Prevent IDOR when adding groups to protected environments

See merge request gitlab/gitlab-ee!1184

Check that SAML identity linking validates the origin of the request

See merge request gitlab/gitlab-ee!1207

Hide approvers if a rule has any hidden groups

See merge request gitlab/gitlab-ee!1263

Display only participants that user has permission to see

See merge request gitlab/gitlab-ee!1264

Hide disabled project milestones in project settings on group level

See merge request gitlab/gitlab-ee!1276

Filter not accessible label events

See merge request gitlab/gitlab-ee!1280

Add policy check if cross reference system notes are accessible

See merge request gitlab/gitlab-ee!1281

Check permissions before showing head pipeline blocking merge requests

See merge request gitlab/gitlab-ee!1288

Redirect user to root path after unsubscribing from private resource

See merge request gitlab/gitlab-ee!1293

Prevent Bypassing Email Verification using Salesforce

See merge request gitlab/gitlab-ee!1310

Only render fixed number of mermaid blocks

See merge request gitlab/gitlab-ee!1311

Cancel all running CI jobs when user is blocked

See merge request gitlab/gitlab-ee!1316

Fix Gitaly SearchBlobs flag RPC injection [Gitaly v1.65.1]

See merge request gitlab/gitlab-ee!1328

Restrict access to security reports when pipeline is not public

See merge request gitlab/gitlab-ee!1338

[ci skip]

[ci skip]

[ci skip]

[ci skip]

[ci skip]

[ci skip]

Add instructions to set core.fsyncObjectFiles

See merge request gitlab-org/gitlab!17649

Exposing design repository from primary to secondary

Closes #13053

See merge request gitlab-org/gitlab!16821

Geo needs to be able to clone design repositories

Feature flag issue template mentions timing

See merge request gitlab-org/gitlab!17336

Add epic support to UrlBuilder

Closes #9801

See merge request gitlab-org/gitlab!17224

This assures that epic and epic note URLs are built correctly
with UrlBuilder.

Remove cookie flag after cycle analytics refactor

Closes #13569

See merge request gitlab-org/gitlab!17341

This MR removes the feature flag that was used to refactor
the code code into a vue application.

Update development documentation

See merge request gitlab-org/gitlab!17729

Use :last-child selector for adjusting .card-header border

See merge request gitlab-org/gitlab!17480

Merge branch '32636-package-and-qa-can-fail-when-new-commits-are-pushed-since-it-fetches-git-repo-with-a-depth-of-1' into 'master'

Use the default fetch depth for the 'package-and-qa' jobs

Closes #32636

See merge request gitlab-org/gitlab!17603

Stop liveness check returning incorrect data

See merge request gitlab-org/gitlab!17655

Update references in code from gitlab-ce to gitlab-foss

See merge request gitlab-org/gitlab!17596

feat: user mode in session for admins

See merge request gitlab-org/gitlab!16981

Require admins to enter admin-mode by re-authenticating before performing
administrative operations