For ubi-fips:

Uses base images with a bumped version of `expat`, which is not
vulnerable anymore.

Remove outdated mentions

See merge request !5510



Merged-by: Roshni Sarangadharan <rsarangadharan@gitlab.com>
Approved-by: Roshni Sarangadharan <rsarangadharan@gitlab.com>
Reviewed-by: Roshni Sarangadharan <rsarangadharan@gitlab.com>
Co-authored-by: Filip Aleksic <faleksic@gitlab.com>

Add instructions for installing prebuilt images while using binaries

See merge request gitlab-org/gitlab-runner!5508



Merged-by: Roshni Sarangadharan <rsarangadharan@gitlab.com>
Approved-by: Georgi N. Georgiev <ggeorgiev@gitlab.com>
Approved-by: Roshni Sarangadharan <rsarangadharan@gitlab.com>
Reviewed-by: Roshni Sarangadharan <rsarangadharan@gitlab.com>
Co-authored-by: Priyan Sureshbabu <psureshbabu@gitlab.com>

Remove "Autoscaler algorithm and parameters" from the GitLab Runner instance group autoscaler page

See merge request !5517



Merged-by: Lorena Ciutacu <lciutacu@gitlab.com>
Approved-by: Justin Farmiloe <jfarmiloe@gitlab.com>
Approved-by: Lorena Ciutacu <lciutacu@gitlab.com>
Reviewed-by: Lorena Ciutacu <lciutacu@gitlab.com>
Co-authored-by: Roshni Sarangadharan <rsarangadharan@gitlab.com>

Remove outdated registration in test script

See merge request !5511



Merged-by: Georgi N. Georgiev <ggeorgiev@gitlab.com>
Approved-by: Romuald Atchadé <ratchade@gitlab.com>
Approved-by: Georgi N. Georgiev <ggeorgiev@gitlab.com>
Co-authored-by: Filip Aleksic <faleksic@gitlab.com>

Retry packagecloud 504 errors

See merge request !5520



Merged-by: Axel von Bertoldi <avonbertoldi@gitlab.com>
Approved-by: Axel von Bertoldi <avonbertoldi@gitlab.com>
Co-authored-by: Georgi N. Georgiev <ggeorgiev@gitlab.com>

Reimplement pull-policy validation

See merge request https://gitlab.com/gitlab-org/security/gitlab-runner/-/merge_requests/75



Merged-by: Axel von Bertoldi <avonbertoldi@gitlab.com>
Approved-by: Roshni Sarangadharan <rsarangadharan@gitlab.com>
Approved-by: Hannes Hörl <2185075-hoegaarden@users.noreply.gitlab.com>
Reviewed-by: Hannes Hörl <2185075-hoegaarden@users.noreply.gitlab.com>
Reviewed-by: Roshni Sarangadharan <rsarangadharan@gitlab.com>

Bump base images to address CVE-2024-8176

Closes #38738 and #38739

See merge request gitlab-org/gitlab-runner!5518



Merged-by: Hannes Hörl <2185075-hoegaarden@users.noreply.gitlab.com>
Approved-by: Romuald Atchadé <ratchade@gitlab.com>
Co-authored-by: Hannes Hörl <hhoerl@gitlab.com>

Use Hugo 0.145.0 for docs builds

See merge request gitlab-org/gitlab-runner!5521



Merged-by: Evan Read <eread@gitlab.com>
Approved-by: Michael Belton <mbelton@gitlab.com>
Approved-by: Axel von Bertoldi <avonbertoldi@gitlab.com>

docs: Add troubleshooting section for AZRebalance issue

See merge request gitlab-org/gitlab-runner!5494



Merged-by: Roshni Sarangadharan <rsarangadharan@gitlab.com>
Approved-by: Roshni Sarangadharan <rsarangadharan@gitlab.com>
Reviewed-by: Roshni Sarangadharan <rsarangadharan@gitlab.com>
Co-authored-by: Sarah Crowle <scrowle@gitlab.com>

Reimplement pull-policy validation

Closes #37859 and #38706

See merge request gitlab-org/gitlab-runner!5514



Merged-by: Axel von Bertoldi <avonbertoldi@gitlab.com>
Approved-by: Roshni Sarangadharan <rsarangadharan@gitlab.com>
Approved-by: Hannes Hörl <2185075-hoegaarden@users.noreply.gitlab.com>

Add note regarding support for only Azure VMSS Uniform Orchestration mode

See merge request gitlab-org/gitlab-runner!5526



Merged-by: Roshni Sarangadharan <rsarangadharan@gitlab.com>
Approved-by: Hannes Hörl <2185075-hoegaarden@users.noreply.gitlab.com>
Approved-by: Roshni Sarangadharan <rsarangadharan@gitlab.com>
Reviewed-by: Roshni Sarangadharan <rsarangadharan@gitlab.com>
Co-authored-by: Darren Eastman <deastman@gitlab.com>

Deprecate ServiceAccountName

See merge request gitlab-org/gitlab-runner!5523



Merged-by: Roshni Sarangadharan <rsarangadharan@gitlab.com>
Approved-by: Georgi N. Georgiev <ggeorgiev@gitlab.com>
Approved-by: Roshni Sarangadharan <rsarangadharan@gitlab.com>
Reviewed-by: Roshni Sarangadharan <rsarangadharan@gitlab.com>
Co-authored-by: Julius Kvedaras <jkvedaras@gitlab.com>

Add recommendation to read Readme for plugin before installing

See merge request gitlab-org/gitlab-runner!5530



Merged-by: Roshni Sarangadharan <rsarangadharan@gitlab.com>
Approved-by: Roshni Sarangadharan <rsarangadharan@gitlab.com>
Co-authored-by: Alvin Gounder <agounder@gitlab.com>

Remove section referring to unapplied breaking change

See merge request gitlab-org/gitlab-runner!5529



Merged-by: Roshni Sarangadharan <rsarangadharan@gitlab.com>
Approved-by: Roshni Sarangadharan <rsarangadharan@gitlab.com>
Co-authored-by: Joe Randazzo <jrandazzo@gitlab.com>

Add error message on cache upload failures

Closes #4127

See merge request gitlab-org/gitlab-runner!5527



Merged-by: Romuald Atchadé <ratchade@gitlab.com>
Approved-by: Axel von Bertoldi <avonbertoldi@gitlab.com>

Wait for MR image before starting runner incept

See merge request gitlab-org/gitlab-runner!5528



Merged-by: Romuald Atchadé <ratchade@gitlab.com>
Approved-by: Axel von Bertoldi <avonbertoldi@gitlab.com>

Invalid executor options and invalid step-job request are both clearly a
user ConfigurationError, not a RunnerSystemFailure. I also updated the
name of the exit code to be more generic.

If an image pull fails because the image name/spec is invalid, it's
clearly a configuration (i.e. user) error.

If a steps run finished with a StateCancelled state, that's clearly a
JobCanceled failure!

Specifically, if the main context timed out or was cancelled, make the
`failure_reason` `job_execution_timeout` or `job_canceled` respectively.

Distinguish between image pull failures due to an invalid image or a
real pull error. The former is considered a configuration error. This
more closely matches the behaviour in the kubernetes image puller.

The comment states that JobCanceled is only used within runner, but this
is true of other JobFailureReasons that appear in allFailureReasons. I
don't see why JobCanceled should be excluded here.

Unless a valid `JobFailureReason` is specified by wrapping an `error` in
a `BuildError`, errors will eventually be wrapped to a `BuildError` with
a `JobFailureReason` of `ScriptFailure`. However, errors that occur in
the `Prepare` and post `after_script` (i.e. cache/artifact upload)
phases should not map to `ScriptFailures` since we're not even running a
user script! RunnerSystemFailure is the best alternative
JobFailureReason.

This method, and they accompanying change in MakeBuildError's return
type will let callers do the following:

    MakeBuildError(...).WithFailureReason(...)

I'll use this in the next few commits to set FailureReason on
BuildErrors.

These are clearly configuration errors.

These clearly look like configuration errors.

And empty service image is definitely a configuration error. Failure to
create a step-request from a Build could in theory be considered a
RunnerSystemFailure (though I can't think of any concrete cases right
now), but most of the time it will be a configuration error.

In the docker executor, a missing volumeParser instance is definitely an
internal error.

Improve runner build failure reasons

See merge request gitlab-org/gitlab-runner!5531



Merged-by: Axel von Bertoldi <avonbertoldi@gitlab.com>
Approved-by: Romuald Atchadé <ratchade@gitlab.com>
Reviewed-by: Romuald Atchadé <ratchade@gitlab.com>

To make it easier to run the tests locally, loosen the tests that checks
the http.userAgent string.

We're about implement the use of git-clone(1) depending on the
GIT_STRATEGY. This implementation needs to setup a template dir, just as
the 'fetch' strategy currently does.

To reuse the setup code of the template dir, extract it into a function
setupTemplateDir().

In the past, the GIT_STRATEGY 'clone' used to use git-clone(1), but at
some point we needed clone a specific reference. For example for merged
result pipelines we'd clone refs/merge-requests/<iid>/merge. It is not
possible with git-clone(1) a ref, so the implementation was rewritten to
use git-init(1) + git-fetch(1).

Now we've been working to upstream changes to Git and soon it will
support argument `--ref`. This option allows use to use git-clone(1) to
clone and checkout a specific reference.

Prepare the code to use git-clone(1) with argument `--revisio`. The
changes are behind feature flag FF_USE_GIT_NATIVE_CLONE, and only should
be used if a the helper image contains a Git version that supports
`--revision`.

Issue: #37947

Because only Git from version 2.49 supports option `--revision` for
`git-clone(1)`, add a if guard around the use of that option. This if
guard tests if the Git version is 2.49 or above. It uses option
`--version-sort` for `sort(1)`.

At the moment this if guard is only implemented in the `BashWriter`,
other shell do not yet support this version check. Because the majority
of runners uses bash anyway, we'll take this as a first iteration.

...to pick up gitlab-org/fleeting/fleeting!52

shells: Implement the use of git-clone(1) again

Closes #37947

See merge request gitlab-org/gitlab-runner!5010



Merged-by: Axel von Bertoldi <avonbertoldi@gitlab.com>
Approved-by: Axel von Bertoldi <avonbertoldi@gitlab.com>
Approved-by: Roshni Sarangadharan <rsarangadharan@gitlab.com>
Reviewed-by: Axel von Bertoldi <avonbertoldi@gitlab.com>
Reviewed-by: Roshni Sarangadharan <rsarangadharan@gitlab.com>
Co-authored-by: Toon Claes <toon@gitlab.com>

Update fleeting dependency

See merge request gitlab-org/gitlab-runner!5535



Merged-by: Axel von Bertoldi <avonbertoldi@gitlab.com>
Approved-by: Romuald Atchadé <ratchade@gitlab.com>
Approved-by: Arran Walker <ajwalker@gitlab.com>

Create Japanese documentation directory

See merge request gitlab-org/gitlab-runner!5513



Merged-by: Joe Burnett <jburnett@gitlab.com>
Approved-by: Marcel Amirault <mamirault@gitlab.com>
Reviewed-by: Marcel Amirault <mamirault@gitlab.com>
Co-authored-by: rasamhossain <rhossain@gitlab.com>

Promote FF_RETRIEVE_POD_WARNING_EVENTS to a config print_pod_warning_events

Closes #38479 and gitlab-org/charts/gitlab-runner#499

See merge request !5377



Merged-by: Romuald Atchadé <ratchade@gitlab.com>
Approved-by: Roshni Sarangadharan <rsarangadharan@gitlab.com>
Approved-by: Georgi N. Georgiev <ggeorgiev@gitlab.com>
Reviewed-by: Georgi N. Georgiev <ggeorgiev@gitlab.com>
Reviewed-by: Romuald Atchadé <ratchade@gitlab.com>
Reviewed-by: Roshni Sarangadharan <rsarangadharan@gitlab.com>

Update GPG key expiry date

See merge request gitlab-org/gitlab-runner!5539



Merged-by: Romuald Atchadé <ratchade@gitlab.com>
Approved-by: Roshni Sarangadharan <rsarangadharan@gitlab.com>
Approved-by: Gonzalo Servat <gservat@gitlab.com>
Approved-by: Romuald Atchadé <ratchade@gitlab.com>
Co-authored-by: ggeorgiev_gitlab <ggeorgiev@gitlab.com>

Make dependant docker images optional for runner incept

See merge request !5538



Merged-by: Romuald Atchadé <ratchade@gitlab.com>
Approved-by: Hannes Hörl <2185075-hoegaarden@users.noreply.gitlab.com>

Adding How To Configure PVC Cache

See merge request !5536



Merged-by: Roshni Sarangadharan <rsarangadharan@gitlab.com>
Approved-by: Roshni Sarangadharan <rsarangadharan@gitlab.com>
Reviewed-by: Roshni Sarangadharan <rsarangadharan@gitlab.com>
Co-authored-by: Anthony Subia <asubia@gitlab.com>

Add support for uid:gid format for Kubernetes executor options

See merge request !5540



Merged-by: Romuald Atchadé <ratchade@gitlab.com>
Approved-by: Arran Walker <ajwalker@gitlab.com>
Reviewed-by: Romuald Atchadé <ratchade@gitlab.com>

Sync vale rules from main repo

See merge request !5549



Merged-by: Evan Read <eread@gitlab.com>
Approved-by: Evan Read <eread@gitlab.com>
Co-authored-by: Marcel Amirault <mamirault@gitlab.com>

Clean up tables in runner docs

See merge request !5548



Merged-by: Roshni Sarangadharan <rsarangadharan@gitlab.com>
Approved-by: Roshni Sarangadharan <rsarangadharan@gitlab.com>
Co-authored-by: Marcel Amirault <mamirault@gitlab.com>

Suppress unnecessary warnings when Kubernetes user values are empty

See merge request gitlab-org/gitlab-runner!5551



Merged-by: Romuald Atchadé <ratchade@gitlab.com>
Approved-by: Joe Burnett <jburnett@gitlab.com>
Reviewed-by: Joe Burnett <jburnett@gitlab.com>

Add argo_translation.yml for continuous translation process

Closes gitlab-com/localization/docs-site-localization#209

See merge request !5541



Merged-by: Marcel Amirault <mamirault@gitlab.com>
Approved-by: Marcel Amirault <mamirault@gitlab.com>
Reviewed-by: Marcel Amirault <mamirault@gitlab.com>
Co-authored-by: Lauren Barker <lbarker@gitlab.com>

Remove github.com/docker/machine library dependency

See merge request !5554



Merged-by: Arran Walker <ajwalker@gitlab.com>
Approved-by: Hannes Hörl <2185075-hoegaarden@users.noreply.gitlab.com>

Upgrade taskscaler dependency with updated heartbeat functionality

See merge request gitlab-org/gitlab-runner!5553



Merged-by: Arran Walker <ajwalker@gitlab.com>
Approved-by: Hannes Hörl <2185075-hoegaarden@users.noreply.gitlab.com>

Lauren Barker authored May 08, 2025 and Marcel Amirault committed May 09, 2025

Transfer all available translations from the main-translation branch
of our production fork to the upstream GitLab repository.

Related to: gitlab-com/localization/docs-site-localization#174

Update Markdownlint for JP Docs & Push Translations

See merge request gitlab-org/gitlab-runner!5547



Merged-by: Marcel Amirault <mamirault@gitlab.com>
Approved-by: Marcel Amirault <mamirault@gitlab.com>
Reviewed-by: Marcel Amirault <mamirault@gitlab.com>
Co-authored-by: Lauren Barker <lbarker@gitlab.com>

Add exponential backoff to execute stage retries

See merge request gitlab-org/gitlab-runner!4517



Merged-by: Arran Walker <ajwalker@gitlab.com>
Approved-by: Hannes Hörl <2185075-hoegaarden@users.noreply.gitlab.com>
Approved-by: Nicole Williams <nwilliams@gitlab.com>
Reviewed-by: Hannes Hörl <2185075-hoegaarden@users.noreply.gitlab.com>

Users can still set it to false to opt out.

The setup of the git credential helper has been pushed to the shell
writer. With that we can react on differences between shells and
versions thereof at runtime.

We expose this through one method on the shell writer, handling all the
business of:
- replacing / pruning all other cred helpers
- ensuring the git commands that run have their arguments escaped
  properly
- configuring both the helper itself and the username

What we do for the different versions:
- Starting from 7.3 we can pass on args without special handling
- Before 7.3 we generally need to handle args explicitly, ie. escape
  "special" things
- For 7.2.x it depends on `PSNativeCommandArgumentPassing`¹:
  - if this feature is disabled, we also need to handle args specially
  - if this feature is enabled, we need to use it, but have control over
    exact behaviour via `PSNativeCommandArgumentPassing`

To not run into issues with `$PSNativeCommandArgumentPassing`, we run
all that in its own script block: this preference variable should only
take effect for the current and child scopes, thus only for the (git)
commands we run inside that script block.

¹ https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_preference_variables?view=powershell-7.5#psnativecommandargumentpassing

This method is not used anymore.

Because we have special handling for older pwsh versions, we test
against those version we have special code for.

This test is very similar to TestGitCredHelper from the shells
integration tests, but running on docker, which gives us the opportunity
to use different pwsh versions, also in CI.

This ensures the git credential helper works with the docker executor &
the default helper images. It guards against regressions e.g. when we
update the helper images.

Because of the huge images, these just take too long. We still run the
linux tests for the different pwsh versions. The code is left in, in
case we wanted to enable those eventually.

FF_GIT_URLS_WITHOUT_TOKENS defaults to true

Closes #38301, #29655, and #38773

See merge request gitlab-org/gitlab-runner!5525



Merged-by: Romuald Atchadé <ratchade@gitlab.com>
Approved-by: Romuald Atchadé <ratchade@gitlab.com>
Approved-by: Roshni Sarangadharan <rsarangadharan@gitlab.com>
Reviewed-by: Hannes Hörl <2185075-hoegaarden@users.noreply.gitlab.com>
Reviewed-by: Romuald Atchadé <ratchade@gitlab.com>
Reviewed-by: Roshni Sarangadharan <rsarangadharan@gitlab.com>
Co-authored-by: Hannes Hörl <hhoerl@gitlab.com>

Arran Walker authored May 09, 2025 and Romuald Atchadé - OOO until Jan 11th, 2026 committed May 12, 2025

Add adaptive request concurrency

See merge request gitlab-org/gitlab-runner!5546



Merged-by: Arran Walker <ajwalker@gitlab.com>
Approved-by: Tomasz Maczukin <tomasz@maczukin.pl>
Approved-by: Nicole Williams <nwilliams@gitlab.com>
Reviewed-by: Tomasz Maczukin <tomasz@maczukin.pl>
Reviewed-by: Roshni Sarangadharan <rsarangadharan@gitlab.com>

Arran Walker authored May 09, 2025 and Romuald Atchadé - OOO until Jan 11th, 2026 committed May 12, 2025

Add more request_concurrency related metrics

See merge request gitlab-org/gitlab-runner!5558



Merged-by: Arran Walker <ajwalker@gitlab.com>
Approved-by: Arran Walker <ajwalker@gitlab.com>
Co-authored-by: Tomasz Maczukin <tomasz@maczukin.pl>