Merge branch 'stable-3.7' into stable-3.8

* stable-3.7:
  Use PullReplicationFilter in Gerrit primary setup
  Ignore invalid createChange replication test on Gerrit replica
  Allow replication of hidden projects
  Fix ApplyObjectIT flaky test

Change-Id: Ic1b3cd66d6087d05f2e6712c36a9f49c9cd82048