Is there a way to have a confidential ticket admit to everybody that it exists?
We're about to release a Tor Browser alpha whose changelog says it fixes
* Bug 40721: Tabs crashing on certain pages in TB11 on Win 10 [tor-browser]
but if users go to https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40721 they find it is a 404.
It appears as a 404 because we marked the ticket confidential while Mozilla considers how to fix their Firefox bug.
But notice how Mozilla's corresponding ticket says that yes-the-bug-exists and no-you-can't-read-it:
https://bugzilla.mozilla.org/show_bug.cgi?id=1744719
It would be good to have some policy like "when we do a release that says it fixes a ticket, that ticket should be visible" but collaborations with outside projects (Mozilla in this case) make such a policy hard to always follow.
In this particular case we've been getting mails from other collaborators asking us why we quietly deleted that gitlab ticket.
So: is there a way in gitlab to tag a ticket as confidential yet admit its existence to people who don't otherwise have access? Like Mozilla does it?
That way we can try to stick to a more workable policy of "when we do a release that says it fixes a ticket, that ticket should at the least be set to admit its existence".