[ci skip]

[ci skip]

* 9-0-stable:
  Fix test error

* 9-0-stable:
  Merge branch 'tc-fix-private-subgroups-shown' into 'security'
  Merge branch 'fix-hamlit-xss' into 'security-9-1'
  Merge branch 'snippets-finder-visibility' into 'security'
  Merge branch 'branch-name-escape' into 'security'
  Merge branch '31157-respect-project-features-in-wiki-search' into 'security'
  Merge branch 'snippets_visibility' into 'security'
  Merge branch 'rs-sanitize-submodule-urls' into 'security'
  Merge branch 'bvl-markup-pipeline' into 'security'
  Merge branch 'bvl-validate-urls-in-markdown-using-uri' into 'security'
  Update VERSION to 9.0.6
  Update CHANGELOG.md for 9.0.6

New Hamlit XSS fix, does not include extraneous changes

See merge request !509

Respect project features when searching alternative branches with elasticsearch enabled

See merge request !508

Use GroupsFinder to find subgroups the user has access to

See merge request !2096

New Hamlit XSS fix, does not include extraneous changes

See merge request !2095

Refactor snippets finder & dont return internal snippets for external users

See merge request !2094

Fix XSS in branches dropdown

See merge request !2093

Respect project features in wiki and blob search

See merge request !2089

Fix snippets visibility for show action - external users can not see internal snippets

See merge request !2087

Sanitize submodule URLs before linking to them in the file tree view

See merge request !2084

Render asciidoc & other markup using banzai in a pipeline

See merge request !2088

Add correct `rel` attributes to external links when rendering markdown

See merge request !2086

[ci skip]

[ci skip]

[ci skip]

Show sub-nav under Merge Requests when issue tracker is non-default

Closes #30779

See merge request !10658

Don't run the downtime check on stable branches, or tags/master

See merge request !10794

Fix dropdown spec failure pipeline

See merge request !10829

Display custom hook error messages when automatic merge is enabled

Closes gitlab-ce#29125

See merge request !1670

Port of fix/29125-ee to CE

Closes #29125

See merge request !10796

Fix PlantUML integration in GFM

Closes #30557

See merge request !10651

Remove node modules cache because we already use artifacts

Closes #29226 and #31137

See merge request !10781

Move clauses from query to filter stage for elasticsearch notes

Closes #1776

See merge request !1675

Ignore internal users on user counts

Closes #2096

See merge request !1659

Fix orphaned notification settings

Closes #29688

See merge request !10763

Cache Gitlab::Geo queries

Closes #1983

See merge request !1507