Add latest changes from gitlab-org/gitlab@master

.haml-lint_todo.yml

@@ -495,7 +495,6 @@ linters:
       - 'ee/app/views/projects/services/prometheus/_metrics.html.haml'
       - 'ee/app/views/projects/settings/slacks/edit.html.haml'
       - 'ee/app/views/shared/_additional_email_text.html.haml'
-      - 'ee/app/views/shared/_geo_info_modal.html.haml'
       - 'ee/app/views/shared/_mirror_update_button.html.haml'
       - 'ee/app/views/shared/_shared_runners_minutes_limit.html.haml'
       - 'ee/app/views/shared/audit_events/_event_table.html.haml'

CHANGELOG-EE.md

 Please view this file on the master branch, on stable branches it's out of date.
 
+## 12.4.0
+
+### Security (2 changes)
+
+- Prevent IDOR when adding groups to protected environments.
+- Hide approvers if a rule has any hidden groups.
+
+### Removed (1 change)
+
+- Remove db_load_balancing_index gauge metric. !17561
+
+### Fixed (26 changes, 1 of them is from the community)
+
+- Admin settings errors now shown in the correct panel. !14374
+- Add missing error handling for epic quick actions. !15648
+- Fix project exports clobbering concurrent export paths. !16280
+- Fixes scroll handle icon in time series. !16354
+- Remove hardcoded Medium confidence for Container Scanning vulnerabilities. !16395
+- Fixed renaming changed files. !16539
+- Fix project-defined metrics dashboards not rendering. !16589
+- Remove duplication of Licenses in Dependency List page. !16946
+- Backfill SPDX identifiers in software_licenses table. !17004
+- Monitor charts: Validate form for creating an alert before submitting. !17109
+- Hide Push rules link when you dont have a license installed. !17530
+- Operations Dashboard: fix minimum query message. !17574
+- Fix page layout for sidebar on designs view. !17579
+- Display error for invalid insights config. !17589
+- Display appropriate approval status icon next to license. !17613
+- Fix deduplication of WASC vulnerabilities in the Security dashboard. !17778
+- Fix burndown negative count edge case. !18053
+- Change design management empty state button style. !18060 (George Tsiolis)
+- Decouple dependency list parser from v1.0 license scanning report. !18103
+- Respect Group SSO Enforcement on projects where the user is an owner. !18154
+- Scoped labels do not remove old label in board sidebar. !18313
+- Restrict number of users input to positive numbers. !18381
+- Fix undefined method log_geo_deleted_event for MergeRequestDiff. !18405
+- Add default empty values to prevent parser errors from approving the Vulnerability-Check rule. !18423
+- Fix time tracking info when the sidebar is collapsed.
+- Fix Discussion tab counter on Issues.
+
+### Changed (18 changes, 1 of them is from the community)
+
+- Style burndown charts with gitlab-ui. !15463
+- Add epic_iid parameter to issues API. !15640
+- Use a single badge to show number of active alerts on metrics dashboards. !15789
+- Allow files with .svg extensions to be uploaded as designs for Design Management. !16160
+- Implement dismissal behaviour when dismissed vulnerabilities are hidden. !16207
+- Remove environment_metrics_show_multiple_dashboards feature flag. !16640
+- Make name an optional parameter of releases. !16647
+- Expose epics closed_at on API. !17156
+- Add static_context API param when editing GitHub project service. !17397
+- Support variable expansion in branch property of bridge jobs. !17430
+- Add environment dropdown to pod logs screen. !17532
+- Parse v2 license scanning reports. !17646
+- Remove broken HTML5 routing behaviour from Pipeline Security Dashboard. !17767
+- Change Prometheus Alert details list from bulleted to description list. !18116 (Vitali Tatarintev)
+- Check for software license violations using SPDX identifiers. !18300
+- Move 'Advanced search' message to search page title. !18349
+- Add alert message for feature 'require approval from code owners' being moved. !18715
+- Enable Productivity Analytics feature by default. !18754
+
+### Performance (1 change)
+
+- Reduce excessive GC on pull mirrors. !17931
+
+### Added (35 changes)
+
+- Allow Design Management files and data to be included in the project exporter/importer. !14702
+- Create system notes for design events. !14791
+- Paginate SCIM responses using count and startIndex. !14892
+- Front-End UI for design deletion. !15034
+- Add max issue count to lists. !15116
+- Sign in / sign up step for trial. !15289
+- Add notification for updated privacy policy. !15435
+- Show Billing Plan as Cards in profile and groups. !15437
+- Add Audit Event API. !15698
+- Add configurable Code Owner approvals for protected branches. !15862
+- Add Alerts Service to Projects. !16117
+- Add Conan check_credentials API endpoint. !16215
+- Initial endpoint for exposing Cycle Analytics stages for the new frontend. !16240
+- Add ability to multi select issue board cards. !16317
+- Add License-Check approval UI. !16371
+- Add links to associated releases on Tags page. !16479
+- Frontend implementation for improved trial sign-up experience for GitLab.com (SaaS) users. !16732
+- Return Todos for Designs via the REST API. !16885
+- Set active insights dashboard tab from hash fragment. !16904
+- Extend group IP restriction to Git activity. !16980
+- Inactivate pipeline retries for Merge Trains. !17065
+- Expose time when the build was generated. !17113
+- Add new table for recording commit counts per file. !17277
+- Add vendored template for Browser Performance Testing. !17319
+- Link Gitlab managed Prometheus alerts and issues. !17477
+- Disable insights tab navigation whilst current page loads. !17678
+- Drop all merge requests from merge trains when the project-level setting is disabled. !17774
+- Implement DAST for default branches. !17789
+- Add rack attack settings for prometheus and generic alert endpoint. !17859
+- Add Licenses list backend usage ping. !17925
+- Associate self-managed Prometheus Alerts and Issues. !18046
+- Operator can see all projects using an instance level cluster. !18173
+- Expose subscribed attribute for Epics in GraphQL. !18607
+- Expose epic participants on GraphQL. !18691
+- Adds a generic alert integration which can accept alerts from any source via a generic webhook receiver.
+
+### Other (4 changes)
+
+- Productivity analytics: Add scatterplot. !15569
+- Updated sidebar navigation icons to be horizontally centered when bar is condensed. !16820
+- Pin major version of SAST analyzers. !17110
+- Docs for protected branch code owner approval API. !17132
+
+
 ## 12.3.4
 
 ### Fixed (2 changes)

app/assets/javascripts/clusters/clusters_bundle.js

@@ -37,6 +37,7 @@ export default class Clusters {
       installJupyterPath,
       installKnativePath,
       updateKnativePath,
+      installElasticStackPath,
       installPrometheusPath,
       managePrometheusPath,
       clusterEnvironmentsPath,
@@ -86,6 +87,7 @@ export default class Clusters {
       installJupyterEndpoint: installJupyterPath,
       installKnativeEndpoint: installKnativePath,
       updateKnativeEndpoint: updateKnativePath,
+      installElasticStackEndpoint: installElasticStackPath,
       clusterEnvironmentsEndpoint: clusterEnvironmentsPath,
     });
 

app/assets/javascripts/clusters/components/applications.vue

@@ -12,6 +12,7 @@ import certManagerLogo from 'images/cluster_app_logos/cert_manager.png';
 import knativeLogo from 'images/cluster_app_logos/knative.png';
 import meltanoLogo from 'images/cluster_app_logos/meltano.png';
 import prometheusLogo from 'images/cluster_app_logos/prometheus.png';
+import elasticStackLogo from 'images/cluster_app_logos/elastic_stack.png';
 import { s__, sprintf } from '../../locale';
 import applicationRow from './application_row.vue';
 import clipboardButton from '../../vue_shared/components/clipboard_button.vue';
@@ -91,6 +92,7 @@ export default {
     knativeLogo,
     meltanoLogo,
     prometheusLogo,
+    elasticStackLogo,
   }),
   computed: {
     isProjectCluster() {
@@ -114,6 +116,9 @@ export default {
     certManagerInstalled() {
       return this.applications.cert_manager.status === APPLICATION_STATUS.INSTALLED;
     },
+    enableClusterApplicationElasticStack() {
+      return gon.features && gon.features.enableClusterApplicationElasticStack;
+    },
     ingressDescription() {
       return sprintf(
         _.escape(
@@ -168,6 +173,12 @@ export default {
     jupyterHostname() {
       return this.applications.jupyter.hostname;
     },
+    elasticStackInstalled() {
+      return this.applications.elastic_stack.status === APPLICATION_STATUS.INSTALLED;
+    },
+    elasticStackKibanaHostname() {
+      return this.applications.elastic_stack.kibana_hostname;
+    },
     knative() {
       return this.applications.knative;
     },
@@ -542,6 +553,75 @@ export default {
           />
         </div>
       </application-row>
+      <application-row
+        v-if="enableClusterApplicationElasticStack"
+        id="elastic_stack"
+        :logo-url="elasticStackLogo"
+        :title="applications.elastic_stack.title"
+        :status="applications.elastic_stack.status"
+        :status-reason="applications.elastic_stack.statusReason"
+        :request-status="applications.elastic_stack.requestStatus"
+        :request-reason="applications.elastic_stack.requestReason"
+        :version="applications.elastic_stack.version"
+        :chart-repo="applications.elastic_stack.chartRepo"
+        :update-available="applications.elastic_stack.updateAvailable"
+        :installed="applications.elastic_stack.installed"
+        :install-failed="applications.elastic_stack.installFailed"
+        :update-successful="applications.elastic_stack.updateSuccessful"
+        :update-failed="applications.elastic_stack.updateFailed"
+        :uninstallable="applications.elastic_stack.uninstallable"
+        :uninstall-successful="applications.elastic_stack.uninstallSuccessful"
+        :uninstall-failed="applications.elastic_stack.uninstallFailed"
+        :disabled="!helmInstalled"
+        :install-application-request-params="{
+          kibana_hostname: applications.elastic_stack.kibana_hostname,
+        }"
+        title-link="https://github.com/helm/charts/tree/master/stable/elastic-stack"
+      >
+        <div slot="description">
+          <p>
+            {{
+              s__(
+                `ClusterIntegration|The elastic stack collects logs from all pods in your cluster`,
+              )
+            }}
+          </p>
+
+          <template v-if="ingressExternalEndpoint">
+            <div class="form-group">
+              <label for="elastic-stack-kibana-hostname">{{
+                s__('ClusterIntegration|Kibana Hostname')
+              }}</label>
+
+              <div class="input-group">
+                <input
+                  v-model="applications.elastic_stack.kibana_hostname"
+                  :readonly="elasticStackInstalled"
+                  type="text"
+                  class="form-control js-hostname"
+                />
+                <span class="input-group-btn">
+                  <clipboard-button
+                    :text="elasticStackKibanaHostname"
+                    :title="s__('ClusterIntegration|Copy Kibana Hostname')"
+                    class="js-clipboard-btn"
+                  />
+                </span>
+              </div>
+
+              <p v-if="ingressInstalled" class="form-text text-muted">
+                {{
+                  s__(`ClusterIntegration|Replace this with your own hostname if you want.
+                If you do so, point hostname to Ingress IP Address from above.`)
+                }}
+                <a :href="ingressDnsHelpPath" target="_blank" rel="noopener noreferrer">
+                  {{ __('More information') }}
+                </a>
+              </p>
+            </div>
+          </template>
+        </div>
+      </application-row>
     </div>
   </section>
 </template>

app/assets/javascripts/clusters/components/uninstall_application_confirmation_modal.vue

@@ -2,7 +2,16 @@
 import { GlModal } from '@gitlab/ui';
 import { sprintf, s__ } from '~/locale';
 import trackUninstallButtonClickMixin from 'ee_else_ce/clusters/mixins/track_uninstall_button_click';
-import { HELM, INGRESS, CERT_MANAGER, PROMETHEUS, RUNNER, KNATIVE, JUPYTER } from '../constants';
+import {
+  HELM,
+  INGRESS,
+  CERT_MANAGER,
+  PROMETHEUS,
+  RUNNER,
+  KNATIVE,
+  JUPYTER,
+  ELASTIC_STACK,
+} from '../constants';
 
 const CUSTOM_APP_WARNING_TEXT = {
   [HELM]: sprintf(
@@ -28,6 +37,7 @@ const CUSTOM_APP_WARNING_TEXT = {
   [JUPYTER]: s__(
     'ClusterIntegration|All data not committed to GitLab will be deleted and cannot be restored.',
   ),
+  [ELASTIC_STACK]: s__('ClusterIntegration|All data will be deleted and cannot be restored.'),
 };
 
 export default {

app/assets/javascripts/clusters/constants.js

@@ -51,7 +51,17 @@ export const KNATIVE = 'knative';
 export const RUNNER = 'runner';
 export const CERT_MANAGER = 'cert_manager';
 export const PROMETHEUS = 'prometheus';
+export const ELASTIC_STACK = 'elastic_stack';
 
-export const APPLICATIONS = [HELM, INGRESS, JUPYTER, KNATIVE, RUNNER, CERT_MANAGER, PROMETHEUS];
+export const APPLICATIONS = [
+  HELM,
+  INGRESS,
+  JUPYTER,
+  KNATIVE,
+  RUNNER,
+  CERT_MANAGER,
+  PROMETHEUS,
+  ELASTIC_STACK,
+];
 
 export const INGRESS_DOMAIN_SUFFIX = '.nip.io';

app/assets/javascripts/clusters/services/clusters_service.js

@@ -11,6 +11,7 @@ export default class ClusterService {
       prometheus: this.options.installPrometheusEndpoint,
       jupyter: this.options.installJupyterEndpoint,
       knative: this.options.installKnativeEndpoint,
+      elastic_stack: this.options.installElasticStackEndpoint,
     };
     this.appUpdateEndpointMap = {
       knative: this.options.updateKnativeEndpoint,

app/assets/javascripts/clusters/stores/clusters_store.js

@@ -5,6 +5,7 @@ import {
   JUPYTER,
   KNATIVE,
   CERT_MANAGER,
+  ELASTIC_STACK,
   RUNNER,
   APPLICATION_INSTALLED_STATUSES,
   APPLICATION_STATUS,
@@ -85,6 +86,11 @@ export default class ClusterStore {
           updateSuccessful: false,
           updateFailed: false,
         },
+        elastic_stack: {
+          ...applicationInitialState,
+          title: s__('ClusterIntegration|Elastic Stack'),
+          kibana_hostname: null,
+        },
       },
       environments: [],
       fetchingEnvironments: false,
@@ -198,12 +204,11 @@ export default class ClusterStore {
         this.state.applications.cert_manager.email =
           this.state.applications.cert_manager.email || serverAppEntry.email;
       } else if (appId === JUPYTER) {
-        this.state.applications.jupyter.hostname =
-          this.state.applications.jupyter.hostname ||
-          serverAppEntry.hostname ||
-          (this.state.applications.ingress.externalIp
-            ? `jupyter.${this.state.applications.ingress.externalIp}.nip.io`
-            : '');
+        this.state.applications.jupyter.hostname = this.updateHostnameIfUnset(
+          this.state.applications.jupyter.hostname,
+          serverAppEntry.hostname,
+          'jupyter',
+        );
       } else if (appId === KNATIVE) {
         if (!this.state.applications.knative.isEditingHostName) {
           this.state.applications.knative.hostname =
@@ -216,10 +221,26 @@ export default class ClusterStore {
       } else if (appId === RUNNER) {
         this.state.applications.runner.version = version;
         this.state.applications.runner.updateAvailable = updateAvailable;
+      } else if (appId === ELASTIC_STACK) {
+        this.state.applications.elastic_stack.kibana_hostname = this.updateHostnameIfUnset(
+          this.state.applications.elastic_stack.kibana_hostname,
+          serverAppEntry.kibana_hostname,
+          'kibana',
+        );
       }
     });
   }
 
+  updateHostnameIfUnset(current, updated, fallback) {
+    return (
+      current ||
+      updated ||
+      (this.state.applications.ingress.externalIp
+        ? `${fallback}.${this.state.applications.ingress.externalIp}.nip.io`
+        : '')
+    );
+  }
+
   toggleFetchEnvironments(isFetching) {
     this.state.fetchingEnvironments = isFetching;
   }

app/assets/javascripts/pages/projects/project.js

@@ -40,11 +40,6 @@ export default class Project {
         $label.text(activeText);
       });
 
-      $('#modal-geo-info').data({
-        cloneUrlSecondary: $this.attr('href'),
-        cloneUrlPrimary: $this.data('primaryUrl') || '',
-      });
-
       if (mobileCloneField) {
         mobileCloneField.dataset.clipboardText = url;
       } else {

app/controllers/clusters/applications_controller.rb

@@ -47,7 +47,7 @@ class Clusters::ApplicationsController < Clusters::BaseController
   end
 
   def cluster_application_params
-    params.permit(:application, :hostname, :email)
+    params.permit(:application, :hostname, :kibana_hostname, :email)
   end
 
   def cluster_application_destroy_params

app/controllers/clusters/clusters_controller.rb

@@ -15,6 +15,9 @@ class Clusters::ClustersController < Clusters::BaseController
   before_action only: [:new, :create_gcp] do
     push_frontend_feature_flag(:create_eks_clusters)
   end
+  before_action only: [:show] do
+    push_frontend_feature_flag(:enable_cluster_application_elastic_stack)
+  end
 
   helper_method :token_in_session
 

app/models/clusters/applications/elastic_stack.rb

+# frozen_string_literal: true
+
+module Clusters
+  module Applications
+    class ElasticStack < ApplicationRecord
+      VERSION = '1.8.0'
+
+      self.table_name = 'clusters_applications_elastic_stacks'
+
+      include ::Clusters::Concerns::ApplicationCore
+      include ::Clusters::Concerns::ApplicationStatus
+      include ::Clusters::Concerns::ApplicationVersion
+      include ::Clusters::Concerns::ApplicationData
+
+      default_value_for :version, VERSION
+
+      def set_initial_status
+        return unless not_installable?
+        return unless cluster&.application_ingress_available?
+
+        ingress = cluster.application_ingress
+        self.status = status_states[:installable] if ingress.external_ip_or_hostname?
+      end
+
+      def chart
+        'stable/elastic-stack'
+      end
+
+      def values
+        content_values.to_yaml
+      end
+
+      def install_command
+        Gitlab::Kubernetes::Helm::InstallCommand.new(
+          name: 'elastic-stack',
+          version: VERSION,
+          rbac: cluster.platform_kubernetes_rbac?,
+          chart: chart,
+          files: files
+        )
+      end
+
+      def uninstall_command
+        Gitlab::Kubernetes::Helm::DeleteCommand.new(
+          name: 'elastic-stack',
+          rbac: cluster.platform_kubernetes_rbac?,
+          files: files,
+          postdelete: post_delete_script
+        )
+      end
+
+      private
+
+      def specification
+        {
+          "kibana" => {
+            "ingress" => {
+              "hosts" => [kibana_hostname],
+              "tls" => [{
+                "hosts" => [kibana_hostname],
+                "secretName" => "kibana-cert"
+              }]
+            }
+          }
+        }
+      end
+
+      def content_values
+        YAML.load_file(chart_values_file).deep_merge!(specification)
+      end
+
+      def post_delete_script
+        [
+          Gitlab::Kubernetes::KubectlCmd.delete("pvc", "--selector", "release=elastic-stack")
+        ].compact
+      end
+    end
+  end
+end

app/models/clusters/applications/ingress.rb

@@ -40,7 +40,7 @@ module Clusters
       end
 
       def allowed_to_uninstall?
-        external_ip_or_hostname? && application_jupyter_nil_or_installable?
+        external_ip_or_hostname? && application_jupyter_nil_or_installable? && application_elastic_stack_nil_or_installable?
       end
 
       def install_command
@@ -91,6 +91,10 @@ module Clusters
       def application_jupyter_nil_or_installable?
         cluster.application_jupyter.nil? || cluster.application_jupyter&.installable?
       end
+
+      def application_elastic_stack_nil_or_installable?
+        cluster.application_elastic_stack.nil? || cluster.application_elastic_stack&.installable?
+      end
     end
   end
 end

app/models/clusters/applications/runner.rb

@@ -3,7 +3,7 @@
 module Clusters
   module Applications
     class Runner < ApplicationRecord
-      VERSION = '0.9.0'
+      VERSION = '0.10.0'
 
       self.table_name = 'clusters_applications_runners'
 

app/models/clusters/cluster.rb

@@ -18,7 +18,8 @@ module Clusters
       Applications::Prometheus.application_name => Applications::Prometheus,
       Applications::Runner.application_name => Applications::Runner,
       Applications::Jupyter.application_name => Applications::Jupyter,
-      Applications::Knative.application_name => Applications::Knative
+      Applications::Knative.application_name => Applications::Knative,
+      Applications::ElasticStack.application_name => Applications::ElasticStack
     }.merge(PROJECT_ONLY_APPLICATIONS).freeze
     DEFAULT_ENVIRONMENT = '*'
     KUBE_INGRESS_BASE_DOMAIN = 'KUBE_INGRESS_BASE_DOMAIN'
@@ -51,6 +52,7 @@ module Clusters
     has_one_cluster_application :runner
     has_one_cluster_application :jupyter
     has_one_cluster_application :knative
+    has_one_cluster_application :elastic_stack
 
     has_many :kubernetes_namespaces
 

app/models/issue.rb

@@ -206,7 +206,16 @@ class Issue < ApplicationRecord
     if self.confidential?
       "#{iid}-confidential-issue"
     else
-      "#{iid}-#{title.parameterize}"
+      branch_name = "#{iid}-#{title.parameterize}"
+
+      if branch_name.length > 100
+        truncated_string = branch_name[0, 100]
+        # Delete everything dangling after the last hyphen so as not to risk
+        # existence of unintended words in the branch name due to mid-word split.
+        branch_name = truncated_string[0, truncated_string.rindex("-")]
+      end
+
+      branch_name
     end
   end
 

app/serializers/cluster_application_entity.rb

@@ -8,6 +8,7 @@ class ClusterApplicationEntity < Grape::Entity
   expose :external_ip, if: -> (e, _) { e.respond_to?(:external_ip) }
   expose :external_hostname, if: -> (e, _) { e.respond_to?(:external_hostname) }
   expose :hostname, if: -> (e, _) { e.respond_to?(:hostname) }
+  expose :kibana_hostname, if: -> (e, _) { e.respond_to?(:kibana_hostname) }
   expose :email, if: -> (e, _) { e.respond_to?(:email) }
   expose :update_available?, as: :update_available, if: -> (e, _) { e.respond_to?(:update_available?) }
   expose :can_uninstall?, as: :can_uninstall

app/services/clusters/applications/base_service.rb

@@ -19,6 +19,10 @@ module Clusters
             application.hostname = params[:hostname]
           end
 
+          if application.has_attribute?(:kibana_hostname)
+            application.kibana_hostname = params[:kibana_hostname]
+          end
+
           if application.has_attribute?(:email)
             application.email = params[:email]
           end
@@ -60,7 +64,7 @@ module Clusters
       end
 
       def invalid_application?
-        unknown_application? || (!cluster.project_type? && project_only_application?)
+        unknown_application? || (!cluster.project_type? && project_only_application?) || (application_name == Applications::ElasticStack.application_name && !Feature.enabled?(:enable_cluster_application_elastic_stack))
       end
 
       def unknown_application?

app/views/clusters/clusters/show.html.haml

@@ -17,6 +17,7 @@
   install_jupyter_path: clusterable.install_applications_cluster_path(@cluster, :jupyter),
   install_knative_path: clusterable.install_applications_cluster_path(@cluster, :knative),
   update_knative_path: clusterable.update_applications_cluster_path(@cluster, :knative),
+  install_elastic_stack_path: clusterable.install_applications_cluster_path(@cluster, :elastic_stack),
   cluster_environments_path: cluster_environments_path,
   toggle_status: @cluster.enabled? ? 'true': 'false',
   has_rbac: has_rbac_enabled?(@cluster) ? 'true': 'false',

app/views/projects/buttons/_clone.html.haml

@@ -25,5 +25,3 @@
             = clipboard_button(target: '#http_project_clone', title: _("Copy URL"), class: "input-group-text btn-default btn-clipboard")
             = render_if_exists 'projects/buttons/geo'
     = render_if_exists 'projects/buttons/kerberos_clone_field'
-
-= render_if_exists 'shared/geo_info_modal', project: project

app/views/shared/_clone_panel.html.haml

@@ -22,6 +22,3 @@
   .input-group-append
     = clipboard_button(target: '#project_clone', title: _("Copy URL"), class: "input-group-text btn-default btn-clipboard")
 
-    = render_if_exists 'shared/geo_modal_button'
-
-= render_if_exists 'shared/geo_modal', project: project

changelogs/unreleased/10893-hide-redundant-labels-in-issue-boards.yml

----
-title: Hide redundant labels in issue boards
-merge_request: 17937
-author:
-type: fixed

changelogs/unreleased/10904-insights-include-projects.yml

----
-title: Add projects.only option to Insights
-merge_request: 15930
-author:
-type: added

changelogs/unreleased/10946-fix-the-following-style-lint-errors-and-warnings-for-ee-app-assets-.yml

----
-title: Fix stylelint errors in epics.scss
-merge_request: 17243
-author:
-type: fixed

changelogs/unreleased/11137-propagate-all-env-vars-to-sast-containers.yml

+---
+title: Propagate custom environment variables to SAST analyzers
+merge_request: 18193
+author:
+type: changed

changelogs/unreleased/11412-fix-security-dashboard-history-bug.yml

----
-title: Fix routing bugs in security dashboards
-merge_request: 16738
-author:
-type: fixed

changelogs/unreleased/12564-email-regex.yml

----
-title: Adjust placeholder to solve misleading regex
-merge_request: 18235
-author:
-type: fixed

changelogs/unreleased/12739-incomplete-group-audit-logs-in-group-view.yml

----
-title: Specify sort order explicitly for Group and Project audit events
-merge_request: 17739
-author:
-type: fixed

changelogs/unreleased/12764-refactor-checksum-code.yml

----
-title: Refactor checksum code in uploads
-merge_request: 18065
-author: briankabiro
-type: other

changelogs/unreleased/12819-remove-feature-flag.yml

----
-title: Fix pod logs failure when pod contains more than 1 container
-merge_request: 18574
-author:
-type: fixed

changelogs/unreleased/13321-show-issue-weight-when-zero.yml

----
-title: Show issue weight when weight is 0
-merge_request: 17329
-author: briankabiro
-type: fixed

changelogs/unreleased/13360-fix-epics-api.yml

----
-title: Fix creating epics with dates from api
-merge_request: 18393
-author:
-type: fixed

changelogs/unreleased/13422-empty-security-dashboard-on-public-project-with-found-vulnerabiliti.yml

----
-title: Fix empty security dashboard for public projects
-merge_request: 17915
-author:
-type: fixed

changelogs/unreleased/13426-add-user-and-timestamps-to-design-management-version.yml

----
-title: Add user_id and created_at columns to design_management_versions table
-merge_request: 17316
-author:
-type: added

changelogs/unreleased/13426-disable-design-mutation-abilities-when-issue-moved-or-locked.yml

----
-title: Make designs read-only if the issue has been moved, or if its discussion has been locked
-merge_request: 18551
-author:
-type: changed

changelogs/unreleased/13536-add-sort-to-group-packages.yml

----
-title: Adds sorting of packages at the group level
-merge_request: 18062
-author:
-type: added

changelogs/unreleased/14064-commit-status-on-any-pipelines.yml

----
-title: Make commit status created for any pipelines
-merge_request: 17524
-author: Aufar Gilbran
-type: changed

changelogs/unreleased/14794-rake-gitlab-geo-check-does-not-give-the-actual-state.yml

----
-title: 'Geo: Invalidate cache after refreshing foreign tables'
-merge_request: 17885
-author:
-type: fixed

changelogs/unreleased/14945-fix-jira-api-url-parsing.yml

----
-title: 'JIRA Integration API URL works having a trailing slash'
-merge_request: 18526
-author:
-type: fixed

changelogs/unreleased/15018-build-results-fe.yml

----
-title: Creates Vue and Vuex app to render exposed artifacts
-merge_request: 17934
-author:
-type: added

changelogs/unreleased/16188-warn-before-applying-issue-templates.yml

----
-title: Warn before applying issue templates
-merge_request: 16865
-author:
-type: changed

changelogs/unreleased/16388-abort-mwps-on-impossible-ff-merge.yml

----
-title: Abort Merge When Pipeline Succeeds when Fast Forward merge is impossible
-merge_request: 17886
-author:
-type: fixed

changelogs/unreleased/16482-split-sign-in-and-sign-up.yml

----
-title: Experimental separate sign up flow
-merge_request: 16482
-author:
-type: other

changelogs/unreleased/16654-audio-in-markdown.yml

----
-title: Feature enabling embedded audio elements in markdown.
-merge_request: 17860
-author: Jesse Hall @jessehall3
-type: added

changelogs/unreleased/16790-render-xml-artifacts.yml

----
-title: Render xml artifact files in GitLab
-merge_request: 16790
-author:
-type: added

changelogs/unreleased/17596-show-all-matching-labels-when-using-label-quick-action.yml

----
-title: Show 20 labels in dropdown instead of 5
-merge_request: 17596
-author:
-type: fixed

changelogs/unreleased/17970-preserve-leading-whitespace.yml

----
-title: Prevent the slash command parser from removing leading whitespace from content that is unrelated to slash commands
-merge_request: 18589
-author: Jared Deckard
-type: fixed

changelogs/unreleased/18217-request-access-to-project-should-be-on-by-default.yml

----
-title: Enable Request Access functionality by default for new projects and groups
-merge_request: 17662
-author:
-type: changed

changelogs/unreleased/19152-improve-jira-username-validation.yml

----
-title: 'JIRA Service: Improve username/email validation'
-merge_request: 18397
-author:
-type: fixed

changelogs/unreleased/19822-audio-preview-in-repo.yml

----
-title: Users can preview audio files in a repository.
-merge_request: 18354
-author: Jesse Hall @jessehall3
-type: added

changelogs/unreleased/20-add-signup-step-2.yml

----
-title: Add step 2 of the experimental signup flow
-merge_request: 16583
-author:
-type: changed

changelogs/unreleased/20718-extend-issue-attributes-returned-by-graphql.yml

----
-title: Add more attributes to issues GraphQL endpoint
-merge_request: 17802
-author:
-type: changed

changelogs/unreleased/20829-extend-mr-attributes-returned-by-graphql.yml

----
-title: Extend graphql query endpoint for merge requests to return more attributes to support sidebar implementation
-merge_request: 17813
-author:
-type: other

changelogs/unreleased/21405-fix-registry-tag-delete.yml

----
-title: 'Adds the ability to delete single tags from the docker registry. Fix the issue that caused all related tags and image to be deleted at the same time.'
-merge_request: 16886
-author:
-type: fixed

changelogs/unreleased/21800-parse-mentioned-users-group-projects-from-markdown.yml

----
-title: Adds separate parsers for mentions of users, groups, projects in markdown content
-merge_request: 18318
-author:
-type: added

changelogs/unreleased/22388-limit-the-number-of-comments-on-a-noteable.yml

----
-title: Limit the number of comments on an issue, MR, or commit
-merge_request: 18111
-author:
-type: added

changelogs/unreleased/22879-close-jira-issues-with-issues-disabled.yml

----
-title: 'Merge Request: Close JIRA issues when issues are disabled'
-merge_request: 17743
-author:
-type: fixed

changelogs/unreleased/22904-fix-overflow.yml

----
-title: Fixes job overflow in stages dropdown
-merge_request:
-author:
-type: fixed

changelogs/unreleased/22959-remove-map-get-grid-breakpoints-xs-for-max-width.yml

----
-title: Remove map-get($grid-breakpoints, xs) for max-width
-merge_request: 17420
-author: Takuya Noguchi
-type: other

changelogs/unreleased/23079-write-permission-global-deploy-keys.yml

----
-title: Allow maintainers to toggle write permission for public deploy keys
-merge_request: 17210
-author:
-type: fixed

changelogs/unreleased/23315-group-level-container-registry-browser.yml

----
-title: Group level Container Registry browser
-merge_request: 17615
-author:
-type: added

changelogs/unreleased/23400-fix-duplicate-replies.yml

----
-title: Fix new discussion replies sometimes showing up twice
-merge_request: 17255
-author:
-type: fixed

changelogs/unreleased/2358-elasticsearch-project-snippets.yml

----
-title: Support ES searches for project snippets
-merge_request: 18459
-author:
-type: fixed

changelogs/unreleased/24818-fix-jira-favicon-link.yml

----
-title: Fix Jira integration favicon image with relative URL
-merge_request: 16802
-author:
-type: fixed

changelogs/unreleased/26001-notification-release-be.yml

----
-title: Add 'New release' to the project custom notifications
-merge_request: 17877
-author:
-type: added

changelogs/unreleased/26019-evidence-collection.yml

----
-title: Creation of Evidence collection of new releases.
-merge_request: 17217
-author:
-type: added

changelogs/unreleased/26210-toc-links.yml

----
-title: Fix issue with wiki TOC links being treated as external links
-merge_request:
-author: Oren Kanner
-type: fixed

changelogs/unreleased/27034-new-branch-length.yml

+---
+title: Truncate recommended branch name to a sane length
+merge_request: 18821
+author:
+type: changed

changelogs/unreleased/27502-enable-cloud-run-on-gke.yml

----
-title: Enable Cloud Run on GKE cluster creation
-merge_request: 16566
-author:
-type: added

changelogs/unreleased/27715-fix-unrenderable-notes.yml

----
-title: Fix showing diff when it has legacy diff notes
-merge_request: 18510
-author:
-type: fixed

changelogs/unreleased/27835-move-and-resize-panels-in-dashboard-save-to-branch.yml

----
-title: Add property to enable metrics dashboards to be rearranged
-merge_request: 16605
-author:
-type: changed

changelogs/unreleased/28211-check-if-mapping-is-empty-before-caching.yml

----
-title: Check if mapping is empty before caching in File Collections
-merge_request: 18290
-author: briankabiro
-type: performance

changelogs/unreleased/28243-check-for-docker-images-before-renaming-group.yml

----
-title: Prevents a group path change when a project inside the group has container
-  registry images
-merge_request: 17583
-author:
-type: fixed

changelogs/unreleased/28311-extremely-low-contrast-in-dropdown-for-group-file-templates.yml

----
-title: Increase color contrast of select option path
-merge_request:
-author:
-type: other

changelogs/unreleased/28492-upgrade-ingress-to-latest.yml

----
-title: Unpin ingress image version, upgrade chart to 1.22.1
-merge_request: 18047
-author:
-type: added

changelogs/unreleased/28781-migrate-pages-metadata-in-background.yml

----
-title: Schedule background migration to populate pages metadata
-merge_request: 17993
-author:
-type: added

changelogs/unreleased/28781-migrate-pages-metadata-on-demand.yml

----
-title: Add index on ci_builds for successful Pages deploys
-merge_request: 17204
-author:
-type: added

changelogs/unreleased/28781-pages-namespaces-virtual-domain.yml

----
-title: Add project_pages_metadata DB table
-merge_request: 17197
-author:
-type: added

changelogs/unreleased/29020-merge-requests-issues-links.yml

----
-title: Provide Merge requests and Issue links through the Release API
-merge_request: 18311
-author:
-type: added

changelogs/unreleased/29020-update-release-blocks-for-multiple-milestone-support.yml

----
-title: Add support for the association of multiple milestones to the Releases page
-merge_request: 17091
-author:
-type: changed

changelogs/unreleased/29215-500-error-when-deleting-group-web-hook-activerecord-statementinvali.yml

----
-title: Use cascading deletes for deleting logs upon deleting a webhook
-merge_request: 18642
-author:
-type: performance

changelogs/unreleased/29284-video-preview-not-working.yml

----
-title: Fix inline rendering of videos for uploads with uppercase file extensions
-merge_request: 17924
-author:
-type: fixed

changelogs/unreleased/29477-notification-settings-display-all-groups.yml

----
-title: Show all groups user belongs to in Notification settings
-merge_request: 17303
-author:
-type: fixed

changelogs/unreleased/29513-continue-improvements-for-time-window-filtering-on-metrics-dashboar.yml

----
-title: Improve time window filtering on metrics dashboard
-merge_request: 17554
-author:
-type: added

changelogs/unreleased/29835-webide-fork.yml

----
-title: Web IDE button should fork and open forked project when selected from read-only
-  project
-merge_request: 17672
-author:
-type: added

changelogs/unreleased/29881-fix-ide-delete-and-readd.yml

----
-title: Fix Web IDE tree not updating modified status
-merge_request: 18647
-author:
-type: fixed

changelogs/unreleased/30112-private-internal-sub-group-email-notifications-not-sent-when-mentio.yml

----
-title: Fix notifications for private group mentions in Notes, Issues, and Merge Requests
-merge_request: 18183
-author:
-type: fixed

changelogs/unreleased/30186-mirror-pull-api-no-unpause.yml

----
-title: Do not start mirroring via API when paused
-merge_request: 17930
-author:
-type: changed

changelogs/unreleased/30217-refactor-email-notification-code.yml

----
-title: Refactor email notification code
-merge_request: 17741
-author: briankabiro
-type: other

changelogs/unreleased/30392-variables.yml

----
-title: Fixes variables overflowing in sm screens
-merge_request:
-author:
-type: fixed

changelogs/unreleased/30497-race-condition-in-discussions-json-request-could-lead-to-notes-show.yml

----
-title: Fix notes race condition when linking to specific note
-merge_request: 17777
-author:
-type: fixed

changelogs/unreleased/30525-iframe_jaeger.yml

----
-title: Embed Jaeger in Gitlab UI
-merge_request:
-author:
-type: changed

changelogs/unreleased/30619-make-recent-searches-more-visible.yml

----
-title: Use text instead of icon for recent searches dropdown
-merge_request:
-author:
-type: changed

changelogs/unreleased/30807-fix-usability-problem.yml

----
-title: Fix usability problems with the file template picker
-merge_request: 17522
-author:
-type: changed

changelogs/unreleased/30839-asciidoc-table-styles.yml

----
-title: Enable grid, frame and stripes styling on AsciiDoc tables
-merge_request: 18165
-author: Guillaume Grossetie
-type: fixed

changelogs/unreleased/30877-optimize-explore-snippets.yml

----
-title: Show only personal snippets on explore page
-merge_request: 18092
-author:
-type: performance

changelogs/unreleased/30881-webide-mr-confirmation.yml

----
-title: 'Fix Issue: WebIDE asks for confirmation to leave the page when committing
-  and creating a new MR'
-merge_request: 17671
-author:
-type: fixed

changelogs/unreleased/31007-limit-activity-events.yml

----
-title: Aggregate push events when there are too many
-merge_request: 18239
-author:
-type: changed