Add latest changes from gitlab-org/gitlab@master

changelogs/unreleased/security-cross-reference-fix.yml

----
-title: Do not show resource label events referencing not accessible labels.
-merge_request:
-author:
-type: security

changelogs/unreleased/security-fp-stop-jobs-when-blocking-user.yml

----
-title: Cancel all running CI jobs triggered by the user who is just blocked
-merge_request:
-author:
-type: security

changelogs/unreleased/security-gitaly-1-65-1.yml

----
-title: Fix Gitaly SearchBlobs flag RPC injection
-merge_request:
-author:
-type: security

changelogs/unreleased/security-mermaid-block.yml

----
-title: Only render fixed number of mermaid blocks
-merge_request:
-author:
-type: security

changelogs/unreleased/security-sarcila-verify-saml-request-origin.yml

----
-title: Prevent GitLab accounts takeover if SAML is configured
-merge_request:
-author:
-type: security

changelogs/unreleased/security-search-by-iid-leaks-data.yml

----
-title: Limit search for IID to a type to avoid leaking records with the same IID that
-  the user does not have access to
-merge_request:
-author:
-type: security

changelogs/unreleased/sh-bump-rouge-3-11-0.yml

----
-title: Upgrade Rouge to v3.11.0
-merge_request: 17011
-author:
-type: other

changelogs/unreleased/sh-disable-pager-on-small-counts.yml

----
-title: Fix erroneous "No activities found" message
-merge_request: 18434
-author:
-type: fixed

changelogs/unreleased/sh-enable-google-api-retries.yml

----
-title: Enable Google API retries for uploads
-merge_request: 18040
-author:
-type: fixed

changelogs/unreleased/sh-fix-gitaly-nplus-one-issues-related-mrs.yml

----
-title: Fix Gitaly N+1 queries in related merge requests API
-merge_request: 17850
-author:
-type: performance

changelogs/unreleased/sh-fix-project-export-for-pipelines-for-mrs.yml

----
-title: Fix project imports for pipelines for merge requests
-merge_request: 17799
-author:
-type: fixed

changelogs/unreleased/sh-fix-snippet-visibility-api.yml

----
-title: Fix inability to set snippet visibility via API
-merge_request: 18612
-author:
-type: fixed

changelogs/unreleased/sh-github-import-handle-nil-dates.yml

----
-title: 'GitHub import: Handle nil published_at dates'
-merge_request: 18355
-author:
-type: fixed

changelogs/unreleased/sh-handle-exceptions-sidekiq.yml

----
-title: Log Sidekiq exceptions properly in JSON format
-merge_request: 17412
-author:
-type: fixed

changelogs/unreleased/sh-hide-license-breakdown.yml

----
-title: Hide license breakdown in /admin if user count is high
-merge_request: 18825
-author:
-type: performance

changelogs/unreleased/sh-limit-diverging-commit-counts.yml

----
-title: Limit diverging commit counts requests
-merge_request: 16737
-author:
-type: performance

changelogs/unreleased/sh-move-mr-diff-after-commit.yml

----
-title: Reduce idle in transaction time when updating a merge request
-merge_request: 18493
-author:
-type: performance

changelogs/unreleased/sh-use-template-project-id-backend.yml

----
-title: Add backend support for selecting custom templates by ID
-merge_request: 18178
-author:
-type: fixed

changelogs/unreleased/show-correct-link-in-mr-pipelines.yml

----
-title: Show the original branch name and link of merge request in pipeline emails
-merge_request: 17513
-author:
-type: fixed

changelogs/unreleased/sort-severity-then-confidence.yml

----
-title: Sort vulnerabilities by severity then confidence for dashboard and pipeline views
-merge_request: 18675
-author:
-type: changed