omnibus-gitlab/CHANGELOG.md

Omnibus-gitlab changelog

The latest version of this file can be found at the master branch of the omnibus-gitlab repository.

16.11.1 (2024-04-24)

Fixed (1 change)

• Fix missing arguments when PostgreSQL upgrade times out

16.11.0 (2024-04-17)

Added (5 changes)

• Support optional grpc log level config for KAS (merge request)
• Support TLS for kas->kas communication in Omnibus (merge request)
• Unified Backups: Add gitlab-backup-cli to Omnibus (merge request)
• Accept multiple bind addresses in Redis config (merge request)
• Enable easy SELinux context fixes (merge request)

Fixed (2 changes)

• Fix patroni no longer working with update to ydiff 1.3 (merge request)
• Create git_data_dirs even if gitlab_rails is disabled (merge request)

Changed (14 changes)

• Update container-registry from to v3.92.0-gitlab (merge request)
• Bump gitlab-exporter to version 14.4.0 (merge request)
• Update prometheus from 2.51.0 to 2.51.2 (merge request)
• Update pgbouncer_exporter to 0.8.0 (merge request)
• Bump Mattermost to release 9.6.1 by @mvitale1989 (merge request)
• Bump builder image to 5.10.0 (merge request)
• Bump rubygems to version 3.5.7 (merge request)
• Allow routing rules to contain shard information (merge request)
• Bump exiftool to version 12.82 (merge request)
• Update prometheus from 2.50.1 to 2.51.0 (merge request)
• Fix typo in Python 3 builds for Amazon Linux 2023 (merge request)
• Auto upgrade single node installs to PostgreSQL 14 (merge request)
• Update exiftool/exiftool from 12.78 to 12.80 (merge request)
• Update exiftool/exiftool from 12.78 to 12.79 (merge request)

Security (1 change)

• Use February 2024 PostgreSQL patches

16.10.4 (2024-04-24)

No changes.

16.10.3 (2024-04-12)

Fixed (1 change)

• Fix patroni no longer working with update to ydiff 1.3 (merge request)

16.10.2 (2024-04-09)

No changes.

16.10.1 (2024-03-27)

Security (1 change)

• Use February 2024 PostgreSQL patches (merge request)

16.10.0 (2024-03-20)

Added (3 changes)

• Allow setting custom gitlab config for Gitaly (merge request)
• Add config support for container registry garbage collection by @fh1ch (merge request)
• Add active directory + smart card settings to gitlab.yml (merge request)

Fixed (2 changes)

• Add missing locales for compatibility (merge request)
• Fix when namespace_in_path is enabled and host URL is duplicated in URL (merge request)

Changed (22 changes)

• Bump exiftool to version 12.78 (merge request)
• Update prometheus from 2.49.1 to 2.50.1 (merge request)
• Update gitlab-org/container-registry from v3.89.0-gitlab to v3.90.0-gitlab (merge request)
• Update alertmanager from 0.26.0 to 0.27.0 (merge request)
• Update pgbouncer/pgbouncer from pgbouncer_1_22_0 to pgbouncer_1_22_1 (merge request)
• Update package signature dates to reflect GPG key extension (merge request)
• Update redis_exporter from 1.57.0 to 1.58.0 (merge request)
• Update gitlab-org/container-registry from v3.88.1-gitlab to v3.89.0-gitlab (merge request)
• Update consul from 1.16.5 to 1.16.6 (merge request)
• Bump omnibus-ctl to version 0.6.12 (merge request)
• Update https://git.code.sf.net/p/libpng/code from 1.6.42 to 1.6.43 (merge request)
• Update Go to 1.21.7 (merge request)
• Bump acme-client to 2.0.17 (merge request)
• Update pcre2 from 10.42 to 10.43 (merge request)
• Bump Mattermost to release 9.5.1 by @mvitale1989 (merge request)
• Update rubygems from 3.5.5 to 3.5.6 (merge request)
• Update exiftool/exiftool from 12.76 to 12.77 (merge request)
• Update gitlab-exporter from 14.2.0 to 14.3.0 (merge request)
• Consolidate SELinux policy into one module (merge request)
• Update consul from 1.16.4 to 1.16.5 (merge request)
• Bump pgbouncer to version 1.22.0 (merge request)
• Use gitlab-ruby-shadow gem instead of shadow source (merge request)

Deprecated (1 change)

• Deprecate 'omnibus_gitconfig' (merge request)

Removed (1 change)

• Remove Pi OS 12 release jobs (merge request)

Performance (1 change)

• Increase net.core.somaxconn default to 2048 (merge request)

Other (1 change)

• Update Patroni to 3.0.1 (merge request)

16.9.6 (2024-04-24)

No changes.

16.9.5 (2024-04-12)

Fixed (1 change)

• Fix patroni no longer working with update to ydiff 1.3 (merge request)

16.9.4 (2024-04-09)

No changes.

16.9.3 (2024-03-27)

Security (1 change)

• Use February 2024 PostgreSQL patches (merge request)

16.9.2 (2024-03-06)

Security (1 change)

• Mattermost Security Updates February 14, 2024 (merge request)

16.9.1 (2024-02-20)

No changes.

16.9.0 (2024-02-14)

Added (5 changes)

• Provide packages for Raspberry Pi 12 (merge request)
• Add support for using HTTP TLS client cert (merge request)
• Add cron job to process catalog resource sync events (merge request)
• Add support to configure rails db_extra_config_command (merge request)
• Add log to stdout option to gitlab-ctl registry import command (merge request)

Fixed (2 changes)

• Fix ruby-shadow not building on Ruby 3.2 (merge request)
• Ensure post upgrade steps are run after geo_pg_upgrade (merge request)

Changed (17 changes)

• Use Go 1.21 to build components (merge request)
• Update curl to 8.6.0 (merge request)
• Update Spamcheck to v0.3.2 (merge request)
• Update Mattermost to 9.4.2 by @antonis.stamatiou (merge request)
• Bump container-registry to version 3.88.1-gitlab (merge request)
• Bump exiftool to version 12.76 (merge request)
• Update https://git.code.sf.net/p/libpng/code from 1.6.40 to 1.6.42 (merge request)
• Prune unneeded gitlab-glfm-markdown precompiled libraries (merge request)
• Update zlib from 1.2.13 to 1.3.1 (merge request)
• Update redis_exporter from 1.56.0 to 1.57.0 (merge request)
• Update gitlab-org/build/omnibus-mirror/prometheus from 2.48.1 to 2.49.1 (merge request)
• Update acme-client from 2.0.15 to 2.0.16 (merge request)
• Update rubygems from 3.4.22 to 3.5.1 (merge request)
• Update gitlab-exporter from 14.1.0 to 14.2.0 (merge request)
• Bump exiftool to version 12.73 (merge request)
• Update Cinc/Ohai to 18.x series (merge request)
• Update redis/redis from 7.0.14 to 7.0.15 (merge request)

Deprecated (1 change)

• Deprecate Sidekiq min and max-concurrency (merge request)

Security (2 changes)

• Update PostgreSQL 13 and 14
• Update libxml2 from 2.10.4 to 2.12.3

16.8.7 (2024-04-12)

Fixed (1 change)

• Fix patroni no longer working with update to ydiff 1.3 (merge request)

16.8.6 (2024-04-09)

No changes.

16.8.5 (2024-03-27)

Security (1 change)

• Use February 2024 PostgreSQL patches (merge request)

16.8.4 (2024-03-06)

Security (1 change)

• Mattermost Security Updates February 14, 2024 (merge request)

16.8.3 (2024-02-20)

No changes.

16.8.2 (2024-02-07)

Security (1 change)

• Update PostgreSQL 13 and 14 (merge request)

16.8.1 (2024-01-24)

Security (2 changes)

• Update redis/redis from 7.0.14 to 7.0.15 (merge request)
• Update libxml2 from 2.10.4 to 2.12.3 (merge request)

16.8.0 (2024-01-17)

Added (2 changes)

• Add git-filter-repo (merge request)
• Add gitlab-ctl command for migrating to decomposed database setup (merge request)

Fixed (3 changes)

• Add support for custom port in namespace in path (merge request)
• Fix upgrade check comparison (merge request)
• Restart Gitaly when updating Gitlab-Shell token (merge request)

Changed (7 changes)

• Install faraday gem before other gem installations (merge request)
• GitLab 16.7 is a required upgrade stop for 16.8 and above. (merge request)
• Update gitlab-org/build/omnibus-mirror/redis_exporter from 1.54.0 to 1.56.0 (merge request)
• Update consul from 1.16 to 1.16.4 (merge request)
• Update go-crond from 23.2.0 to 23.12.0 (merge request)
• Update exiftool from 12.70 to 12.71 (merge request)
• Update container-registry from v3.87.0-gitlab to v3.88.0-gitlab (merge request)

Deprecated (1 change)

• Deprecate support for Ubuntu 18.04 (merge request)

Removed (2 changes)

• Stop building for OpenSUSE 15.4 (merge request)
• Stop sidekiq namespaced probe for gitlab-exporter (merge request)

16.7.7 (2024-03-06)

Security (1 change)

• Mattermost Security Updates February 14, 2024 (merge request)

16.7.6 (2024-02-20)

No changes.

16.7.5 (2024-02-07)

Security (1 change)

• Update PostgreSQL 13 and 14 (merge request)

16.7.4 (2024-01-24)

Security (2 changes)

• Update redis/redis from 7.0.14 to 7.0.15 (merge request)
• Update libxml2 from 2.10.4 to 2.12.3 (merge request)

16.7.3 (2024-01-13)

No changes.

16.7.2 (2024-01-10)

No changes.

16.7.1 (2023-12-23)

No changes.

16.7.0 (2023-12-20)

Added (9 changes)

• Add gitlab-ctl generate-secrets command (merge request)
• Add namespace_in_path parameter in GitLab.rb for GitLab Pages (merge request)
• Add 'use_wrapper' setting to Gitaly (merge request)
• Add Redis settings specific to Workhorse (merge request)
• Add registry-database import command to gitlab-ctl (merge request)
• Support external consul binary (merge request)
• Support external consul binary (merge request)
• Add auth-timeout flag in Gitlab Pages (merge request)
• Add registry-database migrate command to gitlab-ctl (merge request)

Fixed (1 change)

• gitlab-rails: Validate custom SSH settings (merge request)

Changed (20 changes)

• Update Mattermost to 9.3.0 by @mvitale1989 (merge request)
• Update gitlab-org/build/omnibus-mirror/prometheus from 2.48.0 to 2.48.1 (merge request)
• Default to PostgreSQL 14 for fresh installations (merge request)
• Bump bundled Ruby to 3.1.4 (merge request)
• Update curl/curl from curl-8_4_0 to curl-8_5_0 (merge request)
• Update container-registry from v3.86.2-gitlab to v3.87.0-gitlab (merge request)
• Run gitaly with 'serve' subcommand (merge request)
• Update chef from 17.10.0 to 17.10.95 (merge request)
• Update exiftool from 12.69 to 12.70 (merge request)
• Bump Mattermost to 9.2.3 by @mvitale1989 (merge request)
• feat: Update Mattermost to 9.2.2 by @antonis.stamatiou (merge request)
• Update prometheus from 2.47.2 to 2.48.0 (merge request)
• Update rubygems from 3.4.21 to 3.4.22 (merge request)
• Update bundler from 2.4.13 to 2.4.22 (merge request)
• Bump container-registry to version 3.86.2-gitlab (merge request)
• Update ohai from 17.9.0 to 17.9.4 (merge request)
• Update node_exporter from 1.6.1 to 1.7.0 (merge request)
• Update gitlab-exporter from 13.4.1 to 13.5.0 (merge request)
• Use XZ compression for RPM packages (merge request)
• Update Go from 1.20.10 to 1.20.11 (merge request)

Security (2 changes)

• Mattermost Security Update
• Update PostgreSQL 13 and 14

16.6.7 (2024-02-07)

Security (1 change)

• Update PostgreSQL 13 and 14 (merge request)

16.6.6 (2024-01-24)

Security (2 changes)

• Update redis/redis from 7.0.14 to 7.0.15 (merge request)
• Update libxml2 from 2.10.4 to 2.12.3 (merge request)

16.6.5 (2024-01-13)

No changes.

16.6.4 (2024-01-11)

No changes.

16.6.3 (2023-12-23)

No changes.

16.6.2 (2023-12-13)

No changes.

16.6.1 (2023-11-30)

Security (2 changes)

• Mattermost Security Update (merge request)
• Update PostgreSQL 13 and 14 (merge request)

16.6.0 (2023-11-15)

Added (4 changes)

• Add support for new pgbouncer settings (merge request)
• Add support for go-crond flags (merge request)
• Add support for configuring ClickHouse databases (merge request)
• Add Redis TLS settings for KAS (merge request)

Fixed (1 change)

• Restart NGINX on version change (merge request)

Changed (11 changes)

• Update consul from 1.16.2 to 1.16.3 (merge request)
• Bump container-registry to version 3.86.1 (merge request)
• Consolidate Puma low-level handler (merge request)
• Update postgres_exporter from 0.14.0 to 0.15.0 (merge request)
• Update exiftool from 12.67 to 12.68 (merge request)
• Update pgbouncer from 1.18 to 1.21 (merge request)
• Bump rubygems to version 3.4.21 (merge request)
• Update redis from 7.0.13 to 7.0.14 (merge request)
• Bump prometheus to version 2.47.2 (merge request)
• Escape special characters in postgresql password (merge request)
• Enable modifying Redis settings for KAS separately (merge request)

Security (1 change)

• Update pcre2 from 10.40 to 10.42

Other (1 change)

• Update Mattermost to 9.1.0 by @akis.maziotis (merge request)

16.5.8 (2024-01-24)

No changes.

16.5.7 (2024-01-13)

No changes.

16.5.6 (2024-01-11)

No changes.

16.5.5 (2023-12-23)

No changes.

16.5.4 (2023-12-13)

No changes.

16.5.3 (2023-11-30)

Security (3 changes)

• Mattermost Security Update (merge request)
• Update PostgreSQL 13 and 14 (merge request)
• Update pcre2 from 10.40 to 10.42 (merge request)

16.5.2 (2023-11-14)

Changed (1 change)

• Update postgres_exporter from 0.14.0 to 0.15.0 (merge request)

16.5.1 (2023-10-30)

No changes.

16.5.0 (2023-10-20)

Added (3 changes)

• Add settings to configure cronjob to sync finished builds to ClickHouse (merge request)
• Add Redis TLS settings for Rails (merge request)
• Add Silent mode option to Geo promotion command (merge request)

Fixed (7 changes)

• Make gitlab-redis-cli work when running behind SSL (merge request)
• Make get-redis-master command work when running behind SSL (merge request)
• Support running Redis only over SSL (merge request)
• Suppress Ruby experimental warning messages for Puma, Sidekiq (merge request)
• Fix unintialized constant exception handler error (merge request)
• The gitlab-kas runit service should not be restarted in chef cookbooks (merge request)
• Make Puma low-level handler return recommended status code (merge request)

Changed (13 changes)

• Drop legacy unmigrated data checks (merge request)
• Update registry to v3.85.0-gitlab (merge request)
• Update gitlab-exporter from 13.2.0 to 13.4.1 (merge request)
• Update Go from 1.20.8 to 1.20.10 (merge request)
• Bump acme-client to version 2.0.15 (merge request)
• Bump consul to version 1.16.2 (merge request)
• Update container-registry from v3.83.0-gitlab to v3.84.0-gitlab (merge request)
• Update exiftool from 12.65 to 12.67 (merge request)
• Update Golang from 1.20.7 to 1.20.8 (merge request)
• Update postgres_exporter from 0.13.2 to 0.14.0 (merge request)
• Update openssl from 1.1.1v to 1.1.1w (merge request)
• Use XZ compression for DEB packages (merge request)
• Update gitlab-org/build/omnibus-mirror/alertmanager from 0.25.0 to 0.26.0 (merge request)

Deprecated (1 change)

• Add deprecation message for openSUSE 15.4 (merge request)

Security (5 changes)

• Apply CVE-2023-44487 patch to NGINX (merge request)
• Update curl to v8.4.0 (merge request)
• Mattermost Security Updates September 8, 2023
• Consul RCE vulnerability enable-script-checks
• ExifTool - Infinite loop when parsing BigTIFF files

Other (1 change)

• Update Mattermost to 9.0.0 by @akis.maziotis (merge request)

16.4.5 (2024-01-11)

No changes.

16.4.4 (2023-12-13)

No changes.

16.4.3 (2023-11-30)

Security (3 changes)

• Mattermost Security Update (merge request)
• Update PostgreSQL 13 and 14 (merge request)
• Update pcre2 from 10.40 to 10.42 (merge request)

16.4.2 (2023-10-30)

Security (2 changes)

• Apply CVE-2023-44487 patch to NGINX (merge request)
• Update curl to v8.4.0 (merge request)

16.4.1 (2023-09-28)

Security (3 changes)

• Mattermost Security Updates September 8, 2023 (merge request)
• Consul RCE vulnerability enable-script-checks (merge request)
• ExifTool - Infinite loop when parsing BigTIFF files (merge request)

16.4.0 (2023-09-21)

Added (3 changes)

• Provide packages for OpenSUSE Leap 15.5 (merge request)
• Add config support for container registry database (merge request)
• Provide option to configure a separate workhorse redis (merge request)

Fixed (5 changes)

• Ensure postgresql_new is included in GitLab CE (merge request)
• Remove redundant postgres exporter custom queries (merge request)
• Suppress Ruby experimental features warning messages (merge request)
• Skip database validation during asset compile (merge request)
• Fix reconfigure failing when Sentinel TLS is only enabled (merge request)

Changed (15 changes)

• Bump libtiff to version 4.6.0 (merge request)
• Bump container-registry to version 3.83.0 (merge request)
• Bump redis to version 7.0.13 (merge request)
• Require upgrade stop at 16.3 (merge request)
• Update FIPS Go to 1.20.7 (merge request)
• Update redis_exporter from 1.53.0 to 1.54.0 (merge request)
• Update Prometheus from 2.46.0 to 2.47.0 (merge request)
• Remove libre2 from build (merge request)
• Add clean up steps in preparation for re2 v2.0 gem (merge request)
• Drop DISABLE_PUMA_NAKAYOSHI_FORK from Puma config (merge request)
• Update redis_exporter from 1.52.0 to 1.53.0 (merge request)
• Update Mattermost to 8.1 by @mvitale1989 (merge request)
• Update builder to use nodejs 18.17.2 (merge request)
• Update builder Go version (merge request)
• Update rubygems/rubygems from 3.4.18 to 3.4.19 (merge request)

Removed (2 changes)

• Remove reference to Grafana service in cookbook (merge request)
• Remove Nginx from monitoring_role (merge request)

Other (1 change)

• Enable dual namespace polling for sidekiq probe in gitlab-exporter (merge request)

16.3.7 (2024-01-11)

No changes.

16.3.6 (2023-10-30)

Security (2 changes)

• Apply CVE-2023-44487 patch to NGINX (merge request)
• Update curl to v8.4.0 (merge request)

16.3.5 (2023-09-28)

Security (3 changes)

• Mattermost Security Updates September 8, 2023 (merge request)
• Consul RCE vulnerability enable-script-checks (merge request)
• ExifTool - Infinite loop when parsing BigTIFF files (merge request)

16.3.4 (2023-09-18)

No changes.

16.3.3 (2023-09-12)

No changes.

16.3.2 (2023-09-05)

No changes.

16.3.1 (2023-08-31)

No changes.

16.3.0 (2023-08-21)

Added (1 change)

• Add contributed protonmail settings (merge request)

Fixed (4 changes)

• Restore support for SHA-1 RSA cryptography by @V0V4N (merge request)
• Disable Grafana service after dropping it (merge request)
• Set proxy_http_version v1.0 for health monitoring endpoints (merge request)
• Ensure the consul home directory has execute flags set (merge request)

Changed (13 changes)

• Update gitlab-exporter from 13.1.0 to 13.2.0 (merge request)
• KAS: increase poll period (merge request)
• Update Prometheus from 2.45.0 to 2.46.0 (merge request)
• Update nginx-module-vts from 0.1.18 to 0.2.0 (merge request)
• Bump rubygems to 3.4.18 (merge request)
• Bump node_exporter to version 1.6.1 (merge request)
• Bump openssl to version 1.1.1v (merge request)
• Bump container-registry to v3.79.0 (merge request)
• Update mattermost from 7.10.4 to 8.0.1 by @antonis.stamatiou (merge request)
• Update gitlab-org/build/omnibus-mirror/redis_exporter from 1.51.0 to 1.52.0 (merge request)
• Toggle recommend_pg_upgrade to false for now (merge request)
• Update gitlab-org/build/omnibus-mirror/postgres_exporter from 0.13.1 to 0.13.2 (merge request)
• Add Redis to deps.yml (merge request)

Removed (1 change)

• Drop Grafana and related code from the package (merge request)

Security (1 change)

• Update libxml2 to 2.10.4

Other (1 change)

• Enable cache to configure for Redis Cluster (merge request)

16.2.9 (2024-01-11)

No changes.

16.2.8 (2023-09-28)

Security (2 changes)

• Consul RCE vulnerability enable-script-checks (merge request)
• ExifTool - Infinite loop when parsing BigTIFF files (merge request)

16.2.7 (2023-09-18)

No changes.

16.2.6 (2023-09-12)

No changes.

16.2.5 (2023-08-31)

Security (1 change)

• Update Mattermost to 7.10.5 (merge request)

16.2.4 (2023-08-11)

Fixed (1 change)

• Set proxy_http_version v1.0 for health monitoring endpoints (merge request)

16.2.3 (2023-08-03)

No changes.

16.2.2 (2023-08-01)

Changed (1 change)

• Toggle recommend_pg_upgrade to false for now

Security (2 changes)

• Mattermost July 2023 security updates (merge request)
• Update libxml2 to 2.10.4 (merge request)

16.2.1 (2023-07-25)

No changes.

16.2.0 (2023-07-21)

Added (3 changes)

• Add PostgreSQL 14 to the package (merge request)
• Add Oracle Linux 9 package (merge request)
• Add option to limit maximum number of open files by Redis (merge request)

Fixed (2 changes)

• Set proxy_http_version 1.1 in nginx configuration by @drmoose (merge request)
• Fix errors on GEO secondary pg-upgrade (merge request)

Changed (16 changes)

• Bump Redis version to 7.0.12 (merge request)
• Bump Python to 3.9.17 (merge request)
• Bump Go build version to 1.20.5 (merge request)
• Update Mattermost to 7.10.3 by @akis.maziotis (merge request)
• Update postgres_exporter from 0.13.0 to 0.13.1 (merge request)
• Bump pgbouncer_exporter to version 0.7.0 (merge request)
• Bump redis_exporter to version 1.51.0 (merge request)
• Bump postgres_exporter to version 0.13.0 (merge request)
• Bump node_exporter to version 1.6.0 (merge request)
• Bump prometheus to version 2.45.0 (merge request)
• Bump rubygems to version 3.4.14 (merge request)
• Bump OpenSSL to version 1.1.1u (merge request)
• Bump acme-client to version 2.0.14 (merge request)
• Bump gitlab-exporter to version 13.1.0 (merge request)
• Bump libpng to version 1.6.40 (merge request)
• Bump goland to 1.19.9 (merge request)

Other (1 change)

• Remove GITLAB_METRICS_EXPORTER_VERSION file (merge request)

16.1.6 (2024-01-11)

No changes.

16.1.5 (2023-08-31)

Security (2 changes)

• Update Mattermost to 7.10.5 (merge request)
• Update openssl/openssl from 1t to 1u (merge request)

16.1.4 (2023-08-03)

No changes.

16.1.3 (2023-08-01)

Fixed (1 change)

• Set proxy_http_version 1.1 in nginx configuration

Security (3 changes)

• Mattermost July 2023 security updates (merge request)
• Update redis to 6.2.13 (merge request)
• Update libxml2 to 2.10.4 (merge request)

16.1.2 (2023-07-04)

No changes.

16.1.1 (2023-06-28)

No changes.

16.1.0 (2023-06-21)

Added (4 changes)

• Build packages for Debian 12 (merge request)
• Support password authentication for Redis Sentinel (merge request)
• Add support for enabling requirepass in Sentinel configuration (merge request)
• Support Puma key_password_command for SSL key decryption (merge request)

Fixed (2 changes)

• Backport Ruby upstream patch to fix seg faults in libxml2/Nokogiri (merge request)
• Add workaround for gprc native extension not compiling (merge request)

Changed (14 changes)

• Update gitlab-org/gitlab-exporter from 12.1.1 to 13.0.3 (merge request)
• Bump libtiff/libtiff to 4.5.1 (merge request)
• Build PgBouncer from Git source (merge request)
• Bump libevent to 2.1.12 (merge request)
• Populate ['geo_secondary']['db_host'] from ['geo-postgresql']['dir'] (merge request)
• Bump libjpeg-turbo to version 2.1.5.1 (merge request)
• Fix broken link to LDAP docs (merge request)
• Update tomlib to v0.6.0 to correctly escape special characters (merge request)
• Update gitlab-org/container-registry from v3.72.0-gitlab to v3.76.0-gitlab (merge request)
• Bump consul to v1.14 (merge request)
• Bump nginx to 1.24.0 (merge request)
• Fix Chef patches to work with any Ruby version (merge request)
• Drop reinstall of google-protobuf and use precompiled gems (merge request)
• Make ci_runners_stale_machines_cleanup_worker job run more frequently (merge request)

Removed (1 change)

• Remove old Gitaly configuration remapping (merge request)

Security (2 changes)

• Bump PostgreSQL version to 12.14 and 13.11
• Bump ncurses version to 6.4-20230225

Other (1 change)

• Update Mattermost to 7.10.2 by @akis.maziotis (merge request)

16.0.8 (2023-08-01)

Security (3 changes)

• Mattermost July 2023 security updates (merge request)
• Update redis to 6.2.13 (merge request)
• Update libxml2 to 2.10.4 (merge request)

16.0.7 (2023-07-04)

No changes.

16.0.6 (2023-06-28)

Security (1 change)

• Mattermost security updates May 17, 2023 (merge request)

16.0.5 (2023-06-16)

No changes.

16.0.4 (2023-06-08)

No changes.

16.0.3 (2023-06-06)

No changes.

16.0.2 (2023-06-05)

Security (2 changes)

• Bump PostgreSQL version to 12.14 and 13.11 (merge request)
• Bump ncurses version to 6.4-20230225 (merge request)

16.0.1 (2023-05-22)

No changes.

16.0.0 (2023-05-18)

Added (6 changes)

• Add AlmaLinux 9 packages (merge request)
• Add SMTP timeout configuration options (merge request)
• Add EPL 2.0 as acceptable license (merge request)
• Add ability to set log directory group for runit managed services (merge request)
• Allow configuring an embedding database (merge request)
• Add GITLAB_PRE_RECONFIGURE_SCRIPT variable support to Docker image by @ergoz (merge request)

Fixed (4 changes)

• Update Redis URL implementation to work with Ruby 3.1+ (merge request)
• EL Stream releases have different VERSION strings (merge request)
• Make it possible to run Puma v6 (merge request)
• Symlink the public ssh key to /ets/ssh folder (merge request)

Changed (10 changes)

• Bump rubygems to 3.4.13 (merge request)
• Validate that SMTP settings do not enable both TLS and STARTTLS (merge request)
• Default to two database connections i.e. main and ci (merge request)
• Prune extraneous precompiled shared libraries in gems (merge request)
• Update libre2 to 2023-03-01 (merge request)
• Bump container-registry version to 3.72.0 (merge request)
• Build use golang 1.19.8 (merge request)
• Update RubyGems to v3.4.12 (merge request)
• Make 15.11 minimum required version to upgrade to 16.0 (merge request)
• Remove gitaly-ruby build (merge request)

Deprecated (12 changes)

• Document Grafana deprecation (merge request)
• Turn off Grafana unless forced (merge request)
• Deprecate usage of node['gitlab']['web-server'] in gitlab.rb (merge request)
• Deprecate usage of node['gitlab']['storage-check'] in gitlab.rb (merge request)
• Deprecate usage of node['gitlab']['prometheus-monitoring'] in gitlab.rb (merge request)
• Deprecate usage of node['gitlab']['omnibus-gitconfig'] in gitlab.rb (merge request)
• Deprecate usage of node['gitlab']['manage-storage-directories'] (merge request)
• Deprecate usage of node['gitlab']['manage-accounts'] in gitlab.rb (merge request)
• Deprecate usage of node['gitlab']['high-availability'] in gitlab.rb (merge request)
• Deprecate usage of node['gitlab']['gitlab-ci'] in gitlab.rb (merge request)
• Deprecate usage of node['gitlab']['*-external-url'] in gitlab.rb (merge request)
• gitaly: Remove gitaly-ruby configuration (merge request)

Removed (5 changes)

• Remove old Praefect configuration remapping (merge request)
• Disable Consul telemetry compatibility (merge request)
• Remove select2 from software list (merge request)
• Remove puma_worker_killer (merge request)
• Remove rails 'default_can_create_group' setting (merge request)

Security (2 changes)

• Patch Openssl for CVE-2023-0464
• Patch Grafana against session cookie vulnerability and CVE-2023-1410

Other (5 changes)

• Fix broken link in GitLab 15 docs by @felix.divo (merge request)
• Use Ubuntu 22.04 as base for the GitLab Docker image. (merge request)
• Postpone cinc EOL message (merge request)
• Drop bundler software definition (merge request)
• Update Mattermost to 7.10.0 by @akis.maziotis (merge request)

15.11.13 (2023-07-27)

No changes.

15.11.12 (2023-07-14)

No changes.

15.11.11 (2023-07-04)

No changes.

15.11.10 (2023-06-28)

Security (1 change)

• Mattermost security updates May 17, 2023 (merge request)

15.11.9 (2023-06-15)

No changes.

15.11.8 (2023-06-06)

No changes.

15.11.7 (2023-06-05)

Security (3 changes)

• Mattermost Security Updates April 27, 2023 (merge request)
• Bump PostgreSQL version to 12.14 and 13.11 (merge request)
• Bump ncurses version to 6.4-20230225 (merge request)

15.11.6 (2023-05-24)

No changes.

15.11.5 (2023-05-19)

No changes.

15.11.4 (2023-05-16)

Added (1 change)

• Add SMTP timeout configuration options (merge request)

Changed (1 change)

• Validate that SMTP settings do not enable both TLS and STARTTLS (merge request)

15.11.3 (2023-05-10)

No changes.

15.11.2 (2023-05-03)

No changes.

15.11.1 (2023-05-01)

Security (3 changes)

• Mattermost Security Updates April 2023 (merge request)
• Patch Openssl for CVE-2023-0464 (merge request)
• Patch Grafana against session cookie vulnerability and CVE-2023-1410 (merge request)

15.11.0 (2023-04-21)

Added (2 changes)

• Enable autoupgrade to PostgreSQL 13 (merge request)
• Add configurable startup delay to Redis (merge request)

Fixed (2 changes)

• Add cleanup of disabled consul watcher files (merge request)
• Fix suggested_reviewers run when rails is disabled (merge request)

Changed (12 changes)

• Add support for the workhorse google client (merge request)
• Bump Container Registry to v3.71.0-gitlab (merge request)
• Update prometheus from 2.38.0 to 2.43.0+stringlabels (merge request)
• Allow external GitLab URL configuration for KAS (merge request)
• Drop mail_room as a separate dependency (merge request)
• Bump Ruby to 3.0.6 (merge request)
• Bump container-registry to v3.70.0-gitlab (merge request)
• Add a logfiles_helper to handle svlogd and log directories (merge request)
• Update PgBouncer to v1.18.0 (merge request)
• Add patches to support Ruby 3.1 and 3.2 (merge request)
• Update Mattermost to 7.9.1 by @antonis.stamatiou (merge request)
• Update gitlab-mail_room to v0.0.23 (merge request)

Security (3 changes)

• Update curl to 8.0.1 to resolve February CVEs
• Update redis to 6.2.11
• Mattermost March 2023 security updates

15.10.8 (2023-06-05)

Added (1 change)

• Add SMTP timeout configuration options

Changed (1 change)

• Validate that SMTP settings do not enable both TLS and STARTTLS

Security (3 changes)

• Mattermost Security Updates April 27, 2023 (merge request)
• Bump PostgreSQL version to 12.14 and 13.11 (merge request)
• Bump ncurses version to 6.4-20230225 (merge request)

15.10.7 (2023-05-10)

No changes.

15.10.6 (2023-05-03)

No changes.

15.10.5 (2023-05-01)

Security (3 changes)

• Mattermost Security Updates April 2023 (merge request)
• Patch Openssl for CVE-2023-0464 (merge request)
• Patch Grafana against session cookie vulnerability and CVE-2023-1410 (merge request)

15.10.4 (2023-04-21)

No changes.

15.10.3 (2023-04-14)

Fixed (1 change)

• Fix suggested_reviewers run when rails is disabled (merge request)

15.10.2 (2023-04-05)

No changes.

15.10.1 (2023-03-30)

Security (3 changes)

• Mattermost March 2023 security updates (merge request)
• Update redis to 6.2.11 (merge request)
• Update curl to 8.0.1 to resolve February CVEs (merge request)

15.10.0 (2023-03-21)

Added (4 changes)

• Added duo auth config (merge request)
• Add cpu_quota_us Gitaly config (merge request)
• Make geo-logcursor group configurable (merge request)
• Introduce support for Redis Cluster and specifying acl user (merge request)

Fixed (2 changes)

• Fix SSH host key generation on CentOS 7 (merge request)
• Disable proxy cache for api urls (merge request)

Changed (15 changes)

• Turn on the pg upgrade recommendation notice (merge request)
• Bump Container Registry to v3.69.0-gitlab (merge request)
• Disable zstd decompression with libmagic (merge request)
• Omit redis replicaof config by default when HA is enabled. (merge request)
• Update docutils from 0.16 to 0.19 (merge request)
• Support dedicated sub-domain for kas (merge request)
• Bump OpenSSL to version 1.1.1t (merge request)
• Bump go-crond to version 23.2.0 (merge request)
• Bump container-registry to 3.68.0 (merge request)
• Bump node_exporter to version 1.5.0 (merge request)
• Bump chef-acme to 4.1.6 (merge request)
• Update Mattermost to 7.8.1 by @antonis.stamatiou (merge request)
• Expand allowed gitlab_kas['internal_api_listen_network'] (merge request)
• Update Gitaly and Praefect in configuration template (merge request)
• Match Gitaly configuration format in Omnibus (merge request)

Deprecated (1 change)

• Deprecate legacy Gitaly configuration options (merge request)

Security (1 change)

• Update libksba/gnupg to 1.6.3/2.2.41

15.9.8 (2023-05-10)

No changes.

15.9.7 (2023-05-03)

No changes.

15.9.6 (2023-05-01)

Security (3 changes)

• Mattermost Security Updates April 2023 (merge request)
• Patch Openssl for CVE-2023-0464 (merge request)
• Patch Grafana against session cookie vulnerability and CVE-2023-1410 (merge request)

15.9.5 (2023-04-21)

Fixed (1 change)

• Fix suggested_reviewers run when rails is disabled (merge request)

15.9.4 (2023-03-30)

Security (4 changes)

• Update openssl/openssl from 1s to 1t (merge request)
• Mattermost March 2023 security updates (merge request)
• Update redis to 6.2.11 (merge request)
• Update curl to 8.0.1 to resolve February CVEs (merge request)

15.9.3 (2023-03-09)

No changes.

15.9.2 (2023-03-02)

Security (1 change)

• Update libksba/gnupg to 1.6.3/2.2.41 (merge request)

15.9.1 (2023-02-23)

No changes.

15.9.0 (2023-02-21)

Added (5 changes)

• Provide packages for Amazon Linux 2022 (merge request)
• Add gitlab-sshd configuration support (merge request)
• Add redis_yml_override setting (merge request)
• Add ci_runners_stale_machines_cleanup_worker setting (merge request)
• Allow configuring repository cache redis instance (merge request)

Changed (20 changes)

• Match Praefect's configuration format in Omnibus (merge request)
• Use first entry in allowed_hosts, if set, for healthcheck (merge request)
• Mark praefect configuration as sensitive (merge request)
• Mark gitaly configuration as sensitive (merge request)
• Update acme-client to 2.0.13 (merge request)
• Update redis_exporter to version 1.45.0 (merge request)
• Update Mattermost to 7.7.1 by @antonis.stamatiou (merge request)
• Bump Omnibus builder image to 4.5.0 (merge request)
• Update gitlab-org/gitlab-exporter from 12.1.0 to 12.1.1 (merge request)
• Update alertmanager to version 0.25.0 (merge request)
• Update gitlab-exporter to version 12.1.0 (merge request)
• Update logrotate to version 3.21.0 (merge request)
• Update gitlab-org/container-registry to v3.66.0-gitlab (merge request)
• Update libpng version to 1.6.39 (merge request)
• Update libtiff to 4.5.0 (merge request)
• Match Praefect's configuration format in Omnibus (merge request)
• Use shellwords to escape special characters (merge request)
• Use config file for Pages Headers parameter instead of command line (merge request)
• Update gitlab-org/container-registry from v3.63.0 to v3.65.0 (merge request)
• Change ci_runner_versions_reconciliation_worker job to run daily (merge request)

Deprecated (2 changes)

• Deprecate legacy Praefect configuration options (merge request)
• Deprecate queue_selector and negate options (merge request)

Security (1 change)

• Update Python3 version to 3.9.16

Other (3 changes)

• Add docs for troubleshooting connection problems due to two connections (merge request)
• Corrects the example for KAS K8S proxy URL by @zeeZ (merge request)
• Use templatesymlink :delete to cleanup redis config (merge request)

15.8.6 (2023-04-18)

Fixed (1 change)

• Fix suggested_reviewers run when rails is disabled (merge request)

15.8.5 (2023-03-30)

Security (3 changes)

• Update openssl/openssl from 1s to 1t (merge request)
• Update redis to 6.2.11 (merge request)
• Update curl to 8.0.1 to resolve February CVEs (merge request)

15.8.4 (2023-03-02)

Security (1 change)

• Update libksba/gnupg to 1.6.3/2.2.41 (merge request)

15.8.3 (2023-02-15)

No changes.

15.8.2 (2023-02-10)

Security (1 change)

• Update Python3 version to 3.9.16 (merge request)

15.8.1 (2023-01-30)

No changes.

15.8.0 (2023-01-20)

Added (1 change)

• Add secret and config for Suggested Reviewers (merge request)

Fixed (2 changes)

• Revert dropping of Ominbus gitconfig default values (merge request)
• Update curl to 7.87.0 (merge request)

Changed (4 changes)

• Bump PostgreSQL max connections to 500 (merge request)
• Raise an error when initial root password is too short (merge request)
• Update container registry to v3.63.0-gitlab (merge request)
• Update gitlab-org/container-registry from v3.61.0-gitlab to v3.62.0-gitlab (merge request)

Deprecated (1 change)

• Deprecate openSUSE 15.3 (merge request)

Removed (2 changes)

• Drop default values for omnibus-gitconfig (merge request)
• Drop default values for omnibus-gitconfig (merge request)

Security (2 changes)

• Bump Redis version to 6.2.8
• Update logrotate to 3.20.1

Other (2 changes)

• Update gpgme dependencies to match ruby-gpgme dependencies (merge request)
• Update Mattermost to 7.5.2 by @akis.maziotis (merge request)

15.7.9 (2023-04-20)

No changes.

15.7.8 (2023-03-02)

Security (1 change)

• Update libksba/gnupg to 1.6.3/2.2.41 (merge request)

15.7.7 (2023-02-10)

Security (1 change)

• Update Python3 version to 3.9.16 (merge request)

15.7.6 (2023-01-30)

Security (1 change)

• Update Mattermost to December 2022 release (merge request)

15.7.5 (2023-01-12)

No changes.

15.7.4 (2023-01-12)

No changes.

15.7.3 (2023-01-11)

No changes.

15.7.2 (2023-01-09)

Security (2 changes)

• Bump Redis version to 6.2.8 (merge request)
• Update logrotate to 3.20.1 (merge request)

15.7.1 (2023-01-05)

No changes.

15.7.0 (2022-12-21)

Added (3 changes)

• praefect: Add configuration for graceful_stop_timeout (merge request)
• Provide packages for openSUSE Leap 15.4 (merge request)
• Expose missing gitlab.yml settings in gitlab.rb by @pm9551 (merge request)

Fixed (2 changes)

• Ensure Workhorse is built in FIPS mode (merge request)
• gitaly: Allow passing gitconfig as separate section, subsection and key (merge request)

Changed (5 changes)

• Update Ruby to 2.7.7 and 3.0.5 (merge request)
• Set Sidekiq default max concurrency to 20 (merge request)
• Update to libpng 1.6.38 (merge request)
• Update container-registry from to v3.61.0-gitlab (merge request)
• Update openssl from 1q to 1s (merge request)

Security (5 changes)

• Update zlib to 1.2.13
• Bump Ruby version to 2.7.6
• Bump ncurses to 6.3-20220416 to patch against CVE-2022-2945
• Update xmlsoft/libxml2 to version 2.10.3
• Upgrade haxx/curl to 7.86.0

Other (1 change)

• Update Mattermost to 7.5.1 by @akis.maziotis (merge request)

15.6.8 (2023-02-10)

Security (1 change)

• Update Python3 version to 3.9.16 (merge request)

15.6.7 (2023-01-30)

Fixed (1 change)

• Ensure Workhorse is built in FIPS mode

Security (1 change)

• Update Mattermost to December 2022 release (merge request)

15.6.6 (2023-01-12)

Security (1 change)

• Allow GIT_REPO_URL to be overridden for self managed releases [15.6] (merge request)

15.6.5 (2023-01-12)

No changes.

15.6.4 (2023-01-09)

Security (3 changes)

• Bump Redis version to 6.2.8 (merge request)
• Update logrotate to 3.20.1 (merge request)
• Update curl to 7.87.0 (merge request)

15.6.3 (2022-12-21)

No changes.

15.6.2 (2022-12-05)

Fixed (1 change)

• gitaly: Fix migration of gitconfig with subsections (merge request)

15.6.1 (2022-11-30)

Security (5 changes)

• Update zlib to 1.2.13 (merge request)
• Bump ncurses to 6.3-20220416 to patch against CVE-2022-2945 (merge request)
• Bump Ruby version to 2.7.6 (merge request)
• Upgrade haxx/curl to 7.86.0 (merge request)
• Update xmlsoft/libxml2 to version 2.10.3 (merge request)

15.6.0 (2022-11-21)

Fixed (3 changes)

• Apply proxy_custom_buffer_size option to API location as well (merge request)
• Fixed error logging for geo-replication-(pause|resume) by @m.baur (merge request)
• Conditionally enable FIPS auto-detection (merge request)

Changed (4 changes)

• Update gitlab-exporter from 11.19.0 to 12.0.0 (merge request)
• Update gitlab-org/container-registry from v3.60.1-gitlab to v3.60.2-gitlab (merge request)
• Bump Container Registry to v3.60.1-gitlab (merge request)
• Bump rspec and friends to 3.11 in omnibus (merge request)

Security (2 changes)

• Upgrade curl to 7.85.0
• Upgrade pcre2 to 10.40

Other (2 changes)

• Add Puma on_worker_shutdown hook (merge request)
• Update Mattermost to 7.4.0 by @akis.maziotis (merge request)

15.5.9 (2023-01-12)

Security (1 change)

• Allow GIT_REPO_URL to be overridden for self managed releases [15.5] (merge request)

15.5.8 (2023-01-12)

No changes.

15.5.7 (2023-01-09)

Security (4 changes)

• Mattermost October 2022 Security Updates (merge request)
• Bump Redis version to 6.2.8 (merge request)
• Update logrotate to 3.20.1 (merge request)
• Update curl to 7.87.0 (merge request)

15.5.6 (2022-12-07)

Fixed (1 change)

• gitaly: Fix migration of gitconfig with subsections (merge request)

15.5.5 (2022-11-30)

Security (7 changes)

• Bump PostgreSQL versions to 12.12 and 13.8 (merge request)
• Bump rsync to 3.2.7 (merge request)
• Update zlib to 1.2.13 (merge request)
• Bump ncurses to 6.3-20220416 to patch against CVE-2022-2945 (merge request)
• Bump Ruby version to 2.7.6 (merge request)
• Upgrade haxx/curl to 7.86.0 (merge request)
• Update xmlsoft/libxml2 to version 2.10.3 (merge request)

15.5.4 (2022-11-11)

No changes.

15.5.3 (2022-11-07)

Changed (1 change)

• Bump Container Registry to v3.60.1-gitlab (merge request)

15.5.2 (2022-11-02)

Security (2 changes)

• Upgrade pcre2 to 10.40 (merge request)
• Upgrade curl to 7.85.0 (merge request)

15.5.1 (2022-10-24)

No changes.

15.5.0 (2022-10-21)

Added (7 changes)

• Add Raspberry Pi Bullseye to check-packages (merge request)
• Add microsoft_graph_mailer settings (merge request)
• Provide packages for RaspberryPi OS 11 Bullseye (merge request)
• Support for 'track-repositories' Praefect command (merge request)
• Provide packages for Ubuntu 22.04 (merge request)
• Provide FIPS packages for Amazon Linux 2 (merge request)
• Support specifying ssl_password_file in nginx conf (merge request)

Fixed (5 changes)

• Extend and enhance SELinux distro support (merge request)
• Update custom cop rule as per updating RuboCop to v1 (merge request)
• Patch nginx-module-vts to compile with gcc 11 (merge request)
• Fix Ruby MD5 not always being available in FIPS mode (merge request)
• Update gitlab-styles from 7.1.0 to 9.0.0 (merge request)

Changed (16 changes)

• Update webdevops/go-crond from to 22.9.1 (merge request)
• Drop exclusion of mysql group from gitlab-rails building (merge request)
• Add exporters to deps.yml (merge request)
• Update prometheus to v2.38.0 (merge request)
• Update postgres-exporter to v0.11.1 (merge request)
• Allow output of Rails migrations in reconfigure step (merge request)
• Update libtensorflow_lite to version 2.6.0 (merge request)
• Update alertmanager to v0.24.0 (merge request)
• Update pgbouncer-exporter to v0.5.1 (merge request)
• Update redis-exporter to v1.44.0 (merge request)
• Update node-exporter to v1.4.0 (merge request)
• Exclude Spamcheck libraries from build (merge request)
• Add timeout options for reconfigure run as part of pg-upgrade by @zhzhang93 (merge request)
• Compile jemalloc with Ruby by default (merge request)
• Remove python library whl files from package (merge request)
• Allow Chef FIPS auto-detection (merge request)

Deprecated (2 changes)

• Deprecate gitlab_rails['gitlab_default_can_create_group'] setting (merge request)
• Praefect: Deprecate DB metrics configuration (merge request)

Security (2 changes)

• Pass necessary headers on accessing healthcheck endpoints
• Apply Grafana CVE-2022-3110 patch

Other (3 changes)

• Update python3 from 3.9.6 to 3.10.7 (merge request)
• Enable Style/GlobalVars cop through all files in RuboCop (merge request)
• Remove license patch for removed awesome_print gem (merge request)

15.4.6 (2022-11-30)

Security (7 changes)

• Bump PostgreSQL versions to 12.12 and 13.8 (merge request)
• Bump rsync to 3.2.7 (merge request)
• Update zlib to 1.2.13 (merge request)
• Bump ncurses to 6.3-20220416 to patch against CVE-2022-2945 (merge request)
• Bump Ruby version to 2.7.6 (merge request)
• Upgrade haxx/curl to 7.86.0 (merge request)
• Update xmlsoft/libxml2 to version 2.10.3 (merge request)

15.4.5 (2022-11-15)

No changes.

15.4.4 (2022-11-02)

Security (2 changes)

• Upgrade pcre2 to 10.40 (merge request)
• Upgrade curl to 7.85.0 (merge request)

15.4.3 (2022-10-19)

No changes.

15.4.2 (2022-10-04)

No changes.

15.4.1 (2022-09-29)

Security (2 changes)

• Apply Grafana CVE-2022-3110 patch (merge request)
• Pass necessary headers on accessing healthcheck endpoints (merge request)

15.4.0 (2022-09-21)

Added (1 change)

• Add support for Gitaly GPG signing (merge request)

Fixed (2 changes)

• Fix an issue were the incoming email secret file was not being created (merge request)
• API should return JSON on errors even if custom error pages are used by @ercan.ucan (merge request)

Changed (7 changes)

• Bump packer version to 1.8.2 (merge request)
• Use sha256 instead of md5 when downloading component source (merge request)
• Update gpgme to version 1.17.0 (merge request)
• Compatibility for hashed oauth secrets (merge request)
• Raise default Geo base backup timeout to 12 hours (merge request)
• Improve error message when omnibus_gitconfig is not set properly (merge request)
• Update container registry to v3.53.0-gitlab (merge request)

Security (4 changes)

• Bump gitlab-exporter version to 11.18.2 to mitigate VULNDB-255039
• Update unzip to 6.0.27
• Bump nginx version to 1.20.2
• Update libxml2 from 2.9.10 to 2.9.14 (merge request)

Other (5 changes)

• Update chef-classroom to 1.0.5 (merge request)
• Update libyaml to 0.2.5 (merge request)
• Update aws-sdk-ec2 and aws-sdk-marketplacecatalog (merge request)
• Replace byebug and pry (merge request)
• Use HTTPS instead of HTTP for pkg-config-lite (merge request)

15.3.5 (2022-11-02)

Security (2 changes)

• Upgrade pcre2 to 10.40 (merge request)
• Upgrade curl to 7.85.0 (merge request)

15.3.4 (2022-09-29)

Security (3 changes)

• Mattermost security release for 2022-08 (merge request)
• Apply Grafana CVE-2022-3110 patch (merge request)
• Pass necessary headers on accessing healthcheck endpoints (merge request)

15.3.3 (2022-09-01)

Changed (1 change)

• Improve error message when omnibus_gitconfig is not set properly (merge request)

15.3.2 (2022-08-30)

Security (4 changes)

• Update libxml2 from 2.9.10 to 2.9.14 (merge request)
• Bump gitlab-exporter version to 11.18.2 to mitigate VULNDB-255039 (merge request)
• Update unzip to 6.0.27 (merge request)
• Bump nginx version to 1.20.2 (merge request)

15.3.1 (2022-08-22)

No changes.

15.3.0 (2022-08-19)

Added (2 changes)

• Add perl as runtime dependency (merge request)
• Add ci_runner_versions_reconciliation_worker setting (merge request)

Fixed (3 changes)

• Ensure Omnibus Docker image has exiftool deps (merge request)
• Gracefully handle blank CPU information (merge request)
• Reload Consul only if the service is enabled (merge request)

Changed (4 changes)

• gitaly: Unconditionally ignore the gitconfig (merge request)
• Remove svlogd filter from consul configuration (merge request)
• Update cacerts to 2022.07.19 (merge request)
• Set webhook as MailRoomm's default delivery strategy (merge request)

Removed (1 change)

• Stop enabling Grafana for new installs (merge request)

Security (3 changes)

• Update libxslt from 1.1.32 to 1.1.35 (merge request)
• Upgrade bzip2 to use version 1.0.8
• Bump exiftool version to 12.42

Other (6 changes)

• Update erubi from 1.10.0 to 1.11.0 (merge request)
• Update rack from 2.2.3 to 2.2.4 (merge request)
• Use updated syntax in OpenSSL::Digest (merge request)
• Use rubygems bundled with ruby language (merge request)
• Use official sha256 as checksum for cacerts (merge request)
• Add GITLAB_METRICS_EXPORTER_VERSION for releases (merge request)

15.2.5 (2022-09-29)

Security (3 changes)

• Mattermost security release for 2022-08 (merge request)
• Apply Grafana CVE-2022-3110 patch (merge request)
• Pass necessary headers on accessing healthcheck endpoints (merge request)

15.2.4 (2022-08-30)

Security (4 changes)

• Update libxslt and libxml (merge request)
• Bump gitlab-exporter version to 11.18.2 to mitigate VULNDB-255039 (merge request)
• Update unzip to 6.0.27 (merge request)
• Bump nginx version to 1.20.2 (merge request)

15.2.3 (2022-08-22)

No changes.

15.2.2 (2022-08-01)

Fixed (1 change)

• Gracefully handle blank CPU information (merge request)

15.2.1 (2022-07-28)

Security (2 changes)

• Bump exiftool version to 12.42 (merge request)
• Upgrade bzip2 to use version 1.0.8 (merge request)

15.2.0 (2022-07-21)

Added (6 changes)

• gitaly: Reintroduce migration to [[git.config]] stanzas (merge request)
• Add praefect list-storages subcommand (merge request)
• Add [gitlab] section to praefect config toml (merge request)
• Make gitlab-pages redirects limits configurable by @nejc (merge request)
• Add TLS support for dedicated metrics servers (merge request)
• Add failover timeout to Praefect config (merge request)

Fixed (8 changes)

• Ensure FIPS builds are EE (merge request)
• Adjust worker processes to use real CPUs instead of cores (merge request)
• Ensure Ruby platform is set globally on ARM64 OSes (merge request)
• Fix worker processes not starting up due to 0 processes (merge request)
• Properly escape S3 credentials in Workhorse config TOML (merge request)
• Fix KAS address when running GitLab on a relative URL by @paddy-hack (merge request)
• Force nginx proxy to use IPv4 (merge request)
• Fix DISABLE_PUMA_WORKER_KILLER env var check (merge request)

Changed (13 changes)

• Configure local Gemfile before force_ruby_platform by @vincent_stchu (merge request)
• Update to openssl 1.1.1q (merge request)
• Update gitlab-org/container-registry from v3.51.0-gitlab to v3.51.1-gitlab (merge request)
• Update acme-client to 2.0.11 (merge request)
• Update to openssl 1.1.1p (merge request)
• Update container registry to 3.51.0 (merge request)
• Set force_ruby_platform to true locally for Gitaly and GitLab Rails (merge request)
• Update jemalloc from 5.2.1 to 5.3.0 (merge request)
• Bump Container Registry to v3.49.0-gitlab (merge request)
• Disable KAS by default in FIPS environments (merge request)
• Disable doc generation in grpc gem compilation for FIPS builds (merge request)
• gitaly: Migrate to inject Git configuration via config.toml (merge request)
• Add dry run option to registry-garbage-collect command. (merge request)

Deprecated (1 change)

• global: Remove deprecated self_signed_cert setting (merge request)

15.1.6 (2022-08-30)

Security (5 changes)

• Update libxslt and libxml (merge request)
• Upgrade mattermost to use version 6.7.1 (merge request)
• Bump gitlab-exporter version to 11.18.2 to mitigate VULNDB-255039 (merge request)
• Update unzip to 6.0.27 (merge request)
• Bump nginx version to 1.20.2 (merge request)

15.1.5 (2022-08-22)

No changes.

15.1.4 (2022-07-28)

Security (2 changes)

• Bump exiftool version to 12.42 (merge request)
• Upgrade bzip2 to use version 1.0.8 (merge request)

15.1.3 (2022-07-19)

Fixed (3 changes)

• Adjust worker processes to use real CPUs instead of cores (merge request)
• Ensure Ruby platform is set globally for arm64 based operating systems (merge request)
• Fix worker processes not starting up due to 0 processes (merge request)

Changed (1 change)

• Set force_ruby_platform to true locally for Gitaly and GitLab Rails (merge request)

15.1.2 (2022-07-05)

No changes.

15.1.1 (2022-06-30)

No changes.

15.1.0 (2022-06-21)

Added (1 change)

• Add gitlab_rails['cdn_host'] setting (merge request)

Fixed (4 changes)

• Handle standby leader nodes properly in pg-upgrade (merge request)
• pgbouncer reload failure should provide insight (merge request)
• Skip auto-restart of PG during reconfigure as part of pg-upgrade (merge request)
• redis: Add announce_ip_from_hostname support to sentinel (merge request)

Changed (6 changes)

• Update GitLab Omnibus Builder to v3.5.0 (merge request)
• nginx: Disable request buffering by default for gitlab project imports by @mirsal (merge request)
• Turn off proxy_buffering for KAS (merge request)
• Update libtiff/libtiff from 4.3.0 to 4.4.0 (merge request)
• Update chef-acme to 4.1.5 (merge request)
• Add frame-pointer support to zlib (merge request)

Deprecated (1 change)

• Gitaly: update cgroups configuration (merge request)

Removed (2 changes)

• gitaly: Remove configuration for Rugged's gitconfig search path (merge request)
• Remove geo_file_download_dispatch_worker_cron settings (merge request)

Security (1 change)

• Update to Redis v6.2.7 (merge request)

Performance (1 change)

• Upgrade to bundler v2.3.15 (merge request)

Other (1 change)

• Disallow bundle to any changes to Gemfile.lock (merge request)

15.0.5 (2022-07-28)

Security (2 changes)

• Bump exiftool version to 12.42 (merge request)
• Upgrade bzip2 to use version 1.0.8 (merge request)

15.0.4 (2022-06-30)

No changes.

15.0.3 (2022-06-16)

Performance (1 change)

• Upgrade to bundler v2.3.15 (merge request)

15.0.2 (2022-06-06)

Fixed (1 change)

• Skip auto-restart of PG during reconfigure as part of pg-upgrade (merge request)

15.0.1 (2022-06-01)

No changes.

15.0.0 (2022-05-20)

Added (7 changes)

• Add ci_runners_stale_group_runners_prune_worker_cron setting (merge request)
• Add Praefect verifier deletion logic config option (merge request)
• Add option to configure Elasticsearch probe for gitlab-exporter (merge request)
• Add Puma config support for SSL (merge request)
• Introduce redis.announce_ip_from_hostname option, to enable setting the hostname at runtime (merge request)
• Add observability listener configuration for KAS (merge request)
• Expose Praefect's background verification config via gitlab.rb (merge request)

Fixed (4 changes)

• Only check listen address and port if both exporter and health checks are enabled (merge request)
• Remove Geo database settings only if some services are enabled (merge request)
• Nginx: implement HSTS support in the mattermost configuration template by @hcartiaux (merge request)
• Fix permissions on Grafana folder in Docker container by @cHiv0rz (merge request)

Changed (7 changes)

• Update to PostgreSQL to v12.10 and v13.6 (merge request)
• Update to OpenSSL 1.1.1o (merge request)
• Change the sidekiq warning on using same address for healthcheck to raise an error instead (merge request)
• Delete code for deprecated geo commands (merge request)
• Bump Container Registry to v3.39.2-gitlab (merge request)
• Bump BUILDER_IMAGE_REVISION to v3.3.1 (merge request)
• Remove AES256-GCM-SHA384 from default list of allowed NGINX SSL ciphers by @m.baur (merge request)

Removed (3 changes)

• Remove background_upload and direct_upload configs (merge request)
• Remove cveignore file and references (merge request)
• gitaly: Remove support for configuring the internal socket directory (merge request)

Other (1 change)

• Update deprecated settings list (merge request)

14.10.5 (2022-06-30)

No changes.

14.10.4 (2022-06-01)

Security (1 change)

• Mattermost Security Updates May 2022 (merge request)

14.10.3 (2022-05-20)

Fixed (1 change)

• Remove Geo database settings only if some services are enabled (merge request)

14.10.2 (2022-05-04)

Other (1 change)

• Update deprecations for 15.0 (merge request)

14.10.1 (2022-04-29)

No changes.

14.10.0 (2022-04-21)

Added (3 changes)

• Gitaly: Add rate_limiting section to config toml (merge request)
• Add pages http server timeout options (merge request)
• Expose db_database_tasks attribute (merge request)

Fixed (3 changes)

• consul: Disable logging of timestamps if JSON log enabled (merge request)
• ruby: Enable OPENSSL_FIPS macro for system SSL builds (merge request)
• Always disable proxy_intercept_errors for kas (merge request)

Changed (5 changes)

• Update Mattermost to 6.5.0 by @stavros.foteinopoulos (merge request)
• gitaly: Set up newly introduced runtime directory (merge request)
• Migrate Geo Tracking database configuration into database.yml (merge request)
• add pages zip http client timeout option (merge request)
• Update Mattermost to 6.4.2 by @stylianosrigas (merge request)

Security (3 changes)

• mark credentials as sensitive (merge request)
• Upgrade zlib version by @srslypascal (merge request)
• Update grafana version to 7.5.15

14.9.5 (2022-06-01)

Security (1 change)

• Mattermost Security Updates May 2022 (merge request)

14.9.4 (2022-04-29)

Security (1 change)

• Upgrade zlib version (merge request)

14.9.3 (2022-04-12)

No changes.

14.9.2 (2022-03-31)

Security (2 changes)

• Update Mattermost version (merge request)
• Update grafana version to 7.5.15 (merge request)

14.9.1 (2022-03-23)

No changes.

14.9.0 (2022-03-21)

Added (9 changes)

• Make GitLab Pages server shutdown timeout configurable by @HuseyinEmreAksoy (merge request)
• Exclude unnecessary files in gitlab-grpc gem (merge request)
• Add webhook delivery method to mailroom (merge request)
• Add possibility to change nginx proxy buffer size (merge request)
• Add gitlab_kas['log_level'] customization (merge request)
• Add bizible settings (merge request)
• Add tls rate-limiting options for GitLab Pages (merge request)
• Add role for Spamcheck (merge request)
• Add gitaly concurrency queue limit configs (merge request)

Fixed (4 changes)

• Allow ACME challenge over HTTPS (merge request)
• Enable C99 in CentOS 7 and SLES for building Git (merge request)
• gitlab-redis-cli: Fix passing of args to redis-cli (merge request)
• Fix Gitaly max_queue_wait TOML config (merge request)

Changed (5 changes)

• Upgrade MailRoom to v0.0.20 (merge request)
• Bump BUILDER_IMAGE_REVISION to v2.14.0 (merge request)
• Default enable separate metrics for Praefect (merge request)
• Bump Container Registry to v3.31.0-gitlab (merge request)
• gitaly: enable bundled git as default and set a default binary (merge request)

Security (5 changes)

• Update OpenSSL to v1.1.1n (merge request)
• Verifies full certificate rather than just CA (merge request)
• Update Bundler version to 2.2.33 (merge request)
• Upgrade gitlab-exporter to 11.11.0 (merge request)
• Upgrade gitlab-exporter to 11.10.0 (merge request)

Other (3 changes)

• Improve success message after promoting secondary nodes (merge request)
• Enable live stdout/stderr (merge request)
• Update Mattermost to 6.4.0 by @angelos.kyratzakos (merge request)

14.8.6 (2022-04-29)

Security (1 change)

• Upgrade zlib version (merge request)

14.8.5 (2022-03-31)

Security (2 changes)

• Update Mattermost version (merge request)
• Update grafana version to 7.5.15 (merge request)

14.8.4 (2022-03-16)

Security (1 change)

• Update OpenSSL to v1.1.1n (merge request)

14.8.3 (2022-03-14)

No changes.

14.8.2 (2022-02-25)

No changes.

14.8.1 (2022-02-23)

No changes.

14.8.0 (2022-02-21)

Added (10 changes)

• Add TLS configuration to Consul (merge request)
• Add TLS termination options to GitLab KAS's APIs by @fh1ch (merge request)
• Add ability for Sentinel to leverage hostnames (merge request)
• Adding Secure Files settings (merge request)
• Add gitaly concurrency queue limit configs (merge request)
• Add openssl FIPS runtime dependencies (merge request)
• Add sentry configuration options for GitLab KAS by @fh1ch (merge request)
• Add GITLAB_SKIP_TAIL_LOGS to docker wrapper by @jpflouret (merge request)
• Add spamcheck to the package (merge request)
• Provide packages for SLES 15.2 (merge request)

Fixed (6 changes)

• Update MailRoom to v0.0.19 (merge request)
• Update Omnibus to v8.2.1.7 (merge request)
• Fix nginx www directory permission by @JulianForster01 (merge request)
• Correct GitLab KAS default redis port configuration by @fh1ch (merge request)
• Update PG runtime conf before restarting (merge request)
• Ensure EE services are added when gitlab-ee::config recipe is included (merge request)

Changed (16 changes)

• Add QA_BRANCH trigger var (merge request)
• Update Mattermost to 6.3.3 by @spirosoik (merge request)
• Bump Container Registry to v3.24.1-gitlab (merge request)
• Update libjpeg-turbo/libjpeg-turbo from 2.1.0 to 2.1.2 (merge request)
• Enable KAS by default (merge request)
• gitaly: Install both external and bundled Git (merge request)
• Update Mattermost to 6.2.2 by @spirosoik (merge request)
• Update config/software/prometheus.rb (merge request)
• Upgrade Redis from 6.0 to 6.2 (merge request)
• Upgrade Redis from 6.0 to 6.2 (merge request)
• Bump postgres-exporter to 0.10.0 (merge request)
• Bump redis-exporter to 1.33.0 (merge request)
• Bump node-exporter to 1.3.1 (merge request)
• Bump Alertmanager to 0.23.0 (merge request)
• Bump Grafana to 7.5.12 (merge request)

Deprecated (1 change)

• Add a warning if Sidekiq exporter and health checks are on the same port (merge request)

14.7.7 (2022-03-31)

Security (2 changes)

• Update Mattermost version (merge request)
• Update grafana version to 7.5.15 (merge request)

14.7.6 (2022-03-24)

Security (1 change)

• Update OpenSSL to v1.1.1n (merge request)

14.7.5 (2022-03-09)

No changes.

14.7.4 (2022-02-25)

Security (2 changes)

• Mattermost February security updates (merge request)
• Bump Grafana to 7.5.12 (merge request)

14.7.3 (2022-02-15)

Fixed (1 change)

• Update Omnibus to v8.2.1.7 (merge request)

14.7.2 (2022-02-08)

Fixed (1 change)

• Ensure EE services are added when gitlab-ee::config recipe is included (merge request)

14.7.1 (2022-02-03)

No changes.

14.7.0 (2022-01-21)

Added (6 changes)

• Add Redis TLS related settings (merge request)
• Add gossip encryption configuration to Consul (merge request)
• Add domain rate-limiting options for GitLab Pages (merge request)
• Add packages to skip list in preinst (merge request)
• add nginx proxy_protocol option for gitlab-http by @cruelsmith (merge request)
• Add config support for container registry middleware (merge request)

Fixed (4 changes)

• Include the cert file location by default as well (merge request)
• Sync trailing slash usage for GitLab KAS routes by @fh1ch (merge request)
• Revert chef-acme cookbook update (merge request)
• Set SSL_CERT_DIR variable for all services (merge request)

Changed (6 changes)

• Bump omnibus to 8.2.1.5 (merge request)
• Upgrade MailRoom to v0.0.18 (merge request)
• Enable frame pointer in PostgreSQL compile options (merge request)
• Bump Container Registry to v3.21.0-gitlab (merge request)
• Create cgroup root directory on gitaly startup (merge request)
• Skip terraform_state in preinst backup (merge request)

Security (1 change)

• * bump prometheus version to 2.25.2

Other (1 change)

• Update Mattermost to 6.2.1 by @hmhealey (merge request)

14.6.7 (2022-03-31)

Security (1 change)

• Update OpenSSL to v1.1.1n (merge request)

14.6.6 (2022-03-01)

Fixed (1 change)

• Ensure EE services are added when gitlab-ee::config recipe is included (merge request)

14.6.5 (2022-02-25)

Security (2 changes)

• Mattermost February security updates (merge request)
• Bump Grafana to 7.5.12 (merge request)

14.6.4 (2022-02-03)

Security (2 changes)

• Update builder image to use golang 1.16.12 (merge request)
• Update Mattermost to 6.1.1 (GitLab 14.6) (merge request)

14.6.3 (2022-01-18)

Fixed (1 change)

• Revert chef-acme cookbook update (merge request)

14.6.2 (2022-01-11)

No changes.

14.6.1 (2022-01-04)

No changes.

14.6.0 (2021-12-21)

Added (5 changes)

• Add --replicate-immediately flag to Praefect track-repository subcommand (merge request)
• Provide packages for Debian Bullseye (merge request)
• Add apply flag to praefect remove-repository subcommand (merge request)
• Add google tag manager nonce config (merge request)
• Add health-checks settings keys for Sidekiq (merge request)

Fixed (4 changes)

• Return early from trusted certificate handling if hashing/symlinking failed (merge request)
• Fix Google Memorystore support for Action Cable (merge request)
• Move deprecation message to gitlabc-ctl commands (merge request)
• gitlab-ctl geo promote requires restart of puma and workhorse services (merge request)

Changed (8 changes)

• Upgrade mailroom to v0.0.15 (merge request)
• Add patch to prevent Python from building nis module in Debian 11 (merge request)
• Update gitlab-exporter to 11.8.0 (merge request)
• Merge branch 'add-redis-ssl-kas' into 'master' (merge request)
• Update 2 dependencies from git (merge request)
• Use geo:site:role rake task to retrieve node role for the promote command (merge request)
• Use public sources for omnibus-gitlab builds by default (merge request)
• Build rugged gem with system SSL on FIPS builds (merge request)

14.5.4 (2022-02-03)

Security (2 changes)

• Update builder image to use golang 1.16.12 (merge request)
• Update Mattermost to 5.38.3 (merge request)

14.5.3 (2022-01-11)

No changes.

14.5.2 (2021-12-03)

Security (1 change)

• Bump Mattermost to 5.39.2 (merge request)

14.5.1 (2021-12-01)

Fixed (1 change)

• Fix Google Memorystore support for Action Cable (merge request)

14.5.0 (2021-11-19)

Added (11 changes)

• Add praefect prometheus_exclude_database_from_default_metrics config value (merge request)
• Build packages for openSUSE 15.3 (merge request)
• Add max_uri_length to GitLab Pages config (merge request)
• Add source-IP rate-limiting options to GitLab Pages (merge request)
• Configure the Loose foreign key cleanup job (merge request)
• Add configuration for the KAS CI tunnel feature (merge request)
• Add praefect check command (merge request)
• Allow configuring redis instance for sessions (merge request)
• Create a Consul service for GitLab Exporter (merge request)
• Build and publish ARM64 AMIs (merge request)
• Add one_trust_id configuration (merge request)

Fixed (5 changes)

• Drop --without-gnutls flag from curl (merge request)
• adding helper text for subcommands (merge request)
• Fix URL for unzip v6.0 download (merge request)
• Geo - Restart Gitaly/Praefect services during promotion (merge request)
• Ensure letsencrypt is enabled when running gitlab-ctl renew-le-certs (merge request)

Changed (11 changes)

• Update grafana-dashboards to 1.9.0 (merge request)
• Bump container registry to v3.14.3 (merge request)
• Upgrade gitlab-exporter to v11.7.0 (merge request)
• Make gitlab-ctl geo promote production ready (merge request)
• Ensure the selinux modules are enabled on rocky and almalinux (merge request)
• Bump container registry to v3.14.1 (merge request)
• Drop custom compiler for CentOS 6 (merge request)
• Upgrade Omnibus Builder to v2.5.0 (merge request)
• Bump omnibus to 8.2.1.1 (merge request)
• Update gitlab-mail_room to 0.0.14 (merge request)
• Bump Container Registry to v3.13.0-gitlab (merge request)

Removed (1 change)

• Remove Action Cable in-app setting (merge request)

Security (2 changes)

• Update Curl to version 7.79.1
• Update openssl to 1.1.1l

14.4.5 (2022-01-11)

No changes.

14.4.4 (2021-12-03)

Security (1 change)

• Bump Mattermost to 5.39.2 (merge request)

14.4.3 (2021-12-01)

Added (1 change)

• Add praefect prometheus_exclude_database_from_default_metrics config value (merge request)

14.4.2 (2021-11-08)

Added (1 change)

• Build and publish ARM64 AMIs (merge request)

Fixed (1 change)

• Fix URL for unzip v6.0 download (merge request)

14.4.1 (2021-10-28)

Security (2 changes)

• Update Curl to version 7.79.1 (merge request)
• Update openssl to 1.1.1l (merge request)

14.4.0 (2021-10-21)

Added (6 changes)

• add list-untracked-repositories command (merge request)
• Introduce praefect track-repository command (merge request)
• Allow configuring redis instance for rate-limiting (merge request)
• Introduce "praefect remove-repository" command (merge request)
• Add new max_saml_message_size setting (merge request)
• Make Redis stop-writes-on-bgsave-error setting configurable (merge request)

Fixed (4 changes)

• Don't generate public_attributes.json on non-reconfigure runs (merge request)
• Update cacerts to 2021-09-30 (merge request)
• Delay praefect database[_direct_host,_port_no_proxy] removals (merge request)
• Properly reload Patroni on config change (merge request)

Changed (7 changes)

• Update gitlab-mail_room to 0.0.14 (merge request)
• Downgrade grafana to the 7.x release branch (merge request)
• Add timeout block for Consul get_api (merge request)
• Bump omnibus to 8.2.1 (merge request)
• Switch to supporting the new ee/db/geo/structure.sql (merge request)
• Gracefully handle empty roles (merge request)
• Bump Container Registry to v3.11.1-gitlab (merge request)

Deprecated (1 change)

• Deprecate Pages inplace_chroot flag and stop running Pages as a daemon by @feistel (merge request)

14.3.6 (2021-12-03)

Security (1 change)

• Bump Mattermost to 5.38.4 (merge request)

14.3.5 (2021-11-26)

Added (1 change)

• Add praefect prometheus_exclude_database_from_default_metrics config value (merge request)

Fixed (2 changes)

• Fix URL for unzip v6.0 download (merge request)
• Conditionally generate public_attributes.json (merge request)

Changed (1 change)

• Downgrade grafana to the 7.x release branch (merge request)

14.3.4 (2021-10-28)

Security (2 changes)

• Update Curl to version 7.79.1 (merge request)
• Update openssl to 1.1.1l (merge request)

14.3.3 (2021-10-12)

Fixed (2 changes)

• Update cacerts to 2021-09-30 (merge request)
• Delay praefect database_*_no_proxy removals (merge request)

14.3.2 (2021-10-01)

No changes.

14.3.1 (2021-09-30)

No changes.

14.3.0 (2021-09-21)

Added (6 changes)

• Adds symantic metadata to consul services (merge request)
• Add AWS SSE-KMS support for backups (merge request)
• Allow specifying additional config directory to consul (merge request)
• Allow service names used to register with Consul be customized (merge request)
• Add support for gitlab['omniauth_cas3_session_duration'] (merge request)
• Add SMTP configuration support for SMTP secret encryption (merge request)

Fixed (3 changes)

• Fixes the use of wal_keep_size with GEO on PG13 (merge request)
• Update gitlab.rb.template for Service Desk (merge request)
• Fix migration NameError in rails env helper (merge request)

Changed (8 changes)

• Bump container registry to v3.11.0 (merge request)
• Update grafana to 8.1.3 (merge request)
• Bump container registry to v3.10.1 (merge request)
• Update Ruby to 2.7.4 (merge request)
• Update chef gems to 15.17.4 (merge request)
• Bump Container Registry to v3.10.0-gitlab (merge request)
• Bump container registry to v3.9.0 (merge request)
• Use Python 3.9.6 (merge request)

Deprecated (1 change)

• Prefer gitaly custom_hooks_dir setting (merge request)

Removed (1 change)

• Remove support for gitlab_pages['use_legacy_storage'] setting by @feistel (merge request)

Security (1 change)

• Update cURL to 7.77.0

Other (2 changes)

• Update Mattermost to 5.38.2 by @hmhealey (merge request)
• Update Python from 3.7.10 to 3.9.5 (merge request)

14.2.7 (2021-11-26)

Added (1 change)

• Add praefect prometheus_exclude_database_from_default_metrics config value (merge request)

Fixed (3 changes)

• Fix URL for unzip v6.0 download (merge request)
• Conditionally generate public_attributes.json (merge request)
• Delay praefect database_*_no_proxy removals (merge request)

14.2.6 (2021-10-28)

Security (2 changes)

• Update Curl to version 7.79.1 (merge request)
• Update openssl to 1.1.1l (merge request)

14.2.5 (2021-09-30)

No changes.

14.2.4 (2021-09-17)

No changes.

14.2.3 (2021-09-01)

No changes.

14.2.2 (2021-08-31)

Security (1 change)

• Update cURL to 7.77.0 (merge request)

14.2.1 (2021-08-23)

Fixed (1 change)

• Fix migration NameError in rails env helper (merge request)

14.2.0 (2021-08-20)

Added (8 changes)

• Add option to specify log level for nginx logs (merge request)
• Add a (experimental) single command to promote a Geo secondary node (merge request)
• Add missing Patroni configuration - tags, recovery_conf, callbacks (merge request)
• Add support to specify additional databases to Rails application (merge request)
• Enable TLS support for Patroni API (merge request)
• Support Workhorse config options for propagating correlation IDs (merge request)
• Connect Puma low-level error handler to Sentry (merge request)
• Add patroni allowlist support (merge request)

Fixed (3 changes)

• Add AES256-GCM-SHA384 to allowed list of Nginx SSL ciphers (merge request)
• Fix could not change directory to "/root": Permission denied (merge request)
• Don't ask users to upgrade to PG 13 yet (merge request)

Changed (7 changes)

• Update Mattermost to 5.37.1 and update websocket support (merge request)
• Bump Container Registry to v3.7.0-gitlab (merge request)
• Transform database.yml to use main syntax (merge request)
• Bump Container Registry to v3.6.2-gitlab (merge request)
• Bump Container Registry to v3.6.1-gitlab (merge request)
• Transform database.yml to use main syntax (merge request)
• Avoid generic NoMethodError on non-Patroni nodes (merge request)

Security (1 change)

• Update libgcrypt to 1.9.3

Other (2 changes)

• Remove docs redirects cleanup task (merge request)
• Bump gitlab-exporter to 11.2.0 (merge request)

14.1.8 (2021-11-15)

Fixed (2 changes)

• Conditionally generate public_attributes.json (merge request)
• Delay praefect database_*_no_proxy removals (merge request)

14.1.7 (2021-09-30)

No changes.

14.1.6 (2021-09-27)

No changes.

14.1.5 (2021-09-02)

No changes.

14.1.4 (2021-08-31)

Security (1 change)

• Update cURL to 7.77.0 (merge request)

14.1.3 (2021-08-17)

Fixed (1 change)

• Add AES256-GCM-SHA384 to allowed list of Nginx SSL ciphers (merge request)

14.1.2 (2021-08-03)

Security (1 change)

• Update libgcrypt to 1.9.3 (merge request)

14.1.1 (2021-07-28)

Fixed (1 change)

• Don't ask users to upgrade to PG 13 yet (merge request)

14.1.0 (2021-07-21)

Added (6 changes)

• Nginx: further modernisation and standardisation (merge request)
• Add PostgreSQL 13 binaries to Omnibus (merge request)
• Allow nginx keepalive_time to be configured (merge request)
• Add configuration for gitaly-backup path (merge request)
• Add basic auth settings for patroni rest api (merge request)
• Add role for Sidekiq (merge request)

Fixed (3 changes)

• Centralize enabling and disabling of crond (merge request)
• Exempt unicorn['svlogd_prefix'] from deprecation check (merge request)
• Fix preinstall upgrade message (merge request)

Changed (11 changes)

• Ensure systemd under Docker is correctly detected (merge request)
• Nginx: modernise TLS config (merge request)
• Bump Container Registry to v3.5.2-gitlab (merge request)
• Update libjpeg-turbo 2.1.0 (merge request)
• Bump ffi to 1.15.3 (merge request)
• Update alertmanager to 0.22.2 (merge request)
• Update chef-acme to 4.1.3 (merge request)
• Update gitlab-exporter from 10.3.0 to 10.4.0 (merge request)
• Set 14.0 as minimum version permitted to upgrade from (merge request)
• Update grafana/grafana from 7.5.5 to 7.5.9 (merge request)
• Update go-crond from 20.7.0 to 21.5.0 (merge request)

Removed (3 changes)

• Update Praefect defaults in template (merge request)
• Remove seat link setting (merge request)
• Remove git2go software module (merge request)

Security (2 changes)

• Move gitlab-rails-rc to more secure location (merge request)
• Add libxml2 security patches released as of May 2021

Other (2 changes)

• Space savings from stripping promethues build (merge request)
• Update Mattermost to 5.36.1 (merge request)

updated (2 changes)

• Update Patroni to 2.1.0 (merge request)
• Upgrade nginx to 1.20.1 (merge request)

fix (1 change)

• Fix Praefect configuration template for session pooled connection (merge request)

14.0.12 (2021-11-05)

Fixed (1 change)

• Conditionally generate public_attributes.json (merge request)

14.0.11 (2021-09-23)

No changes.

14.0.10 (2021-09-02)

No changes.

14.0.9 (2021-08-31)

Security (2 changes)

• Patch NGINX against CVE-2021-23017 (merge request)
• Update cURL to 7.77.0 (merge request)

14.0.8 (2021-08-25)

No changes.

14.0.7 (2021-08-03)

Security (2 changes)

• Update libgcrypt to 1.9.3 (merge request)
• Update Mattermost to 5.35.4 (GitLab 14.0) (merge request)

14.0.6 (2021-07-20)

No changes.

14.0.5 (2021-07-08)

No changes.

14.0.4 (2021-07-07)

No changes.

14.0.3 (2021-07-06)

No changes.

14.0.2 (2021-07-01)

Security (1 change)

• Add libxml2 security patches released as of May 2021 (merge request)

14.0.1 (2021-06-24)

Fixed (1 change)

• Exempt unicorn['svlogd_prefix'] from deprecation check (merge request)

14.0.0 (2021-06-21)

Added (8 changes)

• Prevent Docker upgrade to 14.0 if there data on legacy storage (merge request)
• Build gitaly-git2go from previous gitaly version (merge request)
• Add option to write initial root password to a file (merge request)
• Add option to disable printing of root password during initialization (merge request)
• Add Workhorse shutdown_timeout config setting (merge request)
• Prevent upgrade to 14.0 if there is data on legacy storage (merge request)
• Allow configuring redis instance for trace chunks (merge request)
• Prevent upgrade to 14.0 if there is data on legacy storage (merge request)

Fixed (8 changes)

• Fix get-postgresql-primary command for Geo (merge request)
• Fix pitr_file to use the right path for ConsulError (merge request)
• Update consul lookup in get-postgresql-primary (merge request)
• Do not show Praefect deprecation if Praefect is disabled (merge request)
• Adds default for prepared_statements config in Geo secondary db.yml (merge request)
• Rotate mailroom logs (merge request)
• Fix passing environment variables for migrations (merge request)
• Recreate SSL key if it does not match the config (merge request)

Changed (17 changes)

• Use Busybox for editor in docker (merge request)
• Upgrade Omnibus Builder to v1.6.0 (merge request)
• Don't enable consul with postgres_role. (merge request)
• Upgrade postgresql-exporter to 0.9.0 (merge request)
• Use consul if available when pausing Geo replication (merge request)
• Upgrade docker-distribution-pruner to v0.2.0 (merge request)
• Bump Container Registry to v3.5.0-gitlab (merge request)
• Automatically generate initial root password if not set (merge request)
• Update consul to version 1.9.6 (merge request)
• change the default to true for deleting old backups (merge request)
• Expand configuration of Praefect direct database connection (merge request)
• Bump redis to 6.0.14, drop custom patch (merge request)
• Upgrade Patroni to version 2.0.2 (merge request)
• Fix package-scripts version string (merge request)
• Remove sidekiq_cluster service and settings (merge request)
• Always use sidekiq-cluster binary for Sidekiq service (merge request)
• Set 13.12 as minimum version required to upgrade from (merge request)

Removed (18 changes)

• Remove repmgr installation support (merge request)
• Remove support for Praefect election strategy (merge request)
• Omnibus v14 requires PG12 or higher (merge request)
• Remove deprecated experimental_queue_selector option for Sidekiq (merge request)
• Remove deprecated experimental_queue_selector option for Sidekiq (merge request)
• Remove support for postgresql['data_dir'] setting (merge request)
• Remove deprecated pgbouncer public attributes (merge request)
• Remove node['gitlab']['pgbouncer-exporter'] deprecation (merge request)
• Remove Unicorn and related code (merge request)
• Remove Deprecated Piwik settings (merge request)
• Remove support for gitlab_pages['http_proxy'] (merge request)
• Remove obsolete sidekiq['cluster'] setting (merge request)
• Remove support for client_output_buffer_limit_slave (merge request)
• Remove support for redis_slave_role (merge request)
• Remove support for analytics_instance_statistics_count_job_trigger_worker_cron... (merge request)
• Remove support for nginx['gzip'] in favor of nginx['gzip_enabled'] (merge request)
• Remove deprecated PostgreSQL FDW settings (merge request)
• Stop building packages for openSUSE Leap 15.1 (merge request)

Security (1 change)

• Update Mattermost to 5.35.3 (merge request)

Other (2 changes)

• Bump gitlab-exporter to 10.3.0 (merge request)
• Update Mattermost to 5.35.2 (merge request)

13.12.15 (2021-11-03)

No changes.

13.12.14 (2021-11-03)

No changes.

13.12.13 (2021-10-29)

Fixed (1 change)

• Conditionally generate public_attributes.json (merge request)

13.12.12 (2021-09-21)

No changes.

13.12.11 (2021-09-02)

No changes.

13.12.10 (2021-08-10)

No changes.

13.12.9 (2021-08-03)

Security (2 changes)

• Update libgcrypt to 1.9.3 (merge request)
• Update Mattermost to 5.34.5 (GitLab 13.12) (merge request)

13.12.8 (2021-07-07)

No changes.

13.12.7 (2021-07-05)

No changes.

13.12.6 (2021-07-01)

Security (2 changes)

• Add libxml2 security patches released as of May 2021 (merge request)
• Update Redis to 6.0.14 (merge request)

13.12.5 (2021-06-21)

No changes.

13.12.4 (2021-06-14)

Fixed (1 change)

• Do not show Praefect deprecation if Praefect is disabled (merge request)

Security (1 change)

• Update Mattermost to 5.34.4 (merge request)

13.12.3 (2021-06-07)

No changes.

13.12.2 (2021-06-01)

No changes.

13.12.1 (2021-05-25)

No changes.

13.12.0 (2021-05-21)

Added (8 changes)

• Add expired and expiring SSH key notification cron (merge request)
• Add support to configure Sidekiq routing rules (merge request)
• Add enable_disk flag for Pages (merge request)
• Added environment support for ECS/Fargate (merge request)
• Add hide_server_tokens option for NGINX (merge request)
• Add support in Workhorse for X-Request-Id header propagation (merge request)
• Toogle for workhorse keywatcher (merge request)
• Add support for SMTP connection pooling (merge request)

Fixed (4 changes)

• Fix an error where reconfigure would swap the praefect election strategy (merge request)
• Fix deprecation logic which could auto-enable services (merge request)
• Fix pg-upgrade failing on mattermost only deploys (merge request)
• Fix crash in gitlab-exporter when running on Puma (merge request)

Changed (6 changes)

• Bump container registry to v3.4.1 (merge request)
• Upgrade mailroom to v0.0.12 (merge request)
• Use backup_keep_time to prune configuration backups (merge request)
• Update acme-client from 2.0.7 to 2.0.8 (merge request)
• Include gzip directives in main nginx.conf only if enabled (merge request)
• Update git vendor to gitlab (merge request)

Deprecated (5 changes)

• Deprecate Praefect's failover_election_strategy config option (merge request)
• Deprecate configuring Gitaly nodes in virtual storage's config root (merge request)
• Deprecate nginx['gzip'] setting in favor of nginx['gzip_enabled'] (merge request)
• Deprecate Unicorn settings (merge request)
• Deprecate Unicorn settings (merge request)

Security (2 changes)

• Update Python to 3.7.10
• Upgrade redis to 6.0.12

Performance (1 change)

• Reuse postgresql::sysctl in geo-postgresql (merge request)

Other (4 changes)

• Make puma_config install_dir resource attribute optional (merge request)
• Update Mattermost to 5.34.2 (merge request)
• Update libtiff from 4.2.0 to 4.3.0 (merge request)
• Update grafana from 7.5.1 to 7.5.4 (merge request)

13.11.7 (2021-07-07)

No changes.

13.11.6 (2021-07-01)

Security (3 changes)

• Add libxml2 security patches released as of May 2021 (merge request)
• Update Redis to 6.0.14 (merge request)
• Update Mattermost to 5.33.5 (merge request)

13.11.5 (2021-06-01)

No changes.

13.11.4 (2021-05-14)

No changes.

13.11.3 (2021-04-30)

No changes.

13.11.2 (2021-04-27)

Security (2 changes)

• Update Python to 3.7.10 (merge request)
• Upgrade redis to 6.0.12 (merge request)

13.11.1+ee.0 (2021-04-22)

No changes.

13.11.0+ee.0 (2021-04-21)

Added (9 changes)

• Add in-product marketing emails cron worker (merge request)
• Allow config for geo_secondary_usage_data_cron (merge request)
• Add summarized gitaly apdex for usage ping (merge request)
• Added new local_store config for Pages (merge request)
• Render Gitaly pack_objects_cache settings (merge request)
• Build openSUSE Leap 15.2 packages (merge request)
• Use git provided by Gitaly (merge request)
• Gitaly default maintenance override (merge request)
• Add net-protocol BSD-2 license (merge request)

Fixed (7 changes)

• Fix grafana for RPi (merge request)
• Update AWS Marketplace Release code to match new API requirements (merge request)
• Run AWS jobs on both CE and EE non-RC-or-auto-deploy tags (merge request)
• Update gitlab-exporter to 10.1.0 to avoid query failures (merge request)
• Use specified key size for self-signed certificate also (merge request)
• Fix use_http2 & redirect_http GitLab Pages settings (merge request)
• Update Gitaly log permissions in Docker image (merge request)

Changed (6 changes)

• Change devops adoption update to be weekly (merge request)
• Upgrade OpenSSL to 1.1.1k (merge request)
• Add mail_room as a separate Gem dependency (merge request)
• Disable statement timeout while running analyze for pg-upgrade (merge request)
• Bump container registry version to v3.2.1 (merge request)
• Bump Container Registry to v3.2.0-gitlab (merge request)

Deprecated (1 change)

• Add deprecation warning for openSUSE Leap 15.1 (merge request)

Security (3 changes)

• Only allow exiftool to process JPEG and TIFF files
• Bump PostgreSQL versions to 11.11 and 12.6
• Update GraphicsMagick to 1.3.36 (merge request)

Performance (1 change)

• Backport BLOCKED_MODULE performance fix from Redis unstable (merge request)

Other (2 changes)

• Update grafana from 7.4.2 to 7.5.1 (merge request)
• Update Mattermost to 5.33.3 (merge request)

13.10.5 (2021-06-01)

No changes.

13.10.4 (2021-04-27)

Security (2 changes)

• Update Python to 3.7.10 (merge request)
• Upgrade redis to 6.0.12 (merge request)

13.10.3 (2021-04-13)

Security (1 change)

• Only allow exiftool to process JPEG and TIFF files.

Fixed (1 change)

• Update AWS Marketplace Release code to match new API requirements. !5146

13.10.2 (2021-04-01)

Fixed (1 change)

• Update gitlab-exporter to avoid query failures. !5123

13.10.1 (2021-03-31)

Security (1 change)

• Bump PostgreSQL versions to 11.11 and 12.6.

13.10.0 (2021-03-22)

Removed (2 changes)

• Drop unused awesomeprint gem. !5023
• Remove upgrade survey. !5045

Fixed (5 changes, 1 of them is from the community)

• gitlab-redis-cli: fix authentication with unquoted values. !5010
• Ensure that pg_basebackup will not ask for password. !5012
• Geo - Fix command to work with Patroni. !5033
• Fix postgresql['dir'] references in geo commands. !5061
• Fix gitlab pages on alternate port. !5070 (Lee Tickett @leetickett)

Deprecated (1 change)

• Deprecate gitlab_pages['domain_config_source']. !5079

Changed (10 changes, 1 of them is from the community)

• Add Grafana reporting option. !5000
• Update monitoring components. !5013
• Add internal and external URL config for KAS. !5016
• Add member option for command. !5025
• Update the package metadata vendor name to be GitLab, Inc. !5027
• Set permissions on assets that were copied into the container. !5036 (Edison Hanchell)
• Set Grafana auth scope based on allowed groups. !5038
• Bump Container Registry to v3.1.0-gitlab. !5054
• Use sha256 for signing RPM packages. !5072
• Remove recommended Pages max_connections limit. !5078

Added (6 changes, 2 of them are from the community)

• Added Debian 10 ARM64 builds. !5018
• Add GitLab Pages propagate-correlation-id configuration parameter. !5043 (Ercan Ucan)
• Allow custom smtp configuration for grafana in omnibus-gitlab. !5047 (msschl)
• Expose Rails allowed_hosts setting in gitlab.rb. !5057
• Allow gitlab build remote overrides from the environment. !5067
• Add GitLab Pages cache configuration settings. !5084

Other (7 changes, 2 of them are from the community)

• Add user_status_cleanup_batch cronjob. !5009
• Rename instance statistics count worker. !5021
• Explicitly set group for GitLab data directories. !5090 (Ben Bodenmiller (@bbodenmiller))
• Use builders with updated Go version. !5092
• Enable nakayoshi_fork by default.
• Update Mattermost to 5.32.1.
• Remove apt-transport-https as apt natively support https. (Simon Deziel)

13.9.7 (2021-04-27)

Security (2 changes)

• Update Python to 3.7.10 (merge request)
• Upgrade redis to 6.0.12 (merge request)

13.9.6 (2021-04-13)

Security (1 change)

• Only allow exiftool to process JPEG and TIFF files.

Fixed (1 change)

• Update AWS Marketplace Release code to match new API requirements. !5146

13.9.5 (2021-03-31)

Security (2 changes)

• Update openssl from 1i to 1j.
• Bump PostgreSQL versions to 11.11 and 12.6.

13.9.4 (2021-03-17)

• No changes.

13.9.3 (2021-03-08)

• No changes.

13.9.2 (2021-03-04)

• No changes.

13.9.1 (2021-02-23)

Fixed (1 change)

• Ensure Marketplace AMIs have licenses embedded. !5031

13.9.0 (2021-02-22)

Security (1 change)

• Add HTTP header to prevent content sniffing in /assets/* directory.

Fixed (2 changes, 1 of them is from the community)

• Reconfigure nolonger errors in a FIPS environment. !4932
• configure sshd and git account so that pam is not used any longer in docker. !4953 (Fnordpol)

Deprecated (2 changes)

• Add warning message to migration nodes for PG verisons older than 12. !4918
• Deprecate support for Ubuntu 16.04. !5006

Changed (7 changes)

• Update libtiff to 4.2.0. !4859
• Make GitLab Docker image and AWS AMIs use Ubuntu 20.04 packages. !4876
• Raise warning if node attribute file can't be found. !4894
• Update logrotate to 3.18.0. !4902
• Upgrade Redis to 6.0.10. !4930
• Bump Container Registry to v3.0.0-gitlab. !4962
• Add redis config for gitlab-kas. !4974

Performance (3 changes)

• Bump gitlab-exporter to 10.0.0, use jemalloc allocator. !4922
• Add Git refs performance patches. !4977
• Tune Ruby GC for gitlab-exporter. !4987

Added (6 changes)

• Add application settings cache expiry to gitlab.rb. !4938
• Emit Ruby Prometheus metrics for gitlab-exporter. !4958
• Add flag to disable kernel parameter modification. !4967
• Add matomo_disable_cookies setting. !4979
• Add default replication factor configuration option to Praefect. !4988
• Patch Ruby 2.7 with counting memory allocations.

Other (4 changes, 2 of them are from the community)

• Compile workhorse as part of gitlab-rails. !4829
• Remove Bundler 1.17.3 bundling. !4903 (Takuya Noguchi)
• Bump Grafana version to 7.3.7. !4933
• Update Mattermost to 5.31.1. !5003 (Harrison Healey)

13.8.8 (2021-04-13)

Security (1 change)

• Only allow exiftool to process JPEG and TIFF files.

13.8.7 (2021-03-31)

Security (2 changes)

• Update openssl from 1i to 1j.
• Bump PostgreSQL versions to 11.11 and 12.6.

13.8.6 (2021-03-17)

• No changes.

13.8.5 (2021-03-04)

• No changes.

13.8.4 (2021-02-11)

• No changes.

13.8.3 (2021-02-05)

Fixed (1 change)

• Fix selinux nil error when workhorse is set to use tcp. !4978

13.8.2 (2021-02-01)

Security (2 changes)

• Add patch for libxml2 CVE-2019-20388,CVE-2020-7595.
• Update PG11 and PG12 minor versions.

13.8.1 (2021-01-26)

Fixed (1 change)

• Skip pages auth settings when access control is disabled. !4952

13.8.0 (2021-01-22)

Security (1 change)

• Update OpenSSL to 1.1.1i. !4830

Removed (2 changes)

• Remove process_* metrics from probes config. !4853
• Remove git_process metrics probes. !4863

Fixed (4 changes)

• Patroni switchover and failover commands do not ask for user confirmation. !4909
• Fix https and custom domains pages settings. !4919
• Ensure EE services are considered disabled when on CE. !4927
• Safely lookup PostgreSQL parameters in Patroni settings. !4928

Deprecated (1 change)

• Deprecate node['gitlab']['pgbouncer-exporter'] in favor of node['monitoring']['pgbouncer-exporter']. !4766

Changed (10 changes)

• Update logrotate to 3.17.0. !4432
• Print PG11 deprecation notice. !4706
• Update consul to 1.6.10. !4789
• Update configs for Puma 5.1.0. !4803
• Generate Pages access control secrets only if access control is enabled. !4842
• Auto-upgrade to PG12 for single node installs. !4848
• Switch to enabling patroni by default with new patroni role. !4851
• Use more PostgreSQL attributes for Patroni parameters. !4857
• Add setting to change Rack server used for gitlab-exporter, bump it to 8.0.0. !4896
• Bump Container Registry to v2.13.1-gitlab. !4913

Performance (1 change)

• Use Puma nakayoshi_fork. !4914

Added (5 changes)

• Add support for configuring Workhorse alternate root path. !4856
• Add Patroni check-standby-leader command. !4864
• Expose setting for encrypted settings path. !4884
• Add logging to Let's Encrypt auto renewal cron job. !4911
• Add package upgrade survey link. !4931

Other (6 changes, 3 of them are from the community)

• Bump Patroni to version 2.0.1. !4820
• Remove deprecated Prometheus settings from gitlab.yml. !4869
• Bump Grafana to 7.3.6. !4873
• Update Docker to 20.10 in our pipelines on CI/CD. !4878 (Takuya Noguchi)
• Use Debian 10 as examples in development docs. !4883 (Takuya Noguchi)
• Update Mattermost to 5.30.1. !4885 (hmhealey)

13.7.9 (2021-03-17)

• No changes.

13.7.8 (2021-03-04)

• No changes.

13.7.7 (2021-02-11)

• No changes.

13.7.6 (2021-02-01)

Security (3 changes)

• Update OpenSSL to 1.1.1i.
• Update PG11 and PG12 minor versions.
• Add patch for libxml2 CVE-2019-20388,CVE-2020-7595.

13.7.5 (2021-01-25)

Fixed (2 changes)

• Patroni switchover and failover commands do not ask for user confirmation. !4909
• Fix https and custom domains pages settings. !4919

13.7.4 (2021-01-13)

• No changes.

13.7.3 (2021-01-08)

• No changes.

13.7.2 (2021-01-07)

Security (2 changes)

• Patch bundler to not use insecure temp directory as home.
• Update curl to 7_74_0.

13.7.1 (2020-12-23)

Fixed (1 change)

• Ensure patroni and consul remain up during upgrade migrations. !4854

13.7.0 (2020-12-22)

Fixed (8 changes)

• Improve PostgreSQL service status check. !4672
• Switch to gitlab:db:active for GEO replication. !4763
• Make Build::Check.on_tag? silent. !4769
• Update Promethes and Grafana. !4774
• Fix shmmax for arm64. !4799
• Increase jemalloc page size on arm64. !4800
• Exclude windows .ruby files from gems. !4838
• Fix incorrect deprecation warning for Sidekiq experimental queue selector. !4839

Deprecated (1 change)

• Remove CentOS 6 Builds. !4782

Changed (11 changes, 1 of them is from the community)

• Update OpenSSL to 1.1.1h. !4593
• Rename Piwik config items after rebranding to Matomo. !4667 (Katrin Leinweber @katrinleinweber)
• Update libjpeg-turbo to 2.0.6. !4765
• Default to PostgreSQL 12 in fresh installs. !4777
• Use the configurable PostgreSQL readiness check for Patroni. !4787
• Bump Container Registry to v2.12.0-gitlab. !4796
• PostgreSQL status helper should not fail fast. !4798
• Always pg_rewind when Patroni primary resumes. !4810
• Update gitlab-kas to v13.7.0. !4817
• Generate warning on consul configuration change. !4828
• Add install survey link to package installation. !4845

Performance (2 changes)

• Update gitlab-exporter to v7.1.1. !4783
• Adjust Postgres memory settings to current best practice. !4788

Added (11 changes)

• Generate encrypted_settings_key_base rails secret. !4687
• Patroni: reinitialize-replica command. !4692
• Add centos 8 arm64 packages. !4743
• Add Pages zip configuration flags. !4754
• Allow PostgreSQL adapter tcp parameter tuning. !4776
• Add /database_bloat endpoint for gitlab-exporter. !4785
• Add support for configuring database application_name for Rails. !4808
• Add options for Patroni pg_rewind assumptions. !4811
• Add devops adoption worker settings. !4812
• Add FortiToken Cloud configuration to gitlab.rb. !4824
• Allow setting Gitaly cgroups configuration. !4837

Other (4 changes, 1 of them is from the community)

• Bump consul version to 1.6.4. !3802
• pages: Support for HTTPS over PROXYv2 protocol. !4760
• Use the 'main' branch for gitlab-shell nightlies. !4772
• Update Mattermost to 5.29.1. !4807 (hmhealey)

13.6.7 (2021-02-11)

• No changes.

13.6.6 (2021-02-01)

Security (3 changes)

• Update OpenSSL to 1.1.1i.
• Update PG11 and PG12 minor versions.
• Add patch for libxml2 CVE-2019-20388,CVE-2020-7595.

13.6.5 (2021-01-13)

• No changes.

13.6.4 (2021-01-07)

Security (2 changes)

• Patch bundler to not use insecure temp directory as home.
• Update curl to 7_74_0.

13.6.3 (2020-12-10)

Fixed (1 change)

• Fix Unicorn custom socket not being honored by Workhorse. !4778

13.6.2 (2020-12-07)

Security (3 changes)

• Update GnuPG to version 2.2.23.
• Update libxml2 to version 2.9.10.
• Update GraphicsMagick to 1.3.35 and patch PNG vulnerability.

13.6.1 (2020-11-23)

• No changes.

13.6.0 (2020-11-22)

Security (1 change)

• Set instance ID as root password on AMI instance startup. !4638

Fixed (6 changes)

• Add support for custom database ports to pg_upgrade. !4665
• Use PostgreSQL's default values to override Patroni dynamic config. !4677
• Ensure pg_rewind can be used and won't fail for Patroni. !4689
• Restart Gitaly when Ruby version changes. !4696
• Use license_finder on GitLab Workhorse. !4705
• Drop --with-cflags gRPC argument from Raspberry Pi build. !4711

Changed (4 changes)

• logrotate defaults: set notifempty so empty files are not rotated. !3820
• Support for alternative auth_types in pgbouncer. !4671
• Mark Sidekiq queue selector as no longer experimental. !4714
• Bump Container Registry to v2.11.0-gitlab. !4741

Performance (2 changes)

• Update postgres_exporter metrics. !4586
• Update Prometheus components. !4682

Added (7 changes)

• Support gitlab-shell ssl_cert_dir config setting. !4379
• Add google_tag_manager_id configuration. !4473
• Allow setting Gitaly's git.bin_path. !4668
• Upgrade Git to v2.29.0. !4690
• Instruct more cleary how to proceed when old failed PostgreSQL upgrades exist on disk. !4694
• Display root account username at the end of first reconfigure. !4712
• Add role for GitLab Pages. !4740

Other (12 changes)

• Upgrade Ruby to v2.7.2. !4632
• Add Image Resizer config defaults. !4639
• Clean up pg_query gem native extension directory. !4683
• Clean up nokogumbo extension dir. !4698
• Exclude exe files from Python libraries from the package. !4699
• Ensure users are using Patroni before upgrading PG to 12. !4700
• Bump development Ruby version to v2.7.2. !4703
• Add note about backing up gitlab.rb in Docker. !4707
• Update Grafana version to 7.3.1. !4722
• Update GITLAB_KAS_VERSION to 13.6.1. !4742
• Update rake to v13. !4745
• Update Mattermost to 5.28.1.

13.5.7 (2021-01-13)

• No changes.

13.5.6 (2021-01-07)

Security (2 changes)

• Patch bundler to not use insecure temp directory as home.
• Update curl to 7_74_0.

13.5.5 (2020-12-07)

Security (3 changes)

• Update GnuPG to version 2.2.23.
• Update libxml2 to version 2.9.10.
• Update GraphicsMagick to 1.3.35 and patch PNG vulnerability.

13.5.4 (2020-11-13)

• No changes.

13.5.3 (2020-11-03)

Fixed (1 change)

• Geo: Perform point-in-time recovery before promotion of secondary node. !4636

Performance (1 change)

• Set net.core.somaxconn kernel parameter for Puma. !4688

13.5.2 (2020-11-02)

• No changes.

13.5.1 (2020-10-22)

Fixed (1 change)

• Ensure group is set before mode in storage_directory. !4661

13.5.0 (2020-10-22)

Fixed (10 changes, 2 of them are from the community)

• Configure pg-upgrade to work with patroni service. !4529
• Exit non-zero during upgrade if reconfigure fails. !4591
• Remove EE only note for packages in gitlab.yml.erb. !4594 (Ben Bodenmiller (@bbodenmiller))
• Add selinux module for gitlab-shell. !4598
• Support geo data dir for pg-upgrade. !4603
• Allows special characters in Grafana admin password. !4606
• Update workhorse auth socket when puma uses custom socket. !4620
• Error during docker build on package download failure. !4641
• Fix onsolidated form object storage configuration template. !4656
• Fix libatomic package name for RHEL/CentOS. !4660 (Hi Key @HiKey)

Deprecated (1 change)

• Add deprecation warning for CentOS 6. !4596

Changed (6 changes)

• Update Chef from 15.12.22 to 15.14.0. !4537
• Update unixcharles/acme-client from 2.0.6 to 2.0.7. !4581
• Only send one Referrer-Policy header. !4584
• Make Gitaly internal API calls go through Workhorse. !4592
• Add support for cert authentication with PostgreSQL. !4618
• Remove extraneous rbtrace files from build. !4647

Added (14 changes)

• Allow configuring permanent replication slots in patroni. !4534
• Allow bootstrapping patroni Standby Cluster. !4558
• Gitaly daily maintenance config. !4572
• Add gitlab-kas to omnibus. !4579
• Praefect configuration for database with no proxy. !4583
• Add wrappers for Patroni restart and reload commands. !4601
• Add database reindexing cronjob. !4602
• Add Kerberos LDAP mapping configuration. !4608
• Allow promotion task to alter Geo node configuration. !4609
• Support revert-pg-upgrade for Patroni cluster nodes. !4611
• Specify display_version for sofware without proper version string. !4622
• Add pages object storage settings. !4623
• Expose wal_log_hints PostgreSQL setting. !4642
• Add FortiAuthenticator configuration to gitlab.rb. !4645

Other (7 changes, 1 of them is from the community)

• Remove Praefect primary config. !4559
• Add member invitation reminder emails cron worker. !4582
• Explicitly set group for repositories_storages and improve manage-storage-directories tests. !4589 (Ben Bodenmiller (@bbodenmiller))
• Remove ee/spec from final package. !4621
• Move email configuration section closer to SMTP settings in template. !4631
• Reduce Ubuntu 20 ARM package size. !4637
• Update Mattermost to 5.27.0.

13.4.7 (2020-12-07)

Security (3 changes)

• Update GnuPG to version 2.2.23.
• Update libxml2 to version 2.9.10.
• Update GraphicsMagick to 1.3.35 and patch PNG vulnerability.

13.4.6 (2020-11-03)

Fixed (1 change)

• Geo: Perform point-in-time recovery before promotion of secondary node. !4636

13.4.5 (2020-11-02)

• No changes.

13.4.4 (2020-10-15)

Fixed (1 change)

• Force install PrettyTable 0.7. !4628

13.4.3 (2020-10-06)

• No changes.

13.4.2 (2020-10-01)

Security (1 change)

• Add config for remove unaccepted member invites cron worker.

13.4.1 (2020-09-24)

• No changes.

13.4.0 (2020-09-22)

Security (3 changes, 3 of them are from the community)

• Update Python to 3.7.9. !4544 (Takuya Noguchi)
• Update PostgreSQL 11 from 11.7 to 11.9. !4545 (Takuya Noguchi)
• Update PostgreSQL 12 from 12.3 to 12.4. !4546 (Takuya Noguchi)

Fixed (6 changes, 2 of them are from the community)

• Remove stub_status => on from nginx status on gitlab.rb config file. !4500 (Kelvin Jasperson)
• fix: remove useless query string match and disable buffering for artifacts. !4516 (Chieh-Min Wang)
• Reload PostgreSQL configuration when Patroni is enabled. !4548
• Fix missing gitlab-geo.conf when initiating replication. !4556
• Improve pgbouncer running? method. !4557
• Move TLS below Prometheus in Praefect config. !4575

Changed (8 changes, 1 of them is from the community)

• Allow Prometheus external_labels to be configured. !4494 (Chris Weyl @rsrchboy)
• Update replicate-geo-database to support PostgreSQL 12. !4495
• Make gitlab-shell go through Workhorse. !4498
• Added ability to disable a previously enabled consul service. !4502
• Geo: Add final confirmation for promotion to primary. !4523
• Upgrade GnuPG related software. !4525
• Add guidance for setting the timeout value for PG upgrades. !4563
• Add option to enable Sidekiq Exporter logs. !4573

Performance (1 change)

• Inline Gitaly gRPC recording rule. !4561

Added (6 changes)

• Add auto_link_user setting. !4415
• Add arm64 package for ubuntu 20.04. !4478
• Add Azure Blob Storage configuration. !4505
• Build openSUSE 15.1 arm64. !4535
• Add PostgreSQL connect_timeout parameter. !4555
• Add Praefect reconciliation config options. !4571

Other (7 changes)

• Update Prometheus components. !4303
• Expose Consul api_url to gitlab.yml. !4482
• Add prometheus recording rule for database query Apdex. !4489
• Cron worker settings for CI platform target metrics. !4526
• Address TODOs for removing legacy attribute support. !4533
• Add instance statistics cron worker. !4567
• Update Mattermost to 5.26.2.

13.3.9 (2020-11-02)

• No changes.

13.3.8 (2020-10-21)

• No changes.

13.3.6 (2020-09-14)

• No changes.

13.3.5 (2020-09-04)

Fixed (1 change)

• Fix geo fdw deprecation message. !4528

13.3.4 (2020-09-02)

• No changes.

13.3.3 (2020-09-02)

• No changes.

13.3.2 (2020-08-28)

• No changes.

13.3.1 (2020-08-25)

• No changes.

13.3.0 (2020-08-22)

Removed (3 changes)

• Remove gitlab_rails['db_pool'] setting. !4426
• Does not refresh the foreign tables on the Geo secondary server. !4475
• Remove Foreign Data Wrapper support for Geo. !4491

Fixed (6 changes)

• Re-apply gitlab-pages SSL_CERT_DIR change. !4411
• Recording rules: Fix potential CPU overcounting problem. !4420
• Allow postgres-exporter to use local socket and Rails db_name. !4439
• Revert Block requests to the grafana avatar endpoint. !4484
• Add rhel 8 to helper and selinux files. !4501
• libatomic is required on both armhf and aarch64.

Changed (4 changes)

• Update chef dependencies to 15.15.22. !4384
• Update Praefect defaults. !4416
• Remove read-only config toggle from Praefect. !4462
• Bump Container Registry to v2.10.1-gitlab. !4480

Added (9 changes)

• Add PostgreSQL 12 support. !4399
• Add support for ActionCable in-app mode. !4407
• Upgrade Grafana Dashboard to v1.8.0. !4409
• Add free space check to pre-flight for pg-upgrade. !4421
• Add -domain-config-source for GitLab Pages. !4428
• Add cron settings for expired PAT notification. !4465
• Add support for configuring AWS server side encryption. !4469
• Upgrade Git to v2.28.0. !4483
• Support units other than milliseconds for the pg-upgrade timeout option. !4493

Other (5 changes)

• Use S3-compatible remote directory for Terraform state storage. !4412
• Record average CPU and memory utilization for Usage Ping. !4455
• Use gcc v6.3 for CentOS 6 to build Rails C extensions. !4466
• Use new CMake for building libgit2 as part of Gitaly build. !4468
• Update Mattermost to 5.25.3.

13.2.9 (2020-09-04)

Fixed (1 change)

• Add rhel 8 to helper and selinux files. !4501

13.2.8 (2020-09-02)

• No changes.

13.2.7 (2020-09-02)

• No changes.

13.2.6 (2020-08-18)

• No changes.

13.2.5 (2020-08-17)

• No changes.

13.2.4 (2020-08-11)

Fixed (1 change)

• Fix Geo replication resuming. !4461

13.2.3 (2020-08-05)

• No changes.

13.2.2 (2020-07-29)

Fixed (1 change)

• Disable crond if LetsEncrypt disabled. !4434

13.2.1 (2020-07-23)

Fixed (1 change)

• Make actioncable recipe and control files match new runit requirement. !4419

13.2.0 (2020-07-22)

Fixed (9 changes)

• Grafana Server SHOULD have serve_from_sub_path set to true. !4160
• Fix reconfigure failure with sidekiq_cluster config. !4337
• Convert a standalone PostgreSQL to a Patroni member. !4350
• Ensure we are properly restarting the unicorn service. !4354
• Absolute SSL path should work for postgres recipe. !4356
• Allow patroni to receive the term signal. !4366
• Centralize upgrade version check in order to include docker upgrades. !4381
• Merge Chef attributes more conservatively. !4394
• Handle a down server when checking if a database is in standby. !4404

Changed (6 changes, 1 of them is from the community)

• Geo: Check if replication/verification is up-to-date in promotion preflight checks. !4314
• Add Commands to Pause/Resume Replication. !4331
• Update alertmanager to 0.21.0. !4347
• Allow backup-etc to follow symlinks. !4349 (mterhar)
• Add --delete-untagged alias for registry-garbage-collect command. !4371
• Geo: Remove confirm-removing-keys option from promote-to-primary-node command. !4403

Performance (1 change)

• Lower gzip compression threshold. !4387

Added (7 changes)

• Allow forced ssl on defined cidr_addresses. !3724
• Add Patroni sub-commands to gitlab-ctl. !4286
• Add Ubuntu 20.04 packaging jobs. !4344
• Update Grafana Dashboards. !4348
• Praefect: support of TLS. !4352
• Support consolidated object storage configuration. !4368
• Add get-postgresql-primary command to gitlab-ctl. !4383

Other (12 changes)

• Upgrade Chef libraries to Chef 15. !4092
• Add setting to specify external Prometheus address to the rails application. !4309
• Geo: Add force mode to promote-to-primary-node command. !4321
• Bump GitLab Exporter to 7.0.6. !4328
• Update builder image to 0.0.65, to pick up license_finder update. !4338
• Add recording rules to support Prometheus usage pings. !4343
• Record application server type in Prometheus. !4374
• Update webdevops/go-crond from 0.6.1 to 20.7.0. !4385
• Update gitlab-org/gitlab-exporter from 7.0.6 to 7.1.0. !4391
• Add deprecation message for Geo::MigratedLocalFilesCleanUpWorker config options. !4401
• Update libjpeg-turbo/libjpeg-turbo from 2.0.4 to 2.0.5.
• Update Mattermost to 5.24.2.

13.1.10 (2020-09-02)

• No changes.

13.1.9 (2020-09-02)

• No changes.

13.1.8 (2020-08-18)

• No changes.

13.1.7 (2020-08-17)

• No changes.

13.1.6 (2020-08-05)

• No changes.

13.1.5 (2020-07-23)

Fixed (3 changes)

• Fix reconfigure failure with sidekiq_cluster config. !4337
• Centralize upgrade version check in order to include docker upgrades. !4381
• Make actioncable recipe and control files match new runit requirement. !4419

13.1.3 (2020-07-06)

• No changes.

13.1.2 (2020-07-01)

Security (1 change)

• Update PCRE to version 8.44.

13.1.1 (2020-06-23)

Fixed (1 change)

• Manually disable copy_file_range() on RedHat kernels. !4346

Added (1 change)

• Update to Grafana 7. !4297

13.1.0 (2020-06-22)

Removed (1 change)

• Praefect configuration: remove postgres_queue_enabled. !4267

Fixed (1 change)

• Enable consul service for sidekiq-cluster. !4266

Changed (8 changes)

• Move hook values to [hooks] and gitlab connection values to [gitlab] in gitaly.toml. !4243
• Geo - Confirm if primary can be contacted after manual preflight checks. !4260
• gitlab.rb example template should show puma default. !4268
• Praefect: Enable SQL failover by default. !4271
• Update gitlab-exporter to 7.0.4. !4272
• Enable btree_gist postgres extension. !4274
• Update parser gem version. !4275
• Make it possible to disable Workhorse -authSocket argument. !4324

Added (6 changes)

• Add Patroni to Omnibus. !3984
• Add libtiff as a dependency. !4047
• Add command promotion-preflight-checks to run before promoting to primary node. !4246
• Allow enabling Praefect read-only mode through gitlab.rb. !4250
• Upgrade Grafana dashboards to v1.6.0. !4278
• Add capability to supply env vars to gitlab-pages. !4296

Other (8 changes)

• Build and release packages for Raspberry Pi Buster. !3953
• Add (optional) list of manual checks to promote_to_primary script. !4231
• Update nginx to stable version 1.18.0. !4242
• Stop deleting rack attack files. !4269
• Mark 13.0 as minimum version required to upgrade to 13.x. !4270
• Upgrade to Git 2.27.0. !4294
• Use latest Ubuntu AMI as base for our AMIs. !4308
• Update Mattermost to 5.23.1.

13.0.14 (2020-08-18)

• No changes.

13.0.13 (2020-08-17)

• No changes.

13.0.12 (2020-08-05)

• No changes.

13.0.11 (2020-08-05)

This version has been skipped due to packaging problems.

13.0.10 (2020-07-09)

Performance (1 change, 1 of them is from the community)

• Run vacuumdb with 2 commands simultaneously. !4373 (Ben Bodenmiller @bbodenmiller)

13.0.9 (2020-07-06)

• No changes.

13.0.8 (2020-07-01)

Security (1 change)

• Update PCRE to version 8.44.

13.0.7 (2020-06-25)

Fixed (2 changes)

• Fix geo timeout issue with pg-upgrade. !4148
• Manually disable copy_file_range() on RedHat kernels. !4346

13.0.6 (2020-06-10)

• No changes.

13.0.5 (2020-06-04)

• No changes.

13.0.4 (2020-06-03)

• No changes.

13.0.3 (2020-05-29)

• No changes.

13.0.2 (2020-05-28)

Security (1 change)

• Update Ruby to 2.6.6.

Fixed (2 changes)

• Fix nginx duplicate MIME type warning. !4251
• Do not run Grafana reset during docker startup. !4264

Added (1 change)

• Update Praefect Grafana dashboards. !4241

13.0.1 (2020-05-27)

Security (1 change)

• Block requests to the grafana avatar endpoint.

13.0.0 (2020-05-22)

Security (2 changes)

• Update Ruby to 2.6.6.
• Upgrade Openssl to 1.1.1.g.

Removed (6 changes)

• Remove old settings for gitlab-monitor, pages auth-server, and other components. !4139
• Remove support for protected paths throttling via Rack attack. !4149
• Remove support for user attributes for Repmgr and Consul. !4153
• Remove Grafana reset during upgrades. !4155
• Remove PostgreSQL 9.6 and 10. !4186
• Remove flag to set protected paths from gitlab.rb. !4207

Fixed (10 changes, 2 of them are from the community)

• Remove crond job if Let's Encrypt autorenew is disabled. !4075
• Install less to fix #5257. !4112 (Yannic Haupenthal)
• Env dir content should not be displayed by chef. !4119
• Fix geo timeout issue with pg-upgrade. !4148
• Upgrade to pgbouncer_exporter v0.2.0. !4167
• Update gitlab exporter to 7.0.2. !4178
• Set gitlab_url from gitlab_rails attributes. !4225
• Fix dbvacuum on pgupgrade. !4227
• Bump version of gitlab-exporter gem. !4232
• Disabling vts status module should keep gitlab-workhorse upstream. !4233 (Ovv)

Changed (4 changes, 1 of them is from the community)

• Provide and implement a custom resource for restarting a daemon when the version changes. !3958 (Mitch Nielsen)
• Enable Puma by default instead of Unicorn. !4141
• List all existing roles as options in gitlab.rb. !4192
• Bump Container Registry to v2.9.1-gitlab. !4197

Performance (5 changes)

• Enable frame pointer in Ruby compile options. !4030
• Disable RubyGems for Gitaly gitlab-shell hooks. !4103
• upgrade redis to 5.0.9. !4126
• Enable frame pointer in Git compile options. !4134
• Update nginx gzip settings. !4200

Added (13 changes, 3 of them are from the community)

• Add service_desk_email configuration. !3963
• Add new extra CAs configuration file to smime email signing. !4085 (Diego Louzán)
• Write gitlab shell configs to gitaly's config. !4110
• Enable sidekiq-cluster by default. !4140
• Add support for RSA private key for signing CI json web tokens. !4158
• gitlab-pages: introduce internal_gitlab_server parameter. !4174
• Add Prometheus rules for Puma. !4177
• Copy AMIs to all regions we have access to. !4185
• Add experimental support for ActionCable. !4204
• Add expunge deleted messages option to mailroom. !4211 (Diego Louzán)
• Add SSL_CERT_DIR to praefect's env. !4216
• Allow enabling of grafana alerting in omnibus-gitlab. !4229 (msschl)
• Update Praefect Grafana dashboards. !4241

Other (8 changes, 1 of them is from the community)

• Make GitLab 12.10 the minimum version to upgrade to 13.0. !4111
• Update links to PostgreSQL docs, point to version 11. !4150
• Rename slave to replica in the omnibus-gitlab Redis configuration. !4168
• Add troubleshooting doc for SMTP settings. !4170
• Update documentation link and comments in Unleash settings. !4191
• Patch Git to fix partial clone bug. !4217
• Update CA certificate bundle. !4230
• Update Mattermost to 5.22.2. (Harrison Healey)

12.10.14 (2020-07-06)

• No changes.

12.10.13 (2020-07-01)

Security (1 change)

• Update PCRE to version 8.44.

12.10.12 (2020-06-24)

Fixed (2 changes)

• Fix geo timeout issue with pg-upgrade. !4148
• Manually disable copy_file_range() on RedHat kernels. !4346

12.10.11 (2020-06-10)

• No changes.

12.10.8 (2020-05-28)

Fixed (1 change)

• Fix dbvacuum on pgupgrade. !4227

12.10.7 (2020-05-27)

Security (2 changes)

• Block requests to the grafana avatar endpoint.
• Update Ruby to 2.6.6.

12.10.6 (2020-05-15)

Fixed (4 changes)

• Fix tracking db revert from pg-upgrade. !4116
• Ignore the PG_VERSION value if database is not enabled. !4136
• Fix pg-upgrade wrong number of args error. !4189
• Only print pg upgrade message when postgres is actually enabled. !4209

Changed (1 change)

• Do not set a default value for client side database statement timeout. !4154

12.10.6 (2020-05-15)

• No changes.

12.10.5 (2020-05-13)

• No changes.

12.10.4 (2020-05-05)

• No changes.

12.10.3 (2020-05-04)

• No changes.

12.10.2 (2020-04-30)

Security (2 changes)

• Backport change for updating openssl/openssl from 1f to 1g.
• Remove sensitive info from Docker image.

12.10.1 (2020-04-24)

Fixed (4 changes)

• Rhel/centos8 rpm changed the arg input to posttrans. !4093
• Ensure the pg bin files fallback for geo-postgresql. !4118
• Prevent gitlab upgrades from GitLab 11.x. !4138
• Rename Repmgr to RepmgrHandler in HA pg-upgrade scenario. !4146

Deprecated (1 change)

• Print a deprecation notice for postgres upgrades if <11. !4054

12.10.0 (2020-04-22)

Security (1 change)

• Update openssl/openssl from 1.1.1d to 1.1.1e. !4019

Fixed (5 changes)

• Fixes sysctl error on reconfigure after reinstall. !3921
• Fix pg-upgrade error during sysctl commands. !4080
• Fix pg-upgrade error format exception. !4090
• Fixed pg upgrade for separate geo tracking db. !4091
• Fix repmgr failure during pg-upgrade. !4117

Deprecated (1 change)

• Deprecate user attributes of consul and repmgr in favor of username. !3489

Changed (4 changes)

• Upgrade Prometheus to 2.16.0. !3888
• Bump Container Registry to v2.9.0-gitlab. !4071
• Default to PG 11 for fresh installs. !4099
• Set PG 11 as the default for pg-upgrade, and update automatically. !4115

Performance (2 changes, 1 of them is from the community)

• Adjust Puma worker tuning. !4000
• Add more optimized gitconfig. !4050 (Son Luong Ngoc <sluongng@gmail.com)

Added (12 changes)

• Allow database timeout to be configured for the Rails app. !3844
• Add storage setting for terraform state. !3983
• Allow enabling experimental sidekiq-cluster. !4006
• redis: introduce options for lazy freeing. !4008
• Introduce gitlab-redis-cli. !4020
• Include libjpeg-turbo to enable jpeg support in graphicsmagick. !4027
• Add configuration for Praefect election strategy. !4048
• Generate ActionCable configuration file. !4066
• Adds gitlab-wrapper to praefect runit service to allow setting environment variables and graceful restarts. !4068
• Update Grafana to include Praefect dashboards. !4084
• Add Praefect config for enabling PostgreSQL-backed queue. !4096
• Set server_name for smartcard NGINX server context. !4105

Other (11 changes, 1 of them is from the community)

• Update logrotate version to 3.16.0. !3961
• Use structure.sql instead of schema.rb. !3969
• Update docutils from 0.13.1 to 0.16. !4017 (Takuya Noguchi)
• Use Go 1.13.9 to build components. !4025
• Build AMIs for all tags except RC and auto-deploy ones. !4036
• Upgrade to Git 2.26.0. !4039
• Update gitlab.rb.template with gitconfig defaults. !4049
• Update gitlab-exporter from 6.1.0 to 7.0.1. !4065
• Upgrade to Git 2.26.2. !4127
• Upgrade Mattermost to 5.21.0.
• Upgrade to Git 2.26.1.

12.9.10 (2020-06-10)

• No changes.

12.9.9 (2020-06-03)

• No changes.

12.9.8 (2020-05-27)

Security (2 changes)

• Block requests to the grafana avatar endpoint.
• Update Ruby to 2.6.6.

12.9.6 (2020-05-05)

• No changes.

12.9.5 (2020-04-30)

Security (2 changes)

• Backport change for updating openssl/openssl from 1f to 1g.
• Remove sensitive info from Docker image.

Other (1 change)

• Upgrade to Git 2.24.3. !4128

12.9.4 (2020-04-16)

Other (1 change)

• Upgrade to Git 2.24.2.

12.9.4 (2020-04-17)

Other (1 change)

• Upgrade to Git 2.24.2.

12.9.3 (2020-04-14)

Fixed (1 change)

• Upgrade to OpenSSL v1.1.1f. !4087

12.9.2 (2020-03-31)

Fixed (1 change)

• Configures logrotate service for puma. !4024

Added (1 change)

• Allow setting in seat_link_enabled in gitlab.rb. !4042

Other (1 change)

• Update Mattermost to 5.20.2.

12.9.1 (2020-03-26)

Security (1 change)

• Bump pcre2 version to 10.34.

12.9.0 (2020-03-22)

Fixed (5 changes, 1 of them is from the community)

• Support running pg-upgrade on geo-postgres in isolation. !3924
• Don't change group ownership of registry directory. !3931 (Henrik Christian Grove grove@one.com)
• Fix fetch_assets script for branch names with -z. !3941
• Upgrade pgbouncer_exporter to v0.1.3. !3982
• Fixes case when Geo secondary db changes do not restart the dependent services. !4002

Changed (5 changes, 1 of them is from the community)

• Restart GitLab Pages when new CA certs installed. !3842 (Ben Bodenmiller)
• Make PostgreSQL log settings configurable. !3949
• Move PostgreSQL runtime logging configuration to runtime.conf. !3955
• Update chef-acme to 4.1.1. !3980
• Bump Container Registry to v2.8.2-gitlab. !3996

Added (8 changes)

• Build AMIs for GitLab Premium. !3841
• Expose ssh_user as a distinct configuration option. !3925
• Allow advertise_addr to flow to consul services. !3948
• Add logrotate support for services not under gitlab namespace. !3952
• Add the elastic bulk indexer cron worker. !3965
• Geo: Symlink gitlab-pg-ctl command for Geo failover for HA. !3976
• Add smartcard_client_certificate_required_host to gitlab.rb. !3985
• Add failover_enabled top level option in praefect. !3987

Other (6 changes)

• Add docs about PG 11 being available. !3936
• Update gitlab-org/gitlab-exporter from 6.0.0 to 6.1.0. !3940
• Adds documentation note about updating environment variables for Puma. !3944
• Use the updated gitlab-depscan tool that allows whitelisting CVEs. !3947
• Modify mail_room to output crash logs as json. !3960
• Update Mattermost to 5.20.1.

12.8.10 (2020-04-30)

Security (2 changes)

• Backport change for updating openssl/openssl from 1f to 1g.
• Remove sensitive info from Docker image.

12.8.9 (2020-04-14)

Fixed (1 change)

• Upgrade to OpenSSL v1.1.1f. !4088

12.8.7 (2020-03-16)

• No changes.

12.8.6 (2020-03-11)

• No changes.

12.8.5

• No changes.

12.8.4

• No changes.

12.8.3

• No changes.

12.8.1

• No changes.

12.8.0

Security (2 changes, 1 of them is from the community)

• Update GraphicsMagick to 1.3.34. !3905 (Takuya Noguchi)
• Update postgresql 10.9->10.11, 9.6.14->9.6.16. Resolves CVE-2019-10208.

Fixed (2 changes)

• Handle worker timeouts configured as strings. !3877
• Fix prepared statements limit in database.yml. !3937

Deprecated (1 change)

• Pass GitLab Pages secrets as environment variables. !3689

Changed (10 changes)

• Update gitlab-exporter to 5.2.2. !3848
• Bump registry to v2.7.6-gitlab from v2.7.4-gitlab. !3862
• Bump registry to v2.7.7-gitlab from v2.7.6-gitlab. !3879
• Update gitlab-org/gitlab-exporter from 5.2.2 to 6.0.0. !3906
• Add support for PostgreSQL 11 to gitlab-ctl pg-upgrade. !3907
• Check root before gitlab-ctl reconfigure. !3913
• Don't restart and hup gitaly right after a fresh install. !3918
• Format Unicorn timestamp logs in ISO8601.3 format. !3926
• Bump Container Registry to v2.8.0-gitlab. !3929
• Bump Container Registry to v2.8.1-gitlab. !3934

Added (9 changes)

• Provide packages for CentOS/RHEL 8. !3748
• Adding Vacuum Queue metrics to postgres-exporter.yaml. !3771
• Support min_concurrency option for sidekiq-cluster. !3867
• Add Pages -gitlab-client-http-timeout and -gitlab-client-jwt-expiry". !3886
• Make GitLab GraphQL timeout configurable. !3916
• Compile repmgr for PG 11. !3919
• Support experimental_queue_selector option for sidekiq-cluster. !3920
• Add setting for environment auto stop worker. !3927
• Add notification on install for PG11. !3935

Other (6 changes)

• Add PostgreSQL 11 as an alpha database version. !3858
• Update monitoring components. !3874
• Patch Git to get better pack reuse. !3896
• Bump PostgreSQL versions to 9.6.17, 10.12, and 11.7. !3933
• Upgrade Mattermost to 5.19.1.
• Update Mattermost to 5.18.1.

12.7.9 (2020-04-14)

Fixed (1 change)

• Upgrade to OpenSSL v1.1.1f. !4089

12.7.8 (2020-03-26)

Security (1 change)

• Bump pcre2 version to 10.34.

12.7.7

Security (1 change)

• Update postgresql 10.9->10.12, 9.6.14->9.6.17. Resolves CVE-2019-10208.

12.7.6

• No changes.

12.7.5

Fixed (1 change)

• Fix prometheus duplicate rule. !3891

12.7.4

• No changes.

12.7.3

• No changes.

12.7.2

• No changes.

12.7.1

Fixed (1 change)

• Fetch external URL from EC2 only on fresh installations. !3878

12.7.0

Security (1 change)

• Update Mattermost to 5.17.3 (GitLab 12.6).

Fixed (1 change)

• Check for puma when setting Geo primary. !3855

Changed (7 changes, 1 of them is from the community)

• Disable Grafana Reporting & Update Check. !3793 (Stefan Schlesi)
• Update exiftool to 11.70. !3801
• Update gitlab-exporter to 5.1.0. !3806
• Update jemalloc to 5.2.1. !3807
• Update logrotate from r3-8-5 to 3.15.1. !3809
• Use value provided as EXTERNAL_URL during installation/upgrade in gitlab.rb. !3828
• Add grpc_latency_bucket config to praefect. !3854

Performance (2 changes)

• Update Redis to 5.0.7 and redis-exporter to 1.3.4. !3392
• Raise unicorn memory limits. !3853

Added (3 changes, 1 of them is from the community)

• Add gitlab-ctl command to fetch Redis master connection details. !3811
• Configure a maximum request duration for GitLab rails. !3830
• Add Service Platform Metrics Grafana dashboard by updating grafana-dashboards to v1.3.0. !3843 (Ben Bodenmiller)

Other (6 changes)

• Update https://git.code.sf.net/p/libpng/code from 1.6.35 to 1.6.37. !3800
• Update rubygems/rubygems from 2.7.9 to 2.7.10. !3805
• Update chef and chef-zero versions. !3810
• Patch Git to get reused pack info. !3812
• Collect NOTICE files of softwares under Apache license. !3821
• Bump Ruby version to 2.6.5. !3827

12.6.7

• No changes.

12.6.6

• No changes.

12.6.5

Security (1 change)

• Update Mattermost to 5.17.3 (GitLab 12.6).

12.6.4

• No changes.

12.6.3

• No changes.

12.6.2

• No changes.

12.6.1

Fixed (1 change)

• Revert to passing Redis password as command line argument. !3816

12.6.0

Removed (1 change)

• Stop building packages for openSUSE 15.0. !3753

Fixed (10 changes, 2 of them are from the community)

• Fix SELinux installation failures on CentOS 8. !3752
• Grafana login should not require local PostgreSQL. !3761
• Set Referrer-Policy for Mattermost to strict-origin-when-cross-origin, allow customization. !3763 (Florian Kaiser)
• write pages template, when api_secret_key is defined. !3770 (Max Wittig)
• Add rack_attack_admin_area_protected_paths_enabled setting. !3773
• Use valid sslmode setting in postgres-exporter. !3777
• Fix inability to disable Connection and Upgrade NGINX headers. !3781
• Fix admin_email_worker_cron rendering in gitlab.yml. !3790
• Use password if provided to detect running Redis version. !3796
• Revert to passing Redis password as command line argument. !3816

Changed (1 change)

• Allow multiple virtual storages in praefect config. !3754

Added (5 changes)

• Add personal_access_tokens_expiring_worker configuration to gitlab.rb. !3679
• Add incoming_email_log_file config. !3719
• Add Praefect sentry configs. !3759
• Show warning during reconfigure if version of running Redis instance is different than the installed one. !3787
• Praefect: render database section in config.toml. !3791

Other (3 changes)

• Upgrade to Git 2.24. !3768
• Change Puma log format to JSON. !3785
• Update Mattermost to 5.17.1.

12.5.10

• No changes.

12.5.8

Security (1 change)

• Update Mattermost to 5.16.5 (GitLab 12.5).

12.5.7

• No changes.

12.5.5

Fixed (2 changes)

• Fix unwanted Grafana resets during upgrades. !3772
• Bump acme-client version to 2.0.5. !3782

12.5.5

• No changes.

12.5.4

Security (1 change, 1 of them is from the community)

• Upgrade git to security patch 2.22.2. (Marin Jankovski)

12.5.3

• No changes.

12.5.2

Security (1 change)

• Disable grafana metrics api by default and add option to enable it.

12.5.1

• No changes.

12.5.0

Security (1 change)

• Update Mattermost to 5.15.2.

Fixed (4 changes)

• Build from Docker Distribution fork and update to v2.7.4-gitlab. !3686
• Support alternative PG directories in pg-upgrade. !3701
• Geo: Fix refresh foreign tables on reconfigure. !3728
• Fix praefect prometheus configuration. !3731

Changed (4 changes)

• Add new format for praefect storage node configuration. !3699
• Make Puma/Unicorn exclusive. !3703
• Add internal_socket_dir to gitaly config. !3711
• Allow to specify shutdown_blackout_seconds. !3734

Added (6 changes)

• Add settings for feature flags unleash client. !3681
• Add gitlab-etc backup to pre-install. !3682
• Add support for GitLab Pages authentication secret. !3705
• Check for non-UTF8 locale during reconfigure. !3708
• Make systemd unit ordering configurable. !3743
• Enable registry using external_url when https is auto enabled. !3747

Other (6 changes)

• Update Consul Version. !3400
• Add logging directory default for gitlab shell in gitaly config.toml. !3680
• Add prevent_ldap_sign_in option to gitlab.rb. !3692
• Update instructions for adding setting to gitlab.yml. !3710
• Refactor LetsEncrypt auto-enabling logic. !3712
• Update Mattermost to 5.16.2.

12.4.8

• No changes.

12.4.7

• No changes.

12.4.6

Security (1 change, 1 of them is from the community)

• Upgrade git to security patch 2.22.2. (Marin Jankovski)

12.4.4

• No changes.

12.4.3

Security (1 change)

• Update Mattermost to 5.15.2.

12.4.2

• No changes.

12.4.1

• No changes.

12.4.0

Security (2 changes)

• Update openssl to 1.1.1d. !3674
• Update Grafana version to 6.3.5.

Fixed (11 changes)

• Nginx responds to health checks with correct content types. !3594
• Fix pg-upgrade handling of secondary database nodes. !3631
• Do not cleanup old gitlab-monitor directory if explicitly using it. !3634
• Resolve "Reconfigure skips Geo DB migrations if Geo DB is not running on the same machine". !3635
• Fix database replication bootstrap with gitlab-ctl repmgr standby setup. !3636
• Ensure user's gitconfig contains system's core options. !3648
• Warn when LD_LIBRARY_PATH env var is set. !3652
• Add Rugged search path to Gitaly config. !3656
• Use MD5 checksums in the registry's Google storage driver. !3660
• Don't fail gitaly startup if setting ulimit fails. !3684
• Upgrade PgBouncer to v1.12.0. !3691

Deprecated (2 changes)

• Deprecates Protected Paths setting. !3597
• Mark openSUSE 15.0 to be warned about during reconfigure. !3687

Changed (3 changes)

• Update Geo zero downtime instructions. !3562
• Add saturation recording rules to Prometheus. !3665
• Add virtual_storage_name, auth to praefect. !3672

Added (6 changes, 2 of them are from the community)

• Add skip-auto-backup flag to skip backup during upgrade. !3245 (Dany Jupille)
• Add Praefect as a GitLab service. !3580
• Allow setting of alertmanager global config. !3611
• Update grafana-dashboards to v1.2.0. !3627 (Takuya Noguchi)
• Add TasksMax setting to systemd unit file. !3649
• Build packages for openSUSE 15.1. !3683

Other (5 changes)

• Consult the gitlab-elasticsearch-indexer version from GitLab. !3276
• Add core.fsyncObjectFiles as default git config. !3632
• Use postgresql_config resource for postgresql configuration files. !3647
• gitlab-shell: use make build instead of bin/compile. !3653
• Update Mattermost to 5.15.

12.3.9

Security (1 change, 1 of them is from the community)

• Upgrade git to security patch 2.22.2. (Marin Jankovski)

12.3.8

Security (2 changes)

• Update Mattermost to 5.14.5 (GitLab 12.3).
• Disable grafana metrics api by default and add option to enable it.

12.3.7

• No changes.

12.3.4

Fixed (1 change)

• Update postgresql-bin.json to be generated from a template. !3643

12.3.3

• No changes.

12.3.2

Security (1 change)

• Update Grafana version to 6.3.5.

12.3.1

• No changes.

12.3.0

Security (2 changes)

• Make logrotate perform operations not as root user.
• Add documentation for configuring an asset proxy server.

Fixed (5 changes, 1 of them is from the community)

• Wrap prometheus.listen_address value in quotes in the config/gitlab.yml file. !3561
• Show errors when misspelled top-level config is used. !3563
• Change download mirror for unzip software. !3602
• Invoke die method from proper scope. !3604
• Update Mattermost to 5.14.2. (Harrison Healey)

Changed (3 changes)

• Clean up disabled services for service discovery for prometheus. !3506
• Use file resource instead of using gitlab-keys. !3558
• Removed non-gzipped files for sourcemaps to save on package size. !3592

Performance (1 change)

• Fix slow fetches for repositories using object deduplication. !3559

Added (6 changes, 2 of them are from the community)

• Add SMIME email notification settings. !3514 (Diego Louzán)
• Add settings to specify SSL cert and key for DB server. !3529
• Add option to allow some provider bypass two factor. !3543 (Dodocat)
• [Geo]Configuration for Docker Registry Replication. !3549
• Make gitaly open files ulimit configurable. !3560
• Add smartcard_san_extensions to gitlab.rb. !3566

Other (8 changes, 1 of them is from the community)

• Rename gitlab-monitor to gitlab-exporter. Service name, log directory, prometheus job names and more have been updated. !3517
• Add backup of /etc/gitlab to upgrade process. !3518
• Cleanup deprecated settings list. !3527
• Update monitoring components. !3550
• Regenerate database.ini if missing. !3555
• Deprecate node['gitlab'] monitoring attributes instead of removal. !3583
• Update gitlab-elasticsearch-indexer to v1.3.0. !3587
• Update Mattermost to 5.14. (Harrison Healey)

12.2.12

Security (1 change, 1 of them is from the community)

• Upgrade git to security patch 2.22.2. (Marin Jankovski)

12.2.11

Security (1 change, 1 of them is from the community)

• Upgrade git to security patch 2.22.2. (Marin Jankovski)

12.2.10

Security (1 change, 1 of them is from the community)

• Upgrade git to security patch 2.22.2. (Marin Jankovski)

12.2.8

• No changes.

12.2.6

Security (1 change)

• Update Grafana version to 6.3.5.

12.2.5

• No changes.

12.2.4

Security (1 change, 1 of them is from the community)

• Update Mattermost to 5.13.3 (GitLab 12.2). (Harrison Healey)

12.2.3

• No changes.

12.2.2

• No changes.

12.2.1

Fixed (1 change)

• Fix Error 500s when loading repositories with license files. !3542

12.2.1

Security (2 changes)

• Add documentation for configuring an asset proxy server.
• Make logrotate perform operations not as root user.

12.2.0

Security (5 changes, 1 of them is from the community)

• Update nginx to 1.16.1. !3525
• Rename unused redis commands by default. !3436
• Update PostgreSQL to 9.6.14 and 10.9. !3492
• Update GraphicsMagick to 1.3.33. !3494 (Takuya Noguchi)
• Update nginx to 1.16.1. !3525
• Rename Grafana directory as part of upgrade to invalidate user sessions.

Removed (1 change)

• Stop building packages for openSUSE 42.3. !3469

Fixed (5 changes)

• Validate runit can set ownership of config files. !3332
• Use armv7 build of Grafana in RPi package. !3401
• A new wrapper for backup and restore to change ownership of registry directory automatically. !3447
• Clean up stale Redis instance config files. !3464
• Typo in initial_license in gitlab.rb. !3497

Changed (5 changes, 1 of them is from the community)

• Update nginx to version 1.16.0. !3442
• Enable TLS v1.3 by default in NGINX. !3458
• Cleanup unnecessary gem files in gitlab package. !3471
• Support manually setting the db version for psql bin. !3485
• Add default support of ECDSA https certificates in nginx. !3511 (ptymatt)

Performance (1 change)

• Adjust unicorn worker CPU formula. !3473

Added (4 changes, 1 of them is from the community)

• Build packages for Debian Buster. !3426
• add option to define custom page headers. !3465 (Max Wittig)
• Add support for Content Security Type. !3499
• Bump the Git version to 2.22. !3502

Other (6 changes, 1 of them is from the community)

• Upgrade rubocop to 0.69.0. !3473
• Upgrade gitlab-monitor to 4.2.0. !3483
• Attempt to upgrade the database in the docker image. !3515
• Bump ohai version to 14.14.0. !3523
• Update Mattermost to 5.13.2. (Harrison Healey)
• Add perl dependency to SSL troubleshooting steps.

12.1.17

Security (1 change, 1 of them is from the community)

• Upgrade git to security patch 2.21.1. (Marin Jankovski)

Other (1 change)

• Consult the gitlab-elasticsearch-indexer version from GitLab. !3663

12.1.16

• No changes.

12.1.15

Security (1 change, 1 of them is from the community)

• Upgrade git to security patch 2.21.1. (Marin Jankovski)

Other (1 change)

• Consult the gitlab-elasticsearch-indexer version from GitLab. !3663

12.1.14

• No changes.

12.1.13

• No changes.

12.1.12

• No changes.

12.1.11

• No changes.

12.1.10

• No changes.

12.1.10

Security (1 change)

• Update Grafana version to 6.3.5.

12.1.5

Security (1 change)

• Automatically set an admin password for Grafana and disable basic authentication.

12.1.4

• No changes.

12.1.3

Other (1 change)

• Fix bzip2 location. !3448

12.1.2

• No changes.

12.1.2

• No changes.

12.1.1

• No changes.

12.1.0

Security (1 change, 1 of them is from the community)

• Update Mattermost to 5.11.1 (GitLab 12.0). (Harrison Healey)

Fixed (15 changes, 2 of them are from the community)

• Auto-enable Let's Encrypt for certificate renewal. !3342
• Use PostgreSQL username from node attribute file in gitlab-ctl command. !3352
• gitaly: prometheus not working with tls enabled. !3353 (Roger Meier)
• Support pg-upgrade on dbs with collate and ctype values that differ from each other. !3371
• Properly check whether postgres is enabled when doing pg-upgrade. !3381
• Bring back the option to use the authorized keyfile in docker. !3388
• Get prometheus home directory from node attributes. !3395
• Create the uploads_storage_path directory. !3396
• Fix upgrade time calculation metric. !3397
• Fix GitLab upgrades crashing when LetsEncrypt cert needs renewal. !3402
• Set ALTERNATIVE_SOURCES for tests. !3412
• Fix error with repmgr and PostgreSQL 9. !3417
• Make Roles respect user specified configuration. !3423
• Enable specifying --path in bundle install on Ruby docker images. !3432
• Update Mattermost to 5.12.4. (Harrison Healey)

Deprecated (1 change)

• Remove bundled MySQL client and related docs. !3382

Changed (5 changes)

• Ensure we only grab the last line of stdout from rails runner. !3406
• Set INSTALLATION_TYPE of Marketplace AMI to gitlab-aws-marketplace-ami. !3414
• Add support for ACME v2. !3420
• Run before_fork only once on boot for Unicorn.
• Update redis_exporter to 1.0.3.

Added (8 changes, 1 of them is from the community)

• Add recording rules for SLIs. !3335
• Build packages for openSUSE 15.0. !3343
• Add worker configuration for pages domain ssl renewal through Let's Encrypt. !3355
• Add prometheus settings to gitlab.yml. !3383
• Add a role for monitoring. !3404
• Add smartcard_required_for_git_access to gitlab.rb. !3415
• Add ability to set 'maxsize' for logrotate configs. !3419
• add option to enable sentry and to define dsn/environment for pages. !3424 (Roger Meier)

Other (7 changes, 2 of them are from the community)

• Upgrade to OpenSSL 1.1.1c. !3069
• Add GEO support to pg-upgrade. !3316
• Use Go module vendoring for builds. !3337
• Bump Chef related libraries to 14.x. !3344
• Use Postgresql 10.7 instead of 10.7.0. !3387 (Takuya Noguchi)
• Enable frame pointer in Redis compile options. !3421
• Update Mattermost to 5.12.2. (Harrison Healey)

12.0.10

Security (2 changes, 2 of them are from the community)

• Update Mattermost to 5.11.1 (GitLab 12.0). (Harrison Healey)
• Upgrade git to security patch 2.21.1. (Marin Jankovski)

Fixed (5 changes)

• Support pg-upgrade on dbs with collate and ctype values that differ from each other. !3371
• Properly check whether postgres is enabled when doing pg-upgrade. !3381
• Use armv7 build of Grafana in RPi package. !3401
• Fix error with repmgr and PostgreSQL 9. !3417
• Enable specifying --path in bundle install on Ruby docker images. !3432

Performance (1 change)

• Fix slow pushes for repositories using object deduplication. !3364

Other (1 change)

• Fix bzip2 location. !3448

12.0.10

Security (2 changes, 2 of them are from the community)

• Update Mattermost to 5.11.1 (GitLab 12.0). (Harrison Healey)
• Upgrade git to security patch 2.21.1. (Marin Jankovski)

Fixed (5 changes)

• Support pg-upgrade on dbs with collate and ctype values that differ from each other. !3371
• Properly check whether postgres is enabled when doing pg-upgrade. !3381
• Use armv7 build of Grafana in RPi package. !3401
• Fix error with repmgr and PostgreSQL 9. !3417
• Enable specifying --path in bundle install on Ruby docker images. !3432

Performance (1 change)

• Fix slow pushes for repositories using object deduplication. !3364

Other (1 change)

• Fix bzip2 location. !3448

12.0.9

Security (2 changes, 1 of them is from the community)

• Patch nginx 1.14.2 for CVE-2019-9511, CVE-2019-9513, CVE-2019-9516.
• Update Mattermost to 5.11.1. (Marc Schwede)

12.0.8

Security (2 changes)

• Add documentation for configuring an asset proxy server.
• Make logrotate perform operations not as root user.

12.0.7

Security (2 changes)

• Add documentation for configuring an asset proxy server.
• Make logrotate perform operations not as root user.

12.0.6

Security (1 change)

• Rename Grafana directory as part of upgrade.

12.0.5

Security (1 change)

• Automatically set an admin password for Grafana and disable basic authentication.

12.0.3 (2019-07-01)

• No changes.

12.0.2 (2019-06-25)

• No changes.

12.0.1 (2019-06-24)

Fixed (1 change)

• Fix upgrade version check in preinst to handle double-decimal-digit versions. !3369

12.0.0 (2019-06-22)

Removed (4 changes)

• Remove old env directory cleaning. !3290
• Remove support for skip-auto-migrations file. !3306
• Remove TLSv1.1 support in nginx. !3307
• Remove Prometheus 1.x support. !3315

Fixed (11 changes)

• Add timeout option to pg-upgrade command. !3284
• Ensure reconfigure has succeeded reading node attributes. !3302
• Set default path for git storage directories if user didn't specify one. !3304
• Get node attribute file from directory contents if hostname is empty. !3309
• Ensure sidekiq and gitlab-monitor are restarted when the ruby version changes. !3317
• Upgrade node-exporter to 0.18.1. !3326
• Update Prometheus exporters. !3328
• Handle special characters in FDW passwords. !3339
• Hup Mattermost after a version upgrade. !3340
• Fix Unicorn not cleaning up stale metrics file at startup. !3350
• Don't fail on public attribute file on missing 'normal' key. !3358

Deprecated (1 change)

• Mark openSUSE 42.3 as deprecated. !3334

Changed (6 changes)

• Extracted postgresql recipe logic in gitlab recipe to its own recipe. !2794
• Enable Grafana by default and configure GitLab SSO. !3272
• Make PostgreSQL 10.7 the default version. !3291
• Default to JSON logging when possible. !3292
• Allow health check endpoints to be access via plain http. !3296
• Remove old chef state before running chef commands. !3310

Performance (2 changes)

• Upgrade Ruby to 2.6.3. !3119
• Disable AuthorizedKeysFile in Docker. !3198

Added (6 changes, 1 of them is from the community)

• Allow configuring an HTTP proxy for GitLab Pages. !3060 (Ben Anderson)
• Add Pages -insecure-ciphers support. !3275
• Add Pages -tls-min-version and -tls-max-version support. !3286
• Service discovery for Prometheus via Consul. !3295
• Replace --auth-server with --gitlab-server flag for pages. !3314
• Make gitaly git.catfile_cache_size configurable. !3329

Other (13 changes, 2 of them are from the community)

• Update python to 3.7.3 with updated libedit patches. !3274 (Takuya Noguchi)
• GitLab-Pages can output JSON format logs. !3288
• Ensure reconfigure runs with our desired version of the acme-client gem. !3294
• Update sysctl to use --system option. !3298
• Set 11.11 to be the minimum version required to upgrade to 12.0. !3300
• Document Setting Logs to Non-JSON Format. !3303
• Remove PG 9.6 to 9.6.8 directory symlink. !3305
• Publish unlicensed EE AMI to Community AMIs. !3331
• Update gitlab-elasticsearch-indexer to v1.2.0. !3331
• Skip automatic pg-upgrade on GEO. !3338
• Specify Ruby 2.6.3 for development. !3345
• Update Mattermost to 5.11.0. (Harrison Healey)
• Stop printing certificate skipped messages, instead list which certs were copied.

11.11.8

Security (1 change, 1 of them is from the community)

• Update Mattermost to 5.10.2 (GitLab 11.11). (Harrison Healey)

11.11.7

• No changes.

11.11.5 (2019-06-27)

• No changes.

11.11.4 (2019-06-26)

Other (1 change)

• Publish unlicensed EE AMI to Community AMIs. !3331

11.11.3 (2019-06-10)

Fixed (2 changes)

• Fix bug in pg-upgrade HA detection. !3287
• Pass cron directory to crond run file. !3327

11.11.2 (2019-06-04)

Fixed (1 change, 1 of them is from the community)

• Update Mattermost to 5.10.1 (GitLab 11.11). (Harrison Healey)

11.11.1 (2019-05-30)

• No changes.

11.11.0 (2019-05-22)

Security (1 change)

• Upgrade RubyGems to 2.7.9. !3082

Removed (1 change)

• Remove postgres auto-upgrade from Docker images for 11.11.0 release.

Fixed (4 changes)

• Run pg_upgrade with configured postgres username. !3162
• Fix Grafana GitLab Authentication. !3195
• Run repmgr's psql commands as the specified user. !3224
• Remove timestamp prefix from JSON formatted registry logs.

Deprecated (1 change)

• Stop building Ubuntu 14.04 packages. !3192

Changed (4 changes)

• Patch bundle install in CentOS 6 to install sassc gem using newer GCC. !3112
• Enable additional node metrics. !3207
• geo_log_cursor is located in ee/bin/ now. !3223
• Bump Grafana Dashboards. !3241

Performance (2 changes)

• Use AuthorizedKeysCommand in Docker builds. !3191
• Remove smaps metrics from gitlab-monitor. !3279

Added (12 changes, 2 of them are from the community)

• Bundle PostgreSQL 10 with the package. !3142
• Docker: attempt to cleanup stale pids on restart. !3200
• Decouple Geo node identity from external_url. !3201
• Add configuration support for dependency proxy feature. !3206
• add option to define Sentry settings. !3214 (Roger Meier)
• Support gitlab-shell feature flags through gitlab.rb. !3215
• Upgrade Git to 2.21. !3220
• Add HA support for pg-upgrade command. !3240
• Add pages domain removal cron configuration. !3246
• Allow Sentry client-side DSN to be passed on gitlab.yml. !3249
• add option to define Sentry environment for gitaly. !3253 (Roger Meier)
• Add option to provide license during initial installation. !3265

Other (7 changes, 2 of them are from the community)

• Bump Prometheus components to the latest. !3182
• Update liblzma to 5.2.4. !3197
• Update libtool to 2.4.6. !3210
• Move sidekiq-cluster to ee/bin. !3216
• Rename library methods to make their function explicit. !3222
• Update Mattermost to 5.10.0. (Harrison Healey)
• Stop raspberry pi builds during nightlies. (John T Skarbek)

11.10.8 (2019-07-01)

• No changes.

11.10.7 (2019-06-26)

• No changes.

11.10.6 (2019-06-04)

Fixed (1 change)

• Pin procfs version used for building redis-exporter. !3319

11.10.4 (2019-05-01)

Security (1 change, 1 of them is from the community)

• Update Mattermost to 5.9.1 (GitLab 11.10). (Harrison Healey)

11.10.3 (2019-04-30)

Fixed (1 change)

• Update exclusion of gem cache to match ruby 2.5. !3243

11.10.2 (2019-04-25)

• No changes.

11.10.1 (2019-04-23)

• No changes.

11.10.0 (2019-04-22)

Security (1 change)

• Bundle exiftool as a dependency.

Fixed (3 changes)

• Use a fixed git abbrev parameter when we fetch a git revision. !3143
• Fix bug where passing -w to pg-upgrade aborted the process. !3164
• Update WorkhorseHighErrorRate alert. !3183

Changed (3 changes)

• Remove gitlab-markup custom patches. !3115
• Add grafana-dashboards to auto-provisioning. !3141
• Set the default LANG variable in docker to support UTF-8. !3159

Added (7 changes, 2 of them are from the community)

• Refactor Prometheus rails scrape config. !3046 (Ben Kochie bjk@gitlab.com)
• Support conditional external diffs. !3059
• Support for registry-garbage-collect command. !3097
• Add sub_module to bundled nginx. !3100 (Rafael Gomez)
• Add gitaly graceful restart wrapper. !3116
• Add optional db_name to "gitlab-ctl replicate-geo-database". !3124
• Add default Referrer-Policy header. !3138

Other (9 changes, 2 of them are from the community)

• Upgrade jemalloc to 5.1.0. !2957
• Update CA Certificates to 2019-01-23. !3095
• Add gitlab_shell.authorized_keys_file to gitlab.yml. !3096
• Update to latest krb5 version 1.17. !3114
• Update to latest libxml2. !3156
• Update bundler to 1.17.3. !3157 (Takuya Noguchi)
• Share AWS AMIs with the Marketplace account. !3190
• Move software built from git to omnibus-mirror. !3228
• Update Mattermost to 5.9.0 (GitLab 11.10). (Harrison Healey)

11.9.12 (2019-05-30)

Security (1 change, 1 of them is from the community)

• Update Mattermost to 5.8.2 (GitLab 11.9). (Harrison Healey)

11.9.11 (2019-04-30)

• No changes.

11.9.10 (2019-04-26)

• No changes.

11.9.9 (2019-04-23)

Other (1 change)

• Move software built from git to omnibus-mirror. !3228

11.9.8 (2019-04-11)

• No changes.

11.9.7 (2019-04-09)

• No changes.

11.9.6 (2019-04-04)

Fixed (1 change)

• Fix Grafana auth URLs. !3139

11.9.5 (2019-04-03)

Security (1 change, 1 of them is from the community)

• Update Mattermost to 5.8.1. (Harrison Healey)

Fixed (1 change)

• Fix typo in Prometheus v2 rules. !3145

11.9.3 (2019-03-27)

• No changes.

11.9.2 (2019-03-26)

Security (1 change)

• Bundle exiftool as a dependency.

11.9.1 (2019-03-25)

• No changes.

11.9.0 (2019-03-22)

Security (2 changes)

• Delete build artifacts from AMIs before publishing. !3044
• Upgrade to OpenSSL 1.0.2r. !3066

Fixed (6 changes, 2 of them are from the community)

• Fix permissions of repositories directory in update-permissions script. !3029 (Matthias Lohr mail@mlohr.com)
• Fix issue with sshd failing in docker with user remap and privileged. !3047
• Allow Geo tracking DB user password to be set. !3058
• Restore docker registry compatibility with old clients using manifest v2 schema1. !3061 (Julien Pervillé)
• Automatically configure Prometheus alertmanager. !3071
• Ensure gitaly is setup before migrations are run.

Deprecated (1 change)

• Update nginx to version 1.14.2. !3065

Changed (1 change)

• Upgrade gitlab-monitor to 3.1.0. !3052

Added (5 changes)

• Add Prometheus support to Docker Registry. !2884
• Add option to disable init detection. !3028
• Add Grafana service. !3057
• Support Google Cloud Memorystore by disabling Redis CLIENT. !3072
• Support Google Cloud Memorystore in gitlab-monitor. !3084

Other (6 changes, 4 of them are from the community)

• Update mixlib-log from 1.7.1 to 3.0.1. !2951
• Stop building packages for Raspbian Jessie. !3004
• Update python to 3.4.9. !3040 (Takuya Noguchi)
• Update docutils to 0.13.1. !3042 (Takuya Noguchi)
• Replace deprecated "--no-ri --no-rdoc" in rubygems. !3050 (Takuya Noguchi)
• Update Mattermost to 5.8. !3070 (Harrison Healey)

11.8.10 (2019-04-30)

• No changes.

11.8.9 (2019-04-25)

• No changes.

11.8.8 (2019-04-23)

Security (1 change, 1 of them is from the community)

• Upgrade Mattermost to 5.7.3 (GitLab 11.8). !3137 (Harrison Healey)

11.8.7 (2019-04-09)

• No changes.

11.8.6 (2019-03-28)

• No changes.

11.8.5 (2019-03-27)

• No changes.

11.8.4 (2019-03-26)

Security (1 change)

• Bundle exiftool as a dependency.

11.8.3 (2019-03-19)

• No changes.

11.8.2 (2019-03-13)

Fixed (2 changes, 1 of them is from the community)

• Restore docker registry compatibility with old clients using manifest v2 schema1. !3061 (Julien Pervillé)
• Ensure gitaly is setup before migrations are run.

Other (1 change, 1 of them is from the community)

• Update Mattermost to 5.7.2. !3080 (Harrison Healey)

11.8.1 (2019-02-28)

Fixed (1 change)

• Add support for restart_command in runit cookbook. !3062

Added (1 change, 1 of them is from the community)

• Adding scripts/changelog. !3009 (Ian Baum)

11.8.0 (2019-02-22)

• Remove Redis config from gitlab-shell !3000
• Add AWS customer provided encryption key configuration option !2928
• Fix mattermost data directory permissions with update-permissions
• Properly encode the Redis password component in the URL !2999
• Patch runit to not consider status of log service for status command exit code !2949
• Upgrade libpng to 1.6.36 !2950
• Fix invalid registry redirect url when using the default ports (jelhan) !2961
• Update runit cookbook to v4.3.0 !2902
• Turn on http to https redirection for Registry and Mattermost if LE integration is used !2968
• Make registry validation configurable !2992
• Upgrade Docker registry to 2.7.1 !2970
• Upgrade Nginx to 1.12.2 !2988
• Bump gitlab-elasticsearch-indexer to 1.0.0
• Include experimental Docker Distribution Pruner !2946
• Update Prometheus to v2.6.1 !2981
• Update Prometheus node_exporter to v0.17.0 !2981
• Update Prometheus redis_exporter to v0.26.0 !2981
• Support smartcard auth against LDAP server !3006
• Update Mattermost to 5.7.1
• Update Prometheus alerting rules !3011
• Allow external diffs for merge requests to be configured

11.7.12 (2019-04-23)

• No changes.

11.7.11 (2019-04-09)

• No changes.

11.7.10 (2019-03-28)

• No changes.

11.7.9 (2019-03-27)

• No changes.

11.7.8 (2019-03-26)

Security (1 change)

• Bundle exiftool as a dependency.

11.7.7 (2019-03-19)

• No changes.

11.7.0

• Disable nginx proxy_request_buffering for git-receive-pack !2935
• Hide transfer of refs/remotes/* in git config !2932
• Add option to specify a registry log formatter !2911
• Ensure env values are converted to strings (Romain Tartière) !2923
• Make location of repmgr.conf dynamic in run file and gitlab-ctl commands !2924
• Enabled ENA networking and SRIOV support to AMIs !2867
• Drop support for Debian Wheezy !2943
• Restart sidekiq-cluster when relevant changes occur !2945
• Support TLS communication with gitaly

11.6.11 (2019-04-23)

• No changes.

11.6.10 (2019-02-28)

• No changes.

11.6.3

• Fix Docker registry not working with Windows layers !2938
• Remove deprecated OpenShift template !2936
• Update Mattermost to 5.6.2
• Fix warnings/errors when Prometheus is disabled. !2940

11.6.2

• Fix environment variables not being cleaned up !2934

11.6.0

• Switch restart_command for Unicorn service to signal HUP instead of USR2 !2905
• Upgrade Ruby to 2.5.3 !2806
• Deprecate postgresql['data_dir'] !2846
• Move env directory of all services to /opt/gitlab/etc/<service>/env !2825
• Move the postgres install to being located under its major version path !2818
• Add support for Git v2 protocol in docker image's sshd_config !2864
• Add client support for Redis over SSL !2843
• Disable sidekiq probes of gitlab-monitor by default in Redis HA mode and provide probe_sidekiq attribute to control it. !2872
• Update docker registry to include a set of patches from the upcoming 2.7.0 release !2888
• Update Mattermost to 5.5.0
• Add impersonation_enabled configuration to gitlab.rb !2880
• Update runit version to 2.1.2 !2897
• Update Prometheus components !2891
• Add smartcard configuration to gitlab.rb !2894

11.5.11 (2019-04-23)

• No changes.

11.5.8

• Hide transfer of refs/remotes/* in git config

11.5.2

• Make remote-syslog detect log directories of all services correctly !2871

11.5.1

• Update GITLAB_PAGES_VERSION to 1.3.1
• Update GITLAB_WORKHORSE_VERSION to 7.1.3
• Update postgresql to 9.6.11 !2840

11.5.0

• Add experimental support for Puma !2801
• Move to standardized cluster lifecycle event handlers in preparation for Puma support !2728
• Update gitlab-monitor to 2.19.1
• Add option to configure consul group !2781
• Add Prometheus alerts for GitLab components !2753
• Update required gitlab-elasticsearch-indexer version to 0.3.0 for Elasticsearch 6 support !2791
• Add option to configure postgresql group !2780
• Add option to configure prometheus group !2782
• Add option to configure redis group !2784
• Upgrade Bundler version to 1.16.6
• Omit Gitaly development and test gems !2808
• Support for Pages access control settings (Turo Soisenniemi)
• Pages: Support limiting connection concurrency !2815
• Geo: Fix adding a password to the FDW user mapping !2799
• Specify groups while running services and gitlab- prefixed commands !2785
• Update Mattermost to 5.4.0
• Warn users when postgresql needs to be restarted due to version changes !2823
• Ensure postgres doesn't automatically restart when it's run file changes !2830
• Add nginx-module-vts for Prometheus metrics collection !2795
• Ensure pgbouncer is shut down when multiple master situation is encountered and resumed when it is cleared !2812
• Provide SSL_CERT_DIR to embedded Go services !2813

11.4.8

• Update GITLAB_PAGES_VERSION to 1.1.1
• Update GITLAB_WORKHORSE_VERSION to 7.0.1

11.4.1

• Upgrade Ruby version to 2.4.5

11.4.0

• Enable omniauth by default !2728
• Update Mattermost to 5.3.1
• Fix identification of Prometheus's rule directory !2736
• Run geo_prune_event_log_worker_cron every 5min
• Fix workhorse log path in the Docker fix update-permission script !2742 (Matteo Mazza)
• Remove recursive chown for public directory !2743
• Update libpng to 1.6.35 !2746
• Update redis to 3.2.12 !2750
• Update libgcrypt to 1.8.3 !2747
• Update npth version to 1.6
• Update libgpg-error to 1.32
• Update libassuan to 2.5.1
• Update gpgme to 1.10.0
• Update gnupg to 2.2.10
• Bump git to 2.18.1
• Set only files under trusted_cert directory explicitly to user read/write and group/other read. !2755
• Use Prometheus 2.4.2 for new installs. Deprecate Prometheus 1.x and add prometheus-upgrade command !2733

11.3.11

• Update GITLAB_PAGES_VERSION to 1.1.1
• Update GITLAB_WORKHORSE_VERSION to 6.1.2

11.3.4

• Bump git to 2.18.1

11.3.2

• Update pgbouncer cookbook to not regenerate databases.ini on hosts using consul watchers

11.3.1

• Update Mattermost to 5.2.2

11.3.0

• Support max_concurrency option in sidekiq_cluster
• Support Redis hz parameter
• Support Redis tcp-backlog parameter
• Disable SSL compression by default when using gitlab-psql or gitlab-geo-psql
• Increase Sidekiq RSS memory limit from 1 GB to 2 GB
• Add /metrics endpoint to gitlab_monitor !2719 (Maxime)
• Reload sysctl if a new symlink is created in /etc/sysctl.d
• Bump omnibus-ctl to v0.6.0 !2715
• Add missing pgbouncer options
• Add plugin_directory and plugin_client_directory to supported Mattermost settings !2649

11.2.3

• Fix custom runtime_dir not working
• Geo Secondary: ensure rails enabled when Gitaly enabled !2720
• Update Mattermost to 5.2.1
• Update libiconv to 1.15
• Update libiconv zlib and makedepend build recipe to improve build cache reuse

11.2.1

• Fix bzip2 download source
• Allow configuration of maven package repository

11.2.0

• Bump git to 2.18.0 !2636
• Bump Prometheus Alertmanager to 0.15.1 !2664
• Update gitlab-monitor to 2.18.0 !2662
• Update gitlab-monitor to 2.17.0
• Enable rbtrace for unicorn if ENABLE_RBTRACE is set
• Fix database.yml group setting to point at the proper user['group']
• Fix Prometheus metrics not working out of the box in Docker
• Make gitlab-ctl repmgr standby setup honor postgresql['data_dir']
• Update Mattermost to 5.1.1
• Update repmgr-check-master to exit 1 for standby nodes
• Run GitLab service after systemd multi-user.target !2632
• Update repmgr-check-master to exit 1 for standby nodes
• Geo: Fix replicate-geo-database not working with a custom port

11.1.1

• Update Mattermost to 5.0.2
• Omit SLAVEOF if Redis is in an HA environment !2651
• Export PYTHONPATH and ICU_DATA to gitaly !2650
• Restore gitaly default log level to 'info' !2661

11.1.0

• Include OSS driver for object storage support in the registry
• Support setting of PostgreSQL SSL mode and compression in repmgr conninfo
• Disable PostgreSQL SSL compression by default
• Tighten permission on Mattermost's config.json file !2587
• Tighten permission on Gitaly's config.toml file !2589
• Tighten permission on gitlab-shell's config.yml file !2585
• Add an option to activate verbose logging for GitLab Pages (maxmeyer)
• Don't attempt to modify PostgreSQL users if database is in read-only mode
• Remove NGINX custom page for 422 errors
• Tighten permission on gitlab-monitor's gitlab-monitor.yml file !2584
• Tighten permission on gitlab.yml file !2591
• Tighten permission on database.yml file !2592
• Add support for Prometheus remote read/write services.
• Add support for database service discovery
• Tighten permission on geo's database_geo.yml file !2590
• Set TZ environment variable for gitlab-rails to ':/etc/localtime' to decrease number of system callse - !2600
• Don't add timestamp to gitaly logs if logging format is json !2615
• Remove hardcoded path for pages secrets (julien MILLAU)
• Tighten permission on gitlab-workhorse's config.toml file !2586
• Add pseudonymizer data collection worker
• Update node_exporter to 0.16.0, metric names have been changed !2639
• Update alertmanager to 0.15.0 !2639
• Update redis_exporter to 0.20.2 !2639
• Update postgres_exporter to 0.4.6 !2641
• Update pgbouncer_exporter to 0.0.3-gitlab !2617
• Update Mattermost to 5.0.0

11.0.3

• Revert change to default unicorn/sidekiq listen address.
• Add Prometheus relabel configs to change display from 127.0.0.1 to localhost
• Tighten permission on pgbouncer and consul related config files !2588

11.0.2

• Set the default for geo_prune_event_log_worker_cron to once/2hours
• Restart geo-logcursor when unicorn or sidekiq are updated
• Fix Prometheus Unicorn metrics not coming back after a HUP
• Set the default for geo_prune_event_log_worker_cron to once/2hours

11.0.1

• No changes

11.0.0

• Disable PgBouncer PID file by default
• Add pgbouncer_exporter
• Bump minimum version required for upgrade to 10.8 2df263267
• Geo: Only create database_geo.yml and run migrations if Rails is enabled
• Render gitlab-pages admin settings
• Fix old unicorn master not quitting after a new process is running
• Mattermost: Fix reconfiguration of GitLab OAuth configuration settings
• Bump PgBouncer to 1.8.1
• Automatically add registry hostname to the to alt_name of the LetsEncrypt certificate #3343
• Use localhost hostname for unicorn and sidekiq listeners
• Add ipv6 loopback to monitoring whitelist
• Remove deprecated Mattermost settings and use environment variables to set supported ones. !2522
• Bump git to 2.17.1 !2552
• Updated Mattermost to 4.10.1
• Render gitaly-ruby num_workers config
• Set installation type information to be used by usage ping - !2561
• Add graphicsmagick dependency
• Add cron job for archiving-trace worker
• Add attribute to control automatic registration of a database node as master on initialization !2571
• Add PostgreSQL support for default_statistics_target

10.8.5

• Geo: Make sure gitlab_secondary schema has the correct owner

10.8.2

• Automatically restart Gitaly when its VERSION file changes
• Update gitlab-monitor to 2.16.0
• No need to patch lib/gitlab.rb anymore since it now reads the REVISION file if present
• Upgrade git to 2.16.4

10.8.1

• Add git_data_dir to the deprecation list 7d04ed06b
• Geo: Set recovery_target_timeline to latest by default
• Remove deprecated git_data_dir configuration and old hash format of git_data_dirs configuration !2520
• Upgrade Ruby version to 2.4.4
• Upgrade Bundler version to 1.16.2
• Upgrade Rubygems version to 2.7.6
• Add support for Prometheus rules files

10.8.0

• Force kill unicorn process if it is still running after a TERM or INT signal
• Upgrade Ruby version to 2.3.7
• Update gitlab-monitor to 2.13.0
• Add Prometheus Alertmanager
• Bump git to 2.16.3
• Bump curl to 7.59.0 aab088263
• Bump pcre to 8.42 07c83a5ab
• Bump rubygems to 2.6.14 84b2510fd
• Bump openssl to 1.0.2o 1fe9f4ef2
• Do not ship cached gem archives. #3235
• Excludes source assets from gitlab-rails component. #3238
• Keep gitaly service running during package upgrades 034992fbc
• Geo: Error when primary promotion fails
• Geo: Disable SSL compression by default in generating recovery.conf
• Add option to disable healthcheck for storagedriver in registry
• Enable gzip by default
• Restart runsv when log directory is changed 0a784647b
• Bump rsync to 3.1.3 f539aa946
• Patch bzip2 against CVE-2016-3189 552730bfa
• Fix pgbouncer recipe to use the correct user for standalone instances
• Commands gitlab-psql and gitlab-geo-psql will use respective GitLab databases by default. #3485
• Make pg-upgrade start the bundled postgresql server if it isn't already running
• Enforce upgrade paths for package upgrades 56a250b1a
• Patch unzip to fix multiple CVEs cefd5b1b6
• Geo: Success message for gitlab-ctl promote-to-primary-node command

10.7.5

• Upgrade Git to 2.14.4

10.7.4

• Geo: promoting secondary node into primary doesnt remove database_geo.yml #3463
• Only create gitlab-consul database user after repmgr database has been created
• Make migrations during upgrade only stop unnecessary services

10.7.3

• Add support for the -daemon-inplace-chroot command-line flag to GitLab Pages

10.7.2

• No changes

10.7.1

• No changes
• Bump libxslt to 1.1.32 f584de1d7
• Bump libxml2 to 2.9.8 e3a117275
• Update Mattermost to 4.9.1

10.7.0

• Geo: Increase default WAL standby settings from 30s to 60s
• Geo: Add support for creating a user for the pgbouncer on the Geo DB
• Geo: Add cron job for migrated local files worker
• Disable 3DES ssl_ciphers of nginx for gitlab-rails, mattermost, pages, and registry (Takuya Noguchi)
• Add option to configure log_statement config in PostgreSQL
• Internal: Speed up rubocop job (Takuya Noguchi)
• Bump redis_exporter to 0.17.1
• Excludes static libraries, header files, and *-config binaries from package.
• Support Sidekiq log_format option
• Render gitlab-shell log_format option
• Support direct_upload for Artifacts and Uploads
• Set proxy_http_version to ensure request buffering is disabled for GitLab Container Registry
• Auto-enable Let's Encrypt certificate management when external_url is of the https protocol, we are terminating ssl with the embedded nginx, and certficate files are absent.
• Fix bug where changing log directory of gitlab-monitor had no effect 1e451dc2
• Updated Mattermost to 4.8.1
• Create shared/{tmp,cache} directories when manage-storage-directories is enabled
• Render Gitaly logging_ruby_sentry_dsn config option
• Fix bug in error reporting of gitlab-ctl renew-le-certs #3389
• Adds go-crond to the package #3251
• Auto-renew LetsEncrypt with go-crond #3251

10.6.6

• Update Git to 2.14.4

10.6.5

• Update Mattermost to 4.7.4

10.6.4

• Fixes an issue where unicorn and sidekiq services weren't being restarted after their configuration changed.
• Added missing Mattermost settings to gitlab.rb

10.6.2

• Geo: many fixes in FDW support, making it enabled by default in Secondary node.
• Fixed omnibus deprecations in PostgreSQL resources DSL

10.6.1

• Pages: if logformat set to json, do not append timestamps with svlogd.
• Downgrade jemalloc to 4.2.1 to avoid segfaults in Ruby

10.6.0

• Geo: When upgrading we keep geo-postgresql up to run database migrations
• Geo: Add cron configuration for repository verification workers
• Warn users of stale sprockets manifest file after install 8d4cd46c (David Haltinner)
• Geo: Don't attempt to refresh FDW tables if FDW is not enabled
• Deprecate /etc/gitlab/skip-auto-migrations for /etc/gitlab/skip-auto-reconfigure
• Update python to 3.4.8 (Takuya Noguchi)
• Update jemalloc to 5.0.1
• Update chef to 13.6.4
• Unsets RUBYLIB in gitlab-rails, gitlab-rake, and gitlab-ctl to avoid interactions with system ruby libraries.
• Update rainbow to 2.2.2, package_cloud to 0.3.04 and rest-client to 2.0.2 (Takuya Noguchi)
• Use awesome_print gem to print Ruby objects to the user 761a1e6a
• Update postgresql to 9.6.8
• Remove possible remains of relative_url.rb file that was used in earlier versions 88de20f18
• Add announce-ip and announce-port options for Redis and Sentinel (Borja Aparicio)
• Support the -logFormat option in Workhorse
• Update rubocop to 0.52.1 (Takuya Noguchi)
• Restart geo-logcursor when database_geo.yml is updated
• Change the default location of pgbouncer socket to /var/opt/gitlab/pgbouncer
• Excludes unused /opt/gitlab/embedded/service/gitlab-shell/{go,go_build} directories.
• Updated Mattermost to 4.7.3
• Add proxy_download options to object storage
• Add lfs_object_store_direct_upload option
• Render the gitlab-pages '-log-format' option
• Workhorse: if logformat set to json, do not update timestamps with svlogd.

10.5.8

• Update Mattermost to 4.6.3

10.5.7

• No changes

10.5.6

• No changes

10.5.5

• Resolve "consul service postgresql_service failing on db host - no access to /opt/gitlab/embedded/node

10.5.8

• Update Mattermost to 4.6.3

10.5.7

• No changes

10.5.6

• No changes

10.5.5

• Resolve "consul service postgresql_service failing on db host - no access to /opt/gitlab/embedded/node

10.5.4

• Update Let's Encrypt to use fullchain instead of certificate

10.5.2

• Fix regression where redirect_http_to_https was always on for hosts using https
• Geo: Add support to configure a custom PostgreSQL FDW external user on the tracking database

10.5.1

• Fix regression where using new Hash format for git_data_dirs broke reconfigure 542aea4aa

10.5.0

• Add support to configure the fdw parameter in database_geo.yml
• Extends rspec to gitlab-ctl consul's helper class, and refactors to avoid namespace conflicts.
• Geo: Use a background WAL receiver and replication slot to improve initial sync
• Support Redis as an LRU cache
• Remove usage of gitlab_shell['git_data_directories'] configuration 2003bc5d
• Set PostgreSQL archive_timeout to 0 by default
• Added LDAP configuration option for lowercase_usernames
• Support authorized_keys database lookups with SELinux on CentOS 7.4
• Add support for generating Let's Encrypt certificates as part of reconfigure
• Support configuration of Redis Sentinels by persistence class
• Add support for setting environment variables for Registry (Anthony Dong)
• Don't attempt to backup non-existent PostgreSQL data file in gitlab-ctl replicate-geo-database
• Add object storage support for uploads
• Do not attempt to load postgresql_extension if database in question doesn't exist.
• Honor the unicorn['worker_processes'] setting for a Geo secondary node
• Upgrades Chef to 12.21.31

10.4.1

• Update gitlab-monitor to 2.5.0
• Add GitLab pages status page configuration

10.4.0

• Upgrade Ruby version to 2.3.6
• Add support for enabling FDW for GitLab Geo
• Request confirmation of Geo replication user password
• Make sure db/geo/schema.rb is writable when node is a Geo secondary
• Add warning to LoggingHelper
• Update gitlab-monitor to 2.4.0 92312d6
• Update CA certificates bundle to one from 2017.09.20 a8f56b7f

10.3.6

• Specify initial tag of QA image for pushing to dockerhub
• Use dash instead of spaces in cache keys and build jobs

10.3.1

• Make it possible to configure an external Geo tracking database
• Process reconfigure failures and print out a message
• Remove unused redis bin gitlab-shell configuration
• Bump bundled git version to 2.14.3 a2b4bedf
• Update pgbouncer recipe to better handle initial configuration
• Render gitaly-ruby memory settings
• Add a runit service to probe repository storages

10.3.0

• Add workhorse metrics to Prometheus
• Add sidekiq metrics to Prometheus
• Include gpgme, gnupg and their dependencies
• Add gitaly metrics to Prometheus
• Upgrade node-exporter to 0.15.2
• Upgrade postgres-exporter to 0.4.1
• Upgrade prometheus to 1.8.2
• Remove duplicated shared object files from grpc gem (Takuya Noguchi)
• Update default gitlab-shell git timeout to 3 hours ec9ed900
• Enable support for git push options in the git config (Romain Maffina) 08edd3e4
• Update Redis to 3.2.11 (Takuya Noguchi)
• Turn on postgresql SSL by default b18597e3
• Update pgbouncer and repmgr recipes to prevent errors on reconfigure
• Add a command to promote secondary node to primary for GitLab Geo
• Fixed behaviour of postgres_user provider with unspecified passwords/options 8bd2e615
• Added roles to ease HA Postgres configuration d7d0f32a

10.2.6

• Update Mattermost to 4.3.4

10.2.3

• Adjust number of unicorn workers if running a Geo secondary node

10.2.0

• Enable pgbouncer application_name_add_host config by default 29dab6af1
• Move configuration for failing storages to the admin panel 83ad75c0
• Upgrade curl to 7.56.1
• Update backup directory management with better support for non-root NFS
• Disable prepared statements by default
• Remove deprecated settings from gitlab.yml template: geo_primary_role, geo_secondary_role
• Add options to enable SSL with PostgreSQL
• Change the default pgbouncer settings to be suitable for larger environments
• Bump openssl to 1.0.2m (Takuya Noguchi)
• Upgrade Mattermost to 4.3.2
• Stop creating SSH keys for Geo secondaries f7147d8b
• Make postgresql replication client sslmode configurable 1e2be156
• Disable TLSv1 and SSLv3 ciphers for postgresql 7ab9004f
• Add support for multiple Redis instances f6af9a81

10.1.6

• Update Mattermost to 4.2.2

10.1.3

• No changes

10.1.2

• Bump embedded Git version to 2.13.6 921ba935
• Update Mattermost to 4.2.1 640c88

10.1.1

• No changes

10.1.0

• Add a gitlab-ctl command to remove master nodes from cluster b50d50478
• Restart Unicorn and Sidekiq on the Geo secondary if the tracking database is migrated 1aaed2
• Remove unused Grit configuration settings 90f403a261
• Add concurrency configuration for Gitaly 402f23b28
• Enable profiler for jemalloc c40b82c403
• Update Postgres exporter to 0.2.3 1f847e9e96
• Update Prometheus to 1.7.2 1f847e9e96
• Update Redis exporter to 0.12.2 1f847e9e96
• Increase wal_keep_segments setting from 10 to 50 for Geo primary 9b1304fe
• Disable NGINX buffering with container registry 2413adb
• Add -artifacts-server and -artifacts-server-timeout support to Omnibus 188def96b3
• Introduce roles configuration to allow enabling of multiple sets of services 8535073e64
• Added PostgreSQL support for effective_io_concurrency 37799aea3
• Added PostgreSQL support for max_worker_processes and max_parallel_workers_per_gather 37799aea3
• Added PostgreSQL support for log_lock_waits and deadlock_timeout 37799aea3
• Added PostgreSQL support for track_io_timing 37799aea3
• Rename Rails secret jws_private_key to openid_connect_signing_key (Markus Koller) 24d56df29b
• Render gitaly.client_path in gitlab.yml 80a9c492e
• Correct Registry permissions in Docker update-permissions script 0b624f8ed
• Upgrade PostgreSQL to 9.6.5 (Takuya Noguchi) 84a3f5c09

10.0.7

• Fix an issue causing symlinking against system binaries if old PostgreSQL data was present on the filesystem a712c

10.0.6

• Upgrade curl to 7.56.1 17ea571
• Update Mattermost to 4.2.1 640c88

10.0.5

• No changes

10.0.4

• Ensure pgbouncer doesn't fail reconfigure if database isn't ready yet b50d50478

10.0.3

• No changes

10.0.4

• Ensure pgbouncer doesn't fail reconfigure if database isn't ready yet

10.0.3

• No changes

10.0.2

• Fix an issue where enabling a GitLab Geo role would also disable all default services 11e6dbf
• Reload consul on config change instead of restarting 097cf5
• Update pg-upgrade output to be more clear when a bundled PostgreSQL is not in use 7b80458b
• Add option to configure redis snapshot frequency 400f3a54

10.0.1

• No changes

10.0.0

• Use semanage instead of chcon for setting SELinux security contexts (Elliot Wright) 45abda5f4
• Add option to override the hostname for remote syslog
• Add backup_timeout argument to geo db replication command
• Remove sensitive params from the NGINX access logs 6983fe59
• Upgrade rubygems to 2.6.13 4650cd70a
• Add option to pass EXTERNAL_URL during installation d0f30ef2
  • Saves users from manually editing gitlab.rb just to set the URL and hence makes installation process easier
• Remove TLSv1 from the list of accepted ssl protocols
• Moved the settings handling into the package cookbook and reduced code duplication in settings
• Move the GitLab HA roles into their own files, and switch default services to be enabled by a Default role
• Remove geo_bulk_notify_worker_cron 44def4b5
• Rework single_quote helper as quote that can handle escaping strings with embedded quotes fdc6a93
• Add gitlab-ctl pgb-console command
• Increase warning visibility of the deprecated git_data_dir setting
• Add omniauth sync_profile_from_provider and sync_profile_attributes configuration
• Only generate a private SSH key on Geo secondaries c2f2dcba
• Support LFS object storage options for GitLab EEP
• Upgrade ruby version to 2.3.5
• Upgrade libyaml version to 0.1.7
• Add NGINX RealIP module configuration templating for Pages and Registry
• Fix gitlab-ctl wrapper to allow '*' in arguments
• Update failover_pgbouncer script to use the pgbouncer user for the database configuration
• Update Mattermost to 4.2.0

9.5.5

• Add more options to repmgr.conf template
• Update pgbouncer to use one style of logging
• Set bootstrap_expect to default to 3 for consul servers
• Fix bug where pgb-notify would fail when databases.json was empty
• Restart repmgrd after nodes are registered with a cluster
• Add --node option to gitlab-ctl repmgr standby unregister
• Upgrade ruby version to 2.3.5
• Upgrade libyaml version to 0.1.7

9.5.4

• Changing pg_hba configuration should only reload PG c99ef6

9.5.3

• Fix Mattermost log location 2126c7b3

9.5.2

• No changes

9.5.1

• No changes

9.5.0

• Fix the NGINX configuration for GitLab Pages with Cache-Control headers 2242884e
• Bump openssl to 1.0.2l 04ae64d7
• Allow deeply nested configuration settings in gitlab.rb
• Build and configure gitaly-ruby
• Added support for PostgreSQL's "idle_in_transaction_session_timeout" setting
• UDP log shipping as part of CE
• Bump Git version to 2.13.5
• Added Consul service in EE
• Update gitlab-elasticsearch-indexr to v0.2.1 11a2e7fd
• Add configuration options for handling repository storage failures
• Add support for --negate in sidekiq-cluster
• Update Mattermost to 4.1.0

9.4.3

• Fix LDAP SSL config: Use ca_file, not ca_cert.
• Fix Mattermost setting teammate_name_display not working.
  • Renamed mattermost['service_teammate_name_display'] to mattermost['team_teammate_name_display'] ad3a4f58

9.4.3

• Add Prometheus client after_fork hook to reset file backed metrics

9.4.2

• Update LDAP SSL config: Rename method to encryption. Add ca_cert, ssl_version and verify_certificates

9.4.1

• Expose new Mattermost config options that went into 4.0.1

9.4.0

• Add configuration options of monitoring ip whitelist and Unicorn sampler interval
• Bump NGINX version to 1.12.1 f8c349bf
• Add support in Geo replicate-geo-database command for replication slots 9fa27e9a0
• Fix gitlab-shell not able to import projects from trusted SSL certificates
• Remove software definition of expat 59c39870
• Add unicorn metrics to Prometheus
• Bump gitlab-elasticsearch-indexer version to 0.2.0 bba8edd3
• Disable RubyGems in gitlab-shell scripts for performance
• Adjust various default values for PostgreSQL based on GitLab.com
• Gitaly can no longer be disabled
• Bump omnibus-ctl version to 0.5.0
• Add GeoLogCursor EE service
• Set max_replication_slots to 1 by default for primary Geo instances
• Set TZ environment variable for Gitaly
• Automate repmgr configuration
• Render Gitaly token authentication settings
• Update Mattermost to 4.0.1
• Drop GitProbe settings from gitlab-monitor
• Move registry internal key population to gitlab-rails recipe 683bdcfb

9.3.8

• Upgrade Mattermost to 3.10.2 6ebf54

9.3.7

• No Changes

9.3.6

• No Changes

9.3.5

• Update gitlab-monitor to 1.9.0 c18672
• Fix port not being passed to pg_basebackup in replicate-geo-database script ca92eb

9.3.4

• No Changes

9.3.3

• Allow sidekiq-cluster to run without having sidekiq enabled
• Remove outdated Mattermost v2 DB upgrade code
• Fix port not being passed to pg_basebackup in replicate-geo-database script
• Switch postgresql['custom_pg_hba_entries'] from Array to Hash

9.3.2

• Update gitlab-monitor to 1.8.0

9.3.1

• Use the new "gettext:compile" task during build 59dbbd8b
• Create the postgresql user for postgresql-exporter 3fedab4f

9.3.0

• Ensure PostgreSQL user is created for Geo installations 4bedc5f1
• Add a --skip-backup option in Geo replicate-geo-database command 22a01a23
• Rename geo_download_dispatch worker configuration
• Rename geo_backfill worker configuration
• Upgrade Prometheus to 1.6.3
• Bump Git version to 2.13.0 b8a4bc4f
• Upgrade PostgreSQL to 9.6.3 8f144d
• Upgrade ES indexer to 0.1.0
• Changing relative URL requires a hard reset ccd76ae2
• Add omniauth sync_email_from_provider configuration
• Add libre2 to support the 're2' gem
• Add a runtime directory for unicorn metrics
• Support object storage for artifacts for GitLab EEP
• Add repmgr as an EE dependency
• Upgrade Mattermost to 3.10.0

9.2.8

• Update Mattermost to 3.9.2 f55f9f

9.2.7

• No changes

9.2.6

• Backport: Upgrade ES indexer to 0.1.0

9.2.5

• Add default values to GitLab Geo roles 77e7bdfa

9.2.5

• Fix gitlab-ctl replicate-geo-database when run in a Docker container

9.2.2

• Fix bug where cron values are not set to nil and default to a set value

9.2.1

• Use ln -sf to prevent sshd startup errors upon a full Docker restart ecf4fd62b

9.2.0

• Add a missing symlink for /opt/gitlab/init/sshd to make gitlab-ctl stop work in Docker 4a098168
• Allow setting usage_ping_enabled in gitlab.rb
• Update mysql client to 5.5.55
• Add a build env variable ALTERNATIVE_SOURCES f0cab0c6
• Create reconfigure log dir explicitly (Anastas Dancha) 9654cfe3
• Upgrade docker/distribution to 2.6.1 5fe36ffe
• Upgrade Prometheus to 1.6.1 d4bdd143
• Upgrade gitlab-monitor to 1.6 b245f2c1
• Add ldap_group_sync worker configuration f21c3886
• Add gitlab_shell_timeout configuration 0289f50b
• Generate license .csv file 5478b1aa
• Postgresql configuration changle will now reload Postgresql instead of restart
• Generate PO translation files 6b6c936a
• Change service running detection 18b51873
• Rename trigger schedules to pipeline schedules
• Compile new binaries for gitlab-shell
• Compile python with libedit
• Disable Nginx proxy_request_buffering for Git LFS endpoints

9.1.7

• Update Mattermost to 3.7.6 ce50d5f

9.1.6

• No changes

9.1.5

• No changes

9.1.4

• Fix gitlab.yml template to quote sidekiq-cron 285fbb

9.1.3

• Update mysql client to 5.5.56. 5e673

9.1.2

• Add support for the following PostgreSQL settings: random_page_cost, max_locks_per_transaction, log_temp_files, log_checkpoints

9.1.1

• No changes

9.1.0

• Remove deprecated satellites configuration f88ba40b
• Add configuration file for Gitaly 7c7c728
• Add support for Gitaly address per shard 2096928
• Build Container Registry with include_gcs flags (Lars Larsson) deb707fd
• Update Prometheus flags, tweak resource usage b2dcb8da
• EE: Create and migrate GitLab Geo database and configure Geo replication b71f72
• EE: Add set-geo-primary-node command ecbcf2
• EE: Add hot-standby configuration for Geo DB 82158
• EE: Change the order of configuration loading for EE recipes ba19b7c0
• Add support storages in Gitaly config f3205fa
• Update Node exporter to 0.14.0 84f71c0
• Update Redis exporter to 0.10.9.1 84f71c0

9.0.6

• No changes

9.0.5

• Build SLES 12 EE package at the same time as others.
• Fix AWS build errors
• Updating documentation for external PostgreSQL usage
• Added quotes to GITLAB_SKIP_PG_UPGRADE

9.0.4

• Update Mattermost version to 3.7.3 b8abd225

9.0.3

• Added support for managing PostgreSQL's hot_standby_feedback option 8971a5e0
• Add configuration support for new Mattermost 3.7 settings (Robin Naundorf) 3c9d6936
• Fix 'template1 being accessed by other users' error c8633b8b
• Fix ability to disable postgres and redis exporters 04eaf7f6
• Start new services after they are enabled 42c9af27

9.0.2

• No changes

9.0.1

• Allow configuration of prepared statement caching in Rails 169891c2
• Default redis prometheus exporter to off if redis is not managed locally 63056441
• Default postgres prometheus exporter to off if postgres is not managed locally 63056441
• Default pages http to https redirect to off 1ece2480
• Make HSTS easier to configure, and the docs on it accurate 4ba90ff8
• Move the automatic PG Upgrade to happen after migrations have run 8cf38d43

9.0

• Remove Bitbucket from templates as it does not require special settings anymore b87ae1f
• Fix the issue that prevents registry from starting when user and group are not the same (O Schwede) c4e83c5
• Add configuration options for GitLab container registry to support notification endpoints to template (Alexandre Gomes) ef9b0f255
• Update curl to 7.53.0 38aea7179
• Update directory configuration structure to allow multiple settings per data directory
• Remove mailroom configuration template, reuse the default from GitLab 5511b246
• Remove deprecated standalone GitLab CI configuration ad126ba
• Expose configuration for HSTS which was removed from GitLab Rails f5919f
• Expose KUBERNETES_SERVICE_HOST and KUBERNETES_SERVICE_PORT to Prometheus for k8s 8a4e7d
• Disable Nginx caching except for assets 6c1cdd8
• Update Prometheus to 1.5.2 0edcf58
• Update GitLab Monitor to 1.2.0 0edcf58
• Update Postgres-exporter to 0.1.2 0edcf58
• Update Redis-exporter to 0.10.7 0edcf58
• Expose apiCiLongPollingDuration for GitLab Workhorse f88ae849
• Add storage class configuration option for S3 backups (Jon Keys) 1e4a6ac4
• Generate RSA private key for doorkeeper-openid_connect (Markus Koller) a447c41
• Change default syntax for git_data_dirs ee831d9
• Remove deprecated git-annex configuration 527b942
• Expose GitLab Workhorse configuration file 835144e
• Add option to verify clients with an SSL certificate to Mattermost, Registry and GitLab Pages
• Rename stuck_ci_builds_worker to stuck_ci_jobs_worker in the gitlab_rails config
• EE: Add a tracking database for GitLab Geo f1077d10
• Provide default Host header for requests that do not have one 14f77c
• Gitaly service on by default 350dea
• Update Nginx to 1.10.3 211a89fb6

8.17.5

• Update Mattermost version to 3.6.5 bb826eeb

8.17.4

• No changes

8.17.3

• Changing call to create tmp dir as the database user 7b54cd76

8.17.0

• Add support for setting PostgreSQL's synchronous_commit and synchronous_standby_names settings
• Remove deprecated Elasticsearch configuration options ab660c56
• Include GitLab Pages in the Community Edition
• Add HealthCheck support to our Docker image 845b52b2
• Remove Nodejs dependency 7d22e0a8
• Add an option to skip cache:clear task (Adam Hamsik) e4ba9913
• Update Mattermost OAuth2 endpoints when GitLab's url changes
• Include Redis exporter, off by default 3bd03d2d
• Include Postgres exporter, off by default e8755757
• Fixed trusted certificates being lost during Docker image restarts
• Make pam_loginuid.so optional for SSH in our Docker image (Martin von Gagern) eb73ecea
• Introduce gitlab-ctl diff-config command to compare existing and new configuration bb0bd
• Remove update_all_mirrors_worker_cron and update_all_remote_mirrors_worker_cron settings 49706b
• Expose max_standby_archive_delay and max_standby_streaming_delay Postgresql settings
• Disconnect and reconnect database connections when forking in Unicorn a7b35aaf
• Add support for the PostgreSQL max_replication_slots setting
• Allow exposing prometheus metrics on gitlab-pages

8.16.9

• Update Mattermost version to 3.6.5 e5f65b8

8.16.8

• No changes

8.16.7

• No changes

8.16.6

• EE: Make sure ssh_keygen creates the directory first e5483177

8.16.5

• Upgrade Mattermost to 3.6.2 2c7dab9f
• EE: Make sure ssh_keygen creates the directory first e5483177

8.16.4

• Make pam_loginuid.so optional for SSH in our Docker image (Martin von Gagern) eb73ecea

8.16.3

• Pin bundler to version 1.13.7 0ec1b67f
• Upgrade zlib to 1.2.11 cfa4e3c0

8.16.2

• No changes

8.16.1

• No changes

8.16.0

• Update git to 2.10.2 27cde301
• Allow users to specify an initial shared runner registration token 11de915b
• Update Mattermost to version 3.6 4fcdc632
• Include Prometheus and Node Exporter, off by default bef79732
• Let users expose Mattermost host if installed on other server 2aec8f66
• Make gitlab.rb template file scraping friendly 92e5eedf

8.15.7

• Update Mattermost to 3.5.3 to patch a security vulnerability

8.15.6

• Pin bundler version to 1.13.7 to avoid breaking changes
• Update Mattermost to 3.5.2 to patch a XSS vulnerability

8.15.5

• No changes

8.15.4

• No changes

8.15.3

• No changes

8.15.2

• No changes

8.15.1

• No changes

8.15.0

• Update git to 2.8.4 381c0b9d
• Clean up apt lists to reduce the Docker image size (Tao Wang) 7e796c5f
• Enable Mattermost slash commands by default 2b3406
• Enable overriding of username and profile picture for webhook on Mattermost by default 8528864
• Fix Mattermost authorization with Gitlab (Tyranron) d704d3
• Expose Mattermost url in gitlab.yml 4d90c7fa
• Add prometheusListenAddr config setting for gitlab-workhorse 12bb9df2
• Fix Mattermost service file not respecting mattermost['home'] option ca96b4e
• Bump ruby version to 2.3.3 9f5fe2c2
• Add configuration that allows overriding proxy headers for GitLab Pages NGINX (BruXy) c2722f1e
• Make hideRefs option of git default in omnibus installations e7484a9b
• Use internal GitLab mirrors of rb-readline and registry as cache 2d137543
• Adding attribute for gitlab-shell custom hooks f753e1f0
• Pass websockets through to workhorse for terminal support 849ffc
• Add notification for new PostgreSQL version 05dbb3ec
• Update libcurl to 7.52.0 ea11a83
• Add EE sidekiq_cluster configurable for setting up extra Sidekiq processes

8.14.10

• Update Mattermost to 3.5.3 to patch a security vulnerability

8.14.9

• Pin bundler version to 1.13.7 to avoid breaking changes

8.14.8

• Update Mattermost to 3.5.2 to patch a XSS vulnerability

8.14.7

• No changes

8.14.6

• No changes

8.14.5

• Expose client_output_buffer_limit redis settings 5f1503

8.14.4

• Fix gitlab-ctl pg-upgrade to properly handle database encodings 46e71561
• Update symlinks of postgres on both upgrade and reconfigure 484a3d8a

8.14.3

• Patch Git 2.7.4 for security vulnerabilities 568753c3

8.14.2

• Revert 34e28112 so we don't listen on IPv6 by default

8.14.1

• No changes

8.14.0

• Switch the redis user's shell to /bin/false 9d60ee4
• NGINX listen on IPv6 by default (George Gooden) 34e28112
• Upgrade Nginx to 1.10.2 085bf610
• Update Redis to 3.2.5 (Takuya Noguchi) edf0575c1
• Updarted cacerts.pem to 2016-11-02 version aca2f5e88
• Stopped using PCRE in the storage directory helper 0e06490
• Add git-trace logging for gitlab-shell 1dab1c
• Update mattermost to 3.5 7ecf31
• Add support for OpenSUSE 13.2 and 42.1 82b7345 6ea9e2
• Support Redis Sentinel daemon (EE only) 457c4764
• Separate package repositories for OL and SL e37eaae
• Add mailroom idle timeout configuration 0488f3de

8.13.12

• No changes

8.13.11

• No changes

8.13.10

• No changes

8.13.9

• No changes

8.13.8

• Patch Git 2.7.4 for security vulnerabilities 2d7cf04a

8.13.7

• No changes

8.13.6

• No changes

8.13.5

• No changes

8.13.4

• Update curl to 7.51.0 to get the latest security patches fc32c83
• Fix executable file mode for the Docker image update-permissions command 6c80205

8.13.2

• Move mail_room queue from incoming_email to email_receiver 373609c

8.13.1

• Update docs for nginx status, fix the default server for status config b49fb1

8.13.0

• Add support for registry debug addr configuration 87b7a780
• Add support for configuring workhorse's api limiting 1b6c85d4
• Fix unsetting the sticky bit for storage directory permissions and improved error messages 7467b51
• Fixed a bug with disabling registry storage deletion be305d40
• Support specifying a post reconfigure script to run in the docker container aa8bec5
• Add support for nginx status (Luis Sagastume) 3cd7b36
• Enable jemalloc by default 0a7799d2
• Move database migration log to a persisted location b368c46c

8.12.13

• No changes

8.12.12

• No changes

8.12.11

• Patch Git 2.7.4 for security vulnerabilities 564cfddf

8.12.10

• No changes

8.12.9

• No changes

8.12.8

• No changes

8.12.7

• Use forked gitlab-markup gem (forked from github-markup) 422d9bf20

8.12.6

• No changes

8.12.5

• Update the storage directory helper to check permissions for symlink targets

8.12.4

• No changes

8.12.3

• Updated cacerts.pem to 2016-09-14 version 9bc1fec

8.12.2

• Update openssl to 1.0.2j 527d02

8.12.1

• Fix gitlab-workhorse Runit template bug e20e5ff

## 8.12.0

• Add support for using NFS root_squash for storage directories d5cf0d1d
• Update mattermost to 3.4 6857c902
• Add gitlab-ctl deploy-page status command b8ffd251
• Set read permissions on the trusted certificates in case they are restricted
• Fix permissions for nginx proxy_cache directory (Charles Blaxland) 4eb85976
• Render gitlab-workhorse token c50c85
• Enable git packfile bitmap creation 2a07f08
• Localise all custom sources in .custom_sources.yml 5bcbd4f
• Update the mode of the certificate files when using trusted certificates b00cd4
• Allow configuring Rack Attack endpoints (Dmitry Ivanov) 7aee63
• Bundle jemalloc and allow optional enable 1381ba
• Use single db_host when multi postgresql::listen_adresses (Julien Garcia Gonzalez) 717dc269
• Add gitlab-ctl registry-garbage-collect command 5f5526d3
• Update curl to version 7.50.3 7848b550
• Add default HOME variable to workhorse fcfa3672
• Show GitLab ascii art after installation (Luis Sagastume) 17ed6cb

8.11.11

• No changes

8.11.10

• No changes

8.11.9

• No changes

8.11.8

• No changes

8.11.7

• No changes

8.11.6

• Fix registry build by enabling vendor feature

8.11.5

• No changes

8.11.4

• Fix missing Logrotate directory 453ea
• Expose shared_preload_libraries Postresql settings f0557
• Expose log_line_prefix Postresql settings cae662

8.11.3

• Patch docutils to work with Python3 to restore .RST rendering 70ee88c2

8.11.2

• Fixed a regression where the default container registry and mattermost nginx proxy headers were not being set

8.11.1

• Unreleased

8.11.0

• Add configuration that allows overriding proxy headers for Mattermost NGINX config (Cody Mize) 4985ca
• Upgrade krb5 lib to 1.14.2 3670e5
• Set ICU_DATA to the right path to make Charlock Holmes and libicu work properly 60e8061d
• Upgrade chef-zero to 4.8.0 e390cd
• Create logrotate folders and configs even when the service is disabled (Gennady Trafimenkov) eae7c9
• Added nginx options to enable 2-way SSL client authentication (Oliver Hernandez) c51085
• Upgrade libicu to 57.1 f58a4b15
• Upgrade Nginx to 1.10.1 67a0bd0
• Allow configuration of the authorized_keys file location used by gitlab-shell
• Upgrade omnibus to 5.4.0 7bac2
• Add configuration that allows disabling of db migrations (Jason Plum) a50d09
• Initial support for Redis Sentinel 267ace
• Do not manage authorized keys anymore 7dc1d6
• Upgrade to Chef 12.12.15 c930fbd4
• Tidy up key names for secrets to match GitLab Rails app
• Update rsync to 3.1.2 8cc078
• Upgrade ruby to 2.3.1 58a13
• Change config_guess to a private mirror 1b197
• Remove Redis dump.rdb on downgrades for furuture packages (Gustavo Lopez) 824530
• Update postgresql to 9.2.18 (Takuya Noguchi)
• Update expat to 2.2.0 (Takuya Noguchi)
• Ignore and don't write gitlab_ci:gitlab_server key in gitlab-secrets file 10bcb

8.10.10

• No changes

8.10.9

• Fix registry build by enabling vendor feature

8.10.8

• No changes

8.10.7

• No changes

8.10.6

• No changes

8.10.5

• Pin mixlib-log to version 1.6.0 in order to keep the log open for writes during reconfigure 7345d

8.10.4

• Revert Host and X-Forwarded-Host headers in NGINX 9ac08
• Better handle the ssl certs whitelisted files when the directory has been symlinked 97493919d
• Fix issue where mattermost log file is created by the root user 581fa

8.10.3

• No changes

8.10.2

• Exclude standard ports from Host header

8.10.1

• Fix custom HTTP/HTTPS external ports ddcf302f

8.10.0

• Fix RangeError bignum too big errors on armhf platforms 4ba24bfe
• Update redis to 3.2.1 (Takuya Noguchi) 144bf
• Updated Chef version to 12.10.24 6e0c66
• Disable nodejs Snapshot feature on ARM platforms f9a7b4bf
• Update the trusted certs recipe to copy in certs that were linked in from external folders
• Use gitlab:db:configure to seed and migrate the database 047cfd
• Update Mattermost to 3.2 28cf3
• Lower expiry date of registry internal certificate b269b4
• Add personal access token to rack attack whitelist 21abc

8.9.10

• No changes

8.9.9

• Fix registry build by enabling vendor feature

8.9.8

• No changes

8.9.7

• No changes

8.9.6

• Bump chef-zero to 4.7.1 to squelch debug messages 9eefa12f

8.9.5

• No changes

8.9.4

• Bump chef-zero to 4.7.0 to retain Ruby 2.1 compatibility 8495179

8.9.3

• IMPORTANT: Location of the trusted certificate directory has changed e2e7b

8.9.2

• Restart unicorn for the adjusted trusted certs if unicorn is running 3748d9
• Change the default imap timeout to 60 03684d

8.9.1

• Prevent running CREATE EXTENSION in a slave server 7821bbaa
• Skip choosing an init system recipe when running in a container e229a968

8.9.0

• Make default IMAP incoming mailbox "inbox" in case user omits this setting d3c187
• Make NGINX server_names_hash_bucket_size configurable and default it to 64 bytes 7cb488
• Use gitlab:db:configure to seed and migrate the database
• Add log prefix for pages and registry services 48e29b
• Add configuration option for the Container Registry storage driver
• Change the autovacuum configuration defaults f5ac85
• Update redis to 3.2.0 (Takuya Noguchi) 357263
• Add configuration that allows overriding proxy headers for Registry NGINX config (Alexander Zigelski) 046c84c
• Update version of pcre ac72670
• Update version of expat ac72670
• Update postgresql to 9.2.17 (Takuya Noguchi) 6e0c0f
• Make one unicorn new default 0ddd2
• Trim Docker image size 2aedc2
• Expose track_activity_query_size setting for Postgresql 5ebd7c
• Expose maxclients setting for Redis 535540c
• Add expire_build_artifacts_worker cron config 3603b
• Upgrade Mattermost to 3.1 d446f0
• Add expire_build_artifacts_worker cron config 3603b7
• Allow adding custom trusted certificates (Robert Habermann) 48e891
• Increase the Unicorn memory limits to 400-650MB 8f688
• Add configuration for Registry storage config 545856

8.8.9

• No changes

8.8.8

• No changes

8.8.7

• No changes

8.8.6

• Update version of pcre
• Update version of expat

8.8.5

• No changes

8.8.4

• No changes

8.8.3

• Add gitlab_default_projects_features_container_registry variable

8.8.2

• Update docker/distribution to 2.4.1 1c01c9c
• Update libxml2 to 2.9.4 a3f7d6
• Add Postgresql autovacuuming configuration 289c25

8.8.1

• No changes

8.8.0

• Disable Rack Attack throttling if specified in config 631511f8
• Update postgresql to 9.2.16 (CVE-2016-2193/CVE-2016-3065) (Takuya Noguchi) d02125
• Check mountpoint before starting up pages daemon a53e7a0
• Add support for Container Registry f74472d
• Add maintenance_work_mem and wal_buffers Postgresql settings 5675dc

8.7.9

• No changes

8.7.8

• Update version of pcre
• Update version of expat

8.7.7

• No changes

8.7.3

• Update openssl to 1.0.2h

8.7.2

• No changes

8.7.1

• Package supports Ubuntu 16.04 8a4ce1f5
• Pin versions of ohai and chef-zero to prevent reconfigure outputting too much info f9b2307c

8.7.0

• Added db_sslca to the configuration options for connecting to an external database 2b4033cb
• Compile NGINX with the real_ip module and add configuration options b4830b90
• Added trusted_proxies configuration option for non-bundled web-server 3f137f1c
• Support the ability to change mattermost UID and GID c5a588da
• Updated libicu to 56.1 4de944d9
• Updated liblzma to 5.2.2 4de944d9
• Change the way db:migrate is triggered 3b42520a
• Allow Omniauth providers to be marked as external 7dd68edf
• Enable Git LFS by default (Ben Bodenmiller) 22345799
• Updated how we detect when to update the :latest and :rc docker build tags cb3af445
• Disable automatic git gc 8ed13f4b
• Restart GitLab pages daemon on version change 922f7655
• Add git-annex to the docker image c1fdc4ff
• Update Nginx to 1.9.12 96ca0916
• Update Mattermost to v2.2.0 fd740e17
• Update cacerts to 2016.04.20 edefbe2e
• Add configuration for geo_bulk_notify_worker_cron 219125bf
• Add configuration repository_archive_cache_worker_cron 8240ab3a
• Update the docker update-permissions script 13343b4f
• Add SMTP ssl configuration option (wu0407) 4a377fc2
• Build curl dependency without libssh2 17e41f8

8.6.9

• Build curl dependency without libssh2 17e41f8

8.6.8

• Update Mattermost download URL from GitHub to releases.mattermost.com

8.6.7

• No changes

8.6.6

• No changes

8.6.5

• No changes

8.6.4

• No changes

8.6.3

• No changes

8.6.2

• Updated chef version to 12.6.0 37bf798
• Use :before from Chef 12.6 to enable extension before migration or database seed fd6c88e0

8.6.1

• Fix artifacts path key in gitlab.yml.erb c29c1a5d

8.6.0

• Update redis version to 2.8.24 2773274
• Pass listen_network of gitlab_workhorse to gitlab nginx template 51b20e2
• Enable NGINX proxy caching 8b91c071
• Restart unicorn when bundled ruby is updated aca3cb2
• Add ability to use dateformat for logrotate configuration (Steve Norman) 6667865d
• Added configuration option that allows disabling http2 protocol bcaa9e9
• Enable pg_trgm extension for packaged Postgres f88fe25
• Update postgresql to 9.2.15 to address CVE-2016-0773 (Takuya Noguchi) 16bf321
• If gitlab rails is disabled, reconfigure needs to run without errors 5e695aac
• Update mattermost to v2.1.0 f555c232
• No static content delivery via nginx anymore as we have workhorse (Artem Sidorenko) 89b72505
• Add configuration option to disable management of storage directories 81a370d3

8.5.13

• Build curl dependency without libssh2 17e41f8

8.5.12

• No changes

8.5.11

• Update Mattermost download URL from GitHub to releases.mattermost.com

8.5.10

• No changes

8.5.9

• No changes

8.5.8

• Bump Git version to 2.7.4

8.5.7

• Bump Git version to 2.7.3

8.5.6

• No changes

8.5.5

• Add ldap_sync_time global configuration as the EE is still supporting it 3a58bfd

8.5.4

• No changes

8.5.3

• No changes

8.5.2

• Fix regression where NGINX config for standalone ci was not created d3352a78b4
• Update openssl to 1.0.2g 0e44b8e910

8.5.1

• Push Raspbian repository for RPI2 to packagecloud 57acdde046
• Update GitLab pages daemon to v0.2.0 326add9bab
• Unset env variables that could interfere with gitlab-rake and gitlab-rails commands e72a6f0e25

8.5.0

• Add experimental support for relative url installations (Artem Sidorenko) c3639dc311
• Restart mailroom service when a config changes f77dcfe994
• Remove gitlab-ci standalone from the build, not all gitlab-ci code de6419c850
• Switch openssl to 1.0.2f a53d77674f
• Update nginx to 1.9.10 8201623411
• Use http2 module 8201623411
• Update omnibus to include -O2 compiler flag e9acc03ca2
• Add configuration options to override default proxy headers 3807ed87ec
• Change permissions of public/uploads directory to be more restrictive 7e4aa2f5e6
• Update mattermost to v2.0.0 8caacf73e2
• Add support for gitlab-pages daemon 0bbaba4d69
• Added configuration options for new allow_single_sign_on behavior and auto_link_saml_user 96ba412748

8.4.11

• Build curl dependency without libssh2 17e41f8

8.4.10

• No changes

8.4.9

• Update Mattermost download URL from GitHub to releases.mattermost.com

8.4.8

• No changes

8.4.7

• No changes

8.4.6

• No changes

8.4.5

• No changes

8.4.4

• Allow webserver user to access the gitlab pages e0cbafafad

8.4.3

• Update openssl to 1.0.1r 541a0ed432

8.4.2

• Update gitlab-workhorse to 0.6.2 32b3a74179

8.4.1

• No changes

8.4.0

• Add support for ecdsa and ed25519 keys to Docker image (Matthew Monaco) 3bfcb2617d
• Pull the latest base image before building the GitLab Docker image (Ben Sjoberg) c9926773d7
• Remove runit files when service is disabled 8c4c446c2b
• Add GITLAB_OMNIBUS_CONFIG to Docker image bfe5cb8187
• Compile all .py files during packaging b131e0fc05
• Correctly update md5sums for deb packager b131e0fc05
• Fix syntax for md5sums file b131e0fc05
• Update git to use symlinks for alias commands 65df6a4dcf
• Remove libgit definition and rely on it being built by rugged fe38fa17db
• Update ruby to 2.1.8 6f1d4204ca
• Update git to 2.6.2 6f1d4204ca
• Ensure that cache clear is run after db:migrate b4dfb1f7b4
• Add support for Elasticsearch config (EE only) 04961dd066
• Update cacerts to 2016.01.20 8ddedf2eff
• Change the way version is specified for gitlab-rails, gitlab-shell and gitlab-workhorse a8676c647a
• Update Mattermost to v1.4.0 82149cf5fa
• Add config for specifying environmental variables for gitlab-workhorse 79b807649d
• Increase default Unicorn memory limits to 300-350 814ee578bb
• Forward git-annex config to gitlab.yml 796a0d9875
• Prevent mailroom from going into restart loop 378f2355c5
• Add gitlab-workhorse config for proxy_headers_timeout d3de62c54b
• Bundle unzip which is required for EE features 56e1fc0b11

8.3.10

• Build curl dependency without libssh2 17e41f8

8.3.9

• No changes

8.3.8

• Update Mattermost download URL from GitHub to releases.mattermost.com

8.3.7

• No changes

8.3.6

• No changes

8.3.5

• No changes

8.3.4

• Update gitlab-workhorse to 0.5.4 7968c80843

8.3.3

• Update gitlab-workhorse to 0.5.3 6fbe783cfd

8.3.2

• No changes

8.3.1

• Increase default worker memory from 250MB to 300MB.
• Update GitLab workhorse to 0.5.1 cd01ed859e
• Update rubygemst to 2.5.1 58fcbbdb31
• Update libgit2 to 0.23.4 and let rugged be compiled during bundle install fb54c1f0f2

8.3.0

• Add sidekiq concurrency setting 787aa2ffc3
• Explicitly create directory that holds the logs 50caed9219
• Updated omnibus to v5.0.0 18835f1445
• Change mailer to mailers sidekiq queue d4d5273407
• Update openssl to 1.0.1q f99fd257a6
• Added support for GitLab Pages aef69fe5fc
• Updated Mattermost to v1.3.0 53d8606cf3

8.2.6

• Build curl dependency without libssh2 17e41f8

8.2.5

• cacerts to 2016.04.20
• Change URL for Mattermost to releases.mattermost.com

8.2.4

• Cacerts 20.01.2016.
• Upgrade rubygems to 2.5.1.

8.2.3

• Add gitlab_default_projects_features_builds variable (Patrice Bouillet) e13556d337

8.2.2

• Set client_max_body_size back to all required blocks 40047e0919
• Specific replication entry in pg_hba.conf for Postgresql replication 7e32b1f96a

8.2.1

• Expose artifacts configuration options 4aca77a5ae
• Display deploy page on all pages b362ee7d70

8.2.0

• Skip builds directory backup in preinstall 1bfbf44086
• GitLab Mattermost version 1.2.1, few default settings changed 34a3a366eb
• Refactor mailroom into a separate service 959c1b3f43
• Update nginx config for artifacts and lfs 4e365f159e
• Added lfs config settings 4e365f159e
• Rename gitlab-git-http-server to gitlab-workhorse 47afb19142
• Updated chef version to 12.5.1 (Jayesh Mistry) 814263c9ec
• gitlab-workhorse version 0.4.2 3b66c9be19
• Fix docker image pushing when package is RC 99bad0cf40

8.1.3

• Update cacerts to 2015.10.28 e349060c81

8.1.2

• Load the sysctl config as soon as it is set a9f5ece8e7
• Added postgresql replication settings f1949604de

8.1.1

• Fix missing email feedback address for Mattermost (Pete Deffendol) 4121e5853a
• Fix reply by email support in the package 49cc150360
• Add mailroom to the log 01e26d3412
• Fix sysctl param loading da0c487ff8

8.1.0

• Restart gitlab-git-http-server on version change
• Moved docker build to omnibus-gitlab repository 9757575747
• Using sv to check for service status e7b00e4a5d
• Set kernel.sem for postgres connections dff749b36a
• Use ruby 2.1.7 6fb46c4db9
• Add backup encryption option for AWS backups 8562644f3d
• Update git to 2.6.1 b379c1060a
• Update gitlab-git-http-server to 0.3.0 737815fd22
• Move incoming email settings to gitlab.yml 9d8673e221
• Add config to enable slow query logging e3c4013d4c
• GitLab Mattermost to 1.1.1 38ef5d7b60
• Do not try to stop ci services if they are already disabled 635d7952fa

8.0.4

• Fix accidental removal of creating backup directory cb7afb0dff
• Create secrets and database templates for gitlab-ci for users upgrading from versions prior to 7.14 b9df5e8ce5
• Change the ownership of gitlab-shell/hooks directory a6fe61e7e1

8.0.3

• Update gitlab-git-http-server to 0.2.10 76ea52321b
• Switch to chef-gem 6b15effce7

8.0.2

• If using external mysql for mattermost don't run postgres code d847479b8b
• Add incoming_email_start_tls config ec02a9076f

8.0.1

• Revert "Do not buffer with nginx git http requests"

8.0.0

• gitlab-git-http-server 0.2.9 is enabled by default e6fa1b77c9
• Added reply by email configuration 3181425e05
• Add to host to ssh config for git user for bitbucket importer 3b0f7ebefc
• Add ability to configure the format of nginx logs 03511afa1d
• Add option to configure db driver for Mattermost f8f00ff203
• Remove local_mode_cache_warning warnings durning reconfigure run 6cd30475cd
• Update chef server version to 12.4.1 435183d75f
• Enable spdy support when using ssl (Manuel Gutierrez) caafd1d9cf
• Explicitly set scheme for X-Forwarded-Proto (Stan Hu) 19d71ac3cb
• Add option to set ssl_client_certificate path (Brayden Lopez) fc0f7e9344
• Add new Kerberos configuration settings for EE 40fc4a8687
• Add proxy_read_timeout and proxy_connect_timeout config (Alexey Zalesnyi) 286695fd91
• Add option to disable accounts management through omnibus-gitlab b7f5f2bea4
• Change the way sysctl configuration is being invoked 5481024558
• Fix redirect ports in nginx templates 54e342cd8d
• Do not buffer with nginx git http requests 99ea9025a4

7.14.3

• Add redis password option when using TCP auth d847479b8b

7.14.2

• Update gitlab-git-http-server to version 0.2.9 82a3bec2eb
• Ignore unknown values from gitlab-secrets.json (Stan Hu) ef76c81d7b
• Update cacerts to 2015.09.02 6bb15558b6

7.14.1

• Update gitlab-git-http-server to version 0.2.8 505de5318f
• Fix automatic SSO authorization between GitLab and Mattermost (Hiroyuki Sato) 1e7453bb71

7.14.0

• Add gitlab-git-http-server (disabled by default) 009aa7d2e6
• Resolved intermittent issues in gitlab-ctl reconfigure 83ce5ac3fe
• Added backup_archive_permissions configuration option fdf9a793d5
• Refactor gitlab-ctl stop for unicorn and logrotate b692b82445
• Include GitLab Mattermost in the package 7a6f6012b8

7.13.2

• Move config.ru out of etc directory to prevent passenger problems 5ee0ac2214
• Fix merge gone wrong to include upgrade to redis 2.8.21 528400090e

7.13.1

• No changes

7.13.0

• IMPORTANT: Default number of unicorn workers is at minimum 2, maximum number is calculated to leave 1GB of RAM free 2f623a5e9b
• IMPORTANT: Postgresql unix socket is now moved from Postgresql default to prevent clashes between packaged and (possibly) existing Postgresql installation 9ca63f517d
• Packages will be built with new tags b81165d934
• Unicorn worker restart memory range is now configurable 69e0f8f241
• Updated redis to 2.8.21 d1f2f38da7
• Updated omnibus-ctl to 0.3.6 d1f2f38da7
• Updated chef to 12.4.0.rc.2 d1f2f38da7
• Updated nginx to 1.7.12 d1f2f38da7
• Updated libxml2 to 2.9.2 d1f2f38da7
• Updated postgresql to 9.2.10 d1f2f38da7
• Updated omnibus to commit 0abab93bb67377d20c94bc4322018e2248b4a610 d1f2f38da7
• Postinstall message will check if instance is on EC2. Improved message output. dba7d1ed2a
• Change systemd service so GitLab starts up only after all FS are mounted and services started 2fc8482daf
• Use posttrans scriplet for RHEL systems to run upgrade or symlink omnibus-gitlab commands f9169ba540
• Set net.core.somaxconn parameter for unicorn f147911fd0
• Add configuration option for builds directory for GitLab CI a9bb2580db
• Skip running selinux module load if selinux is disabled 5707ef1d25

7.12.2

• Fix gitlab_shell_secret symlink which was removed by previous package on Redhat platform systems b34d4bcf4f
• Upgrade openssl to 1.0.1p 0ebb908e13

7.12.1

• Added configuration options for auto_link_ldap_user and auto_sign_in_with_provider fdb185c14f
• Update remote_syslog to 1.6.15 a1b3772ad3
• Fixed callback url for CI autoauthorization dbb46b073d

7.12.0

• Allow install_dir to be changed to allow different build paths (DJ Mountney) d205dc9e4da86ea39af18a6715f9538d3893488cf
• Switched to omnibus fork 99c713cb57
• Upgraded chef to 12.4.0.rc.0 b1a3870bd5
• Remove generated gitlab_shell_secret file during build 8ba8e92215
• Update redis to 2.8.20 6589e23ed7
• Exit on package installation if backup failed and wasn't skipped 710253c318
• Added sslmode and sslrootcert database configuration option (Anthony Brodard) dbeb00346c
• Added option to disable HTTPS on nginx to support proxied SSL for GitLab CI
• Added custom listen_port for GitLab CI nginx to support reverse proxies
• IMPORTANT: secret_token in gitlab.rb for GitLab, GitLab-shell and GitLab CI will now take presedence over the auto generated one
• Automatically authorise GitLab CI with GitLab when they are on the same server
• Transmit gitlab-shell logs with remote_syslog 9242b83525
• Moved GitLab CI cronjob from root to the gitlab-ci user 4b9926b8c0
• gitlab-rake and gitlab-ci-rake can be ran without sudo 4d4e3702ff
• Git username and email are removed from git users gitconfig 1911109c06
• Updated openssl to 1.0.1o 163305cac9
• Updated git version to 2.4.3 88186e3e71
• Updated SSL ciphers to exclude all DHE suites 08f790400b
• Updated rubygems version to 2.2.5 c85aed400b
• Rewrite runit default recipe which will now decide differently on which init is used d3156878ea
• Do not depend on Ohai platform helper for running selinux recipe cee73a2348

7.11.0

• Set the default certificate authority bundle to the embedded copy (Stan Hu) 673ac21021
• Use a different mirror for libossp-uuid (DJ Mountney) 7f46d70855
• Update omnibus-software 42839a91c2
• Add option to disable gitlab-rails when using only CI a784851e26
• Point to different state file for gitlab logrotate 42591805f6
• Allow setting ssl_dhparam in nginx config 7b0c80ed9c

7.10.0

• Add option to disable HTTPS on nginx to support proxied SSL (Stan Hu) 80f4204052
• Add openssh as runtime dependency e9b4f537a6
• Upgrade chef-gem version to 11.18.0 5a5300fe6b
• Upgrade gitlab-ctl version to 0.3.3 cdcbb3b4bc
• Specify build directory for pip for docutils build a0e240c969
• Upgrade ruby to 2.1.6 5058dd591d
• Add archive_repo sidekiq queue 3ed5e6e162
• Add CI services to remote syslog 5fa5235aef
• Set number of unicorn workers to CPU core count + 1 5ad7e8b89c
• Upgrade omnibusy-ruby to 4.0.0 d8d6a20551
• Upgrade postgresql version to 9.2.9 d8d6a20551
• Upgrade nginx to 1.7.11 528658852f
• Upgrade zlib to 1.2.8 20ed5ce4d0
• Create database using the database name in attributes c5dfbe8786
• Add gitlab_email_reply_to property (Stan Hu) e34317a289
• Add configuration option for gitlab-www user home dir e975b3ab47
• Restart nginx instead of issuing a HUP signal changes so that changes in listen_address work (Stan Hu) 72d09b9b29
• Automatically stop GitLab, backup, reconfigure and start after a new package is installed
• Rename the package from 'gitlab' to 'gitlab-ce' / 'gitlab-ee'
• Update cacerts version e57085281e
• Better parsing of DB settings in gitlab.rb 503fad5f9d
• Update omnibus-ctl version to 0.3.4 b5972560c8
• Try to detect init system in use on Debian (nextime) 7dd0234c19
• Devuan support added in runit (nextime) 7dd0234c19
• Disable EC2 plugin 70ba5285e1
• Disable multiple ohai plugins 0026ba2675

7.9.0

• Respect gitlab_email_enabled property (Daniel Serodio) e2982692d4
• Use correct cert for CI (Flávio J. Saraiva) 484227e2df
• Add ca_path and ca_file params for smtp email configuration (Thireus) fa9c1464bc
• Add custom listen_port to nginx config for reverse proxies (Stan Hu) 8c438a68fb
• Update openssl to 1.0.1k 0aa00aecf0
• DEPRECATION: 'gitlab_signup_enabled', 'gitlab_signin_enabled', 'gitlab_default_projects_limit', 'gravatar_enabled' are deprecated, settings can be changed in admin section of GitLab UI
• DEPRECATION: CI setting gitlab_ci_add_committer is deprecated. Use gitlab_ci_add_pusher to notify user who pushed the commit of a failing build
• DEPRECATION: 'issues_tracker_redmine', 'issues_tracker_jira' and related settings are deprecated. Configuring external issues tracker has been moved to Project Services section of GitLab UI
• Change default number of unicorn workers from 2 to 3 3d3f6e632b
• Use systemd for debian 8 6f8a9e2c82
• Increase unicorn timeout to 1 hour f21dddc2d2
• Add nodejs dependency
• Added option to add keys needed for bitbucket importer c8c720f970
• Add rack attack and email_display name config options e3dcc9a7ef

7.8.0

• Add gitlab-ci to logrotate (François Conil) 397ce5bab2
• New LDAP defaults, port and method 7a65245c59
• Disable GCE plugin 35b7b89c78

7.7.0

• Update ruby to 2.1.5 79e6833045
• Change the root_password setting to initial_root_password 577a4b7b89
• Include CI Oauth settings option 2e5ae7414e
• Include option to set global git config options 8eae0942ec

7.6.0

• Update git to 2.0.5 0749ffc43b
• Update libgit2 and rugged to version 0.21.2 66ac2e805a
• Generate SMTP settings using one template for both applications (Michael Ruoss) a6d6ff11f1
• Add gitlab-shell configuration settings for http_settings, audit_usernames, log_level 5e4310442a
• Enable Sidekiq MemoryKiller by default with a 1,000,000 kB limit 99bbe20b8f
• Change runit recipe for Fedora to systemd (Nathan) fbb7687f3c
• Added kerberos lib to support gitlab dependency 66fd3a85cc
• gitlab.rb now lists all available configuration options 6080f12569
• Add option to insert configuration settings in nginx template (Sander Boom) 5ba0485a48

7.5.0

• Use system UIDs and GIDs when creating accounts (Tim Bishop) cfc0434212
• Bundle GitLab CI with the package 3715204d86
• Fix inserting external_url in gitlab.rb after installation 59f5976562
• Avoid duplicate sidekiq log entries on remote syslog servers cb514282f0
• Update nginx config and SSL ciphers (Ben Bodenmiller) 0722d29c 89afa691
• Remove duplicate http headers (Phill Campbell) 8ea0d201c3
• Parallelize bundle install during build c53e92b80f
• Use Ruby 2.1.4 e083162579
• Remove exec symlinks after gitlab uninstall 70c9a6e00b
• Generate required gitlab_shell_secret d65d4832f1

7.4.0

• Fix broken environment variable removal
• Hard-code the environment directory for gitlab-rails
• Set PATH and RAILS_ENV via the env directory
• Set the environment for gitlab-rails and gitlab-rake via chpst
• Configure bundle exec wrapper with gitlab-rails-rc
• Add a logrotate service for gitlab-rails/production.log etc.
• Again using backwards compatible ssl ciphers
• Increased Unicorn timeout to 60s
• For non-bundled webserver added an option of supplying external webserver user username
• Add option for using backup uploader
• Update openssl to 1.0.1j
• If hostname is correctly set, omnibus will prefill external_url

7.3.1

• Fix web-server recipe order
• Make /var/opt/gitlab/nginx gitlab-www's home dir
• Remove unneeded write privileges from gitlab-www

7.3.0

• Add systemd support for Centos 7
• Add a Centos 7 SELinux module for ssh-keygen permissions
• Log rake db:migrate output in /tmp
• Support issue_closing_pattern via gitlab.rb (Michael Hill)
• Use SIGHUP for zero-downtime NGINX configuration changes
• Give NGINX its own working directory
• Use the default NGINX directory layout
• Raise the default Unicorn socket backlog to 1024 (upstream default)
• Connect to Redis via sockets by default
• Set Sidekiq shutdown timeout to 4 seconds
• Add the ability to insert custom NGINX settings into the gitlab server block
• Change the owner of gitlab-rails/public back to root:root
• Restart Redis and PostgreSQL immediately after configuration changes
• Perform chown 7.2.x security fix in postinst

7.2.0

• Pass environment variables to Unicorn and Sidekiq (Chris Portman)
• Add openssl_verify_mode to SMTP email configuration (Dionysius Marquis)
• Enable the 'ssh_host' field in gitlab.yml (Florent Baldino)
• Create git's home directory if necessary
• Update openssl to 1.0.1i
• Fix missing sidekiq.log in the GitLab admin interface
• Defer more gitlab.yml defaults to upstream
• Allow more than one NGINX listen address
• Enable NGINX SSL session caching by default
• Update omnibus-ruby to 3.2.1
• Add rugged and libgit2 as dependencies at the omnibus level
• Remove outdated Vagrantfile

7.1.0

• Build: explicitly use .forward for sending notifications
• Fix MySQL build for Ubuntu 14.04
• Built-in UDP log shipping (Enterprise Edition only)
• Trigger Unicorn/Sidekiq restart during version change
• Recursively set the SELinux type of ~git/.ssh
• Add support for the LDAP admin_group attribute (GitLab EE)
• Fix TLS issue in SMTP email configuration (provides new attribute tls) (Ricardo Langner)
• Support external Redis instances (sponsored by O'Reilly Media)
• Only reject SMTP attributes which are nil
• Support changing the 'restricted_visibility_levels' option (Javier Palomo)
• Only start omnibus-gitlab services after a given filesystem is mounted
• Support the repository_downloads_path setting in gitlab.yml
• Use Ruby 2.1.2
• Pin down chef-gem's ohai dependency to 7.0.4
• Raise the default maximum Git output to 20 MB

7.0.0-ee.omnibus.1

• Fix MySQL build for Ubuntu 14.04

7.0.0

• Specify numeric user / group identifiers
• Support AWS S3 attachment storage
• Send application email via SMTP
• Support changing the name of the "git" user / group (Michael Fenn)
• Configure omniauth in gitlab.yml
• Expose more fields under 'extra' in gitlab.yml
• Zero-downtime Unicorn restarts
• Support changing the 'signin_enabled' option (Konstantinos Paliouras)
• Fix Nginx HTTP-to-HTTPS log configuration error (Konstantinos Paliouras)
• Create the authorized-keys.lock file for gitlab-shell 1.9.4
• Include Python and docutils for reStructuredText support
• Update Ruby to version 2.1.1
• Update Git to version 2.0.0
• Make Runit log rotation configurable
• Change default Runit log rotation from 10x1MB to 30x24h
• Security: Restrict redis and postgresql log directory permissions to 0700
• Add a 'gitlab-ctl deploy-page' command
• Automatically create /etc/gitlab/gitlab.rb after the package is installed
• Security: Use sockets and peer authentication for Postgres
• Avoid empty Piwik or Google Analytics settings
• Respect custom Unicorn port setting in gitlab-shell

6.9.4-ee.omnibus.1

• Security: Use sockets and peer authentication for Postgres

6.9.2.omnibus.2

• Security: Use sockets and peer authentication for Postgres

6.9.2

• Create the authorized-keys.lock file for gitlab-shell 1.9.4

6.9.1

• Fix Nginx HTTP-to-HTTPS log configuration error (Konstantinos Paliouras)

6.9.0

• Make SSH port in clone URLs configurable (Julien Pivotto)
• Fix default Postgres port for non-packaged DBMS (Drew Blessing)
• Add migration instructions coming from an existing GitLab installation (Goni Zahavy)
• Add a gitlab.yml conversion support script
• Correct default gravatar configuration (#112) (Julien Pivotto)
• Update Ruby to 2.0.0p451
• Fix name clash between release.sh and make release
• Fix Git CRLF bug
• Enable the 'sign_in_text' field in gitlab.yml (Mike Nestor)
• Use more fancy SSL ciphers for Nginx
• Use sane LDAP defaults
• Clear the Rails cache after modifying gitlab.yml
• Only run rake db:migrate when the gitlab-rails version has changed
• Ability to change the Redis port

6.8.1

• Use gitlab-rails 6.8.1

6.8.0

• MySQL client support (EE only)
• Update to omnibus-ruby 3.0
• Update omnibus-software (e.g. Postgres to 9.2.8)
• Email notifications in release.sh
• Rewrite parts of release.sh as a Makefile
• HTTPS support (Chuck Schweizer)
• Specify the Nginx bind address (Marco Wessel)
• Debian 7 build instructions (Kay Strobach)

6.7.3-ee.omnibus.1

• Update gitlab-rails to v6.7.3-ee

6.7.3-ee.omnibus

6.7.4.omnibus

• Update gitlab-rails to v6.7.4

6.7.2-ee.omnibus.2

• Update OpenSSL to 1.0.1g to address CVE-2014-0160

6.7.3.omnibus.3

• Update OpenSSL to 1.0.1g to address CVE-2014-0160