[merge-train skip]

[ci skip]

[ci skip]

Prepare 14.4.2-ee release

See merge request gitlab-org/gitlab!73919

Stan Hu authored 3 years ago and GitLab Release Tools Bot committed 3 years ago

Bump Go dependency to 1.16

See merge request gitlab-org/gitlab!73829

(cherry picked from commit 73ad6282)

4e97ef7a Bump Go dependency to 1.16

Yorick Peterse authored 3 years ago and GitLab Release Tools Bot committed 3 years ago

See https://gitlab.com/gitlab-org/gitlab/-/merge_requests/73715

Changelog: fixed

Evan Read authored 3 years ago and GitLab Release Tools Bot committed 3 years ago

Document track-repository praefect subcommand

See merge request gitlab-org/gitlab!73488

(cherry picked from commit 8024148e)

a47fdccc Document track-repository praefect subcommand

Mikołaj Wawrzyniak authored 3 years ago and GitLab Release Tools Bot committed 3 years ago

See https://gitlab.com/gitlab-org/gitlab/-/merge_requests/73207

Changelog: changed

Yannis Roussos authored 3 years ago and GitLab Release Tools Bot committed 3 years ago

Fix issue_metrics index creation error

See merge request gitlab-org/gitlab!72928

(cherry picked from commit e30842f1)

22366a0c Fix issue_metrics index creation error

Douglas Barbosa Alexandre authored 3 years ago and GitLab Release Tools Bot committed 3 years ago

See https://gitlab.com/gitlab-org/gitlab/-/merge_requests/72925

Changelog: fixed

Alper Akgun authored 3 years ago and GitLab Release Tools Bot committed 3 years ago

Create 14.4 What's New entry

See merge request gitlab-org/gitlab!72900

(cherry picked from commit 7e66d89d)

30fa075c Create 14.4 What's New entry

Sean McGivern authored 3 years ago and GitLab Release Tools Bot committed 3 years ago

See https://gitlab.com/gitlab-org/gitlab/-/merge_requests/72897

Changelog: fixed

Etienne Baqué authored 3 years ago and GitLab Release Tools Bot committed 3 years ago

See https://gitlab.com/gitlab-org/gitlab/-/merge_requests/72435

Changelog: performance

E'zeki&el Kigbo authored 3 years ago and GitLab Release Tools Bot committed 3 years ago

Fix focus mode on boards

See merge request gitlab-org/gitlab!72382

(cherry picked from commit f8a75d53)

9abc4ce6 Fix focus mode on boards

[merge-train skip]

[ci skip]

[ci skip]

Merge branch 'security-518-fix-change-project-visibility-to-restricted-option-14-4' into '14-4-stable-ee'

Change project visibility to a restricted option

See merge request gitlab-org/security/gitlab!1903

Highlight usage of unicode bidi characters

See merge request gitlab-org/security/gitlab!1937

SCIM token is still Viewable After Creation

See merge request gitlab-org/security/gitlab!1906

Redact list of groups a project is shared with

See merge request gitlab-org/security/gitlab!1910

Fix path traversal issue with SVG hrefs

See merge request gitlab-org/security/gitlab!1929

Avoid decoding the whole tiff image on isTIFF check

See merge request gitlab-org/security/gitlab!1899

Workhorse: Allow uploading only a single file

See merge request gitlab-org/security/gitlab!1913

Do not allow Applications API to create apps with blank scopes

See merge request gitlab-org/security/gitlab!1922

Refresh authorizations on transfer of groups having project shares

See merge request gitlab-org/security/gitlab!1916

Don't allow author to resolve discussions when MR is locked via GraphQL

See merge request gitlab-org/security/gitlab!1919

Do not display the root password by default

See merge request gitlab-org/security/gitlab!1909

Iterate over trailing space regex replacements

See merge request gitlab-org/security/gitlab!1912

Prevent private e-mail from being shown in webhook data

See merge request gitlab-org/security/gitlab!1927

Match with verified_email? rather than any_email?

See merge request gitlab-org/security/gitlab!1926

Disallow guests to change severity on incidents

See merge request gitlab-org/security/gitlab!1902

Set imported PipelineSchedules to inactive

See merge request gitlab-org/security/gitlab!1911

Remove external_webhook_token from exported project

See merge request gitlab-org/security/gitlab!1872

Adds markup around unicode bidi characters when highlighting
code. These are used primarily for text direction in
right-to-left languages, but can be used as an exploit.

Changelog: security

This fixes an issue with SVGs href sanitization
which was bypassable using path traversal

Changelog: security

This change makes sure that when a group that
has any project-group shares is transferred,
it refresh authorizations of projects that are
shared to the group.

Changelog: security