Add latest changes from gitlab-org/gitlab@master

CHANGELOG-EE.md

 Please view this file on the master branch, on stable branches it's out of date.
+## 12.5.0
+
+### Security (5 changes)
+
+- Fixes a Open Redirect issue in `InternalRedirect`.
+- Filter out packages the user does'nt have permission to see at group level.
+- Do not show private cross references in epic notes.
+- Redact search results based on Ability.allowed?.
+- Do not index system notes for issue update.
+
+### Removed (2 changes, 1 of them is from the community)
+
+- Remove the Geo Clone Modal. !18897 (Zack Cuddy)
+- Remove Pendo Snippet. !19400
+
+### Fixed (17 changes)
+
+- Fix notification button size in notification settings. !16672
+- Don't store full blob path in ES filename field. !18470
+- Add messages to warn and stop users when attempting to change the path of projects with NPM packages. !18515
+- Pass pipeline variables when expanding Bridge downstream variables. !18875
+- Fix equality operator for Prometheus alerts. !18919
+- Fix rake task to rollback Geo migrations. !18975
+- Default current user to mirror user when creating pipelines for GitHub pull requests. !19072
+- Fix overlapping `Skip Trial` block. !19218
+- Fix Dependency List is empty if last pipeline is retried. !19241
+- SCIM pagination startIndex handles string input. !19331
+- Display packages with multiple licenses. !19333
+- Expose commit sha on Vulnerabilities::Occurrence. !19668
+- Fix admin welcome image not found. !19676
+- Revert ES support for public/internal project snippets. !19715
+- Updated View documentation link on cluster page. !19780
+- Enable pod logs nav menu only for maintainers in projects with k8s environments. !19927
+- Hide labels from issue board cards. !20072
+
+### Changed (13 changes)
+
+- Inherit children epics start and due dates. !14366
+- Update the frontend diffing code to support v2 license scan reports. !18105
+- Implement pod logs page using Vue. !18567
+- Move DAST reports logic for the Merge Request widget to the backend. !18660
+- Add created_before/after filter to audit events. !19035
+- Get rid of unnecessary duplication of alert’s title from Alert Details. !19214
+- Hashed storage is now a requirement for Design Management. !19259
+- Expose epic in issues API. !19300
+- SCIM GET /Users supports requests without a filter. !19421
+- Enable Cycle Analytics Feature by default. !19484
+- Enforce a max size accepted for sentry issues list. !19649
+- Limit input size for Prometheus alert JSON payload. !19940
+- Adds in a URL field for DAST reports modal data. !20162
+
+### Performance (2 changes)
+
+- Fix new project page load performance. !18180
+- Geo - Improve query performance to determine LFS objects to sync when selective sync is enabled. !19051
+
+### Added (17 changes, 1 of them is from the community)
+
+- Add filter for dismissed vulnerabilities on security dashboards. !16692
+- Data API endpoint for tasks by type chart within the analytics workspace. !17944
+- Hide labels from issue board cards. !18533
+- Skip Onboarding feedback when tracking is disabled. !18671
+- API endpoint to list the packages of a group. !18871
+- Allow to create epics with GraphQL. !19030
+- CI_JOB_TOKEN can be accepted with 'Bearer ' prefix to allow for NPM registry usage. !19059
+- Add issue IID to a title of generic alerts with a default title. !19086
+- Update sidebar to differentiate between groups, subgroups, and projects. !19158
+- SCIM can be used to manage group membership. !19329
+- Expose number of sub-epics and epic issues in GraphQL API. !19450
+- Add logs menu item to the sidebar. !19471
+- Add public API for Feature Flags. !19547
+- Ignore project_ci_cd_settings.merge_trains_enabled column. !19695
+- Add a usage ping metric for number of activated Alert Services. !19765
+- New discussions on designs will generate a system note on the issue. !19990
+- Expose SHA of squashed commit via API when fast-forward merge is enabled. (minghuan lei)
+
+### Other (6 changes, 1 of them is from the community)
+
+- Migrated contributors charts to echarts. !16677
+- Added autogenerated Markdown support for Vulnerability title and description. !18283
+- Rename user_id to author_id in design_management_versions table. !18506
+- Revert notification for updated privacy policy. !18900
+- Remove plaintext tokens for feature flags clients. !18923
+- Remove IIFEs from jira_connect.js file. !19248 (nuwe1)
+
+
 ## 12.4.3
 ### Fixed (2 changes)

VERSION

-12.6.0-pre
+12.5.0-pre

changelogs/unreleased/10242-move-old-vulns-api-to-vuln-findings.yml

----
-title: Rename Vulnerabilities API to Vulnerability Findings API
-merge_request: 19029
-author:
-type: changed

changelogs/unreleased/11137-propagate-all-env-vars-to-sast-containers.yml

----
-title: Propagate custom environment variables to SAST analyzers
-merge_request: 18193
-author:
-type: changed

changelogs/unreleased/11930-handle-multiple-entries-dast-report.yml

----
-title: The Security Dashboard displays DAST vulnerabilities for all the scanned sites, not just the first
-merge_request: 17779
-author:
-type: added

changelogs/unreleased/12769-milestone-blank-name-causes-issues.yml

----
-title: Ensure milestone titles are never empty
-merge_request: 19985
-author:
-type: fixed

changelogs/unreleased/12881-security-dashboard-leveraging-sparklines-to-show-vulnerability-tren.yml

----
-title: Vulnerabilities history chart - use sparklines
-merge_request: 19745
-author:
-type: changed

changelogs/unreleased/13055-show-the-sync-information-for-design-repositories.yml

----
-title: 'Geo: Add resigns-related fields to Geo Node Status table'
-merge_request: 18379
-author:
-type: other

changelogs/unreleased/13135-call-to-validate_query-in-custom-metrics-form-is-not-retried.yml

----
-title: Fix query validation in custom metrics form
-merge_request: 18769
-author:
-type: fixed

changelogs/unreleased/13401-close-gitlab-issue-on-recovery-alerts-from-prometheus.yml

----
-title: Close issues on Prometheus alert recovery
-merge_request: 18431
-author:
-type: added

changelogs/unreleased/13492-design-comments-width.yml

----
-title: Smaller width for design comments layout, truncate image title
-merge_request: 17547
-author:
-type: fixed

changelogs/unreleased/13539-license-compliance-approval-required.yml

----
-title: Show approval required status in license compliance
-merge_request: 19114
-author:
-type: changed

changelogs/unreleased/14707-add-modsec-logging-sidecar-to-ingress-controller.yml

----
-title: Add modsecurity logging sidecar to ingress controller
-merge_request: 19600
-author:
-type: added

changelogs/unreleased/14770-ignore-deprecated-column-on-projects.yml

----
-title: Ignore deprecated column and remove references to it
-merge_request: 18911
-author:
-type: deprecated

changelogs/unreleased/18797-support-for-crossplane-as-a-managed-app.yml

----
-title: Support for Crossplane as a managed app
-merge_request: 18797
-author: Mahendra Bagul
-type: added

changelogs/unreleased/18986-allow-to-use-commit-sha-in-cache-key.yml

----
-title: Build CI cache key from commit SHAs that changed given files
-merge_request: 19392
-author:
-type: added

changelogs/unreleased/19054-upgrade-helm.yml

----
-title: 'Updated Auto-DevOps to kubectl v1.13.12 and helm v2.15.1'
-merge_request: 19054
-author: Leo Antunes
-type: changed

changelogs/unreleased/19445-native-group-milestone-page-needs-same-info-as-project-milestones.yml

----
-title: Add issues, MRs, participants, and labels tabs in group milestone page
-merge_request: 18818
-author:
-type: added

changelogs/unreleased/20081-add-mb-2-class-to-global-alerts.yml

----
-title: Add mb-2 class to global alerts
-merge_request: 20081
-author: 2knal
-type: other