TOKEN and PASSWORD CI variables. !25868
+- Add project template for Android. !25870
+- Add iOS project template. !25872
+- Upgrade to Gitaly v1.26.0. !25890
+
+### Performance (11 changes)
+
+- Improve performance for diverging commit counts. !24287
+- Optimize Redis usage in User::ActivityService. !25005
+- Only load syntax highlight CSS of selected theme. !25232
+- Improve label select rendering. !25281
+- Enable persisted pipeline stages by default. !25347
+- Speed up group issue search counts. !25411
+- Load repository language from the database if detected before. !25518
+- Remove N+1 query for tags in /admin/runners page. !25572
+- Eliminate most N+1 queries loading UserController#calendar_activities. !25697
+- Improve Web IDE launch performance. !25700
+- Significantly reduce N+1 queries in /api/v4/todos endpoint. !25711
+
+### Added (55 changes, 18 of them are from the community)
+
+- Add a tag filter to the admin runners view. !19740 (Alexis Reigel)
+- Add project fetch statistics. !23596 (Jacopo Beschi @jacopo-beschi)
+- Hashed Storage rollback mechanism. !23955
+- Allow to recursively expand includes. !24356
+- Allow expanding a diff to display full file. !24406
+- Support `only: changes:` on MR pipelines. !24490 (Hiroyuki Sato)
+- Expose additional merge request pipeline variables. !24595 (Hiroyuki Sato)
+- Add metadata about the GitLab server to GraphQL. !24636
+- Support merge ref writing (without merging to target branch). !24692
+- Add field mergeRequests for project in GraphQL. !24805
+- API support for MR merge to temporary merge ref path. !24918
+- Ability to filter confidential issues. !24960 (Robert Schilling)
+- Allow creation of branches that match a wildcard protection, except directly through git. !24969
+- Add related merge request count to api response. !24974
+- Add realtime validation for user fullname and username on validation. !25017 (Ehsan Abdulqader @EhsanZ)
+- Allow setting feature flags per GitLab group through the API. !25022
+- Add API endpoint to get a commit's GPG signature. !25032
+- Add support for FTP assets for releases. !25071 (Robert Schilling)
+- Add Confirmation Modal to Rollback on Environment. !25110
+- add title attribute to display file name. !25154 (Satoshi Nakamatsu @satoshicano)
+- API: Expose text_color for project and group labels. !25172 (Robert Schilling)
+- Added support for ingress hostnames. !25181 (walkafwalka)
+- API: Promote project milestone to a group milestone. !25203 (Nermin Vehabovic)
+- API: Expose if the current user can merge a MR. !25207 (Robert Schilling)
+- add readme to changelogs directory. !25209 (@glensc)
+- API: Indicate if label is a project label. !25219 (Robert Schilling)
+- Expose refspecs and depth to runner. !25233
+- Port System Header and Footer feature to Core. !25241
+- Sort Environments by Last Updated. !25260
+- Accept force option to overwrite branch on commit via API. !25286
+- Add support for masking CI variables. !25293
+- Add Link from Closed (moved) Issues to Moved Issue. !25300
+- Next/previous navigation between files in MR review. !25355
+- Add YouTrack integration service. !25361 (Yauhen Kotau @bessorion)
+- Add ability to set path and name for project on fork using API. !25363
+- Add project level config for merge pipelines. !25385
+- Edit Knative domain after it has been deployed. !25386
+- Add zoom and scroll to metrics dashboard. !25388
+- Persist source sha and target sha for merge pipelines. !25417
+- Add support for toggling discussion filter from notes section. !25426
+- Resolve Move files in the Web IDE. !25431
+- Show header and footer system messages in email. !25474
+- Allow configuring POSTGRES_VERSION in Auto DevOps. !25500
+- Add Saturday to Localization first day of the week. !25509 (Ahmad Haghighi)
+- Extend the Gitlab API for deletion of job_artifacts of a single job. !25522 (rroger)
+- Simplify CI/CD configuration on serverless projects. !25523
+- Add button to start discussion from single comment. !25575
+- sidekiq: terminate child processes at shutdown. !25669
+- Expose merge request entity for pipelines. !25679
+- Link to most recent MR from a branch. !25689
+- Adds Auto DevOps build job for tags. !25718 (walkafwalka)
+- Allow all snippets to be accessed by API. !25772
+- Make file tree in merge requests resizable.
+- Make the Web IDE the default editor.
+- File uploads are deleted asynchronously when deleting a project or group.
+
+### Other (28 changes, 6 of them are from the community)
+
+- Improve GitHub and Gitea project import table UI. !24606
+- Externalize strings from `/app/views/projects/commit`. !24668 (George Tsiolis)
+- Correct non-standard unicode spaces to regular unicode. !24795 (Marcel Amirault)
+- Provide a performance bar link to the Jaeger UI. !24902
+- Remove BATCH_SIZE from WikiFileFinder. !24933
+- Use export-import svgs from gitlab-svgs. !24954
+- Fix N+1 query in Issues and MergeRequest API when issuable_metadata is present. !25042 (Alex Koval)
+- Directly inheriting from ActiveRecord::Migration is deprecated. !25066 (Jasper Maes)
+- Bump Helm and kubectl in Auto DevOps to 2.12.3 and 1.11.7 respectively. !25072
+- Log queue duration in production_json.log. !25075
+- Extracted ResolveWithIssueButton to its own component. !25093 (Martin Hobert)
+- Add rectangular project and group avatars. !25098
+- Include note in the Rails filter_parameters configuration. !25238
+- Bump Helm and kubectl used in Kubernetes integration to 2.12.3 and 1.11.7 respectively. !25268
+- Include gl_project_path in API /internal/allowed response. !25314
+- Fix incorrect Pages Domains checkbox description. !25392 (Anton Melser)
+- Update GitLab Runner Helm Chart to 0.2.0. !25493
+- Add suffix (`_event`) to merge request source. !25508
+- Creates a helper function to check if repo is EE. !25647
+- If chpst is available, make fron-source installations run sidekiq as a process group leader. !25654
+- Bring back Rugged implementation of GetTreeEntries. !25674
+- Moves EE util into the CE file. !25680
+- Bring back Rugged implementation of CommitIsAncestor. !25702
+- Bring back Rugged implementation of TreeEntry. !25706
+- Enable syntax highlighting to other supported markups. !25761
+- Update GitLab Shell to v8.7.1. !25801
+- Bring back Rugged implementation of commit_tree_entry. !25896
+- Removes EE differences for jobs/getters.js.
+
+
 ## 11.8.3 (2019-03-19)
 
 ### Security (1 change)

changelogs/unreleased/10095-job-getters.yml

----
-title: Removes EE differences for jobs/getters.js
-merge_request:
-author:
-type: other

changelogs/unreleased/10097-number-utils.yml

----
-title: Moves EE util into the CE file
-merge_request: 25680
-author:
-type: other

changelogs/unreleased/13784-simple-masking-of-protected-variables-in-logs.yml

----
-title: Add support for masking CI variables.
-merge_request: 25293
-author:
-type: added

changelogs/unreleased/20084-update-the-spinner-component.yml

----
-title: Add a spinner icon which is rendered using pure css + update conflicting CSS
-merge_request: 25683
-author:
-type: changed

changelogs/unreleased/24642-activity_service_optimization.yml

----
-title: Optimize Redis usage in User::ActivityService
-merge_request: 25005
-author:
-type: performance

changelogs/unreleased/27333-re-deploy-rollback-button-should-ask-for-confirmation-before-executing.yml

----
-title: Add Confirmation Modal to Rollback on Environment
-merge_request: 25110
-author:
-type: added

changelogs/unreleased/2802-security-add-public-internal-groups-as-members-to-your-project-idor.yml

----
-title: Remove the possibility to share a project with a group that a user is not a member
-  of
-merge_request:
-author:
-type: security

changelogs/unreleased/32714-copying-comment-with-ordered-list-includes-extraneous-newlines.yml

----
-title: Fixed "Copying comment with ordered list includes extraneous newlines"
-merge_request: 25695
-author:
-type: fixed

changelogs/unreleased/34555-empty-state-for-starred-projects.yml

----
-title: Improve empty state for starred projects
-merge_request: 25138
-author:
-type: changed

changelogs/unreleased/35638-move-language-setting-to-preferences.yml

----
-title: Move language setting to preferences
-merge_request: 25427
-author: Fabian Schneider @fabsrc
-type: changed

changelogs/unreleased/37673-minor-issue-with-apostrophe-single-quote-when-clicking-assign-to-me.yml

----
-title: Fix username escaping when using assign to me for issues
-merge_request: 24673
-author:
-type: fixed

changelogs/unreleased/39010-add-left-margin-to-1st-time-contributor-badge.yml

----
-title: Add left margin to 1st time contributor badge
-merge_request: 25216
-author: Gokhan Apaydin
-type: fixed

changelogs/unreleased/39676-wiki-api-problems-on-update-parameters-and-500-error.yml

----
-title: 'API: Require only one parameter when updating a wiki'
-merge_request: 25191
-author: Robert Schilling
-type: fixed

changelogs/unreleased/40396-sidekiq-in-process-group.yml

----
-title: 'sidekiq: terminate child processes at shutdown'
-merge_request: 25669
-author:
-type: added

changelogs/unreleased/40396-use-pgroups-for-background-jobs.yml

----
-title: 'If chpst is available, make fron-source installations run sidekiq as a process group leader'
-merge_request: 25654
-author:
-type: other

changelogs/unreleased/40795-set-project-name-on-fork-api.yml

----
-title: Add ability to set path and name for project on fork using API
-merge_request: 25363
-author:
-type: added

changelogs/unreleased/41888-access-personal-snippets-by-api.yml

----
-title: Allow all snippets to be accessed by API
-merge_request: 25772
-author:
-type: added

changelogs/unreleased/42086-project-fetch-statistics-api-http-only.yml

----
-title: Add project fetch statistics
-merge_request: 23596
-author: Jacopo Beschi @jacopo-beschi
-type: added

changelogs/unreleased/44740-api-to-verify-a-given-user-has-right-to-merge-a-given-mergerequest.yml

----
-title: 'API: Expose if the current user can merge a MR'
-merge_request: 25207
-author: Robert Schilling
-type: added

changelogs/unreleased/45035-force-push-api.yml

----
-title: Accept force option to overwrite branch on commit via API
-merge_request: 25286
-author:
-type: added

changelogs/unreleased/45305-ci-status-icon-mismatch-on-merge-requests-page-and-the-mr-itself.yml

----
-title: Fix pipeline status icon mismatch
-merge_request: 25407
-author:
-type: fixed

changelogs/unreleased/46464-improve-stop-pipeline-modal.yml

----
-title: Show pipeline ID, commit, and branch name on modal while stopping pipeline
-merge_request: 25059
-author:
-type: changed

changelogs/unreleased/46750-ci-empty-environment-is-created-even-when-a-job-isn-t-run-when-manual.yml

----
-title: Sort Environments by Last Updated
-merge_request: 25260
-author:
-type: added

changelogs/unreleased/47150-update-sshkey.yml

----
-title: Fix validation of certain ed25519 keys
-merge_request: 25115
-author: Merlijn B. W. Wajer
-type: fixed

changelogs/unreleased/47869-jobs-tab-border-top-in-pipeline-s-page-is-1px-off.yml

----
-title: Resolve Jobs tab border top in pipeline's page is 1px off
-merge_request: 24878
-author:
-type: fixed

changelogs/unreleased/48324-enable-squash-message-on-fast-forward.yml

----
-title: Allow modifying squash commit message for fast-forward only merge method
-merge_request: 26017
-author:
-type: fixed

changelogs/unreleased/48798-keybinding-mr-diff.yml

----
-title: Next/previous navigation between files in MR review
-merge_request: 25355
-author:
-type: added
\ No newline at end of file

changelogs/unreleased/49397-move-files-in-ide.yml

----
-title: Resolve Move files in the Web IDE
-merge_request: 25431
-author:
-type: added

changelogs/unreleased/49502-gpg-signature-api-endpoint.yml

----
-title: Add API endpoint to get a commit's GPG signature
-merge_request: 25032
-author:
-type: added

changelogs/unreleased/49663-branch-to-mr-connection.yml

----
-title: Link to most recent MR from a branch
-merge_request: 25689
-author:
-type: added

changelogs/unreleased/50006-expose-textcolor-from-public-labels-api.yml

----
-title: 'API: Expose text_color for project and group labels'
-merge_request: 25172
-author: Robert Schilling
-type: added

changelogs/unreleased/50313-use-kaniko-to-build-containers-in-autodevops.yml

----
-title: Use auto-build-image for build job in Auto-DevOps.gitlab-ci.yml
-merge_request: 24279
-author:
-type: changed

changelogs/unreleased/50433-make-emoji-picker-bigger.yml

----
-title: Make emoji picker bigger
-merge_request: 25187
-author: Jacopo Beschi @jacopo-beschi
-type: changed

changelogs/unreleased/51819-show-feed-toggle-under-system-notes.yml

----
-title: Add support for toggling discussion filter from notes section
-merge_request: 25426
-author:
-type: added

changelogs/unreleased/51971-milestones-visibility.yml

----
-title: Check if desired milestone for an issue is available
-merge_request:
-author:
-type: security

changelogs/unreleased/52198-timer-is-vertically-misaligned-for-delayed-jobs-in-pipeline-actions.yml

----
-title: 'Timer and action name aligned vertically for delayed jobs in pipeline actions'
-merge_request: 25117
-author: Gokhan Apaydin
-type: fixed

changelogs/unreleased/52424-goodbye-hipchat.yml

----
-title: Remove HipChat integration from GitLab
-merge_request: 22223
-author:
-type: removed

changelogs/unreleased/52459-display-job-names-consistently-on-pipelines-and-environments-list.yml

----
-title: Display job names consistently on pipelines and environments list
-merge_request: 24984
-author:
-type: fixed

changelogs/unreleased/52734-styling-of-user-project-and-group-avatars.yml

----
-title: Add rectangular project and group avatars
-merge_request: 25098
-author:
-type: other

changelogs/unreleased/52778-don-t-display-pipeline-status-if-pipelines-are-disabled.yml

----
-title: Hide pipeline status when pipelines are disabled on project.
-merge_request: 25204
-author:
-type: fixed

changelogs/unreleased/52792-align-mirror-repository-button.yml

----
-title: Add right padding to the repository mirror action buttons
-merge_request: 25606
-author:
-type: fixed

changelogs/unreleased/52877-ios-publishing-blog-post-and-gitlab-ci-yml-template.yml

----
-title: Add iOS-fastlane template for .gitlab-ci.yml
-merge_request: 25395
-author:
-type: changed

changelogs/unreleased/53325-admin-runners-page-fails-with-an-sql-statement-timeout.yml

----
-title: Use limited counter for runner build count in admin page.
-merge_request: 25220
-author:
-type: fixed

changelogs/unreleased/53336-improve-web-ide-launch-performance.yml

----
-title: Improve Web IDE launch performance
-merge_request: 25700
-author:
-type: performance

changelogs/unreleased/53361-fresh-protected-branches.yml

----
-title: Allow creation of branches that match a wildcard protection, except directly through git
-merge_request: 24969
-author:
-type: added

changelogs/unreleased/53411-remove_personal_access_tokens_token.yml

----
-title: Remove undigested token column from personal_access_tokens table from the database
-merge_request: 22743
-author:
-type: changed

changelogs/unreleased/53413-externalize-markdown-toolbar-tooltips.yml

----
-title: Externalize markdown toolbar buttons tooltips
-merge_request: 25529
-author:
-type: fixed

changelogs/unreleased/53861-api-promote-project-milestone-to-a-group-milestone.yml

----
-title: 'API: Promote project milestone to a group milestone'
-merge_request: 25203
-author: Nermin Vehabovic
-type: added

changelogs/unreleased/53966-make-hashed-storage-migration-safer-and-more-inviting.yml

----
-title: Hashed Storage rollback mechanism
-merge_request: 23955
-author:
-type: added

changelogs/unreleased/54643-lower_issuable_finder_complexity.yml

----
-title: Speed up group issue search counts
-merge_request: 25411
-author:
-type: performance

changelogs/unreleased/54725-fix-emoji-button-active-state.yml

----
-title: Fix hover and active state colors of award emoji button
-merge_request: 25295
-author:
-type: fixed

changelogs/unreleased/54796-api-sort-tie-breaker-for-pagination.yml

----
-title: 'API: Sort tie breaker with id DESC'
-merge_request: 25311
-author: Nermin Vehabovic
-type: changed

changelogs/unreleased/54850-pages-domain-show-view-is-not-protected-by-access-control.yml

----
-title: Require maintainer access to show pages domain settings
-merge_request: 24926
-author:
-type: fixed

changelogs/unreleased/54924-refactor-notes-actions-params.yml

----
-title: Fix commenting on commits having SHA1 starting with a large number
-merge_request: 25278
-author:
-type: fixed

changelogs/unreleased/55057-system-message-to-core.yml

----
-title: Port System Header and Footer feature to Core
-merge_request: 25241
-author:
-type: added

changelogs/unreleased/55109-jira-integration-api-doesn-t-respect-available-format.yml

----
-title: 'API: Support Jira transition ID as string'
-merge_request: 24400
-author: Robert Schilling
-type: fixed

changelogs/unreleased/55209-tool-tip-hides-menu-item.yml

----
-title: Close More Actions tooltip when menu opens
-merge_request: 24285
-author:
-type: fixed

changelogs/unreleased/55312-svg.yml

----
-title: Use export-import svgs from gitlab-svgs
-merge_request: 24954
-author:
-type: other

changelogs/unreleased/55376-related_merge_requests-api-call-returns-merge-requests-that-are-not-related-to-the-issue.yml

----
-title: 'API: Ensure that related merge requests are referenced cross-project'
-merge_request: 25222
-author: Robert Schilling
-type: fixed

changelogs/unreleased/55447-validate-k8s-ca-cert.yml

----
-title: Validate kubernetes cluster CA certificate
-merge_request: 24990
-author:
-type: changed

changelogs/unreleased/55703-md-image-borders.yml

----
-title: Only show borders for markdown images in notes
-merge_request: 25448
-author:
-type: fixed

changelogs/unreleased/55893-artifacts-download.yml

----
-title: Fixes not working dropdowns in pipelines page
-merge_request:
-author:
-type: fixed

changelogs/unreleased/55925-if-there-is-only-one-changed-page-in-review-app-go-directly-there.yml

----
-title: Review App Link to Changed Page if Only One Change Present
-merge_request: 25048
-author:
-type: changed

changelogs/unreleased/56237-api-truncated-commit-title.yml

----
-title: 'API: Expose full commit title'
-merge_request: 25189
-author: Robert Schilling
-type: fixed

changelogs/unreleased/56251-fix-issue-board-weekday-shift.yml

----
-title: "Fix weekday shift in issue board cards for UTC+X timezones by removing local timezone to UTC conversion"
-merge_request: 25512
-author: Elias Werberich
-type: fixed

changelogs/unreleased/56477-units-are-appended-to-y-axis-label-on-metrics-dashboard.yml

----
-title: Remove duplicate units from metrics graph
-merge_request: 25485
-author:
-type: fixed

changelogs/unreleased/56485-implement-graphql-mergerequestsresolver.yml

----
-title: Add field mergeRequests for project in GraphQL
-merge_request: 24805
-author:
-type: added

changelogs/unreleased/56492-implement-new-arguments-state-closed_before-and-closed_after-for-issuesresolver-in-graphql.yml

----
-title: "Implement new arguments `state`, `closed_before` and `closed_after` for `IssuesResolver` in GraphQL"
-merge_request: 24910
-author:
-type: changed

changelogs/unreleased/56618-hashed-storage-skip-validation.yml

----
-title: Skip Project validation during Hashed Storage migration or rollback
-merge_request: 25753
-author:
-type: fixed

changelogs/unreleased/56694-mark-group-level-labels-in-label-api-as-such.yml

----
-title: 'API: Indicate if label is a project label'
-merge_request: 25219
-author: Robert Schilling
-type: added

changelogs/unreleased/56726-fix-n-1-in-issues-and-merge-requests-api.yml

----
-title: Fix N+1 query in Issues and MergeRequest API when issuable_metadata is present
-merge_request: 25042
-author: Alex Koval
-type: other

changelogs/unreleased/56787-realtime-validation-for-user-fullname-and-username.yml

----
-title: Add realtime validation for user fullname and username on validation
-merge_request: 25017
-author: Ehsan Abdulqader @EhsanZ
-type: added

changelogs/unreleased/56809-graphql-version-api.yml

----
-title: Add metadata about the GitLab server to GraphQL
-merge_request: 24636
-author:
-type: added

changelogs/unreleased/56851-blank-values-in-reactive-cache.yml

----
-title: Allow empty values such as [] to be stored in reactive cache
-merge_request: 25283
-author:
-type: fixed

changelogs/unreleased/56851-error-tracking-page-seems-broken.yml

----
-title: Fix error tracking list page
-merge_request: 24806
-author:
-type: fixed

changelogs/unreleased/56863-system-messages-in-email.yml

----
-title: Show header and footer system messages in email
-merge_request: 25474
-author:
-type: added

changelogs/unreleased/56871-list-issues-error.yml

----
-title: Display error message when API call to list Sentry issues fails
-merge_request: 24936
-author:
-type: fixed

changelogs/unreleased/56873-only-load-syntax-highlighting-css-when-selected.yml

----
-title: Only load syntax highlight CSS of selected theme
-merge_request: 25232
-author:
-type: performance

changelogs/unreleased/56937-edit-knative-domain-after-it-has-been-deployed.yml

----
-title: Fixes functions finder for upgraded Knative app
-merge_request: 25067
-author:
-type: fixed

changelogs/unreleased/56937-edit-knative-domain.yml

----
-title: Edit Knative domain after it has been deployed
-merge_request: 25386
-author:
-type: added

changelogs/unreleased/56970-fix-mr-stuck-loading-on-error.yml

----
-title: Disable timeout on merge request merging poll
-merge_request: 25988
-author:
-type: fixed

changelogs/unreleased/57085-introduce-zoom-and-scroll-functionality-on-metrics-charts.yml

----
-title: Add zoom and scroll to metrics dashboard
-merge_request: 25388
-author:
-type: added

changelogs/unreleased/57101-api-docs-for-hangouts-chat-service-incorrect.yml

----
-title: 'API: Fix docs and parameters for hangouts-chat service'
-merge_request: 25180
-author: Robert Schilling
-type: fixed

changelogs/unreleased/57223-wiki-finder.yml

----
-title: Remove BATCH_SIZE from WikiFileFinder
-merge_request: 24933
-author:
-type: other

changelogs/unreleased/57330-fix-comment-edited.yml

----
-title: Fix notes being marked as edited after resolving
-merge_request: 26143
-author:
-type: fixed

changelogs/unreleased/57353-git-push-fails-on-large-lfs-files-where-the-push-take-a-long-time.yml

----
-title: Provide expires_in in LFS authentication payload
-merge_request: 25082
-author:
-type: fixed

changelogs/unreleased/57410-api-create-release-link-with-ftp-address-return-400-bad-request.yml

----
-title: Add support for FTP assets for releases
-merge_request: 25071
-author: Robert Schilling
-type: added

changelogs/unreleased/57534_filter_impersonated_sessions.yml

----
-title: Do not display impersonated sessions under active sessions and remove ability
-  to revoke session
-merge_request:
-author:
-type: security

changelogs/unreleased/57544-web-ide-new-directory-dialog-shows-file-templates.yml

----
-title: Do not show file templates when creating a new directory in WebIDE
-merge_request: !25119
-author:
-type: fixed

changelogs/unreleased/57564-contributing-button-border.yml

----
-title: Fix the border style of CONTRIBUTING button when it exists
-merge_request: 25124
-author: Takuya Noguchi
-type: fixed

changelogs/unreleased/57582-dropdown-icon-misalignment-on-issues-list-on-mobile-screen.yml

----
-title: Fix alignment of dropdown icon on issuable on mobile
-merge_request: 25205
-author: Takuya Noguchi
-type: fixed

changelogs/unreleased/57612-github-importer-ignores-milestone-due_date.yml

----
-title: Capture due date when importing milestones from Github
-merge_request: 25182
-author: dstanley
-type: changed

changelogs/unreleased/57671-fix_merge_request_base_pipeline.yml

----
-title: Ensure the base pipeline of a Merge Request belongs to its target branch
-merge_request: 25226
-author:
-type: fixed

changelogs/unreleased/57712-project-import-error-user-expected-got-hash.yml

----
-title: Fix project import error importing releases
-merge_request: 25495
-author:
-type: fixed

changelogs/unreleased/57734-improve-label-dropdown-selection-performance.yml

----
-title: Improve label select rendering
-merge_request: 25281
-author:
-type: performance

changelogs/unreleased/57768-remove-vertical-line.yml

----
-title: Remove vertical connecting line placeholder from diff discussion notes
-merge_request: 25292
-author:
-type: fixed

changelogs/unreleased/57784-make-closed-duplicate-and-closed-moved-button-a-link-to-target.yml

----
-title: Add Link from Closed (moved) Issues to Moved Issue
-merge_request: 25300
-author:
-type: added

changelogs/unreleased/57785-create-project-template-for-netlify.yml

----
-title: Resolve Create Project Template for Netlify
-merge_request: 25453
-author:
-type: changed

changelogs/unreleased/57788-project-labels-tooltip-missing.yml

----
-title: Fix bug where project topics truncate
-merge_request: 25398
-author:
-type: fixed

changelogs/unreleased/57794-project-template-for-net.yml

----
-title: Add Project template for .NET Core
-merge_request: 25486
-author:
-type: changed

changelogs/unreleased/57829-issuable-meta-line-ui-broken-on-mobile.yml

----
-title: Fix author layouts in issuable meta line UIs on mobile
-merge_request: 25332
-author: Takuya Noguchi
-type: fixed

changelogs/unreleased/57905-etag-caching-probably-broken-since-11-5-0.yml

----
-title: Fix ETag caching not being used for AJAX requests
-merge_request: 25400
-author:
-type: fixed

changelogs/unreleased/57991-frontend-pagination-needs-to-handle-cases-where-the-x-total-pages-header-isn-t-present.yml

----
-title: "Improve the JS pagination to handle the case when the `X-Total` and `X-Total-Pages` headers aren't present"
-merge_request: 25601
-author:
-type: fixed

changelogs/unreleased/58010-mask-the-existing-variables.yml

----
-title: Mask all TOKEN and PASSWORD CI variables.
-merge_request: 25868
-author:
-type: changed

changelogs/unreleased/58020-fix-merge-api-endpoint-param.yml

----
-title: Respect the should_remove_source_branch parameter to the merge API
-merge_request: 25525
-author:
-type: fixed

changelogs/unreleased/58023-add-Saturday-to-localization-first-day-of-the-week.yml

----
-title: Add Saturday to Localization first day of the week
-merge_request: 25509
-author: Ahmad Haghighi
-type: added

changelogs/unreleased/58082-project-template-for-go-micro.yml

----
-title: Add Project template for go-micro
-merge_request: 25553
-author:
-type: changed

changelogs/unreleased/58098-auto-devops-postgres-version-variable.yml

----
-title: Allow configuring POSTGRES_VERSION in Auto DevOps
-merge_request: 25500
-author:
-type: added

changelogs/unreleased/58274-folder-icon-in-tags-page.yml

----
-title: Use 'folder-open' from sprite icons for Browse Files button in Tag page
-merge_request: 25635
-author:
-type: fixed

changelogs/unreleased/58369-hide-squash-commit.yml

----
-title: Resolve showing squash commit edit issue when only single commit is present
-merge_request: 25807
-author:
-type: fixed

changelogs/unreleased/58570-fix-running-pipline-that-is-imported-via-dotnetcore-template.yml

----
-title: Clean up vendored templates
-merge_request: 25794
-author:
-type: changed

changelogs/unreleased/58648-project-template-for-ios.yml

----
-title: Add iOS project template
-merge_request: 25872
-author:
-type: changed

changelogs/unreleased/58649-project-template-for-android.yml

----
-title: Add project template for Android
-merge_request: 25870
-author:
-type: changed

changelogs/unreleased/59208-fix-error-500-on-every-page-when-active-broadcast-message-present-after-upgrading-to-11-9-0.yml

----
-title: Gracefully handles excluded fields from attributes during serialization on
-  JsonCache
-merge_request: 26368
-author:
-type: fixed

changelogs/unreleased/8711-prep-frontend-single-repo.yml

----
-title: Creates a helper function to check if repo is EE
-merge_request: 25647
-author:
-type: other

changelogs/unreleased/9841-geo-unable-to-compare-branches-on-secondary.yml

----
-title: Allow users to compare branches on a read-only instance
-merge_request: 25414
-author:
-type: fixed

changelogs/unreleased/add-project-level-config-for-prospective-merge-pipelines-ce.yml

----
-title: Add project level config for merge pipelines
-merge_request: 25385
-author:
-type: added

changelogs/unreleased/add-related-merge-request-count-to-api-response.yml

----
-title: Add related merge request count to api response
-merge_request: 24974
-author:
-type: added

changelogs/unreleased/add-title-attribute-to-file-row.yml

----
-title: add title attribute to display file name
-merge_request: 25154
-author: Satoshi Nakamatsu @satoshicano
-type: added

changelogs/unreleased/add-youtrack-integration.yml

----
-title: Add YouTrack integration service
-merge_request: 25361
-author: Yauhen Kotau @bessorion
-type: added

changelogs/unreleased/add_ldap_tls_options.yml

----
-title: Allow raw `tls_options` to be passed in LDAP configuration
-merge_request: 20678
-author:
-type: changed

changelogs/unreleased/allow-maintainers-to-remove-pages.yml

----
-title: Allow maintainers to remove pages
-merge_request:
-author:
-type: fixed

changelogs/unreleased/allow-to-recursively-include.yml

----
-title: Allow to recursively expand includes
-merge_request: 24356
-author:
-type: added

changelogs/unreleased/an-peek-jaeger.yml

----
-title: Provide a performance bar link to the Jaeger UI
-merge_request: 24902
-author:
-type: other

changelogs/unreleased/auto-devops-tags.yml

----
-title: Adds Auto DevOps build job for tags
-merge_request: 25718
-author: walkafwalka
-type: added

changelogs/unreleased/bvl-graphql-csrf.yml

----
-title: Allow GraphQL requests without CSRF token
-merge_request: 25719
-author:
-type: fixed

changelogs/unreleased/change-badges-example-to-pipeline.yml

----
-title: Change badges.svg example to pipeline.svg
-merge_request: 25157
-author: Aviad Levy
-type: fixed

changelogs/unreleased/changelogs-readme.yml

----
-title: add readme to changelogs directory
-merge_request: 25209
-author: "@glensc"
-type: added

changelogs/unreleased/consistent-pagination.yml

----
-title: Fix inconsistent pagination styles
-merge_request:
-author:
-type: fixed

changelogs/unreleased/deprecated-migration-inheritance.yml

----
-title: Directly inheriting from ActiveRecord::Migration is deprecated
-merge_request: 25066
-author: Jasper Maes
-type: other

changelogs/unreleased/diff-tree-resizable.yml

----
-title: Make file tree in merge requests resizable
-merge_request:
-author:
-type: added

changelogs/unreleased/dz-sort-labels-alphabetically.yml

----
-title: Sort labels alphabetically on issues and merge requests list
-merge_request: 25470
-author:
-type: changed

changelogs/unreleased/enable-markup-highlighting.yml

----
-title: Enable syntax highlighting to other supported markups
-merge_request: 25761
-author:
-type: other

changelogs/unreleased/expand-diff-to-full-file.yml

----
-title: Allow expanding a diff to display full file
-merge_request: 24406
-author:
-type: added

changelogs/unreleased/expose-additional-merge-request-pipeline-variables.yml

----
-title: Expose additional merge request pipeline variables
-merge_request: 24595
-author: Hiroyuki Sato
-type: added

changelogs/unreleased/expose-merge-ref-to-runner.yml

----
-title: Expose refspecs and depth to runner
-merge_request: 25233
-author:
-type: added

changelogs/unreleased/expose-merge-request-entity-for-pipelines.yml

----
-title: Expose merge request entity for pipelines
-merge_request: 25679
-author:
-type: added

changelogs/unreleased/fast-destroy-uploads.yml

----
-title: File uploads are deleted asynchronously when deleting a project or group.
-merge_request:
-author:
-type: added

changelogs/unreleased/feature-api-delete-job-artifacts.yml

----
-title: Extend the Gitlab API for deletion of job_artifacts of a single job.
-merge_request: 25522
-author: rroger
-type: added

changelogs/unreleased/feature-gb-add-serverless-cicd-template.yml

----
-title: Simplify CI/CD configuration on serverless projects
-merge_request: 25523
-author:
-type: added

changelogs/unreleased/feature-gb-enable-ci-persisted-stages-by-default.yml

----
-title: Enable persisted pipeline stages by default
-merge_request: 25347
-author:
-type: performance

changelogs/unreleased/feature-runner-tag-filter-for-admin-view.yml

----
-title: Add a tag filter to the admin runners view
-merge_request: 19740
-author: Alexis Reigel
-type: added

changelogs/unreleased/filter-confidential-issues.yml

----
-title: Ability to filter confidential issues
-merge_request: 24960
-author: Robert Schilling
-type: added

changelogs/unreleased/filter-note-parameters.yml

----
-title: Include note in the Rails filter_parameters configuration
-merge_request: 25238
-author:
-type: other

changelogs/unreleased/fix-38010-sidebar-loads-and-collapses.yml

----
-title: Fixed navigation sidebar flashing open on page load 
-merge_request: 24555
-author:
-type: fixed

changelogs/unreleased/fix-badges-logs.yml

----
-title: Doc - fix the url of pipeline status badge
-merge_request: 25404
-author: Aviad Levy
-type: fixed

changelogs/unreleased/fix-blob-editor-deleting-content.yml

----
-title: Fixed blob editor deleting file content for certain file paths
-merge_request:
-author:
-type: fixed

changelogs/unreleased/fix-gb-fix-bridge-jobs-variables-policy.yml

----
-title: Fix bridge jobs only/except variables policy
-merge_request: 25710
-author:
-type: fixed

changelogs/unreleased/fix-group-without-owner.yml

----
-title: fix group without owner after transfer
-merge_request: 25573
-author: Peter Marko
-type: fixed

changelogs/unreleased/fix-projects-partial-locals.yml

----
-title: Fix undefined variable error on json project views
-merge_request: 26297
-author:
-type: fixed

changelogs/unreleased/fix_-56347.yml

----
-title: Fix overlapping empty-header logo
-merge_request: 24868
-author: Jonas L.
-type: fixed

changelogs/unreleased/fj-58804-fix-bitbucket-import.yml

----
-title: Fix bug in BitBucket imports with SHA shorter than 40 chars
-merge_request: 26050
-author:
-type: fixed

changelogs/unreleased/gitaly-version-v1.26.0.yml

----
-title: Upgrade to Gitaly v1.26.0
-merge_request: 25890
-author:
-type: changed

changelogs/unreleased/gitlab_kubernetes_helm_bump.yml

----
-title: Bump Helm and kubectl used in Kubernetes integration to 2.12.3 and 1.11.7 respectively
-merge_request: 25268
-author:
-type: other

changelogs/unreleased/gokhanap-master-patch-03762.yml

----
-title: 'commit page info-well overflow fix #56436'
-merge_request: 24799
-author: Gokhan Apaydin
-type: fixed

changelogs/unreleased/gt-externalize-app-views-projects-commit.yml

----
-title: Externalize strings from `/app/views/projects/commit`
-merge_request: 24668
-author: George Tsiolis
-type: other

changelogs/unreleased/gt-update-activity-filter-for-issues.yml

----
-title: Update activity filter for issues
-merge_request: 23423
-author: George Tsiolis
-type: changed

changelogs/unreleased/gt-update-new-password-breadcrumb.yml

----
-title: Update new password breadcrumb
-merge_request: 25037
-author: George Tsiolis
-type: fixed

changelogs/unreleased/gt-update-operations-settings-breadcrumb-trail.yml

----
-title: Update operations settings breadcrumb trail
-merge_request: 25539
-author: George Tsiolis
-type: changed

changelogs/unreleased/helm-2-12-3.yml

----
-title: Bump Helm and kubectl in Auto DevOps to 2.12.3 and 1.11.7 respectively
-merge_request: 25072
-author:
-type: other

changelogs/unreleased/import-go-to-project-cta.yml

----
-title: Improve GitHub and Gitea project import table UI
-merge_request: 24606
-author:
-type: other

changelogs/unreleased/improve-performance-for-diverging-commit-counts.yml

----
-title: Improve performance for diverging commit counts
-merge_request: 24287
-author:
-type: performance

changelogs/unreleased/improve-snippets-empty-state.yml

----
-title: Improve snippets empty state
-merge_request: 18348
-author: George Tsiolis
-type: changed

changelogs/unreleased/include-ci-yaml.yml

----
-title: Validate 'include' keywords in gitlab-ci.yml configuration files.
-merge_request: 24098
-author: Paul Bonaud
-type: fixed

changelogs/unreleased/ingress-hostnames.yml

----
-title: Added support for ingress hostnames
-merge_request: 25181
-author: walkafwalka
-type: added

changelogs/unreleased/jej-feature-gates-can-be-set-by-group-path.yml

----
-title: Allow setting feature flags per GitLab group through the API
-merge_request: 25022
-author:
-type: added

changelogs/unreleased/jira-link-mention-compact.yml

----
-title: "Jira: make issue links title compact"
-merge_request: 25609
-author: Elan Ruusamäe @glensc
-type: changed

changelogs/unreleased/kinolaev-master-patch-87865.yml

----
-title: Fix rollout status for statefulsets and daemonsets
-merge_request: 24972
-author: Sergej Nikolaev <kinolaev@gmail.com>
-type: fixed

changelogs/unreleased/more-pgroup-fix.yml

----
-title: Fix the last-ditch memory killer pgroup SIGKILL
-merge_request: 25940
-author:
-type: fixed

changelogs/unreleased/move_chatops_to_core.yml

----
-title: Move ChatOps to Core
-merge_request: 24780
-author:
-type: changed

changelogs/unreleased/osw-create-and-store-merge-ref-for-mrs.yml

----
-title: Support merge ref writing (without merging to target branch)
-merge_request: 24692
-author:
-type: added

changelogs/unreleased/osw-fetch-latest-version-when-creating-suggestions.yml

----
-title: Always fetch MR latest version when creating suggestions
-merge_request: 25441
-author:
-type: fixed

changelogs/unreleased/osw-merge-refs-refreshing-api.yml

----
-title: API support for MR merge to temporary merge ref path
-merge_request: 24918
-author:
-type: added

changelogs/unreleased/osw-merge-to-ref-changes-for-ci-team.yml

----
-title: Make merge to refs/merge-requests/:iid/merge not raise when FF-only enabled
-merge_request: 25653
-author:
-type: fixed

changelogs/unreleased/patch-45.yml

----
-title: Fix incorrect Pages Domains checkbox description.
-merge_request: 25392
-author: Anton Melser
-type: other

changelogs/unreleased/persist-source-sha-and-target-sha-for-pipelines.yml

----
-title: Persist source sha and target sha for merge pipelines
-merge_request: 25417
-author:
-type: added

changelogs/unreleased/ravlen-fix-spaces-unicode.yml

----
-title: Correct non-standard unicode spaces to regular unicode
-merge_request: 24795
-author: Marcel Amirault
-type: other

changelogs/unreleased/refactor-56367-extract-resolve-with-issue-button-component.yml

----
-title: Extracted ResolveWithIssueButton to its own component
-merge_request: 25093
-author: Martin Hobert
-type: other

changelogs/unreleased/refactor-merge-request-between-pipeline-and-build.yml

----
-title: Add suffix (`_event`) to merge request source
-merge_request: 25508
-author:
-type: other

changelogs/unreleased/remove-second-primary-button-on-wiki-edit.yml

----
-title: Remove second primary button on wiki edit
-merge_request: 19959
-author: George Tsiolis
-type: changed

changelogs/unreleased/restrict-jupyter-login.yml

----
-title: Project level filtering for JupyterHub
-merge_request: 25684
-author: Amit Rathi (amit1rrr)
-type: changed

changelogs/unreleased/rs-admin-user-case-insensitive.yml

----
-title: Admin section finds users case-insensitively
-merge_request:
-author:
-type: fixed

changelogs/unreleased/security-2774-milestones-detail.yml

----
-title: Display only information visible to current user on the Milestone page
-merge_request:
-author:
-type: security

changelogs/unreleased/security-2797-milestone-mrs.yml

----
-title: Show only merge requests visible to user on milestone detail page
-merge_request:
-author:
-type: security

changelogs/unreleased/security-2798-fix-boards-policy.yml

----
-title: Disable issue boards API when issues are disabled
-merge_request:
-author:
-type: security

changelogs/unreleased/security-2799-emails.yml

----
-title: Don't show new issue link after move when a user does not have permissions
-merge_request:
-author:
-type: security

changelogs/unreleased/security-2826-fix-project-serialization-in-quick-actions.yml

----
-title: Remove project serialization in quick actions response
-merge_request:
-author:
-type: security

changelogs/unreleased/security-50334.yml

----
-title: Fix git clone revealing private repo's presence
-merge_request:
-author:
-type: security

changelogs/unreleased/security-55468-check-validity-before-querying.yml

----
-title: Fix blind SSRF in Prometheus integration by checking URL before querying
-merge_request:
-author:
-type: security

changelogs/unreleased/security-56348.yml

----
-title: Check snippet attached file to be moved is within designated directory
-merge_request:
-author:
-type: security

changelogs/unreleased/security-commit-private-related-mr.yml

----
-title: Don't allow non-members to see private related MRs.
-merge_request:
-author:
-type: security

changelogs/unreleased/security-fj-diff-import-file-read-fix.yml

----
-title: Fix arbitrary file read via diffs during import
-merge_request:
-author:
-type: security

changelogs/unreleased/security-id-fix-mr-visibility.yml

----
-title: Display the correct number of MRs a user has access to
-merge_request:
-author:
-type: security

changelogs/unreleased/security-id-restricted-access-to-private-repo.yml

----
-title: Forbid creating discussions for users with restricted access
-merge_request:
-author:
-type: security

changelogs/unreleased/security-issue_54789_2.yml

----
-title: Do not disclose milestone titles for unauthorized users
-merge_request:
-author:
-type: security

changelogs/unreleased/security-kubernetes-google-login-csrf.yml

----
-title: Validate session key when authorizing with GCP to create a cluster
-merge_request:
-author:
-type: security

changelogs/unreleased/security-kubernetes-local-ssrf.yml

----
-title: Block local URLs for Kubernetes integration
-merge_request:
-author:
-type: security

changelogs/unreleased/security-mermaid.yml

----
-title: Limit mermaid rendering to 5K characters
-merge_request:
-author:
-type: security

changelogs/unreleased/security-osw-stop-linking-to-packages.yml

----
-title: Stop linking to unrecognized package sources
-merge_request: 55518
-author:
-type: security

changelogs/unreleased/security-protect-private-repo-information.yml

----
-title: Fix leaking private repository information in API
-merge_request:
-author:
-type: security

changelogs/unreleased/security-tags-oracle.yml

----
-title: Prevent releases links API to leak tag existance
-merge_request:
-author:
-type: security

changelogs/unreleased/sh-bump-fog-gem.yml

----
-title: Fixes issue with AWS V4 signatures not working with some S3 providers
-merge_request: 21788
-author:
-type: fixed

changelogs/unreleased/sh-create-branch-as-project-owner-for-github-import.yml

----
-title: 'GitHub import: Create new branches as project owner'
-merge_request: 26335
-author:
-type: fixed

changelogs/unreleased/sh-fix-blank-codeowners-ce.yml

----
-title: Fix 500 error caused by CODEOWNERS with no matches
-merge_request: 26072
-author:
-type: fixed

changelogs/unreleased/sh-fix-cpp-templates-404.yml

----
-title: Fix 404s when C++ .gitignore template selected
-merge_request: 25416
-author:
-type: fixed

changelogs/unreleased/sh-fix-double-xhr-pipelines.yml

----
-title: Remove duplicate XHR request when requesting new pipeline page
-merge_request: 25506
-author:
-type: fixed

changelogs/unreleased/sh-handle-null-bytes-in-merge-request-diffs.yml

----
-title: Fix error creating a merge request when diff includes a null byte
-merge_request: 26190
-author:
-type: fixed

changelogs/unreleased/sh-include-project-path-for-internal-api.yml

----
-title: Include gl_project_path in API /internal/allowed response
-merge_request: 25314
-author:
-type: other

changelogs/unreleased/sh-log-rails-queue-duration.yml

----
-title: Log queue duration in production_json.log
-merge_request: 25075
-author:
-type: other

changelogs/unreleased/sh-optimize-calendar-activities.yml

----
-title: Eliminate most N+1 queries loading UserController#calendar_activities
-merge_request: 25697
-author:
-type: performance

changelogs/unreleased/sh-optimize-todos-api.yml

----
-title: Significantly reduce N+1 queries in /api/v4/todos endpoint
-merge_request: 25711
-author:
-type: performance

changelogs/unreleased/sh-remove-nplusone-admin-runners-tags.yml

----
-title: Remove N+1 query for tags in /admin/runners page
-merge_request: 25572
-author:
-type: performance

changelogs/unreleased/sh-revert-rack-request-health-checks.yml

----
-title: Fix health checks not working behind load balancers
-merge_request: 26055
-author:
-type: fixed

changelogs/unreleased/sh-rugged-commit-is-ancestor.yml

----
-title: Bring back Rugged implementation of CommitIsAncestor
-merge_request: 25702
-author:
-type: other

changelogs/unreleased/sh-rugged-commit-tree-entry.yml

----
-title: Bring back Rugged implementation of commit_tree_entry
-merge_request: 25896
-author:
-type: other

changelogs/unreleased/sh-rugged-find-commit.yml

----
-title: Bring back Rugged implementation of find_commit
-merge_request: 25477
-author:
-type: fixed

changelogs/unreleased/sh-rugged-get-tree-entry.yml

----
-title: Bring back Rugged implementation of TreeEntry
-merge_request: 25706
-author:
-type: other

changelogs/unreleased/sh-rugged-tree-entries.yml

----
-title: Bring back Rugged implementation of GetTreeEntries
-merge_request: 25674
-author:
-type: other

changelogs/unreleased/sh-wip-fix-duplicate-env-xhr.yml

----
-title: Fix pagination and duplicate requests in environments page
-merge_request: 25582
-author:
-type: fixed

changelogs/unreleased/shell-8-7.yml

----
-title: Update GitLab Shell to v8.7.1
-merge_request: 25801
-author:
-type: other

changelogs/unreleased/support-only-changes-on-mr-pipelines.yml

----
-title: 'Support `only: changes:` on MR pipelines'
-merge_request: 24490
-author: Hiroyuki Sato
-type: added

changelogs/unreleased/table-fix-scroll-and-block.yml

----
-title: Fix large table horizontal scroll and prevent side-by-side tables
-merge_request: 25520
-author: Dany Jupille
-type: fixed

changelogs/unreleased/tr-error-tracking-project-selection.yml

----
-title: Error tracking configuration - add a Sentry project selection dropdown
-merge_request: 24701
-author:
-type: changed

changelogs/unreleased/update-gitlab-runner-helm-chart-to-0-2-0.yml

----
-title: Update GitLab Runner Helm Chart to 0.2.0
-merge_request: 25493
-author:
-type: other

changelogs/unreleased/use-date-for-upcoming-milestone-comparison.yml

----
-title: Fix upcoming milestone when there are milestones with far-future due dates
-merge_request:
-author:
-type: fixed

changelogs/unreleased/use-encrypted-runner-tokens.yml

----
-title: Use encrypted runner tokens
-merge_request: 25532
-author:
-type: security

changelogs/unreleased/web-ide-commit-header-icon-alignment-fix.yml

----
-title: Fixed alignment of changed icon in Web IDE
-merge_request:
-author:
-type: fixed

changelogs/unreleased/web-ide-default-editor.yml

----
-title: Make the Web IDE the default editor
-merge_request:
-author:
-type: added

changelogs/unreleased/winh-enable-reply_to_individual_notes.yml

----
-title: Add button to start discussion from single comment
-merge_request: 25575
-author:
-type: added

changelogs/unreleased/zj-load-languages-from-database.yml

----
-title: Load repository language from the database if detected before
-merge_request: 25518
-author:
-type: performance