This reverts commit 426716d1

[11.4] Do not expose trigger token when user should not see it

See merge request gitlab/gitlabhq!2761

(cherry picked from commit bc660b08642de2a68e39a443566e7665f057a0a8)

1b81cbce Do not expose trigger token when user should not see it

[ci skip]

[11.4] Validate bundle files before unpacking them

See merge request gitlab/gitlabhq!2776

(cherry picked from commit 6176b02aa6577079986410719884bd253dc5e7be)

e5e5e77e Validate bundle files before unpacking them

Stop using deprecated argument to `gem`

See merge request gitlab-org/gitlab-ce!24079

[ci skip]

[11.4] Resolve "Removing a user from a private group doesn't remove them from group's project, if their project's role was changed"

See merge request gitlab/gitlabhq!2714

# Conflicts:
#   app/services/members/destroy_service.rb

[11.4] Group Ex-Maintainer Could maintain Access to Project's Source Code/Jobs/Pipelines/Artifacts if it had Shared Group Runner Configured

See merge request gitlab/gitlabhq!2752

Disable docs lint internal_links check

Closes #55038

See merge request gitlab-org/gitlab-ce!23665

[11.4] Secret CI variables can exposed by creating a tag with the same name as an existing protected branch

See merge request gitlab/gitlabhq!2683

Merge branch 'security-11-4-53543-user-keeps-access-to-mr-issue-when-removed-from-team' into 'security-11-4'

[11.4] Adds validation to check if user can read project

See merge request gitlab/gitlabhq!2680

[11.4] Project guests no longer are able to see refs page

See merge request gitlab/gitlabhq!2688

[11.4] SSRF in project imports with LFS

See merge request gitlab/gitlabhq!2727

[11.4] Stored XSS in latest IE

See merge request gitlab/gitlabhq!2674

[11.4] Escape html entities when no label found

See merge request gitlab/gitlabhq!2749

[11.4] Guest users have access to all Job information via the API

See merge request gitlab/gitlabhq!2746

[11.4] Ensure that build token is always running

See merge request gitlab/gitlabhq!2663

[11.4] SSRF - Scan Internal Ports and GCP/AWS endpoints

See merge request gitlab/gitlabhq!2710

[11.4] Escape label and milestone titles to prevent XSS in GFM autocomplete

See merge request gitlab/gitlabhq!2742

[11.4] Set URL rel attribute for broken URLs

See merge request gitlab/gitlabhq!2713

[11.4] Delete confidential issue todos for guests

See merge request gitlab/gitlabhq!2724

[11.4] Validate projects in MR build service

See merge request gitlab/gitlabhq!2705