Bugfix: User can't change the access level of an access requester

Closes #40743

See merge request gitlab-org/gitlab-ce!15832

Properly bump prometheus-client-mmap gem versions

See merge request gitlab-org/gitlab-ce!15825

The endpoint was returning 404 because it was only searching on the
current members of a Group or Project and not the access requesters.

Remove a header level in the new 'Automatic CE->EE merge' doc

See merge request gitlab-org/gitlab-ce!15843

Keep track of the circuit breaker access check timings

Closes #39698

See merge request gitlab-org/gitlab-ce!15612

Do not raise when downstream pipeline is created

Closes #40987

See merge request gitlab-org/gitlab-ce!15837

Pick 10.2.4 security fixes into master

See merge request gitlab-org/gitlab-ce!15821

Signed-off-by: Rémy Coutable <remy@rymai.me>

Add recaptcha_check_if_spammable for issualbes than arent spammables

See merge request gitlab-org/gitlab-ce!15817

Todo count calculations now expired quicker for top bar stats

See merge request gitlab-org/gitlab-ce!15794

Turn" push a file" into a scenario

See merge request gitlab-org/gitlab-ce!15617

Fix image view mode

Closes #40945

See merge request gitlab-org/gitlab-ce!15803

Convert Compare and CompareAutocomplete classes into ES module syntax

See merge request gitlab-org/gitlab-ce!14857

Fix gitlab:import:repos Rake task moving repositories into the wrong location

Closes #40765

See merge request gitlab-org/gitlab-ce!15823

Only the Gemfile.lock was updated before.

If the source import directory were different from the destination directory,
GitLab would first create a blank repository and then erroneously move the
original one into a subdirectory. Adding an import type prevents this the project
from being initialized in the first place. It was accidentally removed in
1f917cbd49.

Closes #40765

prevent potential XSS when editing comment

See merge request gitlab/gitlabhq!2238

(cherry picked from commit 80ed6d25a46c0f70ec8baea78b5777118d63876c)

7480e462 prevent potential XSS when editing comment

Prevent creating issues through API without having permissions

See merge request gitlab/gitlabhq!2225

(cherry picked from commit c298bbaa88883343dc9cbbb6abec0808fb3b546c)

915b97c5 Prevent creating issues through API without having permissions

[10.2] Ensure we expose group projects using GroupProjectsFinder

See merge request gitlab/gitlabhq!2234

(cherry picked from commit 072f8f2fd6ec794645375a16ca4ddc1cbeb76d7a)

a2240338 Ensure we expose group projects using GroupProjectsFinder

(10.2) Avoid partial partial email adresses for matching

See merge request gitlab/gitlabhq!2232

(cherry picked from commit 081aa1e91a777c9acb31be4a1e76b3dd7032fa9a)

There are unresolved conflicts in app/models/user.rb.

fa85a3fd Don't allow searching for partial user emails

Fixes project visibility guidelines

See merge request gitlab/gitlabhq!2226

(cherry picked from commit 877c42c0aaf3298d6001614c9706bc366ae4014c)

e4fd1c26 Ensure project wiki visibility guidelines are met

Move the "Limit conflicts with EE" doc to "Automatic CE-> EE merge"

See merge request gitlab-org/gitlab-ce!15749

Allow git pull/push on project redirects

Closes #35385

See merge request gitlab-org/gitlab-ce!15670

Resolve "Deploy markers should be more verbose"

Closes #38032

See merge request gitlab-org/gitlab-ce!15641

Resolve "Include asset_sync gem"

Closes #40031

See merge request gitlab-org/gitlab-ce!15734

Fix N+1 query when displaying events

See merge request gitlab-org/gitlab-ce!15788

Use prefix for TableOfContents filter hrefs

Closes #38473

See merge request gitlab-org/gitlab-ce!15806

Fix invalid pipeline build chain tag evaluation

Closes #40944

See merge request gitlab-org/gitlab-ce!15805