Prevent users from creating notes on resources they can't access

See https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2054

Ensure that only privileged users can access merge requests in the API

See merge request !2053

Fix export files not removed when a user takes over a namespace

See merge request !2051

Fix users being able to delete instance public deployment keys

See merge request !2049

[ci skip]

Update autodeploy templates [ci skip]

See merge request !8695

Filtered search input click back at token

See merge request !8617

Keep mini graph down pipelines index

See merge request !8651

Merge branch '26617-search-bar-filter-dropdown-does-not-dismiss-when-sort-dropdown-is-selected' into 'master'

Changed the event listener target from window to document in droplab

Closes #26617

See merge request !8670

Merge branch '26623-search-bar-dropdown-doesn-t-load-when-you-go-back-in-browser-history' into 'master'

Fixed search component not instantiating back when pressing the back button on the issue page

Closes #26623

See merge request !8676

Resolve "Filter issues input does not show assignee name when there is an assignee ID in the URL"

Closes #26955

See merge request !8674

Do not generate pipeline ref path if ref not present

Closes #26861

See merge request !8658

Button by itself will submit forms. Button type button willn't

Closes #26999

See merge request !8694

Fix small button alignment issues

See merge request !8631

Add index for ci_builds that makes shared runners query to run 100x faster.

See merge request !8683

Fix Merge When Pipeline Succeeds immediate merge bug

Closes #26969

See merge request !8685

Revert removing builds tab on '8-16-stable'

See merge request !8661

Fix participants margins to fit on one line

See merge request !8640

Fix shared runners queue update

See merge request !8663

Fix import no longer mapping users as admin

Closes #25346

See merge request !8625

Record used SSH keys only once per day

Closes #26877

See merge request !8655

Use Workhorse v1.3.0

See merge request !8660

Add documentation around OAuth/Personal Access Token scopes.

Closes #25851

See merge request !8226

Reduce DB-load for build-queues by storing last_update in Redis

See merge request !8084

This reverts commit 79a816f3, reversing
changes made to 68d89aa9.

Conflicts:
	app/views/projects/merge_requests/_show.html.haml

Moved the webhooks and services gear options to a single one called integrations

See merge request !8380

Rename duplicate migrations and skip them if table/columns are already present

Closes #26868

See merge request !8644

Document GIT_SUBMODULE_STRATEGY

See merge request !8586

New U2F ineligible message

Closes #26066

See merge request !8392

Add an image to the public access documentation and fix wrong profile path

See merge request !8583

Resolve "Error handling in environments list"

Closes #25507

See merge request !8461

Fixes builds dropdown making request when clicked to be closed

Closes #26601

See merge request !8545

Add margin to math blocks

Closes #26472

See merge request !8543

Autoresize markdown preview

Closes #24372

See merge request !8607

Gitaly feature flag

See merge request !8440

Upgrade Brakeman to 3.4.1

Closes #26820

See merge request !8629

Add documentation for possible causes of JS-related test failures.

See merge request !8214