[merge-train skip]

[ci skip]

Prepare 17.9.7 release for gitlab-jh

See merge request gitlab-cn/gitlab!3094

[merge-train skip]

[ci skip]

[ci skip]

Add SecureHeaders middleware with the Nel header

See merge request https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/4920



Merged-by: GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com>
Approved-by: David Fernandez <dfernandez@gitlab.com>
Co-authored-by: Dzmitry Meshcharakou <12459192-dmeshcharakou@users.noreply.gitlab.com>

Merge branch 'security-injection-of-nel-headers-17-9' into '17-9-stable-ee'

See merge request gitlab-org/security/gitlab!4920

Changelog: security

Restrict forwarded headers in Maven dependency proxy

See merge request https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/4931



Merged-by: GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com>
Approved-by: Igor Drozdov <idrozdov@gitlab.com>
Reviewed-by: David Fernandez <dfernandez@gitlab.com>
Co-authored-by: David Fernandez <dfernandez@gitlab.com>

Merge branch 'security-workhorse-browser-restricted-mode-17-9' into '17-9-stable-ee'

See merge request gitlab-org/security/gitlab!4931

Changelog: security

Security unauthorized access to reading branch names

See merge request https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/4923



Merged-by: GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com>
Approved-by: Ottilia Westerlund <12746880-ottilia_westerlund@users.noreply.gitlab.com>
Co-authored-by: Miki Amos <mamos@gitlab.com>

Merge branch 'security-unauthorized-access-to-reading-branch-names-17-9' into '17-9-stable-ee'

See merge request gitlab-org/security/gitlab!4923

Changelog: security

Simplify detecting paragraphs for quick actions

See merge request https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/4927



Merged-by: GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com>
Approved-by: Piotr Skorupa <pskorupa@gitlab.com>
Co-authored-by: Brett Walker <bwalker@gitlab.com>

Merge branch 'security-quick-action-dos-17-9' into '17-9-stable-ee'

See merge request gitlab-org/security/gitlab!4927

Changelog: security

Update workhorse gitalyclient dependency backport to 17.9

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/187765



Merged-by: Mayra Cabrera <mcabrera@gitlab.com>
Approved-by: Alessio Caiazza <code.git@caiazza.info>
Approved-by: Mayra Cabrera <mcabrera@gitlab.com>
Co-authored-by: Eric Ju <eju@gitlab.com>

Introduce a new gitlab:doctor:encryption_keys task

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/187566



Merged-by: Mayra Cabrera <mcabrera@gitlab.com>
Approved-by: Mayra Cabrera <mcabrera@gitlab.com>
Co-authored-by: Rémy Coutable <remy@rymai.me>

Signed-off-by: Rémy Coutable <remy@rymai.me>

Merge branch 'pedropombeiro/534905/backports/17-9/no-op-20250113163026-migration' into '17-9-stable-ee' 

[17.9 Backport] Clean up the FinalizeBackfillCiRunnerMachinesPartitionedTable migration

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/187368



Merged-by: John Skarbek <jskarbek@gitlab.com>
Approved-by: Marius Bobin <mbobin@gitlab.com>
Approved-by: Omar Qunsul <oqunsul@gitlab.com>
Co-authored-by: Pedro Pombeiro <ppombeiro@gitlab.com>

In https://gitlab.com/gitlab-org/gitaly/-/merge_requests/7753,
Gitaly upgraded go-grpc to version 1.71.1. This change has also
been backported to 17-9-stable via
https://gitlab.com/gitlab-org/gitaly/-/merge_requests/7772.

As Workhorse is a Gitaly client, it should update its gitalyclient
dependency to incorporate this upgrade as well.

[merge-train skip]

[ci skip]

Prepare 17.9.6 release for gitlab-jh

See merge request gitlab-cn/gitlab!3077

[merge-train skip]

[ci skip]

Prepare 17.9.5 release for gitlab-jh

See merge request gitlab-cn/gitlab!3073

[merge-train skip]

[ci skip]

[ci skip]