Exclude sensitive attributes in serializable_hash by default

See merge request gitlab-org/gitlab!81773

Migrate gfm loading spinner to be design system compliant

See merge request gitlab-org/gitlab!82111

Adapt find page method to accept new skip_content RPC param

See merge request gitlab-org/gitlab!81513

Merge branch '353723-make-spinners-in-app-assets-javascripts-single_file_diff-js-pajamas-compliant' into 'master'

Update spinner in single_file_diff to be pajamas compliant

See merge request gitlab-org/gitlab!81955

Exclude negative values from VSA aggregation

See merge request gitlab-org/gitlab!81409

E2E: Validate ci pipelines import

See merge request gitlab-org/gitlab!82260

Use GraphQL data to set boardConfig

See merge request gitlab-org/gitlab!74049

Fix batched bg migration for missing ci model

See merge request gitlab-org/gitlab!82127

[Feature flag] Cleanup invite_members_group_modal

See merge request gitlab-org/gitlab!81940

- remove feature flag
- remove create action on rails member controllers

Changelog: other
EE: true

Add the pipeline wizard step component

See merge request gitlab-org/gitlab!81412

Signed-off-by: Janis Altherr <jaltherr@gitlab.com>

Remove non-null and uniqueness constraints for title from sprints

See merge request gitlab-org/gitlab!82169

Remove debug statement from BatchCommitLoader spec

See merge request gitlab-org/gitlab!82232

Remove rate_limit_user_sign_up_endpoint feature flag

See merge request gitlab-org/gitlab!82092

Expose committers on mergeRequest GraphQL type

See merge request gitlab-org/gitlab!79965

Add backend interface to look up for security training urls

See merge request gitlab-org/gitlab!81861

Add taskable filter to work item type resolver

See merge request gitlab-org/gitlab!82137

Enforce rate limit of 20 calls per minute
per IP address on /users/sign_up endpoint

Changelog: added

Changelog: added
MR: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/79965

This prevents knowledge of which fields are configured leaking into
SensitiveSerializableHash.

This allows us to exclude fields manually from serializable_hash /
to_json / as_json

Fields declared as encrypted via below is excluded by serializable_hash:

- add_authentication_token_field
- attr_encrypted

Skip SensitiveSerializableHash within JsonCache

We skip SensitiveSerializableHash in JsonCache as the current behavior
expects to serialize the entirety of the object, specifically Geo.

Also fix other broken specs from using SensitiveSerializableHash

- Add GraphQL type in vulnerability for url
- Add resolver
- Add finders to look up for urls using extrnal api

Changelog: added
MR: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/81861
EE: true

As part of the plan to make title an optional attribute for Iteration,
the non-null constraint is removed along with the uniqueness constraints
from the database while the application-level checks are preserved.

We are including a down migration to set any null titles to their
primary keys (ids) because we want to start accepting null titles
behind a feature flag in the same release.

Changelog: changed

Generate unique name for security provider factory

See merge request gitlab-org/gitlab!82358

https://gitlab.com/gitlab-org/gitlab/-/issues/354821

Add prepend mod to wiki page

See merge request gitlab-org/gitlab!82165

Revert disabling multi project pipeline viz for free user

See merge request gitlab-org/gitlab!82329

Doc Consistency: user - authentication and authorization

See merge request gitlab-org/gitlab!81763

Add missing tier badge, change inline tier badges to links

Expose filter by `updated_before`/`updated_after` in GraphQL

See merge request gitlab-org/gitlab!81959

Fix broadcast message on subscriptions page

See merge request gitlab-org/gitlab!82183

Create new index for security ci builds with new features

See merge request gitlab-org/gitlab!82047

Add detail about multi-project specific runners

See merge request gitlab-org/gitlab!82148