CI: clean mocked tags from assets, don't pollute artifacts, adjust needs to compensate

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1671



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Co-authored-by: Jason Plum <jplum@gitlab.com>

Cleanup the mocked tags from import_assets in `build:` jobs so
that we don't pollute the artifacts for later jobs.

Related to https://gitlab.com/gitlab-org/build/CNG/-/issues/1843

Update gitlab-org/container-registry from v3.87.0-gitlab to v3.88.0-gitlab

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1673



Merged-by: Jaime Martinez <jmartinez@gitlab.com>
Approved-by: Jaime Martinez <jmartinez@gitlab.com>
Co-authored-by: deps <bot@dependencies.io>

gitlab-base: add FIPS to UBI8 when FIPS_MODE=1

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1606



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Approved-by: Hossein Pursultani <hpursultani@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Reviewed-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Co-authored-by: Jason Plum <jplum@gitlab.com>

Replicate the effect of `update-crypto-policies --set FIPS`, via script
`hardening/001_crypto_policies_fips.sh` when `ARG FIPS_MODE` is set to `1`

Add `--build-arg FIPS_MODE=${FIPS_MODE}` to `.gitlab-base` template.

Include execution of this new script within UBI8 container.

Related to https://gitlab.com/gitlab-org/build/CNG/-/issues/779

Resolve "Follow-up from "Update gitlab-mail_room to 0.0.24""

Closes #1836

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1663



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Clemens Beck <cbeck@gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: Hossein Pursultani <hpursultani@gitlab.com>

1. redis-client is updated to 0.19.0
2. redis-namespace is updated to 1.11.0

Changelog: fix

Update aws/aws-cli from 1.31.9 to 1.31.11

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1660



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Approved-by: Clemens Beck <cbeck@gitlab.com>
Co-authored-by: deps <bot@dependencies.io>

Bump bundled Ruby to 3.1.4

Closes #726

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1659



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Stan Hu <stanhu@gmail.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: Balasankar "Balu" C <balasankar@gitlab.com>

Update gitlab-mail_room to 0.0.24

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1662



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Stan Hu <stanhu@gmail.com>
Co-authored-by: Marc Saleiko <marc.saleiko@komadesign.de>

Manage OpenSSL 1.1 for Ruby 3.0 with deps io

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1642



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Hossein Pursultani <hpursultani@gitlab.com>
Co-authored-by: Clemens Beck <cbeck@gitlab.com>

Fix deps io replace for rubygems and bundler

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1648



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Dustin Collins <714871-dustinmm80@users.noreply.gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Clemens Beck <cbeck@gitlab.com>

Update golang/go from 1.20.11 to 1.20.12

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1655



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Hossein Pursultani <hpursultani@gitlab.com>
Approved-by: Robert Marshall <rmarshall@gitlab.com>
Co-authored-by: deps <bot@dependencies.io>

Update aws/aws-cli from 1.31.4 to 1.31.9

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1645



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Clemens Beck <cbeck@gitlab.com>
Co-authored-by: deps <bot@dependencies.io>

Changelog: changed
Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>

Fix backup id parsing from backup URLs

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1657



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: Clemens Beck <cbeck@gitlab.com>

The backup id is parsed from the backup URL to be passed to
the rake restore processes.

This parsing currently fails with:

```
/usr/local/bin/backup-utility: line 322: <backup_id>%_gitlab_backup.tar: command not found
```

This is unproblematic when a backup id is specified, but causes
missing repository restores when a full backup URL was specified.

Changelog: fixed

Update mikefarah/yq from 4.40.3 to 4.40.4

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1646



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Clemens Beck <cbeck@gitlab.com>
Co-authored-by: deps <bot@dependencies.io>

Update gitlab-org/container-registry from v3.86.2-gitlab to v3.87.0-gitlab

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1652



Merged-by: Hayley Swimelar <hswimelar@gitlab.com>
Co-authored-by: deps <bot@dependencies.io>

[CI] Use Job ID for datecheck pod naming for uniqueness

Closes #819

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1630



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Co-authored-by: Dmytro Makovey <dmakovey@gitlab.com>

Fix redis-namspace dependency version for UBI mailroom

Closes #1800

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1644



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Clemens Beck <cbeck@gitlab.com>
Co-authored-by: Hossein Pursultani <hpursultani@gitlab.com>

Deps io collects the latest tag for each `replace_in_files` but only the
last result is kept. Because of this all rubygems/bundler versions are
replaced with one version.

This workaround only looks for the minor version of rubygems and
replaces all rubygems/bundler versions with it. The major version has
been moved to the replace pattern.

UBI-flavored gitlab-mailroom was using an older version of
redis-namespace Gem which is incompatible with Ruby 3. The
version is updated to match the Debian-flavored image.

Changelog: fixed

Debian/Ruby: symlink to system for openssl 1.1.1 install certs

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1643



Merged-by: Robert Marshall <rmarshall@gitlab.com>
Approved-by: Robert Marshall <rmarshall@gitlab.com>
Approved-by: Mitchell Nielsen <mnielsen@gitlab.com>
Co-authored-by: Jason Plum <jplum@gitlab.com>