Using the same create service for both REST API and GraphQL improves
the consistency and DRY.

Given that configurable statuses functionality
should only be available for Premium and Ultimate
users, we need to ensure the status widget is
EE-only.

This commit moves the status widget-related classes
under the EE namespace to achieve that.

Remove only create validation of
validate_only_one_sharding_key_present
and validate_imported_entity_type

Changelog: other

Add a callback to backfill project with pipeline variables table on new records
Address all the comments
Skip id primary key in favor of project_id
Add a trigger function instead of model callback
Add a trigger migration
Allow projects_with_pipeline_variables cross database

Changelog: added

This table stores the CI pipeline inputs values configured when creating
a pipeline schedule. It belongs to a pipeline schedule, ensures that the
input keys are unique, and encrypts the input values. It is on the
gitlab_ci database schema because pipeline schedules are also stored on
the CI schema.

Changelog: added
Issue: https://gitlab.com/gitlab-org/gitlab/-/issues/519960

When the merge request source branch was ambiguous in the source
project, detached merge request pipelines would pick commit SHA
associated with the tag instead of the merge request's branch.

We fix that by using `source_branch_ref` instead of `source_branch` in
the places deciding the commit used by detached merge request pipelines.

Changelog: fixed

Signed-off-by: Siddharth Asthana <siddharthasthana31@gmail.com>

Related: https://gitlab.com/gitlab-org/gitlab/-/issues/516166

Changelog: changed

Add unverified_author_email to the graphql verification
status field.

Update front end to consume new field to match how
templating currently handles it.

Changelog: fixed
MR: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/181805

We should be passing the class name as a string instead of a Class
object

Fix RSPec/BeNil Rubocop offenses

This MR changes TokenAuthenticatable concern's default storage strategy
from insecure to digest as a security best practice. We also intoduce an
insecure:true strategy to replace the current default and to support the
4 token types that rely on this insecure storage strategy.

Changelog: changed

This adds a new work item widget for vulnerabilities. It contains
related vulnerabilities of the work item. It's only applicable for
the work item type issue.

Changelog: added
EE: true

Changelog: added

User will be able to store their Docker Hub credentials in the
dependency proxy for containers so that when GitLab authenticates
against Docker Hub, we will switch to an authenticated request instead
of using an unauthenticated request.

This is behind a feature flag.

This reverts merge request !183789

Check if .git-blame-ignore-revs exists on the default branch and
show the checkbox to toggle whether or not to apply it

Changelog: added

Fixes the aliasing of Note#last_updated_by so that it works with Rails
7.1

As we already renamed the status widget to the
verification status widget, we can finally use
the status naming as part of the configurable
statuses initiative.

This commit renames the custom widget status
to the status widget to achieve that.

Changelog: changed

- Force cancel button on Job Details page
- Accept force parameter for /projects/:proj_id/jobs/:id/cancel

Changelog: added
MR: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/179137

This include the new endpoint, the backend code to create recipe revision when uploading a file and tests.

Changelog: added

Free up the `status` name for future use with customizable
statuses since the status widget is not yet used in production.

Introduce a database migration to update the
name column for existing records.

Changelog: changed

As part of the first iteration of the configurable
statuses initiative, we would like to:
* return statuses from the system-defined lifecycle
that match the work item type via GraphQL API,
* only expose the data to the Premium and
Ultimate users.

Changelog: added

Addressing: https://gitlab.com/gitlab-org/gitlab/-/issues/513075
Changelog: other

This Devise option fixes a bug where remember tokens on other browsers
are invalidated when the user signs out manually.

See https://github.com/heartcombo/devise/issues/2862

Changelog: fixed

Changelog: other

Changelog: changed

When job token permissions are defined for API
endpoints, add their last access dates to the
ci_job_token_authorizations table.

Changelog: added

Moves the archived check at the pipeline level
so that the behavior is more consistent.

We need a way to toggle this just in case and we don't need it
enabled by default to self-managed instances.

Along with the relevant classes, tests, and factories,
and adjust references to point to their new namespapce in EE.

Adds a sharding key and makes sure the AR model sets
it in a before_validation callback

Changelog: other

This MR adds a flag to the application settings for instance wide
 token prefixes. It also adds support for feed tokens as an example.

Changelog: added

Issue: https://gitlab.com/gitlab-org/gitlab/-/issues/388379