GitLab

There are only three templates and they are framework-specific. The are
removed to lower complexity of the project creation page.

2FA could be enabled but still was not usedi on sign-in.

The following formerly separate commits have been merged in:

* Adjust 'Sign in' button for GitLab's CSRF protection

  GitLab introduced CSRF protection for authentication requests in
  571ba5a7. The 'Sign in' button has been
  adjusted to send a POST request.

* Opt out of turbolinks for 'Sign in' button

This restriction does not apply to admins.

This restriction does not apply to admins.

The project variable can hold an object which is not an instance of
Project (e.g. ProjectWiki). In this case, visibility_level is not
defined.

Additionally, the prompt to set a password is no longer shown for CAS
users.

[ci skip]

[ci skip]

Fix private feature Elasticsearch leak

See merge request gitlab/gitlabhq!3451

Add spec to test different combinations.
Accept string for required_minimum_access_level
Allow more flexible project membership query

Fix broken specs : Generate new GPG key in place of expired one

Closes #32956

See merge request gitlab-org/gitlab!17853

[ci skip]

Fix Gitaly SearchBlobs flag RPC injection [Gitaly v1.59.3]

See merge request gitlab/gitlabhq!3434

Check that SAML identity linking validates the origin of the request

See merge request gitlab/gitlabhq!3377

Merge branch 'security-12717-fix-confidential-issue-assignee-visible-to-guests-12-2' into '12-2-stable'

Display only participants that user has permission to see

See merge request gitlab/gitlabhq!3402

Prevent Bypassing Email Verification using Salesforce

See merge request gitlab/gitlabhq!3406

Only render fixed number of mermaid blocks

See merge request gitlab/gitlabhq!3412

Hide disabled project milestones in project settings on group level

See merge request gitlab/gitlabhq!3415

Redirect user to root path after unsubscribing from private resource

See merge request gitlab/gitlabhq!3417

Add policy check if cross reference system notes are accessible

See merge request gitlab/gitlabhq!3427

Cancel all running CI jobs when user is blocked

See merge request gitlab/gitlabhq!3437

Filter not accessible label events

See merge request gitlab/gitlabhq!3441