Vulnerabilities API returns non-dismissed vulnerabilities by default

See merge request gitlab-org/gitlab-ee!12076

Previously, Vulnerabilities API would return all however it should only
return non-dismissed by default. This behavior can be changed with
`scope=all`

Resolve "Include time window parameters in the URL query string"

Closes #59365

See merge request gitlab-org/gitlab-ce!27230

Make time window parameters available in the query string - EE

See merge request gitlab-org/gitlab-ee!11979

Adding additional snowplow event tracking

See merge request gitlab-org/gitlab-ee!12088

Cache current working directory to speed up Rubocop

Closes #61383

See merge request gitlab-org/gitlab-ce!28066

Design management uploading

See merge request gitlab-org/gitlab-ee!10655

CE Backport of tracking uninstall button click

See merge request gitlab-org/gitlab-ce!28012

Track clicks on "uninstall" button for kubernetes implementation

Closes #10763

See merge request gitlab-org/gitlab-ee!12048

- Add feature flag
- Add separate partial for additional snowplow config

Add @katrinleinweber as German proofreader

See merge request gitlab-org/gitlab-ce!24331

Update Releases permissions docs

See merge request gitlab-org/gitlab-ce!27935

Guest users now can read releases, except for items related to source
code.

Releated:
  https://gitlab.com/gitlab-org/gitlab-ce/issues/56838
  https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/27247

Set timezone as GMT in Jest config file

Closes #59952

See merge request gitlab-org/gitlab-ce!27738

Extract common store from operations dashbord

Closes #11443 and #3713

See merge request gitlab-org/gitlab-ee!11702

Allow guests users to access project releases

Closes #56838

See merge request gitlab-org/gitlab-ce!27247

This is step one of resolving
https://gitlab.com/gitlab-org/gitlab-ce/issues/56838.

Here is what changed:
- Revert the security fix from bdee9e84.
- Do not leak repository information (tag name, commit) to guests in API
responses.
- Do not include links to source code in API responses for users that do
not have download_code access.
- Show Releases in sidebar for guests.
- Do not display links to source code under Assets for users that do not
have download_code access.

GET ':id/releases/:tag_name' still do not allow guests to access
releases. This is to prevent guessing tag existence.

Docs: Update docs related to CI variables

See merge request gitlab-org/gitlab-ce!27786

Add `Variable Types` section to explain supported variable types and
update example and related screenshots.

Port of 46806-typed-ci-variables-docs to EE

See merge request gitlab-org/gitlab-ee!11991

Squashed commits from CE:

30ee76c88ec Reorg document for better reading flow
6653dabcc33 Update docs related to CI variables

Include all queries in the performance bar summary

Closes #61372

See merge request gitlab-org/gitlab-ce!28063

Internationalisation of reports directory

See merge request gitlab-org/gitlab-ce!27742

This is one of many MRs opened in order to improve the overall
internationalisation of the GitLab codebase.

i18n documentation
https://docs.gitlab.com/ee/development/i18n/externalization.html

Internationalisation of reports directory - EE

See merge request gitlab-org/gitlab-ee!11855

This is one of many MRs opened in order to improve the overall
internationalisation of the GitLab codebase.

This commit only targets Vanilla JS files.

i18n documentation
https://docs.gitlab.com/ee/development/i18n/externalization.html

This saves thousands of getcwd() system calls and improves the
performance of running Rubocop, which is also used by HAML linting.

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/61383

Pass excluded paths to SAST and DS

See merge request gitlab-org/gitlab-ee!12081

Extract EE specific files/lines for spec/requests

Closes #6520

See merge request gitlab-org/gitlab-ee!12123

Rails 5.1's `exec_no_cache` doesn't call `async_exec` any more, but
`exec_params`: https://github.com/rails/rails/pull/33188

This means that the DB summary in the performance bar was wrong. The
individual query details were still correct (we subscribe to
ActiveRecord events for those).

We can remove this once the upstream PR to peek-pg is in a release and
we update to use that release.

Propagate DS_EXCLUDED_PATHS to dependency_scanning job,
and SAST_EXCLUDED_PATHS and SAST_BANDIT_EXCLUDED_PATHS to sast job.
This makes possible to exclude certains paths from SAST reports
and Dependency Scanning reports, respectively.
Add excluded paths to manual job def of SAST & DS