Prepare Repository#fetch_source_branch for migration

Closes gitaly#681

See merge request gitlab-org/gitlab-ce!14897

Decouple QA test subject's address from Capybara/RSpec

Closes gitlab-qa#88

See merge request gitlab-org/gitlab-ce!15310

Clean up the schema of the table "issues"

Closes #31811

See merge request gitlab-org/gitlab-ce!15225

Fix bootable scenario arguments for OptionParser

See merge request gitlab-org/gitlab-ce!15309

Prevent OAuth phishing attack by presenting detailed wording about app to user during authorization

See merge request gitlab-org/gitlab-ce!15311

Use a non-superuser user to access GitLab to ensure permissions are proper

Closes #39932

See merge request gitlab-org/gitlab-ce!15301

Icon Sprite URL needs to be local even if asset_host is set

See merge request gitlab-org/gitlab-ce!15289

Prevent OAuth phishing attack by presenting detailed wording about app to user during authorization

See merge request gitlab/gitlabhq!2205

We have run into permission issues with MySQL triggers in #36633 that
would have been caught earlier either if our migration tests or GitLab QA
tests had been testing against non-superuser users. This change creates
a non-superuser that has access to the GitLab test database and uses that.

Closes #39932

Add 10.1.2 security fixes to CHANGELOG on master

See merge request gitlab-org/gitlab-ce!15305

Add 10.1.2 security fixes to CHANGELOG.md

See merge request gitlab-org/gitlab-ce!15302

[ci skip]

Disable issue action button whilst submitting and test

See merge request gitlab-org/gitlab-ce!15211

add glossary part 1

See merge request gitlab-org/gitlab-ce!15247

This adds various foreign key constraints, indexes, missing NOT NULL
constraints, and changes some column types from timestamp to
timestamptz.

Fixes https://gitlab.com/gitlab-org/gitlab-ce/issues/31811

Move clear search test to JS to reduce overkill

See merge request gitlab-org/gitlab-ce!15154

Improve breadcrumbs clipping

Closes #37920

See merge request gitlab-org/gitlab-ce!15164

Add /groups/:id/subgroups endpoint to API

Closes #32652

See merge request gitlab-org/gitlab-ce!15142

Always return full avatar URL for private/internal groups/projects when asset host is set

See merge request gitlab-org/gitlab-ce!15288

Part of https://gitlab.com/gitlab-org/gitlab-ce/issues/33661

Fix access to the final page of todos

See merge request gitlab-org/gitlab-ce!15293

Enables scroll to bottom once user has scrolled back to bottom in job log

Closes #34846 and #39109

See merge request gitlab-org/gitlab-ce!15260

Use the new simpler `Pick into X.Y` labels workflow after the 7th

See merge request gitlab-org/gitlab-ce!15282