Fixes the User Selection Display (9.5)

See merge request gitlab/gitlabhq!2177

[9.5] Disallow the `name` attribute on all user-provided markup

See merge request gitlab/gitlabhq!2166

[9.5] Limit `style` attribute on `th` and `td` elements to specific properties

See merge request gitlab/gitlabhq!2155

Do not use `location.pathname` when accessing environments folders

See merge request !2147

[9.5] Prevent a persistent XSS in the commit author block

See merge request gitlab/gitlabhq!2180

Fix Live Comment XSS Vulnerability

See merge request gitlab/gitlabhq!2183

Fix XSS issue in go-get handling

See merge request !2128

Update db schema to correspond with migrations

See merge request !14115

Merge branch '36638-select-project-to-create-issue-button-is-disconnected-from-dropdown-button' into 'master'

Normalize styles for empty-state group-level new issue/MR combo button

Closes #36638

See merge request !13647

Merge branch '30473-allow-creation-of-subgroups-with-gitlab_default_can_create_group-set-to-false' into 'master'

Make Members with Owner and Master roles always able to create subgroups

Closes #30473

See merge request !14046

Add Auto DevOps docs

Closes #37051

See merge request !14031

Update rails template to include postgres

Closes #37156

See merge request !14120

Merge branch '35558-only-one-garbage-collection-should-be-running-per-project-at-once' into 'master'

Adds exclusive lease to Git garbage collect worker.

Closes #35558

See merge request !14036

Resolve RuboCop violations in scripts/trigger-build-docs

See merge request !14118

Restore droplab item style for keyboard navigation

Closes #37218

See merge request !13921

Improve "Share with group lock" feature for subgroups

Closes #30550

See merge request !13944

Resolve "Make project and features visibility settings less confusing"

Closes #32665

See merge request !14062

Resolve "Banner to enable Auto DevOps at project level"

Closes #37158

See merge request !13991

Update docs for confidential issues

Closes #36352

See merge request !14117

Add JSON logger in `log/api_json.log` for Grape API endpoints

Closes #36189

See merge request !14102

Gitaly feature toggles are on by default in development environments

Closes gitaly#485

See merge request !13802

Fix a wrong `X-Gitlab-Event` header when testing webhooks

Closes #37288

See merge request !14108

Implement the implied CI/CD config for AutoDevOps

Closes #34777

See merge request !13923

Decrease Cyclomatic Complexity threshold to 14

See merge request !13972

Removes default scope from sortable

Closes #23079

See merge request !13558

Change strings for projects dropdown placeholder and error state

Closes #37513

See merge request !14079