auto-deploy version skip

Doc: Remember to start fresh on test

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2462



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Clemens Beck <cbeck@gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: João Cunha <j.a.cunha@gmail.com>

This change makes sure that we run the awscli local test against the
latest image sha.

Update Codeowners for Zoekt

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2467



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Dmitry Gruzd <dgruzd@gitlab.com>

Update FIPS Go from 1.23.7 to 1.23.9

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2465



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Clemens Beck <cbeck@gitlab.com>

Update dependency aws/aws-cli to v1.40.40

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2455



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

Update FIPS Go to the same version as regular Go (1.23.9) to fix
zoekt build errors.

https://dev.gitlab.org/gitlab/charts/components/images/-/jobs/28529439

Changelog: changed

chore: remove obsolete container-registry build tags

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2452



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Clemens Beck <cbeck@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Pawel Rozlach <prozlach@gitlab.com>

Enable GitLab native container scanning

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2447



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: Balasankar "Balu" C <balasankar@gitlab.com>

Update Zoekt to 0.22.0

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2459



Merged-by: Terri Chu <tchu@gitlab.com>
Approved-by: Ravi Kumar <rkumar@gitlab.com>
Approved-by: Terri Chu <tchu@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Dmitry Gruzd <dgruzd@gitlab.com>

Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>

Update dependency kubectl to v1.33.2

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2458



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Clemens Beck <cbeck@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

fix: Don't unset IMAGE_TAG_EXT passed by gitlab-org/gitlab

Closes gitlab-org/release/tasks#19956

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2453



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Siddharth Kannan <skannan@gitlab.com>

Changelog: changed

Changelog: changed

gitlab-org/gitlab [passes] the value of `IMAGE_TAG_EXT` as a trigger variable when building Docker
images that are used within the [release-environments]. This variable was being used in 18.0. In
https://gitlab.com/gitlab-org/build/CNG/-/commit/03d460b39e1ac7c8e7d957260ac8b6943025d9db, the
variable started being `unset` even when it was set to a value that was not related to `ubi` or
`fips`. This caused deployments to the release-environments to start failing for the 18-1-stable-ee
branch of gitlab-org/security/gitlab.

This patch updates the code to unset `IMAGE_TAG_EXT` only when it ends with `-ubi` or `-fips`

Fixes https://gitlab.com/gitlab-org/release/tasks/-/issues/19956

[passes]: https://gitlab.com/gitlab-org/gitlab/-/blob/fe279df83b0446c6b12638b6c43beb93b75f4fc4/.gitlab/ci/release-environments/security.gitlab-ci.yml#L40
[release-environments]: https://gitlab.com/gitlab-com/gl-infra/release-environments



Signed-off-by: Siddharth Kannan <skannan@gitlab.com>

Drop ubi-assets-release CI job

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2449



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Andrew Patterson <apatterson@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Clemens Beck <cbeck@gitlab.com>

UBI: de-optimize RUN commands in UBI Dockerfiles to optimize caching

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2421



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Reviewed-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Andrew Patterson <apatterson@gitlab.com>

De-optimize RUN commands in phase zero, UBI
Dockerfiles to optimize cache use.

Sidekiq CE: Set GITLAB_VERSION and GITLAB_REF_SLUG

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2443



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Reviewed-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Clemens Beck <cbeck@gitlab.com>

Set GITLAB_VERSION and GITLAB_REF_SLUG like in other CE images.
The GITLAB_VERSION is used in the rails hash, which can lead to
the Sidekiq build job trying to pull a non-existing rails image.

Update dependency python/cpython to v3.9.23

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2417



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Hossein Pursultani <hpursultani@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

Changelog: changed

Update Rubygems and Bundler

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2379



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>