Update GitLab Packages

See merge request gitlab-org/gitlab!19127

Fix broken master in gitlab-foss (related_issuable_item_spec.js)

Closes #35249

See merge request gitlab-org/gitlab!19363

Merge branch '35103-use-the-scripts-review_apps-base-config-yml-file-from-master-so-that-every-deployment-use-an-up-to-date-config' into 'master'

Use master scripts/review_apps/base-config.yaml to deploy Review Apps

Closes #35103

See merge request gitlab-org/gitlab!19287

Resolve "Preventing accidental project deletion" - db changes

See merge request gitlab-org/gitlab!18791

Attribute all Sidekiq workers according to their workloads

See merge request gitlab-org/gitlab!18066

These workload attributes include:

1. Are jobs for this worker latency sensitve?
1. Does the worker rely on external dependencies?
1. What resource boundary is the worker limited by? This can be either
   cpu or memory.

These attributes are non-mandatory, but in future, SLOS for workers will
be determined by these attributes, and therefore, if a job has specific
latency requirements, they should be configured through these
attributes.

Use translations on project settings page

See merge request gitlab-org/gitlab!19062

Remove remote checks from DS doc

See merge request gitlab-org/gitlab!17577

Remove "remote checks" and DS_DISABLE_REMOTE_CHECKS
variable from Dependency Scanning documentation.
Gemnasium Analyzer doesn't connect to the
Gemnasium Server anymore, but directly connects to
gemnasium-db instead.

Add anomaly chart component

See merge request gitlab-org/gitlab!16530

The component:

- displays a main metric line, and a boundary band
- the boundary band caps of usual behavior of the metric
- highlights data in the metric which is considered an anomaly
- has a similar props interface as TimeSeries.vue component
- validates for 3 queries/metrics: metric, lower and upper metrics
- allows for some style customization

Resolve "Flaky spec: spec/requests/api/members_spec.rb:146"

Closes #35238

See merge request gitlab-org/gitlab!19355

remove IIFE from jira_connect.js

See merge request gitlab-org/gitlab!19248

Add support for relative ordering between classes for epics and epic_issues

Closes #13633

See merge request gitlab-org/gitlab!17800

Allow rows in file table to be opened in new window

See merge request gitlab-org/gitlab!19228

Add missing bottom padding in CI/CD settings

Closes #30204

See merge request gitlab-org/gitlab!19284

Merge branch '32801-pipeline-by-external-pr-from-github-mirror-on-12-3-has-no-user-permissions-to-use-include' into 'master'

Ensure pipeline by External PR from GitHub Mirror starts with a user

See merge request gitlab-org/gitlab!19072

Pipelines are created without an user if current_user is nil
and the pipeline triggerer is listed as API.
With this commit the pipeline triggerer will fallback to the
mirror_user that set up the project.

Share groups with groups (BE)

See merge request gitlab-org/gitlab!17117

It's implemented in a similar fashion as sharing a project with a
group.

Add @iamphill to CODEOWNERS file

See merge request gitlab-org/gitlab!19356

Fix errors in GraphQL Todos API due to missing TargetTypeEnum values

See merge request gitlab-org/gitlab!19052

Add endpoint for a group's vulnerable projects in the API

See merge request gitlab-org/gitlab!15317

* Adds `/group/:group_id/-/security/vulnerable_projects` which returns a
    list of the group's projects with vulnerabilities
* Adds Vulnerabilities::Occurrence.batch_count_by_project_and_severity
    which batch loads vulnerability counts grouped by severity and by
    project
* Adds Group#vulnerable_projects which returns a list of the group's
    vulnerable projects
* Adds VulnerableProjectSerializer and VulnerableProjectEntity, which
    exposes a vulnerability count method for each severity
* Adds VulnerableProjectPresenter which creates the vulnerability count
    method exposed in VulnerableProjectEntity

https://gitlab.com/gitlab-org/gitlab-ee/issues/11190

Allow management_project_id to be unset

See merge request gitlab-org/gitlab!19330

Remove empty Github service templates from db

See merge request gitlab-org/gitlab!18868

When creating a new Github integration, it looks for a service
record of the same type, but with the template flag set to true,
and clone its attributes before presenting the record to the user.

`https://gitlab.com/gitlab-org/gitlab/merge_requests/15737/diffs`
added `static_context` as a default attribute on for
this service but it clashes with the empty template on .com.

This commit removes Github templates that have `nil` or `{}`
as properties, allowing new services to set the `static_context`
default value from the code.

- and code & specs improvements

- and improve specs

Adds support for interspersed reordering between
epics and issues.

- add support for ordering of objects
from 2 different classes

Signed-off-by: Rémy Coutable <remy@rymai.me>

Enforce global default project and snippet visibilities to private

Closes #35013

See merge request gitlab-org/gitlab!19188