This brings us to a version of sidekiq-cron that is tested against Ruby
3.

This version contains my fix that disables CSP in development mode.
So we can remove the class_eval we had before, and with that,
the entire initializer file.

Pages are not an experimental feature anymore, and the only
remaining config can go into config/development.rb together
with the view_component config.

Update the version of the Gitaly Gem to 15.4.0.pre.rc2 in order to
obtain the definitions for the newly type 'LocalBranches' in
'FindLocalBranches'.

We have since reemove the code that uses it from zz_metrics.rb

It still remains in Gemfile.lock because other dependencies uses it

* This is to pave the way for upgrade to OmniAuth 2.0
* OmniAuth v2 supported by 1.0.0+ of omniauth-google-oauth2, but those versions
  also depend on `'oauth2', '~> 1.1'`, which is incompatible with the version
  of oauth2 currently used by GitLab.
* For now, we are vendoring the current version of this gem and will
  upgrade the vendored version in concert with upgrading to OmniAuth 2.0
  because using an updated version of this gem with OmniAuth v1 will
  break relative URL installations of GitLab, see: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/96587#note_1083074395

We are not using this in production and I think
we should reserve top-level dependencies for
production use.

* Was vendored in a separate MR, now we are using the vendored version
* MR where vendored gem was added: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/95236

There are only minor changes in this release, but for FIPS systems MD5
has been replaced with SHA256
(https://github.com/tmm1/stackprof/pull/177).

Diff: https://my.diffend.io/gems/stackprof/0.2.15/0.2.21

Changelog: changed

* Our ultimate goal is to upgrade `omniauth` to v2.0. See the related
  issue: https://gitlab.com/gitlab-org/gitlab/-/issues/30073
* In order to upgrade `omniauth` to v2.0, we need to upgrade
  `omniauth-salesforce` because the latter has a dependency on the former.
* There is an open issue asking the maintainer to make
  `omniauth-salesforce` compatible with `omniauth` v2.0 but that hasn't
  happened yet: https://github.com/realdoug/omniauth-salesforce/issues/31
* We are actively emailing with the gem owner about transferring or
  adding additional contributors to the gem but in the meantime this
  will unblock the upgrade.
* This MR vendors the gem and updates its `.gemspec` file so that it is
  compatible with `omniauth` v2.0

This fixes a number of SSL issues:
https://github.com/puma/puma/releases/tag/v5.6.5

Diff: https://my.diffend.io/gems/puma/5.6.4/5.6.

Changelog: changed

This update speeds up HAML linting times by re-using the
`Rubocop::CLI` instance: https://github.com/sds/haml-lint/pull/329

Full changes:
https://github.com/sds/haml-lint/blob/main/CHANGELOG.md

Diff: https://my.diffend.io/gems/haml_lint/0.36.0/0.40.1

Changelog: changed

The spamcheck service has been updated with a new
model to detect spam in snippets. This MR updates
the Snippet create/update functionality to check
for spam using the newly available gRPC endpoint in
spamcheck.

Changelog: added

This update fixes a Ruby GC compaction issue fixed long ago:
https://github.com/apache/thrift/pull/2347

https://gitlab.com/gitlab-org/gitaly/-/merge_requests/4664 will be
updating the version, so let's make sure this native gem is in sync.

Diff: https://my.diffend.io/gems/thrift/0.14.0/0.16.0

Changelog: changed

Oj v3.13.16 introduced a new feature to obtain the line number and
column in the Simple API JSON (SAJ) parser
(https://github.com/ohler55/oj/pull/785), but there was a pointer type
error that caused a seg fault for certain inputs. The bug was fixed in
https://github.com/ohler55/oj/pull/809.

Diff: https://my.diffend.io/gems/oj/3.13.20/3.13.21

Relates to https://gitlab.com/gitlab-org/gitlab/-/issues/369046

Changelog: fixed

This introduces a number of fixes and improvements. Most notably,
there are deprecations in how pipelined and multi/exec commands are
handled.

Diff: https://my.diffend.io/gems/redis/4.4.0/4.7.1

Changelog: changed

This reverts merge request !95651

This reverts merge request !95087

API of the Gitaly/Praefect service was extended with a new gRPC
method 'ReadinessCheck' in the
https://gitlab.com/gitlab-org/gitaly/-/merge_requests/4674.
Upgrade to a new version of the gem file to have access to a new
method that will be used in upcoming changes.

Part of: https://gitlab.com/gitlab-org/gitlab/-/issues/348174

Update licensee from 9.14.1 to 9.15.2

Signed-off-by: Takuya Noguchi <takninnovationresearch@gmail.com>
Changelog: changed

This fixes a CVE on Windows and some other minor bugs.

Diff: https://my.diffend.io/gems/diffy/3.3.0/3.4.2

Relates to https://gitlab.com/gitlab-org/gitlab/-/issues/370512

Changelog: security

This adds support for Rails 7 and allows us to upgrade to Omniauth 2+

* Our ultimate goal is to upgrade `omniauth` to v2.0. See the related
  [issue](https://gitlab.com/gitlab-org/gitlab/-/issues/30073)
* In order to upgrade `omniauth` to v2.0, we need to upgrade
  `omniauth-azure-oauth2` because the latter has a dependency on the
former.
* There is an open issue asking the maintainer to make
  `omniauth-azure-oauth2` compatible with `omniauth` v2.0 but the author
  advised forking the gem:
  https://github.com/marknadig/omniauth-azure-oauth2/pull/29#issuecomment-663113582
* There is a fork called `omniauth-azure-activedirectory-v2` that
  supports [*only* the 2.0
  endpoints](https://github.com/RIPAGlobal/omniauth-azure-activedirectory-v2/pull/1)
  for Active Directory but we need to keep using `omniauth-azure-oauth2`
  for our customers who use the 1.0 ActiveDirectory endpoints
* This MR vendors the gem and updates its `.gemspec` file so that it is
  compatible with `omniauth` v2.0
* We may deprecate our usage of this gem in the future
  [(issue)](https://gitlab.com/gitlab-org/gitlab/-/issues/366212)
* MR where we vendored a different omniauth gem for same reasons:
  https://gitlab.com/gitlab-org/gitlab/-/merge_requests/92485

* Our ultimate goal is to upgrade `omniauth` to v2.0. See the related
  [issue](https://gitlab.com/gitlab-org/gitlab/-/issues/30073)
* In order to upgrade `omniauth` to v2.0, we need to upgrade
  `omniauth-cas3` because the latter has a dependency on the former.
* There is an open issue asking the maintainer to make `omniauth-cas3`
  compatible with `omniauth` v2.0 but it has not been responded to:
  https://github.com/tduehr/omniauth-cas3/issues/5
* This MR vendors the gem and updates its `.gemspec` file so that it is
  compatible with `omniauth` v2.0
* We may deprecate our usage of this gem in the future
  [(issue)](https://gitlab.com/gitlab-org/gitlab/-/issues/366212)
* MR where we vendored a different omniauth gem for same reasons:
  https://gitlab.com/gitlab-org/gitlab/-/merge_requests/92485

In MR 74881, we needed to fork license_finder
as gitlab-license_finder as its strong dependencies to thor
(~> 1.0.1). With the release of the original license_finder 7.0.0,
the dependencies to thor was relaxed (~> 1.2), so we do not have to
use the fork.

The dependency problem was addressed in:
https://github.com/pivotal/LicenseFinder/pull/886
instead of https://github.com/pivotal/LicenseFinder/pull/816



Signed-off-by: Takuya Noguchi <takninnovationresearch@gmail.com>
Changelog: other

v3.13.19 was not enough to fix x86 compatability on older processors
because some SSE instructions were used by the compiler in other parts
of the code base. https://github.com/ohler55/oj/pull/806 disables SSE
4.2 optimizations by default.

Relates to https://gitlab.com/gitlab-org/gitlab/-/issues/368656

Changelog: fixed

Changelog: changed

Signed-off-by: Takuya Noguchi <takninnovationresearch@gmail.com>

Changelog: other

Bump the Gitaly Gem to v15.3.0-rc3 so that we get the newly introduced
definition of the FindTagError.