Update DAST site profile mutations to return payload

See merge request gitlab-org/gitlab!84257

Handle when attention requests is turned off with better sidebar source layout

See merge request gitlab-org/gitlab!84338

Allow context qsh for Jira subscriptions json

See merge request gitlab-org/gitlab!83836

The JSON endpoint will be requested by frontend using a JWT that
Atlassian provides via Javascript. This JWT will likely use a
context-qsh because Atlassian don't know for which
endpoint it will be used.

Read more about context JWT here:
https://developer.atlassian.com/cloud/jira/platform/understanding-jwt-for-connect-apps/

Serialize and deserialize by default for LocalStorageSync component

See merge request gitlab-org/gitlab!84159

Changelog: changed
MR: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/84159

Fix console warning after popover removal

See merge request gitlab-org/gitlab!84261

Fix error flash is hidden when updating issue repeatedly

See merge request gitlab-org/gitlab!83700

Enqueuer: update #reconcile_import_status to fix status coherence

See merge request gitlab-org/gitlab!84289

Resolve "Clarify language about pipelines on Vulnerability Reports"

See merge request gitlab-org/gitlab!82438

doc: Add debugging docs on usage of binding.irb

See merge request gitlab-org/gitlab!84401

Add data-qa-selector to new search component

See merge request gitlab-org/gitlab!83877

Update Self-Managed options cross-links

See merge request gitlab-org/gitlab!83157

Trigger ArkoseLabs username check on submit

See merge request gitlab-org/gitlab!84078

Update BulkImports::EntityWorker deduplication strategy

See merge request gitlab-org/gitlab!84204

Resolve "Deployments->Environments displays wrong commit refs/tags"

See merge request gitlab-org/gitlab!83558

Pass blank strings to dataset for the signup restrictions app in adin

See merge request gitlab-org/gitlab!84343

Send Storage Usage Email

See merge request gitlab-org/gitlab!83472

Send if storage is low after refreshing root storage statistics
Hide behind a default disabled feature flag

Make alert pajamas compliant for mattermost

See merge request gitlab-org/gitlab!84232

Update dependency webpack-dev-server to v4.8.0

See merge request gitlab-org/gitlab!84366

Missing project export features

See merge request gitlab-org/gitlab!84251

Merge branch '353598-check-that-user_avatar_image-in-app-assets-javascripts-vue_shared-components-user_popover' into 'master'

Change user popover avatar to supported size

See merge request gitlab-org/gitlab!84199

Allows ArkoseLabs sessions that have the allowlisted telltale to
sign-in.

Makes QA tests compatible with the ArkoseLabs challenge by waiting until
username check is done and the `Sign in` button is enabled before
submitting the sign-in form.

This does a few UX improvements to the ArkoseLabs challenge:
- We now show the "complete challenge" error only if the ArkoseLabs
  iframe was actually shown. This prevents the container from showing up
  in cases where the challenge is being suppressed.
- If the verification process was triggered as a result of submitting
  the form, we now re-submit the form if the chalenge is being
  suppressed. This fixes weird states where you might have to manually
  submit the form twice if you had filled in your information fast
  enough.

This tweaks the ArkoseLabs sign-in flow to trigger a username check when
the form is submitted. This ensures that the challenge cannot be skipped
by submitting the form without the username field ever losing the focus.
If the check determines that the challenge still isn't needed, the
form's submission proceeds normally.

Update BulkImports::PipelineWorker Ndjson perform delay

See merge request gitlab-org/gitlab!84285

Set content-type as plain/text for raw artifact endpoint

See merge request gitlab-org/gitlab!83826

This commit lets workhorse set the content-type when serving
artifacts. This prevents an attacker to host a maliciou JavaScript
payload as an artifact and bypass our CSP.

Changelog: security