Remove group_access_tokens_premium_offer feature flag

What does this MR do and why?

This removes the feature flag group_access_tokens_premium_offer from the codebase. The flag gated a Premium upgrade offer card on the group access tokens settings page, shown to Free-tier group owners who cannot create group access tokens.

The flag was enabled on GitLab.com on 2026-09-10 and has run there for several days with no reported incidents. There is no user-facing behaviour change on GitLab.com, since the flag was already fully enabled there. Self-managed and other non-SaaS instances are unaffected, since the card stays gated on Gitlab::Saas.feature_available?(:gitlab_com_subscriptions).

Changes

  • ee/app/helpers/ee/access_tokens_helper.rb: removed the Feature.enabled?(:group_access_tokens_premium_offer, group) guard from show_group_access_tokens_premium_offer?. All other conditions are unchanged (user cannot already create tokens, instance is SaaS, user can read billing on the root ancestor, root namespace plan is Free).
  • Deleted ee/config/feature_flags/gitlab_com_derisk/group_access_tokens_premium_offer.yml.
  • ee/spec/helpers/ee/access_tokens_helper_spec.rb: dropped the flag stub and the "returns false when the feature flag is disabled" example.
  • ee/spec/requests/groups/settings/access_tokens_controller_spec.rb: replaced the flag-on/flag-off contexts. The card-rendering example now runs unconditionally. The example covering the legacy "Group access token creation is disabled in this group." notice now uses stub_saas_features(gitlab_com_subscriptions: false) instead of the flag being off, so that view branch keeps coverage.

Testing

  • ee/spec/helpers/ee/access_tokens_helper_spec.rb was run locally and passes.
  • ee/spec/requests/groups/settings/access_tokens_controller_spec.rb could not be run locally: the local checkout lacks compiled frontend assets, so the full page layout fails to render without them. Left to CI.

Merge request reports

Loading
Loading