Adds SentinelUsername and SentinelPassword fields to redis.Config and wires
them through to goredis.UniversalOptions.

In security-hardened deployments, Sentinel processes authenticate independently
from Redis data nodes. Previously, callers had no way to supply Sentinel-tier
credentials through the labkit client.

prometheus.DefBuckets (5ms–10s) are too coarse for Redis operations that
typically complete in under a millisecond.

This commit adds RedisDurationBuckets to v2/metrics/buckets.go and uses them
for the command_duration_seconds histogram in the redis metrics hook.

fix(v2/httpserver): synchronize Addr/ProbeAddr with Start writes

See merge request !504

Merged-by: Elliot Forbes <eforbes@gitlab.com>
Approved-by: Elliot Forbes <eforbes@gitlab.com>
Reviewed-by: GitLab Duo <gitlab-duo@gitlab.com>
Co-authored-by: Suleimi Ahamed <suleimiakarasuahmed@gmail.com>

Modifies the v2/redis integration tests to only run on changes to the
redis package and go.[mod|sum].

Modifies the v2/postgres integration test to only run on changes to the
postgres package and go.[mod|sum].

Always run integration tests on master branch

Previously, tasks.test would only run tests within the v1 module.

Previously, tasks.run-test would only run named tests within the v1 module.

Previously, tasts.tidy would only run `go mod tidy` for the v1 module

Previously, tasks.lint would only run golangci-lint for the files within
the v1 module.

feat(v2/redis): use sub-millisecond histogram buckets for command duration

See merge request !501

Merged-by: Bob Van Landuyt <bob@gitlab.com>
Approved-by: Bob Van Landuyt <bob@gitlab.com>
Reviewed-by: Bob Van Landuyt <bob@gitlab.com>
Reviewed-by: GitLab Duo <gitlab-duo@gitlab.com>
Co-authored-by: Luke Hollinda <lhollinda@gitlab.com>

ci: selectively run integration tests on file changes

See merge request !506

Merged-by: Matias Alvarez <malvarez@gitlab.com>
Approved-by: Matias Alvarez <malvarez@gitlab.com>
Reviewed-by: GitLab Duo <gitlab-duo@gitlab.com>
Co-authored-by: Luke Hollinda <lhollinda@gitlab.com>

feat(v2/redis): add SentinelUsername and SentinelPassword to Config

See merge request !500

Merged-by: Matias Alvarez <malvarez@gitlab.com>
Approved-by: Suleimi Ahmed <sahmed@gitlab.com>
Approved-by: Matias Alvarez <malvarez@gitlab.com>
Reviewed-by: GitLab Duo <gitlab-duo@gitlab.com>
Reviewed-by: Matias Alvarez <malvarez@gitlab.com>
Co-authored-by: Luke Hollinda <lhollinda@gitlab.com>

chore(mise): tasks to use dedicated scripts

See merge request !507

Merged-by: Matias Alvarez <malvarez@gitlab.com>
Approved-by: Matias Alvarez <malvarez@gitlab.com>
Co-authored-by: Luke Hollinda <lhollinda@gitlab.com>

This fixes two bugs with serializing Snowplow events, which resulted in
bad events when testing end-to-end with Snowplow Micro: stm not "ms
since epoch", se_va not BigDecimal.

Bug 1: stm is never populated due to a range-copy bug in
emitter.go:231-235

Event is a value copy of eventRows[i]. Assigning to event.SentTimestamp
mutates the copy and is discarded; the slice is unchanged. The empty
string then arrives at the collector as stm="", which fails the
atomic-schema parse to "ms since epoch".

Bug 2: structured-event fields are sent as empty strings on ue events
in event.go:36-40 — the se_* fields have no omitempty, so they're
always serialized.

The atomic schema expects se_va to be a BigDecimal (i.e. a numeric
string). Empty string fails parsing. For an unstructured event (e=ue),
all se_* fields should be absent.

TestEmitter_DoSend_PopulatesSentTimestampOnAllEvents previously captured
only the last request body and signalled on the first arrival, so when
the emitter's send loop fired between the two TrackEvent calls the test
inspected a single-event batch and failed
"\"1\" is not greater than or equal to \"2\"" under -race on CI.

Append every received event across all requests into a shared slice and
wait until the cumulative count reaches the expected total. The assertion
is now robust whether the emitter delivers all events in one batch or
splits them across multiple POSTs, and the production fix in 4f8d16eb is
still pinned because every observed event must carry a non-empty,
ms-since-epoch stm.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

feat(fields): Add the variant version for logging fields

See merge request !509

Merged-by: Luke Hollinda <lhollinda@gitlab.com>
Approved-by: Luke Hollinda <lhollinda@gitlab.com>
Co-authored-by: Matias Alvarez <malvarez@gitlab.com>

- Capture exit codes from both golangci-lint runs so a failure in one
  module does not prevent the other from completing or the reports from
  being merged
- In CI, generate a per-module code climate report and merge them into
  gl-code-quality-report.json, as artifacts.reports.codequality only
  accepts a single file

ci: golangci_lint job to use dedicated script

See merge request !508

Merged-by: Matias Alvarez <malvarez@gitlab.com>
Approved-by: Matias Alvarez <malvarez@gitlab.com>
Reviewed-by: GitLab Duo <gitlab-duo@gitlab.com>
Co-authored-by: Luke Hollinda <lhollinda@gitlab.com>

Previously, the CONTRIBUTING.md contained only the DCO/license agreement and
code of conduct; nothing about how to build, test, or contribute code.

This commit adds environment initialization, development instructions,
explains the multi-module pattern, and release process.

chore(CONTRIBUTING.md): developer instructions

See merge request !513

Merged-by: Matias Alvarez <malvarez@gitlab.com>
Approved-by: Matias Alvarez <malvarez@gitlab.com>
Reviewed-by: GitLab Duo <gitlab-duo@gitlab.com>
Reviewed-by: Matias Alvarez <malvarez@gitlab.com>
Co-authored-by: Luke Hollinda <lhollinda@gitlab.com>

The previous check only rejected an untyped nil interface, so a typed-nil
value passed as `EventContext` (e.g. `var c *MyContext = nil` or a typed-nil
`func`) would slip past the guard and panic on the subsequent
`ctx.Schema()` / `ctx.Data()` call.

Widen the guard to cover every nilable kind reachable through an interface
(pointer, map, channel, func, slice, interface). `reflect.Value.IsNil`
panics on non-nilable kinds, so the kind check stays first; value-typed
contexts like `GitLabStandardContext` (Kind == Struct) fall through.

Add a table-driven regression test exercising both pointer and func typed
nils, and tighten the untyped-nil assertion to "is nil" so it can't
accidentally pass against the typed-nil branch.

The previous `GitLabStandardContext.Validate` checked required Environment,
the Realm/DeploymentType enums, and the UserID type. The gitlab_standard
iglu schema 1-1-8 enforces more: every integer ID caps at 2^31-1 with a
minimum of 0, and around twenty string fields have maxLength constraints
in three tiers (32, 64, 255). Values that violate these constraints
compile but get rejected by the Snowplow enricher at ingest time as bad
events, making the failure invisible to the caller.

Add three helpers covering the gaps:

- `validateStringLengths` checks every string field against its tier.
- `validateIntegerRanges` checks every integer ID and the elements of
  `FeatureEnabledByNamespaceIDs` against `[0, 2^31-1]`.
- `validateUserID` checks string length and integer range depending on
  the dynamic type (the schema permits both).

Error messages use lowercase field names to match Go convention and the
project's custom instructions on error formatting.

Test coverage: at-limit (valid) and over-limit (invalid) cases for each
tier, integer boundaries (0, MaxInt32, MaxInt32+1), per-element index in
the array field, and `uint`-platform-width coverage in the user_id
bounds tests.

- Remove `GitLabStandardContext.AsEventContext` and its dedicated test.
  The method was a convenience wrapper around the no-op conversion to
  `EventContext`; since the type already satisfies the interface
  directly, the method added a permanent backward-compatibility
  obligation for no functional gain.
- Convert the realm/deployment_type validation tests from
  `map[string]bool` to slice-of-anonymous-structs with a `name` field,
  matching the project's standard table-test pattern and producing
  deterministic subtest order.
- Rename `TestTrackEvent_BackwardCompatible` to
  `TestTrackEvent_OmitsContextEncoded` so the test name describes the
  unique invariant it pins (no `cx` field) rather than describing what
  the broader `TestTrackEvent_Success` already covers.
- Add `TestTrackEventWithContexts_AcceptsContextWithoutValidate` so the
  optional-`Validate` branch of `TrackEventWithContexts` is exercised
  in isolation (the existing tests always paired
  `fakeContext` with a `GitLabStandardContext`).

- Package doc:
  - Fix batch-size statement: emitter sends up to 100 events per batch
    (`sendingAmount = 100` in emitter.go), not 5. Two locations updated.
  - Make the `ArtifactRegistryEventContext` example self-contained by
    showing the minimal `Schema()` and `Data()` implementation a caller
    needs. Drop the orphan `ARNamespaceID` field that wasn't shown in
    the type definition.
  - Fix a pre-existing missing closing quote on `"global-user-789"`.
  - Update the Custom Contexts section to reflect the broader
    constraints `Validate` now enforces (string maxLengths and integer
    ranges).
- `GitLabStandardContext` godoc:
  - Reword the pointer-fields note so it doesn't read as exhaustive
    (currently only `IsGitLabTeamMember`).
  - Replace the "set to string or int/int64 only" guidance for `UserID`
    with the actual accepted set (nil, string, every signed/unsigned
    integer width).
  - Drop the reference to the removed `AsEventContext` method and
    note that the type satisfies `EventContext` directly.
- `stringMax*` constant comment rewritten to plural so it matches what
  the block actually declares.
- `encodeContexts` godoc no longer claims it rejects empty input;
  callers are guarded upstream by `TrackEventWithContexts`.

Define `type Realm string` and `type DeploymentType string` so the Realm
and DeploymentType fields of `GitLabStandardContext` reject free-form
string assignments at the call site. With the previous untyped string
constants, `ctx.Realm = "anyhing"` compiled and only surfaced at runtime
through `Validate` or at the Snowplow enricher.

The runtime enum check in `Validate` is kept so explicit casts
(`Realm("typo")`) and values coming from external sources are still
caught.

Wire format is unchanged: both types have an underlying `string`, so the
JSON output is identical.

Replace `UserID any` with a sealed-interface tagged union (`UserID`,
`UserIDString`, `UserIDInt`) so the two variants the gitlab_standard
schema permits are enforced at compile time. The previous `any` field
let any concrete type through and relied entirely on a runtime type
switch in `Validate` to reject invalid ones.

The unexported `isUserID()` marker prevents callers from defining
additional variants, so `validateUserID` reduces from ~40 lines of
per-integer-width cases to a three-case switch.

Wire format is preserved: `UserIDString` has underlying type `string`
and marshals as a JSON string, `UserIDInt` has underlying type `int64`
and marshals as a JSON number. A new `_UserID_JSONShape` test pins
this so a future change to the underlying types or a custom
`MarshalJSON` regression would be caught.

Also document the schema-versioning policy on `GitLabStandardContext`:
additive schema revisions update the type in place; breaking revisions
introduce a new type (e.g. `GitLabStandardContextV2`) so existing
callers continue to compile.

Pass over the package's doc comments to remove restating-the-obvious,
collapse multi-paragraph explanations into single tighter paragraphs, and
fix a factual error: Validate's previous docstring said the constraints are
"enforced at compile time", but Validate runs at call time.

No behavior change.

JSON Schema's `maxLength` is defined in unicode code points, but `len()`
on a Go string returns bytes. Fields likely to contain non-ASCII text
(`user_type`, `feature_category`, `model_name`, etc.) were falsely
rejected when the byte count exceeded the limit but the code-point count
did not. The Snowplow collector's iglu validator is the authority and
would accept those payloads.

Switch `validateStringLengths` and `validateUserID` to
`utf8.RuneCountInString`. Add regression cases using `strings.Repeat("中", N)`
to pin the behavior at the boundary for both code paths.

The prior wording implied `Data()` itself is base64-encoded. In fact
the returned value is wrapped in `{schema, data}`, placed in a contexts
envelope, JSON-marshalled, and then base64-encoded as a whole. Spell
that out so implementers don't think their payload must be
base64-friendly, and add the JSON-marshalable contract.

TrackEvent delegates to TrackEventWithContexts, which also returns
marshal failures and emitter errors beyond ErrEmitterStopped. The
prior wording ("eventName is empty or the tracker is stopped") read
as exhaustive and could lead callers to handle only those two cases.
Point at TrackEventWithContexts for the full contract.

The trailing `return nil` after the type switch was unreachable today
(UserID is sealed to nil/UserIDString/UserIDInt) but a future
contributor adding a fourth variant without updating the switch would
silently bypass validation. Replace the dead-code return with an
explicit `default` returning an "unhandled variant" error so missed
cases fail loudly.

The omitempty rationale listed `ue_px` and `se_*` but skipped `cx`,
which is also omitempty and is shared by both event types
(unstructured events with custom contexts and structured billing
events both populate it). Adding the sentence so a maintainer doesn't
remove omitempty under the assumption that cx is always populated.

The example defined ArtifactRegistryEventContext inline then
instantiated it as myService.ArtifactRegistryEventContext{}, implying
a separate package. Drop the prefix so the inline definition and
usage are consistent.

Also change the standard-context example's InstanceID value from
"unique-instance-id" — easily confused with the separate
UniqueInstanceID field — to a more representative placeholder.

The iglu schema version (1-1-8) was repeated in six inline comments
across this file. When the schema bumps to an additive revision
(e.g. 1-1-9), those comments go stale silently — only the
SchemaGitLabStandard constant in self_describing_json.go actually
needs to change.

Point every comment at the constant instead, so there is a single
source of truth.

The production typed-nil guard in tracker.go switches on six nilable
reflect.Kind values; the test only exercised two (pointer and func).
Add named slice, map, and chan EventContext implementations so the
remaining reachable kinds are pinned — a regression that drops any
of these from the switch panics instead of erroring, and the test
should catch that.

(reflect.Interface is in the production case list but is not reachable
for EventContext implementers via reflect.ValueOf, so no test is added
for it.)

The pre-existing string-length test covered one representative field
per tier (32, 64, 255). A regression that moved e.g. \`source\` to the
long tier, or that dropped a field from the validateStringLengths
table, would not be caught.

Add an exhaustive table-driven test setting each of the 21 fields to
tier + 1 runes and asserting Validate rejects it naming that field.

Validate compares Realm and DeploymentType values against the package
constants themselves, so a typo like `RealmDedicated = "Dedicated"`
would still pass Validate while breaking downstream Snowflake queries
that read `realm = 'dedicated'`. Add tests that marshal a context for
every constant and assert the JSON value matches the iglu schema's
exact literal.

The encodeContexts marshal-failure branch returns a wrapped error
when a context's Data() is not JSON-marshalable, and the caller in
TrackEventWithContexts re-wraps it as "failed to encode custom
contexts". Neither was exercised by an existing test, so a regression
that dropped the error wrapping or that proceeded to enqueue the
event despite a marshal failure would go unnoticed.

Use a fakeContext whose Data() is a chan int (not marshalable) and
assert the error message and that no event is queued.

The existing validation-failure and typed-nil tests pass a single
context, so they would not catch a regression that hard-codes
\`index 0\` or drops the schema URI from the error message.

Add two multi-context tests:
- A trailing failingContext: assert the error contains \`index 1\`,
  the offending schema URI, and the underlying validation error.
- A trailing typed-nil pointer: assert the error contains
  \`index 1\` and \`typed-nil ptr\`.

Reflect the actual implementation from gitlab!237869 and
gitlab!237907:

- Storage: settings live in a `logging_settings` JSONB column using
  `jsonb_accessor`, not separate columns
- Feature flag: gated behind `logging_field_variant_versioning` (WIP)
- Validation rules: no downgrade, dual-emit > schema version, no zero
- API: exposed via PUT /api/v4/application/settings
- Updated ServiceMapping status and added implementation references

feat: update field constants (labkit-spec v1.0)

See merge request !516

Merged-by: Matias Alvarez <malvarez@gitlab.com>
Approved-by: Matias Alvarez <malvarez@gitlab.com>
Co-authored-by: service-platforms-labkit <service-platforms-labkit@gitlab.com>

feat(infrastructure): Add config option for Redis

See merge request !511

Merged-by: Elliot Forbes <eforbes@gitlab.com>
Approved-by: Elliot Forbes <eforbes@gitlab.com>
Reviewed-by: Florian Forster <fforster@gitlab.com>
Reviewed-by: GitLab Duo <gitlab-duo@gitlab.com>
Co-authored-by: Roger Makram <rmakram@gitlab.com>

docs(fields): Add logging field variant versioning documentation

See merge request !514

Merged-by: Matias Alvarez <malvarez@gitlab.com>
Approved-by: Luke Hollinda <lhollinda@gitlab.com>
Reviewed-by: GitLab Duo <gitlab-duo@gitlab.com>
Reviewed-by: Matias Alvarez <malvarez@gitlab.com>

Introduces first-class support for routing application traffic through a
connection pool (e.g. PgBouncer) while allowing migration clients to
bypass the pool and connect directly to the primary.

New option: `WithConnectionPool(bool)`
---------------------------------------

`postgres.New` now accepts `WithConnectionPool(bool)`, defaulting to
`true`. Pass `WithConnectionPool(false)` to explicitly disable pool
routing — the intended usage for migration clients, which must bypass
PgBouncer to avoid statement-timeout kills on long-running queries.

Host and port resolution
------------------------

When the connection pool is enabled, host and port resolution follows a
priority chain before falling back to the primary address:

  pool_host config → pool_host secret → host config → host secret
  pool_port config → pool_port secret → port config → port secret

When the connection pool is disabled, `pool_host`/`pool_port` are
ignored entirely and the chain collapses to the primary address. This
means pooler-less deployments (e.g. Caproni) work without any
configuration change.

CrunchyData projection preset
------------------------------

The CrunchyData projection preset is extended with `pgbouncer-host` and
`pgbouncer-port` Secret key mappings. When PgBouncer is enabled in a
CrunchyData cluster, those keys are present in the pguser Secret and
will be picked up automatically — no explicit Helm values required.
Deployments without a pooler fall through to the existing `host`/`port`
keys.

Pool bypass for migration clients
----------------------------------

When `WithConnectionPool(false)` is set, `maxConns` is capped at 1.
This prevents migration clients from opening a pool of direct primary
connections, which would defeat the purpose of bypassing PgBouncer.

Bumps Fairway dependency to pick up `pool_host`/`pool_port` fields on
the `PostgreSQL` proto message (runway/team#920, Fairway side).

Issue: gitlab-com/gl-infra/platform/runway/team#920

chore(deps): update registry.gitlab.com/gitlab-com/gl-infra/common-ci-tasks-images/golang-fips docker tag to v1.26.4

Merge branch 'renovate/registry.gitlab.com-gitlab-com-gl-infra-common-ci-tasks-images-golang-fips-1.x' into 'master'

chore(deps): update registry.gitlab.com/gitlab-com/gl-infra/common-ci-tasks-images/golang-fips docker tag to v1.26.4

See merge request !518

Merged-by: Matias Alvarez <malvarez@gitlab.com>
Approved-by: Matias Alvarez <malvarez@gitlab.com>
Co-authored-by: GitLab Renovate Bot <ops-contact+gl-common-ci-tasks-self-renovate@gitlab.com>

feat(postgres): Add connection pool support via `WithConnectionPool`.

See merge request !515

Merged-by: Elliot Forbes <eforbes@gitlab.com>
Approved-by: Elliot Forbes <eforbes@gitlab.com>
Reviewed-by: Florian Forster <fforster@gitlab.com>
Co-authored-by: Florian Forster <fforster@gitlab.com>

feat: update field constants (labkit-spec v1.0)

See merge request !520

Merged-by: Matias Alvarez <malvarez@gitlab.com>
Approved-by: Matias Alvarez <malvarez@gitlab.com>
Co-authored-by: service-platforms-labkit <service-platforms-labkit@gitlab.com>

Relates to #117

feat(v2/events/snowplow) add custom context support to v2 Snowplow

See merge request !498

Merged-by: Elliot Forbes <eforbes@gitlab.com>
Approved-by: Niko Belokolodov <nbelokolodov@gitlab.com>
Approved-by: Elliot Forbes <eforbes@gitlab.com>
Reviewed-by: João Pereira <jpereira@gitlab.com>
Reviewed-by: GitLab Duo <gitlab-duo@gitlab.com>
Reviewed-by: Elliot Forbes <eforbes@gitlab.com>
Co-authored-by: João Pereira <jpereira@gitlab.com>
Co-authored-by: Piotr Skorupa <pskorupa@gitlab.com>

chore(CODEOWNERS): remove deactivated accounts

See merge request !522

Merged-by: Matias Alvarez <malvarez@gitlab.com>
Approved-by: Matias Alvarez <malvarez@gitlab.com>
Co-authored-by: Luke Hollinda <lhollinda@gitlab.com>

Add Go 1.26 FIPS to CI matrix

See merge request !521

Merged-by: Matias Alvarez <malvarez@gitlab.com>
Approved-by: Matias Alvarez <malvarez@gitlab.com>
Reviewed-by: GitLab Duo <gitlab-duo@gitlab.com>
Co-authored-by: Stan Hu <stanhu@gmail.com>

Aligns with the fairway proto change that moved PostgreSQLFormat off
PostgreSQLSecret onto PostgreSQL itself, and adds support for the new
CLOUDSQL_IAM format introduced for Cloud SQL Auth Proxy with
--auto-iam-authn.

When format is CLOUDSQL_IAM:

- The Secrets provider is not required (no Kubernetes Secret is mounted).
- dsn() short-circuits to cloudsqlIAMDSN(), which builds a passwordless
  postgres:// URL from PostgreSQL.host/port/database_name/username.
- pool_host and pool_port are honored when connection pooling is enabled
  (future-proofing; today CloudSQL Auth Proxy exposes a single endpoint).
- Defense-in-depth: each required field is checked for empty/zero and
  reports ErrMissingConfigField on violation, even though the fairway CEL
  rules already enforce presence at proto-validate time.

projection() now reads format from PostgreSQL.format instead of
secret_ref.format (the field's new home post-fairway refactor).

feat(v2/postgres): support CLOUDSQL_IAM passwordless DSN

See merge request !523

Merged-by: Elliot Forbes <eforbes@gitlab.com>
Approved-by: Elliot Forbes <eforbes@gitlab.com>
Reviewed-by: GitLab Duo <gitlab-duo@gitlab.com>
Co-authored-by: s.abbasi <sabbasi@gitlab.com>

Follow-up to !523. Aligns with the fairway proto change that drops the
CLOUDSQL_IAM enum value and treats absence of secret_ref as an
unauthenticated connection.

- newPSQLFormat now dispatches on secret_ref presence, not format.
- Renames cloudSQLIAMFormat to noSecretFormat to reflect the generic
  semantics (any passwordless topology — auth proxy, mTLS, no auth).
- projectionFormat.projection() reads format from
  PostgreSQL.SecretRef.Format (the field's home post-fairway refactor).
- Test cases renamed from cloudsql_iam_* to no_secret_*; Format moved
  from PostgreSQL to PostgreSQLSecret in the remaining cases.

Bumps fairway dep.

chore(CODEOWNERS): Remove deactivated account

See merge request !525

Merged-by: Matias Alvarez <malvarez@gitlab.com>
Approved-by: Luke Hollinda <lhollinda@gitlab.com>
Reviewed-by: Matias Alvarez <malvarez@gitlab.com>

refactor(v2/postgres): dispatch on secret_ref presence, not format

See merge request !526

Merged-by: Luke Hollinda <lhollinda@gitlab.com>
Approved-by: Luke Hollinda <lhollinda@gitlab.com>
Co-authored-by: s.abbasi <sabbasi@gitlab.com>

chore(deps): update dependency shfmt to v3.13

See merge request !534

Merged-by: Bob Van Landuyt <bob@gitlab.com>
Approved-by: Bob Van Landuyt <bob@gitlab.com>
Co-authored-by: GitLab Renovate Bot <ops-contact+gl-common-ci-tasks-self-renovate@gitlab.com>

chore(deps): update dependency pre-commit to v4.6.0

See merge request !532

Merged-by: Bob Van Landuyt <bob@gitlab.com>
Approved-by: Bob Van Landuyt <bob@gitlab.com>
Co-authored-by: GitLab Renovate Bot <ops-contact+gl-common-ci-tasks-self-renovate@gitlab.com>

fix(deps): update module github.com/getsentry/sentry-go to v0.46.2

See merge request !536

Merged-by: João Pereira <jpereira@gitlab.com>
Approved-by: João Pereira <jpereira@gitlab.com>
Co-authored-by: GitLab Renovate Bot <ops-contact+gl-common-ci-tasks-self-renovate@gitlab.com>