Avielle Wolfe authored 2 years ago and GitLab Release Tools Bot committed 2 years ago

Merge branch 'security-aw-fix-pipeline-sub-vulns' into 'master'

See merge request gitlab-org/security/gitlab!2361

Changelog: security

* Contributes to #364799
* Follow-up for !90749

**Problem**

* QA tests started failing because Timeout errors.
* Delayed jobs started piling up

**Solution**

Decrease delay to resolve both problems

Contributes to #364799

**Problem**

`RepositoryUpdateMirrorWorker` with sticky data consistency cannot find
a replica in sync and falls back to `primary`.

**Solution**

Schedule `RepositoryUpdateMirrorWorker` with 1 minute delay.

Changelog: added

Fabio Pitino authored 2 years ago and Furkan Ayhan committed 2 years ago

Remove the feature flag that forced the cost factor when
returned 0 from `public_projects_minutes_cost_factor`.

Changelog: changed
EE: true

Changelog: changed
EE: true

Alan (Maciej) Paruszewski authored 2 years ago and Doug Stull committed 2 years ago

Changelog: added
EE: true

Huzaifa Iftikhar authored 2 years ago and Vasilii Iakliushin committed 2 years ago

Enable delayed project deletion feature for personal projects
that are in user namespace.

Changelog: added
EE: true

Abdul Wadood authored 2 years ago and Jan Provaznik committed 2 years ago

This attribute is set for the new projects using the ops feature flag.

Changelog: added

Changelog: changed
MR: !89093

Vasilii Iakliushin authored 2 years ago and Kerri Miller committed 2 years ago

Contributes to #364635

It should record status of Sidekiq job and prevent the garbage
collection by StuckImportJob.

This is part of our rename from "services" to "integrations".

This reverts merge request !86639

RepositoryRemoveRemoteWorker's logic has been removed in 14.2 but
the worker itself needs to stay until 15.0 to drain the job queue.
It can be removed now.

Changelog: changed
MR: !86639

Katrin Leinweber authored 2 years ago and Fabio Pitino committed 2 years ago

Sorting projects with most CI minutes to the top of the list,
seems more sensible for a "quota" tab than sorting by project ID.
This may help customers find possibly inefficient CI scripts.

Co-authored-by: Firdaws Farukh <ffarukh@gitlab.com>

Changelog: changed
EE: true

Add the shared runner duration to the project
for usage quota.

Changelog: changed

Administrators of large GitLab instances often find that over time
projects become inactive and are no longer used.  These projects take
up unnecessary disk space. This feature adds an automated way to
identify these projects, warn the maintainers ahead of time, and then
delete the projects if they are still inactive.

Changelog: added

Zamir Martins authored 2 years ago and Pavel Shutsin committed 2 years ago

EE: true
Changelog: removed

Alan (Maciej) Paruszewski authored 2 years ago and Ethan Urie committed 2 years ago

Changelog: added
EE: true

Use a feature flag to set a non-zero cost factor to all
public projects any time a shared runner is used.

Changelog: other
EE: true

Huzaifa Iftikhar authored 2 years ago and Huzaifa Iftikhar committed 2 years ago

Inactive projects are defined as follows:

Self-managed projects with any license (Free, Premium, or Ultimate) or
GitLab SaaS projects that have a Free license where the project meets
both of the following criteria:

1. The project repository size exceeds the size threshold defined in
the instance settings.
2. The project has not had any comments, commits, MRs, new issues, or
other activity for the length of time defined in the instance settings.

Fabio Pitino authored 2 years ago and Marius Bobin committed 2 years ago

Enable new CI minutes monthly tracking with lazy
monthly reset.

* Remove Namespace#new_monthly_ci_minutes_enabled?
* Fix Project#ci_minutes_used
* Remove ci_skip_legacy_extra_minutes_recalculation FF

Changelog: changed
EE: true

Alan (Maciej) Paruszewski authored 2 years ago and Bob Van Landuyt committed 2 years ago

Changelog: added
EE: true

- logic is being duplicated and is memoized already.

Changelog: fixed
EE: true

This change creates a new finder to get vulnerabilities
from vulnerability_reads to speed up the API response. This is
introduced behind a feature flag.

EE: true
Changelog: added

Changelog: other
EE: true

This sets type_new as the inheritance_column for integrations.

Adds a GraphQL field to aid dealing with service types in the API.

Changelog: changed

Use adjourned deletion if the projects belong to a group
and the instance has 'adjourned_deletion_for_projects_and_groups'
feature available

Changelog: changed

Changelog: added

Changelog: fixed

Mehmet Emin INAC authored 3 years ago and Vitali Tatarintev committed 3 years ago

Changelog: added
EE: true