[10.0] Prevent a persistent XSS in user-provided markup

See merge request gitlab/gitlabhq!2199

Fix arbitrary redirect location vulnerability

See merge request gitlab/gitlabhq!2192

Use the default password from the GDK's root user

Closes gitlab-qa#73

See merge request gitlab-org/gitlab-ce!14701

[ci skip]

Prepare 10.0.3 release

See merge request gitlab-org/gitlab-ce!14590

Fix broken certificate-authority-data with kubectl >= 1.8.0

Closes #38685

See merge request gitlab-org/gitlab-ce!14635

Fix gitlab-rake gitlab:import:repos task

Closes #37682

See merge request gitlab-org/gitlab-ce!14597

It's only cached in 10.1 currently.

Fix Admin -> License selector for GitLab QA specs

Closes gitlab-qa#68

See merge request gitlab-org/gitlab-ce!14599

Ensure all refs are restored on a backup/restore

Closes #38352

See merge request gitlab-org/gitlab-ce!14595

Fix pushes to an empty repository not invalidating has_visible_content? cache

Closes #38646

See merge request gitlab-org/gitlab-ce!14613

Fixes data parameter not being sent in ajax request for jobs log

Closes #38528

See merge request gitlab-org/gitlab-ce!14564

Fix Auto DevOps banner feature flag

Closes #38576

See merge request gitlab-org/gitlab-ce!14576

Make Repository#has_visible_content more efficient

See merge request gitlab-org/gitlab-ce!14554

Use relative paths for opening and closing issuables

Closes #35822

See merge request gitlab-org/gitlab-ce!14555

Improves UX of autodevops popover to match gpg one

Closes #38582

See merge request gitlab-org/gitlab-ce!14582

Prepare 10.0.3 release

See merge request gitlab-org/gitlab-ce!14568

find_user users helper method no longer overrides find_user API helper method.

Closes #37467

See merge request gitlab-org/gitlab-ce!14418

Clean merge_jid whenever necessary on the merge process

Closes #38476

See merge request gitlab-org/gitlab-ce!14540

RepositoryExists is always called with #gitaly_migration

Closes #38333

See merge request gitlab-org/gitlab-ce!14513

Fixes commit comments in parallel diff view

Closes #38117

See merge request gitlab-org/gitlab-ce!14529

Resolve "NoMethodError: undefined method `sha' for nil:NilClass"

Closes #38319

See merge request gitlab-org/gitlab-ce!14547

Make sure API responds with 401 when invalid authentication info is provided

Closes #38438

See merge request gitlab-org/gitlab-ce!14525

Clear merge requests counter cache after merge

Closes gitlab-ee#3573 and #38344

See merge request gitlab-org/gitlab-ce!14563

[ci skip]

Prepare 10.0.2 release

See merge request gitlab-org/gitlab-ce!14499

Avoid wrapping users in dropdown

Closes #38077

See merge request gitlab-org/gitlab-ce!14410

Fix locked shared runners problem

Closes gitlab-runner#2782

See merge request gitlab-org/gitlab-ce!14483

Fix a dash being rendered in the note's access role

Closes #37912

See merge request gitlab-org/gitlab-ce!14450

IssueNotes: Switch back to Write pane when note cancel or submit.

Closes #37907

See merge request gitlab-org/gitlab-ce!14402

Prevent URL concatenation for avatars

Closes #38189

See merge request gitlab-org/gitlab-ce!14437

Fix PG::UniqueViolation external_email migration

Closes #38246

See merge request gitlab-org/gitlab-ce!14474

Resolve "Undefined run_command when running rake gitlab:check"

Closes #38280

See merge request gitlab-org/gitlab-ce!14469

Re-allow `name` attribute on user-provided anchor HTML

Closes #38196

See merge request gitlab-org/gitlab-ce!14452

Remove navbar gradient

Closes #37287

See merge request gitlab-org/gitlab-ce!14457

Ensure that Blob.raw returns always returns a valid blob object

See merge request gitlab-org/gitlab-ce!14412

Fix rendering double note issue

Closes #38139

See merge request gitlab-org/gitlab-ce!14429

IssueNotes: Resize comment form after note submit and discard.

Closes #38115

See merge request gitlab-org/gitlab-ce!14401