Merge branch 'nd/fix-ai-rate-limit' into 'master'

Adjust AI mutation rate limits

See merge request !118202



Merged-by: Bojan Marjanovic <bmarjanovic@gitlab.com>
Approved-by: Gosia Ksionek <mksionek@gitlab.com>
Approved-by: Bojan Marjanovic <bmarjanovic@gitlab.com>
Reviewed-by: Bojan Marjanovic <bmarjanovic@gitlab.com>
Co-authored-by: Nicolas Dular <ndular@gitlab.com>

doc/security/rate_limits.md

@@ -154,7 +154,7 @@ The **rate limit** is 600 calls per minute per authenticated user.
 
 There is a rate limit for the GraphQL `aiAction` mutation, which is enforced to prevent from abusing this endpoint.
 
-The **rate limit** is 20 calls per hour per authenticated user.
+The **rate limit** is 160 calls per 8 hours per authenticated user.
 
 ## Troubleshooting
 

lib/gitlab/application_rate_limiter.rb

@@ -56,7 +56,7 @@ def rate_limits # rubocop:disable Metrics/AbcSize
           namespace_exists: { threshold: 20, interval: 1.minute },
           fetch_google_ip_list: { threshold: 10, interval: 1.minute },
           project_fork_sync: { threshold: 10, interval: 30.minutes },
-          ai_action: { threshold: 20, interval: 1.hour },
+          ai_action: { threshold: 160, interval: 8.hours },
           jobs_index: { threshold: 600, interval: 1.minute },
           bulk_import: { threshold: 6, interval: 1.minute },
           projects_api_rate_limit_unauthenticated: {