[merge-train skip]

[ci skip]

[ci skip]

[ci skip]

Patch Kramdown syntax highlighter gem

See merge request gitlab-org/security/gitlab!1291

This restricts Rouge formatters to the Rouge::Formatters namespace to
prevent arbitrary classes from being instantiated.

Relates to https://gitlab.com/gitlab-org/gitlab/-/issues/324452

Use UTC for shift times calculated in specs

See merge request gitlab-org/gitlab!56671

[merge-train skip]

[ci skip]

[ci skip]

[ci skip]

Prepare 13.9.3-ee release

See merge request gitlab-org/gitlab!55797

Rename asset_proxy_allowlist column

See merge request gitlab-org/gitlab!55884

(cherry picked from commit dfd3d7ed)

b6055662 Rename asset_proxy_allowlist column
cee713cd Apply 1 suggestion(s) to 1 file(s)

Rename asset_proxy_allowlist column

See merge request gitlab-org/gitlab!55884

Revert https://gitlab.com/gitlab-org/gitlab/-/merge_requests/50824
but keep the application handling both versions.

Stan Hu authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Fix disabling of Kroki optional formats

See merge request gitlab-org/gitlab!55665

(cherry picked from commit 83b0a4b7)

116905cb Fix disabling of Kroki optional formats

Stan Hu authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Move new section

See merge request gitlab-org/gitlab!55448

(cherry picked from commit 4528e2b5)

a4a3d02c Move new section

Upgrade gitlab-shell to v13.17.0

See merge request gitlab-org/gitlab!55295

(cherry picked from commit 9793199e)

d53d4082 Upgrade gitlab-shell to v13.17.0

Document how to disable S3 multi-threaded copying

See merge request gitlab-org/gitlab!55252

(cherry picked from commit a14eb451)

05cc4a24 Document how to disable S3 multi-threaded copying

Use new temp index for backfilling artifact expiry

See merge request gitlab-org/gitlab!55091

(cherry picked from commit 15a3481e)

b42e33db Use new temp index for backfilling artifact expiry

[merge-train skip]

[ci skip]

[ci skip]

[ci skip]

Workhorse: prevent escaped router path traversal

See merge request gitlab-org/security/gitlab!1265

Possible XSS in wiki author name

See merge request gitlab-org/security/gitlab!1253

Clean up active session file

See merge request gitlab-org/security/gitlab!1269

Bump swagger-ui-dist version

See merge request gitlab-org/security/gitlab!1276

Bump thrift to 0.14.0

See merge request gitlab-org/security/gitlab!1272

Allow only group owners to manage group variables

See merge request gitlab-org/security/gitlab!1256

[ci skip]

Stop logging when path is excluded

See merge request gitlab-org/security/gitlab-workhorse!31

This causes logging a lot and reporting to sentry which can
cause performance issues.

Bumped the swagger-ui-dist version to the latest