In order to get permissions working I had to pivot from using the hash
returned by Vulnerability.counted_by_severity to using a
VulnerabilitiesSummary pseudo-model and corresponding policy class.

I'm not sure I love this solution, especially since I'm now using
`public_send` to avoid having to hardcode each severity field in
VulnerabilitiesSummaryType.

Remove rspec-set gem

Closes #27922

See merge request gitlab-org/gitlab!28282

We've removed all instances of `set` and have moved them all over to
use `let_it_be`

Replace set to let_it_be in ee/spec

See merge request gitlab-org/gitlab!27989

Get rids of `set` in specs

Add version text for new feature

See merge request gitlab-org/gitlab!28176

Disable archive rate limit by default

See merge request gitlab-org/gitlab!28264

Don't send 'accept-encoding' header in HttpIO

Closes #212609

See merge request gitlab-org/gitlab!28239

Net::HTTP does not automatically decompress requests sent with a
range header, as is done by HttpIO#request, causing the body of
any gzipped responses to be unreadable.

This change removes the 'accept-encoding' header from requests sent
by HttpIO, ensuring responses are not gzipped.

Development Documentation: fix minor typo

See merge request gitlab-org/gitlab!28272

Contractions section: that's' vs that's

Make all HTTPS cookies set SameSite to none

Closes #212551

See merge request gitlab-org/gitlab!28205

Update Repository Analytics feature title

See merge request gitlab-org/gitlab!28162

This replaces the deprecated feature name of Contribution Charts with
the new feature name of Repository Analytics.

Some users depend on having a high number of unauthenticated archive
downloads.  Make this feature flag off by default until we have a chance
to ship a way to toggle this off in the admin panel.

Docs: Add troubleshooting of id and app changes

See merge request gitlab-org/gitlab!28170

Add Swift Dockerfile to GitLab templates

See merge request gitlab-org/gitlab!28035

Fix oauth check to verify user exists

See merge request gitlab-org/gitlab!28159

Prevent adding changelog ID on security MRs

See merge request gitlab-org/gitlab!28251

Add parent-child pipeline relationship spec

See merge request gitlab-org/gitlab!27606

Test cases for dependent relationship
Test cases for independent relationship

95c0aa51 introduced a new conditional on
changelog Dangerfile that is been triggered on security MRs. This commit
fixes that, as it's not a requirement to add a merge request ID on
changelogs for security merge requests.

Resolve "MR right sidebar is off when scrollbars are visible"

Closes #196226

See merge request gitlab-org/gitlab!27314

Some users reported being logged out quite frequently, and we suspect
a change in Chrome caused this.

Chrome v80, rolled out in March 2020, treats any cookies without the
SameSite directive set as though they are SameSite=Lax
(https://www.chromestatus.com/feature/5088147346030592). This is a
breaking change from the previous default behavior, which was to treat
those cookies as SameSite=None.

To fix this, we add a middleware that tags all cookies with the Secure
and SameSite=None headers. This middleware is needed until we upgrade to
Rack v2.1.0+
(https://github.com/rack/rack/commit/c859bbf7b53cb59df1837612a8c330dfb4147392)
and a version of Rails that has native support
(https://github.com/rails/rails/commit/7ccaa125ba396d418aad1b217b63653d06044680).

Closes https://gitlab.com/gitlab-org/gitlab/-/issues/212551

Add guard for nil merge_request_diff.id

See merge request gitlab-org/gitlab!28034

Harden  jira usage data

See merge request gitlab-org/gitlab!27973

Add restriction for updating nginx-ingress

See merge request gitlab-org/gitlab!27845

Migrate ee/billings to Jest

Closes #194270

See merge request gitlab-org/gitlab!28193

Add service to checksum PackageFiles on primary

Closes #13838

See merge request gitlab-org/gitlab!25411

This adds the functionality in a context of new
self-service framework

Refactor compare analyser reports service tests

See merge request gitlab-org/gitlab!28207

Move AlertsController to Core

Closes #210537

See merge request gitlab-org/gitlab!28091

Re-structure Analytics documentation index

See merge request gitlab-org/gitlab!28153

Previously the Analytics documentation index was built around the
Analytics Workspace concept. It did not sufficiently explain features
located outside the Workspace. Plus, we are moving away from the
Workspace concept anyway. This re-structures the Analytics
documentation index into 3 sections: instance (Workspace), group and
project levels. The Analytics features available are explained.

Find or initialize instance-level services

See merge request gitlab-org/gitlab!28033

Add state attribute to environment graphql API

See merge request gitlab-org/gitlab!28080