GitLab

The following formerly separate commits have been merged in:

* Adjust 'Sign in' button for GitLab's CSRF protection

  GitLab introduced CSRF protection for authentication requests in
  571ba5a7. The 'Sign in' button has been
  adjusted to send a POST request.

* Opt out of turbolinks for 'Sign in' button

This restriction does not apply to admins.

This restriction does not apply to admins.

The project variable can hold an object which is not an instance of
Project (e.g. ProjectWiki). In this case, visibility_level is not
defined.

Additionally, the prompt to set a password is no longer shown for CAS
users.

[ci skip]

Fix the reCAPTCHA spec failures by not rendering the widget in test mode

Closes #45138

See merge request gitlab-org/gitlab-ce!18235

Sanitize user name to avoid XSS attacks

See merge request gitlab/gitlabhq!2374

Downgrade MySQL CI service from 8.0 to 5.7

Closes #45606

See merge request gitlab-org/gitlab-ce!18512

[ci skip]

[10.5] Prevent notes on confidential issues from being sent to chat

See merge request gitlab/gitlabhq!2339

Fix XSS on commit diff view

See merge request gitlab/gitlabhq!2323

Fix milestone bug

See merge request gitlab/gitlabhq!2344

[ci skip]

Prepare 10.5.6

See merge request gitlab/gitlabhq!2357

[10.5] Fix GitLab Auth0 integration signs in the wrong user

See merge request gitlab/gitlabhq!2353

[10.5] Server Side Request Forgery in Services and Web Hooks

See merge request gitlab/gitlabhq!2348

[ci skip]

Prepare 10.5.5 release

See merge request gitlab-org/gitlab-ce!17779

Remove double caching of Repository#empty?

Closes #43882

See merge request gitlab-org/gitlab-ce!17588

I copied the whole `#move_dir` spec from master and flipped project factory traits `:hashed` and `:legacy_storage` to match the 10.5 branch (since in that branch, legacy storage is default, but in master, hashed is default).

Fix moving local, unhashed upload or pages directories during group transfer

Closes #43993

See merge request gitlab-org/gitlab-ce!17658

Fix code and wiki search results when filename is non-ASCII

See merge request gitlab-org/gitlab-ce!17685

Adding missing indexes migrations from taggings table

Closes #43927

See merge request gitlab-org/gitlab-ce!17563

Add index on section_name_id on ci_build_trace_sections table

Closes #44008

See merge request gitlab-org/gitlab-ce!17632

Fix delete milestone button showing up for all users

Closes #43778

See merge request gitlab-org/gitlab-ce!17576