Merge branch 'security_dblessing_fix_ruby_saml_bundler' into 'master'

See merge request gitlab-org/security/gitlab!4845

Changelog: security

Merge branch 'security-ruby-graphql' into 'master'

See merge request gitlab-org/security/gitlab!4832

Changelog: security

Merge branch 'security-dblessing-ruby-saml' into 'master'

See merge request gitlab-org/security/gitlab!4819

Changelog: security

Changelog: changed

It's no longer needed since Ruby 3.2+ and we dropped Ruby 3.1 some time
ago.

This is needed to support Ruby 3.3.

This update fixes CVE-2024-54133. We are not vulnerable to it
at the moment but this prevents a regression in the future.

Changelog: security

It fixes several CVEs related to regular expression
denial of service vulnerabilities. We were not affected
by them thanks to the mitigations in Ruby 3.2 but this
upgrade will prevent the CVEs from showing up in
vulnerability scanning results.

Changelog: security

* We were vendoring the gem before in order to fix version dependency
  issues with doorkeepeer (before it didn't support 5.8), see
  https://gitlab.com/gitlab-org/gitlab/-/merge_requests/173481
* Those version dependency issues were fixed in
  https://github.com/doorkeeper-gem/doorkeeper-openid_connect/pull/214
* Those change were released with v 1.8.10 of the gem

* This requires us to vendor doorkeeper-openid_connect until
  https://github.com/doorkeeper-gem/doorkeeper-openid_connect/pull/213
  is merged
* We are updating Doorkeeper in order to use the dynamic scopes feature
  https://github.com/doorkeeper-gem/doorkeeper/pull/1739
* https://my.diffend.io/gems/doorkeeper/5.7.1/5.8.0

Changelog: changed

Updates Sidekiq Reliable Fetcher to trigger the
`sidekiq_interruptions_exhausted` callback if defined in the job when
the maximum number of interruptions is reached.

- bea051e: Adding Prometheus Metrics to the HTTP Requests
- dcd7ecb: Exposes GetCell API, with sequence range info
- 01e3c70: ci: Bump Git version to 2.45 in CI image
- fd9886c: Add Linting to Topology Service CI/CD
- dee7d9a: Adds status-based headers

Changelog: other

We only use a handfull of bootstrap JavaScript in the GitLab project.
The CSS already has been vendored into GitLab UI:
https://gitlab.com/gitlab-org/gitlab-ui/-/merge_requests/4333

In order to be able to remove the bootstrap dependency we vendor the
remaining used JS files and adjust the imports.

This reverts merge request !164440

Drop test/web_test.rb since this change was shipped in
Sidekiq 7.3.1.

This update was generated by running:

 ```
cd gitlab/vendor/gems/sidekiq
scripts/update-sidekiq 7.3.1 .
```

This will make it easier to update Sidekiq in the future by running:

```
cd gitlab/vendor/gems/sidekiq
scripts/update-sidekiq 7.3.1 .
```

This reduces the number of changes we need to make each
time we update Sidekiq.

Changes in test/web_test.rb are introduced in
https://github.com/sidekiq/sidekiq/commit/94b998bff90ee4dd2e29a6be07e8c7fd1d27a89c.

Changelog: other

Changelog: other

Addressing: https://gitlab.com/gitlab-org/gitlab/-/issues/451052
Changelog: added

* This will be used by the API endpoint being added in:
  https://gitlab.com/gitlab-org/gitlab/-/merge_requests/159569
* Using RPC added in https://gitlab.com/gitlab-org/duo-workflow/duo-workflow-service/-/merge_requests/12
* Ruby client here is copied over from files added in https://gitlab.com/gitlab-org/duo-workflow/duo-workflow-service/-/merge_requests/29
* To test:
  * Run Gitlab via GDK
  * Run Duo Workflow Service server (`poetry run python -m duo_workflow_service.server`)
  * In gitlab rails console, run:
     `Ai::DuoWorkflow::DuoWorkflowService::Client.new(duo_workflow_service_url: "localhost:50052", current_user: User.first).generate_token`
  * The returned token can be used to authenticate requests to the Duo
    Workflow Service
  * Fixes  https://gitlab.com/gitlab-org/gitlab/-/issues/471898

Addressing: https://gitlab.com/gitlab-org/gitlab/-/issues/451052
Changelog: added

They did things [0], I debugged things and wrote probably horrible ruby
code along the way.

[0]: https://github.com/rubygems/rubygems/pull/7678

Sidekiq and GitLab promise each job runs *at least once*. They
do not promise that each job runs exactly once.

Changelog: changed

This test is failing as per issue
https://gitlab.com/gitlab-org/quality/engineering-productivity/master-broken-incidents/-/issues/6939
Looks like a flaky test, hence quarantining for now

Changelog: fixed

Changelog: changed

Move them into a separate so it can be included by templates or
projects.

Signed-off-by: Rémy Coutable <remy@rymai.me>