[master] Resolve "Personal access token with only `read_user` scope can be used to authenticate any web request"

See merge request gitlab/gitlabhq!2583

[master]Fixed ability to comment on and edit/delete comments on locked or confidential issues

See merge request gitlab/gitlabhq!2612

[master] [pages] Possible symlink time of check to time of use race condition

Closes #2742

See merge request gitlab/gitlabhq!2638

[master] XSS in markdown following unrecognized HTML element

Closes #2732

See merge request gitlab/gitlabhq!2599

[master] Fix XSS in mermaid diagrams

See merge request gitlab/gitlabhq!2597

[master] Don't expose confidential information in commit message list

See merge request gitlab/gitlabhq!2626

[master] Resolve: Promoting a milestone is missing an authorization check

See merge request gitlab/gitlabhq!2598

[master] Do not follow redirects in prometheus service

See merge request gitlab/gitlabhq!2617

[master] Stored XSS for Environments

Closes #2727

See merge request gitlab/gitlabhq!2594

[master] Fixed read private group names

See merge request gitlab/gitlabhq!2589

[Master] Redact sensitive information on gitlab-workhorse log

See merge request gitlab/gitlabhq!2584

Externalize strings from `/app/views/snippets`

See merge request gitlab-org/gitlab-ce!23351

Make add_reference cop accept a hash for :index

See merge request gitlab-org/gitlab-ce!23375

Bump GitLab Workhorse to 7.2.1

See merge request gitlab-org/gitlab-ce!23424

Force better alignment in tables

See merge request gitlab-org/gitlab-ce!23393

Include new and edit links in breadcrumb for project milestones, group milestones, and labels

Closes #43998

See merge request gitlab-org/gitlab-ce!18515

Improve detail of resolve conflict docs

See merge request gitlab-org/gitlab-ce!22927

Add monkey patch to unicorn to fix eof? problem

See merge request gitlab-org/gitlab-ce!23385

https://gitlab.com/gitlab-org/gitlab-workhorse/blob/master/CHANGELOG

Show user contributions in correct timezone within user profile

Closes #38495

See merge request gitlab-org/gitlab-ce!23419

Adds QA_COOKIES option to gitlab-qa

See merge request gitlab-org/gitlab-ce!23416

Rack with Unicorn is unable to handle chunked requests due to private `eof?` method.
This exposes `eof?` not changing `rack` behavior.

Issue: https://gitlab.com/gitlab-org/gitlab-ee/issues/8539

Return real deployment status to frontend

Closes #53578

See merge request gitlab-org/gitlab-ce!23270

Resolve "Bug - Web Based IDE - The "Merge" Requests Selection displays Merge Requests from other projects"

Closes #50839

See merge request gitlab-org/gitlab-ce!23400

Resolve "Bug - Web Based IDE - The "Merge" Requests Selection displays Merge Requests from other projects"

Adds margin between tags when job is stuck

Closes #54571

See merge request gitlab-org/gitlab-ce!23407

Rename Repository table to PoolRepository

See merge request gitlab-org/gitlab-ce!23236

Resolves N+1 RPC call for Project#readme_url

Closes #51061

See merge request gitlab-org/gitlab-ce!23357

Validate chunk size when persist

See merge request gitlab-org/gitlab-ce!23341

Caches repository.path into Repository#readme_path

[docs] Stop documenting defunct global variables reset

Closes gitlab-runner#3320

See merge request gitlab-org/gitlab-ce!21447

Removes all the irrelevant code and columns that were migrated from the Project…

See merge request gitlab-org/gitlab-ce!21497

Left shift security in our workflow

See merge request gitlab-org/gitlab-ce!23132