If the request wasn't initiated by gitlab we shouldn't add the new
identity to the user, and instead show that we weren't able to link
the identity to the user.

This should fix: https://gitlab.com/gitlab-org/gitlab-ce/issues/56509

If user unsubsrcribes from a resource that they no longer have
access to they should not be revealed the resource path, but be
redirected to app root instead.

https://gitlab.com/gitlab-org/gitlab-ce/issues/64938

This prevents a MITM attack where attacker could
still access Git repository if any jobs were
running long enough.

Fix rubocop offences and add changelog

Add email_verified key for feature specs

Add code review remarks

Add code review remarks

Fix specs

Label events may use cross-project or cross-group references,
if the projects are not accessible by user, we don't show these
label events.

[ci skip]

[ci skip]

[ci skip]

Check that SAML identity linking validates the origin of the request

See merge request gitlab/gitlabhq!3337

Display only participants that user has permission to see

See merge request gitlab/gitlabhq!3401

Redirect user to root path after unsubscribing from private resource

See merge request gitlab/gitlabhq!3405

Cancel all running CI jobs when user is blocked

See merge request gitlab/gitlabhq!3410

Hide disabled project milestones in project settings on group level

See merge request gitlab/gitlabhq!3414