With this we allow authentication using a session or using personal
access token.

Authentication using a session, and CSRF token makes it easy to play
with GraphQL from the Graphiql endpoint we expose.

But we cannot enforce CSRF validity, otherwise authentication for
regular API clients would fail when they use personal access tokens to
authenticate.

These adjustments make sure our GraphQL helpers support rendering
queries for empty fields like this:

      {
        echo(text: "Hello world")
      }

Instead of like this:

     {
       echo(text: "Hello world") {
       }
     }

The latter would be an invalid query, causing parsing errors.

Making review-performance run on master in scheduled runs

Closes #57881

See merge request gitlab-org/gitlab-ce!25757

PUT MergeRequest API endpoint - accept labels as an array

See merge request gitlab-org/gitlab-ce!19914

Expose merge request entity for pipelines

See merge request gitlab-org/gitlab-ce!25679

Resolve "Introduce zoom and scroll functionality on metrics charts"

Closes #57085

See merge request gitlab-org/gitlab-ce!25388

Adds the ability to change data zoom for metrics graphs

Allow protected branch creation via web and API

Closes #53361

See merge request gitlab-org/gitlab-ce!24969

This commit includes changes to add `UserAccess#can_create_branch?`
which will check whether the user is allowed to create a branch even
if it matches a protected branch.

This is used in `Gitlab::Checks::BranchCheck` when the branch name
matches a protected branch.

A `push_to_create_protected_branch` ability in `ProjectPolicy` has been
added to allow Developers and above to create protected branches.

Use optional encryption strategy for Runners Tokens

Closes #54859

See merge request gitlab-org/gitlab-ce!25532

This makes code to support encrypted runner tokens.
This code also finished previously started encryption
process.

Fix object storage link in doc

See merge request gitlab-org/gitlab-ce!25791

CE FE Add PersistentUserCallout factory method

See merge request gitlab-org/gitlab-ce!25481

Resolve "Add Saturday to Localization first day of the week"

Closes #58023

See merge request gitlab-org/gitlab-ce!25509

Signed-off-by: Takuya Noguchi <takninnovationresearch@gmail.com>

* Support label parameter as comma separated and array of strings
for merge requests and issues api endpoints

Update dependency @gitlab/ui to ^2.2.0

See merge request gitlab-org/gitlab-ce!25795

API: delete job_artifacts of a single job

See merge request gitlab-org/gitlab-ce!25522

Fix spelling and other minor improvements

See merge request gitlab-org/gitlab-ce!25784

Accept force option on commit via API

Closes #45035

See merge request gitlab-org/gitlab-ce!25286

When `force` is set to `true` and `start_branch` is set, the
branch will be ovewritten with the new commit based on the
`HEAD` of the `start_branch`.

This commit includes changes to update the `gitaly-proto` gem.

Use factory method to DRY safe instantiation.
Add tests for PersistentUserCallout.

Add preload

Fix

ok

Write tests

test only postgresql

ok

add more test
;

Improve wording

Add changelog

Fix

Backport Kerberos clone URL to CE

See merge request gitlab-org/gitlab-ce!25750

Remove timezone conversion of issue due dates for issue board cards

Closes #56251

See merge request gitlab-org/gitlab-ce!25512

Fixed incorrect include key

See merge request gitlab-org/gitlab-ce!25766

Update gitlab-ui to 2.1.1

See merge request gitlab-org/gitlab-ce!25785

Updated ContextualSidebar to render collapsed on smaller screens

Closes #38010

See merge request gitlab-org/gitlab-ce!24555

Fix: Repository mirrors table border and padding

Closes #52792

See merge request gitlab-org/gitlab-ce!25606

Fix QA Auto DevOps push after adding cluster

Closes #58503

See merge request gitlab-org/gitlab-ce!25782

Add QA test to download merge request patch/diffs

See merge request gitlab-org/gitlab-ce!25451

Fix bridge jobs only/except variables policy

Closes #58199

See merge request gitlab-org/gitlab-ce!25710