[merge-train skip]

[ci skip]

[ci skip]

Prepare 14.0.3-ee release

See merge request gitlab-org/gitlab!65498

Merge branch '333513-fix-flaky-dependency-list-test' into 'master'

See merge request gitlab-org/gitlab!65527

Matthias Käppler authored 3 years ago and Amy Phillips committed 3 years ago

Fix flaky dependency list test

See merge request gitlab-org/gitlab!64388

(cherry picked from commit d2580206)

754a3368 Fix flaky dependency list test

Stan Hu authored 3 years ago and GitLab Release Tools Bot committed 3 years ago

See https://gitlab.com/gitlab-org/gitlab/-/merge_requests/65205

Changelog: fixed

Heinrich Lee Yu authored 3 years ago and GitLab Release Tools Bot committed 3 years ago

Run batched migrations on self-managed instances

See merge request gitlab-org/gitlab!65106

(cherry picked from commit f420a487)

66032fe5 Run batched migrations on self-managed instances

Alex Ives authored 3 years ago and GitLab Release Tools Bot committed 3 years ago

See https://gitlab.com/gitlab-org/gitlab/-/merge_requests/64948

Changelog: changed
EE: true

Martin Wortschack authored 3 years ago and GitLab Release Tools Bot committed 3 years ago

See https://gitlab.com/gitlab-org/gitlab/-/merge_requests/64904

Changelog: fixed
EE: true

Shinya Maeda authored 3 years ago and GitLab Release Tools Bot committed 3 years ago

Revert a 14.0 change in the deployments API

See merge request gitlab-org/gitlab!64845

(cherry picked from commit a60f0ca5)

051c3425 Revert a 14.0 change in the deployments API

Michael Kozono authored 3 years ago and GitLab Release Tools Bot committed 3 years ago

See https://gitlab.com/gitlab-org/gitlab/-/merge_requests/64801

Changelog: fixed
EE: true

Nathan Friend authored 3 years ago and GitLab Release Tools Bot committed 3 years ago

See https://gitlab.com/gitlab-org/gitlab/-/merge_requests/64797

Changelog: fixed

Phil Hughes authored 3 years ago and GitLab Release Tools Bot committed 3 years ago

See https://gitlab.com/gitlab-org/gitlab/-/merge_requests/64775

Changelog: fixed

Andrew Fontaine authored 3 years ago and GitLab Release Tools Bot committed 3 years ago

See https://gitlab.com/gitlab-org/gitlab/-/merge_requests/64737

Changelog: fixed

Jan Provaznik authored 3 years ago and GitLab Release Tools Bot committed 3 years ago

See https://gitlab.com/gitlab-org/gitlab/-/merge_requests/64697

Changelog: fixed

Etienne Baqué authored 3 years ago and GitLab Release Tools Bot committed 3 years ago

See https://gitlab.com/gitlab-org/gitlab/-/merge_requests/64632

Changelog: changed

[merge-train skip]

[ci skip]

[ci skip]

Prevent GraphQL API access by deactivated users

See merge request gitlab-org/security/gitlab!1525

Forbid GET requests with mutations

See merge request gitlab-org/security/gitlab!1528

Copy feature visibility settings to a fork

See merge request gitlab-org/security/gitlab!1522

Update rdoc to 6.3.1

See merge request gitlab-org/security/gitlab!1533

Add new username validation

See merge request gitlab-org/security/gitlab!1498

Avoid disclosing project in web IDE

See merge request gitlab-org/security/gitlab!1511

Clipboard DOM-based XSS in Markdown [RUN AS-IF-FOSS]

See merge request gitlab-org/security/gitlab!1514

Add sanitizing for name field

See merge request gitlab-org/security/gitlab!1499

Fix XSS in release Edits

See merge request gitlab-org/security/gitlab!1506

Fix XSS on audit log for feature flag actions

See merge request gitlab-org/security/gitlab!1521

Update Nokogiri to 1.11.4

See merge request gitlab-org/security/gitlab!1500

Add omniauth_user check when verifying user cap

See merge request gitlab-org/security/gitlab!1501

Add total http read timeout

See merge request gitlab-org/security/gitlab!1507

Some users can push to Protected Branch with Deploy keys

See merge request gitlab-org/security/gitlab!1508

Fix merge request diff display issue with unsupported encoding

See merge request gitlab-org/security/gitlab!1509

Created a fork because rdoc 6.3.1 is missing a file.

Changelog: security

[merge-train skip]

[ci skip]

[ci skip]