[ci skip]

[ci skip]

Trigger Elasticsearch indexing when public group moved to private

See merge request gitlab/gitlab-ee!1524

Update maven file_name regex for full string

See merge request gitlab/gitlab-ee!1513

Do a full string check on maven file_name rather
than just a single line to prevent malicious
attacks.

This fixes https://gitlab.com/gitlab-org/gitlab/issues/37766 which is
caused by the fact that we leave the stale permissions data in the index
after a group is moved to another group.

[12.3] Merge branch 'fix_badge_feature_spec_external_request' into 'master'

See merge request gitlab-org/gitlab!21299

Bump Markdown timeout from 3 to 6 seconds in test

Closes #35269

See merge request gitlab-org/gitlab!19408

(cherry picked from commit 51e1569b)

3a4525cf Bump Markdown timeout from 3 to 6 seconds in test

Don't make external requests

Closes #38045

See merge request gitlab-org/gitlab!21161

(cherry picked from commit f88ed9ed)

ebeab42f Don't make external requests

[ci skip]

[ci skip]

[ci skip]

[ci skip]

Fix invalid byte sequence

See merge request gitlab/gitlab-ee!1478

Update Workhorse and Gitaly to fix a security issue

See merge request gitlab/gitlab-ee!1411

Hide AWS secret on Admin Integration page

See merge request gitlab/gitlab-ee!1422

Branches and commits are exposed to guests using APIs used by Jira

See merge request gitlab/gitlab-ee!1425

Use Gitlab::HTTP for all chat notifications

See merge request gitlab/gitlab-ee!1430

Fail pull mirror when mirror user is blocked

See merge request gitlab/gitlab-ee!1435

Dependency List shows dependency vulnerability status as safe to not logged in users

See merge request gitlab/gitlab-ee!1436

Fix private comment Elasticsearch leak

See merge request gitlab/gitlab-ee!1445

RO: Prevent IDOR when adding users to protected environments

See merge request gitlab/gitlab-ee!1453

Prevent guests from seeing commits for cycle analytics

See merge request gitlab/gitlab-ee!1461

Related Branches Visible to Guests in Issue Activity

See merge request gitlab/gitlab-ee!1464

Fix Maven file_name security issue

See merge request gitlab/gitlab-ee!1467

Add maven file_name regex validation
on incoming file_name param
for maven file uploads to prevent malicious
or encoded characters from passing into the
filename.

GitLab stores AWS, Slack, Askimet, reCaptcha tokens in plaintext

See merge request gitlab/gitlab-ee!1469

Do not create todos for approvers without access

See merge request gitlab/gitlab-ee!1481

Escape namespace in label references

See merge request gitlab/gitlab-ee!1484

Check permissions before showing a forked project's source

See merge request gitlab/gitlab-ee!1485

Ensure attributes that end in `_ids` are cleaned

See merge request gitlab/gitlab-ee!1493

This prevents an issue where you can steal other projects objects by
asking for ids that don't belong to you in import.

We had concerns about the cached values on Redis with the previous two
releases strategy:

First release (this commit):
  - Create new encrypted fields in the database.
  - Start populating new encrypted fields, read the encrypted fields or
    fallback to the plaintext fields.
  - Backfill the data removing the plaintext fields to the encrypted
    fields.
Second release:
  - Remove the virtual attribute (created in step 2).
  - Drop plaintext columns from the database (empty columns after
    step 3).

We end up with a better strategy only using migration scripts in one
release:
  - Pre-deployment migration: Add columns required for storing encrypted
    values.
  - Pre-deployment migration: Store the encrypted values in the new
    columns.
  - Post-deployment migration: Remove the old unencrypted columns