Update U2F recommendations, fix #57656

Closes #57656

See merge request gitlab-org/gitlab-ce!25709

Rename build to job in webhooks docs

Closes #42254 and #28226

See merge request gitlab-org/gitlab-ce!26676

Revert "Merge branch '13784-validate-variables-for-masking' into 'master'"

Closes gitlab-ee#10740 and gitlab-ee#10738

See merge request gitlab-org/gitlab-ce!26684

This reverts merge request !25476

Upgraded Vue to 2.6.10 and also Vuex to 3.1.0

See merge request gitlab-org/gitlab-ce!25981

Upgrade to latest Version

Log Gitaly RPC duration to api_json.log and production_json.log

See merge request gitlab-org/gitlab-ce!26652

Add control for masking variable values in runner logs

Closes #13784

See merge request gitlab-org/gitlab-ce!25476

Add a masked switch to variable rows
Copy some behavior from the protected switch

Refactor verify_pages_domain_service specs

See merge request gitlab-org/gitlab-ce!26178

Add specs for new/disabled pages domain
Extract contexts from examples
Use `let` instead of `set` since domain is being changed
in each example

[QA] Toggle Gitaly N+1 detector via feature flag and run tests

Closes gitlab-qa#374

See merge request gitlab-org/gitlab-ce!26060

First attempt at allowing a feature flag to be set via the command line
when running tests. This will enable the flag, run the tests, and then
disable the flag.

Using OptionParser meant changing how scenarios get the instance
address, so this also allows the address to be set as a command line
option. It's backwards compatible (you can still provide the address
as the command line option after the scenario)

Update bootstrap to 4.3.1

Closes #52091

See merge request gitlab-org/gitlab-ce!25911

Expand and improve autofetch of endpoint section

See merge request gitlab-org/gitlab-ce!26303

Recommend disabling NFS server delegation

See merge request gitlab-org/gitlab-ce!26668

Prepares suggestion implementation for multi-line support

See merge request gitlab-org/gitlab-ce!26057

Externalize strings in controllers

See merge request gitlab-org/gitlab-ce!26420

- concerns
- dashboard
- groups
- import

Adds the groundwork needed in order to persist multi-line suggestions,
while providing the parsing strategy which will be reused for the
**Preview** as well.

Add API access check to Graphql

Closes #58547

See merge request gitlab-org/gitlab-ce!26570

Check if user can access API on GraphqlController

See https://gitlab.com/gitlab-org/design.gitlab.com/issues/242

Bootstrap 4.3.1 introduced sanitation for HTML popovers / tooltips. The
rules are rather strict, so we extend the default whitelists with safe
attributes / tags.

Removes EE differences for environments_table

Closes gitlab-ee#10714

See merge request gitlab-org/gitlab-ce!26655

Removes EE differences for stage_column_component_spec

Closes gitlab-ee#10719

See merge request gitlab-org/gitlab-ce!26659

Removes EE differences for pipelines_details_bundle

Closes gitlab-ee#10711

See merge request gitlab-org/gitlab-ce!26654

Removes EE differences for environments.scss

Closes gitlab-ee#10708

See merge request gitlab-org/gitlab-ce!26648

Remove top-level mount from note_form_spec.js

Closes #59114

See merge request gitlab-org/gitlab-ce!26616

Add seed for personal access token

Closes #59500

See merge request gitlab-org/gitlab-ce!26582

Update the MR template for security MRs

Closes gitlab-org/release/framework#256

See merge request gitlab-org/gitlab-ce!26658

This makes two changes to the template:

1. EE MRs are now always required (see
   https://gitlab.com/gitlab-org/release/framework/issues/256 for a
   backstory).

2. We clarify that a release manager is not a suitable reviewer for
   security merge requests.

Optimize /api/v4/projects endpoint for visibility level

See merge request gitlab-org/gitlab-ce!26481

Unquarantine previously failing auto devops test

See merge request gitlab-org/gitlab-ce!26641