Identified improvements we could make as a result of the 11.4 retrospective.

Issues identified in the 11.5 retrospective

Issues identified in the 11.6 retrospective

Issues identified in the 11.7 retrospective

Issues identified in the 11.8 retrospective

Issues identified in the 11.9 retrospective

This MR contains changes that were reverted (automatically), and have to be re-added by the author.

Related to the merge request reviewers feature

Relating to the rich blob viewer features

All issues related to risk management

The vulnerability is accepted (often due to very low risk) and it will not be fixed.

The vulnerability was incorrectly reported and is not actually present or exploitable in any way.

The severity level downgraded because compensating controls in place AND the risk is accepted (i.e. will not be fixed).

The severity level should be downgraded due to compensating controls in place.

The issue is not able to be remediated due to technical constraints. This state will keep the issue open until it is able to be remediated in the future.

The vulnerability will be remediated and an exception request is not required

Roadmap items with low certainty but that we think we want to do in the future.

Roadmap themes to be worked on after the current themes are completed.

Themes in the roadmap that are currently being worked on

Category vision in Plan stage: https://about.gitlab.com/direction/plan/portfolio_management/