Update Rack to v2.2.3

See merge request gitlab-org/gitlab!45183

Fix flaky test due to non-deterministic ordering of audit_events

See merge request gitlab-org/gitlab!47363

elaborate on what the difference between ID and IID is

See merge request gitlab-org/gitlab!45951

based on markdown linting   "Proper names should have the correct capitalization"

Small edit to docs testing docs

See merge request gitlab-org/gitlab!47369

Ignore db/structure.sql in Gitpod

See merge request gitlab-org/gitlab!47293

Separate testing documentation from rest of guide

See merge request gitlab-org/gitlab!47362

Add snippet autocomplete to tribute (from at.js)

See merge request gitlab-org/gitlab!47017

Fix Bad Escape in Issue Board Empty State

See merge request gitlab-org/gitlab!45465

Merge branch '263143-introduce-an-easier-way-to-contact-sales-about-upgrading-a-self-hosted-instance-plan-add-a' into 'master'

Change "Contact Sales to upgrade" link on License

See merge request gitlab-org/gitlab!47214

[RUN AS-IF-FOSS] Resolve "FOSS master failure:  spec/finders/joined_groups_finder_spec.rb"

See merge request gitlab-org/gitlab!47360

Expose timebox stats explicitly

See merge request gitlab-org/gitlab!46774

Explicitly set `created_at` to make ordering deterministic.

Allow additional msg to be passed in 405 response

See merge request gitlab-org/gitlab!47224

Update Terraform/Base.latest.gitlab-ci.yml to inline cd TF_ROOT

See merge request gitlab-org/gitlab!47254

Resize images to smaller size

See merge request gitlab-org/gitlab!47343

Add migration to populate pipeline_id in Vulnerability Feedback

See merge request gitlab-org/gitlab!46266

This change adds background migration to populate pipeline_id in
Vulnerability Feedback that was created from Vulnerability. The
pipeline_id is crucial to properly render information about dismissed
findings in MR security widget.

Re-enqueue blocked_by link replacement

See merge request gitlab-org/gitlab!46770

We need to re-enqueue background migration which replaces
`blocked_by` link type with `blocks`. The reason is that
there are a couple of bi-directional links which needs to
be deleted first.

Documentation: Fix API services parameter tables

See merge request gitlab-org/gitlab!47191

Fix generation of ETag when sending Git blobs

See merge request gitlab-org/gitlab!47225

Remove merge_red_head_comments_position_on_demand FF

See merge request gitlab-org/gitlab!47303

Improve lefthook instructions

See merge request gitlab-org/gitlab!47218

Signed-off-by: Rémy Coutable <remy@rymai.me>

Update vulnerability documentation page

See merge request gitlab-org/gitlab!47322

Disallow editing of project-level MR approval settings that are enabled at the instance level

See merge request gitlab-org/gitlab!46637

Extend postgres_indexes view to exclude expression indexes from reindexing

See merge request gitlab-org/gitlab!47304

Revert "Global Search - Left Sidebar"

See merge request gitlab-org/gitlab!47344

Update iterations version notes

See merge request gitlab-org/gitlab!47319

Add GraphQL mutation to create a new release

See merge request gitlab-org/gitlab!46263

Merge branch '216943-add-performance-marks-and-measures-user-timing-api-to-mr-diffs-for-relevant-moments' into 'master'

Add performance marks and measures to the MR Diffs app

See merge request gitlab-org/gitlab!46434

Block LFS requests on snippets

See merge request gitlab-org/gitlab!45874

The repository routes for project repositories are ambiguous and also
match project snippet repositories, so LFS requests for project snippets
will work but snippets are not ready yet to properly support LFS.

We can work around this by checking `#lfs_enabled?` on the `container`
instead of the `project`, which for snippets will be the snippet itself,
and `Snippet#lfs_enabled?` is currently hard-coded to return `false`.

To simplify things, we also remove the project-specific access check and
use `lfs_download_access?` instead to determine wether to expose the
existence of the project (404 response) or not (403 response), when
sending an error response. When LFS is disabled on the container we now
also send a 404 instead of a 403.

This reverts merge request !46595