The bug was caused by the switch to Rails UJS in
https://gitlab.com/gitlab-org/gitlab/-/merge_requests/27394.

The form wasn't submitted remotely and the CSRF token wasn't sent.

We also enable CSRF protection for JS tests to catch these problems.

Replaces the default export flash
function with the newCreateFlash.

Fix outstanding flash imports

Updates specs and replaces outstanding
imports for `Flash`

Fixes additional specs

Updates the remaining calls to different
flash methods, except for the window.Flash
method since this will break .erb templates

Validate confirmation of emails for user

Add validation to notification settings

Add different condition to validation

Add possibility to pick only email in dropdown

Fix user specs file

Remove unused method

Add changelog entry

Add cr remarks

Add cr remarks

- Select notification email by walking up group/subgroup path
- Add settings UI to set group email notification address
- Add tests

- Select notification email by walking up group/subgroup path
- Add settings UI to set group email notification address
- Add tests

Udpated user_edit_profile_spec with time preferences

Minor update form fields

Udpated user_edit_profile_spec with time preferences

Minor update form fields

Reduced the technical debt around our JS flash function by making it a
module that is imported rather than relying on the global function.
The global function still exists mainly for technical debt with how
some requests are being completed, but new JS should import the module
directly.

Also reduces some tech debt in the file by removing the need for jQuery.
Instead Flash is now 100% vanilla JS.

This reverts commit 68e40bd4, reversing
changes made to 2d1f823b.

This reverts commit 5e966688, reversing
changes made to b35378a9.

Previously it was listening for focusout, it now listens for blur &
paste events

Closes #28436

expand remaining non-explicit eslint-disable blocks and factor out globals when no-undef encountered