A nonce-based Content-Security-Policy thwarts XSS attacks by allowing
inline JavaScript to execute if the script nonce matches the header
value. Rails 5.2 supports nonce-based Content-Security-Policy headers,
so provide configuration to enable this and make it work.

To support this, we need to change all `:javascript` HAML filters to the
following form:

```
= javascript_tag nonce: true do
  :plain
    ...
```

We use `%script` throughout our HAML to store JSON and other text, but
since this doesn't execute, browsers don't appear to block this content
from being used and require the nonce value to be present.

Use Rails 5.2 Redis caching store

Closes #64794

See merge request gitlab-org/gitlab-ce!30966

Fix links to unassigned, low weight issues for first time contributors

See merge request gitlab-org/gitlab-ce!31485

(Really) Fix Ruby 2.5 compatibility for diverging counts of branches

Closes #64143

See merge request gitlab-org/gitlab-ce!31491

Fix Admin area user access level radio button labels

See merge request gitlab-org/gitlab-ce!31154

In the admin user edit form, access level radio button labels didn't have
the correct 'for' value. Clicking on the label did not select the radio
button. This makes usability a bit nicer since the click area is increased
when the label is clickable.

This is the first step in providing a fault-tolerant and distributed
Redis caching store. We disable compression to avoid introducing a
change that could have an adverse effect in production.

Note that we won't be able to take advantage of the fault-tolerance and
distributed features yet until we solve
https://gitlab.com/gitlab-org/gitlab-ce/issues/64829.

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/64794

!31480 does not fully restore compatibility because another Ruby 2.6
feature besides `Enumerable#filter` was used in commit ca5cd7b7. The use
of `Enumerable#to_h`'s block is now replaced by an explicit
`Enumerable#map` call.

Error message:

	TypeError (wrong element type Gitlab::Git::Branch at 0 (expected array)):
  	app/controllers/projects/branches_controller.rb:53:in `to_h'

See https://bugs.ruby-lang.org/issues/15143.

Fixes #64143.

Resolve "Add padding to "merged by" widget"

Closes #64831

See merge request gitlab-org/gitlab-ce!30972

This reverts commit c3751046d217008404a0bd371e59d6ffd6734923.

Update dependency @gitlab/ui to v5.14.0

See merge request gitlab-org/gitlab-ce!31482

Add example to plugins file

See merge request gitlab-org/gitlab-ce!30508

Add description how to set custom CI file

See merge request gitlab-org/gitlab-ce!31445

Fix error on project name

See merge request gitlab-org/gitlab-ce!31471

Add project path to sql query to build proper path

[ci skip]

Resolve "API endpoint to list the Docker images/tags of a group"

See merge request gitlab-org/gitlab-ce!30817

API endpoints for requesting container repositories
and container repositories with their tag information
are enabled for users that want to specify the group
containing the repository rather than the specific project.

Only track Redis calls if Peek is enabled

See merge request gitlab-org/gitlab-ce!31438

Removed external dashboard legend border

Closes #64675

See merge request gitlab-org/gitlab-ce!31407

Fixed bug from extra parenthesis

Closes #63474

See merge request gitlab-org/gitlab-ce!31479

Bring diagnostics_tools.md from debug project to docs

See merge request gitlab-org/gitlab-ce!31399

Document when quotes aren't needed for quick actions

Closes #63735

See merge request gitlab-org/gitlab-ce!31338

Add missing timezone when copying legacy artifacts (ci_builds)

See merge request gitlab-org/gitlab-ce!31447

Updates security templates

[ci skip]

See merge request gitlab-org/gitlab-ce!31431

Use stubbed key and certificate in Helm factory

See merge request gitlab-org/gitlab-ce!31169

Use select instead of filter to support 2.5

See merge request gitlab-org/gitlab-ce!31480

Add shell scripting guides to development README

Closes #64016

See merge request gitlab-org/gitlab-ce!31467

Update Unicorn Worker recommendation

See merge request gitlab-org/gitlab-ce!31404

Docs - Strongly discourage installing ES on the same server as GitLab

See merge request gitlab-org/gitlab-ce!30169