Changelog: other
EE: true

Changelog: fixed

Currently embedded videos are fixed at 400px wide in descriptions and
comments unless a specified width is passed. This is different from the
behavior of images, which default to their natural width with a max of
100%.

This MR removes the default `width="400"` attribute on video elements
and styles them to display at their natural width with a maximum width
of 100% of the parent element, to match the behavior of images.

Changelog: changed

This prevents the cherry-pick commit message from getting processed
incorrectly when preparing it for html.

Changelog: fixed

Co-authored-by: Janis Altherr <jaltherr@gitlab.com>

This reverts merge request !163899

Replaces instances of .avatar with .gl-avatar and removes
old CSS.

Changelog: changed

Merge branch 'security-banzai-extra-2' into 'master'

See merge request gitlab-org/security/gitlab!4256

Changelog: security

Changelog: fixed

Merge branch 'security-disable-raw-html-quick-action' into 'master'

See merge request gitlab-org/security/gitlab!4224

Changelog: security

Style/Lambda offenses fixed across 64 files

Changelog: other
EE: true

Merge branch 'security-redos-autolink-filter' into 'master'

See merge request gitlab-org/security/gitlab!4017

Changelog: security

Merge branch 'security-banzai-pipeline' into 'master'

See merge request gitlab-org/security/gitlab!4099

Changelog: security

Co-authored-by: Tyler Amos <tamos@gitlab.com>

Now that issues/work_items can exist at both the
project and group level, we are moving towards a more
generic parent name (namespace) so we can use it in the
frontend to render popovers

Adding a group context to the banzai pipeline
allows notes to render markdown on group level work item
notes that reference group level work items and other
referrables

Changelog: added

Changelog: fixed

Allow referenceing group level work items by
URL or references (short, long)

An invalid href was being sanitzed/removed,
causing code to fail. Ignore any wiki links that
don’t have an href.

Changelog: fixed

The feature flag has been enabled on GitLab.com for a week so we can
remove this

Changelog: other

Changelog: other

This uses `comrak` support to parse wiki links.

Changes URLs to markdown uploads to use project / group IDs instead of
project / group paths

Merge branch 'security-fix-gollum-regex' into 'master'

See merge request gitlab-org/security/gitlab!4021

Changelog: security

Merge branch 'security-fix-gollum-regex' into 'master'

See merge request gitlab-org/security/gitlab!4021

Changelog: security

Changelog: changed

Merge branch 'security-fix-escape-filters' into 'master'

See merge request gitlab-org/security/gitlab!3964

Changelog: security

Can now use the native support in the markdown parser

Changelog: fixed

Changed: changed

Removes the FF for simplified labels.

Changelog: removed