Archive GitLab 13 changelogs

CHANGELOG-EE.md

@@ -4,3328 +4,9 @@ entries. Starting with May 22nd, 2021 all changelog entries are found in
 Please view this file on the master branch, on stable branches it's out of date.
-## 13.12.0 (2021-05-22)
-### Security (1 change)
-
-- Upgrade the GitLab Elasticsearch Indexer version to 2.10.0. !60690
-
-### Removed (1 change)
-
-- Remove docker-in-docker job from API Fuzzing CI template. !60054
-
-### Fixed (60 changes, 20 of them are from the community)
-
-- Eagerly associate DastSiteProfile and DastSiteValidation on create. !53800
-- Hide "Renew" button for trial subscription on group billing page. !55796 (Kev @KevSlashNull)
-- Fix Rails/SaveBang rubocop offenses in ee/spec/workers. !58070 (Abdul Wadood @abdulwd)
-- Fix Rails/SaveBang rubocop offenses in ee/spec/support. !58074 (Abdul Wadood @abdulwd)
-- Fix Rails/SaveBang rubocop offenses in ee/spec/mailers. !58097 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/support. !58292 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in todo_service_spec.rb. !58310 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/services/projects. !58330 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/services/dora. !58353 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/services/award_emojis. !58356 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/lib/gitlab/elastic. !58381 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/graphql/types. !58385 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/graphsql/mutations. !58390 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/features/issues. !58396 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/features/groups. !58398 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/features/dashboards. !58399 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/features/boards. !58401 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/controllers/projects. !58410 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/controllers/groups. !58412 (Abdul Wadood @abdulwd)
-- Support filtering by assignee wildcard in epic swimlanes. !59348
-- Fix minor UX issues with "group by" within iteration report. !59522
-- Fix creating an MR when a project approval rule has no approvers. !59671
-- Make the MergeReportsService more reliable. !59682
-- Create link to Threat Monitoring Alert for threat management alerts. !59724
-- Lock the order of the Search scope tabs. !59777
-- Provide fix for inconsistent blocking of sso-user git actions. !59872
-- Fix Swimlanes sticky headers. !59944
-- Add hide-collapsed class for elements under the else-if scope. !60021
-- Rename License#cloud? to License#cloud_license?. !60065
-- Fix the bug that DB multi-request stickiness doesn't stick as expected. !60246
-- Fix stage table loading with a deep linked stage. !60261
-- Stop checking repository check status on Geo secondary. !60323
-- Fix incorrect ordering of audit events on MR approval changes. !60508
-- Fix ArgumentError for bulk insert. !60543
-- Switch load_balancing_atomic_replica feature flag on by default. !60574
-- Fix badge variants in admin/users table. !60592
-- Resolve Geo: Secondaries are orphaning artifact files. !60644
-- Fix API elasticsearch settings update. !60740
-- Fix group-level "Projects with releases" stat when value is 0. !60752
-- Check if an issue is already linked to the same vulnerability before creating the issue link. !60753
-- Update lock timeout in ElasticCommitIndexerWorker. !60768
-- Prevent errors when promoting issues to epics. !60860
-- Refetch VSA stage data when filters change. !60991
-- Geo - Skip download of blobs with foreign layers. !61072
-- Return correct trial status in CI external pipeline validation. !61104
-- Fix trial registration terms message. !61162
-- Fix occasionally invisible burndown charts. !61335
-- Fix error caused by enforcing SSO-Only Authentication for Git Activity for PAT tokens. !61348
-- Fix dropdown not closing on status update. !61404
-- Geo - Fix replication for for empty projects. !61419
-- Display labels from sub groups and projects when using epics swimlanes. !61423
-- Display descendant projects of a group when creating issues in epic swimlanes. !61456
-- Fix broken threat alert issue link. !61705
-- Fix Rails/SaveBang Rubocop offenses for ee models. !61709 (Suraj Tripathi @surajtripathy07)
-- Fix sign-in when user has multiple group saml identities. !61717
-- Fix policy list drawer height. !61738
-- Fixed robocop offense for ee/spec/services/approval_rules/*. !61829 (Suraj Tripathi @surajtripathy07)
-- Remove unncessary group SAML identity assignment. !61921
-- Check credit card requirement when retrying a CI build on GitLab.com. !62050
-- Fix DAST Profile Summary edit button alignment. !62057
-
-### Deprecated (1 change)
-
-- Mark 3 group-level Merge Request Analytics metrics as removed. !60175
-
-### Changed (67 changes, 3 of them are from the community)
-
-- Allow using Jira for tracking vulnerabilities. !55952
-- Add improved branch validation when creating and updating Dast::Profiles in GraphQL. !56053
-- Migrate LFS object replication to use self service framework. !56286
-- Advanced Search: allow standalone shard/replica settings. !57567
-- Move to btn-confirm from btn-success in trials directory. !57960 (Yogi (@yo))
-- Move to btn-confirm from btn-success in application_settings directory. !58025 (Yogi (@yo))
-- Add gl-form-input for project issue template settings. !58046 (Yogi (@yo))
-- Add scannerId field to group vulnerabilities query. !58156
-- Add scannerId field to project vulnerabilities query. !58157
-- Assignee color for dark mode. !58501
-- Migrate spinner class to gl-spinner class. !58706
-- Change use of "blacklist" to "denylist" in push rule check error. !58868
-- Remove ff_custom_compliance_frameworks flag. !58884
-- Always display submit button for DAST Scanner Profile form. !59243
-- Update text on project-level DORA 4 charts. !59310
-- VSA - Update duration chart to use averages. !59453
-- Unsurface Subscription portal API error messages. !59487
-- Protect cloud licenses from being removed. !59576
-- Remove ultimate trial banner for users that are not already a group admin. !59611
-- Update Secure Merge-Request Widget Alignment. !59644
-- Add pagination to the VSA stage table. !59650
-- Update ci-cd settings buttons to conform to pajamas. !59695
-- Show default group name in epic tree. !59725
-- Denormalize project permissions to merge request in Elasticsearch. !59731
-- Replace metric card with GlSingleStat in VSA. !59732
-- Add display label and tooltip for nested fields in mapping builder. !59793
-- Convert SAML setting toggles to checkboxes and update UI text. !59823
-- Add Elasticsearch migration to backfill project permissions on MRs. !59836
-- Add defaults for DAST Scanner Profile timeout fields. !59999
-- Fix tier for instance and group DevOps Adoption. !60032
-- Pin API Fuzzing CI template to v1. !60057
-- Use SECURE_ANALYZERS_PREFIX variable for API Fuzzing. !60059
-- Move defaults into script for DAST API. !60064
-- Pin DAST API to major version 1. !60068
-- Improve approvals modal translation strings. !60108
-- Move API Fuzzing variable defaults into script. !60171
-- Use SECURE_ANALYZERS_PREFIX in DAST API image URL. !60308
-- Sync gitlab version during seat link. !60362
-- Return an appropriate error message when failing to remove billable members. !60404
-- Remove the value_stream_analytics_path_navigation feature flag. !60449
-- Display wider variety of error messages when Jira Issues List fails. !60455
-- New policy starts out with a rule by default. !60464
-- Avoid use of Elasticsearch joins in Global Merge Request searches. !60467
-- Add API Fuzzing image to Secure-Binaries template. !60499
-- Speed up Elastic AddNewDataToMergeRequestsDocuments migration. !60563
-- Return billable member relationship to a group in REST API. !60600
-- Show scanner warning at the top of the Vulnerability Report. !60716
-- Customize settings for Advanced Search reindex operations. !60730
-- Move group-level release statistics into tab. !60749
-- Default enable SSO-only authentication for web activity and add warning if it is disabled. !60868
-- Only send in-product emails to free groups. !60906
-- Use DORA deployment frequency metric in Value Stream Analytics. !60927
-- Adds an expand/collapse transition when showing/hiding the bulk action section in the vulnerability lists. !60944
-- Disable pause indexing checkbox if a reindex is in progress. !60953
-- Expose is_auditor user role via API. !61058
-- Artifact download migration to graphql. !61169
-- Geo: Release verification for Terraform States. !61263
-- Update API Fuzzing form labels. !61267
-- Verify phone number format in trial form. !61350
-- Add a new badge for billable membership types. !61366
-- Delete Merge Requests from original ES index. !61394
-- Delete Notes from original ES index. !61399
-- Add a new error modal for billable member removal. !61509
-- Add option to downlaod DAST scanned resources in MR Security Reports. !61551
-- Expose whether a BillableMember is removable. !61566
-- Update API fuzzing configuration form labels. !61618
-- Change notes removal migration to use ES tasks. !61798
-
-### Performance (13 changes)
-
-- Refactor project-level protected environments for performance optimization. !58633
-- Resolve created_by and oncall_schedule n+1's in group member index. !59756
-- Deduplicate Geo cronjobs. !59799
-- Don't use Elasticsearch join for group/project MR searches. !60249
-- Apply optimizations to merge request reference rendering. !60500
-- Fix GraphQL N+1 performance issue when loading a Project's DAST Profiles. !60554
-- Migration to move merge requests to separate Elasticsearch index. !60586
-- Add GraphQL aggregate to prevent N+1 query on DAST profiles. !61024
-- Improves performance of VulnerabilityReportsComparer. !61200
-- Optimize number of SQL queries when listing epics. !61372
-- Upgrade the GitLab Elasticsearch Indexer version to v2.11.0. !61737
-- Fix N+1 in issues API when loading parent epics. !61852
-- Minimize number of SQL queries on epic autocompletion. !61885
-
-### Added (44 changes)
-
-- Introduce security report schema validation. !58667
-- Add the ability to automatically create a basic configuration MR for Secret Detection via the Security Configuration page. !58687
-- Epic board lists can now be destroyed via GraphQL. !58719
-- Add GraphQL mutation that allows to update epic boards lists. !58782
-- “Security Center project selector returns projects and gives the ability to add project for Auditor user”. !58841
-- Add tests for the details table. !59357
-- Remove user from rotation if they are removed from a project or group. !59427
-- Display relevant titles for the VSA stage table. !59485
-- Add stage time to path popovers in group level VSA. !59606
-- Remove :credential_inventory_gpg_keys feature flag. !59658
-- Support board issue filtering by weight and iteration_id in GraphQL. !59703
-- Add group level DevOps adoption usage ping. !59738
-- Create incident column for threat alerts. !59821
-- Hide display of certain plans on billings page. !60137
-- Add diff component to generic report schemas. !60188
-- Audit DAST scanner profile updates. !60287
-- Add provisioned by group info in user admin. !60315
-- Add assignee column to threat alert list. !60340
-- Track epic board user events (viewing, creating and updating titles). !60357
-- Add support for rendering "named-list" types on generic vulnerability reports. !60370
-- Added award emoji to epics REST API. !60410
-- Allow trial plans to behave paid plan. !60496
-- Add DAST API CI template. !60546
-- Add stage count to group-level VSA. !60598
-- Enable group devops adoption by default. !60638
-- Add support to destroy iterations in GraphQL. !60655
-- Add total distinct count of compliance frameworks to usage ping. !60697
-- Add sorting to the VSA stage table. !60793
-- Track checking/unchecking tasks on epics. !60846
-- Enable DAST on-demand API scan support by default. !60876
-- Compare live vs actual CI minutes consumption and record it as a Prometheus metric. !60949
-- Add recursive weight to epic tree. !60990
-- Add group-level deployment frequency charts. !61053
-- Create threat alert drawer. !61183
-- Expose Path Locks in the GraphQL API. !61380
-- Log when build is dropped due to CI minutes exceeded. !61381
-- Add codequality reports endpoint to graphql. !61383
-- Render text and value generic report types on vulnerability report. !61727
-- Show code quality badges on MR diff file headers. !61810
-- Allow the users to upload binaries to MobSF. !61814
-- Add Coverage and API Fuzzing vuln count summaries. !61827
-- Add alert status change dropdown to drawer. !61832
-- Add generic report section to pipeline vulnerability-detail modal. !61851
-- Remove old scanner filter and only use new filter on vulnerability report page. !61959
-
-### Other (9 changes, 1 of them is from the community)
-
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/helpers. !58383 (Abdul Wadood @abdulwd)
-- Track epic cross reference on usage ping. !59804
-- Track epic parent changes via usage ping. !60079
-- Track epic emoji award via usage ping. !60787
-- Refactor alert details sidebar CSS. !60960
-- Track users removing epic emoji via usage ping. !60989
-- Replace relative license expiry date with full date. !61481
-- Make DevOps Adoption API as beta. !61512
-- Remove group_level_release_statistics flag. !61806
-
-
-## 13.11.4 (2021-05-14)
-
-- No changes.
-
-## 13.11.3 (2021-04-30)
-
-- No changes.
-
-## 13.11.2 (2021-04-27)
-
-### Security (1 change)
-
-- Do not expose pull mirror username and password.
-
-
-## 13.11.1 (2021-04-22)
-
-### Fixed (2 changes)
-
-- Geo - Sync incident metrics uploads. !59674
-- Fix zero count of vulnerability severity count. !59680
-
-
-## 13.11.0 (2021-04-22)
-
-### Removed (3 changes)
-
-- Remove /projects/:id/merge_requests/:merge_request_iid/approvers endpoint. !57344
-- Remove deprecated project approvers update REST API endpoint. !57473
-- Remove deployment_frequency_charts feature flag. !59289
-
-### Fixed (96 changes, 42 of them are from the community)
-
-- Make AutoDevOps browser performance job work when behind proxy. !48326 (Olaf Meeuwissen (@paddy-hack))
-- Atomically select an available replica if all caught up. !49294
-- Fix backward keyset pagination for epics start_date/end_date. !50579
-- Expand left sidebar when viewing group iteration report. !56358
-- Show loading spinner for security dashboard. !56493
-- Geo: Fail syncs which exceed a timeout. !56538
-- Fix DAST profiles summary for invalid profile ids. !56753
-- Fix 500 error when refreshing Value Stream Analytics page with a default stage. !56761
-- Update oncall schedule rotation names to truncate if they are too long. !56762
-- Allow oncall schedule timezones to encode special characters correctly. !56792
-- Allow oncall schedule to display description. !56796
-- Set default cadences to non-automatic. !56842
-- Hide "New issue" button from Auditors on project issues page. !56877
-- Do not close modal when there are error messages. !56893
-- Hide "Suggest wiki improvement" button from Auditors on project wiki page. !56897
-- Do not clear the oncall schedule rotation form if there are validation errors. !56901
-- Fix vulnerability exports when a finding is missing. !56903
-- Hide "New merge request" button from Auditors on Code Review Analytics page. !56999
-- Require permissions to read vulnerability counts. !57037
-- Prevent deletion of groups with a subscription. !57170
-- Allow SCIM deprovisioning for minimal access users. !57178
-- Catch NoResponseError from Net::DNS in LoadBalancing::Resolver. !57187
-- Fix styling for ellipsis in DAST Profiles. !57200
-- Fix active state for license link in navigation bar. !57214
-- Fix reindexing retry for the notes migration. !57248
-- Make sure all ES indexes are created when setting server URL. !57253
-- Give CI_JOB_TOKEN read access to public projects so public packages can be consumed. !57265
-- Adds stage time calculation to VSA path navigation. !57451
-- Prevent deletion of groups with a subscription via the API. !57533
-- Adjust Button Size on License Compliance widget. !57592
-- Count minimal access users in admin area group page. !57630
-- Remove key parameter check when validating actor in personal access token API. !57675
-- Fix the 'errors' attribute of the 'ScanType' on GraphQL API. !57882
-- Fix inaccurate role classification in DB instrumentation. !57998
-- Fix Rails/SaveBang rubocop offenses in ee/spec/requests. !58078 (Abdul Wadood @abdulwd)
-- Fix Rails/SaveBang rubocop offenses in ee/spec/presenters. !58082 (Abdul Wadood @abdulwd)
-- Fix Rails/SaveBang rubocop offenses in ee/spec/graphql. !58092 (Abdul Wadood @abdulwd)
-- Fix Rails/SaveBang rubocop offenses in ee/spec/models/ci. !58109 (Abdul Wadood @abdulwd)
-- Fix Rails/SaveBang rubocop offenses in ee/spec/models/. !58115 (Abdul Wadood @abdulwd)
-- Fix removing labels when moving an epic between lists. !58145
-- Remove push rules locks on group and project level. !58195
-- Land on epics tab when searching within epics search context. !58201
-- Remove mw-90p class from common.scss. !58205 (Takuya Noguchi)
-- Fix header on group billing page. !58252
-- Fix 500 error when cloning a wiki using the Kerberos clone button. !58270
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/workers. !58272 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/views. !58280 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/tasks. !58284 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee vulnerabilities services. !58305 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in timebox_report_service_spec.rb. !58317 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/services/status_page. !58320 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/services/security. !58323 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/services/search. !58326 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/services/merge_trains. !58333 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/services/issues. !58336 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/services/ide. !58341 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/groups. !58343 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/services/geo. !58348 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/services/epics. !58350 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/services/ee. !58351 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/services/ci. !58354 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/services/auto_merge. !58358 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/services/analytics. !58359 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/serializers. !58362 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/requests/projects. !58365 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/presenters. !58369 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/policies. !58371 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/models. !58376 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/migrations. !58378 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/mailers. !58379 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/lib/gitlab/geo. !58380 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/graphsql/resolvers. !58389 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/finders. !58394 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/features/projects. !58395 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/features/analytics. !58402 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/features/admin. !58403 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/controllers/registrations. !58408 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/controllers/ee/projects. !58414 (Abdul Wadood @abdulwd)
-- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/controllers/admin. !58417 (Abdul Wadood @abdulwd)
-- Fix broken dismissal descriptions in vulnerability details view. !58431
-- Throw an error when yaml mode contains unparsable attributes. !58457
-- Add aria labels to icon-only buttons. !58460
-- Clone issue card on move when necessary in epic swimlanes. !58644
-- Fix access bug for DevOps Adoption page and free tier groups. !58684
-- Render links in DAST scans errors. !58815
-- Fix Group SAML disabled git enforcement text. !58825
-- Use `getTopFrequentItems` in projects dropdown to show recently used. !58851
-- Correcting typo on the Policies tab of the Threat Monitoring page. !58956 (Lindsay Kerr)
-- Update Geo OAuth redirect URI to use the external primary URL even when an internal URL exists. !58966
-- Fix the oncall schedule timeline width calc. !58973
-- Reduce query timespan to one day in schedule daily view. !58974
-- Make Zen Mode functional while editing Test Case description. !58984
-- Navigate to Manage scans page after saving a DAST Scan. !59027
-- Fix updating value stream without persisted stages. !59176
-- Fix ElasticDeleteProjectWorker delete commits, index_status. !59457
-- Fix zero count of vulnerability severity count. !59680
-
-### Changed (47 changes, 2 of them are from the community)
-
-- Move Notes (Comments) to dedicated ES index. !53013
-- Add storage requirement option to Advanced Search notes migration. !55423
-- Add vulnerability filter for scanner ID. !55909
-- Add GraphQL field for vulnerability scanner ID. !56041
-- Project Settings Operations header Status page expand/collapse on-click/on-tap. !56275 (Daniel Schömer)
-- Return generic vulnerability details in the response of the vulnerability_finding endpoint. !56448
-- Fix for licenses without an url in license issue body. !56534
-- Set credential_inventory_gpg_keys feature-flag to enabled by default. !56764
-- Allow details to be sorted chronologically in the performance bar. !56830
-- Scroll to top of window when API Fuzzing configuration fails. !56890
-- Sort issues in full codequality report by severity. !56892
-- Update routes for DAST profiles to align with user interface. !56966
-- Add last used to cluster token table. !57141
-- Standardize input label for project-level MR rule for overriding approvers. !57194
-- Display active integrations in separate table. !57198
-- Update tab links for DAST Saved Scans. !57205
-- Enable iteration lists and new create list form. !57439
-- SSH key page text now reflects the expiration enforcement setting being used on the instance. !57494
-- Policy Editor: switching the custom editor to Source Editor. !57508
-- Create status filter on policy alerts. !57538
-- Remove the api_fuzzing_configuration_ui feature flag. !57583
-- Call out the inability to run on-demand scans without a repository being created. !57584
-- API Fuzzing scanner port changed to non-privileged port. !57628
-- Add Swimlanes loading skeleton. !57661
-- Hide cluster agent UI if not enabled on GitLab.com. !57668
-- Add billable_members_count to GraphQL Group type. !57712
-- Update copies in API fuzzing configuration form. !57753
-- Updated VSA stage table with simpler layout. !57792
-- Replace deprecated buttons on epic list view. !57873
-- Add error handling feedback inside purchase flow. !58084
-- Add a delay before expanding epic within tree during drag and drop. !58282
-- Make DevOps adoption updates weekly. !58474
-- Replace deprecated button on iteration list view. !58503
-- Expose vulnerability Scanner ID through GraphQL query. !58595
-- Remove info message from legacy milestones. !58617
-- Insert tips as comments in the YAML snippet. !58656
-- Add tips about copied API Fuzzing configuration snippet in the pipeline editor. !58664
-- Remove feature flag value_stream_analytics_extended_form. !58821
-- Remove compliance framework administration abilities from subgroups. !58873
-- Remove additional minutes when no minutes purchased. !59112 (Takuya Noguchi)
-- Remove standalone_vuln_dependency_list Feature Flag. !59124
-- Remove default stages definition from latest API Fuzzing CI template. !59154
-- Update Product Planning Usage Ping metrics. !59171
-- Set API Fuzzing version to 1.6 in CI template. !59181
-- Update label color on Jira issues pages. !59226
-- Change vulnerabilities GraphQL query to use GlobalID for scanner IDs. !59305
-- MR Analyrics, add animation to MTTM stat. !59477
-
-### Performance (20 changes)
-
-- Force ApplicationRecord#with_fast_statement_timeout to use replicas. !56476
-- Improve performance of indexing notes in Elasticsearch. !56808
-- Improve performance of Elasticsearch notes permissions migration. !56823
-- Improve computation of excess repository storage size. !57088
-- Do not stick to primary after recording User#last_activity_on. !57212
-- Skip ordering when using distinct in shared runners CTE query. !57312
-- Do not stick to primary after log Jira DVCS usage. !57328
-- Cache storage alert banner. !57350
-- Reduce SQL requests number for epic issues. !57352
-- Batch-load environments in EE pipelines. !57706
-- Fix N+1 in /projects endpoint. !57746
-- Remove N+1 DB queries from indexing issues in Elasticsearch. !57788
-- Remove N+1 DB queries from indexing projects in Elasticsearch. !57794
-- Fix blobs search N+1. !57826
-- Cache open issues count in group sidebar. !58064
-- Improve performance of on-call schedules SQL queries. !58209
-- Reduce queries on group search API for blobs scope. !58495
-- Fix more N+1 issues when indexing notes in Elasticsearch. !58751
-- Fix N+1 query in Epics search for guest in private group. !58863
-- Sync code owner approval rules asynchronously after creating merge request. !59395
-
-### Added (47 changes)
-
-- Beta version of DAST API scanner API Security. !51824
-- Add confirmation modal for admin signup settings submit button, for cases where pending users could be approved by mistake. !55509
-- Expose dismissal reason and dismissal descriptions in Vulnerability details view. !55525
-- GraphQL - Allow to filter epics on epic lists. !56026
-- Incident Management On-call Schedules. !56263
-- Add reviewers detail to add merge request approver email. !56466
-- Allow customers to extend or reactivate their trial on gitlab.com. !56471
-- Add a form to generate API Fuzzing configuration YAML snippets. !56548
-- Add upgrade link in user menu. !56591
-- Add vulnerability management survey request banner. !56620
-- Adds an overview stage to value stream analytics. !56621
-- Display VSA navigation as a horizontal flow. !56632
-- Add generic reports section and 'url' type to vulnerability details page. !56635
-- Add git fetch counts for geo secondaries to usage ping. !56678
-- New allowed_agents REST endpoint. !56700
-- Add policy name filter to threat alerts. !56708
-- Enable timeline on project security dashboard's trends chart. !56844
-- Add integration to view Jira issue details within GitLab. !56942
-- Add sitemap generation for Gitlab.com and gitlab-org namespace. !56947
-- Pre-populate projects while adding issue to a project in epic tree. !56955
-- Support epic board list negated filter params. !57001
-- Update schedule grid to start at beginning of current week. !57004
-- Update oncall rotation active period after schedule timezone update. !57069
-- Add separate tab tracking for devops adoption. !57104
-- Make epics searchable by my reaction emoji. !57190
-- Fetch iterations by cadence id. !57572
-- Include pipeline artifacts in Geo replication. !57741
-- Provide option to disable project access token creation. !57756
-- Add DORA 4 lead time charts to project-level CI/CD Analytics page. !57872
-- Support negated filtering of issues by epic_id and weight in GraphQL. !58154
-- Add environment scopes to group CI/CD variables. !58200
-- Add recursive list rendering to generic vulnerability reports. !58206
-- Add billable memberships API. !58506
-- Update CiCdSettingsUpdate mutation to accept MR pipelines and merge trains. !58592
-- Add support for array indexing to alert integration custom mappings. !58610
-- Filter by epic in roadmap. !58642
-- Add singular oncall rotation field to oncall schedules type. !58729
-- Enable compliance pipeline configuration by default. !58826
-- Support reaction emoji on Epics Roadmap. !58835
-- Enable DAST on-demand scan authentication, request headers and excluded URLs. !58859
-- Display ultimate or premium upgrade plan banner for jira issues. !58877
-- Expose 'titleHtml' & 'descriptionHtml' in Epic type. !58990
-- Set issue_perform_after_creation_tasks_async feature flag to default. !59040
-- Implement use_replicas_for_read_queries. !59167
-- Geo - Release the pipeline artifacts replication and verification. !59323
-- GraphQL issue filters support 'current' iteration. Board issue filters support negated 'current' iteration. !59325
-- Enable custom compliance frameworks.
-
-### Other (34 changes, 2 of them are from the community)
-
-- Change button to link on Agent table. !55887
-- Track epic status change action on usage ping. !56246
-- Use provide/inject for groupFullPath instead of props. !56472
-- Track epic confidentiality change action on usage ping. !56483
-- Track epic title and description changes via usage ping. !56489
-- Record issues added to epic on usage ping. !56559
-- Track epic labels change action on usage ping. !56571
-- Track epic comment updated. !56610
-- Track epic note destroyed. !56617
-- Track epic start date set to fixed or inherited via usage ping. !56619
-- Apply GitLab UI button and dropdown styles to buttons in ee/app/views/shared/epic directory. !56729
-- Add daily quota limit to invitations API endpoint. !56781
-- Change input type for telephone number field in the Trial flow. !56876
-- Bootstrap button migration. !56968
-- Skip onboarding experience for invited users. !57117
-- Update localStorage key for On-demand scans form. !57224
-- Add spacing between analyzer name and variables in SAST Configuration UI. !57226
-- Add missing audit logging to invite service. !57358
-- Review and revise Integrations/GitHub UI text. !57389
-- Track epic due date set to fixed or inherited via usage ping. !57457
-- Use provide/inject for vulnerabilities export endpoint. !57639
-- Track epic change to fixed start/due dates via usage ping. !57672
-- Use full date in billable members list. !57828
-- Move to confirm from success variant for button in storage quotas page. !57862 (Yogi (@yo))
-- Update URL for license FAQ. !58231 (Takuya Noguchi)
-- Update out-of-storage banner title and button text. !58276
-- Track issue removed from epic on usage ping. !58426
-- Add load balancing Sidekiq metrics. !58473
-- Updated UI text to match style guidelines. !58509
-- Track epic issues moved between projects. !58590
-- Add metric to track querying write ahead log on Request level. !58673
-- Generic vulnerability reports: Remove extra margin between report columns. !58720
-- Track epic destroyed action on usage ping. !59185
-- Remove dast_branch_selection feature flag. !59349
-
-
-## 13.10.4 (2021-04-27)
-
-### Security (1 change)
-
-- Do not expose pull mirror username and password.
-
-
-## 13.10.3 (2021-04-13)
-
-- No changes.
-
-## 13.10.2 (2021-04-01)
-
-- No changes.
-
-## 13.10.1 (2021-03-31)
-
-### Security (1 change)
-
-- Escape HTML on scoped labels tooltip.
-
-
-## 13.10.0 (2021-03-22)
-
-### Removed (1 change)
-
-- Remove the dast_saved_scans feature flag. !56540
-
-### Fixed (39 changes)
-
-- Fix updating of board's hide_backlog_list and hide_closed_list settings when on an unlicensed EE instance. !51561
-- Return only supported issue types for selected Jira Project. !53705
-- Fix incorrect IP address when creating ProtectedBranch audit event. !54292
-- Add support for negated weight issue filtering. !54393
-- Update details JSON Schema and GraphQL Schema for Vulnerability Finding. !54423
-- Jira Issues List page shows Web URL links instead of API URL. !54434
-- Add spacing to related Jira issues section. !54514
-- Geo: Prioritize resyncing new failures over persistent failures. !54585
-- Move action buttons to dropdown footer. !54767
-- Geo: Add unique constraints to container repository and terraform state registries. !54841
-- Exclude guests for trial ultimate licenses too. !54952
-- Only set note visibility_level if associated to a project. !55111
-- Fix scrolling issues with sticky status box. !55188
-- Prevent rendering test cases as issues. !55410
-- Fix wrong message for group vulnerability report when no vulnerabilities in projects. !55464
-- Hide package list if license compliance has an entry with 0 packages. !55466
-- Prevents HttpIntegration.payload_attribute_mapping from being reset when it was not a part of a GraphQL mutation input. !55511
-- Counter badges are misaligned in License Compliance tabs. !55517
-- Fix 500 error on group milestones page when milestones are associated to more than 3 releases. !55540
-- Fix Jira icon in sidebar too huge during page load. !55598
-- Fix alignment issues in vulnerability modals. !55716
-- Do not display empty description template lists in the dropdown. !55762
-- Geo: Fix syncing direct download remote stored Blob types. !55775
-- Update alerts list to fail gracefully on GraphQL failure. !55817
-- Allow project admin to read approval rules from archived projects. !55929
-- Fix epics dropdown to work in project epic swimlanes. !55954
-- Ensure task by type filters refresh the chart data. !55958
-- Fix console-error on vulnerabilities report. !56076
-- Refetch count list when vulnerabilities are updated. !56116
-- Fix group code coverage table to show all projects correctly. !56124
-- Fix dropdown z-index issue. !56125
-- Fix DAST site profile form submission. !56135
-- Correct billable users calculation on users statistics page. !56152
-- Do not mark bot users as pending approval when User Cap is enabled. !56287
-- Fix zero-downtime upgrade from 13.8.x to 13.9.3. !56352
-- Use created in epics and MRs. !56391
-- Fix subscription banner on New Project page. !56443
-- Fetch only detected and confirmed vulnerabilities for project security status. !56533
-- Replace stubbed dastProfiles.branch GraphQL field. !56604
-
-### Changed (44 changes, 3 of them are from the community)
-
-- Migrate lfs_object_registry to be compatible with Geo::ReplicableRegistry. !52636
-- Send email when user cap is reached. !53489
-- Add securityReportsUpToDateOnTargetBranch field to MergeRequestType to indicate if the security reports are up to date on the target branch. !53907
-- GitLab EE Project Settings CI/CD headers expand/collapse on click / tap. !54115 (Daniel Schömer)
-- Add ability to bulk update vulnerabilities. !54206
-- Add external link to create jira issue button. !54310
-- Update License Compliance and Dependency List Empty State Pages. !54314
-- Lower SAML SSO session expiry to one day. !54374
-- Add page specific styles to project discover security page. !54460
-- Migrate Epic Events when using Group Migration. !54475
-- Update AutoDevOps wording on secure config page. !54586
-- Geo Status - Rename Attachments to Uploads. !54720
-- Sort changed metrics first in metrics reports MR widget. !54729
-- Remove services section from API Fuzzing CI template. !54746
-- Add negated weight issue filtering on API. !54867
-- Differentiate metrics and logs from replica/primary databases. !54885
-- Show subscription expiration banner only for top-level group owners. !54908
-- Trim-down "Skip Trial" link on the trial flow page. !54911
-- Remove saml_group_links feature flag. !54986
-- Exempt auditor from ip restriction. !55073
-- Introduce disabled analyzer warning to SAST Config Page. !55172
-- Restructure layout of Add/Update approval rule form. !55181
-- Sort metrics report MR widget - changed, new, removed, unchanged. !55217
-- Project Settings Repository Push Rules header expands/collapses on click / tap. !55235 (Daniel Schömer)
-- Epic confidentiality widget. !55350
-- Make vulnerability file path linkable in the vulnerability list. !55356
-- Update css to make the vulnerability more prominent. !55389
-- Add warning message to pipeline stage dropdowns in merge trains. !55437
-- Remove scanner parameter from vulnerability_findings REST endpoint. !55453 (Thiago Figueiro @thiagocsf)
-- Add docs link for license compliance mr widget. !55474
-- Improve security dashboard/vulnerability report empty state messages. !55489
-- Add name to agent token table. !55503
-- Link cluster index page to cluster show page. !55536
-- Default enable the extended VSA form. !55572
-- Select security findings by their UUIDs instead of their positions in the report artifacts. !55643
-- Restyle license compliance button on merge request widget. !55667
-- Remove sast_configuration_ui feature flag. !55680
-- Track group coverage usage ping event in Vue template. !55687
-- Disable policy DAST scan profile modification. !55704
-- Add pagination to agent token table. !55788
-- Show CSV has been exported banner on export. !55965
-- DevOps Adoption - Allow users to select multiple groups. !56073
-- Advanced Search Migration to add permission data to notes documents. !56177
-- Update the approvers rule removal modal button to use new danger variant. !56230
-
-### Performance (4 changes)
-
-- Use shards for Advanced Search indexing. !55047
-- Pipline vulnerabilities loading performance improvements. !55692
-- Spread shared runner minute reset to 8h. !55802
-- Make StoreSecurityReportsWorker cpu-bound. !56149
-
-### Added (49 changes)
-
-- Restrict on-call to certain times during rotations via GraphQL. !52998
-- Support /child quick action when creating epics. !53073
-- Geo: adds database load balancing support to work on standby clusters. !53147
-- Support OpenAPI v3 and Postman variables in API Fuzzing. !53646
-- Add Geo node status metrics to usage ping. !53665
-- Add iteration to the sidebar in epics swimlanes. !53695
-- Add table to store secondary usage data. !53758
-- User permission export (feature flag removed). !53789
-- Add status filtering token support for Requirements. !54056
-- Extend GraphQL Ci::PipelineType to include Security Report Findings. !54104
-- Added cluster agent details page. !54106
-- Expose details of blocking issues via GraphQL. !54152
-- Geo: Release package file verification. !54361
-- Advanced Search: Estimate Elasticsearch cluster size. !54430
-- Add remove button to billable members. !54458
-- Add event count column to threat alerts. !54616
-- Add rake task to check pending Elasticsearch migrations. !54656
-- Add pipeline security report summary. !54673
-- Add label `x` to remove labels in iteration report. !54708
-- Allow to filter requirements by missing status. !54711
-- Cleanup ci_notification_dot experiment. !54721
-- Include namespace storage stats in root statistics. !54788
-- Include group wikis in Geo replication. !54914
-- Allow only group trials. !54920
-- Disable repository mirroring for hard failures. !54964
-- Include wiki_size and storage_size in NamespaceStatistics. !54967
-- Update NamespaceStatistics after wiki update. !54969
-- Query group projects by code coverage with GraphQL. !55182
-- Add purchase more storage button to storage usage quotas page. !55246
-- Add last activity time column to seat usage table. !55321
-- Add mutation to move epics between lists. !55467
-- Introduce group-level API for DevOps adoption. !55479
-- Update existing namespace statistics with wiki_size. !55487
-- Social sign in options to trial registration. !55533
-- Add remove Billable Member API endpoint. !55645
-- Add support for updating default description templates for issues and merge requests via API. !55718
-- Include detected vulnerability in finding state check. !55806
-- Show 'Add Seats' Button on Billing Page. !55964
-- Migrate group iterations when using Bulk Import. !56018
-- Custom mapping for HTTP endpoints. !56021
-- Create vulnerability issue link after merging the MR. !56038
-- Add support for task lists within Test Case description. !56196
-- Implement Group Wiki Geo replication. !56247
-- Skip user limit validation when saving cloud licenses. !56260
-- Add reviewers detail to approved and unapproved merge request emails. !56290
-- Add toolbox for the trends chart in project security dashboard. !56316
-- Add feature flag to block gitlab.com top-level group creation via api. !56360
-- Release DAST Profile branch selection. !56442
-- Add `scan` field into `SecurityReportSummarySectionType` GraphQL type. !56547
-
-### Other (9 changes, 1 of them is from the community)
-
-- Rename "CYCLE_ANALYTICS_*" variables in spec with "VSA_*". !52609 (Takuya Noguchi)
-- Track epic creation action on usage ping. !53651
-- Apply GitLab UI styles to registrations/ci_cd buttons. !54501
-- Fix License Compliance widget button spacing. !54701
-- Remove feature flag for Pipelines Security Summary. !54808
-- Add new bulk create API endpoint for Devops adoption. !54813
-- Add a separator between milestone and iteration dropdown in sidebars. !54895
-- Update usage ping dictionary. !55024
-- Delete redirect files. !56169
-
-
-## 13.9.7 (2021-04-27)
-
-### Security (1 change)
-
-- Do not expose pull mirror username and password.
-
-
-## 13.9.6 (2021-04-13)
-
-- No changes.
-
-## 13.9.5 (2021-03-31)
-
-### Security (1 change)
-
-- Escape HTML on scoped labels tooltip.
-
-
-## 13.9.4 (2021-03-17)
-
-- No changes.
-
-## 13.9.3 (2021-03-08)
-
-- No changes.
-
-## 13.9.2 (2021-03-04)
-
-- No changes.
-
-## 13.9.1 (2021-02-23)
-
-- No changes.
-
-## 13.9.0 (2021-02-22)
-
-### Removed (1 change)
-
-- Remove reviewer_approval_rules feature flag. !53205
-
-### Fixed (33 changes)
-
-- Fix Jira issue list links when Jira runs on a subpath. !51797
-- Fix epic assignment in the createIssue mutation. !51817
-- Show Response fields for vulnerabilties sourced from DAST. !51948
-- Display error message if group member can not be updated because their email does not match the list of allowed domains. !52014
-- Fix JS error on welcome page. !52022
-- Track code quality view event only once tab is active. !52140
-- Fix Vuln detail and modal when reasonPhrase is empty string. !52156
-- Fix duplicit epics on roadmap page when filtering by milestone. !52201
-- Fix file templates return same content for templates with same name but from different projects. !52332
-- Fixed bug that overwrote issue description changes from vulnerabilities. !52376
-- Swimlanes - Support negated filters. !52449
-- Fix line spacing in billing card header. !52521
-- Change FAQ link on the billing page. !52577
-- Properly populate descriptions in an issue created from a vulnerability. !52592
-- Properly populate description in an issue created from a vulnerability. !52619
-- Ignore connection error when changing the Elasticsearch Server URL. !52645
-- Fix Epic autocomplete reference. !52663
-- Fix search debounce for Swimlanes board assignees. !52786
-- Remove LDAP "Edit Permissions" button for inherited group members. !52847
-- Resolve Filter count does not get reflected in Test Cases. !52889
-- Scope iteration report to subgroups. !52926
-- Fixed iteration dropdown UI. !52987
-- Fix approvals widget alignment issues. !53213
-- Fix sub-group projects being locked after storage purchase. !53249
-- Add license check for full code quality report. !53258
-- Fix blank alert field when creating an issue from a vulnerability. !53656
-- Fix invalid prop error for canEdit prop in issue sidebar when user cannot edit iteration. !53819
-- Revert text back to Allow instead of Deny. Fixes fromEndpoints/toEndpoints format to keep it aligned with the allow all logic. The previous code was causing a allowing none while it should be allowing all. !53940
-- Fix security dashboard for Safari (< 14.0). !54042
-- Fix issue where maintainers could not set compliance framework for projects. !54071
-- Fix buy more minutes link to wrong destination. !54080
-- Advanced Search: fix project count_only queries. !54303
-- Default maintenance_mode value to false if not explicitly set. !54428
-
-### Changed (40 changes)
-
-- New epic button in Epic Roadmap empty state should direct the user to a full epic creation page. !45948
-- Move sast_reports and secret_detection_reports to CE. !48200
-- Make the waiting period for deletion dynamic on project removal page. !50597
-- Move Advanced Search Admin Settings to Top Level. !51026
-- Add specific domain for threat management related alerts in order to tie the frontend and backend together. !51029
-- Restore refresh_interval from settings after reindex. !51147
-- Move all the changes related to Mutation.configureSast to CE. !51169
-- Enable Merge Train checkbox based on Merge Pipelines checkbox. !51233
-- Redirect user to previous page after DAST profiles creation. !51482
-- Add iteration to bulk issue edit sidebar. !51657
-- Use old purchase flow when user last name is blank. !51730
-- Move empty state into the threat monitoring tabs. !51748
-- Improve UX for DAST Profiles selector. !51957
-- Add 12 month limit to MR Analytics. !52070
-- Modify herders in exported requirements CSV file. !52118
-- Issues created from Vulnerabilities set to Confidential by default. !52127
-- Add feedback creation in controller. !52141
-- Updated text and styling of the DAST-modal footer button. !52245
-- Migrate health status dropdown to use gitlab ui. !52273
-- Remove badges design from DAST validation statuses. !52301
-- Process one record at a time in Bulk Import pipelines. !52330
-- Feat(EpicSelect): Migrate epic select to internal GitLab UI compoenent. !52528
-- Log token_id in project access token audit events instead of user_id. !52535
-- BulkImports: Import Epic's labels. !52626
-- Preserve Epic parent-child association when importing using Bulk Import. !52662
-- Add last_activity_on attribute to Billable Members API. !52666
-- Update Deployment Frequency graphs to always use UTC dates. !52919
-- Remove target_name parameter from Elasticsearch rake tasks. !52958
-- Update Issue Weights Paywall CTAs. !53117
-- Add Event type to GraphQL and events to epics. !53152
-- BulkImports: Associate mapped users to imported epics. !53296
-- Disable ability for maintainers to change project compliance framework. !53370
-- Add alert related labels to CiliumNetworkPolicies. The label will contain the project id and will be applicable to both new and existing policies. !53401
-- Regularly reverify Packages on primary. !53470
-- Allow token revocation for public projects only. !53734
-- Use previous license term for seat overage. !53878
-- Show loading state for vulnerability list when filter/sort is changed. !53934
-- Strip trailing whitespace from DAST site validation HTTP response body. !53951
-- Track elasticsearch_timed_out_count for all ES requests in log. !54180
-- Start license_scanning job within its stage, and not when pipeline starts. !54234
-
-### Performance (5 changes)
-
-- Speed up roadmap show page by removing an extra epic count check. !51610
-- Improve Advanced Search counts queries. !51971
-- Resolve N+1 issue loading approval rules on the MR list. !52364
-- Set 1s server side timeout on Elasticsearch counts. !53435
-- Improve the performance of the Merge Request Analytics chart. !53704
-
-### Added (45 changes, 1 of them is from the community)
-
-- Add activity filter to security dashboards. !48196 (Kev @KevSlashNull)
-- Add usage ping for user secure scans. !49444
-- Add details to Vulnerability GraphQL. !49465
-- Add description text to Deployment Frequency charts. !51250
-- Capture metrics for group coverage project links. !51411
-- Add route for threat monitoring alert details. !51417
-- Audit events for project access tokens. !51660
-- Update renew/upgrade banner with actionable links. !51705
-- Adds API support for Group Deployment Frequency. !51938
-- Display train badge for pipelines that are merge trains. !52137
-- Add web_url to iterations API. !52178
-- Add create epic board via GraphQL. !52258
-- Add MTTM stat to MR Analytics. !52316
-- Add URL Navigation to Pipeline Analytics Charts. !52338
-- Log user instance request and rejection in Audit Events. !52543
-- Implement "Security & Compliance" visibility settings. !52551
-- Add blobPath field to VulnerabilityLocation types in GraphQL. !52599
-- Add End of Availability banner for Bronze Plans for relevant users. !52607
-- Add support for subgroup events in Group webhooks. !52658
-- Track load performance widget expansions via usage ping. !52688
-- Allows fields selection when exporting Requirements with GraphQL. !52706
-- Support /parent_epic quick action when creating new epic. !52727
-- Support setting customizable timeouts for git CLI 2FA via UI & API. !52769
-- Forbid git pushes to group wikis when repo is read only. !52801
-- Add award emoji to epics in GraphQL. !52922
-- Add group repository storage move endpoints. !53016
-- Add ability to enforce SSH key expiration (feature flag removed). !53035
-- Add a meaningful error message for assigning confidential epics to issues. !53078
-- Add support for revoking DAST site validations. !53134
-- Add group wikis import/export functionality. !53247
-- Replace text with links on Usage Quota page. !53279
-- Add group-level CI/CD Analytics page with release stats. !53295
-- Adds a historical coverage graph to the group repositories analytics page. !53319
-- Dynamically rename plan title after EoA rollout date. !53473
-- Optional enforcement of PAT expiration (feature flag removed). !53660
-- Export only selected fields in requirements. !53707
-- Change the GitLab Elasticsearch Indexer version to 2.9.0. !53764
-- Allow to filter requirements by latest requirement test report status on GraphQL. !53767
-- Enable threat_monitoring_alerts feature flag by default. !53776
-- Release maintenance mode. !53895
-- Add hasSecurityReports field to GraphQL MergeRequest type. !53925
-- Add ability to save and manage DAST scans. !53942
-- Add cancel button to On-demand scans form. !54050
-- Dedupe vulnerability_findings for bandit and semgrep. !54181
-- Ability to create a Jira issue for a vulnerability. !54182
-
-### Other (9 changes, 2 of them are from the community)
-
-- Geo: Add verification state fields to package file registry. !49737
-- Update project's advanced settings UI text. !51442
-- Convert path-lock unlock button to pajamas. !52276
-- Adding audit event for default branch change. !52339 (Abdul Shaheed)
-- Use plan name instead of plan code in new subscription app. !52414
-- Replace OpenSSL constants with strings. !52431 (Takuya Noguchi)
-- Add manual renew button to billings page. !52652
-- Abstract out details of policy_helper. !52714
-- Review UI text - repo push rules settings. !52797
-
-
-## 13.8.8 (2021-04-13)
-
-- No changes.
-
-## 13.8.7 (2021-03-31)
-
-### Security (1 change)
-
-- Escape HTML on scoped labels tooltip.
-
-
-## 13.8.6 (2021-03-17)
-
-- No changes.
-
-## 13.8.5 (2021-03-04)
-
-- No changes.
-
-## 13.8.4 (2021-02-11)
-
-### Security (1 change)
-
-- Geo: Pass GL-ID in a JWT token when proxy-push from secondary.
-
-
-## 13.8.3 (2021-02-05)
-
-### Fixed (2 changes)
-
-- Fix Geo replication and verification status for replicables with no data to sync. !52253
-- Handle network unreachable for ES settings check. !52586
-
-
-## 13.8.2 (2021-02-01)
-
-### Security (2 changes)
-
-- Remove Kubernetes IP address from error messages returned in Threat Monitoring.
-- Sanitize XSS in Epic milestone due date.
-
-
-## 13.8.1 (2021-01-26)
-
-### Fixed (2 changes)
-
-- Fix rendering of requirements page for unauthenticated users. !52069
-- Fix browser performance widget issue body. !52088
-
-
-## 13.8.0 (2021-01-22)
-
-### Fixed (24 changes, 3 of them are from the community)
-
-- Hide "Health status" edit button when the user has no permission. !49535 (Kev @KevSlashNull)
-- Remove quota data for subgroups. !50163
-- Fix boards create and update mutation arguments list. !50266
-- 50275 Update check for free plan with both code and null. !50275
-- Fix roadmap topbar text in dark mode. !50357
-- Fix issue with displaying solution actions. !50648
-- Invalidate Elasticsearch cache when moving projects or groups. !50712
-- DevOps Adoption: Clear form when creating a new segment. !50766
-- Move ScanSecurityReportSecretsWorker to avoid race-condition. !50815
-- Fix todo creation on epics when toggling tasks. !50827
-- Do not store invalid security_findings into the database. !50868
-- Fix subscribable banner on mobile. !50972 (Kev @KevSlashNull)
-- Fix creating/editing requirements on mobile. !51062 (Kev @KevSlashNull)
-- Fix on-demand scans profile selectors' title alignment. !51133
-- Refresh VSA path navigation carousel when updating stage data. !51187
-- Remove cached/memoized ES helper. !51310
-- Fix alignment of vulnerability names in pipeline security tab. !51313
-- Fix halted migrations unpausing. !51326
-- BUFIX - whats new dropdown text wraps on ubuntu. !51510
-- Rename Backlog list to Open for Swimlanes. !51539
-- Geo: Sync expired artifacts. !51541
-- Ensure that only top level groups are fetched for devops adoption. !51565
-- Swimlanes - Creating an issue adds board scope to it. !51675
-- Backfill projects in Elasticsearch when moved between groups. !51717
-
-### Changed (30 changes, 1 of them is from the community)
-
-- Advanced Search: Copy issues to new index. !48334
-- Remove `store_security_findings` feature flag. !48357
-- Display correct maximum users in admin dashboard for license of any duration. !49861
-- Migrate vulnerability state management to GraphQL. !50034
-- Add confirmedBy field to vulnerability object in GraphQL. !50144
-- Add resolvedBy field to vulnerability object in GraphQL. !50145
-- Geo: Update usages of files_max_capacity. !50190
-- Display public emails for billable members. !50290
-- Resolve the race-condition of ScanSecurityReportSecretsWorker. !50335
-- Add advanced search by full path field. !50567
-- Update devops adoption snapshots daily. !50568
-- Improve DAST Profiles library designs. !50576
-- Immediately calculate devops adoption data after segment creation. !50619
-- Rename internal api endpoint in order align it with the new logic shared among agentk modules. !50703
-- Add Pagination to Agent Cluster List. !50713
-- API Fuzzing Request/Responses show empty body message. !50731
-- Geo: Increase backoff cap for Job artifacts, LFS objects, and Uploads which are missing on primary. !50812
-- Avoid scheduling mirrors for pending_delete projects. !50820
-- Add support for SAST_EXCLUDED_ANALYZERS. !50872
-- Update Styling of Security & Compliance Carousel. !50877
-- Replace button in Threat Monitoring empty state with a link. !50894
-- Automatically redirect users to SAML provider after 7 day expiration. !50914
-- Remove "Showing 0 projects" from project selector on initial load. !51136 (Kev @KevSlashNull)
-- Change the Group Analytics navigation link to go to the Value Stream Analytics page. !51165
-- Adjust spacing in project MR settings form. !51184
-- Improve DAST Profiles library for smaller devices. !51315
-- Add retry ability for halted Elasticsearch migrations. !51335
-- Add Beta feature warning to DevOps Adoption report, and restore feature flag. !51518
-- Resolve Rename Segment to Group. !51574
-- Enable auto-fix indicator feature. !51631
-
-### Performance (1 change)
-
-- CI minutes are spread across 8 hours instead of 3. !50265
-
-### Added (27 changes)
-
-- Edit issue title in swimlanes sidebar. !46404
-- Add current iteration toggle to board config. !46514
-- Track web performance widget expansions via usage ping. !46746
-- Add `/reassign_reviewer` command. !47606
-- Track full code quality report views via usage ping. !49079
-- Add ID filter to Namespace -> ComplianceFramework GraphQL. !49108
-- Add API Fuzzing Artifact Download in MR widget. !49780
-- Clone epic data when cloning issues. !50097
-- Add support for member update & destroy events in Group webhooks. !50217
-- Add dismissedBy field to vulnerability object in GraphQL. !50285
-- Allow Requirements to be exported as a CSV file. !50449
-- Add GraphQL mutation to export Requirements. !50546
-- Add `dismissal_reason` enum to `VulnerabilityDismiss` mutation on GraphQL API. !50688
-- Add sorting by column in DevOps Adoption table. !50743
-- Add author token filtering support for Test Cases. !50747
-- Show Vulnerability reproduction asset downloads. !50748
-- Capture generic metrics report views via usage ping. !50790
-- Delete Elasticsearch migrations index in rake gitlab:elastic:delete_index. !50817
-- Add ability to validate DAST site profiles. !50847
-- Add ability to group issues by label within the iteration report. !51113
-- Add confidential filter token in Roadmap. !51196
-- Add deployment frequency charts to CI/CD Analytics page. !51338
-- Capture unique user views of group repository analytics page. !51382
-- Export requirements as a CSV. !51434
-- Add metric image feature for Incidents. !51552
-- Add group wikis to Gitlab Backup. !51590
-- Add License subscription_id to Usage Ping. !51601
-
-### Other (11 changes, 1 of them is from the community)
-
-- Updated UI text to match style guidelines. !49871
-- Track epic issue counts on usage ping. !50204
-- Block /assign quick action for test cases. !50396
-- Update issue description templates UI settings. !50421
-- Block confidential quick action for test cases. !50460
-- Update the create issue form and epic issue actions dropdowns to use our Pajamas compliant components. !50633
-- Refactor folder structure for security dashboard GraphQL files. !51117 (Kev @KevSlashNull)
-- Edit pipeline subscriptions UI text. !51177
-- Update repository mirroring UI text. !51311
-- Update what's new UI text. !51422
-- Enable DevOps Adoption Report feature flag if any Segments already exist. !51602
-
-
-## 13.7.9 (2021-03-17)
-
-- No changes.
-
-## 13.7.8 (2021-03-04)
-
-- No changes.
-
-## 13.7.7 (2021-02-11)
-
-### Security (1 change)
-
-- Geo: Pass GL-ID in a JWT token when proxy-push from secondary.
-
-
-## 13.7.6 (2021-02-01)
-
-### Security (2 changes)
-
-- Remove Kubernetes IP address from error messages returned in Threat Monitoring.
-- Sanitize XSS in Epic milestone due date.
-
-
-## 13.7.5 (2021-01-25)
-
-### Fixed (1 change)
-
-- Ensure that only top level groups are fetched for devops adoption. !51565
-
-
-## 13.7.4 (2021-01-13)
-
-- No changes.
-
-## 13.7.3 (2021-01-08)
-
-- No changes.
-
-## 13.7.2 (2021-01-07)
-
-- No changes.
-
-## 13.7.1 (2020-12-23)
-
-### Fixed (3 changes)
-
-- Fix DAST profiles deletion. !50271
-- Geo: Fix LFS for location-aware Git URL. !50415
-- Fix StoreReportService related to autofix. !50490
-
-
-## 13.7.0 (2020-12-22)
-
-### Removed (1 change)
-
-- Remove vulnerability_special_references feature flag. !49131
-
-### Fixed (28 changes)
-
-- Realign audit logs/events date field. !47708
-- Ensure we don't show warning when there are <1000 epics on a roadmap. !47884
-- Fix missing padding in custody report dropdown. !47927
-- Fix issue blocked-by modal. !48273
-- Generate finding name from report data if message is missing. !48279
-- Truncate vulnerability title if longer than 255 characters. !48327
-- Use `master` when default branch is blank in security configuration. !48328
-- Fix functionality to add comments in the vulnerability details page. !48375
-- Geo Replicables - Fix missing help text. !48378
-- Switch Search Elasticsearch index to use english stemmer. !48518
-- Fix the user experience when the user is unauthorized or trying to subscribe for a non-existing group. !48626
-- Vulnerability Report: Show identifiers without URL as plain-text instead of link. !48653
-- Fix bug rendering labels in group wikis. !48763
-- Fix Epic tabs when open registration alert is visible. !49150
-- Fix Vuln details page request/response sections not appearing. !49166
-- Include issue iid in default title for untitled incidents when created from alert via HTTP integration. !49274
-- Ignore Issue and MR IID search out of range error. !49284
-- Fix security dashboard breadcrumb on vulnerability details page. !49431
-- Fix displaying merge request dependencies with no metrics. !49466
-- Disable epic quick actions when creating new epics. !49470
-- Fix invalid prop warning in On-demand scans. !49472
-- Fix `Close epic` button not working on epic page. !49597
-- Fix Jira issue list API calls when Jira server runs relative to a context path. !49623
-- Fix group code coverage for default branch. !49630
-- Fix sidebar navigation for On-demand scans. !49719
-- Geo: Fix replication details nav links to show any that are enabled. !49731
-- Improve response from Jira issue creation from vulnerability. !50150
-- Fix group code coverage data csv. !50155
-
-### Changed (39 changes)
-
-- New epic button in epic list redirects the user to the new epic page. !37126
-- Resolve Update MR form to use plural field names. !41402
-- Improve compliance dashboard empty state message. !45273
-- Migrate requirements tabs to gltab. !45736
-- Expose latest snapshot for devops adoptions in GraphQL. !47388
-- Add API Fuzzing job counts to telemetry pings. !47451
-- Issues can be built with vulnerability information. !47528
-- Remove projects_prometheus_active unused usage ping. !47792
-- Removed On-demand landing page. !47867
-- Fixed summary info for closed iterations. !47879
-- New subscription purchase for trial namespaces follow new flow. !47880
-- Update Screenshots on Security & Compliance Carousel. !47900
-- Geo - Update Legacy Icons. !48058
-- Separate on-demand scan template from DAST template. !48088
-- Swap edit and delete button for DAST Profile library. !48124
-- Move Project Export of templates into a separate sidekiq queue in order to make project creation from group level custom templates faster. !48134
-- Show an error when failing to save a merge request dependency. !48237
-- Only run fuzzing on commit events, not all events. !48264
-- Do not display renewal banner if future dated license is applied. !48283
-- Change Auto Remediation Text from Remediation Summary to Solution. !48678
-- Return NONE for GraphQL DastSiteValidation type status when there is no DAST site validation. !48751
-- Creating an issue from a vulnerability takes user to the new issue page. !48926
-- Set retries of ScanSecurityReportSecretsWorker for max 3 days. !49022
-- Add context to full code quality report. !49260
-- Add confirmed_at field to vulnerability in GraphQL. !49376
-- Add resolved_at field to vulnerability type in GraphQL. !49391
-- Insert finding_uuid value into vulnerability_feedback when creating records. !49408
-- On-demand scans: automatically select DAST profile when only one is available. !49435
-- Added DAST path to display on vulnerabilities list. !49616
-- Increase the Epic Nesting from 5 to 7. !49619
-- Re-name Audit Log as Audit Events. !49635
-- Drop matching_merge_request_db_sync feature flag. !49644
-- Return the uuid attribute in the response of vulnerability_finding endpoint. !49742
-- Return the finding_uuid attribute in the response of vulnerability_feedback endpoint. !49745
-- Adjust Audit Events navigation and visibility. !49794
-- Add dismissed_at field to vulnerability in GraphQL. !49797
-- Reorder items on swimlanes sidebar. !49877
-- Add `hideBacklogList` and `hideClosedList` and `iteration_id` to `createBoard` mutation input. !49947
-- Automatic token revocation no longer restricted to gitlab.com. !50087
-
-### Performance (9 changes, 4 of them are from the community)
-
-- Remove show license timeout guard on ee. !47832
-- Remove .issue-box from Issuable list Vue.js App. !47999 (Takuya Noguchi)
-- Remove .issue-box element from Epics (list). !48000 (Takuya Noguchi)
-- Remove .issue-box element from Requirements (list). !48001 (Takuya Noguchi)
-- Improve query for fetching vulnerability scanners. !48144
-- Avoid the use of Elasticsearch joins when searching for issues. !48583
-- Avoid unnecessary Sidekiq retries for Security::TokenRevocationService. !48636
-- Remove Bootstrap 4's Cards class name from Epics. !48856 (Takuya Noguchi)
-- Enable query cache for load balancer. !49708
-
-### Added (41 changes)
-
-- Add Sidekiq job for importing csv requirements async. !46429
-- Integrate RevocationAPI with BuildFinishedWorker. !46729
-- Import requirements via CSV upload. !47064
-- Show uploads size in storage usage breakdown. !47113
-- Sync groups on sign-in for GitLab.com Group SAML. !47445
-- Add compliance frameworks to namespaces in GraphQL API. !47779
-- Added usage ping statistics about created requirement test reports. !47809
-- Add get api endpoint for a single project approval rule. !47823
-- Add vulnerability severities count to group report. !47861
-- Add vulnerability severities count to instance report. !47863
-- Introduce quality test cases. !47948
-- Add compliance framework creation mutation. !48250
-- Adds API support for Project Deployment Frequency. !48265
-- Improve accessibility of keyboard navigation for Requirements. !48325
-- Geo: Snippet replication using the new Geo framework for repositories. !48371
-- Extend Vulnerability GraphQL API with External Issue Links. !48616
-- Move iteration report summary stats underneath toggle buttons. !48659
-- Remove audit_log_export_csv feature flag. !48669
-- Add creating Vulnerability External Issue Link using GraphQL. !48687
-- Expose normalizedTargetUrl on DastSiteProfile GraphQL type. !48727
-- Add a form for inviting teammates to the Create group page. !48794
-- Add field hasSolutions for Vulnerability GraphQL type. !48820
-- Extend Gitlab::Codeowners to include a method for returning the sections only. !48898
-- Add GraphQL mutation to destroy compliance framework. !48912
-- Create a rake command to mark reindex job failed. !48938
-- Allow Group SAML to auto-created new users. !48953
-- Extend ability to read audit events to more roles. !49106
-- Add parsing details from security reports. !49107
-- Add ability to update compliance frameworks via GraphQL. !49157
-- Pass the 'raw' URL instead of 'blob' URL in revocation api call. !49170
-- Fire webhook on add group member. !49285
-- Enable billable_members feature. !49336
-- Allow SAML response to set certain user attributes on creation. !49394
-- API Fuzzing results integrated into security dashboard. !49434
-- Allow users to manage test cases. !49491
-- Allow Users to Set Canary Ingress via UI. !49516
-- GitLab.com users without password must contact to delete account. !49626
-- Introduce User Cap admin setting. !49761
-- Display blocking issues count on issues list. !49818
-- Set default query string when searching with filters. !49872
-- API Fuzzing results integrated with vulnerability management. !50112
-
-### Other (14 changes, 2 of them are from the community)
-
-- Prettify billing plans section. !48008
-- Add gitlab-ui styles to issuable bootstrap buttons. !48532
-- Rename "Cycle Analytics" with "Value Stream Analytics" under /ee/spec. !48550 (Takuya Noguchi)
-- Rename "Cycle Analytics" with "Value Stream Analytics" in JS comments. !48551 (Takuya Noguchi)
-- Add manual renew button to billings page. !48610
-- Adds gl-buttons classes to push rules. !48694
-- Use new gl-button in subscriptions checkout step page. !48765
-- Update header text on project level vulnerability report page. !48872
-- Remove the additional_repo_storage_by_namespace feature flag. !49055
-- Add gl-button style to admin area. !49610
-- Track events on requirements page frontend. !49656
-- Convert group saml buttons to gl-button styles. !49852
-- Convert group settings expand button to gl-button. !49857
-- Rename code coverage analytics sections. !49931
-
-
-## 13.6.7 (2021-02-11)
-
-### Security (1 change)
-
-- Geo: Pass GL-ID in a JWT token when proxy-push from secondary.
-
-
-## 13.6.6 (2021-02-01)
-
-### Security (2 changes)
-
-- Remove Kubernetes IP address from error messages returned in Threat Monitoring.
-- Sanitize XSS in Epic milestone due date.
-
-
-## 13.6.5 (2021-01-13)
-
-- No changes.
-
-## 13.6.4 (2021-01-07)
-
-- No changes.
-
-## 13.6.3 (2020-12-10)
-
-- No changes.
-
-## 13.6.2 (2020-12-07)
-
-### Security (1 change)
-
-- Cleanup todos for confidential epics that are no longer accessible by the user.
-
-
-## 13.6.1 (2020-11-23)
-
-- No changes.
-
-## 13.6.0 (2020-11-22)
-
-### Fixed (35 changes)
-
-- Fix permission to modify project MR rules on compliance-labeled projects. !40229
-- Fix the timeout errors happenning on the "pipeline security tab". !41762
-- Fix quoted search term code highlighting. !45278
-- Specify correct finder for gitlab team mebers. !45550
-- Change OOTB from `NetworkPolicy` to `CiliumNetworkPolicy`. !45579
-- Fix icon for iteration-related system notes. !45642
-- Copy dismissal information to vulnerability while creating the record. !45688
-- Fix epic creation form submission as it was causing errors on Safari. !45721
-- Show purchase confirmation banner when user makes new purchases for existing groups. !45786
-- Doc: Introduce new gitlab-ctl promote-db command. !45941
-- Update pipeline when vulnerability dismissal feedback is created. !45954
-- Fix broken rake task test:index_size. !45960
-- Set selected value stream after create and delete. !46100
-- Synchronize dismissal information between `finding` and `vulnerability` entries. !46141
-- Fix return type of DastSiteProfile#status. !46180
-- Fix Global Search Reindexing when reindexing task is not found. !46224
-- Fix duplicate instances in deploy boards when multiple deployments have the same track. !46374
-- Resolve "SAST_DEFAULT_ANALYZERS is written with default value by SAST Config UI". !46388
-- Return 404 when attempting to delete non-existent SSH key. !46450
-- Fix blocking issues count cache when changing issue state. !46585
-- Adding check for pipeline subscription feature availability. !46712
-- Fix bug where primary was promoted even when replication/verification was not complete. !46785
-- Geo Nodes Status - Fix incorrect percentages. !47013
-- Clarify delayed deletion is not applicable to personal projects. !47035
-- Use billing email for purchasing subscriptions. !47105
-- Fix gray background on iterations list page. !47153
-- Geo: Fix OAuth failure on primary. !47178
-- Handle empty project within Security Configuration. !47226
-- Fix error on vulnerability list when there are no vulnerabilities. !47235
-- Fix real-time update of dismissal status of vulnerabilities found by Secret Detection. !47307
-- Fix an issue in the create_empty_index rake task. !47575
-- Fix scoped label text color in dark mode. !47602
-- Fix create_migrations_index for ES6. !47651
-- Fix chain of custody report button hover color. !47899
-- Fix Group Jira Integration configuration page. !47944
-
-### Deprecated (1 change)
-
-- Deprecate globalId and undeprecate id for DastScannerProfile. !47559
-
-### Changed (55 changes, 2 of them are from the community)
-
-- Replace bootstrap alerts in ee/app/views/admin/licenses/_repeat_trial_info.html.haml. !41070 (Jacopo Beschi @jacopo-beschi)
-- Replace bootstrap alerts in ee/app/views/trials/_banner.html.haml. !41074 (Jacopo Beschi @jacopo-beschi)
-- Add description for the Value Stream Analytics Days to Completion chart. !43446
-- Removes ability to change license status through MR and Pipeline pages. !43470
-- Add error message to cluster agent list. !44050
-- Update fuzzing download button styles. !44263
-- Enable single result redirect for advanced commits search. !44308
-- Add new security report schema fields to backend for API Fuzzing. !44800
-- Return seats in use for free or trial subscriptions. !44973
-- Remove not null constraint on framework column in project_compliance_framework_settings table. !45411
-- Reject active on-demand DAST scan when unvalidated. !45423
-- Update epic ID type in board issue mutations to be more specific. !45460
-- DAST on-demand scans site profile form - refactor form validation. !45488
-- Add remote IP address on smart-card audit event. !45512
-- Include subgroups in GraphQL field for vulnerabilityGrades for Groups. !45518
-- Geo: Better error handling of geo:set_secondary_as_primary rake task. !45568
-- Replaced GlDeprecatedBadge with GlBadge for environments_dashboard. !45679
-- Unschedule group deletion on deleting member removal. !45715
-- Add total count to cluster agent and agent token GraphQL API. !45798
-- Don't use docker-in-docker by default for API Fuzzing. !45827
-- Replaced GlDeprecatedBadge for GlBadge in metrics_reports_issue_body. !45873
-- Replaced GlDeprecatedBadge for GlBadge in ee/app/assets/javascripts/license_compliance/components/app.vue. !45891
-- Change historical_data.date from date to timestamptz data type. !45893
-- Replaced GlDeprecatedBadge with GlBadge for Security Dashboard Project List. !45917
-- Migrate renamed Sidekiq queue. !45964
-- Update MR widget vulnerability message. !46167
-- Replace GlDeprecated Badge in ee/app/assets/javascripts/geo_node_form/components/app.vue. !46225
-- Split 'Pipelines for merged results' and 'Merge Train' check boxes. !46357
-- Move marketing opt in to welcome page and opt in by default when setting up for a company. !46446
-- Improve error messages for Vulnerability Issue/MR creation. !46589
-- Generate dynamically sitemap through controller. !46661
-- Enhance User-Experience on Dast-report Download Button. !46681
-- Add `include_descendant_groups` option to Epics GraphQL API. !46711
-- Expose timebox stats explicitly. !46774
-- Remove admin/license page duplicate summary. !46827
-- Ooen pipeline status widget links in the same tab. !46893
-- Chain of custody reports in the compliance dashboard can now also be generated for a specific merge commit. !46994
-- Generate Sitemap routes statically. !47174
-- Use closed icons for issues and epics when closed. !47176
-- Split sign in and sign up for Trial flow. !47179
-- Include first commit date in code stage calculation in Value Stream Analytics. !47215
-- Move Deploy Board Legend to Tooltip. !47236
-- Remove group_wikis feature flag. !47291
-- Geo Node Form - Text Updates. !47297
-- Remove epic check generating sitemap. !47381
-- Updated Screenshots for Security & Compliance Landing Page. !47416
-- Include squash and diff head SHA in Chain of Custody report. !47429
-- Removed DOMContentLoaded Eventlistener from ee/app/assets/javascripts/pages/security/dashboard/show/index.js. !47515
-- Removed DOMContentLoaded Eventlistener from ee/app/assets/javascripts/pages/security/vulnerabilities/index/index.js. !47516
-- Removed DOMContentLoaded Eventlistener from ee/app/assets/javascripts/pages/security/dashboard/settings/index.js. !47517
-- Removed DOMContentLoaded Eventlistener from Security Pages. !47542
-- Include only Gitlab-org owned groups in sitemap. !47608
-- Modify seat link API to send latest historical data instead of previous day's data. !47614
-- Block git push over HTTP when database is read-only. !47673
-- Block LFS writes when database is read-only but allow on Geo secondaries. !47684
-
-### Performance (8 changes)
-
-- Fix cached queries for Groups::GroupMembersController#index. !44626
-- Optimize merge request approvals checking. !45009
-- Run PushRuleCheck in parallel. !45668
-- Add issue close date index. !46444
-- Run project housekeeping for pull mirrors. !46493
-- Change more Elasticsearch indexes to keyword type to save storage. !46640
-- Spread CI minute reset over 3 hours at start of each month. !46927
-- Remove DOMContentLoaded Eventlistener. !47619
-
-### Added (49 changes, 1 of them is from the community)
-
-- Add add/remove label helpers to Epic API. !40465
-- Parse dependency path, and present it to the frontend. !42596
-- Enable dependency path in dependency list. !44001
-- Add GraphQL endpoint for Code Coverage summary for the project. !44472
-- Allow filtering by iterations in issue API. !44690
-- Delete pipeline subscriptions from the UI. !45166
-- Allow sorting of the Incident SLA column. !45344
-- Add issues collection weight to GraphQL. !45415
-- Add burnup charts to milestone page. !45477
-- Add burndown and burnup charts to iteration report. !45492
-- Advanced Search: Add optional Chinese and Japanese languages support. !45513
-- Specify group when creating epic. !45741
-- Add GraphQL endpoint for Code Coverage Activity for the group. !45831
-- Add audit logs for PAT create and revoke services. !45976
-- Add security status badge to the project pipeline widget. !45987
-- Resolve Populate the milestone dropdown combobox on the Release edit/new page with Group milestones. !46027
-- Add GraphQL mutation to promote an issue to an epic. !46143
-- Adding push rules to project exports. !46275
-- Expose blocked issue count in GraphQL. !46303
-- Add app code for secret detection token revocation. !46337
-- Add service to import Requirements from a CSV file. !46361
-- Show basic security scan information in merge requests for non-Ultimate users. !46458
-- Update API Fuzzing template to support use of a Postman Collection. !46476
-- Add email notification to notify result of CSV requirements import. !46484
-- Add requirements visibility access project setting. !46532 (Lee Tickett)
-- Add Vulnerabilities::FindingLink model. !46555
-- Chain of custody report filter by merge commit sha. !46581
-- Introduce vulnerabilities trends chart to the security dashboard. !46591
-- Add background migrations for Elasticsearch. !46672
-- Add API Fuzzing to security dashboard and vulnerabilities details page. !46854
-- Expose Devops Adoption segments via GraphQL. !46879
-- Add epic filter option to public APIs. !46887
-- Enable credentials inventory revocation emails. !46973
-- Add new fields for creating issues from vulnerabilities in Jira. !46982
-- Geo: Disable Self-service framework verification by default, and add package file verification feature flag. !46998
-- Epics Swimlanes for group and project issue boards. !47036
-- Fetch available issue types in Jira integration for vulnerabilities. !47046
-- Add link to generate issue from vulnerability in Jira. !47048
-- Add filtering Jira issues on GitLab Vulnerability ID. !47198
-- Add releasesCount and releasesPercentage to Group GraphQL type. !47245
-- Add filtering by iteration in GraphQL board list issues query. !47263
-- Enable Special References for Vulnerabilities. !47292
-- Promote an Issue to an Epic via the UI. !47306
-- Expose discussion and notes count in Epic query. !47409
-- Add route for test cases show page. !47441
-- Add graphql for snippet registries. !47448
-- Generate audit event after new user is approved. !47468
-- Add latest project test coverage list to group repositories analytics. !47572
-- Allow filtering by iteration in issue lists and issue boards. !47766
-
-### Other (11 changes, 5 of them are from the community)
-
-- Replace `GlDeprecatedDropdown` with `GlDropdown` in `ee/app/assets/javascripts/insights/components/insights.vue`. !41442 (nuwe1)
-- Update approvals toggle button style. !42075
-- Track issue health status changes in usage ping. !44417
-- Add text/tips to clarify various user counts in self-managed admin panels. !44986
-- Update security dashboard filter styling. !45468
-- Add retention information to Vulnerability Count documentation. !46054
-- Refactor license delete confirmation modal to use Pajamas. !46149
-- Test for different link types in IssueLinksResolver and create E2E specs. !46297 (Justin Zeng)
-- Rename "cycle analytics" with "value stream analytics" under /ee/spec. !46745 (Takuya Noguchi)
-- Remove duplicated BS display properties from Quality Test Case. !47044 (Takuya Noguchi)
-- Remove duplicated BS display properties from member overriding UI. !47126 (Takuya Noguchi)
-
-
-## 13.5.7 (2021-01-13)
-
-- No changes.
-
-## 13.5.6 (2021-01-07)
-
-- No changes.
-
-## 13.5.5 (2020-12-07)
-
-### Security (1 change)
-
-- Cleanup todos for confidential epics that are no longer accessible by the user.
-
-
-## 13.5.4 (2020-11-13)
-
-### Fixed (1 change)
-
-- Fix vsa filter paths. !47058
-
-### Changed (1 change)
-
-- Disallow editing of project-level MR approval settings when enabled at the instance level. !46637
-
-
-## 13.5.3 (2020-11-03)
-
-- No changes.
-
-## 13.5.2 (2020-11-02)
-
-### Security (4 changes)
-
-- Sync code owners rules on MR update. !1003
-- Fix potential regex backtracking attack in path parsing in search result. !1027
-- Transfer missing epics when a project is transferred.
-- Tighten the RBAC for GraphQL in SAST CiConfiguration.
-
-
-## 13.5.1 (2020-10-22)
-
-- No changes.
-
-## 13.5.0 (2020-10-22)
-
-### Removed (1 change, 1 of them is from the community)
-
-- Issue 233813 - Remove confusing text and url on vulnerability finding modal. !43698 (Judith Weiss)
-
-### Fixed (43 changes, 2 of them are from the community)
-
-- Fix quick actions autocomplete in new epic form. !37099
-- Exclude bots from licensed user count. !42034
-- Allow epic tree nodes to reset correctly. !42083
-- Fix merge pre-receive errors when load balancing in use. !42435
-- This fixes an issue where the request parameters would be missing on the Value Stream Analytics page, so the charts would not reflect the filters applied. !42655
-- Fix project_ids query param for group test coverage report. !42880
-- Fix: [Geo] Blob removal doesn't work for SSF blobs. !42891
-- Remove N+1 in license scanning report comparison. !42895
-- Ignore rake task license check on geo secondaries. !42920
-- Fix the scroll position in code search results. !43083
-- Fixes a bug with merge request approval rules being changed after creation. !43209
-- Check if HEAD report is nil when diffing license_scanning reports. !43210
-- Allow access to license scan report when `read_licenses` claim is satisfied. !43222
-- Geo: Permanently enable package_file_registries field. !43245
-- Generate a link to an artifact using the path from the license scanning report. !43455
-- Fallback to matching policies on license name. !43488
-- Send only one scope query when requesting pipeline findings. !43535
-- Show that Advanced Search is disabled when searching in a specific ref. !43612
-- Add route to coverage_fuzzing_reports. !43664
-- Remove confirm email from trial form. !43683
-- Gracefully handle gitlab:elastic:reindex_cluster unique index violation. !43690
-- Hide "Create Issue" On Vulnerability Page When Issues Are Disabled. !43725 (Kev @KevSlashNull)
-- Change the instance security dashboard path as `/-/security/dashboard`. !43737
-- Fix LDAP group settings heading being shown when feature disabled. !43901
-- Handle 500 error for GraphQL "configureSast" mutation. !43936
-- Fix scoped labels padding. !44044
-- Fix console null errors in security dashboard. !44076 (Kev @KevSlashNull)
-- Load license scan data as soon as it is available. !44194
-- Fix NoMethodError when accessing protected environment for job. !44257
-- Load license scanning widget data when the `read_licenses` claim is satisfied. !44464
-- Geo: Fix single-file snippets on Geo secondaries. !44532
-- Hide issues badge when there are no issues. !44663
-- Fix issue filtering by negated epic parameter. !44719
-- Disallow guest access for group repository analytics. !44721
-- Fix swimlanes duplicate epics. !44728
-- Remove extra to from subscription expiration message. !44769
-- Load license scanning data in MR widget as soon as the data is available. !44835
-- Fix params not filtered on project approval API. !44885
-- Fix disabling options in scanner profile. !44937
-- Label filter includes labels from ancestor groups on merge request analytics page. !44987
-- Align Analytics date picker labels. !44990
-- Fix unnecessary Sidekiq errors/retries when project is deleted during indexing. !45249
-- Fix GitLab vendor name appearing accidentally in the security reports when it's the only one. !45442
-
-### Deprecated (1 change)
-
-- Migrate analytics bs-callout to gl-alert. !40788
-
-### Changed (50 changes)
-
-- Add 'All Environments' option for environment dropdown if enabled. !40531
-- Search projects by namespace from Global Security Dashboard. !41191
-- Remove `project_merge_request_analytics` feature flag. !41876
-- Add namespace column into the network policies UI. Only visible when All Environment option is set. !42125
-- Improve policy editor layout. !42424
-- Update Threat Monitoring page. !42541
-- SAST mutation now supports analyzers section. !42542
-- Move the remediated badge to the activity column. !42599
-- Search API allow group/global notes scope. !42624
-- Return max_seats_used in namespaces list API. !42644
-- Add SAST UI Config telemetry. !42720
-- Security configuration page documentation links are now always available. !42765
-- Update DAST profiles routes. !42859
-- Allowlist GitLab-owned bots for SpamActionService. !42905
-- Add default date range for audit events. !42986
-- Move created issues in the activity column. !43016
-- Add link to vulnerability from created issue. !43046
-- Improve projects table in Usage quotas page. !43080
-- Limit Project Access Tokens/Bots to paid groups in Gitlab.com. !43199
-- Update Dismiss selected button on security dashboard. !43207
-- Use gl-badge for vulnerability states. !43253
-- Improve design for vulnerability details. !43274
-- Remove code for non-versioned terraform state replication. !43341
-- Remove feedback alerts from License Compliance & Dependency List. !43371
-- Removes fallback warning for legacy deploy board labels. !43376
-- Support Group Milestones to be associated with Project Releases in API. !43385
-- Move the download test coverage button to its own section in group repositories analytics page. !43422
-- Updated license compliance policy violation indicator styling. !43447
-- Remove item when dismissed on security dashboard if it no longer matches filter. !43468
-- Make it easier to click on items for bulk dismissal selection on security dashboard. !43482
-- DAST Profiles manage button changed to default styling. !43588
-- Use similarity sort when searching projects from Security Dashboard. !43610
-- Replace remove icon with unlink. !43641
-- Geo Form - Internal URL More Info Link. !43876
-- Find or create index when Elasticsearch indexing enabled. !43912
-- Update the audit events filter to have a fallback starting date. !44005
-- Only allow multiple reviewers in paid tiers. !44097
-- Change stubbed DastSiteProfile#status for calculated status. !44133
-- Migrate compliance framework enums to a new table. !44290
-- Return more specific error message when moving issue in GraphQL API. !44296
-- Replace bootstrap alert in ee/app/views/projects/_merge_request_approvals_settings_form.html.haml. !44749
-- Add swimlanes license check. !44880
-- Add project full path to analytics project dropdown filter. !45020
-- Order cluster agents query by name. !45165
-- Truncate long file paths. !45254
-- Allows GitLab-owned service users to bypass certain spam checks. !45310
-- Display dependency version on License Compliance page. !45315
-- Allow 'allowed_to_push' to supersede code owner protected branch. !45323
-- Geo - Rename Open projects Button to Replication details. !45434
-- Update RemoveProjectFromSecurityDashboard mutation to use new Global IDs. !45500
-
-### Performance (8 changes)
-
-- Geo: Improve performance of LFS objects queries. !42423
-- Fix poor performance with global search across entire instance. !42437
-- Preload epics in GraphQL group queries using Lookahead. !42874
-- Reduce load time of large number of audit events. !43248
-- Preload parent in GraphQL epics queries using Lookahead. !43323
-- Fix N+1 cache queries for load balancing sticking. !43843
-- Improve audit events preloading logic for CSV export. !44958
-- Use Lookahead to preload tests reports when querying Requirements with GraphQL. !45195
-
-### Added (69 changes, 2 of them are from the community)
-
-- Make mapping between LDAP and Kerberos configurable. !9962 (Christopher Schenk)
-- Add usage ping for MRs with overridden project rules. !36230
-- Added a delete SSH key button to the credentials inventory pages. !41592
-- Audit failed 2-factor login attempt. !41641
-- Add API to revert vulnerability to reverted state. !41784
-- Add GraphQL API to revert vulnerabilities to detected state. !41786
-- Add ability to revert vulnerability to detected state on single vulnerability page. !41794
-- Add Agent List to Cluster List View. !42115
-- Add ability to validate sites for on-demand DAST. !42198
-- Track views of group repo analytics page in snowplow. !42376
-- Send email reminder when approaching active user limit. !42453
-- Add license encryption key for testing purposes. !42475
-- Add mutation to Confirm Vulnerability in GraphQL. !42499
-- Expose board epic user preferences in GraphQL. !42569
-- Expose analyzer configuration in SAST Configuration UI. !42593
-- Rename Active Users to Billable Users. !42638
-- Add quick select date options to audit events filter. !42711
-- Allow updating epic swimlanes collapsed status in GraphQL. !42712
-- Add 'blob:' search filter to search for a specific Git object ID. !42752
-- Show when the last update to seats usage data was in the Billing page. !42763
-- Introduce top-level `vulnerability` field for GraphQL API. !42870
-- Add `discussions` and `notes` fields for VulnerabilityType on GraphQL API. !42892
-- Count merged MRs using approval rules in usage data. !42911
-- Config to hide Open/Closed list in Boards. !42945
-- Add ability to sort vulnerabilities by detected_at. !42950
-- Enable sorting vulnerabiliies by detected date in the list view. !42952
-- Add ability to sort vulnerabilities by title in GraphQL. !42953
-- Enable sorting vulnerabiliies by title in list view. !42955
-- Add ability to sort vulnerabilities by state. !42973
-- Enable sorting vulnerabiliies by state in vulnerability list. !42974
-- Add ability to sort vulnerabilities by report type in GraphQL. !42979
-- Enable sorting vulnerabiliies by state in the list view. !42980
-- Fetch more group projects for the test coverage dropdown. !43044
-- Expose using_license_seat in users API for admins. !43057
-- Add description field to requirements model and expose it in GraphQL API. !43099
-- Add `cwe` and `Other Identifiers` columns into vulnerability export files. !43179
-- Allow created_at and updated_at to be set through Epics API. !43279 (stingrayza)
-- Support flexible rollout strategy in the API. !43340
-- Enable geo replication of versioned terraform state. !43367
-- Add feedback alert in DAST On-demand Scans. !43374
-- Provide ability to mark a requirement as Satisfied. !43583
-- Add more options in DAST On-demand Scanner Profile. !43660
-- Persist collapsed state to DB. !43681
-- Add API Fuzzing report type (backend). !43763
-- Add search autocomplete suggestions for recently viewed epics. !43964
-- Update security vulnerability modal to show fuzzing data. !43983
-- Add incident SLA to operations settings. !44099
-- Update and expose board labels trough GraphQL API. !44204
-- Add basic search for epics. !44269
-- Add header validation to DastSiteValidationWorker. !44314
-- Expose if requirement test report wasmanually created on GraphQL. !44345
-- API endpoint to return defined experiments. !44498
-- Honor all DAST Scanner Profile variables in on demand DAST Scan. !44508
-- Create pipeline status widget. !44521
-- Include additional information related from scan in issue template. !44620
-- Include pipeline artifacts size on storage usage page. !44645
-- Add REST API for listing iterations. !44685
-- Provide dependency version data for the License Compliance page. !44839
-- Add tooltip to DAST scan profiles delete button. !44876
-- Add support for providing requirement description. !44902
-- Add iteration reports in projects. !44921
-- Create SamlGroupLink table and model. !45061
-- Introduce optional Service Level Agreement (SLA) for Incidents. !45085
-- Add metric count for projects with incident sla enabled. !45092
-- Add group-level wikis. !45144
-- Enable geo replication for merge request diffs. !45224
-- Update merge requests approvers when code owners is updated. !45290
-- Add MobSF in SAST vendor template. !45291
-- Expose seats_in_use in namespace entity. !45316
-
-### Other (20 changes, 7 of them are from the community)
-
-- Replace Loading Button with Icon on All Vulnerability Lists. !41019 (Kev @KevSlashNull)
-- Replace bootstrap alert in jaeger page. !41610
-- Remove duplicate broken container scanning findings. !42609
-- Add tooltip to header for Code Owner Approval toggle in repository settings. !42725
-- Migrate Start event label dropdown. !43050
-- Use new fingerprint as default fingerprint for Container Scanning findings. !43145
-- Apply GitLab UI button styles in ee/app/views/projects/settings/ci_cd directory. !43335 (Justin Zeng @jzeng88)
-- adds the `.gl-button` class to ee/app/views/projects/settings/operations/_tracing.html.haml. !43347 (Justin Zeng @jzeng88)
-- Finish migration of Container Scanning fingerprints. !43691
-- Replace in-repo SVGs with @gitlab/svgs in Group Value Stream Analytics. !43825 (Takuya Noguchi)
-- Refactor vulnerabilities related issues component test createWrapper method to take an object instead of multiple arguments. !44035 (Kev @KevSlashNull)
-- Create tests for ee/app/assets/javascripts/security_dashboard/components/selection_summary_vuex.vue. !44213 (Kev @KevSlashNull)
-- Expose scan object in unsaved findings. !44274
-- Use the new dropdown for the split button in vulnerability management. !44399
-- Redesign solution card in vulnerability details page. !44408
-- Improve selection_summary_spec.js tests. !44506 (Kev @KevSlashNull)
-- Add metrics for tracking stale secondaries for merge requests. !44813
-- Text wrap the license name in Dependency List. !45242
-- Convert bootstrap alert to gl for project size limit. !45312
-- Remove bootstrap class in licensed user count. !45443
-
-
-## 13.4.7 (2020-12-07)
-
-### Security (1 change)
-
-- Cleanup todos for confidential epics that are no longer accessible by the user.
-
-
-## 13.4.6 (2020-11-03)
-
-### Fixed (1 change)
-
-- Handle 500 error for GraphQL mutation. !43936
-
-
-## 13.4.5 (2020-11-02)
-
-### Security (4 changes)
-
-- Sync code owners rules on MR update. !1003
-- Fix potential regex backtracking attack in path parsing in search result. !1023
-- Transfer missing epics when a project is transferred.
-- Tighten the RBAC for GraphQL in SAST CiConfiguration.
-
-
-## 13.4.4 (2020-10-15)
-
-### Fixed (1 change)
-
-- Geo: Fix "Project repo not able to resync after storage move". !44172
-
-
-## 13.4.3 (2020-10-06)
-
-### Fixed (5 changes)
-
-- 13.4 Port of Geo: Permanently enable package_file_registries field. !43434
-- Limit spam checks to title, description, or confidentiality changes on bot-created issues. !43463
-- Fixing an issue on the Productivity Analytics page, where applying filters would not update the results. This should now work as expected; applying a filter updates the results on the page filtered by the filters applied. !43532
-- Geo - Fix wikis with no repository on the primary trying to sync over and over. !43765
-- Do not try to copy issue weight events when promoting an issue to epic. !43891
-
-
-## 13.4.0 (2020-09-22)
-
-### Security (1 change, 1 of them is from the community)
-
-- Remove v-html from environments/components/deploy_board_component.vue. !41521 (Takuya Noguchi)
-
-### Removed (2 changes)
-
-- Remove VSA duration median line. !39665
-- Remove Users over license banner. !39836
-
-### Fixed (56 changes, 6 of them are from the community)
-
-- Allow creation of confidential sub-epics from tree. !37882 (Jan Beckmann)
-- Use active user count instead historial max. !37916
-- Move Add Approver name validation error into form. !39389
-- Update environment dashboard help text. !39450
-- Add identifier check when creating vulnerability findings. !39650
-- Update epic inherited dates and create notes when reordering in epic tree. !39742
-- Fix Approval Rules table in Merge Requests bursting out of the layout in some scenarios. !39753
-- Fix group name bug for new purchase flow. !39915
-- Add docker options for Load Perf testing. !39977
-- Use Gitlab::ErrorTracking in place of project.logger for indexing errors. !39979
-- Fix unchecking all compliance frameworks for MR approvals settings. !40070
-- Remove gap on trial registrations page. !40080
-- Fix issue where the select page dropdown would be disabled on the Insights Analytics page when no charts were loaded. !40096
-- Display contents of Zuora iframe for the new purchase flow in Dark Mode. !40114
-- Activate on-demand scans nav item when editing a site profile. !40148
-- Omit sub-groups from trial selection menu. !40300
-- Geo Statuses - Fix empty section bug. !40443
-- Update description when editing iteration. !40476
-- Fix remediated badge visibility on vulnerability list. !40483
-- Fix breadcrumb for security dashboard. !40486
-- Don’t create new gitlab_subscription records on nested attributes to namespaces. !40537
-- Make vulnerability list columns have consistent widths. !40561
-- Don't overwrite user's description by default template description. !40609
-- Improve Accordion Item Focus State. !40638 (Kev @KevSlashNull)
-- Geo: Fix design repository failures with selective sync, and make container repository updates more robust. !40643
-- Prevent Download For Failed Vulnerability Export Jobs. !40656 (Kev @KevSlashNull)
-- Fix vulnerability comment delete button spinner position. !40681
-- Fix vulnerability save button spinner position. !40781
-- Fix error in migration to populate historical vulnerability statistics. !40835
-- Fix for Iterations closing a day early. !40884
-- Add missing path to project vulnerability. !40935
-- Allow on-demand DAST pipelines to be found for scanned resource. !40982
-- Support dark theme for overview of payment method component for the new purchase flow. !40988
-- Create resource weight event when setting the weight during issue creation. !41087
-- Un-nest sidebar under .context-header div in security navigation. !41176
-- Fix dasboard to dashboard. !41440
-- Geo: Avoid orphaning blob files on secondaries. !41529
-- Disable loading vulnerabilities in MR when pipeline is running. !41539 (Justin Zeng)
-- Enable secret detection for MR Widget. !41582
-- Introduce ^ as a reference prefix for Vulnerabilities. !41643
-- Fix the size of chart placeholder on Analytics pages for Merge Requests, Insights and Value stream, so it matches the actual charts. the size of the real chart shown afterwards. !41904
-- Correct sibling query for epic tree nodes. !41986
-- Fix SAST Config GraphQL mutation. !42003
-- Fix Duplicate Keys in Vulnerability Details. !42027 (Kev @KevSlashNull)
-- Hide confirmation modal after closing a blocked issue. !42068
-- Create a Geo cache invalidation event when toggling feature flags through the API. !42070
-- Track state changes using resource state events for Epics. !42088
-- This change preserves the environment when editing network policies. !42148
-- Reset scope to all-environments when last scope removed. !42287
-- Return stored seat counts in the subscriptions API endpoint. !42293
-- DAST on-demand site profiles: prevent error banner from showing. !42300
-- Fix MR Modal Vulnerability Links Overflow Modal. !42332 (Kev @KevSlashNull)
-- Fix project_ids query param for downloading coverage CSV report. !42497
-- Fix selecting all projects in group code coverage report. !42507
-- Geo - Create repository updated events only if the repository exists. !42519
-- Fix Iterations quickaction not showing all iterations. !42528
-
-### Deprecated (1 change)
-
-- Mark RunDASTScan mutation as deprecated. !42544
-
-### Changed (66 changes, 2 of them are from the community)
-
-- Use standard table colors in Dependency List. !31130
-- Disable editing health status for closed issues and show informative tooltip. !38372
-- Added Cluster Agent delete mutation for GraphQl. !38622
-- Button migration to component on dependency list. !38624
-- Update FF nav section using GitLab UI Utilities. !38768
-- Pass current_plan all the way down the partial chain. !38868
-- add CiliumNetworkPolicy into services. !39127
-- Persist when dismissing FF will look different message. !39238
-- Update URL when editing iteration. !39296
-- Move Analytics to admin panel. !39368
-- Relocate create issue button from header section to the related issues section. !39533
-- Remove project selector logic from instance security dashboard. !39631
-- Move variable audit logging to Starter. !39730
-- Epic labeling for confidential epics. !39794
-- Add How-to-upgrade link to admin license page. !39974
-- Apply sizing to SAST Configuration variable fields. !40002
-- Do not write SAST defaults via SAST Config UI. !40030
-- Create instance-level security charts component and update severity widget CSS. !40046
-- Return message when personal access token creation fails in internal API. !40073 (Taylan Develioglu)
-- Replace <gl-deprecated-button> with <gl-button> in confirm_order component. !40119
-- Revert Merge branch add_standard_field_into_payload into master. !40162
-- Hide warning to disable GitLab issues in Jira integration form. !40248
-- Add link to primary node in secondary node alert. !40297
-- Make legacy feature flags read-only. !40320
-- Remove project limit from Environments Dashboard help text. !40333
-- Use semantic HTML in Progress Bar component. !40380
-- Simplify progress bar steps logic. !40390
-- Reset CI minutes for all namespaces every month. !40396
-- Implement empty state on security dashboard. !40413
-- DAST Scanner Profile Library: change new-profile button to dropdown. !40469
-- Remove health status feature from incidents. !40520
-- Improve error message when creating issue fails. !40525
-- Allow SAST Configuration UI to be used when there's an existing CI file. !40528
-- Add support for multiple environments on the controller and service level. !40529
-- Allow for project filtering in Group code coverage Finder class. !40547
-- Allow milestone and assignee board lists to be created using GraphQL. !40551
-- Add Feature Flags Search Box shortcut. !40578
-- Enhance error messages for Add Project to Security Dashboard mutation. !40607
-- Make environments dropdown fetch results as soon as it's focused. !40624
-- Change the configureSast mutation to use actual GraphQL types instead of JSON types. !40637
-- Remove group_push_rules feature flag. !40658
-- Remove issue note from vulnerability details. !40686
-- Enhance error messages when Adding Projects to Security Dashboard. !40692
-- ee Migrating modal button in License Compliance. !40747
-- Change merge train position messaging. !40777
-- Remove weight from incidents sidebar. !40794
-- Expand retention period to 365 days for Vulnerability Statistics. !40833
-- Move group activity analytics from beta to general availability. !40916
-- Link Elasticsearch indexing progress to elastic_commit_indexer. !40928
-- Use finding_description for Details in CSV vulnerability export. !40944
-- Hide the upgrade link on the admin license page if plan Ultimate. !40977
-- Show ancestor iterations in subgroups. !40990
-- Improve the UX of the Start a Trial group selection page. !41020
-- Replace bootstrap alerts in ee/app/views/admin/push_rules/_push_rules.html.haml. !41072 (Jacopo Beschi @jacopo-beschi)
-- Only display downgraded message if on free plan. !41213
-- Sort merge requests by merged at date in Merge Request Analytics. !41272
-- Apply filters to vulnerability count list. !41566
-- Filter out incidents from related issues in epics. !41807
-- Show additional columns in Group and Instance Security Dashboards. !41829
-- Add toast to the reset pipelines minutes button. !41838
-- Add explanation text to FF create/edit sections. !41910
-- Use GitLab utility classes for the alert component instead of Bootstrap. !41974
-- Remove license check for feature flags. !42023
-- Update in preparation of supporting analyzers. !42173
-- Skip the who will be using GitLab question in signup when a user is invited. !42264
-- Expose approvals required and approvals left for merge requests in GraphQL. !42354
-
-### Performance (10 changes)
-
-- Optimize the Advanced Search query for Issues and Notes. !38095
-- Load only the requested report artifacts into the memory for vulnerability_findings endpoint. !39749
-- Add cache for elasticsearch_indexes_namespace check. !41274
-- Limit the context for paused elasticsearch jobs. !41297
-- Cache project user defined rules by branch. !41564
-- Return empty scanners list when pipeline has no reports. !41652
-- Enable elasticsearch namespace enabled cache by default. !41875
-- Refactor approval_rules association. !41965
-- Move approval reset to new service and worker. !42001
-- Geo: Improve performance of package files queries. !42294
-
-### Added (66 changes)
-
-- Add usage data for counting projects with sectional codeowner rules. !37786
-- Add group code coverage download button. !37853
-- Deployer authorisation for protected environments. !38188
-- Add ability to fetch DastSiteProfile via GraphQL. !38380
-- Added loading animations for value stream analytics. !38447
-- Add epic_id param to issue update graphQL mutation. !38678
-- Cluster token create mutation for GraphQL. !38820
-- Add GraphQL endpoint for retrieving cluster agents for a project. !38833
-- Add metrics for terraform state replication. !38959
-- Allow requirement status to be updated with GraphQL. !39371
-- Count security jobs. !39481
-- Show tooltips for License-Check and Vulnerability-Check approval rules. !39579
-- Add pagination to Environments Dashboard. !39637
-- Show license overage warning on admin dashboard. !39704
-- Add Revoke buttons to the PAT tab of the instance credential inventory. !39712
-- Show Latest Most Severe Alert on Environment. !39743
-- Add an API to add a push rule to a group. !39760
-- Add a License overview section to the Admin dashboard. !40009
-- Include subgroup issues in iteration issue list. !40099
-- Enable to delete a custom value stream. !40127
-- API to edit group push rules. !40136
-- Add endpoint to update Dast Scanner Profile. !40208
-- Add global_id field to DastScannerProfiles::Create. !40225
-- Add suggested security approval rules. !40250
-- Add deployment events to group webhooks. !40270
-- API to delete group push rule. !40293
-- Geo: Add graphql endpoints for terraform state. !40317
-- Add GraphQL endpoint for deleting a cluster agent token. !40338
-- Add EULA checkbox on license page. !40352
-- Add feedback call to action in SAST Configuration. !40363
-- Make Auto DevOps alert in Security Configuration dismissible. !40375
-- Adding counts of users using default branch locks and users using multi-branch LFS locks. !40419
-- Make searching issues/MRs by IID even easier. !40467
-- On-demand scans item on Security & Compliance configuration page. !40474
-- Allow reporters to approve MRs. !40491
-- Expose approved flag in Merge Request GraphQL API. !40505
-- Populate `resolved_on_default_branch` column for existing vulnerabilities. !40755
-- Allow fetching agent tokens from cluster agent GraphQL endpoint. !40779
-- Add detected date to vulnerability details page. !40782
-- Add delete mutation for DAST scanner profile. !40805
-- Add REST endpoint to access resource iteration events. !40850
-- Add ability to sort vulnerabilities by severity in GraphQL API. !40856
-- Delete custom value streams. !40927
-- Introduce `detectedAt` field for VulnerabilityType on GraphQL API. !41000
-- Use dast_scanner_profiles in DAST on-demand scans. !41060
-- Add ability to filter vulnerabilitiesSeveritiesCount in GraphQL for Project, Group and Instance Security Dashboard. !41067
-- Add detected column with timestamp on security dashboards. !41092
-- Create vulnerabilities route/page for instance-level security dashboard. !41156
-- Add GraphQL mutation to create test cases. !41190
-- Geo: Add rake task to check if DB replication is working. !41618
-- New checkout flow for free groups on gitlab.com. !41644
-- Add filtering by activity (has_resolution, has_issues) to Vulnerability. !41650
-- Add link to GitLab CI history in Security Configuration. !41673
-- Add ability to track unique uses of API endpoints. !41689
-- Support custom JSON schema validation in the Web IDE. !41700
-- Support moving issue between epics in GraphQL. !41790
-- Adding total counts of default branch locks and multi-branch LFS locks. !41824
-- Expose analyzer info for SAST Config. !41825
-- Add Vulnerabilities Count by Day to Project GraphQL API. !41856
-- Add policy editor to the Threat Monitoring page. !41949
-- Enable on-demand DAST scans scanner-profiles flag by default. !41950
-- Add support for reading Vault secrets from CI jobs. !42055
-- Add ability to select projects for group coverage report. !42129
-- Add + as a special reference for to GFM Autocomplete. !42190
-- Add sorting functionality to vulnerability list. !42347
-- Add mutation to Resolve Vulnerability in GraphQL. !42500
-
-### Other (26 changes, 11 of them are from the community)
-
-- Update Browser Performance Testing SiteSpeed version to 14.1.0. !37685
-- Change Advanced Global Search to Advanced Search. !39526
-- Migrate analytics stage button away from deprecated button. !39560
-- Add backend pagination to the environments dashboard. !39847
-- Deprecate -gray- variables and replace with - variables. !39860
-- Add Snowplow to Toggles on Feature Flag Table. !39995
-- Add Snowplow to Toggles on Edit Feature Flag. !40023
-- Update Standalone Vulnerabilities Page to be a Single Vue App. !40189 (Kev @KevSlashNull)
-- Migrate Bootstrap button to GlButton in the issue boards assignee dropdown list. !40398
-- Update $orange variables to match GitLab UI and address contrast for accessibility. !40652
-- Track iteraton changes using resource events. !40841
-- Replace deprecated button on status page. !41012
-- Fix typos of committed in project views. !41038 (Takuya Noguchi)
-- Replace v-html with v-safe-html in dismissal_note.vue. !41137 (Kev @KevSlashNull)
-- Replace v-html with v-safe-html in card_security_discover_app.vue. !41139 (Kev @KevSlashNull)
-- Replace deprecated buttons with new GlButton component from GitLab UI. !41154
-- Replace v-html with v-safe-html in configure_feature_flags_modal.vue. !41210 (Kev @KevSlashNull)
-- Replace v-html with v-safe-html in groups_dropdown_filter.vue. !41212 (Kev @KevSlashNull)
-- Replace v-html with inline text in weight.vue. !41325 (Kev @KevSlashNull)
-- Internationalize Admin namespace plan. !41363 (Takuya Noguchi)
-- Internationalize Admin dashboard Geo. !41368 (Takuya Noguchi)
-- Update location fingerprint for existing CS vulnerabilities. !41756
-- Rename Elasticsearch to Advanced Search in Admin UI. !42048
-- Remove without_index_namespace_callback trait. !42082 (Andrei Cirnici @acirnici)
-- Adjust Color of Low Severity Symbol. !42153 (Kev @KevSlashNull)
-- Elasticsearch reindexing: add confirmation popup and change color scheme. !42209
-
-
-## 13.3.9 (2020-11-02)
-
-### Security (4 changes)
-
-- Sync code owners rules on MR update. !1003
-- Fix potential regex backtracking attack in path parsing in search result. !1024
-- Transfer missing epics when a project is transferred.
-- Tighten the RBAC for GraphQL in SAST CiConfiguration.
-
-
-## 13.3.8 (2020-10-21)
-
-### Fixed (4 changes)
-
-- Geo: Permanently enable package_file_registries field. !43436
-- Geo - Fix wikis with no repository on the primary trying to sync over and over. !43765
-- Handle 500 error for GraphQL configureSast mutation. !43936
-- Geo: Fix "Project repo not able to resync after storage move". !44172
-
-
-## 13.3.4 (2020-09-02)
-
-- No changes.
-
-## 13.3.3 (2020-09-02)
-
-### Security (2 changes)
-
-- Sanitize vulnerability history comment.
-- Fix displaying epics visibility in issue sidebar.
-
-
-## 13.3.2 (2020-08-28)
-
-- No changes.
-
-## 13.3.1 (2020-08-25)
-
-### Fixed (2 changes)
-
-- Geo: Apply selective sync to container repo updates. !39663
-- Geo: Apply selective sync to design repo updates. !39916
-
-
-## 13.3.0 (2020-08-22)
-
-### Removed (7 changes)
-
-- Remove unused approvals controller actions. !36855
-- Geo: Remove FDW warnings from health checks. !38620
-- Geo: Remove FDW warnings from configuration checks. !38629
-- Geo: Remove rake task to refresh foreign tables definition in Geo Secondary node. !38632
-- Geo: Remove support for Foreign Data Wrapper. !38718
-- Disable loading resolvedOnDefaultBranch for Vulnerabilities. !38783
-- Remove Foreign Data Wrapper support from Geo docs. !39485
-
-### Fixed (53 changes, 3 of them are from the community)
-
-- changed the default value of checkbox to false from a dynamic value on first page load. !36646 (Uday Aggarwal @uday.agg97)
-- Geo: Package file backfill/removal accounts for object storage settings. !36771
-- Geo: Fix LFS file downloads from S3 to secondary. !37008
-- Fix scanned resources count in MR security modal. !37029
-- Geo: Fix OAuth authentication with relative URL used on secondary. !37083
-- Display correct information on Roadmap when an epic has no start and due date. !37093
-- Fix epic label dropdown behavior when opened within the new epic page. !37125
-- Fix security dashboard by excluding license scanning information. !37318
-- VSA fetch duration data for active stages only. !37336
-- Disable security scanner alerts. !37354
-- Geo - Fix Node Form Breadcrumbs. !37366
-- Minor style fixes to 'Linked Issues' card. !37396
-- Fix duplicate dispatch of 'fetchCycleAnalyticsData' action. !37458
-- Do not display the export button while projects are loading. !37573
-- Fix Any filter for labels in Value Stream Analytics. !37584
-- Fix Elasticsearch sorting incorrectly from DB. !37665
-- Scanners Alert: translate COVERAGE_FUZZING. !37803
-- Support Indexing files in Elasticsearch with paths longer than 512 bytes. !37834
-- Only send AWS Credentials ENV to indexer when AWS config is enabled. !37865
-- Remove an extra padding in y-axis on Epic detail. !37886 (Takuya Noguchi)
-- Fix number mismatch issue for MR Widget. !38021
-- Truncate long vulnerability names on security report. !38056
-- Fix persisting multiple default Value Stream Analytics stages per value stream. !38072
-- Geo: Fix consuming events of blobs that should not be synced. !38089
-- Dont use DB connection in GlobalSearchSampler. !38138
-- Permit new projects to be created from active project templates only. !38335
-- Add support for active field to feature flags api. !38350
-- Fix GraphQL for read-only instances with relative URLs. !38402
-- Fix insights period_field parameter. !38404
-- Support renaming feature flags via the api. !38425
-- Geo: Fix not working redownloading of repositories via snapshot. !38464
-- Audit failed login from OAuth provider. !38473 (banovp)
-- Utilize `resolvedOnDefaultBranch` field to show the remediated badge on vulnerabilities list. !38478
-- Show only root namespaces for subscriptions. !38481
-- VSA requests fail without multiple value streams feature flag. !38542
-- Fix MR approval rule update logic for Vulnerability-Check. !38589
-- Update Vulnerability::IssueLinks when moving Issues to new Project. !38765
-- Only show subscribable banner when auto-renew is set. !38962
-- Dark mode - Fix edit scoped labels. !39166
-- Add logging when indexing projects are missing project_feature attribute. !39255
-- SCIM provisioning to avoid creating SCIM identity without membership. !39259
-- Fixed iteration references when in a private group/project. !39262
-- Fix Iteration Edit button color to black. !39286
-- Geo: Replicate repository changes when mirrors are updated. !39295
-- Fix commented_by for any approvers rule. !39432
-- Filtered search width fix on Roadmap. !39440
-- Geo: Skip project/wiki repo create/update events based on selective sync. !39488
-- Fix scanner check when creating vulnerability findings. !39500
-- Set default for current_value in SAST config UI. !39504
-- Fix the `Vulnerability-Check` and `License-Check` approval rules to be synched correctly after creating a merge request. !39587
-- Ensure secondary is enabled on failover. !39615
-- Pass the IID of the User List on Update. !39639
-- Geo: Apply selective sync to container repo updates. !39663
-
-### Deprecated (1 change)
-
-- Deprecate vulnerabilitiesCountByDayAndSeverity on Group and InstanceSecurityDashboard GraphQL API. !38197
-
-### Changed (58 changes, 1 of them is from the community)
-
-- Geo: Add package files to status rake tasks. !36192
-- Omit namespaces w/ non-free plans from trial select. !36394
-- Expose blocked field on GraphQL issue type. !36428
-- Display notices above license breakdown. !36881
-- Send AWS credentials via environment variables to indexer. !36917
-- Track issue weight changes using resource events. !36936
-- Smartly truncate URLs in DAST Modal. !37078
-- Polish Jira issues UI. !37095
-- Inherit parent epic during an issue promotion. !37109
-- Geo: Replace geo_self_service_framework_replication feature flag with replicable specific flags. !37112
-- Expired subscription banner doesn't display for auto-renew. !37127
-- License Compliance: Show license-approvals to be inactive if no approvals required. !37170
-- Show count of extra identifiers in project dashboard. !37256
-- Make New Feature Flags alert dismissible. !37306
-- Simplify Advanced Search code_analyzer regex complexity. !37372
-- Subscription Banner has 14 day grace period. !37378
-- Allow nested gitlab_subscription on namespace api. !37397 (jejacks0n)
-- Add is_standard as part of frontend payload for NetworkPolicyController. !37527
-- Hide health status labels for closed issues on epics tree. !37561
-- Remove heading from Feature Flags section. !37613
-- Add extra identifier count to pipeline sec tab. !37654
-- Hide Epic widget for incidents. !37731
-- Use new chart loader on Insights page. !37815
-- By default display only confirmed and detected vulnerabilities. !37914
-- Use Drawer for Requirement Create/Edit form UI. !37943
-- Audit log group variable updates. !37945
-- Update merge request button messaging for license-check approval. !37954
-- Update Compliance Dashboard to use tabs. !37959
-- Make security summary message more understandable. !38043
-- Reset CI minutes for all namespaces every month. !38057
-- Add new security charts page and unavailable view. !38088
-- Add empty state for Deploy Keys section. !38329
-- Add frontend validation to "Restrict membership by email domain" field. !38348
-- Geo API - Expose repositories_count and wikis_count. !38361
-- Show blank empty text for approved by in MR widget. !38436
-- Add published column. !38439
-- Change prefix to COVFUZZ for CI variables related to coverage fuzzing. !38441
-- Fetch latest successful pipeline with security jobs to check if vulnerability was resolved. !38452
-- Add confirmation message when regenerating feature flags instance ID. !38497
-- Add a left-hand navigation to the security page. !38529
-- Update Merge Train helper text. !38619
-- Audit events log table is now responsive to different display sizes. !38803
-- Use GraphQL to get list of vulnerable projects. !38808
-- Update {groups,profiles}/billings_controller_spec.rb files. !38872
-- Automate the deletion of the old Index after a reindex. !38914
-- Rename project delete 'adjourned' and 'soft deleted' to 'delayed'. !38921
-- Audit variable changes for project variables. !38928
-- Create a standalone settings page for the instance security dashboard. !38965
-- Add frontend validation to "Restrict access by IP address" field. !39061
-- Replace .com check with an app setting to enforce namespace storage limit. !39150
-- Reduce number of users required to qualify for a free instance review from 100 to 50. !39155
-- Productivity Analytics: Replace bs-callout with GlAlert component. !39207
-- Update feature flag form buttons to gl-button. !39220
-- Update requirements list buttons to gl-button. !39372
-- Change IssueSetEpic mutation to make epic_id argument not required. !39451
-- Re-name Issues Analytics (plural) as Issue Analytics (singular). !39506
-- Implement a parser to extract SAST configuration. !39605
-- Button migration to component.
-
-### Performance (10 changes)
-
-- Avoid N+1 of merge requests associations in Search. !36712
-- Memoize project regulated settings check. !37403
-- Fix slow Value Stream label stage query. !38252
-- Improve issues confidentiality check performance for AGS. !38564
-- Replace deprecated button syntax in empty_state. !38730
-- Geo - Optimize the query to return reverifiable projects on Geo primary node. !38732
-- Change data source for Vulnerable Projects to GraphQL. !38878
-- Preload vulnerability statistics when loading vulnerable projects. !38905
-- Disable loading hasNextPage value for Security Dashboards. !39261
-- Load project list only during loading the Security Dashboard. !39263
-
-### Added (66 changes, 1 of them is from the community)
-
-- Add related issues panel to standalone vulnerability page. !35625
-- add add coverage fuzzing results to security dashboard. !36011
-- Expose epics related to board issues in GraphQL. !36186
-- Add the option to filter epics by milestone. !36193
-- Add predefined network policies to the network policy list. !36257
-- Prevent some abilities at namespace or group level when over storage limit. !36493
-- Add variable expansion to cross pipeline artifacts. !36578
-- Add MR approval settings column to the compliance dashboard. !36589
-- Add Geo replication columns and tables for terraform states. !36594
-- Allow Users to Create and Rename User Lists. !36598
-- Add GraphQL API to temporarily increase storage. !36605
-- Geo: Add migrations for registry and states tables for vulnerability export replication. !36620
-- Prevent certain policies at Merge Request level when namespace exceeds storage limit. !36713
-- Block some project abilities when namespace over storage limit. !36734
-- Add vulnerabilityGrades to GraphQL API. !36861
-- Add setting for max indexed file size in Elasticsearch. !36925
-- Show up to date SPDX licenses for license compliance. !36926
-- Add Vulnerabilities::HistoricalStatistic model. !36955
-- Adjust historical vulnerability statistics after vulnerability update. !36970
-- Removed Projects Page in Admin UI with restoration button. !37014 (Ashesh Vidyut)
-- Add coverage fuzzing to security dashboard(backend). !37173
-- Add docs about denied licenses and update feature flag. !37191
-- Extend configuration end point to return json when format is given. !37217
-- Solicit feedback for Security Dashboards. !37317
-- Add _links to epic API entity. !37395
-- Delete historical vulnerability statistics entries older than 90 days. !37436
-- Expose status of temporary storage increase. !37511
-- Support writing variables to CI config. !37516
-- Add source and destination branch data to Compliance Dashboard. !37628
-- Add source and destination branch data to compliance entity. !37630
-- Enable security scanner alerts. !37655
-- Toggle epic confidential. !37678
-- Add info and unknown counts along other severity counts. !37763
-- Allow setting a default role for Group SSO. !37801
-- Count pipelines that have security jobs. !37809
-- Add info icons to explain lead / cycle time calculations. !37903
-- Provision for csv download for merge commits in a group. !37980
-- Added cluster agent GraphQL mutation and create service. !37997
-- Add health status in issuable list. !38040
-- Better burndown chart axis formatting. !38113
-- Add vulnerabilitiesCountByDay to Group and InstanceSecurityDashboard GraphQL API. !38197
-- Display Strategy Information for New Feature Flags. !38227
-- Add `resolvedOnDefaultBranch` field to VulnerabilityType on GraphQL API. !38300
-- Support project-level iteration creation via GraphQL. !38345
-- Add excluding filter qualifier for Advanced Search queries. !38400
-- Implement a GraphQL mutation for MR creation flow in SAST Config. !38406
-- Add ability to update issue board configuration options using GraphQL. !38413
-- Add GraphQL mutation to set the epic of an issue. !38494
-- Add Merge Commit CSV export button in Compliance Dashboard. !38513
-- Index trial groups in Elasticsearch. !38541
-- Add cron worker to clean up expired subscriptions from Elasticsearch. !38551
-- Add value stream analytics filter bar. !38576
-- Offline copy of SPDX catalogue. !38691
-- Add GraphQL query for a single iteration. !38692
-- Track unique visitors in Compliance related pages. !38851
-- Add API endpoint to revoke PATs. !39072
-- Add SAST Configuration UI. !39085
-- Allow using of negated filters in board epic issues GraphQL query. !39089
-- Add commented_by to approval_settings endpoint. !39237
-- Add support for updating SAST config. !39269
-- Enable creating multiple value streams. !39299
-- Enable on-demand DAST scan feature flag by default. !39411
-- Expose scopedPath and scopedUrl to Iteration type in GraphQL. !39543
-- Enable breadcrumbs in security dashboard. !39635
-- API to retrieve group push rules. !39642
-- Add size field to graphql query to extract information about SAST Config UI. !39736
-
-### Other (23 changes, 2 of them are from the community)
-
-- Geo - Admin Area > Geo > Uploads search is limited to 1000 records. !36391
-- Clarify that Unleash client app name must be the running environment name. !37255
-- Remove :skip_web_ui_code_owner_validations feature flag. !37367
-- Replace $gray-300 hex value, remap usages to $gray-200. !37586
-- Replace GlDeprecatedButton with GlButton. !37602
-- Update Load Performance Testing k6 version to 0.27.0. !37680
-- Switch to faraday_middleware-aws-sigv4 gem for signing Elasticsearch request in AWS. !38016
-- Replace deprecated button with new button. !38074
-- Modify iteration quick action tooltip. !38091 (Marcin Sedlak-Jakubowski)
-- Add text to export button. !38189
-- Geo - Admin Area > Geo > Projects/Designs search is limited to 1000 records. !38347
-- Replace GlDeprecatedButton with GlButton in Requirements form. !38422
-- Updating $gray-600 hex value and replacing instances with $gray-400. !38448
-- Update css class to gl- classes. !38640
-- Replace deprecated button with new button. !38695
-- Replace -700 hex value, replace usages with -500. !38793
-- Remove blacklist terminology from License Compliance. !39071
-- Migrate merge immediately dialog away from deprecated button. !39284
-- Change location fingerprint calculation for container scanning. !39445
-- Remove a card-small class from HAML files under /ee. !39551 (Takuya Noguchi)
-- Migrate checkout step summary buttons away from legacy buttons. !39561
-- Store/Update new location fingerprint for container scanning vulnerabilities. !39696
-- Replace -800 hex value, replace usages with -700. !39734
-
-
-## 13.2.10 (2020-10-01)
-
-### Security (1 change)
-
-- Do not leak templates with protected features.
-
-
-## 13.2.8 (2020-09-02)
-
-- No changes.
-
-## 13.2.7 (2020-09-02)
-
-### Security (2 changes)
-
-- Sanitize vulnerability history comment.
-- Fix displaying epics visibility in issue sidebar.
-
-
-## 13.2.6 (2020-08-18)
-
-- No changes.
-
-## 13.2.5 (2020-08-17)
-
-- No changes.
-
-## 13.2.4 (2020-08-11)
-
-### Performance (1 change)
-
-- Preload all associations in Vulnerability GraphQL API. !38556
-
-
-## 13.2.3 (2020-08-05)
-
-- No changes.
-
-## 13.2.2 (2020-07-29)
-
-- No changes.
-
-## 13.2.0 (2020-07-22)
-
-### Security (1 change)
-
-- Ensure passwords and access tokens don't appear in SCIM errors.
-
-### Removed (3 changes)
-
-- Remove reference to sast:container. !32061
-- Revert Add scanner name. !33442
-- Stop recording connection pool metrics for load balancing hosts. !33749
-
-### Fixed (91 changes, 2 of them are from the community)
-
-- Stop recording JSON parser errors due to third party license scanning integrations. !26944
-- Improve Requirements Management empty state. !30716 (Marcin Sedlak-Jakubowski)
-- Display warning for issues moved from service desk on frontend. !31803
-- Add truncation for the environment dropdown. !32267
-- Add negated params filter to epics search. !32296
-- Clean up serialized objects in audit_events. !32434
-- Migrate dismissal data from Vulnerability Feedback to Vulnerabilities. !32444
-- Prevent last Group Managed Account owner with access from accidental unlinking. !32473
-- Fix issues with editing epic on Boards sidebar. !32503 (Eulyeon Ko)
-- Dependency List shows only vulnerabilities from Gemnasium analyzer instead of all Dependency Scanning reports. !32560
-- Ensure users can unlink Group SAML when the group has SAML disabled. !32655
-- Fix Elasticsearch query error for ES 7.7. !32813
-- Display epic issues with null relative position. !33105
-- Fix description diff delete button not hidden after clicked. !33127
-- Fix Elasticsearch illegal_argument_exception when searching for large files. !33176
-- Support nuget dependencies in the API. !33389
-- Fix GraphQL query to fetch vulnerable projects of subgroups. !33410
-- Preserve order when applying scoped labels by title. !33420
-- Revert breaking changes to allow conan_sources.tgz and conan_export.tgz files in the Conan repository. !33435
-- Improve regex for geo auth keys checker. !33447
-- Fix confidentiality note on epic's comment field to display the correct warning text. !33486
-- Geo - Does not sync files on Object Storage when syncing object storage is enabled, but the Object Storage is disabled for the data type. !33561
-- Fix creating merge requests with approval rules. !33582
-- Specify group url in notification email. !33613
-- Fix column overlap on long texts. !33614
-- Display validation errors when issue link creation fails. !33638
-- Geo - Does not try to unlink file when it not possible to get the file path while cleaning orphaned registries. !33658
-- Tilt contribution analytics x-axis chart titles. !33692
-- Geo: Fix synchronization disabled on primary UI. !33760
-- Change the linkType argument for issueLinks query to enum. !33828
-- Allow admins to see project despite of ip restriction set on a group level. !34086
-- Return empty scans when head_pipeline is missing. !34193
-- Render security dashboard for projects without pipeline available. !34219
-- Include Epics in Roadmap whose parents are not part of Roadmap. !34243
-- Geo - Fix Gitlab::Geo::Replication::BaseTransfer for orphaned registries. !34292
-- Authorize access to view license scan reports. !34324
-- Fix errors when pushing with an expired license. !34458
-- Enable active class on group packages sidebar navigation items. !34518
-- Fix tooltip on vulnerability issue in security dashboard. !34560
-- Fix issue with displaying Code Owner error messages in the UI. !34600
-- Clear hard failure when updating mirror via UI. !34614
-- Fix column styling in the vulnerability list. !34619
-- Fix creating/updating issues with epic_iid parameter on API. !34641
-- Fix alignment of analytics dropdowns. !34721
-- Allow auditor user to access project private features. !34794
-- Refresh vulnerability state and timestamp when changed by another user. !34837
-- Remove SELECT N+1 on software license policies. !34866
-- Remove correct feature flag strategy when removing strategy that is not persisted. !34889
-- Geo - Fix repositories deletion after project removal. !34963
-- Remove spacing interval between soft deleted projects. !35046
-- Geo - Does not sync expired job artifacts. !35082
-- Fix passing date params in VSA Summary request. !35152
-- Fixes a bug that would prevent the dependencies list from rendering for user that aren't authorized to see the vulnerabilities. !35171
-- Fix failing filtered search when re-submitting epic tokens. !35205
-- Fix visual regression for MR approve button. !35213
-- Forbid deleting a feature flag user list associated with a strategy. !35275
-- Geo: Fix incorrect Package File progress bar total count. !35294
-- Fix display of IP addresses in audit logs. !35356
-- Fix character escaping on approvals summary. !35564
-- Change required value for user callout props. !35620
-- Fix alignment for the project manager in the security dashboard. !35665
-- Geo - Does not sync LFS objects from fork networks. !35692
-- Fix usage graph not exceeding 100%. !35758
-- Fix pagination on Group Audit Events. !35767
-- Always show delete button on feature flag strategies. !35786
-- Display occurrences in Pipeline Security view when scanner information is missing. !35795
-- The conan package presenter will now only read conan packages. !35971
-- Recalculate CI extra minutes when monthly minutes default to nil. !36046
-- Fix overlapping identifer string. !36108
-- Fix 404 errors when "No epic" selected. !36137
-- Fix overflow of Identifier content on pipeline's Security tab. !36159
-- Fix zero-downtime reindexing docs count. !36173
-- Fix avatar popover not appearing for delayed data. !36254
-- Fix bug with IndexStatus not being set on indexing project. !36266
-- Always run the stop_dast_environment. !36372
-- Fix passing filter params to VSA time summary queries. !36441
-- Show error when attempting to delete feature flag user list that is in use. !36487
-- Geo: Fix Attachments and Job artifacts showing "Synchronization disabled". !36492
-- Change default vendor name to GitLab if not defined in the security schema. !36519
-- Fix difference between button sizes in the instance level security dashboard. !36668
-- Fix BulkIndexer flush returning nil values after failure. !36716
-- Always sort Elasticsearch searches by relevance not updated_at. !36774
-- Do not render export button when instance level security dashbaord is uninitialized. !36843
-- Geo - Fix Button Icon Alignment. !36867
-- Correct SystemCheck name for Elasticsearch. !36903
-- Fallback to `created_at` when `merged_at` is missing in Insights charts. !36930
-- Geo - Update version errors. !36984
-- Present only issues visible to user in Vulnerabilitiy Issue Links API. !36987
-- Fix: Geo file downloads can block Sidekiq threads.
-- Create issue from vulnerability has link to branch.
-- Allow to remove subepics when user downgrades its license.
-
-### Changed (73 changes)
-
-- Update header for security config page and change to GlTable. !31471
-- Display expiring subscription banner on more pages. !31497
-- Remove license management from CI/CD settings. !31553
-- Elasticsearch integration started using aliases instead of using indices directly. !32107
-- Geo Form Validations. !32263
-- Move Group-level IP address restriction feature to GitLab Premium. !32396
-- Update Compliance Dashboard to use a table layout. !32440
-- Add link to Node URL. !32471
-- Display Project and Subgroup milestones on Roadmap. !32496
-- Enable CI Minutes-related Feature Flags by default. !32581
-- Remove partial word matching from code search. !32771
-- Add authentication information to usage ping. !32790
-- Add tooltip with description to unknown severity badge icon. !33131
-- Update group audit events to use the new searchable table. !33305
-- Improve the clarity of the MR approvals tooltip UI. !33329
-- Dont display subscription banner if auto_renew nil. !33422
-- Change approved to merged in Contribution Analytics. !33535
-- Geo: Add rake task to check replication status. !33834
-- Changes the displayed summary text in security reports in merge requests. !33857
-- Update merge train settings checkbox text. !34073
-- Update project audit events to use the new searchable table. !34176
-- Analytics Insights page: Load charts individually, instead of waiting for all data to load before displaying the page. !34290
-- Add polling to metrics widget. !34314
-- Added CI_HAS_OPEN_REQUIREMENTS environment variable. !34419
-- Add evidence and scanner fields to standalone vulnerability page. !34498
-- Geo Node Form - Redesign. !34561
-- Renamed Browser Performance Testing feature to be clearer, CI report now also shows unchanged values. !34634
-- Update the "show labels" toggle on boards to persist using localStorage. !34728
-- Omit already-trialed namespaces from trial select options. !34770
-- Render storage graph when there is a limit set. !34931
-- Back Project Severity Status component with GraphQL data. !35031
-- Make registry table as SSOT to verify Projects and Wikis. !35095
-- Add scanner type to vulnerability row. !35150
-- Switch to use default report name for license_scanning job. !35159
-- Ensure all newly paid groups are indexed. !35172
-- Return null in securityReportSummary when the report didn't run. !35218
-- Highlight expired SSH or PAT credentials in the credential inventory. !35229
-- Show revoked date in credentials inventory for personal access tokens. !35251
-- Add identifiers column to pipeline security tab. !35284
-- Make cluster health dashboard available to all self-hosted paid tiers users. !35333
-- Automatically enable Elasticsearch indexing with 'gitlab:elastic:index'. !35342
-- Update storage views to show snippets size. !35419
-- Add line number to SAST and Secret Detection. !35536
-- Change "Restrict membership by email" field from a comma separated list to the GitLab UI Token Selector component. !35543
-- Moves compliance framework to GitLab Premium. !35597
-- Add snippets_size to group usage statistics graph. !35608
-- Refactor empty states to reflect better messages. !35624
-- Update pipeline minute warning button style. !35675
-- Add identifier column to the project security dashoard. !35760
-- Use IP address from request on audit events. !35834
-- Expand Security & Compliance tab when viewing Vulnerabilities Details page. !35855
-- Change the index on project_id column of vulnerability_statistics table to be unique. !35861
-- Geo Settings Form - Redesign. !35879
-- Default new feature flag strategies to all users. !35883
-- Remove feature flag strategy help text from the UI. !35887
-- Update pipeline security tab filter label and docs. !35893
-- Introduce new messaging to include a 30 day grace period for subscription expiration. !35897
-- Create TODOs for merge train errors. !35951
-- Colorize security summaries in merge requests. !36035
-- Add the scan vendor into the scanner column of the vulnerability list. !36145
-- Provide CI data to the security configuration page to enable SAST job. !36225
-- Change "Restrict access by IP address" field from a comma separated list to the GitLab UI Token Selector component. !36240
-- Allow searching word tokens with letters, numbers and underscores in advanced global search. !36255
-- Count health status only for opened issues. !36359
-- Allow to link vulnerability with issues from other projects. !36410
-- Add "Manage" column and tweak "Status" wording in the Security Configuration page. !36432
-- Update Project deletion text based on deletion mode. !36461
-- Add Prometheus Metrics for Index Pause Sidekiq Queue. !36473
-- Autocomplete confidential only epics & issues. !36687
-- Add scanner vendor to pipeline scanner column. !36764
-- Rename Strategies to Focus on Affected Users. !36833
-- Include Elasticsearch query params in Performance Bar. !36899
-- add gl-coverage-fuzzing-report.json to artifacts. !37110
-
-### Performance (25 changes)
-
-- Fix N+1 queries for Elastic Web Search projects scope. !30346
-- Fix N+1 queries for Elastic Search merge_requests scope. !30546
-- Improve performance of Advanced Search API (Issues scope) by preloading more associations. !30778
-- Update index_ci_builds_on_name_and_security_type_eq_ci_build index to support secret-detection. !31785
-- Fix N+1 queries for Elastic Search projects scope. !32688
-- Fix N+1 queries for Elastic Search milestones scope. !33327
-- Geo - Make registry table SSOT for LFS objects. !33432
-- Harden operations_dashboard_default_dashboard usage query. !33952
-- Harden users_created usage data queries. !33956
-- Harden security ci build job queries. !33966
-- Optimize queries in MergeRequestsComplianceFinder. !34482
-- Save composer.json to package metadata. !34494
-- Geo: Make registry table SSOT for job artifacts. !34590
-- Optimize permission checking when finding subgroup epics. !35061
-- Show count of all epics on group page no matter if user can see them or not. !35129
-- Speed up Advanced global search regex for file path segments. !35292
-- Optimize issues_with_health_status usage ping counter. !35298
-- Fix N+1 queries for Elastic Search commits scope. !35449
-- Don't index the same project in Elasticsearch in parallel. !35842
-- Geo: Make registry table SSOT for uploads. !35921
-- Avoid N+1 of group associations in Search. !36544
-- Prevent 2nd Elasticsearch query for project searches. !36672
-- Fix N+1 in the RootController#index. !36805
-- Make Registry table SSOT for projects and wikis. !36901
-- Make Registry table SSOT for designs. !36999
-
-### Added (133 changes, 5 of them are from the community)
-
-- Add list limit metric to API. !27324
-- Implement Go module proxy MVC (package manager for Go). !27746 (Ethan Reesor)
-- Improve Vulnerability Management with Standalone Vulnerabilities. !28212
-- Add viewer and linker for go.mod and go.sum. !28262 (Ethan Reesor @firelizzard)
-- Add usage statistics for modsecurity total packets/anomalous packets. !28535
-- Keep artifacts referenced by release evidence. !29350
-- Add periodic worker for collecting network policy usage. !30328
-- REST API membership responses for group owner enqueries include group managed account emails. !30584
-- Add table to Issues Analytics. !30603
-- Add ability to pause and resume Elasticsearch indexing. !30621
-- Show the status of stand-alone secrets analyzer on the configuration page. !31167
-- Support transferring and displaying image uploads on Status Page. !31269
-- Add Pipeline.securityReportSummary to GraphQL. !31550
-- Create test reports table. !31643
-- Show usage graph for each storage type. !31649
-- Add requirements filtering on author username and search by title. !31857
-- Add ability to download patch from vulnerability page. !32000
-- Add callout for user count threshold. !32404
-- Make group/namespace name in email a link to group overview page. !32461
-- Add api endpoint to retrieve resource weight events. !32542
-- Add ability to select Epic while creating a New Issue. !32572
-- Expose test reports on GraphQL. !32599
-- Allow approval rules to be reset to project defaults. !32657
-- Save setting for auto-fix feature. !32690
-- Geo - Make Geo::RegistryConsistencyWorker clean up unused registries. !32695
-- Add new epic creation page. !32701
-- Add policy for auto_fix. !32783
-- Send email notifications on Issue Iteration change. !32817
-- Add support for bulk editing health status and epic on issues. !32875
-- Add quick actions for iterations in issues. !32904
-- Add validation to maven package version. !32925 (Bola Ahmed Buari)
-- Add Elasticsearch to Sidekiq ServerMetrics. !32937
-- Added CI parser for requirements reports. !33031
-- Add state events to burnup chart data. !33048
-- Introduce `userNotesCount` field for VulnerabilityType on GraphQL API. !33058
-- Bulk edit health status. !33065
-- Add project audit events API. !33155 (Julien Millau)
-- Introduce `issueLinks` field for VulnerabilityType on GraphQL API. !33173
-- Add Elasticsearch metrics in Rack middleware. !33233
-- Adds NuGet project and license URL to the package details page. !33268
-- Internationalize templates titles. !33271
-- Adds a new Dependencies tab for NuGet packages on the package details page. !33303
-- Support AWS IAM role for ECS tasks in Elasticsearch client. !33456
-- Allow to specify multiple domains when restricting group membership by email domain. !33498
-- Add MR approval stats to group contribution analytics. !33601
-- Create sticky section in security dashboard layout. !33651
-- Add Network Policy Management to the Threat Monitoring page. !33667
-- Show secret_detection in report types. !33682
-- Adds NuGet package icon to package details page. !33701
-- Allow to specify `period_field` in Insights config. !33753
-- Ability to make PAT expiration optional in self managed instances. !33783
-- Add secret detection for GraphQL API. !33797
-- Show test report status badge on Requirements list. !33848
-- Pin selection summary/list header to the page top. !33875
-- Persist user preferences for boards. !33892
-- Add compliance frameworks to application settings table. !33923
-- Fixes inconsistent package title icon colors. !33933
-- Retry failed vulnerability export background jobs. !33986
-- Geo Package Files UI. !34004
-- Add report artifacts' links to release evidence. !34058
-- Add cluster reindexing feature to our ES integration. !34069
-- Add in-app notification for Personal Access Token expiry. !34101
-- Add "New epic" button within epic page. !34109
-- Add MR note to standalone vulnerability page. !34146
-- Show issue link on security dashboard when vulnerability has an issue. !34157
-- Persist individual requirement report results to test report. !34162
-- Geo Package Files - Sync Counts. !34205
-- Upgrade to `license_scanning` report v2.1. !34224
-- Add group wiki REST API. !34232
-- Epic bulk edit. !34256
-- Display Saved User Lists by Feature Flags. !34294
-- Add PHP Composer Package Support. !34339 (Jochen Roth @ochorocho, Giorgenes Gelatti)
-- Allow Hiding/Collapsing of Milestone header on Roadmap. !34357
-- Add csv export button to group security dashboard. !34374
-- Prevent MR from merging if denied licenses are found. !34413
-- Allow Users to Delete User Lists. !34425
-- Alert Users That Lists Are Modified By API Only. !34559
-- Add ability to view tokens without expiry enforcement. !34570
-- Add support for gl-coverage-fuzzing-report.json and security dashboard parsing. !34648
-- Geo: Enable Package File replication. !34702
-- Add compliance_frameworks list to project API. !34709
-- Add scanner name and identifiers to VulnerabilityType. !34766
-- Add request/response to standalone vulnerability page. !34811
-- Add scanner filter in Vulnerability GraphQL API. !34824
-- Add Project.complianceFrameworks field to GraphQL schema. !34838
-- Set checkboxes to be on by defualt for list. !34893
-- Add coverage fuzzing CI template. !34984
-- Add vendor to Vulnerability Scanners. !35004
-- Admin UI change to trigger Elasticsearch in-cluster re-indexing. !35024
-- Add vulnerability scanner query to GraphQL API. !35109
-- Enable new version feature flags by default. !35192
-- Add the MR author to MR's list on the compliance dashboard. !35206
-- Add storage_size_limit to plan_limits table. !35219
-- Add parsing Vendor name from Security Reports. !35222
-- Add project count with overridden approval rules in merge request to usage ping. !35224
-- Link documentation from GitLab for Jira app. !35227
-- Add license approval rule section and enable feature by default. !35246
-- Add Namespace API to set additionally purchased storage. !35257
-- Added MR Load Performance Testing feature. !35260
-- Add toggle to sort epic activity feed. !35302
-- Show User List Details. !35369
-- Let users modify feature flag user lists. !35373
-- Update vulnerabilities and findings when report occurrences are updated. !35374
-- Add Maintenance mode application settings fields. !35376
-- Add running out of minutes warning to CI job pages. !35622
-- Add scanned resources to security report. !35695
-- Display comment icon on vulnerability list in Security Dashboard. !35863
-- Allow merge when `License-Check` approve denied policies. !35885
-- Add DAST URL MR Widget modal. !35945
-- Return ID of newly created vulnerability issue link in API. !35947
-- Add NULL value scannedResourcesCsvUrl to securityReportSummary. !35949
-- Allow users to download the DAST scanned resources for a pipeline as a CSV. !36019
-- Add security scanner alerts to project to project security dashboard. !36030
-- Create GraphQL query to extract analyzers information. !36153
-- Expose Vendor in Scanner in Vulnerability Findings API. !36184
-- Add MVC for Opsgenie integration. !36199
-- Update Usage Ping data to track Merge Requests with added rules. !36222
-- Add filtering by scanner ID in Vulnerability Occurrences REST API. !36241
-- Allow creating confidential epics. !36271
-- Audit changes to project approval groups. !36393
-- Expose temporary storage increase end date in api. !36495
-- Add search history support for Requirements. !36554
-- Add related issues widget to feature flags. !36617
-- Setup group level Value Stream DB table. !36658
-- Enforce presence of Value Stream when creating a stage. !36661
-- Add ability to download fuzzing artifacts from pipeline page. !36676
-- Scope instance-level MR settings to compliance-labeled projects. !36685
-- Include ancestors in Iteration query. !36766
-- Add button to Security Configuration page to enable SAST, and Auto DevOps prompt. !36796
-- Add scanned_resources CSV path to Security Report Summary. !36810
-- Add MR approval status to the MR compliance entity. !36824
-- Enables Iterations by default. !36873
-- Update Iteration status automatically. !36880
-
-### Other (18 changes, 2 of them are from the community)
-
-- Add license ID to license view. !19113
-- Update deprecated Vue 3 slot syntax in ee/app/assets/javascripts/vue_shared/security_reports/components/modal.vue. !31966 (Gilang Gumilar)
-- Added DB index on confidential epics column. !32443
-- Allow ci minutes reset service to continue in case of failure. !32867
-- Remove unused index for vulnerabiliy confidence levels. !33149
-- Update vulnerabilities badge design in Dependency List. !33417
-- Add geo_primary_replication_events to usage data. !33424
-- Add new status page attributes to usage ping. !33790
-- Remove optimized_elasticsearch_indexes_project feature flag. !33965
-- Relocate Go models. !34338 (Ethan Reesor (@firelizzard))
-- Limit child epics and epic issues page size. !34553
-- Correct typo in "single sign-on", per specs. !35258
-- Update UI links in EE features. !35489
-- Replace .html with .md in documentation links. !35864
-- Update more UI links in EE features. !36177
-- Apply label color to shared Analytics label token. !36205
-- Alert Opsgenie integration errors. !36648
-- Resolve duplicate use of shorcuts-tree. !36732
-
-
-## 13.1.10 (2020-09-02)
-
-- No changes.
-
-## 13.1.9 (2020-09-02)
-
-### Security (2 changes)
-
-- Sanitize vulnerability history comment.
-- Fix displaying epics visibility in issue sidebar.
-
-
-## 13.1.8 (2020-08-18)
-
-- No changes.
-
-## 13.1.7 (2020-08-17)
-
-- No changes.
-
-## 13.1.6 (2020-08-05)
-
-- No changes.
-
-## 13.1.5 (2020-07-23)
-
-### Fixed (2 changes)
-
-- Geo: Fix Attachments and Job artifacts showing "Synchronization disabled". !36492
-- Fix: Geo file downloads can block Sidekiq threads.
-
-
-## 13.1.3 (2020-07-06)
-
-### Security (1 change)
-
-- Maven packages upload endpoint is now properly using the uploaded file set by middleware.
-
-
-## 13.1.2 (2020-07-01)
-
-### Security (2 changes)
-
-- Fixed pypi package API XSS.
-- Fix project authorizations for instance security dashboard.
-
-
-## 13.1.1 (2020-06-23)
-
-- No changes.
-
-## 13.1.0 (2020-06-22)
-
-### Security (1 change)
-
-- Ensure passwords and access tokens don't appear in SCIM errors.
-
-### Removed (2 changes)
-
-- Revert Add scanner name. !33442
-- Stop recording connection pool metrics for load balancing hosts. !33749
-
-### Fixed (35 changes, 2 of them are from the community)
-
-- Stop recording JSON parser errors due to third party license scanning integrations. !26944
-- Improve Requirements Management empty state. !30716 (Marcin Sedlak-Jakubowski)
-- Display warning for issues moved from service desk on frontend. !31803
-- Add truncation for the environment dropdown. !32267
-- Add negated params filter to epics search. !32296
-- Clean up serialized objects in audit_events. !32434
-- Prevent last Group Managed Account owner with access from accidental unlinking. !32473
-- Fix issues with editing epic on Boards sidebar. !32503 (Eulyeon Ko)
-- Dependency List shows only vulnerabilities from Gemnasium analyzer instead of all Dependency Scanning reports. !32560
-- Ensure users can unlink Group SAML when the group has SAML disabled. !32655
-- Fix Elasticsearch query error for ES 7.7. !32813
-- Display epic issues with null relative position. !33105
-- Fix description diff delete button not hidden after clicked. !33127
-- Fix Elasticsearch illegal_argument_exception when searching for large files. !33176
-- Support nuget dependencies in the API. !33389
-- Fix GraphQL query to fetch vulnerable projects of subgroups. !33410
-- Preserve order when applying scoped labels by title. !33420
-- Revert breaking changes to allow conan_sources.tgz and conan_export.tgz files in the Conan repository. !33435
-- Improve regex for geo auth keys checker. !33447
-- Fix confidentiality note on epic's comment field to display the correct warning text. !33486
-- Geo - Does not sync files on Object Storage when syncing object storage is enabled, but the Object Storage is disabled for the data type. !33561
-- Fix creating merge requests with approval rules. !33582
-- Specify group url in notification email. !33613
-- Fix column overlap on long texts. !33614
-- Geo - Does not try to unlink file when it not possible to get the file path while cleaning orphaned registries. !33658
-- Geo: Fix synchronization disabled on primary UI. !33760
-- Change the linkType argument for issueLinks query to enum. !33828
-- Allow admins to see project despite of ip restriction set on a group level. !34086
-- Return empty scans when head_pipeline is missing. !34193
-- Render security dashboard for projects without pipeline available. !34219
-- Include Epics in Roadmap whose parents are not part of Roadmap. !34243
-- Geo - Fix Gitlab::Geo::Replication::BaseTransfer for orphaned registries. !34292
-- Fix errors when pushing with an expired license. !34458
-- Enable active class on group packages sidebar navigation items. !34518
-- Fix creating/updating issues with epic_iid parameter on API. !34641
-
-### Changed (18 changes)
-
-- Update header for security config page and change to GlTable. !31471
-- Display expiring subscription banner on more pages. !31497
-- Remove license management from CI/CD settings. !31553
-- Elasticsearch integration started using aliases instead of using indices directly. !32107
-- Geo Form Validations. !32263
-- Move Group-level IP address restriction feature to GitLab Premium. !32396
-- Add link to Node URL. !32471
-- Display Project and Subgroup milestones on Roadmap. !32496
-- Enable CI Minutes-related Feature Flags by default. !32581
-- Remove partial word matching from code search. !32771
-- Add authentication information to usage ping. !32790
-- Add tooltip with description to unknown severity badge icon. !33131
-- Improve the clarity of the MR approvals tooltip UI. !33329
-- Change approved to merged in Contribution Analytics. !33535
-- Update merge train settings checkbox text. !34073
-- Analytics Insights page: Load charts individually, instead of waiting for all data to load before displaying the page. !34290
-- Add polling to metrics widget. !34314
-- Added CI_HAS_OPEN_REQUIREMENTS environment variable. !34419
-
-### Performance (11 changes)
-
-- Fix N+1 queries for Elastic Web Search projects scope. !30346
-- Fix N+1 queries for Elastic Search merge_requests scope. !30546
-- Improve performance of Advanced Search API (Issues scope) by preloading more associations. !30778
-- Update index_ci_builds_on_name_and_security_type_eq_ci_build index to support secret-detection. !31785
-- Fix N+1 queries for Elastic Search projects scope. !32688
-- Fix N+1 queries for Elastic Search milestones scope. !33327
-- Geo - Make registry table SSOT for LFS objects. !33432
-- Harden operations_dashboard_default_dashboard usage query. !33952
-- Harden users_created usage data queries. !33956
-- Harden security ci build job queries. !33966
-- Save composer.json to package metadata. !34494
-
-### Added (54 changes, 3 of them are from the community)
-
-- Add list limit metric to API. !27324
-- Implement Go module proxy MVC (package manager for Go). !27746 (Ethan Reesor)
-- Improve Vulnerability Management with Standalone Vulnerabilities. !28212
-- Add viewer and linker for go.mod and go.sum. !28262 (Ethan Reesor @firelizzard)
-- Add usage statistics for modsecurity total packets/anomalous packets. !28535
-- REST API membership responses for group owner enqueries include group managed account emails. !30584
-- Add table to Issues Analytics. !30603
-- Add ability to pause and resume Elasticsearch indexing. !30621
-- Show the status of stand-alone secrets analyzer on the configuration page. !31167
-- Support transferring and displaying image uploads on Status Page. !31269
-- Add Pipeline.securityReportSummary to GraphQL. !31550
-- Create test reports table. !31643
-- Show usage graph for each storage type. !31649
-- Add requirements filtering on author username and search by title. !31857
-- Add ability to download patch from vulnerability page. !32000
-- Add callout for user count threshold. !32404
-- Make group/namespace name in email a link to group overview page. !32461
-- Add ability to select Epic while creating a New Issue. !32572
-- Expose test reports on GraphQL. !32599
-- Allow approval rules to be reset to project defaults. !32657
-- Save setting for auto-fix feature. !32690
-- Geo - Make Geo::RegistryConsistencyWorker clean up unused registries. !32695
-- Add policy for auto_fix. !32783
-- Send email notifications on Issue Iteration change. !32817
-- Add support for bulk editing health status and epic on issues. !32875
-- Add quick actions for iterations in issues. !32904
-- Add Elasticsearch to Sidekiq ServerMetrics. !32937
-- Added CI parser for requirements reports. !33031
-- Add state events to burnup chart data. !33048
-- Introduce `userNotesCount` field for VulnerabilityType on GraphQL API. !33058
-- Add project audit events API. !33155 (Julien Millau)
-- Introduce `issueLinks` field for VulnerabilityType on GraphQL API. !33173
-- Add Elasticsearch metrics in Rack middleware. !33233
-- Adds NuGet project and license URL to the package details page. !33268
-- Adds a new Dependencies tab for NuGet packages on the package details page. !33303
-- Allow to specify multiple domains when restricting group membership by email domain. !33498
-- Add MR approval stats to group contribution analytics. !33601
-- Create sticky section in security dashboard layout. !33651
-- Add Network Policy Management to the Threat Monitoring page. !33667
-- Show secret_detection in report types. !33682
-- Adds NuGet package icon to package details page. !33701
-- Ability to make PAT expiration optional in self managed instances. !33783
-- Add secret detection for GraphQL API. !33797
-- Show test report status badge on Requirements list. !33848
-- Persist user preferences for boards. !33892
-- Fixes inconsistent package title icon colors. !33933
-- Retry failed vulnerability export background jobs. !33986
-- Add MR note to standalone vulnerability page. !34146
-- Show issue link on security dashboard when vulnerability has an issue. !34157
-- Geo Package Files - Sync Counts. !34205
-- Upgrade to `license_scanning` report v2.1. !34224
-- Display Saved User Lists by Feature Flags. !34294
-- Add csv export button to group security dashboard. !34374
-- Alert Users That Lists Are Modified By API Only. !34559
-
-### Other (9 changes, 2 of them are from the community)
-
-- Update deprecated Vue 3 slot syntax in ee/app/assets/javascripts/vue_shared/security_reports/components/modal.vue. !31966 (Gilang Gumilar)
-- Added DB index on confidential epics column. !32443
-- Allow ci minutes reset service to continue in case of failure. !32867
-- Remove unused index for vulnerabiliy confidence levels. !33149
-- Update vulnerabilities badge design in Dependency List. !33417
-- Add geo_primary_replication_events to usage data. !33424
-- Add new status page attributes to usage ping. !33790
-- Remove optimized_elasticsearch_indexes_project feature flag. !33965
-- Relocate Go models. !34338 (Ethan Reesor (@firelizzard))
-
-
-## 13.0.14 (2020-08-18)
-
-- No changes.
-
-## 13.0.13 (2020-08-17)
-
-- No changes.
-
-## 13.0.12 (2020-08-05)
-
-- No changes.
-
-## 13.0.11 (2020-08-05)
-
-This version has been skipped due to packaging problems.
-
-## 13.0.10 (2020-07-09)
-
-### Fixed (1 change)
-
-- Geo - Does not sync LFS objects from fork networks. !36202
-
-
-## 13.0.9 (2020-07-06)
-
-### Security (1 change)
-
-- Maven packages upload endpoint is now properly using the uploaded file set by middleware.
-
-
-## 13.0.8 (2020-07-01)
-
-### Security (2 changes)
-
-- Fixed pypi package API XSS.
-- Fix project authorizations for instance security dashboard.
-
-
-## 13.0.7 (2020-06-25)
-
-- No changes.
-
-## 13.0.6 (2020-06-10)
-
-### Security (1 change)
-
-- Do not set fallback mirror user.
-
-
-## 13.0.4 (2020-06-03)
-
-- No changes.
-
-## 13.0.3 (2020-05-29)
-
-- No changes.
-
-## 13.0.1 (2020-05-27)
-
-### Security (3 changes)
-
-- Change the mirror user along with pull mirror settings.
-- Allow only users with a verified email to be member of a group when the group has restricted membership based on email domain.
-- Do not auto-confirm email in Trial registration.
-
-
-## 13.0.0 (2020-05-22)
-
-### Security (1 change)
-
-- Apply CODEOWNERS validations to web requests. !31283
-
-### Removed (1 change)
-
-- Remove deprecated route for serving full-size Design Management design files. !30917
-
-### Fixed (77 changes, 5 of them are from the community)
-
-- Enforce CODEOWNER rules for renaming of files. !26513
-- Preserve date filters in value stream and productivity analytics. !27102
-- Fix 404s when clicking links in full code quality report. !27138
-- Remove Admin > Settings > Templates link from sidenav when insufficient license. !27172
-- Geo - Does not write to DB when using 2FA via OTP for admin mode. !27450
-- Use group parent for subgroup labels requests. !27564
-- Hidden stages should not appear in duration chart. !27568
-- Maven packages API allows HEAD requests to package files when using Amazon S3 as a object storage backend. !27612
-- Prevent renaming a locked file. !27623
-- Use absolute URLs to ensure links to the source of SAST vulnerabilities resolve. !27747
-- Prevent issues from being promoted twice. !27837
-- Display error message in custom metric form validation when prometheus URL is blocked. !27863
-- Append inapplicable rules when creating MR. !27886
-- Fix passing project_ids to Value Stream Analytics. !27895
-- Support inapplicable rules when creating MR. !27971
-- Fix vsa label dropdown limit. !28073
-- Fix analytics group and project loading spinners styling. !28094
-- Include subgroups when populating group security dashboard. !28154
-- Hide ability to create alert on custom metrics dashboard. !28180
-- Fix epics not preserving their state on Group Import. !28203
-- Fix invalid scoped label documentation URL when rendered in Markdown. !28268
-- Fix create epic in tree after selecting Add issue. !28300
-- Fix HTTP status code for Todos API when an epic cannot be found. !28310
-- Allow SCIM to create an identity for an existing user. !28379
-- Perform Geo actions on projects only. !28421
-- Allow unsetting "Required pipeline configuration" for CI/CD. !28432
-- Geo: Self-service framework does not associate geo_event_log row to geo_event. !28457
-- Return overridden property in API response. !28521
-- Fix billed users id and count from shared group. !28645
-- Hide Request subtitle when Threat Monitoring has no data. !28760
-- Fix repository settings page loading issues for some imported projects with pull mirroring. !28879
-- Fix group_plan in group member data for system hooks. !29013
-- Fix imageLoading bug when scrolling back to design. !29223
-- Fix Elasticsearch rollout stale cache bug. !29233
-- Resolve Creating an annotation on the design that is bigger that screen size is broken. !29351
-- Fix incorrect dropdown styling for embedded metric charts. !29380 (Gilang Gumilar)
-- Close all other sidebars when the boards list settings sidebar is opened. !29456
-- Fix incorrect repositioning of design comment pins when mouse leaves viewport. !29464
-- Fix board edit weight values 0 or None. !29606
-- Fix lack-of padding on design view notes sidebar. !29654
-- Remove duplicate QA attribute for burndown charts. !29719
-- Add validation to Conan recipe that conforms with Conan.io. !29739 (Bola Ahmed Buari)
-- Fix caching performance and some cache bugs with elasticsearch enabled check. !29751
-- Fix wiki indexing for imported projects. !29952
-- Fix filter todos by design. !29972 (Gilang Gumilar)
-- Fix the error message on Security & Operations dashboard by fixing the API response. !30047
-- Fix showing New requirement button to unauthenticated user. !30085 (Gilang Gumilar)
-- Ignore invalid license_scanning reports. !30114
-- Sort dependency scanning reports before merging. !30190
-- Fix typos on Threat Management page. !30218
-- Fix infinte loading spinner when visiting non-existent design. !30263
-- Fix third party advisory links. !30271
-- Fix dismissal state not being updated. !30503
-- Add sort and order for policy violations. !30568
-- If a parent group enforces SAML SSO, when adding a member to that group, its subgroup or its project the autocomplete shows only users who have identity with the SAML provider of the parent group. !30607
-- Geo: Fix empty synchronisation status when nothing is synchronised. !30710
-- Don't hide Open/Closed Icon for Issue. !30819
-- No seat link sync for licenses without expiration. !30874
-- Fix project insights page when projects.only parameter is used. !30988
-- Fixes styling on vulnerability counts. !31076
-- Hide child epic icon on Roadmap for accounts without child epics support. !31250
-- Add license check for the 'send emails from Admin area' feature. !31434
-- Avoid saving author object in audit_events table. !31456
-- Fix 500 errors caused by globally searching for scopes which cannot be used without Elasticsearch. !31508
-- Show .Net license scan results as links. !31552
-- Fix incorrect notice text on insights page. !31570
-- Add license restriction to HealthStatus. !31571
-- Fix issues search to include the epic filter ANY. !31614
-- Reduce 413 errors when making bulk indexing requests to Elasticsearch. !31653
-- Fix CI minutes notification when unauthenticated. !31724
-- Add LFS workhorse upload path to allowed upload paths. !31794
-- Relax force pull mirror update restriction. !32075
-- Show correct last successful update timestamp. !32078
-- Fix missing dismissed_by field. !32147
-- Fix empty unit display of time metrics. !32388
-- Fixes file row commits not showing for certain projects.
-- Validates ElasticSearch URLs are valid HTTP(S) URLs. (mbergeron)
-
-### Deprecated (2 changes)
-
-- Document planned deprecation of 'marked_for_deletion_at' attribute in Projects API in GitLab 13.0. !28993
-- Document planned deprecation of 'projects' and 'shared_projects' attributes in Groups API in GitLab 13.0. !29113
-
-### Changed (64 changes, 1 of them is from the community)
-
-- Allow Value Stream Analytics custom stages to be manually ordered. !26074
-- Create more intuitive Popover information for Geo Node Sync Status. !27033
-- Make "Value Stream" the default page that appears when clicking the group-level "Analytics" sidebar item. !27277 (Gilang Gumilar)
-- Update renewal banner messaging and styling. !27530
-- Hide company question for new account signups. !27563
-- Create more intuitive Verification Popover for Geo Node Syncs. !27624
-- Disabled Primary Node Removal button when removal is not allowed. !27836
-- Move issue/apic hierarchy items to a tooltip. !27969
-- Update copy for Adding Licenses. !27970
-- Sort events alphabetically on Value Stream Analytics Stage form. !28005
-- Return 202 Accepted status code when fetching incompleted Vulnerability Export from API. !28314
-- Use dropdown to change health status. !28547
-- Change GraphQL arguments in group.timelogs query to use startTime and endTime. !28560
-- Enable issue board focus mode for all tiers on Enterprise Edition. !28597
-- Clarify detected license results in merge request: Group licenses by status. !28631
-- Deleting packages from a deeper paginated page will no longer return you to the first page. !28638
-- Sort Dependency List by severity by default. !28654
-- Make Dependency List pipeline subheading more succinct. !28665
-- Enable export issues feature for all tiers on Enterprise Edition. !28675
-- Remove scoped labels documentation link. !28701
-- Change summary text copy for license-compliance MR widget. !28732
-- Update License Compliance docs url. !28853
-- Differentiate between empty and disabled Geo sync. !28963
-- Move deploy keys section back to repository settings. !29184
-- Hide Pipeline Security tab from reporters. !29334
-- Make Geo Selective Sync More Clear from the Node Details view. !29596
-- Fix checkbox alignment and responsive word-break for secure table rows. !29659
-- Add tracking to Subscription banner. !29735
-- SSO Enforcement requires sign in within 7 days. !29786
-- Geo - Better Out of Date Errors. !29800
-- Replace non-standard term in Issues Analytics chart labels. !29810
-- Change default icon for neutral-state items in merge request widget. !30008
-- Remove tasks_by_type_chart feature flag. !30034
-- Modify existing out of runner minutes banner to handle 3 different warning levels. !30088
-- Resolve Allow multiple screenshots to be uploaded in copy paste. !30152
-- Improve the running out of CI minutes email notification. !30188
-- Change 'Whats New' dropdown item url. !30198
-- Link Buy additional minutes button straight to funnel. !30248
-- Improve design management image loads by avoiding refetching image urls for designs. !30280
-- Change logic to find the current license. !30296
-- Link license management button to license compliance policies section. !30344
-- Sort license policy violations first. !30564
-- Change UI requirements route from project/requirements to project/requirements_management/requirements. !30583
-- Change default concurrency of merge trains to twenty. !30599
-- Clarify security report findings in merge request widget. !30688
-- Consolidate epic tree buttons. !30816
-- Increase ProcessBookkeepingService batch to 10_000. !30817
-- Modify GraphQL mutation for adding projects to Instance Security Dashboard to support only single project id. !30865
-- Add subscription banner to group/subgroup pages. !30883
-- Geo - Add Empty States. !31010
-- Remove customizable_cycle_analytics feature flag. !31189
-- Geo - Bring settings UI in-line with other Geo Views. !31257
-- Cards in Epic Tree have two lines of content. !31300
-- Add request information to vulnerability-detail modal. !31422
-- Move registrations progress bar to a generic place and make it configurable. !31484
-- Reduce epic health status noise in epic tree. !31555
-- Modify GraphQL mutation for removing project from Instance Security Dashboard to use id instead of projectId. !31575
-- Enable onboarding issues experiment on Welcome screen. !31656
-- Expring Subscription banner has plan specific text. !31777
-- Geo - Better visualize type of node on form. !31784
-- Improve tooltips for compliance framework badges. !31883
-- Allow developers to see ci minutes notifications. !31937
-- Log Audit Event when Group SAML adds a user to a group. !32333
-- Audit logs now uses filtered search.
-
-### Performance (13 changes, 1 of them is from the community)
-
-- Geo - Improve query to retrieve Job Artifacts, LFS Objects, and Uploads with files stored locally. !24891
-- Geo - Use bulk insert to improve performance of RegistryBackfillService. !27720
-- Improve Group Security Dashboard performance. !27959
-- Fix N+1 queries in Audit Events controllers. !28399
-- Move Clusters Application CertManager to batch counting. !28771
-- Move Clusters Application Helm to batch counting. !28995
-- Move Clusters Application Ingress to batch counting. !28999
-- Move Clusters Application Knative to batch counting. !29003
-- Preload path locks for TreeSummary. !29949
-- Debounce pull mirror invocation. !30157
-- Advanced Search API: Eager load more issue associations to reduce N+1 queries. !30233
-- Make the ElasticCommitIndexer idempotent to enable job de-duplication. !31500 (mbergeron)
-- Use data-interchange format based on .ndjson for Project import and export. !31601
-
-### Added (129 changes, 13 of them are from the community)
-
-- Support setting threshold for browser performance degradation through CI config. !21824
-- Restrict page access when restricted level is public. !22522 (briankabiro)
-- Add ability to expand epics in roadmap. !23600
-- Prefer smaller image size for design cards in Design Management. !24828
-- Warn users when they close a blocked issue. !25089
-- Added setting to use a custom service desk email. !25240
-- Add ability to explore zoomed in designs via click-and-drag. !25405
-- Allow GMA groups to specify their own PAT expiry setting. !25963
-- Add vulnerabilities field to QueryType. !26348
-- On-demand Evidence creation. !26591
-- Add API endpoint for new members' count in Group Activity Analytics. !26601
-- Allow multiple root certificates for smartcard auth. !26812
-- Add scanned URL count and link to scanned resources in DAST reports. !26825
-- Add a button to export vulnerabilities in CSV format. !26838
-- Add #resolved_on_default_branch to Vulnerability. !26906
-- Migrate SAML to SCIM Identities. !26940
-- Expose smaller sized Design Management design images in GraphQL. !26947
-- Add Snowplow tracking for Container Registry events. !27001
-- Geo - Support git clone/pull operations for repositories that are not yet replicated. !27072
-- Add an indicator icon to issues on subepics when filtering by epic. !27212
-- Add a count of the scanned resources to Security::Scan. !27260
-- Track primary package file checksum counts. !27271
-- Anonymize GitLab user/group names on Status Detail Pages. !27273
-- Enable NetworkPolicy Statistics by default. !27365
-- Separate approval setting entities into own class files. !27423 (Rajendra Kadam)
-- Show custom 'media broken' icon for broken images in Design Management. !27460
-- Display loading spinner when Design Card images are loading. !27475
-- Updated link to Status Page docs. !27500
-- Adds support for storing notes for vulnerabilities. !27515
-- Add endpoints to fetch notes/discussions for vulnerability. !27585
-- Support PyPi package upload. !27632
-- Separate conan package entities into own class files. !27642 (Rajendra Kadam)
-- Separate model only entities into own class files. !27665 (Rajendra Kadam)
-- Add terraform report to merge request widget. !27700
-- Add a DB column to allow GMA groups to specify their PAT expiry setting. !27769
-- Separate user, project and entity helper modules into own class files. !27771 (Rajendra Kadam)
-- Add rake task for reindexing Elasticsearch. !27772
-- Separate group, member, group_detail and identity modules into own class files. !27797 (Rajendra Kadam)
-- Indicate whether the alert is firing. !27825
-- Support PyPi package installation. !27827
-- Separate code review, design and group modules into own class files. !27860 (Rajendra Kadam)
-- Add Health Status badge in Epic tree. !27869
-- Separate nuget package entities into own class files. !27898 (Rajendra Kadam)
-- Create issue link when creating issue from vulnerability. !27899
-- Geo: Proxy SSH git operations for repositories that are not yet replicated. !27994
-- Add pipeline statuses to Compliance Dashboard. !28001
-- Add Usage Ping For Status Page. !28002
-- Adds additional pipeline information to packages API result. !28040
-- Allow to save issue health status. !28146
-- Add a compliance framework setting to project. !28182
-- Add project template for HIPAA Audit Protocol. !28187
-- Create system note when health status is updated. !28232
-- Pre-populate prometheus alert modal. !28291 (Gilang Gumilar)
-- Usage ping for customized Value Stream Management stage count. !28308
-- Add evidence to vulnerability details. !28315
-- Added confidential column to epics table. !28428
-- Geo GraphQL API: Add geoNode at root. !28454
-- Refactor duplicate specs in ee user model. !28513 (Rajendra Kadam)
-- Refactor duplicate specs in ee group model. !28538 (Rajendra Kadam)
-- Lazy-loading design images with IntersectionObserver. !28555
-- Create group-level audit event for Group SAML SSO sign in. !28575
-- Renewal banner has auto-renew specific messaging. !28579
-- Automatically embed metrics in issues for alerts from manually configured Prometheus instances. !28622
-- Epic tree move child with drag and drop. !28629
-- Show the number of scanned resources in the DAST vulnerability report. !28718
-- Expose 'marked_for_deletion_on' attribute in Projects API. !28754
-- Show policy violations in license compliance. !28862
-- Migrate project snippets to the ghost user when the user is deleted. !28870 (George Thomas @thegeorgeous)
-- Provide instance level setting to enable or disable 'default branch protection' at the group level for group owners. !28997
-- Add spentAt field to TimelogType and deprecate date field. !29024
-- Add hierarchy depth to roadmaps. !29105
-- Add mutation to Dismiss Vulnerability GraphQL API. !29150
-- Add "whats new" item to help dropdown. !29183
-- Expose hasParent GraphQL field on epic. !29214
-- Display indicator to rule name in approval rules. !29315
-- Add status page url to setting form in UI. !29359
-- Enable Standalone Vulnerabilities feature for improving Vulnerability Management. !29431
-- Add `group_id` column into vulnerability_exports table. !29498
-- Enable creation on custom index with rake. !29598 (mbergeron)
-- Replace pipeline quota with usage quotas for user namespaces. !29806
-- Add GraphQL mutation to update limit metric settings on board lists. !29897
-- Adds PyPi installation instructions to package details page. !29935
-- Survey Responses landing page. !29951
-- Add limit metric to list type. !30028
-- Add GraphQL query for Instance Security Dashboard projects. !30064
-- Adds PyPi tab to the packages list page. !30078
-- Export an instance-level vulnerabilities report. !30079
-- Add GraphQL mutation for adding projects to Instance Security Dashboard. !30092
-- Add GraphQL mutation for removing projects from Instance Security Dashboard. !30100
-- Show specific success message when uploading a future license. !30161
-- Show all licenses and highlight current license in license history. !30172
-- Adds pipeline project name and link to package title. !30275
-- Enable expiring subscription banner. !30304
-- Handle subscription purchase flow via GitLab. !30324
-- Add Approved By in filtered MR search. !30335
-- Add autocompletion to Design View comment form. !30347
-- Add confidential flag in epic create. !30370
-- Add API endpoints to generate instance level security report exports. !30397
-- Add scanner name, version and URL to Vulnerability Modal. !30458
-- Introduce negative filters for code review analytics. !30506
-- Add NuGet dependencies extraction to the GitLab Packages Repository. !30618
-- Add vulnerability fields to GraphQL project, group, and global scope. !30663
-- Add vulnerability history to graphQL. !30674
-- Add package tags support to the GitLab NuGet Packages Repository. !30726
-- Add `Group Name` and `Project Name` into vulnerability export CSV file. !30755
-- Display banner to admins when there are users over license. !30813
-- Geo Replication View. !30890
-- Record impersonator information on audit event. !30970
-- Measure project import and export service execution. !30977
-- Adds package_name filter to group packages API. !30980
-- Add Nuget metadatum support in GitLab Packages. !30994
-- Show the You're running out of CI minutes warnings on relevant pages in GitLab. !31012
-- Add spinner to roadmap. !31080
-- Add standaloneVulnerabilitiesEnabled filter to group projects resolver for GraphQL. !31081
-- Add push rules configuration for groups - frontend. !31085
-- Add project import to group as audit event. !31103
-- Add Web IDE terminal usage counter. !31158
-- Add versions array to the package API payload. !31231
-- Rate limit the 'Send emails from Admin Area' feature. !31308
-- Add graphql endpoint for project packages list. !31344
-- Add project filter. !31444
-- Show specific content for future-dated licenses. !31463
-- Add lead time and cycle time to value stream analytics. !31559
-- Geo - Enable geo_file_registry_ssot_sync feature flag by default. !31671
-- Geo - Enable geo_job_artifact_registry_ssot_sync feature flag by default. !31672
-- Introduce a new API endpoint to generate group-level vulnerability exports. !31889
-- Add number of projects with compliance framework to usage ping. !31923
-- Adds versions tab and additional versions list to packages details page. !31940
-- Add link to customer portal from license dashboard.
-
-### Other (12 changes, 3 of them are from the community)
-
-- Add verification related fields to packages_package_files table. !25411
-- Refactor expected_paginated_array_response. !25500 (George Thomas @thegeorgeous)
-- Monitoring for Elasticsearch incremental updates buffer queue. !27384
-- Use warning icon for alert widget in monitoring dashboard. !27545
-- Improved tests by removing duplicated specs. !28525 (Leandro Silva)
-- Move service desk from Premium to Starter plan. !29980
-- Change license history wording. !30148
-- Make active_users param mandatory for SyncSeatLinkRequestWorker#perform. !30810
-- Track group wiki storage in DB. !31121
-- Replace undefined confidence with unknown severity for occurrences. !31200
-- Replace undefined confidence with unknown severity for vulnerabilities. !31593
-- Translate unauthenticated user string for Audit Event. !31856 (Sashi Kumar)
+## 13.12.0 through 13.0.0
+- See [changelogs/archive-13-ee.md](changelogs/archive-13-ee.md)
 ## 12.10.14 through 12.0.0

changelogs/archive-13-ee.md

+## 13.12.0 (2021-05-22)
+
+### Security (1 change)
+
+- Upgrade the GitLab Elasticsearch Indexer version to 2.10.0. !60690
+
+### Removed (1 change)
+
+- Remove docker-in-docker job from API Fuzzing CI template. !60054
+
+### Fixed (60 changes, 20 of them are from the community)
+
+- Eagerly associate DastSiteProfile and DastSiteValidation on create. !53800
+- Hide "Renew" button for trial subscription on group billing page. !55796 (Kev @KevSlashNull)
+- Fix Rails/SaveBang rubocop offenses in ee/spec/workers. !58070 (Abdul Wadood @abdulwd)
+- Fix Rails/SaveBang rubocop offenses in ee/spec/support. !58074 (Abdul Wadood @abdulwd)
+- Fix Rails/SaveBang rubocop offenses in ee/spec/mailers. !58097 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/support. !58292 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in todo_service_spec.rb. !58310 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/services/projects. !58330 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/services/dora. !58353 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/services/award_emojis. !58356 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/lib/gitlab/elastic. !58381 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/graphql/types. !58385 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/graphsql/mutations. !58390 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/features/issues. !58396 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/features/groups. !58398 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/features/dashboards. !58399 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/features/boards. !58401 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/controllers/projects. !58410 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/controllers/groups. !58412 (Abdul Wadood @abdulwd)
+- Support filtering by assignee wildcard in epic swimlanes. !59348
+- Fix minor UX issues with "group by" within iteration report. !59522
+- Fix creating an MR when a project approval rule has no approvers. !59671
+- Make the MergeReportsService more reliable. !59682
+- Create link to Threat Monitoring Alert for threat management alerts. !59724
+- Lock the order of the Search scope tabs. !59777
+- Provide fix for inconsistent blocking of sso-user git actions. !59872
+- Fix Swimlanes sticky headers. !59944
+- Add hide-collapsed class for elements under the else-if scope. !60021
+- Rename License#cloud? to License#cloud_license?. !60065
+- Fix the bug that DB multi-request stickiness doesn't stick as expected. !60246
+- Fix stage table loading with a deep linked stage. !60261
+- Stop checking repository check status on Geo secondary. !60323
+- Fix incorrect ordering of audit events on MR approval changes. !60508
+- Fix ArgumentError for bulk insert. !60543
+- Switch load_balancing_atomic_replica feature flag on by default. !60574
+- Fix badge variants in admin/users table. !60592
+- Resolve Geo: Secondaries are orphaning artifact files. !60644
+- Fix API elasticsearch settings update. !60740
+- Fix group-level "Projects with releases" stat when value is 0. !60752
+- Check if an issue is already linked to the same vulnerability before creating the issue link. !60753
+- Update lock timeout in ElasticCommitIndexerWorker. !60768
+- Prevent errors when promoting issues to epics. !60860
+- Refetch VSA stage data when filters change. !60991
+- Geo - Skip download of blobs with foreign layers. !61072
+- Return correct trial status in CI external pipeline validation. !61104
+- Fix trial registration terms message. !61162
+- Fix occasionally invisible burndown charts. !61335
+- Fix error caused by enforcing SSO-Only Authentication for Git Activity for PAT tokens. !61348
+- Fix dropdown not closing on status update. !61404
+- Geo - Fix replication for for empty projects. !61419
+- Display labels from sub groups and projects when using epics swimlanes. !61423
+- Display descendant projects of a group when creating issues in epic swimlanes. !61456
+- Fix broken threat alert issue link. !61705
+- Fix Rails/SaveBang Rubocop offenses for ee models. !61709 (Suraj Tripathi @surajtripathy07)
+- Fix sign-in when user has multiple group saml identities. !61717
+- Fix policy list drawer height. !61738
+- Fixed robocop offense for ee/spec/services/approval_rules/*. !61829 (Suraj Tripathi @surajtripathy07)
+- Remove unncessary group SAML identity assignment. !61921
+- Check credit card requirement when retrying a CI build on GitLab.com. !62050
+- Fix DAST Profile Summary edit button alignment. !62057
+
+### Deprecated (1 change)
+
+- Mark 3 group-level Merge Request Analytics metrics as removed. !60175
+
+### Changed (67 changes, 3 of them are from the community)
+
+- Allow using Jira for tracking vulnerabilities. !55952
+- Add improved branch validation when creating and updating Dast::Profiles in GraphQL. !56053
+- Migrate LFS object replication to use self service framework. !56286
+- Advanced Search: allow standalone shard/replica settings. !57567
+- Move to btn-confirm from btn-success in trials directory. !57960 (Yogi (@yo))
+- Move to btn-confirm from btn-success in application_settings directory. !58025 (Yogi (@yo))
+- Add gl-form-input for project issue template settings. !58046 (Yogi (@yo))
+- Add scannerId field to group vulnerabilities query. !58156
+- Add scannerId field to project vulnerabilities query. !58157
+- Assignee color for dark mode. !58501
+- Migrate spinner class to gl-spinner class. !58706
+- Change use of "blacklist" to "denylist" in push rule check error. !58868
+- Remove ff_custom_compliance_frameworks flag. !58884
+- Always display submit button for DAST Scanner Profile form. !59243
+- Update text on project-level DORA 4 charts. !59310
+- VSA - Update duration chart to use averages. !59453
+- Unsurface Subscription portal API error messages. !59487
+- Protect cloud licenses from being removed. !59576
+- Remove ultimate trial banner for users that are not already a group admin. !59611
+- Update Secure Merge-Request Widget Alignment. !59644
+- Add pagination to the VSA stage table. !59650
+- Update ci-cd settings buttons to conform to pajamas. !59695
+- Show default group name in epic tree. !59725
+- Denormalize project permissions to merge request in Elasticsearch. !59731
+- Replace metric card with GlSingleStat in VSA. !59732
+- Add display label and tooltip for nested fields in mapping builder. !59793
+- Convert SAML setting toggles to checkboxes and update UI text. !59823
+- Add Elasticsearch migration to backfill project permissions on MRs. !59836
+- Add defaults for DAST Scanner Profile timeout fields. !59999
+- Fix tier for instance and group DevOps Adoption. !60032
+- Pin API Fuzzing CI template to v1. !60057
+- Use SECURE_ANALYZERS_PREFIX variable for API Fuzzing. !60059
+- Move defaults into script for DAST API. !60064
+- Pin DAST API to major version 1. !60068
+- Improve approvals modal translation strings. !60108
+- Move API Fuzzing variable defaults into script. !60171
+- Use SECURE_ANALYZERS_PREFIX in DAST API image URL. !60308
+- Sync gitlab version during seat link. !60362
+- Return an appropriate error message when failing to remove billable members. !60404
+- Remove the value_stream_analytics_path_navigation feature flag. !60449
+- Display wider variety of error messages when Jira Issues List fails. !60455
+- New policy starts out with a rule by default. !60464
+- Avoid use of Elasticsearch joins in Global Merge Request searches. !60467
+- Add API Fuzzing image to Secure-Binaries template. !60499
+- Speed up Elastic AddNewDataToMergeRequestsDocuments migration. !60563
+- Return billable member relationship to a group in REST API. !60600
+- Show scanner warning at the top of the Vulnerability Report. !60716
+- Customize settings for Advanced Search reindex operations. !60730
+- Move group-level release statistics into tab. !60749
+- Default enable SSO-only authentication for web activity and add warning if it is disabled. !60868
+- Only send in-product emails to free groups. !60906
+- Use DORA deployment frequency metric in Value Stream Analytics. !60927
+- Adds an expand/collapse transition when showing/hiding the bulk action section in the vulnerability lists. !60944
+- Disable pause indexing checkbox if a reindex is in progress. !60953
+- Expose is_auditor user role via API. !61058
+- Artifact download migration to graphql. !61169
+- Geo: Release verification for Terraform States. !61263
+- Update API Fuzzing form labels. !61267
+- Verify phone number format in trial form. !61350
+- Add a new badge for billable membership types. !61366
+- Delete Merge Requests from original ES index. !61394
+- Delete Notes from original ES index. !61399
+- Add a new error modal for billable member removal. !61509
+- Add option to downlaod DAST scanned resources in MR Security Reports. !61551
+- Expose whether a BillableMember is removable. !61566
+- Update API fuzzing configuration form labels. !61618
+- Change notes removal migration to use ES tasks. !61798
+
+### Performance (13 changes)
+
+- Refactor project-level protected environments for performance optimization. !58633
+- Resolve created_by and oncall_schedule n+1's in group member index. !59756
+- Deduplicate Geo cronjobs. !59799
+- Don't use Elasticsearch join for group/project MR searches. !60249
+- Apply optimizations to merge request reference rendering. !60500
+- Fix GraphQL N+1 performance issue when loading a Project's DAST Profiles. !60554
+- Migration to move merge requests to separate Elasticsearch index. !60586
+- Add GraphQL aggregate to prevent N+1 query on DAST profiles. !61024
+- Improves performance of VulnerabilityReportsComparer. !61200
+- Optimize number of SQL queries when listing epics. !61372
+- Upgrade the GitLab Elasticsearch Indexer version to v2.11.0. !61737
+- Fix N+1 in issues API when loading parent epics. !61852
+- Minimize number of SQL queries on epic autocompletion. !61885
+
+### Added (44 changes)
+
+- Introduce security report schema validation. !58667
+- Add the ability to automatically create a basic configuration MR for Secret Detection via the Security Configuration page. !58687
+- Epic board lists can now be destroyed via GraphQL. !58719
+- Add GraphQL mutation that allows to update epic boards lists. !58782
+- “Security Center project selector returns projects and gives the ability to add project for Auditor user”. !58841
+- Add tests for the details table. !59357
+- Remove user from rotation if they are removed from a project or group. !59427
+- Display relevant titles for the VSA stage table. !59485
+- Add stage time to path popovers in group level VSA. !59606
+- Remove :credential_inventory_gpg_keys feature flag. !59658
+- Support board issue filtering by weight and iteration_id in GraphQL. !59703
+- Add group level DevOps adoption usage ping. !59738
+- Create incident column for threat alerts. !59821
+- Hide display of certain plans on billings page. !60137
+- Add diff component to generic report schemas. !60188
+- Audit DAST scanner profile updates. !60287
+- Add provisioned by group info in user admin. !60315
+- Add assignee column to threat alert list. !60340
+- Track epic board user events (viewing, creating and updating titles). !60357
+- Add support for rendering "named-list" types on generic vulnerability reports. !60370
+- Added award emoji to epics REST API. !60410
+- Allow trial plans to behave paid plan. !60496
+- Add DAST API CI template. !60546
+- Add stage count to group-level VSA. !60598
+- Enable group devops adoption by default. !60638
+- Add support to destroy iterations in GraphQL. !60655
+- Add total distinct count of compliance frameworks to usage ping. !60697
+- Add sorting to the VSA stage table. !60793
+- Track checking/unchecking tasks on epics. !60846
+- Enable DAST on-demand API scan support by default. !60876
+- Compare live vs actual CI minutes consumption and record it as a Prometheus metric. !60949
+- Add recursive weight to epic tree. !60990
+- Add group-level deployment frequency charts. !61053
+- Create threat alert drawer. !61183
+- Expose Path Locks in the GraphQL API. !61380
+- Log when build is dropped due to CI minutes exceeded. !61381
+- Add codequality reports endpoint to graphql. !61383
+- Render text and value generic report types on vulnerability report. !61727
+- Show code quality badges on MR diff file headers. !61810
+- Allow the users to upload binaries to MobSF. !61814
+- Add Coverage and API Fuzzing vuln count summaries. !61827
+- Add alert status change dropdown to drawer. !61832
+- Add generic report section to pipeline vulnerability-detail modal. !61851
+- Remove old scanner filter and only use new filter on vulnerability report page. !61959
+
+### Other (9 changes, 1 of them is from the community)
+
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/helpers. !58383 (Abdul Wadood @abdulwd)
+- Track epic cross reference on usage ping. !59804
+- Track epic parent changes via usage ping. !60079
+- Track epic emoji award via usage ping. !60787
+- Refactor alert details sidebar CSS. !60960
+- Track users removing epic emoji via usage ping. !60989
+- Replace relative license expiry date with full date. !61481
+- Make DevOps Adoption API as beta. !61512
+- Remove group_level_release_statistics flag. !61806
+
+
+## 13.11.4 (2021-05-14)
+
+- No changes.
+
+## 13.11.3 (2021-04-30)
+
+- No changes.
+
+## 13.11.2 (2021-04-27)
+
+### Security (1 change)
+
+- Do not expose pull mirror username and password.
+
+
+## 13.11.1 (2021-04-22)
+
+### Fixed (2 changes)
+
+- Geo - Sync incident metrics uploads. !59674
+- Fix zero count of vulnerability severity count. !59680
+
+
+## 13.11.0 (2021-04-22)
+
+### Removed (3 changes)
+
+- Remove /projects/:id/merge_requests/:merge_request_iid/approvers endpoint. !57344
+- Remove deprecated project approvers update REST API endpoint. !57473
+- Remove deployment_frequency_charts feature flag. !59289
+
+### Fixed (96 changes, 42 of them are from the community)
+
+- Make AutoDevOps browser performance job work when behind proxy. !48326 (Olaf Meeuwissen (@paddy-hack))
+- Atomically select an available replica if all caught up. !49294
+- Fix backward keyset pagination for epics start_date/end_date. !50579
+- Expand left sidebar when viewing group iteration report. !56358
+- Show loading spinner for security dashboard. !56493
+- Geo: Fail syncs which exceed a timeout. !56538
+- Fix DAST profiles summary for invalid profile ids. !56753
+- Fix 500 error when refreshing Value Stream Analytics page with a default stage. !56761
+- Update oncall schedule rotation names to truncate if they are too long. !56762
+- Allow oncall schedule timezones to encode special characters correctly. !56792
+- Allow oncall schedule to display description. !56796
+- Set default cadences to non-automatic. !56842
+- Hide "New issue" button from Auditors on project issues page. !56877
+- Do not close modal when there are error messages. !56893
+- Hide "Suggest wiki improvement" button from Auditors on project wiki page. !56897
+- Do not clear the oncall schedule rotation form if there are validation errors. !56901
+- Fix vulnerability exports when a finding is missing. !56903
+- Hide "New merge request" button from Auditors on Code Review Analytics page. !56999
+- Require permissions to read vulnerability counts. !57037
+- Prevent deletion of groups with a subscription. !57170
+- Allow SCIM deprovisioning for minimal access users. !57178
+- Catch NoResponseError from Net::DNS in LoadBalancing::Resolver. !57187
+- Fix styling for ellipsis in DAST Profiles. !57200
+- Fix active state for license link in navigation bar. !57214
+- Fix reindexing retry for the notes migration. !57248
+- Make sure all ES indexes are created when setting server URL. !57253
+- Give CI_JOB_TOKEN read access to public projects so public packages can be consumed. !57265
+- Adds stage time calculation to VSA path navigation. !57451
+- Prevent deletion of groups with a subscription via the API. !57533
+- Adjust Button Size on License Compliance widget. !57592
+- Count minimal access users in admin area group page. !57630
+- Remove key parameter check when validating actor in personal access token API. !57675
+- Fix the 'errors' attribute of the 'ScanType' on GraphQL API. !57882
+- Fix inaccurate role classification in DB instrumentation. !57998
+- Fix Rails/SaveBang rubocop offenses in ee/spec/requests. !58078 (Abdul Wadood @abdulwd)
+- Fix Rails/SaveBang rubocop offenses in ee/spec/presenters. !58082 (Abdul Wadood @abdulwd)
+- Fix Rails/SaveBang rubocop offenses in ee/spec/graphql. !58092 (Abdul Wadood @abdulwd)
+- Fix Rails/SaveBang rubocop offenses in ee/spec/models/ci. !58109 (Abdul Wadood @abdulwd)
+- Fix Rails/SaveBang rubocop offenses in ee/spec/models/. !58115 (Abdul Wadood @abdulwd)
+- Fix removing labels when moving an epic between lists. !58145
+- Remove push rules locks on group and project level. !58195
+- Land on epics tab when searching within epics search context. !58201
+- Remove mw-90p class from common.scss. !58205 (Takuya Noguchi)
+- Fix header on group billing page. !58252
+- Fix 500 error when cloning a wiki using the Kerberos clone button. !58270
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/workers. !58272 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/views. !58280 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/tasks. !58284 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee vulnerabilities services. !58305 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in timebox_report_service_spec.rb. !58317 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/services/status_page. !58320 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/services/security. !58323 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/services/search. !58326 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/services/merge_trains. !58333 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/services/issues. !58336 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/services/ide. !58341 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/groups. !58343 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/services/geo. !58348 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/services/epics. !58350 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/services/ee. !58351 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/services/ci. !58354 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/services/auto_merge. !58358 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/services/analytics. !58359 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/serializers. !58362 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/requests/projects. !58365 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/presenters. !58369 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/policies. !58371 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/models. !58376 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/migrations. !58378 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/mailers. !58379 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/lib/gitlab/geo. !58380 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/graphsql/resolvers. !58389 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/finders. !58394 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/features/projects. !58395 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/features/analytics. !58402 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/features/admin. !58403 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/controllers/registrations. !58408 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/controllers/ee/projects. !58414 (Abdul Wadood @abdulwd)
+- Fix RSpec/EmptyLineAfterFinalLetItBe rubocop offenses in ee/spec/controllers/admin. !58417 (Abdul Wadood @abdulwd)
+- Fix broken dismissal descriptions in vulnerability details view. !58431
+- Throw an error when yaml mode contains unparsable attributes. !58457
+- Add aria labels to icon-only buttons. !58460
+- Clone issue card on move when necessary in epic swimlanes. !58644
+- Fix access bug for DevOps Adoption page and free tier groups. !58684
+- Render links in DAST scans errors. !58815
+- Fix Group SAML disabled git enforcement text. !58825
+- Use `getTopFrequentItems` in projects dropdown to show recently used. !58851
+- Correcting typo on the Policies tab of the Threat Monitoring page. !58956 (Lindsay Kerr)
+- Update Geo OAuth redirect URI to use the external primary URL even when an internal URL exists. !58966
+- Fix the oncall schedule timeline width calc. !58973
+- Reduce query timespan to one day in schedule daily view. !58974
+- Make Zen Mode functional while editing Test Case description. !58984
+- Navigate to Manage scans page after saving a DAST Scan. !59027
+- Fix updating value stream without persisted stages. !59176
+- Fix ElasticDeleteProjectWorker delete commits, index_status. !59457
+- Fix zero count of vulnerability severity count. !59680
+
+### Changed (47 changes, 2 of them are from the community)
+
+- Move Notes (Comments) to dedicated ES index. !53013
+- Add storage requirement option to Advanced Search notes migration. !55423
+- Add vulnerability filter for scanner ID. !55909
+- Add GraphQL field for vulnerability scanner ID. !56041
+- Project Settings Operations header Status page expand/collapse on-click/on-tap. !56275 (Daniel Schömer)
+- Return generic vulnerability details in the response of the vulnerability_finding endpoint. !56448
+- Fix for licenses without an url in license issue body. !56534
+- Set credential_inventory_gpg_keys feature-flag to enabled by default. !56764
+- Allow details to be sorted chronologically in the performance bar. !56830
+- Scroll to top of window when API Fuzzing configuration fails. !56890
+- Sort issues in full codequality report by severity. !56892
+- Update routes for DAST profiles to align with user interface. !56966
+- Add last used to cluster token table. !57141
+- Standardize input label for project-level MR rule for overriding approvers. !57194
+- Display active integrations in separate table. !57198
+- Update tab links for DAST Saved Scans. !57205
+- Enable iteration lists and new create list form. !57439
+- SSH key page text now reflects the expiration enforcement setting being used on the instance. !57494
+- Policy Editor: switching the custom editor to Source Editor. !57508
+- Create status filter on policy alerts. !57538
+- Remove the api_fuzzing_configuration_ui feature flag. !57583
+- Call out the inability to run on-demand scans without a repository being created. !57584
+- API Fuzzing scanner port changed to non-privileged port. !57628
+- Add Swimlanes loading skeleton. !57661
+- Hide cluster agent UI if not enabled on GitLab.com. !57668
+- Add billable_members_count to GraphQL Group type. !57712
+- Update copies in API fuzzing configuration form. !57753
+- Updated VSA stage table with simpler layout. !57792
+- Replace deprecated buttons on epic list view. !57873
+- Add error handling feedback inside purchase flow. !58084
+- Add a delay before expanding epic within tree during drag and drop. !58282
+- Make DevOps adoption updates weekly. !58474
+- Replace deprecated button on iteration list view. !58503
+- Expose vulnerability Scanner ID through GraphQL query. !58595
+- Remove info message from legacy milestones. !58617
+- Insert tips as comments in the YAML snippet. !58656
+- Add tips about copied API Fuzzing configuration snippet in the pipeline editor. !58664
+- Remove feature flag value_stream_analytics_extended_form. !58821
+- Remove compliance framework administration abilities from subgroups. !58873
+- Remove additional minutes when no minutes purchased. !59112 (Takuya Noguchi)
+- Remove standalone_vuln_dependency_list Feature Flag. !59124
+- Remove default stages definition from latest API Fuzzing CI template. !59154
+- Update Product Planning Usage Ping metrics. !59171
+- Set API Fuzzing version to 1.6 in CI template. !59181
+- Update label color on Jira issues pages. !59226
+- Change vulnerabilities GraphQL query to use GlobalID for scanner IDs. !59305
+- MR Analyrics, add animation to MTTM stat. !59477
+
+### Performance (20 changes)
+
+- Force ApplicationRecord#with_fast_statement_timeout to use replicas. !56476
+- Improve performance of indexing notes in Elasticsearch. !56808
+- Improve performance of Elasticsearch notes permissions migration. !56823
+- Improve computation of excess repository storage size. !57088
+- Do not stick to primary after recording User#last_activity_on. !57212
+- Skip ordering when using distinct in shared runners CTE query. !57312
+- Do not stick to primary after log Jira DVCS usage. !57328
+- Cache storage alert banner. !57350
+- Reduce SQL requests number for epic issues. !57352
+- Batch-load environments in EE pipelines. !57706
+- Fix N+1 in /projects endpoint. !57746
+- Remove N+1 DB queries from indexing issues in Elasticsearch. !57788
+- Remove N+1 DB queries from indexing projects in Elasticsearch. !57794
+- Fix blobs search N+1. !57826
+- Cache open issues count in group sidebar. !58064
+- Improve performance of on-call schedules SQL queries. !58209
+- Reduce queries on group search API for blobs scope. !58495
+- Fix more N+1 issues when indexing notes in Elasticsearch. !58751
+- Fix N+1 query in Epics search for guest in private group. !58863
+- Sync code owner approval rules asynchronously after creating merge request. !59395
+
+### Added (47 changes)
+
+- Beta version of DAST API scanner API Security. !51824
+- Add confirmation modal for admin signup settings submit button, for cases where pending users could be approved by mistake. !55509
+- Expose dismissal reason and dismissal descriptions in Vulnerability details view. !55525
+- GraphQL - Allow to filter epics on epic lists. !56026
+- Incident Management On-call Schedules. !56263
+- Add reviewers detail to add merge request approver email. !56466
+- Allow customers to extend or reactivate their trial on gitlab.com. !56471
+- Add a form to generate API Fuzzing configuration YAML snippets. !56548
+- Add upgrade link in user menu. !56591
+- Add vulnerability management survey request banner. !56620
+- Adds an overview stage to value stream analytics. !56621
+- Display VSA navigation as a horizontal flow. !56632
+- Add generic reports section and 'url' type to vulnerability details page. !56635
+- Add git fetch counts for geo secondaries to usage ping. !56678
+- New allowed_agents REST endpoint. !56700
+- Add policy name filter to threat alerts. !56708
+- Enable timeline on project security dashboard's trends chart. !56844
+- Add integration to view Jira issue details within GitLab. !56942
+- Add sitemap generation for Gitlab.com and gitlab-org namespace. !56947
+- Pre-populate projects while adding issue to a project in epic tree. !56955
+- Support epic board list negated filter params. !57001
+- Update schedule grid to start at beginning of current week. !57004
+- Update oncall rotation active period after schedule timezone update. !57069
+- Add separate tab tracking for devops adoption. !57104
+- Make epics searchable by my reaction emoji. !57190
+- Fetch iterations by cadence id. !57572
+- Include pipeline artifacts in Geo replication. !57741
+- Provide option to disable project access token creation. !57756
+- Add DORA 4 lead time charts to project-level CI/CD Analytics page. !57872
+- Support negated filtering of issues by epic_id and weight in GraphQL. !58154
+- Add environment scopes to group CI/CD variables. !58200
+- Add recursive list rendering to generic vulnerability reports. !58206
+- Add billable memberships API. !58506
+- Update CiCdSettingsUpdate mutation to accept MR pipelines and merge trains. !58592
+- Add support for array indexing to alert integration custom mappings. !58610
+- Filter by epic in roadmap. !58642
+- Add singular oncall rotation field to oncall schedules type. !58729
+- Enable compliance pipeline configuration by default. !58826
+- Support reaction emoji on Epics Roadmap. !58835
+- Enable DAST on-demand scan authentication, request headers and excluded URLs. !58859
+- Display ultimate or premium upgrade plan banner for jira issues. !58877
+- Expose 'titleHtml' & 'descriptionHtml' in Epic type. !58990
+- Set issue_perform_after_creation_tasks_async feature flag to default. !59040
+- Implement use_replicas_for_read_queries. !59167
+- Geo - Release the pipeline artifacts replication and verification. !59323
+- GraphQL issue filters support 'current' iteration. Board issue filters support negated 'current' iteration. !59325
+- Enable custom compliance frameworks.
+
+### Other (34 changes, 2 of them are from the community)
+
+- Change button to link on Agent table. !55887
+- Track epic status change action on usage ping. !56246
+- Use provide/inject for groupFullPath instead of props. !56472
+- Track epic confidentiality change action on usage ping. !56483
+- Track epic title and description changes via usage ping. !56489
+- Record issues added to epic on usage ping. !56559
+- Track epic labels change action on usage ping. !56571
+- Track epic comment updated. !56610
+- Track epic note destroyed. !56617
+- Track epic start date set to fixed or inherited via usage ping. !56619
+- Apply GitLab UI button and dropdown styles to buttons in ee/app/views/shared/epic directory. !56729
+- Add daily quota limit to invitations API endpoint. !56781
+- Change input type for telephone number field in the Trial flow. !56876
+- Bootstrap button migration. !56968
+- Skip onboarding experience for invited users. !57117
+- Update localStorage key for On-demand scans form. !57224
+- Add spacing between analyzer name and variables in SAST Configuration UI. !57226
+- Add missing audit logging to invite service. !57358
+- Review and revise Integrations/GitHub UI text. !57389
+- Track epic due date set to fixed or inherited via usage ping. !57457
+- Use provide/inject for vulnerabilities export endpoint. !57639
+- Track epic change to fixed start/due dates via usage ping. !57672
+- Use full date in billable members list. !57828
+- Move to confirm from success variant for button in storage quotas page. !57862 (Yogi (@yo))
+- Update URL for license FAQ. !58231 (Takuya Noguchi)
+- Update out-of-storage banner title and button text. !58276
+- Track issue removed from epic on usage ping. !58426
+- Add load balancing Sidekiq metrics. !58473
+- Updated UI text to match style guidelines. !58509
+- Track epic issues moved between projects. !58590
+- Add metric to track querying write ahead log on Request level. !58673
+- Generic vulnerability reports: Remove extra margin between report columns. !58720
+- Track epic destroyed action on usage ping. !59185
+- Remove dast_branch_selection feature flag. !59349
+
+
+## 13.10.4 (2021-04-27)
+
+### Security (1 change)
+
+- Do not expose pull mirror username and password.
+
+
+## 13.10.3 (2021-04-13)
+
+- No changes.
+
+## 13.10.2 (2021-04-01)
+
+- No changes.
+
+## 13.10.1 (2021-03-31)
+
+### Security (1 change)
+
+- Escape HTML on scoped labels tooltip.
+
+
+## 13.10.0 (2021-03-22)
+
+### Removed (1 change)
+
+- Remove the dast_saved_scans feature flag. !56540
+
+### Fixed (39 changes)
+
+- Fix updating of board's hide_backlog_list and hide_closed_list settings when on an unlicensed EE instance. !51561
+- Return only supported issue types for selected Jira Project. !53705
+- Fix incorrect IP address when creating ProtectedBranch audit event. !54292
+- Add support for negated weight issue filtering. !54393
+- Update details JSON Schema and GraphQL Schema for Vulnerability Finding. !54423
+- Jira Issues List page shows Web URL links instead of API URL. !54434
+- Add spacing to related Jira issues section. !54514
+- Geo: Prioritize resyncing new failures over persistent failures. !54585
+- Move action buttons to dropdown footer. !54767
+- Geo: Add unique constraints to container repository and terraform state registries. !54841
+- Exclude guests for trial ultimate licenses too. !54952
+- Only set note visibility_level if associated to a project. !55111
+- Fix scrolling issues with sticky status box. !55188
+- Prevent rendering test cases as issues. !55410
+- Fix wrong message for group vulnerability report when no vulnerabilities in projects. !55464
+- Hide package list if license compliance has an entry with 0 packages. !55466
+- Prevents HttpIntegration.payload_attribute_mapping from being reset when it was not a part of a GraphQL mutation input. !55511
+- Counter badges are misaligned in License Compliance tabs. !55517
+- Fix 500 error on group milestones page when milestones are associated to more than 3 releases. !55540
+- Fix Jira icon in sidebar too huge during page load. !55598
+- Fix alignment issues in vulnerability modals. !55716
+- Do not display empty description template lists in the dropdown. !55762
+- Geo: Fix syncing direct download remote stored Blob types. !55775
+- Update alerts list to fail gracefully on GraphQL failure. !55817
+- Allow project admin to read approval rules from archived projects. !55929
+- Fix epics dropdown to work in project epic swimlanes. !55954
+- Ensure task by type filters refresh the chart data. !55958
+- Fix console-error on vulnerabilities report. !56076
+- Refetch count list when vulnerabilities are updated. !56116
+- Fix group code coverage table to show all projects correctly. !56124
+- Fix dropdown z-index issue. !56125
+- Fix DAST site profile form submission. !56135
+- Correct billable users calculation on users statistics page. !56152
+- Do not mark bot users as pending approval when User Cap is enabled. !56287
+- Fix zero-downtime upgrade from 13.8.x to 13.9.3. !56352
+- Use created in epics and MRs. !56391
+- Fix subscription banner on New Project page. !56443
+- Fetch only detected and confirmed vulnerabilities for project security status. !56533
+- Replace stubbed dastProfiles.branch GraphQL field. !56604
+
+### Changed (44 changes, 3 of them are from the community)
+
+- Migrate lfs_object_registry to be compatible with Geo::ReplicableRegistry. !52636
+- Send email when user cap is reached. !53489
+- Add securityReportsUpToDateOnTargetBranch field to MergeRequestType to indicate if the security reports are up to date on the target branch. !53907
+- GitLab EE Project Settings CI/CD headers expand/collapse on click / tap. !54115 (Daniel Schömer)
+- Add ability to bulk update vulnerabilities. !54206
+- Add external link to create jira issue button. !54310
+- Update License Compliance and Dependency List Empty State Pages. !54314
+- Lower SAML SSO session expiry to one day. !54374
+- Add page specific styles to project discover security page. !54460
+- Migrate Epic Events when using Group Migration. !54475
+- Update AutoDevOps wording on secure config page. !54586
+- Geo Status - Rename Attachments to Uploads. !54720
+- Sort changed metrics first in metrics reports MR widget. !54729
+- Remove services section from API Fuzzing CI template. !54746
+- Add negated weight issue filtering on API. !54867
+- Differentiate metrics and logs from replica/primary databases. !54885
+- Show subscription expiration banner only for top-level group owners. !54908
+- Trim-down "Skip Trial" link on the trial flow page. !54911
+- Remove saml_group_links feature flag. !54986
+- Exempt auditor from ip restriction. !55073
+- Introduce disabled analyzer warning to SAST Config Page. !55172
+- Restructure layout of Add/Update approval rule form. !55181
+- Sort metrics report MR widget - changed, new, removed, unchanged. !55217
+- Project Settings Repository Push Rules header expands/collapses on click / tap. !55235 (Daniel Schömer)
+- Epic confidentiality widget. !55350
+- Make vulnerability file path linkable in the vulnerability list. !55356
+- Update css to make the vulnerability more prominent. !55389
+- Add warning message to pipeline stage dropdowns in merge trains. !55437
+- Remove scanner parameter from vulnerability_findings REST endpoint. !55453 (Thiago Figueiro @thiagocsf)
+- Add docs link for license compliance mr widget. !55474
+- Improve security dashboard/vulnerability report empty state messages. !55489
+- Add name to agent token table. !55503
+- Link cluster index page to cluster show page. !55536
+- Default enable the extended VSA form. !55572
+- Select security findings by their UUIDs instead of their positions in the report artifacts. !55643
+- Restyle license compliance button on merge request widget. !55667
+- Remove sast_configuration_ui feature flag. !55680
+- Track group coverage usage ping event in Vue template. !55687
+- Disable policy DAST scan profile modification. !55704
+- Add pagination to agent token table. !55788
+- Show CSV has been exported banner on export. !55965
+- DevOps Adoption - Allow users to select multiple groups. !56073
+- Advanced Search Migration to add permission data to notes documents. !56177
+- Update the approvers rule removal modal button to use new danger variant. !56230
+
+### Performance (4 changes)
+
+- Use shards for Advanced Search indexing. !55047
+- Pipline vulnerabilities loading performance improvements. !55692
+- Spread shared runner minute reset to 8h. !55802
+- Make StoreSecurityReportsWorker cpu-bound. !56149
+
+### Added (49 changes)
+
+- Restrict on-call to certain times during rotations via GraphQL. !52998
+- Support /child quick action when creating epics. !53073
+- Geo: adds database load balancing support to work on standby clusters. !53147
+- Support OpenAPI v3 and Postman variables in API Fuzzing. !53646
+- Add Geo node status metrics to usage ping. !53665
+- Add iteration to the sidebar in epics swimlanes. !53695
+- Add table to store secondary usage data. !53758
+- User permission export (feature flag removed). !53789
+- Add status filtering token support for Requirements. !54056
+- Extend GraphQL Ci::PipelineType to include Security Report Findings. !54104
+- Added cluster agent details page. !54106
+- Expose details of blocking issues via GraphQL. !54152
+- Geo: Release package file verification. !54361
+- Advanced Search: Estimate Elasticsearch cluster size. !54430
+- Add remove button to billable members. !54458
+- Add event count column to threat alerts. !54616
+- Add rake task to check pending Elasticsearch migrations. !54656
+- Add pipeline security report summary. !54673
+- Add label `x` to remove labels in iteration report. !54708
+- Allow to filter requirements by missing status. !54711
+- Cleanup ci_notification_dot experiment. !54721
+- Include namespace storage stats in root statistics. !54788
+- Include group wikis in Geo replication. !54914
+- Allow only group trials. !54920
+- Disable repository mirroring for hard failures. !54964
+- Include wiki_size and storage_size in NamespaceStatistics. !54967
+- Update NamespaceStatistics after wiki update. !54969
+- Query group projects by code coverage with GraphQL. !55182
+- Add purchase more storage button to storage usage quotas page. !55246
+- Add last activity time column to seat usage table. !55321
+- Add mutation to move epics between lists. !55467
+- Introduce group-level API for DevOps adoption. !55479
+- Update existing namespace statistics with wiki_size. !55487
+- Social sign in options to trial registration. !55533
+- Add remove Billable Member API endpoint. !55645
+- Add support for updating default description templates for issues and merge requests via API. !55718
+- Include detected vulnerability in finding state check. !55806
+- Show 'Add Seats' Button on Billing Page. !55964
+- Migrate group iterations when using Bulk Import. !56018
+- Custom mapping for HTTP endpoints. !56021
+- Create vulnerability issue link after merging the MR. !56038
+- Add support for task lists within Test Case description. !56196
+- Implement Group Wiki Geo replication. !56247
+- Skip user limit validation when saving cloud licenses. !56260
+- Add reviewers detail to approved and unapproved merge request emails. !56290
+- Add toolbox for the trends chart in project security dashboard. !56316
+- Add feature flag to block gitlab.com top-level group creation via api. !56360
+- Release DAST Profile branch selection. !56442
+- Add `scan` field into `SecurityReportSummarySectionType` GraphQL type. !56547
+
+### Other (9 changes, 1 of them is from the community)
+
+- Rename "CYCLE_ANALYTICS_*" variables in spec with "VSA_*". !52609 (Takuya Noguchi)
+- Track epic creation action on usage ping. !53651
+- Apply GitLab UI styles to registrations/ci_cd buttons. !54501
+- Fix License Compliance widget button spacing. !54701
+- Remove feature flag for Pipelines Security Summary. !54808
+- Add new bulk create API endpoint for Devops adoption. !54813
+- Add a separator between milestone and iteration dropdown in sidebars. !54895
+- Update usage ping dictionary. !55024
+- Delete redirect files. !56169
+
+
+## 13.9.7 (2021-04-27)
+
+### Security (1 change)
+
+- Do not expose pull mirror username and password.
+
+
+## 13.9.6 (2021-04-13)
+
+- No changes.
+
+## 13.9.5 (2021-03-31)
+
+### Security (1 change)
+
+- Escape HTML on scoped labels tooltip.
+
+
+## 13.9.4 (2021-03-17)
+
+- No changes.
+
+## 13.9.3 (2021-03-08)
+
+- No changes.
+
+## 13.9.2 (2021-03-04)
+
+- No changes.
+
+## 13.9.1 (2021-02-23)
+
+- No changes.
+
+## 13.9.0 (2021-02-22)
+
+### Removed (1 change)
+
+- Remove reviewer_approval_rules feature flag. !53205
+
+### Fixed (33 changes)
+
+- Fix Jira issue list links when Jira runs on a subpath. !51797
+- Fix epic assignment in the createIssue mutation. !51817
+- Show Response fields for vulnerabilties sourced from DAST. !51948
+- Display error message if group member can not be updated because their email does not match the list of allowed domains. !52014
+- Fix JS error on welcome page. !52022
+- Track code quality view event only once tab is active. !52140
+- Fix Vuln detail and modal when reasonPhrase is empty string. !52156
+- Fix duplicit epics on roadmap page when filtering by milestone. !52201
+- Fix file templates return same content for templates with same name but from different projects. !52332
+- Fixed bug that overwrote issue description changes from vulnerabilities. !52376
+- Swimlanes - Support negated filters. !52449
+- Fix line spacing in billing card header. !52521
+- Change FAQ link on the billing page. !52577
+- Properly populate descriptions in an issue created from a vulnerability. !52592
+- Properly populate description in an issue created from a vulnerability. !52619
+- Ignore connection error when changing the Elasticsearch Server URL. !52645
+- Fix Epic autocomplete reference. !52663
+- Fix search debounce for Swimlanes board assignees. !52786
+- Remove LDAP "Edit Permissions" button for inherited group members. !52847
+- Resolve Filter count does not get reflected in Test Cases. !52889
+- Scope iteration report to subgroups. !52926
+- Fixed iteration dropdown UI. !52987
+- Fix approvals widget alignment issues. !53213
+- Fix sub-group projects being locked after storage purchase. !53249
+- Add license check for full code quality report. !53258
+- Fix blank alert field when creating an issue from a vulnerability. !53656
+- Fix invalid prop error for canEdit prop in issue sidebar when user cannot edit iteration. !53819
+- Revert text back to Allow instead of Deny. Fixes fromEndpoints/toEndpoints format to keep it aligned with the allow all logic. The previous code was causing a allowing none while it should be allowing all. !53940
+- Fix security dashboard for Safari (< 14.0). !54042
+- Fix issue where maintainers could not set compliance framework for projects. !54071
+- Fix buy more minutes link to wrong destination. !54080
+- Advanced Search: fix project count_only queries. !54303
+- Default maintenance_mode value to false if not explicitly set. !54428
+
+### Changed (40 changes)
+
+- New epic button in Epic Roadmap empty state should direct the user to a full epic creation page. !45948
+- Move sast_reports and secret_detection_reports to CE. !48200
+- Make the waiting period for deletion dynamic on project removal page. !50597
+- Move Advanced Search Admin Settings to Top Level. !51026
+- Add specific domain for threat management related alerts in order to tie the frontend and backend together. !51029
+- Restore refresh_interval from settings after reindex. !51147
+- Move all the changes related to Mutation.configureSast to CE. !51169
+- Enable Merge Train checkbox based on Merge Pipelines checkbox. !51233
+- Redirect user to previous page after DAST profiles creation. !51482
+- Add iteration to bulk issue edit sidebar. !51657
+- Use old purchase flow when user last name is blank. !51730
+- Move empty state into the threat monitoring tabs. !51748
+- Improve UX for DAST Profiles selector. !51957
+- Add 12 month limit to MR Analytics. !52070
+- Modify herders in exported requirements CSV file. !52118
+- Issues created from Vulnerabilities set to Confidential by default. !52127
+- Add feedback creation in controller. !52141
+- Updated text and styling of the DAST-modal footer button. !52245
+- Migrate health status dropdown to use gitlab ui. !52273
+- Remove badges design from DAST validation statuses. !52301
+- Process one record at a time in Bulk Import pipelines. !52330
+- Feat(EpicSelect): Migrate epic select to internal GitLab UI compoenent. !52528
+- Log token_id in project access token audit events instead of user_id. !52535
+- BulkImports: Import Epic's labels. !52626
+- Preserve Epic parent-child association when importing using Bulk Import. !52662
+- Add last_activity_on attribute to Billable Members API. !52666
+- Update Deployment Frequency graphs to always use UTC dates. !52919
+- Remove target_name parameter from Elasticsearch rake tasks. !52958
+- Update Issue Weights Paywall CTAs. !53117
+- Add Event type to GraphQL and events to epics. !53152
+- BulkImports: Associate mapped users to imported epics. !53296
+- Disable ability for maintainers to change project compliance framework. !53370
+- Add alert related labels to CiliumNetworkPolicies. The label will contain the project id and will be applicable to both new and existing policies. !53401
+- Regularly reverify Packages on primary. !53470
+- Allow token revocation for public projects only. !53734
+- Use previous license term for seat overage. !53878
+- Show loading state for vulnerability list when filter/sort is changed. !53934
+- Strip trailing whitespace from DAST site validation HTTP response body. !53951
+- Track elasticsearch_timed_out_count for all ES requests in log. !54180
+- Start license_scanning job within its stage, and not when pipeline starts. !54234
+
+### Performance (5 changes)
+
+- Speed up roadmap show page by removing an extra epic count check. !51610
+- Improve Advanced Search counts queries. !51971
+- Resolve N+1 issue loading approval rules on the MR list. !52364
+- Set 1s server side timeout on Elasticsearch counts. !53435
+- Improve the performance of the Merge Request Analytics chart. !53704
+
+### Added (45 changes, 1 of them is from the community)
+
+- Add activity filter to security dashboards. !48196 (Kev @KevSlashNull)
+- Add usage ping for user secure scans. !49444
+- Add details to Vulnerability GraphQL. !49465
+- Add description text to Deployment Frequency charts. !51250
+- Capture metrics for group coverage project links. !51411
+- Add route for threat monitoring alert details. !51417
+- Audit events for project access tokens. !51660
+- Update renew/upgrade banner with actionable links. !51705
+- Adds API support for Group Deployment Frequency. !51938
+- Display train badge for pipelines that are merge trains. !52137
+- Add web_url to iterations API. !52178
+- Add create epic board via GraphQL. !52258
+- Add MTTM stat to MR Analytics. !52316
+- Add URL Navigation to Pipeline Analytics Charts. !52338
+- Log user instance request and rejection in Audit Events. !52543
+- Implement "Security & Compliance" visibility settings. !52551
+- Add blobPath field to VulnerabilityLocation types in GraphQL. !52599
+- Add End of Availability banner for Bronze Plans for relevant users. !52607
+- Add support for subgroup events in Group webhooks. !52658
+- Track load performance widget expansions via usage ping. !52688
+- Allows fields selection when exporting Requirements with GraphQL. !52706
+- Support /parent_epic quick action when creating new epic. !52727
+- Support setting customizable timeouts for git CLI 2FA via UI & API. !52769
+- Forbid git pushes to group wikis when repo is read only. !52801
+- Add award emoji to epics in GraphQL. !52922
+- Add group repository storage move endpoints. !53016
+- Add ability to enforce SSH key expiration (feature flag removed). !53035
+- Add a meaningful error message for assigning confidential epics to issues. !53078
+- Add support for revoking DAST site validations. !53134
+- Add group wikis import/export functionality. !53247
+- Replace text with links on Usage Quota page. !53279
+- Add group-level CI/CD Analytics page with release stats. !53295
+- Adds a historical coverage graph to the group repositories analytics page. !53319
+- Dynamically rename plan title after EoA rollout date. !53473
+- Optional enforcement of PAT expiration (feature flag removed). !53660
+- Export only selected fields in requirements. !53707
+- Change the GitLab Elasticsearch Indexer version to 2.9.0. !53764
+- Allow to filter requirements by latest requirement test report status on GraphQL. !53767
+- Enable threat_monitoring_alerts feature flag by default. !53776
+- Release maintenance mode. !53895
+- Add hasSecurityReports field to GraphQL MergeRequest type. !53925
+- Add ability to save and manage DAST scans. !53942
+- Add cancel button to On-demand scans form. !54050
+- Dedupe vulnerability_findings for bandit and semgrep. !54181
+- Ability to create a Jira issue for a vulnerability. !54182
+
+### Other (9 changes, 2 of them are from the community)
+
+- Geo: Add verification state fields to package file registry. !49737
+- Update project's advanced settings UI text. !51442
+- Convert path-lock unlock button to pajamas. !52276
+- Adding audit event for default branch change. !52339 (Abdul Shaheed)
+- Use plan name instead of plan code in new subscription app. !52414
+- Replace OpenSSL constants with strings. !52431 (Takuya Noguchi)
+- Add manual renew button to billings page. !52652
+- Abstract out details of policy_helper. !52714
+- Review UI text - repo push rules settings. !52797
+
+
+## 13.8.8 (2021-04-13)
+
+- No changes.
+
+## 13.8.7 (2021-03-31)
+
+### Security (1 change)
+
+- Escape HTML on scoped labels tooltip.
+
+
+## 13.8.6 (2021-03-17)
+
+- No changes.
+
+## 13.8.5 (2021-03-04)
+
+- No changes.
+
+## 13.8.4 (2021-02-11)
+
+### Security (1 change)
+
+- Geo: Pass GL-ID in a JWT token when proxy-push from secondary.
+
+
+## 13.8.3 (2021-02-05)
+
+### Fixed (2 changes)
+
+- Fix Geo replication and verification status for replicables with no data to sync. !52253
+- Handle network unreachable for ES settings check. !52586
+
+
+## 13.8.2 (2021-02-01)
+
+### Security (2 changes)
+
+- Remove Kubernetes IP address from error messages returned in Threat Monitoring.
+- Sanitize XSS in Epic milestone due date.
+
+
+## 13.8.1 (2021-01-26)
+
+### Fixed (2 changes)
+
+- Fix rendering of requirements page for unauthenticated users. !52069
+- Fix browser performance widget issue body. !52088
+
+
+## 13.8.0 (2021-01-22)
+
+### Fixed (24 changes, 3 of them are from the community)
+
+- Hide "Health status" edit button when the user has no permission. !49535 (Kev @KevSlashNull)
+- Remove quota data for subgroups. !50163
+- Fix boards create and update mutation arguments list. !50266
+- 50275 Update check for free plan with both code and null. !50275
+- Fix roadmap topbar text in dark mode. !50357
+- Fix issue with displaying solution actions. !50648
+- Invalidate Elasticsearch cache when moving projects or groups. !50712
+- DevOps Adoption: Clear form when creating a new segment. !50766
+- Move ScanSecurityReportSecretsWorker to avoid race-condition. !50815
+- Fix todo creation on epics when toggling tasks. !50827
+- Do not store invalid security_findings into the database. !50868
+- Fix subscribable banner on mobile. !50972 (Kev @KevSlashNull)
+- Fix creating/editing requirements on mobile. !51062 (Kev @KevSlashNull)
+- Fix on-demand scans profile selectors' title alignment. !51133
+- Refresh VSA path navigation carousel when updating stage data. !51187
+- Remove cached/memoized ES helper. !51310
+- Fix alignment of vulnerability names in pipeline security tab. !51313
+- Fix halted migrations unpausing. !51326
+- BUFIX - whats new dropdown text wraps on ubuntu. !51510
+- Rename Backlog list to Open for Swimlanes. !51539
+- Geo: Sync expired artifacts. !51541
+- Ensure that only top level groups are fetched for devops adoption. !51565
+- Swimlanes - Creating an issue adds board scope to it. !51675
+- Backfill projects in Elasticsearch when moved between groups. !51717
+
+### Changed (30 changes, 1 of them is from the community)
+
+- Advanced Search: Copy issues to new index. !48334
+- Remove `store_security_findings` feature flag. !48357
+- Display correct maximum users in admin dashboard for license of any duration. !49861
+- Migrate vulnerability state management to GraphQL. !50034
+- Add confirmedBy field to vulnerability object in GraphQL. !50144
+- Add resolvedBy field to vulnerability object in GraphQL. !50145
+- Geo: Update usages of files_max_capacity. !50190
+- Display public emails for billable members. !50290
+- Resolve the race-condition of ScanSecurityReportSecretsWorker. !50335
+- Add advanced search by full path field. !50567
+- Update devops adoption snapshots daily. !50568
+- Improve DAST Profiles library designs. !50576
+- Immediately calculate devops adoption data after segment creation. !50619
+- Rename internal api endpoint in order align it with the new logic shared among agentk modules. !50703
+- Add Pagination to Agent Cluster List. !50713
+- API Fuzzing Request/Responses show empty body message. !50731
+- Geo: Increase backoff cap for Job artifacts, LFS objects, and Uploads which are missing on primary. !50812
+- Avoid scheduling mirrors for pending_delete projects. !50820
+- Add support for SAST_EXCLUDED_ANALYZERS. !50872
+- Update Styling of Security & Compliance Carousel. !50877
+- Replace button in Threat Monitoring empty state with a link. !50894
+- Automatically redirect users to SAML provider after 7 day expiration. !50914
+- Remove "Showing 0 projects" from project selector on initial load. !51136 (Kev @KevSlashNull)
+- Change the Group Analytics navigation link to go to the Value Stream Analytics page. !51165
+- Adjust spacing in project MR settings form. !51184
+- Improve DAST Profiles library for smaller devices. !51315
+- Add retry ability for halted Elasticsearch migrations. !51335
+- Add Beta feature warning to DevOps Adoption report, and restore feature flag. !51518
+- Resolve Rename Segment to Group. !51574
+- Enable auto-fix indicator feature. !51631
+
+### Performance (1 change)
+
+- CI minutes are spread across 8 hours instead of 3. !50265
+
+### Added (27 changes)
+
+- Edit issue title in swimlanes sidebar. !46404
+- Add current iteration toggle to board config. !46514
+- Track web performance widget expansions via usage ping. !46746
+- Add `/reassign_reviewer` command. !47606
+- Track full code quality report views via usage ping. !49079
+- Add ID filter to Namespace -> ComplianceFramework GraphQL. !49108
+- Add API Fuzzing Artifact Download in MR widget. !49780
+- Clone epic data when cloning issues. !50097
+- Add support for member update & destroy events in Group webhooks. !50217
+- Add dismissedBy field to vulnerability object in GraphQL. !50285
+- Allow Requirements to be exported as a CSV file. !50449
+- Add GraphQL mutation to export Requirements. !50546
+- Add `dismissal_reason` enum to `VulnerabilityDismiss` mutation on GraphQL API. !50688
+- Add sorting by column in DevOps Adoption table. !50743
+- Add author token filtering support for Test Cases. !50747
+- Show Vulnerability reproduction asset downloads. !50748
+- Capture generic metrics report views via usage ping. !50790
+- Delete Elasticsearch migrations index in rake gitlab:elastic:delete_index. !50817
+- Add ability to validate DAST site profiles. !50847
+- Add ability to group issues by label within the iteration report. !51113
+- Add confidential filter token in Roadmap. !51196
+- Add deployment frequency charts to CI/CD Analytics page. !51338
+- Capture unique user views of group repository analytics page. !51382
+- Export requirements as a CSV. !51434
+- Add metric image feature for Incidents. !51552
+- Add group wikis to Gitlab Backup. !51590
+- Add License subscription_id to Usage Ping. !51601
+
+### Other (11 changes, 1 of them is from the community)
+
+- Updated UI text to match style guidelines. !49871
+- Track epic issue counts on usage ping. !50204
+- Block /assign quick action for test cases. !50396
+- Update issue description templates UI settings. !50421
+- Block confidential quick action for test cases. !50460
+- Update the create issue form and epic issue actions dropdowns to use our Pajamas compliant components. !50633
+- Refactor folder structure for security dashboard GraphQL files. !51117 (Kev @KevSlashNull)
+- Edit pipeline subscriptions UI text. !51177
+- Update repository mirroring UI text. !51311
+- Update what's new UI text. !51422
+- Enable DevOps Adoption Report feature flag if any Segments already exist. !51602
+
+
+## 13.7.9 (2021-03-17)
+
+- No changes.
+
+## 13.7.8 (2021-03-04)
+
+- No changes.
+
+## 13.7.7 (2021-02-11)
+
+### Security (1 change)
+
+- Geo: Pass GL-ID in a JWT token when proxy-push from secondary.
+
+
+## 13.7.6 (2021-02-01)
+
+### Security (2 changes)
+
+- Remove Kubernetes IP address from error messages returned in Threat Monitoring.
+- Sanitize XSS in Epic milestone due date.
+
+
+## 13.7.5 (2021-01-25)
+
+### Fixed (1 change)
+
+- Ensure that only top level groups are fetched for devops adoption. !51565
+
+
+## 13.7.4 (2021-01-13)
+
+- No changes.
+
+## 13.7.3 (2021-01-08)
+
+- No changes.
+
+## 13.7.2 (2021-01-07)
+
+- No changes.
+
+## 13.7.1 (2020-12-23)
+
+### Fixed (3 changes)
+
+- Fix DAST profiles deletion. !50271
+- Geo: Fix LFS for location-aware Git URL. !50415
+- Fix StoreReportService related to autofix. !50490
+
+
+## 13.7.0 (2020-12-22)
+
+### Removed (1 change)
+
+- Remove vulnerability_special_references feature flag. !49131
+
+### Fixed (28 changes)
+
+- Realign audit logs/events date field. !47708
+- Ensure we don't show warning when there are <1000 epics on a roadmap. !47884
+- Fix missing padding in custody report dropdown. !47927
+- Fix issue blocked-by modal. !48273
+- Generate finding name from report data if message is missing. !48279
+- Truncate vulnerability title if longer than 255 characters. !48327
+- Use `master` when default branch is blank in security configuration. !48328
+- Fix functionality to add comments in the vulnerability details page. !48375
+- Geo Replicables - Fix missing help text. !48378
+- Switch Search Elasticsearch index to use english stemmer. !48518
+- Fix the user experience when the user is unauthorized or trying to subscribe for a non-existing group. !48626
+- Vulnerability Report: Show identifiers without URL as plain-text instead of link. !48653
+- Fix bug rendering labels in group wikis. !48763
+- Fix Epic tabs when open registration alert is visible. !49150
+- Fix Vuln details page request/response sections not appearing. !49166
+- Include issue iid in default title for untitled incidents when created from alert via HTTP integration. !49274
+- Ignore Issue and MR IID search out of range error. !49284
+- Fix security dashboard breadcrumb on vulnerability details page. !49431
+- Fix displaying merge request dependencies with no metrics. !49466
+- Disable epic quick actions when creating new epics. !49470
+- Fix invalid prop warning in On-demand scans. !49472
+- Fix `Close epic` button not working on epic page. !49597
+- Fix Jira issue list API calls when Jira server runs relative to a context path. !49623
+- Fix group code coverage for default branch. !49630
+- Fix sidebar navigation for On-demand scans. !49719
+- Geo: Fix replication details nav links to show any that are enabled. !49731
+- Improve response from Jira issue creation from vulnerability. !50150
+- Fix group code coverage data csv. !50155
+
+### Changed (39 changes)
+
+- New epic button in epic list redirects the user to the new epic page. !37126
+- Resolve Update MR form to use plural field names. !41402
+- Improve compliance dashboard empty state message. !45273
+- Migrate requirements tabs to gltab. !45736
+- Expose latest snapshot for devops adoptions in GraphQL. !47388
+- Add API Fuzzing job counts to telemetry pings. !47451
+- Issues can be built with vulnerability information. !47528
+- Remove projects_prometheus_active unused usage ping. !47792
+- Removed On-demand landing page. !47867
+- Fixed summary info for closed iterations. !47879
+- New subscription purchase for trial namespaces follow new flow. !47880
+- Update Screenshots on Security & Compliance Carousel. !47900
+- Geo - Update Legacy Icons. !48058
+- Separate on-demand scan template from DAST template. !48088
+- Swap edit and delete button for DAST Profile library. !48124
+- Move Project Export of templates into a separate sidekiq queue in order to make project creation from group level custom templates faster. !48134
+- Show an error when failing to save a merge request dependency. !48237
+- Only run fuzzing on commit events, not all events. !48264
+- Do not display renewal banner if future dated license is applied. !48283
+- Change Auto Remediation Text from Remediation Summary to Solution. !48678
+- Return NONE for GraphQL DastSiteValidation type status when there is no DAST site validation. !48751
+- Creating an issue from a vulnerability takes user to the new issue page. !48926
+- Set retries of ScanSecurityReportSecretsWorker for max 3 days. !49022
+- Add context to full code quality report. !49260
+- Add confirmed_at field to vulnerability in GraphQL. !49376
+- Add resolved_at field to vulnerability type in GraphQL. !49391
+- Insert finding_uuid value into vulnerability_feedback when creating records. !49408
+- On-demand scans: automatically select DAST profile when only one is available. !49435
+- Added DAST path to display on vulnerabilities list. !49616
+- Increase the Epic Nesting from 5 to 7. !49619
+- Re-name Audit Log as Audit Events. !49635
+- Drop matching_merge_request_db_sync feature flag. !49644
+- Return the uuid attribute in the response of vulnerability_finding endpoint. !49742
+- Return the finding_uuid attribute in the response of vulnerability_feedback endpoint. !49745
+- Adjust Audit Events navigation and visibility. !49794
+- Add dismissed_at field to vulnerability in GraphQL. !49797
+- Reorder items on swimlanes sidebar. !49877
+- Add `hideBacklogList` and `hideClosedList` and `iteration_id` to `createBoard` mutation input. !49947
+- Automatic token revocation no longer restricted to gitlab.com. !50087
+
+### Performance (9 changes, 4 of them are from the community)
+
+- Remove show license timeout guard on ee. !47832
+- Remove .issue-box from Issuable list Vue.js App. !47999 (Takuya Noguchi)
+- Remove .issue-box element from Epics (list). !48000 (Takuya Noguchi)
+- Remove .issue-box element from Requirements (list). !48001 (Takuya Noguchi)
+- Improve query for fetching vulnerability scanners. !48144
+- Avoid the use of Elasticsearch joins when searching for issues. !48583
+- Avoid unnecessary Sidekiq retries for Security::TokenRevocationService. !48636
+- Remove Bootstrap 4's Cards class name from Epics. !48856 (Takuya Noguchi)
+- Enable query cache for load balancer. !49708
+
+### Added (41 changes)
+
+- Add Sidekiq job for importing csv requirements async. !46429
+- Integrate RevocationAPI with BuildFinishedWorker. !46729
+- Import requirements via CSV upload. !47064
+- Show uploads size in storage usage breakdown. !47113
+- Sync groups on sign-in for GitLab.com Group SAML. !47445
+- Add compliance frameworks to namespaces in GraphQL API. !47779
+- Added usage ping statistics about created requirement test reports. !47809
+- Add get api endpoint for a single project approval rule. !47823
+- Add vulnerability severities count to group report. !47861
+- Add vulnerability severities count to instance report. !47863
+- Introduce quality test cases. !47948
+- Add compliance framework creation mutation. !48250
+- Adds API support for Project Deployment Frequency. !48265
+- Improve accessibility of keyboard navigation for Requirements. !48325
+- Geo: Snippet replication using the new Geo framework for repositories. !48371
+- Extend Vulnerability GraphQL API with External Issue Links. !48616
+- Move iteration report summary stats underneath toggle buttons. !48659
+- Remove audit_log_export_csv feature flag. !48669
+- Add creating Vulnerability External Issue Link using GraphQL. !48687
+- Expose normalizedTargetUrl on DastSiteProfile GraphQL type. !48727
+- Add a form for inviting teammates to the Create group page. !48794
+- Add field hasSolutions for Vulnerability GraphQL type. !48820
+- Extend Gitlab::Codeowners to include a method for returning the sections only. !48898
+- Add GraphQL mutation to destroy compliance framework. !48912
+- Create a rake command to mark reindex job failed. !48938
+- Allow Group SAML to auto-created new users. !48953
+- Extend ability to read audit events to more roles. !49106
+- Add parsing details from security reports. !49107
+- Add ability to update compliance frameworks via GraphQL. !49157
+- Pass the 'raw' URL instead of 'blob' URL in revocation api call. !49170
+- Fire webhook on add group member. !49285
+- Enable billable_members feature. !49336
+- Allow SAML response to set certain user attributes on creation. !49394
+- API Fuzzing results integrated into security dashboard. !49434
+- Allow users to manage test cases. !49491
+- Allow Users to Set Canary Ingress via UI. !49516
+- GitLab.com users without password must contact to delete account. !49626
+- Introduce User Cap admin setting. !49761
+- Display blocking issues count on issues list. !49818
+- Set default query string when searching with filters. !49872
+- API Fuzzing results integrated with vulnerability management. !50112
+
+### Other (14 changes, 2 of them are from the community)
+
+- Prettify billing plans section. !48008
+- Add gitlab-ui styles to issuable bootstrap buttons. !48532
+- Rename "Cycle Analytics" with "Value Stream Analytics" under /ee/spec. !48550 (Takuya Noguchi)
+- Rename "Cycle Analytics" with "Value Stream Analytics" in JS comments. !48551 (Takuya Noguchi)
+- Add manual renew button to billings page. !48610
+- Adds gl-buttons classes to push rules. !48694
+- Use new gl-button in subscriptions checkout step page. !48765
+- Update header text on project level vulnerability report page. !48872
+- Remove the additional_repo_storage_by_namespace feature flag. !49055
+- Add gl-button style to admin area. !49610
+- Track events on requirements page frontend. !49656
+- Convert group saml buttons to gl-button styles. !49852
+- Convert group settings expand button to gl-button. !49857
+- Rename code coverage analytics sections. !49931
+
+
+## 13.6.7 (2021-02-11)
+
+### Security (1 change)
+
+- Geo: Pass GL-ID in a JWT token when proxy-push from secondary.
+
+
+## 13.6.6 (2021-02-01)
+
+### Security (2 changes)
+
+- Remove Kubernetes IP address from error messages returned in Threat Monitoring.
+- Sanitize XSS in Epic milestone due date.
+
+
+## 13.6.5 (2021-01-13)
+
+- No changes.
+
+## 13.6.4 (2021-01-07)
+
+- No changes.
+
+## 13.6.3 (2020-12-10)
+
+- No changes.
+
+## 13.6.2 (2020-12-07)
+
+### Security (1 change)
+
+- Cleanup todos for confidential epics that are no longer accessible by the user.
+
+
+## 13.6.1 (2020-11-23)
+
+- No changes.
+
+## 13.6.0 (2020-11-22)
+
+### Fixed (35 changes)
+
+- Fix permission to modify project MR rules on compliance-labeled projects. !40229
+- Fix the timeout errors happenning on the "pipeline security tab". !41762
+- Fix quoted search term code highlighting. !45278
+- Specify correct finder for gitlab team mebers. !45550
+- Change OOTB from `NetworkPolicy` to `CiliumNetworkPolicy`. !45579
+- Fix icon for iteration-related system notes. !45642
+- Copy dismissal information to vulnerability while creating the record. !45688
+- Fix epic creation form submission as it was causing errors on Safari. !45721
+- Show purchase confirmation banner when user makes new purchases for existing groups. !45786
+- Doc: Introduce new gitlab-ctl promote-db command. !45941
+- Update pipeline when vulnerability dismissal feedback is created. !45954
+- Fix broken rake task test:index_size. !45960
+- Set selected value stream after create and delete. !46100
+- Synchronize dismissal information between `finding` and `vulnerability` entries. !46141
+- Fix return type of DastSiteProfile#status. !46180
+- Fix Global Search Reindexing when reindexing task is not found. !46224
+- Fix duplicate instances in deploy boards when multiple deployments have the same track. !46374
+- Resolve "SAST_DEFAULT_ANALYZERS is written with default value by SAST Config UI". !46388
+- Return 404 when attempting to delete non-existent SSH key. !46450
+- Fix blocking issues count cache when changing issue state. !46585
+- Adding check for pipeline subscription feature availability. !46712
+- Fix bug where primary was promoted even when replication/verification was not complete. !46785
+- Geo Nodes Status - Fix incorrect percentages. !47013
+- Clarify delayed deletion is not applicable to personal projects. !47035
+- Use billing email for purchasing subscriptions. !47105
+- Fix gray background on iterations list page. !47153
+- Geo: Fix OAuth failure on primary. !47178
+- Handle empty project within Security Configuration. !47226
+- Fix error on vulnerability list when there are no vulnerabilities. !47235
+- Fix real-time update of dismissal status of vulnerabilities found by Secret Detection. !47307
+- Fix an issue in the create_empty_index rake task. !47575
+- Fix scoped label text color in dark mode. !47602
+- Fix create_migrations_index for ES6. !47651
+- Fix chain of custody report button hover color. !47899
+- Fix Group Jira Integration configuration page. !47944
+
+### Deprecated (1 change)
+
+- Deprecate globalId and undeprecate id for DastScannerProfile. !47559
+
+### Changed (55 changes, 2 of them are from the community)
+
+- Replace bootstrap alerts in ee/app/views/admin/licenses/_repeat_trial_info.html.haml. !41070 (Jacopo Beschi @jacopo-beschi)
+- Replace bootstrap alerts in ee/app/views/trials/_banner.html.haml. !41074 (Jacopo Beschi @jacopo-beschi)
+- Add description for the Value Stream Analytics Days to Completion chart. !43446
+- Removes ability to change license status through MR and Pipeline pages. !43470
+- Add error message to cluster agent list. !44050
+- Update fuzzing download button styles. !44263
+- Enable single result redirect for advanced commits search. !44308
+- Add new security report schema fields to backend for API Fuzzing. !44800
+- Return seats in use for free or trial subscriptions. !44973
+- Remove not null constraint on framework column in project_compliance_framework_settings table. !45411
+- Reject active on-demand DAST scan when unvalidated. !45423
+- Update epic ID type in board issue mutations to be more specific. !45460
+- DAST on-demand scans site profile form - refactor form validation. !45488
+- Add remote IP address on smart-card audit event. !45512
+- Include subgroups in GraphQL field for vulnerabilityGrades for Groups. !45518
+- Geo: Better error handling of geo:set_secondary_as_primary rake task. !45568
+- Replaced GlDeprecatedBadge with GlBadge for environments_dashboard. !45679
+- Unschedule group deletion on deleting member removal. !45715
+- Add total count to cluster agent and agent token GraphQL API. !45798
+- Don't use docker-in-docker by default for API Fuzzing. !45827
+- Replaced GlDeprecatedBadge for GlBadge in metrics_reports_issue_body. !45873
+- Replaced GlDeprecatedBadge for GlBadge in ee/app/assets/javascripts/license_compliance/components/app.vue. !45891
+- Change historical_data.date from date to timestamptz data type. !45893
+- Replaced GlDeprecatedBadge with GlBadge for Security Dashboard Project List. !45917
+- Migrate renamed Sidekiq queue. !45964
+- Update MR widget vulnerability message. !46167
+- Replace GlDeprecated Badge in ee/app/assets/javascripts/geo_node_form/components/app.vue. !46225
+- Split 'Pipelines for merged results' and 'Merge Train' check boxes. !46357
+- Move marketing opt in to welcome page and opt in by default when setting up for a company. !46446
+- Improve error messages for Vulnerability Issue/MR creation. !46589
+- Generate dynamically sitemap through controller. !46661
+- Enhance User-Experience on Dast-report Download Button. !46681
+- Add `include_descendant_groups` option to Epics GraphQL API. !46711
+- Expose timebox stats explicitly. !46774
+- Remove admin/license page duplicate summary. !46827
+- Ooen pipeline status widget links in the same tab. !46893
+- Chain of custody reports in the compliance dashboard can now also be generated for a specific merge commit. !46994
+- Generate Sitemap routes statically. !47174
+- Use closed icons for issues and epics when closed. !47176
+- Split sign in and sign up for Trial flow. !47179
+- Include first commit date in code stage calculation in Value Stream Analytics. !47215
+- Move Deploy Board Legend to Tooltip. !47236
+- Remove group_wikis feature flag. !47291
+- Geo Node Form - Text Updates. !47297
+- Remove epic check generating sitemap. !47381
+- Updated Screenshots for Security & Compliance Landing Page. !47416
+- Include squash and diff head SHA in Chain of Custody report. !47429
+- Removed DOMContentLoaded Eventlistener from ee/app/assets/javascripts/pages/security/dashboard/show/index.js. !47515
+- Removed DOMContentLoaded Eventlistener from ee/app/assets/javascripts/pages/security/vulnerabilities/index/index.js. !47516
+- Removed DOMContentLoaded Eventlistener from ee/app/assets/javascripts/pages/security/dashboard/settings/index.js. !47517
+- Removed DOMContentLoaded Eventlistener from Security Pages. !47542
+- Include only Gitlab-org owned groups in sitemap. !47608
+- Modify seat link API to send latest historical data instead of previous day's data. !47614
+- Block git push over HTTP when database is read-only. !47673
+- Block LFS writes when database is read-only but allow on Geo secondaries. !47684
+
+### Performance (8 changes)
+
+- Fix cached queries for Groups::GroupMembersController#index. !44626
+- Optimize merge request approvals checking. !45009
+- Run PushRuleCheck in parallel. !45668
+- Add issue close date index. !46444
+- Run project housekeeping for pull mirrors. !46493
+- Change more Elasticsearch indexes to keyword type to save storage. !46640
+- Spread CI minute reset over 3 hours at start of each month. !46927
+- Remove DOMContentLoaded Eventlistener. !47619
+
+### Added (49 changes, 1 of them is from the community)
+
+- Add add/remove label helpers to Epic API. !40465
+- Parse dependency path, and present it to the frontend. !42596
+- Enable dependency path in dependency list. !44001
+- Add GraphQL endpoint for Code Coverage summary for the project. !44472
+- Allow filtering by iterations in issue API. !44690
+- Delete pipeline subscriptions from the UI. !45166
+- Allow sorting of the Incident SLA column. !45344
+- Add issues collection weight to GraphQL. !45415
+- Add burnup charts to milestone page. !45477
+- Add burndown and burnup charts to iteration report. !45492
+- Advanced Search: Add optional Chinese and Japanese languages support. !45513
+- Specify group when creating epic. !45741
+- Add GraphQL endpoint for Code Coverage Activity for the group. !45831
+- Add audit logs for PAT create and revoke services. !45976
+- Add security status badge to the project pipeline widget. !45987
+- Resolve Populate the milestone dropdown combobox on the Release edit/new page with Group milestones. !46027
+- Add GraphQL mutation to promote an issue to an epic. !46143
+- Adding push rules to project exports. !46275
+- Expose blocked issue count in GraphQL. !46303
+- Add app code for secret detection token revocation. !46337
+- Add service to import Requirements from a CSV file. !46361
+- Show basic security scan information in merge requests for non-Ultimate users. !46458
+- Update API Fuzzing template to support use of a Postman Collection. !46476
+- Add email notification to notify result of CSV requirements import. !46484
+- Add requirements visibility access project setting. !46532 (Lee Tickett)
+- Add Vulnerabilities::FindingLink model. !46555
+- Chain of custody report filter by merge commit sha. !46581
+- Introduce vulnerabilities trends chart to the security dashboard. !46591
+- Add background migrations for Elasticsearch. !46672
+- Add API Fuzzing to security dashboard and vulnerabilities details page. !46854
+- Expose Devops Adoption segments via GraphQL. !46879
+- Add epic filter option to public APIs. !46887
+- Enable credentials inventory revocation emails. !46973
+- Add new fields for creating issues from vulnerabilities in Jira. !46982
+- Geo: Disable Self-service framework verification by default, and add package file verification feature flag. !46998
+- Epics Swimlanes for group and project issue boards. !47036
+- Fetch available issue types in Jira integration for vulnerabilities. !47046
+- Add link to generate issue from vulnerability in Jira. !47048
+- Add filtering Jira issues on GitLab Vulnerability ID. !47198
+- Add releasesCount and releasesPercentage to Group GraphQL type. !47245
+- Add filtering by iteration in GraphQL board list issues query. !47263
+- Enable Special References for Vulnerabilities. !47292
+- Promote an Issue to an Epic via the UI. !47306
+- Expose discussion and notes count in Epic query. !47409
+- Add route for test cases show page. !47441
+- Add graphql for snippet registries. !47448
+- Generate audit event after new user is approved. !47468
+- Add latest project test coverage list to group repositories analytics. !47572
+- Allow filtering by iteration in issue lists and issue boards. !47766
+
+### Other (11 changes, 5 of them are from the community)
+
+- Replace `GlDeprecatedDropdown` with `GlDropdown` in `ee/app/assets/javascripts/insights/components/insights.vue`. !41442 (nuwe1)
+- Update approvals toggle button style. !42075
+- Track issue health status changes in usage ping. !44417
+- Add text/tips to clarify various user counts in self-managed admin panels. !44986
+- Update security dashboard filter styling. !45468
+- Add retention information to Vulnerability Count documentation. !46054
+- Refactor license delete confirmation modal to use Pajamas. !46149
+- Test for different link types in IssueLinksResolver and create E2E specs. !46297 (Justin Zeng)
+- Rename "cycle analytics" with "value stream analytics" under /ee/spec. !46745 (Takuya Noguchi)
+- Remove duplicated BS display properties from Quality Test Case. !47044 (Takuya Noguchi)
+- Remove duplicated BS display properties from member overriding UI. !47126 (Takuya Noguchi)
+
+
+## 13.5.7 (2021-01-13)
+
+- No changes.
+
+## 13.5.6 (2021-01-07)
+
+- No changes.
+
+## 13.5.5 (2020-12-07)
+
+### Security (1 change)
+
+- Cleanup todos for confidential epics that are no longer accessible by the user.
+
+
+## 13.5.4 (2020-11-13)
+
+### Fixed (1 change)
+
+- Fix vsa filter paths. !47058
+
+### Changed (1 change)
+
+- Disallow editing of project-level MR approval settings when enabled at the instance level. !46637
+
+
+## 13.5.3 (2020-11-03)
+
+- No changes.
+
+## 13.5.2 (2020-11-02)
+
+### Security (4 changes)
+
+- Sync code owners rules on MR update. !1003
+- Fix potential regex backtracking attack in path parsing in search result. !1027
+- Transfer missing epics when a project is transferred.
+- Tighten the RBAC for GraphQL in SAST CiConfiguration.
+
+
+## 13.5.1 (2020-10-22)
+
+- No changes.
+
+## 13.5.0 (2020-10-22)
+
+### Removed (1 change, 1 of them is from the community)
+
+- Issue 233813 - Remove confusing text and url on vulnerability finding modal. !43698 (Judith Weiss)
+
+### Fixed (43 changes, 2 of them are from the community)
+
+- Fix quick actions autocomplete in new epic form. !37099
+- Exclude bots from licensed user count. !42034
+- Allow epic tree nodes to reset correctly. !42083
+- Fix merge pre-receive errors when load balancing in use. !42435
+- This fixes an issue where the request parameters would be missing on the Value Stream Analytics page, so the charts would not reflect the filters applied. !42655
+- Fix project_ids query param for group test coverage report. !42880
+- Fix: [Geo] Blob removal doesn't work for SSF blobs. !42891
+- Remove N+1 in license scanning report comparison. !42895
+- Ignore rake task license check on geo secondaries. !42920
+- Fix the scroll position in code search results. !43083
+- Fixes a bug with merge request approval rules being changed after creation. !43209
+- Check if HEAD report is nil when diffing license_scanning reports. !43210
+- Allow access to license scan report when `read_licenses` claim is satisfied. !43222
+- Geo: Permanently enable package_file_registries field. !43245
+- Generate a link to an artifact using the path from the license scanning report. !43455
+- Fallback to matching policies on license name. !43488
+- Send only one scope query when requesting pipeline findings. !43535
+- Show that Advanced Search is disabled when searching in a specific ref. !43612
+- Add route to coverage_fuzzing_reports. !43664
+- Remove confirm email from trial form. !43683
+- Gracefully handle gitlab:elastic:reindex_cluster unique index violation. !43690
+- Hide "Create Issue" On Vulnerability Page When Issues Are Disabled. !43725 (Kev @KevSlashNull)
+- Change the instance security dashboard path as `/-/security/dashboard`. !43737
+- Fix LDAP group settings heading being shown when feature disabled. !43901
+- Handle 500 error for GraphQL "configureSast" mutation. !43936
+- Fix scoped labels padding. !44044
+- Fix console null errors in security dashboard. !44076 (Kev @KevSlashNull)
+- Load license scan data as soon as it is available. !44194
+- Fix NoMethodError when accessing protected environment for job. !44257
+- Load license scanning widget data when the `read_licenses` claim is satisfied. !44464
+- Geo: Fix single-file snippets on Geo secondaries. !44532
+- Hide issues badge when there are no issues. !44663
+- Fix issue filtering by negated epic parameter. !44719
+- Disallow guest access for group repository analytics. !44721
+- Fix swimlanes duplicate epics. !44728
+- Remove extra to from subscription expiration message. !44769
+- Load license scanning data in MR widget as soon as the data is available. !44835
+- Fix params not filtered on project approval API. !44885
+- Fix disabling options in scanner profile. !44937
+- Label filter includes labels from ancestor groups on merge request analytics page. !44987
+- Align Analytics date picker labels. !44990
+- Fix unnecessary Sidekiq errors/retries when project is deleted during indexing. !45249
+- Fix GitLab vendor name appearing accidentally in the security reports when it's the only one. !45442
+
+### Deprecated (1 change)
+
+- Migrate analytics bs-callout to gl-alert. !40788
+
+### Changed (50 changes)
+
+- Add 'All Environments' option for environment dropdown if enabled. !40531
+- Search projects by namespace from Global Security Dashboard. !41191
+- Remove `project_merge_request_analytics` feature flag. !41876
+- Add namespace column into the network policies UI. Only visible when All Environment option is set. !42125
+- Improve policy editor layout. !42424
+- Update Threat Monitoring page. !42541
+- SAST mutation now supports analyzers section. !42542
+- Move the remediated badge to the activity column. !42599
+- Search API allow group/global notes scope. !42624
+- Return max_seats_used in namespaces list API. !42644
+- Add SAST UI Config telemetry. !42720
+- Security configuration page documentation links are now always available. !42765
+- Update DAST profiles routes. !42859
+- Allowlist GitLab-owned bots for SpamActionService. !42905
+- Add default date range for audit events. !42986
+- Move created issues in the activity column. !43016
+- Add link to vulnerability from created issue. !43046
+- Improve projects table in Usage quotas page. !43080
+- Limit Project Access Tokens/Bots to paid groups in Gitlab.com. !43199
+- Update Dismiss selected button on security dashboard. !43207
+- Use gl-badge for vulnerability states. !43253
+- Improve design for vulnerability details. !43274
+- Remove code for non-versioned terraform state replication. !43341
+- Remove feedback alerts from License Compliance & Dependency List. !43371
+- Removes fallback warning for legacy deploy board labels. !43376
+- Support Group Milestones to be associated with Project Releases in API. !43385
+- Move the download test coverage button to its own section in group repositories analytics page. !43422
+- Updated license compliance policy violation indicator styling. !43447
+- Remove item when dismissed on security dashboard if it no longer matches filter. !43468
+- Make it easier to click on items for bulk dismissal selection on security dashboard. !43482
+- DAST Profiles manage button changed to default styling. !43588
+- Use similarity sort when searching projects from Security Dashboard. !43610
+- Replace remove icon with unlink. !43641
+- Geo Form - Internal URL More Info Link. !43876
+- Find or create index when Elasticsearch indexing enabled. !43912
+- Update the audit events filter to have a fallback starting date. !44005
+- Only allow multiple reviewers in paid tiers. !44097
+- Change stubbed DastSiteProfile#status for calculated status. !44133
+- Migrate compliance framework enums to a new table. !44290
+- Return more specific error message when moving issue in GraphQL API. !44296
+- Replace bootstrap alert in ee/app/views/projects/_merge_request_approvals_settings_form.html.haml. !44749
+- Add swimlanes license check. !44880
+- Add project full path to analytics project dropdown filter. !45020
+- Order cluster agents query by name. !45165
+- Truncate long file paths. !45254
+- Allows GitLab-owned service users to bypass certain spam checks. !45310
+- Display dependency version on License Compliance page. !45315
+- Allow 'allowed_to_push' to supersede code owner protected branch. !45323
+- Geo - Rename Open projects Button to Replication details. !45434
+- Update RemoveProjectFromSecurityDashboard mutation to use new Global IDs. !45500
+
+### Performance (8 changes)
+
+- Geo: Improve performance of LFS objects queries. !42423
+- Fix poor performance with global search across entire instance. !42437
+- Preload epics in GraphQL group queries using Lookahead. !42874
+- Reduce load time of large number of audit events. !43248
+- Preload parent in GraphQL epics queries using Lookahead. !43323
+- Fix N+1 cache queries for load balancing sticking. !43843
+- Improve audit events preloading logic for CSV export. !44958
+- Use Lookahead to preload tests reports when querying Requirements with GraphQL. !45195
+
+### Added (69 changes, 2 of them are from the community)
+
+- Make mapping between LDAP and Kerberos configurable. !9962 (Christopher Schenk)
+- Add usage ping for MRs with overridden project rules. !36230
+- Added a delete SSH key button to the credentials inventory pages. !41592
+- Audit failed 2-factor login attempt. !41641
+- Add API to revert vulnerability to reverted state. !41784
+- Add GraphQL API to revert vulnerabilities to detected state. !41786
+- Add ability to revert vulnerability to detected state on single vulnerability page. !41794
+- Add Agent List to Cluster List View. !42115
+- Add ability to validate sites for on-demand DAST. !42198
+- Track views of group repo analytics page in snowplow. !42376
+- Send email reminder when approaching active user limit. !42453
+- Add license encryption key for testing purposes. !42475
+- Add mutation to Confirm Vulnerability in GraphQL. !42499
+- Expose board epic user preferences in GraphQL. !42569
+- Expose analyzer configuration in SAST Configuration UI. !42593
+- Rename Active Users to Billable Users. !42638
+- Add quick select date options to audit events filter. !42711
+- Allow updating epic swimlanes collapsed status in GraphQL. !42712
+- Add 'blob:' search filter to search for a specific Git object ID. !42752
+- Show when the last update to seats usage data was in the Billing page. !42763
+- Introduce top-level `vulnerability` field for GraphQL API. !42870
+- Add `discussions` and `notes` fields for VulnerabilityType on GraphQL API. !42892
+- Count merged MRs using approval rules in usage data. !42911
+- Config to hide Open/Closed list in Boards. !42945
+- Add ability to sort vulnerabilities by detected_at. !42950
+- Enable sorting vulnerabiliies by detected date in the list view. !42952
+- Add ability to sort vulnerabilities by title in GraphQL. !42953
+- Enable sorting vulnerabiliies by title in list view. !42955
+- Add ability to sort vulnerabilities by state. !42973
+- Enable sorting vulnerabiliies by state in vulnerability list. !42974
+- Add ability to sort vulnerabilities by report type in GraphQL. !42979
+- Enable sorting vulnerabiliies by state in the list view. !42980
+- Fetch more group projects for the test coverage dropdown. !43044
+- Expose using_license_seat in users API for admins. !43057
+- Add description field to requirements model and expose it in GraphQL API. !43099
+- Add `cwe` and `Other Identifiers` columns into vulnerability export files. !43179
+- Allow created_at and updated_at to be set through Epics API. !43279 (stingrayza)
+- Support flexible rollout strategy in the API. !43340
+- Enable geo replication of versioned terraform state. !43367
+- Add feedback alert in DAST On-demand Scans. !43374
+- Provide ability to mark a requirement as Satisfied. !43583
+- Add more options in DAST On-demand Scanner Profile. !43660
+- Persist collapsed state to DB. !43681
+- Add API Fuzzing report type (backend). !43763
+- Add search autocomplete suggestions for recently viewed epics. !43964
+- Update security vulnerability modal to show fuzzing data. !43983
+- Add incident SLA to operations settings. !44099
+- Update and expose board labels trough GraphQL API. !44204
+- Add basic search for epics. !44269
+- Add header validation to DastSiteValidationWorker. !44314
+- Expose if requirement test report wasmanually created on GraphQL. !44345
+- API endpoint to return defined experiments. !44498
+- Honor all DAST Scanner Profile variables in on demand DAST Scan. !44508
+- Create pipeline status widget. !44521
+- Include additional information related from scan in issue template. !44620
+- Include pipeline artifacts size on storage usage page. !44645
+- Add REST API for listing iterations. !44685
+- Provide dependency version data for the License Compliance page. !44839
+- Add tooltip to DAST scan profiles delete button. !44876
+- Add support for providing requirement description. !44902
+- Add iteration reports in projects. !44921
+- Create SamlGroupLink table and model. !45061
+- Introduce optional Service Level Agreement (SLA) for Incidents. !45085
+- Add metric count for projects with incident sla enabled. !45092
+- Add group-level wikis. !45144
+- Enable geo replication for merge request diffs. !45224
+- Update merge requests approvers when code owners is updated. !45290
+- Add MobSF in SAST vendor template. !45291
+- Expose seats_in_use in namespace entity. !45316
+
+### Other (20 changes, 7 of them are from the community)
+
+- Replace Loading Button with Icon on All Vulnerability Lists. !41019 (Kev @KevSlashNull)
+- Replace bootstrap alert in jaeger page. !41610
+- Remove duplicate broken container scanning findings. !42609
+- Add tooltip to header for Code Owner Approval toggle in repository settings. !42725
+- Migrate Start event label dropdown. !43050
+- Use new fingerprint as default fingerprint for Container Scanning findings. !43145
+- Apply GitLab UI button styles in ee/app/views/projects/settings/ci_cd directory. !43335 (Justin Zeng @jzeng88)
+- adds the `.gl-button` class to ee/app/views/projects/settings/operations/_tracing.html.haml. !43347 (Justin Zeng @jzeng88)
+- Finish migration of Container Scanning fingerprints. !43691
+- Replace in-repo SVGs with @gitlab/svgs in Group Value Stream Analytics. !43825 (Takuya Noguchi)
+- Refactor vulnerabilities related issues component test createWrapper method to take an object instead of multiple arguments. !44035 (Kev @KevSlashNull)
+- Create tests for ee/app/assets/javascripts/security_dashboard/components/selection_summary_vuex.vue. !44213 (Kev @KevSlashNull)
+- Expose scan object in unsaved findings. !44274
+- Use the new dropdown for the split button in vulnerability management. !44399
+- Redesign solution card in vulnerability details page. !44408
+- Improve selection_summary_spec.js tests. !44506 (Kev @KevSlashNull)
+- Add metrics for tracking stale secondaries for merge requests. !44813
+- Text wrap the license name in Dependency List. !45242
+- Convert bootstrap alert to gl for project size limit. !45312
+- Remove bootstrap class in licensed user count. !45443
+
+
+## 13.4.7 (2020-12-07)
+
+### Security (1 change)
+
+- Cleanup todos for confidential epics that are no longer accessible by the user.
+
+
+## 13.4.6 (2020-11-03)
+
+### Fixed (1 change)
+
+- Handle 500 error for GraphQL mutation. !43936
+
+
+## 13.4.5 (2020-11-02)
+
+### Security (4 changes)
+
+- Sync code owners rules on MR update. !1003
+- Fix potential regex backtracking attack in path parsing in search result. !1023
+- Transfer missing epics when a project is transferred.
+- Tighten the RBAC for GraphQL in SAST CiConfiguration.
+
+
+## 13.4.4 (2020-10-15)
+
+### Fixed (1 change)
+
+- Geo: Fix "Project repo not able to resync after storage move". !44172
+
+
+## 13.4.3 (2020-10-06)
+
+### Fixed (5 changes)
+
+- 13.4 Port of Geo: Permanently enable package_file_registries field. !43434
+- Limit spam checks to title, description, or confidentiality changes on bot-created issues. !43463
+- Fixing an issue on the Productivity Analytics page, where applying filters would not update the results. This should now work as expected; applying a filter updates the results on the page filtered by the filters applied. !43532
+- Geo - Fix wikis with no repository on the primary trying to sync over and over. !43765
+- Do not try to copy issue weight events when promoting an issue to epic. !43891
+
+
+## 13.4.0 (2020-09-22)
+
+### Security (1 change, 1 of them is from the community)
+
+- Remove v-html from environments/components/deploy_board_component.vue. !41521 (Takuya Noguchi)
+
+### Removed (2 changes)
+
+- Remove VSA duration median line. !39665
+- Remove Users over license banner. !39836
+
+### Fixed (56 changes, 6 of them are from the community)
+
+- Allow creation of confidential sub-epics from tree. !37882 (Jan Beckmann)
+- Use active user count instead historial max. !37916
+- Move Add Approver name validation error into form. !39389
+- Update environment dashboard help text. !39450
+- Add identifier check when creating vulnerability findings. !39650
+- Update epic inherited dates and create notes when reordering in epic tree. !39742
+- Fix Approval Rules table in Merge Requests bursting out of the layout in some scenarios. !39753
+- Fix group name bug for new purchase flow. !39915
+- Add docker options for Load Perf testing. !39977
+- Use Gitlab::ErrorTracking in place of project.logger for indexing errors. !39979
+- Fix unchecking all compliance frameworks for MR approvals settings. !40070
+- Remove gap on trial registrations page. !40080
+- Fix issue where the select page dropdown would be disabled on the Insights Analytics page when no charts were loaded. !40096
+- Display contents of Zuora iframe for the new purchase flow in Dark Mode. !40114
+- Activate on-demand scans nav item when editing a site profile. !40148
+- Omit sub-groups from trial selection menu. !40300
+- Geo Statuses - Fix empty section bug. !40443
+- Update description when editing iteration. !40476
+- Fix remediated badge visibility on vulnerability list. !40483
+- Fix breadcrumb for security dashboard. !40486
+- Don’t create new gitlab_subscription records on nested attributes to namespaces. !40537
+- Make vulnerability list columns have consistent widths. !40561
+- Don't overwrite user's description by default template description. !40609
+- Improve Accordion Item Focus State. !40638 (Kev @KevSlashNull)
+- Geo: Fix design repository failures with selective sync, and make container repository updates more robust. !40643
+- Prevent Download For Failed Vulnerability Export Jobs. !40656 (Kev @KevSlashNull)
+- Fix vulnerability comment delete button spinner position. !40681
+- Fix vulnerability save button spinner position. !40781
+- Fix error in migration to populate historical vulnerability statistics. !40835
+- Fix for Iterations closing a day early. !40884
+- Add missing path to project vulnerability. !40935
+- Allow on-demand DAST pipelines to be found for scanned resource. !40982
+- Support dark theme for overview of payment method component for the new purchase flow. !40988
+- Create resource weight event when setting the weight during issue creation. !41087
+- Un-nest sidebar under .context-header div in security navigation. !41176
+- Fix dasboard to dashboard. !41440
+- Geo: Avoid orphaning blob files on secondaries. !41529
+- Disable loading vulnerabilities in MR when pipeline is running. !41539 (Justin Zeng)
+- Enable secret detection for MR Widget. !41582
+- Introduce ^ as a reference prefix for Vulnerabilities. !41643
+- Fix the size of chart placeholder on Analytics pages for Merge Requests, Insights and Value stream, so it matches the actual charts. the size of the real chart shown afterwards. !41904
+- Correct sibling query for epic tree nodes. !41986
+- Fix SAST Config GraphQL mutation. !42003
+- Fix Duplicate Keys in Vulnerability Details. !42027 (Kev @KevSlashNull)
+- Hide confirmation modal after closing a blocked issue. !42068
+- Create a Geo cache invalidation event when toggling feature flags through the API. !42070
+- Track state changes using resource state events for Epics. !42088
+- This change preserves the environment when editing network policies. !42148
+- Reset scope to all-environments when last scope removed. !42287
+- Return stored seat counts in the subscriptions API endpoint. !42293
+- DAST on-demand site profiles: prevent error banner from showing. !42300
+- Fix MR Modal Vulnerability Links Overflow Modal. !42332 (Kev @KevSlashNull)
+- Fix project_ids query param for downloading coverage CSV report. !42497
+- Fix selecting all projects in group code coverage report. !42507
+- Geo - Create repository updated events only if the repository exists. !42519
+- Fix Iterations quickaction not showing all iterations. !42528
+
+### Deprecated (1 change)
+
+- Mark RunDASTScan mutation as deprecated. !42544
+
+### Changed (66 changes, 2 of them are from the community)
+
+- Use standard table colors in Dependency List. !31130
+- Disable editing health status for closed issues and show informative tooltip. !38372
+- Added Cluster Agent delete mutation for GraphQl. !38622
+- Button migration to component on dependency list. !38624
+- Update FF nav section using GitLab UI Utilities. !38768
+- Pass current_plan all the way down the partial chain. !38868
+- add CiliumNetworkPolicy into services. !39127
+- Persist when dismissing FF will look different message. !39238
+- Update URL when editing iteration. !39296
+- Move Analytics to admin panel. !39368
+- Relocate create issue button from header section to the related issues section. !39533
+- Remove project selector logic from instance security dashboard. !39631
+- Move variable audit logging to Starter. !39730
+- Epic labeling for confidential epics. !39794
+- Add How-to-upgrade link to admin license page. !39974
+- Apply sizing to SAST Configuration variable fields. !40002
+- Do not write SAST defaults via SAST Config UI. !40030
+- Create instance-level security charts component and update severity widget CSS. !40046
+- Return message when personal access token creation fails in internal API. !40073 (Taylan Develioglu)
+- Replace <gl-deprecated-button> with <gl-button> in confirm_order component. !40119
+- Revert Merge branch add_standard_field_into_payload into master. !40162
+- Hide warning to disable GitLab issues in Jira integration form. !40248
+- Add link to primary node in secondary node alert. !40297
+- Make legacy feature flags read-only. !40320
+- Remove project limit from Environments Dashboard help text. !40333
+- Use semantic HTML in Progress Bar component. !40380
+- Simplify progress bar steps logic. !40390
+- Reset CI minutes for all namespaces every month. !40396
+- Implement empty state on security dashboard. !40413
+- DAST Scanner Profile Library: change new-profile button to dropdown. !40469
+- Remove health status feature from incidents. !40520
+- Improve error message when creating issue fails. !40525
+- Allow SAST Configuration UI to be used when there's an existing CI file. !40528
+- Add support for multiple environments on the controller and service level. !40529
+- Allow for project filtering in Group code coverage Finder class. !40547
+- Allow milestone and assignee board lists to be created using GraphQL. !40551
+- Add Feature Flags Search Box shortcut. !40578
+- Enhance error messages for Add Project to Security Dashboard mutation. !40607
+- Make environments dropdown fetch results as soon as it's focused. !40624
+- Change the configureSast mutation to use actual GraphQL types instead of JSON types. !40637
+- Remove group_push_rules feature flag. !40658
+- Remove issue note from vulnerability details. !40686
+- Enhance error messages when Adding Projects to Security Dashboard. !40692
+- ee Migrating modal button in License Compliance. !40747
+- Change merge train position messaging. !40777
+- Remove weight from incidents sidebar. !40794
+- Expand retention period to 365 days for Vulnerability Statistics. !40833
+- Move group activity analytics from beta to general availability. !40916
+- Link Elasticsearch indexing progress to elastic_commit_indexer. !40928
+- Use finding_description for Details in CSV vulnerability export. !40944
+- Hide the upgrade link on the admin license page if plan Ultimate. !40977
+- Show ancestor iterations in subgroups. !40990
+- Improve the UX of the Start a Trial group selection page. !41020
+- Replace bootstrap alerts in ee/app/views/admin/push_rules/_push_rules.html.haml. !41072 (Jacopo Beschi @jacopo-beschi)
+- Only display downgraded message if on free plan. !41213
+- Sort merge requests by merged at date in Merge Request Analytics. !41272
+- Apply filters to vulnerability count list. !41566
+- Filter out incidents from related issues in epics. !41807
+- Show additional columns in Group and Instance Security Dashboards. !41829
+- Add toast to the reset pipelines minutes button. !41838
+- Add explanation text to FF create/edit sections. !41910
+- Use GitLab utility classes for the alert component instead of Bootstrap. !41974
+- Remove license check for feature flags. !42023
+- Update in preparation of supporting analyzers. !42173
+- Skip the who will be using GitLab question in signup when a user is invited. !42264
+- Expose approvals required and approvals left for merge requests in GraphQL. !42354
+
+### Performance (10 changes)
+
+- Optimize the Advanced Search query for Issues and Notes. !38095
+- Load only the requested report artifacts into the memory for vulnerability_findings endpoint. !39749
+- Add cache for elasticsearch_indexes_namespace check. !41274
+- Limit the context for paused elasticsearch jobs. !41297
+- Cache project user defined rules by branch. !41564
+- Return empty scanners list when pipeline has no reports. !41652
+- Enable elasticsearch namespace enabled cache by default. !41875
+- Refactor approval_rules association. !41965
+- Move approval reset to new service and worker. !42001
+- Geo: Improve performance of package files queries. !42294
+
+### Added (66 changes)
+
+- Add usage data for counting projects with sectional codeowner rules. !37786
+- Add group code coverage download button. !37853
+- Deployer authorisation for protected environments. !38188
+- Add ability to fetch DastSiteProfile via GraphQL. !38380
+- Added loading animations for value stream analytics. !38447
+- Add epic_id param to issue update graphQL mutation. !38678
+- Cluster token create mutation for GraphQL. !38820
+- Add GraphQL endpoint for retrieving cluster agents for a project. !38833
+- Add metrics for terraform state replication. !38959
+- Allow requirement status to be updated with GraphQL. !39371
+- Count security jobs. !39481
+- Show tooltips for License-Check and Vulnerability-Check approval rules. !39579
+- Add pagination to Environments Dashboard. !39637
+- Show license overage warning on admin dashboard. !39704
+- Add Revoke buttons to the PAT tab of the instance credential inventory. !39712
+- Show Latest Most Severe Alert on Environment. !39743
+- Add an API to add a push rule to a group. !39760
+- Add a License overview section to the Admin dashboard. !40009
+- Include subgroup issues in iteration issue list. !40099
+- Enable to delete a custom value stream. !40127
+- API to edit group push rules. !40136
+- Add endpoint to update Dast Scanner Profile. !40208
+- Add global_id field to DastScannerProfiles::Create. !40225
+- Add suggested security approval rules. !40250
+- Add deployment events to group webhooks. !40270
+- API to delete group push rule. !40293
+- Geo: Add graphql endpoints for terraform state. !40317
+- Add GraphQL endpoint for deleting a cluster agent token. !40338
+- Add EULA checkbox on license page. !40352
+- Add feedback call to action in SAST Configuration. !40363
+- Make Auto DevOps alert in Security Configuration dismissible. !40375
+- Adding counts of users using default branch locks and users using multi-branch LFS locks. !40419
+- Make searching issues/MRs by IID even easier. !40467
+- On-demand scans item on Security & Compliance configuration page. !40474
+- Allow reporters to approve MRs. !40491
+- Expose approved flag in Merge Request GraphQL API. !40505
+- Populate `resolved_on_default_branch` column for existing vulnerabilities. !40755
+- Allow fetching agent tokens from cluster agent GraphQL endpoint. !40779
+- Add detected date to vulnerability details page. !40782
+- Add delete mutation for DAST scanner profile. !40805
+- Add REST endpoint to access resource iteration events. !40850
+- Add ability to sort vulnerabilities by severity in GraphQL API. !40856
+- Delete custom value streams. !40927
+- Introduce `detectedAt` field for VulnerabilityType on GraphQL API. !41000
+- Use dast_scanner_profiles in DAST on-demand scans. !41060
+- Add ability to filter vulnerabilitiesSeveritiesCount in GraphQL for Project, Group and Instance Security Dashboard. !41067
+- Add detected column with timestamp on security dashboards. !41092
+- Create vulnerabilities route/page for instance-level security dashboard. !41156
+- Add GraphQL mutation to create test cases. !41190
+- Geo: Add rake task to check if DB replication is working. !41618
+- New checkout flow for free groups on gitlab.com. !41644
+- Add filtering by activity (has_resolution, has_issues) to Vulnerability. !41650
+- Add link to GitLab CI history in Security Configuration. !41673
+- Add ability to track unique uses of API endpoints. !41689
+- Support custom JSON schema validation in the Web IDE. !41700
+- Support moving issue between epics in GraphQL. !41790
+- Adding total counts of default branch locks and multi-branch LFS locks. !41824
+- Expose analyzer info for SAST Config. !41825
+- Add Vulnerabilities Count by Day to Project GraphQL API. !41856
+- Add policy editor to the Threat Monitoring page. !41949
+- Enable on-demand DAST scans scanner-profiles flag by default. !41950
+- Add support for reading Vault secrets from CI jobs. !42055
+- Add ability to select projects for group coverage report. !42129
+- Add + as a special reference for to GFM Autocomplete. !42190
+- Add sorting functionality to vulnerability list. !42347
+- Add mutation to Resolve Vulnerability in GraphQL. !42500
+
+### Other (26 changes, 11 of them are from the community)
+
+- Update Browser Performance Testing SiteSpeed version to 14.1.0. !37685
+- Change Advanced Global Search to Advanced Search. !39526
+- Migrate analytics stage button away from deprecated button. !39560
+- Add backend pagination to the environments dashboard. !39847
+- Deprecate -gray- variables and replace with - variables. !39860
+- Add Snowplow to Toggles on Feature Flag Table. !39995
+- Add Snowplow to Toggles on Edit Feature Flag. !40023
+- Update Standalone Vulnerabilities Page to be a Single Vue App. !40189 (Kev @KevSlashNull)
+- Migrate Bootstrap button to GlButton in the issue boards assignee dropdown list. !40398
+- Update $orange variables to match GitLab UI and address contrast for accessibility. !40652
+- Track iteraton changes using resource events. !40841
+- Replace deprecated button on status page. !41012
+- Fix typos of committed in project views. !41038 (Takuya Noguchi)
+- Replace v-html with v-safe-html in dismissal_note.vue. !41137 (Kev @KevSlashNull)
+- Replace v-html with v-safe-html in card_security_discover_app.vue. !41139 (Kev @KevSlashNull)
+- Replace deprecated buttons with new GlButton component from GitLab UI. !41154
+- Replace v-html with v-safe-html in configure_feature_flags_modal.vue. !41210 (Kev @KevSlashNull)
+- Replace v-html with v-safe-html in groups_dropdown_filter.vue. !41212 (Kev @KevSlashNull)
+- Replace v-html with inline text in weight.vue. !41325 (Kev @KevSlashNull)
+- Internationalize Admin namespace plan. !41363 (Takuya Noguchi)
+- Internationalize Admin dashboard Geo. !41368 (Takuya Noguchi)
+- Update location fingerprint for existing CS vulnerabilities. !41756
+- Rename Elasticsearch to Advanced Search in Admin UI. !42048
+- Remove without_index_namespace_callback trait. !42082 (Andrei Cirnici @acirnici)
+- Adjust Color of Low Severity Symbol. !42153 (Kev @KevSlashNull)
+- Elasticsearch reindexing: add confirmation popup and change color scheme. !42209
+
+
+## 13.3.9 (2020-11-02)
+
+### Security (4 changes)
+
+- Sync code owners rules on MR update. !1003
+- Fix potential regex backtracking attack in path parsing in search result. !1024
+- Transfer missing epics when a project is transferred.
+- Tighten the RBAC for GraphQL in SAST CiConfiguration.
+
+
+## 13.3.8 (2020-10-21)
+
+### Fixed (4 changes)
+
+- Geo: Permanently enable package_file_registries field. !43436
+- Geo - Fix wikis with no repository on the primary trying to sync over and over. !43765
+- Handle 500 error for GraphQL configureSast mutation. !43936
+- Geo: Fix "Project repo not able to resync after storage move". !44172
+
+
+## 13.3.4 (2020-09-02)
+
+- No changes.
+
+## 13.3.3 (2020-09-02)
+
+### Security (2 changes)
+
+- Sanitize vulnerability history comment.
+- Fix displaying epics visibility in issue sidebar.
+
+
+## 13.3.2 (2020-08-28)
+
+- No changes.
+
+## 13.3.1 (2020-08-25)
+
+### Fixed (2 changes)
+
+- Geo: Apply selective sync to container repo updates. !39663
+- Geo: Apply selective sync to design repo updates. !39916
+
+
+## 13.3.0 (2020-08-22)
+
+### Removed (7 changes)
+
+- Remove unused approvals controller actions. !36855
+- Geo: Remove FDW warnings from health checks. !38620
+- Geo: Remove FDW warnings from configuration checks. !38629
+- Geo: Remove rake task to refresh foreign tables definition in Geo Secondary node. !38632
+- Geo: Remove support for Foreign Data Wrapper. !38718
+- Disable loading resolvedOnDefaultBranch for Vulnerabilities. !38783
+- Remove Foreign Data Wrapper support from Geo docs. !39485
+
+### Fixed (53 changes, 3 of them are from the community)
+
+- changed the default value of checkbox to false from a dynamic value on first page load. !36646 (Uday Aggarwal @uday.agg97)
+- Geo: Package file backfill/removal accounts for object storage settings. !36771
+- Geo: Fix LFS file downloads from S3 to secondary. !37008
+- Fix scanned resources count in MR security modal. !37029
+- Geo: Fix OAuth authentication with relative URL used on secondary. !37083
+- Display correct information on Roadmap when an epic has no start and due date. !37093
+- Fix epic label dropdown behavior when opened within the new epic page. !37125
+- Fix security dashboard by excluding license scanning information. !37318
+- VSA fetch duration data for active stages only. !37336
+- Disable security scanner alerts. !37354
+- Geo - Fix Node Form Breadcrumbs. !37366
+- Minor style fixes to 'Linked Issues' card. !37396
+- Fix duplicate dispatch of 'fetchCycleAnalyticsData' action. !37458
+- Do not display the export button while projects are loading. !37573
+- Fix Any filter for labels in Value Stream Analytics. !37584
+- Fix Elasticsearch sorting incorrectly from DB. !37665
+- Scanners Alert: translate COVERAGE_FUZZING. !37803
+- Support Indexing files in Elasticsearch with paths longer than 512 bytes. !37834
+- Only send AWS Credentials ENV to indexer when AWS config is enabled. !37865
+- Remove an extra padding in y-axis on Epic detail. !37886 (Takuya Noguchi)
+- Fix number mismatch issue for MR Widget. !38021
+- Truncate long vulnerability names on security report. !38056
+- Fix persisting multiple default Value Stream Analytics stages per value stream. !38072
+- Geo: Fix consuming events of blobs that should not be synced. !38089
+- Dont use DB connection in GlobalSearchSampler. !38138
+- Permit new projects to be created from active project templates only. !38335
+- Add support for active field to feature flags api. !38350
+- Fix GraphQL for read-only instances with relative URLs. !38402
+- Fix insights period_field parameter. !38404
+- Support renaming feature flags via the api. !38425
+- Geo: Fix not working redownloading of repositories via snapshot. !38464
+- Audit failed login from OAuth provider. !38473 (banovp)
+- Utilize `resolvedOnDefaultBranch` field to show the remediated badge on vulnerabilities list. !38478
+- Show only root namespaces for subscriptions. !38481
+- VSA requests fail without multiple value streams feature flag. !38542
+- Fix MR approval rule update logic for Vulnerability-Check. !38589
+- Update Vulnerability::IssueLinks when moving Issues to new Project. !38765
+- Only show subscribable banner when auto-renew is set. !38962
+- Dark mode - Fix edit scoped labels. !39166
+- Add logging when indexing projects are missing project_feature attribute. !39255
+- SCIM provisioning to avoid creating SCIM identity without membership. !39259
+- Fixed iteration references when in a private group/project. !39262
+- Fix Iteration Edit button color to black. !39286
+- Geo: Replicate repository changes when mirrors are updated. !39295
+- Fix commented_by for any approvers rule. !39432
+- Filtered search width fix on Roadmap. !39440
+- Geo: Skip project/wiki repo create/update events based on selective sync. !39488
+- Fix scanner check when creating vulnerability findings. !39500
+- Set default for current_value in SAST config UI. !39504
+- Fix the `Vulnerability-Check` and `License-Check` approval rules to be synched correctly after creating a merge request. !39587
+- Ensure secondary is enabled on failover. !39615
+- Pass the IID of the User List on Update. !39639
+- Geo: Apply selective sync to container repo updates. !39663
+
+### Deprecated (1 change)
+
+- Deprecate vulnerabilitiesCountByDayAndSeverity on Group and InstanceSecurityDashboard GraphQL API. !38197
+
+### Changed (58 changes, 1 of them is from the community)
+
+- Geo: Add package files to status rake tasks. !36192
+- Omit namespaces w/ non-free plans from trial select. !36394
+- Expose blocked field on GraphQL issue type. !36428
+- Display notices above license breakdown. !36881
+- Send AWS credentials via environment variables to indexer. !36917
+- Track issue weight changes using resource events. !36936
+- Smartly truncate URLs in DAST Modal. !37078
+- Polish Jira issues UI. !37095
+- Inherit parent epic during an issue promotion. !37109
+- Geo: Replace geo_self_service_framework_replication feature flag with replicable specific flags. !37112
+- Expired subscription banner doesn't display for auto-renew. !37127
+- License Compliance: Show license-approvals to be inactive if no approvals required. !37170
+- Show count of extra identifiers in project dashboard. !37256
+- Make New Feature Flags alert dismissible. !37306
+- Simplify Advanced Search code_analyzer regex complexity. !37372
+- Subscription Banner has 14 day grace period. !37378
+- Allow nested gitlab_subscription on namespace api. !37397 (jejacks0n)
+- Add is_standard as part of frontend payload for NetworkPolicyController. !37527
+- Hide health status labels for closed issues on epics tree. !37561
+- Remove heading from Feature Flags section. !37613
+- Add extra identifier count to pipeline sec tab. !37654
+- Hide Epic widget for incidents. !37731
+- Use new chart loader on Insights page. !37815
+- By default display only confirmed and detected vulnerabilities. !37914
+- Use Drawer for Requirement Create/Edit form UI. !37943
+- Audit log group variable updates. !37945
+- Update merge request button messaging for license-check approval. !37954
+- Update Compliance Dashboard to use tabs. !37959
+- Make security summary message more understandable. !38043
+- Reset CI minutes for all namespaces every month. !38057
+- Add new security charts page and unavailable view. !38088
+- Add empty state for Deploy Keys section. !38329
+- Add frontend validation to "Restrict membership by email domain" field. !38348
+- Geo API - Expose repositories_count and wikis_count. !38361
+- Show blank empty text for approved by in MR widget. !38436
+- Add published column. !38439
+- Change prefix to COVFUZZ for CI variables related to coverage fuzzing. !38441
+- Fetch latest successful pipeline with security jobs to check if vulnerability was resolved. !38452
+- Add confirmation message when regenerating feature flags instance ID. !38497
+- Add a left-hand navigation to the security page. !38529
+- Update Merge Train helper text. !38619
+- Audit events log table is now responsive to different display sizes. !38803
+- Use GraphQL to get list of vulnerable projects. !38808
+- Update {groups,profiles}/billings_controller_spec.rb files. !38872
+- Automate the deletion of the old Index after a reindex. !38914
+- Rename project delete 'adjourned' and 'soft deleted' to 'delayed'. !38921
+- Audit variable changes for project variables. !38928
+- Create a standalone settings page for the instance security dashboard. !38965
+- Add frontend validation to "Restrict access by IP address" field. !39061
+- Replace .com check with an app setting to enforce namespace storage limit. !39150
+- Reduce number of users required to qualify for a free instance review from 100 to 50. !39155
+- Productivity Analytics: Replace bs-callout with GlAlert component. !39207
+- Update feature flag form buttons to gl-button. !39220
+- Update requirements list buttons to gl-button. !39372
+- Change IssueSetEpic mutation to make epic_id argument not required. !39451
+- Re-name Issues Analytics (plural) as Issue Analytics (singular). !39506
+- Implement a parser to extract SAST configuration. !39605
+- Button migration to component.
+
+### Performance (10 changes)
+
+- Avoid N+1 of merge requests associations in Search. !36712
+- Memoize project regulated settings check. !37403
+- Fix slow Value Stream label stage query. !38252
+- Improve issues confidentiality check performance for AGS. !38564
+- Replace deprecated button syntax in empty_state. !38730
+- Geo - Optimize the query to return reverifiable projects on Geo primary node. !38732
+- Change data source for Vulnerable Projects to GraphQL. !38878
+- Preload vulnerability statistics when loading vulnerable projects. !38905
+- Disable loading hasNextPage value for Security Dashboards. !39261
+- Load project list only during loading the Security Dashboard. !39263
+
+### Added (66 changes, 1 of them is from the community)
+
+- Add related issues panel to standalone vulnerability page. !35625
+- add add coverage fuzzing results to security dashboard. !36011
+- Expose epics related to board issues in GraphQL. !36186
+- Add the option to filter epics by milestone. !36193
+- Add predefined network policies to the network policy list. !36257
+- Prevent some abilities at namespace or group level when over storage limit. !36493
+- Add variable expansion to cross pipeline artifacts. !36578
+- Add MR approval settings column to the compliance dashboard. !36589
+- Add Geo replication columns and tables for terraform states. !36594
+- Allow Users to Create and Rename User Lists. !36598
+- Add GraphQL API to temporarily increase storage. !36605
+- Geo: Add migrations for registry and states tables for vulnerability export replication. !36620
+- Prevent certain policies at Merge Request level when namespace exceeds storage limit. !36713
+- Block some project abilities when namespace over storage limit. !36734
+- Add vulnerabilityGrades to GraphQL API. !36861
+- Add setting for max indexed file size in Elasticsearch. !36925
+- Show up to date SPDX licenses for license compliance. !36926
+- Add Vulnerabilities::HistoricalStatistic model. !36955
+- Adjust historical vulnerability statistics after vulnerability update. !36970
+- Removed Projects Page in Admin UI with restoration button. !37014 (Ashesh Vidyut)
+- Add coverage fuzzing to security dashboard(backend). !37173
+- Add docs about denied licenses and update feature flag. !37191
+- Extend configuration end point to return json when format is given. !37217
+- Solicit feedback for Security Dashboards. !37317
+- Add _links to epic API entity. !37395
+- Delete historical vulnerability statistics entries older than 90 days. !37436
+- Expose status of temporary storage increase. !37511
+- Support writing variables to CI config. !37516
+- Add source and destination branch data to Compliance Dashboard. !37628
+- Add source and destination branch data to compliance entity. !37630
+- Enable security scanner alerts. !37655
+- Toggle epic confidential. !37678
+- Add info and unknown counts along other severity counts. !37763
+- Allow setting a default role for Group SSO. !37801
+- Count pipelines that have security jobs. !37809
+- Add info icons to explain lead / cycle time calculations. !37903
+- Provision for csv download for merge commits in a group. !37980
+- Added cluster agent GraphQL mutation and create service. !37997
+- Add health status in issuable list. !38040
+- Better burndown chart axis formatting. !38113
+- Add vulnerabilitiesCountByDay to Group and InstanceSecurityDashboard GraphQL API. !38197
+- Display Strategy Information for New Feature Flags. !38227
+- Add `resolvedOnDefaultBranch` field to VulnerabilityType on GraphQL API. !38300
+- Support project-level iteration creation via GraphQL. !38345
+- Add excluding filter qualifier for Advanced Search queries. !38400
+- Implement a GraphQL mutation for MR creation flow in SAST Config. !38406
+- Add ability to update issue board configuration options using GraphQL. !38413
+- Add GraphQL mutation to set the epic of an issue. !38494
+- Add Merge Commit CSV export button in Compliance Dashboard. !38513
+- Index trial groups in Elasticsearch. !38541
+- Add cron worker to clean up expired subscriptions from Elasticsearch. !38551
+- Add value stream analytics filter bar. !38576
+- Offline copy of SPDX catalogue. !38691
+- Add GraphQL query for a single iteration. !38692
+- Track unique visitors in Compliance related pages. !38851
+- Add API endpoint to revoke PATs. !39072
+- Add SAST Configuration UI. !39085
+- Allow using of negated filters in board epic issues GraphQL query. !39089
+- Add commented_by to approval_settings endpoint. !39237
+- Add support for updating SAST config. !39269
+- Enable creating multiple value streams. !39299
+- Enable on-demand DAST scan feature flag by default. !39411
+- Expose scopedPath and scopedUrl to Iteration type in GraphQL. !39543
+- Enable breadcrumbs in security dashboard. !39635
+- API to retrieve group push rules. !39642
+- Add size field to graphql query to extract information about SAST Config UI. !39736
+
+### Other (23 changes, 2 of them are from the community)
+
+- Geo - Admin Area > Geo > Uploads search is limited to 1000 records. !36391
+- Clarify that Unleash client app name must be the running environment name. !37255
+- Remove :skip_web_ui_code_owner_validations feature flag. !37367
+- Replace $gray-300 hex value, remap usages to $gray-200. !37586
+- Replace GlDeprecatedButton with GlButton. !37602
+- Update Load Performance Testing k6 version to 0.27.0. !37680
+- Switch to faraday_middleware-aws-sigv4 gem for signing Elasticsearch request in AWS. !38016
+- Replace deprecated button with new button. !38074
+- Modify iteration quick action tooltip. !38091 (Marcin Sedlak-Jakubowski)
+- Add text to export button. !38189
+- Geo - Admin Area > Geo > Projects/Designs search is limited to 1000 records. !38347
+- Replace GlDeprecatedButton with GlButton in Requirements form. !38422
+- Updating $gray-600 hex value and replacing instances with $gray-400. !38448
+- Update css class to gl- classes. !38640
+- Replace deprecated button with new button. !38695
+- Replace -700 hex value, replace usages with -500. !38793
+- Remove blacklist terminology from License Compliance. !39071
+- Migrate merge immediately dialog away from deprecated button. !39284
+- Change location fingerprint calculation for container scanning. !39445
+- Remove a card-small class from HAML files under /ee. !39551 (Takuya Noguchi)
+- Migrate checkout step summary buttons away from legacy buttons. !39561
+- Store/Update new location fingerprint for container scanning vulnerabilities. !39696
+- Replace -800 hex value, replace usages with -700. !39734
+
+
+## 13.2.10 (2020-10-01)
+
+### Security (1 change)
+
+- Do not leak templates with protected features.
+
+
+## 13.2.8 (2020-09-02)
+
+- No changes.
+
+## 13.2.7 (2020-09-02)
+
+### Security (2 changes)
+
+- Sanitize vulnerability history comment.
+- Fix displaying epics visibility in issue sidebar.
+
+
+## 13.2.6 (2020-08-18)
+
+- No changes.
+
+## 13.2.5 (2020-08-17)
+
+- No changes.
+
+## 13.2.4 (2020-08-11)
+
+### Performance (1 change)
+
+- Preload all associations in Vulnerability GraphQL API. !38556
+
+
+## 13.2.3 (2020-08-05)
+
+- No changes.
+
+## 13.2.2 (2020-07-29)
+
+- No changes.
+
+## 13.2.0 (2020-07-22)
+
+### Security (1 change)
+
+- Ensure passwords and access tokens don't appear in SCIM errors.
+
+### Removed (3 changes)
+
+- Remove reference to sast:container. !32061
+- Revert Add scanner name. !33442
+- Stop recording connection pool metrics for load balancing hosts. !33749
+
+### Fixed (91 changes, 2 of them are from the community)
+
+- Stop recording JSON parser errors due to third party license scanning integrations. !26944
+- Improve Requirements Management empty state. !30716 (Marcin Sedlak-Jakubowski)
+- Display warning for issues moved from service desk on frontend. !31803
+- Add truncation for the environment dropdown. !32267
+- Add negated params filter to epics search. !32296
+- Clean up serialized objects in audit_events. !32434
+- Migrate dismissal data from Vulnerability Feedback to Vulnerabilities. !32444
+- Prevent last Group Managed Account owner with access from accidental unlinking. !32473
+- Fix issues with editing epic on Boards sidebar. !32503 (Eulyeon Ko)
+- Dependency List shows only vulnerabilities from Gemnasium analyzer instead of all Dependency Scanning reports. !32560
+- Ensure users can unlink Group SAML when the group has SAML disabled. !32655
+- Fix Elasticsearch query error for ES 7.7. !32813
+- Display epic issues with null relative position. !33105
+- Fix description diff delete button not hidden after clicked. !33127
+- Fix Elasticsearch illegal_argument_exception when searching for large files. !33176
+- Support nuget dependencies in the API. !33389
+- Fix GraphQL query to fetch vulnerable projects of subgroups. !33410
+- Preserve order when applying scoped labels by title. !33420
+- Revert breaking changes to allow conan_sources.tgz and conan_export.tgz files in the Conan repository. !33435
+- Improve regex for geo auth keys checker. !33447
+- Fix confidentiality note on epic's comment field to display the correct warning text. !33486
+- Geo - Does not sync files on Object Storage when syncing object storage is enabled, but the Object Storage is disabled for the data type. !33561
+- Fix creating merge requests with approval rules. !33582
+- Specify group url in notification email. !33613
+- Fix column overlap on long texts. !33614
+- Display validation errors when issue link creation fails. !33638
+- Geo - Does not try to unlink file when it not possible to get the file path while cleaning orphaned registries. !33658
+- Tilt contribution analytics x-axis chart titles. !33692
+- Geo: Fix synchronization disabled on primary UI. !33760
+- Change the linkType argument for issueLinks query to enum. !33828
+- Allow admins to see project despite of ip restriction set on a group level. !34086
+- Return empty scans when head_pipeline is missing. !34193
+- Render security dashboard for projects without pipeline available. !34219
+- Include Epics in Roadmap whose parents are not part of Roadmap. !34243
+- Geo - Fix Gitlab::Geo::Replication::BaseTransfer for orphaned registries. !34292
+- Authorize access to view license scan reports. !34324
+- Fix errors when pushing with an expired license. !34458
+- Enable active class on group packages sidebar navigation items. !34518
+- Fix tooltip on vulnerability issue in security dashboard. !34560
+- Fix issue with displaying Code Owner error messages in the UI. !34600
+- Clear hard failure when updating mirror via UI. !34614
+- Fix column styling in the vulnerability list. !34619
+- Fix creating/updating issues with epic_iid parameter on API. !34641
+- Fix alignment of analytics dropdowns. !34721
+- Allow auditor user to access project private features. !34794
+- Refresh vulnerability state and timestamp when changed by another user. !34837
+- Remove SELECT N+1 on software license policies. !34866
+- Remove correct feature flag strategy when removing strategy that is not persisted. !34889
+- Geo - Fix repositories deletion after project removal. !34963
+- Remove spacing interval between soft deleted projects. !35046
+- Geo - Does not sync expired job artifacts. !35082
+- Fix passing date params in VSA Summary request. !35152
+- Fixes a bug that would prevent the dependencies list from rendering for user that aren't authorized to see the vulnerabilities. !35171
+- Fix failing filtered search when re-submitting epic tokens. !35205
+- Fix visual regression for MR approve button. !35213
+- Forbid deleting a feature flag user list associated with a strategy. !35275
+- Geo: Fix incorrect Package File progress bar total count. !35294
+- Fix display of IP addresses in audit logs. !35356
+- Fix character escaping on approvals summary. !35564
+- Change required value for user callout props. !35620
+- Fix alignment for the project manager in the security dashboard. !35665
+- Geo - Does not sync LFS objects from fork networks. !35692
+- Fix usage graph not exceeding 100%. !35758
+- Fix pagination on Group Audit Events. !35767
+- Always show delete button on feature flag strategies. !35786
+- Display occurrences in Pipeline Security view when scanner information is missing. !35795
+- The conan package presenter will now only read conan packages. !35971
+- Recalculate CI extra minutes when monthly minutes default to nil. !36046
+- Fix overlapping identifer string. !36108
+- Fix 404 errors when "No epic" selected. !36137
+- Fix overflow of Identifier content on pipeline's Security tab. !36159
+- Fix zero-downtime reindexing docs count. !36173
+- Fix avatar popover not appearing for delayed data. !36254
+- Fix bug with IndexStatus not being set on indexing project. !36266
+- Always run the stop_dast_environment. !36372
+- Fix passing filter params to VSA time summary queries. !36441
+- Show error when attempting to delete feature flag user list that is in use. !36487
+- Geo: Fix Attachments and Job artifacts showing "Synchronization disabled". !36492
+- Change default vendor name to GitLab if not defined in the security schema. !36519
+- Fix difference between button sizes in the instance level security dashboard. !36668
+- Fix BulkIndexer flush returning nil values after failure. !36716
+- Always sort Elasticsearch searches by relevance not updated_at. !36774
+- Do not render export button when instance level security dashbaord is uninitialized. !36843
+- Geo - Fix Button Icon Alignment. !36867
+- Correct SystemCheck name for Elasticsearch. !36903
+- Fallback to `created_at` when `merged_at` is missing in Insights charts. !36930
+- Geo - Update version errors. !36984
+- Present only issues visible to user in Vulnerabilitiy Issue Links API. !36987
+- Fix: Geo file downloads can block Sidekiq threads.
+- Create issue from vulnerability has link to branch.
+- Allow to remove subepics when user downgrades its license.
+
+### Changed (73 changes)
+
+- Update header for security config page and change to GlTable. !31471
+- Display expiring subscription banner on more pages. !31497
+- Remove license management from CI/CD settings. !31553
+- Elasticsearch integration started using aliases instead of using indices directly. !32107
+- Geo Form Validations. !32263
+- Move Group-level IP address restriction feature to GitLab Premium. !32396
+- Update Compliance Dashboard to use a table layout. !32440
+- Add link to Node URL. !32471
+- Display Project and Subgroup milestones on Roadmap. !32496
+- Enable CI Minutes-related Feature Flags by default. !32581
+- Remove partial word matching from code search. !32771
+- Add authentication information to usage ping. !32790
+- Add tooltip with description to unknown severity badge icon. !33131
+- Update group audit events to use the new searchable table. !33305
+- Improve the clarity of the MR approvals tooltip UI. !33329
+- Dont display subscription banner if auto_renew nil. !33422
+- Change approved to merged in Contribution Analytics. !33535
+- Geo: Add rake task to check replication status. !33834
+- Changes the displayed summary text in security reports in merge requests. !33857
+- Update merge train settings checkbox text. !34073
+- Update project audit events to use the new searchable table. !34176
+- Analytics Insights page: Load charts individually, instead of waiting for all data to load before displaying the page. !34290
+- Add polling to metrics widget. !34314
+- Added CI_HAS_OPEN_REQUIREMENTS environment variable. !34419
+- Add evidence and scanner fields to standalone vulnerability page. !34498
+- Geo Node Form - Redesign. !34561
+- Renamed Browser Performance Testing feature to be clearer, CI report now also shows unchanged values. !34634
+- Update the "show labels" toggle on boards to persist using localStorage. !34728
+- Omit already-trialed namespaces from trial select options. !34770
+- Render storage graph when there is a limit set. !34931
+- Back Project Severity Status component with GraphQL data. !35031
+- Make registry table as SSOT to verify Projects and Wikis. !35095
+- Add scanner type to vulnerability row. !35150
+- Switch to use default report name for license_scanning job. !35159
+- Ensure all newly paid groups are indexed. !35172
+- Return null in securityReportSummary when the report didn't run. !35218
+- Highlight expired SSH or PAT credentials in the credential inventory. !35229
+- Show revoked date in credentials inventory for personal access tokens. !35251
+- Add identifiers column to pipeline security tab. !35284
+- Make cluster health dashboard available to all self-hosted paid tiers users. !35333
+- Automatically enable Elasticsearch indexing with 'gitlab:elastic:index'. !35342
+- Update storage views to show snippets size. !35419
+- Add line number to SAST and Secret Detection. !35536
+- Change "Restrict membership by email" field from a comma separated list to the GitLab UI Token Selector component. !35543
+- Moves compliance framework to GitLab Premium. !35597
+- Add snippets_size to group usage statistics graph. !35608
+- Refactor empty states to reflect better messages. !35624
+- Update pipeline minute warning button style. !35675
+- Add identifier column to the project security dashoard. !35760
+- Use IP address from request on audit events. !35834
+- Expand Security & Compliance tab when viewing Vulnerabilities Details page. !35855
+- Change the index on project_id column of vulnerability_statistics table to be unique. !35861
+- Geo Settings Form - Redesign. !35879
+- Default new feature flag strategies to all users. !35883
+- Remove feature flag strategy help text from the UI. !35887
+- Update pipeline security tab filter label and docs. !35893
+- Introduce new messaging to include a 30 day grace period for subscription expiration. !35897
+- Create TODOs for merge train errors. !35951
+- Colorize security summaries in merge requests. !36035
+- Add the scan vendor into the scanner column of the vulnerability list. !36145
+- Provide CI data to the security configuration page to enable SAST job. !36225
+- Change "Restrict access by IP address" field from a comma separated list to the GitLab UI Token Selector component. !36240
+- Allow searching word tokens with letters, numbers and underscores in advanced global search. !36255
+- Count health status only for opened issues. !36359
+- Allow to link vulnerability with issues from other projects. !36410
+- Add "Manage" column and tweak "Status" wording in the Security Configuration page. !36432
+- Update Project deletion text based on deletion mode. !36461
+- Add Prometheus Metrics for Index Pause Sidekiq Queue. !36473
+- Autocomplete confidential only epics & issues. !36687
+- Add scanner vendor to pipeline scanner column. !36764
+- Rename Strategies to Focus on Affected Users. !36833
+- Include Elasticsearch query params in Performance Bar. !36899
+- add gl-coverage-fuzzing-report.json to artifacts. !37110
+
+### Performance (25 changes)
+
+- Fix N+1 queries for Elastic Web Search projects scope. !30346
+- Fix N+1 queries for Elastic Search merge_requests scope. !30546
+- Improve performance of Advanced Search API (Issues scope) by preloading more associations. !30778
+- Update index_ci_builds_on_name_and_security_type_eq_ci_build index to support secret-detection. !31785
+- Fix N+1 queries for Elastic Search projects scope. !32688
+- Fix N+1 queries for Elastic Search milestones scope. !33327
+- Geo - Make registry table SSOT for LFS objects. !33432
+- Harden operations_dashboard_default_dashboard usage query. !33952
+- Harden users_created usage data queries. !33956
+- Harden security ci build job queries. !33966
+- Optimize queries in MergeRequestsComplianceFinder. !34482
+- Save composer.json to package metadata. !34494
+- Geo: Make registry table SSOT for job artifacts. !34590
+- Optimize permission checking when finding subgroup epics. !35061
+- Show count of all epics on group page no matter if user can see them or not. !35129
+- Speed up Advanced global search regex for file path segments. !35292
+- Optimize issues_with_health_status usage ping counter. !35298
+- Fix N+1 queries for Elastic Search commits scope. !35449
+- Don't index the same project in Elasticsearch in parallel. !35842
+- Geo: Make registry table SSOT for uploads. !35921
+- Avoid N+1 of group associations in Search. !36544
+- Prevent 2nd Elasticsearch query for project searches. !36672
+- Fix N+1 in the RootController#index. !36805
+- Make Registry table SSOT for projects and wikis. !36901
+- Make Registry table SSOT for designs. !36999
+
+### Added (133 changes, 5 of them are from the community)
+
+- Add list limit metric to API. !27324
+- Implement Go module proxy MVC (package manager for Go). !27746 (Ethan Reesor)
+- Improve Vulnerability Management with Standalone Vulnerabilities. !28212
+- Add viewer and linker for go.mod and go.sum. !28262 (Ethan Reesor @firelizzard)
+- Add usage statistics for modsecurity total packets/anomalous packets. !28535
+- Keep artifacts referenced by release evidence. !29350
+- Add periodic worker for collecting network policy usage. !30328
+- REST API membership responses for group owner enqueries include group managed account emails. !30584
+- Add table to Issues Analytics. !30603
+- Add ability to pause and resume Elasticsearch indexing. !30621
+- Show the status of stand-alone secrets analyzer on the configuration page. !31167
+- Support transferring and displaying image uploads on Status Page. !31269
+- Add Pipeline.securityReportSummary to GraphQL. !31550
+- Create test reports table. !31643
+- Show usage graph for each storage type. !31649
+- Add requirements filtering on author username and search by title. !31857
+- Add ability to download patch from vulnerability page. !32000
+- Add callout for user count threshold. !32404
+- Make group/namespace name in email a link to group overview page. !32461
+- Add api endpoint to retrieve resource weight events. !32542
+- Add ability to select Epic while creating a New Issue. !32572
+- Expose test reports on GraphQL. !32599
+- Allow approval rules to be reset to project defaults. !32657
+- Save setting for auto-fix feature. !32690
+- Geo - Make Geo::RegistryConsistencyWorker clean up unused registries. !32695
+- Add new epic creation page. !32701
+- Add policy for auto_fix. !32783
+- Send email notifications on Issue Iteration change. !32817
+- Add support for bulk editing health status and epic on issues. !32875
+- Add quick actions for iterations in issues. !32904
+- Add validation to maven package version. !32925 (Bola Ahmed Buari)
+- Add Elasticsearch to Sidekiq ServerMetrics. !32937
+- Added CI parser for requirements reports. !33031
+- Add state events to burnup chart data. !33048
+- Introduce `userNotesCount` field for VulnerabilityType on GraphQL API. !33058
+- Bulk edit health status. !33065
+- Add project audit events API. !33155 (Julien Millau)
+- Introduce `issueLinks` field for VulnerabilityType on GraphQL API. !33173
+- Add Elasticsearch metrics in Rack middleware. !33233
+- Adds NuGet project and license URL to the package details page. !33268
+- Internationalize templates titles. !33271
+- Adds a new Dependencies tab for NuGet packages on the package details page. !33303
+- Support AWS IAM role for ECS tasks in Elasticsearch client. !33456
+- Allow to specify multiple domains when restricting group membership by email domain. !33498
+- Add MR approval stats to group contribution analytics. !33601
+- Create sticky section in security dashboard layout. !33651
+- Add Network Policy Management to the Threat Monitoring page. !33667
+- Show secret_detection in report types. !33682
+- Adds NuGet package icon to package details page. !33701
+- Allow to specify `period_field` in Insights config. !33753
+- Ability to make PAT expiration optional in self managed instances. !33783
+- Add secret detection for GraphQL API. !33797
+- Show test report status badge on Requirements list. !33848
+- Pin selection summary/list header to the page top. !33875
+- Persist user preferences for boards. !33892
+- Add compliance frameworks to application settings table. !33923
+- Fixes inconsistent package title icon colors. !33933
+- Retry failed vulnerability export background jobs. !33986
+- Geo Package Files UI. !34004
+- Add report artifacts' links to release evidence. !34058
+- Add cluster reindexing feature to our ES integration. !34069
+- Add in-app notification for Personal Access Token expiry. !34101
+- Add "New epic" button within epic page. !34109
+- Add MR note to standalone vulnerability page. !34146
+- Show issue link on security dashboard when vulnerability has an issue. !34157
+- Persist individual requirement report results to test report. !34162
+- Geo Package Files - Sync Counts. !34205
+- Upgrade to `license_scanning` report v2.1. !34224
+- Add group wiki REST API. !34232
+- Epic bulk edit. !34256
+- Display Saved User Lists by Feature Flags. !34294
+- Add PHP Composer Package Support. !34339 (Jochen Roth @ochorocho, Giorgenes Gelatti)
+- Allow Hiding/Collapsing of Milestone header on Roadmap. !34357
+- Add csv export button to group security dashboard. !34374
+- Prevent MR from merging if denied licenses are found. !34413
+- Allow Users to Delete User Lists. !34425
+- Alert Users That Lists Are Modified By API Only. !34559
+- Add ability to view tokens without expiry enforcement. !34570
+- Add support for gl-coverage-fuzzing-report.json and security dashboard parsing. !34648
+- Geo: Enable Package File replication. !34702
+- Add compliance_frameworks list to project API. !34709
+- Add scanner name and identifiers to VulnerabilityType. !34766
+- Add request/response to standalone vulnerability page. !34811
+- Add scanner filter in Vulnerability GraphQL API. !34824
+- Add Project.complianceFrameworks field to GraphQL schema. !34838
+- Set checkboxes to be on by defualt for list. !34893
+- Add coverage fuzzing CI template. !34984
+- Add vendor to Vulnerability Scanners. !35004
+- Admin UI change to trigger Elasticsearch in-cluster re-indexing. !35024
+- Add vulnerability scanner query to GraphQL API. !35109
+- Enable new version feature flags by default. !35192
+- Add the MR author to MR's list on the compliance dashboard. !35206
+- Add storage_size_limit to plan_limits table. !35219
+- Add parsing Vendor name from Security Reports. !35222
+- Add project count with overridden approval rules in merge request to usage ping. !35224
+- Link documentation from GitLab for Jira app. !35227
+- Add license approval rule section and enable feature by default. !35246
+- Add Namespace API to set additionally purchased storage. !35257
+- Added MR Load Performance Testing feature. !35260
+- Add toggle to sort epic activity feed. !35302
+- Show User List Details. !35369
+- Let users modify feature flag user lists. !35373
+- Update vulnerabilities and findings when report occurrences are updated. !35374
+- Add Maintenance mode application settings fields. !35376
+- Add running out of minutes warning to CI job pages. !35622
+- Add scanned resources to security report. !35695
+- Display comment icon on vulnerability list in Security Dashboard. !35863
+- Allow merge when `License-Check` approve denied policies. !35885
+- Add DAST URL MR Widget modal. !35945
+- Return ID of newly created vulnerability issue link in API. !35947
+- Add NULL value scannedResourcesCsvUrl to securityReportSummary. !35949
+- Allow users to download the DAST scanned resources for a pipeline as a CSV. !36019
+- Add security scanner alerts to project to project security dashboard. !36030
+- Create GraphQL query to extract analyzers information. !36153
+- Expose Vendor in Scanner in Vulnerability Findings API. !36184
+- Add MVC for Opsgenie integration. !36199
+- Update Usage Ping data to track Merge Requests with added rules. !36222
+- Add filtering by scanner ID in Vulnerability Occurrences REST API. !36241
+- Allow creating confidential epics. !36271
+- Audit changes to project approval groups. !36393
+- Expose temporary storage increase end date in api. !36495
+- Add search history support for Requirements. !36554
+- Add related issues widget to feature flags. !36617
+- Setup group level Value Stream DB table. !36658
+- Enforce presence of Value Stream when creating a stage. !36661
+- Add ability to download fuzzing artifacts from pipeline page. !36676
+- Scope instance-level MR settings to compliance-labeled projects. !36685
+- Include ancestors in Iteration query. !36766
+- Add button to Security Configuration page to enable SAST, and Auto DevOps prompt. !36796
+- Add scanned_resources CSV path to Security Report Summary. !36810
+- Add MR approval status to the MR compliance entity. !36824
+- Enables Iterations by default. !36873
+- Update Iteration status automatically. !36880
+
+### Other (18 changes, 2 of them are from the community)
+
+- Add license ID to license view. !19113
+- Update deprecated Vue 3 slot syntax in ee/app/assets/javascripts/vue_shared/security_reports/components/modal.vue. !31966 (Gilang Gumilar)
+- Added DB index on confidential epics column. !32443
+- Allow ci minutes reset service to continue in case of failure. !32867
+- Remove unused index for vulnerabiliy confidence levels. !33149
+- Update vulnerabilities badge design in Dependency List. !33417
+- Add geo_primary_replication_events to usage data. !33424
+- Add new status page attributes to usage ping. !33790
+- Remove optimized_elasticsearch_indexes_project feature flag. !33965
+- Relocate Go models. !34338 (Ethan Reesor (@firelizzard))
+- Limit child epics and epic issues page size. !34553
+- Correct typo in "single sign-on", per specs. !35258
+- Update UI links in EE features. !35489
+- Replace .html with .md in documentation links. !35864
+- Update more UI links in EE features. !36177
+- Apply label color to shared Analytics label token. !36205
+- Alert Opsgenie integration errors. !36648
+- Resolve duplicate use of shorcuts-tree. !36732
+
+
+## 13.1.10 (2020-09-02)
+
+- No changes.
+
+## 13.1.9 (2020-09-02)
+
+### Security (2 changes)
+
+- Sanitize vulnerability history comment.
+- Fix displaying epics visibility in issue sidebar.
+
+
+## 13.1.8 (2020-08-18)
+
+- No changes.
+
+## 13.1.7 (2020-08-17)
+
+- No changes.
+
+## 13.1.6 (2020-08-05)
+
+- No changes.
+
+## 13.1.5 (2020-07-23)
+
+### Fixed (2 changes)
+
+- Geo: Fix Attachments and Job artifacts showing "Synchronization disabled". !36492
+- Fix: Geo file downloads can block Sidekiq threads.
+
+
+## 13.1.3 (2020-07-06)
+
+### Security (1 change)
+
+- Maven packages upload endpoint is now properly using the uploaded file set by middleware.
+
+
+## 13.1.2 (2020-07-01)
+
+### Security (2 changes)
+
+- Fixed pypi package API XSS.
+- Fix project authorizations for instance security dashboard.
+
+
+## 13.1.1 (2020-06-23)
+
+- No changes.
+
+## 13.1.0 (2020-06-22)
+
+### Security (1 change)
+
+- Ensure passwords and access tokens don't appear in SCIM errors.
+
+### Removed (2 changes)
+
+- Revert Add scanner name. !33442
+- Stop recording connection pool metrics for load balancing hosts. !33749
+
+### Fixed (35 changes, 2 of them are from the community)
+
+- Stop recording JSON parser errors due to third party license scanning integrations. !26944
+- Improve Requirements Management empty state. !30716 (Marcin Sedlak-Jakubowski)
+- Display warning for issues moved from service desk on frontend. !31803
+- Add truncation for the environment dropdown. !32267
+- Add negated params filter to epics search. !32296
+- Clean up serialized objects in audit_events. !32434
+- Prevent last Group Managed Account owner with access from accidental unlinking. !32473
+- Fix issues with editing epic on Boards sidebar. !32503 (Eulyeon Ko)
+- Dependency List shows only vulnerabilities from Gemnasium analyzer instead of all Dependency Scanning reports. !32560
+- Ensure users can unlink Group SAML when the group has SAML disabled. !32655
+- Fix Elasticsearch query error for ES 7.7. !32813
+- Display epic issues with null relative position. !33105
+- Fix description diff delete button not hidden after clicked. !33127
+- Fix Elasticsearch illegal_argument_exception when searching for large files. !33176
+- Support nuget dependencies in the API. !33389
+- Fix GraphQL query to fetch vulnerable projects of subgroups. !33410
+- Preserve order when applying scoped labels by title. !33420
+- Revert breaking changes to allow conan_sources.tgz and conan_export.tgz files in the Conan repository. !33435
+- Improve regex for geo auth keys checker. !33447
+- Fix confidentiality note on epic's comment field to display the correct warning text. !33486
+- Geo - Does not sync files on Object Storage when syncing object storage is enabled, but the Object Storage is disabled for the data type. !33561
+- Fix creating merge requests with approval rules. !33582
+- Specify group url in notification email. !33613
+- Fix column overlap on long texts. !33614
+- Geo - Does not try to unlink file when it not possible to get the file path while cleaning orphaned registries. !33658
+- Geo: Fix synchronization disabled on primary UI. !33760
+- Change the linkType argument for issueLinks query to enum. !33828
+- Allow admins to see project despite of ip restriction set on a group level. !34086
+- Return empty scans when head_pipeline is missing. !34193
+- Render security dashboard for projects without pipeline available. !34219
+- Include Epics in Roadmap whose parents are not part of Roadmap. !34243
+- Geo - Fix Gitlab::Geo::Replication::BaseTransfer for orphaned registries. !34292
+- Fix errors when pushing with an expired license. !34458
+- Enable active class on group packages sidebar navigation items. !34518
+- Fix creating/updating issues with epic_iid parameter on API. !34641
+
+### Changed (18 changes)
+
+- Update header for security config page and change to GlTable. !31471
+- Display expiring subscription banner on more pages. !31497
+- Remove license management from CI/CD settings. !31553
+- Elasticsearch integration started using aliases instead of using indices directly. !32107
+- Geo Form Validations. !32263
+- Move Group-level IP address restriction feature to GitLab Premium. !32396
+- Add link to Node URL. !32471
+- Display Project and Subgroup milestones on Roadmap. !32496
+- Enable CI Minutes-related Feature Flags by default. !32581
+- Remove partial word matching from code search. !32771
+- Add authentication information to usage ping. !32790
+- Add tooltip with description to unknown severity badge icon. !33131
+- Improve the clarity of the MR approvals tooltip UI. !33329
+- Change approved to merged in Contribution Analytics. !33535
+- Update merge train settings checkbox text. !34073
+- Analytics Insights page: Load charts individually, instead of waiting for all data to load before displaying the page. !34290
+- Add polling to metrics widget. !34314
+- Added CI_HAS_OPEN_REQUIREMENTS environment variable. !34419
+
+### Performance (11 changes)
+
+- Fix N+1 queries for Elastic Web Search projects scope. !30346
+- Fix N+1 queries for Elastic Search merge_requests scope. !30546
+- Improve performance of Advanced Search API (Issues scope) by preloading more associations. !30778
+- Update index_ci_builds_on_name_and_security_type_eq_ci_build index to support secret-detection. !31785
+- Fix N+1 queries for Elastic Search projects scope. !32688
+- Fix N+1 queries for Elastic Search milestones scope. !33327
+- Geo - Make registry table SSOT for LFS objects. !33432
+- Harden operations_dashboard_default_dashboard usage query. !33952
+- Harden users_created usage data queries. !33956
+- Harden security ci build job queries. !33966
+- Save composer.json to package metadata. !34494
+
+### Added (54 changes, 3 of them are from the community)
+
+- Add list limit metric to API. !27324
+- Implement Go module proxy MVC (package manager for Go). !27746 (Ethan Reesor)
+- Improve Vulnerability Management with Standalone Vulnerabilities. !28212
+- Add viewer and linker for go.mod and go.sum. !28262 (Ethan Reesor @firelizzard)
+- Add usage statistics for modsecurity total packets/anomalous packets. !28535
+- REST API membership responses for group owner enqueries include group managed account emails. !30584
+- Add table to Issues Analytics. !30603
+- Add ability to pause and resume Elasticsearch indexing. !30621
+- Show the status of stand-alone secrets analyzer on the configuration page. !31167
+- Support transferring and displaying image uploads on Status Page. !31269
+- Add Pipeline.securityReportSummary to GraphQL. !31550
+- Create test reports table. !31643
+- Show usage graph for each storage type. !31649
+- Add requirements filtering on author username and search by title. !31857
+- Add ability to download patch from vulnerability page. !32000
+- Add callout for user count threshold. !32404
+- Make group/namespace name in email a link to group overview page. !32461
+- Add ability to select Epic while creating a New Issue. !32572
+- Expose test reports on GraphQL. !32599
+- Allow approval rules to be reset to project defaults. !32657
+- Save setting for auto-fix feature. !32690
+- Geo - Make Geo::RegistryConsistencyWorker clean up unused registries. !32695
+- Add policy for auto_fix. !32783
+- Send email notifications on Issue Iteration change. !32817
+- Add support for bulk editing health status and epic on issues. !32875
+- Add quick actions for iterations in issues. !32904
+- Add Elasticsearch to Sidekiq ServerMetrics. !32937
+- Added CI parser for requirements reports. !33031
+- Add state events to burnup chart data. !33048
+- Introduce `userNotesCount` field for VulnerabilityType on GraphQL API. !33058
+- Add project audit events API. !33155 (Julien Millau)
+- Introduce `issueLinks` field for VulnerabilityType on GraphQL API. !33173
+- Add Elasticsearch metrics in Rack middleware. !33233
+- Adds NuGet project and license URL to the package details page. !33268
+- Adds a new Dependencies tab for NuGet packages on the package details page. !33303
+- Allow to specify multiple domains when restricting group membership by email domain. !33498
+- Add MR approval stats to group contribution analytics. !33601
+- Create sticky section in security dashboard layout. !33651
+- Add Network Policy Management to the Threat Monitoring page. !33667
+- Show secret_detection in report types. !33682
+- Adds NuGet package icon to package details page. !33701
+- Ability to make PAT expiration optional in self managed instances. !33783
+- Add secret detection for GraphQL API. !33797
+- Show test report status badge on Requirements list. !33848
+- Persist user preferences for boards. !33892
+- Fixes inconsistent package title icon colors. !33933
+- Retry failed vulnerability export background jobs. !33986
+- Add MR note to standalone vulnerability page. !34146
+- Show issue link on security dashboard when vulnerability has an issue. !34157
+- Geo Package Files - Sync Counts. !34205
+- Upgrade to `license_scanning` report v2.1. !34224
+- Display Saved User Lists by Feature Flags. !34294
+- Add csv export button to group security dashboard. !34374
+- Alert Users That Lists Are Modified By API Only. !34559
+
+### Other (9 changes, 2 of them are from the community)
+
+- Update deprecated Vue 3 slot syntax in ee/app/assets/javascripts/vue_shared/security_reports/components/modal.vue. !31966 (Gilang Gumilar)
+- Added DB index on confidential epics column. !32443
+- Allow ci minutes reset service to continue in case of failure. !32867
+- Remove unused index for vulnerabiliy confidence levels. !33149
+- Update vulnerabilities badge design in Dependency List. !33417
+- Add geo_primary_replication_events to usage data. !33424
+- Add new status page attributes to usage ping. !33790
+- Remove optimized_elasticsearch_indexes_project feature flag. !33965
+- Relocate Go models. !34338 (Ethan Reesor (@firelizzard))
+
+
+## 13.0.14 (2020-08-18)
+
+- No changes.
+
+## 13.0.13 (2020-08-17)
+
+- No changes.
+
+## 13.0.12 (2020-08-05)
+
+- No changes.
+
+## 13.0.11 (2020-08-05)
+
+This version has been skipped due to packaging problems.
+
+## 13.0.10 (2020-07-09)
+
+### Fixed (1 change)
+
+- Geo - Does not sync LFS objects from fork networks. !36202
+
+
+## 13.0.9 (2020-07-06)
+
+### Security (1 change)
+
+- Maven packages upload endpoint is now properly using the uploaded file set by middleware.
+
+
+## 13.0.8 (2020-07-01)
+
+### Security (2 changes)
+
+- Fixed pypi package API XSS.
+- Fix project authorizations for instance security dashboard.
+
+
+## 13.0.7 (2020-06-25)
+
+- No changes.
+
+## 13.0.6 (2020-06-10)
+
+### Security (1 change)
+
+- Do not set fallback mirror user.
+
+
+## 13.0.4 (2020-06-03)
+
+- No changes.
+
+## 13.0.3 (2020-05-29)
+
+- No changes.
+
+## 13.0.1 (2020-05-27)
+
+### Security (3 changes)
+
+- Change the mirror user along with pull mirror settings.
+- Allow only users with a verified email to be member of a group when the group has restricted membership based on email domain.
+- Do not auto-confirm email in Trial registration.
+
+
+## 13.0.0 (2020-05-22)
+
+### Security (1 change)
+
+- Apply CODEOWNERS validations to web requests. !31283
+
+### Removed (1 change)
+
+- Remove deprecated route for serving full-size Design Management design files. !30917
+
+### Fixed (77 changes, 5 of them are from the community)
+
+- Enforce CODEOWNER rules for renaming of files. !26513
+- Preserve date filters in value stream and productivity analytics. !27102
+- Fix 404s when clicking links in full code quality report. !27138
+- Remove Admin > Settings > Templates link from sidenav when insufficient license. !27172
+- Geo - Does not write to DB when using 2FA via OTP for admin mode. !27450
+- Use group parent for subgroup labels requests. !27564
+- Hidden stages should not appear in duration chart. !27568
+- Maven packages API allows HEAD requests to package files when using Amazon S3 as a object storage backend. !27612
+- Prevent renaming a locked file. !27623
+- Use absolute URLs to ensure links to the source of SAST vulnerabilities resolve. !27747
+- Prevent issues from being promoted twice. !27837
+- Display error message in custom metric form validation when prometheus URL is blocked. !27863
+- Append inapplicable rules when creating MR. !27886
+- Fix passing project_ids to Value Stream Analytics. !27895
+- Support inapplicable rules when creating MR. !27971
+- Fix vsa label dropdown limit. !28073
+- Fix analytics group and project loading spinners styling. !28094
+- Include subgroups when populating group security dashboard. !28154
+- Hide ability to create alert on custom metrics dashboard. !28180
+- Fix epics not preserving their state on Group Import. !28203
+- Fix invalid scoped label documentation URL when rendered in Markdown. !28268
+- Fix create epic in tree after selecting Add issue. !28300
+- Fix HTTP status code for Todos API when an epic cannot be found. !28310
+- Allow SCIM to create an identity for an existing user. !28379
+- Perform Geo actions on projects only. !28421
+- Allow unsetting "Required pipeline configuration" for CI/CD. !28432
+- Geo: Self-service framework does not associate geo_event_log row to geo_event. !28457
+- Return overridden property in API response. !28521
+- Fix billed users id and count from shared group. !28645
+- Hide Request subtitle when Threat Monitoring has no data. !28760
+- Fix repository settings page loading issues for some imported projects with pull mirroring. !28879
+- Fix group_plan in group member data for system hooks. !29013
+- Fix imageLoading bug when scrolling back to design. !29223
+- Fix Elasticsearch rollout stale cache bug. !29233
+- Resolve Creating an annotation on the design that is bigger that screen size is broken. !29351
+- Fix incorrect dropdown styling for embedded metric charts. !29380 (Gilang Gumilar)
+- Close all other sidebars when the boards list settings sidebar is opened. !29456
+- Fix incorrect repositioning of design comment pins when mouse leaves viewport. !29464
+- Fix board edit weight values 0 or None. !29606
+- Fix lack-of padding on design view notes sidebar. !29654
+- Remove duplicate QA attribute for burndown charts. !29719
+- Add validation to Conan recipe that conforms with Conan.io. !29739 (Bola Ahmed Buari)
+- Fix caching performance and some cache bugs with elasticsearch enabled check. !29751
+- Fix wiki indexing for imported projects. !29952
+- Fix filter todos by design. !29972 (Gilang Gumilar)
+- Fix the error message on Security & Operations dashboard by fixing the API response. !30047
+- Fix showing New requirement button to unauthenticated user. !30085 (Gilang Gumilar)
+- Ignore invalid license_scanning reports. !30114
+- Sort dependency scanning reports before merging. !30190
+- Fix typos on Threat Management page. !30218
+- Fix infinte loading spinner when visiting non-existent design. !30263
+- Fix third party advisory links. !30271
+- Fix dismissal state not being updated. !30503
+- Add sort and order for policy violations. !30568
+- If a parent group enforces SAML SSO, when adding a member to that group, its subgroup or its project the autocomplete shows only users who have identity with the SAML provider of the parent group. !30607
+- Geo: Fix empty synchronisation status when nothing is synchronised. !30710
+- Don't hide Open/Closed Icon for Issue. !30819
+- No seat link sync for licenses without expiration. !30874
+- Fix project insights page when projects.only parameter is used. !30988
+- Fixes styling on vulnerability counts. !31076
+- Hide child epic icon on Roadmap for accounts without child epics support. !31250
+- Add license check for the 'send emails from Admin area' feature. !31434
+- Avoid saving author object in audit_events table. !31456
+- Fix 500 errors caused by globally searching for scopes which cannot be used without Elasticsearch. !31508
+- Show .Net license scan results as links. !31552
+- Fix incorrect notice text on insights page. !31570
+- Add license restriction to HealthStatus. !31571
+- Fix issues search to include the epic filter ANY. !31614
+- Reduce 413 errors when making bulk indexing requests to Elasticsearch. !31653
+- Fix CI minutes notification when unauthenticated. !31724
+- Add LFS workhorse upload path to allowed upload paths. !31794
+- Relax force pull mirror update restriction. !32075
+- Show correct last successful update timestamp. !32078
+- Fix missing dismissed_by field. !32147
+- Fix empty unit display of time metrics. !32388
+- Fixes file row commits not showing for certain projects.
+- Validates ElasticSearch URLs are valid HTTP(S) URLs. (mbergeron)
+
+### Deprecated (2 changes)
+
+- Document planned deprecation of 'marked_for_deletion_at' attribute in Projects API in GitLab 13.0. !28993
+- Document planned deprecation of 'projects' and 'shared_projects' attributes in Groups API in GitLab 13.0. !29113
+
+### Changed (64 changes, 1 of them is from the community)
+
+- Allow Value Stream Analytics custom stages to be manually ordered. !26074
+- Create more intuitive Popover information for Geo Node Sync Status. !27033
+- Make "Value Stream" the default page that appears when clicking the group-level "Analytics" sidebar item. !27277 (Gilang Gumilar)
+- Update renewal banner messaging and styling. !27530
+- Hide company question for new account signups. !27563
+- Create more intuitive Verification Popover for Geo Node Syncs. !27624
+- Disabled Primary Node Removal button when removal is not allowed. !27836
+- Move issue/apic hierarchy items to a tooltip. !27969
+- Update copy for Adding Licenses. !27970
+- Sort events alphabetically on Value Stream Analytics Stage form. !28005
+- Return 202 Accepted status code when fetching incompleted Vulnerability Export from API. !28314
+- Use dropdown to change health status. !28547
+- Change GraphQL arguments in group.timelogs query to use startTime and endTime. !28560
+- Enable issue board focus mode for all tiers on Enterprise Edition. !28597
+- Clarify detected license results in merge request: Group licenses by status. !28631
+- Deleting packages from a deeper paginated page will no longer return you to the first page. !28638
+- Sort Dependency List by severity by default. !28654
+- Make Dependency List pipeline subheading more succinct. !28665
+- Enable export issues feature for all tiers on Enterprise Edition. !28675
+- Remove scoped labels documentation link. !28701
+- Change summary text copy for license-compliance MR widget. !28732
+- Update License Compliance docs url. !28853
+- Differentiate between empty and disabled Geo sync. !28963
+- Move deploy keys section back to repository settings. !29184
+- Hide Pipeline Security tab from reporters. !29334
+- Make Geo Selective Sync More Clear from the Node Details view. !29596
+- Fix checkbox alignment and responsive word-break for secure table rows. !29659
+- Add tracking to Subscription banner. !29735
+- SSO Enforcement requires sign in within 7 days. !29786
+- Geo - Better Out of Date Errors. !29800
+- Replace non-standard term in Issues Analytics chart labels. !29810
+- Change default icon for neutral-state items in merge request widget. !30008
+- Remove tasks_by_type_chart feature flag. !30034
+- Modify existing out of runner minutes banner to handle 3 different warning levels. !30088
+- Resolve Allow multiple screenshots to be uploaded in copy paste. !30152
+- Improve the running out of CI minutes email notification. !30188
+- Change 'Whats New' dropdown item url. !30198
+- Link Buy additional minutes button straight to funnel. !30248
+- Improve design management image loads by avoiding refetching image urls for designs. !30280
+- Change logic to find the current license. !30296
+- Link license management button to license compliance policies section. !30344
+- Sort license policy violations first. !30564
+- Change UI requirements route from project/requirements to project/requirements_management/requirements. !30583
+- Change default concurrency of merge trains to twenty. !30599
+- Clarify security report findings in merge request widget. !30688
+- Consolidate epic tree buttons. !30816
+- Increase ProcessBookkeepingService batch to 10_000. !30817
+- Modify GraphQL mutation for adding projects to Instance Security Dashboard to support only single project id. !30865
+- Add subscription banner to group/subgroup pages. !30883
+- Geo - Add Empty States. !31010
+- Remove customizable_cycle_analytics feature flag. !31189
+- Geo - Bring settings UI in-line with other Geo Views. !31257
+- Cards in Epic Tree have two lines of content. !31300
+- Add request information to vulnerability-detail modal. !31422
+- Move registrations progress bar to a generic place and make it configurable. !31484
+- Reduce epic health status noise in epic tree. !31555
+- Modify GraphQL mutation for removing project from Instance Security Dashboard to use id instead of projectId. !31575
+- Enable onboarding issues experiment on Welcome screen. !31656
+- Expring Subscription banner has plan specific text. !31777
+- Geo - Better visualize type of node on form. !31784
+- Improve tooltips for compliance framework badges. !31883
+- Allow developers to see ci minutes notifications. !31937
+- Log Audit Event when Group SAML adds a user to a group. !32333
+- Audit logs now uses filtered search.
+
+### Performance (13 changes, 1 of them is from the community)
+
+- Geo - Improve query to retrieve Job Artifacts, LFS Objects, and Uploads with files stored locally. !24891
+- Geo - Use bulk insert to improve performance of RegistryBackfillService. !27720
+- Improve Group Security Dashboard performance. !27959
+- Fix N+1 queries in Audit Events controllers. !28399
+- Move Clusters Application CertManager to batch counting. !28771
+- Move Clusters Application Helm to batch counting. !28995
+- Move Clusters Application Ingress to batch counting. !28999
+- Move Clusters Application Knative to batch counting. !29003
+- Preload path locks for TreeSummary. !29949
+- Debounce pull mirror invocation. !30157
+- Advanced Search API: Eager load more issue associations to reduce N+1 queries. !30233
+- Make the ElasticCommitIndexer idempotent to enable job de-duplication. !31500 (mbergeron)
+- Use data-interchange format based on .ndjson for Project import and export. !31601
+
+### Added (129 changes, 13 of them are from the community)
+
+- Support setting threshold for browser performance degradation through CI config. !21824
+- Restrict page access when restricted level is public. !22522 (briankabiro)
+- Add ability to expand epics in roadmap. !23600
+- Prefer smaller image size for design cards in Design Management. !24828
+- Warn users when they close a blocked issue. !25089
+- Added setting to use a custom service desk email. !25240
+- Add ability to explore zoomed in designs via click-and-drag. !25405
+- Allow GMA groups to specify their own PAT expiry setting. !25963
+- Add vulnerabilities field to QueryType. !26348
+- On-demand Evidence creation. !26591
+- Add API endpoint for new members' count in Group Activity Analytics. !26601
+- Allow multiple root certificates for smartcard auth. !26812
+- Add scanned URL count and link to scanned resources in DAST reports. !26825
+- Add a button to export vulnerabilities in CSV format. !26838
+- Add #resolved_on_default_branch to Vulnerability. !26906
+- Migrate SAML to SCIM Identities. !26940
+- Expose smaller sized Design Management design images in GraphQL. !26947
+- Add Snowplow tracking for Container Registry events. !27001
+- Geo - Support git clone/pull operations for repositories that are not yet replicated. !27072
+- Add an indicator icon to issues on subepics when filtering by epic. !27212
+- Add a count of the scanned resources to Security::Scan. !27260
+- Track primary package file checksum counts. !27271
+- Anonymize GitLab user/group names on Status Detail Pages. !27273
+- Enable NetworkPolicy Statistics by default. !27365
+- Separate approval setting entities into own class files. !27423 (Rajendra Kadam)
+- Show custom 'media broken' icon for broken images in Design Management. !27460
+- Display loading spinner when Design Card images are loading. !27475
+- Updated link to Status Page docs. !27500
+- Adds support for storing notes for vulnerabilities. !27515
+- Add endpoints to fetch notes/discussions for vulnerability. !27585
+- Support PyPi package upload. !27632
+- Separate conan package entities into own class files. !27642 (Rajendra Kadam)
+- Separate model only entities into own class files. !27665 (Rajendra Kadam)
+- Add terraform report to merge request widget. !27700
+- Add a DB column to allow GMA groups to specify their PAT expiry setting. !27769
+- Separate user, project and entity helper modules into own class files. !27771 (Rajendra Kadam)
+- Add rake task for reindexing Elasticsearch. !27772
+- Separate group, member, group_detail and identity modules into own class files. !27797 (Rajendra Kadam)
+- Indicate whether the alert is firing. !27825
+- Support PyPi package installation. !27827
+- Separate code review, design and group modules into own class files. !27860 (Rajendra Kadam)
+- Add Health Status badge in Epic tree. !27869
+- Separate nuget package entities into own class files. !27898 (Rajendra Kadam)
+- Create issue link when creating issue from vulnerability. !27899
+- Geo: Proxy SSH git operations for repositories that are not yet replicated. !27994
+- Add pipeline statuses to Compliance Dashboard. !28001
+- Add Usage Ping For Status Page. !28002
+- Adds additional pipeline information to packages API result. !28040
+- Allow to save issue health status. !28146
+- Add a compliance framework setting to project. !28182
+- Add project template for HIPAA Audit Protocol. !28187
+- Create system note when health status is updated. !28232
+- Pre-populate prometheus alert modal. !28291 (Gilang Gumilar)
+- Usage ping for customized Value Stream Management stage count. !28308
+- Add evidence to vulnerability details. !28315
+- Added confidential column to epics table. !28428
+- Geo GraphQL API: Add geoNode at root. !28454
+- Refactor duplicate specs in ee user model. !28513 (Rajendra Kadam)
+- Refactor duplicate specs in ee group model. !28538 (Rajendra Kadam)
+- Lazy-loading design images with IntersectionObserver. !28555
+- Create group-level audit event for Group SAML SSO sign in. !28575
+- Renewal banner has auto-renew specific messaging. !28579
+- Automatically embed metrics in issues for alerts from manually configured Prometheus instances. !28622
+- Epic tree move child with drag and drop. !28629
+- Show the number of scanned resources in the DAST vulnerability report. !28718
+- Expose 'marked_for_deletion_on' attribute in Projects API. !28754
+- Show policy violations in license compliance. !28862
+- Migrate project snippets to the ghost user when the user is deleted. !28870 (George Thomas @thegeorgeous)
+- Provide instance level setting to enable or disable 'default branch protection' at the group level for group owners. !28997
+- Add spentAt field to TimelogType and deprecate date field. !29024
+- Add hierarchy depth to roadmaps. !29105
+- Add mutation to Dismiss Vulnerability GraphQL API. !29150
+- Add "whats new" item to help dropdown. !29183
+- Expose hasParent GraphQL field on epic. !29214
+- Display indicator to rule name in approval rules. !29315
+- Add status page url to setting form in UI. !29359
+- Enable Standalone Vulnerabilities feature for improving Vulnerability Management. !29431
+- Add `group_id` column into vulnerability_exports table. !29498
+- Enable creation on custom index with rake. !29598 (mbergeron)
+- Replace pipeline quota with usage quotas for user namespaces. !29806
+- Add GraphQL mutation to update limit metric settings on board lists. !29897
+- Adds PyPi installation instructions to package details page. !29935
+- Survey Responses landing page. !29951
+- Add limit metric to list type. !30028
+- Add GraphQL query for Instance Security Dashboard projects. !30064
+- Adds PyPi tab to the packages list page. !30078
+- Export an instance-level vulnerabilities report. !30079
+- Add GraphQL mutation for adding projects to Instance Security Dashboard. !30092
+- Add GraphQL mutation for removing projects from Instance Security Dashboard. !30100
+- Show specific success message when uploading a future license. !30161
+- Show all licenses and highlight current license in license history. !30172
+- Adds pipeline project name and link to package title. !30275
+- Enable expiring subscription banner. !30304
+- Handle subscription purchase flow via GitLab. !30324
+- Add Approved By in filtered MR search. !30335
+- Add autocompletion to Design View comment form. !30347
+- Add confidential flag in epic create. !30370
+- Add API endpoints to generate instance level security report exports. !30397
+- Add scanner name, version and URL to Vulnerability Modal. !30458
+- Introduce negative filters for code review analytics. !30506
+- Add NuGet dependencies extraction to the GitLab Packages Repository. !30618
+- Add vulnerability fields to GraphQL project, group, and global scope. !30663
+- Add vulnerability history to graphQL. !30674
+- Add package tags support to the GitLab NuGet Packages Repository. !30726
+- Add `Group Name` and `Project Name` into vulnerability export CSV file. !30755
+- Display banner to admins when there are users over license. !30813
+- Geo Replication View. !30890
+- Record impersonator information on audit event. !30970
+- Measure project import and export service execution. !30977
+- Adds package_name filter to group packages API. !30980
+- Add Nuget metadatum support in GitLab Packages. !30994
+- Show the You're running out of CI minutes warnings on relevant pages in GitLab. !31012
+- Add spinner to roadmap. !31080
+- Add standaloneVulnerabilitiesEnabled filter to group projects resolver for GraphQL. !31081
+- Add push rules configuration for groups - frontend. !31085
+- Add project import to group as audit event. !31103
+- Add Web IDE terminal usage counter. !31158
+- Add versions array to the package API payload. !31231
+- Rate limit the 'Send emails from Admin Area' feature. !31308
+- Add graphql endpoint for project packages list. !31344
+- Add project filter. !31444
+- Show specific content for future-dated licenses. !31463
+- Add lead time and cycle time to value stream analytics. !31559
+- Geo - Enable geo_file_registry_ssot_sync feature flag by default. !31671
+- Geo - Enable geo_job_artifact_registry_ssot_sync feature flag by default. !31672
+- Introduce a new API endpoint to generate group-level vulnerability exports. !31889
+- Add number of projects with compliance framework to usage ping. !31923
+- Adds versions tab and additional versions list to packages details page. !31940
+- Add link to customer portal from license dashboard.
+
+### Other (12 changes, 3 of them are from the community)
+
+- Add verification related fields to packages_package_files table. !25411
+- Refactor expected_paginated_array_response. !25500 (George Thomas @thegeorgeous)
+- Monitoring for Elasticsearch incremental updates buffer queue. !27384
+- Use warning icon for alert widget in monitoring dashboard. !27545
+- Improved tests by removing duplicated specs. !28525 (Leandro Silva)
+- Move service desk from Premium to Starter plan. !29980
+- Change license history wording. !30148
+- Make active_users param mandatory for SyncSeatLinkRequestWorker#perform. !30810
+- Track group wiki storage in DB. !31121
+- Replace undefined confidence with unknown severity for occurrences. !31200
+- Replace undefined confidence with unknown severity for vulnerabilities. !31593
+- Translate unauthenticated user string for Audit Event. !31856 (Sashi Kumar)