- Model
- Uploader
- Tests

- Default `file_store` to the terraform_state
  object storage setting
- Update `file_store` whenever the file changes

- direct_upload is false because files need to be encrypted before
  uploading
- background_upload is false because files need to be available
  immediately
- proxy_download is true because downloads need to be decrypted
  before being sent to the user

Uses lockbox gem to encrypt and decrypt files

Encryption is necessary because terraform state files contain secrets

This model will be used as part of GitLab's
terraform state backend

To be used for encrypting terraform state files. See
https://gitlab.com/gitlab-org/gitlab/issues/207401.

Make security the default for the secpick script

See merge request gitlab-org/gitlab!27174

Conditionally use `Closes` depending on autoclose

See merge request gitlab-org/gitlab!28009

De-duplicate jobs controller EE specs

See merge request gitlab-org/gitlab!27948

Fix request for group labels with a subgroup

See merge request gitlab-org/gitlab!27564

Fixes a 404 error when we try and request
group labels for a subgroup

For value stream analytics, when a subgroup
is selected we should only query for the labels
associated with the parent group

Updated related specs

Added changelog entry

Cross reference 2fa documentation

Closes #205692

See merge request gitlab-org/gitlab!28026

Shorter and clearer descriptions for audit event e2e specs

See merge request gitlab-org/gitlab!27877

Add praefect as a socket to connect to for requests with praefect as the storage

See merge request gitlab-org/gitlab!26323

Handle blank file path in UploadedFile.from_params

See merge request gitlab-org/gitlab!28030

Use COPY to populate schema_migrations table

Closes #212051

See merge request gitlab-org/gitlab!27885

Update chatops_on_gitlabcom.md to clarify process

See merge request gitlab-org/gitlab!28021

- only someone who is already a member can add someone to chatops

Enable streaming serializer for everybody by default

See merge request gitlab-org/gitlab!27813

Praefect functions as a proxy, but there are a few RPCs that are only in
praefect and do not get proxied to gitaly. To test functionality that
hits these RPCs, we need a way to hit a praefect instance that talks to
a gitaly instance.

This MR sets up praefect in front of the existing gitaly that is used in
tests.

Update dependency @gitlab/ui to ^10.0.1

See merge request gitlab-org/gitlab!28020

Replace underscore/lodash in ee/protected_*

Closes #210274

See merge request gitlab-org/gitlab!27939

This is intended to reduce conflict potential in the schema file.

See https://gitlab.com/gitlab-org/gitlab/-/issues/212051.

Update ruby-prof to 1.3.1

Closes #204771

See merge request gitlab-org/gitlab!28019

https://gitlab.com/gitlab-org/security/gitlab-workhorse/-/merge_requests/3
changed Workhorse so that it always provided `file.path` when
`direct_upload` was enabled, even if that path was blank.

Whereas we were checking for `path` not being `nil`, we now need to
check that it's present.

See also https://gitlab.com/gitlab-org/gitlab/-/issues/212424

This replaces underscore for lodash inside the
EE folder for:
* protected_tags
* protected_branches
* protected_environments

Support On Demand Release Evidence

See merge request gitlab-org/gitlab!26591

Part of https://gitlab.com/gitlab-org/gitlab/issues/199065

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/26591

Support `returning` for `BulkInsertSafe.bulk_insert!`

Closes #212231

See merge request gitlab-org/gitlab!27965

Add support for Okta as SCIM provider

See merge request gitlab-org/gitlab!25649

Move Prometheus::Alerts::NotifyService to Core

Closes #210532

See merge request gitlab-org/gitlab!27908

This contains Ruby 2.7 support, some bug fixes, and upstream support
sufficient to replace our TotalTimeFlatPrinter.

Merge branch '211445-follow-up-from-introduce-a-feature-flag-for-fixed-pipeline-notifications' into 'master'

Resolve "Follow-up from "Introduce a feature flag for fixed pipeline notifications""

Closes #211445

See merge request gitlab-org/gitlab!27880

Make project_export_worker urgency throttled

Closes gitlab-com/gl-infra/scalability#217

See merge request gitlab-org/gitlab!27941

Minor adjustments were necessary to support Okta SCIM payloads.
The SCIM spec gives enough leeway that providers can differ slightly
in the payload format. These changes allow us to be compatible with
Azure and Okta, but probably additional providers as well.