Regarding https://about.gitlab.com/releases/2020/01/30/security-release-gitlab-12-7-4-released/ rack-cors should be updated to 1.0.6, but dependency in `Gemfile` was not updated as it should.
Could you apply this security related patch, please?

Merge branch '197292-support-require_password_to_approve-in-post-projects-id-approvals-api-endpoint' into 'master'

Support require_password_to_approve in POST /projects/:id/approvals API endpoint

Closes #197292

See merge request gitlab-org/gitlab!24016

Fix applying suggestion with empty custom message

See merge request gitlab-org/gitlab!24144

Update environments dropdown header

See merge request gitlab-org/gitlab!24096

Add retry mechanism to after import

Closes #198503

See merge request gitlab-org/gitlab!23846

Display Feature Flag Internal Ids

See merge request gitlab-org/gitlab!23914

Return feature flag internal id from backend
Remove featureFlagIid feature flag

Fix for #198353, copied and pasted markdown video/audio snippets not playable

Closes #198353

See merge request gitlab-org/gitlab!23918

Fix new MR UI not rendering commit info

See merge request gitlab-org/gitlab!24140

When the custom suggestion message is cleared,
it's stored as an empty string in db. In this case
we still need to apply default commit message

Use time ranges in date picker (utils)

See merge request gitlab-org/gitlab!23765

 - Replace expect with allow

- use import_failure_service
- add missing specs

Fix typo on serializer README.md

See merge request gitlab-org/gitlab!24105

Fix broken spec in help_controller_spec.rb

Closes #199976

See merge request gitlab-org/gitlab!24139

Allow scheduling jobs in batch with contexts

See merge request gitlab-org/gitlab!23519

This adds helper methods for the `bulk_perform_in` and
`bulk_perform_async` methods that allow specifying a context per job.

Scheduling jobs with contexts that need to be different based on the
arguments passed can be done by passing in an array of objects, and
defining how to build arguments and contexts for those objects.

For example:
      ProjectImportScheduleWorker.bulk_perform_async_with_contexts(
        projects,
        arguments_proc: -> (project) { project.id },
        context_proc: -> (project) { { project: project } }
      )

This will schedule `ProjectImportScheduleWorker` jobs called with the
project.id. And will create contexts using the project. The developers
need to make sure that the required resources for building a context
are loaded: The route and the namespace of a project.

The batch context will be stored on the worker class when scheduling
the job, so the sidekiq middleware can fetch the right context based
on those arguments and apply them to the job when scheduling it.

This also implements this method for the `UpdateAllMirrorsWorker`
which schedules `ProjectImportScheduleWorker` in batch. When adding
this, the `ProjectImportScheduleWorker`-jobs will have a context.

Fix spec so that it does not depend on spec order

See merge request gitlab-org/gitlab!23949

- Date time range utils to support basic time range operations
- Monitoring utils to support time ranges in the url of dashboards

This is to prevent specs from failing due to changes in docs

Add nuget package files to packages seed file

See merge request gitlab-org/gitlab!23975

Exclude ar_internal_metadata from DB cleaner

See merge request gitlab-org/gitlab!24093

Fix(MVC) Assignee(s) avatar dissapear when opening issue sidebar in board

See merge request gitlab-org/gitlab!23830

The master branch started failing because
e355afb4 deleted
`doc/user/project/img/labels_key_value_v12_1.png`. To make the build
pass, use another image for now.

Closes https://gitlab.com/gitlab-org/gitlab/issues/199976

Improve project import/export content

See merge request gitlab-org/gitlab!24130

Replace Net::HTTP with Gitlab::HTTP in rake gitlab:geo:check

Closes #36878

See merge request gitlab-org/gitlab!23741

Fix GraphQL deprecation reasons

See merge request gitlab-org/gitlab!24131

Fix paragraphing in GraphQL API docs

See merge request gitlab-org/gitlab!24129

Revamp labels documentation

See merge request gitlab-org/gitlab!24095

Simplify structure, text, eliminate screenshots
that are no longer needed, add crosslinks, etc.

Enhance notification email documentation

Closes #37738

See merge request gitlab-org/gitlab!24121