auto-deploy version skip

Bump Go to version 1.22.5

Closes #2040

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1891



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Approved-by: John Skarbek <jskarbek@gitlab.com>
Co-authored-by: Dmitry Makovey <dmakovey@gitlab.com>

Update dependency aws/aws-cli to v1.33.19

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1889



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Dustin Collins <714871-dustinmm80@users.noreply.gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

Changelog: changed

Update docker Docker tag to v27.0.3

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1897



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Andrew Patterson <apatterson@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

UBI: move to ubi9, remove version from suffix

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1888



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Robert Marshall <rmarshall@gitlab.com>
Co-authored-by: Jason Plum <jplum@gitlab.com>

In addition, drop the version component from the image tag suffixes.
Images will now be tagged `x.y.z-ubi` instead of `x.y.z-ubi9`.

Changelog: changed

Update schema checks to be aware of all migrations

Update the schema checks of the `wait-for-deps` pattern to be aware
of all migrations, by directly comparing the entries in the appropriate
directories in the application to the table within the database.

This replaces the previous implementation that looked at the latest dated
migration in the codebase versus the database. That check was naive, and
fast, but problematic for several reasons.

This should address multiple factors:
- support concerns of migrations being milestone ordered
- migrations dated in the past
- failed intermediate migrations, from previous upgrades

Changelog: fixed

Closes #2024

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1859



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Krasimir Angelov <kangelov@gitlab.com>
Approved-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Reviewed-by: Jason Plum <jplum@gitlab.com>
Reviewed-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Reviewed-by: Krasimir Angelov <kangelov@gitlab.com>
Co-authored-by: Jon Jenkins <jjenkins@gitlab.com>

Update the schema checks of the `wait-for-deps` pattern to be aware
of all migrations, by directly comparing the entries in the appropriate
directories in the application to the table within the database.

This replaces the previous implementation that looked at the latest dated
migration in the codebase versus the database. That check was naive, and
fast, but problematic for several reasons.

This should address multiple factors:
- support concerns of migrations being milestone ordered
- migrations dated in the past
- failed intermediate migrations, from previous upgrades

Changelog: fixed


Closes #2024

gitlab-base: Bring gitlab-logger image tag suffix back

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1922



Merged-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: João Cunha <j.a.cunha@gmail.com>

In 6f93d54e we attempted to pull the correct CONTAINER_VERSION but
without the suffix. This caused the image to not be found:

https://gitlab.com/gitlab-org/security/charts/components/images/-/jobs/7354796109#L109

Changelog: fixed

Set GOTOOLCHAIN=local for all Go build stages

Closes #2033

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1893



Merged-by: Robert Marshall <rmarshall@gitlab.com>
Approved-by: Hossein Pursultani <hpursultani@gitlab.com>
Approved-by: Robert Marshall <rmarshall@gitlab.com>
Co-authored-by: Jason Plum <jplum@gitlab.com>

Set `GOTOOLCHAIN=local` for in the `ENV` for all Go build stages
of the CNG.

This ensures that a project's checked in `toolchain` content from
`go.mod` will not override the version as configured for the CNG
pipelines itself. This greatly increases the likelihood we are
operating as intended, versus floating accidentally based on a
git checkout's content.

See also https://go.dev/doc/toolchain

Closes https://gitlab.com/gitlab-org/build/CNG/-/issues/2033

Changelog: changed

CI Buildx: Trim trailing hyphen-minuses from namespaces

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1886



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Reviewed-by: Clemens Beck <cbeck@gitlab.com>
Co-authored-by: Clemens Beck <cbeck@gitlab.com>

Sign GitLab.com images with private key

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1901



Merged-by: Robert Marshall <rmarshall@gitlab.com>
Approved-by: Robert Marshall <rmarshall@gitlab.com>
Reviewed-by: Robert Marshall <rmarshall@gitlab.com>
Co-authored-by: Balasankar "Balu" C <balasankar@gitlab.com>

Sign images built on GitLab.com with the private
key if it is defined in addition to the OIDC key.

Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>

Make buildx replicas tunable at runtime to reduce infrastructure load

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1619



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Clemens Beck <cbeck@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Dmitry Makovey <dmakovey@gitlab.com>

Fix greedy suffix match

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1898



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: Dmitry Makovey <dmakovey@gitlab.com>

Enable all the danger defaults

Closes gitlab-org/distribution/team-tasks#1417

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1887



Merged-by: Robert Marshall <rmarshall@gitlab.com>
Approved-by: Hossein Pursultani <hpursultani@gitlab.com>
Approved-by: Robert Marshall <rmarshall@gitlab.com>
Co-authored-by: João Cunha <j.a.cunha@gmail.com>

We have to keep port information for dev builds

Changelog: changed

Update docker Docker tag to v27.0.2

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1881



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Andrew Patterson <apatterson@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

Update dependency danger-review to v1.4.1

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1884



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Andrew Patterson <apatterson@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

UBI: move to perl-interpreter, instead of perl

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1882



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Clemens Beck <cbeck@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Jason Plum <jplum@gitlab.com>

Include gomplate assets in gitlab-base UBI image

Closes #2041

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1895



Merged-by: Hossein Pursultani <hpursultani@gitlab.com>
Approved-by: Clemens Beck <cbeck@gitlab.com>
Approved-by: Hossein Pursultani <hpursultani@gitlab.com>
Co-authored-by: Balasankar "Balu" C <balasankar@gitlab.com>

Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>