Fix system hook not firing for blocked users when LDAP sign-in is used

Closes #46307

See merge request gitlab-org/gitlab-ce!18930

Update secpick to use security branches

See merge request gitlab-org/gitlab-ce!18937

Add Code Review documentation that maintainers also perform code review

See merge request gitlab-org/gitlab-ce!18911

Fix gitaly-ruby bundle poisoning in CI

Closes gitaly#1184 and gitaly#1169

See merge request gitlab-org/gitlab-ce!18853

Update runner links to repo based on restructuring

See merge request gitlab-org/gitlab-ce!18919

Replace the `project/forked_merge_requests.feature` spinach test with an rspec analog

See merge request gitlab-org/gitlab-ce!18867

Resolve "Remove redundant tooltips on activity tabs"

Closes #46164

See merge request gitlab-org/gitlab-ce!18918

Replace the `project/commits/diff_comments.feature` spinach test with an rspec analog

See merge request gitlab-org/gitlab-ce!18868

Remove an extra backtick from Group Milestones API documentation

See merge request gitlab-org/gitlab-ce!18913

An LDAP sign-in request results in a different request parameter than
a standard GitLab sign-in. Since Warden doesn't pass us the user that
was blocked, we first search for a `username` in the request parameters
and then look for `user.login`.

Closes #46307

Remove duplicate method

See merge request gitlab-org/gitlab-ce!18886

Allow a user to sign out when on the terms page

Closes #46211

See merge request gitlab-org/gitlab-ce!18875

Resolve "[Rails5] Fix spec/controllers/projects/jobs_controller_spec.rb"

Closes #46227

See merge request gitlab-org/gitlab-ce!18891

Replace the `project/merge_requests/references.feature` spinach test with an rspec analog

See merge request gitlab-org/gitlab-ce!18794

A section was moved in f644b8c8 but this got lost.

Merge branch 'docs-fixed-typo-microsoft-teams-slug' into 'master'

See merge request gitlab-org/gitlab-ce!18908

Fix: API Documentation typo on Microsoft Teams slug

See merge request gitlab-org/gitlab-ee!5412

Enforce terms acceptance before configuring 2FA

Closes #46256

See merge request gitlab-org/gitlab-ce!18896

Block access to API & git when terms are enforced

Closes #45849

See merge request gitlab-org/gitlab-ce!18816

Vendor Auto DevOps template

See merge request gitlab-org/gitlab-ce!18876

Resolve "Remove modal box confirmation when retrying a pipeline"

Closes #45715

See merge request gitlab-org/gitlab-ce!18879

Remove Gitlab::RepoPath.strip_storage_path

See merge request gitlab-org/gitlab-ce!18904

Allow builds that have been triggered by a user before terms were
enforced access to git. That way the builds can complete as usual.

This prevents a redirect loop when a user has to enable 2FA and accept
the terms.

Now they will need to accept the terms, then enable 2FA, or any other requirements.

This used to be executed because of the post receive worker, but this
uses Gitlab::GlRepository.parse now. So this removes dead code and
reduces the number of calls on `#legacy_storage_path`.

Add 2FA filter to group members page

See merge request gitlab-org/gitlab-ce!18483

Wiki Find Page to opt_out

Closes gitaly#894

See merge request gitlab-org/gitlab-ce!18895

Resolve "[Rails5] Bump Rails5 to 5.0.7"

Closes #46234

See merge request gitlab-org/gitlab-ce!18888