[9.5] Prevent a persistent XSS in user-provided markup

See merge request gitlab/gitlabhq!2203

Move project repositories between namespaces when renaming users (9.5)

See merge request gitlab/gitlabhq!2202

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/38272

Escape user name in filtered search bar

See merge request gitlab/gitlabhq!2195

Upgrade Nokogiri because of CVE-2017-9050

See merge request gitlab-org/gitlab-ce!14427

Upgrade mail and nokogiri gems due to security issues

See merge request !13662

Fix Live Comment XSS Vulnerability

See merge request gitlab/gitlabhq!2183

Merge 9-5-stable into security-9-5

See merge request gitlab/gitlabhq!2184

[9.5] Prevent a persistent XSS in the commit author block

See merge request gitlab/gitlabhq!2180

[ci skip]

Improve migrations / background migrations testing strategy

Closes #36303

See merge request !13589

This reverts commit 775cee73.

Clear schema cache after running tests for migrations

Closes #37086

See merge request !13870

This reverts commit 6d6223ec, reversing
changes made to cc781170.

Instrument MergeRequest#fetch_ref

See merge request !13980

Fixes the fly-out navigation flashing in & out

Closes #37022

See merge request !13929

Rollback changes made to signing_enabled.

Closes #37202

See merge request !13956

Remove closing external issues by reference error

Closes #36820

See merge request !13910

Update translation for zh-TW to remove percents

See merge request !13988

Fix "Merge when pipeline succeeds" button dropdown caret icon horizontal alignment

Closes #37194

See merge request !13965

Merge branch 'pawel/bump_prometheus_client_mmap_version_to_fix_performance_degradation' into 'master'

Update Prometheus Client MMAP gem to version that fixes performance degradation

See merge request !13898

Remove skipped examples in filtered issues feature spec

See merge request !13845

Update Gitaly version to v0.35.0

Closes #36972 and gitaly#486

See merge request !13950

Fix events error importing GitLab projects

Closes #36965

See merge request !13868

Filter additional parameters that have shown up in our logs

See merge request !13945

Removes disabled state from projects dropdown in dashboard page

Closes #37179

See merge request !13933

Fixed fly-out nav jumping

Closes #36699

See merge request !13690

Resolve "README.md: Header image scale not limited"

Closes #37058, #37024, and #37230

See merge request !13869

Increase z-index of dropdowns

Closes #36766 and #36866

See merge request !13889