Update dependency gitlab-org/container-registry to v4.15.0-gitlab

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2168



Merged-by: Jaime Martinez <jmartinez@gitlab.com>
Approved-by: Jaime Martinez <jmartinez@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

Changelog: changed

Update dependency git-filter-repo to v2.47.0

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2130



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Alec Xu <axu@gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

UBI: remove soft-dep shadow-utils

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2149



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Jason Plum <jplum@gitlab.com>

UBI: Gitaly: set target as gitlab-base

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2143



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Andrew Patterson <apatterson@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Jason Plum <jplum@gitlab.com>

Allow setting Workhorse secret path via environment variable

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2166



Merged-by: Robert Marshall <rmarshall@gitlab.com>
Approved-by: Robert Marshall <rmarshall@gitlab.com>
Co-authored-by: Hossein Pursultani <hpursultani@gitlab.com>

Adds ability to change the workhorse secret through a
shell parameter expansion.

Unblocks https://gitlab.com/gitlab-org/cloud-native/operator/-/merge_requests/177

Related https://gitlab.com/gitlab-org/cloud-native/operator/-/issues/98

Toolbox: update URLs for AzCopy (upstream change)

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2158



Merged-by: Mayra Cabrera <mcabrera@gitlab.com>
Approved-by: Dmytro Makovey <dmakovey@gitlab.com>
Approved-by: Andrew Patterson <apatterson@gitlab.com>
Co-authored-by: Jason Plum <jplum@gitlab.com>

Update the URLs for AzCopy downloads, as azureedge went away.

See upstream issue:
https://github.com/Azure/azure-storage-azcopy/issues/2903

Related to https://gitlab.com/gitlab-org/build/CNG/-/issues/2136

Changelog: changed

Resolve "Error when using backup-utility with GitLab 17.5.4"

Closes #2135

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2147



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Hossein Pursultani <hpursultani@gitlab.com>
Co-authored-by: João Cunha <j.a.cunha@gmail.com>

Remove storybook directories

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2142



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Reviewed-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Co-authored-by: Dominic Couture <dcouture@gitlab.com>

Remove the soft-dependency of `shadow-utils` from under `libcurl`.
Not wanted in final image, not functionally required by any package.

Related to:
- https://gitlab.com/gitlab-org/build/CNG/-/issues/2133
- https://gitlab.com/gitlab-org/build/CNG/-/issues/2108

Bump zoekt version to 0.9.0

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2146



Merged-by: Dmitry Gruzd <dgruzd@gitlab.com>
Approved-by: Dmitry Gruzd <dgruzd@gitlab.com>
Co-authored-by: Ravi Kumar <rkumar@gitlab.com>

The pyOpenSSL 24.3.0 includes 2 breaking changes:

https://github.com/pyca/pyopenssl/blob/24.3.0/CHANGELOG.rst#backward-incompatible-changes

This breakes gsutil. So we're pinning pyOpenSSL to 24.2.1.

Issue: https://gitlab.com/gitlab-org/build/CNG/-/issues/2135
Changelog: fixed

Set the `FROM ... target` statement to be `gitlab-base` in place
of `ubi-micro`, similar to toolbox/webservice/sidekiq changes.

UBI: certificates: refactor patterns for permissions and verification

Closes #2114

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2133



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Clemens Beck <cbeck@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>

Do not cache autodeploy images

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2118



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Dustin Collins <714871-dustinmm80@users.noreply.gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: Dmitry Makovey <dmakovey@gitlab.com>

Applying suggestion from Robert M

UBI: centralize all UBI image/version setting to variables

Closes #2124

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2128



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Jason Plum <jplum@gitlab.com>

Remove image path/version  from all `UBI*_IMAGE=` statements.

This is done to centralize to a single point, via `ci_files/variables.yml`

Closes https://gitlab.com/gitlab-org/build/CNG/-/issues/2124

Support internal releases

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2117



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Clemens Beck <cbeck@gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Reviewed-by: Clemens Beck <cbeck@gitlab.com>
Co-authored-by: Balasankar "Balu" C <balasankar@gitlab.com>

Update dependency Azure/azure-storage-azcopy to v10.27.1

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2105



Merged-by: Andrew Patterson <apatterson@gitlab.com>
Approved-by: Alec Xu <axu@gitlab.com>
Approved-by: Andrew Patterson <apatterson@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

Update dependency mikefarah/yq to v4.44.6

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2137



Merged-by: Robert Marshall <rmarshall@gitlab.com>
Approved-by: Dustin Collins <714871-dustinmm80@users.noreply.gitlab.com>
Approved-by: Robert Marshall <rmarshall@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

- Updates dependency mikefarah/yq to v4.44.6

Changelog: changed

Update the patterns of the UBI certificates container, in order to
better satisfy `rpm --verify` and resolve permissions challenges that
led to the original issue.

Closes https://gitlab.com/gitlab-org/build/CNG/-/issues/2114

Changelog: changed

Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>

Update moby/buildkit Docker tag to v0.18.1

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2102



Merged-by: Robert Marshall <rmarshall@gitlab.com>
Approved-by: Lucas Li <lli@gitlab.com>
Approved-by: Robert Marshall <rmarshall@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

- Updates moby/buildkit Docker tag to v0.18.1

Changelog: changed

UBI: Sidekiq: fix layer ordering, consume rails properly

Closes #2115

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2113



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Jason Plum <jplum@gitlab.com>