Guard against a login attempt with invalid CSRF token

See merge request gitlab-org/gitlab-ce!21934

Adds css classes to aid GitLab-QA tests

See merge request gitlab-org/gitlab-ce!21935

Allow events filter to be set in the URL in addition to cookie

Closes #1801

See merge request gitlab-org/gitlab-ce!21557

Fixes performance bar looking for a key in a undefined prop

Closes #51569

See merge request gitlab-org/gitlab-ce!21887

Update vue, vue-template-compiler, and vue-loader

See merge request gitlab-org/gitlab-ce!21891

Remove DocToc frontmatter from published pages

See merge request gitlab-org/gitlab-ce!21944

Fix link to mitmproxy installation

See merge request gitlab-org/gitlab-ce!21947

Merge branch '51522-add-new-project-via-import-by-url-auto-populates-slug-but-not-project-name' into 'master'

Resolve "Add new project via import by URL auto populates slug but not project name"

Closes #51522

See merge request gitlab-org/gitlab-ce!21770

- Also fix some markdown syntax.

Fix monitoring dashboard not resizing properly

See merge request gitlab-org/gitlab-ce!21730

Update grape to 1.1.0 to address a XSS vulnerability

Closes #51299

See merge request gitlab-org/gitlab-ce!21639

Fix import statement for the skeleton notes

See merge request gitlab-org/gitlab-ce!21940

Bump GitLab UI version and change the file imports to a single point of entry notation

See merge request gitlab-org/gitlab-ce!21937

Change vertical margin of page titles to 16px

See merge request gitlab-org/gitlab-ce!21888

If a user logs in with a bad CSRF token, the Warden before_logout
hook will be called with no valid user. This would lead to odd
Error 500 messages with a backtrace.

Addresses part of #50857

Signed-off-by: Rémy Coutable <remy@rymai.me>

Feature: Runner type filter for admin view

See merge request gitlab-org/gitlab-ce!19649

Update selectors for QA::Page::Group::Show

Closes #51893

See merge request gitlab-org/gitlab-ce!21925

Resolve "Un-vendor CI templates"

Closes #50289

See merge request gitlab-org/gitlab-ce!21902

https://github.com/vuejs/vue/releases

most relevant release notes are in the 2.5.17 beta post:
https://github.com/vuejs/vue/releases/tag/v2.5.17-beta.0

Don't ignore first action when assign and unassign quick actions are used in the same comment

See merge request gitlab-org/gitlab-ce!21749

ci docs: clarify allow_failure default

See merge request gitlab-org/gitlab-ce!21791

Rename squash before merge vue component

See merge request gitlab-org/gitlab-ce!21851

Add documentation for stable URLs for Artifacts

See merge request gitlab-org/gitlab-ce!21890

Docs: one-off typo fix

See merge request gitlab-org/gitlab-ce!21872

[CE backport] Fix RequestStore-related EE-only test failure

See merge request gitlab-org/gitlab-ce!21915

uploads.md: Fix incorrect path reference

See merge request gitlab-org/gitlab-ce!21901

Enable even more frozen string in app/controllers

See merge request gitlab-org/gitlab-ce!21919