Username and password are no longer stripped from import url on import

app/models/project.rb

@@ -536,6 +536,11 @@ class Project < ActiveRecord::Base
       ProjectCacheWorker.perform_async(self.id)
     end
 
+    remove_import_data
+  end
+
+  # This method is overriden in EE::Project model
+  def remove_import_data
     import_data&.destroy
   end
 

changelogs/unreleased/username-password-stripped-from-import-url-fix.yml

@@ -0,0 +1,4 @@
+---
+title: Username and password are no longer stripped from import url on mirror update
+merge_request: 12725
+author: