Merge branch '351293-large-pushes-to-merge-requests-can-cause-emails-not-to-be-delivered' into 'master'

Limit the number of commits in push merge request emails

See merge request gitlab-org/gitlab!82801

Track event for new Group runners view

See merge request gitlab-org/gitlab!83448

Fix GraphQlController not logging sessionless user

See merge request gitlab-org/gitlab!83144

Update add license heading

See merge request gitlab-org/gitlab!83394

Merge branch '356495-edge-case-when-only-a-file-under-data-whats_new-w-yml-is-edited-rspec-coverage-fails-before' into 'master'

ci: Add `data/whats_new/\w*.yml` pattern to `backend-patterns`

See merge request gitlab-org/gitlab!83379

Resolve "`ci_environment_status` return correct deployment"

See merge request gitlab-org/gitlab!83199

Changelog: fixed

Backfill work_item_type_id for all Issues

See merge request gitlab-org/gitlab!71869

Merge branch '351665-add-feature-flag-to-advanced-traffic-control-with-canary-ingress' into 'master'

Resolve "Add feature flag to Advanced Traffic control with Canary Ingress"

See merge request gitlab-org/gitlab!82634

Merge branch '355978-refactor-issue-description-task-work-item-conversion-using-task-button-2' into 'master'

Replace create task popover with button

See merge request gitlab-org/gitlab!83200

Add FIPS spec helper

See merge request gitlab-org/gitlab!83090

Move the GitLab Pages docs to Editor group

See merge request gitlab-org/gitlab!83321

Added guidance for respectively

See merge request gitlab-org/gitlab!83329

Implement GET API for GATs and PATs

See merge request gitlab-org/gitlab!82714

Render non-highlighted content as text

See merge request gitlab-org/gitlab!83400

Trigger an email when seat overage occurs

See merge request gitlab-org/gitlab!79807

Clarify permissions in Deployment Approvals

See merge request gitlab-org/gitlab!83450

More helpful empty states for milestones

See merge request gitlab-org/gitlab!81190

Add description and new milestone button
Hide filters if no open or closed exist

Changelog: changed

Add group-level security policies page

See merge request gitlab-org/gitlab!83262

Update dial-nodes command

See merge request gitlab-org/gitlab!83377

Add manual linking section to SAML doc

See merge request gitlab-org/gitlab!83361

Instrument traditional background migrations

See merge request gitlab-org/gitlab!83215

Remove unused test with confetti_post_signup candidate

See merge request gitlab-org/gitlab!83387

Update spinner in merge request status check to pajamas compliant

See merge request gitlab-org/gitlab!83233

Document remark on file compatibility for Postman Variables

See merge request gitlab-org/gitlab!83296

Add version history to Harbor docs

See merge request gitlab-org/gitlab!83408

We want to alert group admins to potential additional charges when they
add more users to a group than they have purchased seats for.

Respond to the members added event by checking the usage data of the
namespace and email the user after an overage occurs by calling the
CustomersDot API.

EE: true
Changelog: added
Issue: https://gitlab.com/gitlab-org/gitlab/-/issues/348487
MR: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/79807

changed link anchor

See merge request gitlab-org/gitlab!83470

Add escalation status sort to incident list view

See merge request gitlab-org/gitlab!82237

Adds fetch/xhr interception to e2e tests

See merge request gitlab-org/gitlab!81613

In adding request interception, we are able to log api errors
as well as wait for fetch requests to finish, which the
tests were not previously doing

DB Migration
Backfills work_item_type_id for issues that still
don't have a foreign_key set

Use queue_batched_background_migration to schedule background migration

Changelog: other

Fix testcase links in e2e specs

See merge request gitlab-org/gitlab!83442

Most controllers call `ApplicationController#auth_user` first, which
ensures that the currently-logged in user will be memoized
properly. However, controllers such as `GraphQlController` allows
sessionless access via the `PRIVATE-TOKEN` header. They authenticate
access via `authenticate_sessionless_user!`.

Since `auth_user` is memoized before `authenticate_sessionless_user!`
gets to run, `ApplicationController#context_user` relies on a stale
`auth_user` value if a sessionless user is used. As a result,
`GraphQlController` erroneously logs that an anonymous user accessed
an endpoint when an actual user was responsible.

To fix this, we need to update `authenticate_sessionless_user!` so
that it flushes the memoization of `auth_user` if a sessionless user
has logged in. Note that we have to be careful not to call
`current_user` for anonymous users because each attempt will cause a
Warden reauthentication attempt.

Relates to https://gitlab.com/gitlab-org/gitlab/-/issues/356213

Changelog: fixed

Use better fallback operation names in GraphQL

See merge request gitlab-org/gitlab!83281