Merge branch 'stable-3.8'

* stable-3.8:
  Use PullReplicationFilter in Gerrit primary setup
  Ignore invalid createChange replication test on Gerrit replica
  Allow replication of hidden projects
  Fix ApplyObjectIT flaky test

Change-Id: If5a5fe58264b2c6e8b4bfdf88af4e7df5bb49873