Specifically, we want to allow `:read_group`, without which
certain policy checks will fail.

This was implemented in support of
https://gitlab.com/gitlab-org/gitlab/-/merge_requests/40088, but can
be extracted in advance, and fixes a distinct bug.

The basic assumption of policies is that if `A` delegates to `B` and
user `U` is allowed to perform action `x` on `B`, then that user is
allowed to perform that action on `A` (i.e. policies are transitive).

The `prevent_all` call in this policy breaks that assumption, which is
relied on by GraphQL authorization to hold. Without this fix, the
following situation is possible:

- there exists a group `G`, which is public
- there exists a membership of a user `U` in `G`
- `Ability.allowed?(nil, :read_group, G) === true`
- `Ability.allowed?(nil, :read_group, U) === false`

This means that anonymous users cannot read the membership of public
groups, but they **can** read the membership of public projects.

Align checkbox in system hooks page in admin

See merge request gitlab-org/gitlab!50958

https://gitlab.com/gitlab-org/gitlab/-/merge_requests/50958

Conditionally show card footer in single group page in admin

See merge request gitlab-org/gitlab!51426

Migrate deprecated modal in modal.vue

See merge request gitlab-org/gitlab!46182

The Test Report Modal in the Merge Request Widget made use of the old
Bootstrap modals. In order to be able to use GLModal, we are now
persisting the Modal visibility state in VueX.

Add gl-badge to CI badges

See merge request gitlab-org/gitlab!51547

Add gl-badge to CI runners

See merge request gitlab-org/gitlab!51548

Update Issue Incidents to allow milestones to be used

See merge request gitlab-org/gitlab!51456

Add milestones to Incidents in both quick
actions and the sidebar
without adding iterations

Add gl-badge to members list badges

See merge request gitlab-org/gitlab!51546

Use a dynamic loader for window.gapi

See merge request gitlab-org/gitlab!49512

This MR swaps out an implicit dependency on window.gapi for a lazy
loader using a script tag designed around the realities of how
gapi needs to be loaded.

Previously, we had an implicit global dependency on gapi, relying on a
DOMContentLoaded event listener in an entirely different module. This
was brittle and held back internal efforts to remove dependencies on the
DOMContentLoaded event.

See https://gitlab.com/gitlab-org/gitlab/-/issues/284997

Add video link for Multi project pipelines

See merge request gitlab-org/gitlab!50646

Update canary(next) badge style

See merge request gitlab-org/gitlab!50965

Align loading icon for "Time tracking" in issue sidebar

See merge request gitlab-org/gitlab!50974

Remove unwanted space in "Configure pages" card body

See merge request gitlab-org/gitlab!50946

Align button in boards sidebar settings

See merge request gitlab-org/gitlab!50928

Fix alignment of project tags in project home page

See merge request gitlab-org/gitlab!51040

Add service to revoke DastSiteValidations

See merge request gitlab-org/gitlab!51678

Adds new service to delete passed validations by url_base.

Merge branch 'djensen-add-attributions-to-productivity-analytics-scatterplot-flag-config' into 'master'

Add attributions to PA scatterplot flag definition

See merge request gitlab-org/gitlab!51769

Update text of whats new drawer

See merge request gitlab-org/gitlab!51422

Change new at GitLab to new in GitLab

Remove reset_integrations feature flag

See merge request gitlab-org/gitlab!51507

Remove deprecated variables page

See merge request gitlab-org/gitlab!51729

Remove page of deprecated variables.

Update Gitaly version

See merge request gitlab-org/gitlab!51728

Add walkthrough for setting up private CodeQuality runners

See merge request gitlab-org/gitlab!49788