Adds the ability to query followed users' activity throught the GraphQL
API.

This flag is enabled for .com version since last 3 weeks or so. There had been
no related incidents or functionliaty issues. The functionality is also
verified

Changelog: removed

Added regular expression check for manage endpoint

Added regular expression check for manage endpoint

Changes for improving groups spec

In https://gitlab.com/gitlab-org/gitlab/-/merge_requests/176108, we
added a new implementation of Redis session store
`Gitlab::Sessions::CacheStore` which is based on
`ActionDispatch::Session::CacheStore` in order to support migration to
Redis Cluster for .com. The whole migration plan can be found in
https://gitlab.com/gitlab-com/gl-infra/data-access/durability/team/-/issues/35.

This removes the old `Gitlab::Sessions::RedisStore` as the redis session
store and the environment variable
`USE_REDIS_CACHE_STORE_AS_SESSION_STORE` used to toggle the initializer
to use the new store.

Self-managed instances wouldn't be affected since we have
`Gitlab::Sessions::CacheStoreCoder` to ensure compatibility within the
two stores. More context at https://gitlab.com/gitlab-com/gl-infra/data-access/durability/team/-/issues/35#note_2283399167

Changelog: other

Changelog: other

This MR enables the importer_user_mapping_reassignment_csv flag by
default.

Changelog: added

Changelog: changed

Users can now set Docker Hub credentials (username/password, PAT or
OAT) in the dependency proxy for containers. When pulling images
that are not known by the dependency proxy, they will be pulled
from Docker Hub using the provided credentials.

Update the dependency proxy documentation.

Changelog: changed

Makes the todos bulk editing feature enabled by default.

Changelog: added

This feature will be released with the feature flag
branch_rule_squash_settings enabled by default.

Changelog: changed

Disable cache on the CI and default to metadata cache
for dependency-cruiser

Issue: https://gitlab.com/gitlab-org/gitlab/-/issues/517491

Changelog: added

This change updates the logic of
upserting and deleting policy rule by rule_index
when a security policy is updated.

EE: true
Changelog: fixed

This reverts merge request !183259

Using the same create service for both REST API and GraphQL improves
the consistency and DRY.

This adds `diff_files_metadata` endpoint for each resource that
we support in rapid diffs (e.g. `MergeRequest`, `Commit` and
`Compare`).

This is behind `rapid_diffs` FF.

This adds internal event tracking to several events
in placeholder reassignment.

Changelog: other

This sets the default for :reassignment_throttling
to true.

Changelog: other

Previously, the file size check required a complete graph walk,
which was slow.
This change optimizes the process by using an existing method
that checks only the quarantine directory, improving performance.

Additionally, since this is an EE feature,
a new EE-specific FileSizeCheck class was introduced
to retrieve and apply the push rule file size limit

Changelog: changed
EE: true

Add a callback to backfill project with pipeline variables table on new records
Address all the comments
Skip id primary key in favor of project_id
Add a trigger function instead of model callback
Add a trigger migration
Allow projects_with_pipeline_variables cross database

Changelog: added

This change is behind a FF default_enabled: true

Changelog: changed

In GitLab 17.6, the package protection feature was made generally
available. But, this realease did not include
the deletion package protection,
see https://gitlab.com/gitlab-org/gitlab/-/issues/472655 .

The attribute `minimum_access_level_for_delete` that was introduced
in the MR: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/179739 .

This attribute is integrated in this MR in order to prevent the deletion
of delete protected packages.

At the moment, the attribute `minimum_access_level_for_delete` cannot be
updated via UI, REST nor GraphQL API. This possibility will be added in
a future iteration.

Changelog: added

Changelog: other

- Behind feature flag `vscode_extension_marketplace_settings`
- https://gitlab.com/gitlab-org/gitlab/-/issues/508977

Use `scripts/internal_events/cli.rb` to generate an event and a metric
Track the metric on #show in the controller
Add test to see that the metric was tracked

This table stores the CI pipeline inputs values configured when creating
a pipeline schedule. It belongs to a pipeline schedule, ensures that the
input keys are unique, and encrypts the input values. It is on the
gitlab_ci database schema because pipeline schedules are also stored on
the CI schema.

Changelog: added
Issue: https://gitlab.com/gitlab-org/gitlab/-/issues/519960

Contributes to https://gitlab.com/gitlab-org/gitlab/-/issues/491282

**Problem**

Currently, diff scan is applied only to git pushes via ssh/https
protocol, because there was no way to distiguishing between RPC actions
that triggered the scan.

For example, we want to skip the check for merge commit creation but
verify commits created via WebIDE.

https://gitlab.com/gitlab-org/gitlab/-/issues/423992 introduces an
option to pass additional context from Gitaly RPC endpoint to the
checker code.

**Solution**

* Provide `enable_secrets_check` to selected RPC endpoints
* Run diff scan for checks triggered by calls to these endpoints

In https://gitlab.com/groups/gitlab-com/gl-infra/data-access/durability/-/epics/9, we're migrating Redis Sessions (Redis sentinel) to a new Redis Cluster Sessions to horizontally scale the CPU.
Once the gprd migration https://gitlab.com/gitlab-com/gl-infra/production/-/issues/19252 is done, we can remove the migration helpers, Gitlab::Redis::ClusterSessions and its related feature flags.
Part of cleanup post migration in https://gitlab.com/gitlab-com/gl-infra/data-access/durability/team/-/issues/34

Changelog: other

Maxime Orefice 创作于 3 weeks ago ，Maxime Orefice 提交于 2 weeks ago

Changelog: fixed

Changelog: removed

The feature flag was never enabled by default or
on GitLab.com.

Changelog: other
EE: true

Releases a new experience on `Your work` -> `Projects`.
Default tab is now `Contributed`, improved layout,
add Delete and Edit actions.

Changelog: changed

Changelog: added

Before this change, we registered web_hook_logs for partitioning in the
class, as normal. However this caused a bug if the feature flag
web_hook_logs_daily_enabled was set because the feature flag
changed the table_name read by the partition manager.

Fix this by directly registering both web_hook_logs tables directly in
the initializer, bypassing the feature flag and keeping tables
compatible with both feature flag states.

Fixes https://gitlab.com/gitlab-org/gitlab/-/issues/523921

Add LFK on ci_running_builds/ci_runners

Changelog: other