[merge-train skip]

[ci skip]

[ci skip]

[ci skip]

Prepare 13.7.3-ee release

See merge request gitlab-org/gitlab!51125

Merge branch '289925-subscription-expiration-banner-not-dismissable' into 'master'

See merge request gitlab-org/gitlab!51150

Jake Burden authored 4 years ago and Mayra Cabrera committed 4 years ago

Fix(eetrialbanner): fix EE trial banner to allow dismiss

See merge request gitlab-org/gitlab!50436

Merge branch '13-7-stable-ee-patch_10io-fix-graphql-container-repository-tag-size-type' into '13-7-stable-ee-patch-3'

Fix the graphQL type for container repository tags

See merge request gitlab-org/gitlab!51141

Properly encode the total size as a BigInt

Solve conflicts for "Job Trace polling solution "

See merge request gitlab-org/gitlab!51130

Jose Ivan Vargas Lopez authored 4 years ago and Jose Ivan Vargas Lopez committed 4 years ago

Job Trace polling solution

See merge request gitlab-org/gitlab!49982

Re-add 'premium' declaration to Deploy Boards

See merge request gitlab-org/gitlab!51022

Evan Read authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Note feature flag for user cap

See merge request gitlab-org/gitlab!50806

(cherry picked from commit 6233211d)

0b943c12 Note feature flag for user cap
bf491f09 Updated version reference
1325cd09 Move note about auto approvals to correct section

Ash McKenzie authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Follow-up from "Fix project access token regression"

See merge request gitlab-org/gitlab!50800

(cherry picked from commit 5ba912a3)

0ad8866b Remove project bot policy
6ae1da63 Add changelog entry
f719cf67 Fix changelog entry

Stan Hu authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Update Helm 2 version to 2.17.0

See merge request gitlab-org/gitlab!50547

(cherry picked from commit 52587ff8)

d80539c7 Update Helm 2 version to 2.17.0

Heinrich Lee Yu authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Set registry fields to nullable

See merge request gitlab-org/gitlab!50362

(cherry picked from commit 1e60ea99)

0f47ed9e Set registry fields to not_nullable
d49315f3 Update schema with less requireds
80a7e5e1 Remove createdAt from required fields
4f8dc2ba Add missing digest test to request spec
849af27d Add feature test to cover regression
ca9c2b94 Add missing changelog
9fd8251f Stub tags directly with new helper
9836bca1 Apply 1 suggestion(s) to 1 file(s)
1e3c9764 Move stub tags function to shared context
08e7fd4b Apply 1 suggestion(s) to 1 file(s)

Patrick Bair authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Merge branch '294221-gitlab-pages-deployments-over-the-max-int-size-in-bytes-fail-to-upload' into 'master'

Change pages deployments size column to bigint

See merge request gitlab-org/gitlab!50262

(cherry picked from commit e495f2d8)

914ecdff Allow to pass limit to undo_cleanup_concurrent_column_type_change
2e787ef4 Change pages deployments size to 8 bytes

Jarka Kadlecova authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Fix Canary Ingress weight is not reflected on UI immediately

See merge request gitlab-org/gitlab!50246

(cherry picked from commit 5fa60a22)

c5b98228 Fix Canary Ingress weight is not reflected on UI immediately

[merge-train skip]

[ci skip]

[ci skip]

[ci skip]

Fix prometheus DoS through Workhorse

See merge request gitlab-org/security/gitlab!1144

vshushlin authored 4 years ago and Mayra Cabrera committed 4 years ago

too long method name results in too long
prometheus label name, which can crash prometheus

Deny implicit flow for confidential apps

See merge request gitlab-org/security/gitlab!1139

Set all trusted OAuth apps as confidential

See merge request gitlab-org/security/gitlab!1150

Fix regex backtracking issue in package_name_regex

See merge request gitlab-org/security/gitlab!1131

Fix stealing API token and Prometheus DoS through GitLab Pages

See merge request gitlab-org/security/gitlab!1136

vshushlin authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

It includes 2 security fixes

Update non-negative integer regex to protect against regex DoS

See merge request gitlab-org/security/gitlab!1129

Forbid public cache for private repos

See merge request gitlab-org/security/gitlab!1147

Mark deploy boards as available in Premium, as the feature
did not make it to Core in time for 13.7.

Vitaly Slobodin authored 4 years ago and Mayra Cabrera committed 4 years ago

Fix details_page/details_header_spec time dependent spec

See merge request gitlab-org/gitlab!50739

Ash McKenzie authored 4 years ago and Mayra Cabrera committed 4 years ago

Add project pipeline statistics test case for variable length months

See merge request gitlab-org/gitlab!50704

Migrate all trusted apps to confidential to avoid
potential access token leak abusing implicit flow

When project is public but the repository is private, we don't
want to cache it as public. In this case, anybody will be able
to see the cached version of the private content during 60s
after an eligible user has viewed it.