Fix filtered search user autocomplete for gitlab instances that are hosted on a subdirectory

Closes #27343

See merge request !8891
Signed-off-by: Rémy Coutable <remy@rymai.me>

Fix wrong call to ProjectCacheWorker.perform, and call ProjectCacheWorker.perform_async instead

Closes #27516

See merge request !8910

Don't render snippet actions for logged-out users

Closes #27708

See merge request !8995

Snippet spam

Closes #26276

See merge request !8911

API: Fix file downloading

See merge request !8953

Remove unnecessary queries for .atom and .json in Dashboard::ProjectsController#index

Closes #27267

See merge request !8956

Fix broken anchor links when special characters are used

Closes #26778

See merge request !8961

Add index to labels for `type` and project_id`

Closes #27676

See merge request !8978

Don't use backup AR connections for Sidekiq

Closes #27713

See merge request !9001

Fixes ajax requests when current URL has a trailing slash

Closes #27756

See merge request !9010

Fix droplab rendering template when data-dynamic selector is unavailable

Closes gitlab-ee#1655

See merge request !9012

Make deploy key not show in User's keys list

Closes #27480

See merge request !9024

Refresh authorizations when transferring projects

See merge request !9029

[ci skip]

[ci skip]

[ci skip]

Fix labels being applied to wrong merge requests on GitHub import

See https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2064

Fix for XSS vulnerability in SVG attachments

See https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2059

Fix XSS in rdoc and other markups

See https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2058

Add sanitization filter to asciidocs output to prevent XSS

See https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2057

Backport of EE - delays the initialization of MergeRequest javascrip…

See merge request !9132

Backport of EE fix in !954 - delays the initialization of MergeRequest javascript until after DOM ready

[ci skip]

Apply the same spam checks to public snippets (either personal snippets
that are public, or public snippets on public projects) as to issues on
public projects.

When a snippet is submitted, but there's an error, we didn't keep the
visibility level. As the default is private, this means that submitting
a public snippet that failed would then fall back to being a private
snippet.

Merge branch '27067-mention-user-dropdown-does-not-suggest-by-non-ascii-characters-in-name' into 'master'

Resolve "Mention @user dropdown does not suggest by non-ASCII characters in name"

Closes #27067

See merge request !8729

Fixes broken build: Use jquery to get the element position in the page

See merge request !8926

Fix filtering usernames with multiple words

Closes #27404

See merge request !8851

Fix permalink discussion note being collapsed

Closes #26860, #27089, and #27151

See merge request !8773

19164 Add settings dropdown to mobile screens

Closes #19164

See merge request !8896

Fix user validation error in Import/Export

Closes #23833

See merge request !8909

Add project ID index to `project_authorizations` table to optimize queries

Closes #27443

See merge request !8890

Improve performance of triggered chat commands

See merge request !8876

Fix a transient failure in the `Explore::ProjectsController` spec

Closes #27350

See merge request !8847