This restriction does not apply to admins.

This restriction does not apply to admins.

The project variable can hold an object which is not an instance of
Project (e.g. ProjectWiki). In this case, visibility_level is not
defined.

Additionally, the prompt to set a password is no longer shown for CAS
users.

[ci skip]

Prepare 10.0.7 security release

See merge request gitlab/gitlabhq!2243

prevent potential XSS when editing comment

See merge request gitlab/gitlabhq!2246

(cherry picked from commit e5812c01f22911c9bf8728a3e0b5376410ea14ff)

d10529dc prevent potential XSS when editing comment

Port for security-10-0: Ensure project wiki visibility guidelines are met

See merge request gitlab/gitlabhq!2229

(cherry picked from commit 5428f61d543b758ce78f54b6386bfe3ef06a4958)

6ceb0ae1 Ensure project wiki visibility guidelines are met
cdd3ce30 Fix specs so they don't depend of the new project view type

[BACKPORT 10.0] Prevent creating issues through API without having permissions

See merge request gitlab/gitlabhq!2230

(cherry picked from commit ca7a2ff7cb427202f665e7deeac1041e24f5ecbe)

3d3d7aa7 Prevent creating issues through API without having permissions

[10.0] Ensure we expose group projects using GroupProjectsFinder

See merge request gitlab/gitlabhq!2236

(cherry picked from commit 2129571f879e111949d0a3ac5e63ababc818e4f9)

a906cd45 Ensure we expose group projects using GroupProjectsFinder

(10.0) Avoid partial partial email adresses for matching

See merge request gitlab/gitlabhq!2233

(cherry picked from commit d6c734fcfd72e9ae0c58011c7cb0b16201be1cfa)

0e21b315 Don't allow searching for partial user emails

Add 10.0.6 security fixes to CHANGELOG.md

See merge request gitlab-org/gitlab-ce!15303

[ci skip]

(backport) Include X-Content-Type-Options (XCTO) header into API responses

See merge request gitlab/gitlabhq!2215

(cherry picked from commit 2f295a11ca2f0790c5a95f1f97f049b15609f045)

a99ef1c6 Include X-Content-Type-Options (XCTO) header into API responses

Replace SSRF resolver with Addrinfo.getaddrinfo to include alternative localhost versions (10-0)

See merge request gitlab/gitlabhq!2220

(cherry picked from commit be1198563d39779e002530e070a3e18cfeacacaa)

0e21fb35 Replace SSRF resolver with Addrinfo.getaddrinfo to include alternative localhost versions

[ci skip]

Prepare 10.0.5 release

See merge request gitlab-org/gitlab-ce!14935

Stable port of breadcrumb-item-links

See merge request gitlab-org/gitlab-ce!14623

Resolve "Cannot rename a hashed project"

Closes #38202

See merge request gitlab-org/gitlab-ce!14428
# Conflicts:
#	app/models/project.rb
#	spec/services/projects/create_service_spec.rb
#	spec/services/projects/update_service_spec.rb

Merge branch 'pawel/bump_prometheus_gem_to_fix_read_all_values_returning_bad_data-39504' into 'master'

Update Prometheus Gem to fix problem caused by using wrong data offsets

See merge request gitlab-org/gitlab-ce!15081

Remove "boards" from TOP_LEVEL_ROUTES

Closes #39073

See merge request gitlab-org/gitlab-ce!14861
# Conflicts:
#	config/routes.rb