[merge-train skip]

[ci skip]

[ci skip]

Update dependency proxy API to use cleanup worker

See merge request gitlab-org/security/gitlab!2069

Merge branch 'security-enforce-group-ip-restrictions-with-globalid-in-graphql-14-5' into '14-5-stable-ee'

Enforce group IP restriction on GraphQL API when using global ID

See merge request gitlab-org/security/gitlab!2098

Add state param validation for GitHub OAuth flow

See merge request gitlab-org/security/gitlab!2076

Block request to :80 and :443 when app is on non-default port

See merge request gitlab-org/security/gitlab!2072

Merge branch 'security-347467_fix_pipeline_vulnerability_related_fields_permissions-14-5' into '14-5-stable-ee'

Authorize users to read security related pipeline fields

See merge request gitlab-org/security/gitlab!2055

Merge branch 'security-prevent-bypassing-npm-registry-file-size-limit-using-size-calculation-14-5' into '14-5-stable-ee'

Prevent bypassing npm registry file size limit

See merge request gitlab-org/security/gitlab!2039

Merge branch 'security-fix-permission-check-on-api-project-members-import-14-5' into '14-5-stable-ee'

Fix permissions check on API project members import

See merge request gitlab-org/security/gitlab!2062

Sanitize link markup in user input for chat messages

See merge request gitlab-org/security/gitlab!2085

Fixes gl-emoji not escaping names

See merge request gitlab-org/security/gitlab!2032

User with expired password can still access sensitive info

See merge request gitlab-org/security/gitlab!2059

Drop LetsEncrypt X3 expired root test

See merge request gitlab-org/gitlab!77454

Fix date-dependent failing spec in export_service_spec.rb

See merge request gitlab-org/gitlab!77474

Backport update cluster fixtures with new cerificates to 14-5

See merge request gitlab-org/gitlab!77159

This test was previously quaratined because one of the fixtures was an
X.509 certificate which expired. This removes the quaratine and updates
the certificates to use the ones from about.gitlab.com which expire on
Nov 19 18:50:03 2022 GMT. This should be fine since these specs are
expected to be removed with 15.0 in (+- May 2022)

https://gitlab.com/groups/gitlab-org/configure/-/epics/8

[merge-train skip]

[ci skip]

[ci skip]

Update mermaid to v8.13.4

See merge request gitlab-org/security/gitlab!2018

Prevent create_note if you cannot read vulnerability

See merge request gitlab-org/security/gitlab!1966