[merge-train skip]

[ci skip]

[ci skip]

[ci skip]

Sanitize target branch

See merge request gitlab-org/security/gitlab!1203

Add routes for unmatched url for not-get requests

See merge request gitlab-org/security/gitlab!1179

Fix DNS rebinding protection for Outbound Requests

See merge request gitlab-org/security/gitlab!1191

Filter sensitive variables from GraphQL logs

See merge request gitlab-org/security/gitlab!1185

Sanitize XSS in Epic milestone due date

See merge request gitlab-org/security/gitlab!1177

Remove Kubernetes IP address from errors returned in Threat Monitoring

See merge request gitlab-org/security/gitlab!1176

Avoid exposing release links when the user cannot read git-tag/repository

See merge request gitlab-org/security/gitlab!1178

Sanitized the target branch to prevent XSS

[merge-train skip]

[ci skip]

[ci skip]

[ci skip]

Prepare 13.8.1-ee release

See merge request gitlab-org/gitlab!52527

Robert Speicher authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Fix missing setting LDAP servers

See merge request gitlab-org/gitlab!52512

(cherry picked from commit cc378fd1)

a5035084 Fix missing setting LDAP servers

Mayra Cabrera authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Fix LFS not working with S3 specific-storage settings

See merge request gitlab-org/gitlab!52296

(cherry picked from commit 8066d3d2)

da419833 Fix LFS not working with S3 specific-storage settings

Andrew Fontaine authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Fix browser performance widget issue body import

See merge request gitlab-org/gitlab!52088

(cherry picked from commit 84dd9603)

fec08cfe Fix browser performance widget
b1ed0df0 Add changelog entry

Jan Provaznik authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Failsafe access to current user's email

See merge request gitlab-org/gitlab!52069

(cherry picked from commit 4476d625)

7926876d Failsafe access to users email

Marcia Ramos authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Docs: Reviewer approval rules

See merge request gitlab-org/gitlab!51979

(cherry picked from commit 297bf11f)

93936960 Reviewer approval rules - gen review and fix tier
26ebdf26 Apply 1 suggestion(s) to 1 file(s)
62e8cf31 Apply 1 suggestion(s) to 1 file(s)
12d73065 Apply 1 suggestion(s) to 1 file(s)

Marcia Ramos authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Resolve "Update Approval Rule documentation"

See merge request gitlab-org/gitlab!51830

(cherry picked from commit 84d40bfd)

c08965e2 Clarify when approval rule changes are applied
e0415cad Apply 4 suggestion(s) to 1 file(s)

Yannis Roussos authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Clean up artifact expiry migration problem

See merge request gitlab-org/gitlab!51821

(cherry picked from commit 7eee28b8)

16442d05 No-op artifact expiry backfill
c5090b08 Cancel artifact expiry backfill
28109f68 Add CHANGELOG entry

Achilleas Pipinellis authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Geo: clarify how to migrate single PostgreSQL to Patroni on secondary node

See merge request gitlab-org/gitlab!51775

(cherry picked from commit f37b7aee)

e9eed669 Clarify how to migrate single postgresql to patroni

Marin Jankovski authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Create What's New for 13.8

See merge request gitlab-org/gitlab!51761

(cherry picked from commit 283dc43d)

73dbca5f Create What's New for 13.8

Marcia Ramos authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Add notification email event for SAML/SCIM

See merge request gitlab-org/gitlab!51760

(cherry picked from commit 07ea11f7)

c73feb57 Add notification email event for SAML/SCIM

This fixes DNS rebinding protection bypass when allowing an IP address
in Outbound Requests setting.

This uses the same config we setup for config.filter_parameters

[merge-train skip]

[ci skip]

[ci skip]

[ci skip]

Add changelog entry

Fix typo in routes

Fix git http spec

Fix uploads routing spec

Add matchers only to project facing paths

Add more specs for new routes

Add different shared examples

Fix rubocop offence

Add failure message to new matcher

Add cr remarks

Add cr remarks

This commit fixes the security vulnerability that guest
can read git-tag through release links.

Sanitize XSS in milestone title

Rémy Coutable authored 4 years ago and Mayra Cabrera committed 4 years ago

Fix rspec-db-library-code-pg12 job in gitlab-foss

See merge request gitlab-org/gitlab!52047

This fix resolves problems with leaked Kubernetes IP address in error
messages.

[merge-train skip]

Migrate CE MrWidgetOptions spec to @vue/test-utils

See merge request gitlab-org/gitlab!51901