This matches the version shipped in gitaly-ruby.

The main changes between 1.1.1 and 1.2.1 are CI-related
improvements:
https://github.com/brianmario/escape_utils/compare/1.1.1...1.2.1

loofah: CVE-2018-16468:
https://github.com/flavorjones/loofah/issues/154

nokogiri: CVE-2018-14404 and CVE-2018-14567
https://github.com/sparklemotion/nokogiri/blob/master/CHANGELOG.md

rack: CVE-2018-16471
https://github.com/rack/rack/commit/e5d58031b766e49687157b45edab1b8457d972bd

i18n: https://github.com/svenfuchs/i18n/releases

concurrent-ruby: https://github.com/ruby-concurrency/concurrent-ruby/blob/master/CHANGELOG.md

See https://github.com/seattlerb/ruby_parser/blob/master/History.rdoc

Signed-off-by: NTakuya Noguchi <takninnovationresearch@gmail.com>

The nakayoshi_fork gem works around the lack of a Ruby compacting
garbage collecting by calling GC.start a few times to "promote" the age
of young objects to the maximum age 3. This reduces the number of dirty
pages and consequently improves copy-on-write behavior with unicorn
and other forking Web application servers.

This forks live at https://github.com/gitlabhq/default_value_for/tree/69-fix-action_controller-parameters-handling
and fixes an issue where default_value_for wouldn't handle
`ActionController::Parameters` correctly with Rails 5.

This fixes https://gitlab.com/gitlab-org/gitlab-ce/issues/54093.
Signed-off-by: NRémy Coutable <remy@rymai.me>

Signed-off-by: NRémy Coutable <remy@rymai.me>

Signed-off-by: NTakuya Noguchi <takninnovationresearch@gmail.com>

* updates Gemfile
* uses Rails 5 unless explicitly disabled

See https://gitlab.com/gitlab-org/gitlab-ce/issues/53082

This version supports SSL/TLS via the redis:// URL scheme:
https://github.com/redis-store/redis-store/blob/master/CHANGELOG.md

Part of https://gitlab.com/gitlab-org/gitlab-ce/issues/47702

Full list of changes:
https://github.com/mime-types/ruby-mime-types/blob/master/History.md

This matches the version shipped in gitaly-ruby.

* Sidekiq changes:
  https://github.com/mperham/sidekiq/blob/master/Changes.md

* Rack 1.6.1 fixes CVE-2014-9490:
  https://github.com/rack/rack/blob/master/CHANGELOG.md

* rack-protection 2.0.4 only fixes a minor message:
  https://github.com/sinatra/sinatra/commits/master/rack-protection

This new endpoint allow users to update a submodule's reference.

The MR involves adding a new operation RPC operation in gitaly-proto
(see gitlab-org/gitaly-proto!233) and change Gitaly to use this
new version (see gitlab-org/gitaly!936).

See gitlab-org/gitlab-ce!20949

Signed-off-by: NTakuya Noguchi <takninnovationresearch@gmail.com>

Signed-off-by: NTakuya Noguchi <takninnovationresearch@gmail.com>

This squelches the following warning:

warning: parser/current is loading parser/ruby24, which recognizes
warning: 2.4.4-compliant syntax, but you are running 2.4.5.
warning: please see https://github.com/whitequark/parser#compatibility-with-ruby-mri.

Signed-off-by: NTakuya Noguchi <takninnovationresearch@gmail.com>

Reverting https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/15734 .
We are not using asset sync currently.

This allows us (and others) to test drive Puma without it affecting all
users. Puma can be enabled by setting the environment variable
"EXPERIMENTAL_PUMA" to a non empty value.

It looks like gRPC may have worked around
https://github.com/google/protobuf/issues/4210 via
https://github.com/grpc/grpc/pull/14634.

This is needed to support Ruby 2.5
(https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/22555).

Removing this dependency also allows us to remove a transitive
dependency on gitlab_grit - which is the whole point of this exercise.

I don't think we can EOL gitlab_grit until it's removed as a dependency
from gitaly-ruby, but this at least gets it out of gitlab-ce.

This allows us to avoid one transitive dependency on gitlab-grit. The
aim is to remove all transitive dependencies.

This saves about 128 MB of baseline RAM usage per Unicorn and
Sidekiq process (!).

Linguist wasn't detecting languages anymore from CE/EE since
9ae8b574. However, Linguist::BlobHelper
was still being depended on by BlobLike and others.

This removes the Linguist gem, given it isn't required anymore.
EscapeUtils were pulled in as dependency, but given Banzai depends on
it, it is now added explicitly.

Previously, Linguist was used to detect the best ACE mode. Instead,
we rely on ACE to guess the best mode based on the file extension.

See: https://github.com/libgit2/libgit2/releases

Upgrade to latest version the following gems:
* Spring
* Bootsnap
* Thin
* webpack-rails
* pry-rails

Cleanup code, and refactor tests that still use Rugged. After this, there should
be no Rugged code that access the instance's repositories on non-test
environments. There is still some rugged code for other tasks like the
repository import task, but since it doesn't access any repository storage path
it can stay.

Implements list_last_commits_for_tree to communicate with the
ListLastCommitsForTree Gitaly RPC

Bumps the Gitaly server version

Bumps the Gitaly-Proto gem version

We remove this feature as it never worked properly

The reason for removing this gem is that it's not being maintained
anymore. It uses `alias_method_chain` which is deprecated in rails 5
(and removed in 5.1), the issue is pending upstream (including
a fix) - https://github.com/suranyami/peek-sidekiq/issues/3 for a while.

Peek-sidekiq is used in performance bar for displaying sidekiq
statistics.