GitLab

## 17.2.1 (2024-07-24)
### Fixed (1 change)
- [Fix PEP when SEC is available](https://gitlab.com/gitlab-org/security/gitlab/-/commit/5cbd3187cab87e736c260d374f75cf849997d66c) **GitLab Enterprise Edition**
### Security (7 changes)
- [Refactor import_export_upload to be user-based](https://gitlab.com/gitlab-org/security/gitlab/-/commit/07257efc00d8f4984eddf9576debd62edc6d485d) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/4269))
- [Attribute BulkImport::Export to a particular user](https://gitlab.com/gitlab-org/security/gitlab/-/commit/53f8ad67517a92f1e914858c07829ec57e261cc1) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/4284))
- [Don't include project-level analytics settings in DOM](https://gitlab.com/gitlab-org/security/gitlab/-/commit/639bf845ed2537e44487d8c9e804ec9ac4844045) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/4271))
- [Fix for private dotenv artifacts not accessible to downstream jobs](https://gitlab.com/gitlab-org/security/gitlab/-/commit/49a4b36f4155702f8277e043d1d1c146b5a52e01) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/4275))
- [Do not allow script execution on dependency responses](https://gitlab.com/gitlab-org/security/gitlab/-/commit/e1a84f999c73dab1ce45e9027738a59be977304e) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/4276))
- [Remove prohibited tags after import](https://gitlab.com/gitlab-org/security/gitlab/-/commit/41db34926ea53f45215294138da716fba4ec03dd) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/4268))
## 17.1.3 (2024-07-24)
### Fixed (2 changes)
- [Fix wildcard search for package.json in npm upload](https://gitlab.com/gitlab-org/security/gitlab/-/commit/f319a2257eca7ef742367b9b4636645ad4781ea2)
- [Ignore object pool already exists creation errors](https://gitlab.com/gitlab-org/security/gitlab/-/commit/01c080264ccb25ec17c04eeb470014389a916cfa)
### Security (7 changes)
- [Refactor import_export_upload to be user-based](https://gitlab.com/gitlab-org/security/gitlab/-/commit/70145f096f59d1729df3f0e1244a039c6e14f0b7) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/4264))
- [Attribute BulkImport::Export to a particular user](https://gitlab.com/gitlab-org/security/gitlab/-/commit/68eb8994474a9b0fdd15d03ae2f0a75a61eecd1f) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/4285))
- [Don't include project-level analytics settings in DOM](https://gitlab.com/gitlab-org/security/gitlab/-/commit/caf6a3a26a0bedfc309f8ba45bea605fc37e70f7) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/4185))
- [Fix for private dotenv artifacts not accessible to downstream jobs](https://gitlab.com/gitlab-org/security/gitlab/-/commit/ed6d149e28b4c8aafe36d6c6ff2824e1d459c651) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/4242))
(省略されました)

## 17.2.0 (2024-07-17)
### Added (159 changes)
- [Add status to scan result policy violations](https://gitlab.com/gitlab-org/gitlab/-/commit/0a0ae8f1088928daa6b432d9179b0daf9a6feba1) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/158203)) **GitLab Enterprise Edition**
- [Add new run keyword under job](https://gitlab.com/gitlab-org/gitlab/-/commit/928bb79fccefe9d52ae30272bc333116b9ca3f1e) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/146333))
- [Added filters for multiple compliance frameworks](https://gitlab.com/gitlab-org/gitlab/-/commit/280906c08eb0df45e8fd89dd6e957ded70fbed04) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/158229)) **GitLab Enterprise Edition**
- [Add Duo Enterprise to provision service for add-ons](https://gitlab.com/gitlab-org/gitlab/-/commit/f053e045f3eb066c3c6a2b4f915616554ea07126) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/158969)) **GitLab Enterprise Edition**
- [Add Duo Pro end trial widget](https://gitlab.com/gitlab-org/gitlab/-/commit/bf8e86288372c1c18335105d11dbfefc511016bf) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/155614)) **GitLab Enterprise Edition**
- [Add RoR tutorial to Observability docs](https://gitlab.com/gitlab-org/gitlab/-/commit/25c507c7a5c10fd111407225d6735692a7d17ba5) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/158625))
- [Enable container scanning for registry](https://gitlab.com/gitlab-org/gitlab/-/commit/ccda3ca324318a8825fa032e1a2b853a95929e13) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/156247))
- [Add willAutoCloseByMergeRequest field to work items API](https://gitlab.com/gitlab-org/gitlab/-/commit/8ea220794cd74f59876a798cdf58ba294af3836f) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/158145))
- [Add Duo Enterprise to provision service for add-ons](https://gitlab.com/gitlab-org/gitlab/-/commit/ecf4a2c3df04db0105966313e3f4d5b8c81a2963) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/158963)) **GitLab Enterprise Edition**
- [Add models for Virtual Registries, part 1/2](https://gitlab.com/gitlab-org/gitlab/-/commit/a7638db2d3bea91d1db1219df57add5986d11169) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/156930))
- [Ensure uniqueness p_ci_job_annotation](https://gitlab.com/gitlab-org/gitlab/-/commit/760b22da62461eebaae7325c7651cf040349a97a) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/159071))
- [Add job action button to PMG](https://gitlab.com/gitlab-org/gitlab/-/commit/f3a916e6ba9ee27b345526914a3652fe2915b8fd) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/159004))
- [Add migration to add seat control column to namespace settings table](https://gitlab.com/gitlab-org/gitlab/-/commit/deb3e5bda554bbbfd9341a91e9221b569852627e) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/158819))
- [Display ratios instead of counts in CI/CD Analytics](https://gitlab.com/gitlab-org/gitlab/-/commit/9cbe9da793af51cb171289f8f505581ec3494988) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/158957))
- [Add Importer User for imports user mapping](https://gitlab.com/gitlab-org/gitlab/-/commit/9051ecf67b14924bea3b8df52e24dad141e03b5d) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/157979))
- [Add GraphQL API for Duo Pro seats assigned and used](https://gitlab.com/gitlab-org/gitlab/-/commit/16bed9c42c1bcb03d5a6e0c1591e92ce8b7a5fbe) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/157936)) **GitLab Enterprise Edition**
- [Enable direct code completions by default](https://gitlab.com/gitlab-org/gitlab/-/commit/257c07f0bc44606e4ef54f4ba1fc6bbb26cbf83b) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/158733)) **GitLab Enterprise Edition**
(省略されました)

## 17.1.2 (2024-07-09)
### Fixed (2 changes)
- [Update dependency slack-messenger to v2.3.5](gitlab-org/security/gitlab@e21a4599ab21cc6f6b89ca432d9557ed72169c85)
- [Fix MailRoom not loading in Omnibus](gitlab-org/security/gitlab@5547c1164c494705bf29595062124ff8cb266cb3)
### Security (9 changes)
- [Disallow serving Pages over disabled custom domains with deployments](gitlab-org/security/gitlab@176442d616a111667481f22186560925d1175c67) ([merge request](gitlab-org/security/gitlab!4245))
- [Check npm package name, version and scripts coherence](gitlab-org/security/gitlab@917d805ce57e5d0439b4a4c757967d494014a97d) ([merge request](gitlab-org/security/gitlab!4212))
- [Check for create_deploy_token policy before creating deploy token](gitlab-org/security/gitlab@8ae4e9b0b25bec92561698da3c7d0495d6ba61bc) ([merge request](gitlab-org/security/gitlab!4209))
- [Check if user has ban_group_member access before banning in namespace](gitlab-org/security/gitlab@eefb608987d64b9cf58411b8520f260d1fb9b1c3) ([merge request](gitlab-org/security/gitlab!4091))
- [Prevent privilege escalation via custom role](gitlab-org/security/gitlab@a618e86dc4585b0fef049f75f13acf0eec00656d) ([merge request](gitlab-org/security/gitlab!4199))
- [Prevent using quick actions for some bot users](gitlab-org/security/gitlab@5789cc333d04d76ffb4c79239e71be1910f12229) ([merge request](gitlab-org/security/gitlab!4231))
- [Disable raw HTML for quick action pipeline](gitlab-org/security/gitlab@7db9b002b803cb6b53a3e6ce3f8d9b15107e7464) ([merge request](gitlab-org/security/gitlab!4235))
- [Disable quick actions unless description changed](gitlab-org/security/gitlab@a1800c591b38df0e2d143df3ee56f76b4f3a914f) ([merge request](gitlab-org/security/gitlab!4234))
- [Remove comment support from shrug and tableflip](gitlab-org/security/gitlab@fb6bcef1935dc3a7dd60def448a652769c86ee62) ([merge request](gitlab-org/security/gitlab!4229))
## 17.0.4 (2024-07-09)
### Fixed (1 change)
- [Update dependency slack-messenger to v2.3.5](gitlab-org/security/gitlab@8800f576925de4fcf00d46f707a70e1e81e5f00a)
### Security (9 changes)
- [Disallow serving Pages over disabled custom domains with deployments](gitlab-org/security/gitlab@760d6115e963e744ee55230be45e9fc3c138a73d) ([merge request](gitlab-org/security/gitlab!4248))
(省略されました)

## 17.1.1 (2024-06-25)
### Fixed (1 change)
- [Only enumerate commits in pre-receive check if push came from Web](gitlab-org/security/gitlab@09fac947735945114db37b482035ffe8f605a1ad)
### Security (14 changes)
- [Security fixes for banzai pipeline](gitlab-org/security/gitlab@bb484256fab53f248450f49350d44ec246f05e49) ([merge request](gitlab-org/security/gitlab!4184))
- [Fix the catastrophic backtracking in openapi regex](gitlab-org/security/gitlab@d9f51d836d290fc90f6bbfd50937e28ac4382ad6) ([merge request](gitlab-org/security/gitlab!4135))
- [Use permitted_params for standalone and multiplex queries](gitlab-org/security/gitlab@624758559c2ffa452c7d118b4bf438783bf22b96) ([merge request](gitlab-org/security/gitlab!4173))
- [Fix for Private job artifacts can be accessed by any user](gitlab-org/security/gitlab@4c5ac0433595920d2e9e1a0887461fbf9ea58476) ([merge request](gitlab-org/security/gitlab!4194))
- [Remove search results from public projects with unauthorized repos](gitlab-org/security/gitlab@74bebdd2a20be50c13d3696b0cc2ba815fd9e95b) ([merge request](gitlab-org/security/gitlab!4210))
- [Do not run a new pipeline on re-target](gitlab-org/security/gitlab@0a90eb06107fce3a6c2e15dcead5ec9fc0302967) ([merge request](gitlab-org/security/gitlab!4187))
- [Add limits on autolinker regex](gitlab-org/security/gitlab@4854ff9db1ee52c37cab05d5be1eb02b4e5e93b0) ([merge request](gitlab-org/security/gitlab!4126))
- [Fix clickjacking on OAuth application page](gitlab-org/security/gitlab@3620cdabd780c08754f48df7a81b0ed41924f75e) ([merge request](gitlab-org/security/gitlab!4186))
- [Hide branch merge request if merge requests are private](gitlab-org/security/gitlab@551999ae405109144906d3b0fbd254553ba10baa) ([merge request](gitlab-org/security/gitlab!4200))
- [Remove collapseLongCommitList method](gitlab-org/security/gitlab@35a86b9d0cec107e06d56ced48ecbf5ac108250c) ([merge request](gitlab-org/security/gitlab!4203))
- [Pass SSO session data to Sidekiq](gitlab-org/security/gitlab@143598720f040450de58440be4266337278fb87f) ([merge request](gitlab-org/security/gitlab!4197))
- [Prevent non-members from using promote_to quick action for quick actions](gitlab-org/security/gitlab@ce44d723af3e7c117f56e1539da2c12ee1892b90) ([merge request](gitlab-org/security/gitlab!4190))
- [Reject deletion of security policy project approval rules](gitlab-org/security/gitlab@926855938a4a92251b0631b67cad330888e17909) ([merge request](gitlab-org/security/gitlab!4172))
- [Mitigate ReDoS attacks via `method_call_regex`](gitlab-org/security/gitlab@350aa934a38aa9aae0b4216dcaa51e6a17463e4e) ([merge request](gitlab-org/security/gitlab!4174))
## 17.0.3 (2024-06-25)
(省略されました)

## 17.1.0 (2024-06-19)
### Added (180 changes)
- [Allow `admin_runner` ability to change shared runner setting](gitlab-org/gitlab@f8a4a504e3b04875bed19bdef66f7cdcaae7e462) ([merge request](gitlab-org/gitlab!155505)) **GitLab Enterprise Edition**
- [Update services to create custom software license](gitlab-org/gitlab@fef112e156bf0f37f8b1dbd310cd2a2ddc629eb2) ([merge request](gitlab-org/gitlab!155325)) **GitLab Enterprise Edition**
- [Protected containers: Add help text for repository path pattern input](gitlab-org/gitlab@e710daa4b59d0ae74d608490c1cd563437c4ca74) by @gerardo-navarro ([merge request](gitlab-org/gitlab!154932))
- [Move document for CS for registry](gitlab-org/gitlab@06d2a6d2b6cdcb7cffd7ffc81b0706485d5967c2) ([merge request](gitlab-org/gitlab!156259)) **GitLab Enterprise Edition**
- [Add new duo pro discover page](gitlab-org/gitlab@ca64b696dbd33b8cddcd1f887d31afb4290853bf) ([merge request](gitlab-org/gitlab!154478)) **GitLab Enterprise Edition**
- [Changed association of frameworks with projects](gitlab-org/gitlab@ecaf61939432fe08eb7fa8fe48925d04c4685a68) ([merge request](gitlab-org/gitlab!153664)) **GitLab Enterprise Edition**
- [Add support for new placeholders](gitlab-org/gitlab@679bf3a203e041300daf200de432c81d70062b72) by @TamsilAmani ([merge request](gitlab-org/gitlab!155804))
- [Add `admin_runners` custom ability](gitlab-org/gitlab@860f5cc09eca6679d90184fd33a855086f31ac4e) ([merge request](gitlab-org/gitlab!154848)) **GitLab Enterprise Edition**
- [Add worker to aggregate last 30-day catalog resource usage data](gitlab-org/gitlab@56f45cfdc1fa3a94f0e850d54970ac3936ca622a) ([merge request](gitlab-org/gitlab!155001))
- [Add cargo to supported sbom and sync types](gitlab-org/gitlab@11d3dfa2c8385a1d9400b9522d75047735630f4b) ([merge request](gitlab-org/gitlab!155751))
- [Add project settings sections to command mode results](gitlab-org/gitlab@e3d6d8a451ec86581cf04ad24eda35cdd63dbb49) ([merge request](gitlab-org/gitlab!153452))
- [Configuring Topology Service in Rails](gitlab-org/gitlab@8a21caa58fbbbba98451e729f4ed4c3163d0b685) ([merge request](gitlab-org/gitlab!154960))
- [Add ML Model filters to the "package files" screen](gitlab-org/gitlab@24693cd19d01cf068d1583ecaaaafa7b3a435332) ([merge request](gitlab-org/gitlab!155979))
- [Include SAST Advanced in configuration UI allowlist](gitlab-org/gitlab@0f3e2a4bd3615d84560a16ed8135dff8e9f2a836) ([merge request](gitlab-org/gitlab!155008))
- [Group level work items support group level references](gitlab-org/gitlab@d1d21618d3a4b09505237af330d8503316b745f4) ([merge request](gitlab-org/gitlab!155637))
- [Add search in wiki sidebar](gitlab-org/gitlab@88a691503f1b92d90fd4783f677ed99af0763bbc) ([merge request](gitlab-org/gitlab!156054))
- [Render icons beside suggestions](gitlab-org/gitlab@264f9e3fd3578996a697ed8c93f33b77f050ba5c) ([merge request](gitlab-org/gitlab!155976))
(省略されました)

## 17.0.2 (2024-06-11)
### Fixed (1 change)
- [Fix instance templates pagination](gitlab-org/security/gitlab@d53fb868885472d0b7645afabee590f416eda0d5) **GitLab Enterprise Edition**
### Changed (1 change)
- [Only query the fields needed](gitlab-org/security/gitlab@74794d45373cf605d7c036cc0ab13a3d5018c616)
### Security (4 changes)
- [XSS and content injection raw XHTML files on IOS devices](gitlab-org/security/gitlab@7459916b867b01581b3422fd065419feb6352180) ([merge request](gitlab-org/security/gitlab!4093))
- [Improve go_package_regex to prevent ReDoS attacks](gitlab-org/security/gitlab@45ccd851058bf319f7795e88afcb27c1440c24e9) ([merge request](gitlab-org/security/gitlab!4096))
- [Fix ReDoS in CI Interpolation](gitlab-org/security/gitlab@11be5651e849441813c022bc492e6549e9ed297d) ([merge request](gitlab-org/security/gitlab!4081))
- [Verify Asana access token when testing Asana integration](gitlab-org/security/gitlab@c35fb1ce0e58b8e90bc61b7d48949572fca6705c) ([merge request](gitlab-org/security/gitlab!4059))
## 16.11.4 (2024-06-11)
### Security (4 changes)
- [XSS and content injection raw XHTML files on IOS devices](gitlab-org/security/gitlab@5df472ac0deefe1e59ecfc0ffae7fa489cb6c9ab) ([merge request](gitlab-org/security/gitlab!4094))
- [Improve go_package_regex to prevent ReDoS attacks](gitlab-org/security/gitlab@d0b04b06f59e81bc57f6b33e26a0399b4b86ee80) ([merge request](gitlab-org/security/gitlab!4097))
- [Fix ReDoS in CI Interpolation](gitlab-org/security/gitlab@b013996a0612c9cc1e43bcd0be4b47d98eaf92f4) ([merge request](gitlab-org/security/gitlab!4082))
- [Verify Asana access token when testing Asana integration](gitlab-org/security/gitlab@6db47bd6ace0904869f56f035ff408855f3f4c9b) ([merge request](gitlab-org/security/gitlab!4060))

## 17.0.1 (2024-05-21)
### Fixed (2 changes)
- [Don't fail so loudly if default work item type is invalid](gitlab-org/security/gitlab@c0817a7654e3fb68e1cc89e19599fd16ff63f121)
- [Ensure BLPOP/BRPOP returns nil instead of raising ReadTimeoutError](gitlab-org/security/gitlab@9a0c5c69aa9d54aaae8ceb1698c7fbae0aa74694)
### Security (7 changes)
- [Prevent PDF.js from evaluating scripts](gitlab-org/security/gitlab@2820f31998ca2dcf61eb4b6893b615cebb503b07) ([merge request](gitlab-org/security/gitlab!4069))
- [Caching test_report api response to reduce calculations](gitlab-org/security/gitlab@b64b0178e955d5091dfaf47b632af266165a5a2e) ([merge request](gitlab-org/security/gitlab!4051))
- [Restrict access to Secure artifacts to developer role](gitlab-org/security/gitlab@5dd7b7377e0d33dd635fedca66e4aefd5bdf7c7e) ([merge request](gitlab-org/security/gitlab!4053))
- [Fail create commit status on pipeline_id / sha mismatch](gitlab-org/security/gitlab@460dd3c803da58973d2a4597581c42f4f82e76cc) ([merge request](gitlab-org/security/gitlab!4049))
- [Use UntrustedRegexp for gollum pattern](gitlab-org/security/gitlab@b5499fca0fa5ac226f97665168562a9f93465525) ([merge request](gitlab-org/security/gitlab!4039))
- [Patch @gitlab/web-ide to fix XSS webWorkerExtensionHostIframe.html](gitlab-org/security/gitlab@c848b946ee4867332692d15e6c27e8efaf37ae53) ([merge request](gitlab-org/security/gitlab!4055))
- [Add text limit to ci_runners text fields](gitlab-org/security/gitlab@20cf74de115473a32bb3c1e3d52e3c7b8f31b3f9) ([merge request](gitlab-org/security/gitlab!4050))
## 16.11.3 (2024-05-21)
### Fixed (2 changes)
- [Ensure BLPOP/BRPOP returns nil instead of raising ReadTimeoutError](gitlab-org/security/gitlab@53de79ac43f81963a15be27b94bc67f7bbf036b6)
- [Fix Sidekiq migration timeout](gitlab-org/security/gitlab@32cf49a634b4cb15f065c3e112a693ea30dadda5)
### Security (7 changes)
- [Prevent PDF.js from evaluating scripts](gitlab-org/security/gitlab@b5f9843d9b54ca45817c16cbb706697bf9d44d81) ([merge request](gitlab-org/security/gitlab!4070))
- [Caching test_report api response to reduce calculations](gitlab-org/security/gitlab@63299beda6e61653070c279ad6838a99a29dc33f) ([merge request](gitlab-org/security/gitlab!4027))
(省略されました)

## 17.0.0 (2024-05-15)
### Added (164 changes)
- [Add more actions to work item sticky header](gitlab-org/gitlab@d652db2e95244d18fd9e7d17e4ad92b586b8ddb6) ([merge request](gitlab-org/gitlab!152156))
- [Expose webhook name and description fields in API](gitlab-org/gitlab@3c3e42b2e6f43450667edd0892c66965035b3982) ([merge request](gitlab-org/gitlab!152497))
- [Expose VSA metrics via GraphQL](gitlab-org/gitlab@d45e601964aef8557d289a13c3b40a9f5b1431ac) ([merge request](gitlab-org/gitlab!152029))
- [Update project policy to use admin_push_rules](gitlab-org/gitlab@67b51d054820e891425f880be9981ecbae615196) ([merge request](gitlab-org/gitlab!150415)) **GitLab Enterprise Edition**
- [Document migration to multiple databases for Streaming Replication setup](gitlab-org/gitlab@7c845587e022488153d95b213bbe9e308f648844) ([merge request](gitlab-org/gitlab!152389))
- [Auto assign the new members a duo pro seat](gitlab-org/gitlab@6f42311253eb9005109849c3aafd2681f69a9cfb) ([merge request](gitlab-org/gitlab!152058)) **GitLab Enterprise Edition**
- [Augment GCS signed URLs with GitLab metadata for package registry](gitlab-org/gitlab@e03f6750463a4783165463b7df7241013b7cf863) ([merge request](gitlab-org/gitlab!147207))
- [Add automatic color mode](gitlab-org/gitlab@d57d070fd9e07f672cd5fb20f6a3ca6c9cf22aa6) ([merge request](gitlab-org/gitlab!150254))
- [Enable ai_gateway_docs_search as beta feature](gitlab-org/gitlab@4825c14339231ab0123ad41e63ad8f639441a5a8) ([merge request](gitlab-org/gitlab!152581)) **GitLab Enterprise Edition**
- [Set imported_from for Direct Transfer objects](gitlab-org/gitlab@798ba98818bfaeea1d0982a6e21fd9b2ac077fc8) ([merge request](gitlab-org/gitlab!152576))
- [Adding create and delete apis for group namespace filters](gitlab-org/gitlab@1395a790daa3719e560a46b63df46506a08ead27) ([merge request](gitlab-org/gitlab!150712)) **GitLab Enterprise Edition**
- [Cleanup default_branch_protection_defaults feature flag](gitlab-org/gitlab@78af3a7af2823e3de3ec588ee5e4ca9bb0c63709) ([merge request](gitlab-org/gitlab!152543))
- [Warn when pages multiple deployments is disabled](gitlab-org/gitlab@903fdde47300c27cd1aad69141cf19b7a8f7d57c) ([merge request](gitlab-org/gitlab!150750)) **GitLab Enterprise Edition**
- [Add admin_web_hook ability to custom roles](gitlab-org/gitlab@984a60ababeb79b1e965173e86cabb894a0dd74f) ([merge request](gitlab-org/gitlab!151551)) **GitLab Enterprise Edition**
- [Add new params in protected branch creation](gitlab-org/gitlab@ba25cab465f14ccd9da05984d2fb45846a9c4e13) ([merge request](gitlab-org/gitlab!152346)) **GitLab Enterprise Edition**
- [Add reassigned_by_user to import_source_users](gitlab-org/gitlab@e758f0391f29d3ef369efd21c6c4904b85c4a36b) ([merge request](gitlab-org/gitlab!152199))
- [Migrate Value streams dashboard to shared analytics dashboards](gitlab-org/gitlab@5bed304fe361a7ca8907751c9a4bad92d4d9eb40) ([merge request](gitlab-org/gitlab!151845))
(省略されました)

## 16.11.2 (2024-05-07)
### Fixed (1 change)
- [Changed the email validation for only encoded chars](gitlab-org/security/gitlab@d920615ba4a25ffc035ad6b8c26285815eeff4f9) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/151484/))
### Changed (1 change)
- [Return or display Gitlab version if GITLAB_KAS_VERSION is a SHA](gitlab-org/security/gitlab@0f75cac19752463492bd3311b14c37c468f8ab0d)
### Security (11 changes)
- [Update GITHUB_MEDIA_CDN to avoid SSRF when importing from Github](gitlab-org/security/gitlab@d09a2e9218ca0388e17c6e5810d73b1cdfaed965) ([merge request](gitlab-org/security/gitlab!4011))
- [Prevent namespace banned users from reading project todos](gitlab-org/security/gitlab@b3cc2799fe98e9a5a493545f5ff45098b9ba60fb) ([merge request](gitlab-org/security/gitlab!3968))
- [ReDoS in GitRefsFinder when using wildcards in branch search](gitlab-org/security/gitlab@1b2d2c2b4fb27eafd40ab4ef230f2b52d7b73747) ([merge request](gitlab-org/security/gitlab!3995))
- [ReDos in escape and commit reference filters](gitlab-org/security/gitlab@0b08bd7eebf65e4999574f3f856d996568c87fe6) ([merge request](gitlab-org/security/gitlab!3972))
- [Validate request origin before MR approval](gitlab-org/security/gitlab@ad8dfe033740952805ed677f26ff2ec391e4be82) ([merge request](gitlab-org/security/gitlab!4007))
- [Check request size before updating user pins](gitlab-org/security/gitlab@8f8110ed24f70c00f1bc69848af22f7fdd0caf57) ([merge request](gitlab-org/security/gitlab!4014))
- [Enforce per_page validation for Branches/TagsFinders](gitlab-org/security/gitlab@4655fca6ac2ecc340dd3bc50ddd6a74a8d00048f) ([merge request](gitlab-org/security/gitlab!3998))
- [Update Integrations::Discord::ATTACHMENT_REGEX regex](gitlab-org/security/gitlab@7d6c80a3768a7c0281647402990b67a4fa8a2c19) ([merge request](gitlab-org/security/gitlab!3988))
- [Update BaseMessage::RELATIVE_LINK_REGEX regex](gitlab-org/security/gitlab@52311b09ce70c1b3db8b7e7a49808467f76980b5) ([merge request](gitlab-org/security/gitlab!3989))
- [Require confirmation before linking JWT identity](gitlab-org/security/gitlab@2d84949cf6707d14ffd5a54290c605ff83bed6f6) ([merge request](gitlab-org/security/gitlab!3990))
- [Fix confidentiality check optimization](gitlab-org/security/gitlab@df63eb711d5d1f75147a4c5b3365559ed42af879) ([merge request](gitlab-org/security/gitlab!4002))

## 16.11.1 (2024-04-24)
### Security (5 changes)
- [Validation for encoded formatting characters](gitlab-org/security/gitlab@fc42e4b96ae1ac3cd766569d62d025cbf23ef16c) ([merge request](gitlab-org/security/gitlab!3979))
- [Forbid untrusted sign-ins to GitLab with Bitbucket and fix related uid](gitlab-org/security/gitlab@ef083c319e67072029787cd5c6a588562984a58c) ([merge request](gitlab-org/security/gitlab!3983))
- [Ensure PAT scope is validated everywhere for GraphQL/ActionCable](gitlab-org/security/gitlab@1847435210161d95b9c5fcd079380e7f2892195f) ([merge request](gitlab-org/security/gitlab!3975))
- [Protect against ReDoS in FileFinder with wildcard filters](gitlab-org/security/gitlab@dc16f3baa640ca8d5b223782ef3d58369423a1dd) ([merge request](gitlab-org/security/gitlab!3969))
- [fix: Validate security report version against schema during parsing](gitlab-org/security/gitlab@55e58d49051aa42938ec1d159b5e7eb3c47d2eb1) ([merge request](gitlab-org/security/gitlab!3967))

## 16.11.0 (2024-04-17)
### Added (121 changes)
- [Add skip secret detection audit event](gitlab-org/gitlab@e5b10f3c044a8992907f2dcc598123d798be9c7e) ([merge request](gitlab-org/gitlab!147855)) **GitLab Enterprise Edition**
- [Added added_approver to the todo action enum in GraphQL](gitlab-org/gitlab@0f2966c47ed9f5e042b8fb633ce454aa4592aa35) by @zillemarco ([merge request](gitlab-org/gitlab!148831))
- [Add setting for enabling pre-receive SD](gitlab-org/gitlab@dc4f895086986077fafc660537060d78546826b2) ([merge request](gitlab-org/gitlab!148332)) **GitLab Enterprise Edition**
- [Added pending member for project listing page](gitlab-org/gitlab@dcbb5001eca02fd8aa6d8dbd06a401fc49716988) ([merge request](gitlab-org/gitlab!146678)) **GitLab Enterprise Edition**
- [Merge branch 'add-support-for-v-prefix' into 'master' ](gitlab-org/gitlab@e5bcb9dc8a57d7bdcf6fc5ed4d9a34590fdf7348) ([merge request](gitlab-org/gitlab!148706))
- [Simplifies SemanticVersionable concern](gitlab-org/gitlab@f7353bc52a84f417ccc032ae4ba45e1058c14c50) ([merge request](gitlab-org/gitlab!148706))
- [Added model for external_status_checks_protected_branches](gitlab-org/gitlab@2647e53b6725a9c90e032488401d4b1d2827571e) ([merge request](gitlab-org/gitlab!149046)) **GitLab Enterprise Edition**
- [Update URL with cursor to load a specific page](gitlab-org/gitlab@4c7fb3d5d2853424555c64e23ebbe1ccb79dee0f) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/148593)) **GitLab Enterprise Edition**
- [Added update api for instance level audit streaming](gitlab-org/gitlab@444a1b0312439545bd7ca7bd50136047c8db9c6f) ([merge request](gitlab-org/gitlab!149104)) **GitLab Enterprise Edition**
- [Add endpoint for checking relation import status](gitlab-org/gitlab@f450696483846a1cd7da2f2e8315e52df979cd75) ([merge request](gitlab-org/gitlab!147775))
- [Utilize show_diff_preview_in_email column](gitlab-org/gitlab@614f6d5d7d2c0358ebf5425e76d4f3062009be6c) by @joe-snyder ([merge request](gitlab-org/gitlab!98547))
- [Add API for trigger project webhook](gitlab-org/gitlab@b9bf0c33d5139823dada3a401a2607fa3856b6b5) by @lifez ([merge request](gitlab-org/gitlab!147656))
- [Add displaying list of linked policies to framework table](gitlab-org/gitlab@4528caee6d01cfb2e2c6b4f739cf7da3ed63a81f) ([merge request](gitlab-org/gitlab!149324)) **GitLab Enterprise Edition**
- [Change admin users search filter](gitlab-org/gitlab@60cb8a9b7be5eed84f1a2bf9d41c5e3a5620099a) by @bahek2462774 ([merge request](gitlab-org/gitlab!144907))
- [Protected packages: Show protected label in packages list](gitlab-org/gitlab@42a2d94bac523ec8cbd000609c49a38b84a72b46) by @gerardo-navarro ([merge request](gitlab-org/gitlab!141134))
- [Added delete api for instance level audit streaming](gitlab-org/gitlab@e81b3ef2809032b87bbdb1c3a662c256182aadad) ([merge request](gitlab-org/gitlab!149101)) **GitLab Enterprise Edition**
- [Update query for elevated_guests to use occupies_seat](gitlab-org/gitlab@0c7f5da4f50c6034cb018eca9378623869c5df53) ([merge request](gitlab-org/gitlab!148653)) **GitLab Enterprise Edition**
(省略されました)