Changelog: security

Create vulnerability measures documentation with EPSS

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/172508



Merged-by: Russell Dickenson <rdickenson@gitlab.com>
Approved-by: John Crowley <jcrowley@gitlab.com>
Approved-by: Russell Dickenson <rdickenson@gitlab.com>
Co-authored-by: Yasha Rise <yrise@gitlab.com>
Co-authored-by: Marcel Amirault <mamirault@gitlab.com>

Clean gitlab subscription trial date attributes

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/169196



Merged-by: Tiger Watson <twatson@gitlab.com>
Approved-by: Tiger Watson <twatson@gitlab.com>
Reviewed-by: Tiger Watson <twatson@gitlab.com>
Reviewed-by: Sincheol (David) Kim <dkim@gitlab.com>
Co-authored-by: Lukas Wanko <lwanko@gitlab.com>

EE: true
Changelog: other

Support job token auth for read-only changelog generation API

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/172842



Merged-by: Sean Arnold <sarnold@gitlab.com>
Approved-by: Vasilii Iakliushin <viakliushin@gitlab.com>
Approved-by: Brendan Lynch <blynch@gitlab.com>
Approved-by: Sean Arnold <sarnold@gitlab.com>
Reviewed-by: Vasilii Iakliushin <viakliushin@gitlab.com>
Reviewed-by: Brendan Lynch <blynch@gitlab.com>
Co-authored-by: Timo Furrer <tfurrer@gitlab.com>

This change set adds support that allows authentication via
`CI_JOB_TOKEN` for the read-only (`GET`) Changelog generation API.
This is super useful to generate a changelog or release notes without
any additional tokens.

Since this is a read-only endpoint the security impact is very low.

Changelog: added

Download binary package for openbao in TestEnv

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/173551



Merged-by: Stan Hu <stanhu@gmail.com>
Approved-by: Alex Scheel <ascheel@gitlab.com>
Approved-by: Stan Hu <stanhu@gmail.com>
Reviewed-by: Peter Leitzen <pleitzen@gitlab.com>
Reviewed-by: Kev Kloss <kkloss@gitlab.com>
Reviewed-by: Alex Scheel <ascheel@gitlab.com>
Co-authored-by: Peter Leitzen <pleitzen@gitlab.com>

This speeds up test env setup on CI and locally by downloading platform
specific binary. It falls back to cloning and compiling the binary
otherwise.

Update Gitaly version

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/173640



Merged-by: release-tools approver bot <project_278964_bot_77e28085fcec07f14dfd31c689824b5b@noreply.gitlab.com>
Approved-by: release-tools approver bot <project_278964_bot_77e28085fcec07f14dfd31c689824b5b@noreply.gitlab.com>
Co-authored-by: GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com>

Quarantine a flaky test

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/173498



Merged-by: Krasimir Angelov <kangelov@gitlab.com>
Approved-by: Krasimir Angelov <kangelov@gitlab.com>
Co-authored-by: Auto-quarantining bot <gitlab-auto-quarantine-bot@gitlab.com>

Update gl-text-gray-500 to gl-text-subtle

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/172648



Merged-by: Pedro Pombeiro <noreply@pedro.pombei.ro>
Approved-by: Fernando Cardenas <14022659-fernando-c@users.noreply.gitlab.com>
Approved-by: Marina Mosti <mmosti@gitlab.com>
Approved-by: Jeremy Elder <jelder@gitlab.com>
Approved-by: Pedro Pombeiro <noreply@pedro.pombei.ro>
Co-authored-by: sdejonge <sdejonge@gitlab.com>

Issuable edit form: Fix spacing between action buttons

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/173395



Merged-by: Ezekiel Kigbo <3397881-ekigbo@users.noreply.gitlab.com>
Approved-by: Julia Miocene <jmiocene@gitlab.com>
Approved-by: Ezekiel Kigbo <3397881-ekigbo@users.noreply.gitlab.com>
Co-authored-by: Sascha Eggenberger <seggenberger@gitlab.com>

Clarify ambiguous term regarding patch release schedule

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/173503



Merged-by: Evan Read <eread@gitlab.com>
Co-authored-by: Matthew Badeau <mbadeau@gitlab.com>

Clarify deprecation for Red Hat Enterprise Linux 7

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/173537



Merged-by: Evan Read <eread@gitlab.com>
Approved-by: Dilan Orrino <dorrino@gitlab.com>
Approved-by: Evan Read <eread@gitlab.com>
Co-authored-by: Clemens Beck <cbeck@gitlab.com>

[ci skip]

Update gl-text-gray-500 to gl-text-subtle

Remove hardcoded root user usage in e2e tests

Closes gitlab-org/quality/quality-engineering/team-tasks#3167

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/173564



Merged-by: Mark Lapierre <mlapierre@gitlab.com>
Approved-by: Mark Lapierre <mlapierre@gitlab.com>
Co-authored-by: Andrejs Cunskis <acunskis@gitlab.com>

Ignore Network errors reporting to Sentry

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/173389



Merged-by: Elwyn Benson <ebenson@gitlab.com>
Approved-by: Briley Sandlin <bsandlin@gitlab.com>
Approved-by: Elwyn Benson <ebenson@gitlab.com>
Co-authored-by: Miguel Rincon <mrincon@gitlab.com>

Update Doorkeeper to version 5.8.0

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/173481



Merged-by: Aboobacker MK <akarakath@gitlab.com>
Approved-by: Stan Hu <stanhu@gmail.com>
Co-authored-by: Jessie Young <jessieyoung@gitlab.com>

* This requires us to vendor doorkeeper-openid_connect until
  https://github.com/doorkeeper-gem/doorkeeper-openid_connect/pull/213
  is merged
* We are updating Doorkeeper in order to use the dynamic scopes feature
  https://github.com/doorkeeper-gem/doorkeeper/pull/1739
* https://my.diffend.io/gems/doorkeeper/5.7.1/5.8.0

Changelog: changed

Fix ENV dependent semgrep spec

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/173631



Merged-by: Stan Hu <stanhu@gmail.com>
Approved-by: Stan Hu <stanhu@gmail.com>
Co-authored-by: Peter Leitzen <pleitzen@gitlab.com>

Update OAuthController to use `Current.organization` as the default organization parameter

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/172333



Merged-by: Aboobacker MK <akarakath@gitlab.com>
Approved-by: Aboobacker MK <akarakath@gitlab.com>
Approved-by: Bogdan Denkovych <bdenkovych@gitlab.com>
Reviewed-by: David Dieulivol <ddieulivol@gitlab.com>
Reviewed-by: Aboobacker MK <akarakath@gitlab.com>
Reviewed-by: Rutger Wessels <rwessels@gitlab.com>
Co-authored-by: Shane Maglangit <smaglangit@gitlab.com>

Pass runner_manager to destroy_conditionally! call

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/173548



Merged-by: Stan Hu <stanhu@gmail.com>
Approved-by: Dillon Wheeler <dwheeler@gitlab.com>
Approved-by: Stan Hu <stanhu@gmail.com>
Reviewed-by: Pedro Pombeiro <noreply@pedro.pombei.ro>
Co-authored-by: Pedro Pombeiro <noreply@pedro.pombei.ro>

Fix master due to ApplicationSetting stubbed attribute

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/173635



Merged-by: Stan Hu <stanhu@gmail.com>
Approved-by: Stan Hu <stanhu@gmail.com>
Co-authored-by: Fabio Pitino <fpitino@gitlab.com>

Usages of let_it_be fail due to application setting not
been stubbed yet.

In this commit we are going to set the featur flag disabled
in specs as a temporary measure.

The `` Database schema for jsonb columns uses json schema validator ``
test matches one of the following conditions:
1. has either ~"flakiness::1" or ~"flakiness::2" label set, which means the number of reported failures
is at or above 95 percentile, indicating unusually high failure count.

2. has ~"severity::1" label set, which means the number of reported failures
[spiked and exceeded its daily threshold](https://gitlab.com/gitlab-org/ruby/gems/gitlab_quality-test_tooling/-/blob/c9bc10536b1f8d2d4a03c3e0b6099a40fe67ad26/lib/gitlab_quality/test_tooling/report/concerns/issue_reports.rb#L51).

This MR quarantines the test. This is a discussion starting point to let the
responsible group know about the flakiness so that they can take action:

- accept the merge request and schedule the associated issue to improve the test
- close the merge request in favor of another merge request to delete the test

Please follow the
[Flaky tests management process](https://handbook.gitlab.com/handbook/engineering/infrastructure/engineering-productivity/flaky-tests-management-and-processes/#flaky-tests-management-process)
to help us increase `master` stability.

Please let us know your feedback in the
[Engineering Productivity issue tracker](https://gitlab.com/gitlab-org/quality/engineering-productivity/team/-/issues).

Related to https://gitlab.com/gitlab-org/gitlab/-/issues/500903.

This change was generated by
[gitlab-housekeeper](https://gitlab.com/gitlab-org/gitlab/-/tree/master/gems/gitlab-housekeeper)
using the Keeps::QuarantineFlakyTests keep.

To provide feedback on your experience with `gitlab-housekeeper` please create an issue with the
label ~"GitLab Housekeeper" and consider pinging the author of this keep.

Changelog: other

Previously, this spec failed in MRs with label `appsec-sast::stop` set.

This commit stubs CI_MERGE_REQUEST_LABELS ENV var to avoid this external
dependency.

Allow setting of work item types for custom fields

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/171942



Merged-by: Heinrich Lee Yu <heinrich@gitlab.com>
Approved-by: Fabien Catteau <fcatteau@gitlab.com>
Approved-by: Omar Qunsul <oqunsul@gitlab.com>
Reviewed-by: Heinrich Lee Yu <heinrich@gitlab.com>
Reviewed-by: Omar Qunsul <oqunsul@gitlab.com>
Reviewed-by: Marc Saleiko <msaleiko@gitlab.com>

Consolidate to use specific plans scope for Namespaces

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/173306



Merged-by: Rodrigo Tomonari <rtomonari@gitlab.com>
Approved-by: Max Woolf <mwoolf@gitlab.com>
Approved-by: Tiger Watson <twatson@gitlab.com>
Approved-by: Michał Zając <mzajac@gitlab.com>
Approved-by: Rodrigo Tomonari <rtomonari@gitlab.com>
Reviewed-by: Max Woolf <mwoolf@gitlab.com>
Co-authored-by: Doug Stull <dstull@gitlab.com>

Use JWT token for CI_JOB_TOKEN

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/167938



Merged-by: Matt Kasa <mkasa@gitlab.com>
Approved-by: mo khan <mo@mokhan.ca>
Approved-by: Grzegorz Bizon <grzegorz@gitlab.com>
Approved-by: Matt Kasa <mkasa@gitlab.com>
Reviewed-by: Tomasz Maczukin <tomasz@maczukin.pl>
Reviewed-by: Grzegorz Bizon <grzegorz@gitlab.com>
Reviewed-by: Fabio Pitino <fpitino@gitlab.com>
Reviewed-by: Alex Buijs <abuijs@gitlab.com>
Reviewed-by: Alper Akgun <aakgun@gitlab.com>
Reviewed-by: Hinam Mehra <hmehra@gitlab.com>
Reviewed-by: mo khan <mo@mokhan.ca>
Co-authored-by: Alex Buijs <abuijs@gitlab.com>

Update dependency gitlab_quality-test_tooling to '~> 2.2.0'

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/173347



Merged-by: Chloe Liu <yliu@gitlab.com>
Approved-by: Chloe Liu <yliu@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

Reduce zoekt node critical watermark to 80 percent

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/173580



Merged-by: John Mason <9717668-johnmason@users.noreply.gitlab.com>
Approved-by: Dmitry Gruzd <dgruzd@gitlab.com>
Co-authored-by: John Mason <jmason@gitlab.com>

Add gRPC code from the SDS to the Secret Detection gem

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/172743



Merged-by: Gary Holtz <gholtz@gitlab.com>
Approved-by: Paulo Barros <pbarros@gitlab.com>
Approved-by: Gary Holtz <gholtz@gitlab.com>
Approved-by: rossfuhrman <rfuhrman@gitlab.com>
Approved-by: Lucas Charles <me@lucascharles.me>
Reviewed-by: Paulo Barros <pbarros@gitlab.com>
Co-authored-by: Ethan Urie <eurie@gitlab.com>

Log check result status in mergeability logger

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/173419



Merged-by: Kerri Miller <kerrizor@kerrizor.com>
Approved-by: Keeyan Nejad <knejad@gitlab.com>
Approved-by: Kerri Miller <kerrizor@kerrizor.com>
Reviewed-by: Keeyan Nejad <knejad@gitlab.com>
Co-authored-by: Hordur Freyr Yngvason <hfyngvason@gitlab.com>

Remove awards list focus style overrides in framework sass

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/172136



Merged-by: Peter Hegman <phegman@gitlab.com>
Approved-by: Peter Hegman <phegman@gitlab.com>
Reviewed-by: Sascha Eggenberger <seggenberger@gitlab.com>
Reviewed-by: Scott de Jonge <sdejonge@gitlab.com>
Co-authored-by: Chad Lavimoniere <clavimoniere@gitlab.com>

Add infinite scroll to exceptions dropdown

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/173408



Merged-by: Alexander Turinske <aturinske@gitlab.com>
Approved-by: Lorenz van Herwaarden <lvanherwaarden@gitlab.com>
Approved-by: Alexander Turinske <aturinske@gitlab.com>
Reviewed-by: Artur Fedorov <afedorov@gitlab.com>
Reviewed-by: Lorenz van Herwaarden <lvanherwaarden@gitlab.com>
Co-authored-by: Artur Fedorov <afedorov@gitlab.com>