debian-mirror-gitlab/data/removals/14_0/remove_dast_env_variables.yml

- name: "DAST environment variable renaming and removal"
  removal_date: "2021-06-22"
  removal_milestone: "14.0"
  reporter: derekferguson
  breaking_change: true
  body: |
    GitLab 13.8 renamed multiple environment variables to support their broader usage in different workflows. In GitLab 14.0, the old variables have been permanently removed and will no longer work. Any configurations using these variables must be updated to the new variable names. Any scans using these variables in GitLab 14.0 and later will fail to be configured correctly. These variables are:

    - `DAST_AUTH_EXCLUDE_URLS` becomes `DAST_EXCLUDE_URLS`.
    - `AUTH_EXCLUDE_URLS` becomes `DAST_EXCLUDE_URLS`.
    - `AUTH_USERNAME` becomes `DAST_USERNAME`.
    - `AUTH_PASSWORD` becomes `DAST_PASSWORD`.
    - `AUTH_USERNAME_FIELD` becomes `DAST_USERNAME_FIELD`.
    - `AUTH_PASSWORD_FIELD` becomes `DAST_PASSWORD_FIELD`.
    - `DAST_ZAP_USE_AJAX_SPIDER` will now be `DAST_USE_AJAX_SPIDER`.
    - `DAST_FULL_SCAN_DOMAIN_VALIDATION_REQUIRED` will be removed, since the feature is being removed.
New upstream version 14.7.4+ds1 2022-03-02 08:16:31 +05:30			`- name: "DAST environment variable renaming and removal"`
			`removal_date: "2021-06-22"`
			`removal_milestone: "14.0"`
			`reporter: derekferguson`
New upstream version 14.8.5+ds1 2022-04-04 11:22:00 +05:30			`breaking_change: true`
New upstream version 14.7.4+ds1 2022-03-02 08:16:31 +05:30			`body: \|`
			`GitLab 13.8 renamed multiple environment variables to support their broader usage in different workflows. In GitLab 14.0, the old variables have been permanently removed and will no longer work. Any configurations using these variables must be updated to the new variable names. Any scans using these variables in GitLab 14.0 and later will fail to be configured correctly. These variables are:`

			- `DAST_AUTH_EXCLUDE_URLS` becomes `DAST_EXCLUDE_URLS`.
			- `AUTH_EXCLUDE_URLS` becomes `DAST_EXCLUDE_URLS`.
			- `AUTH_USERNAME` becomes `DAST_USERNAME`.
			- `AUTH_PASSWORD` becomes `DAST_PASSWORD`.
			- `AUTH_USERNAME_FIELD` becomes `DAST_USERNAME_FIELD`.
			- `AUTH_PASSWORD_FIELD` becomes `DAST_PASSWORD_FIELD`.
			- `DAST_ZAP_USE_AJAX_SPIDER` will now be `DAST_USE_AJAX_SPIDER`.
			- `DAST_FULL_SCAN_DOMAIN_VALIDATION_REQUIRED` will be removed, since the feature is being removed.