Only run session related Warden hooks for user scope

Closes gitlab-ee#5857

See merge request gitlab-org/gitlab-ce!18771

Prepare 10.8 RC2 release

See merge request gitlab-org/gitlab-ce!18744

Resolve "Import/Export (import) is broken due to the addition of a CI table"

Closes #46049

See merge request gitlab-org/gitlab-ce!18745

Merge branch '45970-broken-master-in-spec-features-issues-user_uses_slash_commands_spec-rb' into 'master'

Resolve "Broken master in spec/features/issues/user_uses_slash_commands_spec.rb"

Closes #45970

See merge request gitlab-org/gitlab-ce!18687

[Rails5] Fix spec/services/applications/create_service_spec.rb

See merge request gitlab-org/gitlab-ce!18665

[Rails5] Fix spec/models/notification_setting_spec.rb

See merge request gitlab-org/gitlab-ce!18664

[Rails5] Fix enum question mark methods

See merge request gitlab-org/gitlab-ce!18662

Display and revoke active sessions

See merge request gitlab-org/gitlab-ce!17867

[Rails5] Fix `undefined method 'downcase'` errors in requests specs

See merge request gitlab-org/gitlab-ce!18645

[Rails5] Add `touch_later` to `Commit` model

See merge request gitlab-org/gitlab-ce!18642

[Rails5] Fix Arel::UpdateManager

See merge request gitlab-org/gitlab-ce!18641

[Rails5] Fix `TZInfo::InvalidTimezoneIdentifier` exception

See merge request gitlab-org/gitlab-ce!18640

[Rails5] Use `safe_params` instead of `params` in `url_for` helpers

See merge request gitlab-org/gitlab-ce!18637

[Rails5] Update `ApplicationController#log_exception` to fix `undefined method 'clean'` error

See merge request gitlab-org/gitlab-ce!18636

Fix file_store for artifacts and lfs when saving

See merge request gitlab-org/gitlab-ce!18624

[Rails5] Fix `params` for DeleteUserWorker

See merge request gitlab-org/gitlab-ce!18635

Enable LFS setting UI for Masters and Owners

Closes #33320

See merge request gitlab-org/gitlab-ce!18562

Migrate pipeline stages indices

Closes #43009

See merge request gitlab-org/gitlab-ce!18420

Fix memory and performance issues in Karma test suite

Closes #45900 and #45806

See merge request gitlab-org/gitlab-ce!18658

Bump nokogiri to 1.8.2 in qa Gemfile

See merge request gitlab-org/gitlab-ce!18673

Use gitaly 0.96.2

See merge request gitlab-org/gitlab-ce!18670

Fix commit trailer rendering when Gravatar is disabled

Closes #45633

See merge request gitlab-org/gitlab-ce!18586

Resolves CVE-2017-18258

Use gitlab-workhorse 4.2.0

See merge request gitlab-org/gitlab-ce!18671

Use persisted diff data instead fetching Git on discussions

Closes #44052

See merge request gitlab-org/gitlab-ce!18657

LFS can be enabled and disabled per project using the API by Masters
and Owners, but the UI is only available to Admins. The interface and
API should be consistent.

LFS can also be enabled and disabled per group using the API by Owners,
but the UI is only available to Admins. This interface should also be
consistent.

Additionally removes an unneeded check if 2FA interface, since the
interface is only available to Owners.

Closes #33320

Add alpine mirrors while operating on k8s cluster

Closes gitlab-ee#4922

See merge request gitlab-org/gitlab-ce!18651

Merge request and commit discussions API

Closes #20901

See merge request gitlab-org/gitlab-ce!18537

* master: (106 commits)