Prepare 16.5.2 release for cng-jh

See merge request gitlab-cn/build/cng-images!103

Prepare 16.5.1 release for cng-jh

See merge request gitlab-cn/build/cng-images!100

Bump zoekt indexer to v0.1.1

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1587



Merged-by: Dmitry Gruzd <dgruzd@gitlab.com>
Approved-by: Dmitry Gruzd <dgruzd@gitlab.com>
Co-authored-by: John Mason <9717668-johnmason@users.noreply.gitlab.com>

UBI: final as multi-stage, control permissions and 'bloat'

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1558



Merged-by: Robert Marshall <rmarshall@gitlab.com>
Approved-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Approved-by: Robert Marshall <rmarshall@gitlab.com>
Co-authored-by: Jason Plum <jplum@gitlab.com>

    
Use a `composite` intermediate container image when setting permissions
on files in the rails related images to eliminate a very large and
unnecessary image layer.
    
- Move all `ADD` of tarballs to `composite`
- Move all `COPY` of `UID` owned files to `composite`
- Set permissions, as needed, to `UID:0`
- `COPY` from `composite` to `final` removing the need to `chown` large
  amounts of data

Update kubectl from 1.24.17 to 1.25.14

Closes #718

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1582



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Dustin Collins <714871-dustinmm80@users.noreply.gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Clemens Beck <cbeck@gitlab.com>

Update golang-fips/go from 1.20.8 to 1.20.10

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1576



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Clemens Beck <cbeck@gitlab.com>
Co-authored-by: deps <bot@dependencies.io>

Changelog: changed

Update gitlab-org/gitlab-exporter from 13.4.0 to 13.4.1

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1579



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Andrew Patterson <apatterson@gitlab.com>
Co-authored-by: deps <bot@dependencies.io>

Changelog: changed

Update golang/go from 1.20.8 to 1.20.10

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1572



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Clemens Beck <cbeck@gitlab.com>
Co-authored-by: deps <bot@dependencies.io>

Changelog: changed

Update template for security-target label

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1567



Merged-by: Robert Marshall <rmarshall@gitlab.com>
Approved-by: Robert Marshall <rmarshall@gitlab.com>
Co-authored-by: Steve Abrams <sabrams@gitlab.com>

Updates process to add security-target label and removes
step to link directly to the security tracking issue.

Related https://gitlab.com/gitlab-com/gl-infra/delivery/-/issues/19680

Bump Container Registry to v3.85.0-gitlab

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1583



Merged-by: Jaime Martinez <jmartinez@gitlab.com>
Approved-by: Jaime Martinez <jmartinez@gitlab.com>
Co-authored-by: Hayley Swimelar <hswimelar@gitlab.com>

Drop Node max memory size setting

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1577



Merged-by: Robert Marshall <rmarshall@gitlab.com>
Approved-by: Andrew Patterson <apatterson@gitlab.com>
Approved-by: Robert Marshall <rmarshall@gitlab.com>
Co-authored-by: Balasankar "Balu" C <balasankar@gitlab.com>

Upstream now sets max_old_space_size during builds, so it
is no longer required in CNG build jobs.

Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>

Update zoekt-indexer to support heartbeats

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1570



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Reviewed-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Reviewed-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: Dmitry Gruzd <dgruzd@gitlab.com>

Update kubectl and configure deps io to create MRs
for 1.25.x patches automatically.

Closes https://gitlab.com/gitlab-org/build/CNG/-/issues/718

Changelog: changed

[UBI8] Fix backups: Install gzip in gitlab-rails

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1578



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Clemens Beck <cbeck@gitlab.com>

To create/extract backups gzip is required. The package was implicitly
installed until bootsnap cache generation was changed in
  https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1546.

Changelog: fixed

Update aws/aws-cli from 1.29.53 to 1.29.62

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1562



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Clemens Beck <cbeck@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: deps <bot@dependencies.io>

Changelog: changed

Update rubygems/rubygems from 3.4.19 to 3.4.20

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1564



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Dmytro Makovey <dmakovey@gitlab.com>
Co-authored-by: deps <bot@dependencies.io>