Update GITHUB_MEDIA_CDN to avoid SSRF when importing from Github

See merge request https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/4005



Merged-by: GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com>
Approved-by: Gregorius Marco <gmarco@gitlab.com>
Approved-by: Aaron Huntsman <ahuntsman@gitlab.com>
Approved-by: Greg Myers <gmyers@gitlab.com>
Reviewed-by: Greg Myers <gmyers@gitlab.com>
Co-authored-by: Ivane Gkomarteli <igkomarteli@gitlab.com>

Ivane Gkomarteli authored 10 months ago and GitLab Release Tools Bot committed 10 months ago

Merge branch 'security-github-media-cdn-ssrf' into 'master'

See merge request gitlab-org/security/gitlab!4005

Changelog: security

Require confirmation before linking JWT identity

See merge request https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/3971



Merged-by: GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com>
Approved-by: Ragnar Hardarson <rhardarson@gitlab.com>
Approved-by: Paul Gascou-Vaillancourt <pgascouvaillancourt@gitlab.com>
Approved-by: Greg Alfaro <galfaro@gitlab.com>
Approved-by: Andrew Evans <aevans@gitlab.com>
Approved-by: Harsha Muralidhar <hmuralidhar@gitlab.com>
Approved-by: Bogdan Denkovych <bdenkovych@gitlab.com>
Reviewed-by: Andrew Evans <aevans@gitlab.com>
Reviewed-by: Greg Myers <gmyers@gitlab.com>
Reviewed-by: Ragnar Hardarson <rhardarson@gitlab.com>
Co-authored-by: Drew Blessing <drew@gitlab.com>

Drew Blessing authored 10 months ago and GitLab Release Tools Bot committed 10 months ago

Merge branch 'security-dblessing_jwt_confirm_id_link' into 'master'

See merge request gitlab-org/security/gitlab!3971

Changelog: security

ReDos in escape and commit reference filters

See merge request https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/3964



Merged-by: GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com>
Approved-by: Allison Browne <abrowne@gitlab.com>
Approved-by: Kevin Morrison <kmorrison@gitlab.com>
Reviewed-by: Allison Browne <abrowne@gitlab.com>
Reviewed-by: Panos Kanellidis <pkanellidis@gitlab.com>
Co-authored-by: Brett Walker <bwalker@gitlab.com>

Brett Walker authored 10 months ago and GitLab Release Tools Bot committed 10 months ago

Merge branch 'security-fix-escape-filters' into 'master'

See merge request gitlab-org/security/gitlab!3964

Changelog: security

Check request size before updating user pins

See merge request https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/3981



Merged-by: GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com>
Approved-by: Serhii Yarynovskyi <syarynovskyi@gitlab.com>
Approved-by: Mario Celi <mcelicalderon@gitlab.com>
Approved-by: Nikhil George <ngeorge@gitlab.com>
Co-authored-by: Thomas Hutterer <thutterer@gitlab.com>

Thomas Hutterer authored 10 months ago and GitLab Release Tools Bot committed 10 months ago

Merge branch 'security-pins-max-size' into 'master'

See merge request gitlab-org/security/gitlab!3981

Changelog: security

Update BaseMessage::RELATIVE_LINK_REGEX regex

See merge request https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/3959



Merged-by: GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com>
Approved-by: James Nutt <jnutt@gitlab.com>
Approved-by: Robert May <rmay@gitlab.com>
Approved-by: Nikhil George <ngeorge@gitlab.com>
Co-authored-by: George Koltsov <gkoltsov@gitlab.com>

George Koltsov authored 10 months ago and GitLab Release Tools Bot committed 10 months ago

Merge branch 'security-google-chat-integration-regex' into 'master'

See merge request gitlab-org/security/gitlab!3959

Changelog: security

Update Integrations::Discord::ATTACHMENT_REGEX regex

See merge request https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/3953



Merged-by: GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com>
Approved-by: Nikhil George <ngeorge@gitlab.com>
Approved-by: Luke Duncalfe <lduncalfe@gitlab.com>
Reviewed-by: Luke Duncalfe <lduncalfe@gitlab.com>
Reviewed-by: James Nutt <jnutt@gitlab.com>
Co-authored-by: George Koltsov <gkoltsov@gitlab.com>

George Koltsov authored 10 months ago and GitLab Release Tools Bot committed 10 months ago

Merge branch 'security-discord-integration-regex' into 'master'

See merge request gitlab-org/security/gitlab!3953

Changelog: security

Update versions impacted - Geo checksum mismatch in projects

See merge request !151927



Merged-by: Achilleas Pipinellis <axil@gitlab.com>
Reviewed-by: Achilleas Pipinellis <axil@gitlab.com>
Co-authored-by: Sampath Ranasinghe <sranasinghe@gitlab.com>

Fix an use case of updated_at getting out of sync

See merge request !151694



Merged-by: Nicolas Dular <ndular@gitlab.com>
Approved-by: Kassio Borges <kborges@gitlab.com>
Approved-by: Nicolas Dular <ndular@gitlab.com>
Co-authored-by: Alexandru Croitor <acroitor@gitlab.com>

Add integration test for pipeline execution policy type

See merge request gitlab-org/gitlab!151961



Merged-by: Artur Fedorov <afedorov@gitlab.com>
Approved-by: Alexander Turinske <aturinske@gitlab.com>
Reviewed-by: Artur Fedorov <afedorov@gitlab.com>

New integration tests are required
for new pipeline execution policy

Move Full stop out of "Learn More."

See merge request !150908



Merged-by: Thong Kuah <tkuah@gitlab.com>
Approved-by: Thong Kuah <tkuah@gitlab.com>
Co-authored-by: fkhe <Falk.Haendler@t-systems.com>
Co-authored-by: Falk Händler <falk.haendler@telekom.de>

New Crowdin updates (May 2024)

See merge request !149560



Merged-by: Bob Van Landuyt <bob@gitlab.com>
Approved-by: Bob Van Landuyt <bob@gitlab.com>
Co-authored-by: Martin Wortschack <mwortschack@gitlab.com>

Update schema to gitlab_main_clusterwide for instance wide tables

See merge request !151767



Merged-by: Aleksei Lipniagov <alipniagov@gitlab.com>
Approved-by: Hitesh Raghuvanshi <hraghuvanshi@gitlab.com>
Approved-by: Omar Qunsul <oqunsul@gitlab.com>
Approved-by: Aleksei Lipniagov <alipniagov@gitlab.com>
Reviewed-by: Huzaifa Iftikhar <hiftikhar@gitlab.com>
Co-authored-by: huzaifaiftikhar1 <hiftikhar@gitlab.com>

Update docs for custom roles audit events

See merge request !151864



Merged-by: Aleksei Lipniagov <alipniagov@gitlab.com>
Approved-by: Adie (she/her) <avpfestin@gitlab.com>
Approved-by: Ashraf Khamis <akhamis@gitlab.com>
Approved-by: Aleksei Lipniagov <alipniagov@gitlab.com>
Reviewed-by: Aleksei Lipniagov <alipniagov@gitlab.com>
Co-authored-by: Hinam Mehra <hmehra@gitlab.com>

Scope feature flag to user

See merge request !152046



Merged-by: Imre Farkas <ifarkas@gitlab.com>
Approved-by: Imre Farkas <ifarkas@gitlab.com>
Co-authored-by: Manoj M J <mmj@gitlab.com>

Remove overflow:hidden from gl-card

See merge request !151909



Merged-by: Artur Fedorov <afedorov@gitlab.com>
Approved-by: Julia Miocene <jmiocene@gitlab.com>
Approved-by: Daniel Tian <dtian@gitlab.com>
Approved-by: Artur Fedorov <afedorov@gitlab.com>
Co-authored-by: Annabel Dunstone Gray <annabel.dunstone@gmail.com>

Update dependency @sentry/browser to v7.113.0

See merge request !152001



Merged-by: Miguel Rincon <mrincon@gitlab.com>
Approved-by: Miguel Rincon <mrincon@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

Cng orchestrator gem doctor command

Closes gitlab-org/quality/quality-engineering/team-tasks#2648

See merge request !151380



Merged-by: Niko Belokolodov <nbelokolodov@gitlab.com>
Approved-by: Will Meek <wmeek@gitlab.com>
Approved-by: Serhii Yarynovskyi <syarynovskyi@gitlab.com>
Approved-by: Anastasia McDonald <amcdonald@gitlab.com>
Approved-by: Niko Belokolodov <nbelokolodov@gitlab.com>
Co-authored-by: Andrejs Cunskis <acunskis@gitlab.com>

Add base log method

Improve output code

Update qa lockfile

Add tests for doctor command

Disable runner registration tokens for all groups on .com

See merge request !150562



Merged-by: Pedro Pombeiro <noreply@pedro.pombei.ro>
Approved-by: Adam Hegyi <ahegyi@gitlab.com>
Reviewed-by: George Koltsov <gkoltsov@gitlab.com>
Reviewed-by: Pedro Pombeiro <noreply@pedro.pombei.ro>
Reviewed-by: Corinna Gogolok <cgogolok@gitlab.com>

Changelog: changed

Drop Ruby 3.0 in CI configs

See merge request !151899



Merged-by: David Dieulivol <ddieulivol@gitlab.com>
Approved-by: Lee Tickett <ltickett@gitlab.com>
Approved-by: Nao Hashizume <nhashizume@gitlab.com>
Approved-by: David Dieulivol <ddieulivol@gitlab.com>
Reviewed-by: Rémy Coutable <remy@rymai.me>
Co-authored-by: Rémy Coutable <remy@rymai.me>

Refactor i18n code in issues list code

See merge request !151923



Merged-by: David Pisek <dpisek@gitlab.com>
Approved-by: Briley Sandlin <bsandlin@gitlab.com>
Approved-by: David Pisek <dpisek@gitlab.com>
Co-authored-by: Coung Ngo <cngo@gitlab.com>

Skip requested changes check when setting MWCP

See merge request !151314



Merged-by: Marc Shaw <mshaw@gitlab.com>
Approved-by: Phil Hughes <me@iamphill.com>
Approved-by: Marc Shaw <mshaw@gitlab.com>
Co-authored-by: Patrick Bajao <ebajao@gitlab.com>

Ensure assignee array has values before passing argument to finder

See merge request !151639



Merged-by: Pavel Shutsin <pshutsin@gitlab.com>
Approved-by: Adam Hegyi <ahegyi@gitlab.com>
Approved-by: Pavel Shutsin <pshutsin@gitlab.com>
Co-authored-by: charlieablett <cablett@gitlab.com>

Prevent board epic lane header from moving before sticky

See merge request !151824



Merged-by: Michael Lunøe <michael.lunoe@gmail.com>
Approved-by: Annabel Dunstone Gray <annabel.dunstone@gmail.com>
Approved-by: Marina Mosti <mmosti@gitlab.com>
Approved-by: Michael Lunøe <michael.lunoe@gmail.com>
Co-authored-by: Chad Lavimoniere <clavimoniere@gitlab.com>

Replace generic ".breadcrumbs" selector in specs with find_by_testid

See merge request !151906



Merged-by: Abdul Wadood <awadood@gitlab.com>
Approved-by: Ravi Kumar <rkumar@gitlab.com>
Approved-by: Abdul Wadood <awadood@gitlab.com>
Co-authored-by: Thomas Hutterer <thutterer@gitlab.com>

Update CH data storage statement

See merge request !151915



Merged-by: Lorena Ciutacu <lciutacu@gitlab.com>
Approved-by: Adam Hegyi <ahegyi@gitlab.com>
Approved-by: charlie ablett <cablett@gitlab.com>
Approved-by: Lorena Ciutacu <lciutacu@gitlab.com>
Co-authored-by: Brandon Labuschagne <blabuschagne@gitlab.com>