Service Desk allows creating issues by sending an email to a special
address. Previously, the issue author email was taken from the Reply-To
email header, if present. The problem is that Reply-To is easily spoofed
even in common email clients like Gmail. We therefore ignore it, and use
the From address instead.

Changelog: security

Allow group maintainers to list provisioned users for a group

See merge request gitlab-org/gitlab!79600

Enable Secure attribute for frontend cookies

See merge request gitlab-org/gitlab!79383

Remove line-height on branch name in merge request

See merge request gitlab-org/gitlab!79566

Assign label to reliable report issue so group label is not inferred

See merge request gitlab-org/gitlab!79549

Create EE::Auth::ProvisionedUsersFinder, which returns
a list of users who are provisioned by a SCIM identity
or managed by a SAML group. ProvisionedUsersFinder is then
exposed by a new API endpoint,
GET /groups/:provisioning_group_id/provisioned_users.
Group maintainers can use this endpoint to list
provisioned users for a given group.

Changelog: added
EE: true

Add helpful snippet for cleanup to docs

See merge request gitlab-org/gitlab!79382

Update git strategy documentation for the k8s executor

See merge request gitlab-org/gitlab!79662

Resolve "Package graphql api: improve sorting tests"

See merge request gitlab-org/gitlab!79471

Add combined registration to trial registration flow

See merge request gitlab-org/gitlab!79437

Add a note about automatic renewal of storage subscriptions

See merge request gitlab-org/gitlab!79474

Fix Popen not always returning error code

See merge request gitlab-org/gitlab!79564

Remove extract_mr_diff_commit_deletions FF

See merge request gitlab-org/gitlab!79548

Fix search term case sensitivity for transfer namespace

See merge request gitlab-org/gitlab!79595

Add link to pull-based deployments

See merge request gitlab-org/gitlab!79460

Change pipeline must succeed settings copy

See merge request gitlab-org/gitlab!79541

Renamed diff searching feature flag

See merge request gitlab-org/gitlab!79513

Resolve "Clear Geo QA publishing failures"

See merge request gitlab-org/gitlab!78214

Push commit to start pipeline as late as possible before MWPS

See merge request gitlab-org/gitlab!78977

This should help allow the test to set MWPS while the pipeline is
still running.

Mark support for OpenSUSE Leap 15.2 as deprecated

See merge request gitlab-org/gitlab!79599

`Process#waitpid` returns `Process::Status`, which holds a 16-bit value.

* The higher-order 8 bits hold the exit() code (`exitstatus`).
* The lower-order bits holds whether the process was terminated.

Previously if the process didn't exit normally, `Gitlab::Popen#popen`
would return a status of `nil` since `exitstatus` would be `nil`.

This isn't informative because we want to know what signal killed the
process. We can get this by calling `Process::Status.to_i`.

Relates to https://gitlab.com/gitlab-org/gitlab/-/issues/351155

Changelog: fixed

Docs: Minor contextualization improvement

See merge request gitlab-org/gitlab!79643

Enable Zip64 support

See merge request gitlab-org/gitlab!79596

Add workItemDelete mutation

See merge request gitlab-org/gitlab!79371

Geo: Fix reverify object stored files

See merge request gitlab-org/gitlab!79469

E2E: Explicit comparison of mr comments

See merge request gitlab-org/gitlab!79546

Adding troubleshooting section for issue 285129

See merge request gitlab-org/gitlab!79049

Update dependency @gitlab/ui to v35

See merge request gitlab-org/gitlab!79430

Support partitioning of `SharedModels`

See merge request gitlab-org/gitlab!79441

Remove unused resolve button from HAML discussions

See merge request gitlab-org/gitlab!79619

Exit immediately if running minimal reproduction fails

See merge request gitlab-org/gitlab!79453

By default, all frontend cookies have been set to insecure, even when
HTTPS is enabled. This has tripped off some security scanners. While
most of these cookies probably contain a single user preference and do
not contain any personally-identifiable information, we should err on
the side of caution and enable the Secure attribute if an encrypted
channel is available.

We now centralize all the application logic for cookie setting to the
`setCookie` `getCookie` methods in `common_utils.js`.

Relates to https://gitlab.com/gitlab-org/gitlab/-/issues/24040

Changelog: security

Add copy query to clipboard docs

See merge request gitlab-org/gitlab!79609