[ci skip]

[ci skip]

Prepare 13.3.5-ee release

See merge request gitlab-org/gitlab!41341

Drew Blessing authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Update the 2FA user check to use timestamps

See merge request gitlab-org/gitlab!41327

(cherry picked from commit a69a59e5)

ebb99365 Update the 2FA user check to use timestamps

Rémy Coutable authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Add path helper method for vulnerability todo

See merge request gitlab-org/gitlab!40935

(cherry picked from commit a63f8f27)

29654f02 Add path helper method for vulnerability todo
1bccd608 Add changelog entry

Stan Hu authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Fix wrong caching logic in ProcessRefChangesService

See merge request gitlab-org/gitlab!40821

(cherry picked from commit 43e236b0)

da480ca2 Remove memoization on processing ref changes

Douglas Barbosa Alexandre authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Fix ActiveRecord::IrreversibleOrderError during restore from backup

See merge request gitlab-org/gitlab!40789

(cherry picked from commit 43afd667)

fc715de9 Fix ActiveRecord::IrreversibleOrderError during restore from backup
20015839 Move application setting schema check into create_from_defaults

Shinya Maeda authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Fix auto-deploy-image external chart dependencies

See merge request gitlab-org/gitlab!40730

(cherry picked from commit c7ce3789)

4258d038 Fix auto-deploy-image external chart dependencies

Vitaly Slobodin authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Fix Jira importer user mapping limit

See merge request gitlab-org/gitlab!40310

(cherry picked from commit c1da879f)

85d3c45f Fix Jira importer user mapping limit
dfba47dd Improve Jira importer code
49237cce Improve Jira importer code

Stan Hu authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Coerce string object storage options to booleans

Closes omnibus-gitlab#5588

See merge request gitlab-org/gitlab!39901

(cherry picked from commit a359f9f1)

bbab7fd9 Coerce string object storage options to booleans

[ci skip]

[ci skip]

Protect OAuth endpoints from brute force/password stuffing

See merge request gitlab-org/security/gitlab!843

[ci skip]

[ci skip]

[ci skip]

Security check validity of repository mirror urls

See merge request gitlab-org/security/gitlab!860

Add scopes presence validation on OAuth Application creation

See merge request gitlab-org/security/gitlab!905

George Koltsov authored 4 years ago and Drew Blessing committed 4 years ago

- Update OAuth Applications controllers to disallow empty scopes
  application creation

2FA requirement bypass using the API

See merge request gitlab-org/security/gitlab!874

Set maximum limit for profile events

See merge request gitlab-org/security/gitlab!877

GitLab Runner version upgrade

See merge request gitlab-org/security/gitlab!884

Malicious user can block gitlab.com users by exploiting 2FA inheritance logic

See merge request gitlab-org/security/gitlab!856

Previously created sessions remain active after activating 2FA

See merge request gitlab-org/security/gitlab!858

Delete members invites created by users being deleted

See merge request gitlab-org/security/gitlab!859

Pre-generation & Static 2FA Authenticator Secret Code can cause risks to accounts

See merge request gitlab-org/security/gitlab!857

Disabled Repository functionality - Still Able To Access The Project Files and Container Registry via Deploy Token

See merge request gitlab-org/security/gitlab!887

Improper Access Control on Deploy-Key

See merge request gitlab-org/security/gitlab!890

Validate Snippet global id in GraphQL destroy mutation

See merge request gitlab-org/security/gitlab!839

Merge branch 'security-220-dblessing-revoke-remember-me-on-session-revocation-13-3' into '13-3-stable-ee'

Invalidate remember me when an active session is revoked

See merge request gitlab-org/security/gitlab!853

Rate limit on webhooks testing feature

See merge request gitlab-org/security/gitlab!842

Upgrade jQuery to v3.5

See merge request gitlab-org/security/gitlab!836