auto-deploy version skip

Allow selectively skipping certain stages and skip buildx jobs

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1996



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Andrejs Cunskis <acunskis@gitlab.com>

- Also add a logic to skip final-images-listing job

Switch feature branchs to build using Ruby 3.2.5

Closes #2074

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1991



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Andrew Patterson <apatterson@gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: Balasankar "Balu" C <balasankar@gitlab.com>

Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>

Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>

Update exiftool/exiftool from 12.92 to 12.93

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1981



Merged-by: Robert Marshall <rmarshall@gitlab.com>
Approved-by: Andrew Patterson <apatterson@gitlab.com>
Approved-by: Robert Marshall <rmarshall@gitlab.com>
Co-authored-by: deps <bot@dependencies.io>

- Updates exiftool/exiftool from 12.92 to 12.93

Changelog: changed

Update dependency kubectl to v1.31.0

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1967



Merged-by: Robert Marshall <rmarshall@gitlab.com>
Approved-by: Lucas Li <lli@gitlab.com>
Approved-by: Robert Marshall <rmarshall@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

- Updates dependency kubectl to v1.31.0

Changelog: changed

Resolve "Syntax error in hardening scripts for UBI images"

Closes #2073

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1986



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Andrew Patterson <apatterson@gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: Dmytro Makovey <dmakovey@gitlab.com>

Changelog: fixed

Fix build scripts to better support upstream triggers

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1951



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Clemens Beck <cbeck@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Reviewed-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Reviewed-by: Jason Plum <jplum@gitlab.com>
Reviewed-by: Andrejs Cunskis <acunskis@gitlab.com>
Co-authored-by: Andrejs Cunskis <acunskis@gitlab.com>

Fix check for image existance

Use correct upstream data for tagging

Add ability to override CACHE_BUSTER

CI: container-scanning to use UBI_MICRO_IMAGE, per distroless

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1957



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Clemens Beck <cbeck@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Reviewed-by: Clemens Beck <cbeck@gitlab.com>
Co-authored-by: Jason Plum <jplum@gitlab.com>

Set the `container-scanning` job to make use of both
`UBI_MICRO_IMAGE` (micro) and `UBI_IMAGE` (minimal) to ensure
appropriate base image is scanned, and isolating the diffences.

Update gitlab-org/container-registry from v4.7.0-gitlab to v4.8.0-gitlab

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1984



Merged-by: Suleimi Ahmed <sahmed@gitlab.com>
Approved-by: João Pereira <jpereira@gitlab.com>
Approved-by: Suleimi Ahmed <sahmed@gitlab.com>
Co-authored-by: deps <bot@dependencies.io>

Changelog: changed

[ci skip]

Update Rubygems and Bundler

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1980



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

Update dependency redis to v5.3.0

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1979



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Clemens Beck <cbeck@gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

Changelog: changed

Changelog: changed

Lock Rubygems and Bundler versions

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1947



Merged-by: Robert Marshall <rmarshall@gitlab.com>
Approved-by: Lucas Li <lli@gitlab.com>
Approved-by: Robert Marshall <rmarshall@gitlab.com>
Co-authored-by: João Cunha <j.a.cunha@gmail.com>

Remove git-filter-repo from deps.yml

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1973



Merged-by: Robert Marshall <rmarshall@gitlab.com>
Approved-by: Clemens Beck <cbeck@gitlab.com>
Approved-by: Robert Marshall <rmarshall@gitlab.com>
Co-authored-by: João Cunha <j.a.cunha@gmail.com>

This is now managed by Renovate.

Related https://gitlab.com/gitlab-org/build/CNG/-/issues/2058

MR: https://gitlab.com/gitlab-org/frontend/renovate-gitlab-bot/-/merge_requests/928

Update docker Docker tag to v27.1.2

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1964



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Andrew Patterson <apatterson@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

Changelog: changed

This change brings the RUBYGEMS_VERSION AND BUNDLER_VERSION to our
ci_files/variables.yml, which is our SSoT to store all our versions.
They should not be set directly in Dockerfiles, specially when they're
reused by more than one Dockerfile.

Additionally, this locks the Bundler version in our Rails environments
by using `bundle config set --local version system`. Just by installing
a certain version of RubyGems/bundler is not enough
to guarantee that this version will be used when running 'bundle
install'. When installing, bundle will check what is the BUNDLED_WITH
value within the Gemfile.lock, and if this version is not present, it
will install it and use it. By setting the bunde version config to
`system`, we force bundler to always take the version which is installed
in the system instead of trying to detect it from the Gemfile.lock.

This bundle config is being set locally into the
/srv/gitlab/.bundle/config, which is the same pattern we've been
following for other bundle configs.

Changelog: changed