This alters the key format for new sessions to ensure that if using the
wildcard form to look for all sessions for a user, new JSON sessions
will never be returned accidentally. This might otherwise have been the
case for users named `v2`

The following changes are made:

- when setting the session, we set both the old and new formats
- when loading sessions, we skip looking for old formats if we have
  found the new ones.

This method (or at least the logic of it) is used in a rake task. The
rake task is written to re-use the
`ActiveSession.cleaned_up_lookup_entries` method, and tests are added to
specify the behavior.

This ensures we consider all session IDs, and makes morally private
methods actually private.

This changes session serialization, shifting from the use
of Marshal (which has security implications) to the safer use of JSON.

In order to support existing active sessions in the old format, we
lookup sessions by both the old and new keys, and fallback to the old
parsing if the stored value is not JSON.

Changelog: security

Create docs for operational vulnerabilities tab

See merge request gitlab-org/gitlab!75959

ci: Always run full pipelines in security MRs

See merge request gitlab-org/gitlab!76147

fix: Tidy up spacing around labels on epic related items

See merge request gitlab-org/gitlab!76216

Only enqueue Jira workers when integration is configured

See merge request gitlab-org/gitlab!76134

E2E: Generate knapsack report on scheduled runs

See merge request gitlab-org/gitlab!75479

Enable bulk delete in container registry tags list

See merge request gitlab-org/gitlab!75655

- source
- test

Changelog: added

Remove the superfluous determiner

See merge request gitlab-org/gitlab!76213

Slony fixes

See merge request gitlab-org/gitlab!57676

Collect database host metrics for all primaries

See merge request gitlab-org/gitlab!75793

Move ~/issuable_bulk_update_sidebar and other issuable code

See merge request gitlab-org/gitlab!75766

Reassign flags no longer owned by Pipeline Execution

See merge request gitlab-org/gitlab!75747

Add k8s docs note for Geo unified URLs and TLS limitations

See merge request gitlab-org/gitlab!76104

Fix wrong end date in query for contributions

See merge request gitlab-org/gitlab!76077

Update the DatabaseSampler to collect metrics for all primaries defined
in Gitlab::Database.database_base_models, rather than ActiveRecord::Base
only.

Move labels code to ~/labels

See merge request gitlab-org/gitlab!75771

Add specs for job token scope blocking artifacts download

See merge request gitlab-org/gitlab!76122

Bulk delete registries UI polish

See merge request gitlab-org/gitlab!75908

Update iteration spec to test for a before_destroy hook

See merge request gitlab-org/gitlab!76180

Move ~/issuable_show to ~/vue_shared

See merge request gitlab-org/gitlab!76150

Use NamespacePolicy as base namespace policy class

See merge request gitlab-org/gitlab!75592

Add index to improve contribution graph query

See merge request gitlab-org/gitlab!76081