GitLab CE - 14.10.0

(2022-04-21)

Added (141 changes)

• Add a dropdown to switch language in code blocks (merge request)
• Wraps Jupyter Notebook Diff in a feature flag (merge request)
• Track related epics blocked added on usage data (merge request) GitLab Enterprise Edition
• Optimize followed users queries (merge request)
• Enable feature flag by default (merge request)
• Enable policy type selection page by default (merge request) GitLab Enterprise Edition
• Add DS_IMAGE_SUFFIX to enable Gemnasium FIPS (merge request)
• feat: Add SAST/SD template support for FIPS images (merge request)
• Enable FF ci_trigger_forward_variables (merge request)
• Add gitlab-pages http server timeout options documentation (merge request)
• Namespace onboarding action for license scanning (merge request) GitLab Enterprise Edition
• Enable feature flag by default (merge request) GitLab Enterprise Edition
• Default to the current group when importing from GitHub (merge request)
• Add metrics image UI for Alerts (merge request)
• Extend decomposition prometheus metric with information about CI (merge request)
• Introduce a onboarding_complete setting for GitLab Pages (merge request)
• Nullify dependent associations in batches on user deletion (merge request)
• Add option to add DAST_SUBMIT_FIELD (merge request) GitLab Enterprise Edition
• Default group/project issues list page to Vue refactor (merge request)
• Move arkose settings into database (merge request)
• Bump GitLab Pages to 1.57.0 (merge request)
• Update Security Policy to use FIPS images when FIPS Mode is enabled (merge request) GitLab Enterprise Edition
• Add ttl expiration to user otp_secrets (merge request)
• Implement wiki async page load (merge request)
• Allow uploading audio and video in content editor (merge request)
• Add identifer to response (merge request) GitLab Enterprise Edition
• Implement first iteration of the agents REST API by @tuxtimo (merge request)
• Backfill routes namespace_id for projects (merge request)
• Add periodic re-aggregation worker for VSA (merge request)
• Fire a Snowplow events with its definition on FE (merge request)
• Added MATLAB template by @nbhoski (merge request)
• Add new route for DAST profile library (merge request) GitLab Enterprise Edition
• Allow SKIP=remote option to be specified during backup by @kakakikikeke (merge request)
• Add a feature flag to control when we could prevent users to login (merge request) GitLab Enterprise Edition
• Allow bypassing registration when joining project (merge request) GitLab Enterprise Edition
• Track blocking epics removed on usage data (merge request) GitLab Enterprise Edition
• Add application settings to support inactive project deletion feature (merge request)
• Add epics.relative_position column if missing (merge request)
• Include inherited group links on group members page by @wwwjon (merge request)
• Implement wiki page async load (merge request)
• Add omniauth provider AliCloud by @zhanglinjie (merge request)
• Different copy on trial/registration flow (merge request) GitLab Enterprise Edition
• Add support for the deduplicated container repositories size (merge request)
• Fire a Snowplow events with its definition on BE (merge request) GitLab Enterprise Edition
• Adding FIPS support to DAST API/API Fuzzing latest CI template (merge request) GitLab Enterprise Edition
• Repeat the captcha check during the login (merge request) GitLab Enterprise Edition
• Allow Invitations API to receive user_ids (merge request)
• Add groups release API (merge request)
• Adds container_registry_size to project_statistics (merge request)
• Add not null and delete cascade constraints on project_namespace_id (merge request)
• Enable incremental repository backups (merge request)
• Add minute limit banner (merge request)
• Create unique index on projects namespace_id and name (merge request)
• Add resolve thread to permission table (merge request)
• Add audit events for merge request settings (merge request) GitLab Enterprise Edition
• Support security report schema version 14.1.1 (merge request)
• Add ability to query awaiting billable members (merge request)
• Add arkose verify response details to custom attributes (merge request) GitLab Enterprise Edition
• Implement detailed github status reporting (merge request)
• Allow invitation service to receive user_ids (merge request)
• Create status index for batched migrations (merge request)
• Allow to put migrations on hold for some time (merge request)
• Add dast_submit_field to DAST site profile (merge request)
• Add missing authorization (merge request) GitLab Enterprise Edition
• Add Commit Author to Pipeline List Page by @Taucher2003 (merge request)
• Track blocking epics added on usage ping (merge request) GitLab Enterprise Edition
• Add clear cache button to dependency proxy (merge request)
• Track linked epics removed on usage ping (merge request) GitLab Enterprise Edition
• Added deprecation notice to cluster creation pages (merge request)
• Created new feature flags for free and paid users (merge request) GitLab Enterprise Edition
• Add new CI/CD template for Liquibase by @szandany (merge request)
• Added a clipboard button to the "Branches" page in "Repository" by @DavidRotert (merge request)
• Add changed_by field to API members entities by @remyj38 (merge request)
• Support executable flag in repository files API by @tuxtimo (merge request)
• Adds kind field to JobType (merge request)
• Merge branch 'ahmetkaramercan17-master-patch-18116' into 'master' (merge request)
• awardEmoji: Display custom emoji (merge request)
• Enable Value Stream Analytics consistency check (merge request) GitLab Enterprise Edition
• Create index on security_findings(scan_id, id) (merge request)
• Display the tier of the environment on page (merge request)
• Use the remote ip for the captcha check (merge request) GitLab Enterprise Edition
• Add page size selector to vulnerability report (merge request) GitLab Enterprise Edition
• Add a temporary specialized index on project_namespace_id (merge request)
• Support template button focus state by @ahmetkaramercan17 (merge request)
• Remove pipeline_schedules_with_tags feature flag by @KevSlashNull (merge request)
• Introduce new Group Feature model and database structure (merge request)
• Search the user by username or email (merge request) GitLab Enterprise Edition
• Add collapsed comparer for license_scanning (merge request) GitLab Enterprise Edition
• Add harbor registry list page by @orozot (merge request)
• Add commit diff stats (merge request)
• Fix project name duplicates and missing project namespace ids (merge request)
• Add user limit notification for invite members modal (merge request)
• Add Runner releases API URL to ApplicationSetting (merge request)
• Add link to create group in general project settings (merge request)
• Implement sort param for bulk imports API (merge request)
• Add notification_level to namespace_root_storage_statistics table (merge request)
• Detect projects built for Apple iOS platform (merge request)
• feat: Add CI_GITLAB_FIPS_MODE to predefined CI variables (merge request)
• Add a test group cleanup worker to remove test groups on production (merge request)
• Allow administrators to set active pipelines limits (merge request)
• New Group Runners administration view (merge request)
• Allow restore tasks to be skipped using SKIP (merge request)
• Track api usage of the gitlab cli (merge request)
• Add support for the nested repositories container registry access token (merge request)
• Handle auth error for container registry (merge request) GitLab Enterprise Edition
• Introduce API for Change Failure Rate DORA metric (merge request)
• Added a create cluster page for the FF (merge request)
• Ensure project backfilling has finished (merge request)
• Add endpoint to decide if the ArkoseLabs integration should be triggered (merge request)
• Add delete endpoint for related epics (merge request) GitLab Enterprise Edition
• FIPS SSH key configuration settings (merge request)
• Add creator_id to deploy_tokens (merge request)
• Mark Import trackers as timed out with entities (merge request)
• Add ArkoseLabs verify request service (merge request)
• Add DB Grafana config as application settings (merge request)
• When no iterations are present show empty state by @sstern (merge request) GitLab Enterprise Edition
• Add timeout status to bulk importer (merge request)
• Remove improved_emoji_picker feature flag (merge request)
• Expose github stats in realtime_changes private API (merge request)
• Trigger an email when seat overage occurs (merge request) GitLab Enterprise Edition
• Implement GET API for GATs and PATs by @tuxtimo (merge request)
• Implement history for project imports (merge request)
• Expose import url and status in projects API (merge request)
• Render plantuml/kroki diagrams in content editor (merge request)
• Add "Created on" & "Last activity" columns to groups and projects page (merge request)
• Implement API to get single Project Remote Mirror by @tuxtimo (merge request)
• Extend workers and services to support namespace for Security Policies (merge request) GitLab Enterprise Edition
• Graceful degradation for refs endpoint (merge request)
• Add create endpoint for related epics (merge request) GitLab Enterprise Edition
• Expose namespace_id in users GET API for admins by @tuxtimo (merge request)
• Add Project template for Middleman (merge request)
• Implement DELETE API for Remote Mirrors by @tuxtimo (merge request)
• Add target_id option to TodosMarkAllDone mutation (merge request)
• Add ability to enable SAST at project creation (merge request)
• Implement API to get single MR rule by @tuxtimo (merge request) GitLab Enterprise Edition
• Add Migration[2.0] that enforces restrict_gitlab_migration (merge request)
• Allow administrators to change plan limits via the UI (merge request)
• Enable service ping for error tracking features (merge request)
• Show expired security report information on "pipeline security tab" (merge request) GitLab Enterprise Edition
• Send a notification email when a new email address is added by @rpadovani (merge request)
• Include code_coverage in presented build for runner (merge request)

Fixed (147 changes)

• Remove geo database from db_config_names (merge request)
• Fixed spacing for the loading icon in time tracker (merge request)
• Increase the visibility of the keyboard shortcut for Global Search (merge request)
• Update stage name to use truncate (merge request)
• banzai: Get Custom Emoji from group as well (merge request)
• Add scope to CustomEmoji to find emoji for resource (merge request)
• AwardEmoji: Don't look up url for built-in emoji (merge request)
• Fix rendering failure for the 'Verified' badge (merge request)
• Update links to CI/CD docs (merge request)
• Add default scan execution policies stage to pipeline (merge request) GitLab Enterprise Edition
• Move VSA aggregation migration to migrate folder (merge request)
• Enable fix_related_environments_for_merge_requests FF by default (merge request)
• Fix the conditions when we scope to gitlab-org (merge request) GitLab Enterprise Edition
• Use lowercase values in user search ordering (merge request)
• Always select an environment's last deployment by deploy date (merge request)
• Fix infinite activities requests on profile (merge request)
• Adds timeout to notebook rendering (merge request)
• Fix query params parsing when NOT operator is used (merge request) GitLab Enterprise Edition
• Fix regression with logic to add user primary email to emails (merge request)
• Updated the terraform empty state (merge request)
• Allow empty future subscriptions on seat link sync (merge request) GitLab Enterprise Edition
• Fix import button width on Issue list page (merge request)
• Fixes infinite loop when rendering Ipynb Diffs (merge request)
• Merged MR notification: Fix sprintf evaluation by @inakimalerba (merge request)
• Guard against Deployment#deployed_by being nil (merge request)
• Search Autocomplete: Review how icons are generated (merge request)
• Switch from respond_with_navigational to redirect_to (merge request)
• Adds timeout for notebook rendering on CustomDiff (merge request)
• Change Create commit button variant to confirm (merge request)
• Remove ci_destroy_all_expired_service feature flag (merge request)
• Fix tooltip and truncation on incident list (merge request)
• Fix "sticky" user popovers (merge request)
• Include *.jira.com in Jira Connect CSP frame ancestors (merge request)
• Fix doc link to code suggestions in MR diff tab (merge request)
• Fix impersonation created_at audit event field (merge request) GitLab Enterprise Edition
• Add validation for invalid protected branches for (merge request) GitLab Enterprise Edition
• Keep edited timestamp when reacting to old notes (merge request)
• Remove early exit to allow marking as complete (merge request)
• Fix scroll to line number (merge request)
• Change pipeline status to canceled (merge request)
• Fix Value Stream Analytics doc links (merge request) GitLab Enterprise Edition
• Change button variant to confirm (merge request) GitLab Enterprise Edition
• Add ability to pre/post-date audit events (merge request)
• Fix undefined method error for Compare, Commit controllers (merge request)
• Do not try to update a deleted record (merge request)
• Hide New Epic button on boards for guest users (merge request) GitLab Enterprise Edition
• Fix Licensee::InvalidLicense exception (merge request)
• Revert mergeability check changes (merge request)
• Add the ability to parse CWE-{number} format (merge request) GitLab Enterprise Edition
• Fix required data for referenced commands (merge request)
• Fix missing clear cache text inside the dependency proxy dropdown (merge request)
• Add search keyboard shortcut to docs (merge request)
• Fix for code search bug in Safari when zoomed (merge request)
• Fix the rubygems extraction service to not create subtransactions (merge request)
• Fix package file cleanup worker with PyPI files (merge request)
• Fix stale object error in Environment Stop (merge request)
• Remove Milestone token wildcard values (merge request) GitLab Enterprise Edition
• Fix incorrect empty state for filtered tag list (merge request)
• Reconfigure DB load balancing connection on code reload (merge request)
• Fix URL blocker when object storage enabled but type is disabled (merge request)
• Count nil artifact size as zero when recalculating (merge request)
• Remove FF ci_fix_order_of_subsequent_jobs (merge request)
• Remove pending builds from the queue on conflict (merge request)
• Add polling for commit pipeline status (merge request)
• Include X-Forwarded-Host when proxying and rewriting Host in Workhorse (merge request)
• Fixed UX bug in agent creation modal (merge request)
• Do not use GOPATH in default CI template (merge request)
• Move checks from mergeable to mergeable_state? (merge request)
• Use article tag on embedded snippets by @joshbouganim (merge request)
• Fix iteration dates adding timezone offset (merge request) GitLab Enterprise Edition
• Add polling to commit box graph (merge request)
• Add customers-dot URL to CSP not only in dev (merge request)
• Preserve sibling elements in settings search (merge request)
• Show quick actions link when editing comments (merge request)
• Test scanner creation (merge request) GitLab Enterprise Edition
• Fix null argument handling in background migration Rake task (merge request)
• Quote project key in Jira JQL queries (merge request) GitLab Enterprise Edition
• Handle commit being nil (merge request)
• Check task with no-break space by @tchandelle (merge request)
• Avoid milestone icon shrinking (merge request)
• Update BulkImports::EntityWorker deduplication strategy (merge request)
• Handle nil values in Grape length limit validator (merge request)
• Add SAML default membership asynchronously (merge request)
• Set account string when 2fa creation fails (merge request)
• Fix scope of project export download throttling by @eggerd (merge request)
• Preload group root ancestor for Group Projects API (merge request)
• Update secret detection template to remove fetch on historic scan (merge request)
• Fix bug when decrementing open MR count (merge request)
• Do not schedule project import when migrating using GitLab Migration (merge request)
• Mark token encryption job as completed when there are no users (merge request)
• Allow ConnectionNotEstablished for DB rake tasks using validate_config (merge request)
• Fix link deletion (merge request)
• Allow auditor to view group VSA analytics (merge request) GitLab Enterprise Edition
• Allow auditor to read group contribution analytics (merge request) GitLab Enterprise Edition
• Handle escaped underscores in usernames (merge request)
• Fix 500 error when visiting a non-existing integration (merge request)
• Expire relevant ETag caches for realtime_changes endpoints (merge request)
• Allow auditor to view repository analytics (merge request) GitLab Enterprise Edition
• Fix GraphQL pagination for vulnerabilities (merge request) GitLab Enterprise Edition
• Use cached column list for members union query (merge request)
• Add unique keyField for Blob types (merge request)
• Allow auditor to view devops adoption analytics (merge request) GitLab Enterprise Edition
• Fixed receiveDashboardValidationWarningsFailure by @gotounix (merge request)
• Handle BulkImports::ExportStatus incorrect export status value (merge request)
• Refactor environment empty state to use scope (merge request)
• Remove attempted redirection on non-HTML requests (merge request)
• Fix project permission toggle behavior (merge request)
• Fix project permission toggle behavior
• Fixed crm db seed trying to seed non-root groups by @leetickett (merge request)
• Don't include compliance pipeline definition in scheduled security orchestration pipelines (merge request) GitLab Enterprise Edition
• Fix code quality report display by @nanmu42 (merge request)
• Raise exception when gitaly-backup could not be found (merge request)
• Replace success variant with the confirm (merge request) GitLab Enterprise Edition
• Updated ComplianceViolation merged_at where checks to use DATE() (merge request) GitLab Enterprise Edition
• Fix missing metrics for Sidekiq exporter server (merge request)
• Fix incorrect new group path in import history (merge request)
• Scope Geo replication details progressbar popup target by site ID (merge request) GitLab Enterprise Edition
• Allow auditor to view grop productivity analytics (merge request) GitLab Enterprise Edition
• Fix credentials detection for UrlSanitizer (merge request)
• Revert Protected Environment group access inheritence (merge request)
• Add an example path for gitaly_backup_path setting (merge request)
• Suggestions: use template from target project instead of source project by @trakos (merge request)
• Fix issue with delete project container text (merge request) GitLab Enterprise Edition
• Fix error in table when text is too long (merge request)
• Ensure ci_environment_status always return latest deployment status (merge request)
• Fix create issue in board with weight (merge request) GitLab Enterprise Edition
• Fix GraphQlController not logging sessionless user (merge request)
• Limit audit events controller to 31 days date range (merge request) GitLab Enterprise Edition
• Fix ComplianceViolationResolver pagination with sorting (merge request) GitLab Enterprise Edition
• Fix PA for projects in nested groups (merge request) GitLab Enterprise Edition
• Improve topic avatar copy (merge request)
• Handle CRM objects when moving groups by @leetickett (merge request)
• Always pass data payloads as a hash for hooks (merge request)
• Adding a forced UTF-8 conversion to prevent encoding errors (merge request)
• Allow admins to invite groups they are not a member of for group (merge request)
• Update manual job message for protected jobs (merge request) GitLab Enterprise Edition
• Use last focused markdown field for quoted reply (merge request)
• Retain membership record for a personal project’s owner after transfer (merge request)
• Improve backup logging (merge request)
• Refetch runners list data after runner is updated (merge request)
• Fix markdown header toolbar showing in compact preview view (merge request)
• Fix vulnerability list clearing when already-selected filter is clicked (merge request) GitLab Enterprise Edition
• Upgrade rack-proxy to v0.7.2 (merge request)
• Convert seconds to minutes for the shared runner usage chart (merge request) GitLab Enterprise Edition
• Fix NoMethodError for CommitController (merge request)
• Fix backups not working when feature_flags table does not exist (merge request)
• SAST flawfinder + semgrep: add missing extensions by @blueur (merge request)

Changed (227 changes)

• Geo Sites - Empty Search State (merge request) GitLab Enterprise Edition
• Use GlAvatar in environments dashboard (merge request)
• Reduce size of file header buttons (merge request)
• Remove setting link from branches page (merge request)
• Bump Gitaly to v14.10.0.pre.rc1 by @nick.thomas (merge request)
• Downgrade coverage-check approval rule to premium (merge request) GitLab Enterprise Edition
• Migrate localization checkbox (merge request)
• Remove security_scan_succeeded from code by @svdj (merge request) GitLab Enterprise Edition
• Make OmniAuth initializer return Geo proxied URL when it exists (merge request) GitLab Enterprise Edition
• Replace generic checkbox with GitLab UI component (merge request) GitLab Enterprise Edition
• This MR replaces generic checkbox (merge request) GitLab Enterprise Edition
• Update variant to confirm (merge request)
• Use GlBroadcastMessage in Broadcast Message admin settings page (merge request)
• Change snippet award emoji state from active to selected (merge request)
• Disable image deletion during registry migration (merge request)
• Use Pajamas components for checkboxes in webhook forms (merge request)
• Update GITLAB_KAS_VERSION to 14.10.0 (merge request)
• Update icon to long arrow (merge request)
• Pass hash instead of URI to Elasticsearch client (merge request) GitLab Enterprise Edition
• Port checkboxes in spam settings to pajamas (merge request)
• Add spotbugs to analyzer order (merge request)
• Update variant to confirm (merge request)
• Allow invitations API to handle user invites as well as emails (merge request)
• Use pajamas checkbox for group owners can manage default branch checkbox (merge request)
• Migrate button to GlButton variants (merge request)
• Updates checkboxes in Admin -> Settings -> General (merge request)
• Use Pajamas styled checkbox in Admin help page form (merge request)
• Migrate checkboxes on user preferences page to be Pajamas compliant (merge request)
• Change variant to confirm (merge request) GitLab Enterprise Edition
• Update auto-deploy-image to v2.23.0 (merge request)
• Change delete project confirmation modal to default size (merge request)
• Migrate checkboxes on admin group edit page to be Pajamas compliant (merge request)
• Change subgroups to use official subgroup icon (merge request)
• Prevent global user searches (merge request)
• Move diff overflow warning into component (merge request)
• Add more helpful error when not authorized to update (merge request)
• Hide IP Address label when no space is available (merge request)
• Re-backfill escalation statuses (merge request)
• Update monitor deprecation notices (merge request)
• Update unprotect branch button variant and size (merge request)
• Update checkbox third party offers to be Pajamas compliant (merge request)
• Migrate checkboxes on user notifications page to be Pajamas compliant (merge request)
• Migrate pipeline setting checkbox to Pajamas design system (merge request)
• Use pajamas checkbox for appearance header and footer form (merge request)
• Improve readability for MR review emails (merge request)
• Update brand header logo to match tanuki height (merge request)
• Port admin hooks form to be pajamas compliant (merge request)
• Migrate account limits checkboxes (merge request)
• Update corpus management file size formatting to appear cleaner (merge request) GitLab Enterprise Edition
• Migrate admin pages settings to GitLab UI (merge request)
• Replace generic checkbox with GitLab UI element (merge request)
• Replace generic checkbox with GitLab UI component (merge request)
• Replace generic chackbox with GitLab UI element (merge request)
• Enable vulnerability_reads_table by default (merge request) GitLab Enterprise Edition
• Replace generic checkbox with GitLab UI component (merge request)
• Allow unconfirmed users in non-admin searches (merge request) GitLab Enterprise Edition
• Replace generic checkbox with GitLab UI element (merge request)
• Run all deployment jobs for the common pipeline with same environment (merge request)
• Replace generic checkbox with GitLab UI component (merge request)
• Remove group_import_export feature flag (merge request)
• Migrate checkbox for performance optimization settings (merge request)
• Recommend Helm for installing the GitLab agent (merge request)
• Read encrypted properties (merge request)
• Use Pajamas checkbox for ldap_access_setting.html.haml (merge request) GitLab Enterprise Edition
• Geo status: Explicate item counts (merge request) GitLab Enterprise Edition
• Add GlButton classes to complete button migration (merge request)
• Change button label (merge request)
• Add remaining storage size to namespace storage email notification (merge request)
• Make WebIDE dropdown fullwidth (merge request)
• Modify container-scanning template to automatically apply FIPS image (merge request)
• This MR adds info badge to DAST configuration card (merge request) GitLab Enterprise Edition
• Move Alerts metric image API to CE (merge request)
• Migrate form checkbox in the Grafana admin settings (merge request)
• This MR replaces generic checkbox (merge request) GitLab Enterprise Edition
• This MR replaces generic checkbox (merge request) GitLab Enterprise Edition
• Add help link for escalation status dropdown (merge request) GitLab Enterprise Edition
• Use GlAvatar in environments dashboard (merge request)
• Enable vulnerability_report_pagination feature flag by default (merge request) GitLab Enterprise Edition
• Replace generic checkbox with GitLab UI component (merge request)
• Use pajamas checkbox for user access level form (merge request)
• Add HTML5 validation to about your company form (merge request) GitLab Enterprise Edition
• Document Kubernetes 1.21 as supported (merge request)
• Migrate snowplow checkbox (merge request)
• Migrate sourcegraph checkboxes (merge request)
• Add more verbose error message if 2FA required (merge request)
• Port app settings checkboxes (merge request)
• Port checkbox in pipeline schedules (merge request)
• Change variant to confirm (merge request)
• Change variant to confirm (merge request)
• Change variant to confirm (merge request)
• Add validation for confidentiality notes (merge request)
• Add status to DependencyProxy::Manifest type in GraphQL (merge request)
• Migrate admin email checkboxes (merge request)
• Migrate group auto devops form to GitLab UI (merge request)
• Change variant to confirm (merge request)
• Change variant to confirm (merge request)
• Update to rails 6.1.4.7 (merge request)
• Change variant to confirm (merge request)
• Adds a project scoped unique file name constraint for Secure Files (merge request)
• Improve accessibility of Admin application settings page (merge request)
• Updated encyption key generation for Secure Files (merge request)
• Find topic by case insensitive name for detail page by @wwwjon (merge request)
• Bump Gitaly server to v14.10.0.pre.rc1 (merge request)
• Update GlButton variant to confirm in test cases (merge request) GitLab Enterprise Edition
• Added educational text about K8s deployments (merge request)
• Polish Jira issue fields UI (merge request) GitLab Enterprise Edition
• Use SHA256 fingerprint instead of MD5 for LFS token secret (merge request)
• Fix: notify service i18n for MR and Issues by @JeremyWuuuuu (merge request)
• Remove the ip check from the captcha challenge check (merge request) GitLab Enterprise Edition
• Polish UI of epic roadmap view (merge request) GitLab Enterprise Edition
• Only admins can search blocked and banned users (merge request) GitLab Enterprise Edition
• Polish jira_connect users UI (merge request)
• Remove support for file checksum to Secure File uploads (merge request)
• Updated Kubernetes clusters UI (merge request)
• Ignore unindexed projects that have no repository (merge request) GitLab Enterprise Edition
• Add repository size to Plan Limits by @zhzhang93 (merge request)
• Refactor DAST Profiles to use GraphQL fragments (merge request) GitLab Enterprise Edition
• Keep labels sorted by title after mutation (merge request)
• Move liquibase template up one directory (merge request)
• Show UsageData buttons only if cache exists (merge request)
• Extend namespace gitlab_subscription API (merge request) GitLab Enterprise Edition
• Serialize and deserialize by default for LocalStorageSync component (merge request)
• Update group overview icons to match sidebar icons (merge request)
• Don't generate MD5 fingerprint in FIPS mode (merge request)
• Log deprecated/unsupported report schema versions (merge request) GitLab Enterprise Edition
• Update DAST site profile mutations to return payload (merge request) GitLab Enterprise Edition
• Update DAST Scanner Profile Mutations to return payload (merge request) GitLab Enterprise Edition
• Replace compliance dashboard with new compliance violations report (merge request) GitLab Enterprise Edition
• Do not allow to change note's confidentiality (merge request)
• Removing the ignored column project_pages_metadata.artifacts_archive_id (merge request)
• Merge topics with same name by @wwwjon (merge request)
• Updated language on vulnerability report page (merge request) GitLab Enterprise Edition
• Remove gray background from milestone page (merge request)
• Replace runners 'active' filters with 'paused' (merge request)
• Merge branch '356485-refactor-detected-licenses' into 'master' (merge request) GitLab Enterprise Edition
• Migrate alert to shared partial in import group (merge request)
• Ensure Workhorse AWS endpoint is only used for S3 (merge request)
• Use GlAvatar in design note (merge request)
• Change license compliance to use warning alert (merge request)
• Migrate alert to shared partial in notifications (merge request)
• Change user popover avatar to supported size (merge request)
• gitlab/setup_helper: Migrate Gitaly to use runtime directory (merge request)
• Feat(License): update license type names (merge request) GitLab Enterprise Edition
• Add binaries folder and remove build flags in Go CI-Template (merge request)
• Roadmap App with Tree View (merge request) GitLab Enterprise Edition
• Remove link to content editor feedback issue (merge request)
• Remove user_email_lookup_limit column (merge request)
• Change container registry policy banner (merge request)
• FIPS support for API keys endpoint (merge request)
• Migrate diff stats view to component (merge request)
• Adds status popover in runners table header (merge request)
• Add labels to the 'Note on MR' webhook payload (merge request)
• Update locked tooltip for project runners (merge request)
• Update the translations (merge request)
• Filter out project bots from user results on invite members (merge request)
• Switch grad hat icon with bulb for learn gitlab (merge request)
• Remove go to profile text from tooltips (merge request)
• Update "locked" tooltips and text (merge request)
• Add index to improve speed of vulnerabilities (merge request)
• Update button text in pipeline editor (merge request)
• Make the shared/groups/_dropdown Pajamas compliant (merge request)
• Update help popover icon (merge request)
• Support attn alias for attention (merge request)
• Issue 323331 - createFlash called twice in search fetchProjects (merge request)
• Update help link in UI to remove 'ee' (merge request)
• Issue 351689 - Prevent autocomplete searches under X characters (merge request)
• Update DAST profile summary to hide empty values (merge request) GitLab Enterprise Edition
• Updated wording for the agent token instructions (merge request)
• Optimise ci_namespace_mirrors_for_group_members to search prefix (merge request)
• Relocate runner IP Address to Runner column (merge request)
• Redirect deprecated SSE to Web IDE (merge request)
• Migrate export group alerts to be Pajamas compliant (merge request)
• Adjust ProjectExportWorker urgency (merge request)
• Specify that the committer email is checked (merge request) GitLab Enterprise Edition
• Use GlAvatar in project_list_item component (merge request)
• Remove the jira_connect_installation_update flag (merge request)
• Add stricter e-mail validation for on push notification by @lenikadali (merge request)
• Geo migrations settings are included by default (merge request) GitLab Enterprise Edition
• Default multi_json to Oj (merge request)
• Update button text for DAST On-demand scans (merge request) GitLab Enterprise Edition
• gitlab/setup_helper: Migrate Gitaly to use runtime directory (merge request)
• Hide "Users in Subscription" card for Ultimate plans (merge request) GitLab Enterprise Edition
• Update copy for DAST Profile library page (merge request) GitLab Enterprise Edition
• Period limit default Insights yaml (merge request) GitLab Enterprise Edition
• Change default search rate limits (merge request)
• Adjust icons and button wording for license compliance (merge request)
• Generalize empty array for all scanners (merge request) GitLab Enterprise Edition
• Update mutation to unassign security policy from a group (merge request) GitLab Enterprise Edition
• Force Host header rewrite in Workhorse for Geo proxying (merge request) GitLab Enterprise Edition
• Order projects by real last update by @wwwjon (merge request)
• Use neutral colours for nav background (merge request)
• Capture user feedback in Feedback not Meta for Google Cloud app (merge request)
• Remove unnecessary html respond (merge request)
• Use instrumentation classes for Service Ping metrics (merge request)
• Expose membership_lock on group detail API by @jtymes (merge request) GitLab Enterprise Edition
• Remove block_namespace_serialization feature flag (merge request)
• Update mutation to create and assign security policy to a group (merge request) GitLab Enterprise Edition
• This MR adds new empty state for corpus management (merge request) GitLab Enterprise Edition
• Adding upload checksum to Secure Files API (merge request)
• Update tooltips for runner statuses (merge request)
• Ignore format of unmatched route (merge request)
• Remove feature flag ci_use_new_monthly_minutes (merge request) GitLab Enterprise Edition
• Add overage check for members and groups (merge request) GitLab Enterprise Edition
• Global Search - Enable Header Search Default (merge request)
• More helpful empty states for milestones (merge request)
• Remove omniauth_login_minimal_scopes feature flag (merge request)
• Link to previous path when viewing blame on renamed files by @tchandelle (merge request)
• Use gl-drawer for pipeline editor help drawer (merge request)
• Limit the number of commits in push merge request emails (merge request)
• Remove integration_form_sections feature flag (merge request)
• Enable refactor_blob_viewer by default (merge request)
• Enforce schema validation for security reports (merge request) GitLab Enterprise Edition
• Use GraphQL alias to simplify vulnerability list id property (merge request) GitLab Enterprise Edition
• Ignore search param for autosave on issue new form (merge request)
• Remove reliance on Flash styling (merge request) GitLab Enterprise Edition
• Add BlocksUnsafeSerialization to Namespace (merge request)
• Update mutation to commit security policy to a group (merge request) GitLab Enterprise Edition
• Increase remote import URL character length limit from 512 to 2048 (merge request)
• Migrate alert to gitlab-ui (merge request)
• Add empty state for Instance OAuth app page (merge request)
• Prevent encrypted fields from being serialized by default (merge request)
• Added severity to issues REST API by @stingrayza (merge request)
• Don't trigger a sentry error for Gitaly exceptions (merge request)
• Add index to improve speed of vulnerability_reads (merge request)
• Update the runner page alerts (merge request)
• Alias user_email_lookup_limit to search_rate_limit (merge request)
• Create about your company page for registration flow (merge request) GitLab Enterprise Edition

Deprecated (4 changes)

• Deprecate modifying notes confidentiality on API (merge request)
• Deprecate updating an iteration's attributes via GraphQL (merge request) GitLab Enterprise Edition
• Deprecate manual iteration creation (merge request) GitLab Enterprise Edition
• Deprecate deleting iterations via the GraphQL API (merge request) GitLab Enterprise Edition

Removed (16 changes)

• Remove the "Upgrade {rocket-emoji}" link from the user dropdown menu (merge request) GitLab Enterprise Edition
• Remove runner list in group settings (merge request)
• Remove diff_settings_usage_data flag (merge request)
• Remove bitmap creation housekeeping option (merge request)
• Remove unused MD5 generation logic for InsecureKey (merge request)
• Remove users_expanding_widgets_usage_data feature flag (merge request)
• Remove mrc_api_use_raw_diffs_from_gitaly flag (merge request)
• Remove usage_data_diff_searches feature flag (merge request)
• Remove remove_import_data_on_failure feature flag (merge request)
• Removal notice for rerequest review (merge request)
• Cleanup api_kaminari_count_with_limit feature flag by @jaspreet-3911 (merge request)
• Remove invite_team_email experiment code (merge request)
• Remove new_dir_modal feature flag (merge request)
• Remove feature flag gitaly_backup (merge request)
• Remove Balsamiq File Preview (merge request)
• Revert "Add Sbom Survey Banner" (merge request)

Security (25 changes)

• Add authorization to composer package archive download by @trakos (merge request)
• Remove ci_safe_artifact_content_type feature flag (merge request)
• Fix artifact content-type raw endpoint (merge request)
• Disallow login if password matches a fixed list (merge request)
• Upgrade swagger-ui dependency (merge request)
• Update devise-two-factor to 4.0.2 (merge request)
• Fix kroki exploit (merge request)
• GitLab Pages Security Updates for 14.9 (merge request)
• Revert "JH need more complex passwords" (merge request)
• Escape original content in reference redactor (merge request)
• Fix blind SSRF when looking up SSH host keys for mirroring (merge request)
• Hide features a user shouldn't be able to see in a list of forks (merge request)
• Modify release link format check to avoid regex if string is too long (merge request)
• Project import maps members' created_by_id users based on source user ID (merge request)
• Monkey patch of RDoc to prevent Ruby segfault (merge request)
• Escape user provided string to prevent XSS (merge request)
• Masks variables in error messages (merge request)
• Security fix for CI/CD analytics visibility (merge request)
• Limit the number of tags associated with a CI runner (merge request)
• Latest commit exposed through fork of a private project (merge request)
• Redact InvalidURIError error messages (merge request)
• Fix access for approval rules API (merge request)
• Fix Asana integration restricted branch filter (merge request)
• Add state param validation for Bitbucket OAuth flow (merge request)
• Fix artifacts content-type (merge request)

Performance (19 changes)

• Optimise Security::Finding cleanup by clearing build_id scope (merge request) GitLab Enterprise Edition
• Drop trace-inclusive artifact removal index from ci_job_artifacts (merge request)
• Make User#ci_owned_runners to use unnest index instead of GIN (merge request)
• Fix remaining N+1 queries in EnvironmentSerializer (merge request)
• Remove ci_artifact_fast_removal_large_loop_limit feature flag (merge request)
• Finalize asynchronously built index (merge request)
• Resolve "ActionView::Template::Error: 4:Deadline Exceeded." (merge request)
• Optimize the query on Environment Detail page (merge request)
• Improve query performance of attention requests count (merge request)
• Fix discussions N+1 queries (merge request)
• Optimize User#ci_owned_runners query V3 (merge request)
• Do not include highlighted_diff_email css for each note (merge request)
• Schedule async index build for ci_job_artifacts (merge request)
• Registry import enqueuer uses migration_plan (merge request) GitLab Enterprise Edition
• Prevent loading wiki content for destroy and diff actions (merge request)
• Make the Invite Modal load conditionally (merge request)
• Load highlight.js languages asynchronously (merge request)
• Move updating statistics logic outside of the transaction (merge request) GitLab Enterprise Edition
• Caches the by email lookup logic for user in member creation (merge request)

Other (66 changes)

• Finalize traversal_ids background migrations (merge request)
• Add tests for vulnerability_report.vue (merge request) GitLab Enterprise Edition
• Use StatisticsCard in usage_quotas/seats (merge request) GitLab Enterprise Edition
• Add new packages build infos finder (merge request)
• Fix usage of distance_of_time_in_words_to_now by @edith007 (merge request)
• Add unique index for work item type names with no namespace (merge request)
• Fix Style/OpenStructUse offenses by @edith007 (merge request)
• Fix Style/OpenStructUse offenses by using Struct by @edith007 (merge request)
• Refactor pipeline schedule variables (merge request)
• Bump Gitlab Shell version (merge request)
• Refactor: Introduce BaseThirdPartyWiki by @chaomao (merge request)
• Update RelationExportService to not export if recently exported (merge request)
• Makes BackfillWorkItemTypeIdOnIssues migration more efficient (merge request)
• Backfill dependency proxy size in namespace stats (merge request)
• Use statistics card in storage app (merge request) GitLab Enterprise Edition
• Set usage_activity_by_stage_monthly.create.merge_requests to removed (merge request)
• Remove obsolete wiki notes (merge request)
• Chore: remove track_editor_edit_actions FF (merge request)
• Removes ci_validate_job_length ff (merge request)
• Update BulkImports::PipelineWorker Ndjson perform delay (merge request)
• Remove import_project_from_remote_file ff (merge request)
• Add temp index for notes without discussion_id (merge request)
• Document how to add a new built-in project template (merge request)
• Fix Style/OpenStructUse offenses by @edith007 (merge request)
• Geo: (SSF) State machine refactoring (merge request)
• Run project after import when GitLab Migration is complete (merge request)
• Fix Style/OpenStructUse offenses by @edith007 (merge request)
• When building from source, require nodeJS >= 14.15.0 (merge request)
• Remove switch editing controls feature flag (merge request)
• Simplify third party container repository delete tags services by @edith007 (merge request)
• Remove the unused instance variable from the controller by @edith007 (merge request)
• Expose HTTP code during GitHub importer errors (merge request)
• Workhorse: bump gitaly client (merge request)
• Bump Gitlab Shell version (merge request)
• Remove header_read_timeout_buffered_io featureflag (merge request)
• Move compliance framework auditor to a new class (merge request) GitLab Enterprise Edition
• Cleanup secret variables refactoring in variables builder (merge request)
• Resolve Performance/DeletePrefix rubocop offenses by @edith007 (merge request) GitLab Enterprise Edition
• Fix typo in milestones empty state (merge request)
• Added read_usage_quotas ability to ProjectPolicy (merge request)
• Update API doc to show correct return type (merge request) GitLab Enterprise Edition
• Clean up after fixing issue when admin changes email (merge request)
• Remove use_model_load_balancing feature flag (merge request)
• Lazy initialization for user popovers by @cyberap (merge request)
• Migrate groups show page to GlTabs (merge request)
• Track related epics added on usage ping (merge request) GitLab Enterprise Edition
• Remove verify_protected_tags_for_pull_mirror feature flag (merge request)
• Remove feature flag spread_parallel_import (merge request)
• Resolve Rails/FindById rubocop offenses by @edith007 (merge request) GitLab Enterprise Edition
• Remove admin_application_settings_service_usage_data_center feature flag (merge request)
• Cleanup draft column data (merge request)
• Resolve Rails/BelongsTo rubocop offenses by @edith007 (merge request)
• Remove bulk_expire_project_artifacts feature flag (merge request)
• Backfill work_item_type_id for all Issues (merge request)
• Remove geo_token_user_authentication feature flag (merge request) GitLab Enterprise Edition
• Modeling for Multi Access Levels in Deployment Approval (merge request)
• Update GitLab Runner Helm Chart to 0.39.0 (merge request)
• Cleanup show_report_validation_warnings flag (merge request)
• Add tests for vulnerability report pagination feature (merge request) GitLab Enterprise Edition
• Remove temp index on id in vulnerability_occurrences (merge request)
• Fix the offences introduced by Performance/OpenStruct by @edith007 (merge request)
• Move BASE_FILTERS from filters/constants to security_dashboard/helpers (merge request) GitLab Enterprise Edition
• Add migration_plan to container_repositories (merge request)
• Bump Gitlab Shell version (merge request)
• Convert ci_builds-runner_id FK to LFK (merge request)
• Fix related epic links and issue links specs fixtures (merge request)