Scott Hampton (727d64a3) at 12 Mar 20:49

... and 1 more commit

Scott Hampton (e27696d4) at 12 Mar 20:48

What does this MR do and why?

Expands support for showing milestone popover in additional places like;

• Incidents sidebar
• Merge Request sidebar
• Issues/MRs list
• Issue/Epic boards
• Child/linked items within Issues and Epics
• Development widget within Issues
• Issue/MR dashboard

References

• !147797

Screenshots or screen recordings

Note: The milestone popover appears as below, so to test, you can hover over milestones in the places listed above

How to set up and validate locally

Go to the places listed above and hover over the milestone value

MR acceptance checklist

Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Related to #455074

Scott Hampton (b49060a0) at 12 Mar 20:40

This change updates the workflow for an automated security vulnerability fixing system. The original workflow had a simpler, more linear process, but the new version adds more detailed steps and safety checks.

Key improvements include:

• Better organization with clearer step names (like "Gather Context" instead of "Vulnerability Details Retrieval")
• Added safety measures like ensuring the code repository is in a clean state before making changes
• More thorough validation to confirm that fixes actually made meaningful changes
• Enhanced documentation requirements for the automatically generated merge requests, including confidence levels so humans know how reliable the AI thinks its fix is
• Better linking between vulnerabilities and their proposed fixes

The workflow now has more robust error handling - it can properly exit early if a vulnerability is a false positive or if no actual code changes were needed. The merge request documentation is also much more comprehensive, requiring detailed explanations of what the security issue was, how it could be exploited, and exactly how the fix addresses it.

Overall, this makes the automated security fixing system more reliable, transparent, and easier for human developers to review and trust.