[merge-train skip]

[ci skip]

Prepare 15.11.12 release for gitlab-jh

See merge request gitlab-cn/gitlab!1848

[merge-train skip]

[ci skip]

Prepare 15.11.11 release for gitlab-jh

See merge request gitlab-cn/gitlab!1814

[merge-train skip]

[ci skip]

[ci skip]

Add authorization to the subscriptions group controller

See merge request https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/3381



Merged-by: Mayra Cabrera <mcabrera@gitlab.com>
Approved-by: Doug Stull <dstull@gitlab.com>
Approved-by: Thong Kuah <tkuah@gitlab.com>
Co-authored-by: Doug Stull <dstull@gitlab.com>

Merge branch 'security-416797-fix-auth-issue-15-11' into '15-11-stable-ee'

See merge request gitlab-org/security/gitlab!3381

Changelog: security

[merge-train skip]

[ci skip]

Prepare 15.11.10 release for gitlab-jh

See merge request gitlab-cn/gitlab!1790

[merge-train skip]

[ci skip]

[ci skip]

Revert 'security-leaked-ci-job-token-permission-15-11' from '15-11'"

See merge request https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/3375



Merged-by: John Skarbek <jskarbek@gitlab.com>
Approved-by: Dominic Couture <dcouture@gitlab.com>
Approved-by: A Browne <abrowne@gitlab.com>
Co-authored-by: Max Fan <mfan@gitlab.com>

Merge branch 'revert-822d17d7' into '15-11-stable-ee'

See merge request gitlab-org/security/gitlab!3375

Changelog: security

Use fully qualified ref when loading code owner file

See merge request https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/3354



Merged-by: GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com>
Approved-by: Vasilii Iakliushin <viakliushin@gitlab.com>
Co-authored-by: Joe Woodward <jwoodward@gitlab.com>

Merge branch 'security-410123-bypass-code-owner-approvals-15-11' into '15-11-stable-ee'

See merge request gitlab-org/security/gitlab!3354

Changelog: security

Maintainer can leak masked webhook secrets by manipulating URL masking

See merge request https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/3361



Merged-by: GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com>
Approved-by: Luke Duncalfe <lduncalfe@gitlab.com>
Co-authored-by: bmarjanovic <bmarjanovic@gitlab.com>

Merge branch 'security-410433-confidential-issue-15-11' into '15-11-stable-ee'

See merge request gitlab-org/security/gitlab!3361

Changelog: security

Remove approvals when the only commit gets amended

See merge request https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/3368



Merged-by: GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com>
Approved-by: Patrick Bajao <ebajao@gitlab.com>
Co-authored-by: David Kim <dkim@gitlab.com>

Merge branch 'security-fix-907-15-11' into '15-11-stable-ee'

See merge request gitlab-org/security/gitlab!3368

Changelog: security

Fix for fork permissions check in compare controller

See merge request https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/3344



Merged-by: GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com>
Approved-by: Vasilii Iakliushin <viakliushin@gitlab.com>
Co-authored-by: Robert May <rmay@gitlab.com>

Merge branch 'security-408137-15-11' into '15-11-stable-ee'

See merge request gitlab-org/security/gitlab!3344

Changelog: security

Webhook token leaked in Sidekiq logs if log format is 'default'

See merge request https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/3347



Merged-by: GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com>
Approved-by: Roy Zwambag <rzwambag@gitlab.com>
Co-authored-by: bmarjanovic <bmarjanovic@gitlab.com>

Merge branch 'security-409034-confidential-issue-15-11' into '15-11-stable-ee'

See merge request gitlab-org/security/gitlab!3347

Changelog: security

Mitigate epic reference filter ReDOS

See merge request https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/3339



Merged-by: GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com>
Approved-by: Vitali Tatarintev <vtatarintev@gitlab.com>
Co-authored-by: Brett Walker <bwalker@gitlab.com>

Merge branch 'security-untrusted-epic-reference-15-11' into '15-11-stable-ee'

See merge request gitlab-org/security/gitlab!3339

Changelog: security

Increasing security for CI_JOB_TOKEN on public and internal projects

See merge request https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/3319



Merged-by: GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com>
Approved-by: A Browne <abrowne@gitlab.com>
Co-authored-by: Max Fan <mfan@gitlab.com>

Merge branch 'security-leaked-ci-job-token-permission-15-11' into '15-11-stable-ee'

See merge request gitlab-org/security/gitlab!3319

Changelog: security

Merge branch 'security-dblessing_fix_html_injection_admin_unconfirmed_user-15-11' into '15-11-stable-ee'

Sanitize user email addresses in admin confirm user dialog

See merge request https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/3332



Merged-by: GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com>
Approved-by: Kassio Borges <kborges@gitlab.com>
Co-authored-by: Drew Blessing <drew@gitlab.com>

Merge branch 'security-dblessing_fix_html_injection_admin_unconfirmed_user-15-11' into '15-11-stable-ee'

See merge request gitlab-org/security/gitlab!3332

Changelog: security