[ci skip]

[ci skip]

Prepare 13.1.4-ee release

See merge request gitlab-org/gitlab!36304

Dmitriy Zaporozhets authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Fix gitlab:*:check Rake tasks

Closes #225845

See merge request gitlab-org/gitlab!35944

(cherry picked from commit 1e68a2fc)

fb70724e Fix gitlab:*:check Rake tasks

Dylan Griffith authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Fix error 500s creating new projects due to empty weights

Closes #225203

See merge request gitlab-org/gitlab!35829

(cherry picked from commit ef2ce0f3)

667a295c Fix error 500s creating new projects due to empty weights

Tiger Watson authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Fix existing repository_storages_weighted migrations

Closes #225588

See merge request gitlab-org/gitlab!35814

(cherry picked from commit 0cf7e6bb)

d838c0b2 Fix existing migrations for repository_storages_weighted column

Heinrich Lee Yu authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Merge branch '224674-fix-update_routes_for_lost_and_found_group_and_orphaned_projects-conflict-with-ghost-route' into 'master'

Fix conflict on the migration that adds routes for orphaned projects

See merge request gitlab-org/gitlab!35425

(cherry picked from commit 29fe9d5d)

db7d808b Fix conflict on the migration that adds routes for orphaned projects

Achilleas Pipinellis authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Document the doctor:secrets rake task

Closes gitlab-com/support/toolbox/snippets#64

See merge request gitlab-org/gitlab!35393

(cherry picked from commit bffae604)

b7c3ba06 Document the doctor:secrets rake task
de02a08c Apply 7 suggestion(s) to 3 file(s)
24350757 Update based on MR suggestions
6cfbd4e7 Apply 1 suggestion(s) to 1 file(s)
c0c07994 More linting fixes
5509ac15 Fix Vale errors
dbf8fbeb Apply 1 suggestion(s) to 1 file(s)

Shinya Maeda authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Enable code_navigation for feature specs

See merge request gitlab-org/gitlab!35309

(cherry picked from commit 3a6952c2)

15c2fc8e Enable code_navigation for feature specs

Paul Slaughter authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

Resolve "Merge request approval button style inadvertently changed"

Closes #29151 and #224139

See merge request gitlab-org/gitlab!35213

(cherry picked from commit 2168c304)

95899f8d Fix merge request approval button styling
0926f4e1 Add changelog entry for bug fix
a1c0154f Utilize loading prop of gl-button
b22461d9 Fix broken tests for approve widget
c7889fc9 Replace .attributes with .props in approvals_spec

Geo - Does not sync LFS objects from fork networks

See merge request gitlab-org/gitlab!36201

[ci skip]

[ci skip]

Use the uploaded file set by multipart.rb in Maven packages

See merge request gitlab-org/security/gitlab!704

Avoid calling UploadedFile.from_params

[ci skip]

[ci skip]

Merge branch 'security-fj-add-snippet-repository-validation-bundle-import-13-1' into '13-1-stable-ee'

Lack of validations importing snippet repository from bundle

See merge request gitlab-org/security/gitlab!648

Do not show activity for users with private profiles

See merge request gitlab-org/security/gitlab!687

Check access when sending TODOs related to merge requests

See merge request gitlab-org/security/gitlab!672

Disable caching for wiki attachments

See merge request gitlab-org/security/gitlab!657

Fix null byte error in upload path

See merge request gitlab-org/security/gitlab!666

Resolve "Cross-Site Scripting In BitbucketServer Import"

See merge request gitlab-org/security/gitlab!258

Fix note author name rendering

See merge request gitlab-org/security/gitlab!668

Disable github import api by seetings

See merge request gitlab-org/security/gitlab!650

Fixed group deploy token API authorizations

See merge request gitlab-org/security/gitlab!677

Change from hybrid to JSON cookies serializer

See merge request gitlab-org/security/gitlab!690

Drew Blessing authored 4 years ago and GitLab Release Tools Bot committed 4 years ago

JSON has been the default serializer since Rails 4.1. Hybrid
serializer was meant to allow backward compatibility when
upgrading pre-Rails 4.1. It's been some time since we upgraded
to Rails 4.1 so now we don't need the hybrid serializer anymore.
This also causes security concerns since the previous serializer
was Marshal.

Stored XSS on the Error Tracking page

See merge request gitlab-org/security/gitlab!680

Upgrade swagger-ui to solve XSS issues

See merge request gitlab-org/security/gitlab!640

Validate group names with Rails HTML sanitizer

See merge request gitlab-org/security/gitlab!647