.dockerignore

@@ -80,4 +80,3 @@
 /spec/
 /symbol/
 /tmp/
-/vendor/

.gitlab-ci.yml

@@ -38,10 +38,14 @@ default:
 
 .default-branch-pipeline-failure-variables: &default-branch-pipeline-failure-variables
   CREATE_RAILS_TEST_FAILURE_ISSUES: "true"
+  CREATE_RAILS_SLOW_TEST_ISSUES: "true"
 
 workflow:
   name: '$PIPELINE_NAME'
   rules:
+    - if: '$CI_PROJECT_PATH == "gitlab/gitaly" && $CI_PIPELINE_SOURCE == "parent_pipeline" && $GITALY_TEST'
+      variables:
+        PIPELINE_NAME: 'Gitaly Rails Test Pipeline'
     # If `$FORCE_GITLAB_CI` is set, create a pipeline.
     - if: '$FORCE_GITLAB_CI'
       variables:
@@ -152,18 +156,19 @@ variables:
   GITLAB_WORKHORSE_FOLDER: "gitlab-workhorse"
   KNAPSACK_RSPEC_SUITE_REPORT_PATH: knapsack/report-master.json
   RSPEC_CHANGED_FILES_PATH: rspec/changed_files.txt
+  RSPEC_FAIL_FAST_THRESHOLD: 20
+  RSPEC_FAST_QUARANTINE_LOCAL_PATH: rspec/fast_quarantine-gitlab.txt
   RSPEC_FOSS_IMPACT_PIPELINE_TEMPLATE_YML: .gitlab/ci/rails/rspec-foss-impact.gitlab-ci.yml.erb
-  RSPEC_PREDICTIVE_PIPELINE_TEMPLATE_YML: .gitlab/ci/rails/rspec-predictive.gitlab-ci.yml.erb
   RSPEC_LAST_RUN_RESULTS_FILE: rspec/rspec_last_run_results.txt
   RSPEC_MATCHING_JS_FILES_PATH: rspec/js_matching_files.txt
-  RSPEC_VIEWS_INCLUDING_PARTIALS_PATH: rspec/views_including_partials.txt
-  RSPEC_MATCHING_TESTS_PATH: rspec/matching_tests.txt
-  RSPEC_MATCHING_TESTS_FOSS_PATH: rspec/matching_tests-foss.txt
   RSPEC_MATCHING_TESTS_EE_PATH: rspec/matching_tests-ee.txt
+  RSPEC_MATCHING_TESTS_FOSS_PATH: rspec/matching_tests-foss.txt
+  RSPEC_MATCHING_TESTS_PATH: rspec/matching_tests.txt
   RSPEC_PACKED_TESTS_MAPPING_PATH: crystalball/packed-mapping.json
+  RSPEC_PREDICTIVE_PIPELINE_TEMPLATE_YML: .gitlab/ci/rails/rspec-predictive.gitlab-ci.yml.erb
   RSPEC_PROFILING_FOLDER_PATH: rspec/profiling
   RSPEC_TESTS_MAPPING_PATH: crystalball/mapping.json
-  RSPEC_FAST_QUARANTINE_LOCAL_PATH: rspec/fast_quarantine-gitlab.txt
+  RSPEC_VIEWS_INCLUDING_PARTIALS_PATH: rspec/views_including_partials.txt
   TMP_TEST_FOLDER: "${CI_PROJECT_DIR}/tmp/tests"
   TMP_TEST_GITLAB_WORKHORSE_PATH: "${TMP_TEST_FOLDER}/${GITLAB_WORKHORSE_FOLDER}"
 

.gitlab/CODEOWNERS

@@ -20,12 +20,10 @@ GITALY_SERVER_VERSION @project_278964_bot6 @gitlab-org/maintainers/rails-backend
 /doc/**/*.jpg
 /doc/**/*.png
 /data/deprecations/*.yml
-/data/removals/**/*.yml
 
 ## Technical writing files that do not need `*` rule approval,
 ## but still require an approval from a TW team DRI for each file.
 /data/deprecations/templates/ @marcel.amirault @sarahgerman @gitlab-org/tw-leadership
-/data/removals/templates/ @marcel.amirault @sarahgerman @gitlab-org/tw-leadership
 .markdownlint.yml @marcel.amirault @eread @aqualls @gitlab-org/tw-leadership
 /doc/.markdownlint/ @marcel.amirault @eread @aqualls @gitlab-org/tw-leadership
 /doc/.vale/ @marcel.amirault @eread @aqualls @gitlab-org/tw-leadership
@@ -392,7 +390,6 @@ lib/gitlab/checks/**
 ^[Documentation Directories] @gl-docsteam
 /doc/
 /data/deprecations/
-/data/removals/
 
 ^[Documentation Pages]
 # This block is managed by the rake script at lib/tasks/gitlab/tw/codeowners.rake, manual updates will be overwritten!
@@ -1236,7 +1233,6 @@ lib/gitlab/checks/**
 /app/controllers/projects/triggers_controller.rb
 /app/controllers/projects/variables_controller.rb
 /app/models/commit_status.rb
-/app/models/external_pull_request.rb
 /app/models/generic_commit_status.rb
 /app/models/namespace_ci_cd_setting.rb
 /app/models/project_ci_cd_setting.rb
@@ -1449,6 +1445,40 @@ ee/lib/ee/api/entities/project.rb
 /ee/spec/elastic/migrate/
 /ee/spec/support/elastic.rb
 
+[Create::IDE - Remote Development Backend]  @gitlab-org/maintainers/remote-development/backend
+
+/ee/app/models/remote_development/
+/ee/app/policies/remote_development/
+/ee/app/finders/remote_development/
+/ee/app/graphql/types/remote_development/
+/ee/app/graphql/mutations/remote_development/
+/ee/app/graphql/resolvers/remote_development/
+/ee/app/controllers/remote_development/
+/ee/app/services/remote_development/
+/ee/spec/frontend/remote_development/
+/ee/spec/features/remote_development/
+/ee/spec/models/remote_development/
+/ee/spec/policies/remote_development/
+/ee/spec/requests/api/graphql/mutations/remote_development/
+/ee/spec/requests/api/graphql/remote_development/
+/ee/spec/finders/remote_development/
+/ee/spec/support/shared_contexts/remote_development/
+/ee/spec/graphql/types/remote_development/
+/ee/spec/factories/remote_development/
+/ee/spec/lib/remote_development/
+/ee/spec/fixtures/remote_development/
+/ee/spec/controllers/remote_development/
+/ee/spec/services/remote_development/
+/ee/lib/remote_development/
+/qa/qa/specs/features/ee/browser_ui/3_create/remote_development/
+/scripts/remote_development/
+
+[Create::IDE - Remote Development Frontend]  @gitlab-org/maintainers/remote-development/frontend
+
+/ee/app/views/remote_development/
+/ee/app/assets/javascripts/remote_development/
+/ee/app/assets/javascripts/pages/remote_development/
+
 # JiHu GitLab rules. See https://gitlab.com/gitlab-jh/gitlab-jh-enablement/-/issues/213#note_1024367528
 
 [JH Frontend] @jihulab/maintainers/frontend

.gitlab/ci/docs.gitlab-ci.yml

@@ -123,4 +123,3 @@ docs-lint deprecations-and-removals:
   needs: []
   script:
     - bundle exec rake gitlab:docs:check_deprecations
-    - bundle exec rake gitlab:docs:check_removals

.gitlab/ci/frontend.gitlab-ci.yml

@@ -371,28 +371,6 @@ bundle-size-review:
     paths:
       - bundle-size-review/
 
-.startup-css-check-base:
-  extends:
-    - .frontend-test-base
-  script:
-    - run_timed_command "yarn generate:startup_css"
-    - yarn check:startup_css
-
-startup-css-check:
-  extends:
-    - .startup-css-check-base
-    - .frontend:rules:default-frontend-jobs
-  needs: ["compile-test-assets", "rspec-all frontend_fixture"]
-
-startup-css-check as-if-foss:
-  extends:
-    - .startup-css-check-base
-    - .as-if-foss
-    - .frontend:rules:default-frontend-jobs-as-if-foss
-  needs:
-    - job: "compile-test-assets as-if-foss"
-    - job: "rspec-all frontend_fixture as-if-foss"
-
 .compile-storybook-base:
   extends:
     - .frontend-test-base

.gitlab/ci/gitlab-gems.gitlab-ci.yml

-gems gitlab-rspec:
-  extends:
-    - .gems:rules:gitlab-rspec
-  needs: []
-  trigger:
-    include: gems/gitlab-rspec/.gitlab-ci.yml
-    strategy: depend
+include:
+  - local: .gitlab/ci/templates/gem.gitlab-ci.yml
+    inputs:
+      gem_name: "activerecord-gitlab"
+  - local: .gitlab/ci/templates/gem.gitlab-ci.yml
+    inputs:
+      gem_name: "gitlab-rspec"
+  - local: .gitlab/ci/templates/gem.gitlab-ci.yml
+    inputs:
+      gem_name: "gitlab-utils"
+  - local: .gitlab/ci/templates/gem.gitlab-ci.yml
+    inputs:
+      gem_name: "click_house-client"
+  - local: .gitlab/ci/templates/gem.gitlab-ci.yml
+    inputs:
+      gem_name: "gitlab-schema-validation"
+  - local: .gitlab/ci/templates/gem.gitlab-ci.yml
+    inputs:
+      gem_name: "gitlab-ipynbdiff"

.gitlab/ci/global.gitlab-ci.yml

@@ -216,7 +216,7 @@
 .use-pg12:
   services:
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:postgres-12-pgvector-0.4.1
-      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
+      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off", "-c", "max_locks_per_transaction=128"]
       alias: postgres
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:redis-cluster-6.2.12
       alias: rediscluster # configure connections in config/redis.yml
@@ -228,7 +228,7 @@
 .use-pg13:
   services:
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:postgres-13-pgvector-0.4.1
-      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
+      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off", "-c", "max_locks_per_transaction=128"]
       alias: postgres
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:redis-cluster-6.2.12
       alias: rediscluster # configure connections in config/redis.yml
@@ -240,7 +240,7 @@
 .use-pg14:
   services:
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:postgres-14-pgvector-0.4.1
-      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
+      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off", "-c", "max_locks_per_transaction=128"]
       alias: postgres
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:redis-cluster-6.2.12
       alias: rediscluster # configure connections in config/redis.yml
@@ -252,7 +252,7 @@
 .use-pg15:
   services:
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:postgres-15-pgvector-0.4.1
-      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
+      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off", "-c", "max_locks_per_transaction=128"]
       alias: postgres
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:redis-cluster-6.2.12
       alias: rediscluster # configure connections in config/redis.yml
@@ -264,7 +264,7 @@
 .use-pg12-es7-ee:
   services:
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:postgres-12-pgvector-0.4.1
-      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
+      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off", "-c", "max_locks_per_transaction=128"]
       alias: postgres
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:redis-cluster-6.2.12
       alias: rediscluster # configure connections in config/redis.yml
@@ -282,7 +282,7 @@
 .use-pg13-es7-ee:
   services:
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:postgres-13-pgvector-0.4.1
-      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
+      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off", "-c", "max_locks_per_transaction=128"]
       alias: postgres
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:redis-cluster-6.2.12
       alias: rediscluster # configure connections in config/redis.yml
@@ -300,7 +300,7 @@
 .use-pg14-es7-ee:
   services:
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:postgres-14-pgvector-0.4.1
-      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
+      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off", "-c", "max_locks_per_transaction=128"]
       alias: postgres
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:redis-cluster-6.2.12
       alias: rediscluster # configure connections in config/redis.yml
@@ -318,7 +318,7 @@
 .use-pg15-es7-ee:
   services:
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:postgres-15-pgvector-0.4.1
-      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
+      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off", "-c", "max_locks_per_transaction=128"]
       alias: postgres
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:redis-cluster-6.2.12
       alias: rediscluster # configure connections in config/redis.yml
@@ -336,7 +336,7 @@
 .use-pg13-es8-ee:
   services:
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:postgres-13-pgvector-0.4.1
-      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
+      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off", "-c", "max_locks_per_transaction=128"]
       alias: postgres
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:redis-cluster-6.2.12
       alias: rediscluster # configure connections in config/redis.yml
@@ -355,7 +355,7 @@
 .use-pg14-es8-ee:
   services:
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:postgres-14-pgvector-0.4.1
-      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
+      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off", "-c", "max_locks_per_transaction=128"]
       alias: postgres
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:redis-cluster-6.2.12
       alias: rediscluster # configure connections in config/redis.yml
@@ -374,7 +374,7 @@
 .use-pg15-es8-ee:
   services:
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:postgres-15-pgvector-0.4.1
-      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
+      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off", "-c", "max_locks_per_transaction=128"]
       alias: postgres
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:redis-cluster-6.2.12
       alias: rediscluster # configure connections in config/redis.yml
@@ -393,7 +393,7 @@
 .use-pg13-opensearch1-ee:
   services:
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:postgres-13-pgvector-0.4.1
-      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
+      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off", "-c", "max_locks_per_transaction=128"]
       alias: postgres
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:redis-cluster-6.2.12
       alias: rediscluster # configure connections in config/redis.yml
@@ -412,7 +412,7 @@
 .use-pg13-opensearch2-ee:
   services:
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:postgres-13-pgvector-0.4.1
-      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
+      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off", "-c", "max_locks_per_transaction=128"]
       alias: postgres
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:redis-cluster-6.2.12
       alias: rediscluster # configure connections in config/redis.yml

.gitlab/ci/package-and-test-nightly/main.gitlab-ci.yml

@@ -2,6 +2,16 @@ include:
   - local: .gitlab/ci/qa-common/main.gitlab-ci.yml
   - local: .gitlab/ci/qa-common/rules.gitlab-ci.yml
   - local: .gitlab/ci/qa-common/variables.gitlab-ci.yml
+  - component: "gitlab.com/gitlab-org/quality/pipeline-common/allure-report@7.3.0"
+    inputs:
+      job_name: "e2e-test-report"
+      job_stage: "report"
+      aws_access_key_id_variable_name: "QA_ALLURE_AWS_ACCESS_KEY_ID"
+      aws_secret_access_key_variable_name: "QA_ALLURE_AWS_SECRET_ACCESS_KEY"
+      gitlab_auth_token_variable_name: "PROJECT_TOKEN_FOR_CI_SCRIPTS_API_USAGE"
+      allure_results_glob: "gitlab-qa-run-*/**/allure-results"
+      allure_job_name: "${QA_RUN_TYPE}"
+      allure_ref_slug: "${CI_COMMIT_REF_SLUG}"
 
 workflow:
   rules:
@@ -97,12 +107,22 @@ integration-opensearch-compatibility-version-2:
     OPENSEARCH_VERSION: "2.0.1"
     QA_SCENARIO: "Test::Integration::Opensearch"
 
+# ------------------------------------------
+# Relative url
+# ------------------------------------------
+relative-url:
+  extends:
+    - .qa
+    - .ee
+    - .parallel
+  variables:
+    QA_SCENARIO: Test::Instance::RelativeUrl
+
 # ==========================================
 # Post test stage
 # ==========================================
 e2e-test-report:
-  extends:
-    - .e2e-test-report
+  extends: .rules:report:allure-report
 
 upload-knapsack-report:
   extends:

.gitlab/ci/package-and-test/main.gitlab-ci.yml

@@ -4,6 +4,16 @@ include:
   - local: .gitlab/ci/qa-common/main.gitlab-ci.yml
   - local: .gitlab/ci/qa-common/rules.gitlab-ci.yml
   - local: .gitlab/ci/qa-common/variables.gitlab-ci.yml
+  - component: "gitlab.com/gitlab-org/quality/pipeline-common/allure-report@7.3.1"
+    inputs:
+      job_name: "e2e-test-report"
+      job_stage: "report"
+      aws_access_key_id_variable_name: "QA_ALLURE_AWS_ACCESS_KEY_ID"
+      aws_secret_access_key_variable_name: "QA_ALLURE_AWS_SECRET_ACCESS_KEY"
+      gitlab_auth_token_variable_name: "PROJECT_TOKEN_FOR_CI_SCRIPTS_API_USAGE"
+      allure_results_glob: "gitlab-qa-run-*/**/allure-results"
+      allure_job_name: "${QA_RUN_TYPE}"
+      allure_ref_slug: "${CI_COMMIT_REF_SLUG}"
 
 # ==========================================
 # Prepare stage
@@ -81,6 +91,7 @@ instance-ff-inverse:
 # ------------------------------------------
 
 # ========== instance ===========
+
 instance:
   extends:
     - .parallel
@@ -151,38 +162,6 @@ praefect-selective-parallel:
       variables:
         QA_TESTS: ""
 
-# ========== relative-url ===========
-
-relative-url:
-  extends:
-    - .qa
-    - .parallel
-  variables:
-    QA_SCENARIO: Test::Instance::RelativeUrl
-  rules:
-    - !reference [.rules:test:qa-parallel, rules]
-    - if: $QA_SUITES =~ /Test::Instance::All/
-
-relative-url-selective:
-  extends: .qa
-  variables:
-    QA_SCENARIO: Test::Instance::RelativeUrl
-  rules:
-    - !reference [.rules:test:qa-selective, rules]
-    - if: $QA_SUITES =~ /Test::Instance::All/
-
-relative-url-selective-parallel:
-  extends:
-    - .qa
-    - .parallel
-  variables:
-    QA_SCENARIO: Test::Instance::RelativeUrl
-  rules:
-    - !reference [.rules:test:qa-selective-parallel, rules]
-    - if: $QA_SUITES =~ /Test::Instance::All/
-      variables:
-        QA_TESTS: ""
-
 # ========== decomposition-single-db ===========
 
 decomposition-single-db:
@@ -386,6 +365,9 @@ oauth:
   extends: .qa
   variables:
     QA_SCENARIO: Test::Integration::OAuth
+    USE_SELENOID: "true"
+    QA_RECORD_VIDEO: "true"
+    QA_REMOTE_GRID: "selenoid:4444"
   rules:
     - !reference [.rules:test:qa-default-branch, rules]
     - if: $QA_SUITES =~ /Test::Integration::OAuth/
@@ -521,6 +503,9 @@ cloud-activation:
   variables:
     QA_SCENARIO: Test::Instance::Image
     QA_RSPEC_TAGS: --tag cloud_activation
+    USE_SELENOID: "true"
+    QA_RECORD_VIDEO: "true"
+    QA_REMOTE_GRID: "selenoid:4444"
   rules:
     - !reference [.rules:test:qa, rules]
     - if: $QA_SUITES =~ /Test::Instance::CloudActivation/
@@ -620,9 +605,7 @@ update-ee-to-ce:
 # Post test stage
 # ==========================================
 e2e-test-report:
-  extends:
-    - .e2e-test-report
-    - .rules:report:allure-report
+  extends: .rules:report:allure-report
 
 upload-knapsack-report:
   extends:

.gitlab/ci/preflight.gitlab-ci.yml

@@ -24,9 +24,6 @@
     - .ruby-cache
     - .preflight:rules:rails-production-server-boot
     - .use-pg13
-  variables:
-    BUNDLE_WITHOUT: "development:test"
-    BUNDLE_WITH: "production"
 
 # Test the puma configuration present in `config/puma.rb.example`
 rails-production-server-boot-puma-example:

.gitlab/ci/qa-common/main.gitlab-ci.yml

@@ -9,7 +9,6 @@ include:
     ref: 7.2.3
     file:
       - /ci/base.gitlab-ci.yml
-      - /ci/allure-report.yml
       - /ci/knapsack-report.yml
 
 stages:
@@ -86,15 +85,6 @@ stages:
       - qa/knapsack/*.json
     expire_in: 1 day
 
-.e2e-test-report:
-  extends:
-    - .generate-allure-report-base
-  stage: report
-  variables:
-    GITLAB_AUTH_TOKEN: $PROJECT_TOKEN_FOR_CI_SCRIPTS_API_USAGE
-    ALLURE_PROJECT_PATH: $CI_PROJECT_PATH
-    ALLURE_MERGE_REQUEST_IID: $CI_MERGE_REQUEST_IID
-
 .upload-knapsack-report:
   extends:
     - .generate-knapsack-report-base
@@ -148,6 +138,7 @@ stages:
     STATUS_SYM: ☠️
     STATUS: failed
     TYPE: "($QA_RUN_TYPE) "
+    ALLURE_JOB_NAME: $QA_RUN_TYPE
   when: always
   script:
     - |

.gitlab/ci/qa.gitlab-ci.yml

@@ -27,7 +27,6 @@
     RUN_WITH_BUNDLE: "true"  # instructs pipeline to install and run gitlab-qa gem via bundler
     QA_PATH: qa  # sets the optional path for bundler to run from
     DYNAMIC_PIPELINE_YML: package-and-test-pipeline.yml  # yml files are generated by scripts/generate-e2e-pipeline script
-    EXTRA_GITLAB_QA_OPTS: --set-feature-flags super_sidebar_nav_enrolled=enabled
   inherit:
     variables:
       - CHROME_VERSION
@@ -135,7 +134,6 @@ e2e:package-and-test-ee:
   variables:
     RELEASE: "${REGISTRY_HOST}/${REGISTRY_GROUP}/build/omnibus-gitlab-mirror/gitlab-ee:${CI_COMMIT_SHA}"
     QA_RUN_TYPE: e2e-package-and-test
-    ALLURE_JOB_NAME: e2e-package-and-test
     PIPELINE_NAME: E2E Omnibus GitLab EE
 
 e2e:package-and-test-ce:
@@ -151,7 +149,6 @@ e2e:package-and-test-ce:
     RELEASE: ${REGISTRY_HOST}/${REGISTRY_GROUP}/build/omnibus-gitlab-mirror/gitlab-ce:${CI_COMMIT_SHA}
     GITLAB_QA_IMAGE: ${CI_REGISTRY_IMAGE}/gitlab-ce-qa:${CI_COMMIT_SHA}
     QA_RUN_TYPE: e2e-package-and-test-ce
-    ALLURE_JOB_NAME: e2e-package-and-test-ce
     PIPELINE_NAME: E2E Omnibus GitLab CE
 
 e2e:package-and-test-old-nav:
@@ -161,7 +158,6 @@ e2e:package-and-test-old-nav:
   variables:
     RELEASE: "${REGISTRY_HOST}/${REGISTRY_GROUP}/build/omnibus-gitlab-mirror/gitlab-ee:${CI_COMMIT_SHA}"
     QA_RUN_TYPE: e2e-package-and-test-old-nav
-    ALLURE_JOB_NAME: e2e-package-and-test-old-nav
     PIPELINE_NAME: E2E Omnibus Old Navigation
     QA_SUPER_SIDEBAR_ENABLED: "false"
     EXTRA_GITLAB_QA_OPTS: ""
@@ -177,7 +173,6 @@ e2e:package-and-test-nightly:
   variables:
     GITLAB_SEMVER_VERSION: $GITLAB_SEMVER_VERSION
     QA_RUN_TYPE: nightly
-    ALLURE_JOB_NAME: nightly
     PIPELINE_NAME: E2E Omnibus GitLab Nightly
     DYNAMIC_PIPELINE_YML: package-and-test-nightly-pipeline.yml
 
@@ -190,7 +185,6 @@ e2e:test-on-gdk:
     - build-gdk-image
     - e2e-test-pipeline-generate
   variables:
-    ALLURE_JOB_NAME: e2e-test-on-gdk
     QA_RUN_TYPE: e2e-test-on-gdk
     PIPELINE_NAME: E2E GDK
     DYNAMIC_PIPELINE_YML: test-on-gdk-pipeline.yml

.gitlab/ci/rails.gitlab-ci.yml

@@ -1100,7 +1100,7 @@ rspec-ee system pg15 es8:
   needs: ["setup-test-env", "retrieve-tests-metadata", "compile-test-assets", "detect-tests"]
   script:
     - !reference [.base-script, script]
-    - rspec_fail_fast "${MATCHING_TESTS_PATH}" "--tag ~quarantine --tag ~zoekt"
+    - rspec_fail_fast "${MATCHING_TESTS_PATH}" "--fail-fast=${RSPEC_FAIL_FAST_THRESHOLD} --tag ~quarantine --tag ~zoekt"
 
 rspec fail-fast:
   extends:

.gitlab/ci/rails/rspec-foss-impact.gitlab-ci.yml.erb

@@ -39,7 +39,7 @@ dont-interrupt-me:
     RSPEC_TESTS_MAPPING_ENABLED: "true"
   script:
     - !reference [.base-script, script]
-    - rspec_paralellized_job "--tag ~quarantine --tag ~level:background_migration --tag ~zoekt"
+    - rspec_paralellized_job "--fail-fast=${RSPEC_FAIL_FAST_THRESHOLD} --tag ~quarantine --tag ~level:background_migration --tag ~zoekt"
   artifacts:
     expire_in: 7d
     paths:
@@ -54,7 +54,7 @@ rspec migration foss-impact:
 <% end %>
   script:
     - !reference [.base-script, script]
-    - rspec_paralellized_job "--tag ~quarantine --tag ~zoekt"
+    - rspec_paralellized_job "--fail-fast=${RSPEC_FAIL_FAST_THRESHOLD} --tag ~quarantine --tag ~zoekt"
 <% end %>
 
 <% if rspec_files_per_test_level[:background_migration][:files].size > 0 %>

.gitlab/ci/rails/shared.gitlab-ci.yml

@@ -24,9 +24,7 @@ include:
     # Only install knapsack after bundle install! Otherwise oddly some native
     # gems could not be found under some circumstance. No idea why, hours wasted.
     - run_timed_command "gem install knapsack --no-document"
-    - echo -e "\e[0Ksection_start:`date +%s`:gitaly-test-spawn[collapsed=true]\r\e[0KStarting Gitaly"
     - section_start "gitaly-test-spawn" "Spawning Gitaly"; scripts/gitaly-test-spawn; section_end "gitaly-test-spawn"  # Do not use 'bundle exec' here
-    - echo -e "\e[0Ksection_end:`date +%s`:gitaly-test-spawn\r\e[0K"
 
 .no-redis-cluster:
   variables:
@@ -74,12 +72,15 @@ include:
     # spec/lib, yet background migration tests are also sitting there,
     # and they should run on their own jobs so we don't need to run them
     # in unit tests again.
-    - rspec_paralellized_job "--tag ~quarantine --tag ~level:background_migration"
+    - rspec_paralellized_job "--fail-fast=${RSPEC_FAIL_FAST_THRESHOLD} --tag ~quarantine --tag ~level:background_migration"
   after_script:
     - echo -e "\e[0Ksection_start:`date +%s`:report_results_section[collapsed=true]\r\e[0KReport results"
     - |
       if [ "$CREATE_RAILS_TEST_FAILURE_ISSUES" == "true" ]; then
-        bundle exec relate-failure-issue --input-files "rspec/rspec-*.json" --system-log-files "log" --project "gitlab-org-sandbox/rails-test-failures" --token "${RAILS_TEST_FAILURES_PROJECT_TOKEN}";
+        bundle exec relate-failure-issue --input-files "rspec/rspec-*.json" --system-log-files "log" --project "gitlab-org/gitlab" --token "${TEST_FAILURES_PROJECT_TOKEN}";
+      fi
+      if [ "$CREATE_RAILS_SLOW_TEST_ISSUES" == "true" ]; then
+        bundle exec slow-test-issues --input-files "rspec/rspec-*.json" --project "gitlab-org-sandbox/rails-test-failures" --token "${RAILS_TEST_FAILURES_PROJECT_TOKEN}";
       fi
     - echo -e "\e[0Ksection_end:`date +%s`:report_results_section\r\e[0K"
 
@@ -105,7 +106,7 @@ include:
 .rspec-base-migration:
   script:
     - !reference [.base-script, script]
-    - rspec_paralellized_job "--tag ~quarantine --tag ~zoekt"
+    - rspec_paralellized_job "--fail-fast=${RSPEC_FAIL_FAST_THRESHOLD} --tag ~quarantine --tag ~zoekt"
   after_script:
     - !reference [.rspec-base, after_script]
 

.gitlab/ci/release-environments/main.gitlab-ci.yml

@@ -14,7 +14,7 @@ review-build-cng:
 review-deploy-env:
   allow_failure: true
   stage: deploy
-  needs: ["release-environments-build-cng"]
+  needs: ["review-build-cng"]
   variables:
     DEPLOY_ENV: deploy.env
   script:

.gitlab/ci/review-apps/main.gitlab-ci.yml

@@ -44,6 +44,12 @@ review-build-cng:
   variables:
     HOST_SUFFIX: "${CI_ENVIRONMENT_SLUG}"
     DOMAIN: "-${CI_ENVIRONMENT_SLUG}.${REVIEW_APPS_DOMAIN}"
+    GITLAB_HELM_CHART_PROJECT_URL: "https://gitlab.com/gitlab-org/charts/gitlab"
+    GITLAB_HELM_REPO_URL: "https://charts.gitlab.io"
+    GITLAB_REPO_URL: ${CI_PROJECT_URL}
+    GITLAB_IMAGE_REPOSITORY: "registry.gitlab.com/gitlab-org/build/cng-mirror"
+    GITLAB_IMAGE_SUFFIX: "ee"
+    GITLAB_VERIFY_DEPLOY_TIMEOUT_MINUTES: 5
     GITLAB_HELM_CHART_REF: "75b1486a9aec212d0f49ef1251526d8e51004bbc"  # 7.0.1: https://gitlab.com/gitlab-org/charts/gitlab/-/commit/75b1486a9aec212d0f49ef1251526d8e51004bbc
   environment:
     name: review/${CI_COMMIT_REF_SLUG}${SCHEDULE_TYPE}  # No separator for SCHEDULE_TYPE so it's compatible as before and looks nice without it
@@ -51,6 +57,7 @@ review-build-cng:
     on_stop: trigger-review-stop
 
 review-deploy:
+  timeout: 45min
   extends:
     - .review-workflow-base
     - .review:rules:review-deploy
@@ -115,6 +122,7 @@ review-deploy-sample-projects:
 
 .review-stop-base:
   extends: .review-workflow-base
+  timeout: 15min
   environment:
     action: stop
   variables:

.gitlab/ci/review-apps/qa.gitlab-ci.yml

 include:
   - local: .gitlab/ci/qa-common/main.gitlab-ci.yml
   - template: Verify/Browser-Performance.gitlab-ci.yml
+  - component: "gitlab.com/gitlab-org/quality/pipeline-common/allure-report@7.3.0"
+    inputs:
+      job_name: "e2e-test-report"
+      job_stage: "post-qa"
+      aws_access_key_id_variable_name: "QA_ALLURE_AWS_ACCESS_KEY_ID"
+      aws_secret_access_key_variable_name: "QA_ALLURE_AWS_SECRET_ACCESS_KEY"
+      gitlab_auth_token_variable_name: "PROJECT_TOKEN_FOR_CI_SCRIPTS_API_USAGE"
+      allure_results_glob: "qa/tmp/allure-results"
+      allure_ref_slug: "${CI_COMMIT_REF_SLUG}"
+      allure_project_path: "${CI_PROJECT_PATH}"
+      allure_merge_request_iid: "${CI_MERGE_REQUEST_IID}"
+      allure_job_name: "${QA_RUN_TYPE}"
 
 .test-variables:
   variables:
@@ -108,13 +120,7 @@ browser_performance:
     URL: environment_url.txt
 
 e2e-test-report:
-  extends:
-    - .e2e-test-report
-    - .rules:prepare-report
-  stage: post-qa
-  variables:
-    ALLURE_RESULTS_GLOB: qa/tmp/allure-results
-    ALLURE_JOB_NAME: $QA_RUN_TYPE
+  extends: .rules:prepare-report
 
 upload-knapsack-report:
   extends:
@@ -144,7 +150,6 @@ notify-slack:
   variables:
     QA_RSPEC_XML_FILE_PATTERN: ${CI_PROJECT_DIR}/qa/tmp/rspec-*.xml
     RUN_WITH_BUNDLE: "true"
-    ALLURE_JOB_NAME: $QA_RUN_TYPE
   when: on_failure
 
 export-test-metrics:

.gitlab/ci/review.gitlab-ci.yml

 review-cleanup:
+  timeout: 15min
   extends:
     - .default-retry
     - .review:rules:review-cleanup

.gitlab/ci/rules.gitlab-ci.yml

@@ -2,7 +2,7 @@
 # Conditions #
 ##############
 .if-not-canonical-namespace: &if-not-canonical-namespace
-  if: '$CI_PROJECT_NAMESPACE !~ /^gitlab(-org)?($|\/)/'
+  if: '$CI_PROJECT_NAMESPACE !~ /^gitlab(-org|-cn)?($|\/)/'
 
 .if-not-ee: &if-not-ee
   # Only consider FOSS not EE
@@ -51,7 +51,7 @@
   if: '$CI_MERGE_REQUEST_SOURCE_BRANCH_NAME == "release-tools/update-gitaly" || $CI_MERGE_REQUEST_TARGET_BRANCH_NAME =~ /stable-(ee|jh)$/'
 
 .if-merge-request-targeting-stable-branch: &if-merge-request-targeting-stable-branch
-  if: '($CI_MERGE_REQUEST_EVENT_TYPE == "merged_result" || $CI_MERGE_REQUEST_EVENT_TYPE == "detached") && $CI_MERGE_REQUEST_TARGET_BRANCH_NAME =~ /^[\d-]+-stable(-ee)?$/'
+  if: '($CI_MERGE_REQUEST_EVENT_TYPE == "merged_result" || $CI_MERGE_REQUEST_EVENT_TYPE == "detached") && $CI_MERGE_REQUEST_TARGET_BRANCH_NAME =~ /^[\d-]+-stable(-ee|-jh)?$/'
 
 .if-merge-request-labels-run-in-ruby2: &if-merge-request-labels-run-in-ruby2
   if: '$CI_MERGE_REQUEST_LABELS =~ /pipeline:run-in-ruby2/'
@@ -193,10 +193,13 @@
   - "lib/gitlab/setup_helper.rb"
 
 .workhorse-patterns: &workhorse-patterns
+  - ".gitlab/ci/workhorse.gitlab-ci.yml"
   - "GITLAB_WORKHORSE_VERSION"
   - "workhorse/**/*"
-  - ".gitlab/ci/workhorse.gitlab-ci.yml"
+  - "scripts/gitaly-test-build"
+  - "scripts/gitaly-test-spawn"
   - "spec/support/gitlab-git-test.git/**/*"
+  - "spec/support/helpers/gitaly_setup.rb"
 
 .yaml-lint-patterns: &yaml-lint-patterns
   - "**/*.{yml,yaml}{,.*}"
@@ -226,9 +229,7 @@
 
 .docs-deprecations-and-removals-patterns: &docs-deprecations-and-removals-patterns
   - "doc/update/deprecations.md"
-  - "doc/update/removals.md"
   - "data/deprecations/**/*"
-  - "data/removals/**/*"
   - "tooling/docs/**/*"
   - "lib/tasks/gitlab/docs/compile_deprecations.rake"
 
@@ -311,9 +312,6 @@
 .lib-gitlab-patterns: &lib-gitlab-patterns
   - "{,ee/,jh/}lib/{,ee/,jh/}gitlab/**/*"
 
-.startup-css-patterns: &startup-css-patterns
-  - "{,ee/,jh/}app/assets/stylesheets/startup/**/*"
-
 # Backend patterns + .ci-patterns
 .backend-patterns: &backend-patterns
   - "{,jh/}Gemfile{,.lock}"
@@ -1144,16 +1142,28 @@
     - <<: *if-merge-request-targeting-stable-branch
       changes: *setup-test-env-patterns
     - <<: *if-merge-request-labels-run-review-app
-    - <<: *if-merge-request-labels-run-all-e2e
     - <<: *if-auto-deploy-branches
     - <<: *if-ruby2-branch
-    - <<: *if-default-branch-schedule-nightly
     - <<: *if-default-refs
       changes: *ci-build-images-patterns
     - <<: *if-default-refs
       changes: *code-qa-patterns
     - <<: *if-default-refs
       changes: *workhorse-patterns
+    # Rules to support .qa:rules:package-and-test
+    - <<: *if-default-branch-schedule-nightly
+    - <<: *if-merge-request
+      changes: *dependency-patterns
+    - <<: *if-merge-request-labels-run-all-e2e
+    - <<: *if-dot-com-gitlab-org-and-security-merge-request-manual-ff-package-and-e2e
+      changes: *feature-flag-development-config-patterns
+    - <<: *if-merge-request
+      changes: *feature-flag-development-config-patterns
+    - <<: *if-merge-request
+      changes: *nodejs-patterns
+    - <<: *if-merge-request
+      changes: *ci-qa-patterns
+    - <<: *if-force-ci
 
 .frontend:rules:compile-production-assets-as-if-foss:
   rules:
@@ -1180,8 +1190,6 @@
     - <<: *if-merge-request-labels-frontend-and-feature-flag
     - <<: *if-default-refs
       changes: *code-backstage-qa-patterns
-    - <<: *if-default-refs
-      changes: *startup-css-patterns
     - <<: *if-default-refs
       changes: *workhorse-patterns
 
@@ -1203,8 +1211,6 @@
       changes: *code-backstage-patterns
     - <<: *if-merge-request-labels-as-if-foss
     - <<: *if-merge-request-labels-run-all-rspec
-    - <<: *if-merge-request
-      changes: *startup-css-patterns
     - <<: *if-merge-request
       changes: *frontend-patterns-for-as-if-foss
 
@@ -1510,8 +1516,6 @@
 
 .qa:rules:package-and-test-ee:
   rules:
-    - <<: *if-default-branch-schedule-nightly # already executed in the 2-hourly schedule
-      when: never
     - !reference [".qa:rules:package-and-test-common", rules]
     - !reference [".qa:rules:package-and-test-schedule", rules]
     - !reference [".qa:rules:code-merge-request-manual", rules]
@@ -2108,6 +2112,17 @@
     - <<: *if-merge-request
       changes: *static-analysis-patterns
 
+.static-analysis:rules:trigger-depsaster:
+  rules:
+    - if: $ENABLE_DEPSASTER != 'true'
+      when: never
+    - <<: *if-fork-merge-request
+      when: never
+    - <<: *if-not-ee
+      when: never
+    - <<: *if-merge-request
+      changes: ["**/Gemfile.checksum"]
+
 .semgrep-appsec-custom-rules:rules:
   rules:
     - <<: *if-not-ee
@@ -2126,97 +2141,6 @@
     - <<: *if-merge-request
       changes: *code-backstage-qa-patterns
 
-########################
-# GitLab monorepo gems #
-########################
-
-.gems:rules:gitlab-rspec:
-  rules:
-    - <<: *if-merge-request
-      changes: ["gems/gitlab-rspec/**/*"]
-
-#######################
-# Vendored gems rules #
-#######################
-
-.vendor:rules:mail-smtp_pool:
-  rules:
-    - <<: *if-merge-request
-      changes: ["vendor/gems/mail-smtp_pool/**/*"]
-    - <<: *if-merge-request-labels-run-all-rspec
-
-.vendor:rules:attr_encrypted:
-  rules:
-    - <<: *if-merge-request
-      changes: ["vendor/gems/attr_encrypted/**/*"]
-    - <<: *if-merge-request-labels-run-all-rspec
-
-.vendor:rules:microsoft_graph_mailer:
-  rules:
-    - <<: *if-merge-request
-      changes: ["vendor/gems/microsoft_graph_mailer/**/*"]
-    - <<: *if-merge-request-labels-run-all-rspec
-
-.vendor:rules:ipynbdiff:
-  rules:
-    - <<: *if-merge-request
-      changes: ["vendor/gems/ipynbdiff/**/*"]
-    - <<: *if-merge-request-labels-run-all-rspec
-
-.vendor:rules:omniauth-azure-oauth2:
-  rules:
-    - <<: *if-merge-request
-      changes: ["vendor/gems/omniauth-azure-oauth2/**/*"]
-    - <<: *if-merge-request-labels-run-all-rspec
-
-.vendor:rules:omniauth_crowd:
-  rules:
-    - <<: *if-merge-request
-      changes: ["vendor/gems/omniauth_crowd/**/*"]
-    - <<: *if-merge-request-labels-run-all-rspec
-
-.vendor:rules:omniauth-gitlab:
-  rules:
-    - <<: *if-merge-request
-      changes: ["vendor/gems/omniauth-gitlab/**/*"]
-    - <<: *if-merge-request-labels-run-all-rspec
-
-.vendor:rules:omniauth-salesforce:
-  rules:
-    - <<: *if-merge-request
-      changes: ["vendor/gems/omniauth-salesforce/**/*"]
-    - <<: *if-merge-request-labels-run-all-rspec
-
-.vendor:rules:devise-pbkdf2-encryptable:
-  rules:
-    - <<: *if-merge-request
-      changes: ["vendor/gems/devise-pbkdf2-encryptable/**/*"]
-    - <<: *if-merge-request-labels-run-all-rspec
-
-.vendor:rules:gitlab_active_record:
-  rules:
-    - <<: *if-merge-request
-      changes: ["vendor/gems/gitlab_active_record/**/*"]
-    - <<: *if-merge-request-labels-run-all-rspec
-
-.vendor:rules:bundler-checksum:
-  rules:
-    - <<: *if-merge-request
-      changes: ["vendor/gems/bundler-checksum/**/*"]
-    - <<: *if-merge-request-labels-run-all-rspec
-
-.vendor:rules:cloud_profiler_agent:
-  rules:
-    - <<: *if-merge-request
-      changes: ["vendor/gems/cloud_profiler_agent/**/*"]
-    - <<: *if-merge-request-labels-run-all-rspec
-
-.vendor:rules:sidekiq-reliable-fetch:
-  rules:
-    - <<: *if-merge-request
-      changes: ["vendor/gems/sidekiq-reliable-fetch/**/*"]
-    - <<: *if-merge-request-labels-run-all-rspec
-
 ##################
 # Releases rules #
 ##################
@@ -2363,11 +2287,9 @@
     - <<: *if-merge-request-labels-run-review-app
     - <<: *if-dot-com-gitlab-org-merge-request
       changes: *ci-review-patterns
-      allow_failure: true
     - <<: *if-dot-com-gitlab-org-merge-request
       changes: *frontend-build-patterns
       variables: *review-change-pattern
-      allow_failure: true
     - <<: *if-dot-com-gitlab-org-merge-request
       changes: *controllers-patterns
       variables: *review-change-pattern
@@ -2385,7 +2307,6 @@
       allow_failure: true
     - <<: *if-dot-com-gitlab-org-merge-request
       changes: *qa-patterns
-      allow_failure: true
     - <<: *if-dot-com-gitlab-org-merge-request
       changes: *code-patterns
       when: manual