.dockerignore

@@ -80,4 +80,3 @@
 /spec/
 /symbol/
 /tmp/
-/vendor/

.eslintrc.yml

@@ -117,6 +117,14 @@ rules:
       message: 'Migrate to GlSkeletonLoader, or import GlDeprecatedSkeletonLoading.'
     - selector: ImportSpecifier[imported.name='GlSafeHtmlDirective']
       message: 'Use directive at ~/vue_shared/directives/safe_html.js instead.'
+    - selector: Literal[value=/docs.gitlab.+\u002Fee/]
+      message: 'No hard coded url, use `DOCS_URL_IN_EE_DIR` in `jh_else_ce/lib/utils/url_utility`'
+    - selector: Literal[value=/(?=.*docs.gitlab.*)(?=^(?!.*\u002Fee\b).*$)/]
+      message: 'No hard coded url, use `DOCS_URL` in `jh_else_ce/lib/utils/url_utility`'
+    - selector: Literal[value=/(?=.*about.gitlab.*)(?=^(?!.*\u002Fblog\b).*$)/]
+      message: 'No hard coded url, use `PROMO_URL` in `jh_else_ce/lib/utils/url_utility`'
+    - selector: TemplateLiteral[expressions.0.name=DOCS_URL] > TemplateElement[value.cooked=/\u002Fjh/]
+      message: '`/ee` or `/jh` path found in docs url, use `DOCS_URL_IN_EE_DIR` in `jh_else_ce/lib/utils/url_utility`'
   no-restricted-imports:
     - error
     - paths:
@@ -155,6 +163,8 @@ overrides:
           message: 'Migrate to GlSkeletonLoader, or import GlDeprecatedSkeletonLoading.'
         - selector: CallExpression[arguments.length=1][arguments.0.type='Literal'] CallExpression[callee.property.name='toBe'] CallExpression[callee.property.name='attributes'][arguments.length=1][arguments.0.value='disabled']
           message: Avoid asserting disabled attribute exact value, because Vue.js 2 and Vue.js 3 renders it differently. Use toBeDefined / toBeUndefined instead
+        - selector: MemberExpression[object.object.name='Vue'][object.property.name='config'][property.name='errorHandler']
+          message: 'Use setErrorHandler/resetVueErrorHandler from helpers/set_vue_error_handler.js instead.'
       no-unsanitized/method: off
       no-unsanitized/property: off
   - files:

.gitlab-ci.yml

@@ -13,6 +13,7 @@ stages:
   - pages
   - notify
   - release-environments
+  - benchmark
 
 # always use `gitlab-org` runners, however
 # in cases where jobs require Docker-in-Docker, the job
@@ -28,20 +29,20 @@ default:
 
 .default-ruby-variables: &default-ruby-variables
   RUBY_VERSION: "3.0"
-  OMNIBUS_GITLAB_RUBY3_BUILD: "true"
-  OMNIBUS_GITLAB_CACHE_EDITION: "GITLAB_RUBY3"
 
-.backcompat-ruby-variables: &backcompat-ruby-variables
-  RUBY_VERSION: "2.7"
-  OMNIBUS_GITLAB_RUBY2_BUILD: "true"
-  OMNIBUS_GITLAB_CACHE_EDITION: "GITLAB_RUBY2"
+.next-ruby-variables: &next-ruby-variables
+  RUBY_VERSION: "3.1"
 
 .default-branch-pipeline-failure-variables: &default-branch-pipeline-failure-variables
   CREATE_RAILS_TEST_FAILURE_ISSUES: "true"
+  CREATE_RAILS_SLOW_TEST_ISSUES: "true"
 
 workflow:
   name: '$PIPELINE_NAME'
   rules:
+    - if: '$CI_PROJECT_PATH == "gitlab-org/gitaly" && $CI_PIPELINE_SOURCE == "parent_pipeline" && $GITALY_TEST'
+      variables:
+        PIPELINE_NAME: 'Gitaly Rails Test Pipeline'
     # If `$FORCE_GITLAB_CI` is set, create a pipeline.
     - if: '$FORCE_GITLAB_CI'
       variables:
@@ -54,10 +55,10 @@ workflow:
     # they serve no purpose and will run anyway when the changes are merged.
     - if: '$CI_MERGE_REQUEST_SOURCE_BRANCH_NAME =~ /^release-tools\/\d+\.\d+\.\d+-rc\d+$/ && $CI_MERGE_REQUEST_TARGET_BRANCH_NAME =~ /^[\d-]+-stable(-ee)?$/ && $CI_PROJECT_PATH == "gitlab-org/gitlab"'
       when: never
-    # For merge requests running exclusively in Ruby 2.7
-    - if: '$CI_MERGE_REQUEST_LABELS =~ /pipeline:run-in-ruby2/'
+    # For merge requests running exclusively in Ruby 3.1
+    - if: '$CI_MERGE_REQUEST_LABELS =~ /pipeline:run-in-ruby3_1/'
       variables:
-        <<: *backcompat-ruby-variables
+        <<: *next-ruby-variables
         PIPELINE_NAME: 'Ruby $RUBY_VERSION $CI_MERGE_REQUEST_EVENT_TYPE MR pipeline'
         NO_SOURCEMAPS: 'true'
     - if: '$CI_MERGE_REQUEST_LABELS =~ /Community contribution/'
@@ -79,10 +80,10 @@ workflow:
         <<: *default-branch-pipeline-failure-variables
         CRYSTALBALL: "true"
         PIPELINE_NAME: 'Scheduled Ruby $RUBY_VERSION $CI_COMMIT_BRANCH branch pipeline'
-    # Run pipelines for ruby2 branch
-    - if: '$CI_COMMIT_BRANCH == "ruby2" && $CI_PIPELINE_SOURCE == "schedule"'
+    # Run pipelines for ruby3_1 branch
+    - if: '$CI_COMMIT_BRANCH == "ruby3_1" && $CI_PIPELINE_SOURCE == "schedule"'
       variables:
-        <<: *backcompat-ruby-variables
+        <<: *next-ruby-variables
         PIPELINE_NAME: 'Scheduled Ruby $RUBY_VERSION $CI_COMMIT_BRANCH branch pipeline'
     # This work around https://gitlab.com/gitlab-org/gitlab/-/issues/332411 whichs prevents usage of dependency proxy
     # when pipeline is triggered by a project access token.
@@ -142,7 +143,6 @@ variables:
   UBI_VERSION: "8.6"
   CHROME_VERSION: "113"
   DOCKER_VERSION: "23.0.1"
-  RUBY_VERSION: "2.7"
   RUBYGEMS_VERSION: "3.4"
   GO_VERSION: "1.20"
   RUST_VERSION: "1.65"
@@ -152,18 +152,19 @@ variables:
   GITLAB_WORKHORSE_FOLDER: "gitlab-workhorse"
   KNAPSACK_RSPEC_SUITE_REPORT_PATH: knapsack/report-master.json
   RSPEC_CHANGED_FILES_PATH: rspec/changed_files.txt
+  RSPEC_FAIL_FAST_THRESHOLD: 20
+  RSPEC_FAST_QUARANTINE_LOCAL_PATH: rspec/fast_quarantine-gitlab.txt
   RSPEC_FOSS_IMPACT_PIPELINE_TEMPLATE_YML: .gitlab/ci/rails/rspec-foss-impact.gitlab-ci.yml.erb
-  RSPEC_PREDICTIVE_PIPELINE_TEMPLATE_YML: .gitlab/ci/rails/rspec-predictive.gitlab-ci.yml.erb
   RSPEC_LAST_RUN_RESULTS_FILE: rspec/rspec_last_run_results.txt
   RSPEC_MATCHING_JS_FILES_PATH: rspec/js_matching_files.txt
-  RSPEC_VIEWS_INCLUDING_PARTIALS_PATH: rspec/views_including_partials.txt
-  RSPEC_MATCHING_TESTS_PATH: rspec/matching_tests.txt
-  RSPEC_MATCHING_TESTS_FOSS_PATH: rspec/matching_tests-foss.txt
   RSPEC_MATCHING_TESTS_EE_PATH: rspec/matching_tests-ee.txt
+  RSPEC_MATCHING_TESTS_FOSS_PATH: rspec/matching_tests-foss.txt
+  RSPEC_MATCHING_TESTS_PATH: rspec/matching_tests.txt
   RSPEC_PACKED_TESTS_MAPPING_PATH: crystalball/packed-mapping.json
+  RSPEC_PREDICTIVE_PIPELINE_TEMPLATE_YML: .gitlab/ci/rails/rspec-predictive.gitlab-ci.yml.erb
   RSPEC_PROFILING_FOLDER_PATH: rspec/profiling
   RSPEC_TESTS_MAPPING_PATH: crystalball/mapping.json
-  RSPEC_FAST_QUARANTINE_LOCAL_PATH: rspec/fast_quarantine-gitlab.txt
+  RSPEC_VIEWS_INCLUDING_PARTIALS_PATH: rspec/views_including_partials.txt
   TMP_TEST_FOLDER: "${CI_PROJECT_DIR}/tmp/tests"
   TMP_TEST_GITLAB_WORKHORSE_PATH: "${TMP_TEST_FOLDER}/${GITLAB_WORKHORSE_FOLDER}"
 

.gitlab/CODEOWNERS

@@ -20,12 +20,10 @@ GITALY_SERVER_VERSION @project_278964_bot6 @gitlab-org/maintainers/rails-backend
 /doc/**/*.jpg
 /doc/**/*.png
 /data/deprecations/*.yml
-/data/removals/**/*.yml
 
 ## Technical writing files that do not need `*` rule approval,
 ## but still require an approval from a TW team DRI for each file.
 /data/deprecations/templates/ @marcel.amirault @sarahgerman @gitlab-org/tw-leadership
-/data/removals/templates/ @marcel.amirault @sarahgerman @gitlab-org/tw-leadership
 .markdownlint.yml @marcel.amirault @eread @aqualls @gitlab-org/tw-leadership
 /doc/.markdownlint/ @marcel.amirault @eread @aqualls @gitlab-org/tw-leadership
 /doc/.vale/ @marcel.amirault @eread @aqualls @gitlab-org/tw-leadership
@@ -392,7 +390,6 @@ lib/gitlab/checks/**
 ^[Documentation Directories] @gl-docsteam
 /doc/
 /data/deprecations/
-/data/removals/
 
 ^[Documentation Pages]
 # This block is managed by the rake script at lib/tasks/gitlab/tw/codeowners.rake, manual updates will be overwritten!
@@ -1236,7 +1233,6 @@ lib/gitlab/checks/**
 /app/controllers/projects/triggers_controller.rb
 /app/controllers/projects/variables_controller.rb
 /app/models/commit_status.rb
-/app/models/external_pull_request.rb
 /app/models/generic_commit_status.rb
 /app/models/namespace_ci_cd_setting.rb
 /app/models/project_ci_cd_setting.rb
@@ -1449,6 +1445,40 @@ ee/lib/ee/api/entities/project.rb
 /ee/spec/elastic/migrate/
 /ee/spec/support/elastic.rb
 
+[Create::IDE - Remote Development Backend]  @gitlab-org/maintainers/remote-development/backend
+
+/ee/app/models/remote_development/
+/ee/app/policies/remote_development/
+/ee/app/finders/remote_development/
+/ee/app/graphql/types/remote_development/
+/ee/app/graphql/mutations/remote_development/
+/ee/app/graphql/resolvers/remote_development/
+/ee/app/controllers/remote_development/
+/ee/app/services/remote_development/
+/ee/spec/frontend/remote_development/
+/ee/spec/features/remote_development/
+/ee/spec/models/remote_development/
+/ee/spec/policies/remote_development/
+/ee/spec/requests/api/graphql/mutations/remote_development/
+/ee/spec/requests/api/graphql/remote_development/
+/ee/spec/finders/remote_development/
+/ee/spec/support/shared_contexts/remote_development/
+/ee/spec/graphql/types/remote_development/
+/ee/spec/factories/remote_development/
+/ee/spec/lib/remote_development/
+/ee/spec/fixtures/remote_development/
+/ee/spec/controllers/remote_development/
+/ee/spec/services/remote_development/
+/ee/lib/remote_development/
+/qa/qa/specs/features/ee/browser_ui/3_create/remote_development/
+/scripts/remote_development/
+
+[Create::IDE - Remote Development Frontend]  @gitlab-org/maintainers/remote-development/frontend
+
+/ee/app/views/remote_development/
+/ee/app/assets/javascripts/remote_development/
+/ee/app/assets/javascripts/pages/remote_development/
+
 # JiHu GitLab rules. See https://gitlab.com/gitlab-jh/gitlab-jh-enablement/-/issues/213#note_1024367528
 
 [JH Frontend] @jihulab/maintainers/frontend

.gitlab/ci/benchmark.gitlab-ci.yml

+benchmark-markdown:
+  extends:
+    - .single-db-ci-connection
+    - .rails-job-base
+    - .use-pg14
+    - .benchmark:rules:benchmark-markdown
+  stage: benchmark
+  needs:
+    - setup-test-env
+  script:
+    - section_start "gitaly-test-spawn" "Spawning Gitaly"; scripts/gitaly-test-spawn; section_end "gitaly-test-spawn";  # Do not use 'bundle exec' here
+    - bundle exec rake benchmark:banzai &> benchmark-markdown.txt
+  artifacts:
+    when: always
+    paths:
+      - benchmark-markdown.txt
+  allow_failure: true

.gitlab/ci/caching.gitlab-ci.yml

@@ -45,6 +45,7 @@ cache-assets:test as-if-foss:
   extends:
     - .cache-assets-base
     - .as-if-foss
+    - .caching:rules:cache-assets-as-if-foss
 
 cache-assets:production:
   extends:

.gitlab/ci/docs.gitlab-ci.yml

@@ -42,7 +42,7 @@ review-docs-cleanup:
 docs-lint links:
   extends:
     - .docs:rules:docs-lint
-  image: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-docs/lint-html:alpine-3.17-ruby-3.2.2-c24946ab
+  image: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-docs/lint-html:alpine-3.18-ruby-3.2.2-4207821e
   stage: lint
   needs: []
   script:
@@ -52,13 +52,13 @@ docs-lint links:
     - mv doc/ /tmp/gitlab-docs/content/ee
     - cd /tmp/gitlab-docs
     # Build HTML from Markdown
-    - bundle exec nanoc
+    - make compile
     # Check the internal links and anchors (in parallel)
     - "parallel time bundle exec nanoc check ::: internal_links internal_anchors"
 
 .docs-markdown-lint-image:
   # When updating the image version here, update it in /scripts/lint-doc.sh too.
-  image: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-docs/lint-markdown:alpine-3.17-vale-2.24.0-markdownlint-0.33.0-markdownlint2-0.6.0
+  image: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-docs/lint-markdown:alpine-3.18-vale-2.27.0-markdownlint-0.35.0-markdownlint2-0.8.1
 
 docs-lint markdown:
   extends:
@@ -123,4 +123,3 @@ docs-lint deprecations-and-removals:
   needs: []
   script:
     - bundle exec rake gitlab:docs:check_deprecations
-    - bundle exec rake gitlab:docs:check_removals

.gitlab/ci/frontend.gitlab-ci.yml

@@ -371,28 +371,6 @@ bundle-size-review:
     paths:
       - bundle-size-review/
 
-.startup-css-check-base:
-  extends:
-    - .frontend-test-base
-  script:
-    - run_timed_command "yarn generate:startup_css"
-    - yarn check:startup_css
-
-startup-css-check:
-  extends:
-    - .startup-css-check-base
-    - .frontend:rules:default-frontend-jobs
-  needs: ["compile-test-assets", "rspec-all frontend_fixture"]
-
-startup-css-check as-if-foss:
-  extends:
-    - .startup-css-check-base
-    - .as-if-foss
-    - .frontend:rules:default-frontend-jobs-as-if-foss
-  needs:
-    - job: "compile-test-assets as-if-foss"
-    - job: "rspec-all frontend_fixture as-if-foss"
-
 .compile-storybook-base:
   extends:
     - .frontend-test-base

.gitlab/ci/gitlab-gems.gitlab-ci.yml

+include:
+  - local: .gitlab/ci/templates/gem.gitlab-ci.yml
+    inputs:
+      gem_name: "activerecord-gitlab"
+  - local: .gitlab/ci/templates/gem.gitlab-ci.yml
+    inputs:
+      gem_name: "click_house-client"
+  - local: .gitlab/ci/templates/gem.gitlab-ci.yml
+    inputs:
+      gem_name: "gitlab-rspec"
+  - local: .gitlab/ci/templates/gem.gitlab-ci.yml
+    inputs:
+      gem_name: "gitlab-schema-validation"
+  - local: .gitlab/ci/templates/gem.gitlab-ci.yml
+    inputs:
+      gem_name: "gitlab-utils"
+  - local: .gitlab/ci/templates/gem.gitlab-ci.yml
+    inputs:
+      gem_name: "ipynbdiff"
+  - local: .gitlab/ci/templates/gem.gitlab-ci.yml
+    inputs:
+      gem_name: "rspec_flaky"

.gitlab/ci/global.gitlab-ci.yml

@@ -216,7 +216,7 @@
 .use-pg12:
   services:
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:postgres-12-pgvector-0.4.1
-      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
+      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off", "-c", "max_locks_per_transaction=128"]
       alias: postgres
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:redis-cluster-6.2.12
       alias: rediscluster # configure connections in config/redis.yml
@@ -228,7 +228,7 @@
 .use-pg13:
   services:
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:postgres-13-pgvector-0.4.1
-      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
+      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off", "-c", "max_locks_per_transaction=128"]
       alias: postgres
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:redis-cluster-6.2.12
       alias: rediscluster # configure connections in config/redis.yml
@@ -240,7 +240,7 @@
 .use-pg14:
   services:
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:postgres-14-pgvector-0.4.1
-      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
+      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off", "-c", "max_locks_per_transaction=128"]
       alias: postgres
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:redis-cluster-6.2.12
       alias: rediscluster # configure connections in config/redis.yml
@@ -252,7 +252,7 @@
 .use-pg15:
   services:
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:postgres-15-pgvector-0.4.1
-      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
+      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off", "-c", "max_locks_per_transaction=128"]
       alias: postgres
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:redis-cluster-6.2.12
       alias: rediscluster # configure connections in config/redis.yml
@@ -264,7 +264,7 @@
 .use-pg12-es7-ee:
   services:
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:postgres-12-pgvector-0.4.1
-      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
+      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off", "-c", "max_locks_per_transaction=128"]
       alias: postgres
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:redis-cluster-6.2.12
       alias: rediscluster # configure connections in config/redis.yml
@@ -282,7 +282,7 @@
 .use-pg13-es7-ee:
   services:
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:postgres-13-pgvector-0.4.1
-      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
+      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off", "-c", "max_locks_per_transaction=128"]
       alias: postgres
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:redis-cluster-6.2.12
       alias: rediscluster # configure connections in config/redis.yml
@@ -300,7 +300,7 @@
 .use-pg14-es7-ee:
   services:
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:postgres-14-pgvector-0.4.1
-      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
+      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off", "-c", "max_locks_per_transaction=128"]
       alias: postgres
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:redis-cluster-6.2.12
       alias: rediscluster # configure connections in config/redis.yml
@@ -318,7 +318,7 @@
 .use-pg15-es7-ee:
   services:
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:postgres-15-pgvector-0.4.1
-      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
+      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off", "-c", "max_locks_per_transaction=128"]
       alias: postgres
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:redis-cluster-6.2.12
       alias: rediscluster # configure connections in config/redis.yml
@@ -336,7 +336,7 @@
 .use-pg13-es8-ee:
   services:
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:postgres-13-pgvector-0.4.1
-      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
+      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off", "-c", "max_locks_per_transaction=128"]
       alias: postgres
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:redis-cluster-6.2.12
       alias: rediscluster # configure connections in config/redis.yml
@@ -355,7 +355,7 @@
 .use-pg14-es8-ee:
   services:
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:postgres-14-pgvector-0.4.1
-      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
+      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off", "-c", "max_locks_per_transaction=128"]
       alias: postgres
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:redis-cluster-6.2.12
       alias: rediscluster # configure connections in config/redis.yml
@@ -374,7 +374,7 @@
 .use-pg15-es8-ee:
   services:
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:postgres-15-pgvector-0.4.1
-      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
+      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off", "-c", "max_locks_per_transaction=128"]
       alias: postgres
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:redis-cluster-6.2.12
       alias: rediscluster # configure connections in config/redis.yml
@@ -393,7 +393,7 @@
 .use-pg13-opensearch1-ee:
   services:
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:postgres-13-pgvector-0.4.1
-      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
+      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off", "-c", "max_locks_per_transaction=128"]
       alias: postgres
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:redis-cluster-6.2.12
       alias: rediscluster # configure connections in config/redis.yml
@@ -412,7 +412,7 @@
 .use-pg13-opensearch2-ee:
   services:
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:postgres-13-pgvector-0.4.1
-      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
+      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off", "-c", "max_locks_per_transaction=128"]
       alias: postgres
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:redis-cluster-6.2.12
       alias: rediscluster # configure connections in config/redis.yml
@@ -431,7 +431,7 @@
 .use-pg14-opensearch1-ee:
   services:
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:postgres-14-pgvector-0.4.1
-      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
+      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off", "-c", "max_locks_per_transaction=128"]
       alias: postgres
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:redis-cluster-6.2.12
       alias: rediscluster # configure connections in config/redis.yml
@@ -450,7 +450,7 @@
 .use-pg14-opensearch2-ee:
   services:
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:postgres-14-pgvector-0.4.1
-      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
+      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off", "-c", "max_locks_per_transaction=128"]
       alias: postgres
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:redis-cluster-6.2.12
       alias: rediscluster # configure connections in config/redis.yml
@@ -469,7 +469,7 @@
 .use-pg15-opensearch1-ee:
   services:
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:postgres-15-pgvector-0.4.1
-      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
+      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off", "-c", "max_locks_per_transaction=128"]
       alias: postgres
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:redis-cluster-6.2.12
       alias: rediscluster # configure connections in config/redis.yml
@@ -488,7 +488,7 @@
 .use-pg15-opensearch2-ee:
   services:
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:postgres-15-pgvector-0.4.1
-      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
+      command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off", "-c", "max_locks_per_transaction=128"]
       alias: postgres
     - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:redis-cluster-6.2.12
       alias: rediscluster # configure connections in config/redis.yml

.gitlab/ci/package-and-test-nightly/main.gitlab-ci.yml

@@ -2,6 +2,16 @@ include:
   - local: .gitlab/ci/qa-common/main.gitlab-ci.yml
   - local: .gitlab/ci/qa-common/rules.gitlab-ci.yml
   - local: .gitlab/ci/qa-common/variables.gitlab-ci.yml
+  - component: "gitlab.com/gitlab-org/quality/pipeline-common/allure-report@7.3.0"
+    inputs:
+      job_name: "e2e-test-report"
+      job_stage: "report"
+      aws_access_key_id_variable_name: "QA_ALLURE_AWS_ACCESS_KEY_ID"
+      aws_secret_access_key_variable_name: "QA_ALLURE_AWS_SECRET_ACCESS_KEY"
+      gitlab_auth_token_variable_name: "PROJECT_TOKEN_FOR_CI_SCRIPTS_API_USAGE"
+      allure_results_glob: "gitlab-qa-run-*/**/allure-results"
+      allure_job_name: "${QA_RUN_TYPE}"
+      allure_ref_slug: "${CI_COMMIT_REF_SLUG}"
 
 workflow:
   rules:
@@ -97,12 +107,22 @@ integration-opensearch-compatibility-version-2:
     OPENSEARCH_VERSION: "2.0.1"
     QA_SCENARIO: "Test::Integration::Opensearch"
 
+# ------------------------------------------
+# Relative url
+# ------------------------------------------
+relative-url:
+  extends:
+    - .qa
+    - .ee
+    - .parallel
+  variables:
+    QA_SCENARIO: Test::Instance::RelativeUrl
+
 # ==========================================
 # Post test stage
 # ==========================================
 e2e-test-report:
-  extends:
-    - .e2e-test-report
+  extends: .rules:report:allure-report
 
 upload-knapsack-report:
   extends:

.gitlab/ci/package-and-test/main.gitlab-ci.yml

@@ -4,6 +4,16 @@ include:
   - local: .gitlab/ci/qa-common/main.gitlab-ci.yml
   - local: .gitlab/ci/qa-common/rules.gitlab-ci.yml
   - local: .gitlab/ci/qa-common/variables.gitlab-ci.yml
+  - component: "gitlab.com/gitlab-org/quality/pipeline-common/allure-report@7.3.1"
+    inputs:
+      job_name: "e2e-test-report"
+      job_stage: "report"
+      aws_access_key_id_variable_name: "QA_ALLURE_AWS_ACCESS_KEY_ID"
+      aws_secret_access_key_variable_name: "QA_ALLURE_AWS_SECRET_ACCESS_KEY"
+      gitlab_auth_token_variable_name: "PROJECT_TOKEN_FOR_CI_SCRIPTS_API_USAGE"
+      allure_results_glob: "gitlab-qa-run-*/**/allure-results"
+      allure_job_name: "${QA_RUN_TYPE}"
+      allure_ref_slug: "${CI_COMMIT_REF_SLUG}"
 
 # ==========================================
 # Prepare stage
@@ -81,6 +91,7 @@ instance-ff-inverse:
 # ------------------------------------------
 
 # ========== instance ===========
+
 instance:
   extends:
     - .parallel
@@ -151,38 +162,6 @@ praefect-selective-parallel:
       variables:
         QA_TESTS: ""
 
-# ========== relative-url ===========
-
-relative-url:
-  extends:
-    - .qa
-    - .parallel
-  variables:
-    QA_SCENARIO: Test::Instance::RelativeUrl
-  rules:
-    - !reference [.rules:test:qa-parallel, rules]
-    - if: $QA_SUITES =~ /Test::Instance::All/
-
-relative-url-selective:
-  extends: .qa
-  variables:
-    QA_SCENARIO: Test::Instance::RelativeUrl
-  rules:
-    - !reference [.rules:test:qa-selective, rules]
-    - if: $QA_SUITES =~ /Test::Instance::All/
-
-relative-url-selective-parallel:
-  extends:
-    - .qa
-    - .parallel
-  variables:
-    QA_SCENARIO: Test::Instance::RelativeUrl
-  rules:
-    - !reference [.rules:test:qa-selective-parallel, rules]
-    - if: $QA_SUITES =~ /Test::Instance::All/
-      variables:
-        QA_TESTS: ""
-
 # ========== decomposition-single-db ===========
 
 decomposition-single-db:
@@ -259,7 +238,9 @@ decomposition-multiple-db-selective-parallel:
 # ========== object-storage ===========
 
 object-storage:
-  extends: .qa
+  extends:
+    - .qa
+    - .failure-videos
   parallel: 2
   variables:
     QA_SCENARIO: Test::Instance::Image
@@ -295,7 +276,9 @@ object-storage-selective-parallel:
 # ========== object-storage-aws ===========
 
 object-storage-aws:
-  extends: object-storage
+  extends:
+    - object-storage
+    - .failure-videos
   variables:
     AWS_S3_ACCESS_KEY: $QA_AWS_S3_ACCESS_KEY
     AWS_S3_BUCKET_NAME: $QA_AWS_S3_BUCKET_NAME
@@ -325,7 +308,9 @@ object-storage-aws-selective-parallel:
 # ========== object-storage-gcs ===========
 
 object-storage-gcs:
-  extends: object-storage
+  extends:
+    - object-storage
+    - .failure-videos
   variables:
     GCS_BUCKET_NAME: $QA_GCS_BUCKET_NAME
     GOOGLE_PROJECT: $QA_GOOGLE_PROJECT
@@ -383,7 +368,9 @@ group-saml:
     - !reference [.rules:test:manual, rules]
 
 oauth:
-  extends: .qa
+  extends:
+    - .qa
+    - .failure-videos
   variables:
     QA_SCENARIO: Test::Integration::OAuth
   rules:
@@ -401,7 +388,9 @@ instance-saml:
     - !reference [.rules:test:manual, rules]
 
 jira:
-  extends: .qa
+  extends:
+    - .qa
+    - .failure-videos
   variables:
     QA_SCENARIO: Test::Integration::Jira
   rules:
@@ -419,7 +408,9 @@ integrations:
     - !reference [.rules:test:manual, rules]
 
 ldap-no-server:
-  extends: .qa
+  extends:
+    - .qa
+    - .failure-videos
   variables:
     QA_SCENARIO: Test::Integration::LDAPNoServer
   rules:
@@ -428,7 +419,9 @@ ldap-no-server:
     - !reference [.rules:test:manual, rules]
 
 ldap-tls:
-  extends: .qa
+  extends:
+    - .qa
+    - .failure-videos
   variables:
     QA_SCENARIO: Test::Integration::LDAPTLS
   rules:
@@ -437,7 +430,9 @@ ldap-tls:
     - !reference [.rules:test:manual, rules]
 
 ldap-no-tls:
-  extends: .qa
+  extends:
+    - .qa
+    - .failure-videos
   variables:
     QA_SCENARIO: Test::Integration::LDAPNoTLS
   rules:
@@ -455,7 +450,9 @@ mtls:
     - !reference [.rules:test:manual, rules]
 
 mattermost:
-  extends: .qa
+  extends:
+    - .qa
+    - .failure-videos
   variables:
     QA_SCENARIO: Test::Integration::Mattermost
   rules:
@@ -464,7 +461,9 @@ mattermost:
     - !reference [.rules:test:manual, rules]
 
 registry:
-  extends: .qa
+  extends:
+    - .qa
+    - .failure-videos
   variables:
     QA_SCENARIO: Test::Integration::Registry
   rules:
@@ -473,7 +472,9 @@ registry:
     - !reference [.rules:test:manual, rules]
 
 registry-with-cdn:
-  extends: .qa
+  extends:
+    - .qa
+    - .failure-videos
   variables:
     QA_SCENARIO: Test::Integration::RegistryWithCDN
     GCS_CDN_BUCKET_NAME: $QA_GCS_CDN_BUCKET_NAME
@@ -490,7 +491,9 @@ registry-with-cdn:
     - !reference [.rules:test:manual, rules]
 
 repository-storage:
-  extends: .qa
+  extends:
+    - .qa
+    - .failure-videos
   variables:
     QA_SCENARIO: Test::Instance::RepositoryStorage
   rules:
@@ -499,7 +502,9 @@ repository-storage:
     - !reference [.rules:test:manual, rules]
 
 service-ping-disabled:
-  extends: .qa
+  extends:
+    - .qa
+    - .failure-videos
   variables:
     QA_SCENARIO: Test::Integration::ServicePingDisabled
   rules:
@@ -508,7 +513,9 @@ service-ping-disabled:
     - !reference [.rules:test:manual, rules]
 
 smtp:
-  extends: .qa
+  extends:
+    - .qa
+    - .failure-videos
   variables:
     QA_SCENARIO: Test::Integration::SMTP
   rules:
@@ -517,7 +524,9 @@ smtp:
     - !reference [.rules:test:manual, rules]
 
 cloud-activation:
-  extends: .qa
+  extends:
+    - .qa
+    - .failure-videos
   variables:
     QA_SCENARIO: Test::Instance::Image
     QA_RSPEC_TAGS: --tag cloud_activation
@@ -527,7 +536,9 @@ cloud-activation:
     - !reference [.rules:test:manual, rules]
 
 large-setup:
-  extends: .qa
+  extends:
+    - .qa
+    - .failure-videos
   variables:
     QA_SCENARIO: Test::Instance::Image
     QA_RSPEC_TAGS: --tag can_use_large_setup
@@ -566,7 +577,9 @@ registry-object-storage-tls:
     GITLAB_QA_OPTS: --omnibus-config registry_object_storage $EXTRA_GITLAB_QA_OPTS
 
 importers:
-  extends: .qa
+  extends:
+    - .qa
+    - .failure-videos
   variables:
     QA_SCENARIO: Test::Integration::Import
     QA_MOCK_GITHUB: "true"
@@ -620,9 +633,7 @@ update-ee-to-ce:
 # Post test stage
 # ==========================================
 e2e-test-report:
-  extends:
-    - .e2e-test-report
-    - .rules:report:allure-report
+  extends: .rules:report:allure-report
 
 upload-knapsack-report:
   extends:

.gitlab/ci/preflight.gitlab-ci.yml

@@ -24,9 +24,6 @@
     - .ruby-cache
     - .preflight:rules:rails-production-server-boot
     - .use-pg13
-  variables:
-    BUNDLE_WITHOUT: "development:test"
-    BUNDLE_WITH: "production"
 
 # Test the puma configuration present in `config/puma.rb.example`
 rails-production-server-boot-puma-example:

.gitlab/ci/qa-common/main.gitlab-ci.yml

@@ -9,7 +9,6 @@ include:
     ref: 7.2.3
     file:
       - /ci/base.gitlab-ci.yml
-      - /ci/allure-report.yml
       - /ci/knapsack-report.yml
 
 stages:
@@ -86,15 +85,6 @@ stages:
       - qa/knapsack/*.json
     expire_in: 1 day
 
-.e2e-test-report:
-  extends:
-    - .generate-allure-report-base
-  stage: report
-  variables:
-    GITLAB_AUTH_TOKEN: $PROJECT_TOKEN_FOR_CI_SCRIPTS_API_USAGE
-    ALLURE_PROJECT_PATH: $CI_PROJECT_PATH
-    ALLURE_MERGE_REQUEST_IID: $CI_MERGE_REQUEST_IID
-
 .upload-knapsack-report:
   extends:
     - .generate-knapsack-report-base
@@ -148,6 +138,7 @@ stages:
     STATUS_SYM: ☠️
     STATUS: failed
     TYPE: "($QA_RUN_TYPE) "
+    ALLURE_JOB_NAME: $QA_RUN_TYPE
   when: always
   script:
     - |
@@ -158,6 +149,12 @@ stages:
     - bundle exec prepare-stage-reports --input-files "${QA_RSPEC_XML_FILE_PATTERN}"
     - !reference [.notify-slack-qa, script]
 
+.failure-videos:
+  variables:
+    USE_SELENOID: "true"
+    QA_RECORD_VIDEO: "true"
+    QA_REMOTE_GRID: "selenoid:4444"
+
 # ==========================================
 # Pre stage
 # ==========================================

.gitlab/ci/qa-common/variables.gitlab-ci.yml

@@ -3,12 +3,6 @@
 variables:
   REGISTRY_HOST: "registry.gitlab.com"
   REGISTRY_GROUP: "gitlab-org"
-  SKIP_OMNIBUS_TRIGGER: "true"
-  OMNIBUS_GITLAB_CACHE_UPDATE: "false"
-  OMNIBUS_GITLAB_RUBY3_BUILD: "false"
-  OMNIBUS_GITLAB_RUBY2_BUILD: "false"
-  OMNIBUS_GITLAB_CACHE_EDITION: "GITLAB"
-  OMNIBUS_GITLAB_BUILD_ON_ALL_OS: "false"
   ALLURE_JOB_NAME: $CI_PROJECT_NAME
   COLORIZED_LOGS: "true"
   QA_LOG_LEVEL: "info"
@@ -17,3 +11,4 @@ variables:
   # run all tests by default when package-and-test is included natively in other projects
   # this will be overridden when selective test execution is used in gitlab canonical project
   QA_RUN_ALL_TESTS: "true"
+  USE_OLD_RUBY_VERSION: "true"

.gitlab/ci/qa.gitlab-ci.yml

@@ -15,10 +15,6 @@
 .e2e-trigger-base:
   extends: .production  # this makes sure GITLAB_ALLOW_SEPARATE_CI_DATABASE is passed to the child pipeline
   stage: qa
-  needs:
-    - build-assets-image
-    - build-qa-image
-    - e2e-test-pipeline-generate
   variables:
     # This is needed by `trigger-omnibus-env` (`.gitlab/ci/package-and-test/main.gitlab-ci.yml`).
     PARENT_PIPELINE_ID: $CI_PIPELINE_ID
@@ -27,7 +23,6 @@
     RUN_WITH_BUNDLE: "true"  # instructs pipeline to install and run gitlab-qa gem via bundler
     QA_PATH: qa  # sets the optional path for bundler to run from
     DYNAMIC_PIPELINE_YML: package-and-test-pipeline.yml  # yml files are generated by scripts/generate-e2e-pipeline script
-    EXTRA_GITLAB_QA_OPTS: --set-feature-flags super_sidebar_nav_enrolled=enabled
   inherit:
     variables:
       - CHROME_VERSION
@@ -36,9 +31,6 @@
       - DEBIAN_VERSION
       - REGISTRY_GROUP
       - REGISTRY_HOST
-      - OMNIBUS_GITLAB_CACHE_EDITION
-      - OMNIBUS_GITLAB_RUBY3_BUILD
-      - OMNIBUS_GITLAB_RUBY2_BUILD
   trigger:
     strategy: depend
     forward:
@@ -102,9 +94,9 @@ trigger-omnibus:
     TOP_UPSTREAM_SOURCE_PROJECT: $CI_PROJECT_PATH
     SECURITY_SOURCES: $SECURITY_SOURCES
     CACHE_UPDATE: $OMNIBUS_GITLAB_CACHE_UPDATE
-    RUBY3_BUILD: $OMNIBUS_GITLAB_RUBY3_BUILD
-    RUBY2_BUILD: $OMNIBUS_GITLAB_RUBY2_BUILD
-    CACHE_EDITION: $OMNIBUS_GITLAB_CACHE_EDITION
+    USE_OLD_RUBY_VERSION: "true"
+    CACHE_EDITION: "GITLAB_RUBY3_0"
+    NEXT_RUBY_VERSION: "3.1.4"
     BUILD_ON_ALL_OS: $OMNIBUS_GITLAB_BUILD_ON_ALL_OS
     SKIP_QA_TEST: "true"
     ee: $EE
@@ -135,7 +127,6 @@ e2e:package-and-test-ee:
   variables:
     RELEASE: "${REGISTRY_HOST}/${REGISTRY_GROUP}/build/omnibus-gitlab-mirror/gitlab-ee:${CI_COMMIT_SHA}"
     QA_RUN_TYPE: e2e-package-and-test
-    ALLURE_JOB_NAME: e2e-package-and-test
     PIPELINE_NAME: E2E Omnibus GitLab EE
 
 e2e:package-and-test-ce:
@@ -151,17 +142,19 @@ e2e:package-and-test-ce:
     RELEASE: ${REGISTRY_HOST}/${REGISTRY_GROUP}/build/omnibus-gitlab-mirror/gitlab-ce:${CI_COMMIT_SHA}
     GITLAB_QA_IMAGE: ${CI_REGISTRY_IMAGE}/gitlab-ce-qa:${CI_COMMIT_SHA}
     QA_RUN_TYPE: e2e-package-and-test-ce
-    ALLURE_JOB_NAME: e2e-package-and-test-ce
     PIPELINE_NAME: E2E Omnibus GitLab CE
 
 e2e:package-and-test-old-nav:
   extends:
     - .e2e-trigger-base
     - .qa:rules:package-and-test-old-nav
+  needs:
+    - build-qa-image
+    - trigger-omnibus
+    - e2e-test-pipeline-generate
   variables:
     RELEASE: "${REGISTRY_HOST}/${REGISTRY_GROUP}/build/omnibus-gitlab-mirror/gitlab-ee:${CI_COMMIT_SHA}"
     QA_RUN_TYPE: e2e-package-and-test-old-nav
-    ALLURE_JOB_NAME: e2e-package-and-test-old-nav
     PIPELINE_NAME: E2E Omnibus Old Navigation
     QA_SUPER_SIDEBAR_ENABLED: "false"
     EXTRA_GITLAB_QA_OPTS: ""
@@ -177,7 +170,6 @@ e2e:package-and-test-nightly:
   variables:
     GITLAB_SEMVER_VERSION: $GITLAB_SEMVER_VERSION
     QA_RUN_TYPE: nightly
-    ALLURE_JOB_NAME: nightly
     PIPELINE_NAME: E2E Omnibus GitLab Nightly
     DYNAMIC_PIPELINE_YML: package-and-test-nightly-pipeline.yml
 
@@ -190,7 +182,6 @@ e2e:test-on-gdk:
     - build-gdk-image
     - e2e-test-pipeline-generate
   variables:
-    ALLURE_JOB_NAME: e2e-test-on-gdk
     QA_RUN_TYPE: e2e-test-on-gdk
     PIPELINE_NAME: E2E GDK
     DYNAMIC_PIPELINE_YML: test-on-gdk-pipeline.yml

.gitlab/ci/rails.gitlab-ci.yml

@@ -275,7 +275,7 @@ rspec:deprecations:
   script:
     - grep -h -R "keyword" deprecations/ | awk '{$1=$1};1' | sort | uniq -c | sort
     - grep -R "keyword" deprecations/ | wc
-    - run_timed_command "fail_on_warnings bundle exec rubocop --only Lint/LastKeywordArgument --parallel"
+    - run_timed_command "fail_on_warnings bundle exec rubocop --config .rubocop.yml --only Lint/LastKeywordArgument --parallel"
   artifacts:
     expire_in: 31d
     when: always
@@ -326,6 +326,10 @@ rspec:artifact-collector remainder:
       optional: true
     - job: rspec background_migration pg14 # 4 jobs
       optional: true
+  rules:
+    - !reference ['.rails:rules:ee-and-foss-integration', rules]
+    - !reference ['.rails:rules:ee-and-foss-migration', rules]
+    - !reference ['.rails:rules:ee-and-foss-background-migration', rules]
 
 rspec:artifact-collector as-if-foss unit:
   extends:
@@ -351,6 +355,10 @@ rspec:artifact-collector as-if-foss remainder:
       optional: true
     - job: rspec background_migration pg14-as-if-foss # 4 jobs
       optional: true
+  rules:
+    - !reference ['.rails:rules:as-if-foss-integration', rules]
+    - !reference ['.rails:rules:as-if-foss-migration', rules]
+    - !reference ['.rails:rules:as-if-foss-background-migration', rules]
 
 rspec:artifact-collector single-redis:
   extends:
@@ -370,6 +378,7 @@ rspec:artifact-collector system single-redis:
 rspec:artifact-collector ee single-redis:
   extends:
     - .artifact-collector
+    - .rails:rules:single-redis
   needs:
     - job: rspec-ee unit pg14 single-redis # 18 jobs
       optional: true
@@ -392,6 +401,12 @@ rspec:artifact-collector ee:
       optional: true
     - job: rspec-ee system pg14 # 10 jobs
       optional: true
+  rules:
+    - !reference ['.rails:rules:ee-only-migration', rules]
+    - !reference ['.rails:rules:ee-only-background-migration', rules]
+    - !reference ['.rails:rules:ee-only-unit', rules]
+    - !reference ['.rails:rules:ee-only-integration', rules]
+    - !reference ['.rails:rules:ee-only-system', rules]
 
 rspec:coverage:
   extends:
@@ -569,25 +584,25 @@ rspec migration pg14-as-if-foss single-db:
   extends:
     - rspec migration pg14-as-if-foss
     - .single-db-rspec
-    - .rails:rules:single-db
+    - .rails:rules:single-db-as-if-foss
 
 rspec background_migration pg14-as-if-foss single-db:
   extends:
     - rspec background_migration pg14-as-if-foss
     - .single-db-rspec
-    - .rails:rules:single-db
+    - .rails:rules:single-db-as-if-foss
 
 rspec migration pg14-as-if-foss single-db-ci-connection:
   extends:
     - rspec migration pg14-as-if-foss
     - .single-db-ci-connection-rspec
-    - .rails:rules:single-db-ci-connection
+    - .rails:rules:single-db-ci-connection-as-if-foss
 
 rspec background_migration pg14-as-if-foss single-db-ci-connection:
   extends:
     - rspec background_migration pg14-as-if-foss
     - .single-db-ci-connection-rspec
-    - .rails:rules:single-db-ci-connection
+    - .rails:rules:single-db-ci-connection-as-if-foss
 
 rspec unit pg14-as-if-foss:
   extends:
@@ -599,13 +614,13 @@ rspec unit pg14-as-if-foss single-db:
   extends:
     - rspec unit pg14-as-if-foss
     - .single-db-rspec
-    - .rails:rules:single-db
+    - .rails:rules:single-db-as-if-foss
 
 rspec unit pg14-as-if-foss single-db-ci-connection:
   extends:
     - rspec unit pg14-as-if-foss
     - .single-db-ci-connection-rspec
-    - .rails:rules:single-db-ci-connection
+    - .rails:rules:single-db-ci-connection-as-if-foss
 
 rspec integration pg14-as-if-foss:
   extends:
@@ -617,13 +632,13 @@ rspec integration pg14-as-if-foss single-db:
   extends:
     - rspec integration pg14-as-if-foss
     - .single-db-rspec
-    - .rails:rules:single-db
+    - .rails:rules:single-db-as-if-foss
 
 rspec integration pg14-as-if-foss single-db-ci-connection:
   extends:
     - rspec integration pg14-as-if-foss
     - .single-db-ci-connection-rspec
-    - .rails:rules:single-db-ci-connection
+    - .rails:rules:single-db-ci-connection-as-if-foss
 
 rspec system pg14-as-if-foss:
   extends:
@@ -635,13 +650,13 @@ rspec system pg14-as-if-foss single-db:
   extends:
     - rspec system pg14-as-if-foss
     - .single-db-rspec
-    - .rails:rules:single-db
+    - .rails:rules:single-db-as-if-foss
 
 rspec system pg14-as-if-foss single-db-ci-connection:
   extends:
     - rspec system pg14-as-if-foss
     - .single-db-ci-connection-rspec
-    - .rails:rules:single-db-ci-connection
+    - .rails:rules:single-db-ci-connection-as-if-foss
 
 rspec-ee migration pg14:
   extends:
@@ -1085,7 +1100,7 @@ rspec-ee system pg15 es8:
   needs: ["setup-test-env", "retrieve-tests-metadata", "compile-test-assets", "detect-tests"]
   script:
     - !reference [.base-script, script]
-    - rspec_fail_fast "${MATCHING_TESTS_PATH}" "--tag ~quarantine --tag ~zoekt"
+    - rspec_fail_fast "${MATCHING_TESTS_PATH}" "--fail-fast=${RSPEC_FAIL_FAST_THRESHOLD} --tag ~quarantine --tag ~zoekt"
 
 rspec fail-fast:
   extends:

.gitlab/ci/rails/rspec-foss-impact.gitlab-ci.yml.erb

@@ -39,7 +39,7 @@ dont-interrupt-me:
     RSPEC_TESTS_MAPPING_ENABLED: "true"
   script:
     - !reference [.base-script, script]
-    - rspec_paralellized_job "--tag ~quarantine --tag ~level:background_migration --tag ~zoekt"
+    - rspec_paralellized_job "--fail-fast=${RSPEC_FAIL_FAST_THRESHOLD} --tag ~quarantine --tag ~level:background_migration --tag ~zoekt"
   artifacts:
     expire_in: 7d
     paths:
@@ -54,7 +54,7 @@ rspec migration foss-impact:
 <% end %>
   script:
     - !reference [.base-script, script]
-    - rspec_paralellized_job "--tag ~quarantine --tag ~zoekt"
+    - rspec_paralellized_job "--fail-fast=${RSPEC_FAIL_FAST_THRESHOLD} --tag ~quarantine --tag ~zoekt"
 <% end %>
 
 <% if rspec_files_per_test_level[:background_migration][:files].size > 0 %>

.gitlab/ci/rails/shared.gitlab-ci.yml

@@ -24,9 +24,7 @@ include:
     # Only install knapsack after bundle install! Otherwise oddly some native
     # gems could not be found under some circumstance. No idea why, hours wasted.
     - run_timed_command "gem install knapsack --no-document"
-    - echo -e "\e[0Ksection_start:`date +%s`:gitaly-test-spawn[collapsed=true]\r\e[0KStarting Gitaly"
     - section_start "gitaly-test-spawn" "Spawning Gitaly"; scripts/gitaly-test-spawn; section_end "gitaly-test-spawn"  # Do not use 'bundle exec' here
-    - echo -e "\e[0Ksection_end:`date +%s`:gitaly-test-spawn\r\e[0K"
 
 .no-redis-cluster:
   variables:
@@ -74,12 +72,15 @@ include:
     # spec/lib, yet background migration tests are also sitting there,
     # and they should run on their own jobs so we don't need to run them
     # in unit tests again.
-    - rspec_paralellized_job "--tag ~quarantine --tag ~level:background_migration"
+    - rspec_paralellized_job "--fail-fast=${RSPEC_FAIL_FAST_THRESHOLD} --tag ~quarantine --tag ~level:background_migration"
   after_script:
     - echo -e "\e[0Ksection_start:`date +%s`:report_results_section[collapsed=true]\r\e[0KReport results"
     - |
       if [ "$CREATE_RAILS_TEST_FAILURE_ISSUES" == "true" ]; then
-        bundle exec relate-failure-issue --input-files "rspec/rspec-*.json" --system-log-files "log" --project "gitlab-org-sandbox/rails-test-failures" --token "${RAILS_TEST_FAILURES_PROJECT_TOKEN}";
+        bundle exec relate-failure-issue --input-files "rspec/rspec-*.json" --system-log-files "log" --project "gitlab-org/gitlab" --token "${TEST_FAILURES_PROJECT_TOKEN}";
+      fi
+      if [ "$CREATE_RAILS_SLOW_TEST_ISSUES" == "true" ]; then
+        bundle exec slow-test-issues --input-files "rspec/rspec-*.json" --project "gitlab-org-sandbox/rails-test-failures" --token "${RAILS_TEST_FAILURES_PROJECT_TOKEN}";
       fi
     - echo -e "\e[0Ksection_end:`date +%s`:report_results_section\r\e[0K"
 
@@ -105,7 +106,7 @@ include:
 .rspec-base-migration:
   script:
     - !reference [.base-script, script]
-    - rspec_paralellized_job "--tag ~quarantine --tag ~zoekt"
+    - rspec_paralellized_job "--fail-fast=${RSPEC_FAIL_FAST_THRESHOLD} --tag ~quarantine --tag ~zoekt"
   after_script:
     - !reference [.rspec-base, after_script]
 

.gitlab/ci/release-environments/main.gitlab-ci.yml

@@ -14,7 +14,7 @@ review-build-cng:
 review-deploy-env:
   allow_failure: true
   stage: deploy
-  needs: ["release-environments-build-cng"]
+  needs: ["review-build-cng"]
   variables:
     DEPLOY_ENV: deploy.env
   script: