[ci skip]

Fix for three open redirect vulns using redirect_to url_for(params.merge)))

See merge request !2082

Fix for path disclosure in project import/export

See merge request !2080

Previously accidently added a test for a feature that does not exist in this release
: preserved styles in labels

Fix for open redirect vuln involving continue[to] params

See merge request !2083

Don’t show source project name when user does not have access

See merge request !2081

Remove class from SanitizationFilter whitelist

See merge request !2079

[ci skip]

nil check for url_blocker?

See merge request !2076

fix for render json include leaks

See merge request !2074
Conflicts:
	app/controllers/projects/merge_requests_controller.rb
	spec/controllers/projects/issues_controller_spec.rb

Adds rel="noopener noreferrer" to all links with target="_blank"

See merge request !2071
Conflicts:
	app/assets/javascripts/environments/components/environment_external_url.js

Protect server against SSRF in project import URLs

See merge request !2068

Only show public emails in atom feeds

See merge request !2066

Backport GitLab.com Pages IP change to 8.17

[ci skip]

See merge request !9934

Signed-off-by: Rémy Coutable <remy@rymai.me>

Signed-off-by: Rémy Coutable <remy@rymai.me>

Signed-off-by: Rémy Coutable <remy@rymai.me>

Include instructions to update /etc/default/gitlab

See merge request !9926

Docs: update GL Pages IP on GL.com

See merge request !9739

We were missing some info on updating /etc/default/gitlab

In particular, changes needed to be made in order for Pages to work,
see https://gitlab.com/gitlab-org/gitlab-ce/issues/29372

[ci skip]

Move all Pages related content to a single location

See merge request !9695

Fix creating a file in an empty repo using the API

Closes #28626

See merge request !9632

This reverts commit 4b692487.

This reverts commit 071bf3b7.

Small improvements for Cycle Analytics

See merge request !9153

Show milestone ID in a consistent way

Closes #23602

See merge request !8820

Default to dangerous MR merge button

Closes #28010

See merge request !9245

Fix the redirect to custom home page URL and move it to RootController

Closes #28609

See merge request !9518

Don't copy tooltip when copying GFM

Closes #28802

See merge request !9563

Fix Cycle Analytics -> Plan is loading forever

Closes #27622

See merge request !9577

Don't declare constants in Struct

Closes #28808

See merge request !9582

Disable the inheritance column of services in DisableInvalidServiceTemplates migration

Closes #28850

See merge request !9613

The frontend should use the v3 API for now

Closes #28863 and #28853

See merge request !9614

Add changelog for !9614

See merge request !9626