The following formerly separate commits have been merged in:

* Adjust 'Sign in' button for GitLab's CSRF protection

  GitLab introduced CSRF protection for authentication requests in
  571ba5a7. The 'Sign in' button has been
  adjusted to send a POST request.

* Opt out of turbolinks for 'Sign in' button

This restriction does not apply to admins.

This restriction does not apply to admins.

The project variable can hold an object which is not an instance of
Project (e.g. ProjectWiki). In this case, visibility_level is not
defined.

Additionally, the prompt to set a password is no longer shown for CAS
users.

[ci skip]

[11.4] Fix Token lookup for Git over HTTP and registry authentication

See merge request gitlab/gitlabhq!2577

[ci skip]

Block additional localhost addresses in UrlBlocker

See merge request gitlab/gitlabhq!2487

[11.4] Escape issue title while template rendering to prevent XSS

See merge request gitlab/gitlabhq!2571

[11.4] Redact unsubscribe links in issuable texts

See merge request gitlab/gitlabhq!2565

: [11.4] Resolve "Sensitive information is stored in browser history"

See merge request gitlab/gitlabhq!2562

[11.4] Validate Wiki attachments are valid temporary files

See merge request gitlab/gitlabhq!2569

[11.4] JUnit test reports endpoint exposes full stack trace in production mode

See merge request gitlab/gitlabhq!2517

[11.4] Persist only SHA digest of PersonalAccessToken#token

See merge request gitlab/gitlabhq!2551

[ci skip]

[11.4] Fix XSS in MR source branch name

See merge request gitlab/gitlabhq!2550

[11.4] Prevent SSRF attacks in HipChat integration

See merge request gitlab/gitlabhq!2547

[ci skip]

Prepare 11.4 RC8 release

See merge request gitlab-org/gitlab-ce!22452

Add Git protocol v2 docs

See merge request gitlab-org/gitlab-ce!22227

QA: Add support for pushing and viewing files

See merge request gitlab-org/gitlab-ce!21911

Prepare 11.4 RC7 release

See merge request gitlab-org/gitlab-ce!22392

Fix link to 'when delayed' YAML configuration item

See merge request gitlab-org/gitlab-ce!22349

Allow Issue and Merge Request sidebar to be toggled from collapsed state

Closes #52532

See merge request gitlab-org/gitlab-ce!22353