diff --git a/data/deprecations/16-4-ci_job_token_scope_enabled-attribute-deprecation.yml b/data/deprecations/16-4-ci_job_token_scope_enabled-attribute-deprecation.yml
index 77357897e83f62f1d7749bae073671b2bab91488..8d1fdd480c90f4223e5e2cd75dbec9ed3d353efb 100644
--- a/data/deprecations/16-4-ci_job_token_scope_enabled-attribute-deprecation.yml
+++ b/data/deprecations/16-4-ci_job_token_scope_enabled-attribute-deprecation.yml
@@ -5,9 +5,14 @@
removal_milestone: "18.0" # (required) The milestone when this feature is planned to be removed
announcement_milestone: "16.4" # (required) The milestone when this feature was first announced as deprecated.
breaking_change: true # (required) Change to false if this is not a breaking change.
+ window: 3
reporter: jocelynjane # (required) GitLab username of the person reporting the change
- stage: verify # (required) String value of the stage that the feature was created in. e.g., Growth
+ stage: govern # (required) String value of the stage that the feature was created in. e.g., Growth
issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/423091 # (required) Link to the deprecation issue in GitLab
+ impact: low # Can be one of: [critical, high, medium, low]
+ scope: project # Can be one or a combination of: [instance, group, project]
+ resolution_role: Developer # Can be one of: [Admin, Owner, Maintainer, Developer]
+ manual_task: true # Can be true or false. Use this to denote whether a resolution action must be performed manually (true), or if it can be automated by using the API or other automation (false).
body: | # (required) Do not modify this line, instead modify the lines below.
GitLab 16.1 introduced [API endpoints for the job token scope](https://gitlab.com/gitlab-org/gitlab/-/issues/351740). In the [projects API](https://docs.gitlab.com/ee/api/projects.html), the `ci_job_token_scope_enabled` attribute is deprecated, and will be removed in 17.0. You should use the [job token scope APIs](https://docs.gitlab.com/ee/api/project_job_token_scopes.html) instead.
#
diff --git a/data/deprecations/16-5-ci-job-token-limit-setting.yml b/data/deprecations/16-5-ci-job-token-limit-setting.yml
index 067b22b4803753ef4b39b591e27cb14239e51019..d46152d87dc2ebbdff0c303348cf87c18afd3560 100644
--- a/data/deprecations/16-5-ci-job-token-limit-setting.yml
+++ b/data/deprecations/16-5-ci-job-token-limit-setting.yml
@@ -5,9 +5,14 @@
announcement_milestone: "15.9" # (required) The milestone when this feature was first announced as deprecated.
removal_milestone: "18.0" # (required) The milestone when this feature is planned to be removed
breaking_change: true # (required) If this deprecation is a breaking change, set this value to true
+ window: 1
reporter: jocelynjane # (required) GitLab username of the person reporting the deprecation
- stage: Verify # (required) String value of the stage that the feature was created in. e.g., Growth
+ stage: govern # (required) String value of the stage that the feature was created in. e.g., Growth
issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/383084 # (required) Link to the deprecation issue in GitLab
+ impact: high # Can be one of: [critical, high, medium, low]
+ scope: project # Can be one or a combination of: [instance, group, project]
+ resolution_role: Maintainer # Can be one of: [Admin, Owner, Maintainer, Developer]
+ manual_task: true # Can be true or false. Use this to denote whether a resolution action must be performed manually (true), or if it can be automated by using the API or other automation (false).
body: | # (required) Do not modify this line, instead modify the lines below.
In GitLab 14.4 we introduced the ability to [limit your project's CI/CD job token](https://docs.gitlab.com/ee/ci/jobs/ci_job_token.html#limit-your-projects-job-token-access) (`CI_JOB_TOKEN`) access to make it more secure. You can prevent job tokens **from your project's** pipelines from being used to **access other projects**. When enabled with no other configuration, your pipelines cannot access other projects. To use the job token to access other projects from your pipeline, you must list those projects explicitly in the **Limit CI_JOB_TOKEN access** setting's allowlist, and you must be a maintainer in all the projects.
diff --git a/data/deprecations/16-9-job-token-remove-scope-direction.yml b/data/deprecations/16-9-job-token-remove-scope-direction.yml
index 26e010d0d23c1c217cc6d7527ecf139ecdd42843..8952e3aabc4a73e413bcfabd56a8a1bcb4dc64a2 100644
--- a/data/deprecations/16-9-job-token-remove-scope-direction.yml
+++ b/data/deprecations/16-9-job-token-remove-scope-direction.yml
@@ -8,9 +8,14 @@
breaking_change: true
# The stage and GitLab username of the person reporting the change,
# and a link to the deprecation issue
+ window: 3
reporter: jocelynjane
- stage: verify
+ stage: govern
issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/383084
+ impact: low # Can be one of: [critical, high, medium, low]
+ scope: project # Can be one or a combination of: [instance, group, project]
+ resolution_role: Developer # Can be one of: [Admin, Owner, Maintainer, Developer]
+ manual_task: true # Can be true or false. Use this to denote whether a resolution action must be performed manually (true), or if it can be automated by using the API or other automation (false).
body: | # (required) Don't change this line.
The `direction` GraphQL argument for the `ciJobTokenScopeRemoveProject` mutation is deprecated. Following the [default CI/CD job token scope change](https://docs.gitlab.com/ee/update/deprecations.html#default-cicd-job-token-ci_job_token-scope-changed) announced in GitLab 15.9, the `direction` argument will default to `INBOUND` and `OUTBOUND` will no longer be valid in GitLab 17.0. We will remove the `direction` argument in GitLab 18.0.
diff --git a/data/deprecations/17-5-ci-job-token-outbound-removal.yml b/data/deprecations/17-5-ci-job-token-outbound-removal.yml
index a2de2049705f7695794bbb53dbf8e26a4b4bd620..e4a184858c4b8614c5a5ea497f378b7f919f9db8 100644
--- a/data/deprecations/17-5-ci-job-token-outbound-removal.yml
+++ b/data/deprecations/17-5-ci-job-token-outbound-removal.yml
@@ -8,6 +8,7 @@
breaking_change: true
# The stage and GitLab username of the person reporting the change,
# and a link to the deprecation issue
+ window: 3
reporter: jocelynjane
stage: Govern
issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/474175