This allows admin access to CI/CD variables as a customizable ability,
so that it can be added onto any base role.

EE: true

Remove quote wrapping limitation from KAS docs

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/144162



Merged-by: Timo Furrer <tfurrer@gitlab.com>
Approved-by: Mikhail Mazurskiy <mmazurskiy@gitlab.com>
Approved-by: Phillip Wells <pwells@gitlab.com>

Add Group/Project token expiring soon notifications

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/144172



Merged-by: Fiona Neill <fneill@gitlab.com>
Co-authored-by: Paul Murray <pmurray@gitlab.com>

Note support for Grype is deprecated

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/144428



Merged-by: Fiona Neill <fneill@gitlab.com>
Approved-by: Fiona Neill <fneill@gitlab.com>
Co-authored-by: Russell Dickenson <rdickenson@gitlab.com>

Ensure at least one permission is selected during member role creation

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/143616



Merged-by: Jarka Košanová <jarka@gitlab.com>
Approved-by: Jarka Košanová <jarka@gitlab.com>
Reviewed-by: Jarka Košanová <jarka@gitlab.com>
Reviewed-by: Hinam Mehra <hmehra@gitlab.com>
Co-authored-by: Hinam Mehra <hmehra@gitlab.com>

Changelog: added
EE: true

Improve tracing analytics

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/144282



Merged-by: Vitaly Slobodin <vslobodin@gitlab.com>
Approved-by: Lee Tickett <ltickett@gitlab.com>
Approved-by: Vitaly Slobodin <vslobodin@gitlab.com>
Reviewed-by: Lee Tickett <ltickett@gitlab.com>
Co-authored-by: Daniele Rossetti <drossetti@gitlab.com>

- Make analytics API call not blocking
- Add skeleton loader to analytics component
- Fix error rate parsing and label
- Move resizing logic to parent
- Removed some dead come from TracingList component

Add examples to refactor

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/144253



Merged-by: Jon Glassman <jglassman@gitlab.com>
Approved-by: Jan Provaznik <jprovaznik@gitlab.com>
Approved-by: Jon Glassman <jglassman@gitlab.com>
Approved-by: Torsten Linz <tlinz@gitlab.com>
Reviewed-by: Torsten Linz <tlinz@gitlab.com>
Co-authored-by: Kevin Chu <kchu@gitlab.com>

Link to Jira user requirements

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/144437



Merged-by: Ashraf Khamis <akhamis@gitlab.com>
Approved-by: Ashraf Khamis <akhamis@gitlab.com>
Co-authored-by: Anton Smith <asmith@gitlab.com>

Removes direct data manipulation from abuse_category_selector_spec

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/144239



Merged-by: Savas Vedova <svedova@gitlab.com>
Approved-by: Ross Byrne <robyrne@gitlab.com>
Approved-by: Savas Vedova <svedova@gitlab.com>
Co-authored-by: Artur Fedorov <afedorov@gitlab.com>

Show subscription next term start date

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/143439



Merged-by: Natalia Tepluhina <ntepluhina@gitlab.com>
Approved-by: Natalia Tepluhina <ntepluhina@gitlab.com>
Reviewed-by: Natalia Tepluhina <ntepluhina@gitlab.com>
Reviewed-by: Laura Callahan <lmeckley@gitlab.com>
Co-authored-by: Ryan Cobb <rcobb@gitlab.com>

Show a subscriptions next term start date on the billing page.

Changelog: changed
EE: true

Fixes rendering issue with the sidebar on printed pages

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/144321



Merged-by: David Pisek <dpisek@gitlab.com>
Approved-by: Scott de Jonge <sdejonge@gitlab.com>
Approved-by: David Pisek <dpisek@gitlab.com>
Co-authored-by: Sam Beckham <sbeckham@gitlab.com>

Update CI to use Debian bookworm

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/144151



Merged-by: Rémy Coutable <remy@rymai.me>
Approved-by: Rémy Coutable <remy@rymai.me>
Approved-by: Ash McKenzie <amckenzie@gitlab.com>
Reviewed-by: Rémy Coutable <remy@rymai.me>
Co-authored-by: Stan Hu <stanhu@gmail.com>

Allow signing in to Active Directory with smart card

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/143721



Merged-by: Imre Farkas <ifarkas@gitlab.com>
Approved-by: Imre Farkas <ifarkas@gitlab.com>
Approved-by: Drew Blessing <drew@gitlab.com>
Reviewed-by: Drew Blessing <drew@gitlab.com>
Reviewed-by: Imre Farkas <ifarkas@gitlab.com>
Co-authored-by: agius <andrew@atevans.com>
Co-authored-by: Jon Glassman <jglassman@gitlab.com>

Currently smart card / certificate-based sign-in can authenticate
against an LDAP server, unless that server is Active Directory based.
This change allows using certificates such as those hosted on smart
cards to authenticate against Active Directory servers in a basic way.

Changelog: added
EE: true

Merge branch 'ag/432593-it-should-be-possible-to-disable-allow-user-sign-up-but-still-invite-users-by-email-address' into 'master' 

Draft: Revert "Disallow email invitation when email signup is not active"

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/144225



Merged-by: Paul Gascou-Vaillancourt <pgascouvaillancourt@gitlab.com>
Approved-by: Michael Becker <11881043-wandering_person@users.noreply.gitlab.com>
Approved-by: Aakriti Gupta <agupta@gitlab.com>
Approved-by: Martin Čavoj <mcavoj@gitlab.com>
Reviewed-by: Martin Čavoj <mcavoj@gitlab.com>
Co-authored-by: Angelo Gulina <agulina@gitlab.com>

Improve documentation around extract coverage for go

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/144387



Merged-by: Marius Bobin <mbobin@gitlab.com>
Approved-by: Marius Bobin <mbobin@gitlab.com>
Co-authored-by: Ash McKenzie <amckenzie@gitlab.com>

Show private group invited members to shared group members

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/143651



Merged-by: Huzaifa Iftikhar <hiftikhar@gitlab.com>
Approved-by: Huzaifa Iftikhar <hiftikhar@gitlab.com>
Approved-by: James Nutt <jnutt@gitlab.com>
Approved-by: Adam Hegyi <ahegyi@gitlab.com>
Reviewed-by: Alex Pooley <apooley@gitlab.com>
Reviewed-by: Abdul Wadood <awadood@gitlab.com>
Reviewed-by: James Nutt <jnutt@gitlab.com>
Co-authored-by: Abdul Wadood <awadood@gitlab.com>

We're doing this to enable shared group members to see who all can
access the group which will enable better collaboration among all the
group members.

Before we enable the added feature flag we will make changes to hide
the source of membership if the current user is not part of the
private invited group.

Add Duo-Pro telemetry header to AIGW request

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/143623



Merged-by: Vitali Tatarintev <vtatarintev@gitlab.com>
Co-authored-by: Mikolaj Wawrzyniak <mwawrzyniak@gitlab.com>

Add "self" endpoints for token self_rotation

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/142664



Merged-by: Aboobacker MK <akarakath@gitlab.com>
Approved-by: Aboobacker MK <akarakath@gitlab.com>
Approved-by: Rohit Shambhuni <rshambhuni@gitlab.com>
Co-authored-by: Stephane Talbot <Stephane.Talbot@univ-savoie.fr>
Co-authored-by: Jon Glassman <jglassman@gitlab.com>

Add a new POST `/personal_access_tokens/self/rotate` endpoint in order
to rotate passed personal access token. Token must have the `api` scope.

Changelog: added

Update Organization Users in Organization blueprint

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/142798



Merged-by: Alex Pooley <apooley@gitlab.com>
Approved-by: Alex Pooley <apooley@gitlab.com>
Co-authored-by: Christina Lohr <clohr@gitlab.com>

Use updated vscode fork in workspace if attribute is set

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/144288



Merged-by: Alper Akgun <aakgun@gitlab.com>
Approved-by: Alper Akgun <aakgun@gitlab.com>
Co-authored-by: Vishal Tak <vtak@gitlab.com>

Use Array#intersection.any? for Ruby 3.0.x

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/144396



Merged-by: Abdul Wadood <awadood@gitlab.com>
Approved-by: Abdul Wadood <awadood@gitlab.com>
Co-authored-by: Malcolm Locke <mlocke@gitlab.com>

Prune old RelationExport and RelationExportUpload records

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/142246



Merged-by: Adam Hegyi <ahegyi@gitlab.com>
Approved-by: Adam Hegyi <ahegyi@gitlab.com>
Approved-by: George Koltsov <gkoltsov@gitlab.com>
Approved-by: Ethan Urie <eurie@gitlab.com>
Approved-by: Rodrigo Tomonari <rtomonari@gitlab.com>
Reviewed-by: George Koltsov <gkoltsov@gitlab.com>
Co-authored-by: Sam Word <sword@gitlab.com>

Created a new service to handle pruning old ProjectExportService and
its associations efficiently. Specifically, upload files need and
be handled and pruned as well. Before, only associated records were
deleted via an ON DELETE CASCADE clause on their postgres tables.

Update dependency kas to v16.9.2

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/144297



Merged-by: Mikhail Mazurskiy <mmazurskiy@gitlab.com>
Approved-by: Mikhail Mazurskiy <mmazurskiy@gitlab.com>
Approved-by: Timo Furrer <tfurrer@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

Service for rebuilding materialized view

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/143931



Merged-by: Adam Hegyi <ahegyi@gitlab.com>
Approved-by: charlie ablett <cablett@gitlab.com>
Approved-by: Felipe Artur <fcardozo@gitlab.com>
Reviewed-by: charlie ablett <cablett@gitlab.com>
Reviewed-by: Arun Sori <asori@gitlab.com>

Add desired sharding keys for compliance_management

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/144206



Merged-by: Dylan Griffith <dyl.griffith@gmail.com>
Approved-by: Dylan Griffith <dyl.griffith@gmail.com>
Approved-by: Jay Montal <jmontal@gitlab.com>
Co-authored-by: Manoj M J <mmj@gitlab.com>

Finalize conversion of geo_event_id to bigint

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/143652



Merged-by: Adam Hegyi <ahegyi@gitlab.com>
Approved-by: Adam Hegyi <ahegyi@gitlab.com>
Co-authored-by: Aakriti Gupta <agupta@gitlab.com>