Enables authorizations to be defined on GraphQL Types.

    module Types
      class ProjectType < BaseObject
        authorize :read_project
      end
    end

If a field has authorizations defined on it, and the return type of the
field also has authorizations defined on it. then all of the combined
permissions in the authorizations will be checked and must pass.

Connection fields are checked by "digging" to find the type class of the
"node" field in the expected location of edges->node.

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/54417

Remove groups destroy race condition spec

See merge request gitlab-org/gitlab-ce!26851

Cache FindCommit results in pipelines view

See merge request gitlab-org/gitlab-ce!26776

Docs: image realignment

See merge request gitlab-org/gitlab-ce!26799

Docs: move variables reference to its own doc

See merge request gitlab-org/gitlab-ce!26763

Pull master

Stop calling UnlinkRepositoryFromObjectPool RPC

Closes #59777

See merge request gitlab-org/gitlab-ce!26821

Fixes https://gitlab.com/gitlab-org/gitlab-ce/issues/59777.

In earlier iterations of our implementation of Git object deduplication
we thought we would be making extensive use of Git remotes in pool
repositories in the future, and that we should manage these remotes
carefully from the start. We now expect we only care about one remote,
namely the source project. The other remotes are there only for forensic
purposes.

Before this MR we tried to also remove pool remotes when member projects
got deleted, with the UnlinkRepositoryFromObjectPool RPC. This is
fragile when there are race conditions (see
https://gitlab.com/gitlab-org/gitaly/issues/1568#note_153955926). We
have spent some time making this RPC less fragile in
https://gitlab.com/gitlab-org/gitaly/merge_requests/1151 but looking at
this problem again, I think we should just stop calling it.

Jarv/dev to gitlab 2019 04 02

Closes #2810

See merge request gitlab-org/gitlab-ce!26846

Document `click_` vs. `go_to_` standard for e2e tests

Closes #59645

See merge request gitlab-org/gitlab-ce!26825

Backport: Expose merge request pipeline parameters for MR widget

See merge request gitlab-org/gitlab-ce!26826

Fixed positioning of the diff tree list on mobile

Closes #59739

See merge request gitlab-org/gitlab-ce!26820

For each pipeline, the controller will call `Pipeline#latest?` to
determine if the pipeline's ref is the latest for that branch.
Since it's likely that the same branches are being used in each
pipeline, we can reduce Gitaly overhead by caching the results
of the FindCommit call.

Backport splitting approval changes from CE

See merge request gitlab-org/gitlab-ce!26323

Author and committers approvals are split in EE
This commit provides backports for those changes

This reverts commit 886f00bc.

Adds documentation about the utility classes

See merge request gitlab-org/gitlab-ce!26824

Fixed expand full file button showing on images

Closes #59695

See merge request gitlab-org/gitlab-ce!26830

Monitor GraphQL with Prometheus

See merge request gitlab-org/gitlab-ce!26569

Extends graphql's platform tracing class to observe duration
of graphql methods.

In graphql 1.8.11 is added prometheus class but it's not very useful
for us because it uses prometheus_exporter to export results.

CE backport of design-management-upload-client

See merge request gitlab-org/gitlab-ce!26766

This was removed in the below MR in EE only, as it was causing failures
related to Geo.

https://gitlab.com/gitlab-org/gitlab-ee/merge_requests/3999

Avoid excessive recursive calls with Rugged TreeEntries

Closes #59759

See merge request gitlab-org/gitlab-ce!26813

Merge branch 'ce-10828-follow-up-from-ee-port-externalize-strings-in-projects-controllers' into 'master'

(CE Port) "Follow-up from "(EE port) Externalize strings in projects controllers""

See merge request gitlab-org/gitlab-ce!26832

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/59739

This is for merge request pipelines

Migrate issuable states to integer patch 1 of 2

Closes #51789

See merge request gitlab-org/gitlab-ce!25107

Don't sanitize project names on project members page

Closes #58751

See merge request gitlab-org/gitlab-ce!25946

Rake task for removing exif from uploads

Closes #2810

See merge request gitlab/gitlabhq!2922

Adds a rake task which can be used for removing EXIF
data from existing uploads.

Fix XSS in resolve conflicts form

See merge request gitlab/gitlabhq!2977

Fix related branches visible in issues for guests

See merge request gitlab/gitlabhq!2996

Return cached languages if they've been detected before

See merge request gitlab/gitlabhq!2998

Fix PDF.js vulnerability

See merge request gitlab/gitlabhq!2999

Use UntrustedRegexp for CI refs matching

See merge request gitlab/gitlabhq!3005

[master] Check label_ids parent when updating issue board

See merge request gitlab/gitlabhq!3027