Update dependency python/cpython to v3.9.23

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2417



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Hossein Pursultani <hpursultani@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

Changelog: changed

Update Rubygems and Bundler

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2379



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

UBI: Optimize UBI docker caching by re-layering

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2397



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Andrew Patterson <apatterson@gitlab.com>

Adjust UBI Dockerfile command ordering to
optimizing the use of caching.

Start by moving running hardening scripts just
after the start of the final image processing as
it never changes unless the final image changes.

Build multiarch images for UBI and FIPS

Closes #809 and #810

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2419



Merged-by: Andrew Patterson <apatterson@gitlab.com>
Approved-by: Andrew Patterson <apatterson@gitlab.com>
Co-authored-by: Balasankar "Balu" C <balasankar@gitlab.com>

Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>

Changelog: changed

Build gitaly-init-cgroups image in UBI pipeline also

Closes #2205

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2426



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: Balasankar "Balu" C <balasankar@gitlab.com>

Use correct build image for UBI and FIPS builds

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2427



Merged-by: Andrew Patterson <apatterson@gitlab.com>
Approved-by: Andrew Patterson <apatterson@gitlab.com>
Co-authored-by: Balasankar "Balu" C <balasankar@gitlab.com>

Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>

Update dependency gitlab-org/container-registry to v4.23.1-gitlab

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2418



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: SAhmed <sahmed@gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>

CI: Use arrays in container_version get_*_version

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2424



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Andrew Patterson <apatterson@gitlab.com>

Use arrays to separate out components in the
get_*_version() functions in container_versions.sh
to make maintenance easier.

Changelog: changed

Revert "Merge branch 'renovate/gitlab-org-container-registry-4.x' into 'master'"

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2416



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: SAhmed <sahmed@gitlab.com>

This reverts merge request !2411

Update dependency gitlab-org/container-registry to v4.23.0-gitlab

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2411



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: SAhmed <sahmed@gitlab.com>
Approved-by: João Pereira <jpereira@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

Changelog: changed

Build asset images and final images in same CI job in UBI/FIPS pipelines

Closes #2181

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2412



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: Balasankar "Balu" C <balasankar@gitlab.com>

Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>

CI: Optional destination for renderDockerfile

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2414



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Reviewed-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Andrew Patterson <apatterson@gitlab.com>

Add an optional argument to renderDockerfile that
is used to specify the output destination of a
rendered file.

Needed for DSOP Dockerfile massaging.

Update docker Docker tag to v28.2.2

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2413



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

Add CE build to all relevant UBI/FIPS pipelines

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2407



Merged-by: Robert Marshall <rmarshall@gitlab.com>
Approved-by: Robert Marshall <rmarshall@gitlab.com>
Co-authored-by: Balasankar "Balu" C <balasankar@gitlab.com>

- Ensures the PIPELINE_TYPE checks for jobs include the expected
  CE jobs in UBI and FIPS pipelines.

Related https://gitlab.com/gitlab-org/build/CNG/-/issues/2194



Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>

Update dependency aws/aws-cli to v1.40.23

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2391



Merged-by: Andrew Patterson <apatterson@gitlab.com>
Approved-by: Lucas Li <lli@gitlab.com>
Approved-by: Andrew Patterson <apatterson@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

Changelog: changed

Move build logic from CI to dedicated scripts

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2403



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Dmytro Makovey <dmakovey@gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: Balasankar "Balu" C <balasankar@gitlab.com>

Move setting of Dockerfile and Image tag extension to script file.

Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>

Add UBI and FIPS images for Zoekt

Closes #2195

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2402



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Reviewed-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Balasankar "Balu" C <balasankar@gitlab.com>

Changelog: added
Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>

Update docker Docker tag to v28.2.1

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2409



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Hossein Pursultani <hpursultani@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

Changelog: changed

Include CE images in the UBI pipeline

Closes #2194

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2401



Merged-by: Andrew Patterson <apatterson@gitlab.com>
Approved-by: Andrew Patterson <apatterson@gitlab.com>
Co-authored-by: Balasankar "Balu" C <balasankar@gitlab.com>

Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>

UBI/FIPS: Fix hardening scripts

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2405



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: Clemens Beck <cbeck@gitlab.com>

Two hardening scripts required RPM to run. Our final UBI/FIPS
container stage does not have a package manager, so these calls
always failed.

Instead, we can check for if the config files are present.

Changelog: fixed