auto-deploy version skip

Update Rubygems and Bundler

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1985



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

Update dependency aws/aws-cli to v1.35.20

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2079



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Dustin Collins <714871-dustinmm80@users.noreply.gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

Update moby/buildkit Docker tag to v0.17.0

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2071



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Clemens Beck <cbeck@gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

Update CONTRIBUTING.md

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2077



Merged-by: Andrew Patterson <apatterson@gitlab.com>
Approved-by: Alec Xu <axu@gitlab.com>
Approved-by: Andrew Patterson <apatterson@gitlab.com>
Co-authored-by: Lin Jen-Shin <jen-shin@gitlab.com>

Changelog: changed

[CI] Disable Buildx cluster use for Autodeploy pipelines

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2078



Merged-by: Andrew Patterson <apatterson@gitlab.com>
Approved-by: Ryan Egesdahl <regesdahl@gitlab.com>
Approved-by: Andrew Patterson <apatterson@gitlab.com>
Co-authored-by: Dmytro Makovey <dmakovey@gitlab.com>

Set buildkit image in all pipelines

Closes #2092

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2073



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Dmytro Makovey <dmakovey@gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: Clemens Beck <cbeck@gitlab.com>

Remove deps.io from the repo

Closes #2058

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2047



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: Lucas Li <lli@gitlab.com>

To avoid floating tags we are using a builkit tag with a semver
version, but this tag is currently only used in zstd pipelines.

Change the tag to be used in all pipelines for consistent behaviour.

Closes https://gitlab.com/gitlab-org/build/CNG/-/issues/2092

- removed deps.io pipelines
- removed pipeline rules
- updated docs and variable list

Update dependency aws/aws-cli to v1.35.18

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2072



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

Changelog: changed

Changelog: changed

Update dependency aws/aws-cli to v1.35.17

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2067



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Lucas Li <lli@gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

Update Go to 1.23.2

Closes #2109

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2064



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Hossein Pursultani <hpursultani@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Clemens Beck <cbeck@gitlab.com>

Changelog: changed

Changelog: changed

Update dependency gitlab-org/container-registry to v4.12.0-gitlab

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2069



Merged-by: João Pereira <jpereira@gitlab.com>
Approved-by: João Pereira <jpereira@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

Changelog: changed

Update dependency kubectl to v1.31.1

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2023



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Hossein Pursultani <hpursultani@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

CI: FIPS, use CDF rpm-verify-fips script on all final containers

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2065



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Approved-by: Clemens Beck <cbeck@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Reviewed-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: Jason Plum <jplum@gitlab.com>

When in a FIPS pipeline, operate CDF's `rpm-verify-fips` script on
all output containers.

- Allowed to fail
- Authenticating to the registry to perform pullsi, on dev.

Related to https://gitlab.com/gitlab-org/build/CNG/-/issues/2083

Update dependency aws/aws-cli to v1.35.15

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2050



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Jon Doveston <jdoveston@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

Changelog: changed

FIPS: further enforce FIPS, via various config

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2000



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Clemens Beck <cbeck@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Jason Plum <jplum@gitlab.com>

Further enforce FIPS behaviors with expansion to the way we script
environment and filesystem state.

- Switch RedHat detection to `/etc/redhat-release` presence in
  place of `grep` on `/etc/os-release`
- Add to entrypoint, enforce various ENV when `/etc/system-fips`
  file is present. Accept incoming overrides when set.
- Add hardening script to force gcrypt behavior

Changelog: changed