Merge branch '467936-nwittstruck-limit-kubernetes-agent-access-to-protected-branches' into 'master' 

Allow the restriction of Kubernetes agent access to protected branches

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/156626



Merged-by: Fabio Pitino <fpitino@gitlab.com>
Approved-by: Tiger Watson <twatson@gitlab.com>
Approved-by: Fabio Pitino <fpitino@gitlab.com>
Reviewed-by: Fabio Pitino <fpitino@gitlab.com>
Reviewed-by: Vitali Tatarintev <vtatarintev@gitlab.com>
Co-authored-by: Nicholas <1494491-nwittstruck@users.noreply.gitlab.com>
Co-authored-by: Nicholas Wittstruck <nicholas@b310.de>

This is a proof of concept to show how the Kubernetes agent could be
restricted to run on protected branches only.

https://gitlab.com/gitlab-org/gitlab/-/issues/467936

Changelog: added

docs: ensure box is not selected to discourage granting accidental external access

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/162113



Merged-by: Ashraf Khamis <akhamis@gitlab.com>
Co-authored-by: Neil McDonald <nmcdonald@gitlab.com>

Add compliance checks and compliance requirements tables

Closes #470680

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/161382



Merged-by: Huzaifa Iftikhar <hiftikhar@gitlab.com>
Approved-by: Jon Jenkins <jjenkins@gitlab.com>
Reviewed-by: Alexandru Croitor <acroitor@gitlab.com>
Reviewed-by: Ethan Urie <eurie@gitlab.com>
Reviewed-by: Huzaifa Iftikhar <hiftikhar@gitlab.com>
Reviewed-by: Jon Jenkins <jjenkins@gitlab.com>

Changelog: added

Cleanup sync_audit_events_to_new_tables feature flag

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/161982



Merged-by: Aakriti Gupta <agupta@gitlab.com>
Approved-by: Hitesh Raghuvanshi <hraghuvanshi@gitlab.com>
Approved-by: Aakriti Gupta <agupta@gitlab.com>
Co-authored-by: harsimarsandhu <hsandhu@gitlab.com>

This commit removes sync_audit_events_to_new_tables feature flag

Changelog: added

Add feature spec for work item CRM widget

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/161609



Merged-by: Lee Tickett <ltickett@gitlab.com>
Approved-by: Deepika Guliani <dguliani@gitlab.com>
Reviewed-by: Deepika Guliani <dguliani@gitlab.com>
Reviewed-by: Lee Tickett <ltickett@gitlab.com>

Prerequisites to reset auth token not required

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/161429



Merged-by: Ashraf Khamis <akhamis@gitlab.com>
Co-authored-by: Daphne Kua <dkua@gitlab.com>

Add application setting for max_artifact_archive_size_bytes

Closes #443575

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/148554



Merged-by: Andy Schoenen <asoiron@gitlab.com>
Approved-by: Hercules Merscher <hmerscher@gitlab.com>
Approved-by: Kamil Trzciński <ayufan@ayufan.eu>
Approved-by: Andy Schoenen <asoiron@gitlab.com>
Reviewed-by: Kamil Trzciński <ayufan@ayufan.eu>
Reviewed-by: Andy Schoenen <asoiron@gitlab.com>
Reviewed-by: Joe Snyder <joe.snyder@kitware.com>
Reviewed-by: Hercules Merscher <hmerscher@gitlab.com>
Co-authored-by: Joseph Snyder <joe.snyder@kitware.com>
Co-authored-by: Dan LaManna <dan.lamanna@kitware.com>

Add a new application setting called max_artifact_archive_size_bytes to
control the maximum size of the archive of CI artifacts that can be
stored.

Fixes https://gitlab.com/gitlab-org/gitlab/-/issues/443575

Changelog: added

Update dependency faraday to v2.10.1

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/161309



Merged-by: Javiera Tapia <jtapia@gitlab.com>
Approved-by: Javiera Tapia <jtapia@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

Remove reference to timeouts for copying files in direct upload

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/162135



Merged-by: Erick Bajao <fbajao@gitlab.com>
Approved-by: Erick Bajao <fbajao@gitlab.com>
Co-authored-by: Dylan Griffith <dyl.griffith@gmail.com>

Replace subtle text color style with description label default style

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/162053



Merged-by: Scott de Jonge <sdejonge@gitlab.com>
Approved-by: Dan MH <dmizzi-harris@gitlab.com>
Approved-by: Scott de Jonge <sdejonge@gitlab.com>
Co-authored-by: Vanessa Otto <votto@gitlab.com>

This was fixed a while back in
https://gitlab.com/gitlab-org/gitlab/-/merge_requests/106740 so that
direct uploads no longer need to copy the file. This means the note
about timeouts is not relevant anymore.

Move CodeBlockFilePath under pipeline_execution and clean it up

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/161998



Merged-by: Alexander Turinske <aturinske@gitlab.com>
Approved-by: Alexander Turinske <aturinske@gitlab.com>
Reviewed-by: Alexander Turinske <aturinske@gitlab.com>
Co-authored-by: Martin Čavoj <mcavoj@gitlab.com>

This cleanup handles:

- Move CodeBlockFilePath component under pipeline_execution,
as it's no longer re-used between scan_execution and pipeline_execution
policies.
- Clean up unused props
- Clean up unused CodeBlockImport and CodeBlockSourceSelector
- Clean up constants and references overlaps between scan_execution
and pipeline_execution

Add MR mergeability check for locked paths

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/160929



Merged-by: Ash McKenzie <amckenzie@gitlab.com>
Approved-by: Ash McKenzie <amckenzie@gitlab.com>
Approved-by: Sharmad Nachnolkar <snachnolkar@gitlab.com>
Approved-by: Tiger Watson <twatson@gitlab.com>
Reviewed-by: Ash McKenzie <amckenzie@gitlab.com>
Reviewed-by: Marc Shaw <mshaw@gitlab.com>
Co-authored-by: Joe Woodward <j@joewoodward.me>

This change introduces a new check. This check will prevent merging MRs
which include locked paths.

We also have a check which runs when a user pushes code that prevents
pushing paths that are locked by other users.

This change will allow us to enable the fix for
https://gitlab.com/gitlab-org/gitlab/-/issues/23625

Related to https://gitlab.com/gitlab-org/gitlab/-/issues/428247

Changelog: added

# Conflicts:
#	app/assets/javascripts/vue_merge_request_widget/components/checks/constants.js
#	app/graphql/types/merge_requests/detailed_merge_status_enum.rb
#	app/models/merge_request.rb
#	doc/api/graphql/reference/index.md
#	doc/api/merge_requests.md
#	ee/app/models/ee/merge_request.rb

Add migration to resolve vulnerabilities from removed analyzers

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/157776



Merged-by: Krasimir Angelov <kangelov@gitlab.com>
Approved-by: Krasimir Angelov <kangelov@gitlab.com>
Reviewed-by: Krasimir Angelov <kangelov@gitlab.com>
Reviewed-by: Bala Kumar <sbalakumar@gitlab.com>
Co-authored-by: Adam Cohen <acohen@gitlab.com>

Changelog: other

Update gitlab digest to c8e9ac5

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/162106



Merged-by: Chloe Liu <yliu@gitlab.com>
Approved-by: Chloe Liu <yliu@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

Update SSH key deletion script

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/161938



Merged-by: Chloe Liu <yliu@gitlab.com>
Approved-by: Andy Hohenner <ahohenner@gitlab.com>
Approved-by: Chloe Liu <yliu@gitlab.com>
Co-authored-by: Desiree Chevalier <dchevalier@gitlab.com>

Add vulnerability resolution troubleshooting section

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/161918



Merged-by: Russell Dickenson <rdickenson@gitlab.com>
Approved-by: Sarah Waldner <swaldner@gitlab.com>
Approved-by: Russell Dickenson <rdickenson@gitlab.com>
Co-authored-by: Neil McCorrison <nmccorrison@gitlab.com>

Co-authored-by: Russell Dickenson <rdickenson@gitlab.com>

Vulnerability Resolution 17.3 Documentation Updates

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/160920



Merged-by: Russell Dickenson <rdickenson@gitlab.com>
Approved-by: Sarah Waldner <swaldner@gitlab.com>
Approved-by: Phil Calder <pcalder@gitlab.com>
Reviewed-by: Dean Agron <dagron@gitlab.com>
Co-authored-by: Neil McCorrison <nmccorrison@gitlab.com>
Co-authored-by: Dean Agron <dagron@gitlab.com>
Co-authored-by: Alana Bellucci <abellucci@gitlab.com>

Co-authored-by: Russell Dickenson <rdickenson@gitlab.com>

Clarify `gitlab:check` task also runs `gitlab:geo:check`

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/162087



Merged-by: Michael Kozono <mkozono@gitlab.com>
Reviewed-by: Achilleas Pipinellis <axil@gitlab.com>

Add a column indexed_bytes in the zoekt_nodes table

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/161466



Merged-by: Michał Zając <mzajac@gitlab.com>
Approved-by: Michał Zając <mzajac@gitlab.com>
Co-authored-by: rkumar555 <rkumar@gitlab.com>

Clean up duo_chat_disabled_button feature flag

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/161889



Merged-by: Heinrich Lee Yu <heinrich@gitlab.com>
Approved-by: Paul Slaughter <pslaughter@gitlab.com>
Approved-by: Heinrich Lee Yu <heinrich@gitlab.com>
Co-authored-by: Eva Kadlecová <ekadlecova@gitlab.com>

Switch back to charlock_holmes gem

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/162078



Merged-by: Ash McKenzie <amckenzie@gitlab.com>
Approved-by: Ash McKenzie <amckenzie@gitlab.com>
Co-authored-by: Stan Hu <stanhu@gmail.com>

Fixes merge request suggestions dropdown z-index

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/162021



Merged-by: Kushal Pandya <kushal@gitlab.com>
Approved-by: Kushal Pandya <kushal@gitlab.com>
Co-authored-by: Phil Hughes <me@iamphill.com>

Flaky specs in save_designs_service_spec.rb

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/162100



Merged-by: Brett Walker <bwalker@gitlab.com>
Approved-by: Brett Walker <bwalker@gitlab.com>
Co-authored-by: Sarah Yasonik <syasonik@gitlab.com>

Implement Duo Code Review evaluation endpoint

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/161555



Merged-by: Dylan Griffith <dyl.griffith@gmail.com>
Approved-by: Sincheol (David) Kim <dkim@gitlab.com>
Approved-by: Dylan Griffith <dyl.griffith@gmail.com>
Reviewed-by: Patrick Bajao <ebajao@gitlab.com>
Reviewed-by: Sincheol (David) Kim <dkim@gitlab.com>
Co-authored-by: Sincheol (David) Kim <dkim@gitlab.com>
Co-authored-by: Patrick Bajao <ebajao@gitlab.com>

This endpoint allows LLM evaluation tools to get the model's
response using the prompt and model we use for Duo Code Review.

We need this because we don't really need to evaluate the entire
feature including the review publishing and other stuff. The LLM
evaluation tools will also be sending the diff, new_path and hunk
to be reviewed as inputs.

This changes the prompt class as well to accept diff, new_path
and hunk. The prompt needs to change since we won't be generating
the new and old hunk lines but will be reviewing the entire
raw hunk instead.

This is still behind the `ai_review_merge_request` feature flag.