GitLab

## 16.11.1 (2024-04-24)
### Security (5 changes)
- [Validation for encoded formatting characters](gitlab-org/security/gitlab@fc42e4b96ae1ac3cd766569d62d025cbf23ef16c) ([merge request](gitlab-org/security/gitlab!3979))
- [Forbid untrusted sign-ins to GitLab with Bitbucket and fix related uid](gitlab-org/security/gitlab@ef083c319e67072029787cd5c6a588562984a58c) ([merge request](gitlab-org/security/gitlab!3983))
- [Ensure PAT scope is validated everywhere for GraphQL/ActionCable](gitlab-org/security/gitlab@1847435210161d95b9c5fcd079380e7f2892195f) ([merge request](gitlab-org/security/gitlab!3975))
- [Protect against ReDoS in FileFinder with wildcard filters](gitlab-org/security/gitlab@dc16f3baa640ca8d5b223782ef3d58369423a1dd) ([merge request](gitlab-org/security/gitlab!3969))
- [fix: Validate security report version against schema during parsing](gitlab-org/security/gitlab@55e58d49051aa42938ec1d159b5e7eb3c47d2eb1) ([merge request](gitlab-org/security/gitlab!3967))

## 16.11.0 (2024-04-17)
### Added (121 changes)
- [Add skip secret detection audit event](gitlab-org/gitlab@e5b10f3c044a8992907f2dcc598123d798be9c7e) ([merge request](gitlab-org/gitlab!147855)) **GitLab Enterprise Edition**
- [Added added_approver to the todo action enum in GraphQL](gitlab-org/gitlab@0f2966c47ed9f5e042b8fb633ce454aa4592aa35) by @zillemarco ([merge request](gitlab-org/gitlab!148831))
- [Add setting for enabling pre-receive SD](gitlab-org/gitlab@dc4f895086986077fafc660537060d78546826b2) ([merge request](gitlab-org/gitlab!148332)) **GitLab Enterprise Edition**
- [Added pending member for project listing page](gitlab-org/gitlab@dcbb5001eca02fd8aa6d8dbd06a401fc49716988) ([merge request](gitlab-org/gitlab!146678)) **GitLab Enterprise Edition**
- [Merge branch 'add-support-for-v-prefix' into 'master' ](gitlab-org/gitlab@e5bcb9dc8a57d7bdcf6fc5ed4d9a34590fdf7348) ([merge request](gitlab-org/gitlab!148706))
- [Simplifies SemanticVersionable concern](gitlab-org/gitlab@f7353bc52a84f417ccc032ae4ba45e1058c14c50) ([merge request](gitlab-org/gitlab!148706))
- [Added model for external_status_checks_protected_branches](gitlab-org/gitlab@2647e53b6725a9c90e032488401d4b1d2827571e) ([merge request](gitlab-org/gitlab!149046)) **GitLab Enterprise Edition**
- [Update URL with cursor to load a specific page](gitlab-org/gitlab@4c7fb3d5d2853424555c64e23ebbe1ccb79dee0f) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/148593)) **GitLab Enterprise Edition**
- [Added update api for instance level audit streaming](gitlab-org/gitlab@444a1b0312439545bd7ca7bd50136047c8db9c6f) ([merge request](gitlab-org/gitlab!149104)) **GitLab Enterprise Edition**
- [Add endpoint for checking relation import status](gitlab-org/gitlab@f450696483846a1cd7da2f2e8315e52df979cd75) ([merge request](gitlab-org/gitlab!147775))
- [Utilize show_diff_preview_in_email column](gitlab-org/gitlab@614f6d5d7d2c0358ebf5425e76d4f3062009be6c) by @joe-snyder ([merge request](gitlab-org/gitlab!98547))
- [Add API for trigger project webhook](gitlab-org/gitlab@b9bf0c33d5139823dada3a401a2607fa3856b6b5) by @lifez ([merge request](gitlab-org/gitlab!147656))
- [Add displaying list of linked policies to framework table](gitlab-org/gitlab@4528caee6d01cfb2e2c6b4f739cf7da3ed63a81f) ([merge request](gitlab-org/gitlab!149324)) **GitLab Enterprise Edition**
- [Change admin users search filter](gitlab-org/gitlab@60cb8a9b7be5eed84f1a2bf9d41c5e3a5620099a) by @bahek2462774 ([merge request](gitlab-org/gitlab!144907))
- [Protected packages: Show protected label in packages list](gitlab-org/gitlab@42a2d94bac523ec8cbd000609c49a38b84a72b46) by @gerardo-navarro ([merge request](gitlab-org/gitlab!141134))
- [Added delete api for instance level audit streaming](gitlab-org/gitlab@e81b3ef2809032b87bbdb1c3a662c256182aadad) ([merge request](gitlab-org/gitlab!149101)) **GitLab Enterprise Edition**
- [Update query for elevated_guests to use occupies_seat](gitlab-org/gitlab@0c7f5da4f50c6034cb018eca9378623869c5df53) ([merge request](gitlab-org/gitlab!148653)) **GitLab Enterprise Edition**
(省略されました)

## 16.10.3 (2024-04-12)
No changes.
## 16.9.5 (2024-04-12)
No changes.
## 16.8.7 (2024-04-12)
No changes.

## 16.10.2 (2024-04-09)
### Fixed (1 change)
- [Fix URL validator for mirror services when using localhost](gitlab-org/security/gitlab@82ee9dbd7b4f52507563a509eaa8d2e4839b2e58)
### Security (3 changes)
- [Update Gitlab::Regex::Packages#slack_link_regex](gitlab-org/security/gitlab@25d2355e4cd84a5c1005f1769624e83bfc6d63c2) ([merge request](gitlab-org/security/gitlab!3945))
- [Fix XSS in autocomplete in rich text editor](gitlab-org/security/gitlab@dc132c61a896afc1b63ce9cf31b69797eecf95ce) ([merge request](gitlab-org/security/gitlab!3946))
- [Correctly parse attachments for junit result](gitlab-org/security/gitlab@e729252188fd47950e27abe14bad4bf748e99455) ([merge request](gitlab-org/security/gitlab!3934))
## 16.9.4 (2024-04-09)
### Security (3 changes)
- [Update Gitlab::Regex::Packages#slack_link_regex](gitlab-org/security/gitlab@af54b6789912e394423920674ac2f4f0e38f9ff7) ([merge request](gitlab-org/security/gitlab!3903))
- [Fix XSS in autocomplete in rich text editor](gitlab-org/security/gitlab@bf84ed8c4d716d642ed36c1a804733a17dace11a) ([merge request](gitlab-org/security/gitlab!3947))
- [Correctly parse attachments for junit result](gitlab-org/security/gitlab@ed457bf14d21566b98fa461dfac10dac06b054ac) ([merge request](gitlab-org/security/gitlab!3911))
## 16.8.6 (2024-04-09)
### Security (3 changes)
- [Update Gitlab::Regex::Packages#slack_link_regex](gitlab-org/security/gitlab@1f88950d5d570b14915818539d88d54999e2606c) ([merge request](gitlab-org/security/gitlab!3902))
- [Fix XSS in autocomplete in rich text editor](gitlab-org/security/gitlab@60f3d5f99ae8c8df2f5a5543b61ce09f8bddc06e) ([merge request](gitlab-org/security/gitlab!3948))
- [Correctly parse attachments for junit result](gitlab-org/security/gitlab@2059390df321318c2f82b83e488e76ff23d6609c) ([merge request](gitlab-org/security/gitlab!3910))

## 16.10.1 (2024-03-27)
### Fixed (2 changes)
- [Update redis-client to v0.21.1](gitlab-org/security/gitlab@c9d6f434dbc8d5ca244d0c00d8c5cf0d9092df39)
- [Fix new project group templates pagination](gitlab-org/security/gitlab@956b01c404e55bc92276ab7d21c63a09bc3edfb5) **GitLab Enterprise Edition**
### Security (3 changes)
- [Merge branch 'dchevalier2-master-patch-88770' into 'master'](gitlab-org/security/gitlab@9e621975bf405f2e66541faebf11b06a31360b5d) ([merge request](gitlab-org/security/gitlab!3936))
- [Limit the number of emojis we will transform](gitlab-org/security/gitlab@e935e1cc26a06990832781b30827d5afa53d0194) ([merge request](gitlab-org/security/gitlab!3927))
- [Fix stored xss in wikis using the abstract_reference_filter](gitlab-org/security/gitlab@d1bad1a4847917d5f10c883d0d2f627088a00ca5) ([merge request](gitlab-org/security/gitlab!3929))
## 16.9.3 (2024-03-27)
### Fixed (1 change)
- [Fix new project group templates pagination](gitlab-org/security/gitlab@93a68da5a3ddc7f2f5f44658a163198a8c5da240) **GitLab Enterprise Edition**
### Security (2 changes)
- [Limit the number of emojis we will transform](gitlab-org/security/gitlab@41ec64318e92b428edf9796b2777dc1d8b9b3bc2) ([merge request](gitlab-org/security/gitlab!3926))
- [Fix stored xss in wikis using the abstract_reference_filter](gitlab-org/security/gitlab@a39b0ea96cf309dfc2d8a3a73ea4a047567bd0a1) ([merge request](gitlab-org/security/gitlab!3921))
## 16.8.5 (2024-03-27)
### Security (2 changes)
- [Limit the number of emojis we will transform](gitlab-org/security/gitlab@8d949c60d508b6cf3d558fc4f906c82b03e06748) ([merge request](gitlab-org/security/gitlab!3925))
- [Fix stored xss in wikis using the abstract_reference_filter](gitlab-org/security/gitlab@39a9847874a56baabacfba4d832b6d30ca388baf) ([merge request](gitlab-org/security/gitlab!3922))

## 16.10.0 (2024-03-20)
### Added (115 changes)
- [Add drawer to list of linked policies](gitlab-org/gitlab@218016c38801cfeac1308385097dcd760182a378) ([merge request](gitlab-org/gitlab!147039)) **GitLab Enterprise Edition**
- [Command palette default opening state - part 3](gitlab-org/gitlab@a51d07342e3a7dc4da56ec84efec5191d8663640) ([merge request](gitlab-org/gitlab!142816))
- [Expose repository object format via GitInfo](gitlab-org/gitlab@4947d2c17a7118e392312f9d31fcf7c6799577e3) ([merge request](gitlab-org/gitlab!146485))
- [Add deprecated_policy field for approval policies](gitlab-org/gitlab@2e332564e7148343db00f79a4caafe672e206c87) ([merge request](gitlab-org/gitlab!146520))
- [Add approval rules drawer component](gitlab-org/gitlab@51b30ac3d7bb61ab5f43fc87a322560ea0167238) ([merge request](gitlab-org/gitlab!146502)) **GitLab Enterprise Edition**
- [Expose external issue links to Vulnerabilities if any](gitlab-org/gitlab@7a8d63cd7660e3bc2dcc1de307f556549c137876) ([merge request](gitlab-org/gitlab!146149)) **GitLab Enterprise Edition**
- [Add table to track CI component usage](gitlab-org/gitlab@3372a7566bfe2b0bea000e48fd0bffbaffb2db45) ([merge request](gitlab-org/gitlab!145881))
- [Add Pages URL anchor](gitlab-org/gitlab@6d5023141d9597087ffd353a2794102e52ec5e09) ([merge request](gitlab-org/gitlab!144281))
- [Update Jira::JqlBuilderService to support multiple project keys](gitlab-org/gitlab@4da23ca620a7219a43c81170496ef99ebc989efd) ([merge request](gitlab-org/gitlab!146916))
- [Add new achievement UI](gitlab-org/gitlab@a4bcf4e181d1458f8bcb504de2d7e95ee3a4136e) ([merge request](gitlab-org/gitlab!146273))
- [Protected containers: GraphQL query for container protection rules](gitlab-org/gitlab@1a773182a248eb646affd5334c6a6e1182828345) by @gerardo-navarro ([merge request](gitlab-org/gitlab!146467))
- [Add runner creation metrics](gitlab-org/gitlab@dc17b7ad19792592b2e9078e49755a5da3356bc6) ([merge request](gitlab-org/gitlab!146063)) **GitLab Enterprise Edition**
- [Allow to enable/disable ClickHouse for analytics](gitlab-org/gitlab@f025888da096cace95cf86d5d20f3a52e0691eaa) ([merge request](gitlab-org/gitlab!145022)) **GitLab Enterprise Edition**
- [Adds Destroy action to delete models](gitlab-org/gitlab@1e487f60a57924b9c7dcbb1503af5e7478781a3a) ([merge request](gitlab-org/gitlab!144226))
- [Added event type filters for group audit event destinations](gitlab-org/gitlab@67cb59d71542f90b1e1fc62295747814fc16dd0c) ([merge request](gitlab-org/gitlab!144139)) **GitLab Enterprise Edition**
- [This MR adds alert banner](gitlab-org/gitlab@4d9836b4900ab7540c64e766ad6c18c0e9ce7011) ([merge request](gitlab-org/gitlab!146709)) **GitLab Enterprise Edition**
- [Create partitioned merge_request_diff_commits copy](gitlab-org/gitlab@1efd0bb9ea849e189d39940d0cd9a8878e20bf63) ([merge request](gitlab-org/gitlab!143869))
(省略されました)

## 16.9.2 (2024-03-06)
### Fixed (2 changes)
- [Backport 145801 (Fix CI linter error when repository is empty) to 16.9](gitlab-org/security/gitlab@3387113650f62739955a47de59f7c17dbe7e9509)
- [Fix container repositories checksum mismatch errors](gitlab-org/security/gitlab@7dce926636d80e26c4e99ac74c09c3795063151a) **GitLab Enterprise Edition**
### Security (2 changes)
- [Restrict group token rotation for custom roles](gitlab-org/security/gitlab@c7eafe2b214d8a5c739fe116899540133daebef3) ([merge request](gitlab-org/security/gitlab!3905))
- [Reset approvals when reopening a MR](gitlab-org/security/gitlab@4c3fbb6674de3dfc01332a25959167ba1085e5bb) ([merge request](gitlab-org/security/gitlab!3897))
## 16.8.4 (2024-03-06)
### Fixed (3 changes)
- [Backport 145801 (Fix CI linter error when repository is empty) to 16.8](gitlab-org/security/gitlab@0cf6a481f8555cf6c94d1b8b6bbc74af5a29c99f)
- [Fix container repositories checksum mismatch errors](gitlab-org/security/gitlab@3ac997e5fe461b828dcc5ef3990ec88e24d1ffb2) **GitLab Enterprise Edition**
- [Use the backup database connection while restoring timeouts](gitlab-org/security/gitlab@d5376ee9362c5a14e921f4f5fd54a1214480551f)
### Security (2 changes)
- [Restrict group token rotation for custom roles](gitlab-org/security/gitlab@fb35694c0a16a12cd62b2737937e4d20e04e155f) ([merge request](gitlab-org/security/gitlab!3904))
- [Reset approvals when reopening a MR](gitlab-org/security/gitlab@717aa058de09f0357914f0f8dce84340f10bfb45) ([merge request](gitlab-org/security/gitlab!3828))
## 16.7.7 (2024-03-06)
### Fixed (1 change)
- [Use the backup database connection while restoring timeouts](gitlab-org/security/gitlab@796d1a2904fee95a7a1f9f4eb7bcfb4f431bf720)
### Security (1 change)
(省略されました)

## 16.9.1 (2024-02-20)
### Fixed (2 changes)
- [Fix Duo Chat CORS issue by updating web-ide package](gitlab-org/security/gitlab@6c4fccdd4d33fd40550197699a990a0d07a65137)
- [Fix deny_all_requests_except_allowed of AddressableUrlValidator](gitlab-org/security/gitlab@18ff795a3b9fdd54705c1a8898ad15b5dd84e2f0)
### Security (10 changes)
- [Add a limit to CodeOwners reference extractor regex](gitlab-org/security/gitlab@b090b503c47300d708d7e51192a486467fdecefd) ([merge request](gitlab-org/security/gitlab!3894))
- [Ensure LDAP user cannot sign in with password](gitlab-org/security/gitlab@1c2de5ef077c5710e213b668373557c01ff8ba26) ([merge request](gitlab-org/security/gitlab!3891))
- [Ensure LDAP users cannot reset local password to bypass LDAP](gitlab-org/security/gitlab@07621ad26d2db3656c99b332e697a6b0857f6e07) ([merge request](gitlab-org/security/gitlab!3879))
- [Disallow assigning higher role than current user](gitlab-org/security/gitlab@c9d8ffebe020dfdc1435e073516a098a8d188ff0) ([merge request](gitlab-org/security/gitlab!3889))
- [Check project read access in Environment and Operations dashboard](gitlab-org/security/gitlab@83fdac099562fa4aebcc43e400b0da2026c730a6) ([merge request](gitlab-org/security/gitlab!3873))
- [Fix Stored-XSS in user's profile page: Change markup used for pronouns](gitlab-org/security/gitlab@0fafb29660c08e72b87bd79d792da802c566b650) ([merge request](gitlab-org/security/gitlab!3882))
- [Invalidate markdown cache to clear up stored XSS](gitlab-org/security/gitlab@3411c25e77642fddc3619bf24ee956d4ba4d99b2) ([merge request](gitlab-org/security/gitlab!3884))
- [Disallow users to modify deploy key title](gitlab-org/security/gitlab@46ffceb9c94b6f4ba207ddf035ae67e8de413d57) ([merge request](gitlab-org/security/gitlab!3876))
- [Adds authorization for analytics settings](gitlab-org/security/gitlab@01e2c82cb79b6b4a9f6cf3428890149d023aacfb) ([merge request](gitlab-org/security/gitlab!3877))
- [Use merge_head_diff for codeowners when merge request is mergeable](gitlab-org/security/gitlab@eafc00662cb6e604b35278a5f59c25d418ef00c9) ([merge request](gitlab-org/security/gitlab!3878))
## 16.8.3 (2024-02-20)
### Added (1 change)
- [Allow creation of group-level custom-roles on self-managed instances](gitlab-org/security/gitlab@72eeb80a95e7190b5a6a9a4b113dd88d3f66bdd4) **GitLab Enterprise Edition**
### Fixed (3 changes)
(省略されました)

## 16.9.0 (2024-02-14)
### Added (145 changes)
- [Ensure at least one permission is selected during member role creation](gitlab-org/gitlab@327e3959708cd9b4ed91f565f1b79108ab2c0d6e) ([merge request](gitlab-org/gitlab!143616)) **GitLab Enterprise Edition**
- [Allow signing in to Active Directory with smart card](gitlab-org/gitlab@25f2235ce97701a2677a13a6ae175f40d6f5da64) ([merge request](gitlab-org/gitlab!143721)) **GitLab Enterprise Edition**
- [Add POST /personal_access_tokens/self/rotate endpoint](gitlab-org/gitlab@e48c661eecb449deb591f3c6d89f7aa716460019) by @stalb ([merge request](gitlab-org/gitlab!142664))
- [Track traversal sync events, update vulnerability reads accordingly](gitlab-org/gitlab@9f960c976ffefa38ae025b5531f24886517cfda6) ([merge request](gitlab-org/gitlab!143537)) **GitLab Enterprise Edition**
- [Add achievements UI](gitlab-org/gitlab@7dd37d8ae59dd1fbc6120bfb50cb3821589c8b27) ([merge request](gitlab-org/gitlab!129370))
- [Update BulkImports::Failure to display subrelation that failed to import](gitlab-org/gitlab@8d44a19fe239b03134c4c247fde54b07b2062a6d) ([merge request](gitlab-org/gitlab!142820))
- [Add branchRuleDelete graphql mutation](gitlab-org/gitlab@6bc4e72b8233d8ce06697f88ea82a7fc2a04ddf9) ([merge request](gitlab-org/gitlab!144255))
- [This MR adds experiment promotion banner](gitlab-org/gitlab@9b9ac988a4a831d83514b64d6c203dce134ddde3) ([merge request](gitlab-org/gitlab!144078)) **GitLab Enterprise Edition**
- [Add settting math_rendering_limits_enabled](gitlab-org/gitlab@9f416a02be5417e9473e9f94065dce9ec7170a90) ([merge request](gitlab-org/gitlab!143256))
- [Add basic testing functionality for group level](gitlab-org/gitlab@24d019352e82b4f2c29a5d8cf86068e1ffd0dea3) ([merge request](gitlab-org/gitlab!144023)) **GitLab Enterprise Edition**
- [Sync create indexes and prepare FK for p_ci_builds upstream_pipeline_id](gitlab-org/gitlab@f4e00909f87104e3a4f5b3be8aa90beb22e53101) ([merge request](gitlab-org/gitlab!143897))
- [Added first part of the command palete update](gitlab-org/gitlab@2b5ecb472381de3cea78f40c22fc0ffb5c719fc0) ([merge request](gitlab-org/gitlab!143353))
- [Add composite PK to ci_stages](gitlab-org/gitlab@de4eb89657a422971315b39e1faeab5c98e0307a) ([merge request](gitlab-org/gitlab!144025))
- [Adds download API v4 endpoint for project avatar](gitlab-org/gitlab@d23076b8c94565a857e6e01a87dcc585064c1188) ([merge request](gitlab-org/gitlab!144039))
- [Add designs widget to work items](gitlab-org/gitlab@8533e3ec0ae8f965e82420f8f188a76d4e3cc10c) ([merge request](gitlab-org/gitlab!142113))
- [Adds convert_to_ticket quick action](gitlab-org/gitlab@d3ca0752f06031c5d6e72e06abaad84f96e5bb92) ([merge request](gitlab-org/gitlab!139553))
- [Sort resources by released_at](gitlab-org/gitlab@978ec481cc728643b5a8a98be17535b16e004a19) ([merge request](gitlab-org/gitlab!143532))
(省略されました)

## 16.8.2 (2024-02-07)
### Fixed (3 changes)
- [Fix Redis 6.0 compatibility breakage with Sidekiq 7 gem](gitlab-org/security/gitlab@e61868ad98d2ae640b3deec2b148c01fb52dba77)
- [Defer ConnectionPool instrumentation setup](gitlab-org/security/gitlab@d31ee125cd7ec9023b7558bd7af44c0293637b94)
- [Fix invalid records with FK not valid](gitlab-org/security/gitlab@a8dece6c5d160a218d9622a3dab0f93a7b2ca181)
### Security (4 changes)
- [Fix CI component input Regexp](gitlab-org/security/gitlab@96b81737b2b9f1aa3c9d710bc00b80be8359f68f) ([merge request](gitlab-org/security/gitlab!3854))
- [Make scan result policies block renaming branches](gitlab-org/security/gitlab@6b12a71efe9c82b696cf1dc68c5aa2bc72e5fea3) ([merge request](gitlab-org/security/gitlab!3837))
- [Restrict group access token creation for custom roles](gitlab-org/security/gitlab@e1d38e70f1f5c9defbb0ca2fa4608e603dcd2858) ([merge request](gitlab-org/security/gitlab!3834))
- [Limit vulnerabilitiesCountByDay date range to 1 year](gitlab-org/security/gitlab@5e5428919d4773731bed7f724bd650dbc7555d9e) ([merge request](gitlab-org/security/gitlab!3826))
## 16.7.5 (2024-02-07)
### Fixed (1 change)
- [Update dependency prometheus-client-mmap to '~> 1.1', '>= 1.1.1'](gitlab-org/security/gitlab@41326f12836b409735f0745d57b135fd952b54e0)
### Security (3 changes)
- [Fix CI component input Regexp](gitlab-org/security/gitlab@7b29c348a90b3311c5661b57572cbedf6160d02a) ([merge request](gitlab-org/security/gitlab!3855))
- [Make scan result policies block renaming branches](gitlab-org/security/gitlab@5f8202c849059e28370d79aa79cd94a851abd61a) ([merge request](gitlab-org/security/gitlab!3838))
- [Limit vulnerabilitiesCountByDay date range to 1 year](gitlab-org/security/gitlab@95c1de1c1c297ba59e7e52485e9703b01d8ad552) ([merge request](gitlab-org/security/gitlab!3827))

## 16.8.1 (2024-01-24)
### Fixed (1 change)
- [Optimize garbage collection process](gitlab-org/security/gitlab@1d5a7bc23d5678a2d3c059cbced7d33f5e1e68c4)
### Changed (1 change)
- [Migrate {hll_counters}_i_code_review_create_mr from hll to int](gitlab-org/security/gitlab@357bfe13fc9ab986bba65eb2b06413baed1357f1)
### Security (5 changes)
- [Devfile parser arbitrary file write](gitlab-org/security/gitlab@4f2cc52e8695d219bc9e5c73ada1cf92b1b7a398) ([merge request](gitlab-org/security/gitlab!3817))
- [Use public email in tags atom feed](gitlab-org/security/gitlab@d3b7615e4b0e5aa8007a8d00944bbd98a98c5f84) ([merge request](gitlab-org/security/gitlab!3822))
- [Fix improper username sanitization](gitlab-org/security/gitlab@2f5cccd35e5e0e5e1786d9d10cfacf890704d1ad) ([merge request](gitlab-org/security/gitlab!3818))
- [Escape user input before building regex for linker](gitlab-org/security/gitlab@7a315ac79ece40726fa28d0821c872f0343346b8) ([merge request](gitlab-org/security/gitlab!3819))
- [Do not allow non-team member to set MR assignees/reviewers](gitlab-org/security/gitlab@bf0c84e848ef955443e3998b937aabaf66cdb5ed) ([merge request](gitlab-org/security/gitlab!3820))
## 16.7.4 (2024-01-24)
### Fixed (1 change)
- [Bring legacy verification behavior back for repositories](gitlab-org/security/gitlab@0f3c5e6c2867cb9ea5ca40cf6a0f1526d6018ad1) **GitLab Enterprise Edition**
### Security (5 changes)
- [Devfile parser arbitrary file write](gitlab-org/security/gitlab@ae7844052f79e4fa987818bf642313fb6e47388f) ([merge request](gitlab-org/security/gitlab!3800))
- [Use public email in tags atom feed](gitlab-org/security/gitlab@9abe7c6ca865c4884ad25db17c02ee7feb5c6c91) ([merge request](gitlab-org/security/gitlab!3803))
- [Fix improper username sanitization](gitlab-org/security/gitlab@58ab3f89b3298a248640bddbf94a5c3fdf27a867) ([merge request](gitlab-org/security/gitlab!3785))
- [Escape user input before building regex for linker](gitlab-org/security/gitlab@ced4fa77abf8a05cbc015b6128220d783d11c3a2) ([merge request](gitlab-org/security/gitlab!3788))
- [Do not allow non-team member to set MR assignees/reviewers](gitlab-org/security/gitlab@d374f84266d2ca14a79a3924f458e244b50191e4) ([merge request](gitlab-org/security/gitlab!3792))