* upstream/master: (411 commits)
  Improve clarity of Helm Chart docs
  Remove changelogs we've already released in the security patches
  Merge branch 'update-pages-9-5' into 'security-9-5'
  Merge branch 'fix-user-select-dropdown-escaping' into 'security-9-5'
  Merge branch 'rs-issue-36104' into 'security-9-5'
  Merge branch 'rs-issue-36098' into 'security-9-5'
  Merge branch '29943-environment-folder' into 'security-9-5'
  Merge branch 'fix-escape-commit-block' into 'security-9-5'
  Merge branch 'fix-comment-reflection' into 'security-9-5'
  Merge branch 'dm-go-get-xss' into 'security-9-3'
  Normalize styles for empty-state group-level new issue/MR combo button
  Add Auto DevOps docs
  Make Members with Owner and Master roles always able to create subgroups
  Resolve "Make project and features visibility settings less confusing"
  Update docs for confidential issues
  Update rails template to include postgres
  Adds exclusive lease to Git garbage collect worker.
  Gitaly feature toggles are on by default in development environments
  Resolve RuboCop violations in scripts/trigger-build-docs
  Fix broken case for projects:merge_requests:index
  ...

Update master with 9.5.4 security patches

See merge request !14131

Improve clarity of Helm Chart docs

Closes #37550

See merge request !14100

Update GitLab Pages (9.5)

See merge request !2159

Fixes the User Selection Display (9.5)

See merge request gitlab/gitlabhq!2177

[9.5] Disallow the `name` attribute on all user-provided markup

See merge request gitlab/gitlabhq!2166

[9.5] Limit `style` attribute on `th` and `td` elements to specific properties

See merge request gitlab/gitlabhq!2155

Do not use `location.pathname` when accessing environments folders

See merge request !2147

[9.5] Prevent a persistent XSS in the commit author block

See merge request gitlab/gitlabhq!2180

Fix Live Comment XSS Vulnerability

See merge request gitlab/gitlabhq!2183

Fix XSS issue in go-get handling

See merge request !2128

Show Geo event log and cursor data in node status page

See merge request !2681

Update db schema to correspond with migrations

See merge request !14115

Merge branch '36638-select-project-to-create-issue-button-is-disconnected-from-dropdown-button' into 'master'

Normalize styles for empty-state group-level new issue/MR combo button

Closes #36638

See merge request !13647

Merge branch '30473-allow-creation-of-subgroups-with-gitlab_default_can_create_group-set-to-false' into 'master'

Make Members with Owner and Master roles always able to create subgroups

Closes #30473

See merge request !14046

Can migrate LFS objects to S3 style object storage

Closes #2841

See merge request !2760

Add Auto DevOps docs

Closes #37051

See merge request !14031

Port of '32665-refactor-project-visibility-settings' to EE

See merge request !2860

Update rails template to include postgres

Closes #37156

See merge request !14120

Merge branch '35558-only-one-garbage-collection-should-be-running-per-project-at-once' into 'master'

Adds exclusive lease to Git garbage collect worker.

Closes #35558

See merge request !14036

Port "Improve "Share with group lock" feature for subgroups" to EE

See merge request !2853

Resolve RuboCop violations in scripts/trigger-build-docs

See merge request !14118

Restore droplab item style for keyboard navigation

Closes #37218

See merge request !13921

Improve "Share with group lock" feature for subgroups

Closes #30550

See merge request !13944

Give Service Desk more prominence in the UI

Closes #3049

See merge request !2733

CE Upstream - Tuesday

Closes gitlab-ce#34261

See merge request !2828

Resolve "Make project and features visibility settings less confusing"

Closes #32665

See merge request !14062

Resolve "Banner to enable Auto DevOps at project level"

Closes #37158

See merge request !13991