don't underline clicked links in Notes header

Closes #28559

See merge request !9753

#26790 whitelist style attribute in event_note

Closes #26790

See merge request !9155

fix Jobs header height - only set fixed size for rows

Closes #28835

See merge request !9752

Gitlab::Auth and API::APIGuard already check for at least one valid
scope on personal access tokens, so if the scopes are empty the token
will always fail validation.

Gitlab::Auth.find_with_user_password is currently used in these places:

- resource_owner_from_credentials in config/initializers/doorkeeper.rb,
  which is used for the OAuth Resource Owner Password Credentials flow

- the /session API call in lib/api/session.rb, which is used to reveal
  the user's current authentication_token

In both cases users should only be authenticated if they're in the
active state.

Feature/runner jobs v4 api

Closes #28513

See merge request !9273

API routes referencing a specific issue should use the issue `iid`

Closes #28251

See merge request !9530

Sort builds in stage dropdown

Closes #28354

See merge request !9760

Add new merge request widget state for blocked pipeline

See merge request !9762

Improve pipeline triggers UI

See merge request !9277

Moved call of SystemHooksService from UpdateMergeRequestsWorker to GitPushServic…

See merge request !9685

Order: failed pending running manual canceled success skipped created

Set default cache key to 'default' for jobs

Closes #22419

See merge request !9666

Bring back api/builds.md and direct to api/jobs.md

See merge request !9761

[ci skip]

Make a default namespace of Kubernetes service to contain project ID

Closes #28516

See merge request !9741

Backport protected branches Ruby change from EE

See merge request !9726

Nested groups path restrictions pt. 1

See merge request !9738

Add git version to gitlab:env:info

Closes #25376

See merge request !9128

Performance improvement on Projects::BuildsController#show.html

Closes #28019

See merge request !9149

https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/9666#note_24877665

* upstream/master: (289 commits)
  re-add Assign to Me link on new MR/Issue forms
  thinner bottom header border
  make header match old 16px padding of body contents
  Update font-awesome-rails to 4.7.0.1
  Relax font-awesome-rails dependency to ~> 4.7
  Restore keyboard shortcuts for "Activity" and "Charts"
  fix border radius bottom for header
  match padding for mr-widget sections
  Update changelog
  Fix project-last-commit alignment
  Docs: update GL Pages IP on GL.com
  Fix up @DouweM review
  Remove readme-only project view preference
  Add `uploads` to known models for Import/Export spec
  Add `has_many` associations for models that can have Upload records
  Handle relative and absolute Upload paths in the Uploaders
  Change the default CarrierWave root path for tests
  Fix Projects::UploadService spec
  Add a Project::UploadsController spec to ensure an Upload is created
  Add `RecordsUploads` module to record Upload records via callbacks
  ...

- Typo in docs
- Newline between test/expectation in `api/issues_spec`
- Use `find_by` instead of `reference_by` in the structure defining awardables

- Use issue/merge_request IID instead of ID
- Duplicate the original `TimeTrackingEndpoints` concern (+ specs) for V3, since
  this is a breaking change.

- Instead of `issuable_id`