Add latest changes from gitlab-org/gitlab@master

CHANGELOG-EE.md

 Please view this file on the master branch, on stable branches it's out of date.
 
+## 12.5.0
+
+### Security (5 changes)
+
+- Fixes a Open Redirect issue in `InternalRedirect`.
+- Filter out packages the user does'nt have permission to see at group level.
+- Do not show private cross references in epic notes.
+- Redact search results based on Ability.allowed?.
+- Do not index system notes for issue update.
+
+### Removed (2 changes, 1 of them is from the community)
+
+- Remove the Geo Clone Modal. !18897 (Zack Cuddy)
+- Remove Pendo Snippet. !19400
+
+### Fixed (17 changes)
+
+- Fix notification button size in notification settings. !16672
+- Don't store full blob path in ES filename field. !18470
+- Add messages to warn and stop users when attempting to change the path of projects with NPM packages. !18515
+- Pass pipeline variables when expanding Bridge downstream variables. !18875
+- Fix equality operator for Prometheus alerts. !18919
+- Fix rake task to rollback Geo migrations. !18975
+- Default current user to mirror user when creating pipelines for GitHub pull requests. !19072
+- Fix overlapping `Skip Trial` block. !19218
+- Fix Dependency List is empty if last pipeline is retried. !19241
+- SCIM pagination startIndex handles string input. !19331
+- Display packages with multiple licenses. !19333
+- Expose commit sha on Vulnerabilities::Occurrence. !19668
+- Fix admin welcome image not found. !19676
+- Revert ES support for public/internal project snippets. !19715
+- Updated View documentation link on cluster page. !19780
+- Enable pod logs nav menu only for maintainers in projects with k8s environments. !19927
+- Hide labels from issue board cards. !20072
+
+### Changed (13 changes)
+
+- Inherit children epics start and due dates. !14366
+- Update the frontend diffing code to support v2 license scan reports. !18105
+- Implement pod logs page using Vue. !18567
+- Move DAST reports logic for the Merge Request widget to the backend. !18660
+- Add created_before/after filter to audit events. !19035
+- Get rid of unnecessary duplication of alert’s title from Alert Details. !19214
+- Hashed storage is now a requirement for Design Management. !19259
+- Expose epic in issues API. !19300
+- SCIM GET /Users supports requests without a filter. !19421
+- Enable Cycle Analytics Feature by default. !19484
+- Enforce a max size accepted for sentry issues list. !19649
+- Limit input size for Prometheus alert JSON payload. !19940
+- Adds in a URL field for DAST reports modal data. !20162
+
+### Performance (2 changes)
+
+- Fix new project page load performance. !18180
+- Geo - Improve query performance to determine LFS objects to sync when selective sync is enabled. !19051
+
+### Added (17 changes, 1 of them is from the community)
+
+- Add filter for dismissed vulnerabilities on security dashboards. !16692
+- Data API endpoint for tasks by type chart within the analytics workspace. !17944
+- Hide labels from issue board cards. !18533
+- Skip Onboarding feedback when tracking is disabled. !18671
+- API endpoint to list the packages of a group. !18871
+- Allow to create epics with GraphQL. !19030
+- CI_JOB_TOKEN can be accepted with 'Bearer ' prefix to allow for NPM registry usage. !19059
+- Add issue IID to a title of generic alerts with a default title. !19086
+- Update sidebar to differentiate between groups, subgroups, and projects. !19158
+- SCIM can be used to manage group membership. !19329
+- Expose number of sub-epics and epic issues in GraphQL API. !19450
+- Add logs menu item to the sidebar. !19471
+- Add public API for Feature Flags. !19547
+- Ignore project_ci_cd_settings.merge_trains_enabled column. !19695
+- Add a usage ping metric for number of activated Alert Services. !19765
+- New discussions on designs will generate a system note on the issue. !19990
+- Expose SHA of squashed commit via API when fast-forward merge is enabled. (minghuan lei)
+
+### Other (6 changes, 1 of them is from the community)
+
+- Migrated contributors charts to echarts. !16677
+- Added autogenerated Markdown support for Vulnerability title and description. !18283
+- Rename user_id to author_id in design_management_versions table. !18506
+- Revert notification for updated privacy policy. !18900
+- Remove plaintext tokens for feature flags clients. !18923
+- Remove IIFEs from jira_connect.js file. !19248 (nuwe1)
+
+
 ## 12.4.3
 
 ### Fixed (2 changes)

VERSION

-12.6.0-pre
+12.5.0-pre

changelogs/unreleased/10242-move-old-vulns-api-to-vuln-findings.yml

----
-title: Rename Vulnerabilities API to Vulnerability Findings API
-merge_request: 19029
-author:
-type: changed

changelogs/unreleased/11137-propagate-all-env-vars-to-sast-containers.yml

----
-title: Propagate custom environment variables to SAST analyzers
-merge_request: 18193
-author:
-type: changed

changelogs/unreleased/11930-handle-multiple-entries-dast-report.yml

----
-title: The Security Dashboard displays DAST vulnerabilities for all the scanned sites, not just the first
-merge_request: 17779
-author:
-type: added

changelogs/unreleased/12769-milestone-blank-name-causes-issues.yml

----
-title: Ensure milestone titles are never empty
-merge_request: 19985
-author:
-type: fixed

changelogs/unreleased/12881-security-dashboard-leveraging-sparklines-to-show-vulnerability-tren.yml

----
-title: Vulnerabilities history chart - use sparklines
-merge_request: 19745
-author:
-type: changed

changelogs/unreleased/13055-show-the-sync-information-for-design-repositories.yml

----
-title: 'Geo: Add resigns-related fields to Geo Node Status table'
-merge_request: 18379
-author:
-type: other

changelogs/unreleased/13135-call-to-validate_query-in-custom-metrics-form-is-not-retried.yml

----
-title: Fix query validation in custom metrics form
-merge_request: 18769
-author:
-type: fixed

changelogs/unreleased/13401-close-gitlab-issue-on-recovery-alerts-from-prometheus.yml

----
-title: Close issues on Prometheus alert recovery
-merge_request: 18431
-author:
-type: added

changelogs/unreleased/13492-design-comments-width.yml

----
-title: Smaller width for design comments layout, truncate image title
-merge_request: 17547
-author:
-type: fixed

changelogs/unreleased/13539-license-compliance-approval-required.yml

----
-title: Show approval required status in license compliance
-merge_request: 19114
-author:
-type: changed

changelogs/unreleased/14707-add-modsec-logging-sidecar-to-ingress-controller.yml

----
-title: Add modsecurity logging sidecar to ingress controller
-merge_request: 19600
-author:
-type: added

changelogs/unreleased/14770-ignore-deprecated-column-on-projects.yml

----
-title: Ignore deprecated column and remove references to it
-merge_request: 18911
-author:
-type: deprecated

changelogs/unreleased/18797-support-for-crossplane-as-a-managed-app.yml

----
-title: Support for Crossplane as a managed app
-merge_request: 18797
-author: Mahendra Bagul
-type: added

changelogs/unreleased/18986-allow-to-use-commit-sha-in-cache-key.yml

----
-title: Build CI cache key from commit SHAs that changed given files
-merge_request: 19392
-author:
-type: added

changelogs/unreleased/19054-upgrade-helm.yml

----
-title: 'Updated Auto-DevOps to kubectl v1.13.12 and helm v2.15.1'
-merge_request: 19054
-author: Leo Antunes
-type: changed

changelogs/unreleased/19445-native-group-milestone-page-needs-same-info-as-project-milestones.yml

----
-title: Add issues, MRs, participants, and labels tabs in group milestone page
-merge_request: 18818
-author:
-type: added

changelogs/unreleased/20081-add-mb-2-class-to-global-alerts.yml

----
-title: Add mb-2 class to global alerts
-merge_request: 20081
-author: 2knal
-type: other

changelogs/unreleased/22392-add-eks-clusters-to-usage-data.yml

----
-title: Add EKS cluster count to usage data
-merge_request: 17059
-author:
-type: other

changelogs/unreleased/22392-capture-aws-role-details.yml

----
-title: Add ApplicationSetting entries for EKS integration
-merge_request: 18307
-author:
-type: other

changelogs/unreleased/22392-eks-create-cluster-fe.yml

----
-title: Create AWS EKS cluster
-merge_request: 19578
-author:
-type: added

changelogs/unreleased/24082-double-escaping-in-tableflip-quick-action.yml

----
-title: Fix double escaping in /tableflip quick action
-merge_request: 19271
-author: Brian T
-type: fixed

changelogs/unreleased/24146-query-string-params.yml

----
-title: Populate new pipeline CI vars from params
-merge_request: 19023
-author:
-type: added

changelogs/unreleased/24172-group-vars.yml

----
-title: Show inherited group variables in project view
-merge_request: 18759
-author:
-type: added

changelogs/unreleased/24792-artifact-based-view-for-junit-xml.yml

----
-title: Added Tests tab to pipeline detail that contains a UI for browsing test reports
-  produced by JUnit
-merge_request: 18255
-author:
-type: added

changelogs/unreleased/25188-unable-to-expand-collapse-files-in-merge-request-by-clicking-caret.yml

----
-title: Fix unable to expand or collapse files in merge request by clicking caret
-merge_request: 19222
-author: Brian T
-type: fixed

changelogs/unreleased/26138-replace-raven-js-with-sentry-browser.yml

----
-title: Replace raven-js with @sentry/browser
-merge_request: 17715
-author:
-type: changed

changelogs/unreleased/26207-issue-board-loading-infinite-if-closing-the-closed-row.yml

----
-title: Fix closed board list loading issue
-merge_request:
-author:
-type: fixed

changelogs/unreleased/26380-personal-snippets.yml

----
-title: Allow admins to administer personal snippets
-merge_request: 19693
-author: Oren Kanner
-type: fixed

changelogs/unreleased/27034-new-branch-length.yml

----
-title: Truncate recommended branch name to a sane length
-merge_request: 18821
-author:
-type: changed

changelogs/unreleased/27433-fix-vulnerable-code-copied-from-devise.yml

----
-title: Update incrementing of failed logins to be thread-safe
-merge_request: 19614
-author:
-type: security

changelogs/unreleased/27464-misleading-input-controller-for-dates.yml

----
-title: Remove calendar icon from personal access tokens
-merge_request: 20183
-author:
-type: other

changelogs/unreleased/28258-fix-project-clone-dropdrown-button-width.yml

----
-title: Fix project clone dropdown button width
-merge_request: 19551
-author: George Tsiolis
-type: fixed

changelogs/unreleased/28302-move-add-license-button.yml

----
-title: Move add license button to project buttons
-merge_request: 19370
-author:
-type: changed

changelogs/unreleased/28336-dropdown-icon-missing-on-compare-page.yml

----
-title: Adding dropdown arrow icon and updated text alignment
-merge_request:
-author:
-type: other

changelogs/unreleased/28338-different-dropdown-styles-on-settings-page.yml

----
-title: Change selects from default browser style to custom style
-merge_request:
-author:
-type: other

changelogs/unreleased/28350-manifest-error-file-attach.yml

----
-title: Add max width on manifest file attachment input
-merge_request: 19028
-author:
-type: fixed

changelogs/unreleased/28801-fix-canary-inconsistency.yml

----
-title: Fix canary badge and favicon inconsistency
-merge_request: 19645
-author:
-type: fixed

changelogs/unreleased/28985-links-to-notes-in-collapsed-discussions-dont-work.yml

----
-title: Fix expanding collapsed threads when reference link clicked
-merge_request: 20148
-author:
-type: fixed

changelogs/unreleased/29121-rename-trace.yml

----
-title: Replace wording trace with log
-merge_request:
-author:
-type: changed

changelogs/unreleased/29451-webide-currentsha.yml

----
-title: 'Resolve: Web IDE Throws Error When Viewing Diff for Renamed Files'
-merge_request: 19348
-author:
-type: fixed

changelogs/unreleased/29713-graphql-add-issue-relative-position-sort-2.yml

----
-title: 'Graphql query for issues can now be sorted by relative_position'
-merge_request: 19713
-author:
-type: added

changelogs/unreleased/29986-remove-leaky-401-responses.yml

----
-title: Standardize error response when route is missing
-merge_request:
-author:
-type: security

changelogs/unreleased/30131-breadcrumb-back-to-integrations-not-correct.yml

----
-title: Add missing breadcrumb in Project > Settings > Integrations
-merge_request: 18990
-author:
-type: fixed

changelogs/unreleased/30161-expose-merge-request-status-in-api.yml

----
-title: Expose mergeable state of a merge request
-merge_request: 18888
-author: briankabiro
-type: added

changelogs/unreleased/30182-checkbox-with-no-text-causing-following-checkboxes-not-to-be-saved.yml

----
-title: Fix checking task item when previous tasks contain only spaces
-merge_request: 19724
-author:
-type: fixed

changelogs/unreleased/30229-gitlab-backgroundmigration-pruneorphanedgeoevents-did-you-mean-prun.yml

----
-title: "[Geo] Fix: undefined Gitlab::BackgroundMigration::PruneOrphanedGeoEvents"
-merge_request: 19638
-author:
-type: fixed

changelogs/unreleased/30533-asciidoc-image-link-lazy-loading.yml

----
-title: Enable image link and lazy loading in AsciiDoc documents
-merge_request: 18164
-author: Guillaume Grossetie
-type: fixed

changelogs/unreleased/30616-improve-merge-request-description-placeholder.yml

----
-title: Improve merge request description placeholder
-merge_request: 20032
-author: Jacopo Beschi @jacopo-beschi
-type: changed

changelogs/unreleased/30660-allow-to-enable-disable-auto-ssl-letsencrypt-support-via-api.yml

----
-title: Require explicit null parameters to remove pages domain certificate and allow to use Let's Encrypt certificates through API
-merge_request:
-author:
-type: changed

changelogs/unreleased/30695-remove-add-btn-in-approval-rule.yml

----
-title: Can directly add approvers to approval rule
-merge_request: 18965
-author:
-type: changed

changelogs/unreleased/30810-blob-view-buttons.yml

----
-title: Change blob edit view button styling
-merge_request: 19566
-author:
-type: other

changelogs/unreleased/31134-add-usage-ping-data-for-project-services.yml

----
-title: Add usage ping data for project services
-merge_request: 19687
-author:
-type: added

changelogs/unreleased/31184-refactor-disabled-sidebar-notification-to-vue.yml

----
-title: Refactor disabled sidebar notifications to Vue
-merge_request: 20007
-author: minghuan lei
-type: other

changelogs/unreleased/31222-follow-up-from-adjusts-snowplow-to-use-cookies-for-sessions.yml

----
-title: Rename snowplow_site_id to snowplow_app_id in application_settings table
-merge_request: 19252
-author:
-type: other

changelogs/unreleased/31309-add-ability-for-users-to-organize-projects-on-the-operations-dashbo.yml

----
-title: Add ability to reorder projects on operations dashboard
-merge_request: 18855
-author:
-type: added

changelogs/unreleased/31364-error-when-attempting-to-view-gitlab-com-group-billing-page.yml

----
-title: Fix error when viewing group billing page
-merge_request: 18740
-author:
-type: fixed

changelogs/unreleased/31390-remove-pointer-cursor-from-memory-usage-chart.yml

----
-title: Remove pointer cursor from MemoryUsage chart on MR widget deployment
-merge_request: 18599
-author:
-type: fixed

changelogs/unreleased/31411-add-loading-indicator-when-connecting-to-error-tracking-server.yml

----
-title: Add loading icon to error tracking settings page
-merge_request: 19539
-author:
-type: changed

changelogs/unreleased/31658-add-rollback-dialog-environment.yml

----
-title: Fix environment name in rollback dialog
-merge_request: 19209
-author:
-type: fixed

changelogs/unreleased/31843-contextual-documentation-to-help-users-download-npm-packages.yml

----
-title: Added installation commands for npm and yarn packages to package detail page
-merge_request: 18999
-author:
-type: added

changelogs/unreleased/31868-make-name-optional-parameter-of-release-entity.yml

----
-title: Made `name` optional parameter of Release entity
-merge_request: 19705
-author:
-type: changed

changelogs/unreleased/31912-epic-labels.yml

----
-title: Manage and display labels from epic in the GraphQL API
-merge_request: 19642
-author:
-type: added

changelogs/unreleased/31914-graphql-todos-mark-todo-as-done-pd.yml

----
-title: Mark todo done by GraphQL API
-merge_request: 18581
-author:
-type: added

changelogs/unreleased/31919-graphql-MR-assignee-mutation.yml

----
-title: Add MergeRequestSetAssignees GraphQL mutation
-merge_request: 19272
-author:
-type: added

changelogs/unreleased/31919-graphql-MR-label-mutation.yml

----
-title: 'GraphQL: Create MR mutations needed for the sidebar'
-merge_request: 19913
-author:
-type: added

changelogs/unreleased/31919-graphql-MR-sidebar-mutations.yml

----
-title: 'GraphQL: Add Merge Request milestone mutation'
-merge_request: 19257
-author:
-type: added

changelogs/unreleased/31964-make-snippet-list-easier-to-scan.yml

----
-title: Make snippet list easier to scan
-merge_request: 19490
-author:
-type: other

changelogs/unreleased/32052-add-pa-start-date-limit.yml

----
-title: Add productivity analytics merge date filtering limit
-merge_request: 32052
-author:
-type: fixed

changelogs/unreleased/32198-banner-alerting-of-project-move-is-showing-up-everywhere.yml

----
-title: Fix "project or group was moved" alerts showing up in the wrong pages
-merge_request: 18985
-author:
-type: fixed

changelogs/unreleased/32358-add-modsec-feature-flag-to-usage-ping.yml

----
-title: Add modsecurity feature flag to usage ping
-merge_request: 20194
-author:
-type: added

changelogs/unreleased/32367-hashed-storage-migration-handle-failed-attachment-migrations-wth-ex.yml

----
-title: 'Hashed Storage Migration: Handle failed attachment migrations with existing
-  target path'
-merge_request: 19061
-author:
-type: fixed

changelogs/unreleased/32398-geo-rake-gitlab-geo-check-on-the-primary-is-cluttered.yml

----
-title: "[Geo] Fix: rake gitlab:geo:check on the primary is cluttered"
-merge_request: 19460
-author:
-type: changed

changelogs/unreleased/32419-growth-conversion-experiment-test-new-admin-upgrade-design-copy-for.yml

----
-title: Upgrade design/copy for issue weights locked feature
-merge_request: 17352
-author:
-type: changed

changelogs/unreleased/32458-update-group-creation-url-so-it-is-always-unique-and-does-not-gener.yml

----
-title: New group path uniqueness check
-merge_request: 17394
-author:
-type: added

changelogs/unreleased/32464-backend-sentry-error-details.yml

----
-title: API for stack trace & detail view of Sentry error in GitLab
-merge_request: 19137
-author:
-type: added

changelogs/unreleased/32464-detail-view-of-sentry-error.yml

----
-title: Detail view of Sentry error in GitLab
-merge_request: 18878
-author:
-type: added

changelogs/unreleased/32534-gitlab-rake-gitlab-cleanup-orphan_job_artifact_files-dry_run-false-is-not-removing-artifacts.yml

----
-title: Correctly cleanup orphan job artifacts
-merge_request: 17679
-author: Adam Mulvany
-type: fixed

changelogs/unreleased/32562-dynamic-db-pool-size-in-puma.yml

----
-title: 'Puma only: database connection pool now always >= number of worker threads'
-merge_request: 19286
-author:
-type: performance

changelogs/unreleased/32685-remove-epics-tree-feature-flag.yml

----
-title: Show Tree UI containing child Epics and Issues within an Epic
-merge_request: 19812
-author:
-type: added

changelogs/unreleased/32935-preventing-accidental-project-deletion-db-changes.yml

----
-title: Add migrations and changes for soft-delete for projects
-merge_request: 18791
-author:
-type: added

changelogs/unreleased/32935-preventing-accidental-project-deletion-index.yml

----
-title: Add index on marked_for_deletion_at in projects table
-merge_request: 19788
-author:
-type: other

changelogs/unreleased/32951-secure-modal-mobile-issue.yml

----
-title: Fixes mobile styling issues on security modals
-merge_request: 19391
-author:
-type: fixed

changelogs/unreleased/32962-update-gcp-credit-url.yml

----
-title: Update GCP credit URLs
-merge_request: 19683
-author:
-type: fixed

changelogs/unreleased/33042-persist-zoom-meetings-added-to-issues-in-the-database-2.yml

----
-title: Store Zoom URLs in a table rather than in the issue description
-merge_request: 18620
-author:
-type: changed

changelogs/unreleased/33054-share_groups_with_groups.yml

----
-title: Share groups with groups
-merge_request: 17117
-author:
-type: added

changelogs/unreleased/33101-add-deployments-api-updated-after-param.yml

----
-title: Allow order_by updated_at in Deployments API
-merge_request: 19658
-author:
-type: added

changelogs/unreleased/33121-refactor-user-counts.yml

----
-title: Refactor maximum user counts in license
-merge_request: 19071
-author: briankabiro
-type: changed

changelogs/unreleased/33182-fix-productivity-analytics-multiple-labels-bug.yml

----
-title: Fix productivity analytics listing with multiple labels
-merge_request: 33182
-author:
-type: fixed

changelogs/unreleased/33268-updated-operations-metrics-charts-do-not-load-properly.yml

----
-title: Fix empty chart in collapsed sections
-merge_request: 18699
-author:
-type: fixed

changelogs/unreleased/33306-missing-field-discussions.yml

----
-title: Prevents console warning on design upload
-merge_request: 19297
-author:
-type: fixed

changelogs/unreleased/33460-webide-line-endings.yml

----
-title: 'Resolve: Web IDE does not create POSIX Compliant Files'
-merge_request: 19339
-author:
-type: fixed

changelogs/unreleased/33533-go-to-root-if-no-path-on-branch.yml

----
-title: When a user views a file's blame or blob and switches to a branch where the
-  current file does not exist, they will now be redirected to the root of the repository.
-merge_request: 18169
-author: Jesse Hall @jessehall3
-type: changed

changelogs/unreleased/33557-make-pages-settings-e-g-enablement-access-control-more-visible.yml

----
-title: Add warnings about pages access control settings
-merge_request: 19067
-author:
-type: added

changelogs/unreleased/33672-add-enable-checkbox-for-grafana-authentication-settings.yml

----
-title: Migrate enabled flag on grafana_integrations table
-merge_request: 19234
-author:
-type: changed

changelogs/unreleased/33805-add_serverless_framework_template.yml

----
-title: Add template for Serverless Framework/JS
-merge_request: 33805
-author:
-type: added

changelogs/unreleased/33896-security-dashboard-projects.yml

----
-title: Create a users_security_dashboard_projects table to store the projects a user has added to their personal security dashboard
-merge_request: 18708
-author:
-type: added

changelogs/unreleased/33897-make-arrow-buttons-work-within-search-box.yml

----
-title: Fix keyboard shortcuts in header search autocomplete
-merge_request: 18685
-author:
-type: fixed