[ci skip]

Mattermost March 2023 security updates

See merge request https://gitlab.com/gitlab-org/security/omnibus-gitlab/-/merge_requests/315



Merged-by: GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com>
Approved-by: Robert Marshall <rmarshall@gitlab.com>
Co-authored-by: Andrew Patterson <apatterson@gitlab.com>

Andrew Patterson authored 1 year ago and GitLab Release Tools Bot committed 1 year ago

Merge branch 'security-mattermost-2023-03-updates-15-10' into '15-10-stable'

See merge request gitlab-org/security/omnibus-gitlab!315

Changelog: security

Update redis to 6.2.11

See merge request https://gitlab.com/gitlab-org/security/omnibus-gitlab/-/merge_requests/314



Merged-by: GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Andrew Patterson <apatterson@gitlab.com>

Andrew Patterson authored 1 year ago and GitLab Release Tools Bot committed 1 year ago

Merge branch 'security-update-redis-to-6.2.11-15.10' into '15-10-stable'

See merge request gitlab-org/security/omnibus-gitlab!314

Changelog: security

Update curl to 8.0.1 to resolve February CVEs

See merge request https://gitlab.com/gitlab-org/security/omnibus-gitlab/-/merge_requests/321



Merged-by: GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com>
Approved-by: DJ Mountney <dj@gitlab.com>
Co-authored-by: Dmitry Makovey <dmakovey@gitlab.com>

Dmitry Makovey authored 1 year ago and GitLab Release Tools Bot committed 1 year ago

Merge branch 'security-82-15-10' into '15-10-stable'

See merge request gitlab-org/security/omnibus-gitlab!321

Changelog: security

[ci skip]

Fix SSH host key generation on CentOS 7

Closes #7671

See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/6756



Merged-by: Robert Marshall <rmarshall@gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Approved-by: Robert Marshall <rmarshall@gitlab.com>
Reviewed-by: Robert Marshall <rmarshall@gitlab.com>
Co-authored-by: Stan Hu <stanhu@gmail.com>

The version of ssh-keygen shipped with CentOS 7 does not support
the ability to save SSH host keys to an alternate path using the `-f`
option with the `-A` option. Keys will always save to `/etc/ssh`.

To fix this, manually call ssh-keygen for each key that we want to
generate. On FIPS systems, it's not guaranteed that ed25519 or other
keys can be generated, so we skip over any failures in `ssh-keygen`
and only check at the end to see if any keys were successfully
generated.

Note that the host key generation is only performed if no host keys
were detected in the directory in the first place.

Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/7671

Changelog: fixed

Add stable branch template

See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/6762



Merged-by: DJ Mountney <dj@gitlab.com>
Approved-by: DJ Mountney <dj@gitlab.com>
Co-authored-by: Mayra Cabrera <mcabrera@gitlab.com>

Turn on the pg upgrade recommendation notice

See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/6611



Merged-by: Robert Marshall <rmarshall@gitlab.com>
Approved-by: Robert Marshall <rmarshall@gitlab.com>
Reviewed-by: Robert Marshall <rmarshall@gitlab.com>
Co-authored-by: DJ Mountney <dj@gitlab.com>

Our expressed intent is to remove PG 12 in GitLab 16.0, so we need to
start recommending upgrades.

We will turn on auto-upgrades for single node installs in the release
before 16.0.

Changelog: changed

Add a merge request template to be used when backporting bug fixes into
Omnibus stable branches.

Related to https://gitlab.com/gitlab-com/gl-infra/delivery/-/issues/2886
and to https://gitlab.com/gitlab-com/gl-infra/delivery/-/issues/2890

Added duo auth config to gitlab.rb

See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/6752



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Vladimir Shushlin <vshushlin@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: smriti <sgarg@gitlab.com>

Bump Container Registry to v3.69.0-gitlab

See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/6759



Merged-by: Robert Marshall <rmarshall@gitlab.com>
Approved-by: Robert Marshall <rmarshall@gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: Hayley Swimelar <hswimelar@gitlab.com>

Related https://gitlab.com/gitlab-org/container-registry/-/issues/947

Changelog: changed

Move remote-syslog settings to underscored form

See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/6740



Merged-by: Robert Marshall <rmarshall@gitlab.com>
Approved-by: Jason Young <jyoung@gitlab.com>
Approved-by: Robert Marshall <rmarshall@gitlab.com>
Co-authored-by: Balasankar "Balu" C <balasankar@gitlab.com>

Related https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/6873



Changelog: deprecated

Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>

Move gitlab-exporter settings to underscored form

See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/6738



Merged-by: Robert Marshall <rmarshall@gitlab.com>
Approved-by: Jason Young <jyoung@gitlab.com>
Co-authored-by: Balasankar "Balu" C <balasankar@gitlab.com>

Related https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/6873



Changelog: deprecated

Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>

Move suggested-reviewers settings to underscored form

See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/6739



Merged-by: Robert Marshall <rmarshall@gitlab.com>
Approved-by: Jason Young <jyoung@gitlab.com>
Approved-by: Robert Marshall <rmarshall@gitlab.com>
Co-authored-by: Balasankar "Balu" C <balasankar@gitlab.com>

Related https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/6873



Changelog: deprecated

Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>

Move gitlab-shell settings to underscored form

See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/6741



Merged-by: Robert Marshall <rmarshall@gitlab.com>
Approved-by: Jason Young <jyoung@gitlab.com>
Approved-by: Robert Marshall <rmarshall@gitlab.com>
Co-authored-by: Balasankar "Balu" C <balasankar@gitlab.com>

Related https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/6873

Related https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/7455



Changelog: deprecated

Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>

Bump Ruby version to 3.0.5

Closes #6287

See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/6736



Merged-by: DJ Mountney <dj@gitlab.com>
Approved-by: DJ Mountney <dj@gitlab.com>
Co-authored-by: Balasankar "Balu" C <balasankar@gitlab.com>

Balasankar C authored 1 year ago and DJ Mountney committed 1 year ago

Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>

Add prometheus to dependency automation

See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/6737



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Co-authored-by: DJ Mountney <dj@gitlab.com>

Use Ruby 3.2.1-based docs Docker images

See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/6750



Merged-by: Jon Glassman <jglassman@gitlab.com>
Approved-by: Jon Glassman <jglassman@gitlab.com>
Co-authored-by: Evan Read <eread@gitlab.com>

Duo Auth support as OTP provider is added.
This change will help the omnibus build to add configurations

Changelog: added
MR: https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/6752