Prepare 15.4.2 release

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1148



Merged-by: Amy Phillips <aphillips@gitlab.com>
Approved-by: Amy Phillips <aphillips@gitlab.com>
Co-authored-by: Balasankar 'Balu' C <balasankar@gitlab.com>

See https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1145

Changelog: changed

kubectl: update to 1.23.10 (go1.17.13)

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1130



Merged-by: Robert Marshall <rmarshall@gitlab.com>
Approved-by: Robert Marshall <rmarshall@gitlab.com>
Co-authored-by: Jason Plum <jplum@gitlab.com>

Base gitlab-go on Debian not base

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1132



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: Robert Marshall <rmarshall@gitlab.com>

- Eliminate the circular dependency between gitlab-go and gitlab-base in
  preparation of adding gitlab-logger and gomplate into the gitlab-base
  container image.

Related https://gitlab.com/gitlab-org/charts/gitlab/-/issues/3528



Signed-off-by: Robert Marshall <rmarshall@gitlab.com>

Gomplate: update to 3.11.3 (go1.19)

See merge request gitlab-org/build/CNG!1131

Bump to latest gomplate version 3.11.3.

Make oauth application creation compatible with hashed secrets

See merge request gitlab-org/build/CNG!1116

Update mikefarah/yq from 4.27.3 to 4.27.5

See merge request gitlab-org/build/CNG!1133

Bump version from 4.27.3 to 4.27.5

FIPS: fix Go fips tag, format changed

See merge request gitlab-org/build/CNG!1128

- Uses newly changed format for the go fips tag upstream
- Fixes Dockerfile to accept version arguments correctly

Bump Golang version to 1.17.13

Closes gitlab-org/charts/gitlab#3225

See merge request gitlab-org/build/CNG!1122

Update Golang from 1.17.6 to 1.17.13

Closes https://gitlab.com/gitlab-org/charts/gitlab/-/issues/3225

- ci: container-scanning: fix model parameter set
- cfssl-self-sign: add tag suffix when appropriate

See merge request gitlab-org/build/CNG!1127

Only install postgresql client binaries

Closes gitlab-org/charts/gitlab#3501

See merge request gitlab-org/build/CNG!1106

cfssl-self-sign did not have `IMAGE_TAG_EXT` incorported, so all final
pipelines tagged the image on the same `1.6.1` as an example. This
change ensure that `-fips` and `-ubi8` are added as appropriate.

The `container-scanning` job does not build off of `job-base`, and as
thus did not know that FIPS means UBI. Correct this by adding the
appropriate check here as well.

Update redis/redis-rb from 4.7.1 to 4.8.0

See merge request gitlab-org/build/CNG!1107

CI: Include all image inheritance in the output of final images listing

See merge request gitlab-org/build/CNG!1117

Update Deps.io config maintainers

See merge request gitlab-org/build/CNG!1123