[ci skip]

[ci skip]

[ci skip]

[ci skip]

[ci skip]

[ci skip]

* 9-1-stable:
  Update VERSION to 9.1.3
  Update CHANGELOG.md for 9.1.3

* dev/9-1-stable:
  Update VERSION to 9.1.3
  Update CHANGELOG.md for 9.1.3

[ci skip]

[ci skip]

[ci skip]

[ci skip]

[ci skip]

* 9-1-stable:
  Merge branch 'tc-fix-private-subgroups-shown' into 'security'

Use GroupsFinder to find subgroups the user has access to

See merge request !2096

* 9-1-stable:
  Fix the other failure

* 9-1-stable:
  Fix test error
  Fix test failure
  Merge branch 'fix-hamlit-xss' into 'security-9-1'
  Merge branch 'snippets-finder-visibility' into 'security'
  Merge branch 'branch-name-escape' into 'security'
  Merge branch '31157-respect-project-features-in-wiki-search' into 'security'
  Merge branch 'snippets_visibility' into 'security'
  Merge branch 'droplab-templating-xss-fix' into 'master'
  Merge branch 'rs-sanitize-submodule-urls' into 'security'
  Merge branch 'bvl-security-9-1-markup-pipeline' into 'security-9-1'
  Merge branch 'bvl-security-9-1-validate-urls-in-markdown-using-uri' into 'security-9-1'
  Update VERSION to 9.1.2
  Update CHANGELOG.md for 9.1.2

New Hamlit XSS fix, does not include extraneous changes

See merge request !509

Respect project features when searching alternative branches with elasticsearch enabled

See merge request !508

New Hamlit XSS fix, does not include extraneous changes

See merge request !2095

Refactor snippets finder & dont return internal snippets for external users

See merge request !2094

Fix XSS in branches dropdown

See merge request !2093

Respect project features in wiki and blob search

See merge request !2089

Fix snippets visibility for show action - external users can not see internal snippets

See merge request !2087

droplab templating xss fix

See merge request !2085

Sanitize submodule URLs before linking to them in the file tree view

See merge request !2084

(security-9-1) Render asciidoc & other markup using banzai in a pipeline

See merge request !2098

(security-9-1) Add correct `rel` attributes to external links when rendering markdown

See merge request !2097

[ci skip]

[ci skip]

[ci skip]

[ci skip]

[ci skip]