Most controllers call `ApplicationController#auth_user` first, which
ensures that the currently-logged in user will be memoized
properly. However, controllers such as `GraphQlController` allows
sessionless access via the `PRIVATE-TOKEN` header. They authenticate
access via `authenticate_sessionless_user!`.

Since `auth_user` is memoized before `authenticate_sessionless_user!`
gets to run, `ApplicationController#context_user` relies on a stale
`auth_user` value if a sessionless user is used. As a result,
`GraphQlController` erroneously logs that an anonymous user accessed
an endpoint when an actual user was responsible.

To fix this, we need to update `authenticate_sessionless_user!` so
that it flushes the memoization of `auth_user` if a sessionless user
has logged in. Note that we have to be careful not to call
`current_user` for anonymous users because each attempt will cause a
Warden reauthentication attempt.

Relates to https://gitlab.com/gitlab-org/gitlab/-/issues/356213

Changelog: fixed

Use gl-drawer for pipeline editor help drawer

See merge request gitlab-org/gitlab!83044

This aligns the behavior and styling of the drawer with
GitLab's standards. The drawer can be opened using the
help button in the pipeline editor.

Changelog: changed

Add ability to enable SAST at project creation

See merge request gitlab-org/gitlab!83138

Edited for style and consistency

See merge request gitlab-org/gitlab!83236

Related to: https://gitlab.com/gitlab-org/technical-writing/-/issues/528

Change mp4 to image

See merge request gitlab-org/gitlab!83435

Update Editor team endpoint custom thresholds

See merge request gitlab-org/gitlab!83425

Set a low urgency for a selection
of the editor team endpoints as
per our new custom threshold guidelines.

Remove review-cleanup manual job from MRs

See merge request gitlab-org/gitlab!83273

Update view subscription instructions

See merge request gitlab-org/gitlab!83403

Doc: Replace explicit ~/.gradle/ mentions with configurable GRADLE_USER_HOME

See merge request gitlab-org/gitlab!83092

Add frontend docs for registry like apps

See merge request gitlab-org/gitlab!78277

Update Gitaly version

See merge request gitlab-org/gitlab!83436

Fix deletion of deprecated notes

See merge request gitlab-org/gitlab!83089

Notes in Snippets / Commits are deleted from the DOM even before the
user confirmed the deletion. With `bootstrap_confirmation_modals`
enabled this actually caused a bug, because the element is
progamatically clicked after confirmation. But as the element is removed
from the DOM already, Rails/UJS didn't intercept the click properly.

If we switch from a click handler to an ajax:success handler _and_
remove the note from the DOM after a successful deletion, this problem
is resolved.

Build jobs filtered search

See merge request gitlab-org/gitlab!82539

Add jobs filtered search feature
to the jobs page.

Update CRM docs around moving issues, projects and groups

See merge request gitlab-org/gitlab!80407

Fix vulnerability report not showing for manually-added vulnerabilities

See merge request gitlab-org/gitlab!82698

Re-name "DevOps Report" as "DevOps Reports"

See merge request gitlab-org/gitlab!81530

Migrate to shared alert component

See merge request gitlab-org/gitlab!83300

View History of All Project Imports - Frontend

See merge request gitlab-org/gitlab!83207

Added deprecation notice for user_email_lookup_limit

See merge request gitlab-org/gitlab!83220

Refetch runners list data after runner is updated/deleted

See merge request gitlab-org/gitlab!82502

Add vulnerability training doc link

See merge request gitlab-org/gitlab!82961

Add SVG blob viewer

See merge request gitlab-org/gitlab!81567

What's New 14.9

See merge request gitlab-org/gitlab!83333

FF rollout issue for purge_stale_security_findings

See merge request gitlab-org/gitlab!83346

Remove releases_index_apollo_client Feature Flag

See merge request gitlab-org/gitlab!82934

Deprecate `background upload` for object storage

See merge request gitlab-org/gitlab!83396