Audit project MR approval permission changes

See merge request gitlab-org/gitlab!25959

There is a small gotcha around the flipping logic of the from/to value
for `merge_request_author_approval`. This is to align with user
perception on the UI (i.e. the value `false` means disallowing approval
from authors and effectively maps to the ticked checkbox on the UI)

NPM package requests forwarding

Closes #55344

See merge request gitlab-org/gitlab!25531

Remove deprecation warning for Module#parents

See merge request gitlab-org/gitlab!26365

Improve Gitaly HA docs

Closes gitaly#2470

See merge request gitlab-org/gitlab!25402

Add web_url attribute to API response for Commits

See merge request gitlab-org/gitlab!26173

Make status transition resilient for downstream pipeline creation

See merge request gitlab-org/gitlab!25706

Allow to fork to the same namespace with different name

Closes #208167

See merge request gitlab-org/gitlab!26062

Remove unused Snippets content_types method

See merge request gitlab-org/gitlab!26306

API for creating remote mirrors

Closes #24189

See merge request gitlab-org/gitlab!25825

Add Spec for Invalid Ci Yaml Files

See merge request gitlab-org/gitlab!26113

Document current behavior

Set this behavior behind a feature flag
Log error if downstream pipeline exists

Commits will sometimes be wrapped in a `BatchLoader` instance, which
properly delegates `itself` to the wrapped object via `method_missing`
but not the `===` used by the `case` statement.

DEPRECATION WARNING: `Module#parents` has been renamed to
`module_parents`. `parents` is deprecated and will be removed in Rails
6.1. (called from model_name at
../ee/app/models/concerns/custom_model_naming.rb:15)

Avatar upload support for Group Create/Update API

Closes #36681

See merge request gitlab-org/gitlab!25751

Send credentials with GraphQL fetch requests

Closes #36864

See merge request gitlab-org/gitlab!26386

Update dependency @gitlab/svgs to ^1.105.0

See merge request gitlab-org/gitlab!26349

Separate vulnerability and feature entities into own class files

See merge request gitlab-org/gitlab!26088

Merge branch '37320-ensure-project-snippet-feature-status-in-project-snippet-api-endpoints' into 'master'

Resolve "Ensure project snippet feature status in project API endpoints"

See merge request gitlab-org/gitlab!26064

Ensure CleanupOptimisticLockingNulls uses BETWEEN

See merge request gitlab-org/gitlab!26343

Migrated spec/javascripts/search_spec.js to Jest

See merge request gitlab-org/gitlab!26350

fetch won’t send cookies in older browsers
unless you set the credentials init option.
See https://github.com/whatwg/fetch/pull/585

Closes https://gitlab.com/gitlab-org/gitlab/issues/36864