ruby-jwt v2.0 removed the `typ` header in
https://github.com/jwt/ruby-jwt/commit/cc41d53e00f8cbf015271b53f5ad761bd6ac2312.

To ensure tokens don't get marked invalid during an upgrade,
add it back to ensure backwards compatibility.

By default, the JWT decode only allows HS256 mode (HMAC using SHA-256
hash algorithm). The specs using RSA tokens failed per
https://github.com/jwt/ruby-jwt#algorithms-and-usage:

It is strongly recommended that you hard code the algorithm, as you may
leave yourself vulnerable by dynamically picking the algorithm.

ruby-jwt v2.0 removed the `typ` header in
https://github.com/jwt/ruby-jwt/commit/cc41d53e00f8cbf015271b53f5ad761bd6ac2312.

To ensure tokens don't get marked invalid during an upgrade,
add it back to ensure backwards compatibility.

* omniauth-google-oauth2: Google will be deprecating its support for the
Google+ API, which currently omniauth-google-oauth2 uses to retrieve
user info. The bump in omniauth-google-oauth2 requires an upgrade to
ruby-jwt v2+ to support the verification of multiple issue providers
(https://github.com/zquestz/omniauth-google-oauth2/pull/345).

* jwt: This has the most number of changes that need to be
reviewed: https://github.com/jwt/ruby-jwt/blob/master/CHANGELOG.md

* oauth2: Needed to support ruby-jwt v2+:
https://github.com/oauth-xx/oauth2/blob/master/CHANGELOG.md

* omniauth-azure-oauth2 needs a version bump to support ruby-jwt v2+.

* omniauth: This version bump only involves backstage improvements:
https://github.com/omniauth/omniauth/releases

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/55668

Fix docs anchor link

Closes #36474

See merge request gitlab-org/gitlab-ce!24043

Skip per-commit validations which have already passed on another change/branch

Closes #44679

See merge request gitlab-org/gitlab-ce!23984

Correct the ordering of metrics on performance dashboard

Closes #51970

See merge request gitlab-org/gitlab-ce!23630

Fix bug commenting LFS images and displaying LFS files

Closes #43783

See merge request gitlab-org/gitlab-ce!23812

Don't hide CI dropdown behind diff summary

See merge request gitlab-org/gitlab-ce!24014

Update condition to visibility collaboration status text, #44642.

Closes #44642

See merge request gitlab-org/gitlab-ce!23104

Occurs on a repository commit page

Support both 0 and NULL lock_versions

See merge request gitlab-org/gitlab-ce!24050

Add kubeclients stub methods on `KubernetesHelpers`

See merge request gitlab-org/gitlab-ce!24054

Fix timeout issues retrieving branches via API

Closes #55724

See merge request gitlab-org/gitlab-ce!24034

Stub methods were added for:
- GET service account
- PUT service account
- GET role binding
- PUT role binding

Fix tooltip titles for pipeline flags

See merge request gitlab-org/gitlab-ce!24027

Resolve "Redesign project lists UI: Further improvements"

Closes #55669

See merge request gitlab-org/gitlab-ce!24011

This commit, introduced in https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/23812,
fixes a problem creating a displaying image diff notes when the image
is stored in LFS. The main problem was that `Gitlab::Diff::File` was
returning an invalid valid in `text?` for this kind of files.

It also fixes a rendering problem with other LFS files, like text
ones. They LFS pointer shouldn't be shown when LFS is enabled
for the project, but they were.

47d4890d changed the order of pagination so that the full list of
branches would be passed to Gitaly to determine which ones had been
merged, but this operation can timeout for large repositories with
many branches. We only need to determine whether the found branches have
been merged, so limit the scan to those.

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/55724

Removing workhorse_set_content_type feature flag

See merge request gitlab-org/gitlab-ce!23930

Use system paths for appearance logos

Closes gitlab-ee#6778

See merge request gitlab-org/gitlab-ce!24024

Considerably improve the loading time on merge request's discussion page

Closes #52950

See merge request gitlab-org/gitlab-ce!23857

Handle nil terminals in Clusters::Platforms::Kubernetes

Closes #55551

See merge request gitlab-org/gitlab-ce!23925

Add % prefix to milestone reference link text

Closes #53907

See merge request gitlab-org/gitlab-ce!23928

Reorder sidebar menu item for group clusters

Closes #55536

See merge request gitlab-org/gitlab-ce!24001

Bump CarrierWave to 1.3.0 and remove monkey patches

See merge request gitlab-org/gitlab-ce!24019

Return an ApplicationSetting in CurrentSettings

See merge request gitlab-org/gitlab-ce!23766

Fix clone dropdown parent inheritance issues in HAML

See merge request gitlab-org/gitlab-ce!24029

Add word-break to issue title to fix edit button disspearing

Closes #55484

See merge request gitlab-org/gitlab-ce!23948

Using find_elements instead of all_elements

Closes gitlab-org/quality/staging#18

See merge request gitlab-org/gitlab-ce!23977

Merge remote-tracking branch 'upstream/master' into 54953-error-500-viewing-merge-request-due-to-nil-commit_email_hostname

* upstream/master: (115 commits)
  [CE] Speed up login page usage
  Add new line and comments
  Fix the seeder 24_forks.rb cannot find public project
  Milestones on community contribution issues
  Removed Gitlab Upgrader found in /lib/gitlab/upgrader.rb
  Fix and move specs into admin_disables_git_access_protocol_spec.rb
  Fix HTTP/SSH clone panel for mobile
  Add spec for HTTP/SSH clone panel
  Fix missing Git clone button when protocol restriction setting enabled
  Fix deprecation: Using positional arguments in integration tests
  Extend override check to also check arity
  Update tm cli version
  Bump Gitaly version to v1.12.0
  Add @dbalexandre to CODEOWNERS
  Update verbiage for clarity
  Change group-cluster beta to regular note
  Change alpha states to use note instead of warning
  Update registry section. Update serverless.yaml formatting
  Clarify obtaining application URL
  Add @godfat to CODEOWNERS
  ...