[merge-train skip]

[ci skip]

[ci skip]

[ci skip]

Prepare 13.6.3-ee release

See merge request gitlab-org/gitlab!49686

Simon Knox authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Merge branch '291160-merge-request-doesn-t-fully-render-when-user-is-a-tool-admin-if-not-part-of-project' into 'master'

Fix MR rendering issue when user is tool admin

See merge request gitlab-org/gitlab!49258

(cherry picked from commit 982e2c63)

6721d25c Resolve if user is tool admin on MR
2b3183eb Move changelog out of ee as it affects FOSS also

Kamil Trzcińśki authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Merge branch '291088-pages-uploader-considers-object-storage-enabled-even-if-bucket-isn-t-configured' into 'master'

Fix pages object storage bucket

See merge request gitlab-org/gitlab!49251

(cherry picked from commit 597d5a94)

12c2b28f Fix pages object storage settings

Imre (Admin) authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Merge branch '285076-400-bad-request-during-authentication-due-to-password-format-length-or-special-chars' into 'master'

Resolve ""400 Bad Request" during authentication due to password format (length or special chars)"

See merge request gitlab-org/gitlab!49044

(cherry picked from commit 37f4b059)

496c3612 Add other method to handle strings middleware
218bcfa2 Fix rubocop offence
9a281ff0 Modify string_malformed middleware
d90dcc29 Reformat new specs
227ec822 Add changelog entry

Jan Provaznik authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Resolve Members page 500 error after Invitation sent via API

See merge request gitlab-org/gitlab!48937

(cherry picked from commit 27da16c9)

ba13e6cf Add case to revoke access for requestor that was also invited
2464e35e Remove requested_at being set at invite create
24c0a1c7 Remove requested_at search from invitations tests
d3d9ecee Replace requested_at with created_at for Invitations api
63a59d96 Review feedback: Add changelog and remove spacing

Brandon Labuschagne authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Fix container_registry url for relative urls

See merge request gitlab-org/gitlab!48661

(cherry picked from commit 6de7a81f)

d0828119 Fix container_registry url for relative urls
8c3d539a Add missing changelog

Imre (Admin) authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Fix error 500s creating projects concurrently

See merge request gitlab-org/gitlab!48571

(cherry picked from commit 5552304f)

f1543604 Fix error 500s creating projects concurrently

Stan Hu authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Add Ruby 2.7.2 requirement in version-specific update guide

See merge request gitlab-org/gitlab!48563

(cherry picked from commit c5200338)

1fa3771a Add Ruby 2.7.2 requirement in version-specific update guide

Stan Hu authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Update Rake check and docs to require Ruby 2.7

See merge request gitlab-org/gitlab!48552

(cherry picked from commit 30ab0ede)

ad40138b Update docs to require Ruby 2.7
dc2796b3 Make Rake task check for Ruby 2.7.2
3be5a596 Update requirements to indicate Ruby 2.7

Evan Read authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

docs: Adds information to clarify busy status feature

See merge request gitlab-org/gitlab!48415

(cherry picked from commit 4e612b80)

307aac2f Adds information to clarfy busy status feature
b8cf808e Apply 2 suggestion(s) to 1 file(s)
e8988ddf Apply 1 suggestion(s) to 1 file(s)

[merge-train skip]

[ci skip]

[ci skip]

[ci skip]

Do not expose starred projects of users with private profile via API

See merge request gitlab-org/security/gitlab!1105

Hide starred & contributed projects of users with private profile

See merge request gitlab-org/security/gitlab!1104

Do not show emails of users in confirmation page

See merge request gitlab-org/security/gitlab!1103

Validate zoom links to start with https only

See merge request gitlab-org/security/gitlab!1094

Cleanup confidential epic todos

See merge request gitlab-org/security/gitlab!1091

Ensure group and project memberships are not leaked

See merge request gitlab-org/security/gitlab!1096

Fix mermaid resource consumption in GFM fields

See merge request gitlab-org/security/gitlab!1107

Filter params[:search] to prevent leaks

See merge request gitlab-org/security/gitlab!1090

Require a minimum search length on explore page

See merge request gitlab-org/security/gitlab!1100

GraphQL User: public_email instead of email

See merge request gitlab-org/security/gitlab!1097

Forbid Setting a gitlabUserList Strategy to a List From Another Project

See merge request gitlab-org/security/gitlab!1089

Since mermaid is an expensive operation, we defer the execution
when the browser is idle.

This change makes sure that starred projects
details of users with private profiles are not
exposed via the API, unless the accessing user
has ability to access private profiles of the user.

This change hides starred & contributed
projects of users with private profile.

Manoj M J authored 4 years ago and Manoj M J committed 4 years ago

This change does not show the user email in
confirmations/show page.

This page searches all public projects and the trigram index does not
work well with short search terms

[merge-train skip]

[ci skip]

[ci skip]

[ci skip]

Prepare 13.6.1-ee release

See merge request gitlab-org/gitlab!48290