Consolidate all security reports under one section

See merge request gitlab-org/gitlab-ee!5566

remove duplicated lines

Closes #5998

See merge request gitlab-org/gitlab-ee!5690

CE upstream - 2018-05-14 10:03 UTC

Closes gitaly#1184 and gitaly#1169

See merge request gitlab-org/gitlab-ee!5689

# Conflicts:
#	app/assets/javascripts/vue_merge_request_widget/dependencies.js
#	spec/features/projects/merge_requests/user_creates_merge_request_spec.rb

[ci skip]

Resolve "`sha-mismatch` vue component is rendering an empty block"

Closes #45462

See merge request gitlab-org/gitlab-ce!18884

Resolve "`sha-mismatch` vue component is rendering an empty block"

See merge request gitlab-org/gitlab-ee!5658

Add `createComponentWithMixin` to create anonymous components with mixins

See merge request gitlab-org/gitlab-ce!18899

Fix system hook not firing for blocked users when LDAP sign-in is used

Closes #46307

See merge request gitlab-org/gitlab-ce!18930

Add feature check to Lock button

Closes #5952

See merge request gitlab-org/gitlab-ee!5656

Update secpick to use security branches

See merge request gitlab-org/gitlab-ce!18937

Add Code Review documentation that maintainers also perform code review

See merge request gitlab-org/gitlab-ce!18911

Fix gitaly-ruby bundle poisoning in CI

Closes gitaly#1184 and gitaly#1169

See merge request gitlab-org/gitlab-ce!18853

Update runner links to repo based on restructuring

See merge request gitlab-org/gitlab-ce!18919

Replace the `project/forked_merge_requests.feature` spinach test with an rspec analog

See merge request gitlab-org/gitlab-ce!18867

Resolve "Remove redundant tooltips on activity tabs"

Closes #46164

See merge request gitlab-org/gitlab-ce!18918

Port of gitlab-ce!18867

See merge request gitlab-org/gitlab-ee!5683

Replace the `project/commits/diff_comments.feature` spinach test with an rspec analog

See merge request gitlab-org/gitlab-ce!18868

Remove an extra backtick from Group Milestones API documentation

See merge request gitlab-org/gitlab-ce!18913

Skip transaction check for seeding burndown charts

Closes gitlab-development-kit#351

See merge request gitlab-org/gitlab-ee!5686

The seed-fu gem wraps all seeds in a transaction:
https://github.com/mbleigh/seed-fu/blob/34c054c914858c3d7685f83d16dea5c0e2114561/lib/seed-fu/runner.rb#L35.
We can skip the Sidekiq transaction check for seeding test fixtures.

Closes https://gitlab.com/gitlab-org/gitlab-development-kit/issues/351

An LDAP sign-in request results in a different request parameter than
a standard GitLab sign-in. Since Warden doesn't pass us the user that
was blocked, we first search for a `username` in the request parameters
and then look for `user.login`.

Closes #46307

CE upstream - 2018-05-11 18:29 UTC

See merge request gitlab-org/gitlab-ee!5681