[master] LFS object forgery in project import

Closes #2784

See merge request gitlab/gitlabhq!2719

[master] Do not expose trigger token when user should not see it

See merge request gitlab/gitlabhq!2735

[master] Fix DoS in reference extraction regexes

Closes #2766

See merge request gitlab/gitlabhq!2768

[master] Fix access to internal wiki when external wiki is enabled

Closes #2783

See merge request gitlab/gitlabhq!2769

[master] GitLab vulnerable to IDN homograph attacks and RTLO attacks

See merge request gitlab/gitlabhq!2770

[master] Use common error for not logged in users when creating issues

Closes #2772

See merge request gitlab/gitlabhq!2787

[master] Revoke award_emoji permissions for confidential issues

Closes #2776

See merge request gitlab/gitlabhq!2790

[master] Fix discussion replies permissions check

Closes #2779

See merge request gitlab/gitlabhq!2794

Improve the handling of tags and branches which contains a `/` when triggering CNG pipelines

See merge request gitlab-org/gitlab-ce!24465

Backport of 54385-board-policy

Closes #54385

See merge request gitlab-org/gitlab-ce!24475

Fix markdown table border

Closes #56556

See merge request gitlab-org/gitlab-ce!24601

Adds extra sizes in responsive tables

See merge request gitlab-org/gitlab-ce!24605

Resolve "Docs lint passes if a relative link starts with /doc"

Closes #56763

See merge request gitlab-org/gitlab-ce!24613

Also, pass GITLAB_VERSION and GITLAB_ASSETS_TAG to CNG triggered
pipelines.
Signed-off-by: Rémy Coutable <remy@rymai.me>

Signed-off-by: Rémy Coutable <remy@rymai.me>

Quarantine Auto DevOps tests

See merge request gitlab-org/gitlab-ce!24623

Restructure projects template topics

Closes #55834

See merge request gitlab-org/gitlab-ce!24448

Fix most instances of bare URLs in markdown

See merge request gitlab-org/gitlab-ce!24519

Log admin status of user when OAuth::User is saved

See merge request gitlab-org/gitlab-ce!24602

Update repository_mirroring.md

See merge request gitlab-org/gitlab-ce!24586

(docs) Updated fields information for push mirror from GitLab to GitHub

See merge request gitlab-org/gitlab-ce!24566

Fix 'loose' typo

Closes #56248

See merge request gitlab-org/gitlab-ce!24330

Fix 404s for snippet uploads when relative URL root used

Closes #56280

See merge request gitlab-org/gitlab-ce!24588

Fix import handling errors in Bitbucket Server importer

See merge request gitlab-org/gitlab-ce!24499

Allow Gitaly to be built from a custom URL

See merge request gitlab-org/gitlab-ce!24616

Fix 500 errors with legacy appearance logos

Closes gitlab-ee#9357

See merge request gitlab-org/gitlab-ce!24615

[API] Omit `X-Total` and `X-Total-Pages` headers when items count is more than 10,000

Closes #42194 and #52674

See merge request gitlab-org/gitlab-ce!23931

Prior to GitLab 9.0, attachments were not tracked the `uploads` table,
so it was possible that the appearance logos were just stored in the
database as a string and mounted via CarrierWave.

https://gitlab.com/gitlab-org/gitlab-ce/issues/29240 implemented in
GitLab 10.3 was supposed to cover populating the `uploads` table for all
attachments, including all the logos from appearances. However, it's
possible that didn't work for logos or the `uploads` entry was orphaned.

GitLab instances that had a customized logo with no associated `uploads`
entry would see Error 500s. The only way to fix this is to delete the
`logo` column from the `appearances` table and re-upload the attachment.

This change makes things more robust by falling back to the original
behavior if the upload is not available.

This is a CE backport of
https://gitlab.com/gitlab-org/gitlab-ee/merge_requests/9277.

Closes https://gitlab.com/gitlab-org/gitlab-ee/issues/9357

documentation: Add `git clone` to list of basic git commands

Closes #56514

See merge request gitlab-org/gitlab-ce!24474

This started with
https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/24339 where a
broken link was introduced, but the lint checker never caught it.

The docs-lint job does the following:

```yaml
  script:
    - mv doc/ /tmp/gitlab-docs/content/
    - cd /tmp/gitlab-docs
    # Build HTML from Markdown
    - bundle exec nanoc
    # Check the internal links
    - bundle exec nanoc check internal_links
```

It moves the `doc/` dir inside `content` where Nanoc is expecting the
markdown files to be. It then builds the site and finally checks for
the links. If the built website was deployed to production, that would
be under `docs.gitlab.com/doc`.

The interesting part here is that
`[the logs](/doc/administration/logs.md#productionlog)`
translates to `<a href="/doc/administration/logs.html#productionlog>`,
so, Nanoc correctly sees this as an existing file!

This MR changes the path of the docs content to be equal to
$DOCS_GITLAB_REPO_SUFFIX which is defined as an environment
variable and takes the value of the slug of each project:
'ce', 'ee', 'omnibus', 'runner'.

Improve Review Apps documentation

See merge request gitlab-org/gitlab-ce!24597

[QA] Use public_email instead of email since it's available

Closes gitlab-org/quality/staging#27

See merge request gitlab-org/gitlab-ce!24533