.gitlab-ci.yml

@@ -43,6 +43,7 @@ default:
 .default-merge-request-variables: &default-merge-request-variables
   NO_SOURCEMAPS: "true"
   ADD_SLOW_TEST_NOTE_TO_MERGE_REQUEST: "true"
+  FF_NETWORK_PER_BUILD: "true"
 
 .if-merge-request-security-canonical-sync: &if-merge-request-security-canonical-sync
   if: '$CI_MERGE_REQUEST_SOURCE_PROJECT_PATH == "gitlab-org/security/gitlab" && $CI_MERGE_REQUEST_SOURCE_BRANCH_NAME == $CI_DEFAULT_BRANCH && $CI_MERGE_REQUEST_TARGET_BRANCH_NAME == $CI_DEFAULT_BRANCH'
@@ -240,7 +241,6 @@ variables:
 
   # CI jobs behavior can be changed by changing the value of these variables in the project's CI/CD variables
   AVERAGE_KNAPSACK_REPORT: "true"
-  ENABLE_DEPSASTER: "true"
   ENABLE_DEPSCORE: "true"
   CACHE_ASSETS_AS_PACKAGE: "true"
   REUSE_FRONTEND_FIXTURES_ENABLED: "true"

.gitlab/CODEOWNERS

@@ -176,10 +176,6 @@ Dangerfile
 /ee/spec/policies/vulnerabilities/
 /ee/spec/policies/vulnerability*.rb
 
-^[Threat Insights frontend] @gitlab-org/govern/threat-insights-frontend-team
-/ee/app/assets/javascripts/license_compliance/components/detected_licenses_table.vue
-/ee/spec/frontend/license_compliance/components/detected_licenses_table_spec.js
-
 ^[Composition Analysis backend] @gitlab-org/secure/composition-analysis-be
 /app/events/package_metadata/
 /app/models/concerns/enums/package_metadata.rb
@@ -864,9 +860,8 @@ lib/gitlab/checks/**
 /doc/development/navigation_sidebar.md @gitlab-org/manage/foundations/engineering
 /doc/development/omnibus.md @gitlab-org/distribution
 /doc/development/organization/ @abdwdd @alexpooley @manojmj
-/doc/development/permissions.md @gitlab-org/govern/authentication/approvers
-/doc/development/permissions/ @gitlab-org/govern/authentication/approvers
-/doc/development/permissions/custom_roles.md @gitlab-org/govern/authorization/approvers
+/doc/development/permissions.md @gitlab-org/govern/authorization/approvers
+/doc/development/permissions/ @gitlab-org/govern/authorization/approvers
 /doc/development/pipelines/ @gl-quality/eng-prod
 /doc/development/policies.md @gitlab-org/govern/authentication/approvers
 /doc/development/search/ @gitlab-org/search-team/migration-maintainers
@@ -936,6 +931,7 @@ lib/gitlab/checks/**
 /doc/tutorials/website_project_with_analytics/ @lciutacu
 /doc/update/ @axil
 /doc/user/ai_features.md @sselhorn
+/doc/user/ai_features_enable.md @sselhorn
 /doc/user/analytics/ @lciutacu
 /doc/user/analytics/ci_cd_analytics.md @phillipwells
 /doc/user/application_security/ @rdickenson
@@ -949,8 +945,10 @@ lib/gitlab/checks/**
 /doc/user/discussions/ @aqualls
 /doc/user/emoji_reactions.md @msedlakjakubowski
 /doc/user/enterprise_user/ @jglassman1
-/doc/user/get_started/ @msedlakjakubowski
+/doc/user/get_started/get_started_managing_code.md @msedlakjakubowski
 /doc/user/get_started/get_started_managing_infrastructure.md @phillipwells
+/doc/user/get_started/get_started_planning_work.md @msedlakjakubowski
+/doc/user/get_started/get_started_projects.md @lciutacu
 /doc/user/gitlab_duo_chat.md @sselhorn
 /doc/user/gitlab_duo_examples.md @sselhorn
 /doc/user/group/access_and_permissions.md @lciutacu

.gitlab/ci/database.gitlab-ci.yml

@@ -36,7 +36,7 @@ db:rollback:
     - .db-job-base
     - .rails:rules:db-rollback
   script:
-    - bundle exec rake db:migrate VERSION=20230616082958  # 16.2 First migration
+    - bundle exec rake db:migrate VERSION=20230718020825  # 16.3 First migration
     - bundle exec rake db:migrate
 
 db:rollback single-db:
@@ -54,7 +54,7 @@ db:migrate:multi-version-upgrade:
     - curl -o latest_upgrade_stop.gz https://gitlab.com/gitlab-org/quality/pg-dump-generator/-/raw/main/pg_dumps/ee/latest_upgrade_stop.gz
     - gunzip -c latest_upgrade_stop.gz > gitlabhq_production
     - bundle exec rake db:drop db:create
-    - apt-get update -qq && apt-get install -y -qq postgresql
+    - apt-get update -qq && apt-get install -y -qq postgresql-client
     - psql --output /dev/null -v "ON_ERROR_STOP=1" -h postgres -U postgres -d gitlabhq_test < gitlabhq_production
     - bundle exec rake gitlab:db:configure
 

.gitlab/ci/frontend.gitlab-ci.yml

@@ -110,7 +110,7 @@ update-storybook-yarn-cache:
     - .shared:rules:update-cache
   stage: prepare
   script:
-    - yarn_install_script
+    - yarn_install_script_storybook
 
 retrieve-frontend-fixtures:
   variables:
@@ -420,7 +420,7 @@ bundle-size-review:
     - .frontend-test-base
     - .storybook-yarn-cache
   script:
-    - run_timed_command "retry yarn run storybook:install --frozen-lockfile"
+    - yarn_install_script_storybook
     - run_timed_command "yarn run storybook:build"
   needs: ["graphql-schema-dump"]
 

.gitlab/ci/includes/gitlab-com/danger-review.gitlab-ci.yml

 include:
   - project: gitlab-org/quality/pipeline-common
-    ref: 8.10.0
+    ref: 8.11.0
     file:
       - /ci/danger-review.yml
 

.gitlab/ci/package-and-test-nightly/main.gitlab-ci.yml

@@ -108,6 +108,28 @@ relative-url:
   variables:
     QA_SCENARIO: Test::Instance::RelativeUrl
 
+# ------------------------------------------
+# Decomposition jobs
+# ------------------------------------------
+decomposition-single-db:
+  extends:
+    - .qa
+    - .ee
+    - .parallel
+  variables:
+    QA_SCENARIO: Test::Instance::Image
+    GITLAB_QA_OPTS: --omnibus-config decomposition_single_db
+
+decomposition-multiple-db:
+  extends:
+    - .qa
+    - .ee
+    - .parallel
+  variables:
+    QA_SCENARIO: Test::Instance::Image
+    GITLAB_ALLOW_SEPARATE_CI_DATABASE: "true"
+    GITLAB_QA_OPTS: --omnibus-config decomposition_multiple_db
+
 # ==========================================
 # Post test stage
 # ==========================================

.gitlab/ci/package-and-test/main.gitlab-ci.yml

@@ -115,6 +115,7 @@ praefect:
   variables:
     QA_SCENARIO: Test::Integration::Praefect
     QA_CAN_TEST_PRAEFECT: "true"
+    QA_GITALY_TRANSACTIONS_ENABLED: "false"
     KNAPSACK_TEST_FILE_PATTERN: "qa/specs/features/**/3_create/**/*_spec.rb"
   rules:
     - !reference [.rules:test:smoke-for-omnibus-mr, rules]
@@ -126,6 +127,7 @@ praefect-selective:
   variables:
     QA_SCENARIO: Test::Integration::Praefect
     QA_CAN_TEST_PRAEFECT: "true"
+    QA_GITALY_TRANSACTIONS_ENABLED: "false"
   rules:
     - !reference [.rules:test:qa-selective, rules]
     - if: $QA_SUITES =~ /Test::Instance::All/
@@ -138,6 +140,7 @@ praefect-selective-parallel:
   variables:
     QA_SCENARIO: Test::Integration::Praefect
     QA_CAN_TEST_PRAEFECT: "true"
+    QA_GITALY_TRANSACTIONS_ENABLED: "false"
     KNAPSACK_TEST_FILE_PATTERN: "qa/specs/features/**/3_create/**/*_spec.rb"
   rules:
     - !reference [.rules:test:qa-selective-parallel, rules]
@@ -145,75 +148,43 @@ praefect-selective-parallel:
       variables:
         QA_TESTS: ""
 
-# ========== decomposition-single-db ===========
-
-decomposition-single-db:
+# ========== gitaly transactions enabled ===========
+# https://docs.gitlab.com/ee/architecture/blueprints/gitaly_transaction_management/
+gitaly-transactions:
   extends:
-    - .qa
     - .parallel
-  variables:
-    QA_SCENARIO: Test::Instance::Image
-    GITLAB_QA_OPTS: --omnibus-config decomposition_single_db
-  rules:
-    - !reference [.rules:test:smoke-for-omnibus-mr, rules]
-    - !reference [.rules:test:qa-parallel, rules]
-    - if: $QA_SUITES =~ /Test::Instance::All/
-
-decomposition-single-db-selective:
-  extends: .qa
-  variables:
-    QA_SCENARIO: Test::Instance::Image
-    GITLAB_QA_OPTS: --omnibus-config decomposition_single_db
-  rules:
-    - !reference [.rules:test:qa-selective, rules]
-    - if: $QA_SUITES =~ /Test::Instance::All/
-
-decomposition-single-db-selective-parallel:
-  extends:
     - .qa
-    - .parallel
-  variables:
-    QA_SCENARIO: Test::Instance::Image
-    GITLAB_QA_OPTS: --omnibus-config decomposition_single_db
-  rules:
-    - !reference [.rules:test:qa-selective-parallel, rules]
-    - if: $QA_SUITES =~ /Test::Instance::All/
-      variables:
-        QA_TESTS: ""
-
-# ========== decomposition-multiple-db ===========
-
-decomposition-multiple-db:
-  extends:
-    - .qa
-    - .parallel
+  parallel: 2
   variables:
-    QA_SCENARIO: Test::Instance::Image
-    GITLAB_ALLOW_SEPARATE_CI_DATABASE: "true"
-    GITLAB_QA_OPTS: --omnibus-config decomposition_multiple_db
+    QA_SCENARIO: Test::Integration::Praefect
+    QA_CAN_TEST_PRAEFECT: "true"
+    KNAPSACK_TEST_FILE_PATTERN: "qa/specs/features/**/3_create/**/*_spec.rb"
+    QA_GITALY_TRANSACTIONS_ENABLED: "true"
   rules:
     - !reference [.rules:test:smoke-for-omnibus-mr, rules]
     - !reference [.rules:test:qa-parallel, rules]
     - if: $QA_SUITES =~ /Test::Instance::All/
 
-decomposition-multiple-db-selective:
+gitaly-transactions-selective:
   extends: .qa
   variables:
-    QA_SCENARIO: Test::Instance::Image
-    GITLAB_ALLOW_SEPARATE_CI_DATABASE: "true"
-    GITLAB_QA_OPTS: --omnibus-config decomposition_multiple_db
+    QA_SCENARIO: Test::Integration::Praefect
+    QA_CAN_TEST_PRAEFECT: "true"
+    QA_GITALY_TRANSACTIONS_ENABLED: "true"
   rules:
     - !reference [.rules:test:qa-selective, rules]
     - if: $QA_SUITES =~ /Test::Instance::All/
 
-decomposition-multiple-db-selective-parallel:
+gitaly-transactions-selective-parallel:
   extends:
     - .qa
     - .parallel
+  parallel: 2
   variables:
-    QA_SCENARIO: Test::Instance::Image
-    GITLAB_ALLOW_SEPARATE_CI_DATABASE: "true"
-    GITLAB_QA_OPTS: --omnibus-config decomposition_multiple_db
+    QA_SCENARIO: Test::Integration::Praefect
+    QA_CAN_TEST_PRAEFECT: "true"
+    QA_GITALY_TRANSACTIONS_ENABLED: "true"
+    KNAPSACK_TEST_FILE_PATTERN: "qa/specs/features/**/3_create/**/*_spec.rb"
   rules:
     - !reference [.rules:test:qa-selective-parallel, rules]
     - if: $QA_SUITES =~ /Test::Instance::All/

.gitlab/ci/release-environments/main.gitlab-ci.yml

@@ -37,7 +37,7 @@ release-environments-deploy-env:
   variables:
     DEPLOY_ENV: deploy.env
   script:
-    - ./scripts/release-environment/construct-release-environments-versions.rb
+    - ./scripts/release_environment/construct-release-environments-versions.rb
   artifacts:
     reports:
       dotenv: $DEPLOY_ENV
@@ -72,7 +72,7 @@ release-environments-qa:
   stage: qa
   extends:
     - .qa-base
-  timeout: 3h
+  timeout: 30m
   variables:
     QA_SCENARIO: "Test::Instance::Smoke"
     RELEASE: "${CI_REGISTRY}/${CI_PROJECT_PATH}/gitlab-ee-qa:${CI_COMMIT_SHA}"

.gitlab/ci/rules.gitlab-ci.yml

@@ -967,6 +967,9 @@
     # Run tests automatically for MRs that touch QA files
     - <<: *if-merge-request
       changes: *qa-patterns
+    # Run tests automatically for MRs that touch GITALY_SERVER_VERSION
+    - <<: *if-merge-request
+      changes: *gitaly-patterns
     # Otherwise, only run tests after the MR is approved
     - <<: *if-merge-request-not-approved
       when: never
@@ -1576,6 +1579,9 @@
     - <<: *if-merge-request-targeting-stable-branch
       changes: *setup-test-env-patterns
       allow_failure: true
+     # Run tests automatically for MRs that touch GITALY_SERVER_VERSION
+    - <<: *if-merge-request
+      changes: *gitaly-patterns
     - <<: *if-merge-request
       # Certain components trigger a rebuild of the e2e GDK image so we want to test it too
       changes: *gdk-component-patterns
@@ -1698,9 +1704,14 @@
     - <<: *if-merge-request-labels-run-all-e2e
     - <<: *if-force-ci
       when: manual
+    - <<: *if-merge-request-labels-pipeline-expedite
+      when: never
     # Run tests automatically for MRs that touch QA files
     - <<: *if-merge-request
       changes: *qa-patterns
+    # Run tests automatically for MRs that touch GITALY_SERVER_VERSION
+    - <<: *if-merge-request
+      changes: *gitaly-patterns
     # Otherwise, only run tests after the MR is approved
     - <<: *if-merge-request-not-approved
       when: never
@@ -2363,6 +2374,9 @@
       changes: *code-backstage-qa-patterns
     - <<: *if-merge-request
       changes: *workhorse-patterns
+    - <<: *if-merge-request
+      changes: *rubocop-patterns
+
 
 .rails:rules:detect-previous-failed-tests:
   rules:
@@ -2527,17 +2541,6 @@
     - <<: *if-default-refs
       changes: *code-backstage-qa-patterns
 
-.static-analysis:rules:trigger-depsaster:
-  rules:
-    - if: "$ENABLE_DEPSASTER != 'true'"
-      when: never
-    - <<: *if-fork-merge-request
-      when: never
-    - <<: *if-not-ee
-      when: never
-    - <<: *if-merge-request
-      changes: ["**/Gemfile.checksum"]
-
 .semgrep-appsec-custom-rules:rules:
   rules:
     - <<: *if-not-ee

.gitlab/ci/static-analysis.gitlab-ci.yml

@@ -179,7 +179,7 @@ semgrep-appsec-custom-rules:
       rm "${CI_BUILDS_DIR}/sast-custom-rules/.gitlab-ci.yml" # semgrep fails when there are yaml files that are not rules
       semgrep ci --metrics off --config "${CI_BUILDS_DIR}/sast-custom-rules" \
         --include app --include lib --include workhorse \
-        --exclude '*_test.go' --exclude spec --exclude qa --exclude tooling --json > gl-sast-report.json || true
+        --exclude '*_test.go' --exclude spec --exclude qa --exclude tooling --json --verbose > gl-sast-report.json || true
 
   variables:
     CUSTOM_RULES_REPOSITORY: https://gitlab.com/gitlab-com/gl-security/product-security/appsec/sast-custom-rules.git
@@ -243,16 +243,6 @@ ping-appsec-for-sast-findings:
     - apk add ruby
     - ruby scripts/process_custom_semgrep_results.rb
 
-trigger-depsaster:
-  extends: .static-analysis:rules:trigger-depsaster
-  stage: lint
-  variables:
-    MERGE_REQUEST_PROJECT_ID: $CI_MERGE_REQUEST_PROJECT_ID
-    MERGE_REQUEST_IID: $CI_MERGE_REQUEST_IID
-  trigger:
-    project: "gitlab-com/gl-security/product-security/appsec/tooling/depsaster"
-  allow_failure: true
-
 ping-appsec-for-dependency-review:
   stage: lint
   needs: []

.gitlab/ci/templates/gem.gitlab-ci.yml

@@ -8,9 +8,13 @@ spec:
     gem_name:
     gem_path_prefix:
       default: "gems/"
+    enabled:
+      default: "true"
 ---
 .gems:rules:$[[inputs.gem_name]]:
   rules:
+    - if: "'$[[inputs.enabled]]' != 'true'"
+      when: never
     - if: '$CI_PIPELINE_SOURCE == "schedule" && $SCHEDULE_TYPE == "maintenance"'
     - if: '$CI_MERGE_REQUEST_EVENT_TYPE == "merged_result" || $CI_MERGE_REQUEST_EVENT_TYPE == "detached"'
       changes:
@@ -37,3 +41,5 @@ gems $[[inputs.gem_name]]:
     strategy: depend
   inherit:
     variables: false
+  variables:
+    FF_NETWORK_PER_BUILD: "true"

.gitlab/ci/test-on-cng/main.gitlab-ci.yml

@@ -51,9 +51,9 @@ workflow:
     - source scripts/utils.sh
     - source scripts/rspec_helpers.sh
     - source scripts/qa/cng_deploy/cng-kind.sh
-    - run_timed_command "setup_cluster scripts/qa/cng_deploy/config/kind-config.yml"
-    - run_timed_command "deploy ${GITLAB_DOMAIN}"
     - cd qa && bundle install
+    - bundle exec cng create cluster --ci
+    - deploy ${GITLAB_DOMAIN}
   script:
     - export QA_COMMAND="bundle exec bin/qa ${QA_SCENARIO:=Test::Instance::All} $QA_GITLAB_URL -- --force-color --order random --format documentation"
     - echo "Running - '$QA_COMMAND'"

.gitlab/issue_templates/Security developer workflow.md

@@ -48,7 +48,7 @@ After your merge request has been approved according to our [approval guidelines
 - [ ] To avoid release delays, please nominate a developer in a different timezone who will be able to respond to any pipeline or merge failures in your absence `@gitlab-username`
 - [ ] Ensure `~severity::x` label is on this issue, all associated issues, and merge requests
 - [ ] Ensure the [Links section](#links) is completed.
-- [ ] Add the GitLab [versions](https://gitlab.com/gitlab-org/release/docs/-/blob/master/general/security/developer.md#versions-affected) and editions affected to the [details section](#details)
+- [ ] Add the GitLab [versions](https://gitlab.com/gitlab-org/release/docs/-/blob/master/general/security/engineer.md#versions-affected) and editions affected to the [details section](#details)
   - The Git history of the files affected may help you associate the issue with a [release](https://about.gitlab.com/releases/)
 - [ ] Fill in any upgrade notes that users may need to take into account in the [details section](#details)
 - [ ] Add Yes/No and further details if needed to the migration and settings columns in the [details section](#details)

.gitlab/issue_templates/Usage Data Instrumentation.md

+<!-- Guide for product managers or engineering teams looking to track usage of their features -->
+
+:warning: If GDK is accessible, an alternative to using this guide is to directly establish event/metric definitions using our [internal events generator](https://docs.gitlab.com/ee/development/internal_analytics/internal_event_instrumentation/quick_start.html#defining-event-and-metrics)
+
+## Objective
+
+<!-- The primary goal or purpose behind instrumenting this feature or project. What insights are we aiming to gather? 
+
+Examples: 
+Feature adoption and engagement
+- How many unique users/projects/namespaces engage with the feature?
+- Frequency with which users return to specific features over time?
+
+User Flow and Navigation
+- Sequences of actions users take within the product or feature
+- Specific user actions or behaviors tracked as events -->
+
+
+## Events and Metrics
+
+[Definition of events and metrics](https://docs.gitlab.com/ee/development/internal_analytics/#fundamental-concepts) | [Sample metrics](https://metrics.gitlab.com/) | [Sample events](https://metrics.gitlab.com/snowplow)
+
+Details of events to be tracked:
+
+| Event Description | Event Name | Additional Properties | Feature|
+|-------------------|------------|-----------------------|--------|
+|  |  |  | |
+
+Details of metrics to be tracked:
+
+|  Metric Description | Event / DB column to base the Metric on | Total or Unique Count of a Property | Time Frame |Feature|
+|---------------------|-----------------------------------------|-------------------------------------|------------|-------|
+|  |  |  |  | |
+
+<details>
+<summary>
+
+**Expand to view examples and guidelines for filling the table**
+
+</summary>
+
+Events:
+* **Description:** Include what the event is supposed to track, where and when.
+* **Name:** Primary identifier of the event, format: \<**action**\>\_\<**target_of_action**\>\_\<**where/when**\>
+   * **Example event name:** click_save_button_in_issue_description_within_15s_of_page_load (**action** = click ; **target** = save button; **where** = in issue description ; **when** = within 15s
+* **Additional properties: Besides user/project/namespace, what other details should be tracked, if any? ex) status, type, object id, etc.
+* **Feature:** What feature is being instrumented? Please use the feature title that is used in features.yml if thats already available.
+
+Metrics:
+* **Description:** What quantitative measurements derived from either event data or database columns would you like to track? eg: Weekly count of unique users who update an issue
+* **Event/DB column:** What event or database column should the metric count or be based on.
+* **Total or unique count:** Should the metric count all occurrences or only unique counts, e.g. of `user_id` to get a count of unique users triggering an event.
+* **Time Frame:** What time frames should be tracked. Default and recommended is 7d and 28d.
+
+
+
+</details>
+
+## Next steps
+
+* [ ] Assign an engineering counterpart from your group to add instrumentation to the code
+* [ ] Explore instrumented data with the help of our [data discovery guide]( https://docs.gitlab.com/ee/development/internal_analytics/#data-discovery). You can also [reach out to product data insights team](https://gitlab.com/gitlab-data/product-analytics/-/issues/new?issuable_template=PI%20Chart%20Help) for help with generating Tableau reports/dashboards.
+* [ ] Your feedback is valuable to us. Please leave us feedback in the comment section of this issue and tag @tjayaramaraju or @basti
+
+# Important links
+
+:star: [Quick start guide to internal events](https://docs.gitlab.com/ee/development/internal_analytics/internal_event_instrumentation/quick_start.html)
+
+:question: [Analytics Instrumentation slack channel for questions](https://gitlab.enterprise.slack.com/archives/CL3A7GFPF)
+
+
+:writing_hand: Try our [internal events generator](https://docs.gitlab.com/ee/development/internal_analytics/internal_event_instrumentation/quick_start.html#defining-event-and-metrics). Creating event and metric definition files has never been easier.
+
+/label ~"analytics instrumentation"
\ No newline at end of file

.gitlab/merge_request_templates/Deprecations.md

@@ -42,6 +42,7 @@ They are frequently updated, and everyone should make sure they are aware of the
 - [ ] Add reviewers by the 10th.
 - [ ] Add scoped `devops::` and `group::` labels as necessary.
 - [ ] Add the appropriate milestone to this MR.
+- [ ] If the changes modify log format(addition/deletion/modification) of product feature, tag `@gitlab-com/gl-security/engineering-and-research/security-logging` team over the GitLab issue/MR. 
 - [ ] When ready to be merged (and no later than the 15th) `@mention` the TW for final review and merge.
 
 ## Reviewers

.gitlab/merge_request_templates/Documentation.md

@@ -15,7 +15,7 @@
   - [Documentation process](https://docs.gitlab.com/ee/development/documentation/workflow.html).
   - [Documentation guidelines](https://docs.gitlab.com/ee/development/documentation/).
   - [Style Guide](https://docs.gitlab.com/ee/development/documentation/styleguide/).
-- [ ] If you're adding a new page, add the [product tier badge](https://docs.gitlab.com/ee/development/documentation/styleguide/index.html#product-tier-badges) under the H1 topic title.
+- [ ] If you're adding a new page, add the [product tier details](https://docs.gitlab.com/ee/development/documentation/styleguide/index.html#product-tier-details) under the H1 topic title.
 - [ ] If you are a GitLab team member, [request a review](https://docs.gitlab.com/ee/development/code_review.html#dogfooding-the-reviewers-feature) based on:
     - The documentation page's [metadata](https://docs.gitlab.com/ee/development/documentation/metadata.html).
     - The [associated Technical Writer](https://handbook.gitlab.com/handbook/product/ux/technical-writing/#assignments).

.rubocop_todo/gitlab/avoid_current_organization.yml

@@ -2,5 +2,4 @@
 Gitlab/AvoidCurrentOrganization:
   Details: grace period
   Exclude:
-    - 'app/models/organizations/organization_setting.rb'
     - 'app/services/groups/create_service.rb'

.rubocop_todo/gitlab/feature_available_usage.yml

@@ -88,7 +88,6 @@ Gitlab/FeatureAvailableUsage:
     - 'ee/app/services/projects/mark_for_deletion_service.rb'
     - 'ee/app/services/requirements_management/process_test_reports_service.rb'
     - 'ee/app/services/security/store_scans_service.rb'
-    - 'ee/app/views/compliance_management/compliance_framework/_project_settings.html.haml.rb'
     - 'ee/app/views/groups/epics/index.html.haml.rb'
     - 'ee/app/views/product_analytics/_project_settings.html.haml.rb'
     - 'ee/app/views/projects/_remove.html.haml.rb'

.rubocop_todo/gitlab/feature_flag_without_actor.yml

@@ -13,7 +13,6 @@ Gitlab/FeatureFlagWithoutActor:
     - 'app/controllers/graphql_controller.rb'
     - 'app/controllers/groups/settings/slacks_controller.rb'
     - 'app/controllers/groups_controller.rb'
-    - 'app/controllers/jwks_controller.rb'
     - 'app/controllers/omniauth_callbacks_controller.rb'
     - 'app/controllers/profiles/two_factor_auths_controller.rb'
     - 'app/controllers/projects/settings/integrations_controller.rb'
@@ -37,7 +36,6 @@ Gitlab/FeatureFlagWithoutActor:
     - 'app/helpers/projects/topics_helper.rb'
     - 'app/helpers/projects_helper.rb'
     - 'app/helpers/routing/pseudonymization_helper.rb'
-    - 'app/models/ci/build.rb'
     - 'app/models/ci/pipeline.rb'
     - 'app/models/ci/runner.rb'
     - 'app/models/ci/secure_file.rb'
@@ -66,7 +64,6 @@ Gitlab/FeatureFlagWithoutActor:
     - 'app/services/ci/job_artifacts/update_unknown_locked_status_service.rb'
     - 'app/services/ci/queue/pending_builds_strategy.rb'
     - 'app/services/ci/register_job_service.rb'
-    - 'app/services/ci/runners/register_runner_service.rb'
     - 'app/services/ci/stuck_builds/drop_running_service.rb'
     - 'app/services/click_house/sync_strategies/audit_event_sync_strategy.rb'
     - 'app/services/concerns/measurable.rb'
@@ -75,7 +72,6 @@ Gitlab/FeatureFlagWithoutActor:
     - 'app/services/integrations/propagation/bulk_update_service.rb'
     - 'app/services/projects/participants_service.rb'
     - 'app/services/user_project_access_changed_service.rb'
-    - 'app/services/users/activity_service.rb'
     - 'app/views/admin/application_settings/_email.html.haml'
     - 'app/views/admin/application_settings/_invitation_flow_enforcement.html.haml'
     - 'app/views/admin/application_settings/general.html.haml'
@@ -122,7 +118,6 @@ Gitlab/FeatureFlagWithoutActor:
     - 'app/workers/pipeline_schedule_worker.rb'
     - 'app/workers/projects/refresh_build_artifacts_size_statistics_worker.rb'
     - 'app/workers/prune_old_events_worker.rb'
-    - 'app/workers/stuck_ci_jobs_worker.rb'
     - 'config/initializers/active_record_transaction_observer.rb'
     - 'config/initializers/carrierwave_s3_encryption_headers_patch.rb'
     - 'ee/app/controllers/ee/admin/application_settings_controller.rb'
@@ -141,7 +136,6 @@ Gitlab/FeatureFlagWithoutActor:
     - 'ee/app/models/concerns/geo/replicable_model.rb'
     - 'ee/app/models/ee/application_setting.rb'
     - 'ee/app/models/ee/integration.rb'
-    - 'ee/app/models/ee/member.rb'
     - 'ee/app/models/ee/user.rb'
     - 'ee/app/models/integrations/git_guardian.rb'
     - 'ee/app/models/members/member_role.rb'
@@ -155,7 +149,6 @@ Gitlab/FeatureFlagWithoutActor:
     - 'ee/app/presenters/ee/project_presenter.rb'
     - 'ee/app/services/ee/git/branch_push_service.rb'
     - 'ee/app/services/ee/groups/transfer_service.rb'
-    - 'ee/app/services/ee/members/update_service.rb'
     - 'ee/app/services/ee/notification_service.rb'
     - 'ee/app/services/ee/users/build_service.rb'
     - 'ee/app/services/epics/strategies/base_dates_strategy.rb'
@@ -207,7 +200,6 @@ Gitlab/FeatureFlagWithoutActor:
     - 'ee/lib/api/epics.rb'
     - 'ee/lib/api/internal/search/zoekt.rb'
     - 'ee/lib/api/internal/suggested_reviewers.rb'
-    - 'ee/lib/api/protected_environments.rb'
     - 'ee/lib/ee/api/entities/application_setting.rb'
     - 'ee/lib/ee/api/geo.rb'
     - 'ee/lib/ee/api/internal/base.rb'
@@ -267,6 +259,7 @@ Gitlab/FeatureFlagWithoutActor:
     - 'lib/gitlab/database/health_status/indicators/autovacuum_active_on_table.rb'
     - 'lib/gitlab/database/health_status/indicators/patroni_apdex.rb'
     - 'lib/gitlab/database/health_status/indicators/wal_rate.rb'
+    - 'lib/gitlab/database/health_status/indicators/wal_receiver_saturation.rb'
     - 'lib/gitlab/database/health_status/indicators/write_ahead_log.rb'
     - 'lib/gitlab/database/load_balancing/host.rb'
     - 'lib/gitlab/database/migration_helpers/automatic_lock_writes_on_tables.rb'

.rubocop_todo/layout/argument_alignment.yml

@@ -2,22 +2,6 @@
 # Cop supports --autocorrect.
 Layout/ArgumentAlignment:
   Exclude:
-    - 'app/graphql/mutations/ci/job/base.rb'
-    - 'app/graphql/mutations/ci/job/cancel.rb'
-    - 'app/graphql/mutations/ci/job/play.rb'
-    - 'app/graphql/mutations/ci/job/retry.rb'
-    - 'app/graphql/mutations/ci/job/unschedule.rb'
-    - 'app/graphql/mutations/ci/job_artifact/destroy.rb'
-    - 'app/graphql/mutations/ci/job_token_scope/add_project.rb'
-    - 'app/graphql/mutations/ci/job_token_scope/remove_project.rb'
-    - 'app/graphql/mutations/ci/pipeline/base.rb'
-    - 'app/graphql/mutations/ci/pipeline/retry.rb'
-    - 'app/graphql/mutations/ci/pipeline_schedule/base.rb'
-    - 'app/graphql/mutations/ci/pipeline_schedule/create.rb'
-    - 'app/graphql/mutations/ci/pipeline_schedule/play.rb'
-    - 'app/graphql/mutations/ci/pipeline_schedule/take_ownership.rb'
-    - 'app/graphql/mutations/ci/pipeline_schedule/update.rb'
-    - 'app/graphql/mutations/ci/runner/bulk_delete.rb'
     - 'app/graphql/mutations/customer_relations/contacts/base.rb'
     - 'app/graphql/mutations/customer_relations/contacts/create.rb'
     - 'app/graphql/mutations/customer_relations/contacts/update.rb'
@@ -51,23 +35,6 @@ Layout/ArgumentAlignment:
     - 'app/graphql/mutations/work_items/delete.rb'
     - 'app/graphql/mutations/work_items/update.rb'
     - 'app/graphql/resolvers/admin/analytics/usage_trends/measurements_resolver.rb'
-    - 'app/graphql/resolvers/ci/runner_projects_resolver.rb'
-    - 'app/graphql/resolvers/ci/runner_resolver.rb'
-    - 'app/graphql/resolvers/ci/runner_setup_resolver.rb'
-    - 'app/graphql/resolvers/ci/runners_resolver.rb'
-    - 'app/graphql/resolvers/ci/template_resolver.rb'
-    - 'app/graphql/resolvers/ci/variables_resolver.rb'
-    - 'app/graphql/resolvers/clusters/agent_tokens_resolver.rb'
-    - 'app/graphql/resolvers/clusters/agents_resolver.rb'
-    - 'app/graphql/resolvers/concerns/board_item_filterable.rb'
-    - 'app/graphql/resolvers/concerns/group_issuable_resolver.rb'
-    - 'app/graphql/resolvers/concerns/issues/sort_arguments.rb'
-    - 'app/graphql/resolvers/concerns/project_search_arguments.rb'
-    - 'app/graphql/resolvers/concerns/resolves_pipelines.rb'
-    - 'app/graphql/resolvers/concerns/resolves_snippets.rb'
-    - 'app/graphql/resolvers/concerns/search_arguments.rb'
-    - 'app/graphql/resolvers/concerns/time_frame_arguments.rb'
-    - 'app/graphql/resolvers/container_repositories_resolver.rb'
     - 'app/graphql/resolvers/work_items/types_resolver.rb'
     - 'app/graphql/resolvers/work_items_resolver.rb'
     - 'app/graphql/subscriptions/issuable_updated.rb'
@@ -85,57 +52,6 @@ Layout/ArgumentAlignment:
     - 'app/graphql/types/board_type.rb'
     - 'app/graphql/types/boards/board_issuable_input_base_type.rb'
     - 'app/graphql/types/boards/board_issue_input_base_type.rb'
-    - 'app/graphql/types/error_tracking/sentry_detailed_error_type.rb'
-    - 'app/graphql/types/error_tracking/sentry_error_collection_type.rb'
-    - 'app/graphql/types/error_tracking/sentry_error_stack_trace_context_type.rb'
-    - 'app/graphql/types/error_tracking/sentry_error_stack_trace_entry_type.rb'
-    - 'app/graphql/types/error_tracking/sentry_error_stack_trace_type.rb'
-    - 'app/graphql/types/error_tracking/sentry_error_type.rb'
-    - 'app/graphql/types/event_type.rb'
-    - 'app/graphql/types/evidence_type.rb'
-    - 'app/graphql/types/grafana_integration_type.rb'
-    - 'app/graphql/types/group_invitation_type.rb'
-    - 'app/graphql/types/group_member_type.rb'
-    - 'app/graphql/types/group_type.rb'
-    - 'app/graphql/types/incident_management/timeline_event_tag_type.rb'
-    - 'app/graphql/types/incident_management/timeline_event_type.rb'
-    - 'app/graphql/types/invitation_interface.rb'
-    - 'app/graphql/types/issue_status_counts_type.rb'
-    - 'app/graphql/types/issue_type.rb'
-    - 'app/graphql/types/issue_type_enum.rb'
-    - 'app/graphql/types/metadata/kas_type.rb'
-    - 'app/graphql/types/metadata_type.rb'
-    - 'app/graphql/types/metrics/dashboards/annotation_type.rb'
-    - 'app/graphql/types/milestone_stats_type.rb'
-    - 'app/graphql/types/milestone_type.rb'
-    - 'app/graphql/types/mutation_type.rb'
-    - 'app/graphql/types/namespace/shared_runners_setting_enum.rb'
-    - 'app/graphql/types/namespace_type.rb'
-    - 'app/graphql/types/nested_environment_type.rb'
-    - 'app/graphql/types/notes/diff_image_position_input_type.rb'
-    - 'app/graphql/types/notes/diff_position_base_input_type.rb'
-    - 'app/graphql/types/notes/diff_position_input_type.rb'
-    - 'app/graphql/types/notes/diff_position_type.rb'
-    - 'app/graphql/types/notes/discussion_type.rb'
-    - 'app/graphql/types/notes/update_diff_image_position_input_type.rb'
-    - 'app/graphql/types/packages/cleanup/policy_type.rb'
-    - 'app/graphql/types/packages/file_metadata_type.rb'
-    - 'app/graphql/types/work_items/widgets/hierarchy_type.rb'
-    - 'app/graphql/types/work_items/widgets/hierarchy_update_input_type.rb'
-    - 'app/graphql/types/work_items/widgets/labels_update_input_type.rb'
-    - 'app/graphql/types/work_items/widgets/milestone_input_type.rb'
-    - 'app/graphql/types/work_items/widgets/milestone_type.rb'
-    - 'app/graphql/types/work_items/widgets/start_and_due_date_update_input_type.rb'
-    - 'app/graphql/types/x509_certificate_type.rb'
-    - 'app/graphql/types/x509_issuer_type.rb'
-    - 'app/services/lfs/lock_file_service.rb'
-    - 'app/services/markdown_content_rewriter_service.rb'
-    - 'app/services/members/base_service.rb'
-    - 'app/services/ml/experiment_tracking/experiment_repository.rb'
-    - 'app/services/post_receive_service.rb'
-    - 'app/services/preview_markdown_service.rb'
-    - 'app/services/protected_branches/api_service.rb'
-    - 'app/services/protected_branches/legacy_api_create_service.rb'
     - 'ee/app/graphql/ee/mutations/issues/create.rb'
     - 'ee/app/graphql/ee/mutations/issues/update.rb'
     - 'ee/app/graphql/ee/mutations/work_items/create.rb'
@@ -153,27 +69,9 @@ Layout/ArgumentAlignment:
     - 'ee/app/graphql/ee/types/ci/runner_countable_connection_type.rb'
     - 'ee/app/graphql/ee/types/deployment_type.rb'
     - 'ee/app/graphql/ee/types/environment_type.rb'
-    - 'ee/app/graphql/mutations/dast_site_tokens/create.rb'
-    - 'ee/app/graphql/mutations/dast_site_validations/create.rb'
-    - 'ee/app/graphql/mutations/dast_site_validations/revoke.rb'
-    - 'ee/app/graphql/mutations/epic_tree/reorder.rb'
-    - 'ee/app/graphql/mutations/epics/add_issue.rb'
-    - 'ee/app/graphql/mutations/epics/base.rb'
-    - 'ee/app/graphql/mutations/epics/create.rb'
-    - 'ee/app/graphql/mutations/epics/set_subscription.rb'
-    - 'ee/app/graphql/mutations/epics/update.rb'
-    - 'ee/app/graphql/mutations/gitlab_subscriptions/activate.rb'
-    - 'ee/app/graphql/mutations/incident_management/escalation_policy/base.rb'
-    - 'ee/app/graphql/mutations/incident_management/escalation_policy/create.rb'
-    - 'ee/app/graphql/mutations/incident_management/escalation_policy/destroy.rb'
-    - 'ee/app/graphql/mutations/incident_management/escalation_policy/update.rb'
-    - 'ee/app/graphql/mutations/incident_management/issuable_resource_link/base.rb'
-    - 'ee/app/graphql/mutations/incident_management/issuable_resource_link/create.rb'
-    - 'ee/app/graphql/mutations/incident_management/issuable_resource_link/destroy.rb'
     - 'ee/app/graphql/mutations/iterations/cadences/destroy.rb'
     - 'ee/app/graphql/mutations/iterations/create.rb'
     - 'ee/app/graphql/mutations/iterations/update.rb'
-    - 'ee/app/graphql/mutations/namespaces/base.rb'
     - 'ee/app/graphql/mutations/projects/initialize_product_analytics.rb'
     - 'ee/app/graphql/mutations/projects/set_compliance_framework.rb'
     - 'ee/app/graphql/mutations/quality_management/test_cases/create.rb'