Sync 16.7 stable branch from canonical

See merge request gitlab-org/security/charts/components/images!30

Backport 16.7: Clean mocked tags from assets

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1688



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Hossein Pursultani <hpursultani@gitlab.com>

CI: clean mocked tags from assets, don't pollute artifacts, adjust needs to compensate

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1671



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Co-authored-by: Jason Plum <jplum@gitlab.com>

Cleanup the mocked tags from import_assets in `build:` jobs so
that we don't pollute the artifacts for later jobs.

Related to https://gitlab.com/gitlab-org/build/CNG/-/issues/1843

Update gitlab-org/container-registry from v3.87.0-gitlab to v3.88.0-gitlab

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1673



Merged-by: Jaime Martinez <jmartinez@gitlab.com>
Approved-by: Jaime Martinez <jmartinez@gitlab.com>
Co-authored-by: deps <bot@dependencies.io>

gitlab-base: add FIPS to UBI8 when FIPS_MODE=1

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1606



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Approved-by: Hossein Pursultani <hpursultani@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Reviewed-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Co-authored-by: Jason Plum <jplum@gitlab.com>

Replicate the effect of `update-crypto-policies --set FIPS`, via script
`hardening/001_crypto_policies_fips.sh` when `ARG FIPS_MODE` is set to `1`

Add `--build-arg FIPS_MODE=${FIPS_MODE}` to `.gitlab-base` template.

Include execution of this new script within UBI8 container.

Related to https://gitlab.com/gitlab-org/build/CNG/-/issues/779

Resolve "Follow-up from "Update gitlab-mail_room to 0.0.24""

Closes #1836

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1663



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Clemens Beck <cbeck@gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: Hossein Pursultani <hpursultani@gitlab.com>

1. redis-client is updated to 0.19.0
2. redis-namespace is updated to 1.11.0

Changelog: fix

Update aws/aws-cli from 1.31.9 to 1.31.11

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1660



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Approved-by: Clemens Beck <cbeck@gitlab.com>
Co-authored-by: deps <bot@dependencies.io>

Bump bundled Ruby to 3.1.4

Closes #726

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1659



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Stan Hu <stanhu@gmail.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: Balasankar "Balu" C <balasankar@gitlab.com>

Update gitlab-mail_room to 0.0.24

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1662



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Stan Hu <stanhu@gmail.com>
Co-authored-by: Marc Saleiko <marc.saleiko@komadesign.de>

Manage OpenSSL 1.1 for Ruby 3.0 with deps io

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1642



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Hossein Pursultani <hpursultani@gitlab.com>
Co-authored-by: Clemens Beck <cbeck@gitlab.com>