Merge tag 'debian/15.9.8+ds1-1' into bookworm-fasttrack

gitlab Debian release 15.9.8+ds1-1

.csscomb.json

@@ -1,20 +0,0 @@
-{
-  "exclude": [
-    "app/assets/stylesheets/framework/tw_bootstrap_variables.scss",
-    "app/assets/stylesheets/framework/fonts.scss"
-  ],
-  "always-semicolon": true,
-  "color-case": "lower",
-  "block-indent": "  ",
-  "color-shorthand": false,
-  "element-case": "lower",
-  "space-before-colon": "",
-  "space-after-colon": " ",
-  "space-before-combinator": " ",
-  "space-after-combinator": " ",
-  "space-between-declarations": "\n",
-  "space-before-opening-brace": " ",
-  "space-after-opening-brace": "\n",
-  "space-before-closing-brace": "\n",
-  "unitless-zero": true
-}

.gitlab-ci.yml

@@ -1,5 +1,6 @@
 stages:
   - sync
+  - preflight
   - prepare
   - build-images
   - fixtures
@@ -11,6 +12,7 @@ stages:
   - post-qa
   - pages
   - notify
+  - release-environments
 
 # always use `gitlab-org` runners, however
 # in cases where jobs require Docker-in-Docker, the job
@@ -24,13 +26,30 @@ default:
   # Default job timeout set to 90m https://gitlab.com/gitlab-com/gl-infra/infrastructure/-/issues/10520
   timeout: 90m
 
+.ruby3-variables: &ruby3-variables
+  RUBY_VERSION: "3.0"
+  OMNIBUS_GITLAB_RUBY3_BUILD: "true"
+  OMNIBUS_GITLAB_CACHE_EDITION: "GITLAB_RUBY3"
+
+.ruby2-variables: &ruby2-variables
+  RUBY_VERSION: "2.7"
+  OMNIBUS_GITLAB_RUBY2_BUILD: "true"
+  OMNIBUS_GITLAB_CACHE_EDITION: "GITLAB_RUBY2"
+
+.default-branch-incident-variables: &default-branch-incident-variables
+  CREATE_INCIDENT_FOR_PIPELINE_FAILURE: "true"
+  NOTIFY_PIPELINE_FAILURE_CHANNEL: "master-broken"
+  BROKEN_BRANCH_INCIDENTS_PROJECT: "gitlab-org/quality/engineering-productivity/master-broken-incidents"
+  BROKEN_BRANCH_INCIDENTS_PROJECT_TOKEN: "${BROKEN_MASTER_INCIDENTS_PROJECT_TOKEN}"
+
 workflow:
   name: '$PIPELINE_NAME'
   rules:
     # If `$FORCE_GITLAB_CI` is set, create a pipeline.
     - if: '$FORCE_GITLAB_CI'
       variables:
-        RUBY_VERSION: "3.0"
+        <<: *ruby2-variables
+        PIPELINE_NAME: 'Ruby 2 forced pipeline'
     # As part of the process of creating RCs automatically, we update stable
     # branches with the changes of the most recent production deployment. The
     # merge requests used for this merge a branch release-tools/X into a stable
@@ -41,80 +60,74 @@ workflow:
     # For merge requests running exclusively in Ruby 2.7
     - if: '$CI_MERGE_REQUEST_LABELS =~ /pipeline:run-in-ruby2/'
       variables:
-        RUBY_VERSION: "2.7"
+        <<: *ruby2-variables
         PIPELINE_NAME: 'Ruby 2 $CI_MERGE_REQUEST_EVENT_TYPE MR pipeline'
+    - if: '$CI_MERGE_REQUEST_LABELS =~ /Community contribution/'
+      variables:
+        <<: *ruby2-variables
+        GITLAB_DEPENDENCY_PROXY_ADDRESS: ""
+        PIPELINE_NAME: 'Ruby 2 $CI_MERGE_REQUEST_EVENT_TYPE MR pipeline (community contribution)'
     # For (detached) merge request pipelines.
     - if: '$CI_MERGE_REQUEST_IID'
       variables:
-        RUBY_VERSION: "3.0"
+        <<: *ruby2-variables
-        OMNIBUS_GITLAB_RUBY3_BUILD: "true"
+        PIPELINE_NAME: 'Ruby 2 $CI_MERGE_REQUEST_EVENT_TYPE MR pipeline'
-        OMNIBUS_GITLAB_CACHE_EDITION: "GITLAB_RUBY3"
-        PIPELINE_NAME: 'Ruby 3 $CI_MERGE_REQUEST_EVENT_TYPE MR pipeline'
     # For the scheduled pipelines, we set specific variables.
     - if: '$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH && $CI_PIPELINE_SOURCE == "schedule"'
       variables:
-        RUBY_VERSION: "3.0"
+        <<: *ruby3-variables
-        OMNIBUS_GITLAB_RUBY3_BUILD: "true"
+        <<: *default-branch-incident-variables
-        OMNIBUS_GITLAB_CACHE_EDITION: "GITLAB_RUBY3"
         CRYSTALBALL: "true"
-        CREATE_INCIDENT_FOR_PIPELINE_FAILURE: "true"
+        PIPELINE_NAME: 'Scheduled Ruby 3 $CI_COMMIT_BRANCH branch pipeline'
-        NOTIFY_PIPELINE_FAILURE_CHANNEL: "master-broken"
-        BROKEN_BRANCH_INCIDENTS_PROJECT: "gitlab-org/quality/engineering-productivity/master-broken-incidents"
-        BROKEN_BRANCH_INCIDENTS_PROJECT_TOKEN: "${BROKEN_MASTER_INCIDENTS_PROJECT_TOKEN}"
-        PIPELINE_NAME: 'Scheduled $CI_COMMIT_BRANCH pipeline'
     # Run pipelines for ruby2 branch
     - if: '$CI_COMMIT_BRANCH == "ruby2" && $CI_PIPELINE_SOURCE == "schedule"'
       variables:
-        RUBY_VERSION: "2.7"
+        <<: *ruby2-variables
         NOTIFY_PIPELINE_FAILURE_CHANNEL: "f_ruby3"
-        PIPELINE_NAME: 'Scheduled ruby 2 pipeline'
+        PIPELINE_NAME: 'Scheduled Ruby 2 $CI_COMMIT_BRANCH branch pipeline'
     # This work around https://gitlab.com/gitlab-org/gitlab/-/issues/332411 whichs prevents usage of dependency proxy
     # when pipeline is triggered by a project access token.
     - if: '$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH && $GITLAB_USER_LOGIN =~ /project_\d+_bot\d*/'
       variables:
-        RUBY_VERSION: "3.0"
+        <<: *ruby3-variables
-        OMNIBUS_GITLAB_RUBY3_BUILD: "true"
+        <<: *default-branch-incident-variables
-        OMNIBUS_GITLAB_CACHE_EDITION: "GITLAB_RUBY3"
         GITLAB_DEPENDENCY_PROXY_ADDRESS: ""
-        CREATE_INCIDENT_FOR_PIPELINE_FAILURE: "true"
+        PIPELINE_NAME: 'Ruby 3 $CI_COMMIT_BRANCH branch pipeline (triggered by a project token)'
-        NOTIFY_PIPELINE_FAILURE_CHANNEL: "master-broken"
-        BROKEN_BRANCH_INCIDENTS_PROJECT: "gitlab-org/quality/engineering-productivity/master-broken-incidents"
-        BROKEN_BRANCH_INCIDENTS_PROJECT_TOKEN: "${BROKEN_MASTER_INCIDENTS_PROJECT_TOKEN}"
     # For `$CI_DEFAULT_BRANCH` branch, create a pipeline (this includes on schedules, pushes, merges, etc.).
     - if: '$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH'
       variables:
-        RUBY_VERSION: "3.0"
+        <<: *ruby3-variables
-        OMNIBUS_GITLAB_RUBY3_BUILD: "true"
+        <<: *default-branch-incident-variables
-        OMNIBUS_GITLAB_CACHE_EDITION: "GITLAB_RUBY3"
+        PIPELINE_NAME: 'Ruby 3 $CI_COMMIT_BRANCH branch pipeline'
-        CREATE_INCIDENT_FOR_PIPELINE_FAILURE: "true"
-        NOTIFY_PIPELINE_FAILURE_CHANNEL: "master-broken"
-        BROKEN_BRANCH_INCIDENTS_PROJECT: "gitlab-org/quality/engineering-productivity/master-broken-incidents"
-        BROKEN_BRANCH_INCIDENTS_PROJECT_TOKEN: "${BROKEN_MASTER_INCIDENTS_PROJECT_TOKEN}"
     # For tags, create a pipeline.
     - if: '$CI_COMMIT_TAG'
       variables:
-        RUBY_VERSION: "2.7"
+        <<: *ruby2-variables
+        PIPELINE_NAME: 'Ruby 2 $CI_COMMIT_TAG tag pipeline'
     # If `$GITLAB_INTERNAL` isn't set, don't create a pipeline.
     - if: '$GITLAB_INTERNAL == null'
       when: never
     # For stable, auto-deploy, and security branches, create a pipeline.
     - if: '$CI_COMMIT_BRANCH =~ /^[\d-]+-stable(-ee)?$/'
       variables:
-        RUBY_VERSION: "2.7"
+        <<: *ruby2-variables
         NOTIFY_PIPELINE_FAILURE_CHANNEL: "releases"
+        PIPELINE_NAME: 'Ruby 2 $CI_COMMIT_BRANCH branch pipeline'
         CREATE_INCIDENT_FOR_PIPELINE_FAILURE: "true"
         BROKEN_BRANCH_INCIDENTS_PROJECT: "gitlab-org/release/tasks"
         BROKEN_BRANCH_INCIDENTS_PROJECT_TOKEN: "${BROKEN_STABLE_INCIDENTS_PROJECT_TOKEN}"
     - if: '$CI_COMMIT_BRANCH =~ /^\d+-\d+-auto-deploy-\d+$/'
       variables:
-        RUBY_VERSION: "2.7"
+        <<: *ruby2-variables
+        PIPELINE_NAME: 'Ruby 2 $CI_COMMIT_BRANCH branch pipeline'
     - if: '$CI_COMMIT_BRANCH =~ /^security\//'
       variables:
-        RUBY_VERSION: "2.7"
+        <<: *ruby2-variables
+        PIPELINE_NAME: 'Ruby 2 $CI_COMMIT_BRANCH branch pipeline'
 
 variables:
   PG_VERSION: "12"
-  DEFAULT_CI_IMAGE: "${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images/debian-${DEBIAN_VERSION}-ruby-${RUBY_VERSION}.patched-golang-${GO_VERSION}-node-16.14-postgresql-${PG_VERSION}:rubygems-3.2-git-2.36-lfs-2.9-chrome-${CHROME_VERSION}-yarn-1.22-graphicsmagick-1.3.36"
+  DEFAULT_CI_IMAGE: "${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images/debian-${DEBIAN_VERSION}-ruby-${RUBY_VERSION}.patched-golang-${GO_VERSION}-rust-${RUST_VERSION}-node-16.14-postgresql-${PG_VERSION}:rubygems-3.2-git-2.36-lfs-2.9-chrome-${CHROME_VERSION}-yarn-1.22-graphicsmagick-1.3.36"
   # We set $GITLAB_DEPENDENCY_PROXY to another variable (since it's set at the group level and has higher precedence than .gitlab-ci.yml)
   # so that we can override $GITLAB_DEPENDENCY_PROXY_ADDRESS in workflow rules.
   GITLAB_DEPENDENCY_PROXY_ADDRESS: "${GITLAB_DEPENDENCY_PROXY}"
@@ -131,10 +144,11 @@ variables:
   GIT_SUBMODULE_STRATEGY: "none"
   GET_SOURCES_ATTEMPTS: "3"
   DEBIAN_VERSION: "bullseye"
-  CHROME_VERSION: "106"
+  CHROME_VERSION: "109"
   DOCKER_VERSION: "20.10.14"
   RUBY_VERSION: "2.7"
   GO_VERSION: "1.18"
+  RUST_VERSION: "1.65"
 
   FLAKY_RSPEC_SUITE_REPORT_PATH: rspec/flaky/report-suite.json
   FRONTEND_FIXTURES_MAPPING_PATH: crystalball/frontend_fixtures_mapping.json
@@ -146,8 +160,9 @@ variables:
   RSPEC_FOSS_IMPACT_PIPELINE_YML: rspec-foss-impact-pipeline.yml
   RSPEC_LAST_RUN_RESULTS_FILE: rspec/rspec_last_run_results.txt
   RSPEC_MATCHING_JS_FILES_PATH: rspec/js_matching_files.txt
-  RSPEC_MATCHING_TESTS_FOSS_PATH: rspec/matching_tests-foss.txt
   RSPEC_MATCHING_TESTS_PATH: rspec/matching_tests.txt
+  RSPEC_MATCHING_TESTS_FOSS_PATH: rspec/matching_tests-foss.txt
+  RSPEC_MATCHING_TESTS_EE_PATH: rspec/matching_tests-ee.txt
   RSPEC_PACKED_TESTS_MAPPING_PATH: crystalball/packed-mapping.json
   RSPEC_PROFILING_FOLDER_PATH: rspec/profiling
   RSPEC_TESTS_MAPPING_PATH: crystalball/mapping.json
@@ -156,10 +171,11 @@ variables:
 
   ES_JAVA_OPTS: "-Xms256m -Xmx256m"
   ELASTIC_URL: "http://elastic:changeme@elasticsearch:9200"
+  BUNDLER_CHECKSUM_VERIFICATION_OPT_IN: "1"
   CACHE_CLASSES: "true"
   CHECK_PRECOMPILED_ASSETS: "true"
   FF_USE_FASTZIP: "true"
-  SKIP_FLAKY_TESTS_AUTOMATICALLY: "true"
+  SKIP_FLAKY_TESTS_AUTOMATICALLY: "false"
   RETRY_FAILED_TESTS_IN_NEW_PROCESS: "true"
   # Run with decomposed databases by default
   DECOMPOSED_DB: "true"
@@ -172,6 +188,7 @@ variables:
   REVIEW_APPS_GCP_PROJECT: "gitlab-review-apps"
   REVIEW_APPS_GCP_REGION: "us-central1"
 
+  CACHE_ASSETS_AS_PACKAGE: "true"
   BUILD_ASSETS_IMAGE: "true"  # Set it to "false" to disable assets image building, used in `build-assets-image`
   SIMPLECOV: "true"
 
@@ -182,6 +199,9 @@ variables:
   # See https://gitlab.com/gitlab-com/gl-security/engineering-and-research/inventory/-/issues/827#note_1203181407
   DISABLE_OPENCOLLECTIVE: "true"
 
+  # This is set at the gitlab-org level, but we set it here for forks
+  DANGER_DO_NOT_POST_INVALID_DANGERFILE_ERROR: "1"
+
 include:
   - local: .gitlab/ci/*.gitlab-ci.yml
   - remote: 'https://gitlab.com/gitlab-org/frontend/untamper-my-lockfile/-/raw/main/templates/merge_request_pipelines.yml'

.gitlab/CODEOWNERS

@@ -98,10 +98,7 @@ Dangerfile @gl-quality/eng-prod
 /lib/gitlab/ci/templates/Security/Secret-Detection.*.yml @gitlab-org/secure/static-analysis
 /lib/gitlab/ci/templates/Security/Secure-Binaries.*.yml @gitlab-org/secure/static-analysis @gitlab-org/secure/composition-analysis-be @gitlab-org/secure/dynamic-analysis
 # Note: The `Fortify-FoD-sast.gitlab-ci.yml` template is provided and maintained by Fortify, an official Technology Partner with GitLab.
-/lib/gitlab/ci/templates/Jobs/API-Fuzzing.*.yml @gitlab-org/secure/dynamic-analysis
 /lib/gitlab/ci/templates/Jobs/Container-Scanning.*.yml @gitlab-org/secure/composition-analysis-be
-/lib/gitlab/ci/templates/Jobs/Coverage-Fuzzing.*.yml @gitlab-org/secure/dynamic-analysis
-/lib/gitlab/ci/templates/Jobs/DAST.*.yml @gitlab-org/secure/dynamic-analysis
 /lib/gitlab/ci/templates/Jobs/Dependency-Scanning.*.yml @gitlab-org/secure/composition-analysis-be
 /lib/gitlab/ci/templates/Jobs/License-Scanning.*.yml @gitlab-org/secure/composition-analysis-be
 /lib/gitlab/ci/templates/Jobs/SAST.*.yml @gitlab-org/secure/static-analysis
@@ -119,16 +116,16 @@ Dangerfile @gl-quality/eng-prod
 ^[Threat Insights]
 /app/finders/security/ @gitlab-org/govern/threat-insights-backend-team
 /app/models/vulnerability.rb @gitlab-org/govern/threat-insights-backend-team
+/app/presenters/projects/security/ @gitlab-org/govern/threat-insights-backend-team
+/spec/presenters/projects/security/ @gitlab-org/govern/threat-insights-backend-team
 /ee/app/finders/security/ @gitlab-org/govern/threat-insights-backend-team
 /ee/app/models/security/ @gitlab-org/govern/threat-insights-backend-team
 /ee/app/models/vulnerabilities/ @gitlab-org/govern/threat-insights-backend-team
 /ee/app/policies/vulnerabilities/ @gitlab-org/govern/threat-insights-backend-team
 /ee/app/policies/vulnerability*.rb @gitlab-org/govern/threat-insights-backend-team
-/ee/app/presenters/projects/security/ @gitlab-org/govern/threat-insights-backend-team
 /ee/lib/api/vulnerabilit*.rb @gitlab-org/govern/threat-insights-backend-team
 /ee/spec/policies/vulnerabilities/ @gitlab-org/govern/threat-insights-backend-team
 /ee/spec/policies/vulnerability*.rb @gitlab-org/govern/threat-insights-backend-team
-/ee/spec/presenters/projects/security/ @gitlab-org/govern/threat-insights-backend-team
 /ee/app/assets/javascripts/license_compliance/components/detected_licenses_table.vue @gitlab-org/govern/threat-insights-frontend-team
 /ee/spec/frontend/license_compliance/components/detected_licenses_table_spec.js @gitlab-org/govern/threat-insights-frontend-team
 
@@ -226,13 +223,11 @@ Dangerfile @gl-quality/eng-prod
 /ee/app/models/software_license.rb @gitlab-org/govern/security-policies-backend
 /ee/app/serializers/license_compliance/** @gitlab-org/govern/security-policies-backend
 /ee/app/serializers/license_entity.rb @gitlab-org/govern/security-policies-backend
-/ee/app/serializers/license_serializer.rb @gitlab-org/govern/security-policies-backend
 /ee/app/serializers/licenses_list_entity.rb @gitlab-org/govern/security-policies-backend
 /ee/app/serializers/licenses_list_serializer.rb @gitlab-org/govern/security-policies-backend
 /ee/app/serializers/security/license_policy_entity.rb @gitlab-org/govern/security-policies-backend
 /ee/app/services/ci/compare_license_scanning_reports_collapsed_service.rb @gitlab-org/govern/security-policies-backend
 /ee/app/services/ci/compare_license_scanning_reports_service.rb @gitlab-org/govern/security-policies-backend
-/ee/app/services/projects/licenses/** @gitlab-org/govern/security-policies-backend
 /ee/app/services/software_license_policies/** @gitlab-org/govern/security-policies-backend
 /ee/app/services/software_license_policies/update_service.rb @gitlab-org/govern/security-policies-backend
 /ee/app/workers/refresh_license_compliance_checks_worker.rb @gitlab-org/govern/security-policies-backend
@@ -252,7 +247,6 @@ Dangerfile @gl-quality/eng-prod
 /ee/spec/serializers/license_compliance/** @gitlab-org/govern/security-policies-backend
 /ee/spec/services/ci/compare_license_scanning_reports_collapsed_service_spec.rb @gitlab-org/govern/security-policies-backend
 /ee/spec/services/ci/compare_license_scanning_reports_service_spec.rb @gitlab-org/govern/security-policies-backend
-/ee/spec/services/projects/licenses/** @gitlab-org/govern/security-policies-backend
 /ee/spec/services/software_license_policies/** @gitlab-org/govern/security-policies-backend
 /spec/finders/security/license_compliance_jobs_finder_spec.rb @gitlab-org/govern/security-policies-backend
 
@@ -287,7 +281,6 @@ Dangerfile @gl-quality/eng-prod
 /app/assets/javascripts/merge_request.js @viktomas @jboyson @iamphill @thomasrandolph
 /app/assets/javascripts/merge_request_tabs.js @viktomas @jboyson @iamphill @thomasrandolph
 /app/assets/stylesheets/framework/diffs.scss @viktomas @jboyson @iamphill @thomasrandolph
-/app/assets/stylesheets/components/batch_comments/ @viktomas @jboyson @iamphill @thomasrandolph
 /ee/app/assets/javascripts/diffs/ @viktomas @jboyson @iamphill @thomasrandolph
 /ee/app/assets/javascripts/vue_merge_request_widget @viktomas @jboyson @iamphill @thomasrandolph
 /spec/frontend/diffs/ @viktomas @jboyson @iamphill @thomasrandolph
@@ -317,14 +310,6 @@ Dangerfile @gl-quality/eng-prod
 ^[Growth Experiments]
 /app/experiments/ @gitlab-org/growth/experiment-devs
 /spec/experiments/ @gitlab-org/growth/experiment-devs
-/app/models/experiment.rb @gitlab-org/growth/experiment-devs
-/spec/models/experiment.rb @gitlab-org/growth/experiment-devs
-/app/models/experiment_subject.rb @gitlab-org/growth/experiment-devs
-/spec/models/experiment_subject.rb @gitlab-org/growth/experiment-devs
-/app/models/experiment_user.rb @gitlab-org/growth/experiment-devs
-/spec/models/experiment_user.rb @gitlab-org/growth/experiment-devs
-/app/workers/experiments/ @gitlab-org/growth/experiment-devs
-/spec/workers/experiments/ @gitlab-org/growth/experiment-devs
 /config/initializers/gitlab_experiment.rb @gitlab-org/growth/experiment-devs
 /config/feature_flags/experiment/ @gitlab-org/growth/experiment-devs
 /ee/config/feature_flags/experiment/ @gitlab-org/growth/experiment-devs
@@ -332,11 +317,6 @@ Dangerfile @gl-quality/eng-prod
 /ee/spec/requests/api/experiments_spec.rb @gitlab-org/growth/experiment-devs
 /ee/lib/ee/api/entities/experiment.rb @gitlab-org/growth/experiment-devs
 /ee/spec/lib/ee/api/entities/experiment_spec.rb @gitlab-org/growth/experiment-devs
-/lib/gitlab/experimentation/ @gitlab-org/growth/experiment-devs
-/spec/lib/gitlab/experimentation/ @gitlab-org/growth/experiment-devs
-/lib/gitlab/experimentation.rb @gitlab-org/growth/experiment-devs
-/spec/lib/gitlab/experimentation_spec.rb @gitlab-org/growth/experiment-devs
-/lib/gitlab/experimentation_logger.rb @gitlab-org/growth/experiment-devs
 
 ^[Growth]
 /ee/app/workers/onboarding/ @gitlab-org/growth/engineers
@@ -430,8 +410,7 @@ lib/gitlab/checks/** @proglottis @toon @zj-gitlab
 /doc/administration/audit_reports.md @eread
 /doc/administration/auditor_users.md @jglassman1
 /doc/administration/auth/ @jglassman1
-/doc/administration/auth/ldap/ @jglassman1
+/doc/administration/cicd.md @drcatherinepope
-/doc/administration/cicd.md @marcel.amirault
 /doc/administration/clusters/ @phillipwells
 /doc/administration/compliance.md @eread
 /doc/administration/configure.md @axil
@@ -439,15 +418,10 @@ lib/gitlab/checks/** @proglottis @toon @zj-gitlab
 /doc/administration/docs_self_host.md @axil
 /doc/administration/encrypted_configuration.md @axil
 /doc/administration/environment_variables.md @axil
-/doc/administration/external_pipeline_validation.md @marcel.amirault
+/doc/administration/external_pipeline_validation.md @drcatherinepope
 /doc/administration/feature_flags.md @axil
 /doc/administration/file_hooks.md @ashrafkhamis
 /doc/administration/geo/ @axil
-/doc/administration/geo/disaster_recovery/ @axil
-/doc/administration/geo/disaster_recovery/runbooks/ @axil
-/doc/administration/geo/replication/ @axil
-/doc/administration/geo/secondary_proxy/ @axil
-/doc/administration/geo/setup/ @axil
 /doc/administration/git_protocol.md @aqualls
 /doc/administration/gitaly/ @eread
 /doc/administration/housekeeping.md @eread
@@ -470,13 +444,10 @@ lib/gitlab/checks/** @proglottis @toon @zj-gitlab
 /doc/administration/logs/ @axil
 /doc/administration/logs/index.md @msedlakjakubowski
 /doc/administration/maintenance_mode/ @axil
-/doc/administration/merge_request_diffs.md @ashrafkhamis
+/doc/administration/merge_request_diffs.md @aqualls
 /doc/administration/monitoring/ @msedlakjakubowski
-/doc/administration/monitoring/gitlab_self_monitoring_project/ @msedlakjakubowski
 /doc/administration/monitoring/ip_allowlist.md @jglassman1
-/doc/administration/monitoring/performance/ @msedlakjakubowski
 /doc/administration/monitoring/performance/performance_bar.md @jglassman1
-/doc/administration/monitoring/prometheus/ @msedlakjakubowski
 /doc/administration/monitoring/prometheus/gitlab_exporter.md @jglassman1
 /doc/administration/monitoring/prometheus/index.md @axil
 /doc/administration/monitoring/prometheus/web_exporter.md @jglassman1
@@ -484,9 +455,10 @@ lib/gitlab/checks/** @proglottis @toon @zj-gitlab
 /doc/administration/object_storage.md @axil
 /doc/administration/operations/ @axil
 /doc/administration/operations/fast_ssh_key_lookup.md @aqualls
+/doc/administration/operations/gitlab_sshd.md @aqualls
 /doc/administration/operations/moving_repositories.md @eread
 /doc/administration/package_information/ @axil
-/doc/administration/packages/ @claytoncornell
+/doc/administration/packages/ @dianalogan
 /doc/administration/pages/ @ashrafkhamis
 /doc/administration/polling.md @axil
 /doc/administration/postgresql/ @aqualls
@@ -494,7 +466,6 @@ lib/gitlab/checks/** @proglottis @toon @zj-gitlab
 /doc/administration/raketasks/ @axil
 /doc/administration/raketasks/ldap.md @jglassman1
 /doc/administration/raketasks/praefect.md @eread
-/doc/administration/raketasks/uploads/ @axil
 /doc/administration/read_only_gitlab.md @axil
 /doc/administration/redis/ @axil
 /doc/administration/reference_architectures/ @axil
@@ -533,20 +504,21 @@ lib/gitlab/checks/** @proglottis @toon @zj-gitlab
 /doc/api/bulk_imports.md @eread
 /doc/api/cluster_agents.md @phillipwells
 /doc/api/commits.md @aqualls
-/doc/api/container_registry.md @claytoncornell
+/doc/api/container_registry.md @dianalogan
 /doc/api/custom_attributes.md @msedlakjakubowski
 /doc/api/dependencies.md @rdickenson
-/doc/api/dependency_proxy.md @claytoncornell
+/doc/api/dependency_proxy.md @dianalogan
 /doc/api/deploy_keys.md @rdickenson
 /doc/api/deploy_tokens.md @rdickenson
 /doc/api/deployments.md @rdickenson
 /doc/api/discussions.md @aqualls
 /doc/api/dora/ @lciutacu
+/doc/api/draft_notes.md @aqualls
 /doc/api/environments.md @rdickenson
 /doc/api/epic_issues.md @msedlakjakubowski
 /doc/api/epic_links.md @msedlakjakubowski
 /doc/api/epics.md @msedlakjakubowski
-/doc/api/error_tracking.md @msedlakjakubowski
+/doc/api/error_tracking.md @drcatherinepope
 /doc/api/events.md @eread
 /doc/api/experiments.md @phillipwells
 /doc/api/feature_flag_user_lists.md @rdickenson
@@ -555,6 +527,7 @@ lib/gitlab/checks/** @proglottis @toon @zj-gitlab
 /doc/api/freeze_periods.md @rdickenson
 /doc/api/geo_nodes.md @axil
 /doc/api/graphql/audit_report.md @eread
+/doc/api/graphql/branch_rules.md @aqualls
 /doc/api/graphql/custom_emoji.md @msedlakjakubowski
 /doc/api/graphql/getting_started.md @ashrafkhamis
 /doc/api/graphql/index.md @ashrafkhamis
@@ -567,6 +540,7 @@ lib/gitlab/checks/** @proglottis @toon @zj-gitlab
 /doc/api/group_badges.md @lciutacu
 /doc/api/group_boards.md @msedlakjakubowski
 /doc/api/group_clusters.md @phillipwells
+/doc/api/group_epic_boards.md @msedlakjakubowski
 /doc/api/group_import_export.md @eread
 /doc/api/group_iterations.md @msedlakjakubowski
 /doc/api/group_labels.md @msedlakjakubowski
@@ -589,7 +563,7 @@ lib/gitlab/checks/** @proglottis @toon @zj-gitlab
 /doc/api/issues_statistics.md @msedlakjakubowski
 /doc/api/iterations.md @msedlakjakubowski
 /doc/api/job_artifacts.md @marcel.amirault
-/doc/api/jobs.md @marcel.amirault
+/doc/api/jobs.md @drcatherinepope
 /doc/api/keys.md @aqualls
 /doc/api/labels.md @msedlakjakubowski
 /doc/api/license.md @fneill
@@ -597,11 +571,12 @@ lib/gitlab/checks/** @proglottis @toon @zj-gitlab
 /doc/api/lint.md @marcel.amirault
 /doc/api/managed_licenses.md @fneill
 /doc/api/markdown.md @msedlakjakubowski
+/doc/api/member_roles.md @jglassman1
 /doc/api/members.md @jglassman1
 /doc/api/merge_request_approvals.md @aqualls
 /doc/api/merge_request_context_commits.md @aqualls
 /doc/api/merge_requests.md @aqualls
-/doc/api/merge_trains.md @marcel.amirault
+/doc/api/merge_trains.md @drcatherinepope
 /doc/api/metadata.md @phillipwells
 /doc/api/metrics_dashboard_annotations.md @msedlakjakubowski
 /doc/api/metrics_user_starred_dashboards.md @msedlakjakubowski
@@ -611,14 +586,14 @@ lib/gitlab/checks/** @proglottis @toon @zj-gitlab
 /doc/api/notification_settings.md @msedlakjakubowski
 /doc/api/oauth2.md @jglassman1
 /doc/api/openapi/ @ashrafkhamis
-/doc/api/packages.md @claytoncornell
+/doc/api/packages.md @dianalogan
-/doc/api/packages/ @claytoncornell
+/doc/api/packages/ @dianalogan
 /doc/api/pages.md @ashrafkhamis
 /doc/api/pages_domains.md @ashrafkhamis
 /doc/api/personal_access_tokens.md @eread
-/doc/api/pipeline_schedules.md @marcel.amirault
+/doc/api/pipeline_schedules.md @drcatherinepope
-/doc/api/pipeline_triggers.md @marcel.amirault
+/doc/api/pipeline_triggers.md @drcatherinepope
-/doc/api/pipelines.md @marcel.amirault
+/doc/api/pipelines.md @drcatherinepope
 /doc/api/plan_limits.md @jglassman1
 /doc/api/product_analytics.md @lciutacu
 /doc/api/project_access_tokens.md @jglassman1
@@ -648,6 +623,7 @@ lib/gitlab/checks/** @proglottis @toon @zj-gitlab
 /doc/api/resource_milestone_events.md @msedlakjakubowski
 /doc/api/resource_state_events.md @msedlakjakubowski
 /doc/api/resource_weight_events.md @msedlakjakubowski
+/doc/api/rest/ @ashrafkhamis
 /doc/api/runners.md @fneill
 /doc/api/saml.md @jglassman1
 /doc/api/scim.md @jglassman1
@@ -668,61 +644,51 @@ lib/gitlab/checks/** @proglottis @toon @zj-gitlab
 /doc/api/templates/licenses.md @rdickenson
 /doc/api/todos.md @msedlakjakubowski
 /doc/api/topics.md @lciutacu
-/doc/api/usage_data.md @claytoncornell
+/doc/api/usage_data.md @dianalogan
 /doc/api/users.md @jglassman1
 /doc/api/version.md @phillipwells
 /doc/api/visual_review_discussions.md @marcel.amirault
-/doc/api/vulnerabilities.md @claytoncornell
+/doc/api/vulnerabilities.md @dianalogan
-/doc/api/vulnerability_exports.md @claytoncornell
+/doc/api/vulnerability_exports.md @dianalogan
-/doc/api/vulnerability_findings.md @claytoncornell
+/doc/api/vulnerability_findings.md @dianalogan
 /doc/api/wikis.md @ashrafkhamis
 /doc/architecture/blueprints/database/scalability/patterns/ @aqualls
 /doc/architecture/blueprints/database_scaling/ @aqualls
-/doc/ci/ @marcel.amirault
+/doc/ci/ @drcatherinepope
 /doc/ci/caching/ @marcel.amirault
 /doc/ci/chatops/ @phillipwells
-/doc/ci/ci_cd_for_external_repos/ @marcel.amirault
 /doc/ci/cloud_deployment/ @rdickenson
-/doc/ci/cloud_deployment/ecs/ @rdickenson
 /doc/ci/cloud_services/ @marcel.amirault
-/doc/ci/cloud_services/aws/ @marcel.amirault
-/doc/ci/cloud_services/azure/ @marcel.amirault
-/doc/ci/cloud_services/google_cloud/ @marcel.amirault
 /doc/ci/directed_acyclic_graph/ @marcel.amirault
-/doc/ci/docker/ @marcel.amirault
 /doc/ci/docker/using_docker_images.md @fneill
 /doc/ci/environments/ @rdickenson
-/doc/ci/examples/ @marcel.amirault
 /doc/ci/examples/authenticating-with-hashicorp-vault/ @marcel.amirault
 /doc/ci/examples/deployment/ @rdickenson
 /doc/ci/examples/end_to_end_testing_webdriverio/ @marcel.amirault
-/doc/ci/examples/laravel_with_gitlab_and_envoy/ @marcel.amirault
+/doc/ci/examples/semantic-release.md @dianalogan
-/doc/ci/examples/semantic-release.md @claytoncornell
 /doc/ci/interactive_web_terminal/ @fneill
-/doc/ci/introduction/ @marcel.amirault
+/doc/ci/jobs/job_control.md @marcel.amirault
-/doc/ci/jobs/ @marcel.amirault
 /doc/ci/large_repositories/ @fneill
+/doc/ci/lint.md @marcel.amirault
 /doc/ci/migration/ @marcel.amirault
 /doc/ci/pipeline_editor/ @marcel.amirault
-/doc/ci/pipelines/ @marcel.amirault
+/doc/ci/pipelines/downstream_pipelines.md @marcel.amirault
+/doc/ci/pipelines/index.md @marcel.amirault
+/doc/ci/pipelines/job_artifacts.md @marcel.amirault
+/doc/ci/pipelines/pipeline_artifacts.md @marcel.amirault
 /doc/ci/quick_start/ @marcel.amirault
 /doc/ci/resource_groups/ @rdickenson
 /doc/ci/review_apps/ @marcel.amirault
 /doc/ci/runners/ @fneill
-/doc/ci/runners/saas/ @fneill
-/doc/ci/runners/saas/macos/ @fneill
 /doc/ci/secrets/ @marcel.amirault
 /doc/ci/secure_files/ @marcel.amirault
 /doc/ci/services/ @fneill
-/doc/ci/ssh_keys/ @marcel.amirault
 /doc/ci/test_cases/ @msedlakjakubowski
 /doc/ci/testing/ @marcel.amirault
 /doc/ci/testing/code_quality.md @rdickenson
-/doc/ci/triggers/ @marcel.amirault
 /doc/ci/variables/ @marcel.amirault
 /doc/ci/yaml/ @marcel.amirault
 /doc/development/application_limits.md @axil
-/doc/development/approval_rules.md @aqualls
 /doc/development/audit_event_guide/ @eread
 /doc/development/auto_devops.md @phillipwells
 /doc/development/backend/ @sselhorn
@@ -733,6 +699,7 @@ lib/gitlab/checks/** @proglottis @toon @zj-gitlab
 /doc/development/cascading_settings.md @jglassman1
 /doc/development/chatops_on_gitlabcom.md @phillipwells
 /doc/development/cicd/ @marcel.amirault
+/doc/development/cicd/index.md @drcatherinepope
 /doc/development/code_intelligence/ @aqualls
 /doc/development/contributing/ @sselhorn
 /doc/development/database/ @aqualls
@@ -741,11 +708,8 @@ lib/gitlab/checks/** @proglottis @toon @zj-gitlab
 /doc/development/database_review.md @aqualls
 /doc/development/developing_with_solargraph.md @aqualls
 /doc/development/development_processes.md @sselhorn
-/doc/development/diffs.md @aqualls
 /doc/development/distributed_tracing.md @msedlakjakubowski
 /doc/development/documentation/ @sselhorn
-/doc/development/documentation/styleguide/ @sselhorn
-/doc/development/documentation/topic_types/ @sselhorn
 /doc/development/elasticsearch.md @ashrafkhamis
 /doc/development/experiment_guide/ @phillipwells
 /doc/development/export_csv.md @eread
@@ -765,7 +729,6 @@ lib/gitlab/checks/** @proglottis @toon @zj-gitlab
 /doc/development/git_object_deduplication.md @eread
 /doc/development/gitaly.md @eread
 /doc/development/gitlab_flavored_markdown/ @ashrafkhamis
-/doc/development/gitlab_flavored_markdown/specification_guide/ @ashrafkhamis
 /doc/development/gitlab_shell/ @aqualls
 /doc/development/graphql_guide/ @ashrafkhamis
 /doc/development/graphql_guide/batchloader.md @aqualls
@@ -788,27 +751,24 @@ lib/gitlab/checks/** @proglottis @toon @zj-gitlab
 /doc/development/logging.md @msedlakjakubowski
 /doc/development/maintenance_mode.md @axil
 /doc/development/merge_request_concepts/ @aqualls
-/doc/development/merge_request_diffs.md @aqualls
 /doc/development/omnibus.md @axil
-/doc/development/packages/ @claytoncornell
+/doc/development/packages/ @dianalogan
 /doc/development/pages/ @ashrafkhamis
 /doc/development/permissions.md @jglassman1
 /doc/development/policies.md @jglassman1
 /doc/development/product_qualified_lead_guide/ @phillipwells
-/doc/development/project_templates.md @lciutacu
+/doc/development/project_templates.md @aqualls
 /doc/development/prometheus_metrics.md @msedlakjakubowski
 /doc/development/real_time.md @msedlakjakubowski
 /doc/development/rubocop_development_guide.md @sselhorn
 /doc/development/sec/ @rdickenson
-/doc/development/sec/security_report_ingestion_overview.md @claytoncornell
+/doc/development/sec/security_report_ingestion_overview.md @dianalogan
 /doc/development/secure_coding_guidelines.md @sselhorn
-/doc/development/service_ping/ @claytoncornell
+/doc/development/service_ping/ @dianalogan
-/doc/development/snowplow/ @claytoncornell
+/doc/development/snowplow/ @dianalogan
-/doc/development/spam_protection_and_captcha/ @jglassman1
+/doc/development/spam_protection_and_captcha/ @phillipwells
 /doc/development/sql.md @aqualls
 /doc/development/testing_guide/ @sselhorn
-/doc/development/testing_guide/contract/ @sselhorn
-/doc/development/testing_guide/end_to_end/ @sselhorn
 /doc/development/value_stream_analytics.md @lciutacu
 /doc/development/value_stream_analytics/ @lciutacu
 /doc/development/wikis.md @ashrafkhamis
@@ -820,11 +780,7 @@ lib/gitlab/checks/** @proglottis @toon @zj-gitlab
 /doc/drawers/ @ashrafkhamis
 /doc/gitlab-basics/ @aqualls
 /doc/install/ @axil
-/doc/install/aws/ @axil
+/doc/install/postgresql_extensions.md @aqualls
-/doc/install/azure/ @axil
-/doc/install/google_cloud_platform/ @axil
-/doc/install/migrate/ @axil
-/doc/install/openshift_and_gitlab/ @axil
 /doc/integration/ @jglassman1
 /doc/integration/advanced_search/ @ashrafkhamis
 /doc/integration/akismet.md @phillipwells
@@ -838,16 +794,17 @@ lib/gitlab/checks/** @proglottis @toon @zj-gitlab
 /doc/integration/jenkins.md @ashrafkhamis
 /doc/integration/jira/ @ashrafkhamis
 /doc/integration/mattermost/ @axil
+/doc/integration/recaptcha.md @phillipwells
 /doc/integration/security_partners/ @rdickenson
 /doc/integration/slash_commands.md @ashrafkhamis
 /doc/integration/sourcegraph.md @aqualls
 /doc/integration/trello_power_up.md @ashrafkhamis
 /doc/integration/vault.md @phillipwells
-/doc/operations/ @msedlakjakubowski
+/doc/operations/error_tracking.md @drcatherinepope
 /doc/operations/feature_flags.md @rdickenson
 /doc/operations/incident_management/ @msedlakjakubowski
+/doc/operations/index.md @msedlakjakubowski
 /doc/operations/metrics/ @msedlakjakubowski
-/doc/operations/metrics/dashboards/ @msedlakjakubowski
 /doc/policy/ @axil
 /doc/raketasks/ @axil
 /doc/raketasks/generate_sample_prometheus_data.md @msedlakjakubowski
@@ -856,24 +813,18 @@ lib/gitlab/checks/** @proglottis @toon @zj-gitlab
 /doc/raketasks/x509_signatures.md @aqualls
 /doc/security/ @jglassman1
 /doc/subscriptions/ @fneill
-/doc/subscriptions/gitlab_com/ @fneill
 /doc/subscriptions/gitlab_dedicated/ @axil
-/doc/subscriptions/self_managed/ @fneill
 /doc/topics/authentication/ @jglassman1
 /doc/topics/autodevops/ @phillipwells
-/doc/topics/autodevops/cloud_deployments/ @phillipwells
 /doc/topics/awesome_co.md @rdickenson
 /doc/topics/git/ @aqualls
-/doc/topics/git/how_to_install_git/ @aqualls
-/doc/topics/git/lfs/ @aqualls
-/doc/topics/git/numerous_undo_possibilities_in_git/ @aqualls
 /doc/topics/gitlab_flow.md @aqualls
 /doc/topics/offline/ @axil
 /doc/topics/plan_and_track.md @msedlakjakubowski
+/doc/topics/your_work.md @rdickenson
 /doc/tutorials/ @kpaizee
 /doc/update/ @axil
 /doc/update/background_migrations.md @aqualls
-/doc/update/package/ @axil
 /doc/user/admin_area/analytics/ @lciutacu
 /doc/user/admin_area/broadcast_messages.md @phillipwells
 /doc/user/admin_area/credentials_inventory.md @jglassman1
@@ -891,7 +842,7 @@ lib/gitlab/checks/** @proglottis @toon @zj-gitlab
 /doc/user/admin_area/reporting/spamcheck.md @axil
 /doc/user/admin_area/review_abuse_reports.md @jglassman1
 /doc/user/admin_area/settings/account_and_limit_settings.md @aqualls
-/doc/user/admin_area/settings/continuous_integration.md @marcel.amirault
+/doc/user/admin_area/settings/continuous_integration.md @drcatherinepope
 /doc/user/admin_area/settings/deprecated_api_rate_limits.md @aqualls
 /doc/user/admin_area/settings/email.md @msedlakjakubowski
 /doc/user/admin_area/settings/external_authorization.md @jglassman1
@@ -902,63 +853,43 @@ lib/gitlab/checks/** @proglottis @toon @zj-gitlab
 /doc/user/admin_area/settings/incident_management_rate_limits.md @msedlakjakubowski
 /doc/user/admin_area/settings/index.md @aqualls
 /doc/user/admin_area/settings/instance_template_repository.md @aqualls
-/doc/user/admin_area/settings/package_registry_rate_limits.md @claytoncornell
+/doc/user/admin_area/settings/package_registry_rate_limits.md @dianalogan
 /doc/user/admin_area/settings/project_integration_management.md @ashrafkhamis
 /doc/user/admin_area/settings/push_event_activities_limit.md @aqualls
 /doc/user/admin_area/settings/rate_limit_on_issues_creation.md @msedlakjakubowski
 /doc/user/admin_area/settings/rate_limit_on_notes_creation.md @msedlakjakubowski
-/doc/user/admin_area/settings/rate_limit_on_pipelines_creation.md @marcel.amirault
+/doc/user/admin_area/settings/rate_limit_on_pipelines_creation.md @drcatherinepope
 /doc/user/admin_area/settings/rate_limit_on_users_api.md @jglassman1
+/doc/user/admin_area/settings/scim_setup.md @jglassman1
 /doc/user/admin_area/settings/terraform_limits.md @phillipwells
 /doc/user/admin_area/settings/third_party_offers.md @lciutacu
-/doc/user/admin_area/settings/usage_statistics.md @claytoncornell
+/doc/user/admin_area/settings/usage_statistics.md @dianalogan
 /doc/user/admin_area/settings/visibility_and_access_controls.md @aqualls
 /doc/user/analytics/ @lciutacu
 /doc/user/analytics/ci_cd_analytics.md @rdickenson
-/doc/user/application_security/api_fuzzing/ @rdickenson
+/doc/user/application_security/ @rdickenson
-/doc/user/application_security/configuration/ @rdickenson
+/doc/user/application_security/cve_id_request.md @dianalogan
-/doc/user/application_security/container_scanning/ @rdickenson
+/doc/user/application_security/generate_test_vulnerabilities/ @dianalogan
-/doc/user/application_security/coverage_fuzzing/ @rdickenson
+/doc/user/application_security/policies/ @dianalogan
-/doc/user/application_security/cve_id_request.md @claytoncornell
+/doc/user/application_security/security_dashboard/ @dianalogan
-/doc/user/application_security/dast/ @rdickenson
+/doc/user/application_security/vulnerabilities/ @dianalogan
-/doc/user/application_security/dast/checks/ @rdickenson
+/doc/user/application_security/vulnerability_report/ @dianalogan
-/doc/user/application_security/dast_api/ @rdickenson
-/doc/user/application_security/dependency_list/ @rdickenson
-/doc/user/application_security/dependency_scanning/ @rdickenson
-/doc/user/application_security/generate_test_vulnerabilities/ @claytoncornell
-/doc/user/application_security/iac_scanning/ @rdickenson
-/doc/user/application_security/index.md @rdickenson
-/doc/user/application_security/offline_deployments/ @rdickenson
-/doc/user/application_security/policies/ @claytoncornell
-/doc/user/application_security/sast/ @rdickenson
-/doc/user/application_security/secret_detection/ @rdickenson
-/doc/user/application_security/security_dashboard/ @claytoncornell
-/doc/user/application_security/terminology/ @rdickenson
-/doc/user/application_security/vulnerabilities/ @claytoncornell
-/doc/user/application_security/vulnerability_report/ @claytoncornell
 /doc/user/asciidoc.md @aqualls
 /doc/user/award_emojis.md @msedlakjakubowski
 /doc/user/clusters/ @phillipwells
-/doc/user/clusters/agent/ @phillipwells
-/doc/user/clusters/agent/gitops/ @phillipwells
-/doc/user/clusters/agent/install/ @phillipwells
-/doc/user/clusters/create/ @phillipwells
 /doc/user/compliance/ @eread
-/doc/user/compliance/compliance_report/ @eread
 /doc/user/compliance/license_compliance/ @rdickenson
 /doc/user/crm/ @msedlakjakubowski
 /doc/user/discussions/ @aqualls
+/doc/user/enterprise_user/ @jglassman1
 /doc/user/feature_flags.md @sselhorn
 /doc/user/free_user_limit.md @phillipwells
 /doc/user/group/ @lciutacu
 /doc/user/group/clusters/ @phillipwells
 /doc/user/group/compliance_frameworks.md @eread
-/doc/user/group/contribution_analytics/ @lciutacu
 /doc/user/group/custom_project_templates.md @eread
-/doc/user/group/devops_adoption/ @lciutacu
 /doc/user/group/epics/ @msedlakjakubowski
 /doc/user/group/import/ @eread
-/doc/user/group/insights/ @lciutacu
 /doc/user/group/issues_analytics/ @msedlakjakubowski
 /doc/user/group/iterations/ @msedlakjakubowski
 /doc/user/group/planning_hierarchy/ @msedlakjakubowski
@@ -967,54 +898,31 @@ lib/gitlab/checks/** @proglottis @toon @zj-gitlab
 /doc/user/group/roadmap/ @msedlakjakubowski
 /doc/user/group/saml_sso/ @jglassman1
 /doc/user/group/settings/ @jglassman1
-/doc/user/group/subgroups/ @lciutacu
-/doc/user/group/value_stream_analytics/ @lciutacu
 /doc/user/infrastructure/ @phillipwells
-/doc/user/infrastructure/clusters/ @phillipwells
-/doc/user/infrastructure/clusters/connect/ @phillipwells
-/doc/user/infrastructure/clusters/deploy/ @phillipwells
-/doc/user/infrastructure/clusters/manage/ @phillipwells
-/doc/user/infrastructure/clusters/manage/management_project_applications/ @phillipwells
 /doc/user/infrastructure/clusters/manage/management_project_applications/runner.md @fneill
-/doc/user/infrastructure/iac/ @phillipwells
 /doc/user/markdown.md @msedlakjakubowski
 /doc/user/namespace/ @lciutacu
 /doc/user/okrs.md @msedlakjakubowski
 /doc/user/operations_dashboard/ @rdickenson
-/doc/user/packages/ @claytoncornell
+/doc/user/packages/ @dianalogan
-/doc/user/packages/composer_repository/ @claytoncornell
-/doc/user/packages/conan_repository/ @claytoncornell
-/doc/user/packages/container_registry/ @claytoncornell
-/doc/user/packages/debian_repository/ @claytoncornell
-/doc/user/packages/dependency_proxy/ @claytoncornell
-/doc/user/packages/generic_packages/ @claytoncornell
-/doc/user/packages/go_proxy/ @claytoncornell
-/doc/user/packages/gradle_repository/ @claytoncornell
-/doc/user/packages/harbor_container_registry/ @claytoncornell
-/doc/user/packages/helm_repository/ @claytoncornell
-/doc/user/packages/infrastructure_registry/ @claytoncornell
-/doc/user/packages/maven_repository/ @claytoncornell
-/doc/user/packages/npm_registry/ @claytoncornell
-/doc/user/packages/nuget_repository/ @claytoncornell
-/doc/user/packages/package_registry/ @claytoncornell
-/doc/user/packages/pypi_repository/ @claytoncornell
-/doc/user/packages/rubygems_registry/ @claytoncornell
-/doc/user/packages/terraform_module_registry/ @claytoncornell
-/doc/user/packages/workflows/ @claytoncornell
-/doc/user/packages/yarn_repository/ @claytoncornell
 /doc/user/permissions.md @jglassman1
 /doc/user/product_analytics/ @lciutacu
 /doc/user/profile/ @jglassman1
-/doc/user/profile/account/ @jglassman1
 /doc/user/profile/contributions_calendar.md @lciutacu
 /doc/user/profile/notifications.md @msedlakjakubowski
-/doc/user/project/ @aqualls
+/doc/user/project/autocomplete_characters.md @aqualls
+/doc/user/project/badges.md @lciutacu
+/doc/user/project/changelogs.md @aqualls
 /doc/user/project/clusters/ @phillipwells
-/doc/user/project/clusters/runbooks/ @phillipwells
+/doc/user/project/code_intelligence.md @aqualls
+/doc/user/project/code_owners.md @aqualls
 /doc/user/project/deploy_boards.md @rdickenson
 /doc/user/project/deploy_keys/ @rdickenson
 /doc/user/project/deploy_tokens/ @rdickenson
 /doc/user/project/description_templates.md @msedlakjakubowski
+/doc/user/project/file_lock.md @aqualls
+/doc/user/project/git_attributes.md @aqualls
+/doc/user/project/highlighting.md @aqualls
 /doc/user/project/import/ @eread
 /doc/user/project/import/jira.md @msedlakjakubowski
 /doc/user/project/index.md @lciutacu
@@ -1028,29 +936,23 @@ lib/gitlab/checks/** @proglottis @toon @zj-gitlab
 /doc/user/project/labels.md @msedlakjakubowski
 /doc/user/project/members/ @lciutacu
 /doc/user/project/merge_requests/ @aqualls
-/doc/user/project/merge_requests/approvals/ @aqualls
 /doc/user/project/merge_requests/csv_export.md @eread
-/doc/user/project/merge_requests/methods/ @aqualls
-/doc/user/project/merge_requests/reviews/ @aqualls
 /doc/user/project/merge_requests/status_checks.md @eread
 /doc/user/project/milestones/ @msedlakjakubowski
+/doc/user/project/organize_work_with_projects.md @lciutacu
 /doc/user/project/pages/ @ashrafkhamis
-/doc/user/project/pages/custom_domains_ssl_tls_certification/ @ashrafkhamis
+/doc/user/project/protected_branches.md @aqualls
-/doc/user/project/pages/getting_started/ @ashrafkhamis
+/doc/user/project/protected_tags.md @aqualls
+/doc/user/project/push_options.md @aqualls
 /doc/user/project/quick_actions.md @msedlakjakubowski
 /doc/user/project/releases/ @rdickenson
 /doc/user/project/remote_development/ @ashrafkhamis
 /doc/user/project/repository/ @aqualls
-/doc/user/project/repository/branches/ @aqualls
 /doc/user/project/repository/file_finder.md @ashrafkhamis
-/doc/user/project/repository/gpg_signed_commits/ @aqualls
-/doc/user/project/repository/jupyter_notebooks/ @aqualls
 /doc/user/project/repository/managing_large_repositories.md @axil
-/doc/user/project/repository/mirror/ @aqualls
 /doc/user/project/repository/reducing_the_repo_size_using_git.md @eread
-/doc/user/project/repository/ssh_signed_commits/ @aqualls
+/doc/user/project/repository/vscode.md @ashrafkhamis
 /doc/user/project/repository/web_editor.md @ashrafkhamis
-/doc/user/project/repository/x509_signed_commits/ @aqualls
 /doc/user/project/requirements/ @msedlakjakubowski
 /doc/user/project/service_desk.md @msedlakjakubowski
 /doc/user/project/settings/import_export.md @eread
@@ -1103,8 +1005,10 @@ lib/gitlab/checks/** @proglottis @toon @zj-gitlab
 /app/controllers/concerns/enforces_two_factor_authentication.rb @gitlab-org/manage/authentication-and-authorization/approvers
 /app/controllers/concerns/oauth_applications.rb @gitlab-org/manage/authentication-and-authorization/approvers
 /app/controllers/concerns/project_unauthorized.rb @gitlab-org/manage/authentication-and-authorization/approvers
+/app/models/concerns/require_email_verification.rb @gitlab-org/manage/authentication-and-authorization/approvers
 /app/controllers/concerns/sessionless_authentication.rb @gitlab-org/manage/authentication-and-authorization/approvers
 /app/controllers/concerns/snippet_authorizations.rb @gitlab-org/manage/authentication-and-authorization/approvers
+/app/controllers/concerns/verifies_with_email.rb @gitlab-org/manage/authentication-and-authorization/approvers
 /app/controllers/concerns/workhorse_authorization.rb @gitlab-org/manage/authentication-and-authorization/approvers
 /app/controllers/groups/settings/access_tokens_controller.rb @gitlab-org/manage/authentication-and-authorization/approvers
 /app/controllers/ldap/ @gitlab-org/manage/authentication-and-authorization/approvers
@@ -1116,6 +1020,7 @@ lib/gitlab/checks/** @proglottis @toon @zj-gitlab
 /app/controllers/profiles/two_factor_auths_controller.rb @gitlab-org/manage/authentication-and-authorization/approvers
 /app/controllers/profiles/webauthn_registrations_controller.rb @gitlab-org/manage/authentication-and-authorization/approvers
 /app/controllers/projects/settings/access_tokens_controller.rb @gitlab-org/manage/authentication-and-authorization/approvers
+/app/controllers/sessions_controller.rb @gitlab-org/manage/authentication-and-authorization/approvers
 /app/finders/groups/projects_requiring_authorizations_refresh/ @gitlab-org/manage/authentication-and-authorization/approvers
 /app/finders/personal_access_tokens_finder.rb @gitlab-org/manage/authentication-and-authorization/approvers
 /app/helpers/access_tokens_helper.rb @gitlab-org/manage/authentication-and-authorization/approvers
@@ -1152,8 +1057,7 @@ lib/gitlab/checks/** @proglottis @toon @zj-gitlab
 /app/services/todos/destroy/unauthorized_features_service.rb @gitlab-org/manage/authentication-and-authorization/approvers
 /app/services/users/authorized_build_service.rb @gitlab-org/manage/authentication-and-authorization/approvers
 /app/services/users/authorized_create_service.rb @gitlab-org/manage/authentication-and-authorization/approvers
-/app/services/users/email_verification/generate_token_service.rb @gitlab-org/manage/authentication-and-authorization/approvers
+/app/services/users/email_verification/ @gitlab-org/manage/authentication-and-authorization/approvers
-/app/services/users/email_verification/validate_token_service.rb @gitlab-org/manage/authentication-and-authorization/approvers
 /app/services/users/refresh_authorized_projects_service.rb @gitlab-org/manage/authentication-and-authorization/approvers
 /app/services/webauthn/ @gitlab-org/manage/authentication-and-authorization/approvers
 /app/validators/json_schemas/cluster_agent_authorization_configuration.json @gitlab-org/manage/authentication-and-authorization/approvers
@@ -1167,11 +1071,7 @@ lib/gitlab/checks/** @proglottis @toon @zj-gitlab
 /app/views/devise/mailer/password_change_by_admin.text.erb @gitlab-org/manage/authentication-and-authorization/approvers
 /app/views/devise/mailer/reset_password_instructions.html.haml @gitlab-org/manage/authentication-and-authorization/approvers
 /app/views/devise/mailer/reset_password_instructions.text.erb @gitlab-org/manage/authentication-and-authorization/approvers
-/app/views/devise/passwords/ @gitlab-org/manage/authentication-and-authorization/approvers
+/app/views/devise/**/ @gitlab-org/manage/authentication-and-authorization/approvers
-/app/views/devise/shared/_omniauth_box.html.haml @gitlab-org/manage/authentication-and-authorization/approvers
-/app/views/devise/shared/_signup_omniauth_provider_list.haml @gitlab-org/manage/authentication-and-authorization/approvers
-/app/views/devise/shared/_signup_omniauth_providers.haml @gitlab-org/manage/authentication-and-authorization/approvers
-/app/views/devise/shared/_signup_omniauth_providers_top.haml @gitlab-org/manage/authentication-and-authorization/approvers
 /app/views/doorkeeper/authorizations/ @gitlab-org/manage/authentication-and-authorization/approvers
 /app/views/doorkeeper/authorized_applications/ @gitlab-org/manage/authentication-and-authorization/approvers
 /app/views/errors/omniauth_error.html.haml @gitlab-org/manage/authentication-and-authorization/approvers
@@ -1232,14 +1132,17 @@ lib/gitlab/checks/** @proglottis @toon @zj-gitlab
 /ee/app/controllers/ee/ldap/ @gitlab-org/manage/authentication-and-authorization/approvers
 /ee/app/controllers/ee/omniauth_callbacks_controller.rb @gitlab-org/manage/authentication-and-authorization/approvers
 /ee/app/controllers/ee/passwords_controller.rb @gitlab-org/manage/authentication-and-authorization/approvers
+/ee/app/controllers/ee/sessions_controller.rb @gitlab-org/manage/authentication-and-authorization/approvers
 /ee/app/controllers/groups/omniauth_callbacks_controller.rb @gitlab-org/manage/authentication-and-authorization/approvers
 /ee/app/controllers/groups/scim_oauth_controller.rb @gitlab-org/manage/authentication-and-authorization/approvers
 /ee/app/controllers/oauth/ @gitlab-org/manage/authentication-and-authorization/approvers
 /ee/app/controllers/omniauth_kerberos_controller.rb @gitlab-org/manage/authentication-and-authorization/approvers
+/ee/app/controllers/users/identity_verification_controller.rb @gitlab-org/manage/authentication-and-authorization/approvers
 /ee/app/finders/auth/ @gitlab-org/manage/authentication-and-authorization/approvers
 /ee/app/helpers/ee/access_tokens_helper.rb @gitlab-org/manage/authentication-and-authorization/approvers
 /ee/app/helpers/ee/auth_helper.rb @gitlab-org/manage/authentication-and-authorization/approvers
 /ee/app/helpers/ee/personal_access_tokens_helper.rb @gitlab-org/manage/authentication-and-authorization/approvers
+/ee/app/models/concerns/identity_verifiable.rb @gitlab-org/manage/authentication-and-authorization/approvers
 /ee/app/models/concerns/password_complexity.rb @gitlab-org/manage/authentication-and-authorization/approvers
 /ee/app/models/ee/personal_access_token.rb @gitlab-org/manage/authentication-and-authorization/approvers
 /ee/app/models/ee/project_authorization.rb @gitlab-org/manage/authentication-and-authorization/approvers
@@ -1252,10 +1155,12 @@ lib/gitlab/checks/** @proglottis @toon @zj-gitlab
 /ee/app/services/ee/users/authorized_build_service.rb @gitlab-org/manage/authentication-and-authorization/approvers
 /ee/app/services/personal_access_tokens/ @gitlab-org/manage/authentication-and-authorization/approvers
 /ee/app/services/security/token_revocation_service.rb @gitlab-org/manage/authentication-and-authorization/approvers
+/ee/app/services/users/email_verification/ @gitlab-org/manage/authentication-and-authorization/approvers
 /ee/app/validators/password/ @gitlab-org/manage/authentication-and-authorization/approvers
 /ee/app/views/admin/application_settings/_personal_access_token_expiration_policy.html.haml @gitlab-org/manage/authentication-and-authorization/approvers
 /ee/app/views/credentials_inventory_mailer/personal_access_token_revoked_email.html.haml @gitlab-org/manage/authentication-and-authorization/approvers
 /ee/app/views/credentials_inventory_mailer/personal_access_token_revoked_email.text.haml @gitlab-org/manage/authentication-and-authorization/approvers
+/app/views/devise/**/ @gitlab-org/manage/authentication-and-authorization/approvers
 /ee/app/views/groups/_personal_access_token_expiration_policy.html.haml @gitlab-org/manage/authentication-and-authorization/approvers
 /ee/app/views/groups/sso/_authorize_pane.html.haml @gitlab-org/manage/authentication-and-authorization/approvers
 /ee/app/views/notify/policy_revoked_personal_access_tokens_email.html.haml @gitlab-org/manage/authentication-and-authorization/approvers
@@ -1263,9 +1168,7 @@ lib/gitlab/checks/** @proglottis @toon @zj-gitlab
 /ee/app/views/oauth/ @gitlab-org/manage/authentication-and-authorization/approvers
 /ee/app/views/shared/_password_requirements_list.html.haml @gitlab-org/manage/authentication-and-authorization/approvers
 /ee/app/views/shared/credentials_inventory/_personal_access_tokens.html.haml @gitlab-org/manage/authentication-and-authorization/approvers
-/ee/app/views/shared/credentials_inventory/_project_access_tokens.html.haml @gitlab-org/manage/authentication-and-authorization/approvers
 /ee/app/views/shared/credentials_inventory/personal_access_tokens/ @gitlab-org/manage/authentication-and-authorization/approvers
-/ee/app/views/shared/credentials_inventory/project_access_tokens/ @gitlab-org/manage/authentication-and-authorization/approvers
 /ee/app/workers/auth/ @gitlab-org/manage/authentication-and-authorization/approvers
 /ee/app/workers/personal_access_tokens/ @gitlab-org/manage/authentication-and-authorization/approvers
 /ee/config/routes/oauth.rb @gitlab-org/manage/authentication-and-authorization/approvers
@@ -1407,6 +1310,7 @@ lib/gitlab/checks/** @proglottis @toon @zj-gitlab
 /spec/views/projects/jobs/ @gitlab-org/maintainers/cicd-verify
 /spec/views/projects/pipeline_schedules/ @gitlab-org/maintainers/cicd-verify
 /spec/views/projects/pipelines/ @gitlab-org/maintainers/cicd-verify
+/spec/views/projects/settings/ci_cd/ @gitlab-org/maintainers/cicd-verify
 /spec/workers/build_hooks_worker_spec.rb @gitlab-org/maintainers/cicd-verify
 /spec/workers/build_queue_worker_spec.rb @gitlab-org/maintainers/cicd-verify
 /spec/workers/build_success_worker_spec.rb @gitlab-org/maintainers/cicd-verify
@@ -1430,11 +1334,8 @@ lib/gitlab/checks/** @proglottis @toon @zj-gitlab
 /ee/spec/services/system_notes/merge_train_service_spec.rb @gitlab-org/maintainers/cicd-verify
 /ee/spec/controllers/projects/subscriptions_controller_spec.rb @gitlab-org/maintainers/cicd-verify
 /ee/spec/helpers/ee/projects/pipeline_helper_spec.rb @gitlab-org/maintainers/cicd-verify
-/ee/spec/views/projects/pipelines/ @gitlab-org/maintainers/cicd-verify
-/ee/spec/views/projects/settings/ci_cd/ @gitlab-org/maintainers/cicd-verify
 /ee/spec/workers/clear_shared_runners_minutes_worker_spec.rb @gitlab-org/maintainers/cicd-verify
 /ee/spec/lib/**/ci/ @gitlab-org/maintainers/cicd-verify
-/ee/spec/lib/ee/api/entities/merge_train_spec.rb @gitlab-org/maintainers/cicd-verify
 /**/javascripts/jobs/ @gitlab-org/ci-cd/verify/frontend
 /**/javascripts/pipelines/ @gitlab-org/ci-cd/verify/frontend
 /app/assets/javascripts/ci/ @gitlab-org/ci-cd/verify/frontend
@@ -1452,7 +1353,7 @@ lib/api/entities/project.rb @gitlab-org/manage/manage-workspace/backend-approver
 ee/lib/ee/api/entities/project.rb @gitlab-org/manage/manage-workspace/backend-approvers
 
 [Compliance]
-/ee/app/services/audit_events/build_service.rb @gitlab-org/govern/compliance
+/app/services/audit_events/build_service.rb @gitlab-org/govern/compliance
 /ee/spec/services/audit_events/custom_audit_event_service_spec.rb @gitlab-org/govern/compliance
 /app/models/audit_event.rb @gitlab-org/govern/compliance
 /app/services/audit_event_service.rb @gitlab-org/govern/compliance
@@ -1495,7 +1396,6 @@ ee/lib/ee/api/entities/project.rb @gitlab-org/manage/manage-workspace/backend-ap
 /ee/config/events/202108302307_profiles_controller_search_audit_event.yml @gitlab-org/govern/compliance
 /ee/config/events/202108302307_projects__audit_events_controller_search_audit_event.yml @gitlab-org/govern/compliance
 /ee/config/events/202111041910_admin__audit_logs_controller_search_audit_event.yml @gitlab-org/govern/compliance
-/ee/config/feature_flags/development/audit_event_streaming_git_operations.yml @gitlab-org/govern/compliance
 /ee/config/feature_flags/development/audit_log_group_level.yml @gitlab-org/govern/compliance
 /ee/config/metrics/counts_28d/20210216183930_g_compliance_audit_events_monthly.yml @gitlab-org/govern/compliance
 /ee/config/metrics/counts_28d/20210216183934_i_compliance_audit_events_monthly.yml @gitlab-org/govern/compliance
@@ -1509,11 +1409,8 @@ ee/lib/ee/api/entities/project.rb @gitlab-org/manage/manage-workspace/backend-ap
 /ee/config/metrics/counts_7d/20210216183940_a_compliance_audit_events_api_weekly.yml @gitlab-org/govern/compliance
 /ee/config/metrics/counts_all/20211130085433_g_manage_compliance_audit_event_destinations.yml @gitlab-org/govern/compliance
 /ee/lib/api/audit_events.rb @gitlab-org/govern/compliance
-/ee/lib/audit/external_status_check_changes_auditor.rb @gitlab-org/govern/compliance
+/ee/lib/audit/ @gitlab-org/govern/compliance
-/ee/lib/audit/group_merge_request_approval_setting_changes_auditor.rb @gitlab-org/govern/compliance
-/ee/lib/audit/group_push_rules_changes_auditor.rb @gitlab-org/govern/compliance
 /ee/lib/ee/api/entities/audit_event.rb @gitlab-org/govern/compliance
-/ee/lib/ee/audit/ @gitlab-org/govern/compliance
 /ee/lib/ee/gitlab/audit/ @gitlab-org/govern/compliance
 /lib/gitlab/audit/auditor.rb @gitlab-org/govern/compliance
 /lib/gitlab/audit_json_logger.rb @gitlab-org/govern/compliance
@@ -1522,3 +1419,7 @@ ee/lib/ee/api/entities/project.rb @gitlab-org/manage/manage-workspace/backend-ap
 /ee/app/assets/javascripts/usage_quotas/components/ @fulfillment-group/utilization-group/fe
 /ee/app/assets/javascripts/usage_quotas/seats/ @fulfillment-group/utilization-group/fe
 /ee/app/assets/javascripts/usage_quotas/storage/ @fulfillment-group/utilization-group/fe
+
+[Manage::Foundations]
+/lib/sidebars/ @gitlab/ @gitlab-org/manage/foundations/engineering
+/ee/lib/sidebars/ @gitlab-org/manage/foundations/engineering

.gitlab/ci/as-if-jh.gitlab-ci.yml

@@ -10,7 +10,7 @@ add-jh-files:
   extends:
     - .shared-as-if-jh
     - .as-if-jh:rules:prepare-as-if-jh
-  image: ${GITLAB_DEPENDENCY_PROXY}ruby:${RUBY_VERSION}
+  image: ${GITLAB_DEPENDENCY_PROXY_ADDRESS}ruby:${RUBY_VERSION}
   stage: prepare
   before_script:
     - source ./scripts/utils.sh
@@ -38,12 +38,12 @@ prepare-as-if-jh-branch:
   needs:
     - add-jh-files
   script:
+    # Fetch for the history of the branch so it does not cause the following error:
+    #   ! [remote rejected] ref -> ref (shallow update not allowed)
+    - git fetch --unshallow --filter=tree:0 origin "${CI_COMMIT_SHA}"
     - git checkout -b "${AS_IF_JH_BRANCH}"
     - git add ${JH_FILES_TO_COMMIT}
     - git commit -m 'Add JH files'  # TODO: Mark which SHA we add
-    # Fetch for the history of the branch so it does not cause the following error:
-    #   ! [remote rejected] ref -> ref (shallow update not allowed)
-    - git fetch --unshallow --filter=tree:0 origin "${CI_COMMIT_REF_NAME}"
     - git push -f "${SANDBOX_REPOSITORY}" "${AS_IF_JH_BRANCH}"
 
 start-as-if-jh:

.gitlab/ci/build-images.gitlab-ci.yml

@@ -27,6 +27,34 @@ build-qa-image as-if-foss:
   extends:
     - build-qa-image
     - .as-if-foss
+    - .build-images:rules:build-qa-image-as-if-foss
+
+# Prepares an image with GDK configured based on code in master. This saves some time in MRs because some installation
+# and complilation will have already been performed.
+build-qa-on-gdk-master-image:
+  extends:
+    - .base-image-build-buildx
+    - .build-images:rules:build-qa-on-gdk-master-image
+  tags:
+    - e2e
+  stage: build-images
+  needs: []
+  variables:
+    QA_GDK_IMAGE: "${CI_REGISTRY}/${CI_PROJECT_PATH}/gitlab-qa-gdk"
+  before_script:
+    - !reference [.use-buildx, before_script]
+    - sysctl -n -w fs.inotify.max_user_watches=524288
+  script:
+    - |
+      docker buildx build \
+        --cache-to=type=inline \
+        --cache-from ${QA_GDK_IMAGE}:master \
+        --platform=${ARCH:-amd64} \
+        --add-host gdk.test:127.0.0.1 \
+        --tag ${QA_GDK_IMAGE}:master \
+        --file="qa/gdk/Dockerfile" \
+        --push \
+        ${CI_PROJECT_DIR}
 
 build-assets-image:
   extends:

.gitlab/ci/caching.gitlab-ci.yml

@@ -47,16 +47,15 @@ cache-assets:test as-if-foss:
     - .as-if-foss
 
 cache-assets:production:
-  extends: .cache-assets-base
+  extends:
-  variables:
+    - .cache-assets-base
-    NODE_ENV: "production"
+    - .production
-    RAILS_ENV: "production"
 
 packages-cleanup:
   extends:
     - .default-retry
     - .caching:rules:packages-cleanup
-  image: ${GITLAB_DEPENDENCY_PROXY}ruby:${RUBY_VERSION}
+  image: ${GITLAB_DEPENDENCY_PROXY_ADDRESS}ruby:${RUBY_VERSION}
   stage: prepare
   before_script:
     - source scripts/utils.sh

.gitlab/ci/database.gitlab-ci.yml

@@ -0,0 +1,118 @@
+include:
+  - local: .gitlab/ci/rails/shared.gitlab-ci.yml
+
+db:rollback:
+  extends:
+    - .db-job-base
+    - .rails:rules:db-rollback
+  script:
+    - scripts/db_tasks db:migrate VERSION=20220502173045  # 14.10 (last 14.x version)
+    - scripts/db_tasks db:migrate
+
+db:rollback single-db:
+  extends:
+    - db:rollback
+    - .single-db
+    - .rails:rules:single-db
+
+db:migrate:reset:
+  extends: .db-job-base
+  script:
+    - bundle exec rake db:migrate:reset
+
+db:migrate:reset single-db:
+  extends:
+    - db:migrate:reset
+    - .single-db
+    - .rails:rules:single-db
+
+db:check-schema:
+  extends:
+    - .db-job-base
+    - .rails:rules:ee-mr-and-default-branch-only
+  script:
+    - run_timed_command "bundle exec rake db:drop db:create"
+    - run_timed_command "scripts/db_tasks db:migrate"
+
+db:check-schema-single-db:
+  extends:
+    - db:check-schema
+    - .single-db
+    - .rails:rules:single-db
+
+db:check-migrations:
+  extends:
+    - .db-job-base
+    - .rails:rules:ee-and-foss-mr-with-migration
+  script:
+    - git fetch origin $CI_MERGE_REQUEST_TARGET_BRANCH_NAME:$CI_MERGE_REQUEST_TARGET_BRANCH_NAME --depth 20
+    - scripts/validate_migration_schema
+  allow_failure: true
+
+db:check-migrations-single-db:
+  extends:
+    - db:check-migrations
+    - .single-db
+    - .rails:rules:db:check-migrations-single-db
+
+db:post_deployment_migrations_validator:
+  extends:
+    - .db-job-base
+    - .rails:rules:ee-and-foss-mr-with-migration
+  script:
+    - git fetch origin $CI_MERGE_REQUEST_TARGET_BRANCH_NAME:$CI_MERGE_REQUEST_TARGET_BRANCH_NAME --depth 20
+    - scripts/post_deployment_migrations_validator
+  allow_failure: true
+
+db:post_deployment_migrations_validator-single-db:
+  extends:
+    - db:post_deployment_migrations_validator
+    - .single-db
+    - .rails:rules:db:check-migrations-single-db
+
+db:migrate-non-superuser:
+  extends:
+    - .db-job-base
+    - .rails:rules:ee-and-foss-mr-with-migration
+  script:
+    - bundle exec rake gitlab:db:reset_as_non_superuser
+
+db:gitlabcom-database-testing:
+  extends: .rails:rules:db:gitlabcom-database-testing
+  stage: test
+  image: ruby:${RUBY_VERSION}-alpine
+  needs: []
+  allow_failure: true
+  script:
+    - source scripts/utils.sh
+    - install_gitlab_gem
+    - ./scripts/trigger-build.rb gitlab-com-database-testing
+
+db:backup_and_restore:
+  extends:
+    - .db-job-base
+    - .rails:rules:db-backup
+  variables:
+    SETUP_DB: "false"
+    GITLAB_ASSUME_YES: "1"
+  script:
+    - . scripts/prepare_build.sh
+    - bundle exec rake db:drop db:create db:structure:load db:seed_fu
+    - mkdir -p tmp/tests/public/uploads tmp/tests/{artifacts,pages,lfs-objects,terraform_state,registry,packages}
+    - bundle exec rake gitlab:backup:create
+    - date
+    - bundle exec rake gitlab:backup:restore
+
+db:backup_and_restore single-db:
+  extends:
+    - db:backup_and_restore
+    - .single-db
+    - .rails:rules:db-backup
+
+db:rollback geo:
+  extends:
+    - db:rollback
+    - .rails:rules:ee-only-migration
+  script:
+    - bundle exec rake db:migrate:geo VERSION=20170627195211
+    - bundle exec rake db:migrate:geo

.gitlab/ci/dev-fixtures.gitlab-ci.yml

@@ -16,7 +16,7 @@
 
 .run-dev-fixtures-script: &run-dev-fixtures-script
   - run_timed_command "scripts/gitaly-test-spawn"
-  - run_timed_command "RAILS_ENV=test bundle exec rake db:seed_fu"
+  - run_timed_command "bundle exec rake db:seed_fu"
 
 run-dev-fixtures:
   extends:

.gitlab/ci/docs.gitlab-ci.yml

@@ -42,7 +42,7 @@ review-docs-cleanup:
 docs-lint links:
   extends:
     - .docs:rules:docs-lint
-  image: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-docs/lint-html:alpine-3.16-ruby-2.7.6-0bc327a4
+  image: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-docs/lint-html:alpine-3.16-ruby-3.0.5-869cfc5d
   stage: lint
   needs: []
   script:
@@ -58,18 +58,31 @@ docs-lint links:
 
 .docs-markdown-lint-image:
   # When updating the image version here, update it in /scripts/lint-doc.sh too.
-  image: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-docs/lint-markdown:alpine-3.16-vale-2.20.1-markdownlint-0.32.2
+  image: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-docs/lint-markdown:alpine-3.16-vale-2.22.0-markdownlint-0.32.2-markdownlint2-0.6.0
 
 docs-lint markdown:
   extends:
     - .default-retry
     - .docs:rules:docs-lint
     - .docs-markdown-lint-image
+    - .yarn-cache
   stage: lint
   needs: []
   script:
+    - source ./scripts/utils.sh
+    - yarn_install_script
     - scripts/lint-doc.sh
 
+docs-lint blueprint:
+  extends:
+    - .default-retry
+    - .docs:rules:docs-blueprints-lint
+  image: ${GITLAB_DEPENDENCY_PROXY_ADDRESS}ruby:${RUBY_VERSION}-slim
+  stage: lint
+  needs: []
+  script:
+    - scripts/lint-docs-blueprints.rb
+
 docs code_quality:
   extends:
     - .reports:rules:code_quality

.gitlab/ci/frontend.gitlab-ci.yml

@@ -33,10 +33,8 @@
 compile-production-assets:
   extends:
     - .compile-assets-base
+    - .production
     - .frontend:rules:compile-production-assets
-  variables:
-    NODE_ENV: "production"
-    RAILS_ENV: "production"
   artifacts:
     name: webpack-report
     expire_in: 31d
@@ -131,7 +129,7 @@ rspec-all frontend_fixture:
   needs:
     - !reference [.frontend-fixtures-base, needs]
     - "compile-test-assets"
-  parallel: 5
+  parallel: 7
 
 # Builds FOSS fixtures in the EE project, with the `ee/` folder removed (due to `as-if-foss`).
 rspec-all frontend_fixture as-if-foss:
@@ -202,7 +200,7 @@ jest:
       - tmp/tests/frontend/
     reports:
       junit: junit_jest.xml
-  parallel: 5
+  parallel: 7
 
 jest predictive:
   extends:
@@ -220,7 +218,7 @@ jest as-if-foss:
     - .frontend:rules:jest:as-if-foss
     - .as-if-foss
   needs: ["rspec-all frontend_fixture as-if-foss"]
-  parallel: 2
+  parallel: 4
 
 jest predictive as-if-foss:
   extends:

.gitlab/ci/global.gitlab-ci.yml

@@ -21,6 +21,12 @@
     - !reference [.default-utils-before_script, before_script]
     - source scripts/prepare_build.sh
 
+.production:
+  variables:
+    RAILS_ENV: "production"
+    NODE_ENV: "production"
+    GITLAB_ALLOW_SEPARATE_CI_DATABASE: "true"
+
 .ruby-gems-cache: &ruby-gems-cache
   key: "ruby-gems-debian-${DEBIAN_VERSION}-ruby-${RUBY_VERSION}"
   paths:
@@ -257,9 +263,13 @@
     - name: redis:5.0-alpine
     - name: elasticsearch:7.17.6
       command: ["elasticsearch", "-E", "discovery.type=single-node", "-E", "xpack.security.enabled=false"]
+    - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:zoekt-ci-image-1.0
+      alias: zoekt-ci-image
   variables:
     POSTGRES_HOST_AUTH_METHOD: trust
     PG_VERSION: "11"
+    ZOEKT_INDEX_BASE_URL: http://zoekt-ci-image:6060
+    ZOEKT_SEARCH_BASE_URL: http://zoekt-ci-image:6070
 
 .use-pg12-es7-ee:
   services:
@@ -268,9 +278,13 @@
     - name: redis:6.0-alpine
     - name: elasticsearch:7.17.6
       command: ["elasticsearch", "-E", "discovery.type=single-node", "-E", "xpack.security.enabled=false"]
+    - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:zoekt-ci-image-1.0
+      alias: zoekt-ci-image
   variables:
     POSTGRES_HOST_AUTH_METHOD: trust
     PG_VERSION: "12"
+    ZOEKT_INDEX_BASE_URL: http://zoekt-ci-image:6060
+    ZOEKT_SEARCH_BASE_URL: http://zoekt-ci-image:6070
 
 .use-pg13-es7-ee:
   services:
@@ -279,9 +293,13 @@
     - name: redis:6.2-alpine
     - name: elasticsearch:7.17.6
       command: ["elasticsearch", "-E", "discovery.type=single-node", "-E", "xpack.security.enabled=false"]
+    - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:zoekt-ci-image-1.0
+      alias: zoekt-ci-image
   variables:
     POSTGRES_HOST_AUTH_METHOD: trust
     PG_VERSION: "13"
+    ZOEKT_INDEX_BASE_URL: http://zoekt-ci-image:6060
+    ZOEKT_SEARCH_BASE_URL: http://zoekt-ci-image:6070
 
 .use-pg12-es8-ee:
   services:
@@ -289,11 +307,15 @@
       command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
     - name: redis:6.0-alpine
     - name: elasticsearch:8.5.3
+    - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:zoekt-ci-image-1.0
+      alias: zoekt-ci-image
   variables:
     POSTGRES_HOST_AUTH_METHOD: trust
     PG_VERSION: "12"
     ES_SETTING_DISCOVERY_TYPE: "single-node"
     ES_SETTING_XPACK_SECURITY_ENABLED: "false"
+    ZOEKT_INDEX_BASE_URL: http://zoekt-ci-image:6060
+    ZOEKT_SEARCH_BASE_URL: http://zoekt-ci-image:6070
 
 .use-pg12-opensearch1-ee:
   services:
@@ -303,9 +325,13 @@
     - name: opensearchproject/opensearch:1.3.5
       alias: elasticsearch
       command: ["bin/opensearch", "-E", "discovery.type=single-node", "-E", "plugins.security.disabled=true"]
+    - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:zoekt-ci-image-1.0
+      alias: zoekt-ci-image
   variables:
     POSTGRES_HOST_AUTH_METHOD: trust
     PG_VERSION: "12"
+    ZOEKT_INDEX_BASE_URL: http://zoekt-ci-image:6060
+    ZOEKT_SEARCH_BASE_URL: http://zoekt-ci-image:6070
 
 .use-pg12-opensearch2-ee:
   services:
@@ -315,9 +341,13 @@
     - name: opensearchproject/opensearch:2.2.1
       alias: elasticsearch
       command: ["bin/opensearch", "-E", "discovery.type=single-node", "-E", "plugins.security.disabled=true"]
+    - name: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images:zoekt-ci-image-1.0
+      alias: zoekt-ci-image
   variables:
     POSTGRES_HOST_AUTH_METHOD: trust
     PG_VERSION: "12"
+    ZOEKT_INDEX_BASE_URL: http://zoekt-ci-image:6060
+    ZOEKT_SEARCH_BASE_URL: http://zoekt-ci-image:6070
 
 .use-kaniko:
   image:

.gitlab/ci/memory.gitlab-ci.yml

@@ -19,12 +19,11 @@
 memory-on-boot:
   extends:
     - .only-code-memory-job-base
+    - .production
     - .use-pg12
   stage: test
   needs: ["setup-test-env", "compile-test-assets"]
   variables:
-    NODE_ENV: "production"
-    RAILS_ENV: "production"
     SETUP_DB: "true"
     MEMORY_ON_BOOT_FILE_PREFIX: "tmp/memory_on_boot_"
     TEST_COUNT: 5

.gitlab/ci/notify.gitlab-ci.yml

@@ -55,13 +55,14 @@ notify-pipeline-failure:
   script:
     - |
       if [[ "${CREATE_INCIDENT_FOR_PIPELINE_FAILURE}" == "true" ]]; then
-        scripts/create-pipeline-failure-incident.rb -p ${INCIDENT_PROJECT} -f ${INCIDENT_JSON} -t ${BROKEN_BRANCH_PROJECT_TOKEN};
+        scripts/create-pipeline-failure-incident.rb -p ${INCIDENT_PROJECT} -f ${INCIDENT_JSON} -t ${BROKEN_BRANCH_PROJECT_TOKEN} ||
+          scripts/slack ${SLACK_CHANNEL} "☠️  Broken pipeline incident creation failed! ☠️  See ${CI_JOB_URL}" ci_failing "Failed pipeline reporter";
         echosuccess "Created incident $(jq '.web_url' ${INCIDENT_JSON})";
       fi
     - |
       scripts/generate-failed-pipeline-slack-message.rb -i ${INCIDENT_JSON} -f ${FAILED_PIPELINE_SLACK_MESSAGE_FILE};
       curl -X POST -H 'Content-Type: application/json' --data @${FAILED_PIPELINE_SLACK_MESSAGE_FILE} "$CI_SLACK_WEBHOOK_URL" ||
-        scripts/slack ${SLACK_CHANNEL} "☠️  Broken pipeline notification failed! ☠️  See ${CI_JOB_URL}" ci_failing "Failed pipeline reporter"
+        scripts/slack ${SLACK_CHANNEL} "☠️  Broken pipeline notification failed! ☠️  See ${CI_JOB_URL}" ci_failing "Failed pipeline reporter";
 
   artifacts:
     paths:

.gitlab/ci/package-and-test/main.gitlab-ci.yml

@@ -1,4 +1,5 @@
 # E2E tests pipeline loaded dynamically by script: scripts/generate-e2e-pipeline
+# For adding new tests, refer to: doc/development/testing_guide/end_to_end/package_and_test_pipeline.md
 
 default:
   interruptible: true
@@ -7,7 +8,7 @@ include:
   - local: .gitlab/ci/package-and-test/rules.gitlab-ci.yml
   - local: .gitlab/ci/package-and-test/variables.gitlab-ci.yml
   - project: gitlab-org/quality/pipeline-common
-    ref: 1.14.1
+    ref: 2.0.0
     file:
       - /ci/base.gitlab-ci.yml
       - /ci/allure-report.yml
@@ -57,15 +58,16 @@ stages:
       optional: true
     - job: download-knapsack-report
       artifacts: true
+      optional: true
   variables:
     QA_GENERATE_ALLURE_REPORT: "true"
     QA_CAN_TEST_PRAEFECT: "false"
     QA_INTERCEPT_REQUESTS: "true"
     QA_RUN_TYPE: e2e-package-and-test
-    TEST_LICENSE_MODE: $QA_TEST_LICENSE_MODE
     EE_LICENSE: $QA_EE_LICENSE
     GITHUB_ACCESS_TOKEN: $QA_GITHUB_ACCESS_TOKEN
     GITLAB_QA_ADMIN_ACCESS_TOKEN: $QA_ADMIN_ACCESS_TOKEN
+    GITLAB_LICENSE_MODE: test
 
 # ==========================================
 # Prepare stage
@@ -122,6 +124,9 @@ trigger-omnibus-env:
       echo "OMNIBUS_GITLAB_RUBY3_BUILD=${OMNIBUS_GITLAB_RUBY3_BUILD:-false}" >> $BUILD_ENV
       echo "OMNIBUS_GITLAB_CACHE_EDITION=${OMNIBUS_GITLAB_CACHE_EDITION:-GITLAB}" >> $BUILD_ENV
       echo "GITLAB_ASSETS_TAG=$(assets_image_tag)" >> $BUILD_ENV
+      echo "EE=$([[ $FOSS_ONLY == '1' ]] && echo 'false' || echo 'true')" >> $BUILD_ENV
+      target_branch_name="${CI_MERGE_REQUEST_TARGET_BRANCH_NAME:-${CI_COMMIT_REF_NAME}}"
+      echo "TRIGGER_BRANCH=$([[ "${target_branch_name}" =~ ^[0-9-]+-stable(-ee)?$ ]] && echo ${target_branch_name%-ee} || echo 'master')" >> $BUILD_ENV
       echo "Built environment file for omnibus build:"
       cat $BUILD_ENV
   artifacts:
@@ -153,15 +158,16 @@ trigger-omnibus:
     CACHE_EDITION: $OMNIBUS_GITLAB_CACHE_EDITION
     SKIP_QA_DOCKER: "true"
     SKIP_QA_TEST: "true"
-    ee: "true"
+    ee: $EE
   trigger:
     project: gitlab-org/build/omnibus-gitlab-mirror
+    branch: $TRIGGER_BRANCH
     strategy: depend
 
 download-knapsack-report:
   extends:
     - .gitlab-qa-image
-    - .rules:prepare
+    - .rules:download-knapsack
   stage: .pre
   variables:
     KNAPSACK_DIR: ${CI_PROJECT_DIR}/qa/knapsack
@@ -216,13 +222,13 @@ _ee:quarantine:
 # ------------------------------------------
 
 # Run specs with feature flags set to the opposite of the default state
-ee:instance-parallel-ff-inverse:
+ee:instance-ff-inverse:
   extends:
     - .qa
     - .parallel
   variables:
     QA_SCENARIO: Test::Instance::Image
-    QA_KNAPSACK_REPORT_NAME: ee-instance-parallel
+    QA_KNAPSACK_REPORT_NAME: ee-instance
     GITLAB_QA_OPTS: --set-feature-flags $QA_FEATURE_FLAGS
   rules:
     - !reference [.rules:test:feature-flags-set, rules]
@@ -230,140 +236,141 @@ ee:instance-parallel-ff-inverse:
 # ------------------------------------------
 # Jobs with parallel variant
 # ------------------------------------------
-ee:instance:
+ee:instance-selective:
   extends: .qa
   variables:
     QA_SCENARIO: Test::Instance::Image
   rules:
-    - !reference [.rules:test:qa-non-parallel, rules]
+    - !reference [.rules:test:qa-selective, rules]
     - if: $QA_SUITES =~ /Test::Instance::All/
-ee:instance-parallel:
+ee:instance:
   extends:
     - .parallel
-    - ee:instance
+    - ee:instance-selective
   rules:
-    - !reference [.rules:test:feature-flags-set, rules]  # always run instance-parallel to validate ff change
+    - !reference [.rules:test:feature-flags-set, rules]  # always run ee:instance to validate ff change
     - !reference [.rules:test:qa-parallel, rules]
     - if: $QA_SUITES =~ /Test::Instance::All/
 
-ee:praefect:
+ee:praefect-selective:
   extends: .qa
   variables:
     QA_SCENARIO: Test::Integration::Praefect
     QA_CAN_TEST_PRAEFECT: "true"
   rules:
-    - !reference [.rules:test:qa-non-parallel, rules]
+    - !reference [.rules:test:qa-selective, rules]
     - if: $QA_SUITES =~ /Test::Instance::All/
-ee:praefect-parallel:
+ee:praefect:
   extends:
     - .parallel
-    - ee:praefect
+    - ee:praefect-selective
   rules:
     - !reference [.rules:test:qa-parallel, rules]
     - if: $QA_SUITES =~ /Test::Instance::All/
 
-ee:relative-url:
+ee:relative-url-selective:
   extends: .qa
   variables:
     QA_SCENARIO: Test::Instance::RelativeUrl
   rules:
-    - !reference [.rules:test:qa-non-parallel, rules]
+    - !reference [.rules:test:qa-selective, rules]
     - if: $QA_SUITES =~ /Test::Instance::All/
-ee:relative-url-parallel:
+ee:relative-url:
   extends:
     - .parallel
-    - ee:relative-url
+    - ee:relative-url-selective
   rules:
     - !reference [.rules:test:qa-parallel, rules]
     - if: $QA_SUITES =~ /Test::Instance::All/
 
-ee:decomposition-single-db:
+ee:decomposition-single-db-selective:
   extends: .qa
   variables:
     QA_SCENARIO: Test::Instance::Image
     GITLAB_QA_OPTS: --omnibus-config decomposition_single_db
   rules:
-    - !reference [.rules:test:qa-non-parallel, rules]
+    - !reference [.rules:test:qa-selective, rules]
     - if: $QA_SUITES =~ /Test::Instance::All/
-ee:decomposition-single-db-parallel:
+ee:decomposition-single-db:
   extends:
     - .parallel
-    - ee:decomposition-single-db
+    - ee:decomposition-single-db-selective
   rules:
     - !reference [.rules:test:qa-parallel, rules]
     - if: $QA_SUITES =~ /Test::Instance::All/
 
-ee:decomposition-multiple-db:
+ee:decomposition-multiple-db-selective:
   extends: .qa
   variables:
     QA_SCENARIO: Test::Instance::Image
+    GITLAB_ALLOW_SEPARATE_CI_DATABASE: "true"
     GITLAB_QA_OPTS: --omnibus-config decomposition_multiple_db
   rules:
-    - !reference [.rules:test:qa-non-parallel, rules]
+    - !reference [.rules:test:qa-selective, rules]
     - if: $QA_SUITES =~ /Test::Instance::All/
-ee:decomposition-multiple-db-parallel:
+ee:decomposition-multiple-db:
   extends:
     - .parallel
-    - ee:decomposition-multiple-db
+    - ee:decomposition-multiple-db-selective
   rules:
     - !reference [.rules:test:qa-parallel, rules]
     - if: $QA_SUITES =~ /Test::Instance::All/
 
-ee:object-storage:
+ee:object-storage-selective:
   extends: .qa
   variables:
     QA_SCENARIO: Test::Instance::Image
     QA_RSPEC_TAGS: --tag object_storage
     GITLAB_QA_OPTS: --omnibus-config object_storage
   rules:
-    - !reference [.rules:test:qa-non-parallel, rules]
+    - !reference [.rules:test:qa-selective, rules]
     - if: $QA_SUITES =~ /Test::Instance::ObjectStorage/
-ee:object-storage-parallel:
+ee:object-storage:
-  extends: ee:object-storage
+  extends: ee:object-storage-selective
   parallel: 2
   rules:
     - !reference [.rules:test:qa-parallel, rules]
     - if: $QA_SUITES =~ /Test::Instance::ObjectStorage/
 
-ee:object-storage-aws:
+ee:object-storage-aws-selective:
-  extends: ee:object-storage
+  extends: ee:object-storage-selective
   variables:
     AWS_S3_ACCESS_KEY: $QA_AWS_S3_ACCESS_KEY
     AWS_S3_BUCKET_NAME: $QA_AWS_S3_BUCKET_NAME
     AWS_S3_KEY_ID: $QA_AWS_S3_KEY_ID
     AWS_S3_REGION: $QA_AWS_S3_REGION
     GITLAB_QA_OPTS: --omnibus-config object_storage_aws
-ee:object-storage-aws-parallel:
+ee:object-storage-aws:
-  extends: ee:object-storage-aws
+  extends: ee:object-storage-aws-selective
   parallel: 2
   rules:
-    - !reference [ee:object-storage-parallel, rules]
+    - !reference [ee:object-storage, rules]
 
-ee:object-storage-gcs:
+ee:object-storage-gcs-selective:
-  extends: ee:object-storage
+  extends: ee:object-storage-selective
   variables:
     GCS_BUCKET_NAME: $QA_GCS_BUCKET_NAME
     GOOGLE_PROJECT: $QA_GOOGLE_PROJECT
     GOOGLE_JSON_KEY: $QA_GOOGLE_JSON_KEY
     GOOGLE_CLIENT_EMAIL: $QA_GOOGLE_CLIENT_EMAIL
     GITLAB_QA_OPTS: --omnibus-config object_storage_gcs
-ee:object-storage-gcs-parallel:
+ee:object-storage-gcs:
-  extends: ee:object-storage-gcs
+  extends: ee:object-storage-gcs-selective
   parallel: 2
   rules:
-    - !reference [ee:object-storage-parallel, rules]
+    - !reference [ee:object-storage, rules]
 
-ee:packages:
+ee:packages-selective:
   extends: .qa
   variables:
     QA_SCENARIO: Test::Instance::Image
     QA_RSPEC_TAGS: --tag packages
     GITLAB_QA_OPTS: --omnibus-config packages
   rules:
-    - !reference [.rules:test:qa-non-parallel, rules]
+    - !reference [.rules:test:qa-selective, rules]
     - if: $QA_SUITES =~ /Test::Instance::Packages/
-ee:packages-parallel:
+ee:packages:
-  extends: ee:packages
+  extends: ee:packages-selective
   parallel: 2
   rules:
     - !reference [.rules:test:qa-parallel, rules]
@@ -440,7 +447,7 @@ ee:jira:
     JIRA_ADMIN_PASSWORD: $QA_JIRA_ADMIN_PASSWORD
   rules:
     - !reference [.rules:test:qa, rules]
-    - if: $QA_SUITES =~ /Test::Instance::Jira/
+    - if: $QA_SUITES =~ /Test::Integration::Jira/
     - !reference [.rules:test:manual, rules]
 
 ee:integrations:
@@ -485,7 +492,7 @@ ee:mtls:
     QA_SCENARIO: Test::Integration::MTLS
   rules:
     - !reference [.rules:test:qa, rules]
-    - if: $QA_SUITES =~ /Test::Integration::MTLS/
+    - if: $QA_SUITES =~ /Test::Integration::Mtls/
     - !reference [.rules:test:manual, rules]
 
 ee:mattermost:
@@ -584,7 +591,6 @@ ee:elasticsearch:
   variables:
     QA_SCENARIO: "Test::Integration::Elasticsearch"
   before_script:
-    - unset ELASTIC_URL  # unset url which is globally defined in .gitlab-ci.yml
     - !reference [.qa, before_script]
   rules:
     - !reference [.rules:test:qa, rules]
@@ -592,7 +598,7 @@ ee:elasticsearch:
     - !reference [.rules:test:manual, rules]
 
 ee:registry-object-storage-tls:
-  extends: ee:object-storage-aws
+  extends: ee:object-storage-aws-selective
   variables:
     QA_SCENARIO: Test::Integration::RegistryTLS
     QA_RSPEC_TAGS: ""
@@ -619,16 +625,11 @@ e2e-test-report:
     - .rules:report:allure-report
   stage: report
   variables:
-    GITLAB_AUTH_TOKEN: $GITLAB_QA_MR_ALLURE_REPORT_TOKEN
+    GITLAB_AUTH_TOKEN: $PROJECT_TOKEN_FOR_CI_SCRIPTS_API_USAGE
     ALLURE_PROJECT_PATH: $CI_PROJECT_PATH
     ALLURE_MERGE_REQUEST_IID: $CI_MERGE_REQUEST_IID
     ALLURE_JOB_NAME: e2e-package-and-test
     GIT_STRATEGY: none
-  artifacts:  # save rspec results for displaying in parent pipeline
-    expire_in: 1 day
-    when: always
-    paths:
-      - gitlab-qa-run-*/**/rspec-*.xml
 
 upload-knapsack-report:
   extends:
@@ -658,7 +659,7 @@ relate-test-failures:
   variables:
     QA_FAILURES_REPORTING_PROJECT: gitlab-org/gitlab
     QA_FAILURES_MAX_DIFF_RATIO: "0.15"
-    GITLAB_QA_ACCESS_TOKEN: $GITLAB_QA_PRODUCTION_ACCESS_TOKEN
+    GITLAB_QA_ACCESS_TOKEN: $QA_GITLAB_CI_TOKEN
   when: on_failure
   script:
     - |

.gitlab/ci/package-and-test/rules.gitlab-ci.yml

@@ -43,9 +43,9 @@
 
 .rules:dont-interrupt:
   rules:
-    - if: $CI_COMMIT_REF_NAME == $CI_DEFAULT_BRANCH
+    - if: '$CI_COMMIT_REF_NAME == $CI_DEFAULT_BRANCH && $CI_MERGE_REQUEST_IID == null'
       allow_failure: true
-    - if: $CI_MERGE_REQUEST_IID
+    - if: '$CI_MERGE_REQUEST_EVENT_TYPE == "merged_result" || $CI_MERGE_REQUEST_EVENT_TYPE == "detached"'
       when: manual
       allow_failure: true
 
@@ -61,6 +61,15 @@
       when: never
     - when: always
 
+# This job requires project access token with api permissions to detect parallel jobs,
+# it is problematic to set for every project that would include this template
+# Because parallel jobs themselves can download knapsack report, skip for non canonical runs
+.rules:download-knapsack:
+  rules:
+    - <<: *not-canonical-project
+      when: never
+    - when: always
+
 # ------------------------------------------
 # Test
 # ------------------------------------------
@@ -80,7 +89,7 @@
 
 # parallel and non parallel rules are used for jobs that require parallel execution and thus need to switch
 # between parallel and non parallel when only certain specs are executed
-.rules:test:qa-non-parallel:
+.rules:test:qa-selective:
   rules:
     # always run parallel with full suite when framework changes present or ff state changed
     - <<: *qa-run-all-tests

.gitlab/ci/package-and-test/variables.gitlab-ci.yml

@@ -10,3 +10,6 @@ variables:
   QA_LOG_LEVEL: "info"
   QA_TESTS: ""
   QA_FEATURE_FLAGS: ""
+  # run all tests by default when package-and-test is included natively in other projects
+  # this will be overridden when selective test execution is used in gitlab canonical project
+  QA_RUN_ALL_TESTS: "true"

.gitlab/ci/preflight.gitlab-ci.yml

@@ -0,0 +1,14 @@
+rails-production-environment:
+  extends:
+    - .default-before_script
+    - .production
+    - .ruby-cache
+    - .setup:rules:rails-production-environment
+    - .use-pg12
+  stage: preflight
+  variables:
+    BUNDLE_WITHOUT: "development:test"
+    BUNDLE_WITH: "production"
+  needs: []
+  script:
+    - bundle exec rails runner --environment=production 'puts Rails.env'

.gitlab/ci/qa.gitlab-ci.yml

@@ -67,6 +67,7 @@ qa:update-qa-cache:
 
 e2e:package-and-test:
   extends:
+    - .production  # this makes sure GITLAB_ALLOW_SEPARATE_CI_DATABASE is passed to the child pipeline
     - .qa:rules:package-and-test
   stage: qa
   needs:
@@ -81,6 +82,13 @@ e2e:package-and-test:
     GITLAB_QA_IMAGE: "${CI_REGISTRY_IMAGE}/gitlab-ee-qa:${CI_COMMIT_SHA}"
     RUN_WITH_BUNDLE: "true"  # instructs pipeline to install and run gitlab-qa gem via bundler
     QA_PATH: qa  # sets the optional path for bundler to run from
+  inherit:
+    variables:
+      - CHROME_VERSION
+      - RUBY_VERSION
+      - DOCKER_VERSION
+      - REGISTRY_GROUP
+      - REGISTRY_HOST
   trigger:
     strategy: depend
     forward:
@@ -90,24 +98,19 @@ e2e:package-and-test:
       - artifact: package-and-test-pipeline.yml
         job: e2e-test-pipeline-generate
 
-# Fetch child pipeline test results and store in parent pipeline
+e2e:test-on-gdk:
-# workaround until natively implemented: https://gitlab.com/groups/gitlab-org/-/epics/8205
-e2e:package-and-test-results:
-  image: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images/debian-bullseye-ruby-${RUBY_VERSION}:bundler-2.3
   extends:
-    - .qa-job-base
+    - .qa:rules:e2e:test-on-gdk
-    - .qa:rules:package-and-test
   stage: qa
   needs:
-    - e2e:package-and-test
+    # In scheduled master pipelines we wait for the image to be built.
-  variables:
+    # In MRs we assume the last scheduled master pipeline built the image already.
-    COLORIZED_LOGS: "true"
+    - job: build-qa-on-gdk-master-image
-    QA_LOG_LEVEL: "debug"
+      optional: true
-  when: always
   allow_failure: true
-  script:
+  trigger:
-    - bundle exec rake "ci:download_test_results[e2e:package-and-test,e2e-test-report,${CI_PROJECT_DIR}]"
+    strategy: depend
-  artifacts:
+    forward:
-    when: always
+      yaml_variables: true
-    reports:
+      pipeline_variables: true
-      junit: gitlab-qa-run-*/**/rspec-*.xml
+    include: .gitlab/ci/test-on-gdk/main.gitlab-ci.yml

.gitlab/ci/rails.gitlab-ci.yml

@@ -210,91 +210,6 @@ rspec fast_spec_helper:
     # Load fast_spec_helper as well just in case there are no specs available.
     - bin/rspec --dry-run spec/fast_spec_helper.rb $fast_spec_helper_specs
 
-db:rollback:
-  extends: .db-job-base
-  script:
-    - scripts/db_tasks db:migrate VERSION=20210602155110
-    - scripts/db_tasks db:migrate SKIP_SCHEMA_VERSION_CHECK=true
-
-db:rollback single-db:
-  extends:
-    - db:rollback
-    - .single-db
-    - .rails:rules:single-db
-
-db:migrate:reset:
-  extends: .db-job-base
-  script:
-    - bundle exec rake db:migrate:reset
-
-db:migrate:reset single-db:
-  extends:
-    - db:migrate:reset
-    - .single-db
-    - .rails:rules:single-db
-
-db:check-schema:
-  extends:
-    - .db-job-base
-    - .rails:rules:ee-mr-and-default-branch-only
-  script:
-    - run_timed_command "bundle exec rake db:drop db:create"
-    - run_timed_command "scripts/db_tasks db:migrate"
-
-db:check-schema-single-db:
-  extends:
-    - db:check-schema
-    - .single-db
-    - .rails:rules:single-db
-
-db:check-migrations:
-  extends:
-    - .db-job-base
-    - .rails:rules:ee-and-foss-mr-with-migration
-  script:
-    - git fetch origin $CI_MERGE_REQUEST_TARGET_BRANCH_NAME:$CI_MERGE_REQUEST_TARGET_BRANCH_NAME --depth 20
-    - scripts/validate_migration_schema
-  allow_failure: true
-
-db:check-migrations-single-db:
-  extends:
-    - db:check-migrations
-    - .single-db
-    - .rails:rules:single-db
-
-db:post_deployment_migrations_validator:
-  extends:
-    - .db-job-base
-    - .rails:rules:ee-and-foss-mr-with-migration
-  script:
-    - git fetch origin $CI_MERGE_REQUEST_TARGET_BRANCH_NAME:$CI_MERGE_REQUEST_TARGET_BRANCH_NAME --depth 20
-    - scripts/post_deployment_migrations_validator
-  allow_failure: true
-
-db:post_deployment_migrations_validator-single-db:
-  extends:
-    - db:post_deployment_migrations_validator
-    - .single-db
-    - .rails:rules:single-db
-
-db:migrate-non-superuser:
-  extends:
-    - .db-job-base
-    - .rails:rules:ee-and-foss-mr-with-migration
-  script:
-    - bundle exec rake gitlab:db:reset_as_non_superuser
-
-db:gitlabcom-database-testing:
-  extends: .rails:rules:db:gitlabcom-database-testing
-  stage: test
-  image: ruby:${RUBY_VERSION}-alpine
-  needs: []
-  allow_failure: true
-  script:
-    - source scripts/utils.sh
-    - install_gitlab_gem
-    - ./scripts/trigger-build.rb gitlab-com-database-testing
-
 gitlab:setup:
   extends: .db-job-base
   variables:
@@ -312,27 +227,6 @@ gitlab:setup:
     paths:
       - log/*.log
 
-db:backup_and_restore:
-  extends:
-    - .db-job-base
-    - .rails:rules:db-backup
-  variables:
-    SETUP_DB: "false"
-    GITLAB_ASSUME_YES: "1"
-  script:
-    - . scripts/prepare_build.sh
-    - bundle exec rake db:drop db:create db:structure:load db:seed_fu
-    - mkdir -p tmp/tests/public/uploads tmp/tests/{artifacts,pages,lfs-objects,terraform_state,registry,packages}
-    - bundle exec rake gitlab:backup:create
-    - date
-    - bundle exec rake gitlab:backup:restore
-
-db:backup_and_restore single-db:
-  extends:
-    - db:backup_and_restore
-    - .single-db
-    - .rails:rules:db-backup
-
 rspec:deprecations:
   extends:
     - .default-retry
@@ -716,14 +610,6 @@ rspec-ee system pg12 single-db:
     - rspec-ee system pg12
     - .single-db-rspec
     - .rails:rules:single-db
-
-db:rollback geo:
-  extends:
-    - db:rollback
-    - .rails:rules:ee-only-migration
-  script:
-    - bundle exec rake db:migrate:geo VERSION=20170627195211
-    - bundle exec rake db:migrate:geo
 # EE: default refs (MRs, default branch, schedules) jobs #
 ##################################################
 
@@ -908,19 +794,28 @@ rspec-ee system pg13:
 
 ##################################################
 # EE: Canonical MR pipelines
-rspec fail-fast:
+.rspec-fail-fast:
   extends:
-    - .rspec-ee-base-pg12  # This job also runs EE spec which needs elasticsearch
     - .rails:rules:rspec fail-fast
   stage: test
   needs: ["setup-test-env", "retrieve-tests-metadata", "compile-test-assets", "detect-tests"]
   script:
     - !reference [.base-script, script]
-    - rspec_fail_fast "${RSPEC_MATCHING_TESTS_PATH}" "--tag ~quarantine"
+    - rspec_fail_fast "${MATCHING_TESTS_PATH}" "--tag ~quarantine --tag ~zoekt"
-  artifacts:
+
-    expire_in: 7d
+rspec fail-fast:
-    paths:
+  extends:
-      - tmp/capybara/
+    - .rspec-base-pg12
+    - .rspec-fail-fast  # extends from .rspec-fail-fast last to override script from .rspec-base-pg12
+  variables:
+    MATCHING_TESTS_PATH: "${RSPEC_MATCHING_TESTS_FOSS_PATH}"
+
+rspec-ee fail-fast:
+  extends:
+    - .rspec-ee-base-pg12
+    - .rspec-fail-fast  # extends from .rspec-fail-fast last to override script from .rspec-ee-base-pg12
+  variables:
+    MATCHING_TESTS_PATH: "${RSPEC_MATCHING_TESTS_EE_PATH}"
 
 rspec-foss-impact:pipeline-generate:
   extends:
@@ -977,7 +872,7 @@ fail-pipeline-early:
   extends:
     - .rails:rules:rerun-previous-failed-tests
   stage: test
-  needs: ["setup-test-env", "compile-test-assets", "detect-previous-failed-tests"]
+  needs: ["setup-test-env", "retrieve-tests-metadata", "compile-test-assets", "detect-previous-failed-tests"]
   script:
     - !reference [.base-script, script]
     - rspec_rerun_previous_failed_tests "${PREVIOUS_FAILED_TESTS_FILE}"
@@ -987,7 +882,7 @@ rspec rspec-pg12-rerun-previous-failed-tests:
     - .rspec-base-pg12
     - .base-rspec-pg12-rerun-previous-failed-tests
   variables:
-    PREVIOUS_FAILED_TESTS_FILE: tmp/previous_failed_tests/rspec_failed_files.txt
+    PREVIOUS_FAILED_TESTS_FILE: tmp/previous_failed_tests/rspec_failed_tests.txt
 
 rspec rspec-ee-pg12-rerun-previous-failed-tests:
   extends:
@@ -995,6 +890,5 @@ rspec rspec-ee-pg12-rerun-previous-failed-tests:
     - .base-rspec-pg12-rerun-previous-failed-tests
   variables:
     PREVIOUS_FAILED_TESTS_FILE: tmp/previous_failed_tests/rspec_ee_failed_files.txt
-
 # EE: Canonical MR pipelines
 ##################################################

.gitlab/ci/rails/rspec-foss-impact.gitlab-ci.yml.erb

@@ -42,7 +42,7 @@ rspec foss-impact:
 <% end %>
   script:
     - !reference [.base-script, script]
-    - rspec_paralellized_job "--tag ~quarantine --tag ~level:migration"
+    - rspec_paralellized_job "--tag ~quarantine --tag ~level:migration --tag ~zoekt"
   artifacts:
     expire_in: 7d
     paths:

.gitlab/ci/rails/shared.gitlab-ci.yml

@@ -55,7 +55,12 @@ include:
     GEO_SECONDARY_PROXY: 0
     RSPEC_TESTS_FILTER_FILE: "${RSPEC_MATCHING_TESTS_PATH}"
     SUCCESSFULLY_RETRIED_TEST_EXIT_CODE: 137
-  needs: ["setup-test-env", "retrieve-tests-metadata", "compile-test-assets", "detect-tests"]
+  needs:
+    - job: "setup-test-env"
+    - job: "retrieve-tests-metadata"
+    - job: "compile-test-assets"
+    - job: "detect-tests"
+      optional: true
   script:
     - !reference [.base-script, script]
     # We need to exclude background migration because unit tests run with
@@ -85,7 +90,7 @@ include:
 .rspec-base-migration:
   script:
     - !reference [.base-script, script]
-    - rspec_paralellized_job "--tag ~quarantine"
+    - rspec_paralellized_job "--tag ~quarantine --tag ~zoekt"
 
 .rspec-base-pg11:
   extends:
@@ -102,7 +107,12 @@ include:
     - .rspec-base
     - .as-if-foss
     - .use-pg12
-  needs: ["setup-test-env", "retrieve-tests-metadata", "compile-test-assets as-if-foss", "detect-tests"]
+  needs:
+    - job: "setup-test-env"
+    - job: "retrieve-tests-metadata"
+    - job: "compile-test-assets as-if-foss"
+    - job: "detect-tests"
+      optional: true
 
 .rspec-base-pg13:
   extends:

.gitlab/ci/release-environments.gitlab-ci.yml

@@ -0,0 +1,23 @@
+---
+start-release-environments-pipeline:
+  allow_failure: true
+  extends:
+    - .release-environments:rules:start-release-environments-pipeline
+  stage: release-environments
+  # We do not want to have ALL global variables passed as trigger variables,
+  # as they cannot be overridden. See this issue for more context:
+  #
+  # https://gitlab.com/gitlab-org/gitlab/-/issues/387183
+  inherit:
+    variables:
+      - RUBY_VERSION
+
+  # These variables are set in the pipeline schedules.
+  # They need to be explicitly passed on to the child pipeline.
+  # https://docs.gitlab.com/ee/ci/pipelines/multi_project_pipelines.html#pass-cicd-variables-to-a-downstream-pipeline-by-using-the-variables-keyword
+  variables:
+    # This is needed by `release-environments-build-cng-env` (`.gitlab/ci/release-environments/main.gitlab-ci.yml`).
+    PARENT_PIPELINE_ID: $CI_PIPELINE_ID
+  trigger:
+    strategy: depend
+    include: .gitlab/ci/release-environments/main.gitlab-ci.yml

.gitlab/ci/release-environments/main.gitlab-ci.yml

@@ -0,0 +1,62 @@
+---
+default:
+  interruptible: true
+
+stages:
+  - prepare
+
+include:
+  - local: .gitlab/ci/global.gitlab-ci.yml
+
+release-environments-build-cng-env:
+  allow_failure: true
+  image: ${GITLAB_DEPENDENCY_PROXY_ADDRESS}ruby:${RUBY_VERSION}-alpine3.16
+  stage: prepare
+  needs:
+    # We need this job because we need its `cached-assets-hash.txt` artifact, so that we can pass the assets image tag to the downstream CNG pipeline.
+    - pipeline: $PARENT_PIPELINE_ID
+      job: build-assets-image
+  variables:
+    BUILD_ENV: build.env
+  before_script:
+    - source ./scripts/utils.sh
+    - install_gitlab_gem
+  script:
+    - 'ruby -r./scripts/trigger-build.rb -e "puts Trigger.variables_for_env_file(Trigger::CNG.new.variables)" > $BUILD_ENV'
+    - echo "GITLAB_ASSETS_TAG=$(assets_image_tag)" >> $BUILD_ENV
+    - ruby -e 'puts "FULL_RUBY_VERSION=#{RUBY_VERSION}"' >> build.env
+    - cat $BUILD_ENV
+  artifacts:
+    reports:
+      dotenv: $BUILD_ENV
+    paths:
+      - $BUILD_ENV
+    expire_in: 7 days
+    when: always
+
+release-environments-build-cng:
+  allow_failure: true
+  stage: prepare
+  needs: ["release-environments-build-cng-env"]
+  inherit:
+    variables: false
+  variables:
+    GITLAB_REF_SLUG: "${GITLAB_REF_SLUG}"
+    # CNG pipeline specific variables
+    GITLAB_VERSION: "${GITLAB_VERSION}"
+    GITLAB_TAG: "${GITLAB_TAG}"
+    GITLAB_ASSETS_TAG: "${GITLAB_ASSETS_TAG}"
+    FORCE_RAILS_IMAGE_BUILDS: "${FORCE_RAILS_IMAGE_BUILDS}"
+    CE_PIPELINE: "${CE_PIPELINE}"  # Based on https://docs.gitlab.com/ee/ci/jobs/job_control.html#check-if-a-variable-exists, `if: '$CE_PIPELINE'` will evaluate to `false` when this variable is empty
+    EE_PIPELINE: "${EE_PIPELINE}"  # Based on https://docs.gitlab.com/ee/ci/jobs/job_control.html#check-if-a-variable-exists, `if: '$EE_PIPELINE'` will evaluate to `false` when this variable is empty
+    GITLAB_ELASTICSEARCH_INDEXER_VERSION: "${GITLAB_ELASTICSEARCH_INDEXER_VERSION}"
+    GITLAB_KAS_VERSION: "${GITLAB_KAS_VERSION}"
+    GITLAB_METRICS_EXPORTER_VERSION: "${GITLAB_METRICS_EXPORTER_VERSION}"
+    GITLAB_PAGES_VERSION: "${GITLAB_PAGES_VERSION}"
+    GITLAB_SHELL_VERSION: "${GITLAB_SHELL_VERSION}"
+    GITALY_SERVER_VERSION: "${GITALY_SERVER_VERSION}"
+    RUBY_VERSION: "${FULL_RUBY_VERSION}"
+  trigger:
+    project: gitlab-org/build/CNG-mirror
+    branch: $TRIGGER_BRANCH
+    strategy: depend

.gitlab/ci/reports.gitlab-ci.yml

@@ -104,7 +104,8 @@ yarn-audit-dependency_scanning:
     - mkdir ~/.aws
     - '[[ -z "${AWS_SIEM_REPORT_INGESTION_CREDENTIALS_FILE}" ]] || mv "${AWS_SIEM_REPORT_INGESTION_CREDENTIALS_FILE}" ~/.aws/credentials'
     - npm install --no-save --ignore-scripts @aws-sdk/client-s3@3.49.0
-    - scripts/ingest-reports-to-siem
+    - scripts/ingest-reports-to-siem || true  # Allow legacy report to fail as we'll remove it in the future anyway
+    - scripts/ingest-reports-to-siem-devo
   artifacts:
     paths:
       - gl-dependency-scanning-report.json

.gitlab/ci/review-apps/main.gitlab-ci.yml

@@ -10,7 +10,6 @@ stages:
 
 include:
   - local: .gitlab/ci/global.gitlab-ci.yml
-  - local: .gitlab/ci/rules.gitlab-ci.yml
   - local: .gitlab/ci/review-apps/rules.gitlab-ci.yml
   - local: .gitlab/ci/review-apps/qa.gitlab-ci.yml
   - local: .gitlab/ci/review-apps/dast.gitlab-ci.yml
@@ -19,7 +18,6 @@ include:
 .base-before_script: &base-before_script
   - source ./scripts/utils.sh
   - source ./scripts/review_apps/review-apps.sh
-  - apt-get update && apt-get install -y jq
 
 dont-interrupt-me:
   extends: .rules:dont-interrupt
@@ -32,7 +30,7 @@ review-build-cng-env:
   extends:
     - .default-retry
     - .review:rules:review-build-cng
-  image: ${GITLAB_DEPENDENCY_PROXY}ruby:${RUBY_VERSION}-alpine3.16
+  image: ${GITLAB_DEPENDENCY_PROXY_ADDRESS}ruby:${RUBY_VERSION}-alpine3.16
   stage: prepare
   needs:
     # We need this job because we need its `cached-assets-hash.txt` artifact, so that we can pass the assets image tag to the downstream CNG pipeline.
@@ -97,20 +95,21 @@ review-build-cng:
   variables:
     HOST_SUFFIX: "${CI_ENVIRONMENT_SLUG}"
     DOMAIN: "-${CI_ENVIRONMENT_SLUG}.${REVIEW_APPS_DOMAIN}"
-    GITLAB_HELM_CHART_REF: "ed813953079c1d81aa69d4cb8171c69aa9741f01"  # 6.5.4: https://gitlab.com/gitlab-org/charts/gitlab/-/commit/ed813953079c1d81aa69d4cb8171c69aa9741f01
+    GITLAB_HELM_CHART_REF: "afcef7854ac72c5ff958035ef210ba6c68ec800b"  # 6.8.0: https://gitlab.com/gitlab-org/charts/gitlab/-/commit/afcef7854ac72c5ff958035ef210ba6c68ec800b
   environment:
     name: review/${CI_COMMIT_REF_SLUG}${SCHEDULE_TYPE}  # No separator for SCHEDULE_TYPE so it's compatible as before and looks nice without it
     url: https://gitlab-${CI_ENVIRONMENT_SLUG}.${REVIEW_APPS_DOMAIN}
-    on_stop: review-stop
+    on_stop: trigger-review-stop
-    auto_stop_in: 6 hours
 
 review-deploy:
   extends:
     - .review-workflow-base
     - .review:rules:review-deploy
   stage: deploy
-  image: ${GITLAB_DEPENDENCY_PROXY}dtzar/helm-kubectl:3.10.3
+  image: ${GITLAB_DEPENDENCY_PROXY_ADDRESS}dtzar/helm-kubectl:3.9.3
-  needs: ["review-build-cng"]
+  needs:
+    - review-build-cng
+    - review-delete-deployment # We always want to start from a clean slate (i.e. no helm release, no k8s namespace)
   cache:
     key: "review-deploy-dependencies-charts-${GITLAB_HELM_CHART_REF}-v1"
     paths:
@@ -168,31 +167,35 @@ review-deploy-sample-projects:
   extends: .review-workflow-base
   environment:
     action: stop
-  dependencies: []
   variables:
     # We're cloning the repo instead of downloading the script for now
     # because some repos are private and CI_JOB_TOKEN cannot access files.
     # See https://gitlab.com/gitlab-org/gitlab/issues/191273
     GIT_DEPTH: 1
-  before_script:
-    - source ./scripts/utils.sh
-    - source ./scripts/review_apps/review-apps.sh
-    - !reference [".use-kube-context", before_script]
 
 review-delete-deployment:
   extends:
     - .review-stop-base
     - .review:rules:review-delete-deployment
+  dependencies: []
   stage: prepare
+  before_script:
+    - source ./scripts/utils.sh
+    - source ./scripts/review_apps/review-apps.sh
+    - !reference [".use-kube-context", before_script]
   script:
-    - delete_helm_release
+    - retry delete_helm_release
 
-review-stop:
+trigger-review-stop:
   extends:
     - .review-stop-base
-    - .review:rules:review-stop
+    - .review:rules:trigger-review-stop
-  resource_group: review/${CI_COMMIT_REF_SLUG}${SCHEDULE_TYPE} # CI_ENVIRONMENT_SLUG is not available here and we want this to be the same as the environment
   stage: deploy
   needs: []
+  before_script:
+    - source ./scripts/utils.sh
+    - install_gitlab_gem
   script:
-    - delete_helm_release
+    - review_stop_job_id="$(scripts/api/get_job_id.rb --pipeline-id "${PARENT_PIPELINE_ID}" --job-name "review-stop")"
+    - |
+      curl --request POST --header "Private-Token: ${PROJECT_TOKEN_FOR_CI_SCRIPTS_API_USAGE}" "${CI_API_V4_URL}/projects/${CI_PROJECT_ID}/jobs/${review_stop_job_id}/play"

.gitlab/ci/review-apps/qa.gitlab-ci.yml

@@ -1,6 +1,6 @@
 include:
   - project: gitlab-org/quality/pipeline-common
-    ref: 1.14.1
+    ref: 2.0.0
     file:
       - /ci/base.gitlab-ci.yml
       - /ci/allure-report.yml
@@ -143,15 +143,10 @@ e2e-test-report:
     ALLURE_PROJECT_PATH: $CI_PROJECT_PATH
     ALLURE_RESULTS_GLOB: qa/tmp/allure-results
     ALLURE_MERGE_REQUEST_IID: $CI_MERGE_REQUEST_IID
-    GITLAB_AUTH_TOKEN: $GITLAB_QA_MR_ALLURE_REPORT_TOKEN
+    GITLAB_AUTH_TOKEN: $PROJECT_TOKEN_FOR_CI_SCRIPTS_API_USAGE
     GIT_STRATEGY: none
   allow_failure: true
   when: always
-  artifacts:  # re-save rspec results for displaying in parent pipeline
-    expire_in: 1 day
-    when: always
-    paths:
-      - qa/tmp/rspec-*.xml
 
 upload-knapsack-report:
   extends:

.gitlab/ci/review-apps/rules.gitlab-ci.yml

@@ -1,3 +1,6 @@
+# ------------------------------------------
+# Conditions
+# ------------------------------------------
 # Specific specs passed
 .specific-specs: &specific-specs
   if: $QA_TESTS != ""
@@ -8,7 +11,7 @@
 
 # No specific specs in mr pipeline
 .all-specs-mr: &all-specs-mr
-  if: $CI_MERGE_REQUEST_IID && $QA_TESTS == ""
+  if: '($CI_MERGE_REQUEST_EVENT_TYPE == "merged_result" || $CI_MERGE_REQUEST_EVENT_TYPE == "detached") && $QA_TESTS == ""'
   when: manual
 
 # Triggered by change pattern
@@ -22,6 +25,31 @@
 .default-branch: &default-branch
   if: $CI_COMMIT_REF_NAME == $CI_DEFAULT_BRANCH
 
+.if-merge-request: &if-merge-request
+  if: '$CI_MERGE_REQUEST_EVENT_TYPE == "merged_result" || $CI_MERGE_REQUEST_EVENT_TYPE == "detached"'
+
+.if-merge-request-labels-run-review-app: &if-merge-request-labels-run-review-app
+  if: '$CI_MERGE_REQUEST_LABELS =~ /pipeline:run-review-app/'
+
+.if-dot-com-ee-schedule-nightly-child-pipeline: &if-dot-com-ee-schedule-nightly-child-pipeline
+  if: '$CI_SERVER_HOST == "gitlab.com" && $CI_PROJECT_PATH == "gitlab-org/gitlab" && $CI_PIPELINE_SOURCE == "parent_pipeline" && $SCHEDULE_TYPE == "nightly"'
+
+# ------------------------------------------
+# Changes patterns
+# ------------------------------------------
+.ci-review-patterns: &ci-review-patterns
+  - ".gitlab-ci.yml"
+  - ".gitlab/ci/frontend.gitlab-ci.yml"
+  - ".gitlab/ci/build-images.gitlab-ci.yml"
+  - ".gitlab/ci/review.gitlab-ci.yml"
+  - ".gitlab/ci/review-apps/**/*"
+  - "scripts/review_apps/**/*"
+  - "scripts/trigger-build.rb"
+  - "{,ee/,jh/}{bin,config}/**/*.rb"
+
+# ------------------------------------------
+# Conditions set
+# ------------------------------------------
 .qa-manual: &qa-manual
   when: manual
   allow_failure: true
@@ -53,6 +81,26 @@
       when: manual
       allow_failure: true
 
+.review:rules:review-build-cng:
+  rules:
+    - when: always
+
+.review:rules:review-delete-deployment:
+  rules:
+    - when: on_success
+
+# ------------------------------------------
+# Deploy
+# ------------------------------------------
+.review:rules:review-deploy:
+  rules:
+    - when: on_success
+
+.review:rules:trigger-review-stop:
+  rules:
+    - when: manual
+      allow_failure: true
+
 # ------------------------------------------
 # Test
 # ------------------------------------------
@@ -91,6 +139,25 @@
     - *all-specs-mr  # set full suite to manual when no specific specs passed in mr
     - if: $QA_SUITES =~ /Test::Instance::ReviewNonBlocking/
 
+.review:rules:review-performance:
+  rules:
+    - if: '$DAST_RUN == "true"'  # Skip this job when DAST is run
+      when: never
+    - <<: *if-merge-request-labels-run-review-app  # we explicitly don't allow the job to fail in that case
+    - <<: *if-merge-request  # we explicitly don't allow the job to fail in that case
+      changes: *ci-review-patterns
+    - when: on_success
+      allow_failure: true
+
+# ------------------------------------------
+# DAST
+# ------------------------------------------
+.reports:rules:schedule-dast:
+  rules:
+    - if: '$DAST_DISABLED || $GITLAB_FEATURES !~ /\bdast\b/'
+      when: never
+    - <<: *if-dot-com-ee-schedule-nightly-child-pipeline
+
 # ------------------------------------------
 # Prepare/Report
 # ------------------------------------------

.gitlab/ci/review.gitlab-ci.yml

@@ -4,9 +4,12 @@ review-cleanup:
     - .review:rules:review-cleanup
   image: ${REVIEW_APPS_IMAGE}
   stage: prepare
+  needs: []
   environment:
     name: review/regular-cleanup
     action: access
+  variables:
+    GIT_DEPTH: 1
   before_script:
     - source scripts/utils.sh
     - !reference [".use-kube-context", before_script]
@@ -15,6 +18,21 @@ review-cleanup:
   script:
     - scripts/review_apps/automated_cleanup.rb || (scripts/slack review-apps-monitoring "☠️ \`${CI_JOB_NAME}\` failed! ☠️ See ${CI_JOB_URL} - <https://gitlab.com/gitlab-org/quality/engineering-productivity/team/-/blob/main/runbooks/review-apps.md#review-cleanup-job-failed|📗 RUNBOOK 📕>" warning "GitLab Bot" && exit 1);
 
+review-stop:
+  extends:
+    - review-cleanup
+    - .review:rules:review-stop
+  environment:
+    name: review/${CI_COMMIT_REF_SLUG}${SCHEDULE_TYPE}  # No separator for SCHEDULE_TYPE so it's compatible as before and looks nice without it
+    action: stop
+  resource_group: review/${CI_COMMIT_REF_SLUG}${SCHEDULE_TYPE}  # CI_ENVIRONMENT_SLUG is not available here and we want this to be the same as the environment
+  before_script:
+    - source ./scripts/utils.sh
+    - source ./scripts/review_apps/review-apps.sh
+    - !reference [".use-kube-context", before_script]
+  script:
+    - retry delete_helm_release
+
 .base-review-checks:
   extends:
     - .default-retry
@@ -58,6 +76,21 @@ start-review-app-pipeline:
     - job: e2e-test-pipeline-generate
     - job: build-assets-image
       artifacts: false
+  # We do not want to have ALL global variables passed as trigger variables,
+  # as they cannot be overridden. See this issue for more context:
+  #
+  # https://gitlab.com/gitlab-org/gitlab/-/issues/387183
+  inherit:
+    variables:
+      - CHROME_VERSION
+      - REGISTRY_GROUP
+      - REGISTRY_HOST
+      - REVIEW_APPS_DOMAIN
+      - REVIEW_APPS_GCP_PROJECT
+      - REVIEW_APPS_GCP_REGION
+      - REVIEW_APPS_IMAGE
+      - RUBY_VERSION
+
   # These variables are set in the pipeline schedules.
   # They need to be explicitly passed on to the child pipeline.
   # https://docs.gitlab.com/ee/ci/pipelines/multi_project_pipelines.html#pass-cicd-variables-to-a-downstream-pipeline-by-using-the-variables-keyword
@@ -73,30 +106,6 @@ start-review-app-pipeline:
       - artifact: review-app-pipeline.yml
         job: e2e-test-pipeline-generate
 
-# Fetch child pipeline test results and store in parent pipeline
-# workaround until natively implemented: https://gitlab.com/groups/gitlab-org/-/epics/8205
-review-app-test-results:
-  image: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images/debian-bullseye-ruby-${RUBY_VERSION}:bundler-2.3
-  stage: review
-  extends:
-    - .qa-cache
-    - .review:rules:start-review-app-pipeline
-  needs:
-    - start-review-app-pipeline
-  variables:
-    COLORIZED_LOGS: "true"
-    QA_LOG_LEVEL: "debug"
-  before_script:
-    - cd qa && bundle install
-  script:
-    - bundle exec rake "ci:download_test_results[start-review-app-pipeline,e2e-test-report,${CI_PROJECT_DIR}]"
-  when: always
-  allow_failure: true
-  artifacts:
-    when: always
-    reports:
-      junit: qa/tmp/rspec-*.xml
-
 danger-review:
   extends:
     - .default-retry

.gitlab/ci/rules.gitlab-ci.yml

@@ -21,7 +21,7 @@
   if: '$FORCE_GITLAB_CI'
 
 .if-default-refs: &if-default-refs
-  if: '$CI_COMMIT_REF_NAME == $CI_DEFAULT_BRANCH || $CI_COMMIT_REF_NAME =~ /^[\d-]+-stable(-ee)?$/ || $CI_COMMIT_REF_NAME =~ /^\d+-\d+-auto-deploy-\d+$/ || $CI_COMMIT_REF_NAME =~ /^security\// || $CI_COMMIT_REF_NAME == "ruby2" || $CI_MERGE_REQUEST_IID || $CI_COMMIT_TAG || $FORCE_GITLAB_CI'
+  if: '$CI_COMMIT_REF_NAME == $CI_DEFAULT_BRANCH || $CI_COMMIT_REF_NAME =~ /^[\d-]+-stable(-ee)?$/ || $CI_COMMIT_REF_NAME =~ /^\d+-\d+-auto-deploy-\d+$/ || $CI_COMMIT_REF_NAME =~ /^security\// || $CI_COMMIT_REF_NAME == "ruby2" || ($CI_MERGE_REQUEST_EVENT_TYPE == "merged_result" || $CI_MERGE_REQUEST_EVENT_TYPE == "detached") || $CI_COMMIT_TAG || $FORCE_GITLAB_CI'
 
 .if-default-branch-refs: &if-default-branch-refs
   if: '$CI_COMMIT_REF_NAME == $CI_DEFAULT_BRANCH && $CI_MERGE_REQUEST_IID == null'
@@ -30,30 +30,33 @@
   if: '$CI_COMMIT_BRANCH =~ /^\d+-\d+-auto-deploy-\d+$/'
 
 .if-default-branch-or-tag: &if-default-branch-or-tag
-  if: '$CI_COMMIT_REF_NAME == $CI_DEFAULT_BRANCH || $CI_COMMIT_TAG'
+  if: '($CI_COMMIT_REF_NAME == $CI_DEFAULT_BRANCH && $CI_MERGE_REQUEST_IID == null) || $CI_COMMIT_TAG'
+
+.if-tag: &if-tag
+  if: '$CI_COMMIT_TAG'
 
 .if-merge-request: &if-merge-request
-  if: '$CI_MERGE_REQUEST_IID'
+  if: '$CI_MERGE_REQUEST_EVENT_TYPE == "merged_result" || $CI_MERGE_REQUEST_EVENT_TYPE == "detached"'
 
 # Once https://gitlab.com/gitlab-org/gitlab/-/issues/373904 is implemented, we should be able to change this back to
-# if: '$CI_MERGE_REQUEST_IID && $CI_MERGE_REQUEST_APPROVALS_COUNT > 0'
+# if: '($CI_MERGE_REQUEST_EVENT_TYPE == "merged_result" || $CI_MERGE_REQUEST_EVENT_TYPE == "detached") && $CI_MERGE_REQUEST_APPROVALS_COUNT > 0'
 # or any similar condition to check that the MR has *any* approval (not just required approval).
 #
 # Temprorarily adding || $CI_MERGE_REQUEST_LABELS =~ /pipeline:run-full-rspec/ for backward compatibility,
 # remove once https://gitlab.com/gitlab-org/quality/quality-engineering/team-tasks/-/issues/1557 is fully rolled out
 .if-merge-request-approved: &if-merge-request-approved
-  if: '$CI_MERGE_REQUEST_IID && $CI_MERGE_REQUEST_LABELS =~ /pipeline:mr-approved/ || $CI_MERGE_REQUEST_LABELS =~ /pipeline:run-full-rspec/'
+  if: '($CI_MERGE_REQUEST_EVENT_TYPE == "merged_result" || $CI_MERGE_REQUEST_EVENT_TYPE == "detached") && $CI_MERGE_REQUEST_LABELS =~ /pipeline:mr-approved/ || $CI_MERGE_REQUEST_LABELS =~ /pipeline:run-full-rspec/'
 
 # Temprorarily adding && $CI_MERGE_REQUEST_LABELS !~ /pipeline:run-full-rspec/ for backward compatibility,
 # remove once https://gitlab.com/gitlab-org/quality/quality-engineering/team-tasks/-/issues/1557 is fully rolled out
 .if-merge-request-not-approved: &if-merge-request-not-approved
-  if: '$CI_MERGE_REQUEST_IID && $CI_MERGE_REQUEST_LABELS !~ /pipeline:mr-approved/ && $CI_MERGE_REQUEST_LABELS !~ /pipeline:run-full-rspec/'
+  if: '($CI_MERGE_REQUEST_EVENT_TYPE == "merged_result" || $CI_MERGE_REQUEST_EVENT_TYPE == "detached") && $CI_MERGE_REQUEST_LABELS !~ /pipeline:mr-approved/ && $CI_MERGE_REQUEST_LABELS !~ /pipeline:run-full-rspec/'
 
 .if-automated-merge-request: &if-automated-merge-request
   if: '$CI_MERGE_REQUEST_SOURCE_BRANCH_NAME == "release-tools/update-gitaly" || $CI_MERGE_REQUEST_TARGET_BRANCH_NAME =~ /stable-ee$/'
 
 .if-merge-request-targeting-stable-branch: &if-merge-request-targeting-stable-branch
-  if: '$CI_MERGE_REQUEST_IID && $CI_MERGE_REQUEST_TARGET_BRANCH_NAME =~ /^[\d-]+-stable(-ee)?$/'
+  if: '($CI_MERGE_REQUEST_EVENT_TYPE == "merged_result" || $CI_MERGE_REQUEST_EVENT_TYPE == "detached") && $CI_MERGE_REQUEST_TARGET_BRANCH_NAME =~ /^[\d-]+-stable(-ee)?$/'
 
 .if-merge-request-labels-run-in-ruby2: &if-merge-request-labels-run-in-ruby2
   if: '$CI_MERGE_REQUEST_LABELS =~ /pipeline:run-in-ruby2/'
@@ -73,6 +76,9 @@
 .if-merge-request-labels-run-all-jest: &if-merge-request-labels-run-all-jest
   if: '$CI_MERGE_REQUEST_LABELS =~ /pipeline:run-all-jest/'
 
+.if-merge-request-labels-run-all-e2e: &if-merge-request-labels-run-all-e2e
+  if: '$CI_MERGE_REQUEST_LABELS =~ /pipeline:run-all-e2e/'
+
 .if-merge-request-labels-run-single-db: &if-merge-request-labels-run-single-db
   if: '$CI_MERGE_REQUEST_LABELS =~ /pipeline:run-single-db/'
 
@@ -98,10 +104,10 @@
   if: '$CI_MERGE_REQUEST_LABELS =~ /frontend/ && $CI_MERGE_REQUEST_LABELS =~ /feature flag/'
 
 .if-security-merge-request: &if-security-merge-request
-  if: '$CI_PROJECT_NAMESPACE == "gitlab-org/security" && $CI_MERGE_REQUEST_IID'
+  if: '$CI_PROJECT_NAMESPACE == "gitlab-org/security" && ($CI_MERGE_REQUEST_EVENT_TYPE == "merged_result" || $CI_MERGE_REQUEST_EVENT_TYPE == "detached")'
 
 .if-fork-merge-request: &if-fork-merge-request
-  if: '$CI_PROJECT_NAMESPACE !~ /^gitlab(-org)?($|\/)/ && $CI_MERGE_REQUEST_IID && $CI_MERGE_REQUEST_LABELS !~ /pipeline:run-all-rspec/'
+  if: '$CI_PROJECT_NAMESPACE !~ /^gitlab(-org)?($|\/)/ && ($CI_MERGE_REQUEST_EVENT_TYPE == "merged_result" || $CI_MERGE_REQUEST_EVENT_TYPE == "detached") && $CI_MERGE_REQUEST_LABELS !~ /pipeline:run-all-rspec/'
 
 .if-schedule-pipeline: &if-schedule-pipeline
   if: '$CI_PIPELINE_SOURCE == "schedule"'
@@ -118,29 +124,29 @@
 .if-security-schedule: &if-security-schedule
   if: '$CI_PROJECT_NAMESPACE == "gitlab-org/security" && $CI_PIPELINE_SOURCE == "schedule"'
 
+.if-foss-schedule: &if-foss-schedule
+  if: '$CI_PROJECT_PATH == "gitlab-org/gitlab-foss" && $CI_PIPELINE_SOURCE == "schedule"'
+
 .if-dot-com-gitlab-org-schedule: &if-dot-com-gitlab-org-schedule
   if: '$CI_SERVER_HOST == "gitlab.com" && $CI_PROJECT_NAMESPACE == "gitlab-org" && $CI_PIPELINE_SOURCE == "schedule"'
 
 .if-dot-com-ee-schedule-default-branch-maintenance: &if-dot-com-ee-schedule-default-branch-maintenance
   if: '$CI_SERVER_HOST == "gitlab.com" && $CI_PROJECT_PATH == "gitlab-org/gitlab" && $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH && $CI_PIPELINE_SOURCE == "schedule" && $SCHEDULE_TYPE == "maintenance"'
 
-.if-dot-com-ee-schedule-nightly-child-pipeline: &if-dot-com-ee-schedule-nightly-child-pipeline
-  if: '$CI_SERVER_HOST == "gitlab.com" && $CI_PROJECT_PATH == "gitlab-org/gitlab" && $CI_PIPELINE_SOURCE == "parent_pipeline" && $SCHEDULE_TYPE == "nightly"'
-
 .if-dot-com-gitlab-org-default-branch: &if-dot-com-gitlab-org-default-branch
   if: '$CI_SERVER_HOST == "gitlab.com" && $CI_PROJECT_NAMESPACE == "gitlab-org" && $CI_COMMIT_REF_NAME == $CI_DEFAULT_BRANCH'
 
 .if-dot-com-gitlab-org-merge-request: &if-dot-com-gitlab-org-merge-request
-  if: '$CI_SERVER_HOST == "gitlab.com" && $CI_PROJECT_NAMESPACE == "gitlab-org" && $CI_MERGE_REQUEST_IID'
+  if: '$CI_SERVER_HOST == "gitlab.com" && $CI_PROJECT_NAMESPACE == "gitlab-org" && ($CI_MERGE_REQUEST_EVENT_TYPE == "merged_result" || $CI_MERGE_REQUEST_EVENT_TYPE == "detached")'
 
 .if-dot-com-gitlab-org-and-security-merge-request: &if-dot-com-gitlab-org-and-security-merge-request
-  if: '$CI_SERVER_HOST == "gitlab.com" && $CI_PROJECT_NAMESPACE =~ /^gitlab-org($|\/security$)/ && $CI_MERGE_REQUEST_IID'
+  if: '$CI_SERVER_HOST == "gitlab.com" && $CI_PROJECT_NAMESPACE =~ /^gitlab-org($|\/security$)/ && ($CI_MERGE_REQUEST_EVENT_TYPE == "merged_result" || $CI_MERGE_REQUEST_EVENT_TYPE == "detached")'
 
 .if-dot-com-gitlab-org-and-security-merge-request-and-qa-tests-specified: &if-dot-com-gitlab-org-and-security-merge-request-and-qa-tests-specified
-  if: '$CI_SERVER_HOST == "gitlab.com" && $CI_PROJECT_NAMESPACE =~ /^gitlab-org($|\/security$)/ && $CI_MERGE_REQUEST_IID && $QA_TESTS'
+  if: '$CI_SERVER_HOST == "gitlab.com" && $CI_PROJECT_NAMESPACE =~ /^gitlab-org($|\/security$)/ && ($CI_MERGE_REQUEST_EVENT_TYPE == "merged_result" || $CI_MERGE_REQUEST_EVENT_TYPE == "detached") && $QA_TESTS'
 
 .if-dot-com-gitlab-org-and-security-merge-request-manual-ff-package-and-e2e: &if-dot-com-gitlab-org-and-security-merge-request-manual-ff-package-and-e2e
-  if: '$CI_SERVER_HOST == "gitlab.com" && $CI_PROJECT_NAMESPACE =~ /^gitlab-org($|\/security$)/ && $CI_MERGE_REQUEST_IID && $QA_MANUAL_FF_PACKAGE_AND_QA'
+  if: '$CI_SERVER_HOST == "gitlab.com" && $CI_PROJECT_NAMESPACE =~ /^gitlab-org($|\/security$)/ && ($CI_MERGE_REQUEST_EVENT_TYPE == "merged_result" || $CI_MERGE_REQUEST_EVENT_TYPE == "detached") && $QA_MANUAL_FF_PACKAGE_AND_QA'
 
 .if-dot-com-gitlab-org-and-security-tag: &if-dot-com-gitlab-org-and-security-tag
   if: '$CI_SERVER_HOST == "gitlab.com" && $CI_PROJECT_NAMESPACE =~ /^gitlab-org($|\/security$)/ && $CI_COMMIT_TAG'
@@ -172,8 +178,7 @@
   - ".gitlab/ci/build-images.gitlab-ci.yml"
   - ".gitlab/ci/review.gitlab-ci.yml"
   - ".gitlab/ci/review-apps/**/*"
-  - "scripts/review_apps/base-config.yaml"
+  - "scripts/review_apps/**/*"
-  - "scripts/review_apps/review-apps.sh"
   - "scripts/trigger-build.rb"
   - "{,ee/,jh/}{bin,config}/**/*.rb"
 
@@ -220,6 +225,11 @@
   - "scripts/lint-doc.sh"
   - ".gitlab/ci/docs.gitlab-ci.yml"
 
+.docs-blueprints-patterns: &docs-blueprints-patterns
+  - "doc/architecture/blueprints/**/*"
+  - "scripts/lint-docs-blueprints.rb"
+  - ".gitlab/ci/docs.gitlab-ci.yml"
+
 .docs-deprecations-and-removals-patterns: &docs-deprecations-and-removals-patterns
   - "doc/update/deprecations.md"
   - "doc/update/removals.md"
@@ -285,12 +295,15 @@
   - ".browserslistrc"
   - "babel.config.js"
   - "jest.config.{base,integration,unit}.js"
-  - ".csscomb.json"
+  - ".stylelintrc"
   - "Dockerfile.assets"
   - "config/**/*.js"
   - "vendor/assets/**/*"
   - "{app/assets,app/components,app/helpers,app/presenters,app/views,locale,public,spec/frontend,storybook,symbol}/**/*"
 
+.initializers-patterns: &initializers-patterns
+  - "{,ee/,jh/}config/initializers/**/*"
+
 .controllers-patterns: &controllers-patterns
   - "{,ee/,jh/}{app/controllers}/**/*"
 
@@ -332,14 +345,14 @@
 # DB patterns + .ci-patterns
 .db-patterns: &db-patterns
   - "{,ee/,jh/}{,spec/}{db,migrations}/**/*"
-  - "{,ee/,jh/}{,spec/}lib/{,ee/,jh/}gitlab/database/**/*"
-  - "{,ee/,jh/}{,spec/}lib/{,ee/,jh/}gitlab/database{,_spec}.rb"
-  - "{,ee/,jh/}{,spec/}lib/{,ee/,jh/}gitlab/background_migration/**/*"
   - "{,ee/,jh/}{,spec/}lib/{,ee/,jh/}gitlab/background_migration{,_spec}.rb"
+  - "{,ee/,jh/}{,spec/}lib/{,ee/,jh/}gitlab/background_migration/**/*"
+  - "{,ee/,jh/}{,spec/}lib/{,ee/,jh/}gitlab/database{,_spec}.rb"
+  - "{,ee/,jh/}{,spec/}lib/{,ee/,jh/}gitlab/database/**/*"
   - "{,ee/,jh/}spec/support/helpers/database/**/*"
   - "{,ee/,jh/}spec/support/helpers/migrations_helpers/**/*"
-  - "lib/gitlab/markdown_cache/active_record/**/*"
   - "lib/api/admin/batched_background_migrations.rb"
+  - "lib/gitlab/markdown_cache/active_record/**/*"
   - "spec/requests/api/admin/batched_background_migrations_spec.rb"
   - "config/prometheus/common_metrics.yml"  # Used by Gitlab::DatabaseImporters::CommonMetrics::Importer
   - "{,ee/,jh/}app/models/project_statistics.rb"  # Used to calculate sizes in migration specs
@@ -378,7 +391,7 @@
   - ".browserslistrc"
   - "babel.config.js"
   - "jest.config.{base,integration,unit}.js"
-  - ".csscomb.json"
+  - ".stylelintrc"
   - "Dockerfile.assets"
   - "vendor/assets/**/*"
   - ".{eslintignore,gitattributes,nvmrc,prettierrc,stylelintrc,yamllint}"
@@ -403,7 +416,7 @@
   - ".browserslistrc"
   - "babel.config.js"
   - "jest.config.{base,integration,unit}.js"
-  - ".csscomb.json"
+  - ".stylelintrc"
   - "Dockerfile.assets"
   - "vendor/assets/**/*"
   - ".{eslintignore,gitattributes,nvmrc,prettierrc,stylelintrc,yamllint}"
@@ -434,7 +447,7 @@
   - ".browserslistrc"
   - "babel.config.js"
   - "jest.config.{base,integration,unit}.js"
-  - ".csscomb.json"
+  - ".stylelintrc"
   - "Dockerfile.assets"
   - "vendor/assets/**/*"
   - ".{eslintignore,gitattributes,nvmrc,prettierrc,stylelintrc,yamllint}"
@@ -461,7 +474,7 @@
   - ".browserslistrc"
   - "babel.config.js"
   - "jest.config.{base,integration,unit}.js"
-  - ".csscomb.json"
+  - ".stylelintrc"
   - "Dockerfile.assets"
   - "vendor/assets/**/*"
   - ".{eslintignore,gitattributes,nvmrc,prettierrc,stylelintrc,yamllint}"
@@ -499,7 +512,7 @@
   - ".browserslistrc"
   - "babel.config.js"
   - "jest.config.{base,integration,unit}.js"
-  - ".csscomb.json"
+  - ".stylelintrc"
   - "Dockerfile.assets"
   - "vendor/assets/**/*"
   - ".{eslintignore,gitattributes,nvmrc,prettierrc,stylelintrc,yamllint}"
@@ -547,6 +560,7 @@
   - "{,ee/,jh/}Gemfile.lock"  # This should include gitlab-styles, rubocop itself, and any plugins we might be using
   - "lib/gitlab_edition.rb"  # This is required in RuboCop::CodeReuseHelpers
   - ".gitlab/ci/static-analysis.gitlab-ci.yml"
+  - "config/feature_categories.yml"  # Used by RSpec/InvalidFeatureCategory
 
 .danger-patterns: &danger-patterns
   - "Dangerfile"
@@ -590,6 +604,8 @@
       when: never
     - <<: *if-merge-request-targeting-stable-branch
       when: never
+    - <<: *if-merge-request-labels-pipeline-expedite
+      when: never
 
 .rails:rules:predictive-default-rules:
   rules:
@@ -679,6 +695,7 @@
   rules:
     - <<: *if-schedule-maintenance
     - <<: *if-security-schedule
+    - <<: *if-foss-schedule
     - <<: *if-merge-request-labels-update-caches
 
 .shared:rules:update-gitaly-binaries-cache:
@@ -690,7 +707,7 @@
 ######################
 # Build images rules #
 ######################
-.build-images:rules:build-qa-image:
+.build-images:rules:build-qa-image-merge-requests:
   rules:
     - <<: *if-not-canonical-namespace
       when: never
@@ -700,18 +717,44 @@
       changes: *ci-build-images-patterns
     - <<: *if-dot-com-gitlab-org-and-security-merge-request
       changes: *code-qa-patterns
+
+.build-images:rules:build-qa-image:
+  rules:
+    - !reference [".build-images:rules:build-qa-image-merge-requests", "rules"]
     - <<: *if-auto-deploy-branches
       variables:
         ARCH: amd64,arm64
-    - <<: *if-default-branch-or-tag
+    - <<: *if-default-branch-refs
       variables:
         ARCH: amd64,arm64
+    - <<: *if-tag
+      variables:
+        ARCH: amd64,arm64
+      # TODO: Remove once confirmed on a tag pipeline
+      allow_failure: true
     - <<: *if-dot-com-gitlab-org-schedule
       variables:
         ARCH: amd64,arm64
     - <<: *if-force-ci
     - <<: *if-ruby2-branch
 
+.build-images:rules:build-qa-image-as-if-foss:
+  rules:
+    - !reference [".build-images:rules:build-qa-image-merge-requests", "rules"]
+
+# We want to rebuild the master image when the full e2e test pipeline runs. Currently this happens on a 2 hour schedule.
+.build-images:rules:build-qa-on-gdk-master-image:
+  rules:
+    - if: '$QA_RUN_TESTS_ON_GDK !~ /true|yes|1/i'
+      when: never
+    - <<: *if-not-canonical-namespace
+      when: never
+    - <<: *if-not-ee
+      when: never
+    - <<: *if-dot-com-gitlab-org-schedule
+      variables:
+        ARCH: amd64,arm64
+
 .build-images:rules:build-assets-image:
   rules:
     - <<: *if-not-canonical-namespace
@@ -822,6 +865,11 @@
     - <<: *if-default-refs
       changes: *docs-patterns
 
+.docs:rules:docs-blueprints-lint:
+  rules:
+    - <<: *if-default-refs
+      changes: *docs-blueprints-patterns
+
 .docs:rules:deprecations-and-removals:
   rules:
     - <<: *if-default-refs
@@ -1036,7 +1084,7 @@
     - <<: *if-default-branch-refs
       changes: *frontend-build-patterns
       allow_failure: true
-    - if: '$DANGER_GITLAB_API_TOKEN && $CI_MERGE_REQUEST_IID && $CI_MERGE_REQUEST_TARGET_BRANCH_NAME == $CI_DEFAULT_BRANCH'
+    - if: '$DANGER_GITLAB_API_TOKEN && ($CI_MERGE_REQUEST_EVENT_TYPE == "merged_result" || $CI_MERGE_REQUEST_EVENT_TYPE == "detached") && $CI_MERGE_REQUEST_TARGET_BRANCH_NAME == $CI_DEFAULT_BRANCH'
       changes: *frontend-build-patterns
       allow_failure: true
 
@@ -1109,7 +1157,7 @@
       allow_failure: true
     - <<: *if-ruby2-branch
 
-.qa:rules:package-and-test:
+.qa:rules:package-and-test-mrs:
   rules:
     - <<: *if-not-canonical-namespace
       when: never
@@ -1121,6 +1169,8 @@
       allow_failure: true
     - <<: *if-ruby2-branch
       allow_failure: true
+    - <<: *if-merge-request-labels-run-all-e2e
+      allow_failure: true
     - <<: *if-dot-com-gitlab-org-and-security-merge-request-manual-ff-package-and-e2e
       changes: *feature-flag-development-config-patterns
       when: manual
@@ -1128,6 +1178,9 @@
     - <<: *if-dot-com-gitlab-org-and-security-merge-request
       changes: *feature-flag-development-config-patterns
       allow_failure: true
+    - <<: *if-dot-com-gitlab-org-and-security-merge-request
+      changes: *initializers-patterns
+      allow_failure: true
     - <<: *if-dot-com-gitlab-org-and-security-merge-request
       changes: *nodejs-patterns
       allow_failure: true
@@ -1144,6 +1197,13 @@
       changes: *code-patterns
       when: manual
       allow_failure: true
+    - <<: *if-force-ci
+      when: manual
+      allow_failure: true
+
+.qa:rules:package-and-test:
+  rules:
+    - !reference [".qa:rules:package-and-test-mrs", rules]
     - <<: *if-dot-com-gitlab-org-schedule
       allow_failure: true
       variables:
@@ -1152,9 +1212,12 @@
         KNAPSACK_GENERATE_REPORT: "true"
         QA_SAVE_TEST_METRICS: "true"
         QA_EXPORT_TEST_METRICS: "false" # on main runs, metrics are exported to separate bucket via rake task for better consistency
-    - <<: *if-force-ci
+
-      when: manual
+.qa:rules:e2e:test-on-gdk:
-      allow_failure: true
+  rules:
+    - if: '$QA_RUN_TESTS_ON_GDK !~ /true|yes|1/i'
+      when: never
+    - !reference [".qa:rules:package-and-test", rules]
 
 ###############
 # Rails rules #
@@ -1172,6 +1235,12 @@
       changes: *db-patterns
     - <<: *if-default-branch-schedule-nightly
 
+.rails:rules:db:check-migrations-single-db:
+  rules:
+    - <<: *if-merge-request-labels-run-single-db
+    - <<: *if-merge-request
+      changes: *db-patterns
+
 .rails:rules:db-backup:
   rules:
     - <<: *if-merge-request-labels-run-all-rspec
@@ -1182,6 +1251,15 @@
     - <<: *if-default-refs
       changes: *db-patterns
 
+.rails:rules:db-rollback:
+  rules:
+    - !reference [".rails:rules:ee-and-foss-migration", rules]
+    - <<: *if-default-refs
+      changes: *initializers-patterns
+    - <<: *if-default-refs
+      changes:
+        - "{,ee/,jh/}{,spec/}lib/{,ee/,jh/}gitlab/content_security_policy/config_loader{,_spec}.rb"
+
 .rails:rules:praefect-with-db:
   rules:
     - if: '$CI_MERGE_REQUEST_LABELS =~ /pipeline:run-praefect-with-db/'
@@ -1542,9 +1620,9 @@
 .rails:rules:detect-tests:
   rules:
     - <<: *if-merge-request-labels-run-all-rspec
-    - <<: *if-default-refs
+    - <<: *if-merge-request
       changes: *code-backstage-qa-patterns
-    - <<: *if-default-refs
+    - <<: *if-merge-request
       changes: *workhorse-patterns
 
 .rails:rules:detect-previous-failed-tests:
@@ -1720,6 +1798,24 @@
     - <<: *if-merge-request
       changes: *static-analysis-patterns
 
+.semgrep-appsec-custom-rules:rules:
+  rules:
+    - <<: *if-not-ee
+      when: never
+    - <<: *if-merge-request
+      changes: *code-backstage-qa-patterns
+
+.ping-appsec-for-sast-findings:rules:
+  rules:
+    # Requiring $CUSTOM_SAST_RULES_BOT_PAT prevents the bot from running on forks or CE
+    # Without it the script would fail too.
+    - if: "$CUSTOM_SAST_RULES_BOT_PAT == null"
+      when: never
+    - <<: *if-not-ee
+      when: never
+    - <<: *if-merge-request
+      changes: *code-backstage-qa-patterns
+
 #######################
 # Vendored gems rules #
 #######################
@@ -1784,6 +1880,12 @@
       changes: ["vendor/gems/devise-pbkdf2-encryptable/**/*"]
     - <<: *if-merge-request-labels-run-all-rspec
 
+.vendor:rules:gitlab_active_record:
+  rules:
+    - <<: *if-merge-request
+      changes: ["vendor/gems/gitlab_active_record/**/*"]
+    - <<: *if-merge-request-labels-run-all-rspec
+
 .vendor:rules:bundler-checksum:
   rules:
     - <<: *if-merge-request
@@ -1799,6 +1901,13 @@
       when: never
     - if: '$CI_SERVER_HOST == "gitlab.com" && $CI_PROJECT_PATH == "gitlab-org/gitlab" && $CI_COMMIT_REF_NAME =~ /^[\d-]+-stable-ee$/'
 
+.releases:rules:canonical-dot-com-gitlab-stable-branch-only-setup-test-env-patterns:
+  rules:
+    - if: '$CI_COMMIT_MESSAGE =~ /\[merge-train skip\]/'
+      when: never
+    - if: '$CI_SERVER_HOST == "gitlab.com" && $CI_PROJECT_PATH == "gitlab-org/gitlab" && $CI_COMMIT_REF_NAME =~ /^[\d-]+-stable-ee$/'
+      changes: *setup-test-env-patterns
+
 .releases:rules:canonical-dot-com-security-gitlab-stable-branch-only:
   rules:
     - if: '$CI_COMMIT_MESSAGE =~ /\[merge-train skip\]/'
@@ -1883,12 +1992,6 @@
     - <<: *if-default-refs
       changes: *nodejs-patterns
 
-.reports:rules:schedule-dast:
-  rules:
-    - if: '$DAST_DISABLED || $GITLAB_FEATURES !~ /\bdast\b/'
-      when: never
-    - <<: *if-dot-com-ee-schedule-nightly-child-pipeline
-
 .reports:rules:test-dast:
   rules:
     - if: '$DAST_DISABLED || $GITLAB_FEATURES !~ /\bdast\b/'
@@ -1971,32 +2074,10 @@
         QA_SAVE_TEST_METRICS: "true"
         QA_EXPORT_TEST_METRICS: "false" # on main runs, metrics are exported to separate bucket via rake task for better consistency
 
-.review:rules:review-build-cng:
-  rules:
-    - when: always
-
-.review:rules:review-deploy:
-  rules:
-    - when: on_success
-
-.review:rules:review-performance:
-  rules:
-    - if: '$DAST_RUN == "true"'  # Skip this job when DAST is run
-      when: never
-    - <<: *if-merge-request-labels-run-review-app  # we explicitely don't allow the job to fail in that case
-    - <<: *if-dot-com-gitlab-org-merge-request  # we explicitely don't allow the job to fail in that case
-      changes: *ci-review-patterns
-    - when: on_success
-      allow_failure: true
-
-.review:rules:review-delete-deployment:
-  rules:
-    - when: on_success
-
 # The following rules needs to be the same as the one for .review:rules:start-review-app-pipeline
 # except that:
 # - all rules have `when: manual` and `allow_failure: true` here
-.review:rules:review-cleanup:
+.review:rules:review-stop-merge-requests:
   rules:
     - <<: *if-not-ee
       when: never
@@ -2033,12 +2114,23 @@
       changes: *code-patterns
       when: manual
       allow_failure: true
+
+.review:rules:review-cleanup:
+  rules:
+    - !reference [".review:rules:review-stop-merge-requests", rules]
+    - <<: *if-dot-com-ee-schedule-default-branch-maintenance
+      allow_failure: true
+
+.review:rules:review-stop:
+  rules:
+    - !reference [".review:rules:review-stop-merge-requests", rules]
     - <<: *if-dot-com-gitlab-org-schedule
+      when: manual
       allow_failure: true
 
 .review:rules:review-k8s-resources-count-checks:
   rules:
-    - <<: *if-dot-com-gitlab-org-schedule
+    - <<: *if-dot-com-ee-schedule-default-branch-maintenance
       allow_failure: true
     - <<: *if-dot-com-gitlab-org-merge-request
       changes:
@@ -2047,18 +2139,13 @@
 
 .review:rules:review-gcp-quotas-checks:
   rules:
-    - <<: *if-dot-com-gitlab-org-schedule
+    - <<: *if-dot-com-ee-schedule-default-branch-maintenance
       allow_failure: true
     - <<: *if-dot-com-gitlab-org-merge-request
       changes:
         - "scripts/review_apps/gcp-quotas-checks.rb"
       allow_failure: true
 
-.review:rules:review-stop:
-  rules:
-    - when: manual
-      allow_failure: true
-
 .review:rules:danger:
   rules:
     - <<: *if-merge-request
@@ -2098,6 +2185,11 @@
     - <<: *if-default-refs
       changes: *code-backstage-patterns
 
+.setup:rules:rails-production-environment:
+  rules:
+    - <<: *if-default-refs
+      changes: *code-patterns
+
 .setup:rules:no-ee-check:
   rules:
     - <<: *if-not-foss
@@ -2134,7 +2226,7 @@
     - <<: *if-not-ee
       when: never
     - <<: *if-dot-com-ee-schedule-default-branch-maintenance
-    - <<: *if-default-refs
+    - <<: *if-default-branch-refs
       changes:
         - ".gitlab/ci/setup.gitlab-ci.yml"
         - ".gitlab/ci/test-metadata.gitlab-ci.yml"
@@ -2156,7 +2248,8 @@
     - <<: *if-not-ee
       when: never
     - <<: *if-dot-com-ee-schedule-default-branch-maintenance
-    - <<: *if-default-refs
+      when: always
+    - <<: *if-default-branch-refs
       changes:
         - ".gitlab/ci/test-metadata.gitlab-ci.yml"
         - "scripts/rspec_helpers.sh"
@@ -2209,3 +2302,14 @@
     - <<: *if-dot-com-gitlab-org-merge-request
       changes: *feature-flag-development-config-patterns
       allow_failure: true  # See https://gitlab.com/gitlab-org/gitlab/-/issues/351136
+
+##############################
+# release-environments rules #
+##############################
+.release-environments:rules:start-release-environments-pipeline:
+  rules:
+    - <<: *if-not-ee
+      when: never
+    - <<: *if-merge-request-labels-pipeline-expedite
+      when: never
+    - !reference [".releases:rules:canonical-dot-com-gitlab-stable-branch-only-setup-test-env-patterns", rules]

.gitlab/ci/setup.gitlab-ci.yml

@@ -128,6 +128,7 @@ detect-tests:
     - source ./scripts/rspec_helpers.sh
     - install_gitlab_gem
     - install_tff_gem
+    - install_activesupport_gem
     - retrieve_tests_mapping
     - retrieve_frontend_fixtures_mapping
     - |
@@ -135,12 +136,14 @@ detect-tests:
         mkdir -p $(dirname "$RSPEC_CHANGED_FILES_PATH")
         tooling/bin/find_changes ${RSPEC_CHANGED_FILES_PATH};
         tooling/bin/find_tests ${RSPEC_CHANGED_FILES_PATH} ${RSPEC_MATCHING_TESTS_PATH};
+        tooling/bin/js_to_system_specs_mappings ${RSPEC_CHANGED_FILES_PATH} ${RSPEC_MATCHING_TESTS_PATH};
         tooling/bin/find_changes ${RSPEC_CHANGED_FILES_PATH} ${RSPEC_MATCHING_TESTS_PATH} ${FRONTEND_FIXTURES_MAPPING_PATH};
         filter_rspec_matched_foss_tests ${RSPEC_MATCHING_TESTS_PATH} ${RSPEC_MATCHING_TESTS_FOSS_PATH};
+        filter_rspec_matched_ee_tests ${RSPEC_MATCHING_TESTS_PATH} ${RSPEC_MATCHING_TESTS_EE_PATH};
         tooling/bin/view_to_js_mappings ${RSPEC_CHANGED_FILES_PATH} ${RSPEC_MATCHING_JS_FILES_PATH};
         echoinfo "Changed files: $(cat $RSPEC_CHANGED_FILES_PATH)";
-        echoinfo "Related RSpec tests: $(cat $RSPEC_MATCHING_TESTS_PATH)";
         echoinfo "Related FOSS RSpec tests: $(cat $RSPEC_MATCHING_TESTS_FOSS_PATH)";
+        echoinfo "Related EE RSpec tests: $(cat $RSPEC_MATCHING_TESTS_EE_PATH)";
         echoinfo "Related JS files: $(cat $RSPEC_MATCHING_JS_FILES_PATH)";
       fi
   artifacts:
@@ -149,8 +152,9 @@ detect-tests:
       - ${FRONTEND_FIXTURES_MAPPING_PATH}
       - ${RSPEC_CHANGED_FILES_PATH}
       - ${RSPEC_MATCHING_JS_FILES_PATH}
-      - ${RSPEC_MATCHING_TESTS_FOSS_PATH}
       - ${RSPEC_MATCHING_TESTS_PATH}
+      - ${RSPEC_MATCHING_TESTS_FOSS_PATH}
+      - ${RSPEC_MATCHING_TESTS_EE_PATH}
 
 detect-previous-failed-tests:
   extends:
@@ -158,12 +162,10 @@ detect-previous-failed-tests:
     - .rails:rules:detect-previous-failed-tests
   variables:
     PREVIOUS_FAILED_TESTS_DIR: tmp/previous_failed_tests/
-    RSPEC_PG_REGEX: /rspec .+ pg12( .+)?/
-    RSPEC_EE_PG_REGEX: /rspec-ee .+ pg12( .+)?/
   script:
     - source ./scripts/utils.sh
     - source ./scripts/rspec_helpers.sh
-    - retrieve_previous_failed_tests ${PREVIOUS_FAILED_TESTS_DIR} "${RSPEC_PG_REGEX}" "${RSPEC_EE_PG_REGEX}"
+    - retrieve_failed_tests "${PREVIOUS_FAILED_TESTS_DIR}" "oneline" "previous"
   artifacts:
     expire_in: 7d
     paths:

.gitlab/ci/static-analysis.gitlab-ci.yml

@@ -183,3 +183,37 @@ feature-flags-usage:
     when: always
     paths:
       - tmp/feature_flags/
+
+semgrep-appsec-custom-rules:
+  stage: lint
+  extends:
+    - .semgrep-appsec-custom-rules:rules
+  image: returntocorp/semgrep
+  needs: []
+  script:
+    # Required to avoid a timeout https://github.com/returntocorp/semgrep/issues/5395
+    - git fetch origin master
+    # Include/exclude list isn't ideal https://github.com/returntocorp/semgrep/issues/5399
+    - |
+      semgrep ci --gitlab-sast --metrics off --config $CUSTOM_RULES_URL \
+        --include app --include lib --include workhorse \
+        --exclude '*_test.go' --exclude spec --exclude qa > gl-sast-report.json || true
+  variables:
+    CUSTOM_RULES_URL: https://gitlab.com/gitlab-com/gl-security/appsec/sast-custom-rules/-/raw/main/appsec-pings/rules.yml
+  artifacts:
+    paths:
+      - gl-sast-report.json
+
+ping-appsec-for-sast-findings:
+  stage: lint
+  image: alpine:latest
+  extends:
+    - .ping-appsec-for-sast-findings:rules
+  variables:
+    # Project Access Token bot ID for /gitlab-com/gl-security/appsec/sast-custom-rules
+    BOT_USER_ID: 13559989
+  needs:
+    - semgrep-appsec-custom-rules
+  script:
+    - apk add jq curl
+    - scripts/process_custom_semgrep_results.sh

.gitlab/ci/test-metadata.gitlab-ci.yml

@@ -37,10 +37,12 @@ update-tests-metadata:
     - rspec unit pg12
     - rspec integration pg12
     - rspec system pg12
+    - rspec background_migration pg12
     - rspec-ee migration pg12
     - rspec-ee unit pg12
     - rspec-ee integration pg12
     - rspec-ee system pg12
+    - rspec-ee background_migration pg12
   script:
     - run_timed_command "retry gem install fog-aws mime-types activesupport rspec_profiling postgres-copy --no-document"
     - source ./scripts/rspec_helpers.sh

.gitlab/ci/test-on-gdk/main.gitlab-ci.yml

@@ -0,0 +1,81 @@
+default:
+  interruptible: true
+
+include:
+  - local: .gitlab/ci/package-and-test/rules.gitlab-ci.yml
+
+dont-interrupt-me:
+  extends: .rules:dont-interrupt
+  stage: test
+  interruptible: false
+  script:
+    - echo "This jobs makes sure this pipeline won't be interrupted! See https://docs.gitlab.com/ee/ci/yaml/#interruptible."
+
+.run-tests:
+  stage: test
+  image: ${REGISTRY_HOST}/${REGISTRY_GROUP}/gitlab-build-images/debian-bullseye-ruby-${RUBY_VERSION}:bundler-2.3-chrome-${CHROME_VERSION}-docker-${DOCKER_VERSION}
+  services:
+    - docker:${DOCKER_VERSION}-dind
+  tags:
+    - e2e
+  before_script:
+    - docker login -u $CI_REGISTRY_USER -p $CI_REGISTRY_PASSWORD $CI_REGISTRY
+    - sysctl -n -w fs.inotify.max_user_watches=524288
+  variables:
+    DOCKER_DRIVER: overlay2
+    DOCKER_HOST: tcp://docker:2375
+    QA_GDK_IMAGE: "${CI_REGISTRY}/${CI_PROJECT_PATH}/gitlab-qa-gdk:master"
+    QA_GENERATE_ALLURE_REPORT: "false"
+    QA_CAN_TEST_PRAEFECT: "false"
+    QA_INTERCEPT_REQUESTS: "false"
+    QA_RUN_TYPE: e2e-test-on-gdk
+    TEST_LICENSE_MODE: $QA_TEST_LICENSE_MODE
+    EE_LICENSE: $QA_EE_LICENSE
+    GITHUB_ACCESS_TOKEN: $QA_GITHUB_ACCESS_TOKEN
+    GITLAB_QA_ADMIN_ACCESS_TOKEN: $QA_ADMIN_ACCESS_TOKEN
+    QA_KNAPSACK_REPORTS: qa-smoke,ee-instance-parallel
+  timeout: 2 hours
+  artifacts:
+    when: always
+    paths:
+      - test_output
+      - logs
+    expire_in: 7 days
+  script:
+    - echo -e "\e[0Ksection_start:`date +%s`:pull_image\r\e[0KPull GDK QA image"
+    - docker pull ${QA_GDK_IMAGE}
+    - echo -e "\e[0Ksection_end:`date +%s`:pull_image\r\e[0K"
+    - echo -e "\e[0Ksection_start:`date +%s`:launch_gdk_and_tests\r\e[0KLaunch GDK and run QA tests"
+    - cd qa && bundle install --jobs=$(nproc) --retry=3 --quiet
+    - mkdir -p $CI_PROJECT_DIR/test_output $CI_PROJECT_DIR/logs/gdk $CI_PROJECT_DIR/logs/gitlab
+    # This command matches the permissions of the user that runs GDK inside the container.
+    - chown -R 1000:1000 $CI_PROJECT_DIR/test_output $CI_PROJECT_DIR/logs
+    - |
+      docker run --rm --name gdk --add-host gdk.test:127.0.0.1 --shm-size=2gb \
+        --env-file <(bundle exec rake ci:env_var_name_list) \
+        --volume /var/run/docker.sock:/var/run/docker.sock:z \
+        --volume $CI_PROJECT_DIR/test_output:/home/gdk/gdk/gitlab/qa/tmp:z \
+        --volume $CI_PROJECT_DIR/logs/gdk:/home/gdk/gdk/log \
+        --volume $CI_PROJECT_DIR/logs/gitlab:/home/gdk/gdk/gitlab/log \
+        ${QA_GDK_IMAGE} "${CI_COMMIT_REF_SLUG}" "$TEST_GDK_TAGS --tag ~requires_praefect" || true
+    - echo -e "\e[0Ksection_end:`date +%s`:launch_gdk_and_tests\r\e[0K"
+  allow_failure: true
+
+test-on-gdk-smoke:
+  extends:
+    - .run-tests
+  parallel: 2
+  variables:
+    TEST_GDK_TAGS: "--tag smoke"
+    QA_KNAPSACK_REPORT_NAME: qa-smoke
+  rules:
+    - when: always
+
+test-on-gdk-full:
+  extends:
+    - .run-tests
+  parallel: 5
+  variables:
+    QA_KNAPSACK_REPORT_NAME: ee-instance-parallel
+  rules:
+    - when: manual

.gitlab/ci/vendored-gems.gitlab-ci.yml

@@ -85,3 +85,11 @@ vendor bundler-checksum:
   trigger:
     include: vendor/gems/bundler-checksum/.gitlab-ci.yml
     strategy: depend
+
+vendor gitlab_active_record:
+  extends:
+    - .vendor:rules:gitlab_active_record
+  needs: []
+  trigger:
+    include: vendor/gems/gitlab_active_record/.gitlab-ci.yml
+    strategy: depend

.gitlab/issue_templates/Experiment Successful Cleanup.md

@@ -10,6 +10,8 @@ The changes need to become an official part of the product.
 - [ ] Determine whether the feature should apply to SaaS and/or self-managed
 - [ ] Determine whether the feature should apply to EE - and which tiers - and/or Core
 - [ ] Determine if tracking should be kept as is, removed, or modified.
+- [ ] Determine if any UX experiences need to be "polished" i.e. updated to further improve the end user experience. This task should be completed by the designated UX counterpart. 
+   - [ ] (placeholder for UX polish work that needs to be completed for this cleanup issue to be considered completed) 
 - [ ] Ensure any relevant documentation has been updated.
 - [ ] Determine whether there are other concerns that need to be considered before removing the feature flag.
    - These are typically captured in the `Experiment Successful Cleanup Concerns` section of the rollout issue.

.gitlab/issue_templates/Feature Flag Roll Out.md

@@ -107,6 +107,7 @@ For visibility, all `/chatops` commands that target production should be execute
 - [ ] Leave a comment on [the feature issue][main-issue] announcing estimated time when this feature flag will be enabled on GitLab.com. 
 - [ ] Ensure that any breaking changes have been announced following the [release post process](https://about.gitlab.com/handbook/marketing/blog/release-posts/#deprecations-removals-and-breaking-changes) to ensure GitLab customers are aware.
 - [ ] Notify `#support_gitlab-com` and your team channel ([more guidance when this is necessary in the dev docs](https://docs.gitlab.com/ee/development/feature_flags/controls.html#communicate-the-change)).
+- [ ] Ensure that the feature flag rollout plan is reviewed by another developer familiar with the domain.
 
 ### Global rollout on production
 

.gitlab/issue_templates/Feature Proposal - basic.md

@@ -9,6 +9,7 @@
 
 <!-- Label reminders
 Use the following resources to find the appropriate labels:
+- Use only one tier label choosing the lowest tier this is intended for
 - https://gitlab.com/gitlab-org/gitlab/-/labels
 - https://about.gitlab.com/handbook/product/categories/features/
 -->

.gitlab/issue_templates/Feature Proposal - lean.md

@@ -48,6 +48,7 @@ Create tracking issue using the Snowplow event tracking template. See https://gi
 
 <!-- Label reminders
 Use the following resources to find the appropriate labels:
+- Use only one tier label choosing the lowest tier this is intended for
 - https://gitlab.com/gitlab-org/gitlab/-/labels
 - https://about.gitlab.com/handbook/product/categories/features/
 -->

.gitlab/issue_templates/Feature proposal - detailed.md

@@ -125,6 +125,7 @@ In which enterprise tier should this feature go? See https://about.gitlab.com/ha
 
 <!-- Label reminders - you should have one of each of the following labels.
 Use the following resources to find the appropriate labels:
+- Use only one tier label choosing the lowest tier this is intended for
 - https://gitlab.com/gitlab-org/gitlab/-/labels
 - https://about.gitlab.com/handbook/product/categories/features/
 -->

.gitlab/issue_templates/Geo Replicate a new Git repository type.md

@@ -517,7 +517,6 @@ That's all of the required database changes.
 
   module Geo
     class CoolWidgetState < ApplicationRecord
-      include EachBatch
       include ::Geo::VerificationStateDefinition
 
       self.primary_key = :cool_widget_id

.gitlab/issue_templates/Geo Replicate a new blob type.md

@@ -482,7 +482,6 @@ That's all of the required database changes.
 
   module Geo
     class CoolWidgetState < ApplicationRecord
-      include EachBatch
       include ::Geo::VerificationStateDefinition
 
       self.primary_key = :cool_widget_id

.gitlab/issue_templates/Pipeline Authoring Issue Implementation.md

@@ -50,4 +50,4 @@ _NOTE: This section is optional, but can be used for easy access to any relevant
 
 
 
-/label ~"group::pipeline authoring" ~"Category:Pipeline Authoring" ~"section::ops" ~"devops::verify" ~"workflow::planning breakdown"
+/label ~"group::pipeline authoring" ~"Category:Pipeline Composition" ~"section::ops" ~"devops::verify" ~"workflow::planning breakdown"

.gitlab/issue_templates/Release group - bug.md

@@ -0,0 +1,43 @@
+## Summary
+
+<!-- Summarize the bug encountered concisely. -->
+
+## Steps to reproduce
+
+<!-- Describe how one can reproduce the issue - this is very important. Please use an ordered list. -->
+
+## What is the current *bug* behavior?
+
+<!-- Describe what actually happens. -->
+
+## What is the expected *correct* behavior?
+
+<!-- Describe what you should see instead. -->
+
+## Relevant logs and/or screenshots
+
+<!-- Paste any relevant logs - please use code blocks (```) to format console output, logs, and code
+ as it's tough to read otherwise. -->
+
+## Possible fixes
+
+<!-- If you can, link to the line of code that might be responsible for the problem. -->
+
+<!-- Default labels -->
+/label ~"group::release"
+/label ~"type::bug"
+/label ~"workflow::planning breakdown"
+
+<!-- Optional labels -->
+/label ~backend ~frontend ~UX
+
+<!-- https://about.gitlab.com/handbook/engineering/quality/issue-triage/#severity -->
+/label ~"severity::3" ~"priority::3"
+
+<!-- If you already have an implementation plan, please fill in detail below https://about.gitlab.com/handbook/engineering/development/ops/release/planning/#weights -->
+/weight X
+/label ~"backend-weight::" ~"frontend-weight::" ~"workflow::ready for development"
+## Implementation guide
+
+<!-- If the issue clear enough, consider inviting community contributors -->
+/label ~"Seeking community contributions" ~"good for new contributors"

.gitlab/issue_templates/Release group - feature.md

@@ -0,0 +1,26 @@
+## Problem to solve
+
+<!-- What problem do we solve? Try to define the who/what/why of the opportunity as a user story. For example, "As a (who), I want (what), so I can (why/value)." -->
+
+## Proposal
+
+<!-- Use this section to explain the feature and how it will work. It can be helpful to add technical details, design proposals, and links to related epics or issues. -->
+
+<!-- Default labels -->
+/label ~"group::release"
+/label ~"type::feature"
+/label ~"workflow::problem validation" 
+/label ~UX
+
+<!-- Optional labels -->
+/label ~backend ~frontend
+
+<!-- If you already have an implementation plan, please fill in detail below https://about.gitlab.com/handbook/engineering/development/ops/release/planning/#weights -->
+/weight X
+/label ~"backend-weight::" ~"frontend-weight::" ~"workflow::ready for development"
+## Implementation guide
+
+<!-- If the issue clear enough, consider inviting community contributors -->
+/label ~"Seeking community contributions" ~"good for new contributors"
+
+

.gitlab/issue_templates/Release group - maintenance.md

@@ -0,0 +1,18 @@
+## Background
+
+## Proposal
+
+<!-- Use this section to explain the feature and how it will work. It can be helpful to add technical details, design proposals, and links to related epics or issues. -->
+
+<!-- Set labels and other metadata -->
+/label ~"group::release"
+/label ~"type::maintenance"
+/label ~"workflow::planning breakdown"
+
+<!-- If you already have an implementation plan, please fill in detail below https://about.gitlab.com/handbook/engineering/development/ops/release/planning/#weights -->
+/weight X
+/label ~"backend-weight::" ~"frontend-weight::" ~"workflow::ready for development"
+## Implementation guide
+
+<!-- If the issue clear enough, consider inviting community contributors -->
+/label ~"Seeking community contributions" ~"good for new contributors"

.gitlab/issue_templates/Security developer workflow.md

@@ -22,6 +22,7 @@ MUST be linked for the release bot to know that the associated merge requests sh
 - [ ] Run `scripts/security-harness` in your local repository to prevent accidentally pushing to any remote besides `gitlab.com/gitlab-org/security`.
 - [ ] Create a new branch prefixing it with `security-`.
 - [ ] Create a merge request targeting `master` on `gitlab.com/gitlab-org/security` and use the [Security Release merge request template].
+- [ ] If this includes a breaking change, make sure to include a mention of it for the relevant versions in [`doc/update/index.md`](https://gitlab.com/gitlab-org/security/gitlab/-/blob/master/doc/update/index.md#version-specific-upgrading-instructions)
 
 After your merge request has been approved according to our [approval guidelines] and by a team member of the AppSec team, you're ready to prepare the backports
 
@@ -46,7 +47,6 @@ After your merge request has been approved according to our [approval guidelines
 - [ ] Fill in any upgrade notes that users may need to take into account in the [details section](#details)
 - [ ] Add Yes/No and further details if needed to the migration and settings columns in the [details section](#details)
 - [ ] Add the nickname of the external user who found the issue (and/or HackerOne profile) to the Thanks row in the [details section](#details)
-- [ ] If this includes a breaking change, make sure it is mentioned for the relevant versions in [`doc/update/index.md`](https://gitlab.com/gitlab-org/security/gitlab/-/blob/master/doc/update/index.md#version-specific-upgrading-instructions)
 
 ## Summary
 

.gitlab/issue_templates/Synchronous Database Index.md

@@ -0,0 +1,11 @@
+<!-- Title suggestion: <async-index-name> synchronous database index(es) addition/removal -->
+
+## Summary
+
+This issue is to add a migration(s) to create/destroy the `<async-index-name>` database index(es) synchronously after it has been created/destroyed on GitLab.com.
+
+The asynchronous index(es) was introduced in <!-- Link to MR that introduced the asynchronous index -->.
+
+/assign me
+/due in 2 weeks
+/label ~database ~"type::maintenance" ~"maintenance::scalability"

.gitlab/merge_request_templates/Deprecations.md

@@ -1,10 +1,5 @@
 <!-- Set the correct label and milestone using autocomplete for guidance. Please @mention only the DRI(s) for each stage or group rather than an entire department. -->
 
-/label ~"release post" ~"release post item" ~"Technical Writing" ~devops:: ~group:: ~"release post item::deprecation"
-/label ~"type::maintenance"
-/milestone %
-/assign `@EM/PM` (choose the DRI; remove backticks here, and below)
-
 **Be sure to link this MR to the relevant deprecation issue(s).**
 
 - Deprecation Issue:
@@ -42,16 +37,18 @@ They are frequently updated, and everyone should make sure they are aware of the
 
 - [ ] Set yourself as the Assignee, meaning you are the DRI.
 - [ ] If the deprecation is a [breaking change](https://about.gitlab.com/handbook/product/gitlab-the-product/#breaking-change), add label `breaking change`.
+- [ ] Confirm this MR is labeled ~"release post item::deprecation"
 - [ ] Follow the process to [create a deprecation YAML file](https://about.gitlab.com/handbook/marketing/blog/release-posts/#creating-a-deprecation-entry).
-- [ ] Make sure that the milestone dates are based on the dates in [Product milestone creation](https://about.gitlab.com/handbook/product/milestones/#product-milestone-creation).
 - [ ] Add reviewers by the 10th.
-- [ ] When ready to be merged and not later than the 15th, add the `~ready` label and @ message the TW for final review and merge.
+- [ ] Add scoped `devops::` and `group::` labels as necessary.
+- [ ] Add the appropriate milestone to this MR.
+- [ ] When ready to be merged (and no later than the 15th) `@mention` the TW for final review and merge.
 
 ## Reviewers
 
 When the content is ready for review, it must be reviewed by a Technical Writer and Engineering Manager, but can also be reviewed by
 Product Marketing, Product Design, and the Product Leaders for this area. Please use the
-[Reviewers for Merge Requests](https://docs.gitlab.com/ee/user/project/merge_requests/getting_started#reviewer)
+[reviewers](https://docs.gitlab.com/ee/user/project/merge_requests/reviews/)
 feature for all reviews. Reviewers will then `approve` the MR and remove themselves from Reviewers when their review is complete.
 
 - [ ] (Recommended) PMM
@@ -106,3 +103,7 @@ must be updated before this MR is merged:
 1. Set the MR to merge when the pipeline succeeds (or merge if the pipeline is already complete).
 
 If you have trouble running the Rake task, check the [troubleshooting steps](https://about.gitlab.com/handbook/marketing/blog/release-posts/#deprecation-rake-task-troubleshooting).
+
+/label ~"release post" ~"release post item" ~"Technical Writing" ~"release post item::deprecation"
+/label ~"type::maintenance"
+/label ~"maintenance::refactor"

.gitlab/merge_request_templates/Quarantine End to End Test.md

@@ -29,7 +29,7 @@ the noise (due to constantly failing tests, flaky tests, and so on) so that new
 - [ ] To ensure a faster turnaround, ask in the `#quality_maintainers` Slack channel for someone to review and merge the merge request, rather than assigning it directly.
 
 <!-- Base labels. -->
-/label ~"Quality" ~"QA" ~"type::maintenance"
+/label ~"Quality" ~"QA" ~"type::maintenance" ~"maintenance::pipelines"
 
 <!--
 Choose the stage that appears in the test path, e.g. ~"devops::create" for

.gitlab/merge_request_templates/Removals.md

@@ -56,7 +56,7 @@ Please review:
 When the content is ready for review, the Technical Writer and Engineering Manager _must_
 review it. Optional reviewers can include Product Marketing, Product Design, and the Product Leaders
 for this area. Use the
-[Reviewers for Merge Requests](https://docs.gitlab.com/ee/user/project/merge_requests/getting_started#reviewer)
+[reviewers](https://docs.gitlab.com/ee/user/project/merge_requests/reviews/)
 feature for all reviews. Reviewers will `approve` the MR and remove themselves from the reviewers list when their review is complete.
 
 - [ ] (Recommended) PMM

.gitlab/merge_request_templates/Revert To Resolve Incident.md

@@ -1,14 +1,31 @@
-## Purpose of Revert
+<!--
+   IMPORTANT: Add appropriate labels BEFORE you save the merge request. CI/CD jobs
+   can be skipped only if the labels are applied BEFORE the CI/CD pipeline is created.
+   See https://docs.gitlab.com/ee/development/pipelines#revert-mrs for more info.
+-->
+
+## Purpose of revert
 
 <!-- Please link to the relevant incident -->
 
-### Check-list
+### Checklist
 
 - [ ] Create an issue to reinstate the merge request and assign it to the author of the reverted merge request.
-- [ ] If the revert is to resolve a ['broken master' incident](https://about.gitlab.com/handbook/engineering/workflow/#broken-master), please read through the [Responsibilities of the Broken 'Master' resolution DRI](https://about.gitlab.com/handbook/engineering/workflow/#responsibilities-of-the-resolution-dri)
+- [ ] If the revert is to resolve a [broken 'master' incident](https://about.gitlab.com/handbook/engineering/workflow/#broken-master), please read through the [Responsibilities of the Broken `master` resolution DRI](https://about.gitlab.com/handbook/engineering/workflow/#responsibilities-of-the-resolution-dri).
-- [ ] Add the appropriate labels **before** the MR is created (we can only skip CI/CD jobs if the labels are added **before** the CI/CD pipeline gets created)
+- [ ] Add the appropriate labels **before** the MR is created. We can skip CI/CD jobs only if the labels are added **before** the CI/CD pipeline is created.
+
+### Milestone info
+
+- [ ] I am reverting something in the **current** milestone. No changelog is needed, and I've added a `~"regression:*"` label.
+- [ ] I am reverting something in a **different** milestone. A changelog is needed, and I've removed the `~"regression:*"` label.
+
+### Related issues and merge requests
+
 
 /label ~"pipeline:expedite" ~"master:broken"
 
-<!-- If applicable, specifying the regression label in the current milestone will skip additional CI/CD jobs (e.g. Danger changelog checks) -->
+<!--
+   Regression label: if applicable, specify the milestone-specific regression label
+   (such as ~regression:15.8) to skip additional CI/CD jobs, like Danger changelog checks. -->
+
 <!-- /label ~regression: -->

.gitlab/merge_request_templates/Stable Branch.md

@@ -0,0 +1,35 @@
+<!--
+Merging into stable branches in canonical projects is reserved for
+GitLab patch releases https://docs.gitlab.com/ee/policy/maintenance.html#patch-releases
+
+If you're backporting a security fix, please refer to the security merge request
+template https://gitlab.com/gitlab-org/security/gitlab/blob/master/.gitlab/merge_request_templates/Security%20Release.md.
+Security backport merge requests should not be opened on the GitLab canonical project.
+-->
+
+## What does this MR do and why?
+
+_Describe in detail what merge request is being backported and why_
+
+## MR acceptance checklist
+
+This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.
+
+* [ ] This MR is backporting a bug fix, documentation update, or spec fix, previously merged in the default branch.
+* [ ] The original MR has been deployed to GitLab.com (not applicable for documentation or spec changes).
+* [ ] This MR has a [severity label] assigned (if applicable).
+* [ ] Ensure the `e2e:package-and-test` job has either succeeded or been approved by a Software Engineer in Test.
+
+#### Note to the merge request author and maintainer
+
+The process of backporting bug fixes into stable branches is tracked as part of an
+[internal pilot]. If you have questions about this process, please:
+
+* Refer to the [internal pilot] issue for feedback or questions.
+* Refer to the [patch release runbook for engineers and maintainers] for guidance.
+
+[severity label]: https://about.gitlab.com/handbook/engineering/quality/issue-triage/#severity
+[internal pilot]: https://gitlab.com/gitlab-com/gl-infra/delivery/-/issues/2886
+[patch release runbook for engineers and maintainers]: https://gitlab.com/gitlab-org/release/docs/-/blob/master/general/patch/process_new.md
+
+/assign me

.gitpod.yml

@@ -2,6 +2,7 @@
 # https://www.gitpod.io/docs/configure/workspaces/tasks
 
 image: registry.gitlab.com/gitlab-org/gitlab-development-kit/gitpod-workspace:stable
+checkoutLocation: gitlab-development-kit/gitlab
 
 tasks:
 
@@ -24,8 +25,6 @@ tasks:
         echo "$(date) – Copying GDK" | tee -a /workspace/startup.log
         cp -r $HOME/gitlab-development-kit /workspace/
         cd /workspace/gitlab-development-kit
-        # ensure GitLab directory is symlinked under the GDK
-        ln -nfs "$GITPOD_REPO_ROOT" /workspace/gitlab-development-kit/gitlab
         mv -v /workspace/gitlab-development-kit/secrets.yml /workspace/gitlab-development-kit/gitlab/config
         # ensure gdk.yml has correct instance settings
         gdk config set gitlab.rails.port 443  |& tee -a /workspace/startup.log

.haml-lint.yml

@@ -120,9 +120,12 @@ linters:
       - Layout/SpaceInsideHashLiteralBraces
       - Layout/SpaceInsideStringInterpolation
       - Layout/TrailingEmptyLines
+      - Lint/AmbiguousOperatorPrecedence
       - Lint/LiteralInInterpolation
       - Lint/ParenthesesAsGroupedExpression
       - Lint/SafeNavigationConsistency
+      - Lint/SymbolConversion
+      - Lint/UnusedBlockArgument
       - Metrics/BlockNesting
       - Naming/VariableName
       - Performance/RedundantMatch

.markdownlint.yml

@@ -33,7 +33,6 @@ proper-names:
     "API",
     "Asana",
     "Auth0",
-    "Authentiq",
     "Azure",
     "Bamboo",
     "Bitbucket",

.rubocop.yml

@@ -13,6 +13,9 @@ inherit_from:
     <% end %>
   - '.rubocop_todo.yml'
   <% end %>
+  <% if RUBY_VERSION[/^\d+\.\d+/, 0] == '2.7' %>
+  - ./rubocop/rubocop-ruby27.yml
+  <% end %>
   <% if RUBY_VERSION[/^\d+\.\d+/, 0] == '3.0' %>
   - ./rubocop/rubocop-ruby30.yml
   <% end %>
@@ -386,6 +389,18 @@ Gitlab/EventStoreSubscriber:
     - 'spec/**/*'
     - 'ee/spec/**/*'
 
+Gitlab/DocUrl:
+  Enabled: true
+  Exclude:
+    - danger/**/*
+    - ee/spec/**/*
+    - haml_lint/**/*
+    - qa/**/*
+    - rubocop/**/*
+    - scripts/**/*
+    - spec/**/*
+    - tooling/**/*
+
 GitlabSecurity/PublicSend:
   Enabled: true
   Exclude:
@@ -497,6 +512,11 @@ RSpec/FactoriesInMigrationSpecs:
     - 'spec/lib/ee/gitlab/background_migration/**/*.rb'
     - 'ee/spec/lib/ee/gitlab/background_migration/**/*.rb'
 
+RSpec/MissingFeatureCategory:
+  Enabled: true
+  Exclude:
+    - 'qa/**/*.rb'
+
 RSpec/FactoryBot/AvoidCreate:
   Enabled: true
   Include:
@@ -506,12 +526,14 @@ RSpec/FactoryBot/AvoidCreate:
     - 'spec/views/**/*.rb'
     - 'spec/components/**/*.rb'
     - 'spec/mailers/**/*.rb'
+    - 'spec/routes/directs/*.rb'
     - 'ee/spec/presenters/**/*.rb'
     - 'ee/spec/serializers/**/*.rb'
     - 'ee/spec/helpers/**/*.rb'
     - 'ee/spec/views/**/*.rb'
     - 'ee/spec/components/**/*.rb'
     - 'ee/spec/mailers/**/*.rb'
+    - 'ee/spec/routes/directs/*.rb'
 
 RSpec/FactoryBot/StrategyInCallback:
   Enabled: true
@@ -610,6 +632,19 @@ RSpec/EnvAssignment:
     - 'ee/spec/**/fast_spec_helper.rb'
     - 'spec/**/spec_helper.rb'
     - 'ee/spec/**/spec_helper.rb'
+
+RSpec/EnvMocking:
+  Enable: true
+  Include:
+    - 'spec/**/*.rb'
+    - 'ee/spec/**/*.rb'
+  Exclude:
+    - 'spec/**/fast_spec_helper.rb'
+    - 'ee/spec/**/fast_spec_helper.rb'
+    - 'spec/**/spec_helper.rb'
+    - 'ee/spec/**/spec_helper.rb'
+    - 'spec/support/helpers/stub_env.rb'
+
 RSpec/BeSuccessMatcher:
   Enabled: true
   Include:
@@ -915,6 +950,6 @@ Cop/FeatureFlagUsage:
     - 'lib/gitlab/patch/**/*.rb'
     - 'lib/gitlab/instrumentation/**/*.rb'
 
-# See https://gitlab.com/gitlab-org/gitlab/-/issues/386618
+Style/ArgumentsForwarding:
-Layout/HashAlignment:
+  Enabled: true
-  Enabled: false
+  AllowOnlyRestArgument: false

.rubocop_todo/background_migration/feature_category.yml

@@ -1,3 +0,0 @@
----
-BackgroundMigration/FeatureCategory:
-  Details: grace period

.rubocop_todo/capybara/visibility_matcher.yml

@@ -1,5 +1,5 @@
 ---
-RSpec/Capybara/VisibilityMatcher:
+Capybara/VisibilityMatcher:
   Exclude:
     - 'ee/spec/features/boards/sidebar_spec.rb'
     - 'ee/spec/features/epics/epic_show_spec.rb'
@@ -7,7 +7,6 @@ RSpec/Capybara/VisibilityMatcher:
     - 'ee/spec/features/epics/update_epic_spec.rb'
     - 'ee/spec/features/groups/analytics/cycle_analytics/filters_and_data_spec.rb'
     - 'ee/spec/features/groups/issues_spec.rb'
-    - 'ee/spec/features/groups/saml_enforcement_spec.rb'
     - 'ee/spec/features/groups/settings/protected_environments_spec.rb'
     - 'ee/spec/features/issues/related_issues_spec.rb'
     - 'ee/spec/features/projects/integrations/user_activates_jira_spec.rb'
@@ -15,7 +14,6 @@ RSpec/Capybara/VisibilityMatcher:
     - 'ee/spec/features/projects/requirements_management/requirements_list_spec.rb'
     - 'ee/spec/features/projects/settings/ee/repository_mirrors_settings_spec.rb'
     - 'ee/spec/features/promotion_spec.rb'
-    - 'ee/spec/features/registrations/welcome_spec.rb'
     - 'ee/spec/support/helpers/billing_plans_helpers.rb'
     - 'ee/spec/support/shared_examples/features/password_complexity_shared_examples.rb'
     - 'ee/spec/support/shared_examples/views/issuable_bulk_dropdown_shared_examples.rb'

.rubocop_todo/cop/redirect_with_status.yml

@@ -0,0 +1,6 @@
+---
+Cop/RedirectWithStatus:
+  Details: grace period
+  Exclude:
+    - 'app/controllers/concerns/issuable_actions.rb'
+    - 'app/controllers/concerns/membership_actions.rb'

.rubocop_todo/cop/user_admin.yml

@@ -3,38 +3,19 @@ Cop/UserAdmin:
   Exclude:
     - 'app/controllers/admin/impersonations_controller.rb'
     - 'app/controllers/sessions_controller.rb'
-    - 'app/finders/autocomplete/routes_finder.rb'
-    - 'app/finders/ci/jobs_finder.rb'
-    - 'app/finders/ci/runners_finder.rb'
-    - 'app/finders/personal_access_tokens_finder.rb'
-    - 'app/finders/users_finder.rb'
     - 'app/graphql/mutations/admin/sidekiq_queues/delete_jobs.rb'
     - 'app/graphql/resolvers/admin/analytics/usage_trends/measurements_resolver.rb'
-    - 'app/helpers/application_helper.rb'
-    - 'app/helpers/import_helper.rb'
-    - 'app/helpers/projects_helper.rb'
-    - 'app/helpers/search_helper.rb'
-    - 'app/helpers/users/callouts_helper.rb'
-    - 'app/helpers/users_helper.rb'
-    - 'app/helpers/visibility_level_helper.rb'
     - 'app/models/concerns/protected_ref_access.rb'
     - 'app/models/concerns/spammable.rb'
     - 'app/models/merge_requests_closing_issues.rb'
     - 'app/models/protected_branch.rb'
     - 'app/models/user.rb'
-    - 'app/policies/note_policy.rb'
     - 'app/services/auth/container_registry_authentication_service.rb'
     - 'app/services/emails/create_service.rb'
     - 'app/services/projects/enable_deploy_key_service.rb'
     - 'app/services/projects/fork_service.rb'
     - 'app/services/users/build_service.rb'
     - 'ee/app/controllers/ee/projects_controller.rb'
-    - 'ee/app/helpers/ee/dashboard_helper.rb'
-    - 'ee/app/helpers/ee/import_helper.rb'
-    - 'ee/app/helpers/ee/subscribable_banner_helper.rb'
-    - 'ee/app/helpers/ee/users/callouts_helper.rb'
-    - 'ee/app/helpers/license_monitoring_helper.rb'
-    - 'ee/app/helpers/push_rules_helper.rb'
     - 'ee/app/models/concerns/ee/protected_ref_access.rb'
     - 'ee/app/models/ee/user.rb'
     - 'ee/app/policies/ee/group_policy.rb'
@@ -43,14 +24,7 @@ Cop/UserAdmin:
     - 'ee/app/services/ee/projects/update_service.rb'
     - 'ee/lib/ee/api/helpers.rb'
     - 'ee/lib/ee/gitlab/git_access.rb'
-    - 'lib/api/award_emoji.rb'
-    - 'lib/api/ci/runners.rb'
-    - 'lib/api/groups.rb'
-    - 'lib/api/helpers.rb'
-    - 'lib/api/users.rb'
-    - 'lib/api/v3/github.rb'
     - 'lib/constraints/admin_constrainer.rb'
-    - 'lib/gitlab/auth.rb'
     - 'lib/gitlab/import_export/members_mapper.rb'
     - 'lib/gitlab/performance_bar.rb'
     - 'lib/gitlab/visibility_level.rb'

.rubocop_todo/database/multiple_databases.yml

@@ -1,5 +0,0 @@
----
-Database/MultipleDatabases:
-  Exclude:
-    - 'db/post_migrate/20210811122206_update_external_project_bots.rb'
-    - 'db/post_migrate/20210812013042_remove_duplicate_project_authorizations.rb'

.rubocop_todo/fips/md5.yml

@@ -17,6 +17,5 @@ Fips/MD5:
     - 'spec/lib/gitlab/ci/trace/remote_checksum_spec.rb'
     - 'spec/models/concerns/checksummable_spec.rb'
     - 'spec/services/gravatar_service_spec.rb'
-    - 'spec/support/shared_examples/services/packages/debian/generate_distribution_shared_examples.rb'
     - 'spec/tooling/rspec_flaky/example_spec.rb'
     - 'tooling/rspec_flaky/example.rb'

.rubocop_todo/fips/sha1.yml

@@ -21,7 +21,6 @@ Fips/SHA1:
     - 'ee/lib/ee/gitlab/background_migration/recalculate_vulnerability_finding_signatures_for_findings.rb'
     - 'ee/spec/factories/vulnerabilities/feedback.rb'
     - 'ee/spec/factories/vulnerabilities/finding_signatures.rb'
-    - 'ee/spec/finders/security/pipeline_vulnerabilities_finder_spec.rb'
     - 'ee/spec/lib/ee/gitlab/alert_management/payload/generic_spec.rb'
     - 'ee/spec/lib/ee/gitlab/background_migration/populate_uuids_for_security_findings_spec.rb'
     - 'ee/spec/lib/ee/gitlab/background_migration/recalculate_vulnerability_finding_signatures_for_findings_spec.rb'

.rubocop_todo/gitlab/delegate_predicate_methods.yml

@@ -1,4 +0,0 @@
----
-Gitlab/DelegatePredicateMethods:
-  Exclude:
-    - 'app/models/clusters/cluster.rb'

.rubocop_todo/gitlab/deprecate_track_redis_hll_event.yml

@@ -10,5 +10,4 @@ Gitlab/DeprecateTrackRedisHLLEvent:
     - 'ee/app/controllers/groups/analytics/ci_cd_analytics_controller.rb'
     - 'ee/app/controllers/groups/audit_events_controller.rb'
     - 'ee/app/controllers/groups/epic_boards_controller.rb'
-    - 'ee/app/controllers/groups/security/compliance_dashboards_controller.rb'
     - 'spec/controllers/concerns/redis_tracking_spec.rb'

.rubocop_todo/gitlab/doc_url.yml

@@ -0,0 +1,55 @@
+---
+Gitlab/DocUrl:
+  Details: grace period
+  Exclude:
+    - 'app/controllers/jira_connect/app_descriptor_controller.rb'
+    - 'app/graphql/types/merge_request_type.rb'
+    - 'app/graphql/types/notes/diff_position_input_type.rb'
+    - 'app/graphql/types/query_complexity_type.rb'
+    - 'app/models/integrations/apple_app_store.rb'
+    - 'app/models/integrations/microsoft_teams.rb'
+    - 'app/presenters/dev_ops_report/metric_presenter.rb'
+    - 'app/serializers/build_details_entity.rb'
+    - 'app/services/security/ci_configuration/container_scanning_create_service.rb'
+    - 'app/services/security/ci_configuration/dependency_scanning_create_service.rb'
+    - 'app/services/security/ci_configuration/sast_create_service.rb'
+    - 'app/services/security/ci_configuration/sast_iac_create_service.rb'
+    - 'app/services/security/ci_configuration/secret_detection_create_service.rb'
+    - 'app/services/tasks_to_be_done/create_ci_task_service.rb'
+    - 'app/services/tasks_to_be_done/create_code_task_service.rb'
+    - 'app/services/tasks_to_be_done/create_issues_task_service.rb'
+    - 'ee/app/graphql/mutations/requirements_management/export_requirements.rb'
+    - 'ee/app/graphql/types/vulnerability_state_enum.rb'
+    - 'ee/app/helpers/projects/learn_gitlab_helper.rb'
+    - 'ee/app/mailers/emails/user_cap.rb'
+    - 'ee/app/workers/concerns/elastic/migration_obsolete.rb'
+    - 'ee/lib/ee/gitlab/ci/pipeline/quota/size.rb'
+    - 'ee/lib/slack/block_kit/app_home_opened.rb'
+    - 'ee/lib/system_check/app/advanced_search_migrations_check.rb'
+    - 'ee/lib/tasks/gitlab/geo.rake'
+    - 'lib/backup/database.rb'
+    - 'lib/feature.rb'
+    - 'lib/gitlab/audit/auditor.rb'
+    - 'lib/gitlab/ci/config/entry/processable.rb'
+    - 'lib/gitlab/config_checker/external_database_checker.rb'
+    - 'lib/gitlab/config_checker/puma_rugged_checker.rb'
+    - 'lib/gitlab/database.rb'
+    - 'lib/gitlab/database/migration_helpers/automatic_lock_writes_on_tables.rb'
+    - 'lib/gitlab/database/migration_helpers/v2.rb'
+    - 'lib/gitlab/database/migrations/batched_background_migration_helpers.rb'
+    - 'lib/gitlab/database/migrations/extension_helpers.rb'
+    - 'lib/gitlab/database/query_analyzers/prevent_cross_database_modification.rb'
+    - 'lib/gitlab/database/query_analyzers/restrict_allowed_schemas.rb'
+    - 'lib/gitlab/i18n/po_linter.rb'
+    - 'lib/gitlab/instrumentation/redis_base.rb'
+    - 'lib/gitlab/pagination/keyset/unsupported_scope_order.rb'
+    - 'lib/gitlab/redis/hll.rb'
+    - 'lib/gitlab/slash_commands/presenters/help.rb'
+    - 'lib/gitlab/utils/strong_memoize.rb'
+    - 'lib/initializer_connections.rb'
+    - 'lib/security/ci_configuration/base_build_action.rb'
+    - 'lib/tasks/db_obsolete_ignored_columns.rake'
+    - 'lib/tasks/gitlab/docs/redirect.rake'
+    - 'lib/tasks/gitlab/shell.rake'
+    - 'lib/tasks/migrate/schema_check.rake'
+    - 'lib/tasks/test.rake'

.rubocop_todo/gitlab/feature_available_usage.yml

@@ -58,7 +58,6 @@ Gitlab/FeatureAvailableUsage:
     - 'ee/app/policies/compliance_management/framework_policy.rb'
     - 'ee/app/policies/ee/group_policy.rb'
     - 'ee/app/policies/ee/project_policy.rb'
-    - 'ee/app/policies/ee/protected_branch_policy.rb'
     - 'ee/app/presenters/ee/label_presenter.rb'
     - 'ee/app/presenters/merge_request_approver_presenter.rb'
     - 'ee/app/serializers/dashboard_operations_project_entity.rb'
@@ -109,8 +108,8 @@ Gitlab/FeatureAvailableUsage:
     - 'ee/lib/gitlab/code_owners.rb'
     - 'ee/lib/gitlab/path_locks_finder.rb'
     - 'ee/lib/incident_management/incident_sla.rb'
+    - 'ee/spec/models/ee/project_spec.rb'
     - 'ee/spec/models/instance_security_dashboard_spec.rb'
     - 'ee/spec/models/license_spec.rb'
-    - 'ee/spec/models/project_spec.rb'
     - 'lib/api/helpers/related_resources_helpers.rb'
     - 'spec/models/concerns/featurable_spec.rb'

.rubocop_todo/gitlab/namespaced_class.yml

@@ -429,6 +429,7 @@ Gitlab/NamespacedClass:
     - 'app/presenters/group_clusterable_presenter.rb'
     - 'app/presenters/group_member_presenter.rb'
     - 'app/presenters/instance_clusterable_presenter.rb'
+    - 'app/presenters/issue_email_participant_presenter.rb'
     - 'app/presenters/issue_presenter.rb'
     - 'app/presenters/label_presenter.rb'
     - 'app/presenters/member_presenter.rb'
@@ -1074,7 +1075,6 @@ Gitlab/NamespacedClass:
     - 'ee/lib/gitlab/cidr.rb'
     - 'ee/lib/gitlab/custom_file_templates.rb'
     - 'ee/lib/gitlab/expiring_subscription_message.rb'
-    - 'ee/lib/gitlab/geo_logger.rb'
     - 'ee/lib/gitlab/group_plans_preloader.rb'
     - 'ee/lib/gitlab/ip_address_state.rb'
     - 'ee/lib/gitlab/items_collection.rb'
@@ -1130,7 +1130,9 @@ Gitlab/NamespacedClass:
     - 'lib/gitlab/empty_search_results.rb'
     - 'lib/gitlab/encrypted_command_base.rb'
     - 'lib/gitlab/encrypted_configuration.rb'
+    - 'lib/gitlab/encrypted_incoming_email_command.rb'
     - 'lib/gitlab/encrypted_ldap_command.rb'
+    - 'lib/gitlab/encrypted_service_desk_email_command.rb'
     - 'lib/gitlab/encrypted_smtp_command.rb'
     - 'lib/gitlab/environment_logger.rb'
     - 'lib/gitlab/exceptions_app.rb'
@@ -1266,10 +1268,7 @@ Gitlab/NamespacedClass:
     - 'spec/lib/bitbucket/collection_spec.rb'
     - 'spec/lib/gitlab/multi_destination_logger_spec.rb'
     - 'spec/lib/marginalia_spec.rb'
-    - 'spec/mailers/notify_spec.rb'
     - 'spec/models/concerns/batch_destroy_dependent_associations_spec.rb'
-    - 'spec/models/concerns/bulk_insertable_associations_spec.rb'
-    - 'spec/models/concerns/triggerable_hooks_spec.rb'
     - 'spec/support/helpers/ci_artifact_metadata_generator.rb'
     - 'spec/support/helpers/fake_migration_classes.rb'
     - 'spec/support/helpers/fake_u2f_device.rb'

.rubocop_todo/gitlab/no_code_coverage_comment.yml

@@ -13,6 +13,5 @@ Gitlab/NoCodeCoverageComment:
     - 'lib/gitlab/database/background_migration/health_status/signals.rb'
     - 'lib/gitlab/seeder.rb'
     - 'lib/gitlab/webpack/dev_server_middleware.rb'
-    - 'lib/tasks/dev.rake'
     - 'lib/tasks/gems.rake'
     - 'lib/tasks/gitlab/db.rake'

.rubocop_todo/gitlab/strong_memoize_attr.yml

@@ -97,9 +97,7 @@ Gitlab/StrongMemoizeAttr:
     - 'app/models/concerns/has_repository.rb'
     - 'app/models/concerns/has_wiki.rb'
     - 'app/models/concerns/has_wiki_page_meta_attributes.rb'
-    - 'app/models/concerns/mentionable/reference_regexes.rb'
     - 'app/models/concerns/redis_cacheable.rb'
-    - 'app/models/concerns/require_email_verification.rb'
     - 'app/models/concerns/resolvable_discussion.rb'
     - 'app/models/concerns/security/latest_pipeline_information.rb'
     - 'app/models/container_registry/event.rb'
@@ -237,7 +235,6 @@ Gitlab/StrongMemoizeAttr:
     - 'app/services/packages/debian/generate_distribution_key_service.rb'
     - 'app/services/packages/debian/generate_distribution_service.rb'
     - 'app/services/packages/debian/process_changes_service.rb'
-    - 'app/services/packages/debian/process_package_file_service.rb'
     - 'app/services/packages/helm/process_file_service.rb'
     - 'app/services/packages/maven/metadata/base_create_xml_service.rb'
     - 'app/services/packages/maven/metadata/create_plugins_xml_service.rb'
@@ -326,9 +323,7 @@ Gitlab/StrongMemoizeAttr:
     - 'ee/app/helpers/ee/trial_helper.rb'
     - 'ee/app/helpers/ee/welcome_helper.rb'
     - 'ee/app/helpers/license_monitoring_helper.rb'
-    - 'ee/app/helpers/paid_feature_callout_helper.rb'
     - 'ee/app/helpers/subscriptions_helper.rb'
-    - 'ee/app/helpers/trial_status_widget_helper.rb'
     - 'ee/app/models/approval_merge_request_rule.rb'
     - 'ee/app/models/approval_state.rb'
     - 'ee/app/models/approval_wrapped_any_approver_rule.rb'
@@ -356,7 +351,6 @@ Gitlab/StrongMemoizeAttr:
     - 'ee/app/models/ee/list.rb'
     - 'ee/app/models/ee/merge_request.rb'
     - 'ee/app/models/ee/namespace.rb'
-    - 'ee/app/models/ee/namespace/storage/notification.rb'
     - 'ee/app/models/ee/project.rb'
     - 'ee/app/models/ee/snippet.rb'
     - 'ee/app/models/ee/user.rb'
@@ -490,13 +484,11 @@ Gitlab/StrongMemoizeAttr:
     - 'ee/lib/gitlab/code_owners/entry.rb'
     - 'ee/lib/gitlab/code_owners/loader.rb'
     - 'ee/lib/gitlab/custom_file_templates.rb'
-    - 'ee/lib/gitlab/elastic/client.rb'
     - 'ee/lib/gitlab/elastic/document_reference.rb'
     - 'ee/lib/gitlab/elastic/indexer.rb'
     - 'ee/lib/gitlab/elastic/project_search_results.rb'
     - 'ee/lib/gitlab/elastic/search_results.rb'
     - 'ee/lib/gitlab/expiring_subscription_message.rb'
-    - 'ee/lib/gitlab/geo.rb'
     - 'ee/lib/gitlab/geo/health_check.rb'
     - 'ee/lib/gitlab/geo/jwt_request_decoder.rb'
     - 'ee/lib/gitlab/geo/oauth/logout_state.rb'
@@ -593,7 +585,6 @@ Gitlab/StrongMemoizeAttr:
     - 'lib/gitlab/ci/pipeline/chain/seed.rb'
     - 'lib/gitlab/ci/pipeline/chain/skip.rb'
     - 'lib/gitlab/ci/pipeline/expression/lexer.rb'
-    - 'lib/gitlab/ci/pipeline/metrics.rb'
     - 'lib/gitlab/ci/pipeline/quota/deployments.rb'
     - 'lib/gitlab/ci/pipeline/seed/processable/resource_group.rb'
     - 'lib/gitlab/ci/project_config/auto_devops.rb'
@@ -602,7 +593,6 @@ Gitlab/StrongMemoizeAttr:
     - 'lib/gitlab/ci/project_config/remote.rb'
     - 'lib/gitlab/ci/project_config/repository.rb'
     - 'lib/gitlab/ci/project_config/source.rb'
-    - 'lib/gitlab/ci/queue/metrics.rb'
     - 'lib/gitlab/ci/reports/accessibility_reports_comparer.rb'
     - 'lib/gitlab/ci/reports/codequality_reports_comparer.rb'
     - 'lib/gitlab/ci/reports/security/locations/base.rb'
@@ -610,13 +600,11 @@ Gitlab/StrongMemoizeAttr:
     - 'lib/gitlab/ci/reports/test_reports_comparer.rb'
     - 'lib/gitlab/ci/reports/test_suite_comparer.rb'
     - 'lib/gitlab/ci/reports/test_suite_summary.rb'
-    - 'lib/gitlab/ci/runner/metrics.rb'
     - 'lib/gitlab/ci/status/composite.rb'
     - 'lib/gitlab/ci/tags/bulk_insert.rb'
     - 'lib/gitlab/ci/trace.rb'
     - 'lib/gitlab/ci/trace/archive.rb'
     - 'lib/gitlab/ci/trace/checksum.rb'
-    - 'lib/gitlab/ci/trace/metrics.rb'
     - 'lib/gitlab/ci/trace/remote_checksum.rb'
     - 'lib/gitlab/ci/variables/builder.rb'
     - 'lib/gitlab/ci/variables/builder/group.rb'
@@ -629,9 +617,7 @@ Gitlab/StrongMemoizeAttr:
     - 'lib/gitlab/config/entry/composable_array.rb'
     - 'lib/gitlab/config/loader/yaml.rb'
     - 'lib/gitlab/conflict/file.rb'
-    - 'lib/gitlab/database/as_with_materialized.rb'
     - 'lib/gitlab/database/background_migration/health_status/indicators/write_ahead_log.rb'
-    - 'lib/gitlab/database/background_migration/prometheus_metrics.rb'
     - 'lib/gitlab/database/bulk_update.rb'
     - 'lib/gitlab/database/load_balancing/srv_resolver.rb'
     - 'lib/gitlab/database/metrics.rb'
@@ -647,7 +633,6 @@ Gitlab/StrongMemoizeAttr:
     - 'lib/gitlab/diff/suggestion.rb'
     - 'lib/gitlab/discussions_diff/file_collection.rb'
     - 'lib/gitlab/email/handler/service_desk_handler.rb'
-    - 'lib/gitlab/email/hook/delivery_metrics_observer.rb'
     - 'lib/gitlab/email/receiver.rb'
     - 'lib/gitlab/external_authorization/response.rb'
     - 'lib/gitlab/gfm/reference_rewriter.rb'
@@ -691,7 +676,6 @@ Gitlab/StrongMemoizeAttr:
     - 'lib/gitlab/metrics/dashboard/stages/grafana_formatter.rb'
     - 'lib/gitlab/metrics/dashboard/url.rb'
     - 'lib/gitlab/metrics/prometheus.rb'
-    - 'lib/gitlab/metrics/subscribers/active_record.rb'
     - 'lib/gitlab/pages/cache_control.rb'
     - 'lib/gitlab/prometheus_client.rb'
     - 'lib/gitlab/rack_attack/request.rb'
@@ -717,7 +701,6 @@ Gitlab/StrongMemoizeAttr:
     - 'lib/gitlab/webpack/graphql_known_operations.rb'
     - 'lib/gitlab/webpack/manifest.rb'
     - 'lib/gitlab/wiki_pages/front_matter_parser.rb'
-    - 'lib/gitlab/x509/certificate.rb'
     - 'lib/gitlab/x509/signature.rb'
     - 'lib/gitlab/x509/tag.rb'
     - 'lib/grafana/time_window.rb'
@@ -727,6 +710,5 @@ Gitlab/StrongMemoizeAttr:
     - 'lib/sidebars/groups/menus/merge_requests_menu.rb'
     - 'lib/sidebars/projects/menus/analytics_menu.rb'
     - 'lib/sidebars/projects/menus/issues_menu.rb'
-    - 'lib/sidebars/projects/menus/learn_gitlab_menu.rb'
     - 'lib/unnested_in_filters/rewriter.rb'
     - 'tooling/graphql/docs/helper.rb'

.rubocop_todo/gitlab_security/public_send.yml

@@ -0,0 +1,9 @@
+---
+GitlabSecurity/PublicSend:
+  Details: grace period
+  Exclude:
+    - 'ee/app/helpers/push_rules_helper.rb'
+    - 'ee/app/models/ee/namespace_setting.rb'
+    - 'ee/app/models/ee/project.rb'
+    - 'ee/app/models/push_rule.rb'
+    - 'lib/gitlab/diff/file.rb'

.rubocop_todo/graphql/descriptions.yml

@@ -1,7 +1,6 @@
 ---
 # Cop supports --autocorrect.
 Graphql/Descriptions:
-  Safe: false
   Details: grace period
   Exclude:
     - 'app/graphql/resolvers/admin/analytics/usage_trends/measurements_resolver.rb'
@@ -18,7 +17,6 @@ Graphql/Descriptions:
     - 'app/graphql/resolvers/milestones_resolver.rb'
     - 'app/graphql/resolvers/namespace_projects_resolver.rb'
     - 'app/graphql/resolvers/packages_base_resolver.rb'
-    - 'app/graphql/resolvers/releases_resolver.rb'
     - 'app/graphql/resolvers/users_resolver.rb'
     - 'app/graphql/resolvers/work_items_resolver.rb'
     - 'app/graphql/types/alert_management/alert_type.rb'

.rubocop_todo/layout/array_alignment.yml

@@ -18,7 +18,6 @@ Layout/ArrayAlignment:
     - 'app/graphql/resolvers/concerns/issues/sort_arguments.rb'
     - 'app/graphql/types/permission_types/merge_request.rb'
     - 'app/helpers/merge_requests_helper.rb'
-    - 'app/helpers/namespaces_helper.rb'
     - 'app/helpers/search_helper.rb'
     - 'app/helpers/submodule_helper.rb'
     - 'app/models/ci/bridge.rb'
@@ -60,7 +59,6 @@ Layout/ArrayAlignment:
     - 'ee/app/finders/ee/issues_finder/params.rb'
     - 'ee/app/finders/geo/project_registry_finder.rb'
     - 'ee/app/graphql/ee/resolvers/project_pipelines_resolver.rb'
-    - 'ee/app/helpers/ee/routing/projects_helper.rb'
     - 'ee/app/models/concerns/geo/verification_state.rb'
     - 'ee/app/models/dast_site_profile.rb'
     - 'ee/app/models/dora/base_metric.rb'
@@ -115,9 +113,9 @@ Layout/ArrayAlignment:
     - 'ee/spec/models/dora/base_metric_spec.rb'
     - 'ee/spec/models/dora/daily_metrics_spec.rb'
     - 'ee/spec/models/ee/group_spec.rb'
+    - 'ee/spec/models/ee/project_spec.rb'
     - 'ee/spec/models/ee/protected_ref_access_spec.rb'
     - 'ee/spec/models/issue_spec.rb'
-    - 'ee/spec/models/project_spec.rb'
     - 'ee/spec/models/repository_spec.rb'
     - 'ee/spec/models/security/orchestration_policy_rule_schedule_spec.rb'
     - 'ee/spec/models/security/scan_spec.rb'
@@ -135,7 +133,6 @@ Layout/ArrayAlignment:
     - 'ee/spec/requests/api/saml_group_links_spec.rb'
     - 'ee/spec/serializers/dashboard_environment_entity_spec.rb'
     - 'ee/spec/serializers/user_analytics_entity_spec.rb'
-    - 'ee/spec/services/analytics/cycle_analytics/value_streams/update_service_spec.rb'
     - 'ee/spec/services/audit_events/export_csv_service_spec.rb'
     - 'ee/spec/services/ee/auto_merge_service_spec.rb'
     - 'ee/spec/services/ee/boards/issues/list_service_spec.rb'
@@ -201,8 +198,6 @@ Layout/ArrayAlignment:
     - 'qa/qa/specs/features/browser_ui/5_package/package_registry/npm/npm_project_level_spec.rb'
     - 'qa/qa/specs/features/browser_ui/5_package/package_registry/pypi_repository_spec.rb'
     - 'qa/qa/specs/features/ee/browser_ui/10_govern/group/group_audit_logs_2_spec.rb'
-    - 'qa/qa/specs/features/ee/browser_ui/13_secure/enable_scanning_from_configuration_spec.rb'
-    - 'qa/qa/specs/features/ee/browser_ui/13_secure/license_compliance_spec.rb'
     - 'qa/qa/specs/features/ee/browser_ui/1_manage/group/group_ldap_sync_spec.rb'
     - 'qa/spec/specs/runner_spec.rb'
     - 'rubocop/cop/gitlab/rspec/avoid_setup.rb'
@@ -256,7 +251,6 @@ Layout/ArrayAlignment:
     - 'spec/lib/gitlab/ci/config/external/file/remote_spec.rb'
     - 'spec/lib/gitlab/ci/config/external/mapper/filter_spec.rb'
     - 'spec/lib/gitlab/ci/config/external/mapper/location_expander_spec.rb'
-    - 'spec/lib/gitlab/ci/config/external/mapper/matcher_spec.rb'
     - 'spec/lib/gitlab/ci/config/external/mapper/normalizer_spec.rb'
     - 'spec/lib/gitlab/ci/config/external/mapper_spec.rb'
     - 'spec/lib/gitlab/ci/config_spec.rb'

.rubocop_todo/layout/empty_line_after_magic_comment.yml

@@ -0,0 +1,899 @@
+---
+# Cop supports --autocorrect.
+Layout/EmptyLineAfterMagicComment:
+  Details: grace period
+  Exclude:
+    - 'app/controllers/admin/instance_review_controller.rb'
+    - 'app/controllers/concerns/render_access_tokens.rb'
+    - 'app/controllers/groups/observability_controller.rb'
+    - 'app/controllers/groups/registry/repositories_controller.rb'
+    - 'app/controllers/projects/metrics_dashboard_controller.rb'
+    - 'app/finders/ci/auth_job_finder.rb'
+    - 'app/finders/clusters/knative_services_finder.rb'
+    - 'app/finders/keys_finder.rb'
+    - 'app/finders/packages/composer/packages_finder.rb'
+    - 'app/finders/packages/npm/package_finder.rb'
+    - 'app/finders/packages/package_file_finder.rb'
+    - 'app/finders/packages/package_finder.rb'
+    - 'app/finders/packages/tags_finder.rb'
+    - 'app/finders/releases/group_releases_finder.rb'
+    - 'app/graphql/resolvers/commit_pipelines_resolver.rb'
+    - 'app/graphql/resolvers/group_packages_resolver.rb'
+    - 'app/graphql/resolvers/merge_request_pipelines_resolver.rb'
+    - 'app/graphql/resolvers/project_members_resolver.rb'
+    - 'app/graphql/resolvers/project_milestones_resolver.rb'
+    - 'app/graphql/resolvers/project_packages_resolver.rb'
+    - 'app/graphql/resolvers/project_pipelines_resolver.rb'
+    - 'app/graphql/resolvers/projects/snippets_resolver.rb'
+    - 'app/graphql/resolvers/snippets_resolver.rb'
+    - 'app/graphql/resolvers/users/snippets_resolver.rb'
+    - 'app/graphql/types/access_level_type.rb'
+    - 'app/graphql/types/ci/detailed_status_type.rb'
+    - 'app/graphql/types/ci/status_action_type.rb'
+    - 'app/graphql/types/packages/package_dependency_type.rb'
+    - 'app/graphql/types/repository/blob_type.rb'
+    - 'app/graphql/types/tree/blob_type.rb'
+    - 'app/graphql/types/tree/entry_type.rb'
+    - 'app/graphql/types/tree/submodule_type.rb'
+    - 'app/graphql/types/tree/tree_entry_type.rb'
+    - 'app/graphql/types/tree/tree_type.rb'
+    - 'app/helpers/ci/secure_files_helper.rb'
+    - 'app/helpers/projects/google_cloud/cloudsql_helper.rb'
+    - 'app/helpers/projects/ml/experiments_helper.rb'
+    - 'app/models/airflow.rb'
+    - 'app/models/ci/job_token/allowlist.rb'
+    - 'app/models/commit_signatures/gpg_signature.rb'
+    - 'app/models/commit_signatures/x509_commit_signature.rb'
+    - 'app/models/concerns/analytics/cycle_analytics/stage_event_model.rb'
+    - 'app/models/concerns/commit_signature.rb'
+    - 'app/models/concerns/diff_positionable_note.rb'
+    - 'app/models/concerns/enums/ci/commit_status.rb'
+    - 'app/models/concerns/restricted_signup.rb'
+    - 'app/models/dependency_proxy.rb'
+    - 'app/models/draft_note.rb'
+    - 'app/models/integrations/harbor.rb'
+    - 'app/models/ml.rb'
+    - 'app/models/namespace/traversal_hierarchy.rb'
+    - 'app/models/namespaces/traversal/linear.rb'
+    - 'app/models/packages.rb'
+    - 'app/models/packages/cleanup.rb'
+    - 'app/models/packages/conan.rb'
+    - 'app/models/packages/dependency.rb'
+    - 'app/models/packages/dependency_link.rb'
+    - 'app/models/packages/maven.rb'
+    - 'app/models/packages/maven/metadatum.rb'
+    - 'app/models/packages/npm.rb'
+    - 'app/models/packages/nuget.rb'
+    - 'app/models/packages/package.rb'
+    - 'app/models/packages/package_file.rb'
+    - 'app/models/packages/pypi.rb'
+    - 'app/models/packages/rpm.rb'
+    - 'app/models/packages/rpm/repository_file.rb'
+    - 'app/models/packages/rubygems.rb'
+    - 'app/models/packages/tag.rb'
+    - 'app/models/users/user_follow_user.rb'
+    - 'app/policies/container_registry/tag_policy.rb'
+    - 'app/policies/customer_relations/contact_policy.rb'
+    - 'app/policies/customer_relations/organization_policy.rb'
+    - 'app/policies/dependency_proxy/blob_policy.rb'
+    - 'app/policies/dependency_proxy/group_setting_policy.rb'
+    - 'app/policies/dependency_proxy/image_ttl_group_policy_policy.rb'
+    - 'app/policies/dependency_proxy/manifest_policy.rb'
+    - 'app/policies/metrics/dashboard/annotation_policy.rb'
+    - 'app/policies/packages/composer/metadatum_policy.rb'
+    - 'app/policies/packages/conan/file_metadatum_policy.rb'
+    - 'app/policies/packages/conan/metadatum_policy.rb'
+    - 'app/policies/packages/dependency_link_policy.rb'
+    - 'app/policies/packages/helm/file_metadatum_policy.rb'
+    - 'app/policies/packages/maven/metadatum_policy.rb'
+    - 'app/policies/packages/nuget/dependency_link_metadatum_policy.rb'
+    - 'app/policies/packages/nuget/metadatum_policy.rb'
+    - 'app/policies/packages/package_file_policy.rb'
+    - 'app/policies/packages/package_policy.rb'
+    - 'app/policies/packages/pypi/metadatum_policy.rb'
+    - 'app/policies/packages/tag_policy.rb'
+    - 'app/presenters/commit_status_presenter.rb'
+    - 'app/serializers/draft_note_entity.rb'
+    - 'app/serializers/draft_note_serializer.rb'
+    - 'app/services/ci/pipeline_artifacts/coverage_report_service.rb'
+    - 'app/services/ci/pipeline_artifacts/create_code_quality_mr_diff_report_service.rb'
+    - 'app/services/clusters/build_service.rb'
+    - 'app/services/labels/available_labels_service.rb'
+    - 'app/services/merge_requests/mergeability/check_base_service.rb'
+    - 'app/services/merge_requests/mergeability/check_broken_status_service.rb'
+    - 'app/services/merge_requests/mergeability/check_ci_status_service.rb'
+    - 'app/services/merge_requests/mergeability/check_discussions_status_service.rb'
+    - 'app/services/merge_requests/mergeability/run_checks_service.rb'
+    - 'app/services/metrics/dashboard/cluster_metrics_embed_service.rb'
+    - 'app/services/packages/create_dependency_service.rb'
+    - 'app/services/packages/create_package_file_service.rb'
+    - 'app/services/packages/maven/create_package_service.rb'
+    - 'app/services/packages/maven/find_or_create_package_service.rb'
+    - 'app/services/packages/npm/create_package_service.rb'
+    - 'app/services/packages/npm/create_tag_service.rb'
+    - 'app/services/packages/nuget/create_dependency_service.rb'
+    - 'app/services/packages/remove_tag_service.rb'
+    - 'app/services/packages/rpm/repository_metadata/build_filelist_xml_service.rb'
+    - 'app/services/packages/rpm/repository_metadata/build_other_xml_service.rb'
+    - 'app/services/packages/rpm/repository_metadata/build_primary_xml_service.rb'
+    - 'app/services/packages/rpm/repository_metadata/build_repomd_xml_service.rb'
+    - 'app/services/packages/rpm/repository_metadata/build_xml_base_service.rb'
+    - 'app/services/packages/rpm/repository_metadata/update_xml_service.rb'
+    - 'app/services/packages/update_tags_service.rb'
+    - 'app/uploaders/packages/composer/cache_uploader.rb'
+    - 'app/uploaders/packages/debian/component_file_uploader.rb'
+    - 'app/uploaders/packages/debian/distribution_release_file_uploader.rb'
+    - 'app/uploaders/packages/package_file_uploader.rb'
+    - 'app/uploaders/packages/rpm/repository_file_uploader.rb'
+    - 'app/validators/json_schema_validator.rb'
+    - 'app/views/shared/issuable/_issuable.atom.builder'
+    - 'app/workers/ci/merge_requests/add_todo_when_build_fails_worker.rb'
+    - 'app/workers/concerns/auto_devops_queue.rb'
+    - 'app/workers/concerns/chaos_queue.rb'
+    - 'app/workers/concerns/limited_capacity/job_tracker.rb'
+    - 'app/workers/database/batched_background_migration/ci_database_worker.rb'
+    - 'app/workers/gitlab/import/stuck_project_import_jobs_worker.rb'
+    - 'app/workers/gitlab/phabricator_import/import_tasks_worker.rb'
+    - 'config/application.rb'
+    - 'config/initializers/fog_core_patch.rb'
+    - 'config/initializers/rubyzip.rb'
+    - 'config/initializers/sawyer_patch.rb'
+    - 'config/initializers/seed_fu.rb'
+    - 'config/initializers/sidekiq.rb'
+    - 'config/routes/merge_requests.rb'
+    - 'danger/ce_ee_vue_templates/Dangerfile'
+    - 'danger/feature_flag/Dangerfile'
+    - 'danger/pajamas/Dangerfile'
+    - 'db/migrate/20210929121516_add_releases_author_id_id_created_at_index.rb'
+    - 'db/migrate/20211019153615_add_state_to_merge_request_assignees.rb'
+    - 'db/migrate/20211126113029_add_text_limit_for_static_objects_external_storage_auth_token.rb'
+    - 'db/migrate/20220204093120_create_analytics_cycle_analytics_aggregations.rb'
+    - 'db/migrate/20220215164709_update_application_settings_container_registry_exp_pol_worker_capacity_default.rb'
+    - 'db/migrate/20220506154054_create_sync_namespace_details_trigger.rb'
+    - 'db/migrate/20220524184149_create_sync_project_namespace_details_trigger.rb'
+    - 'db/migrate/20220617141347_create_ci_secure_file_states.rb'
+    - 'db/migrate/20220802154757_add_deactivate_dormant_user_time_setting.rb'
+    - 'db/migrate/20221107115247_change_scim_identity_group_id_remove_null.rb'
+    - 'db/migrate/20221107115413_change_scim_oauth_access_token_group_id_remove_null.rb'
+    - 'db/migrate/20221116134507_add_projects_emails_enabled_column.rb'
+    - 'db/migrate/20221116134539_add_namespaces_emails_enabled_column.rb'
+    - 'db/migrate/20221202202351_remove_index_i_ci_job_token_project_scope_links_on_source_and_target_project.rb'
+    - 'db/migrate/20221216145659_add_pa_clickhouse_connection_string_to_application_settings.rb'
+    - 'db/migrate/20221219103007_add_name_to_ml_candidates.rb'
+    - 'db/migrate/20221219122320_copy_clickhouse_connection_string_to_encrypted_var.rb'
+    - 'db/migrate/20230111124512_remove_tmp_index_vulns_on_report_type.rb'
+    - 'db/post_migrate/20211209203820_add_tmp_index_on_report_type.rb'
+    - 'db/post_migrate/20211209203821_convert_stringified_raw_metadata_hash_to_json.rb'
+    - 'db/post_migrate/20220412143551_add_partial_index_on_unencrypted_integrations.rb'
+    - 'db/post_migrate/20220413011328_remove_partial_index_on_unencrypted_integrations.rb'
+    - 'db/post_migrate/20220901071355_cleanup_attention_request_user_callouts.rb'
+    - 'db/post_migrate/20220929091500_add_tmp_index_vulns_on_report_type.rb'
+    - 'db/post_migrate/20221004094814_schedule_destroy_invalid_members.rb'
+    - 'db/post_migrate/20221104170500_add_vulnerability_reads_all_status_index.rb'
+    - 'db/post_migrate/20221116134611_add_namespaces_emails_enabled_column_data.rb'
+    - 'db/post_migrate/20221116134633_add_projects_emails_enabled_column_data.rb'
+    - 'db/post_migrate/20221210154044_update_active_billable_users_index.rb'
+    - 'ee/app/controllers/concerns/epics_actions.rb'
+    - 'ee/app/controllers/concerns/saml_authorization.rb'
+    - 'ee/app/controllers/ee/projects/analytics/cycle_analytics/stages_controller.rb'
+    - 'ee/app/controllers/ee/projects/security/configuration_controller.rb'
+    - 'ee/app/controllers/ee/projects/settings/ci_cd_controller.rb'
+    - 'ee/app/controllers/groups/epic_boards_controller.rb'
+    - 'ee/app/controllers/groups/saml_providers_controller.rb'
+    - 'ee/app/controllers/groups/security/compliance_dashboards_controller.rb'
+    - 'ee/app/controllers/groups/security/dashboard_controller.rb'
+    - 'ee/app/controllers/groups/security/merge_commit_reports_controller.rb'
+    - 'ee/app/controllers/groups/two_factor_auths_controller.rb'
+    - 'ee/app/controllers/projects/protected_environments_controller.rb'
+    - 'ee/app/finders/groups_with_templates_finder.rb'
+    - 'ee/app/finders/status_page/incidents_finder.rb'
+    - 'ee/app/graphql/ee/types/clusters/agent_type.rb'
+    - 'ee/app/graphql/ee/types/repository/blob_type.rb'
+    - 'ee/app/graphql/types/analytics/devops_adoption/enabled_namespace_type.rb'
+    - 'ee/app/graphql/types/analytics/devops_adoption/snapshot_type.rb'
+    - 'ee/app/graphql/types/compliance_management/compliance_framework_type.rb'
+    - 'ee/app/graphql/types/path_lock_type.rb'
+    - 'ee/app/graphql/types/product_analytics/panel_type.rb'
+    - 'ee/app/graphql/types/timebox_error_type.rb'
+    - 'ee/app/graphql/types/timebox_report_type.rb'
+    - 'ee/app/graphql/types/vulnerability_identifier_input_type.rb'
+    - 'ee/app/graphql/types/vulnerability_scanner_input_type.rb'
+    - 'ee/app/graphql/types/vulnerability_scanner_vendor_input_type.rb'
+    - 'ee/app/helpers/ee/admin/identities_helper.rb'
+    - 'ee/app/helpers/ee/ci/runners_helper.rb'
+    - 'ee/app/helpers/ee/hooks_helper.rb'
+    - 'ee/app/helpers/ee/routing/projects_helper.rb'
+    - 'ee/app/helpers/ee/search_helper.rb'
+    - 'ee/app/helpers/ee/sorting_helper.rb'
+    - 'ee/app/helpers/ee/sorting_titles_values_helper.rb'
+    - 'ee/app/models/analytics/devops_adoption.rb'
+    - 'ee/app/models/approvals/scan_finding_wrapped_rule_set.rb'
+    - 'ee/app/models/concerns/approver_migrate_hook.rb'
+    - 'ee/app/models/concerns/ee/approvable.rb'
+    - 'ee/app/models/concerns/elastic/application_versioned_search.rb'
+    - 'ee/app/models/concerns/security/scan_execution_policy.rb'
+    - 'ee/app/models/dependencies/dependency_list_export.rb'
+    - 'ee/app/models/ee/issue_assignee.rb'
+    - 'ee/app/models/geo/ci_secure_file_state.rb'
+    - 'ee/app/models/namespaces/storage/cli_notification.rb'
+    - 'ee/app/models/namespaces/storage/limit_exclusion.rb'
+    - 'ee/app/models/project_security_setting.rb'
+    - 'ee/app/models/protected_environment.rb'
+    - 'ee/app/models/sbom/vulnerable_component_version.rb'
+    - 'ee/app/models/vulnerabilities/merge_request_link.rb'
+    - 'ee/app/policies/ee/ci/build_policy.rb'
+    - 'ee/app/policies/ee/environment_policy.rb'
+    - 'ee/app/policies/security/finding_policy.rb'
+    - 'ee/app/policies/vulnerabilities/finding_policy.rb'
+    - 'ee/app/presenters/applied_ml/suggested_reviewers_presenter.rb'
+    - 'ee/app/serializers/audit_event_serializer.rb'
+    - 'ee/app/serializers/ee/issue_board_entity.rb'
+    - 'ee/app/serializers/ee/issue_entity.rb'
+    - 'ee/app/serializers/license_compliance/collapsed_comparer_entity.rb'
+    - 'ee/app/serializers/license_compliance/comparer_serializer.rb'
+    - 'ee/app/services/analytics/cycle_analytics/aggregator_service.rb'
+    - 'ee/app/services/arkose/blocked_users_report_service.rb'
+    - 'ee/app/services/audit_events/streaming/headers/base.rb'
+    - 'ee/app/services/audit_events/streaming/headers/create_service.rb'
+    - 'ee/app/services/audit_events/streaming/headers/destroy_service.rb'
+    - 'ee/app/services/audit_events/streaming/headers/update_service.rb'
+    - 'ee/app/services/compliance_management/projects/create_ci_config_service.rb'
+    - 'ee/app/services/ee/audit_events/build_service.rb'
+    - 'ee/app/services/ee/ci/process_build_service.rb'
+    - 'ee/app/services/ee/groups/autocomplete_service.rb'
+    - 'ee/app/services/ee/ip_restrictions/update_service.rb'
+    - 'ee/app/services/ee/projects/autocomplete_service.rb'
+    - 'ee/app/services/ee/system_notes/issuables_service.rb'
+    - 'ee/app/services/gitlab_subscriptions/create_trial_or_lead_service.rb'
+    - 'ee/app/services/gitlab_subscriptions/fetch_subscription_plans_service.rb'
+    - 'ee/app/services/gitlab_subscriptions/reconciliations/calculate_seat_count_data_service.rb'
+    - 'ee/app/services/group_saml/group_managed_accounts/clean_up_members_service.rb'
+    - 'ee/app/services/group_saml/sign_up_service.rb'
+    - 'ee/app/services/merge_trains/create_pipeline_service.rb'
+    - 'ee/app/services/merge_trains/refresh_merge_request_service.rb'
+    - 'ee/app/services/merge_trains/refresh_service.rb'
+    - 'ee/app/services/protected_environments/base_service.rb'
+    - 'ee/app/services/protected_environments/create_service.rb'
+    - 'ee/app/services/protected_environments/destroy_service.rb'
+    - 'ee/app/services/protected_environments/environment_dropdown_service.rb'
+    - 'ee/app/services/protected_environments/search_service.rb'
+    - 'ee/app/services/protected_environments/update_service.rb'
+    - 'ee/app/services/users/captcha_challenge_service.rb'
+    - 'ee/app/services/vulnerabilities/manually_create_service.rb'
+    - 'ee/app/workers/ee/issuable_export_csv_worker.rb'
+    - 'ee/app/workers/groups/export_memberships_worker.rb'
+    - 'ee/db/fixtures/development/25_downstream_pipelines.rb'
+    - 'ee/db/geo/migrate/20220617125507_create_ci_secure_file_registry.rb'
+    - 'ee/lib/compliance_management/merge_request_approval_settings/resolver.rb'
+    - 'ee/lib/ee/api/internal/kubernetes.rb'
+    - 'ee/lib/ee/gitlab/ci/parsers/security/validators/schema_validator.rb'
+    - 'ee/lib/ee/gitlab/hook_data/group_member_builder.rb'
+    - 'ee/lib/ee/gitlab/hook_data/issue_builder.rb'
+    - 'ee/lib/ee/gitlab/hook_data/user_builder.rb'
+    - 'ee/lib/ee/gitlab/scim/base_deprovisioning_service.rb'
+    - 'ee/lib/ee/gitlab/scim/base_provisioning_service.rb'
+    - 'ee/lib/ee/gitlab/scim/provisioning_service.rb'
+    - 'ee/lib/elastic/as_json.rb'
+    - 'ee/lib/gem_extensions/elasticsearch/model/adapter/active_record/importing.rb'
+    - 'ee/lib/gem_extensions/elasticsearch/model/adapter/multiple/records.rb'
+    - 'ee/lib/gem_extensions/elasticsearch/model/indexing/instance_methods.rb'
+    - 'ee/lib/gem_extensions/elasticsearch/model/response/records.rb'
+    - 'ee/lib/gitlab/ci/parsers/requirements_management/requirement.rb'
+    - 'ee/lib/gitlab/cidr.rb'
+    - 'ee/lib/quality/seeders/vulnerabilities.rb'
+    - 'ee/spec/components/billing/plan_component_spec.rb'
+    - 'ee/spec/components/namespaces/free_user_cap/enforcement_alert_component_spec.rb'
+    - 'ee/spec/components/namespaces/free_user_cap/enforcement_at_limit_alert_component_spec.rb'
+    - 'ee/spec/components/namespaces/free_user_cap/non_owner_alert_component_spec.rb'
+    - 'ee/spec/components/namespaces/free_user_cap/non_owner_notification_alert_component_spec.rb'
+    - 'ee/spec/components/namespaces/free_user_cap/notification_alert_component_spec.rb'
+    - 'ee/spec/components/namespaces/free_user_cap/usage_quota_alert_component_spec.rb'
+    - 'ee/spec/components/namespaces/free_user_cap/usage_quota_trial_alert_component_spec.rb'
+    - 'ee/spec/components/namespaces/storage/limit_alert_component_spec.rb'
+    - 'ee/spec/components/namespaces/storage/pre_enforcement_alert_component_spec.rb'
+    - 'ee/spec/components/namespaces/storage/project_pre_enforcement_alert_component_spec.rb'
+    - 'ee/spec/components/namespaces/storage/subgroup_pre_enforcement_alert_component_spec.rb'
+    - 'ee/spec/components/namespaces/storage/user_pre_enforcement_alert_component_spec.rb'
+    - 'ee/spec/controllers/admin/geo/nodes_controller_spec.rb'
+    - 'ee/spec/controllers/ee/projects/autocomplete_sources_controller_spec.rb'
+    - 'ee/spec/controllers/ee/projects/protected_branches_controller_spec.rb'
+    - 'ee/spec/controllers/groups/push_rules_controller_spec.rb'
+    - 'ee/spec/controllers/groups/roadmap_controller_spec.rb'
+    - 'ee/spec/controllers/projects/protected_environments_controller_spec.rb'
+    - 'ee/spec/db/production/license_spec.rb'
+    - 'ee/spec/factories/ci/builds.rb'
+    - 'ee/spec/factories/group_saml_identities.rb'
+    - 'ee/spec/factories/protected_environments.rb'
+    - 'ee/spec/factories/protected_environments/deploy_access_levels.rb'
+    - 'ee/spec/factories/scim_identities.rb'
+    - 'ee/spec/factories/work_items/progress.rb'
+    - 'ee/spec/features/groups/analytics/cycle_analytics/charts_spec.rb'
+    - 'ee/spec/features/groups/analytics/cycle_analytics/multiple_value_streams_spec.rb'
+    - 'ee/spec/features/groups/members/list_members_spec.rb'
+    - 'ee/spec/features/merge_request/user_sees_merge_widget_spec.rb'
+    - 'ee/spec/features/projects/kerberos_clone_instructions_spec.rb'
+    - 'ee/spec/features/projects/settings/merge_request_approvals_settings_spec.rb'
+    - 'ee/spec/features/projects/settings/merge_requests_settings_spec.rb'
+    - 'ee/spec/features/trial_registrations/company_information_spec.rb'
+    - 'ee/spec/finders/auth/group_saml_identity_finder_spec.rb'
+    - 'ee/spec/finders/geo/design_registry_finder_spec.rb'
+    - 'ee/spec/finders/geo/project_registry_status_finder_spec.rb'
+    - 'ee/spec/frontend/fixtures/analytics/charts.rb'
+    - 'ee/spec/frontend/fixtures/analytics/metrics.rb'
+    - 'ee/spec/frontend/fixtures/analytics/value_streams.rb'
+    - 'ee/spec/frontend/fixtures/analytics/value_streams_code_stage.rb'
+    - 'ee/spec/frontend/fixtures/analytics/value_streams_issue_stage.rb'
+    - 'ee/spec/frontend/fixtures/analytics/value_streams_plan_stage.rb'
+    - 'ee/spec/frontend/fixtures/analytics/value_streams_review_stage.rb'
+    - 'ee/spec/frontend/fixtures/analytics/value_streams_staging_stage.rb'
+    - 'ee/spec/frontend/fixtures/analytics/value_streams_test_stage.rb'
+    - 'ee/spec/frontend/fixtures/saml_providers.rb'
+    - 'ee/spec/graphql/mutations/instance_security_dashboard/add_project_spec.rb'
+    - 'ee/spec/graphql/mutations/issues/promote_to_epic_spec.rb'
+    - 'ee/spec/graphql/mutations/issues/set_weight_spec.rb'
+    - 'ee/spec/graphql/mutations/security/finding/dismiss_spec.rb'
+    - 'ee/spec/graphql/mutations/security_policy/commit_scan_execution_policy_spec.rb'
+    - 'ee/spec/graphql/mutations/security_policy/create_security_policy_project_spec.rb'
+    - 'ee/spec/graphql/mutations/vulnerabilities/confirm_spec.rb'
+    - 'ee/spec/graphql/mutations/vulnerabilities/create_external_issue_link_spec.rb'
+    - 'ee/spec/graphql/mutations/vulnerabilities/create_spec.rb'
+    - 'ee/spec/graphql/mutations/vulnerabilities/destroy_external_issue_link_spec.rb'
+    - 'ee/spec/graphql/mutations/vulnerabilities/dismiss_spec.rb'
+    - 'ee/spec/graphql/mutations/vulnerabilities/finding/dismiss_spec.rb'
+    - 'ee/spec/graphql/mutations/vulnerabilities/resolve_spec.rb'
+    - 'ee/spec/graphql/mutations/vulnerabilities/revert_to_detected_spec.rb'
+    - 'ee/spec/helpers/ee/auth_helper_spec.rb'
+    - 'ee/spec/helpers/ee/geo_helper_spec.rb'
+    - 'ee/spec/helpers/ee/groups/analytics/cycle_analytics_helper_spec.rb'
+    - 'ee/spec/helpers/ee/invite_members_helper_spec.rb'
+    - 'ee/spec/helpers/ee/namespaces_helper_spec.rb'
+    - 'ee/spec/helpers/ee/saml_providers_helper_spec.rb'
+    - 'ee/spec/helpers/roadmaps_helper_spec.rb'
+    - 'ee/spec/lib/banzai/filter/issuable_reference_expansion_filter_spec.rb'
+    - 'ee/spec/lib/banzai/issuable_extractor_spec.rb'
+    - 'ee/spec/lib/ee/api/helpers/members_helpers_spec.rb'
+    - 'ee/spec/lib/ee/gitlab/background_migration/backfill_epic_cache_counts_spec.rb'
+    - 'ee/spec/lib/ee/gitlab/background_migration/migrate_shared_vulnerability_scanners_spec.rb'
+    - 'ee/spec/lib/ee/gitlab/database/gitlab_schema_spec.rb'
+    - 'ee/spec/lib/ee/gitlab/git_access_design_spec.rb'
+    - 'ee/spec/lib/ee/gitlab/git_access_snippet_spec.rb'
+    - 'ee/spec/lib/ee/gitlab/hook_data/group_member_builder_spec.rb'
+    - 'ee/spec/lib/ee/gitlab/hook_data/issue_builder_spec.rb'
+    - 'ee/spec/lib/ee/gitlab/hook_data/user_builder_spec.rb'
+    - 'ee/spec/lib/ee/gitlab/import_export/project/tree_restorer_spec.rb'
+    - 'ee/spec/lib/ee/gitlab/snippet_search_results_spec.rb'
+    - 'ee/spec/lib/gitlab/analytics/cycle_analytics/summary/group/stage_summary_spec.rb'
+    - 'ee/spec/lib/gitlab/analytics/cycle_analytics/summary/stage_time_summary_spec.rb'
+    - 'ee/spec/lib/gitlab/auth/group_saml/membership_enforcer_spec.rb'
+    - 'ee/spec/lib/gitlab/auth/group_saml/token_actor_spec.rb'
+    - 'ee/spec/lib/gitlab/auth/group_saml/user_spec.rb'
+    - 'ee/spec/lib/gitlab/ci/templates/dependency_scanning_latest_gitlab_ci_yaml_spec.rb'
+    - 'ee/spec/lib/gitlab/code_owners/entry_spec.rb'
+    - 'ee/spec/lib/gitlab/geo/replication/blob_retriever_spec.rb'
+    - 'ee/spec/lib/gitlab/license_scanning/branch_components_spec.rb'
+    - 'ee/spec/lib/gitlab/license_scanning/pipeline_components_spec.rb'
+    - 'ee/spec/lib/gitlab/middleware/ip_restrictor_spec.rb'
+    - 'ee/spec/lib/gitlab/search/client_spec.rb'
+    - 'ee/spec/lib/gitlab/spdx/catalogue_spec.rb'
+    - 'ee/spec/lib/system_check/app/advanced_search_migrations_check_spec.rb'
+    - 'ee/spec/lib/system_check/geo/http_connection_check_spec.rb'
+    - 'ee/spec/migrations/20220411173544_cleanup_orphans_approval_project_rules_spec.rb'
+    - 'ee/spec/models/analytics/cycle_analytics/aggregation_context_spec.rb'
+    - 'ee/spec/models/ci/minutes/quota_spec.rb'
+    - 'ee/spec/models/ci/minutes/usage_spec.rb'
+    - 'ee/spec/models/deployments/approval_summary_spec.rb'
+    - 'ee/spec/models/group_member_spec.rb'
+    - 'ee/spec/models/packages/package_file_spec.rb'
+    - 'ee/spec/models/project_member_spec.rb'
+    - 'ee/spec/models/protected_environment_spec.rb'
+    - 'ee/spec/models/protected_environments/approval_rule_spec.rb'
+    - 'ee/spec/models/protected_environments/deploy_access_level_spec.rb'
+    - 'ee/spec/models/sbom/vulnerable_component_version_spec.rb'
+    - 'ee/spec/models/vulnerabilities/advisory_spec.rb'
+    - 'ee/spec/models/vulnerabilities/finding_spec.rb'
+    - 'ee/spec/models/work_items/progress_spec.rb'
+    - 'ee/spec/policies/app_sec/fuzzing/coverage/corpus_policy_spec.rb'
+    - 'ee/spec/policies/ci/build_policy_spec.rb'
+    - 'ee/spec/policies/deployment_policy_spec.rb'
+    - 'ee/spec/policies/environment_policy_spec.rb'
+    - 'ee/spec/policies/identity_provider_policy_spec.rb'
+    - 'ee/spec/policies/path_lock_policy_spec.rb'
+    - 'ee/spec/policies/saml_provider_policy_spec.rb'
+    - 'ee/spec/presenters/ci/build_presenter_spec.rb'
+    - 'ee/spec/presenters/ci/build_runner_presenter_spec.rb'
+    - 'ee/spec/requests/api/graphql/ci/runners_spec.rb'
+    - 'ee/spec/requests/api/graphql/mutations/security/finding/create_issue_spec.rb'
+    - 'ee/spec/requests/api/graphql/mutations/security/finding/revert_to_detected_spec.rb'
+    - 'ee/spec/requests/api/graphql/project/alert_management/integrations_spec.rb'
+    - 'ee/spec/requests/api/graphql/project/issue_status_counts_spec.rb'
+    - 'ee/spec/requests/api/internal/base_spec.rb'
+    - 'ee/spec/requests/api/merge_trains_spec.rb'
+    - 'ee/spec/requests/api/pypi_packages_spec.rb'
+    - 'ee/spec/requests/ee/application_controller_spec.rb'
+    - 'ee/spec/requests/groups/protected_environments_controller_spec.rb'
+    - 'ee/spec/requests/groups/roadmap_controller_spec.rb'
+    - 'ee/spec/routing/admin_routing_spec.rb'
+    - 'ee/spec/routing/user_routing_spec.rb'
+    - 'ee/spec/serializers/ee/blob_entity_spec.rb'
+    - 'ee/spec/serializers/ee/build_details_entity_spec.rb'
+    - 'ee/spec/serializers/ee/ci/job_entity_spec.rb'
+    - 'ee/spec/serializers/license_compliance/collapsed_comparer_entity_spec.rb'
+    - 'ee/spec/serializers/license_compliance/comparer_entity_spec.rb'
+    - 'ee/spec/services/ci/copy_cross_database_associations_service_spec.rb'
+    - 'ee/spec/services/ci/minutes/refresh_cached_data_service_spec.rb'
+    - 'ee/spec/services/ci/process_build_service_spec.rb'
+    - 'ee/spec/services/ci/retry_job_service_spec.rb'
+    - 'ee/spec/services/ci/retry_pipeline_service_spec.rb'
+    - 'ee/spec/services/ee/design_management/delete_designs_service_spec.rb'
+    - 'ee/spec/services/ee/design_management/save_designs_service_spec.rb'
+    - 'ee/spec/services/ee/notes/quick_actions_service_spec.rb'
+    - 'ee/spec/services/ee/users/update_service_spec.rb'
+    - 'ee/spec/services/epics/close_service_spec.rb'
+    - 'ee/spec/services/epics/issue_promote_service_spec.rb'
+    - 'ee/spec/services/epics/reopen_service_spec.rb'
+    - 'ee/spec/services/issue_feature_flags/list_service_spec.rb'
+    - 'ee/spec/services/licenses/destroy_service_spec.rb'
+    - 'ee/spec/services/milestones/update_service_spec.rb'
+    - 'ee/spec/services/protected_environments/create_service_spec.rb'
+    - 'ee/spec/services/protected_environments/destroy_service_spec.rb'
+    - 'ee/spec/services/protected_environments/environment_dropdown_service_spec.rb'
+    - 'ee/spec/services/protected_environments/search_service_spec.rb'
+    - 'ee/spec/services/protected_environments/update_service_spec.rb'
+    - 'ee/spec/services/wikis/create_attachment_service_spec.rb'
+    - 'ee/spec/support/helpers/board_helpers.rb'
+    - 'ee/spec/workers/app_sec/dast/profile_schedule_worker_spec.rb'
+    - 'ee/spec/workers/integrations/slack_event_worker_spec.rb'
+    - 'ee/spec/workers/namespaces/free_user_cap/backfill_notification_jobs_worker_spec.rb'
+    - 'lib/api/commits.rb'
+    - 'lib/api/concerns/packages/nuget_endpoints.rb'
+    - 'lib/api/go_proxy.rb'
+    - 'lib/api/integrations.rb'
+    - 'lib/api/maven_packages.rb'
+    - 'lib/api/npm_instance_packages.rb'
+    - 'lib/api/npm_project_packages.rb'
+    - 'lib/api/rpm_project_packages.rb'
+    - 'lib/backup/dump/postgres.rb'
+    - 'lib/gitlab/auth/blocked_user_tracker.rb'
+    - 'lib/gitlab/auth/otp/fortinet.rb'
+    - 'lib/gitlab/background_migration/backfill_imported_issue_search_data.rb'
+    - 'lib/gitlab/background_migration/backfill_issue_search_data.rb'
+    - 'lib/gitlab/background_migration/backfill_project_import_level.rb'
+    - 'lib/gitlab/background_migration/backfill_project_namespace_details.rb'
+    - 'lib/gitlab/background_migration/drop_invalid_security_findings.rb'
+    - 'lib/gitlab/background_migration/mailers/unconfirm_mailer.rb'
+    - 'lib/gitlab/background_migration/migrate_u2f_webauthn.rb'
+    - 'lib/gitlab/background_migration/populate_test_reports_issue_id.rb'
+    - 'lib/gitlab/background_migration/update_users_where_two_factor_auth_required_from_group.rb'
+    - 'lib/gitlab/ci/secure_files/mobile_provision.rb'
+    - 'lib/gitlab/cleanup/remote_uploads.rb'
+    - 'lib/gitlab/database/migrations/background_migration_helpers.rb'
+    - 'lib/gitlab/database/partitioning/detached_partition_dropper.rb'
+    - 'lib/gitlab/diff/highlight_cache.rb'
+    - 'lib/gitlab/diff/rendered/notebook/diff_file.rb'
+    - 'lib/gitlab/diff/rendered/notebook/diff_file_helper.rb'
+    - 'lib/gitlab/diff/stats_cache.rb'
+    - 'lib/gitlab/discussions_diff/highlight_cache.rb'
+    - 'lib/gitlab/doorkeeper_secret_storing/secret/pbkdf2_sha512.rb'
+    - 'lib/gitlab/git/base_error.rb'
+    - 'lib/gitlab/graphql/board/issues_connection_extension.rb'
+    - 'lib/gitlab/graphql/extensions/externally_paginated_array_extension.rb'
+    - 'lib/gitlab/graphql/extensions/forward_only_externally_paginated_array_extension.rb'
+    - 'lib/gitlab/graphql/project/dast_profile_connection_extension.rb'
+    - 'lib/gitlab/import_export/recursive_merge_folders.rb'
+    - 'lib/gitlab/import_export/shared.rb'
+    - 'lib/gitlab/json_logger.rb'
+    - 'lib/gitlab/kubernetes/helm/v2/certificate.rb'
+    - 'lib/gitlab/lfs/client.rb'
+    - 'lib/gitlab/merge_requests/mergeability/check_result.rb'
+    - 'lib/gitlab/merge_requests/mergeability/redis_interface.rb'
+    - 'lib/gitlab/merge_requests/mergeability/results_store.rb'
+    - 'lib/gitlab/merge_requests/message_generator.rb'
+    - 'lib/gitlab/pagination/keyset/sql_type_missing_error.rb'
+    - 'lib/gitlab/phabricator_import/cache/map.rb'
+    - 'lib/gitlab/phabricator_import/conduit.rb'
+    - 'lib/gitlab/phabricator_import/conduit/client.rb'
+    - 'lib/gitlab/phabricator_import/conduit/maniphest.rb'
+    - 'lib/gitlab/phabricator_import/conduit/pagination.rb'
+    - 'lib/gitlab/phabricator_import/conduit/response.rb'
+    - 'lib/gitlab/phabricator_import/conduit/tasks_response.rb'
+    - 'lib/gitlab/phabricator_import/conduit/user.rb'
+    - 'lib/gitlab/phabricator_import/issues/importer.rb'
+    - 'lib/gitlab/phabricator_import/issues/task_importer.rb'
+    - 'lib/gitlab/phabricator_import/representation/task.rb'
+    - 'lib/gitlab/phabricator_import/worker_state.rb'
+    - 'lib/gitlab/relative_positioning/gap.rb'
+    - 'lib/gitlab/safe_device_detector.rb'
+    - 'lib/gitlab/spamcheck/client.rb'
+    - 'lib/gitlab/tracking/destinations/snowplow_micro.rb'
+    - 'lib/gitlab/utils/mime_type.rb'
+    - 'lib/gitlab/x509/commit.rb'
+    - 'lib/gitlab/x509/signature.rb'
+    - 'lib/gitlab/x509/tag.rb'
+    - 'lib/security/report_schema_version_matcher.rb'
+    - 'lib/security/weak_passwords.rb'
+    - 'lib/tasks/gitlab/docs/redirect.rake'
+    - 'lib/tasks/gitlab/metrics_exporter.rake'
+    - 'lib/tasks/gitlab/password.rake'
+    - 'lib/tasks/gitlab/security/update_banned_ssh_keys.rake'
+    - 'qa/qa/ee/runtime/saml.rb'
+    - 'qa/qa/page/component/access_tokens.rb'
+    - 'qa/qa/page/group/settings/package_registries.rb'
+    - 'qa/qa/runtime/ip_address.rb'
+    - 'qa/qa/runtime/mail_hog.rb'
+    - 'qa/qa/specs/features/browser_ui/3_create/source_editor/source_editor_toolbar_spec.rb'
+    - 'qa/qa/specs/features/ee/api/7_configure/kubernetes/kubernetes_agent_spec.rb'
+    - 'qa/qa/specs/features/ee/browser_ui/1_manage/ldap/admin_ldap_sync_spec.rb'
+    - 'qa/qa/specs/features/ee/browser_ui/4_verify/job_trace_archival_spec.rb'
+    - 'qa/qa/support/otp.rb'
+    - 'qa/qa/support/repeater.rb'
+    - 'qa/spec/tools/test_resources_data_processor_spec.rb'
+    - 'rubocop/cop/group_public_or_visible_to_user.rb'
+    - 'rubocop/cop/migration/add_reference.rb'
+    - 'rubocop/cop/migration/prevent_index_creation.rb'
+    - 'scripts/lib/glfm/shared.rb'
+    - 'scripts/lib/glfm/update_example_snapshots.rb'
+    - 'scripts/lib/glfm/update_specification.rb'
+    - 'scripts/lib/glfm/verify_all_generated_files_are_up_to_date.rb'
+    - 'spec/components/layouts/horizontal_section_component_spec.rb'
+    - 'spec/components/pajamas/alert_component_spec.rb'
+    - 'spec/components/pajamas/avatar_component_spec.rb'
+    - 'spec/components/pajamas/banner_component_spec.rb'
+    - 'spec/components/pajamas/button_component_spec.rb'
+    - 'spec/components/pajamas/card_component_spec.rb'
+    - 'spec/components/pajamas/checkbox_component_spec.rb'
+    - 'spec/components/pajamas/checkbox_tag_component_spec.rb'
+    - 'spec/components/pajamas/component_spec.rb'
+    - 'spec/components/pajamas/concerns/checkbox_radio_label_with_help_text_spec.rb'
+    - 'spec/components/pajamas/concerns/checkbox_radio_options_spec.rb'
+    - 'spec/components/pajamas/radio_component_spec.rb'
+    - 'spec/components/pajamas/spinner_component_spec.rb'
+    - 'spec/components/pajamas/toggle_component_spec.rb'
+    - 'spec/components/previews/pajamas/alert_component_preview.rb'
+    - 'spec/components/previews/pajamas/avatar_component_preview.rb'
+    - 'spec/components/previews/pajamas/banner_component_preview.rb'
+    - 'spec/components/previews/pajamas/button_component_preview.rb'
+    - 'spec/components/previews/pajamas/card_component_preview.rb'
+    - 'spec/components/previews/pajamas/spinner_component_preview.rb'
+    - 'spec/controllers/application_controller_spec.rb'
+    - 'spec/controllers/concerns/analytics/cycle_analytics/value_stream_actions_spec.rb'
+    - 'spec/controllers/projects/jobs_controller_spec.rb'
+    - 'spec/controllers/projects/merge_requests/drafts_controller_spec.rb'
+    - 'spec/factories/airflow/dags.rb'
+    - 'spec/factories/alert_management/alerts.rb'
+    - 'spec/factories/draft_note.rb'
+    - 'spec/factories/ml/candidates.rb'
+    - 'spec/factories/ml/experiments.rb'
+    - 'spec/factories/packages/composer/cache_files.rb'
+    - 'spec/factories/packages/packages.rb'
+    - 'spec/features/issuables/sorting_list_spec.rb'
+    - 'spec/features/merge_request/merge_request_discussion_lock_spec.rb'
+    - 'spec/features/merge_request/user_views_merge_request_from_deleted_fork_spec.rb'
+    - 'spec/features/projects/pages/user_adds_domain_spec.rb'
+    - 'spec/features/projects/pages/user_configures_pages_pipeline_spec.rb'
+    - 'spec/features/projects/pages/user_edits_lets_encrypt_settings_spec.rb'
+    - 'spec/features/projects/pages/user_edits_settings_spec.rb'
+    - 'spec/features/projects/settings/user_manages_merge_requests_settings_spec.rb'
+    - 'spec/features/projects/tags/user_views_tag_spec.rb'
+    - 'spec/features/projects/tags/user_views_tags_spec.rb'
+    - 'spec/finders/ci/auth_job_finder_spec.rb'
+    - 'spec/finders/packages/composer/packages_finder_spec.rb'
+    - 'spec/finders/packages/conan/package_file_finder_spec.rb'
+    - 'spec/finders/packages/conan/package_finder_spec.rb'
+    - 'spec/finders/packages/group_packages_finder_spec.rb'
+    - 'spec/finders/packages/npm/package_finder_spec.rb'
+    - 'spec/finders/packages/nuget/package_finder_spec.rb'
+    - 'spec/finders/packages/package_file_finder_spec.rb'
+    - 'spec/finders/packages/tags_finder_spec.rb'
+    - 'spec/finders/projects/members/effective_access_level_finder_spec.rb'
+    - 'spec/finders/projects/members/effective_access_level_per_user_finder_spec.rb'
+    - 'spec/frontend/fixtures/analytics.rb'
+    - 'spec/graphql/mutations/ci/job_token_scope/add_project_spec.rb'
+    - 'spec/graphql/mutations/ci/job_token_scope/remove_project_spec.rb'
+    - 'spec/graphql/mutations/design_management/upload_spec.rb'
+    - 'spec/graphql/types/access_level_type_spec.rb'
+    - 'spec/graphql/types/label_type_spec.rb'
+    - 'spec/graphql/types/users/email_type_spec.rb'
+    - 'spec/graphql/types/users/namespace_commit_email_type_spec.rb'
+    - 'spec/helpers/analytics/cycle_analytics_helper_spec.rb'
+    - 'spec/helpers/keyset_helper_spec.rb'
+    - 'spec/helpers/sorting_helper_spec.rb'
+    - 'spec/initializers/mail_encoding_patch_spec.rb'
+    - 'spec/lib/constraints/admin_constrainer_spec.rb'
+    - 'spec/lib/gitlab/analytics/date_filler_spec.rb'
+    - 'spec/lib/gitlab/background_migration/drop_invalid_security_findings_spec.rb'
+    - 'spec/lib/gitlab/background_migration/encrypt_integration_properties_spec.rb'
+    - 'spec/lib/gitlab/background_migration/encrypt_static_object_token_spec.rb'
+    - 'spec/lib/gitlab/background_migration/legacy_upload_mover_spec.rb'
+    - 'spec/lib/gitlab/background_migration/legacy_uploads_migrator_spec.rb'
+    - 'spec/lib/gitlab/background_migration/remove_duplicate_vulnerabilities_findings_spec.rb'
+    - 'spec/lib/gitlab/background_migration/remove_occurrence_pipelines_and_duplicate_vulnerabilities_findings_spec.rb'
+    - 'spec/lib/gitlab/class_attributes_spec.rb'
+    - 'spec/lib/gitlab/cleanup/remote_uploads_spec.rb'
+    - 'spec/lib/gitlab/conan_token_spec.rb'
+    - 'spec/lib/gitlab/database/gitlab_schema_spec.rb'
+    - 'spec/lib/gitlab/database/migrations/instrumentation_spec.rb'
+    - 'spec/lib/gitlab/database/migrations/lock_retry_mixin_spec.rb'
+    - 'spec/lib/gitlab/database/migrations/observers/query_details_spec.rb'
+    - 'spec/lib/gitlab/database/migrations/observers/query_log_spec.rb'
+    - 'spec/lib/gitlab/database/migrations/observers/query_statistics_spec.rb'
+    - 'spec/lib/gitlab/database/migrations/observers/total_database_size_change_spec.rb'
+    - 'spec/lib/gitlab/database/migrations/observers/transaction_duration_spec.rb'
+    - 'spec/lib/gitlab/database/migrations/runner_spec.rb'
+    - 'spec/lib/gitlab/database/schema_validation/index_spec.rb'
+    - 'spec/lib/gitlab/file_markdown_link_builder_spec.rb'
+    - 'spec/lib/gitlab/file_type_detection_spec.rb'
+    - 'spec/lib/gitlab/git/patches/collection_spec.rb'
+    - 'spec/lib/gitlab/git/patches/commit_patches_spec.rb'
+    - 'spec/lib/gitlab/git/patches/patch_spec.rb'
+    - 'spec/lib/gitlab/git_access_design_spec.rb'
+    - 'spec/lib/gitlab/gl_repository/repo_type_spec.rb'
+    - 'spec/lib/gitlab/graphql/calls_gitaly/field_extension_spec.rb'
+    - 'spec/lib/gitlab/graphql/limit/field_call_count_spec.rb'
+    - 'spec/lib/gitlab/graphql/markdown_field_spec.rb'
+    - 'spec/lib/gitlab/graphql/mount_mutation_spec.rb'
+    - 'spec/lib/gitlab/graphql/present/field_extension_spec.rb'
+    - 'spec/lib/gitlab/graphql/tracers/logger_tracer_spec.rb'
+    - 'spec/lib/gitlab/graphql/tracers/timer_tracer_spec.rb'
+    - 'spec/lib/gitlab/health_checks/redis_spec.rb'
+    - 'spec/lib/gitlab/import/set_async_jid_spec.rb'
+    - 'spec/lib/gitlab/json_cache_spec.rb'
+    - 'spec/lib/gitlab/jwt_token_spec.rb'
+    - 'spec/lib/gitlab/kroki_spec.rb'
+    - 'spec/lib/gitlab/kubernetes/helm/v2/certificate_spec.rb'
+    - 'spec/lib/gitlab/markdown_cache/active_record/extension_spec.rb'
+    - 'spec/lib/gitlab/markdown_cache/redis/extension_spec.rb'
+    - 'spec/lib/gitlab/markdown_cache/redis/store_spec.rb'
+    - 'spec/lib/gitlab/metrics/dashboard/cache_spec.rb'
+    - 'spec/lib/gitlab/metrics/environment_spec.rb'
+    - 'spec/lib/gitlab/metrics/rails_slis_spec.rb'
+    - 'spec/lib/gitlab/middleware/handle_malformed_strings_spec.rb'
+    - 'spec/lib/gitlab/middleware/request_context_spec.rb'
+    - 'spec/lib/gitlab/phabricator_import/conduit/client_spec.rb'
+    - 'spec/lib/gitlab/phabricator_import/conduit/maniphest_spec.rb'
+    - 'spec/lib/gitlab/phabricator_import/conduit/response_spec.rb'
+    - 'spec/lib/gitlab/phabricator_import/conduit/tasks_response_spec.rb'
+    - 'spec/lib/gitlab/phabricator_import/conduit/user_spec.rb'
+    - 'spec/lib/gitlab/phabricator_import/conduit/users_response_spec.rb'
+    - 'spec/lib/gitlab/phabricator_import/issues/importer_spec.rb'
+    - 'spec/lib/gitlab/phabricator_import/issues/task_importer_spec.rb'
+    - 'spec/lib/gitlab/phabricator_import/project_creator_spec.rb'
+    - 'spec/lib/gitlab/request_endpoints_spec.rb'
+    - 'spec/lib/gitlab/slash_commands/presenters/issue_new_spec.rb'
+    - 'spec/lib/gitlab/ssh/commit_spec.rb'
+    - 'spec/lib/gitlab/terraform_registry_token_spec.rb'
+    - 'spec/lib/gitlab/tracking_spec.rb'
+    - 'spec/lib/gitlab/utils/lazy_attributes_spec.rb'
+    - 'spec/lib/gitlab/x509/commit_spec.rb'
+    - 'spec/lib/gitlab/x509/tag_spec.rb'
+    - 'spec/lib/security/report_schema_version_matcher_spec.rb'
+    - 'spec/migrations/20211018152654_schedule_remove_duplicate_vulnerabilities_findings3_spec.rb'
+    - 'spec/migrations/20211110143306_add_not_null_constraint_to_security_findings_uuid_spec.rb'
+    - 'spec/migrations/20211116111644_schedule_remove_occurrence_pipelines_and_duplicate_vulnerabilities_findings_spec.rb'
+    - 'spec/migrations/20211207125331_remove_jobs_for_recalculate_vulnerabilities_occurrences_uuid_spec.rb'
+    - 'spec/migrations/20211210140629_encrypt_static_object_token_spec.rb'
+    - 'spec/migrations/20211217174331_mark_recalculate_finding_signatures_as_completed_spec.rb'
+    - 'spec/migrations/20220107064845_populate_vulnerability_reads_spec.rb'
+    - 'spec/migrations/20220202105733_delete_service_template_records_spec.rb'
+    - 'spec/migrations/20220222192524_create_not_null_constraint_releases_tag_spec.rb'
+    - 'spec/migrations/20220222192525_remove_null_releases_spec.rb'
+    - 'spec/migrations/20220309084954_remove_leftover_external_pull_request_deletions_spec.rb'
+    - 'spec/migrations/20220322132242_update_pages_onboarding_state_spec.rb'
+    - 'spec/migrations/20220329175119_remove_leftover_ci_job_artifact_deletions_spec.rb'
+    - 'spec/models/analytics/cycle_analytics/aggregation_spec.rb'
+    - 'spec/models/concerns/loose_index_scan_spec.rb'
+    - 'spec/models/dependency_proxy/blob_spec.rb'
+    - 'spec/models/dependency_proxy/manifest_spec.rb'
+    - 'spec/models/dependency_proxy/registry_spec.rb'
+    - 'spec/models/design_management/action_spec.rb'
+    - 'spec/models/design_management/design_action_spec.rb'
+    - 'spec/models/design_management/design_collection_spec.rb'
+    - 'spec/models/design_management/version_spec.rb'
+    - 'spec/models/integrations/chat_message/pipeline_message_spec.rb'
+    - 'spec/models/integrations/datadog_spec.rb'
+    - 'spec/models/packages/build_info_spec.rb'
+    - 'spec/models/packages/composer/cache_file_spec.rb'
+    - 'spec/models/packages/composer/metadatum_spec.rb'
+    - 'spec/models/packages/debian/publication_spec.rb'
+    - 'spec/models/packages/dependency_link_spec.rb'
+    - 'spec/models/packages/dependency_spec.rb'
+    - 'spec/models/packages/maven/metadatum_spec.rb'
+    - 'spec/models/packages/npm_spec.rb'
+    - 'spec/models/packages/package_file_build_info_spec.rb'
+    - 'spec/models/packages/package_file_spec.rb'
+    - 'spec/models/packages/package_spec.rb'
+    - 'spec/models/packages/pypi/metadatum_spec.rb'
+    - 'spec/models/packages/rpm/metadatum_spec.rb'
+    - 'spec/models/packages/rpm/repository_file_spec.rb'
+    - 'spec/models/packages/rubygems/metadatum_spec.rb'
+    - 'spec/models/packages/tag_spec.rb'
+    - 'spec/models/product_analytics_event_spec.rb'
+    - 'spec/policies/design_management/design_policy_spec.rb'
+    - 'spec/requests/api/composer_packages_spec.rb'
+    - 'spec/requests/api/conan_project_packages_spec.rb'
+    - 'spec/requests/api/debian_group_packages_spec.rb'
+    - 'spec/requests/api/debian_project_packages_spec.rb'
+    - 'spec/requests/api/feature_flags_spec.rb'
+    - 'spec/requests/api/graphql/ci/ci_cd_setting_spec.rb'
+    - 'spec/requests/api/graphql/ci/groups_spec.rb'
+    - 'spec/requests/api/graphql/ci/jobs_spec.rb'
+    - 'spec/requests/api/graphql/ci/runner_web_url_edge_spec.rb'
+    - 'spec/requests/api/graphql/ci/runners_spec.rb'
+    - 'spec/requests/api/graphql/ci/stages_spec.rb'
+    - 'spec/requests/api/graphql/ci/template_spec.rb'
+    - 'spec/requests/api/graphql/container_repository/container_repository_details_spec.rb'
+    - 'spec/requests/api/graphql/group/container_repositories_spec.rb'
+    - 'spec/requests/api/graphql/group/dependency_proxy_blobs_spec.rb'
+    - 'spec/requests/api/graphql/group/dependency_proxy_group_setting_spec.rb'
+    - 'spec/requests/api/graphql/group/dependency_proxy_image_ttl_policy_spec.rb'
+    - 'spec/requests/api/graphql/group/dependency_proxy_manifests_spec.rb'
+    - 'spec/requests/api/graphql/issue_status_counts_spec.rb'
+    - 'spec/requests/api/graphql/multiplexed_queries_spec.rb'
+    - 'spec/requests/api/graphql/mutations/design_management/move_spec.rb'
+    - 'spec/requests/api/graphql/mutations/design_management/upload_spec.rb'
+    - 'spec/requests/api/graphql/packages/composer_spec.rb'
+    - 'spec/requests/api/graphql/packages/conan_spec.rb'
+    - 'spec/requests/api/graphql/packages/helm_spec.rb'
+    - 'spec/requests/api/graphql/packages/maven_spec.rb'
+    - 'spec/requests/api/graphql/packages/nuget_spec.rb'
+    - 'spec/requests/api/graphql/packages/package_spec.rb'
+    - 'spec/requests/api/graphql/packages/pypi_spec.rb'
+    - 'spec/requests/api/graphql/project/alert_management/alert_status_counts_spec.rb'
+    - 'spec/requests/api/graphql/project/alert_management/alerts_spec.rb'
+    - 'spec/requests/api/graphql/project/alert_management/integrations_spec.rb'
+    - 'spec/requests/api/graphql/project/container_expiration_policy_spec.rb'
+    - 'spec/requests/api/graphql/project/container_repositories_spec.rb'
+    - 'spec/requests/api/graphql/project/error_tracking/sentry_detailed_error_request_spec.rb'
+    - 'spec/requests/api/graphql/project/error_tracking/sentry_errors_request_spec.rb'
+    - 'spec/requests/api/graphql/project/grafana_integration_spec.rb'
+    - 'spec/requests/api/graphql/project/jobs_spec.rb'
+    - 'spec/requests/api/graphql/project/packages_cleanup_policy_spec.rb'
+    - 'spec/requests/api/graphql/project/repository/blobs_spec.rb'
+    - 'spec/requests/api/graphql/project/repository_spec.rb'
+    - 'spec/requests/api/graphql/project/tree/tree_spec.rb'
+    - 'spec/requests/api/graphql_spec.rb'
+    - 'spec/requests/api/group_debian_distributions_spec.rb'
+    - 'spec/requests/api/helm_packages_spec.rb'
+    - 'spec/requests/api/maven_packages_spec.rb'
+    - 'spec/requests/api/nuget_group_packages_spec.rb'
+    - 'spec/requests/api/nuget_project_packages_spec.rb'
+    - 'spec/requests/api/project_debian_distributions_spec.rb'
+    - 'spec/requests/api/pypi_packages_spec.rb'
+    - 'spec/requests/api/rpm_project_packages_spec.rb'
+    - 'spec/requests/lfs_http_spec.rb'
+    - 'spec/rubocop/cop/migration/complex_indexes_require_name_spec.rb'
+    - 'spec/rubocop/cop/migration/refer_to_index_by_name_spec.rb'
+    - 'spec/rubocop/formatter/todo_formatter_spec.rb'
+    - 'spec/scripts/lib/glfm/parse_examples_spec.rb'
+    - 'spec/scripts/lib/glfm/shared_spec.rb'
+    - 'spec/scripts/lib/glfm/update_example_snapshots_spec.rb'
+    - 'spec/scripts/lib/glfm/verify_all_generated_files_are_up_to_date_spec.rb'
+    - 'spec/scripts/trigger-build_spec.rb'
+    - 'spec/serializers/impersonation_access_token_entity_spec.rb'
+    - 'spec/serializers/impersonation_access_token_serializer_spec.rb'
+    - 'spec/services/ci/create_pipeline_service/artifacts_spec.rb'
+    - 'spec/services/ci/create_pipeline_service/custom_config_content_spec.rb'
+    - 'spec/services/ci/create_pipeline_service/custom_yaml_tags_spec.rb'
+    - 'spec/services/ci/create_pipeline_service/limit_active_jobs_spec.rb'
+    - 'spec/services/ci/create_pipeline_service/parallel_spec.rb'
+    - 'spec/services/ci/create_pipeline_service/pre_post_stages_spec.rb'
+    - 'spec/services/ci/create_pipeline_service/rate_limit_spec.rb'
+    - 'spec/services/ci/create_pipeline_service/rules_spec.rb'
+    - 'spec/services/ci/create_pipeline_service/tags_spec.rb'
+    - 'spec/services/ci/job_token_scope/add_project_service_spec.rb'
+    - 'spec/services/ci/job_token_scope/remove_project_service_spec.rb'
+    - 'spec/services/ci/pipeline_schedules/calculate_next_run_service_spec.rb'
+    - 'spec/services/ci/process_build_service_spec.rb'
+    - 'spec/services/clusters/kubernetes/create_or_update_service_account_service_spec.rb'
+    - 'spec/services/commits/commit_patch_service_spec.rb'
+    - 'spec/services/dependency_proxy/auth_token_service_spec.rb'
+    - 'spec/services/dependency_proxy/find_cached_manifest_service_spec.rb'
+    - 'spec/services/dependency_proxy/head_manifest_service_spec.rb'
+    - 'spec/services/dependency_proxy/request_token_service_spec.rb'
+    - 'spec/services/design_management/copy_design_collection/copy_service_spec.rb'
+    - 'spec/services/design_management/copy_design_collection/queue_service_spec.rb'
+    - 'spec/services/design_management/delete_designs_service_spec.rb'
+    - 'spec/services/design_management/move_designs_service_spec.rb'
+    - 'spec/services/design_management/save_designs_service_spec.rb'
+    - 'spec/services/draft_notes/create_service_spec.rb'
+    - 'spec/services/draft_notes/destroy_service_spec.rb'
+    - 'spec/services/draft_notes/publish_service_spec.rb'
+    - 'spec/services/groups/auto_devops_service_spec.rb'
+    - 'spec/services/labels/available_labels_service_spec.rb'
+    - 'spec/services/merge_requests/build_service_spec.rb'
+    - 'spec/services/milestones/update_service_spec.rb'
+    - 'spec/services/packages/cleanup/execute_policy_service_spec.rb'
+    - 'spec/services/packages/cleanup/update_policy_service_spec.rb'
+    - 'spec/services/packages/composer/composer_json_service_spec.rb'
+    - 'spec/services/packages/composer/create_package_service_spec.rb'
+    - 'spec/services/packages/composer/version_parser_service_spec.rb'
+    - 'spec/services/packages/conan/create_package_file_service_spec.rb'
+    - 'spec/services/packages/conan/create_package_service_spec.rb'
+    - 'spec/services/packages/create_dependency_service_spec.rb'
+    - 'spec/services/packages/create_event_service_spec.rb'
+    - 'spec/services/packages/create_package_file_service_spec.rb'
+    - 'spec/services/packages/debian/extract_changes_metadata_service_spec.rb'
+    - 'spec/services/packages/debian/extract_deb_metadata_service_spec.rb'
+    - 'spec/services/packages/debian/extract_metadata_service_spec.rb'
+    - 'spec/services/packages/debian/parse_debian822_service_spec.rb'
+    - 'spec/services/packages/debian/process_changes_service_spec.rb'
+    - 'spec/services/packages/debian/process_package_file_service_spec.rb'
+    - 'spec/services/packages/helm/extract_file_metadata_service_spec.rb'
+    - 'spec/services/packages/helm/process_file_service_spec.rb'
+    - 'spec/services/packages/maven/create_package_service_spec.rb'
+    - 'spec/services/packages/maven/find_or_create_package_service_spec.rb'
+    - 'spec/services/packages/npm/create_package_service_spec.rb'
+    - 'spec/services/packages/npm/create_tag_service_spec.rb'
+    - 'spec/services/packages/nuget/create_dependency_service_spec.rb'
+    - 'spec/services/packages/pypi/create_package_service_spec.rb'
+    - 'spec/services/packages/remove_tag_service_spec.rb'
+    - 'spec/services/packages/rpm/parse_package_service_spec.rb'
+    - 'spec/services/packages/rpm/repository_metadata/build_filelist_xml_service_spec.rb'
+    - 'spec/services/packages/rpm/repository_metadata/build_other_xml_service_spec.rb'
+    - 'spec/services/packages/rpm/repository_metadata/build_primary_xml_service_spec.rb'
+    - 'spec/services/packages/rpm/repository_metadata/build_repomd_xml_service_spec.rb'
+    - 'spec/services/packages/rpm/repository_metadata/update_xml_service_spec.rb'
+    - 'spec/services/packages/rubygems/create_dependencies_service_spec.rb'
+    - 'spec/services/packages/rubygems/create_gemspec_service_spec.rb'
+    - 'spec/services/packages/rubygems/dependency_resolver_service_spec.rb'
+    - 'spec/services/packages/rubygems/metadata_extraction_service_spec.rb'
+    - 'spec/services/packages/terraform_module/create_package_service_spec.rb'
+    - 'spec/services/packages/update_package_file_service_spec.rb'
+    - 'spec/services/packages/update_tags_service_spec.rb'
+    - 'spec/services/projects/auto_devops/disable_service_spec.rb'
+    - 'spec/services/projects/lfs_pointers/lfs_download_link_list_service_spec.rb'
+    - 'spec/services/projects/lfs_pointers/lfs_download_service_spec.rb'
+    - 'spec/services/projects/lfs_pointers/lfs_import_service_spec.rb'
+    - 'spec/services/projects/lfs_pointers/lfs_link_service_spec.rb'
+    - 'spec/services/projects/lfs_pointers/lfs_object_download_list_service_spec.rb'
+    - 'spec/services/projects/update_service_spec.rb'
+    - 'spec/services/protected_branches/cache_service_spec.rb'
+    - 'spec/services/service_desk_settings/update_service_spec.rb'
+    - 'spec/services/submodules/update_service_spec.rb'
+    - 'spec/services/wikis/create_attachment_service_spec.rb'
+    - 'spec/support/fips.rb'
+    - 'spec/support/generate-seed-repo-rb'
+    - 'spec/support/graphql/fake_query_type.rb'
+    - 'spec/support/helpers/fake_webauthn_device.rb'
+    - 'spec/support/helpers/features/access_token_helpers.rb'
+    - 'spec/support/helpers/features/iteration_helpers.rb'
+    - 'spec/support/helpers/features/list_rows_helpers.rb'
+    - 'spec/support/helpers/features/responsive_table_helpers.rb'
+    - 'spec/support/helpers/features/two_factor_helpers.rb'
+    - 'spec/support/helpers/lfs_http_helpers.rb'
+    - 'spec/support/redis.rb'
+    - 'spec/support/shared_examples/controllers/create_notes_rate_limit_shared_examples.rb'
+    - 'spec/support/shared_examples/controllers/rate_limited_endpoint_shared_examples.rb'
+    - 'spec/support/shared_examples/controllers/snowplow_event_tracking_examples.rb'
+    - 'spec/support/shared_examples/controllers/unique_hll_events_examples.rb'
+    - 'spec/support/shared_examples/graphql/projects/services_resolver_shared_examples.rb'
+    - 'spec/support/shared_examples/lib/gitlab/import_export/attributes_permitter_shared_examples.rb'
+    - 'spec/support/shared_examples/models/concerns/counter_attribute_shared_examples.rb'
+    - 'spec/support/shared_examples/requests/admin_mode_shared_examples.rb'
+    - 'spec/support/shared_examples/requests/rack_attack_shared_examples.rb'
+    - 'spec/support/shared_examples/serializers/environment_serializer_shared_examples.rb'
+    - 'spec/support/view_component.rb'
+    - 'spec/tasks/rubocop_rake_spec.rb'
+    - 'spec/uploaders/dependency_proxy/file_uploader_spec.rb'
+    - 'spec/uploaders/packages/composer/cache_uploader_spec.rb'
+    - 'spec/uploaders/packages/debian/component_file_uploader_spec.rb'
+    - 'spec/uploaders/packages/debian/distribution_release_file_uploader_spec.rb'
+    - 'spec/uploaders/packages/package_file_uploader_spec.rb'
+    - 'spec/uploaders/packages/rpm/repository_file_uploader_spec.rb'
+    - 'spec/views/ci/status/_icon.html.haml_spec.rb'
+    - 'spec/views/notify/change_in_merge_request_draft_status_email.text.erb_spec.rb'
+    - 'spec/views/notify/pipeline_failed_email.text.erb_spec.rb'
+    - 'spec/views/notify/push_to_merge_request_email.text.haml_spec.rb'
+    - 'spec/views/projects/pages/new.html.haml_spec.rb'
+    - 'spec/views/shared/_label_row.html.haml_spec.rb'
+    - 'spec/views/shared/ssh_keys/_key_delete.html.haml_spec.rb'
+    - 'spec/views/shared/wikis/_sidebar.html.haml_spec.rb'
+    - 'spec/workers/auto_devops/disable_worker_spec.rb'
+    - 'spec/workers/gitlab/phabricator_import/base_worker_spec.rb'
+    - 'spec/workers/gitlab/phabricator_import/import_tasks_worker_spec.rb'
+    - 'spec/workers/integrations/execute_worker_spec.rb'
+    - 'spec/workers/partition_creation_worker_spec.rb'
+    - 'spec/workers/projects/delete_branch_worker_spec.rb'
+    - 'spec/workers/web_hook_worker_spec.rb'
+    - 'tooling/danger/product_intelligence.rb'
+    - 'tooling/danger/suggestor.rb'
+    - 'tooling/docs/deprecation_handling.rb'

.rubocop_todo/layout/first_array_element_indentation.yml

@@ -39,14 +39,12 @@ Layout/FirstArrayElementIndentation:
     - 'ee/spec/models/security/orchestration_policy_configuration_spec.rb'
     - 'ee/spec/models/security/orchestration_policy_rule_schedule_spec.rb'
     - 'ee/spec/policies/project_policy_spec.rb'
-    - 'ee/spec/requests/api/graphql/analytics/contribution_analytics/contributions_spec.rb'
     - 'ee/spec/requests/api/graphql/group/epics_spec.rb'
     - 'ee/spec/requests/api/graphql/mutations/releases/update_spec.rb'
     - 'ee/spec/requests/api/graphql/project/merge_requests_spec.rb'
     - 'ee/spec/requests/api/ldap_group_links_spec.rb'
     - 'ee/spec/requests/api/members_spec.rb'
     - 'ee/spec/requests/api/saml_group_links_spec.rb'
-    - 'ee/spec/services/analytics/cycle_analytics/value_streams/update_service_spec.rb'
     - 'ee/spec/services/audit_events/export_csv_service_spec.rb'
     - 'ee/spec/services/groups/seat_usage_export_service_spec.rb'
     - 'lib/gitlab/email/message/in_product_marketing/team.rb'
@@ -75,9 +73,6 @@ Layout/FirstArrayElementIndentation:
     - 'spec/lib/gitlab/database/load_balancing/rack_middleware_spec.rb'
     - 'spec/lib/gitlab/database/load_balancing/service_discovery/sampler_spec.rb'
     - 'spec/lib/gitlab/diff/inline_diff_spec.rb'
-    - 'spec/lib/gitlab/github_import/importer/diff_notes_importer_spec.rb'
-    - 'spec/lib/gitlab/github_import/importer/lfs_objects_importer_spec.rb'
-    - 'spec/lib/gitlab/github_import/importer/notes_importer_spec.rb'
     - 'spec/lib/gitlab/github_import/parallel_scheduling_spec.rb'
     - 'spec/lib/gitlab/pagination/keyset/in_operator_optimization/query_builder_spec.rb'
     - 'spec/lib/gitlab/prometheus/queries/matched_metric_query_spec.rb'

.rubocop_todo/layout/first_hash_element_indentation.yml

@@ -47,7 +47,6 @@ Layout/FirstHashElementIndentation:
     - 'ee/app/helpers/ee/geo_helper.rb'
     - 'ee/app/helpers/ee/groups/group_members_helper.rb'
     - 'ee/app/helpers/ee/trial_helper.rb'
-    - 'ee/app/helpers/incident_management/escalation_policy_helper.rb'
     - 'ee/app/models/ee/list.rb'
     - 'ee/app/services/app_sec/dast/profiles/update_service.rb'
     - 'ee/app/services/elastic/cluster_reindexing_service.rb'
@@ -57,7 +56,6 @@ Layout/FirstHashElementIndentation:
     - 'ee/app/services/resource_events/change_iteration_service.rb'
     - 'ee/app/services/security/token_revocation_service.rb'
     - 'ee/app/services/timebox_report_service.rb'
-    - 'ee/lib/ee/container_registry/client.rb'
     - 'ee/lib/ee/gitlab/ci/parsers.rb'
     - 'ee/lib/ee/gitlab/usage_data.rb'
     - 'ee/lib/elastic/latest/application_class_proxy.rb'
@@ -96,7 +94,6 @@ Layout/FirstHashElementIndentation:
     - 'ee/spec/lib/audit/project_changes_auditor_spec.rb'
     - 'ee/spec/lib/audit/project_ci_cd_setting_changes_auditor_spec.rb'
     - 'ee/spec/lib/audit/project_setting_changes_auditor_spec.rb'
-    - 'ee/spec/lib/container_registry/client_spec.rb'
     - 'ee/spec/lib/ee/api/entities/experiment_spec.rb'
     - 'ee/spec/lib/ee/gitlab/auth/ldap/access_levels_spec.rb'
     - 'ee/spec/lib/ee/gitlab/background_migration/backfill_project_statistics_storage_size_without_uploads_size_spec.rb'
@@ -155,7 +152,6 @@ Layout/FirstHashElementIndentation:
     - 'qa/qa/specs/features/api/3_create/repository/commit_to_templated_project_spec.rb'
     - 'qa/qa/specs/features/api/5_package/container_registry_spec.rb'
     - 'qa/qa/specs/features/browser_ui/3_create/web_ide/open_web_ide_from_diff_tab_spec.rb'
-    - 'qa/qa/specs/features/browser_ui/5_package/container_registry/container_registry_omnibus_spec.rb'
     - 'qa/qa/specs/features/browser_ui/5_package/container_registry/container_registry_spec.rb'
     - 'qa/qa/specs/features/browser_ui/5_package/container_registry/online_garbage_collection_spec.rb'
     - 'qa/qa/specs/features/browser_ui/5_package/dependency_proxy/dependency_proxy_spec.rb'
@@ -194,7 +190,6 @@ Layout/FirstHashElementIndentation:
     - 'spec/frontend/fixtures/autocomplete_sources.rb'
     - 'spec/graphql/types/ci/detailed_status_type_spec.rb'
     - 'spec/helpers/groups/observability_helper_spec.rb'
-    - 'spec/helpers/learn_gitlab_helper_spec.rb'
     - 'spec/helpers/projects/pages_helper_spec.rb'
     - 'spec/helpers/routing/pseudonymization_helper_spec.rb'
     - 'spec/initializers/rack_multipart_patch_spec.rb'
@@ -246,14 +241,12 @@ Layout/FirstHashElementIndentation:
     - 'spec/requests/api/releases_spec.rb'
     - 'spec/requests/api/task_completion_status_spec.rb'
     - 'spec/requests/groups/email_campaigns_controller_spec.rb'
-    - 'spec/requests/projects/merge_requests/creations_spec.rb'
     - 'spec/requests/pwa_controller_spec.rb'
     - 'spec/rubocop/cop/usage_data/distinct_count_by_large_foreign_key_spec.rb'
     - 'spec/rubocop/cop/usage_data/histogram_with_large_table_spec.rb'
     - 'spec/rubocop/cop/usage_data/instrumentation_superclass_spec.rb'
     - 'spec/rubocop/cop/usage_data/large_table_spec.rb'
     - 'spec/services/ci/pipeline_artifacts/coverage_report_service_spec.rb'
-    - 'spec/services/ci/register_job_service_spec.rb'
     - 'spec/services/clusters/update_service_spec.rb'
     - 'spec/services/google_cloud/get_cloudsql_instances_service_spec.rb'
     - 'spec/services/import/github_service_spec.rb'

.rubocop_todo/layout/hash_alignment.yml

@@ -3,4 +3,12 @@
 Layout/HashAlignment:
   Details: grace period
   Exclude:
+    - 'config/initializers/rspec_profiling.rb'
     - 'ee/spec/lib/ee/gitlab/usage_data_spec.rb'
+    - 'ee/spec/support/shared_examples/controllers/analytics/cycle_analytics/value_stream_shared_examples.rb'
+    - 'lib/gitlab/redis/multi_store.rb'
+    - 'spec/helpers/projects/ml/experiments_helper_spec.rb'
+    - 'spec/lib/gitlab/metrics/requests_rack_middleware_spec.rb'
+    - 'spec/requests/projects/merge_requests/creations_spec.rb'
+    - 'spec/support/redis/redis_new_instance_shared_examples.rb'
+    - 'spec/support/redis/redis_shared_examples.rb'

.rubocop_todo/layout/line_continuation_leading_space.yml

@@ -1,4 +1,5 @@
 ---
+# Cop supports --autocorrect.
 Layout/LineContinuationLeadingSpace:
   Details: grace period
   Exclude:
@@ -8,7 +9,6 @@ Layout/LineContinuationLeadingSpace:
     - 'app/helpers/application_settings_helper.rb'
     - 'app/helpers/preferences_helper.rb'
     - 'app/models/environment.rb'
-    - 'app/services/projects/container_repository/destroy_service.rb'
     - 'config/initializers_before_autoloader/003_gc_compact.rb'
     - 'ee/app/graphql/ee/mutations/issues/create.rb'
     - 'ee/app/graphql/ee/types/merge_request_type.rb'
@@ -52,7 +52,6 @@ Layout/LineContinuationLeadingSpace:
     - 'rubocop/cop/migration/update_column_in_batches.rb'
     - 'scripts/lib/glfm/parse_examples.rb'
     - 'scripts/qa/testcases-check'
-    - 'spec/features/groups/show_spec.rb'
     - 'spec/features/issues/create_issue_for_single_discussion_in_merge_request_spec.rb'
     - 'spec/lib/gitlab/ci/ansi2html_spec.rb'
     - 'spec/lib/gitlab/ci/parsers/sbom/validators/cyclonedx_schema_validator_spec.rb'

.rubocop_todo/layout/line_continuation_spacing.yml

@@ -4,7 +4,6 @@ Layout/LineContinuationSpacing:
   Details: grace period
   Exclude:
     - 'app/controllers/concerns/controller_with_cross_project_access_check.rb'
-    - 'app/controllers/concerns/verifies_with_email.rb'
     - 'app/controllers/projects/google_cloud/databases_controller.rb'
     - 'app/graphql/gitlab_schema.rb'
     - 'app/graphql/mutations/boards/issues/issue_move_list.rb'
@@ -28,14 +27,12 @@ Layout/LineContinuationSpacing:
     - 'ee/app/components/namespaces/storage/pre_enforcement_alert_component.rb'
     - 'ee/app/components/namespaces/storage/user_pre_enforcement_alert_component.rb'
     - 'ee/app/controllers/ee/ldap/omniauth_callbacks_controller.rb'
-    - 'ee/app/controllers/users/identity_verification_controller.rb'
     - 'ee/app/graphql/mutations/app_sec/fuzzing/api/ci_configuration/create.rb'
     - 'ee/app/graphql/mutations/requirements_management/export_requirements.rb'
     - 'ee/app/graphql/mutations/security_policy/assign_security_policy_project.rb'
     - 'ee/app/graphql/resolvers/security_orchestration/scan_execution_policy_resolver.rb'
     - 'ee/app/graphql/resolvers/vulnerabilities_resolver.rb'
     - 'ee/app/graphql/resolvers/vulnerability_severities_count_resolver.rb'
-    - 'ee/app/graphql/types/geo/geo_node_type.rb'
     - 'ee/app/graphql/types/requirements_management/requirement_type.rb'
     - 'ee/app/helpers/push_rules_helper.rb'
     - 'ee/app/models/ee/epic.rb'
@@ -110,7 +107,6 @@ Layout/LineContinuationSpacing:
     - 'ee/spec/services/phone_verification/telesign_client/send_verification_code_service_spec.rb'
     - 'ee/spec/services/phone_verification/users/send_verification_code_service_spec.rb'
     - 'ee/spec/services/security/security_orchestration_policies/ci_configuration_service_spec.rb'
-    - 'ee/spec/services/security/security_orchestration_policies/legacy_ci_configuration_service_spec.rb'
     - 'ee/spec/views/compliance_management/compliance_framework/_project_settings.html.haml_spec.rb'
     - 'ee/spec/workers/ee/issuable_export_csv_worker_spec.rb'
     - 'lib/api/dependency_proxy.rb'
@@ -136,7 +132,6 @@ Layout/LineContinuationSpacing:
     - 'lib/gitlab/database/shared_model.rb'
     - 'lib/gitlab/i18n/po_linter.rb'
     - 'qa/qa/specs/features/ee/api/9_data_stores/elasticsearch/nightly_elasticsearch_test_spec.rb'
-    - 'qa/qa/support/matchers/eventually_matcher.rb'
     - 'qa/qa/support/page_error_checker.rb'
     - 'qa/qa/tools/test_resources_handler.rb'
     - 'qa/spec/resource/user_spec.rb'
@@ -198,7 +193,6 @@ Layout/LineContinuationSpacing:
     - 'spec/requests/api/group_labels_spec.rb'
     - 'spec/requests/api/groups_spec.rb'
     - 'spec/requests/api/labels_spec.rb'
-    - 'spec/requests/api/projects_spec.rb'
     - 'spec/requests/api/users_spec.rb'
     - 'spec/requests/verifies_with_email_spec.rb'
     - 'spec/services/feature_flags/update_service_spec.rb'

.rubocop_todo/layout/line_end_string_concatenation_indentation.yml

@@ -4,7 +4,6 @@ Layout/LineEndStringConcatenationIndentation:
   Details: grace period
   Exclude:
     - 'app/controllers/admin/application_settings_controller.rb'
-    - 'app/controllers/concerns/verifies_with_email.rb'
     - 'app/finders/snippets_finder.rb'
     - 'app/graphql/mutations/ci/project_ci_cd_settings_update.rb'
     - 'app/graphql/mutations/ci/runner/bulk_delete.rb'
@@ -15,7 +14,6 @@ Layout/LineEndStringConcatenationIndentation:
     - 'app/graphql/types/ci/config/include_type.rb'
     - 'app/graphql/types/ci/runner_membership_filter_enum.rb'
     - 'app/graphql/types/ci/runner_status_enum.rb'
-    - 'app/graphql/types/issue_type.rb'
     - 'app/graphql/types/user_interface.rb'
     - 'app/helpers/application_settings_helper.rb'
     - 'app/helpers/members_helper.rb'
@@ -36,7 +34,6 @@ Layout/LineEndStringConcatenationIndentation:
     - 'app/services/concerns/ci/job_token_scope/edit_scope_validations.rb'
     - 'app/services/feature_flags/update_service.rb'
     - 'app/services/projects/after_rename_service.rb'
-    - 'app/services/projects/container_repository/destroy_service.rb'
     - 'app/services/repositories/changelog_service.rb'
     - 'app/services/users/email_verification/validate_token_service.rb'
     - 'app/workers/run_pipeline_schedule_worker.rb'
@@ -45,9 +42,7 @@ Layout/LineEndStringConcatenationIndentation:
     - 'config/initializers/wikicloth_redos_patch.rb'
     - 'config/initializers/wikicloth_ruby_3_patch.rb'
     - 'config/initializers_before_autoloader/003_gc_compact.rb'
-    - 'danger/ci_templates/Dangerfile'
     - 'danger/database/Dangerfile'
-    - 'db/post_migrate/20210606143426_add_index_for_container_registry_access_level.rb'
     - 'db/post_migrate/20220425121410_add_temporary_index_for_backfill_integrations_enable_ssl_verification.rb'
     - 'db/post_migrate/20220525131624_drop_temporary_index_for_backfill_integrations_enable_ssl_verification.rb'
     - 'db/post_migrate/20220920081631_prepare_ci_builds_metadata_for_partitioning_primary_key.rb'
@@ -55,7 +50,6 @@ Layout/LineEndStringConcatenationIndentation:
     - 'ee/app/controllers/admin/licenses_controller.rb'
     - 'ee/app/controllers/concerns/insights_actions.rb'
     - 'ee/app/controllers/ee/ldap/omniauth_callbacks_controller.rb'
-    - 'ee/app/controllers/users/identity_verification_controller.rb'
     - 'ee/app/finders/geo/framework_registry_finder.rb'
     - 'ee/app/graphql/mutations/app_sec/fuzzing/api/ci_configuration/create.rb'
     - 'ee/app/graphql/mutations/dast_scanner_profiles/create.rb'
@@ -71,7 +65,6 @@ Layout/LineEndStringConcatenationIndentation:
     - 'ee/app/models/app_sec/fuzzing/api/ci_configuration.rb'
     - 'ee/app/models/ci/minutes/notification.rb'
     - 'ee/app/models/ee/group_group_link.rb'
-    - 'ee/app/models/ee/namespace/storage/notification.rb'
     - 'ee/app/models/ee/vulnerability.rb'
     - 'ee/app/services/boards/epic_lists/destroy_service.rb'
     - 'ee/app/services/ee/admin/set_feature_flag_service.rb'
@@ -196,7 +189,6 @@ Layout/LineEndStringConcatenationIndentation:
     - 'lib/gitlab/database/partitioning_migration_helpers/foreign_key_helpers.rb'
     - 'lib/gitlab/database/partitioning_migration_helpers/index_helpers.rb'
     - 'lib/gitlab/database/partitioning_migration_helpers/table_management_helpers.rb'
-    - 'lib/gitlab/database/query_analyzers/prevent_cross_database_modification.rb'
     - 'lib/gitlab/database/schema_helpers.rb'
     - 'lib/gitlab/database/shared_model.rb'
     - 'lib/gitlab/github_import/importer/events/changed_reviewer.rb'
@@ -213,7 +205,6 @@ Layout/LineEndStringConcatenationIndentation:
     - 'lib/tasks/gitlab/storage.rake'
     - 'qa/qa/ee/page/project/settings/services/jira.rb'
     - 'qa/qa/specs/features/api/4_verify/api_variable_inheritance_with_forward_pipeline_variables_spec.rb'
-    - 'qa/qa/support/matchers/eventually_matcher.rb'
     - 'qa/qa/support/system_logs/kibana.rb'
     - 'qa/qa/tools/revoke_user_personal_access_tokens.rb'
     - 'qa/spec/support/page_error_checker_spec.rb'
@@ -260,10 +251,8 @@ Layout/LineEndStringConcatenationIndentation:
     - 'scripts/lib/glfm/update_specification.rb'
     - 'scripts/lib/glfm/verify_all_generated_files_are_up_to_date.rb'
     - 'scripts/packages/automated_cleanup.rb'
-    - 'spec/contracts/provider_specs/helpers/provider/contract_source_helper_spec.rb'
     - 'spec/controllers/graphql_controller_spec.rb'
     - 'spec/controllers/projects/deploy_keys_controller_spec.rb'
-    - 'spec/features/groups/show_spec.rb'
     - 'spec/features/projects/files/user_browses_files_spec.rb'
     - 'spec/features/projects/files/user_creates_directory_spec.rb'
     - 'spec/features/projects/files/user_creates_files_spec.rb'
@@ -351,7 +340,6 @@ Layout/LineEndStringConcatenationIndentation:
     - 'spec/support/shared_examples/lib/email/email_shared_examples.rb'
     - 'spec/support/shared_examples/requests/api/notes_shared_examples.rb'
     - 'spec/support/shared_examples/requests/self_monitoring_shared_examples.rb'
-    - 'spec/tooling/lib/tooling/kubernetes_client_spec.rb'
     - 'spec/uploaders/file_mover_spec.rb'
     - 'spec/views/devise/shared/_signup_box.html.haml_spec.rb'
     - 'spec/views/projects/pages/show.html.haml_spec.rb'

.rubocop_todo/layout/line_length.yml

@@ -15,7 +15,6 @@ Layout/LineLength:
     - 'app/controllers/application_controller.rb'
     - 'app/controllers/concerns/access_tokens_actions.rb'
     - 'app/controllers/concerns/analytics/cycle_analytics/stage_actions.rb'
-    - 'app/controllers/concerns/clientside_preview_csp.rb'
     - 'app/controllers/concerns/confirm_email_warning.rb'
     - 'app/controllers/concerns/integrations/actions.rb'
     - 'app/controllers/concerns/issuable_actions.rb'
@@ -164,7 +163,6 @@ Layout/LineLength:
     - 'app/graphql/resolvers/concerns/time_frame_arguments.rb'
     - 'app/graphql/resolvers/container_repository_tags_resolver.rb'
     - 'app/graphql/resolvers/project_merge_requests_resolver.rb'
-    - 'app/graphql/resolvers/projects_resolver.rb'
     - 'app/graphql/resolvers/user_discussions_count_resolver.rb'
     - 'app/graphql/types/admin/sidekiq_queues/delete_jobs_response_type.rb'
     - 'app/graphql/types/alert_management/prometheus_integration_type.rb'
@@ -244,13 +242,11 @@ Layout/LineLength:
     - 'app/helpers/ide_helper.rb'
     - 'app/helpers/import_helper.rb'
     - 'app/helpers/in_product_marketing_helper.rb'
-    - 'app/helpers/invite_members_helper.rb'
     - 'app/helpers/issuables_helper.rb'
     - 'app/helpers/jira_connect_helper.rb'
     - 'app/helpers/labels_helper.rb'
     - 'app/helpers/merge_requests_helper.rb'
     - 'app/helpers/mirror_helper.rb'
-    - 'app/helpers/namespaces_helper.rb'
     - 'app/helpers/nav/new_dropdown_helper.rb'
     - 'app/helpers/nav/top_nav_helper.rb'
     - 'app/helpers/nav_helper.rb'
@@ -291,7 +287,6 @@ Layout/LineLength:
     - 'app/models/analytics/cycle_analytics/aggregation.rb'
     - 'app/models/analytics/cycle_analytics/issue_stage_event.rb'
     - 'app/models/analytics/cycle_analytics/merge_request_stage_event.rb'
-    - 'app/models/analytics/cycle_analytics/project_stage.rb'
     - 'app/models/analytics/cycle_analytics/stage_event_hash.rb'
     - 'app/models/application_record.rb'
     - 'app/models/application_setting.rb'
@@ -306,7 +301,6 @@ Layout/LineLength:
     - 'app/models/ci/runner.rb'
     - 'app/models/ci/unit_test.rb'
     - 'app/models/clusters/agent.rb'
-    - 'app/models/clusters/applications/cert_manager.rb'
     - 'app/models/clusters/applications/knative.rb'
     - 'app/models/clusters/applications/prometheus.rb'
     - 'app/models/clusters/cluster.rb'
@@ -326,7 +320,6 @@ Layout/LineLength:
     - 'app/models/concerns/enums/vulnerability.rb'
     - 'app/models/concerns/fast_destroy_all.rb'
     - 'app/models/concerns/group_descendant.rb'
-    - 'app/models/concerns/id_in_ordered.rb'
     - 'app/models/concerns/ignorable_columns.rb'
     - 'app/models/concerns/iid_routes.rb'
     - 'app/models/concerns/integrations/has_data_fields.rb'
@@ -552,7 +545,6 @@ Layout/LineLength:
     - 'app/services/import/bitbucket_server_service.rb'
     - 'app/services/import/github_service.rb'
     - 'app/services/import/validate_remote_git_endpoint_service.rb'
-    - 'app/services/issuable/import_csv/base_service.rb'
     - 'app/services/issuable/process_assignees.rb'
     - 'app/services/issuable_base_service.rb'
     - 'app/services/issuable_links/create_service.rb'
@@ -728,7 +720,6 @@ Layout/LineLength:
     - 'config/initializers/doorkeeper.rb'
     - 'config/initializers/elastic_client_setup.rb'
     - 'config/initializers/google_api_client.rb'
-    - 'config/initializers/google_api_client_patch.rb'
     - 'config/initializers/kaminari_active_record_relation_methods_with_limit.rb'
     - 'config/initializers/pages_storage_check.rb'
     - 'config/initializers/rails_host_authorization.rb'
@@ -755,47 +746,6 @@ Layout/LineLength:
     - 'danger/roulette/Dangerfile'
     - 'danger/vue_shared_documentation/Dangerfile'
     - 'danger/z_metadata/Dangerfile'
-    - 'db/migrate/20210604032738_create_dast_site_profiles_builds.rb'
-    - 'db/migrate/20210604034354_add_dast_site_profile_id_fk_to_dast_site_profiles_builds.rb'
-    - 'db/migrate/20210604051330_create_dast_scanner_profiles_builds.rb'
-    - 'db/migrate/20210604051917_add_dast_scanner_profile_id_fk_to_dast_scanner_profiles_builds.rb'
-    - 'db/migrate/20210604085600_rename_status_check_responses_approval_rule.rb'
-    - 'db/migrate/20210609192728_add_status_check_foreign_key_to_external_status_check_id.rb'
-    - 'db/migrate/20210609193101_add_status_check_foreign_key_to_protected_branch_id.rb'
-    - 'db/migrate/20210614143954_add_unique_index_for_helm_packages.rb'
-    - 'db/migrate/20210617161348_cascade_delete_freeze_periods.rb'
-    - 'db/migrate/20210622135221_add_foreign_key_for_environment_id_to_environments.rb'
-    - 'db/migrate/20210623163342_add_index_to_compliance_management_frameworks_pipeline_configuration.rb'
-    - 'db/migrate/20210630224625_generate_customers_dot_jwt_signing_key.rb'
-    - 'db/migrate/20210705130919_create_container_repos_on_exp_cleanup_status_project_id_start_date_index.rb'
-    - 'db/migrate/20210706084713_add_devops_adoption_snapshots_index.rb'
-    - 'db/migrate/20210707151536_create_vulnerability_finding_evidence_sources.rb'
-    - 'db/migrate/20210707171536_create_vulnerability_finding_evidence_assets.rb'
-    - 'db/migrate/20210707181536_create_vulnerability_finding_evidence_supporting_messages.rb'
-    - 'db/migrate/20210709085759_index_batched_migration_jobs_by_max_value.rb'
-    - 'db/migrate/20210713070842_update_merge_request_cleanup_schedules_scheduled_at_index.rb'
-    - 'db/migrate/20210713211008_create_banned_users.rb'
-    - 'db/migrate/20210714043818_add_index_for_label_applied_to_issuable_sla.rb'
-    - 'db/migrate/20210721174441_update_escalation_rule_fk_for_pending_alert_escalations.rb'
-    - 'db/migrate/20210722074339_add_xor_check_constraint_for_escalation_rules.rb'
-    - 'db/migrate/20210729202143_create_incident_management_issuable_escalation_statuses.rb'
-    - 'db/migrate/20210730102952_add_stage_hash_fk_to_project_stages.rb'
-    - 'db/migrate/20210730103808_add_stage_hash_fk_to_group_stages.rb'
-    - 'db/migrate/20210803110920_add_unique_index_to_vulnerability_flags_table.rb'
-    - 'db/migrate/20210804150320_create_base_work_item_types.rb'
-    - 'db/migrate/20210804200114_create_customer_relations_organizations.rb'
-    - 'db/migrate/20210804202057_add_tmp_index_approval_project_rules_scanners.rb'
-    - 'db/migrate/20210811120204_create_customer_relations_contacts.rb'
-    - 'db/migrate/20210811193033_add_unique_index_to_vulnerability_finding_links.rb'
-    - 'db/migrate/20210812171704_create_project_ci_feature_usages.rb'
-    - 'db/migrate/20210817130415_add_project_id_name_version_id_to_npm_packages.rb'
-    - 'db/migrate/20210819120243_add_throttle_files_api_columns.rb'
-    - 'db/migrate/20210819152723_remove_tmp_index_approval_project_rules_scanners.rb'
-    - 'db/migrate/20210819185500_create_external_audit_event_destinations_table.rb'
-    - 'db/migrate/20210820171834_add_foreign_keys_for_pending_issue_escalations.rb'
-    - 'db/migrate/20210823213417_create_dependency_proxy_image_ttl_group_policies.rb'
-    - 'db/migrate/20210826124311_add_index_to_error_tracking_error.rb'
-    - 'db/migrate/20210826170902_add_throttle_unauthenticated_api_columns.rb'
     - 'db/migrate/20210830085837_add_throttle_authenticated_git_lfs_columns.rb'
     - 'db/migrate/20210831203408_upsert_base_work_item_types.rb'
     - 'db/migrate/20210908140437_add_sidekiq_limits_to_application_settings.rb'
@@ -858,39 +808,6 @@ Layout/LineLength:
     - 'db/migrate/20220310101118_update_holder_name_limit.rb'
     - 'db/migrate/20220314184209_add_group_fk_to_protected_environment_approval_rules.rb'
     - 'db/migrate/20220314204009_add_approval_rule_fk_to_deployment_approvals.rb'
-    - 'db/post_migrate/20210606143426_add_index_for_container_registry_access_level.rb'
-    - 'db/post_migrate/20210611080951_fix_missing_traversal_ids.rb'
-    - 'db/post_migrate/20210615234935_fix_batched_migrations_old_format_job_arguments.rb'
-    - 'db/post_migrate/20210621111747_add_ci_artifacts_devops_adoption_index.rb'
-    - 'db/post_migrate/20210622041846_finalize_push_event_payloads_bigint_conversion.rb'
-    - 'db/post_migrate/20210622045705_finalize_events_bigint_conversion.rb'
-    - 'db/post_migrate/20210622141148_schedule_delete_orphaned_deployments.rb'
-    - 'db/post_migrate/20210629101712_remove_deprecated_modsecurity_columns.rb'
-    - 'db/post_migrate/20210701033622_finalize_ci_builds_needs_bigint_conversion.rb'
-    - 'db/post_migrate/20210701111909_backfill_issues_upvotes_count.rb'
-    - 'db/post_migrate/20210701141346_finalize_ci_builds_stage_id_bigint_conversion.rb'
-    - 'db/post_migrate/20210706212710_finalize_ci_job_artifacts_bigint_conversion.rb'
-    - 'db/post_migrate/20210707210916_finalize_ci_stages_bigint_conversion.rb'
-    - 'db/post_migrate/20210708011426_finalize_ci_builds_metadata_bigint_conversion.rb'
-    - 'db/post_migrate/20210713042153_finalize_ci_sources_pipelines_bigint_conversion.rb'
-    - 'db/post_migrate/20210714015537_finalize_ci_build_trace_chunks_bigint_conversion.rb'
-    - 'db/post_migrate/20210721174521_add_non_null_constraint_for_escalation_rule_on_pending_alert_escalations.rb'
-    - 'db/post_migrate/20210722155635_finalize_convert_geo_job_artifact_deleted_events_bigint.rb'
-    - 'db/post_migrate/20210729163312_re_schedule_latest_pipeline_id_population_with_all_security_related_artifact_types.rb'
-    - 'db/post_migrate/20210729192959_drop_ci_test_case_failures_table.rb'
-    - 'db/post_migrate/20210731132939_backfill_stage_event_hash.rb'
-    - 'db/post_migrate/20210802043253_finalize_push_event_payloads_bigint_conversion_3.rb'
-    - 'db/post_migrate/20210802131812_finalize_convert_deployments_bigint.rb'
-    - 'db/post_migrate/20210804150624_remove_cluster_image_scanning_from_approval_project_rules.rb'
-    - 'db/post_migrate/20210804153307_prepare_indexes_for_tagging_bigint_conversion.rb'
-    - 'db/post_migrate/20210805131510_finalize_ci_builds_runner_session_bigint_conversion.rb'
-    - 'db/post_migrate/20210806131706_finalize_taggins_bigint_conversion.rb'
-    - 'db/post_migrate/20210809123658_orphaned_invite_tokens_cleanup.rb'
-    - 'db/post_migrate/20210809143931_finalize_job_id_conversion_to_bigint_for_ci_job_artifacts.rb'
-    - 'db/post_migrate/20210811122206_update_external_project_bots.rb'
-    - 'db/post_migrate/20210813151908_replace_external_wiki_triggers.rb'
-    - 'db/post_migrate/20210824174615_prepare_ci_builds_metadata_and_ci_build_async_indexes.rb'
-    - 'db/post_migrate/20210825193652_backfill_cadence_id_for_boards_scoped_to_iteration.rb'
     - 'db/post_migrate/20210901184511_prepare_async_indexes_for_ci_builds.rb'
     - 'db/post_migrate/20210907211557_finalize_ci_builds_bigint_conversion.rb'
     - 'db/post_migrate/20210923135909_remove_delayed_project_removal_from_namespaces.rb'
@@ -997,9 +914,7 @@ Layout/LineLength:
     - 'ee/app/controllers/ee/repositories/git_http_client_controller.rb'
     - 'ee/app/controllers/ee/repositories/git_http_controller.rb'
     - 'ee/app/controllers/ee/repositories/lfs_api_controller.rb'
-    - 'ee/app/controllers/groups/analytics/cycle_analytics/stages_controller.rb'
     - 'ee/app/controllers/groups/analytics/cycle_analytics/summary_controller.rb'
-    - 'ee/app/controllers/groups/analytics/cycle_analytics/value_streams_controller.rb'
     - 'ee/app/controllers/groups/analytics/productivity_analytics_controller.rb'
     - 'ee/app/controllers/groups/hooks_controller.rb'
     - 'ee/app/controllers/groups/ldap_settings_controller.rb'
@@ -1035,7 +950,6 @@ Layout/LineLength:
     - 'ee/app/graphql/mutations/boards/scoped_issue_board_arguments.rb'
     - 'ee/app/graphql/mutations/compliance_management/frameworks/destroy.rb'
     - 'ee/app/graphql/mutations/concerns/mutations/shared_epic_arguments.rb'
-    - 'ee/app/graphql/mutations/dast/profiles/create.rb'
     - 'ee/app/graphql/mutations/dast/profiles/update.rb'
     - 'ee/app/graphql/mutations/dast_scanner_profiles/create.rb'
     - 'ee/app/graphql/mutations/dast_scanner_profiles/update.rb'
@@ -1129,7 +1043,6 @@ Layout/LineLength:
     - 'ee/app/helpers/ee/search_helper.rb'
     - 'ee/app/helpers/ee/subscribable_banner_helper.rb'
     - 'ee/app/helpers/ee/trial_helper.rb'
-    - 'ee/app/helpers/ee/users/callouts_helper.rb'
     - 'ee/app/helpers/epics_helper.rb'
     - 'ee/app/helpers/gitlab_subscriptions/upcoming_reconciliation_helper.rb'
     - 'ee/app/helpers/groups/feature_discovery_moments_helper.rb'
@@ -1142,7 +1055,6 @@ Layout/LineLength:
     - 'ee/app/helpers/projects/security/dast_profiles_helper.rb'
     - 'ee/app/helpers/projects/security/discover_helper.rb'
     - 'ee/app/helpers/push_rules_helper.rb'
-    - 'ee/app/helpers/trial_status_widget_helper.rb'
     - 'ee/app/helpers/vulnerabilities_helper.rb'
     - 'ee/app/mailers/ee/emails/profile.rb'
     - 'ee/app/mailers/ee/preview/notify_preview.rb'
@@ -1170,7 +1082,6 @@ Layout/LineLength:
     - 'ee/app/models/dast/site_profile_secret_variable.rb'
     - 'ee/app/models/dora/lead_time_for_changes_metric.rb'
     - 'ee/app/models/ee/alert_management/alert.rb'
-    - 'ee/app/models/ee/analytics/cycle_analytics/stage_event_hash.rb'
     - 'ee/app/models/ee/application_setting.rb'
     - 'ee/app/models/ee/ci/build.rb'
     - 'ee/app/models/ee/ci/daily_build_group_report_result.rb'
@@ -1286,7 +1197,6 @@ Layout/LineLength:
     - 'ee/app/services/dora/aggregate_metrics_service.rb'
     - 'ee/app/services/ee/allowed_email_domains/update_service.rb'
     - 'ee/app/services/ee/analytics/cycle_analytics/stages/base_service.rb'
-    - 'ee/app/services/ee/analytics/cycle_analytics/stages/list_service.rb'
     - 'ee/app/services/ee/application_settings/update_service.rb'
     - 'ee/app/services/ee/applications/create_service.rb'
     - 'ee/app/services/ee/boards/base_service.rb'
@@ -1306,7 +1216,6 @@ Layout/LineLength:
     - 'ee/app/services/ee/issues/clone_service.rb'
     - 'ee/app/services/ee/merge_requests/merge_base_service.rb'
     - 'ee/app/services/ee/merge_requests/refresh_service.rb'
-    - 'ee/app/services/ee/personal_access_tokens/create_service.rb'
     - 'ee/app/services/ee/personal_access_tokens/revoke_service.rb'
     - 'ee/app/services/ee/projects/create_from_template_service.rb'
     - 'ee/app/services/ee/projects/create_service.rb'
@@ -1348,7 +1257,6 @@ Layout/LineLength:
     - 'ee/app/services/incident_management/oncall_rotations/edit_service.rb'
     - 'ee/app/services/incident_management/oncall_schedules/update_service.rb'
     - 'ee/app/services/incident_management/pending_escalations/process_service.rb'
-    - 'ee/app/services/issues/create_from_vulnerability_data_service.rb'
     - 'ee/app/services/iterations/cadences/create_iterations_in_advance_service.rb'
     - 'ee/app/services/iterations/cadences/create_service.rb'
     - 'ee/app/services/iterations/cadences/destroy_service.rb'
@@ -1620,7 +1528,6 @@ Layout/LineLength:
     - 'ee/spec/controllers/ee/projects/jobs_controller_spec.rb'
     - 'ee/spec/controllers/ee/search_controller_spec.rb'
     - 'ee/spec/controllers/ee/uploads_controller_spec.rb'
-    - 'ee/spec/controllers/groups/analytics/cycle_analytics/value_streams_controller_spec.rb'
     - 'ee/spec/controllers/groups/analytics/tasks_by_type_controller_spec.rb'
     - 'ee/spec/controllers/groups/audit_events_controller_spec.rb'
     - 'ee/spec/controllers/groups/epic_issues_controller_spec.rb'
@@ -1715,7 +1622,6 @@ Layout/LineLength:
     - 'ee/spec/features/invites_spec.rb'
     - 'ee/spec/features/issues/filtered_search/filter_issues_weight_spec.rb'
     - 'ee/spec/features/issues/form_spec.rb'
-    - 'ee/spec/features/issues/issue_sidebar_spec.rb'
     - 'ee/spec/features/labels_hierarchy_spec.rb'
     - 'ee/spec/features/merge_request/user_approves_spec.rb'
     - 'ee/spec/features/merge_request/user_approves_with_password_spec.rb'
@@ -1801,7 +1707,6 @@ Layout/LineLength:
     - 'ee/spec/frontend/fixtures/epic.rb'
     - 'ee/spec/frontend/fixtures/on_demand_dast_scans.rb'
     - 'ee/spec/frontend/fixtures/project_quality_summary.rb'
-    - 'ee/spec/frontend/fixtures/projects.rb'
     - 'ee/spec/graphql/ee/mutations/boards/lists/create_spec.rb'
     - 'ee/spec/graphql/ee/resolvers/board_list_issues_resolver_spec.rb'
     - 'ee/spec/graphql/ee/resolvers/project_issues_resolver_spec.rb'
@@ -1871,7 +1776,6 @@ Layout/LineLength:
     - 'ee/spec/graphql/types/incident_management/escalation_rule_input_type_spec.rb'
     - 'ee/spec/graphql/types/issue_type_spec.rb'
     - 'ee/spec/graphql/types/permission_types/vulnerability_spec.rb'
-    - 'ee/spec/graphql/types/pipeline_security_report_finding_type_spec.rb'
     - 'ee/spec/graphql/types/project_type_spec.rb'
     - 'ee/spec/graphql/types/security_scanner_type_enum_spec.rb'
     - 'ee/spec/graphql/types/vulnerability_details/file_location_type_spec.rb'
@@ -1912,7 +1816,6 @@ Layout/LineLength:
     - 'ee/spec/helpers/license_helper_spec.rb'
     - 'ee/spec/helpers/license_monitoring_helper_spec.rb'
     - 'ee/spec/helpers/notes_helper_spec.rb'
-    - 'ee/spec/helpers/paid_feature_callout_helper_spec.rb'
     - 'ee/spec/helpers/projects/on_demand_scans_helper_spec.rb'
     - 'ee/spec/helpers/projects/project_members_helper_spec.rb'
     - 'ee/spec/helpers/projects/security/dast_profiles_helper_spec.rb'
@@ -2030,7 +1933,6 @@ Layout/LineLength:
     - 'ee/spec/lib/gitlab/ci/reports/dependency_list/dependency_spec.rb'
     - 'ee/spec/lib/gitlab/ci/reports/dependency_list/report_spec.rb'
     - 'ee/spec/lib/gitlab/ci/reports/license_scanning/dependency_spec.rb'
-    - 'ee/spec/lib/gitlab/ci/reports/license_scanning/report_spec.rb'
     - 'ee/spec/lib/gitlab/ci/reports/security/finding_spec.rb'
     - 'ee/spec/lib/gitlab/ci/templates/dependency_scanning_gitlab_ci_yaml_spec.rb'
     - 'ee/spec/lib/gitlab/ci/templates/sast_gitlab_ci_yaml_spec.rb'
@@ -2113,12 +2015,10 @@ Layout/LineLength:
     - 'ee/spec/mailers/emails/requirements_spec.rb'
     - 'ee/spec/mailers/license_mailer_spec.rb'
     - 'ee/spec/mailers/notify_spec.rb'
-    - 'ee/spec/migrations/add_non_null_constraint_for_escalation_rule_on_pending_alert_escalations_spec.rb'
     - 'ee/spec/migrations/drop_invalid_remediations_spec.rb'
     - 'ee/spec/migrations/geo/migrate_ci_job_artifacts_to_separate_registry_spec.rb'
     - 'ee/spec/migrations/geo/migrate_lfs_objects_to_separate_registry_spec.rb'
     - 'ee/spec/migrations/geo/set_resync_flag_for_retried_projects_spec.rb'
-    - 'ee/spec/migrations/remove_schedule_and_status_null_constraints_from_pending_escalations_alert_spec.rb'
     - 'ee/spec/migrations/schedule_populate_test_reports_issue_id_spec.rb'
     - 'ee/spec/migrations/schedule_requirements_migration_spec.rb'
     - 'ee/spec/migrations/schedule_trace_expiry_removal_spec.rb'
@@ -2186,6 +2086,7 @@ Layout/LineLength:
     - 'ee/spec/models/ee/namespace_statistics_spec.rb'
     - 'ee/spec/models/ee/preloaders/group_policy_preloader_spec.rb'
     - 'ee/spec/models/ee/project_authorization_spec.rb'
+    - 'ee/spec/models/ee/project_spec.rb'
     - 'ee/spec/models/ee/protected_branch_spec.rb'
     - 'ee/spec/models/ee/service_desk_setting_spec.rb'
     - 'ee/spec/models/ee/user_spec.rb'
@@ -2228,7 +2129,6 @@ Layout/LineLength:
     - 'ee/spec/models/project_import_state_spec.rb'
     - 'ee/spec/models/project_member_spec.rb'
     - 'ee/spec/models/project_security_setting_spec.rb'
-    - 'ee/spec/models/project_spec.rb'
     - 'ee/spec/models/protected_branch/unprotect_access_level_spec.rb'
     - 'ee/spec/models/protected_environment_spec.rb'
     - 'ee/spec/models/protected_environments/approval_rule_spec.rb'
@@ -2433,10 +2333,7 @@ Layout/LineLength:
     - 'ee/spec/services/alert_management/process_prometheus_alert_service_spec.rb'
     - 'ee/spec/services/analytics/cycle_analytics/consistency_check_service_spec.rb'
     - 'ee/spec/services/analytics/cycle_analytics/data_loader_service_spec.rb'
-    - 'ee/spec/services/analytics/cycle_analytics/stages/create_service_spec.rb'
-    - 'ee/spec/services/analytics/cycle_analytics/stages/delete_service_spec.rb'
     - 'ee/spec/services/analytics/cycle_analytics/stages/list_service_spec.rb'
-    - 'ee/spec/services/analytics/cycle_analytics/stages/update_service_spec.rb'
     - 'ee/spec/services/analytics/cycle_analytics/value_streams/update_service_spec.rb'
     - 'ee/spec/services/analytics/devops_adoption/enabled_namespaces/bulk_delete_service_spec.rb'
     - 'ee/spec/services/analytics/devops_adoption/enabled_namespaces/bulk_find_or_create_service_spec.rb'
@@ -2501,7 +2398,6 @@ Layout/LineLength:
     - 'ee/spec/services/ee/issuable/common_system_notes_service_spec.rb'
     - 'ee/spec/services/ee/issue_links/create_service_spec.rb'
     - 'ee/spec/services/ee/issues/clone_service_spec.rb'
-    - 'ee/spec/services/ee/issues/create_from_vulnerability_data_service_spec.rb'
     - 'ee/spec/services/ee/issues/create_service_spec.rb'
     - 'ee/spec/services/ee/issues/move_service_spec.rb'
     - 'ee/spec/services/ee/issues/update_service_spec.rb'
@@ -2670,7 +2566,6 @@ Layout/LineLength:
     - 'ee/spec/support/shared_contexts/status_page/status_page_list_objects.rb'
     - 'ee/spec/support/shared_examples/controllers/analytics/cycle_analytics/shared_stage_shared_examples.rb'
     - 'ee/spec/support/shared_examples/controllers/concerns/description_diff_actions_shared_examples.rb'
-    - 'ee/spec/support/shared_examples/controllers/projects/license_scanning_report_comparison_shared_examples.rb'
     - 'ee/spec/support/shared_examples/features/epics_filtered_search_shared_examples.rb'
     - 'ee/spec/support/shared_examples/features/protected_branches_access_control_shared_examples.rb'
     - 'ee/spec/support/shared_examples/features/sidebar_shared_examples.rb'
@@ -2837,7 +2732,6 @@ Layout/LineLength:
     - 'lib/api/helpers/projects_helpers.rb'
     - 'lib/api/helpers/related_resources_helpers.rb'
     - 'lib/api/helpers/snippets_helpers.rb'
-    - 'lib/api/helpers/users_helpers.rb'
     - 'lib/api/helpers/wikis_helpers.rb'
     - 'lib/api/internal/base.rb'
     - 'lib/api/internal/kubernetes.rb'
@@ -2919,7 +2813,6 @@ Layout/LineLength:
     - 'lib/bulk_imports/groups/loaders/group_loader.rb'
     - 'lib/bulk_imports/projects/pipelines/project_pipeline.rb'
     - 'lib/bulk_imports/projects/pipelines/repository_pipeline.rb'
-    - 'lib/bulk_imports/projects/transformers/project_attributes_transformer.rb'
     - 'lib/container_registry/base_client.rb'
     - 'lib/declarative_enum.rb'
     - 'lib/error_tracking/collector/payload_validator.rb'
@@ -3005,7 +2898,6 @@ Layout/LineLength:
     - 'lib/gitlab/ci/parsers/coverage/sax_document.rb'
     - 'lib/gitlab/ci/parsers/security/common.rb'
     - 'lib/gitlab/ci/parsers/security/validators/schema_validator.rb'
-    - 'lib/gitlab/ci/pipeline/chain/cancel_pending_pipelines.rb'
     - 'lib/gitlab/ci/pipeline/chain/create_cross_database_associations.rb'
     - 'lib/gitlab/ci/pipeline/chain/template_usage.rb'
     - 'lib/gitlab/ci/pipeline/chain/validate/abilities.rb'
@@ -3059,12 +2951,9 @@ Layout/LineLength:
     - 'lib/gitlab/database/partitioning/time_partition.rb'
     - 'lib/gitlab/database/partitioning_migration_helpers/backfill_partitioned_table.rb'
     - 'lib/gitlab/database/partitioning_migration_helpers/table_management_helpers.rb'
-    - 'lib/gitlab/database/postgres_foreign_key.rb'
     - 'lib/gitlab/database/postgres_hll/batch_distinct_counter.rb'
     - 'lib/gitlab/database/postgres_hll/buckets.rb'
     - 'lib/gitlab/database/postgres_index.rb'
-    - 'lib/gitlab/database/postgres_partition.rb'
-    - 'lib/gitlab/database/postgres_partitioned_table.rb'
     - 'lib/gitlab/database/query_analyzers/prevent_cross_database_modification.rb'
     - 'lib/gitlab/database/reflection.rb'
     - 'lib/gitlab/database/reindexing.rb'
@@ -3318,14 +3207,11 @@ Layout/LineLength:
     - 'qa/qa/ee/page/project/secure/license_compliance.rb'
     - 'qa/qa/ee/page/project/secure/security_dashboard.rb'
     - 'qa/qa/ee/page/project/secure/show.rb'
-    - 'qa/qa/ee/resource/license.rb'
     - 'qa/qa/flow/sign_up.rb'
     - 'qa/qa/git/repository.rb'
     - 'qa/qa/page/component/ci_badge_link.rb'
     - 'qa/qa/page/component/issuable/sidebar.rb'
-    - 'qa/qa/page/component/select2.rb'
     - 'qa/qa/page/dashboard/snippet/index.rb'
-    - 'qa/qa/page/dashboard/todos.rb'
     - 'qa/qa/page/group/settings/group_deploy_tokens.rb'
     - 'qa/qa/page/group/settings/package_registries.rb'
     - 'qa/qa/page/merge_request/new.rb'
@@ -3343,7 +3229,6 @@ Layout/LineLength:
     - 'qa/qa/runtime/api/repository_storage_moves.rb'
     - 'qa/qa/runtime/env.rb'
     - 'qa/qa/runtime/feature.rb'
-    - 'qa/qa/runtime/fixtures.rb'
     - 'qa/qa/runtime/ip_address.rb'
     - 'qa/qa/runtime/search.rb'
     - 'qa/qa/scenario/bootable.rb'
@@ -3390,7 +3275,6 @@ Layout/LineLength:
     - 'qa/qa/specs/features/browser_ui/3_create/merge_request/rebase_merge_request_spec.rb'
     - 'qa/qa/specs/features/browser_ui/3_create/merge_request/revert/reverting_merge_request_spec.rb'
     - 'qa/qa/specs/features/browser_ui/3_create/merge_request/squash_merge_request_spec.rb'
-    - 'qa/qa/specs/features/browser_ui/3_create/merge_request/suggestions/custom_commit_suggestion_spec.rb'
     - 'qa/qa/specs/features/browser_ui/3_create/merge_request/view_merge_request_diff_patch_spec.rb'
     - 'qa/qa/specs/features/browser_ui/3_create/repository/add_list_delete_branches_spec.rb'
     - 'qa/qa/specs/features/browser_ui/3_create/repository/branch_with_unusual_name_spec.rb'
@@ -3421,20 +3305,17 @@ Layout/LineLength:
     - 'qa/qa/specs/features/browser_ui/3_create/web_ide/open_fork_in_web_ide_spec.rb'
     - 'qa/qa/specs/features/browser_ui/3_create/web_ide/open_web_ide_from_diff_tab_spec.rb'
     - 'qa/qa/specs/features/browser_ui/3_create/web_ide/review_merge_request_spec.rb'
-    - 'qa/qa/specs/features/browser_ui/3_create/web_ide/upload_new_file_in_web_ide_spec.rb'
     - 'qa/qa/specs/features/browser_ui/4_verify/ci_variable/pipeline_with_protected_variable_spec.rb'
     - 'qa/qa/specs/features/browser_ui/4_verify/pipeline/create_and_process_pipeline_spec.rb'
     - 'qa/qa/specs/features/browser_ui/4_verify/pipeline/include_local_config_file_paths_with_wildcard_spec.rb'
     - 'qa/qa/specs/features/browser_ui/4_verify/pipeline/include_multiple_files_from_a_project_spec.rb'
     - 'qa/qa/specs/features/browser_ui/4_verify/pipeline/merge_mr_when_pipline_is_blocked_spec.rb'
-    - 'qa/qa/specs/features/browser_ui/4_verify/pipeline/mr_event_rule_pipeline_spec.rb'
     - 'qa/qa/specs/features/browser_ui/4_verify/pipeline/pass_dotenv_variables_to_downstream_via_bridge_spec.rb'
     - 'qa/qa/specs/features/browser_ui/4_verify/pipeline/pipeline_editor_branch_switcher_spec.rb'
     - 'qa/qa/specs/features/browser_ui/4_verify/pipeline/trigger_matrix_spec.rb'
     - 'qa/qa/specs/features/browser_ui/4_verify/pipeline/update_ci_file_with_pipeline_editor_spec.rb'
     - 'qa/qa/specs/features/browser_ui/4_verify/runner/register_runner_spec.rb'
     - 'qa/qa/specs/features/browser_ui/4_verify/testing/view_code_coverage_spec.rb'
-    - 'qa/qa/specs/features/browser_ui/5_package/container_registry/container_registry_omnibus_spec.rb'
     - 'qa/qa/specs/features/browser_ui/5_package/container_registry/container_registry_spec.rb'
     - 'qa/qa/specs/features/browser_ui/5_package/container_registry/online_garbage_collection_spec.rb'
     - 'qa/qa/specs/features/browser_ui/5_package/package_registry/composer_registry_spec.rb'
@@ -3451,11 +3332,8 @@ Layout/LineLength:
     - 'qa/qa/specs/features/ee/api/1_manage/user/minimal_access_user_spec.rb'
     - 'qa/qa/specs/features/ee/api/2_plan/epics_milestone_dates_spec.rb'
     - 'qa/qa/specs/features/ee/api/3_create/wiki/group_wiki_repository_storage_move_spec.rb'
-    - 'qa/qa/specs/features/ee/api/7_configure/kubernetes/kubernetes_agent_spec.rb'
     - 'qa/qa/specs/features/ee/browser_ui/11_fulfillment/license/cloud_activation_spec.rb'
     - 'qa/qa/specs/features/ee/browser_ui/11_fulfillment/license/license_spec.rb'
-    - 'qa/qa/specs/features/ee/browser_ui/11_fulfillment/purchase/free_trial_spec.rb'
-    - 'qa/qa/specs/features/ee/browser_ui/11_fulfillment/purchase/purchase_storage_spec.rb'
     - 'qa/qa/specs/features/ee/browser_ui/11_fulfillment/purchase/user_registration_billing_spec.rb'
     - 'qa/qa/specs/features/ee/browser_ui/13_secure/enable_scanning_from_configuration_spec.rb'
     - 'qa/qa/specs/features/ee/browser_ui/13_secure/license_compliance_spec.rb'
@@ -3526,7 +3404,6 @@ Layout/LineLength:
     - 'rubocop/cop/migration/add_limit_to_text_columns.rb'
     - 'rubocop/cop/migration/add_reference.rb'
     - 'rubocop/cop/migration/prevent_global_enable_lock_retries_with_disable_ddl_transaction.rb'
-    - 'rubocop/cop/migration/versioned_migration_class.rb'
     - 'rubocop/cop/migration/with_lock_retries_disallowed_method.rb'
     - 'rubocop/cop/qa/selector_usage.rb'
     - 'rubocop/cop/rspec/top_level_describe_path.rb'
@@ -3534,7 +3411,6 @@ Layout/LineLength:
     - 'scripts/api/cancel_pipeline.rb'
     - 'scripts/api/get_job_id.rb'
     - 'scripts/changed-feature-flags'
-    - 'scripts/failed_tests.rb'
     - 'scripts/flaky_examples/prune-old-flaky-examples'
     - 'scripts/lint_templates_bash.rb'
     - 'scripts/no-dir-check'
@@ -3544,7 +3420,6 @@ Layout/LineLength:
     - 'scripts/security-harness'
     - 'scripts/static-analysis'
     - 'scripts/trigger-build.rb'
-    - 'scripts/verify-tff-mapping'
     - 'sidekiq_cluster/cli.rb'
     - 'sidekiq_cluster/sidekiq_cluster.rb'
     - 'spec/benchmarks/banzai_benchmark.rb'
@@ -3630,7 +3505,6 @@ Layout/LineLength:
     - 'spec/controllers/projects/repositories_controller_spec.rb'
     - 'spec/controllers/projects/runners_controller_spec.rb'
     - 'spec/controllers/projects/service_desk_controller_spec.rb'
-    - 'spec/controllers/projects/service_ping_controller_spec.rb'
     - 'spec/controllers/projects/settings/ci_cd_controller_spec.rb'
     - 'spec/controllers/projects/settings/operations_controller_spec.rb'
     - 'spec/controllers/projects/settings/repository_controller_spec.rb'
@@ -3751,7 +3625,6 @@ Layout/LineLength:
     - 'spec/features/merge_request/user_comments_on_diff_spec.rb'
     - 'spec/features/merge_request/user_creates_image_diff_notes_spec.rb'
     - 'spec/features/merge_request/user_creates_merge_request_spec.rb'
-    - 'spec/features/merge_request/user_edits_assignees_sidebar_spec.rb'
     - 'spec/features/merge_request/user_expands_diff_spec.rb'
     - 'spec/features/merge_request/user_interacts_with_batched_mr_diffs_spec.rb'
     - 'spec/features/merge_request/user_merges_only_if_pipeline_succeeds_spec.rb'
@@ -3760,7 +3633,6 @@ Layout/LineLength:
     - 'spec/features/merge_request/user_posts_notes_spec.rb'
     - 'spec/features/merge_request/user_resolves_conflicts_spec.rb'
     - 'spec/features/merge_request/user_resolves_diff_notes_and_discussions_resolve_spec.rb'
-    - 'spec/features/merge_request/user_resolves_wip_mr_spec.rb'
     - 'spec/features/merge_request/user_reverts_merge_request_spec.rb'
     - 'spec/features/merge_request/user_scrolls_to_note_on_load_spec.rb'
     - 'spec/features/merge_request/user_sees_avatar_on_diff_notes_spec.rb'
@@ -3955,8 +3827,6 @@ Layout/LineLength:
     - 'spec/graphql/mutations/release_asset_links/update_spec.rb'
     - 'spec/graphql/mutations/releases/delete_spec.rb'
     - 'spec/graphql/mutations/releases/update_spec.rb'
-    - 'spec/graphql/mutations/saved_replies/create_spec.rb'
-    - 'spec/graphql/mutations/saved_replies/update_spec.rb'
     - 'spec/graphql/mutations/security/ci_configuration/configure_sast_spec.rb'
     - 'spec/graphql/resolvers/admin/analytics/usage_trends/measurements_resolver_spec.rb'
     - 'spec/graphql/resolvers/alert_management/alert_resolver_spec.rb'
@@ -4042,17 +3912,14 @@ Layout/LineLength:
     - 'spec/helpers/groups/group_members_helper_spec.rb'
     - 'spec/helpers/groups_helper_spec.rb'
     - 'spec/helpers/icons_helper_spec.rb'
-    - 'spec/helpers/invite_members_helper_spec.rb'
     - 'spec/helpers/issuables_helper_spec.rb'
     - 'spec/helpers/issues_helper_spec.rb'
     - 'spec/helpers/labels_helper_spec.rb'
     - 'spec/helpers/markup_helper_spec.rb'
     - 'spec/helpers/members_helper_spec.rb'
     - 'spec/helpers/namespaces_helper_spec.rb'
-    - 'spec/helpers/nav/new_dropdown_helper_spec.rb'
     - 'spec/helpers/notes_helper_spec.rb'
     - 'spec/helpers/operations_helper_spec.rb'
-    - 'spec/helpers/page_layout_helper_spec.rb'
     - 'spec/helpers/profiles_helper_spec.rb'
     - 'spec/helpers/projects/pipeline_helper_spec.rb'
     - 'spec/helpers/projects/project_members_helper_spec.rb'
@@ -4060,7 +3927,6 @@ Layout/LineLength:
     - 'spec/helpers/projects_helper_spec.rb'
     - 'spec/helpers/registrations_helper_spec.rb'
     - 'spec/helpers/search_helper_spec.rb'
-    - 'spec/helpers/sidebars_helper_spec.rb'
     - 'spec/helpers/sidekiq_helper_spec.rb'
     - 'spec/helpers/snippets_helper_spec.rb'
     - 'spec/helpers/sorting_helper_spec.rb'
@@ -4271,7 +4137,6 @@ Layout/LineLength:
     - 'spec/lib/gitlab/ci/parsers/security/common_spec.rb'
     - 'spec/lib/gitlab/ci/parsers/security/validators/schema_validator_spec.rb'
     - 'spec/lib/gitlab/ci/parsers/test/junit_spec.rb'
-    - 'spec/lib/gitlab/ci/pipeline/chain/cancel_pending_pipelines_spec.rb'
     - 'spec/lib/gitlab/ci/pipeline/chain/ensure_resource_groups_spec.rb'
     - 'spec/lib/gitlab/ci/pipeline/chain/limit/deployments_spec.rb'
     - 'spec/lib/gitlab/ci/pipeline/chain/validate/external_spec.rb'
@@ -4291,7 +4156,6 @@ Layout/LineLength:
     - 'spec/lib/gitlab/ci/status/build/manual_spec.rb'
     - 'spec/lib/gitlab/ci/status/build/waiting_for_approval_spec.rb'
     - 'spec/lib/gitlab/ci/status/stage/play_manual_spec.rb'
-    - 'spec/lib/gitlab/ci/templates/5_minute_production_app_ci_yaml_spec.rb'
     - 'spec/lib/gitlab/ci/templates/Jobs/deploy_gitlab_ci_yaml_spec.rb'
     - 'spec/lib/gitlab/ci/templates/auto_devops_gitlab_ci_yaml_spec.rb'
     - 'spec/lib/gitlab/ci/variables/builder_spec.rb'
@@ -4647,12 +4511,6 @@ Layout/LineLength:
     - 'spec/mailers/emails/releases_spec.rb'
     - 'spec/mailers/emails/service_desk_spec.rb'
     - 'spec/mailers/notify_spec.rb'
-    - 'spec/migrations/20210610153556_delete_legacy_operations_feature_flags_spec.rb'
-    - 'spec/migrations/2021061716138_cascade_delete_freeze_periods_spec.rb'
-    - 'spec/migrations/20210713042000_fix_ci_sources_pipelines_index_names_spec.rb'
-    - 'spec/migrations/20210722150102_operations_feature_flags_correct_flexible_rollout_values_spec.rb'
-    - 'spec/migrations/20210805192450_update_trial_plans_ci_daily_pipeline_schedule_triggers_spec.rb'
-    - 'spec/migrations/20210812013042_remove_duplicate_project_authorizations_spec.rb'
     - 'spec/migrations/20210831203408_upsert_base_work_item_types_spec.rb'
     - 'spec/migrations/20210907211557_finalize_ci_builds_bigint_conversion_spec.rb'
     - 'spec/migrations/20210910194952_update_report_type_for_existing_approval_project_rules_spec.rb'
@@ -4674,22 +4532,14 @@ Layout/LineLength:
     - 'spec/migrations/20220222192524_create_not_null_constraint_releases_tag_spec.rb'
     - 'spec/migrations/20220309084954_remove_leftover_external_pull_request_deletions_spec.rb'
     - 'spec/migrations/active_record/schema_spec.rb'
-    - 'spec/migrations/add_upvotes_count_index_to_issues_spec.rb'
     - 'spec/migrations/backfill_all_project_namespaces_spec.rb'
-    - 'spec/migrations/backfill_cadence_id_for_boards_scoped_to_iteration_spec.rb'
     - 'spec/migrations/backfill_project_namespaces_for_group_spec.rb'
     - 'spec/migrations/cleanup_after_fixing_issue_when_admin_changed_primary_email_spec.rb'
     - 'spec/migrations/finalize_project_namespaces_backfill_spec.rb'
     - 'spec/migrations/fix_and_backfill_project_namespaces_for_projects_with_duplicate_name_spec.rb'
-    - 'spec/migrations/fix_batched_migrations_old_format_job_arguments_spec.rb'
-    - 'spec/migrations/re_schedule_latest_pipeline_id_population_with_all_security_related_artifact_types_spec.rb'
     - 'spec/migrations/recreate_index_security_ci_builds_on_name_and_id_parser_features_spec.rb'
     - 'spec/migrations/recreate_index_security_ci_builds_on_name_and_id_parser_with_new_features_spec.rb'
-    - 'spec/migrations/remove_duplicate_dast_site_tokens_spec.rb'
     - 'spec/migrations/remove_not_null_contraint_on_title_from_sprints_spec.rb'
-    - 'spec/migrations/rename_services_to_integrations_spec.rb'
-    - 'spec/migrations/replace_external_wiki_triggers_spec.rb'
-    - 'spec/migrations/reset_severity_levels_to_new_default_spec.rb'
     - 'spec/migrations/schedule_recalculate_vulnerability_finding_signatures_for_findings_spec.rb'
     - 'spec/migrations/schedule_update_timelogs_null_spent_at_spec.rb'
     - 'spec/migrations/update_invalid_member_states_spec.rb'
@@ -4698,7 +4548,6 @@ Layout/LineLength:
     - 'spec/models/acts_as_taggable_on/tagging_spec.rb'
     - 'spec/models/alert_management/alert_spec.rb'
     - 'spec/models/analytics/cycle_analytics/aggregation_spec.rb'
-    - 'spec/models/analytics/cycle_analytics/project_stage_spec.rb'
     - 'spec/models/appearance_spec.rb'
     - 'spec/models/application_setting_spec.rb'
     - 'spec/models/audit_event_spec.rb'
@@ -4724,7 +4573,6 @@ Layout/LineLength:
     - 'spec/models/ci/runner_spec.rb'
     - 'spec/models/ci/variable_spec.rb'
     - 'spec/models/clusters/agent_spec.rb'
-    - 'spec/models/clusters/applications/cert_manager_spec.rb'
     - 'spec/models/clusters/applications/ingress_spec.rb'
     - 'spec/models/clusters/applications/knative_spec.rb'
     - 'spec/models/clusters/applications/prometheus_spec.rb'
@@ -5044,7 +4892,6 @@ Layout/LineLength:
     - 'spec/requests/api/notes_spec.rb'
     - 'spec/requests/api/notification_settings_spec.rb'
     - 'spec/requests/api/npm_project_packages_spec.rb'
-    - 'spec/requests/api/nuget_group_packages_spec.rb'
     - 'spec/requests/api/nuget_project_packages_spec.rb'
     - 'spec/requests/api/pages/internal_access_spec.rb'
     - 'spec/requests/api/pages/private_access_spec.rb'
@@ -5122,7 +4969,6 @@ Layout/LineLength:
     - 'spec/rubocop/cop/performance/readlines_each_spec.rb'
     - 'spec/rubocop/cop/rspec/env_assignment_spec.rb'
     - 'spec/rubocop/cop/rspec/expect_gitlab_tracking_spec.rb'
-    - 'spec/scripts/failed_tests_spec.rb'
     - 'spec/serializers/accessibility_error_entity_spec.rb'
     - 'spec/serializers/accessibility_reports_comparer_entity_spec.rb'
     - 'spec/serializers/analytics/cycle_analytics/stage_entity_spec.rb'
@@ -5228,7 +5074,6 @@ Layout/LineLength:
     - 'spec/services/google_cloud/service_accounts_service_spec.rb'
     - 'spec/services/groups/autocomplete_service_spec.rb'
     - 'spec/services/groups/create_service_spec.rb'
-    - 'spec/services/groups/group_links/destroy_service_spec.rb'
     - 'spec/services/groups/transfer_service_spec.rb'
     - 'spec/services/groups/update_service_spec.rb'
     - 'spec/services/groups/update_shared_runners_service_spec.rb'
@@ -5534,7 +5379,6 @@ Layout/LineLength:
     - 'spec/support/shared_examples/models/concerns/has_repository_shared_examples.rb'
     - 'spec/support/shared_examples/models/concerns/incident_management/escalatable_shared_examples.rb'
     - 'spec/support/shared_examples/models/concerns/integrations/slack_mattermost_notifier_shared_examples.rb'
-    - 'spec/support/shared_examples/models/concerns/issuable_shared_examples.rb'
     - 'spec/support/shared_examples/models/concerns/limitable_shared_examples.rb'
     - 'spec/support/shared_examples/models/concerns/repositories/can_housekeep_repository_shared_examples.rb'
     - 'spec/support/shared_examples/models/concerns/repository_storage_movable_shared_examples.rb'
@@ -5664,7 +5508,6 @@ Layout/LineLength:
     - 'spec/views/admin/application_settings/_package_registry.html.haml_spec.rb'
     - 'spec/views/admin/application_settings/general.html.haml_spec.rb'
     - 'spec/views/admin/application_settings/repository.html.haml_spec.rb'
-    - 'spec/views/admin/broadcast_messages/index.html.haml_spec.rb'
     - 'spec/views/admin/dashboard/index.html.haml_spec.rb'
     - 'spec/views/devise/shared/_signin_box.html.haml_spec.rb'
     - 'spec/views/groups/edit.html.haml_spec.rb'

.rubocop_todo/layout/multiline_operation_indentation.yml

@@ -21,7 +21,6 @@ Layout/MultilineOperationIndentation:
     - 'app/models/packages/sem_ver.rb'
     - 'app/models/project.rb'
     - 'app/models/user.rb'
-    - 'app/models/work_items/parent_link.rb'
     - 'app/policies/project_policy.rb'
     - 'app/serializers/deploy_keys/deploy_key_entity.rb'
     - 'app/services/ci/create_downstream_pipeline_service.rb'
@@ -51,12 +50,10 @@ Layout/MultilineOperationIndentation:
     - 'ee/app/models/ee/project.rb'
     - 'ee/app/models/ee/user.rb'
     - 'ee/app/models/vulnerabilities/finding_signature.rb'
-    - 'ee/app/policies/ee/base_policy.rb'
     - 'ee/app/policies/ee/merge_request_policy.rb'
     - 'ee/app/services/analytics/cycle_analytics/value_streams/update_service.rb'
     - 'ee/app/services/ee/merge_requests/build_service.rb'
     - 'ee/app/services/ee/projects/operations/update_service.rb'
-    - 'ee/app/workers/elastic/project_transfer_worker.rb'
     - 'ee/lib/ee/api/entities/group.rb'
     - 'ee/lib/ee/api/geo.rb'
     - 'ee/lib/ee/api/helpers.rb'

.rubocop_todo/layout/space_around_operators.yml

@@ -1,5 +0,0 @@
----
-# Cop supports --autocorrect.
-Layout/SpaceAroundOperators:
-  Exclude:
-    - 'lib/gitlab/utils/strong_memoize.rb'

.rubocop_todo/layout/space_in_lambda_literal.yml

@@ -95,7 +95,6 @@ Layout/SpaceInLambdaLiteral:
     - 'app/models/prometheus_alert.rb'
     - 'app/models/prometheus_alert_event.rb'
     - 'app/models/prometheus_metric.rb'
-    - 'app/models/protected_branch.rb'
     - 'app/models/redirect_route.rb'
     - 'app/models/release.rb'
     - 'app/models/route.rb'
@@ -146,7 +145,6 @@ Layout/SpaceInLambdaLiteral:
     - 'app/serializers/merge_request_poll_cached_widget_entity.rb'
     - 'app/serializers/merge_request_poll_widget_entity.rb'
     - 'app/serializers/merge_request_widget_entity.rb'
-    - 'app/serializers/merge_requests/pipeline_entity.rb'
     - 'app/serializers/note_entity.rb'
     - 'app/serializers/project_note_entity.rb'
     - 'app/serializers/review_app_setup_entity.rb'
@@ -282,7 +280,6 @@ Layout/SpaceInLambdaLiteral:
     - 'ee/app/services/groups/seat_usage_export_service.rb'
     - 'ee/app/services/historical_user_data/csv_service.rb'
     - 'ee/app/services/merge_commits/export_csv_service.rb'
-    - 'ee/app/services/requirements_management/map_export_fields_service.rb'
     - 'ee/app/services/user_permissions/export_service.rb'
     - 'ee/app/services/vulnerability_exports/exporters/csv_service.rb'
     - 'ee/app/workers/update_all_mirrors_worker.rb'

.rubocop_todo/layout/space_inside_parens.yml

@@ -3,7 +3,6 @@
 Layout/SpaceInsideParens:
   Details: grace period
   Exclude:
-    - 'db/post_migrate/20210722042939_update_issuable_slas_where_issue_closed.rb'
     - 'ee/app/models/ee/dependency_proxy/blob.rb'
     - 'ee/app/models/ee/dependency_proxy/manifest.rb'
     - 'ee/app/services/gitlab_subscriptions/notify_seats_exceeded_batch_service.rb'
@@ -19,14 +18,11 @@ Layout/SpaceInsideParens:
     - 'ee/spec/frontend/fixtures/analytics/devops_reports/devops_adoption/enabled_namespaces.rb'
     - 'ee/spec/frontend/fixtures/epic.rb'
     - 'ee/spec/frontend/fixtures/namespace.rb'
-    - 'ee/spec/frontend/fixtures/projects.rb'
     - 'ee/spec/lib/gitlab/search/index_curator_spec.rb'
     - 'ee/spec/lib/world_spec.rb'
     - 'ee/spec/mailers/notify_spec.rb'
-    - 'ee/spec/migrations/add_non_null_constraint_for_escalation_rule_on_pending_alert_escalations_spec.rb'
     - 'ee/spec/migrations/drop_invalid_remediations_spec.rb'
     - 'ee/spec/models/allowed_email_domain_spec.rb'
-    - 'ee/spec/models/audit_events/external_audit_event_destination_spec.rb'
     - 'ee/spec/models/boards/epic_board_position_spec.rb'
     - 'ee/spec/models/dora/change_failure_rate_metric_spec.rb'
     - 'ee/spec/models/ee/integrations/jira_spec.rb'
@@ -34,6 +30,7 @@ Layout/SpaceInsideParens:
     - 'ee/spec/models/ee/iterations/cadence_spec.rb'
     - 'ee/spec/models/ee/key_spec.rb'
     - 'ee/spec/models/ee/project_setting_spec.rb'
+    - 'ee/spec/models/ee/project_spec.rb'
     - 'ee/spec/models/ee/system_note_metadata_spec.rb'
     - 'ee/spec/models/geo/every_geo_event_spec.rb'
     - 'ee/spec/models/incident_management/escalation_rule_spec.rb'
@@ -41,7 +38,6 @@ Layout/SpaceInsideParens:
     - 'ee/spec/models/ldap_group_link_spec.rb'
     - 'ee/spec/models/license_spec.rb'
     - 'ee/spec/models/member_spec.rb'
-    - 'ee/spec/models/project_spec.rb'
     - 'ee/spec/models/release_highlight_spec.rb'
     - 'ee/spec/models/security/orchestration_policy_configuration_spec.rb'
     - 'ee/spec/models/vulnerabilities/feedback_spec.rb'
@@ -57,7 +53,6 @@ Layout/SpaceInsideParens:
     - 'ee/spec/requests/api/project_milestones_spec.rb'
     - 'ee/spec/requests/customers_dot/proxy_controller_spec.rb'
     - 'ee/spec/serializers/member_user_entity_spec.rb'
-    - 'ee/spec/services/app_sec/dast/profiles/create_service_spec.rb'
     - 'ee/spec/services/app_sec/dast/site_profile_secret_variables/create_or_update_service_spec.rb'
     - 'ee/spec/services/app_sec/dast/site_validations/runner_service_spec.rb'
     - 'ee/spec/services/app_sec/fuzzing/coverage/corpuses/create_service_spec.rb'
@@ -92,7 +87,6 @@ Layout/SpaceInsideParens:
     - 'ee/spec/workers/security/auto_fix_worker_spec.rb'
     - 'qa/qa/page/group/settings/group_deploy_tokens.rb'
     - 'qa/qa/specs/features/ee/browser_ui/10_govern/scan_result_policy_vulnerabilities_spec.rb'
-    - 'qa/qa/specs/features/ee/browser_ui/10_govern/vulnerability_management_spec.rb'
     - 'qa/qa/tools/delete_subgroups.rb'
     - 'qa/spec/runtime/feature_spec.rb'
     - 'spec/dependencies/omniauth_saml_spec.rb'
@@ -136,7 +130,6 @@ Layout/SpaceInsideParens:
     - 'spec/lib/gitlab/ci/pipeline/seed/build_spec.rb'
     - 'spec/lib/gitlab/ci/reports/security/vulnerability_reports_comparer_spec.rb'
     - 'spec/lib/gitlab/ci/reports/test_suite_spec.rb'
-    - 'spec/lib/gitlab/ci/templates/5_minute_production_app_ci_yaml_spec.rb'
     - 'spec/lib/gitlab/ci/templates/AWS/deploy_ecs_gitlab_ci_yaml_spec.rb'
     - 'spec/lib/gitlab/ci/templates/MATLAB_spec.rb'
     - 'spec/lib/gitlab/ci/templates/Terraform/base_gitlab_ci_yaml_spec.rb'
@@ -193,7 +186,6 @@ Layout/SpaceInsideParens:
     - 'spec/lib/security/ci_configuration/secret_detection_build_action_spec.rb'
     - 'spec/mailers/emails/profile_spec.rb'
     - 'spec/migrations/20211130165043_backfill_sequence_column_for_sprints_table_spec.rb'
-    - 'spec/migrations/backfill_issues_upvotes_count_spec.rb'
     - 'spec/models/ci/pending_build_spec.rb'
     - 'spec/models/ci/running_build_spec.rb'
     - 'spec/models/ml/candidate_metric_spec.rb'

.rubocop_todo/layout/space_inside_percent_literal_delimiters.yml

@@ -0,0 +1,6 @@
+---
+# Cop supports --autocorrect.
+Layout/SpaceInsidePercentLiteralDelimiters:
+  Details: grace period
+  Exclude:
+    - 'spec/deprecation_toolkit_env.rb'

.rubocop_todo/layout/trailing_whitespace.yml

@@ -3,12 +3,10 @@
 Layout/TrailingWhitespace:
   Exclude:
     - 'app/models/concerns/analytics/cycle_analytics/stage_event_model.rb'
-    - 'db/migrate/20210611100359_rebuild_index_for_cadence_iterations_automation.rb'
     - 'db/migrate/20220913082728_drop_index_cadence_create_iterations_automation.rb'
     - 'db/post_migrate/20220816163444_update_start_date_for_iterations_cadences.rb'
     - 'lib/gitlab/background_migration/fix_duplicate_project_name_and_path.rb'
     - 'lib/gitlab/background_migration/populate_topics_non_private_projects_count.rb'
     - 'lib/gitlab/pagination/keyset/sql_type_missing_error.rb'
-    - 'spec/lib/banzai/filter/front_matter_filter_spec.rb'
     - 'spec/services/suggestions/apply_service_spec.rb'
     - 'spec/support/helpers/x509_helpers.rb'

.rubocop_todo/lint/ambiguous_operator_precedence.yml

@@ -0,0 +1,152 @@
+---
+# Cop supports --autocorrect.
+Lint/AmbiguousOperatorPrecedence:
+  Details: grace period
+  Exclude:
+    - 'app/controllers/explore/projects_controller.rb'
+    - 'app/controllers/omniauth_callbacks_controller.rb'
+    - 'app/controllers/profiles/two_factor_auths_controller.rb'
+    - 'app/helpers/form_helper.rb'
+    - 'app/helpers/groups_helper.rb'
+    - 'app/helpers/time_helper.rb'
+    - 'app/helpers/timeboxes_helper.rb'
+    - 'app/helpers/tree_helper.rb'
+    - 'app/helpers/users_helper.rb'
+    - 'app/models/concerns/relative_positioning.rb'
+    - 'app/models/design_management/version.rb'
+    - 'app/models/integrations/chat_message/pipeline_message.rb'
+    - 'app/models/merge_request_diff.rb'
+    - 'app/models/namespace.rb'
+    - 'app/models/network/graph.rb'
+    - 'app/models/note.rb'
+    - 'app/models/notification_reason.rb'
+    - 'app/models/project_feature.rb'
+    - 'app/models/terraform/state.rb'
+    - 'app/models/webauthn_registration.rb'
+    - 'app/presenters/project_presenter.rb'
+    - 'app/services/cohorts_service.rb'
+    - 'app/services/concerns/validates_classification_label.rb'
+    - 'app/services/groups/group_links/destroy_service.rb'
+    - 'app/services/issuable_links/create_service.rb'
+    - 'app/services/issues/relative_position_rebalancing_service.rb'
+    - 'app/services/jira/requests/base.rb'
+    - 'app/services/projects/blame_service.rb'
+    - 'config/initializers/1_settings.rb'
+    - 'config/initializers/carrierwave_patch.rb'
+    - 'config/initializers/kaminari_active_record_relation_methods_with_limit.rb'
+    - 'danger/roulette/Dangerfile'
+    - 'ee/app/models/ee/integrations/jira.rb'
+    - 'ee/app/models/geo/upload_registry.rb'
+    - 'ee/app/models/iterations/cadence.rb'
+    - 'ee/app/models/license.rb'
+    - 'ee/app/models/namespaces/storage/root_size.rb'
+    - 'ee/app/policies/ee/issuable_policy.rb'
+    - 'ee/app/services/boards/epics/position_create_service.rb'
+    - 'ee/app/services/geo/registry_consistency_service.rb'
+    - 'ee/app/services/vulnerabilities/create_service.rb'
+    - 'ee/lib/gitlab/expiring_subscription_message.rb'
+    - 'ee/spec/helpers/ee/users/callouts_helper_spec.rb'
+    - 'ee/spec/models/ee/audit_event_spec.rb'
+    - 'ee/spec/models/ee/iterations/cadence_spec.rb'
+    - 'ee/spec/models/ee/project_statistics_spec.rb'
+    - 'ee/spec/models/geo/project_registry_spec.rb'
+    - 'ee/spec/models/license_spec.rb'
+    - 'ee/spec/models/security/finding_spec.rb'
+    - 'ee/spec/models/status_page/project_setting_spec.rb'
+    - 'ee/spec/presenters/subscription_presenter_spec.rb'
+    - 'ee/spec/requests/api/graphql/project/incident_management/oncall_shifts_spec.rb'
+    - 'ee/spec/services/boards/epics/position_create_service_spec.rb'
+    - 'ee/spec/support/shared_examples/models/geo_framework_registry_shared_examples.rb'
+    - 'ee/spec/workers/incident_management/oncall_rotations/persist_shifts_job_spec.rb'
+    - 'lib/banzai/filter/references/user_reference_filter.rb'
+    - 'lib/banzai/filter_array.rb'
+    - 'lib/extracts_ref.rb'
+    - 'lib/gitlab/chaos.rb'
+    - 'lib/gitlab/ci/config/normalizer/number_strategy.rb'
+    - 'lib/gitlab/console.rb'
+    - 'lib/gitlab/database/background_migration/batch_metrics.rb'
+    - 'lib/gitlab/database/background_migration/batched_migration.rb'
+    - 'lib/gitlab/database/migrations/background_migration_helpers.rb'
+    - 'lib/gitlab/database/partitioning_migration_helpers/table_management_helpers.rb'
+    - 'lib/gitlab/database/postgres_hll/buckets.rb'
+    - 'lib/gitlab/database/query_analyzers/prevent_cross_database_modification.rb'
+    - 'lib/gitlab/email/message/in_product_marketing/helper.rb'
+    - 'lib/gitlab/i18n/po_linter.rb'
+    - 'lib/gitlab/import_export/project/relation_factory.rb'
+    - 'lib/gitlab/memory/instrumentation.rb'
+    - 'lib/gitlab/metrics/prometheus.rb'
+    - 'lib/gitlab/middleware/rails_queue_duration.rb'
+    - 'lib/gitlab/pagination/gitaly_keyset_pager.rb'
+    - 'lib/gitlab/quick_actions/issuable_actions.rb'
+    - 'lib/gitlab/relative_positioning.rb'
+    - 'lib/gitlab/template_parser/parser.rb'
+    - 'lib/gitlab/tree_summary.rb'
+    - 'lib/gitlab/usage/metrics/name_suggestion.rb'
+    - 'lib/gitlab/utils/email.rb'
+    - 'lib/omni_auth/strategies/bitbucket.rb'
+    - 'qa/qa/ee/page/project/secure/pipeline_security.rb'
+    - 'qa/qa/resource/api_fabricator.rb'
+    - 'qa/qa/resource/group_access_token.rb'
+    - 'qa/qa/resource/impersonation_token.rb'
+    - 'qa/qa/resource/personal_access_token.rb'
+    - 'qa/qa/resource/project_access_token.rb'
+    - 'qa/qa/runtime/feature.rb'
+    - 'qa/qa/tools/test_resources_handler.rb'
+    - 'scripts/packages/automated_cleanup.rb'
+    - 'scripts/perf/gc/print_gc_stats.rb'
+    - 'scripts/perf/query_limiting_report.rb'
+    - 'scripts/review_apps/automated_cleanup.rb'
+    - 'spec/controllers/projects/issues_controller_spec.rb'
+    - 'spec/controllers/search_controller_spec.rb'
+    - 'spec/helpers/events_helper_spec.rb'
+    - 'spec/helpers/time_helper_spec.rb'
+    - 'spec/lib/api/helpers/pagination_strategies_spec.rb'
+    - 'spec/lib/banzai/filter/front_matter_filter_spec.rb'
+    - 'spec/lib/gitlab/ci/ansi2json/line_spec.rb'
+    - 'spec/lib/gitlab/ci/runner_releases_spec.rb'
+    - 'spec/lib/gitlab/ci/trace/chunked_io_spec.rb'
+    - 'spec/lib/gitlab/ci/trace/stream_spec.rb'
+    - 'spec/lib/gitlab/conan_token_spec.rb'
+    - 'spec/lib/gitlab/database/background_migration/batched_job_spec.rb'
+    - 'spec/lib/gitlab/database/batch_count_spec.rb'
+    - 'spec/lib/gitlab/database/consistency_checker_spec.rb'
+    - 'spec/lib/gitlab/graphql/tracers/metrics_tracer_spec.rb'
+    - 'spec/lib/gitlab/instrumentation/redis_interceptor_spec.rb'
+    - 'spec/lib/gitlab/issues/rebalancing/state_spec.rb'
+    - 'spec/lib/gitlab/kroki_spec.rb'
+    - 'spec/lib/gitlab/memory/instrumentation_spec.rb'
+    - 'spec/lib/gitlab/memory/watchdog/configurator_spec.rb'
+    - 'spec/lib/gitlab/memory/watchdog/monitor/unique_memory_growth_spec.rb'
+    - 'spec/lib/gitlab/project_search_results_spec.rb'
+    - 'spec/lib/gitlab/prometheus_client_spec.rb'
+    - 'spec/lib/gitlab/quick_actions/extractor_spec.rb'
+    - 'spec/lib/gitlab/regex_spec.rb'
+    - 'spec/lib/gitlab/search/abuse_validators/no_abusive_term_length_validator_spec.rb'
+    - 'spec/lib/gitlab/slash_commands/deploy_spec.rb'
+    - 'spec/lib/gitlab/url_blocker_spec.rb'
+    - 'spec/mailers/notify_spec.rb'
+    - 'spec/models/appearance_spec.rb'
+    - 'spec/models/ci/build_spec.rb'
+    - 'spec/models/ci/runner_spec.rb'
+    - 'spec/models/commit_spec.rb'
+    - 'spec/models/concerns/pg_full_text_searchable_spec.rb'
+    - 'spec/models/custom_emoji_spec.rb'
+    - 'spec/models/environment_spec.rb'
+    - 'spec/models/grafana_integration_spec.rb'
+    - 'spec/models/integrations/chat_message/push_message_spec.rb'
+    - 'spec/models/merge_request_diff_spec.rb'
+    - 'spec/models/packages/package_file_spec.rb'
+    - 'spec/models/project_metrics_setting_spec.rb'
+    - 'spec/models/prometheus_alert_spec.rb'
+    - 'spec/requests/api/pypi_packages_spec.rb'
+    - 'spec/requests/lfs_http_spec.rb'
+    - 'spec/services/ci/pipeline_schedules/calculate_next_run_service_spec.rb'
+    - 'spec/services/issues/relative_position_rebalancing_service_spec.rb'
+    - 'spec/services/web_hook_service_spec.rb'
+    - 'spec/support/cycle_analytics_helpers/test_generation.rb'
+    - 'spec/support/helpers/dependency_proxy_helpers.rb'
+    - 'spec/support/models/ci/partitioning_testing/cascade_check.rb'
+    - 'spec/support/shared_examples/features/sidebar_shared_examples.rb'
+    - 'spec/support/shared_examples/models/relative_positioning_shared_examples.rb'
+    - 'spec/support/shared_examples/services/packages/debian/generate_distribution_shared_examples.rb'
+    - 'spec/tooling/lib/tooling/kubernetes_client_spec.rb'

.rubocop_todo/lint/ambiguous_range.yml

@@ -0,0 +1,10 @@
+---
+# Cop supports --autocorrect.
+Lint/AmbiguousRange:
+  Details: grace period
+  Exclude:
+    - 'app/models/ci/runner.rb'
+    - 'app/models/ci/runner_machine.rb'
+    - 'app/services/clusters/agent_tokens/track_usage_service.rb'
+    - 'lib/gitlab/seeders/ci/runner/runner_fleet_pipeline_seeder.rb'
+    - 'spec/lib/gitlab/database/reindexing/reindex_concurrently_spec.rb'

.rubocop_todo/lint/constant_definition_in_block.yml

@@ -45,12 +45,6 @@ Lint/ConstantDefinitionInBlock:
     - 'lib/tasks/gitlab/update_templates.rake'
     - 'lib/tasks/tanuki_emoji.rake'
     - 'spec/db/schema_spec.rb'
-    - 'spec/lib/gitlab/quick_actions/dsl_spec.rb'
     - 'spec/lib/marginalia_spec.rb'
-    - 'spec/mailers/notify_spec.rb'
     - 'spec/models/concerns/batch_destroy_dependent_associations_spec.rb'
     - 'spec/models/concerns/bulk_insert_safe_spec.rb'
-    - 'spec/models/concerns/bulk_insertable_associations_spec.rb'
-    - 'spec/models/concerns/triggerable_hooks_spec.rb'
-    - 'spec/models/repository_spec.rb'
-    - 'spec/support/shared_examples/quick_actions/issuable/issuable_quick_actions_shared_examples.rb'

.rubocop_todo/lint/deprecated_constants.yml

@@ -0,0 +1,7 @@
+---
+# Cop supports --autocorrect.
+Lint/DeprecatedConstants:
+  Details: grace period
+  Exclude:
+    - 'scripts/pipeline_test_report_builder.rb'
+    - 'spec/scripts/pipeline_test_report_builder_spec.rb'

.rubocop_todo/lint/duplicate_branch.yml

@@ -0,0 +1,36 @@
+---
+Lint/DuplicateBranch:
+  Details: grace period
+  Exclude:
+    - 'app/controllers/concerns/issuable_collections.rb'
+    - 'app/controllers/concerns/sorting_preference.rb'
+    - 'app/controllers/projects/google_cloud/databases_controller.rb'
+    - 'app/controllers/repositories/lfs_storage_controller.rb'
+    - 'app/helpers/ci/status_helper.rb'
+    - 'app/helpers/icons_helper.rb'
+    - 'app/helpers/labels_helper.rb'
+    - 'app/models/application_setting_implementation.rb'
+    - 'app/models/integrations/base_chat_notification.rb'
+    - 'app/models/packages/package.rb'
+    - 'app/models/release.rb'
+    - 'app/services/admin/set_feature_flag_service.rb'
+    - 'app/services/ci/job_token_scope/add_project_service.rb'
+    - 'app/services/spam/spam_action_service.rb'
+    - 'config/initializers/postgresql_cte.rb'
+    - 'ee/app/controllers/projects/integrations/jira/issues_controller.rb'
+    - 'ee/app/controllers/projects/security/policies_controller.rb'
+    - 'ee/app/finders/compliance_management/merge_requests/compliance_violations_finder.rb'
+    - 'ee/app/models/ee/vulnerability.rb'
+    - 'ee/app/models/license.rb'
+    - 'ee/app/models/vulnerabilities/read.rb'
+    - 'lib/event_filter.rb'
+    - 'lib/gitlab/checks/branch_check.rb'
+    - 'lib/gitlab/ci/yaml_processor.rb'
+    - 'lib/gitlab/database/load_balancing/load_balancer.rb'
+    - 'lib/gitlab/import_export/project/relation_factory.rb'
+    - 'lib/gitlab/search_results.rb'
+    - 'lib/mattermost/session.rb'
+    - 'lib/sidebars/groups/menus/settings_menu.rb'
+    - 'qa/qa/resource/pipeline.rb'
+    - 'scripts/rubocop-parse'
+    - 'spec/support/shared_contexts/features/integrations/integrations_shared_context.rb'

.rubocop_todo/lint/duplicate_regexp_character_class_element.yml

@@ -0,0 +1,7 @@
+---
+# Cop supports --autocorrect.
+Lint/DuplicateRegexpCharacterClassElement:
+  Details: grace period
+  Exclude:
+    - 'lib/gitlab/path_regex.rb'
+    - 'spec/support/shared_contexts/features/integrations/integrations_shared_context.rb'

.rubocop_todo/lint/empty_block.yml

@@ -0,0 +1,212 @@
+---
+Lint/EmptyBlock:
+  Details: grace period
+  Exclude:
+    - 'app/controllers/groups/boards_controller.rb'
+    - 'app/controllers/projects/boards_controller.rb'
+    - 'app/controllers/projects/pipelines_controller.rb'
+    - 'app/experiments/logged_out_marketing_header_experiment.rb'
+    - 'app/experiments/security_reports_mr_widget_prompt_experiment.rb'
+    - 'config/application.rb'
+    - 'ee/app/controllers/projects/learn_gitlab_controller.rb'
+    - 'ee/spec/factories/incident_management/escalation_rules.rb'
+    - 'ee/spec/finders/snippets_finder_spec.rb'
+    - 'ee/spec/graphql/types/epic_type_spec.rb'
+    - 'ee/spec/graphql/types/incident_management/escalation_rule_input_type_spec.rb'
+    - 'ee/spec/lib/gitlab/ci/minutes/cost_factor_spec.rb'
+    - 'ee/spec/lib/gitlab/geo/log_cursor/lease_spec.rb'
+    - 'ee/spec/lib/gitlab/ip_address_state_spec.rb'
+    - 'ee/spec/lib/gitlab/search_context/builder_spec.rb'
+    - 'ee/spec/models/concerns/ee/noteable_spec.rb'
+    - 'ee/spec/models/dast/profile_schedule_spec.rb'
+    - 'ee/spec/models/ee/ci/build_dependencies_spec.rb'
+    - 'ee/spec/models/ee/user_spec.rb'
+    - 'ee/spec/models/environment_spec.rb'
+    - 'ee/spec/models/protected_environment_spec.rb'
+    - 'ee/spec/models/security/orchestration_policy_configuration_spec.rb'
+    - 'ee/spec/models/security/orchestration_policy_rule_schedule_spec.rb'
+    - 'ee/spec/models/vulnerabilities/stat_diff_spec.rb'
+    - 'ee/spec/requests/api/analytics/group_activity_analytics_spec.rb'
+    - 'ee/spec/requests/api/graphql/boards/board_lists_query_spec.rb'
+    - 'ee/spec/requests/api/vulnerability_exports_spec.rb'
+    - 'ee/spec/requests/groups/security/credentials_controller_spec.rb'
+    - 'ee/spec/requests/lfs_http_spec.rb'
+    - 'ee/spec/serializers/merge_request_poll_widget_entity_spec.rb'
+    - 'ee/spec/services/audit_events/register_runner_audit_event_service_spec.rb'
+    - 'ee/spec/services/audit_events/unregister_runner_audit_event_service_spec.rb'
+    - 'ee/spec/services/auto_merge/add_to_merge_train_when_pipeline_succeeds_service_spec.rb'
+    - 'ee/spec/services/auto_merge/merge_train_service_spec.rb'
+    - 'ee/spec/services/ci/runners/register_runner_service_spec.rb'
+    - 'ee/spec/services/incident_management/escalation_policies/update_service_spec.rb'
+    - 'lib/api/helpers/groups_helpers.rb'
+    - 'lib/api/helpers/issues_helpers.rb'
+    - 'lib/api/helpers/members_helpers.rb'
+    - 'lib/api/helpers/merge_requests_helpers.rb'
+    - 'lib/api/helpers/projects_helpers.rb'
+    - 'lib/api/helpers/protected_branches_helpers.rb'
+    - 'lib/api/helpers/protected_tags_helpers.rb'
+    - 'lib/api/helpers/remote_mirrors_helpers.rb'
+    - 'lib/api/helpers/settings_helpers.rb'
+    - 'lib/api/helpers/users_helpers.rb'
+    - 'lib/api/helpers/variables_helpers.rb'
+    - 'lib/api/merge_requests.rb'
+    - 'lib/gitlab/alert_management/payload/base.rb'
+    - 'lib/gitlab/seeder.rb'
+    - 'lib/sidebars/groups/panel.rb'
+    - 'lib/sidebars/projects/panel.rb'
+    - 'qa/qa/specs/features/shared_contexts/import/gitlab_group_migration_common.rb'
+    - 'qa/spec/scenario/test/instance/airgapped_spec.rb'
+    - 'qa/spec/specs/helpers/context_selector_spec.rb'
+    - 'qa/spec/specs/helpers/feature_flag_spec.rb'
+    - 'qa/spec/specs/helpers/quarantine_spec.rb'
+    - 'qa/spec/support/formatters/test_metrics_formatter_spec.rb'
+    - 'scripts/lib/glfm/update_example_snapshots.rb'
+    - 'scripts/lib/glfm/update_specification.rb'
+    - 'spec/controllers/application_controller_spec.rb'
+    - 'spec/controllers/projects/artifacts_controller_spec.rb'
+    - 'spec/controllers/projects/feature_flags_controller_spec.rb'
+    - 'spec/dependencies/omniauth_saml_spec.rb'
+    - 'spec/experiments/application_experiment_spec.rb'
+    - 'spec/factories/packages/package_files.rb'
+    - 'spec/features/merge_request/user_sees_deployment_widget_spec.rb'
+    - 'spec/features/projects/environments/environment_spec.rb'
+    - 'spec/finders/ci/runners_finder_spec.rb'
+    - 'spec/initializers/enumerator_next_patch_spec.rb'
+    - 'spec/initializers/net_http_response_patch_spec.rb'
+    - 'spec/lib/api/base_spec.rb'
+    - 'spec/lib/api/helpers/authentication_spec.rb'
+    - 'spec/lib/bitbucket_server/connection_spec.rb'
+    - 'spec/lib/feature_spec.rb'
+    - 'spec/lib/gitlab/application_context_spec.rb'
+    - 'spec/lib/gitlab/audit/ci_runner_token_author_spec.rb'
+    - 'spec/lib/gitlab/background_migration/batched_migration_job_spec.rb'
+    - 'spec/lib/gitlab/chat_name_token_spec.rb'
+    - 'spec/lib/gitlab/ci/build/rules/rule/clause/changes_spec.rb'
+    - 'spec/lib/gitlab/ci/build/rules/rule/clause/exists_spec.rb'
+    - 'spec/lib/gitlab/ci/config/edge_stages_injector_spec.rb'
+    - 'spec/lib/gitlab/ci/config/entry/retry_spec.rb'
+    - 'spec/lib/gitlab/ci/config/entry/root_spec.rb'
+    - 'spec/lib/gitlab/ci/config/entry/rules/rule/changes_spec.rb'
+    - 'spec/lib/gitlab/ci/config/entry/rules/rule_spec.rb'
+    - 'spec/lib/gitlab/ci/config/external/context_spec.rb'
+    - 'spec/lib/gitlab/ci/config/external/file/artifact_spec.rb'
+    - 'spec/lib/gitlab/ci/config/external/file/base_spec.rb'
+    - 'spec/lib/gitlab/ci/config/external/rules_spec.rb'
+    - 'spec/lib/gitlab/ci/config/normalizer_spec.rb'
+    - 'spec/lib/gitlab/ci/parsers/security/validators/schema_validator_spec.rb'
+    - 'spec/lib/gitlab/ci/pipeline/chain/seed_block_spec.rb'
+    - 'spec/lib/gitlab/ci/pipeline/chain/seed_spec.rb'
+    - 'spec/lib/gitlab/ci/pipeline/logger_spec.rb'
+    - 'spec/lib/gitlab/ci/runner_releases_spec.rb'
+    - 'spec/lib/gitlab/ci/trace/chunked_io_spec.rb'
+    - 'spec/lib/gitlab/ci/variables/helpers_spec.rb'
+    - 'spec/lib/gitlab/ci/yaml_processor_spec.rb'
+    - 'spec/lib/gitlab/database/each_database_spec.rb'
+    - 'spec/lib/gitlab/database/load_balancing/load_balancer_spec.rb'
+    - 'spec/lib/gitlab/database/load_balancing/sidekiq_client_middleware_spec.rb'
+    - 'spec/lib/gitlab/database/migration_helpers/automatic_lock_writes_on_tables_spec.rb'
+    - 'spec/lib/gitlab/database/migration_helpers/v2_spec.rb'
+    - 'spec/lib/gitlab/database/migrations/instrumentation_spec.rb'
+    - 'spec/lib/gitlab/database/migrations/lock_retries_helpers_spec.rb'
+    - 'spec/lib/gitlab/database/migrations/observers/transaction_duration_spec.rb'
+    - 'spec/lib/gitlab/database/obsolete_ignored_columns_spec.rb'
+    - 'spec/lib/gitlab/database/shared_model_spec.rb'
+    - 'spec/lib/gitlab/database/with_lock_retries_outside_transaction_spec.rb'
+    - 'spec/lib/gitlab/database/with_lock_retries_spec.rb'
+    - 'spec/lib/gitlab/database_importers/common_metrics/importer_spec.rb'
+    - 'spec/lib/gitlab/database_spec.rb'
+    - 'spec/lib/gitlab/etag_caching/router/graphql_spec.rb'
+    - 'spec/lib/gitlab/exclusive_lease_helpers_spec.rb'
+    - 'spec/lib/gitlab/exclusive_lease_spec.rb'
+    - 'spec/lib/gitlab/git/raw_diff_change_spec.rb'
+    - 'spec/lib/gitlab/git/repository_spec.rb'
+    - 'spec/lib/gitlab/gitaly_client/operation_service_spec.rb'
+    - 'spec/lib/gitlab/github_import/client_spec.rb'
+    - 'spec/lib/gitlab/github_import/importer/protected_branches_importer_spec.rb'
+    - 'spec/lib/gitlab/github_import/importer/pull_requests_importer_spec.rb'
+    - 'spec/lib/gitlab/github_import/importer/pull_requests_merged_by_importer_spec.rb'
+    - 'spec/lib/gitlab/github_import/importer/pull_requests_reviews_importer_spec.rb'
+    - 'spec/lib/gitlab/github_import/importer/single_endpoint_diff_notes_importer_spec.rb'
+    - 'spec/lib/gitlab/github_import/importer/single_endpoint_issue_notes_importer_spec.rb'
+    - 'spec/lib/gitlab/github_import/importer/single_endpoint_merge_request_notes_importer_spec.rb'
+    - 'spec/lib/gitlab/gpg_spec.rb'
+    - 'spec/lib/gitlab/graphql/negatable_arguments_spec.rb'
+    - 'spec/lib/gitlab/http_io_spec.rb'
+    - 'spec/lib/gitlab/memory/reports_daemon_spec.rb'
+    - 'spec/lib/gitlab/metrics/background_transaction_spec.rb'
+    - 'spec/lib/gitlab/metrics/web_transaction_spec.rb'
+    - 'spec/lib/gitlab/patch/prependable_spec.rb'
+    - 'spec/lib/gitlab/profiler_spec.rb'
+    - 'spec/lib/gitlab/quick_actions/extractor_spec.rb'
+    - 'spec/lib/gitlab/rack_attack/instrumented_cache_store_spec.rb'
+    - 'spec/lib/gitlab/search_context/builder_spec.rb'
+    - 'spec/lib/gitlab/session_spec.rb'
+    - 'spec/lib/gitlab/sidekiq_daemon/memory_killer_spec.rb'
+    - 'spec/lib/gitlab/sidekiq_logging/structured_logger_spec.rb'
+    - 'spec/lib/gitlab/sidekiq_middleware/extra_done_log_metadata_spec.rb'
+    - 'spec/lib/gitlab/sidekiq_middleware/server_metrics_spec.rb'
+    - 'spec/lib/gitlab/sidekiq_middleware/size_limiter/server_spec.rb'
+    - 'spec/lib/gitlab/verify/uploads_spec.rb'
+    - 'spec/lib/gitlab_spec.rb'
+    - 'spec/lib/marginalia_spec.rb'
+    - 'spec/lib/mattermost/session_spec.rb'
+    - 'spec/models/aws/role_spec.rb'
+    - 'spec/models/ci/build_dependencies_spec.rb'
+    - 'spec/models/ci/build_spec.rb'
+    - 'spec/models/ci/build_trace_metadata_spec.rb'
+    - 'spec/models/ci/job_artifact_spec.rb'
+    - 'spec/models/ci/pipeline_schedule_spec.rb'
+    - 'spec/models/ci/pipeline_spec.rb'
+    - 'spec/models/ci/runner_spec.rb'
+    - 'spec/models/clusters/cluster_spec.rb'
+    - 'spec/models/commit_status_spec.rb'
+    - 'spec/models/concerns/has_environment_scope_spec.rb'
+    - 'spec/models/concerns/noteable_spec.rb'
+    - 'spec/models/container_expiration_policy_spec.rb'
+    - 'spec/models/container_repository_spec.rb'
+    - 'spec/models/environment_spec.rb'
+    - 'spec/models/merge_request/approval_removal_settings_spec.rb'
+    - 'spec/models/merge_request_spec.rb'
+    - 'spec/models/user_spec.rb'
+    - 'spec/presenters/ci/pipeline_presenter_spec.rb'
+    - 'spec/requests/api/ci/runner/jobs_artifacts_spec.rb'
+    - 'spec/requests/api/ci/runner/jobs_request_post_spec.rb'
+    - 'spec/requests/api/ci/runner/runners_verify_post_spec.rb'
+    - 'spec/requests/api/ci/triggers_spec.rb'
+    - 'spec/requests/api/graphql/boards/board_list_issues_query_spec.rb'
+    - 'spec/requests/api/graphql/boards/board_lists_query_spec.rb'
+    - 'spec/requests/api/graphql/ci/runner_spec.rb'
+    - 'spec/requests/api/graphql/mutations/achievements/create_spec.rb'
+    - 'spec/requests/api/group_variables_spec.rb'
+    - 'spec/requests/api/groups_spec.rb'
+    - 'spec/requests/api/helpers_spec.rb'
+    - 'spec/requests/api/markdown_spec.rb'
+    - 'spec/requests/api/release/links_spec.rb'
+    - 'spec/requests/api/releases_spec.rb'
+    - 'spec/requests/api/unleash_spec.rb'
+    - 'spec/rubocop/cop/migration/create_table_with_foreign_keys_spec.rb'
+    - 'spec/services/auto_merge/base_service_spec.rb'
+    - 'spec/services/auto_merge_service_spec.rb'
+    - 'spec/services/ci/archive_trace_service_spec.rb'
+    - 'spec/services/ci/create_pipeline_service_spec.rb'
+    - 'spec/services/ci/parse_dotenv_artifact_service_spec.rb'
+    - 'spec/services/ci/runners/bulk_delete_runners_service_spec.rb'
+    - 'spec/services/ci/runners/register_runner_service_spec.rb'
+    - 'spec/services/ci/stuck_builds/drop_pending_service_spec.rb'
+    - 'spec/services/ci/stuck_builds/drop_scheduled_service_spec.rb'
+    - 'spec/services/deployments/create_for_build_service_spec.rb'
+    - 'spec/services/environments/create_for_build_service_spec.rb'
+    - 'spec/services/projects/lfs_pointers/lfs_object_download_list_service_spec.rb'
+    - 'spec/services/releases/destroy_service_spec.rb'
+    - 'spec/services/releases/update_service_spec.rb'
+    - 'spec/services/terraform/remote_state_handler_spec.rb'
+    - 'spec/support/shared_contexts/security_and_compliance_permissions_shared_context.rb'
+    - 'spec/support/shared_examples/lib/gitlab/ci/ci_trace_shared_examples.rb'
+    - 'spec/support/shared_examples/lib/gitlab/sidekiq_middleware/strategy_shared_examples.rb'
+    - 'spec/support/shared_examples/models/concerns/bulk_insert_safe_shared_examples.rb'
+    - 'spec/support/shared_examples/quick_actions/issue/board_move_quick_action_shared_examples.rb'
+    - 'spec/support/shared_examples/requests/lfs_http_shared_examples.rb'
+    - 'spec/support/shared_examples/sends_git_audit_streaming_event_shared_examples.rb'
+    - 'spec/support_specs/database/without_check_constraint_spec.rb'
+    - 'spec/views/layouts/_published_experiments.html.haml_spec.rb'
+    - 'spec/workers/ci/initial_pipeline_process_worker_spec.rb'

.rubocop_todo/lint/empty_class.yml

@@ -0,0 +1,5 @@
+---
+Lint/EmptyClass:
+  Details: grace period
+  Exclude:
+    - 'spec/lib/gitlab/multi_destination_logger_spec.rb'

.rubocop_todo/lint/incompatible_io_select_with_fiber_scheduler.yml

@@ -0,0 +1,6 @@
+---
+# Cop supports --autocorrect.
+Lint/IncompatibleIoSelectWithFiberScheduler:
+  Details: grace period
+  Exclude:
+    - 'lib/gitlab/stack_prof.rb'

.rubocop_todo/lint/missing_cop_enable_directive.yml

@@ -67,13 +67,8 @@ Lint/MissingCopEnableDirective:
     - 'danger/feature_flag/Dangerfile'
     - 'danger/pajamas/Dangerfile'
     - 'danger/z_metadata/Dangerfile'
-    - 'db/migrate/20210807101621_add_timezone_to_dast_profile_schedules.rb'
-    - 'db/migrate/20210816095826_add_unique_index_on_dast_profile_to_dast_profile_schedules.rb'
-    - 'db/migrate/20210818061156_remove_project_profile_compound_index_from_dast_profile_schedules.rb'
-    - 'db/migrate/20210818115613_add_index_project_id_on_dast_profile_schedule.rb'
     - 'db/migrate/20211013014228_add_content_validation_endpoint_to_application_settings.rb'
     - 'db/migrate/20220531024905_add_operations_access_levels_to_project_feature.rb'
-    - 'db/post_migrate/20210825182303_remove_duplicate_dast_site_tokens_with_same_token.rb'
     - 'ee/app/controllers/ee/admin/dashboard_controller.rb'
     - 'ee/app/controllers/ee/admin/groups_controller.rb'
     - 'ee/app/controllers/ee/admin/users_controller.rb'
@@ -199,7 +194,6 @@ Lint/MissingCopEnableDirective:
     - 'qa/qa/scenario/test/integration/registry_with_cdn.rb'
     - 'spec/benchmarks/banzai_benchmark.rb'
     - 'spec/lib/gitlab/sidekiq_middleware/size_limiter/server_spec.rb'
-    - 'spec/lib/initializer_connections_spec.rb'
     - 'spec/support/capybara.rb'
     - 'spec/support/cycle_analytics_helpers/test_generation.rb'
     - 'spec/support/google_api/cloud_platform_helpers.rb'

.rubocop_todo/lint/no_return_in_begin_end_blocks.yml

@@ -0,0 +1,20 @@
+---
+Lint/NoReturnInBeginEndBlocks:
+  Details: grace period
+  Exclude:
+    - 'app/models/concerns/metric_image_uploading.rb'
+    - 'app/models/merge_request.rb'
+    - 'app/services/security/ci_configuration/sast_parser_service.rb'
+    - 'app/services/work_items/parent_links/create_service.rb'
+    - 'ee/app/services/epic_issues/create_service.rb'
+    - 'ee/app/services/gitlab_subscriptions/preview_billable_user_change_service.rb'
+    - 'ee/app/services/security/token_revocation_service.rb'
+    - 'ee/lib/api/vulnerability_findings.rb'
+    - 'ee/lib/ee/gitlab/scim/filter_parser.rb'
+    - 'lib/api/internal/base.rb'
+    - 'lib/gitlab/git/repository.rb'
+    - 'lib/gitlab/metrics/dashboard/importer.rb'
+    - 'lib/object_storage/config.rb'
+    - 'qa/qa/support/formatters/test_metrics_formatter.rb'
+    - 'qa/qa/support/influxdb_tools.rb'
+    - 'spec/support/database/prevent_cross_joins.rb'

.rubocop_todo/lint/non_atomic_file_operation.yml

@@ -0,0 +1,46 @@
+---
+# Cop supports --autocorrect.
+Lint/NonAtomicFileOperation:
+  Details: grace period
+  Exclude:
+    - 'app/models/merge_request_diff.rb'
+    - 'app/services/bulk_imports/file_decompression_service.rb'
+    - 'app/services/bulk_imports/file_download_service.rb'
+    - 'app/services/projects/import_export/parallel_export_service.rb'
+    - 'app/services/projects/import_export/relation_export_service.rb'
+    - 'app/services/projects/lfs_pointers/lfs_download_service.rb'
+    - 'ee/spec/lib/ee/gitlab/usage_data_counters/hll_redis_counter_spec.rb'
+    - 'lib/bulk_imports/common/extractors/json_extractor.rb'
+    - 'lib/bulk_imports/common/extractors/ndjson_extractor.rb'
+    - 'lib/bulk_imports/common/pipelines/lfs_objects_pipeline.rb'
+    - 'lib/bulk_imports/common/pipelines/uploads_pipeline.rb'
+    - 'lib/bulk_imports/projects/pipelines/design_bundle_pipeline.rb'
+    - 'lib/bulk_imports/projects/pipelines/repository_bundle_pipeline.rb'
+    - 'lib/gitlab/ci/trace.rb'
+    - 'lib/gitlab/database/migrations/test_batched_background_runner.rb'
+    - 'lib/gitlab/database/query_analyzers/query_recorder.rb'
+    - 'lib/gitlab/gpg.rb'
+    - 'lib/gitlab/import_export/after_export_strategies/base_after_export_strategy.rb'
+    - 'lib/gitlab/import_export/recursive_merge_folders.rb'
+    - 'lib/gitlab/memory/upload_and_cleanup_reports.rb'
+    - 'lib/gitlab/setup_helper.rb'
+    - 'lib/tasks/gitlab/update_templates.rake'
+    - 'lib/tasks/tanuki_emoji.rake'
+    - 'qa/qa/git/repository.rb'
+    - 'qa/qa/runtime/browser.rb'
+    - 'spec/lib/bulk_imports/common/pipelines/lfs_objects_pipeline_spec.rb'
+    - 'spec/lib/bulk_imports/common/pipelines/uploads_pipeline_spec.rb'
+    - 'spec/lib/bulk_imports/projects/pipelines/design_bundle_pipeline_spec.rb'
+    - 'spec/lib/bulk_imports/projects/pipelines/repository_bundle_pipeline_spec.rb'
+    - 'spec/lib/gitlab/authorized_keys_spec.rb'
+    - 'spec/lib/gitlab/cleanup/project_uploads_spec.rb'
+    - 'spec/lib/gitlab/import_export/project/export_task_spec.rb'
+    - 'spec/lib/gitlab/import_export/uploads_manager_spec.rb'
+    - 'spec/lib/gitlab/usage_data_counters/hll_redis_counter_spec.rb'
+    - 'spec/services/bulk_imports/file_decompression_service_spec.rb'
+    - 'spec/services/bulk_imports/lfs_objects_export_service_spec.rb'
+    - 'spec/services/bulk_imports/repository_bundle_export_service_spec.rb'
+    - 'spec/services/bulk_imports/uploads_export_service_spec.rb'
+    - 'spec/support/database/query_recorder.rb'
+    - 'spec/tooling/rspec_flaky/report_spec.rb'
+    - 'tooling/rspec_flaky/report.rb'