This avoids modifying the Rack-env in request forgery protection.

If we do allow the env to be modified, this would cause requests made
to our public API by our own frontend to be incorrectly recorded in
metrics and logs.

The Gitlab::RequestForgeryProtection::Controller and it's index action
would be recorded as the caller instead of the actual endpoint being
called.

Sync scss-lint rules and stylelint

See merge request gitlab-org/gitlab!53122

Apply new GitLab UI for form inputs project settings page

See merge request gitlab-org/gitlab!52097

Add board_new_list feature flag and placeholder [RUN AS-IF-FOSS]

See merge request gitlab-org/gitlab!52869

Button currently doesn't do anything

Don't raise CrossSlotError when no keys given

See merge request gitlab-org/gitlab!52887

Resolve "Issue/MR list tabs - Icons sometimes display as ?"

See merge request gitlab-org/gitlab!52698

Merge branch '300532-document-feature-flags-for-tracking-to-be-owned-by-group-adding-the-tracking' into 'master'

Document feature flags for tracking to be owned by group adding the tracking

See merge request gitlab-org/gitlab!53012

Added backend for requesting a new review

See merge request gitlab-org/gitlab!52321

When no keys are passed to a Redis command that accepts multiple keys,
that's an error. But it's not a cross-slot violation, as there are no
slots. By raising this error we were masking the true
Redis::CommandError underneath, which is bad for two reasons:

1. It's confusing to developers.
2. It leads to a different failure in production to development and
   test.

To elaborate a bit more on the second point: the purpose of the
CrossSlotError is to only be an _additional_ error in development and
test, but it shouldn't _replace_ underlying errors as that can cause
issues like this one.

Merge branch '289973-refactor-jquery-to-vanilla-js-app-assets-javascripts-jira_connect-index-js' into 'master'

Refactor jQuery to Vanilla JS: app/assets/javascripts/jira_connect/index.js

See merge request gitlab-org/gitlab!52286

- fix class for "Remove subscription" button
- remove jquery script tag
- consolidate js specs
- apply jira_connect/api diff

Bump Snowplow standard schema version to 1-0-3

See merge request gitlab-org/gitlab!53062

Remove core_security_mr_widget feature flag

See merge request gitlab-org/gitlab!53066

Remove unused frontend variables from environments page

See merge request gitlab-org/gitlab!52763

Matomo: Support the disabling of cookies

See merge request gitlab-org/gitlab!52831

Spelling fixes, API definitions

See merge request gitlab-org/gitlab!52951

Fixing spelling and capitalization in various API definitions. Not
making changes to anything else; just the user-facing definition part.

Apply new GitLab UI for input field in admin/hooks

See merge request gitlab-org/gitlab!52412

Move Faraday middlewares register to an initializer

See merge request gitlab-org/gitlab!53019

Apply new GitLab UI badge for users in the admin page

See merge request gitlab-org/gitlab!52289

Create Groups::UpdateRepositoryStorageService service

See merge request gitlab-org/gitlab!52687

Fix retry option doesn't work in Merge Trains

See merge request gitlab-org/gitlab!52463

Prevent creating duplicate pipelines manually

See merge request gitlab-org/gitlab!51076

Bypass admin mode for internal api operations

See merge request gitlab-org/gitlab!52697

Adds calls_gitaly to label DetailedStatus

See merge request gitlab-org/gitlab!52708

Fix instances of "monthy"

See merge request gitlab-org/gitlab!52970

Documentation for the definition of "Job" in GitLab CI/CD

See merge request gitlab-org/gitlab!53026

Remove rubocop cop disable

See merge request gitlab-org/gitlab!52911

Fix hardcoded ids in projects API tests

See merge request gitlab-org/gitlab!53036

Resolve "Add column for feature: Support customizable timeouts for git CLI 2FA"

See merge request gitlab-org/gitlab!52761

This change  adds a new column named
`git_two_factor_session_expiry` to the
`application_settings` table.

Updated links to open in a new tab

See merge request gitlab-org/gitlab!52948

In this commit we introduce a service used to move
group storage from one shard to another. This is very similar
to what has been implemented for projects and snippets.

Swimlanes - Support negated filters [RUN AS-IF-FOSS]

See merge request gitlab-org/gitlab!52449