Add global isSafeURL utility

See merge request gitlab-org/gitlab-ce!28943

Move NoteApp tests to Jest

Closes #62399

See merge request gitlab-org/gitlab-ce!28903

Merge branch '62092-missing-padding-next-to-time-windows-dropdown-on-metrics-dashboard' into 'master'

Added padding to time window dropdown in monitor dashboard

Closes #62092

See merge request gitlab-org/gitlab-ce!28897

Update GitLab Pages to v1.6.0

See merge request gitlab-org/gitlab-ce!29048

Prevent password sign in restriction bypass

See merge request gitlab/gitlabhq!2702

Resolve: Milestones leaked via search API

Closes #2822

See merge request gitlab/gitlabhq!2997

Disallow invalid MR branch name

See merge request gitlab/gitlabhq!3052

Handling password on import by url page

See merge request gitlab/gitlabhq!3061

Protect Gitlab::HTTP against DNS rebinding attack

See merge request gitlab/gitlabhq!3071

Fix url redaction for issue links

See merge request gitlab/gitlabhq!3091

Hide issue title on unsubscribe for anonymous users

See merge request gitlab/gitlabhq!3097

Fix confidential issue label disclosure on milestone view

See merge request gitlab/gitlabhq!3098

- Added isSafeURL utility based on prior work in gitlab-ee
- Also added isAbsoluteOrRootRelative() and getBaseURL() utils,
  needed by isSafeURL
- Removed URL() fallback because URL() is now polyfilled
- Updated specs

Add Namespace and ProjectStatistics to GraphQL API

See merge request gitlab-org/gitlab-ce!28277

added `dropdown-extended-height` class to labels dropdown-menu

See merge request gitlab-org/gitlab-ce!28659

Refactor and abstract Auto Merge Processes

See merge request gitlab-org/gitlab-ce!28595

Add dependency_list report fixture

See merge request gitlab-org/gitlab-ce!29025

Fix port validations in .gitlab-webide.yml

See merge request gitlab-org/gitlab-ce!29016

[CE] Run review-qa-all in parallel

See merge request gitlab-org/gitlab-ce!28283

Add knapsack qa report and use it to run tests in parallel

Use the RSpec runner with knapsack

The way the Knapsack runner uses exec to start rspec seems
incompatible with the way we expect it to work. Plus, it requires
specifying KNAPSACK_TEST_DIR.

Instead, we use knapsacks AllocatorBuilder to select the spec
files to run, and then start rspec as normal, via
RSpec::Core::Runner.run

This also means we can incorporate tags.

Let the job run automatically

Include KNAPSACK_TEST_FILE_PATTERN in vars

Check all defined knapsack env vars before requiring knapsack

Fix migration failure when groups are missing route

Closes #58714

See merge request gitlab-org/gitlab-ce!29022

We can query namespaces, and nested projects.

Projects now exposes statistics

Fix search dropdown not closing on blur if empty

Closes #53741

See merge request gitlab-org/gitlab-ce!28730

Fix style-lint errors and warnings for `app/assets/stylesheets/framework/forms.scss`

Closes #59854

See merge request gitlab-org/gitlab-ce!28129

Backport to add fields to IssueType

See merge request gitlab-org/gitlab-ce!28998

Remove delta island feature flag

Closes gitaly#1575

See merge request gitlab-org/gitlab-ce!28871

Delta islands were implemented last released in:
https://gitlab.com/gitlab-org/gitaly/merge_requests/1110. It's been
enabled on production and works as expected.

CE: Resolve EE differences in search/_results.html.haml

See merge request gitlab-org/gitlab-ce!28952

Remove unused avatar sizes

Closes #62429

See merge request gitlab-org/gitlab-ce!28947

Remove fixed height from MR diff headers

Closes #62596

See merge request gitlab-org/gitlab-ce!28946

Style gitlab-ui checkboxes

See merge request gitlab-org/gitlab-ce!28622

A few minor frontend changes to complete the refactoring
from MWPS to the more generic autoMergeStrategy.

We have one auto merge strategy today - Merge When Pipeline
Succeeds.

In order to add more strategies for Merge Train feature,
we abstract the architecture to be more extensible.

Removed arguments

Fix spec

Docs: Fix typos

See merge request gitlab-org/gitlab-ce!29020