Fix XSS in branches dropdown

See merge request !2093

Respect project features in wiki and blob search

See merge request !2089

Fix snippets visibility for show action - external users can not see internal snippets

See merge request !2087

Sanitize submodule URLs before linking to them in the file tree view

See merge request !2084

Render asciidoc & other markup using banzai in a pipeline

See merge request !2088

Add correct `rel` attributes to external links when rendering markdown

See merge request !2086

[ci skip]

Fix for three open redirect vulns using redirect_to url_for(params.merge)))

See merge request !2082

Fix for path disclosure in project import/export

See merge request !2080

Previously accidently added a test for a feature that does not exist in this release
: preserved styles in labels

Fix for open redirect vuln involving continue[to] params

See merge request !2083

Don’t show source project name when user does not have access

See merge request !2081

Remove class from SanitizationFilter whitelist

See merge request !2079

[ci skip]

nil check for url_blocker?

See merge request !2076

fix for render json include leaks

See merge request !2074
Conflicts:
	app/controllers/projects/merge_requests_controller.rb
	spec/controllers/projects/issues_controller_spec.rb

Adds rel="noopener noreferrer" to all links with target="_blank"

See merge request !2071
Conflicts:
	app/assets/javascripts/environments/components/environment_external_url.js

Protect server against SSRF in project import URLs

See merge request !2068

Only show public emails in atom feeds

See merge request !2066

Backport GitLab.com Pages IP change to 8.17

[ci skip]

See merge request !9934

Signed-off-by: Rémy Coutable <remy@rymai.me>

Signed-off-by: Rémy Coutable <remy@rymai.me>

Signed-off-by: Rémy Coutable <remy@rymai.me>

Include instructions to update /etc/default/gitlab

See merge request !9926

Docs: update GL Pages IP on GL.com

See merge request !9739

We were missing some info on updating /etc/default/gitlab

In particular, changes needed to be made in order for Pages to work,
see https://gitlab.com/gitlab-org/gitlab-ce/issues/29372

[ci skip]

Move all Pages related content to a single location

See merge request !9695

Fix creating a file in an empty repo using the API

Closes #28626

See merge request !9632

This reverts commit 4b692487.

This reverts commit 071bf3b7.

Small improvements for Cycle Analytics

See merge request !9153

Show milestone ID in a consistent way

Closes #23602

See merge request !8820

Default to dangerous MR merge button

Closes #28010

See merge request !9245