<NME> CHANGELOG.md <BEF> # Omnibus-gitlab changelog The latest version of this file can be found at the master branch of the omnibus-gitlab repository. ## 15.5.1 (2022-10-24) - Update redis version to 8.2.24 2773274 8.5.3 - No changes - [Support for 'track-repositories' Praefect command](gitlab-org/omnibus-gitlab@d1d4609e559045115420f0554a1f3b42a73886bc) ([merge request](gitlab-org/omnibus-gitlab!6319)) - [Provide packages for Ubuntu 22.04](gitlab-org/omnibus-gitlab@d6895741f17e284a3e762720acbe563291a10c2e) ([merge request](gitlab-org/omnibus-gitlab!6337)) - [Provide FIPS packages for Amazon Linux 2](gitlab-org/omnibus-gitlab@2222e5d7b99a419259e6410f911cb976e6a591c6) ([merge request](gitlab-org/omnibus-gitlab!6314)) - [Support specifying ssl_password_file in nginx conf](gitlab-org/omnibus-gitlab@47996b10a47f0d5725dcf4a1098862ca3f350c67) ([merge request](gitlab-org/omnibus-gitlab!6367)) ### Fixed (5 changes) - [Extend and enhance SELinux distro support](gitlab-org/omnibus-gitlab@f28a20e668a4d32142618e7b0961680b47b362f9) ([merge request](gitlab-org/omnibus-gitlab!6419)) - [Update custom cop rule as per updating RuboCop to v1](gitlab-org/omnibus-gitlab@318a4a8a007efc6e31455f50b69e5579ab3366f6) ([merge request](gitlab-org/omnibus-gitlab!6402)) - [Patch nginx-module-vts to compile with gcc 11](gitlab-org/omnibus-gitlab@f7c083ef12b8a64dbd51860c32392859853be826) ([merge request](gitlab-org/omnibus-gitlab!6333)) - [Fix Ruby MD5 not always being available in FIPS mode](gitlab-org/omnibus-gitlab@695f08da2428edf3e9a790b91a9d7f1b25bb9df0) ([merge request](gitlab-org/omnibus-gitlab!6357)) - [Update gitlab-styles from 7.1.0 to 9.0.0](gitlab-org/omnibus-gitlab@ee1c18913065abad5b03420fa4e107f3ca3722b2) ([merge request](gitlab-org/omnibus-gitlab!6355)) ### Changed (16 changes) - [Update webdevops/go-crond from to 22.9.1](gitlab-org/omnibus-gitlab@6a0cc42d47d40d7929fd8f6b6df600938f4511f2) ([merge request](gitlab-org/omnibus-gitlab!6438)) - [Drop exclusion of mysql group from gitlab-rails building](gitlab-org/omnibus-gitlab@0bee93924ddc7cfeb317f7077e4d78a299130787) ([merge request](gitlab-org/omnibus-gitlab!6452)) - [Add exporters to deps.yml](gitlab-org/omnibus-gitlab@e653d77e7895cbfd65c951967521e6fd50d51f78) ([merge request](gitlab-org/omnibus-gitlab!6415)) - [Update prometheus to v2.38.0](gitlab-org/omnibus-gitlab@94b0c0056b82731e6b51832e26f69a0c85babe0d) ([merge request](gitlab-org/omnibus-gitlab!6426)) - [Update postgres-exporter to v0.11.1](gitlab-org/omnibus-gitlab@08b1519c626dbe73ac9ef8246420a8f58f521606) ([merge request](gitlab-org/omnibus-gitlab!6418)) - [Allow output of Rails migrations in reconfigure step](gitlab-org/omnibus-gitlab@da9f42a9fb755a312913a49c9ba50dc962bc26e6) ([merge request](gitlab-org/omnibus-gitlab!6404)) - [Update libtensorflow_lite to version 2.6.0](gitlab-org/omnibus-gitlab@f8f3454031dde9f1110b4cb2e275752817b79e6a) ([merge request](gitlab-org/omnibus-gitlab!6428)) - [Update alertmanager to v0.24.0](gitlab-org/omnibus-gitlab@46223601eaec79a44fe35b6b504c41ca37b63607) ([merge request](gitlab-org/omnibus-gitlab!6427)) - [Update pgbouncer-exporter to v0.5.1](gitlab-org/omnibus-gitlab@4bd6f38c3803d0d4160db4b51e0fa3b36da8f497) ([merge request](gitlab-org/omnibus-gitlab!6417)) - [Update redis-exporter to v1.44.0](gitlab-org/omnibus-gitlab@5bf77e9d07e14caf1c54265e7d01768d887e3a93) ([merge request](gitlab-org/omnibus-gitlab!6416)) - [Update node-exporter to v1.4.0](gitlab-org/omnibus-gitlab@5858a9d5929faa2505657381b22145bc2022ae13) ([merge request](gitlab-org/omnibus-gitlab!6420)) - [Exclude Spamcheck libraries from build](gitlab-org/omnibus-gitlab@05ddcc2a53a8d15f0ea6a08360aa771ed614f553) ([merge request](gitlab-org/omnibus-gitlab!6392)) - [Add timeout options for reconfigure run as part of pg-upgrade](gitlab-org/omnibus-gitlab@6575d9fe57f1d9a17bb33788b119cc31aa9e21dd) by @zhzhang93 ([merge request](gitlab-org/omnibus-gitlab!6321)) - [Compile jemalloc with Ruby by default](gitlab-org/omnibus-gitlab@6fb7f2d0e0ecf358acd4702a45346017fb906495) ([merge request](gitlab-org/omnibus-gitlab!6363)) - [Remove python library whl files from package](gitlab-org/omnibus-gitlab@e48e47c7d38b9ad72835df0c0a79230a073f8102) ([merge request](gitlab-org/omnibus-gitlab!6358)) - [Allow Chef FIPS auto-detection](gitlab-org/omnibus-gitlab@c2e843d1480415a10d20e3c164fc5eb3eb22d9c7) ([merge request](gitlab-org/omnibus-gitlab!6338)) ### Deprecated (2 changes) - [Deprecate `gitlab_rails['gitlab_default_can_create_group']` setting](gitlab-org/omnibus-gitlab@0ebc71056e566af02fccbeb37d80e086e28bfdb1) ([merge request](gitlab-org/omnibus-gitlab!6316)) - [Praefect: Deprecate DB metrics configuration](gitlab-org/omnibus-gitlab@1494fa7aea6f1ff3446b4441c4909a531d2cedbe) ([merge request](gitlab-org/omnibus-gitlab!6317)) ### Security (2 changes) - [Pass necessary headers on accessing healthcheck endpoints](gitlab-org/omnibus-gitlab@3a68dfd593b98935643d0c1f4c5dc69efc28d288) - [Apply Grafana CVE-2022-3110 patch](gitlab-org/omnibus-gitlab@01e83fca75011af8ea5b9e284614837f6453185b) ### Other (3 changes) - [Update python3 from 3.9.6 to 3.10.7](gitlab-org/omnibus-gitlab@1dd2956c0a2411b2b9287a0d5ddf1174b6ce81ea) ([merge request](gitlab-org/omnibus-gitlab!6401)) - [Enable Style/GlobalVars cop through all files in RuboCop](gitlab-org/omnibus-gitlab@db7ad34d52fe0844be1cf7e02e7fc04a465c7271) ([merge request](gitlab-org/omnibus-gitlab!6371)) - [Remove license patch for removed awesome_print gem](gitlab-org/omnibus-gitlab@3e3fcf4a50c89f7f008dce7c16fafd1b922cfd1a) ([merge request](gitlab-org/omnibus-gitlab!6370)) ## 15.4.3 (2022-10-19) No changes. ## 15.4.2 (2022-10-04) No changes. ## 15.4.1 (2022-09-29) ### Security (2 changes) - [Apply Grafana CVE-2022-3110 patch](gitlab-org/security/omnibus-gitlab@3febf0771ca0924f8db3392c99b03ab852ca4950) ([merge request](gitlab-org/security/omnibus-gitlab!239)) - [Pass necessary headers on accessing healthcheck endpoints](gitlab-org/security/omnibus-gitlab@48b29f3972d2137be4153ad9e7d5c2bd45a397aa) ([merge request](gitlab-org/security/omnibus-gitlab!240)) ## 15.4.0 (2022-09-21) ### Added (1 change) - [Add support for Gitaly GPG signing](gitlab-org/omnibus-gitlab@6f401b63547891efec40799ae8178cdf7342fb88) ([merge request](gitlab-org/omnibus-gitlab!6294)) ### Fixed (2 changes) - [Fix an issue were the incoming email secret file was not being created](gitlab-org/omnibus-gitlab@4ce9a961eec600bfb8812562e9ff05cf92381200) ([merge request](gitlab-org/omnibus-gitlab!6324)) - [API should return JSON on errors even if custom error pages are used](gitlab-org/omnibus-gitlab@e2e2176d07cb2a14c9a49ca548c3467edd81f009) by @ercan.ucan ([merge request](gitlab-org/omnibus-gitlab!6276)) ### Changed (7 changes) - [Bump packer version to 1.8.2](gitlab-org/omnibus-gitlab@9095dd5198ffc3020001deaf25c96c68d92600d9) ([merge request](gitlab-org/omnibus-gitlab!6322)) - [Use sha256 instead of md5 when downloading component source](gitlab-org/omnibus-gitlab@20602725482d70f75a41a6649cf0aa6989753754) ([merge request](gitlab-org/omnibus-gitlab!6330)) - [Update gpgme to version 1.17.0](gitlab-org/omnibus-gitlab@e59a65c7ec6e3b729f2b03a370ac126e9c4fa128) ([merge request](gitlab-org/omnibus-gitlab!6332)) - [Compatibility for hashed oauth secrets](gitlab-org/omnibus-gitlab@643a089acd17d4d5d14298db0e6f7eaff4844fe8) ([merge request](gitlab-org/omnibus-gitlab!6310)) - [Raise default Geo base backup timeout to 12 hours](gitlab-org/omnibus-gitlab@596373120354bf9aa819732aeb8a9ad6f8c0b1d4) ([merge request](gitlab-org/omnibus-gitlab!6308)) - [Improve error message when omnibus_gitconfig is not set properly](gitlab-org/omnibus-gitlab@0bf606a23d39570189c5a53650e9f35b351759c5) ([merge request](gitlab-org/omnibus-gitlab!6298)) - [Update container registry to v3.53.0-gitlab](gitlab-org/omnibus-gitlab@f9b56f675ad12c55d781392c9ad318ee6e1c6dde) ([merge request](gitlab-org/omnibus-gitlab!6227)) ### Security (4 changes) - [Bump gitlab-exporter version to 11.18.2 to mitigate VULNDB-255039](gitlab-org/omnibus-gitlab@f14d07f73f54e407edd3ed6ecf76e17ddda0664b) - [Update unzip to 6.0.27](gitlab-org/omnibus-gitlab@76bc3e9c3dbfe8a57aedbb9b73631f5f3cd3dcf0) - [Bump nginx version to 1.20.2](gitlab-org/omnibus-gitlab@7ee8bc82dd644a38e5516c9cadd07e77a4dd84c3) - [Update libxml2 from 2.9.10 to 2.9.14](gitlab-org/omnibus-gitlab@b4ce083cfb478ce04daeaa375fd6ae5d98f26a32) ([merge request](gitlab-org/omnibus-gitlab!6248)) ### Other (5 changes) - [Update chef-classroom to 1.0.5](gitlab-org/omnibus-gitlab@dca6529508cd299f6557acceb379f2d5f73fac5d) ([merge request](gitlab-org/omnibus-gitlab!6274)) - [Update libyaml to 0.2.5](gitlab-org/omnibus-gitlab@69b88f4fc29ae255820ec19a38098e3a9f23d418) ([merge request](gitlab-org/omnibus-gitlab!6253)) - [Update aws-sdk-ec2 and aws-sdk-marketplacecatalog](gitlab-org/omnibus-gitlab@cb7b423577f890de04502214272a6c5cba1f4aec) ([merge request](gitlab-org/omnibus-gitlab!6257)) - [Replace byebug and pry](gitlab-org/omnibus-gitlab@6764d7ab3c4925a157fe09ff1ba1d92d4f23c742) ([merge request](gitlab-org/omnibus-gitlab!6240)) - [Use HTTPS instead of HTTP for pkg-config-lite](gitlab-org/omnibus-gitlab@525cd1994d06d7f6304715338553a870085a15ca) ([merge request](gitlab-org/omnibus-gitlab!6252)) ## 15.3.4 (2022-09-29) ### Security (3 changes) - [Mattermost security release for 2022-08](gitlab-org/security/omnibus-gitlab@e8f1ac2a668c5dd6141ef30be03c65a608e6af57) ([merge request](gitlab-org/security/omnibus-gitlab!241)) - [Apply Grafana CVE-2022-3110 patch](gitlab-org/security/omnibus-gitlab@1722a2cbaf66b019ac8cd9ccf2b1bef868f7e353) ([merge request](gitlab-org/security/omnibus-gitlab!237)) - [Pass necessary headers on accessing healthcheck endpoints](gitlab-org/security/omnibus-gitlab@5601e4db7f660dd17f5c11bc31dad44baba5f293) ([merge request](gitlab-org/security/omnibus-gitlab!235)) ## 15.3.3 (2022-09-01) ### Changed (1 change) - [Improve error message when omnibus_gitconfig is not set properly](gitlab-org/omnibus-gitlab@1a77c08ef096d64482d7d08ce716d085765ae225) ([merge request](gitlab-org/omnibus-gitlab!6304)) ## 15.3.2 (2022-08-30) ### Security (4 changes) - [Update libxml2 from 2.9.10 to 2.9.14](gitlab-org/security/omnibus-gitlab@96138c7c299ef038554e809462f98229bf902451) ([merge request](gitlab-org/security/omnibus-gitlab!218)) - [Bump gitlab-exporter version to 11.18.2 to mitigate VULNDB-255039](gitlab-org/security/omnibus-gitlab@ccd42069e018253b751228e66ffffc35dc6c5b79) ([merge request](gitlab-org/security/omnibus-gitlab!232)) - [Update unzip to 6.0.27](gitlab-org/security/omnibus-gitlab@c82fcd26e4fda6a734b32036381a4cb2915569f5) ([merge request](gitlab-org/security/omnibus-gitlab!228)) - [Bump nginx version to 1.20.2](gitlab-org/security/omnibus-gitlab@8917dbf9f158bc010918e9e757bff29fe339acce) ([merge request](gitlab-org/security/omnibus-gitlab!222)) ## 15.3.1 (2022-08-22) No changes. ## 15.3.0 (2022-08-19) ### Added (2 changes) - [Add perl as runtime dependency](gitlab-org/omnibus-gitlab@89e6dc81c0745a30450cdf45fd849dbced1f2fc4) ([merge request](gitlab-org/omnibus-gitlab!6237)) - [Add ci_runner_versions_reconciliation_worker setting](gitlab-org/omnibus-gitlab@22d70d6862e415e6d746bd4a97feccccee2851e3) ([merge request](gitlab-org/omnibus-gitlab!6198)) ### Fixed (3 changes) - [Ensure Omnibus Docker image has exiftool deps](gitlab-org/omnibus-gitlab@30de86b06e7cf55d9a07963720b20c854e293d39) ([merge request](gitlab-org/omnibus-gitlab!6236)) - [Gracefully handle blank CPU information](gitlab-org/omnibus-gitlab@fa684b35d8fbb5bec34cf3aa80bb0b182ad3f6ad) ([merge request](gitlab-org/omnibus-gitlab!6230)) - [Reload Consul only if the service is enabled](gitlab-org/omnibus-gitlab@6ae828d4176e5be37653ef2d4d185a56819240a2) ([merge request](gitlab-org/omnibus-gitlab!6218)) ### Changed (4 changes) - [gitaly: Unconditionally ignore the gitconfig](gitlab-org/omnibus-gitlab@8508277a72b2d5e81c28e9956b5d541e2ebf55a1) ([merge request](gitlab-org/omnibus-gitlab!6245)) - [Remove svlogd filter from consul configuration](gitlab-org/omnibus-gitlab@b6ae0f59fb18037e92ecf5efc4973431ccb80706) ([merge request](gitlab-org/omnibus-gitlab!6154)) - [Update cacerts to 2022.07.19](gitlab-org/omnibus-gitlab@7d0650d92758e83d8f4b06164152d3b6bf7c29ae) ([merge request](gitlab-org/omnibus-gitlab!6232)) - [Set webhook as MailRoomm's default delivery strategy](gitlab-org/omnibus-gitlab@785f20c486c36ec4ba7205337a6145f94af08cd6) ([merge request](gitlab-org/omnibus-gitlab!6149)) ### Removed (1 change) - [Stop enabling Grafana for new installs](gitlab-org/omnibus-gitlab@0ae2fb20e78c769e59e78229b2b09ebc1f0f9cbf) ([merge request](gitlab-org/omnibus-gitlab!6271)) ### Security (3 changes) - [Update libxslt from 1.1.32 to 1.1.35](gitlab-org/omnibus-gitlab@13db4d38c377c5e7be6bdee249cab5a1989b5028) ([merge request](gitlab-org/omnibus-gitlab!6249)) - [Upgrade bzip2 to use version 1.0.8](gitlab-org/omnibus-gitlab@013b8b94479a9c8baa33fec5835fec2fca4a71a5) - [Bump exiftool version to 12.42](gitlab-org/omnibus-gitlab@9fb6f2f8297f975fa2413ccf1ecd48b1b5990b06) ### Other (6 changes) - [Update erubi from 1.10.0 to 1.11.0](gitlab-org/omnibus-gitlab@e1f2b452c877ff5a8d7693f27e12206514ee5e7a) ([merge request](gitlab-org/omnibus-gitlab!6256)) - [Update rack from 2.2.3 to 2.2.4](gitlab-org/omnibus-gitlab@081dcfbc1d78d992e21a07c7c51b993574b1dbd9) ([merge request](gitlab-org/omnibus-gitlab!6255)) - [Use updated syntax in OpenSSL::Digest](gitlab-org/omnibus-gitlab@434514b2192b9511d3d9d2deb1f22abf500eb3a7) ([merge request](gitlab-org/omnibus-gitlab!6254)) - [Use rubygems bundled with ruby language](gitlab-org/omnibus-gitlab@c16b20b5c433a8605075bacb2903a07fd5bf5f2d) ([merge request](gitlab-org/omnibus-gitlab!6242)) - [Use official sha256 as checksum for cacerts](gitlab-org/omnibus-gitlab@576a8c296da6b2b89ac684d014c1192c4b13c50b) ([merge request](gitlab-org/omnibus-gitlab!6251)) - [Add GITLAB_METRICS_EXPORTER_VERSION for releases](gitlab-org/omnibus-gitlab@25b3c469015ae487fa390cf5cae567f06f1df288) ([merge request](gitlab-org/omnibus-gitlab!6222)) ## 15.2.5 (2022-09-29) ### Security (3 changes) - [Mattermost security release for 2022-08](gitlab-org/security/omnibus-gitlab@3d5112f1e3f9bbcf3a495cf0cd81245ef4edf6de) ([merge request](gitlab-org/security/omnibus-gitlab!242)) - [Apply Grafana CVE-2022-3110 patch](gitlab-org/security/omnibus-gitlab@63099fde11ae26ff9d74d6f28f8ff7e83596a414) ([merge request](gitlab-org/security/omnibus-gitlab!238)) - [Pass necessary headers on accessing healthcheck endpoints](gitlab-org/security/omnibus-gitlab@0b1f054956091d6fe9ea6fc4f613db863ac5e4a2) ([merge request](gitlab-org/security/omnibus-gitlab!236)) ## 15.2.4 (2022-08-30) ### Security (4 changes) - [Update libxslt and libxml](gitlab-org/security/omnibus-gitlab@47ff9e8beb445fa7f14f9f7854c810c3fcabb217) ([merge request](gitlab-org/security/omnibus-gitlab!221)) - [Bump gitlab-exporter version to 11.18.2 to mitigate VULNDB-255039](gitlab-org/security/omnibus-gitlab@d77281ac01120901f40743427c8a18fc3cea7e4c) ([merge request](gitlab-org/security/omnibus-gitlab!231)) - [Update unzip to 6.0.27](gitlab-org/security/omnibus-gitlab@146bcbebe071444cdc46f3ab9566cc86c24454f0) ([merge request](gitlab-org/security/omnibus-gitlab!227)) - [Bump nginx version to 1.20.2](gitlab-org/security/omnibus-gitlab@6327df5fba9e4e26b2bbf48f025169e0cc367b87) ([merge request](gitlab-org/security/omnibus-gitlab!223)) ## 15.2.3 (2022-08-22) No changes. ## 15.2.2 (2022-08-01) ### Fixed (1 change) - [Gracefully handle blank CPU information](gitlab-org/omnibus-gitlab@d95763e7c02ad78300ba41a8f2526dee86b8e5cd) ([merge request](gitlab-org/omnibus-gitlab!6234)) ## 15.2.1 (2022-07-28) ### Security (2 changes) - [Bump exiftool version to 12.42](gitlab-org/security/omnibus-gitlab@53294ab72ff4ce07edbb1028e5311ff49196c378) ([merge request](gitlab-org/security/omnibus-gitlab!211)) - [Upgrade bzip2 to use version 1.0.8](gitlab-org/security/omnibus-gitlab@ff77949fc27633df0b9a8c5ad478133c650e5a94) ([merge request](gitlab-org/security/omnibus-gitlab!210)) ## 15.2.0 (2022-07-21) ### Added (6 changes) - [gitaly: Reintroduce migration to `[[git.config]]` stanzas](gitlab-org/omnibus-gitlab@4bf3bf85045cd94373184761e6f9a3b7fb6cd7cd) ([merge request](gitlab-org/omnibus-gitlab!6186)) - [Add praefect list-storages subcommand](gitlab-org/omnibus-gitlab@e0e0b0ebf8db5893cb543a2bfa9c57ffa564c560) ([merge request](gitlab-org/omnibus-gitlab!6147)) - [Add [gitlab] section to praefect config toml](gitlab-org/omnibus-gitlab@e9b444b63e690b1dc4d573ae37a40c7408b76a85) ([merge request](gitlab-org/omnibus-gitlab!6146)) - [Make gitlab-pages redirects limits configurable](gitlab-org/omnibus-gitlab@e5cfe22be99037081aedb4d45b1f63c718329050) by @nejc ([merge request](gitlab-org/omnibus-gitlab!6144)) - [Add TLS support for dedicated metrics servers](gitlab-org/omnibus-gitlab@d8558c80fe9c234b0fa7e1769a8403922e1706c4) ([merge request](gitlab-org/omnibus-gitlab!6155)) - [Add failover timeout to Praefect config](gitlab-org/omnibus-gitlab@ebddd96305ab24b46a630f16d85ac269c4e43087) ([merge request](gitlab-org/omnibus-gitlab!6150)) ### Fixed (8 changes) - [Ensure FIPS builds are EE](gitlab-org/omnibus-gitlab@0efee70f93086181fdc652be3f6d5b72686ff9c0) ([merge request](gitlab-org/omnibus-gitlab!6217)) - [Adjust worker processes to use real CPUs instead of cores](gitlab-org/omnibus-gitlab@182bc46016c73f5a9a2d39d676e7ed8eff811322) ([merge request](gitlab-org/omnibus-gitlab!6210)) - [Ensure Ruby platform is set globally on ARM64 OSes](gitlab-org/omnibus-gitlab@ad98bf31735ba0242d8c3376eaca335c143b3c09) ([merge request](gitlab-org/omnibus-gitlab!6208)) - [Fix worker processes not starting up due to 0 processes](gitlab-org/omnibus-gitlab@fb8549a22789347424ef6ba0454573c532ea2aa9) ([merge request](gitlab-org/omnibus-gitlab!6192)) - [Properly escape S3 credentials in Workhorse config TOML](gitlab-org/omnibus-gitlab@cafff1b049296de9c2822f45be02f86c473dac48) ([merge request](gitlab-org/omnibus-gitlab!6187)) - [Fix KAS address when running GitLab on a relative URL](gitlab-org/omnibus-gitlab@059115935b3cd6a2ab309452401f000af9811081) by @paddy-hack ([merge request](gitlab-org/omnibus-gitlab!6185)) - [Force nginx proxy to use IPv4](gitlab-org/omnibus-gitlab@11e43467114a1aabe42e21d3936328909a6e0140) ([merge request](gitlab-org/omnibus-gitlab!6143)) - [Fix DISABLE_PUMA_WORKER_KILLER env var check](gitlab-org/omnibus-gitlab@05c1e99593b8f3b2e3b44298d4fe34ae84ad5947) ([merge request](gitlab-org/omnibus-gitlab!6173)) ### Changed (13 changes) - [Configure local Gemfile before force_ruby_platform](gitlab-org/omnibus-gitlab@8415a921304f68f4a75e28e8130e7f52199c78e1) by @vincent_stchu ([merge request](gitlab-org/omnibus-gitlab!6207)) - [Update to openssl 1.1.1q](gitlab-org/omnibus-gitlab@52727ac1bbf405da7d5a1ca3a49e4bfe8aa638eb) ([merge request](gitlab-org/omnibus-gitlab!6215)) - [Update gitlab-org/container-registry from v3.51.0-gitlab to v3.51.1-gitlab](gitlab-org/omnibus-gitlab@093e518deffad656af8b8c9832dd83f6f4282586) ([merge request](gitlab-org/omnibus-gitlab!6214)) - [Update acme-client to 2.0.11](gitlab-org/omnibus-gitlab@e3b88da7fa0899ac29274140b24c0288741047a5) ([merge request](gitlab-org/omnibus-gitlab!6131)) - [Update to openssl 1.1.1p](gitlab-org/omnibus-gitlab@54bedc1dac06571c5fbb1d9417fd2afdd7e1da6a) ([merge request](gitlab-org/omnibus-gitlab!6176)) - [Update container registry to 3.51.0](gitlab-org/omnibus-gitlab@a362b10c0cb9c1d78d752654147daa4bd956ab6e) ([merge request](gitlab-org/omnibus-gitlab!6194)) - [Set force_ruby_platform to true locally for Gitaly and GitLab Rails](gitlab-org/omnibus-gitlab@628f5581dd6802296ae75b564a999a56977656fa) ([merge request](gitlab-org/omnibus-gitlab!6212)) - [Update jemalloc from 5.2.1 to 5.3.0](gitlab-org/omnibus-gitlab@7a82726701f97f68218523ebc2f2d12835a8195e) ([merge request](gitlab-org/omnibus-gitlab!6085)) - [Bump Container Registry to v3.49.0-gitlab](gitlab-org/omnibus-gitlab@519dfca3677913699d1914c65ef08cfea4517083) ([merge request](gitlab-org/omnibus-gitlab!6181)) - [Disable KAS by default in FIPS environments](gitlab-org/omnibus-gitlab@96406491400f7d975cf6772050c09b3c6c07b817) ([merge request](gitlab-org/omnibus-gitlab!6184)) - [Disable doc generation in grpc gem compilation for FIPS builds](gitlab-org/omnibus-gitlab@640ef48f3be8dfbf38667e8d0a728b0ba27bd92d) ([merge request](gitlab-org/omnibus-gitlab!6177)) - [gitaly: Migrate to inject Git configuration via `config.toml`](gitlab-org/omnibus-gitlab@2727686d248cffa6c3883f9daa8e0d02c479b11b) ([merge request](gitlab-org/omnibus-gitlab!6128)) - [Add dry run option to registry-garbage-collect command.](gitlab-org/omnibus-gitlab@44bf128b02deff84e89611bdc90e0f66748c6537) ([merge request](gitlab-org/omnibus-gitlab!6145)) ### Deprecated (1 change) - [global: Remove deprecated `self_signed_cert` setting](gitlab-org/omnibus-gitlab@0021a2c1e28ded37c428b4f3ee4d10abf6099840) ([merge request](gitlab-org/omnibus-gitlab!6196)) ## 15.1.6 (2022-08-30) ### Security (5 changes) - [Update libxslt and libxml](gitlab-org/security/omnibus-gitlab@829e0c7c007d0fe9120c06609e6569f42433405a) ([merge request](gitlab-org/security/omnibus-gitlab!220)) - [Upgrade mattermost to use version 6.7.1](gitlab-org/security/omnibus-gitlab@6dad6fd8d5123dca58290b63f4eaf3f68a992fb8) ([merge request](gitlab-org/security/omnibus-gitlab!213)) - [Bump gitlab-exporter version to 11.18.2 to mitigate VULNDB-255039](gitlab-org/security/omnibus-gitlab@4374bc384c8626e1a635435efc8804ebfce284cb) ([merge request](gitlab-org/security/omnibus-gitlab!230)) - [Update unzip to 6.0.27](gitlab-org/security/omnibus-gitlab@7b0997e0350cee1b8cefc8106c566e1be9c25721) ([merge request](gitlab-org/security/omnibus-gitlab!226)) - [Bump nginx version to 1.20.2](gitlab-org/security/omnibus-gitlab@20647e2748f1f7b5f4b029a0d122ac8ce4ed4428) ([merge request](gitlab-org/security/omnibus-gitlab!224)) ## 15.1.5 (2022-08-22) No changes. ## 15.1.4 (2022-07-28) ### Security (2 changes) - [Bump exiftool version to 12.42](gitlab-org/security/omnibus-gitlab@85a6446d5aea2c353231abed1c2ff411c7d5e66d) ([merge request](gitlab-org/security/omnibus-gitlab!206)) - [Upgrade bzip2 to use version 1.0.8](gitlab-org/security/omnibus-gitlab@1e84e9ed015def9f34e5c107f91a275ac9042917) ([merge request](gitlab-org/security/omnibus-gitlab!209)) ## 15.1.3 (2022-07-19) ### Fixed (3 changes) - [Adjust worker processes to use real CPUs instead of cores](gitlab-org/omnibus-gitlab@056ba003d899862c5d251b83e050a33d59e6b1eb) ([merge request](gitlab-org/omnibus-gitlab!6216)) - [Ensure Ruby platform is set globally for arm64 based operating systems](gitlab-org/omnibus-gitlab@b65a681a3c123969e18b6c311c38e9c8cb64c791) ([merge request](gitlab-org/omnibus-gitlab!6216)) - [Fix worker processes not starting up due to 0 processes](gitlab-org/omnibus-gitlab@143e340f82bc34439b88a835c2597d28537cac25) ([merge request](gitlab-org/omnibus-gitlab!6216)) ### Changed (1 change) - [Set force_ruby_platform to true locally for Gitaly and GitLab Rails](gitlab-org/omnibus-gitlab@4bc3f6259284c298ecac94f9d27516dc7bec7681) ([merge request](gitlab-org/omnibus-gitlab!6216)) ## 15.1.2 (2022-07-05) No changes. ## 15.1.1 (2022-06-30) No changes. ## 15.1.0 (2022-06-21) ### Added (1 change) - [Add gitlab_rails['cdn_host'] setting](gitlab-org/omnibus-gitlab@456dda0db813e0d3baae01642497a33c61cf714c) ([merge request](gitlab-org/omnibus-gitlab!6096)) ### Fixed (4 changes) - [Handle standby leader nodes properly in pg-upgrade](gitlab-org/omnibus-gitlab@41383d3c89a82b067891114ac44996348ed7779c) ([merge request](gitlab-org/omnibus-gitlab!6036)) - [pgbouncer reload failure should provide insight](gitlab-org/omnibus-gitlab@0a09f57484a0053765cd729bea834c06a7096ded) ([merge request](gitlab-org/omnibus-gitlab!6127)) - [Skip auto-restart of PG during reconfigure as part of pg-upgrade](gitlab-org/omnibus-gitlab@817c0fea370a1aceeffd9f5ef539bfed96cb00e1) ([merge request](gitlab-org/omnibus-gitlab!6122)) - [redis: Add announce_ip_from_hostname support to sentinel](gitlab-org/omnibus-gitlab@eca430a9af3daf04379ca43d4b851c3a72f57caf) ([merge request](gitlab-org/omnibus-gitlab!6101)) ### Changed (6 changes) - [Update GitLab Omnibus Builder to v3.5.0](gitlab-org/omnibus-gitlab@9b0c9d8d7f189f69dcd9de9c312bdc170692ba35) ([merge request](gitlab-org/omnibus-gitlab!6142)) - [nginx: Disable request buffering by default for gitlab project imports](gitlab-org/omnibus-gitlab@4b0e528ea58766d6a4faaeeada4523b765e3edb0) by @mirsal ([merge request](gitlab-org/omnibus-gitlab!6117)) - [Turn off proxy_buffering for KAS](gitlab-org/omnibus-gitlab@8ebacd1fa1fd09c9e351959e296ec379572ce45e) ([merge request](gitlab-org/omnibus-gitlab!6136)) - [Update libtiff/libtiff from 4.3.0 to 4.4.0](gitlab-org/omnibus-gitlab@df4acda97c4dd8407d31f40ebbef26b06cd61508) ([merge request](gitlab-org/omnibus-gitlab!6125)) - [Update chef-acme to 4.1.5](gitlab-org/omnibus-gitlab@fa354561697820b58c2fa146995a43d628e05fb7) ([merge request](gitlab-org/omnibus-gitlab!6095)) - [Add frame-pointer support to zlib](gitlab-org/omnibus-gitlab@48a3d020e3053cdff44d0c16b19ff5d722796cb4) ([merge request](gitlab-org/omnibus-gitlab!6104)) ### Deprecated (1 change) - [Gitaly: update cgroups configuration](gitlab-org/omnibus-gitlab@05fc776f1173b0d35d677a5017c69daffc6d4d75) ([merge request](gitlab-org/omnibus-gitlab!6076)) ### Removed (2 changes) - [gitaly: Remove configuration for Rugged's gitconfig search path](gitlab-org/omnibus-gitlab@279eb2fe4866817f2621611d9b42af83ea7c8484) ([merge request](gitlab-org/omnibus-gitlab!6105)) - [Remove geo_file_download_dispatch_worker_cron settings](gitlab-org/omnibus-gitlab@e90dbef21f156021bed3d18f2c7a139e6948df46) ([merge request](gitlab-org/omnibus-gitlab!6106)) ### Security (1 change) - [Update to Redis v6.2.7](gitlab-org/omnibus-gitlab@0409a6a11d8a1585fe38895125bb22edf9170105) ([merge request](gitlab-org/omnibus-gitlab!6069)) ### Performance (1 change) - [Upgrade to bundler v2.3.15](gitlab-org/omnibus-gitlab@28c48c44d5c14511086aab54da3cf751d03810e4) ([merge request](gitlab-org/omnibus-gitlab!6139)) ### Other (1 change) - [Disallow bundle to any changes to Gemfile.lock](gitlab-org/omnibus-gitlab@cd4f464c27058bebc0033ed2e013c56e86ff38f1) ([merge request](gitlab-org/omnibus-gitlab!6090)) ## 15.0.5 (2022-07-28) ### Security (2 changes) - [Bump exiftool version to 12.42](gitlab-org/security/omnibus-gitlab@0564b3878692dc21c8eea0785ce3d95cccb05e0f) ([merge request](gitlab-org/security/omnibus-gitlab!207)) - [Upgrade bzip2 to use version 1.0.8](gitlab-org/security/omnibus-gitlab@5b9c29a2db9b49df87e1bdcf861cc4005e56cd78) ([merge request](gitlab-org/security/omnibus-gitlab!208)) ## 15.0.4 (2022-06-30) No changes. ## 15.0.3 (2022-06-16) ### Performance (1 change) - [Upgrade to bundler v2.3.15](gitlab-org/omnibus-gitlab@f722fa80e725a028e54f7b800f0df832dab210fb) ([merge request](gitlab-org/omnibus-gitlab!6157)) ## 15.0.2 (2022-06-06) ### Fixed (1 change) - [Skip auto-restart of PG during reconfigure as part of pg-upgrade](gitlab-org/omnibus-gitlab@d4eb21d6a9406be4812c0ab5539f522cf7eeaefb) ([merge request](gitlab-org/omnibus-gitlab!6135)) ## 15.0.1 (2022-06-01) No changes. ## 15.0.0 (2022-05-20) ### Added (7 changes) - [Add ci_runners_stale_group_runners_prune_worker_cron setting](gitlab-org/omnibus-gitlab@4fe5c08204b54052fc0b9953873291ce82ff8e4b) ([merge request](gitlab-org/omnibus-gitlab!6094)) - [Add Praefect verifier deletion logic config option](gitlab-org/omnibus-gitlab@daa5197b5ea4a21b0bb38c877a3132eb81ef9d26) ([merge request](gitlab-org/omnibus-gitlab!6081)) - [Add option to configure Elasticsearch probe for gitlab-exporter](gitlab-org/omnibus-gitlab@9d6c7f4ad45e76f4c71bfad63212a6350ae38df8) ([merge request](gitlab-org/omnibus-gitlab!5960)) - [Add Puma config support for SSL](gitlab-org/omnibus-gitlab@4b4e52105948b2f2c22baae61872227702f91840) ([merge request](gitlab-org/omnibus-gitlab!6004)) - [Introduce redis.announce_ip_from_hostname option, to enable setting the hostname at runtime](gitlab-org/omnibus-gitlab@2c2aca3e2ecc2aa9ed3742ce7ee0f095cda55113) ([merge request](gitlab-org/omnibus-gitlab!6027)) - [Add observability listener configuration for KAS](gitlab-org/omnibus-gitlab@747fde2e41398f85a5ad36cdff6788dcd0c4fffe) ([merge request](gitlab-org/omnibus-gitlab!6066)) - [Expose Praefect's background verification config via gitlab.rb](gitlab-org/omnibus-gitlab@580a9007ac865785abd43ab54c0fea124c50c52f) ([merge request](gitlab-org/omnibus-gitlab!6044)) ### Fixed (4 changes) - [Only check listen address and port if both exporter and health checks are enabled](gitlab-org/omnibus-gitlab@b8c45ee89a40158cb3ad8d65975f06bc40c13448) ([merge request](gitlab-org/omnibus-gitlab!6086)) - [Remove Geo database settings only if some services are enabled](gitlab-org/omnibus-gitlab@10681dd601b9ab05ffd19ce1296918ac20063eb2) ([merge request](gitlab-org/omnibus-gitlab!6072)) - [Nginx: implement HSTS support in the mattermost configuration template](gitlab-org/omnibus-gitlab@217fa57d2822a434e8cbc57be7acf340552a8e0b) by @hcartiaux ([merge request](gitlab-org/omnibus-gitlab!6033)) - [Fix permissions on Grafana folder in Docker container](gitlab-org/omnibus-gitlab@0bdef8a586a56c78a2a2ef1301c21f9e1c807d81) by @cHiv0rz ([merge request](gitlab-org/omnibus-gitlab!6055)) ### Changed (7 changes) - [Update to PostgreSQL to v12.10 and v13.6](gitlab-org/omnibus-gitlab@b99198ae364b33c0a55543c226693b609bb0f0c6) ([merge request](gitlab-org/omnibus-gitlab!5728)) - [Update to OpenSSL 1.1.1o](gitlab-org/omnibus-gitlab@4b2b99524b5df302a4b125a56440ffafcbcd9b7c) ([merge request](gitlab-org/omnibus-gitlab!6080)) - [Change the sidekiq warning on using same address for healthcheck to raise an error instead](gitlab-org/omnibus-gitlab@d0b622e2c9e208a1bcb1dec76f350c49ba1d445d) ([merge request](gitlab-org/omnibus-gitlab!6065)) - [Delete code for deprecated geo commands](gitlab-org/omnibus-gitlab@4d61a7be8e9ede7082a0336a083cf450479c9b93) ([merge request](gitlab-org/omnibus-gitlab!6059)) - [Bump Container Registry to v3.39.2-gitlab](gitlab-org/omnibus-gitlab@1350edfdbc5af0851a9c88b3ca376af45b2f4619) ([merge request](gitlab-org/omnibus-gitlab!6064)) - [Bump BUILDER_IMAGE_REVISION to v3.3.1](gitlab-org/omnibus-gitlab@6b73a7ad96d88dd741abf8a631b952fa871f9598) ([merge request](gitlab-org/omnibus-gitlab!6056)) - [Remove AES256-GCM-SHA384 from default list of allowed NGINX SSL ciphers](gitlab-org/omnibus-gitlab@77238e0e6478308e6be709d557a63f404dd92efe) by @m.baur ([merge request](gitlab-org/omnibus-gitlab!5913)) ### Removed (3 changes) - [Remove background_upload and direct_upload configs](gitlab-org/omnibus-gitlab@6d841dc2d6d38c089fbe7fee025309c960f4ac94) ([merge request](gitlab-org/omnibus-gitlab!6091)) - [Remove cveignore file and references](gitlab-org/omnibus-gitlab@99e659f5c66b3356ba6fcdbaca5a874e2187a335) ([merge request](gitlab-org/omnibus-gitlab!6061)) - [gitaly: Remove support for configuring the internal socket directory](gitlab-org/omnibus-gitlab@0d5aaf031c3f03640cbdd8774ac9ce7b8b8650b4) ([merge request](gitlab-org/omnibus-gitlab!6068)) ### Other (1 change) - [Update deprecated settings list](gitlab-org/omnibus-gitlab@842cb755e72429663439b592c431b5d8cb7ffbc8) ([merge request](gitlab-org/omnibus-gitlab!6040)) ## 14.10.5 (2022-06-30) No changes. ## 14.10.4 (2022-06-01) ### Security (1 change) - [Mattermost Security Updates May 2022](gitlab-org/security/omnibus-gitlab@0c61238d916a545b89f8d2d52a8996ce36b58bc5) ([merge request](gitlab-org/security/omnibus-gitlab!202)) ## 14.10.3 (2022-05-20) ### Fixed (1 change) - [Remove Geo database settings only if some services are enabled](gitlab-org/omnibus-gitlab@13366f11d2430307f13ad874305540c0f01c8782) ([merge request](gitlab-org/omnibus-gitlab!6103)) ## 14.10.2 (2022-05-04) ### Other (1 change) - [Update deprecations for 15.0](gitlab-org/omnibus-gitlab@a16dc47312d81f47875cbbf960291234f77b0737) ([merge request](gitlab-org/omnibus-gitlab!6075)) ## 14.10.1 (2022-04-29) No changes. ## 14.10.0 (2022-04-21) ### Added (3 changes) - [Gitaly: Add rate_limiting section to config toml](gitlab-org/omnibus-gitlab@89d8f26a49063b1ec55b613d139e6de4f081e3ab) ([merge request](gitlab-org/omnibus-gitlab!6023)) - [Add pages http server timeout options](gitlab-org/omnibus-gitlab@50ba3875f12a5c7e754e1c9d13162cfe3d3e588d) ([merge request](gitlab-org/omnibus-gitlab!6029)) - [Expose `db_database_tasks` attribute](gitlab-org/omnibus-gitlab@c17057d17fbefeccef1f93768b4d90414e10e8ed) ([merge request](gitlab-org/omnibus-gitlab!5982)) ### Fixed (3 changes) - [consul: Disable logging of timestamps if JSON log enabled](gitlab-org/omnibus-gitlab@d376b30f25472a4c09e317135495b8a41af4c040) ([merge request](gitlab-org/omnibus-gitlab!6034)) - [ruby: Enable OPENSSL_FIPS macro for system SSL builds](gitlab-org/omnibus-gitlab@cb0137add87ad37aa266a05f30313a1cd32ffb63) ([merge request](gitlab-org/omnibus-gitlab!6030)) - [Always disable proxy_intercept_errors for kas](gitlab-org/omnibus-gitlab@2c76574dc69483a8c41bdadda3a0a83e810422f8) ([merge request](gitlab-org/omnibus-gitlab!5995)) ### Changed (5 changes) - [Update Mattermost to 6.5.0](gitlab-org/omnibus-gitlab@090603d39ddf8ebfe64ece70e6019e2d9779a084) by @stavros.foteinopoulos ([merge request](gitlab-org/omnibus-gitlab!5996)) - [gitaly: Set up newly introduced runtime directory](gitlab-org/omnibus-gitlab@00534f346f11d02a5fe550257f5424b6e998bee1) ([merge request](gitlab-org/omnibus-gitlab!5999)) - [Migrate Geo Tracking database configuration into database.yml](gitlab-org/omnibus-gitlab@4b88e899ecb99a0c0eef9dec8ef7b9df2903f2d0) ([merge request](gitlab-org/omnibus-gitlab!5962)) - [add pages zip http client timeout option](gitlab-org/omnibus-gitlab@d6d0a17bc97505ff12205b05b943cf2ec355f02c) ([merge request](gitlab-org/omnibus-gitlab!5975)) - [Update Mattermost to 6.4.2](gitlab-org/omnibus-gitlab@0e2ebff67f9ccf71c8d5f93d1f2c5893683d1809) by @stylianosrigas ([merge request](gitlab-org/omnibus-gitlab!5966)) ### Security (3 changes) - [mark credentials as sensitive](gitlab-org/omnibus-gitlab@9354ccc5d43df012eaacf46029e67ff4ecc2d482) ([merge request](gitlab-org/omnibus-gitlab!5971)) - [Upgrade zlib version](gitlab-org/omnibus-gitlab@056875b6497087a33fa837e5549baa1ecea33674) by @srslypascal ([merge request](gitlab-org/omnibus-gitlab!6015)) - [Update grafana version to 7.5.15](gitlab-org/omnibus-gitlab@5e98cbfb95cc3176fbaf5f38de99775d9cae512e) ## 14.9.5 (2022-06-01) ### Security (1 change) - [Mattermost Security Updates May 2022](gitlab-org/security/omnibus-gitlab@04aba5468f2a0a7b1f52f7ec755d08ecf5859b22) ([merge request](gitlab-org/security/omnibus-gitlab!203)) ## 14.9.4 (2022-04-29) ### Security (1 change) - [Upgrade zlib version](gitlab-org/security/omnibus-gitlab@22de3296bc229d7812d1adb0de8b846390ca494b) ([merge request](gitlab-org/security/omnibus-gitlab!200)) ## 14.9.3 (2022-04-12) No changes. ## 14.9.2 (2022-03-31) ### Security (2 changes) - [Update Mattermost version](gitlab-org/security/omnibus-gitlab@8f0ca9426e8c2226c715ee7adff9a93c147f1f00) ([merge request](gitlab-org/security/omnibus-gitlab!193)) - [Update grafana version to 7.5.15](gitlab-org/security/omnibus-gitlab@838321a59c0824d3d66d1e52f45b1ba2cd660c33) ([merge request](gitlab-org/security/omnibus-gitlab!196)) ## 14.9.1 (2022-03-23) No changes. ## 14.9.0 (2022-03-21) ### Added (9 changes) - [Make GitLab Pages server shutdown timeout configurable](gitlab-org/omnibus-gitlab@ad23a2ae7fd982edf5cb82559bbd02868806bd13) by @HuseyinEmreAksoy ([merge request](gitlab-org/omnibus-gitlab!5965)) - [Exclude unnecessary files in gitlab-grpc gem](gitlab-org/omnibus-gitlab@7d8542a247df1245b81211a0ad500b7c3bd84cfc) ([merge request](gitlab-org/omnibus-gitlab!5968)) - [Add webhook delivery method to mailroom](gitlab-org/omnibus-gitlab@c5b5872edf9a32615cbdc23ae992441c4cddc054) ([merge request](gitlab-org/omnibus-gitlab!5927)) - [Add possibility to change nginx proxy buffer size](gitlab-org/omnibus-gitlab@6a680200bb6d52c2211f0db21ee5f0c53bb1a466) ([merge request](gitlab-org/omnibus-gitlab!5930)) - [Add gitlab_kas['log_level'] customization](gitlab-org/omnibus-gitlab@68986fe1a6e4b2589a53bd3ed1ae2107d19cf2f5) ([merge request](gitlab-org/omnibus-gitlab!5921)) - [Add bizible settings](gitlab-org/omnibus-gitlab@a9e9df87ecb223b0c4f233ca41d36a22b061a854) ([merge request](gitlab-org/omnibus-gitlab!5911)) - [Add tls rate-limiting options for GitLab Pages](gitlab-org/omnibus-gitlab@aa77e638d3dc491f9e96ca0ce3d67602f0f53610) ([merge request](gitlab-org/omnibus-gitlab!5926)) - [Add role for Spamcheck](gitlab-org/omnibus-gitlab@e366c575f4b46fe54a1ade3afa947189ef949fdf) ([merge request](gitlab-org/omnibus-gitlab!5893)) - [Add gitaly concurrency queue limit configs](gitlab-org/omnibus-gitlab@0c6c4ec78e570565b7c0833fcc6075e1c584c2e4) ([merge request](gitlab-org/omnibus-gitlab!5892)) ### Fixed (4 changes) - [Allow ACME challenge over HTTPS](gitlab-org/omnibus-gitlab@45eed63f3d42fa269e4ea9778547c4b60c89f8c1) ([merge request](gitlab-org/omnibus-gitlab!5916)) - [Enable C99 in CentOS 7 and SLES for building Git](gitlab-org/omnibus-gitlab@7656cc049abb180f4bfc9b3d8f6f805161354762) ([merge request](gitlab-org/omnibus-gitlab!5948)) - [gitlab-redis-cli: Fix passing of args to redis-cli](gitlab-org/omnibus-gitlab@7e1ff775cf4034a5aeaa8167a956cf9c0640b1a1) ([merge request](gitlab-org/omnibus-gitlab!5929)) - [Fix Gitaly max_queue_wait TOML config](gitlab-org/omnibus-gitlab@4652c08bd215f8c51d6f4bb0d1884a132e287f2d) ([merge request](gitlab-org/omnibus-gitlab!5935)) ### Changed (5 changes) - [Upgrade MailRoom to v0.0.20](gitlab-org/omnibus-gitlab@5f505cde8a1801387981410b397c8ea92ef6eadb) ([merge request](gitlab-org/omnibus-gitlab!5978)) - [Bump BUILDER_IMAGE_REVISION to v2.14.0](gitlab-org/omnibus-gitlab@162d3862b648d368f2e7942cb2ec21e411af145f) ([merge request](gitlab-org/omnibus-gitlab!5972)) - [Default enable separate metrics for Praefect](gitlab-org/omnibus-gitlab@fa7c52e32eb27e831855c872e2402af5436ff673) ([merge request](gitlab-org/omnibus-gitlab!5887)) - [Bump Container Registry to v3.31.0-gitlab](gitlab-org/omnibus-gitlab@3c267261bdc4b5d5a12208811d3b42b439e6eafa) ([merge request](gitlab-org/omnibus-gitlab!5944)) - [gitaly: enable bundled git as default and set a default binary](gitlab-org/omnibus-gitlab@b157bbe564298b47c136507d13a2996a5ab4823d) ([merge request](gitlab-org/omnibus-gitlab!5885)) ### Security (5 changes) - [Update OpenSSL to v1.1.1n](gitlab-org/omnibus-gitlab@5a4dcf2bcb7d361029760ced56c0b13c07eb3e7c) ([merge request](gitlab-org/omnibus-gitlab!5979)) - [Verifies full certificate rather than just CA](gitlab-org/omnibus-gitlab@9e005c447ac13549aef71c778103f5cd589304ed) ([merge request](gitlab-org/omnibus-gitlab!5963)) - [Update Bundler version to 2.2.33](gitlab-org/omnibus-gitlab@82e3d3e2618569de796a823dd1b93231d71ad4d7) ([merge request](gitlab-org/omnibus-gitlab!5889)) - [Upgrade gitlab-exporter to 11.11.0](gitlab-org/omnibus-gitlab@07fd1058c347a69177e4fa7bf879dbf88a4b1d56) ([merge request](gitlab-org/omnibus-gitlab!5915)) - [Upgrade gitlab-exporter to 11.10.0](gitlab-org/omnibus-gitlab@a54f42c2fec705774602efe7df9a48a4c45c2745) ([merge request](gitlab-org/omnibus-gitlab!5898)) ### Other (3 changes) - [Improve success message after promoting secondary nodes](gitlab-org/omnibus-gitlab@d19ed935875778233151fe9b19a07134d757f133) ([merge request](gitlab-org/omnibus-gitlab!5959)) - [Enable live stdout/stderr](gitlab-org/omnibus-gitlab@ae79d717a0f7735442463ec65121b1b19b67ec8a) ([merge request](gitlab-org/omnibus-gitlab!5958)) - [Update Mattermost to 6.4.0](gitlab-org/omnibus-gitlab@2db39bba83bede1ec856b519289eb6f44b003882) by @angelos.kyratzakos ([merge request](gitlab-org/omnibus-gitlab!5919)) ## 14.8.6 (2022-04-29) ### Security (1 change) - [Upgrade zlib version](gitlab-org/security/omnibus-gitlab@a197f94fd54297077c02704cff9309ae8f2ad3ed) ([merge request](gitlab-org/security/omnibus-gitlab!199)) ## 14.8.5 (2022-03-31) ### Security (2 changes) - [Update Mattermost version](gitlab-org/security/omnibus-gitlab@3ceef837a8d28b68eced040158bbc70d2a7ec66b) ([merge request](gitlab-org/security/omnibus-gitlab!194)) - [Update grafana version to 7.5.15](gitlab-org/security/omnibus-gitlab@dd99aa32346b2074167e2b0168d4fad23fc76678) ([merge request](gitlab-org/security/omnibus-gitlab!192)) ## 14.8.4 (2022-03-16) ### Security (1 change) - [Update OpenSSL to v1.1.1n](gitlab-org/omnibus-gitlab@f20bc5b7ae7f093a302b08d5766d306b5ca22d2f) ([merge request](gitlab-org/omnibus-gitlab!5983)) ## 14.8.3 (2022-03-14) No changes. ## 14.8.2 (2022-02-25) No changes. ## 14.8.1 (2022-02-23) No changes. ## 14.8.0 (2022-02-21) ### Added (10 changes) - [Add TLS configuration to Consul](gitlab-org/omnibus-gitlab@dd830bcbfca95ec5e17b828a47feeff68d5006fd) ([merge request](gitlab-org/omnibus-gitlab!5822)) - [Add TLS termination options to GitLab KAS's APIs](gitlab-org/omnibus-gitlab@be8062afe1c2ce2c63f2da9482e8f53ed4c41085) by @fh1ch ([merge request](gitlab-org/omnibus-gitlab!5852)) - [Add ability for Sentinel to leverage hostnames](gitlab-org/omnibus-gitlab@4875705279cc76daf430c8a0afcc3c266ca81782) ([merge request](gitlab-org/omnibus-gitlab!5853)) - [Adding Secure Files settings](gitlab-org/omnibus-gitlab@4624ab3e884eed2a3c274c6033b9ef55f2cca66d) ([merge request](gitlab-org/omnibus-gitlab!5857)) - [Add gitaly concurrency queue limit configs](gitlab-org/omnibus-gitlab@acb7b76c1a420db1cb8ef40da590eebee764f95e) ([merge request](gitlab-org/omnibus-gitlab!5875)) - [Add openssl FIPS runtime dependencies](gitlab-org/omnibus-gitlab@bf51384b2c781f7ed45b616c446fce539db49bb4) ([merge request](gitlab-org/omnibus-gitlab!5865)) - [Add sentry configuration options for GitLab KAS](gitlab-org/omnibus-gitlab@e7891deb3332c66ae40633624bf8ef7a48e2977c) by @fh1ch ([merge request](gitlab-org/omnibus-gitlab!5826)) - [Add GITLAB_SKIP_TAIL_LOGS to docker wrapper](gitlab-org/omnibus-gitlab@7002b2d742f0975e91cdf9eb7666d596c24cf1f9) by @jpflouret ([merge request](gitlab-org/omnibus-gitlab!5799)) - [Add spamcheck to the package](gitlab-org/omnibus-gitlab@ea23589a7eb867ba672840ddee15e8a56d6766d5) ([merge request](gitlab-org/omnibus-gitlab!5478)) - [Provide packages for SLES 15.2](gitlab-org/omnibus-gitlab@05a700957052ef254aac0d71366b6eff20df0c62) ([merge request](gitlab-org/omnibus-gitlab!5811)) ### Fixed (6 changes) - [Update MailRoom to v0.0.19](gitlab-org/omnibus-gitlab@3a0d4355d00f2a07092befc6971ae84ace1c2c71) ([merge request](gitlab-org/omnibus-gitlab!5905)) - [Update Omnibus to v8.2.1.7](gitlab-org/omnibus-gitlab@e051251228d494e784f712cd2dbf275827502ea6) ([merge request](gitlab-org/omnibus-gitlab!5902)) - [Fix nginx www directory permission](gitlab-org/omnibus-gitlab@13d546ef9e5229532d332e9b2adb5e606aed3444) by @JulianForster01 ([merge request](gitlab-org/omnibus-gitlab!5619)) - [Correct GitLab KAS default redis port configuration](gitlab-org/omnibus-gitlab@15d2c741574ae10f00beebd8f068a254a2abaace) by @fh1ch ([merge request](gitlab-org/omnibus-gitlab!5825)) - [Update PG runtime conf before restarting](gitlab-org/omnibus-gitlab@15d0d1f7aa69789e039bb527335b494605bcde8e) ([merge request](gitlab-org/omnibus-gitlab!5848)) - [Ensure EE services are added when gitlab-ee::config recipe is included](gitlab-org/omnibus-gitlab@57058af7fc324374845b890b95f383ecc7ae829d) ([merge request](gitlab-org/omnibus-gitlab!5861)) ### Changed (16 changes) - [Add QA_BRANCH trigger var](gitlab-org/omnibus-gitlab@c495e01de5bf8bd9c5ccb3fae514a1cc4a4653e2) ([merge request](gitlab-org/omnibus-gitlab!5910)) - [Update Mattermost to 6.3.3](gitlab-org/omnibus-gitlab@59859b16cc9f97959212364a2683bda18baca6c4) by @spirosoik ([merge request](gitlab-org/omnibus-gitlab!5884)) - [Bump Container Registry to v3.24.1-gitlab](gitlab-org/omnibus-gitlab@6a72ffff1458266fa679063bdb5c56d1e863fc87) ([merge request](gitlab-org/omnibus-gitlab!5899)) - [Update libjpeg-turbo/libjpeg-turbo from 2.1.0 to 2.1.2](gitlab-org/omnibus-gitlab@f48e3a506d123a3d234505d9ed32619ff13207b1) ([merge request](gitlab-org/omnibus-gitlab!5534)) - [Enable KAS by default](gitlab-org/omnibus-gitlab@518103b793791e87fa94739764f4f2fc5b8b879d) ([merge request](gitlab-org/omnibus-gitlab!4762)) - [gitaly: Install both external and bundled Git](gitlab-org/omnibus-gitlab@e68e455716a29ef9d104e394ebb27dbb56062f6d) ([merge request](gitlab-org/omnibus-gitlab!5874)) - [Update Mattermost to 6.2.2](gitlab-org/omnibus-gitlab@280d9a23f8fc00756f89ed6594fe773fb66341c6) by @spirosoik ([merge request](gitlab-org/omnibus-gitlab!5872)) - [Update config/software/prometheus.rb](gitlab-org/omnibus-gitlab@ae9ea0a5fc7506c30d74ee17afb5fceeb97b0c01) ([merge request](gitlab-org/omnibus-gitlab!5849)) - [Upgrade Redis from 6.0 to 6.2](gitlab-org/omnibus-gitlab@3b613f875b26bc3b84fd9a1427c71924d26a64ee) ([merge request](gitlab-org/omnibus-gitlab!5867)) - [Upgrade Redis from 6.0 to 6.2](gitlab-org/omnibus-gitlab@bfa25f3e8b363f18d5a8a3ff6778a50509abb82c) ([merge request](gitlab-org/omnibus-gitlab!5843)) - [Bump postgres-exporter to 0.10.0](gitlab-org/omnibus-gitlab@f620283eee40fd426eb715dc5021ae81697d88d5) ([merge request](gitlab-org/omnibus-gitlab!5850)) - [Bump redis-exporter to 1.33.0](gitlab-org/omnibus-gitlab@96861ec6d370720bbd8bd30b8078320e53ae5bea) ([merge request](gitlab-org/omnibus-gitlab!5850)) - [Bump node-exporter to 1.3.1](gitlab-org/omnibus-gitlab@e30165e8bb60d493b0bf38b0017a526097767b0e) ([merge request](gitlab-org/omnibus-gitlab!5850)) - [Bump Alertmanager to 0.23.0](gitlab-org/omnibus-gitlab@3aaa25efbefb49b43d146a8d3b92d3386035eaa5) ([merge request](gitlab-org/omnibus-gitlab!5850)) - [Bump Grafana to 7.5.12](gitlab-org/omnibus-gitlab@4b34583492911dc468caca801f1a67cd5784db20) ([merge request](gitlab-org/omnibus-gitlab!5850)) ### Deprecated (1 change) - [Add a warning if Sidekiq exporter and health checks are on the same port](gitlab-org/omnibus-gitlab@2f142b79d1c9d8a7cd879df736255ae223cffb2a) ([merge request](gitlab-org/omnibus-gitlab!5844)) ## 14.7.7 (2022-03-31) ### Security (2 changes) - [Update Mattermost version](gitlab-org/security/omnibus-gitlab@c79f7657299a014485d73154726e380ee838c3be) ([merge request](gitlab-org/security/omnibus-gitlab!195)) - [Update grafana version to 7.5.15](gitlab-org/security/omnibus-gitlab@bbf79c23818c10906577d4168be2c44949e8a26a) ([merge request](gitlab-org/security/omnibus-gitlab!191)) ## 14.7.6 (2022-03-24) ### Security (1 change) - [Update OpenSSL to v1.1.1n](gitlab-org/omnibus-gitlab@4021e806ff4db72e0e2b956f137cefb20d633078) ([merge request](gitlab-org/omnibus-gitlab!5986)) ## 14.7.5 (2022-03-09) No changes. ## 14.7.4 (2022-02-25) ### Security (2 changes) - [Mattermost February security updates](gitlab-org/security/omnibus-gitlab@a33d088a428e9f390352cd971fc63afa2f8eb5c6) ([merge request](gitlab-org/security/omnibus-gitlab!186)) - [Bump Grafana to 7.5.12](gitlab-org/security/omnibus-gitlab@29c7f7f88385d3b0d822466f866feb43bfa92da5) ([merge request](gitlab-org/security/omnibus-gitlab!183)) ## 14.7.3 (2022-02-15) ### Fixed (1 change) - [Update Omnibus to v8.2.1.7](gitlab-org/omnibus-gitlab@0847ad87f499ad8312f2aaa7367b957165c0e341) ([merge request](gitlab-org/omnibus-gitlab!5907)) ## 14.7.2 (2022-02-08) ### Fixed (1 change) - [Ensure EE services are added when gitlab-ee::config recipe is included](gitlab-org/omnibus-gitlab@bb7a99e05274969671dd5e0e0d82abeb9b5644a3) ([merge request](gitlab-org/omnibus-gitlab!5886)) ## 14.7.1 (2022-02-03) No changes. ## 14.7.0 (2022-01-21) ### Added (6 changes) - [Add Redis TLS related settings](gitlab-org/omnibus-gitlab@660586e7aefc5f38f8b6ec796b6f32e941388f28) ([merge request](gitlab-org/omnibus-gitlab!5770)) - [Add gossip encryption configuration to Consul](gitlab-org/omnibus-gitlab@b08ff3cf8139f4f99b6602189802cae07cd7a5e9) ([merge request](gitlab-org/omnibus-gitlab!5842)) - [Add domain rate-limiting options for GitLab Pages](gitlab-org/omnibus-gitlab@b2dd448cbe8c60960c10f3ac55a9c87a61fd0182) ([merge request](gitlab-org/omnibus-gitlab!5832)) - [Add packages to skip list in preinst](gitlab-org/omnibus-gitlab@66de9c6c839b2e7eb0bbcfda25db889a707ab8ad) ([merge request](gitlab-org/omnibus-gitlab!5837)) - [add nginx proxy_protocol option for gitlab-http](gitlab-org/omnibus-gitlab@f87ff7372d414bb97d9feb6f299fd81eb8a11000) by @cruelsmith ([merge request](gitlab-org/omnibus-gitlab!5663)) - [Add config support for container registry middleware](gitlab-org/omnibus-gitlab@bd43f9134fb4dc593b9d0433be31ebacfc50cc66) ([merge request](gitlab-org/omnibus-gitlab!5807)) ### Fixed (4 changes) - [Include the cert file location by default as well](gitlab-org/omnibus-gitlab@b6bdff0fa3b022a9be514e09315dd1ff78742dcd) ([merge request](gitlab-org/omnibus-gitlab!5839)) - [Sync trailing slash usage for GitLab KAS routes](gitlab-org/omnibus-gitlab@da816362ef00c62a569a0515d0aecd5ab84c1d04) by @fh1ch ([merge request](gitlab-org/omnibus-gitlab!5824)) - [Revert chef-acme cookbook update](gitlab-org/omnibus-gitlab@3a595ef7921a2273c387f32005599e6a72bcbd60) ([merge request](gitlab-org/omnibus-gitlab!5819)) - [Set SSL_CERT_DIR variable for all services](gitlab-org/omnibus-gitlab@ed9beda692797fa8e7b5576b47c30bd4285a1e0a) ([merge request](gitlab-org/omnibus-gitlab!5765)) ### Changed (6 changes) - [Bump omnibus to 8.2.1.5](gitlab-org/omnibus-gitlab@611add7bacd7e1108ad87eeb642055fc40e488fc) ([merge request](gitlab-org/omnibus-gitlab!5855)) - [Upgrade MailRoom to v0.0.18](gitlab-org/omnibus-gitlab@f37f798b2e09af0bcdf3e34b556784038bdd8d7a) ([merge request](gitlab-org/omnibus-gitlab!5816)) - [Enable frame pointer in PostgreSQL compile options](gitlab-org/omnibus-gitlab@129be61ae511cd6aeacce30bb73ef6b9b64b51a6) ([merge request](gitlab-org/omnibus-gitlab!5845)) - [Bump Container Registry to v3.21.0-gitlab](gitlab-org/omnibus-gitlab@1dd3ce09f351acaab237c5b8d6783128ec510363) ([merge request](gitlab-org/omnibus-gitlab!5827)) - [Create cgroup root directory on gitaly startup](gitlab-org/omnibus-gitlab@d1e09648b557d7a6d2349b354744e59f506d2a14) ([merge request](gitlab-org/omnibus-gitlab!5800)) - [Skip terraform_state in preinst backup](gitlab-org/omnibus-gitlab@8dc6af4771f9089fa69e11c8199150754ff0b2d8) ([merge request](gitlab-org/omnibus-gitlab!5336)) ### Security (1 change) - [* bump prometheus version to 2.25.2](gitlab-org/omnibus-gitlab@303c2b4d97066357bbffc607d23f0fa94771bb21) ### Other (1 change) - [Update Mattermost to 6.2.1](gitlab-org/omnibus-gitlab@05a5869b18ab109fffb7d0723ab04cb6da68ecf9) by @hmhealey ([merge request](gitlab-org/omnibus-gitlab!5828)) ## 14.6.7 (2022-03-31) ### Security (1 change) - [Update OpenSSL to v1.1.1n](gitlab-org/omnibus-gitlab@8a4fdc5fa226e5f17c235dc49317d64cf4731d43) ([merge request](gitlab-org/omnibus-gitlab!6001)) ## 14.6.6 (2022-03-01) ### Fixed (1 change) - [Ensure EE services are added when gitlab-ee::config recipe is included](gitlab-org/omnibus-gitlab@b90e485b01e3ca821c27b8884aef09b08d91c1c8) ([merge request](gitlab-org/omnibus-gitlab!5940)) ## 14.6.5 (2022-02-25) ### Security (2 changes) - [Mattermost February security updates](gitlab-org/security/omnibus-gitlab@96536555ac828a91719b680a9b2ada22b5cd33da) ([merge request](gitlab-org/security/omnibus-gitlab!187)) - [Bump Grafana to 7.5.12](gitlab-org/security/omnibus-gitlab@ca5139ba89ff852bbbd2ffdca4e0985ad7e98e20) ([merge request](gitlab-org/security/omnibus-gitlab!184)) ## 14.6.4 (2022-02-03) ### Security (2 changes) - [Update builder image to use golang 1.16.12](gitlab-org/security/omnibus-gitlab@97046c4ab099e663032b5d62a4c232122f2ed237) ([merge request](gitlab-org/security/omnibus-gitlab!180)) - [Update Mattermost to 6.1.1 (GitLab 14.6)](gitlab-org/security/omnibus-gitlab@2832fe9da7658bdfae28818517afd9ca4c514a19) ([merge request](gitlab-org/security/omnibus-gitlab!178)) ## 14.6.3 (2022-01-18) ### Fixed (1 change) - [Revert chef-acme cookbook update](gitlab-org/omnibus-gitlab@387e132a3d8b2a3b25591e2a79102713f1ab3eb1) ([merge request](gitlab-org/omnibus-gitlab!5856)) ## 14.6.2 (2022-01-11) No changes. ## 14.6.1 (2022-01-04) No changes. ## 14.6.0 (2021-12-21) ### Added (5 changes) - [Add --replicate-immediately flag to Praefect track-repository subcommand](gitlab-org/omnibus-gitlab@d35e0cc3c47835532ed54561ee9e18dac43fec81) ([merge request](gitlab-org/omnibus-gitlab!5789)) - [Provide packages for Debian Bullseye](gitlab-org/omnibus-gitlab@9eeffc1dd5e5180d5015ce1bb557fc4eab0b0097) ([merge request](gitlab-org/omnibus-gitlab!5755)) - [Add apply flag to praefect remove-repository subcommand](gitlab-org/omnibus-gitlab@0dd3d51a5723a38492152029f1a7a0eb2993a74d) ([merge request](gitlab-org/omnibus-gitlab!5785)) - [Add google tag manager nonce config](gitlab-org/omnibus-gitlab@28d0da1135961c79e2ef008fcf0ee02ad71dc907) ([merge request](gitlab-org/omnibus-gitlab!5763)) - [Add health-checks settings keys for Sidekiq](gitlab-org/omnibus-gitlab@6c7393963f6ef7d005b58f36051e08682274f312) ([merge request](gitlab-org/omnibus-gitlab!5743)) ### Fixed (4 changes) - [Return early from trusted certificate handling if hashing/symlinking failed](gitlab-org/omnibus-gitlab@edbd9514bad14b6921b06423745067b4df52bb2d) ([merge request](gitlab-org/omnibus-gitlab!5788)) - [Fix Google Memorystore support for Action Cable](gitlab-org/omnibus-gitlab@bf959c1b8ead8dc076a7b255962e0028ddeb2013) ([merge request](gitlab-org/omnibus-gitlab!5753)) - [Move deprecation message to gitlabc-ctl commands](gitlab-org/omnibus-gitlab@6631b5f7f9b8c9d96e54dd643f79d65ce049e6af) ([merge request](gitlab-org/omnibus-gitlab!5739)) - [gitlab-ctl geo promote requires restart of puma and workhorse services](gitlab-org/omnibus-gitlab@56ce0d27ee550547eba5a49f882eccfc0feb73fc) ([merge request](gitlab-org/omnibus-gitlab!5738)) ### Changed (8 changes) - [Upgrade mailroom to v0.0.15](gitlab-org/omnibus-gitlab@936956c794a42ed6b13970a02be994c2cef4887d) ([merge request](gitlab-org/omnibus-gitlab!5794)) - [Add patch to prevent Python from building nis module in Debian 11](gitlab-org/omnibus-gitlab@90a2190d5c2d8e873c2d3288812daab239960e32) ([merge request](gitlab-org/omnibus-gitlab!5755)) - [Update gitlab-exporter to 11.8.0](gitlab-org/omnibus-gitlab@bd8a21e5b953cda735f1cb2f93215190a4f9f84e) ([merge request](gitlab-org/omnibus-gitlab!5759)) - [Merge branch 'add-redis-ssl-kas' into 'master'](gitlab-org/omnibus-gitlab@acfcd985c6fe2b8cbeb88b71e6bbd8e4afad46d5) ([merge request](https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/5632)) - [Update 2 dependencies from git](gitlab-org/omnibus-gitlab@1a408cb1d73f64dc3975bb9a0a2087667036849a) ([merge request](gitlab-org/omnibus-gitlab!5590)) - [Use `geo:site:role` rake task to retrieve node role for the promote command](gitlab-org/omnibus-gitlab@0cae546fd9c5d04b59dac44b468217b244541782) ([merge request](gitlab-org/omnibus-gitlab!5724)) - [Use public sources for omnibus-gitlab builds by default](gitlab-org/omnibus-gitlab@981e78d0162c8f202a38093ed5ead9ab059f07c7) ([merge request](gitlab-org/omnibus-gitlab!5659)) - [Build rugged gem with system SSL on FIPS builds](gitlab-org/omnibus-gitlab@da0a44b28982ea1399e060396e892932b7e430d1) ([merge request](gitlab-org/omnibus-gitlab!5592)) ## 14.5.4 (2022-02-03) ### Security (2 changes) - [Update builder image to use golang 1.16.12](gitlab-org/security/omnibus-gitlab@143f67f02155945c7b4b3ab1d32e7ea9d4534e77) ([merge request](gitlab-org/security/omnibus-gitlab!181)) - [Update Mattermost to 5.38.3](gitlab-org/security/omnibus-gitlab@0a5be862558b2737903df134525a662388cd9073) ([merge request](gitlab-org/security/omnibus-gitlab!179)) ## 14.5.3 (2022-01-11) No changes. ## 14.5.2 (2021-12-03) ### Security (1 change) - [Bump Mattermost to 5.39.2](gitlab-org/security/omnibus-gitlab@3095b598767458e264db42d820c14784c8e46ec1) ([merge request](gitlab-org/security/omnibus-gitlab!163)) ## 14.5.1 (2021-12-01) ### Fixed (1 change) - [Fix Google Memorystore support for Action Cable](gitlab-org/omnibus-gitlab@2da850830b22ca01d7ee1449b9c7d505d6b4af43) ([merge request](gitlab-org/omnibus-gitlab!5764)) ## 14.5.0 (2021-11-19) ### Added (11 changes) - [Add praefect prometheus_exclude_database_from_default_metrics config value](gitlab-org/omnibus-gitlab@35d37fd96323b1846b43d1c75a722aabd7e8624b) ([merge request](gitlab-org/omnibus-gitlab!5740)) - [Build packages for openSUSE 15.3](gitlab-org/omnibus-gitlab@afdc5f3b699dbe64de56a290e0b87fb113a0ab1d) ([merge request](gitlab-org/omnibus-gitlab!5720)) - [Add max_uri_length to GitLab Pages config](gitlab-org/omnibus-gitlab@594675b8e1a25a09a612f4389f9a1bca4706869e) ([merge request](gitlab-org/omnibus-gitlab!5729)) - [Add source-IP rate-limiting options to GitLab Pages](gitlab-org/omnibus-gitlab@b19a99391f7c95fdcfd408e7ce22a887fc48fca3) ([merge request](gitlab-org/omnibus-gitlab!5704)) - [Configure the Loose foreign key cleanup job](gitlab-org/omnibus-gitlab@2cc32e21b28f3570946de2f522199bbcf964c519) ([merge request](gitlab-org/omnibus-gitlab!5708)) - [Add configuration for the KAS CI tunnel feature](gitlab-org/omnibus-gitlab@832b8fffe7a96a75d5ee745b514ac2cf1886e392) ([merge request](gitlab-org/omnibus-gitlab!5686)) - [Add praefect check command](gitlab-org/omnibus-gitlab@503df6dbed3949f4aadecc693bd395187f9906de) ([merge request](gitlab-org/omnibus-gitlab!5688)) - [Allow configuring redis instance for sessions](gitlab-org/omnibus-gitlab@182245701d498863b703265bce7dd24a5b5d44a3) ([merge request](gitlab-org/omnibus-gitlab!5690)) - [Create a Consul service for GitLab Exporter](gitlab-org/omnibus-gitlab@5aebc282f4e7d4b00e21c58a7e4ce7141d2336df) ([merge request](gitlab-org/omnibus-gitlab!5672)) - [Build and publish ARM64 AMIs](gitlab-org/omnibus-gitlab@997afab74ebb5b8fc03e6841444a8b3bef6e8d30) ([merge request](gitlab-org/omnibus-gitlab!5682)) - [Add one_trust_id configuration](gitlab-org/omnibus-gitlab@e71fd56e87e0a53a1b24178da12c037ee54785eb) ([merge request](gitlab-org/omnibus-gitlab!5655)) ### Fixed (5 changes) - [Drop --without-gnutls flag from curl](gitlab-org/omnibus-gitlab@98901806aa0b37db3356bc1d2197f5e6a0d3006f) ([merge request](gitlab-org/omnibus-gitlab!5730)) - [adding helper text for subcommands](gitlab-org/omnibus-gitlab@655b5ee078728978e5d3bec0450068b09ef94d91) ([merge request](gitlab-org/omnibus-gitlab!5706)) - [Fix URL for unzip v6.0 download](gitlab-org/omnibus-gitlab@08806a5686a469779151d330808397338b53c7bd) ([merge request](gitlab-org/omnibus-gitlab!5705)) - [Geo - Restart Gitaly/Praefect services during promotion](gitlab-org/omnibus-gitlab@3b4160fb40f2de6e4ac5dc37a6021e64ae23289c) ([merge request](gitlab-org/omnibus-gitlab!5691)) - [Ensure letsencrypt is enabled when running gitlab-ctl renew-le-certs](gitlab-org/omnibus-gitlab@0821de816202aac0019a9ab04d453b38c3954561) ([merge request](gitlab-org/omnibus-gitlab!5681)) ### Changed (11 changes) - [Update grafana-dashboards to 1.9.0](gitlab-org/omnibus-gitlab@7c2bef94efe6694c03871ebcf607273dea5ef6b1) ([merge request](gitlab-org/omnibus-gitlab!5736)) - [Bump container registry to v3.14.3](gitlab-org/omnibus-gitlab@43ee251ea2a68d5194c09b6d74c33c160d62f335) ([merge request](gitlab-org/omnibus-gitlab!5727)) - [Upgrade gitlab-exporter to v11.7.0](gitlab-org/omnibus-gitlab@7268bf80da3cedcab04f3ad9481e13e17f031136) ([merge request](gitlab-org/omnibus-gitlab!5725)) - [Make gitlab-ctl geo promote production ready](gitlab-org/omnibus-gitlab@e2b9eb88b5a88ed767ccd61436a03832de315989) ([merge request](gitlab-org/omnibus-gitlab!5719)) - [Ensure the selinux modules are enabled on rocky and almalinux](gitlab-org/omnibus-gitlab@8896fe22315369add8ec8c40d91b8bd74cb59c36) ([merge request](gitlab-org/omnibus-gitlab!5714)) - [Bump container registry to v3.14.1](gitlab-org/omnibus-gitlab@bc9f23610f94e298d716371c648dcfe5e6e91c42) ([merge request](gitlab-org/omnibus-gitlab!5709)) - [Drop custom compiler for CentOS 6](gitlab-org/omnibus-gitlab@bc8099a15b45676f1e9a2cbaddee4707949d08b4) ([merge request](gitlab-org/omnibus-gitlab!5707)) - [Upgrade Omnibus Builder to v2.5.0](gitlab-org/omnibus-gitlab@187830c0c70711ce04633faecff7d7f7e9143685) ([merge request](gitlab-org/omnibus-gitlab!5701)) - [Bump omnibus to 8.2.1.1](gitlab-org/omnibus-gitlab@d94c515b9b312147e018de9d89502c087ee691ea) ([merge request](gitlab-org/omnibus-gitlab!5667)) - [Update gitlab-mail_room to 0.0.14](gitlab-org/omnibus-gitlab@70dbff79af988b760eb9844c8c5899395bbcb1fb) ([merge request](https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/5687)) - [Bump Container Registry to v3.13.0-gitlab](gitlab-org/omnibus-gitlab@98e6ec691071322a324fdf821db5ca5d8e379ac5) ([merge request](gitlab-org/omnibus-gitlab!5684)) ### Removed (1 change) - [Remove Action Cable in-app setting](gitlab-org/omnibus-gitlab@e23ce52074df3e69bf9357f8531be3e0efe432a4) ([merge request](gitlab-org/omnibus-gitlab!5700)) ### Security (2 changes) - [Update Curl to version 7.79.1](gitlab-org/omnibus-gitlab@5e1d27acf27eed44f9f69609cd19d21a8147ec74) - [Update openssl to 1.1.1l](gitlab-org/omnibus-gitlab@f107290e750c4df586bb475ca537401eb46094e3) ## 14.4.5 (2022-01-11) No changes. ## 14.4.4 (2021-12-03) ### Security (1 change) - [Bump Mattermost to 5.39.2](gitlab-org/security/omnibus-gitlab@57bf68e0fe9f165641ea2d39a2ba785824cf49d3) ([merge request](gitlab-org/security/omnibus-gitlab!161)) ## 14.4.3 (2021-12-01) ### Added (1 change) - [Add praefect prometheus_exclude_database_from_default_metrics config value](gitlab-org/omnibus-gitlab@4be6a278a6401c70e0676d2f487b8752a30c41d7) ([merge request](gitlab-org/omnibus-gitlab!5762)) ## 14.4.2 (2021-11-08) ### Added (1 change) - [Build and publish ARM64 AMIs](gitlab-org/omnibus-gitlab@062aef7148073a8b336b5394a5b1b19bc75957c8) ([merge request](gitlab-org/omnibus-gitlab!5715)) ### Fixed (1 change) - [Fix URL for unzip v6.0 download](gitlab-org/omnibus-gitlab@85ca56906a376ff746a62c0054c9704cbac48116) ([merge request](gitlab-org/omnibus-gitlab!5715)) ## 14.4.1 (2021-10-28) ### Security (2 changes) - [Update Curl to version 7.79.1](gitlab-org/security/omnibus-gitlab@882a0b93e38669049aa13d824945010b6895a382) ([merge request](gitlab-org/security/omnibus-gitlab!154)) - [Update openssl to 1.1.1l](gitlab-org/security/omnibus-gitlab@22584f0661c4dba0103caf083f30bd818ec63537) ([merge request](gitlab-org/security/omnibus-gitlab!152)) ## 14.4.0 (2021-10-21) ### Added (6 changes) - [add list-untracked-repositories command](gitlab-org/omnibus-gitlab@e42713ef3a93df8050e78e12a1a95069ebd99c14) ([merge request](gitlab-org/omnibus-gitlab!5662)) - [Introduce praefect track-repository command](gitlab-org/omnibus-gitlab@c893910cb7c77262a3bf8740af91c9caa34e392e) ([merge request](gitlab-org/omnibus-gitlab!5658)) - [Allow configuring redis instance for rate-limiting](gitlab-org/omnibus-gitlab@b3d85c90f911018e9fa4e9f1aea5cfee3b312106) ([merge request](gitlab-org/omnibus-gitlab!5624)) - [Introduce "praefect remove-repository" command](gitlab-org/omnibus-gitlab@c19995c77e8383212fedd7c4520af0d27f1c7cec) ([merge request](gitlab-org/omnibus-gitlab!5614)) - [Add new max_saml_message_size setting](gitlab-org/omnibus-gitlab@5de647796be4bcbc1353bad94e1090263f95a7db) ([merge request](gitlab-org/omnibus-gitlab!5613)) - [Make Redis stop-writes-on-bgsave-error setting configurable](gitlab-org/omnibus-gitlab@573dd55e824acf91161b67e585a81a6c92fc669b) ([merge request](gitlab-org/omnibus-gitlab!5616)) ### Fixed (4 changes) - [Don't generate public_attributes.json on non-reconfigure runs](gitlab-org/omnibus-gitlab@890543e38b89031d927ed0539ddbf753959d5320) ([merge request](gitlab-org/omnibus-gitlab!5674)) - [Update cacerts to 2021-09-30](gitlab-org/omnibus-gitlab@a90a59323c72277275c67c12de4bb2a0aaa6db08) ([merge request](gitlab-org/omnibus-gitlab!5650)) - [Delay praefect database[_direct_host,_port_no_proxy] removals](gitlab-org/omnibus-gitlab@fb1b94a1e1cd7d93fe54b17b7d87facec781eb4f) ([merge request](gitlab-org/omnibus-gitlab!5647)) - [Properly reload Patroni on config change](gitlab-org/omnibus-gitlab@e1697c547a421073dad5961219e0106cd4915f9b) ([merge request](gitlab-org/omnibus-gitlab!5644)) ### Changed (7 changes) - [Update gitlab-mail_room to 0.0.14](gitlab-org/omnibus-gitlab@7ea548474c0e9ba8aa15ba09e3410df03a5aeffa) ([merge request](https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/5687)) - [Downgrade grafana to the 7.x release branch](gitlab-org/omnibus-gitlab@ea6bb0bf64a22f2ede0aec0bcbb74905345d3647) ([merge request](gitlab-org/omnibus-gitlab!5675)) - [Add timeout block for Consul get_api](gitlab-org/omnibus-gitlab@b7f63aca40675d1db85a672f4c2082e57c19eea8) ([merge request](gitlab-org/omnibus-gitlab!5638)) - [Bump omnibus to 8.2.1](gitlab-org/omnibus-gitlab@0b970c9ecea72097f8031a2f2138cd4f5fe2cc4b) ([merge request](gitlab-org/omnibus-gitlab!5602)) - [Switch to supporting the new ee/db/geo/structure.sql](gitlab-org/omnibus-gitlab@9e2f2a4ef1ab907e318c4a7137ae2b6db1603ea6) ([merge request](gitlab-org/omnibus-gitlab!5637)) - [Gracefully handle empty roles](gitlab-org/omnibus-gitlab@69ec50023de59a6a05c5fc81e2c5d400b3f84052) ([merge request](gitlab-org/omnibus-gitlab!5634)) - [Bump Container Registry to v3.11.1-gitlab](gitlab-org/omnibus-gitlab@2499016a479c3747c30eef8945955dd49273f2b2) ([merge request](gitlab-org/omnibus-gitlab!5623)) ### Deprecated (1 change) - [Deprecate Pages `inplace_chroot` flag and stop running Pages as a daemon](gitlab-org/omnibus-gitlab@ae3cdf3bf6846415391a765661090456a06ce32b) by @feistel ([merge request](gitlab-org/omnibus-gitlab!5639)) ## 14.3.6 (2021-12-03) ### Security (1 change) - [Bump Mattermost to 5.38.4](gitlab-org/security/omnibus-gitlab@28663f0c7a3fd084d461a836c6dbe53282008074) ([merge request](gitlab-org/security/omnibus-gitlab!162)) ## 14.3.5 (2021-11-26) ### Added (1 change) - [Add praefect prometheus_exclude_database_from_default_metrics config value](gitlab-org/omnibus-gitlab@29473df822968966dfc640a53d95be908998f389) ([merge request](gitlab-org/omnibus-gitlab!5752)) ### Fixed (2 changes) - [Fix URL for unzip v6.0 download](gitlab-org/omnibus-gitlab@21fcea1eb78cdae7ceba302f6abef1b49135b48a) ([merge request](gitlab-org/omnibus-gitlab!5752)) - [Conditionally generate public_attributes.json](gitlab-org/omnibus-gitlab@7dbfb5e782a269040eebd673ba6279ae2de6d3b1) ([merge request](gitlab-org/omnibus-gitlab!5752)) ### Changed (1 change) - [Downgrade grafana to the 7.x release branch](gitlab-org/omnibus-gitlab@f32b875f748d763cfda4f231a9cfb4210d5793e6) ([merge request](gitlab-org/omnibus-gitlab!5752)) ## 14.3.4 (2021-10-28) ### Security (2 changes) - [Update Curl to version 7.79.1](gitlab-org/security/omnibus-gitlab@152ecf0a7e6888f7d301aef27d3db8b68fd7e252) ([merge request](gitlab-org/security/omnibus-gitlab!155)) - [Update openssl to 1.1.1l](gitlab-org/security/omnibus-gitlab@4a566defdbb9f224f932c8876c666840d6d3e77e) ([merge request](gitlab-org/security/omnibus-gitlab!147)) ## 14.3.3 (2021-10-12) ### Fixed (2 changes) - [Update cacerts to 2021-09-30](gitlab-org/omnibus-gitlab@b39f98773f7e3e6ac4817f7fb93efb2bee1ec795) ([merge request](gitlab-org/omnibus-gitlab!5668)) - [Delay praefect database_*_no_proxy removals](gitlab-org/omnibus-gitlab@b30716ae18cf94b69befb2de607ae5434864a8f1) ([merge request](gitlab-org/omnibus-gitlab!5668)) ## 14.3.2 (2021-10-01) No changes. ## 14.3.1 (2021-09-30) No changes. ## 14.3.0 (2021-09-21) ### Added (6 changes) - [Adds symantic metadata to consul services](gitlab-org/omnibus-gitlab@08b43e3b498cafa56902ba652141329aa1a99431) ([merge request](gitlab-org/omnibus-gitlab!5594)) - [Add AWS SSE-KMS support for backups](gitlab-org/omnibus-gitlab@088fa1ed836de22203488beb443f7cec75bcd4f7) ([merge request](gitlab-org/omnibus-gitlab!5584)) - [Allow specifying additional config directory to consul](gitlab-org/omnibus-gitlab@6cb5b0f45992f9f16352b5570a197e4774da83fc) ([merge request](gitlab-org/omnibus-gitlab!5559)) - [Allow service names used to register with Consul be customized](gitlab-org/omnibus-gitlab@96526d5a825348f0d98002b6dc011af4db80ad24) ([merge request](gitlab-org/omnibus-gitlab!5560)) - [Add support for gitlab['omniauth_cas3_session_duration']](gitlab-org/omnibus-gitlab@0bd4ac5958b82501291bc1260e54cfa4cc531612) ([merge request](gitlab-org/omnibus-gitlab!5558)) - [Add SMTP configuration support for SMTP secret encryption](gitlab-org/omnibus-gitlab@1bb2a4003fe10ba8d24d7eb70e119f1b1598ac14) ([merge request](gitlab-org/omnibus-gitlab!5536)) ### Fixed (3 changes) - [Fixes the use of wal_keep_size with GEO on PG13](gitlab-org/omnibus-gitlab@8bd646ad8f1223a937050b4878f316c88d0c8582) ([merge request](gitlab-org/omnibus-gitlab!5601)) - [Update gitlab.rb.template for Service Desk](gitlab-org/omnibus-gitlab@2ec10e4090ed4b1ad62ae643991ec51428434916) ([merge request](gitlab-org/omnibus-gitlab!5556)) - [Fix migration NameError in rails env helper](gitlab-org/omnibus-gitlab@62974d5c13bb072683dcc08a2d83437a48361331) ([merge request](gitlab-org/omnibus-gitlab!5552)) ### Changed (8 changes) - [Bump container registry to v3.11.0](gitlab-org/omnibus-gitlab@8d724a2c96e021e365352be1c9c7234913e6b67a) ([merge request](gitlab-org/omnibus-gitlab!5600)) - [Update grafana to 8.1.3](gitlab-org/omnibus-gitlab@90c9eb0487af4e852553d2fdee89d1904584cfc0) ([merge request](gitlab-org/omnibus-gitlab!5449)) - [Bump container registry to v3.10.1](gitlab-org/omnibus-gitlab@a83eae00206ad500141111afd0bcb63e22c197e4) ([merge request](gitlab-org/omnibus-gitlab!5585)) - [Update Ruby to 2.7.4](gitlab-org/omnibus-gitlab@3a4304d9f9547619e955bf2b5971d73193a9f9f4) ([merge request](gitlab-org/omnibus-gitlab!5545)) - [Update chef gems to 15.17.4](gitlab-org/omnibus-gitlab@62f95b0ab9f75566f60d4f9623f66566f8b7e0d0) ([merge request](gitlab-org/omnibus-gitlab!5450)) - [Bump Container Registry to v3.10.0-gitlab](gitlab-org/omnibus-gitlab@2b8c96cf8442928cf80723b154faee5161d374b5) ([merge request](gitlab-org/omnibus-gitlab!5562)) - [Bump container registry to v3.9.0](gitlab-org/omnibus-gitlab@dda7bdf4cd9c6eea21359e919d6cfc81b21c4989) ([merge request](gitlab-org/omnibus-gitlab!5542)) - [Use Python 3.9.6](gitlab-org/omnibus-gitlab@82d52ccf3727b4603d39657794f02fa0f4b588de) ([merge request](gitlab-org/omnibus-gitlab!5547)) ### Deprecated (1 change) - [Prefer gitaly custom_hooks_dir setting](gitlab-org/omnibus-gitlab@136d789f675b0a13c848ca68eb0332ffa489fe11) ([merge request](gitlab-org/omnibus-gitlab!4208)) ### Removed (1 change) - [Remove support for gitlab_pages['use_legacy_storage'] setting](gitlab-org/omnibus-gitlab@4c96751a8fa8b4dd814f781133fb558c90343ed8) by @feistel ([merge request](gitlab-org/omnibus-gitlab!5529)) ### Security (1 change) - [Update cURL to 7.77.0](gitlab-org/omnibus-gitlab@dd9bc79002b84a110bc4a1e6ce87fb36b165424e) ### Other (2 changes) - [Update Mattermost to 5.38.2](gitlab-org/omnibus-gitlab@02d9eb7adfbd2c13048cd0db4550ab994fb9feaa) by @hmhealey ([merge request](gitlab-org/omnibus-gitlab!5587)) - [Update Python from 3.7.10 to 3.9.5](gitlab-org/omnibus-gitlab@055e29c12442df3ef278a566160e1664e5da331b) ([merge request](gitlab-org/omnibus-gitlab!5547)) ## 14.2.7 (2021-11-26) ### Added (1 change) - [Add praefect prometheus_exclude_database_from_default_metrics config value](gitlab-org/omnibus-gitlab@a92ad24941e479d2e30ba087107081d36cf888e4) ([merge request](gitlab-org/omnibus-gitlab!5750)) ### Fixed (3 changes) - [Fix URL for unzip v6.0 download](gitlab-org/omnibus-gitlab@23f4f83c0926fc81ebd3b2932b7e5a1bcd31b2e1) ([merge request](gitlab-org/omnibus-gitlab!5750)) - [Conditionally generate public_attributes.json](gitlab-org/omnibus-gitlab@440ce859b9bca7f2147c835b7f199a4e4b6f8f38) ([merge request](gitlab-org/omnibus-gitlab!5750)) - [Delay praefect database_*_no_proxy removals](gitlab-org/omnibus-gitlab@dddf6f9d893d5f59a089a7d039360c5918840bea) ([merge request](gitlab-org/omnibus-gitlab!5750)) ## 14.2.6 (2021-10-28) ### Security (2 changes) - [Update Curl to version 7.79.1](gitlab-org/security/omnibus-gitlab@151269917214a2b791b90949e7794d19a5fc304d) ([merge request](gitlab-org/security/omnibus-gitlab!156)) - [Update openssl to 1.1.1l](gitlab-org/security/omnibus-gitlab@df6605f7b2cf0042ec156fd8b8bd35a2b5be0d1f) ([merge request](gitlab-org/security/omnibus-gitlab!148)) ## 14.2.5 (2021-09-30) No changes. ## 14.2.4 (2021-09-17) No changes. ## 14.2.3 (2021-09-01) No changes. ## 14.2.2 (2021-08-31) ### Security (1 change) - [Update cURL to 7.77.0](gitlab-org/security/omnibus-gitlab@416f65f903ee27f107e6378413649e002d85c4b6) ([merge request](gitlab-org/security/omnibus-gitlab!144)) ## 14.2.1 (2021-08-23) ### Fixed (1 change) - [Fix migration NameError in rails env helper](gitlab-org/omnibus-gitlab@6a1ddc413f4ac1b4d56abac3aa148f4cd81deec3) ([merge request](gitlab-org/omnibus-gitlab!5553)) ## 14.2.0 (2021-08-20) ### Added (8 changes) - [Add option to specify log level for nginx logs](gitlab-org/omnibus-gitlab@89b91fc05ae583143e757c1febdbdeb61314f46c) ([merge request](gitlab-org/omnibus-gitlab!5530)) - [Add a (experimental) single command to promote a Geo secondary node](gitlab-org/omnibus-gitlab@be85c4d2f060caa5301ed72ac99dc969d8c6f13d) ([merge request](https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/5401)) - [Add missing Patroni configuration - tags, recovery_conf, callbacks](gitlab-org/omnibus-gitlab@c862f1f98f84b4a84d925e1a9c76524c6f7a8cba) ([merge request](gitlab-org/omnibus-gitlab!5525)) - [Add support to specify additional databases to Rails application](gitlab-org/omnibus-gitlab@80349389150549e02721795cd46a5e8b48ced65c) ([merge request](gitlab-org/omnibus-gitlab!5480)) - [Enable TLS support for Patroni API](gitlab-org/omnibus-gitlab@f0f94de248bba9f73e331df544b2c989c9cf8a46) ([merge request](gitlab-org/omnibus-gitlab!5486)) - [Support Workhorse config options for propagating correlation IDs](gitlab-org/omnibus-gitlab@dd74092e5e7e812c355bf8540dd7bd23a19c59ef) ([merge request](gitlab-org/omnibus-gitlab!5496)) - [Connect Puma low-level error handler to Sentry](gitlab-org/omnibus-gitlab@b1ebcc1924e5a9093ac79ad7f5150309e9536a55) ([merge request](gitlab-org/omnibus-gitlab!5490)) - [Add patroni allowlist support](gitlab-org/omnibus-gitlab@9b366bb46878964b7d09b368abc54604dbc69170) ([merge request](gitlab-org/omnibus-gitlab!5476)) ### Fixed (3 changes) - [Add AES256-GCM-SHA384 to allowed list of Nginx SSL ciphers](gitlab-org/omnibus-gitlab@127525c7f57daf7ca5ec38209180f3dcf0e8940e) ([merge request](gitlab-org/omnibus-gitlab!5513)) - [Fix `could not change directory to "/root": Permission denied`](gitlab-org/omnibus-gitlab@aa91ab2988958af1dd0bcf6cedbf68babec804f8) ([merge request](gitlab-org/omnibus-gitlab!5498)) - [Don't ask users to upgrade to PG 13 yet](gitlab-org/omnibus-gitlab@74f82ad556f70c1159267c25180cff7a2b8b54d5) ([merge request](gitlab-org/omnibus-gitlab!5488)) ### Changed (7 changes) - [Update Mattermost to 5.37.1 and update websocket support](gitlab-org/omnibus-gitlab@af32991925af80fbf723195b1e84ef9c04d333ba) ([merge request](https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/5516)) - [Bump Container Registry to v3.7.0-gitlab](gitlab-org/omnibus-gitlab@ada9e5ac7d67a99fff614b4570ba4236c4fd5175) ([merge request](gitlab-org/omnibus-gitlab!5520)) - [Transform database.yml to use main syntax](gitlab-org/omnibus-gitlab@7a379098fb5f45849d9be8e8f4a7054245393387) ([merge request](gitlab-org/omnibus-gitlab!5510)) - [Bump Container Registry to v3.6.2-gitlab](gitlab-org/omnibus-gitlab@6672574804c36591dc5eee51eaaf8f079df30827) ([merge request](gitlab-org/omnibus-gitlab!5506)) - [Bump Container Registry to v3.6.1-gitlab](gitlab-org/omnibus-gitlab@7649c01c3bb370dad23bf2ce4aa6860e714b6ae2) ([merge request](gitlab-org/omnibus-gitlab!5489)) - [Transform database.yml to use main syntax](gitlab-org/omnibus-gitlab@4fd5be4dccd006eb9f9321478e67401529641356) ([merge request](gitlab-org/omnibus-gitlab!5491)) - [Avoid generic NoMethodError on non-Patroni nodes](gitlab-org/omnibus-gitlab@e26450d3f473dc7dc9443c240f6adfce6adc1881) ([merge request](gitlab-org/omnibus-gitlab!5472)) ### Security (1 change) - [Update libgcrypt to 1.9.3](gitlab-org/omnibus-gitlab@1b8e0bb1b3bf39a339b7a8a63d2d232ef132cbe2) ### Other (2 changes) - [Remove docs redirects cleanup task](gitlab-org/omnibus-gitlab@c03703f3c3f678e383ce92b17bf2e888dbcfa883) ([merge request](gitlab-org/omnibus-gitlab!5539)) - [Bump gitlab-exporter to 11.2.0](gitlab-org/omnibus-gitlab@9e005c8e8ccf16766327bd872ad284ae612bf6fd) ([merge request](gitlab-org/omnibus-gitlab!5518)) ## 14.1.8 (2021-11-15) ### Fixed (2 changes) - [Conditionally generate public_attributes.json](gitlab-org/omnibus-gitlab@4c2df93ec3abd466b233b99dd1558043347d98f9) ([merge request](gitlab-org/omnibus-gitlab!5717)) - [Delay praefect database_*_no_proxy removals](gitlab-org/omnibus-gitlab@9679474648e51a2ae699c8aa23dbb523e45fb6e3) ([merge request](gitlab-org/omnibus-gitlab!5717)) ## 14.1.7 (2021-09-30) No changes. ## 14.1.6 (2021-09-27) No changes. ## 14.1.5 (2021-09-02) No changes. ## 14.1.4 (2021-08-31) ### Security (1 change) - [Update cURL to 7.77.0](gitlab-org/security/omnibus-gitlab@77b0ac2436a269b52318dd39390efbacfc8c8244) ([merge request](gitlab-org/security/omnibus-gitlab!136)) ## 14.1.3 (2021-08-17) ### Fixed (1 change) - [Add AES256-GCM-SHA384 to allowed list of Nginx SSL ciphers](gitlab-org/omnibus-gitlab@43169882dfb36046dc01ae681eb7cc5df4a2887f) ([merge request](gitlab-org/omnibus-gitlab!5546)) ## 14.1.2 (2021-08-03) ### Security (1 change) - [Update libgcrypt to 1.9.3](gitlab-org/security/omnibus-gitlab@05a6f88dea9600243178741169fe243c48a9bcb2) ([merge request](gitlab-org/security/omnibus-gitlab!131)) ## 14.1.1 (2021-07-28) ### Fixed (1 change) - [Don't ask users to upgrade to PG 13 yet](gitlab-org/omnibus-gitlab@ea97a631cc97fd193f28f50a7a7510d0aa2fc8b1) ([merge request](gitlab-org/omnibus-gitlab!5493)) ## 14.1.0 (2021-07-21) ### Added (6 changes) - [Nginx: further modernisation and standardisation](gitlab-org/omnibus-gitlab@aa320de20a678cd27c730d7cc123aaaa276b9367) ([merge request](gitlab-org/omnibus-gitlab!5461)) - [Add PostgreSQL 13 binaries to Omnibus](gitlab-org/omnibus-gitlab@1400ba430e2abc4bd7f37fa08dc8276898564897) ([merge request](gitlab-org/omnibus-gitlab!5390)) - [Allow nginx keepalive_time to be configured](gitlab-org/omnibus-gitlab@eb756b2708595d2f88075d62bd07c77ff84ef444) ([merge request](gitlab-org/omnibus-gitlab!5427)) - [Add configuration for gitaly-backup path](gitlab-org/omnibus-gitlab@4e864e1243f689d0dcdb234fb903600331cfc1aa) ([merge request](gitlab-org/omnibus-gitlab!5419)) - [Add basic auth settings for patroni rest api](gitlab-org/omnibus-gitlab@082964bc706ddc1566d95949982d12fb66df2637) ([merge request](gitlab-org/omnibus-gitlab!5403)) - [Add role for Sidekiq](gitlab-org/omnibus-gitlab@9064ab1758476c19a9d7d1f7fb7b83ae75fdfc3d) ([merge request](gitlab-org/omnibus-gitlab!5365)) ### Fixed (3 changes) - [Centralize enabling and disabling of crond](gitlab-org/omnibus-gitlab@44375da451be5199a4412b322eeecfc8e0ebcebe) ([merge request](gitlab-org/omnibus-gitlab!5394)) - [Exempt unicorn['svlogd_prefix'] from deprecation check](gitlab-org/omnibus-gitlab@f1ff80d38a7398047524a13f384b8384bf0c0ea1) ([merge request](gitlab-org/omnibus-gitlab!5395)) - [Fix preinstall upgrade message](gitlab-org/omnibus-gitlab@1ddf5a8af58068fa82c25d9017cf5890fde8264b) ([merge request](gitlab-org/omnibus-gitlab!5385)) ### Changed (11 changes) - [Ensure systemd under Docker is correctly detected](gitlab-org/omnibus-gitlab@cafe7cc4ba6e45c021c67c05f24ed0d5d69acfaf) ([merge request](gitlab-org/omnibus-gitlab!5446)) - [Nginx: modernise TLS config](gitlab-org/omnibus-gitlab@ec870943213718e1c221bb17b1ae9db3b7a2e72f) ([merge request](gitlab-org/omnibus-gitlab!5461)) - [Bump Container Registry to v3.5.2-gitlab](gitlab-org/omnibus-gitlab@2b9508557beafda31823d66a37ca49d65d9620ea) ([merge request](gitlab-org/omnibus-gitlab!5463)) - [Update libjpeg-turbo 2.1.0](gitlab-org/omnibus-gitlab@75276e02b7d3ac56959862181268fcd0369985d8) ([merge request](gitlab-org/omnibus-gitlab!5451)) - [Bump ffi to 1.15.3](gitlab-org/omnibus-gitlab@fc84c088c9867bafe26c5f39350c6a8129821dad) ([merge request](gitlab-org/omnibus-gitlab!5468)) - [Update alertmanager to 0.22.2](gitlab-org/omnibus-gitlab@59542be7ba4155d6078421acfb95791211200798) ([merge request](gitlab-org/omnibus-gitlab!5301)) - [Update chef-acme to 4.1.3](gitlab-org/omnibus-gitlab@2a87d1f2b112a39e08f649ce271ccaa83754079e) ([merge request](gitlab-org/omnibus-gitlab!5459)) - [Update gitlab-exporter from 10.3.0 to 10.4.0](gitlab-org/omnibus-gitlab@259e16c2cc3951bfc7f64f278972d2becba8f271) ([merge request](gitlab-org/omnibus-gitlab!5324)) - [Set 14.0 as minimum version permitted to upgrade from](gitlab-org/omnibus-gitlab@0ee66c3aa5ee3b14c409ba7a8e63a7ec4df295ed) ([merge request](gitlab-org/omnibus-gitlab!5398)) - [Update grafana/grafana from 7.5.5 to 7.5.9](gitlab-org/omnibus-gitlab@ff6eca926c669d2431d5ae9225e9138ccf59920a) ([merge request](gitlab-org/omnibus-gitlab!5246)) - [Update go-crond from 20.7.0 to 21.5.0](gitlab-org/omnibus-gitlab@6077e939274d21b6e8af1e1eb5191f74ff9aed1a) ([merge request](https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/5237)) ### Removed (3 changes) - [Update Praefect defaults in template](gitlab-org/omnibus-gitlab@f5c06c3e080a14660daf7b54fff1a0b0df17648a) ([merge request](gitlab-org/omnibus-gitlab!5375)) - [Remove seat link setting](gitlab-org/omnibus-gitlab@c05c309c15b57fc3b306eb8ebaea537c95e4e48f) ([merge request](gitlab-org/omnibus-gitlab!5235)) - [Remove git2go software module](gitlab-org/omnibus-gitlab@c7638374fecadb2e7bc2b06e4d9a06591b9be775) ([merge request](gitlab-org/omnibus-gitlab!5396)) ### Security (2 changes) - [Move gitlab-rails-rc to more secure location](gitlab-org/omnibus-gitlab@21ab274d8951f6a0fd3c5659e07bf364e5e0f50f) ([merge request](gitlab-org/omnibus-gitlab!5421)) - [Add libxml2 security patches released as of May 2021](gitlab-org/omnibus-gitlab@371d600f0161ceab9e922068f86d9b93059392bb) ### Other (2 changes) - [Space savings from stripping promethues build](gitlab-org/omnibus-gitlab@b3ba9e00b9b521eb6a56dbf2c672ab0ee86efc6f) ([merge request](gitlab-org/omnibus-gitlab!5443)) - [Update Mattermost to 5.36.1](gitlab-org/omnibus-gitlab@ee8c540ae04ad493ba4acaa5d4e398057697a83f) ([merge request](gitlab-org/omnibus-gitlab!5439)) ### updated (2 changes) - [Update Patroni to 2.1.0](gitlab-org/omnibus-gitlab@dbb5f1de558cd0e3405a7e48f90cac046d26b992) ([merge request](gitlab-org/omnibus-gitlab!5440)) - [Upgrade nginx to 1.20.1](gitlab-org/omnibus-gitlab@bceaa58eb380cbf20753454c6e60820a2845d1cf) ([merge request](gitlab-org/omnibus-gitlab!5417)) ### fix (1 change) - [Fix Praefect configuration template for session pooled connection](gitlab-org/omnibus-gitlab@1825c88764508a7efdccbf3eb70cb32e6bbb91d8) ([merge request](gitlab-org/omnibus-gitlab!5424)) ## 14.0.12 (2021-11-05) ### Fixed (1 change) - [Conditionally generate public_attributes.json](gitlab-org/omnibus-gitlab@84109feb04962e6af2c42a50fd2a56d0c7ced334) ([merge request](gitlab-org/omnibus-gitlab!5712)) ## 14.0.11 (2021-09-23) No changes. ## 14.0.10 (2021-09-02) No changes. ## 14.0.9 (2021-08-31) ### Security (2 changes) - [Patch NGINX against CVE-2021-23017](gitlab-org/security/omnibus-gitlab@b7a035067769fe6167f43d9ba13f316423a3523c) ([merge request](gitlab-org/security/omnibus-gitlab!142)) - [Update cURL to 7.77.0](gitlab-org/security/omnibus-gitlab@fdc278a442075eb3ed70aeede942bb10eadc75a5) ([merge request](gitlab-org/security/omnibus-gitlab!135)) ## 14.0.8 (2021-08-25) No changes. ## 14.0.7 (2021-08-03) ### Security (2 changes) - [Update libgcrypt to 1.9.3](gitlab-org/security/omnibus-gitlab@4923730ca28a0ad461988378c0d416850658277d) ([merge request](gitlab-org/security/omnibus-gitlab!132)) - [Update Mattermost to 5.35.4 (GitLab 14.0)](gitlab-org/security/omnibus-gitlab@13f1bb4ed61d7f59479cfae473608167ff3042c6) ([merge request](gitlab-org/security/omnibus-gitlab!128)) ## 14.0.6 (2021-07-20) No changes. ## 14.0.5 (2021-07-08) No changes. ## 14.0.4 (2021-07-07) No changes. ## 14.0.3 (2021-07-06) No changes. ## 14.0.2 (2021-07-01) ### Security (1 change) - [Add libxml2 security patches released as of May 2021](gitlab-org/security/omnibus-gitlab@47261456691197d7c4baa722af96eb3f02740bf5) ([merge request](gitlab-org/security/omnibus-gitlab!123)) ## 14.0.1 (2021-06-24) ### Fixed (1 change) - [Exempt unicorn['svlogd_prefix'] from deprecation check](gitlab-org/omnibus-gitlab@8aa7c341a4f7fdc24833daf66a7abcc3333b6128) ([merge request](gitlab-org/omnibus-gitlab!5404)) ## 14.0.0 (2021-06-21) ### Added (8 changes) - [Prevent Docker upgrade to 14.0 if there data on legacy storage](gitlab-org/omnibus-gitlab@2609201ecaa54d4fe871802783e5b4c94d37ae54) ([merge request](gitlab-org/omnibus-gitlab!5320)) - [Build gitaly-git2go from previous gitaly version](gitlab-org/omnibus-gitlab@f55201824a745751dbcb9ae571aedbdc3cb7089c) ([merge request](gitlab-org/omnibus-gitlab!5359)) - [Add option to write initial root password to a file](gitlab-org/omnibus-gitlab@4d7757243ad8bfc6f6a449e174c5f5f626333a43) ([merge request](gitlab-org/omnibus-gitlab!5331)) - [Add option to disable printing of root password during initialization](gitlab-org/omnibus-gitlab@7369fd762861082057e5e6165917c625f9c1d39e) ([merge request](gitlab-org/omnibus-gitlab!5331)) - [Add Workhorse shutdown_timeout config setting](gitlab-org/omnibus-gitlab@3bf28cb060186b654fc639215c46df49634c745a) ([merge request](gitlab-org/omnibus-gitlab!5343)) - [Prevent upgrade to 14.0 if there is data on legacy storage](gitlab-org/omnibus-gitlab@35b97442337616b1147159c6f556c8ddc39276db) ([merge request](gitlab-org/omnibus-gitlab!5311)) - [Allow configuring redis instance for trace chunks](gitlab-org/omnibus-gitlab@8416adf9755ec5e63ac0e31595dfb049366ce4c7) ([merge request](gitlab-org/omnibus-gitlab!5316)) - [Prevent upgrade to 14.0 if there is data on legacy storage](gitlab-org/omnibus-gitlab@ad4e6d1a3b72f2bd1549d32f7b905e4fca2ede6d) ([merge request](gitlab-org/omnibus-gitlab!5256)) ### Fixed (8 changes) - [Fix get-postgresql-primary command for Geo](gitlab-org/omnibus-gitlab@87e7496565d851d8d37f2c6a78ccf12f9ab8239e) ([merge request](gitlab-org/omnibus-gitlab!5382)) - [Fix pitr_file to use the right path for ConsulError](gitlab-org/omnibus-gitlab@70216599a13ff7f8d83970d5888bd4503697f8d3) ([merge request](gitlab-org/omnibus-gitlab!5378)) - [Update consul lookup in get-postgresql-primary](gitlab-org/omnibus-gitlab@13eec4ee7dadf36f1f84c74efd30440acfb946eb) ([merge request](gitlab-org/omnibus-gitlab!5369)) - [Do not show Praefect deprecation if Praefect is disabled](gitlab-org/omnibus-gitlab@0a3fdc1c6a0df1b26eebbfed6808c1af1fdc218b) ([merge request](gitlab-org/omnibus-gitlab!5350)) - [Adds default for prepared_statements config in Geo secondary db.yml](gitlab-org/omnibus-gitlab@8637044b1c9bb9ab019441629e6b2c59a6921e7c) ([merge request](gitlab-org/omnibus-gitlab!5347)) - [Rotate mailroom logs](gitlab-org/omnibus-gitlab@47d3cebe00366181346e87797036f5cb314fbc42) ([merge request](gitlab-org/omnibus-gitlab!5319)) - [Fix passing environment variables for migrations](gitlab-org/omnibus-gitlab@11ea132e7ca8ce61a8fca8af5837669388b4a179) ([merge request](gitlab-org/omnibus-gitlab!5310)) - [Recreate SSL key if it does not match the config](gitlab-org/omnibus-gitlab@ee5b35f6278309c0c474b58ae71be70c7fba8b66) ([merge request](gitlab-org/omnibus-gitlab!5204)) ### Changed (17 changes) - [Use Busybox for editor in docker](gitlab-org/omnibus-gitlab@29b4f428f54b0534a556444b3bd26657f6b42b53) ([merge request](https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/4142)) - [Upgrade Omnibus Builder to v1.6.0](gitlab-org/omnibus-gitlab@ade4aa24b943abbeac0cad3e37dcdd057c48a04e) ([merge request](gitlab-org/omnibus-gitlab!5374)) - [Don't enable consul with `postgres_role`.](gitlab-org/omnibus-gitlab@af8b3b46967b14fe29a6e56d3d3ac5fe99715265) ([merge request](gitlab-org/omnibus-gitlab!5370)) - [Upgrade postgresql-exporter to 0.9.0](gitlab-org/omnibus-gitlab@8bd053793c38c51c25d43a36696967e86e3822d0) ([merge request](gitlab-org/omnibus-gitlab!5364)) - [Use consul if available when pausing Geo replication](gitlab-org/omnibus-gitlab@bfeef1355c7187c10313ca6c8ee32afb0a82debb) ([merge request](gitlab-org/omnibus-gitlab!5300)) - [Upgrade docker-distribution-pruner to v0.2.0](gitlab-org/omnibus-gitlab@c75d2a948874d7f13597e5de08e92d557e96d65b) ([merge request](gitlab-org/omnibus-gitlab!5362)) - [Bump Container Registry to v3.5.0-gitlab](gitlab-org/omnibus-gitlab@104115b39b085628d0931220a7c697a03fc5c4ab) ([merge request](gitlab-org/omnibus-gitlab!5354)) - [Automatically generate initial root password if not set](gitlab-org/omnibus-gitlab@0af09d880118149e0d2e4ab6516679c489500489) ([merge request](gitlab-org/omnibus-gitlab!5331)) - [Update consul to version 1.9.6](gitlab-org/omnibus-gitlab@4fde3786d470f112d9894177afb89c3009df0c77) ([merge request](gitlab-org/omnibus-gitlab!5344)) - [change the default to `true` for deleting old backups](gitlab-org/omnibus-gitlab@99027bbefbd9fc53e3df2c77806d47fa79fa0c06) ([merge request](gitlab-org/omnibus-gitlab!5322)) - [Expand configuration of Praefect direct database connection](gitlab-org/omnibus-gitlab@6931fc428aa0746071cbf3d8fc52d1ec623dbc8e) ([merge request](gitlab-org/omnibus-gitlab!5251)) - [Bump redis to 6.0.14, drop custom patch](gitlab-org/omnibus-gitlab@238b13d1d78de96067e4ddd11fce5fc948fb31b1) ([merge request](gitlab-org/omnibus-gitlab!5327)) - [Upgrade Patroni to version 2.0.2](gitlab-org/omnibus-gitlab@bf36ff4fc22f3137f4a7d0113e70e551aebe5f1f) ([merge request](gitlab-org/omnibus-gitlab!5314)) - [Fix package-scripts version string](gitlab-org/omnibus-gitlab@8ee43bd70723f97467ac5da1be6e6fc94724960d) ([merge request](gitlab-org/omnibus-gitlab!5287)) - [Remove sidekiq_cluster service and settings](gitlab-org/omnibus-gitlab@be7a659861002803e2bf8c0244083c2d0e822ace) ([merge request](gitlab-org/omnibus-gitlab!5291)) - [Always use sidekiq-cluster binary for Sidekiq service](gitlab-org/omnibus-gitlab@9d754a15c2bc52d1823a5d7e68d075f424ce6504) ([merge request](gitlab-org/omnibus-gitlab!5291)) - [Set 13.12 as minimum version required to upgrade from](gitlab-org/omnibus-gitlab@2e65138d645cb92c79682c8a83b504b81a29ec3c) ([merge request](gitlab-org/omnibus-gitlab!5259)) ### Removed (18 changes) - [Remove repmgr installation support](gitlab-org/omnibus-gitlab@69c19633b786962d1eb511631e6994ce393153e0) ([merge request](gitlab-org/omnibus-gitlab!5372)) - [Remove support for Praefect election strategy](gitlab-org/omnibus-gitlab@60d4e3de2bce833b1fdcb46cd29dc332f7870465) ([merge request](gitlab-org/omnibus-gitlab!5351)) - [Omnibus v14 requires PG12 or higher](gitlab-org/omnibus-gitlab@f8bb478bd2dfe1136820c74e27af1d3fe927b3e0) ([merge request](gitlab-org/omnibus-gitlab!5348)) - [Remove deprecated `experimental_queue_selector` option for Sidekiq](gitlab-org/omnibus-gitlab@64fc0fcaaca69ec73ad6960bfe60080a9345831c) ([merge request](gitlab-org/omnibus-gitlab!5317)) - [Remove deprecated `experimental_queue_selector` option for Sidekiq](gitlab-org/omnibus-gitlab@02a2435eb46a0c2a5bd0877c7a3b95f005de967d) ([merge request](gitlab-org/omnibus-gitlab!5306)) - [Remove support for postgresql['data_dir'] setting](gitlab-org/omnibus-gitlab@2a2669ed9c89e8a7010c551c58668c879c3ac03c) ([merge request](gitlab-org/omnibus-gitlab!5279)) - [Remove deprecated `pgbouncer` public attributes](gitlab-org/omnibus-gitlab@1f954f5216694b1ce7812ba11d4c85eb4e23020a) ([merge request](gitlab-org/omnibus-gitlab!5299)) - [Remove node['gitlab']['pgbouncer-exporter'] deprecation](gitlab-org/omnibus-gitlab@14182dc8c0b471f0e60d7c1ab9e6e8aa3aa04377) ([merge request](gitlab-org/omnibus-gitlab!5298)) - [Remove Unicorn and related code](gitlab-org/omnibus-gitlab@b7566558b82396e262d7a8e8012365ad5fd3e872) ([merge request](gitlab-org/omnibus-gitlab!5295)) - [Remove Deprecated Piwik settings](gitlab-org/omnibus-gitlab@1723f793e4dc9a62eb198a4a26a2c6f6f27ba3aa) ([merge request](gitlab-org/omnibus-gitlab!5277)) - [Remove support for gitlab_pages['http_proxy']](gitlab-org/omnibus-gitlab@9f66bf2fe2adaf1a0c3942b60a20606a3dc56460) ([merge request](gitlab-org/omnibus-gitlab!5278)) - [Remove obsolete sidekiq['cluster'] setting](gitlab-org/omnibus-gitlab@84fcf243d8f165bb3cfd1376243240fa5c5936a2) ([merge request](gitlab-org/omnibus-gitlab!5291)) - [Remove support for client_output_buffer_limit_slave](gitlab-org/omnibus-gitlab@f1bdc7900d4a5ee1814ffc623ca0e5aece366af6) ([merge request](gitlab-org/omnibus-gitlab!5290)) - [Remove support for redis_slave_role](gitlab-org/omnibus-gitlab@78177c126c3532cf16bd0effad7773d79e2e1bd9) ([merge request](gitlab-org/omnibus-gitlab!5290)) - [Remove support for analytics_instance_statistics_count_job_trigger_worker_cron...](gitlab-org/omnibus-gitlab@697710c02dab6d4699662bcc51df55b5fce517e5) ([merge request](gitlab-org/omnibus-gitlab!5285)) - [Remove support for nginx['gzip'] in favor of nginx['gzip_enabled']](gitlab-org/omnibus-gitlab@4d8bb0429fffe4fde027e170b21fbdf7cdef1c8e) ([merge request](gitlab-org/omnibus-gitlab!5284)) - [Remove deprecated PostgreSQL FDW settings](gitlab-org/omnibus-gitlab@3f7a5ccd68be8391b565ec6a2a6d745161e3b923) ([merge request](gitlab-org/omnibus-gitlab!5255)) - [Stop building packages for openSUSE Leap 15.1](gitlab-org/omnibus-gitlab@b8780946690f3dc56c2095aabc6be2ad4869decd) ([merge request](gitlab-org/omnibus-gitlab!5264)) ### Security (1 change) - [Update Mattermost to 5.35.3](gitlab-org/omnibus-gitlab@891ae9c1cfd338d9a0f4612379a916645b475f57) ([merge request](gitlab-org/omnibus-gitlab!5358)) ### Other (2 changes) - [Bump gitlab-exporter to 10.3.0](gitlab-org/omnibus-gitlab@ff48e6e54f1da086711ea85b586713816eb6a42d) ([merge request](gitlab-org/omnibus-gitlab!5315)) - [Update Mattermost to 5.35.2](gitlab-org/omnibus-gitlab@c0592b2bb4be3ce0f61ae2e287410cf9128f6c19) ([merge request](gitlab-org/omnibus-gitlab!5329)) ## 13.12.15 (2021-11-03) No changes. ## 13.12.14 (2021-11-03) No changes. ## 13.12.13 (2021-10-29) ### Fixed (1 change) - [Conditionally generate public_attributes.json](gitlab-org/omnibus-gitlab@466e0c357dae6f66d12a558364a2bc5b62bcf2d6) ([merge request](gitlab-org/omnibus-gitlab!5699)) ## 13.12.12 (2021-09-21) No changes. ## 13.12.11 (2021-09-02) No changes. ## 13.12.10 (2021-08-10) No changes. ## 13.12.9 (2021-08-03) ### Security (2 changes) - [Update libgcrypt to 1.9.3](gitlab-org/security/omnibus-gitlab@42eede86a73071d83db9297d1ad15778f95b0a83) ([merge request](gitlab-org/security/omnibus-gitlab!133)) - [Update Mattermost to 5.34.5 (GitLab 13.12)](gitlab-org/security/omnibus-gitlab@73c3c9eec3c1254f0f135728a013d9a02c2cdd1b) ([merge request](gitlab-org/security/omnibus-gitlab!129)) ## 13.12.8 (2021-07-07) No changes. ## 13.12.7 (2021-07-05) No changes. ## 13.12.6 (2021-07-01) ### Security (2 changes) - [Add libxml2 security patches released as of May 2021](gitlab-org/security/omnibus-gitlab@93950f475de418e473732ef6e3ae4b7255b242ac) ([merge request](gitlab-org/security/omnibus-gitlab!124)) - [Update Redis to 6.0.14](gitlab-org/security/omnibus-gitlab@5cc03fd6dffebdc2cf4053d5c6d54a5803d42b35) ([merge request](gitlab-org/security/omnibus-gitlab!120)) ## 13.12.5 (2021-06-21) No changes. ## 13.12.4 (2021-06-14) ### Fixed (1 change) - [Do not show Praefect deprecation if Praefect is disabled](gitlab-org/omnibus-gitlab@a4101169ca38b46bed71f0e4546d87bc38f88fbb) ([merge request](gitlab-org/omnibus-gitlab!5368)) ### Security (1 change) - [Update Mattermost to 5.34.4](gitlab-org/omnibus-gitlab@0a44c28f79b5cade9be27942178f2c2e6b4c9f48) ([merge request](gitlab-org/omnibus-gitlab!5361)) ## 13.12.3 (2021-06-07) No changes. ## 13.12.2 (2021-06-01) No changes. ## 13.12.1 (2021-05-25) No changes. ## 13.12.0 (2021-05-21) ### Added (8 changes) - [Add expired and expiring SSH key notification cron](gitlab-org/omnibus-gitlab@8c2740fb4ab9af542d40926e84d1077937348931) ([merge request](gitlab-org/omnibus-gitlab!5119)) - [Add support to configure Sidekiq routing rules](gitlab-org/omnibus-gitlab@9b75bd4218196590b70c40184e8504c0c941c9f3) ([merge request](gitlab-org/omnibus-gitlab!5202)) - [Add enable_disk flag for Pages](gitlab-org/omnibus-gitlab@7308676169f8d14173c38e470f0152d59a445363) ([merge request](gitlab-org/omnibus-gitlab!5242)) - [Added environment support for ECS/Fargate](gitlab-org/omnibus-gitlab@e94fbc72f6c0a1ae4bf656624a1ee2584bf6befb) ([merge request](gitlab-org/omnibus-gitlab!5164)) - [Add hide_server_tokens option for NGINX](gitlab-org/omnibus-gitlab@bd5b246d5885ea545865854c09c3aad76872db2b) ([merge request](gitlab-org/omnibus-gitlab!5208)) - [Add support in Workhorse for X-Request-Id header propagation](gitlab-org/omnibus-gitlab@ae97ab2dc7cf90b53379ba891f501828fea98600) ([merge request](gitlab-org/omnibus-gitlab!5207)) - [Toogle for workhorse keywatcher](gitlab-org/omnibus-gitlab@aa6dc87f520325037649a19bef38445afb62a4e4) ([merge request](gitlab-org/omnibus-gitlab!5173)) - [Add support for SMTP connection pooling](gitlab-org/omnibus-gitlab@6bf6e1039d1ac33812235f73d4981b885db287b6) ([merge request](gitlab-org/omnibus-gitlab!5175)) ### Fixed (4 changes) - [Fix an error where reconfigure would swap the praefect election strategy](gitlab-org/omnibus-gitlab@3a2ca5eecaba0282f62cbbcad2dc1999856c86f2) ([merge request](gitlab-org/omnibus-gitlab!5260)) - [Fix deprecation logic which could auto-enable services](gitlab-org/omnibus-gitlab@5798c379da43df0779e0baafe6540d645dc8c9a3) ([merge request](gitlab-org/omnibus-gitlab!5226)) - [Fix pg-upgrade failing on mattermost only deploys](gitlab-org/omnibus-gitlab@1df80f6c68587fe9b5f2abe700a70b899976f82a) ([merge request](gitlab-org/omnibus-gitlab!5223)) - [Fix crash in gitlab-exporter when running on Puma](gitlab-org/omnibus-gitlab@dd86f2bbbe9f9789cd1be6817a0b113df6002e26) ([merge request](gitlab-org/omnibus-gitlab!5181)) ### Changed (6 changes) - [Bump container registry to v3.4.1](gitlab-org/omnibus-gitlab@79f804d851e985b8b99cd3c56eae14115f4e877a) ([merge request](gitlab-org/omnibus-gitlab!5243)) - [Upgrade mailroom to v0.0.12](gitlab-org/omnibus-gitlab@a49943237377d14078091cc74a5d0ad34b3278dc) ([merge request](gitlab-org/omnibus-gitlab!5250)) - [Use backup_keep_time to prune configuration backups](gitlab-org/omnibus-gitlab@58cdb7aa419efb040863c9b2bdc9f4365fbaa8c4) ([merge request](gitlab-org/omnibus-gitlab!5102)) - [Update acme-client from 2.0.7 to 2.0.8](gitlab-org/omnibus-gitlab@55ea32ba4eddcb130e7b83a452f88691c2734eb1) ([merge request](gitlab-org/omnibus-gitlab!5211)) - [Include gzip directives in main nginx.conf only if enabled](gitlab-org/omnibus-gitlab@2624c960fca970eec4a6e31886596113bfd5f823) ([merge request](gitlab-org/omnibus-gitlab!5225)) - [Update git vendor to gitlab](gitlab-org/omnibus-gitlab@7a62e8b5141287823a674a153033f580901718fb) ([merge request](gitlab-org/omnibus-gitlab!5184)) ### Deprecated (5 changes) - [Deprecate Praefect's failover_election_strategy config option](gitlab-org/omnibus-gitlab@0c00c13f1be742a82ea887e9f734cfcc719d2161) ([merge request](gitlab-org/omnibus-gitlab!5228)) - [Deprecate configuring Gitaly nodes in virtual storage's config root](gitlab-org/omnibus-gitlab@4cb5946e9b55ad870412b07ac69aa7f1a229df2b) ([merge request](gitlab-org/omnibus-gitlab!5240)) - [Deprecate nginx['gzip'] setting in favor of nginx['gzip_enabled']](gitlab-org/omnibus-gitlab@f204a982e850bb781c0fa0562f45cdf82ccdfc8f) ([merge request](gitlab-org/omnibus-gitlab!5225)) - [Deprecate Unicorn settings](gitlab-org/omnibus-gitlab@da7349da515f895f9be5a2e7c0a9cff30f39410c) ([merge request](gitlab-org/omnibus-gitlab!5214)) - [Deprecate Unicorn settings](gitlab-org/omnibus-gitlab@ecdf7ff19fc1f91b1274d71245cc7e59b93aff74) ([merge request](gitlab-org/omnibus-gitlab!5180)) ### Security (2 changes) - [Update Python to 3.7.10](gitlab-org/omnibus-gitlab@88e5c6a1e047ceb965299282e47b2b07b0f24dc4) - [Upgrade redis to 6.0.12](gitlab-org/omnibus-gitlab@0aac392e6315f0cf363fb0ec35f6fc711aee66bb) ### Performance (1 change) - [Reuse `postgresql::sysctl` in geo-postgresql](gitlab-org/omnibus-gitlab@9ac7d69394559163356fb23af21bf830ef71bfbc) ([merge request](gitlab-org/omnibus-gitlab!5153)) ### Other (4 changes) - [Make `puma_config` `install_dir` resource attribute optional](gitlab-org/omnibus-gitlab@4908919a3e66429e7507fe5ad68a864a98ec8fb2) ([merge request](gitlab-org/omnibus-gitlab!5201)) - [Update Mattermost to 5.34.2](gitlab-org/omnibus-gitlab@1e7d5463b598950472870b346cd44e9368596f66) ([merge request](gitlab-org/omnibus-gitlab!5206)) - [Update libtiff from 4.2.0 to 4.3.0](gitlab-org/omnibus-gitlab@c4ebbb5116ddb6ce76cf61625a51b6ee6c4c2d26) ([merge request](gitlab-org/omnibus-gitlab!5189)) - [Update grafana from 7.5.1 to 7.5.4](gitlab-org/omnibus-gitlab@a322670d961092b7bde707af2ba94af864b09216) ([merge request](gitlab-org/omnibus-gitlab!5178)) ## 13.11.7 (2021-07-07) No changes. ## 13.11.6 (2021-07-01) ### Security (3 changes) - [Add libxml2 security patches released as of May 2021](gitlab-org/security/omnibus-gitlab@b9df8cc391c18657f697ddba1e451725096bdf79) ([merge request](gitlab-org/security/omnibus-gitlab!125)) - [Update Redis to 6.0.14](gitlab-org/security/omnibus-gitlab@283f77dd10b91384a86edc7c0c872de0b44e2c0c) ([merge request](gitlab-org/security/omnibus-gitlab!121)) - [Update Mattermost to 5.33.5](gitlab-org/security/omnibus-gitlab@06a53e3a307d22d851468f63dfc7ffaeb4a9ad10) ([merge request](gitlab-org/security/omnibus-gitlab!118)) ## 13.11.5 (2021-06-01) No changes. ## 13.11.4 (2021-05-14) No changes. ## 13.11.3 (2021-04-30) No changes. ## 13.11.2 (2021-04-27) ### Security (2 changes) - [Update Python to 3.7.10](gitlab-org/security/omnibus-gitlab@a2cf223f65bc6877e811fd745c40a1f5152e4dbc) ([merge request](gitlab-org/security/omnibus-gitlab!109)) - [Upgrade redis to 6.0.12](gitlab-org/security/omnibus-gitlab@94962afe65714eb8bb8c6ecf8a0c42907b12a4eb) ([merge request](gitlab-org/security/omnibus-gitlab!108)) ## 13.11.1+ee.0 (2021-04-22) No changes. ## 13.11.0+ee.0 (2021-04-21) ### Added (9 changes) - [Add in-product marketing emails cron worker](gitlab-org/omnibus-gitlab@3930fad0ec906d6a61b44f1470f2638542faff17) ([merge request](gitlab-org/omnibus-gitlab!5096)) - [Allow config for geo_secondary_usage_data_cron](gitlab-org/omnibus-gitlab@92026ace7583a0563682b8a27e18506248b23e75) ([merge request](gitlab-org/omnibus-gitlab!5165)) - [Add summarized gitaly apdex for usage ping](gitlab-org/omnibus-gitlab@bc8880331a03dad963461045f0b1b86a55e3802e) ([merge request](gitlab-org/omnibus-gitlab!5148)) - [Added new local_store config for Pages](gitlab-org/omnibus-gitlab@09801f4a99709074d7c19543c6c9b66805c0218a) ([merge request](gitlab-org/omnibus-gitlab!5058)) - [Render Gitaly pack_objects_cache settings](gitlab-org/omnibus-gitlab@4d20f64edb46fe3a69f71bc5310e63480601337e) ([merge request](gitlab-org/omnibus-gitlab!5120)) - [Build openSUSE Leap 15.2 packages](gitlab-org/omnibus-gitlab@6868ce60edfcc883f769154e1761293623bfce4a) ([merge request](gitlab-org/omnibus-gitlab!5134)) - [Use git provided by Gitaly](gitlab-org/omnibus-gitlab@d7db53d06f149a0aa34d982edc034e62837596f3) ([merge request](gitlab-org/omnibus-gitlab!5113)) - [Gitaly default maintenance override](gitlab-org/omnibus-gitlab@13de4d226be5de0b29a596e9a1fef076a2a9e3c6) ([merge request](gitlab-org/omnibus-gitlab!5089)) - [Add net-protocol BSD-2 license](gitlab-org/omnibus-gitlab@baa4f138e03bf9ed3d74666a3ba98fe1b3a75c5a) ([merge request](gitlab-org/omnibus-gitlab!5118)) ### Fixed (7 changes) - [Fix grafana for RPi](gitlab-org/omnibus-gitlab@6c460d41a15737f5ebd13ebf250827a38eec963e) ([merge request](gitlab-org/omnibus-gitlab!5162)) - [Update AWS Marketplace Release code to match new API requirements](gitlab-org/omnibus-gitlab@9cffb5bd967bf32dc57437e8e09c3406c8398f38) ([merge request](gitlab-org/omnibus-gitlab!5146)) - [Run AWS jobs on both CE and EE non-RC-or-auto-deploy tags](gitlab-org/omnibus-gitlab@cf4b73b40d5634b8d7fad13d89b5abde2e749e18) ([merge request](gitlab-org/omnibus-gitlab!5147)) - [Update gitlab-exporter to 10.1.0 to avoid query failures](gitlab-org/omnibus-gitlab@301afe78fc9e6620d5eb4578be62d1d161ba9639) ([merge request](gitlab-org/omnibus-gitlab!5123)) - [Use specified key size for self-signed certificate also](gitlab-org/omnibus-gitlab@fad9c0441b309cf1aa1ae5911d1039fd62c4614d) ([merge request](gitlab-org/omnibus-gitlab!5083)) - [Fix use_http2 & redirect_http GitLab Pages settings](gitlab-org/omnibus-gitlab@5afa8c3ed302f78e0688b4ffcda123f9c113aa42) ([merge request](gitlab-org/omnibus-gitlab!5116)) - [Update Gitaly log permissions in Docker image](gitlab-org/omnibus-gitlab@cd0d3666f8d0a6503466f91847029a02afb3e209) ([merge request](https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/5117)) ### Changed (6 changes) - [Change devops adoption update to be weekly](gitlab-org/omnibus-gitlab@abbd439e1c64cee4637cd9bf6623caf5ed3ec898) ([merge request](gitlab-org/omnibus-gitlab!5142)) - [Upgrade OpenSSL to 1.1.1k](gitlab-org/omnibus-gitlab@fadd066fcb28c14e86440640629648413bd18e85) ([merge request](gitlab-org/omnibus-gitlab!5140)) - [Add mail_room as a separate Gem dependency](gitlab-org/omnibus-gitlab@7926d212f199bff8ed3702be06b8adcabb3463be) ([merge request](gitlab-org/omnibus-gitlab!5122)) - [Disable statement timeout while running analyze for pg-upgrade](gitlab-org/omnibus-gitlab@1b0c2ce3a1e780df2467ab4c4770d0cda38a2be3) ([merge request](gitlab-org/omnibus-gitlab!5121)) - [Bump container registry version to v3.2.1](gitlab-org/omnibus-gitlab@9b0da5a1c51e4bfe186a7dbcd370dac9ed1d9977) ([merge request](gitlab-org/omnibus-gitlab!5111)) - [Bump Container Registry to v3.2.0-gitlab](gitlab-org/omnibus-gitlab@e852191df15ce4d49fb931fd14a9a8ad253e2589) ([merge request](gitlab-org/omnibus-gitlab!5097)) ### Deprecated (1 change) - [Add deprecation warning for openSUSE Leap 15.1](gitlab-org/omnibus-gitlab@04deb3c05eb489d342073b8d43b20f016abb88a9) ([merge request](gitlab-org/omnibus-gitlab!5135)) ### Security (3 changes) - [Only allow exiftool to process JPEG and TIFF files](gitlab-org/omnibus-gitlab@e52dc79d56bf7673c417a9aab8887222891958ae) - [Bump PostgreSQL versions to 11.11 and 12.6](gitlab-org/omnibus-gitlab@363a4d13f830ae8e7939c018f28a8db637d05e87) - [Update GraphicsMagick to 1.3.36](gitlab-org/omnibus-gitlab@8548cb9e419d91c526376ecf0bb988ecc32753b5) ([merge request](gitlab-org/omnibus-gitlab!5075)) ### Performance (1 change) - [Backport BLOCKED_MODULE performance fix from Redis unstable](gitlab-org/omnibus-gitlab@a9de7c8fe3a45d7f6a12271dda3b2524e6004afc) ([merge request](gitlab-org/omnibus-gitlab!5125)) ### Other (2 changes) - [Update grafana from 7.4.2 to 7.5.1](gitlab-org/omnibus-gitlab@f24acaa0eda025c8a2982770b1a012775a2e1ecc) ([merge request](gitlab-org/omnibus-gitlab!5041)) - [Update Mattermost to 5.33.3](gitlab-org/omnibus-gitlab@5ea328d92881bfc991582bf83bb3aba2a248aaad) ([merge request](gitlab-org/omnibus-gitlab!5151)) ## 13.10.5 (2021-06-01) No changes. ## 13.10.4 (2021-04-27) ### Security (2 changes) - [Update Python to 3.7.10](gitlab-org/security/omnibus-gitlab@f893a4a8369c8d9ce077e71a3aec756f9b5aac47) ([merge request](gitlab-org/security/omnibus-gitlab!106)) - [Upgrade redis to 6.0.12](gitlab-org/security/omnibus-gitlab@b286c6ed65dfc1cac8c1d04545b610e8d205469b) ([merge request](gitlab-org/security/omnibus-gitlab!103)) ## 13.10.3 (2021-04-13) ### Security (1 change) - Only allow exiftool to process JPEG and TIFF files. ### Fixed (1 change) - Update AWS Marketplace Release code to match new API requirements. !5146 ## 13.10.2 (2021-04-01) ### Fixed (1 change) - Update gitlab-exporter to avoid query failures. !5123 ## 13.10.1 (2021-03-31) ### Security (1 change) - Bump PostgreSQL versions to 11.11 and 12.6. ## 13.10.0 (2021-03-22) ### Removed (2 changes) - Drop unused awesomeprint gem. !5023 - Remove upgrade survey. !5045 ### Fixed (5 changes, 1 of them is from the community) - gitlab-redis-cli: fix authentication with unquoted values. !5010 - Ensure that pg_basebackup will not ask for password. !5012 - Geo - Fix command to work with Patroni. !5033 - Fix postgresql['dir'] references in geo commands. !5061 - Fix gitlab pages on alternate port. !5070 (Lee Tickett @leetickett) ### Deprecated (1 change) - Deprecate gitlab_pages['domain_config_source']. !5079 ### Changed (10 changes, 1 of them is from the community) - Add Grafana reporting option. !5000 - Update monitoring components. !5013 - Add internal and external URL config for KAS. !5016 - Add member option for command. !5025 - Update the package metadata vendor name to be GitLab, Inc. !5027 - Set permissions on assets that were copied into the container. !5036 (Edison Hanchell) - Set Grafana auth scope based on allowed groups. !5038 - Bump Container Registry to v3.1.0-gitlab. !5054 - Use sha256 for signing RPM packages. !5072 - Remove recommended Pages max_connections limit. !5078 ### Added (6 changes, 2 of them are from the community) - Added Debian 10 ARM64 builds. !5018 - Add GitLab Pages propagate-correlation-id configuration parameter. !5043 (Ercan Ucan) - Allow custom smtp configuration for grafana in omnibus-gitlab. !5047 (msschl) - Expose Rails allowed_hosts setting in gitlab.rb. !5057 - Allow gitlab build remote overrides from the environment. !5067 - Add GitLab Pages cache configuration settings. !5084 ### Other (7 changes, 2 of them are from the community) - Add user_status_cleanup_batch cronjob. !5009 - Rename instance statistics count worker. !5021 - Explicitly set group for GitLab data directories. !5090 (Ben Bodenmiller (@bbodenmiller)) - Use builders with updated Go version. !5092 - Enable `nakayoshi_fork` by default. - Update Mattermost to 5.32.1. - Remove apt-transport-https as apt natively support https. (Simon Deziel) ## 13.9.7 (2021-04-27) ### Security (2 changes) - [Update Python to 3.7.10](gitlab-org/security/omnibus-gitlab@ceab316d499057d89e63524e3f368dda8622eb79) ([merge request](gitlab-org/security/omnibus-gitlab!107)) - [Upgrade redis to 6.0.12](gitlab-org/security/omnibus-gitlab@54d594a01573ba5fbff173b0395e9e394373192a) ([merge request](gitlab-org/security/omnibus-gitlab!104)) ## 13.9.6 (2021-04-13) ### Security (1 change) - Only allow exiftool to process JPEG and TIFF files. ### Fixed (1 change) - Update AWS Marketplace Release code to match new API requirements. !5146 ## 13.9.5 (2021-03-31) ### Security (2 changes) - Update openssl from 1i to 1j. - Bump PostgreSQL versions to 11.11 and 12.6. ## 13.9.4 (2021-03-17) - No changes. ## 13.9.3 (2021-03-08) - No changes. ## 13.9.2 (2021-03-04) - No changes. ## 13.9.1 (2021-02-23) ### Fixed (1 change) - Ensure Marketplace AMIs have licenses embedded. !5031 ## 13.9.0 (2021-02-22) ### Security (1 change) - Add HTTP header to prevent content sniffing in /assets/* directory. ### Fixed (2 changes, 1 of them is from the community) - Reconfigure nolonger errors in a FIPS environment. !4932 - configure sshd and git account so that pam is not used any longer in docker. !4953 (Fnordpol) ### Deprecated (2 changes) - Add warning message to migration nodes for PG verisons older than 12. !4918 - Deprecate support for Ubuntu 16.04. !5006 ### Changed (7 changes) - Update libtiff to 4.2.0. !4859 - Make GitLab Docker image and AWS AMIs use Ubuntu 20.04 packages. !4876 - Raise warning if node attribute file can't be found. !4894 - Update logrotate to 3.18.0. !4902 - Upgrade Redis to 6.0.10. !4930 - Bump Container Registry to v3.0.0-gitlab. !4962 - Add redis config for gitlab-kas. !4974 ### Performance (3 changes) - Bump gitlab-exporter to 10.0.0, use jemalloc allocator. !4922 - Add Git refs performance patches. !4977 - Tune Ruby GC for gitlab-exporter. !4987 ### Added (6 changes) - Add application settings cache expiry to gitlab.rb. !4938 - Emit Ruby Prometheus metrics for gitlab-exporter. !4958 - Add flag to disable kernel parameter modification. !4967 - Add matomo_disable_cookies setting. !4979 - Add default replication factor configuration option to Praefect. !4988 - Patch Ruby 2.7 with counting memory allocations. ### Other (4 changes, 2 of them are from the community) - Compile workhorse as part of gitlab-rails. !4829 - Remove Bundler 1.17.3 bundling. !4903 (Takuya Noguchi) - Bump Grafana version to 7.3.7. !4933 - Update Mattermost to 5.31.1. !5003 (Harrison Healey) ## 13.8.8 (2021-04-13) ### Security (1 change) - Only allow exiftool to process JPEG and TIFF files. ## 13.8.7 (2021-03-31) ### Security (2 changes) - Update openssl from 1i to 1j. - Bump PostgreSQL versions to 11.11 and 12.6. ## 13.8.6 (2021-03-17) - No changes. ## 13.8.5 (2021-03-04) - No changes. ## 13.8.4 (2021-02-11) - No changes. ## 13.8.3 (2021-02-05) ### Fixed (1 change) - Fix selinux nil error when workhorse is set to use tcp. !4978 ## 13.8.2 (2021-02-01) ### Security (2 changes) - Add patch for libxml2 CVE-2019-20388,CVE-2020-7595. - Update PG11 and PG12 minor versions. ## 13.8.1 (2021-01-26) ### Fixed (1 change) - Skip pages auth settings when access control is disabled. !4952 ## 13.8.0 (2021-01-22) ### Security (1 change) - Update OpenSSL to 1.1.1i. !4830 ### Removed (2 changes) - Remove `process_*` metrics from probes config. !4853 - Remove `git_process` metrics probes. !4863 ### Fixed (4 changes) - Patroni switchover and failover commands do not ask for user confirmation. !4909 - Fix https and custom domains pages settings. !4919 - Ensure EE services are considered disabled when on CE. !4927 - Safely lookup PostgreSQL parameters in Patroni settings. !4928 ### Deprecated (1 change) - Deprecate node['gitlab']['pgbouncer-exporter'] in favor of node['monitoring']['pgbouncer-exporter']. !4766 ### Changed (10 changes) - Update logrotate to 3.17.0. !4432 - Print PG11 deprecation notice. !4706 - Update consul to 1.6.10. !4789 - Update configs for Puma 5.1.0. !4803 - Generate Pages access control secrets only if access control is enabled. !4842 - Auto-upgrade to PG12 for single node installs. !4848 - Switch to enabling patroni by default with new patroni role. !4851 - Use more PostgreSQL attributes for Patroni parameters. !4857 - Add setting to change Rack server used for gitlab-exporter, bump it to 8.0.0. !4896 - Bump Container Registry to v2.13.1-gitlab. !4913 ### Performance (1 change) - Use Puma `nakayoshi_fork`. !4914 ### Added (5 changes) - Add support for configuring Workhorse alternate root path. !4856 - Add Patroni check-standby-leader command. !4864 - Expose setting for encrypted settings path. !4884 - Add logging to Let's Encrypt auto renewal cron job. !4911 - Add package upgrade survey link. !4931 ### Other (6 changes, 3 of them are from the community) - Bump Patroni to version 2.0.1. !4820 - Remove deprecated Prometheus settings from gitlab.yml. !4869 - Bump Grafana to 7.3.6. !4873 - Update Docker to 20.10 in our pipelines on CI/CD. !4878 (Takuya Noguchi) - Use Debian 10 as examples in development docs. !4883 (Takuya Noguchi) - Update Mattermost to 5.30.1. !4885 (hmhealey) ## 13.7.9 (2021-03-17) - No changes. ## 13.7.8 (2021-03-04) - No changes. ## 13.7.7 (2021-02-11) - No changes. ## 13.7.6 (2021-02-01) ### Security (3 changes) - Update OpenSSL to 1.1.1i. - Update PG11 and PG12 minor versions. - Add patch for libxml2 CVE-2019-20388,CVE-2020-7595. ## 13.7.5 (2021-01-25) ### Fixed (2 changes) - Patroni switchover and failover commands do not ask for user confirmation. !4909 - Fix https and custom domains pages settings. !4919 ## 13.7.4 (2021-01-13) - No changes. ## 13.7.3 (2021-01-08) - No changes. ## 13.7.2 (2021-01-07) ### Security (2 changes) - Patch bundler to not use insecure temp directory as home. - Update curl to 7_74_0. ## 13.7.1 (2020-12-23) ### Fixed (1 change) - Ensure patroni and consul remain up during upgrade migrations. !4854 ## 13.7.0 (2020-12-22) ### Fixed (8 changes) - Improve PostgreSQL service status check. !4672 - Switch to gitlab:db:active for GEO replication. !4763 - Make Build::Check.on_tag? silent. !4769 - Update Promethes and Grafana. !4774 - Fix shmmax for arm64. !4799 - Increase jemalloc page size on arm64. !4800 - Exclude windows .ruby files from gems. !4838 - Fix incorrect deprecation warning for Sidekiq experimental queue selector. !4839 ### Deprecated (1 change) - Remove CentOS 6 Builds. !4782 ### Changed (11 changes, 1 of them is from the community) - Update OpenSSL to 1.1.1h. !4593 - Rename Piwik config items after rebranding to Matomo. !4667 (Katrin Leinweber @katrinleinweber) - Update libjpeg-turbo to 2.0.6. !4765 - Default to PostgreSQL 12 in fresh installs. !4777 - Use the configurable PostgreSQL readiness check for Patroni. !4787 - Bump Container Registry to v2.12.0-gitlab. !4796 - PostgreSQL status helper should not fail fast. !4798 - Always `pg_rewind` when Patroni primary resumes. !4810 - Update gitlab-kas to v13.7.0. !4817 - Generate warning on consul configuration change. !4828 - Add install survey link to package installation. !4845 ### Performance (2 changes) - Update gitlab-exporter to v7.1.1. !4783 - Adjust Postgres memory settings to current best practice. !4788 ### Added (11 changes) - Generate encrypted_settings_key_base rails secret. !4687 - Patroni: reinitialize-replica command. !4692 - Add centos 8 arm64 packages. !4743 - Add Pages zip configuration flags. !4754 - Allow PostgreSQL adapter tcp parameter tuning. !4776 - Add /database_bloat endpoint for gitlab-exporter. !4785 - Add support for configuring database application_name for Rails. !4808 - Add options for Patroni pg_rewind assumptions. !4811 - Add devops adoption worker settings. !4812 - Add FortiToken Cloud configuration to gitlab.rb. !4824 - Allow setting Gitaly cgroups configuration. !4837 ### Other (4 changes, 1 of them is from the community) - Bump consul version to 1.6.4. !3802 - pages: Support for HTTPS over PROXYv2 protocol. !4760 - Use the 'main' branch for gitlab-shell nightlies. !4772 - Update Mattermost to 5.29.1. !4807 (hmhealey) ## 13.6.7 (2021-02-11) - No changes. ## 13.6.6 (2021-02-01) ### Security (3 changes) - Update OpenSSL to 1.1.1i. - Update PG11 and PG12 minor versions. - Add patch for libxml2 CVE-2019-20388,CVE-2020-7595. ## 13.6.5 (2021-01-13) - No changes. ## 13.6.4 (2021-01-07) ### Security (2 changes) - Patch bundler to not use insecure temp directory as home. - Update curl to 7_74_0.
{'commit': 'diff --git a/CHANGELOG.md b/CHANGELOG.md\nindex f42e6135e..f354c7d3f 100644\n--- a/CHANGELOG.md\n+++ b/CHANGELOG.md\n@@ -7,6 +7,10 @@ omnibus-gitlab repository.\n \n - Update redis version to 8.2.24 2773274\n \n+8.5.4\n+\n+- No changes\n+\n 8.5.3\n \n - No changes\n', 'commit_subject': 'Add 8.5.4 CHANGELOG items', 'repo_name': 'gitlabhq/omnibus-gitlab', 'committer': {'name': 'Rémy Coutable', 'email': '4ea0184b9df19e0786dd00b28e6daa4d26baeb3e@rymai.me', 'time_sec': '1457104528', 'tz_offset': '60', 'date': {'seconds': '1457104528'}}, 'commit_tree': 'dfc3db41598b88ac386feb52a1cdfad24e0b6f70', 'commit_message': 'Add 8.5.4 CHANGELOG items\n\n[ci skip]\n', 'language_name': 'JavaScript', 'license': 'apache-2.0', 'hunks': '@@ -7,6 +7,10 @@ omnibus-gitlab repository.\n \n - Update redis version to 8.2.24 2773274\n \n+8.5.4\n+\n+- No changes\n+\n 8.5.3\n \n - No changes\n', 'addition_count': 4, 'deletion_count': 0, 'src_file': 'a/CHANGELOG.md', 'tgt_file': 'b/CHANGELOG.md', 'file_extension': '.md', 'before_file': '# Omnibus-gitlab changelog\n\nThe latest version of this file can be found at the master branch of the\nomnibus-gitlab repository.\n\n## 15.5.1 (2022-10-24)\n\n- Update redis version to 8.2.24 2773274\n\n8.5.3\n\n- No changes\n- [Support for \'track-repositories\' Praefect command](gitlab-org/omnibus-gitlab@d1d4609e559045115420f0554a1f3b42a73886bc) ([merge request](gitlab-org/omnibus-gitlab!6319))\n- [Provide packages for Ubuntu 22.04](gitlab-org/omnibus-gitlab@d6895741f17e284a3e762720acbe563291a10c2e) ([merge request](gitlab-org/omnibus-gitlab!6337))\n- [Provide FIPS packages for Amazon Linux 2](gitlab-org/omnibus-gitlab@2222e5d7b99a419259e6410f911cb976e6a591c6) ([merge request](gitlab-org/omnibus-gitlab!6314))\n- [Support specifying ssl_password_file in nginx conf](gitlab-org/omnibus-gitlab@47996b10a47f0d5725dcf4a1098862ca3f350c67) ([merge request](gitlab-org/omnibus-gitlab!6367))\n\n### Fixed (5 changes)\n\n- [Extend and enhance SELinux distro support](gitlab-org/omnibus-gitlab@f28a20e668a4d32142618e7b0961680b47b362f9) ([merge request](gitlab-org/omnibus-gitlab!6419))\n- [Update custom cop rule as per updating RuboCop to v1](gitlab-org/omnibus-gitlab@318a4a8a007efc6e31455f50b69e5579ab3366f6) ([merge request](gitlab-org/omnibus-gitlab!6402))\n- [Patch nginx-module-vts to compile with gcc 11](gitlab-org/omnibus-gitlab@f7c083ef12b8a64dbd51860c32392859853be826) ([merge request](gitlab-org/omnibus-gitlab!6333))\n- [Fix Ruby MD5 not always being available in FIPS mode](gitlab-org/omnibus-gitlab@695f08da2428edf3e9a790b91a9d7f1b25bb9df0) ([merge request](gitlab-org/omnibus-gitlab!6357))\n- [Update gitlab-styles from 7.1.0 to 9.0.0](gitlab-org/omnibus-gitlab@ee1c18913065abad5b03420fa4e107f3ca3722b2) ([merge request](gitlab-org/omnibus-gitlab!6355))\n\n### Changed (16 changes)\n\n- [Update webdevops/go-crond from to 22.9.1](gitlab-org/omnibus-gitlab@6a0cc42d47d40d7929fd8f6b6df600938f4511f2) ([merge request](gitlab-org/omnibus-gitlab!6438))\n- [Drop exclusion of mysql group from gitlab-rails building](gitlab-org/omnibus-gitlab@0bee93924ddc7cfeb317f7077e4d78a299130787) ([merge request](gitlab-org/omnibus-gitlab!6452))\n- [Add exporters to deps.yml](gitlab-org/omnibus-gitlab@e653d77e7895cbfd65c951967521e6fd50d51f78) ([merge request](gitlab-org/omnibus-gitlab!6415))\n- [Update prometheus to v2.38.0](gitlab-org/omnibus-gitlab@94b0c0056b82731e6b51832e26f69a0c85babe0d) ([merge request](gitlab-org/omnibus-gitlab!6426))\n- [Update postgres-exporter to v0.11.1](gitlab-org/omnibus-gitlab@08b1519c626dbe73ac9ef8246420a8f58f521606) ([merge request](gitlab-org/omnibus-gitlab!6418))\n- [Allow output of Rails migrations in reconfigure step](gitlab-org/omnibus-gitlab@da9f42a9fb755a312913a49c9ba50dc962bc26e6) ([merge request](gitlab-org/omnibus-gitlab!6404))\n- [Update libtensorflow_lite to version 2.6.0](gitlab-org/omnibus-gitlab@f8f3454031dde9f1110b4cb2e275752817b79e6a) ([merge request](gitlab-org/omnibus-gitlab!6428))\n- [Update alertmanager to v0.24.0](gitlab-org/omnibus-gitlab@46223601eaec79a44fe35b6b504c41ca37b63607) ([merge request](gitlab-org/omnibus-gitlab!6427))\n- [Update pgbouncer-exporter to v0.5.1](gitlab-org/omnibus-gitlab@4bd6f38c3803d0d4160db4b51e0fa3b36da8f497) ([merge request](gitlab-org/omnibus-gitlab!6417))\n- [Update redis-exporter to v1.44.0](gitlab-org/omnibus-gitlab@5bf77e9d07e14caf1c54265e7d01768d887e3a93) ([merge request](gitlab-org/omnibus-gitlab!6416))\n- [Update node-exporter to v1.4.0](gitlab-org/omnibus-gitlab@5858a9d5929faa2505657381b22145bc2022ae13) ([merge request](gitlab-org/omnibus-gitlab!6420))\n- [Exclude Spamcheck libraries from build](gitlab-org/omnibus-gitlab@05ddcc2a53a8d15f0ea6a08360aa771ed614f553) ([merge request](gitlab-org/omnibus-gitlab!6392))\n- [Add timeout options for reconfigure run as part of pg-upgrade](gitlab-org/omnibus-gitlab@6575d9fe57f1d9a17bb33788b119cc31aa9e21dd) by @zhzhang93 ([merge request](gitlab-org/omnibus-gitlab!6321))\n- [Compile jemalloc with Ruby by default](gitlab-org/omnibus-gitlab@6fb7f2d0e0ecf358acd4702a45346017fb906495) ([merge request](gitlab-org/omnibus-gitlab!6363))\n- [Remove python library whl files from package](gitlab-org/omnibus-gitlab@e48e47c7d38b9ad72835df0c0a79230a073f8102) ([merge request](gitlab-org/omnibus-gitlab!6358))\n- [Allow Chef FIPS auto-detection](gitlab-org/omnibus-gitlab@c2e843d1480415a10d20e3c164fc5eb3eb22d9c7) ([merge request](gitlab-org/omnibus-gitlab!6338))\n\n### Deprecated (2 changes)\n\n- [Deprecate `gitlab_rails[\'gitlab_default_can_create_group\']` setting](gitlab-org/omnibus-gitlab@0ebc71056e566af02fccbeb37d80e086e28bfdb1) ([merge request](gitlab-org/omnibus-gitlab!6316))\n- [Praefect: Deprecate DB metrics configuration](gitlab-org/omnibus-gitlab@1494fa7aea6f1ff3446b4441c4909a531d2cedbe) ([merge request](gitlab-org/omnibus-gitlab!6317))\n\n### Security (2 changes)\n\n- [Pass necessary headers on accessing healthcheck endpoints](gitlab-org/omnibus-gitlab@3a68dfd593b98935643d0c1f4c5dc69efc28d288)\n- [Apply Grafana CVE-2022-3110 patch](gitlab-org/omnibus-gitlab@01e83fca75011af8ea5b9e284614837f6453185b)\n\n### Other (3 changes)\n\n- [Update python3 from 3.9.6 to 3.10.7](gitlab-org/omnibus-gitlab@1dd2956c0a2411b2b9287a0d5ddf1174b6ce81ea) ([merge request](gitlab-org/omnibus-gitlab!6401))\n- [Enable Style/GlobalVars cop through all files in RuboCop](gitlab-org/omnibus-gitlab@db7ad34d52fe0844be1cf7e02e7fc04a465c7271) ([merge request](gitlab-org/omnibus-gitlab!6371))\n- [Remove license patch for removed awesome_print gem](gitlab-org/omnibus-gitlab@3e3fcf4a50c89f7f008dce7c16fafd1b922cfd1a) ([merge request](gitlab-org/omnibus-gitlab!6370))\n\n## 15.4.3 (2022-10-19)\n\nNo changes.\n\n## 15.4.2 (2022-10-04)\n\nNo changes.\n\n## 15.4.1 (2022-09-29)\n\n### Security (2 changes)\n\n- [Apply Grafana CVE-2022-3110 patch](gitlab-org/security/omnibus-gitlab@3febf0771ca0924f8db3392c99b03ab852ca4950) ([merge request](gitlab-org/security/omnibus-gitlab!239))\n- [Pass necessary headers on accessing healthcheck endpoints](gitlab-org/security/omnibus-gitlab@48b29f3972d2137be4153ad9e7d5c2bd45a397aa) ([merge request](gitlab-org/security/omnibus-gitlab!240))\n\n## 15.4.0 (2022-09-21)\n\n### Added (1 change)\n\n- [Add support for Gitaly GPG signing](gitlab-org/omnibus-gitlab@6f401b63547891efec40799ae8178cdf7342fb88) ([merge request](gitlab-org/omnibus-gitlab!6294))\n\n### Fixed (2 changes)\n\n- [Fix an issue were the incoming email secret file was not being created](gitlab-org/omnibus-gitlab@4ce9a961eec600bfb8812562e9ff05cf92381200) ([merge request](gitlab-org/omnibus-gitlab!6324))\n- [API should return JSON on errors even if custom error pages are used](gitlab-org/omnibus-gitlab@e2e2176d07cb2a14c9a49ca548c3467edd81f009) by @ercan.ucan ([merge request](gitlab-org/omnibus-gitlab!6276))\n\n### Changed (7 changes)\n\n- [Bump packer version to 1.8.2](gitlab-org/omnibus-gitlab@9095dd5198ffc3020001deaf25c96c68d92600d9) ([merge request](gitlab-org/omnibus-gitlab!6322))\n- [Use sha256 instead of md5 when downloading component source](gitlab-org/omnibus-gitlab@20602725482d70f75a41a6649cf0aa6989753754) ([merge request](gitlab-org/omnibus-gitlab!6330))\n- [Update gpgme to version 1.17.0](gitlab-org/omnibus-gitlab@e59a65c7ec6e3b729f2b03a370ac126e9c4fa128) ([merge request](gitlab-org/omnibus-gitlab!6332))\n- [Compatibility for hashed oauth secrets](gitlab-org/omnibus-gitlab@643a089acd17d4d5d14298db0e6f7eaff4844fe8) ([merge request](gitlab-org/omnibus-gitlab!6310))\n- [Raise default Geo base backup timeout to 12 hours](gitlab-org/omnibus-gitlab@596373120354bf9aa819732aeb8a9ad6f8c0b1d4) ([merge request](gitlab-org/omnibus-gitlab!6308))\n- [Improve error message when omnibus_gitconfig is not set properly](gitlab-org/omnibus-gitlab@0bf606a23d39570189c5a53650e9f35b351759c5) ([merge request](gitlab-org/omnibus-gitlab!6298))\n- [Update container registry to v3.53.0-gitlab](gitlab-org/omnibus-gitlab@f9b56f675ad12c55d781392c9ad318ee6e1c6dde) ([merge request](gitlab-org/omnibus-gitlab!6227))\n\n### Security (4 changes)\n\n- [Bump gitlab-exporter version to 11.18.2 to mitigate VULNDB-255039](gitlab-org/omnibus-gitlab@f14d07f73f54e407edd3ed6ecf76e17ddda0664b)\n- [Update unzip to 6.0.27](gitlab-org/omnibus-gitlab@76bc3e9c3dbfe8a57aedbb9b73631f5f3cd3dcf0)\n- [Bump nginx version to 1.20.2](gitlab-org/omnibus-gitlab@7ee8bc82dd644a38e5516c9cadd07e77a4dd84c3)\n- [Update libxml2 from 2.9.10 to 2.9.14](gitlab-org/omnibus-gitlab@b4ce083cfb478ce04daeaa375fd6ae5d98f26a32) ([merge request](gitlab-org/omnibus-gitlab!6248))\n\n### Other (5 changes)\n\n- [Update chef-classroom to 1.0.5](gitlab-org/omnibus-gitlab@dca6529508cd299f6557acceb379f2d5f73fac5d) ([merge request](gitlab-org/omnibus-gitlab!6274))\n- [Update libyaml to 0.2.5](gitlab-org/omnibus-gitlab@69b88f4fc29ae255820ec19a38098e3a9f23d418) ([merge request](gitlab-org/omnibus-gitlab!6253))\n- [Update aws-sdk-ec2 and aws-sdk-marketplacecatalog](gitlab-org/omnibus-gitlab@cb7b423577f890de04502214272a6c5cba1f4aec) ([merge request](gitlab-org/omnibus-gitlab!6257))\n- [Replace byebug and pry](gitlab-org/omnibus-gitlab@6764d7ab3c4925a157fe09ff1ba1d92d4f23c742) ([merge request](gitlab-org/omnibus-gitlab!6240))\n- [Use HTTPS instead of HTTP for pkg-config-lite](gitlab-org/omnibus-gitlab@525cd1994d06d7f6304715338553a870085a15ca) ([merge request](gitlab-org/omnibus-gitlab!6252))\n\n## 15.3.4 (2022-09-29)\n\n### Security (3 changes)\n\n- [Mattermost security release for 2022-08](gitlab-org/security/omnibus-gitlab@e8f1ac2a668c5dd6141ef30be03c65a608e6af57) ([merge request](gitlab-org/security/omnibus-gitlab!241))\n- [Apply Grafana CVE-2022-3110 patch](gitlab-org/security/omnibus-gitlab@1722a2cbaf66b019ac8cd9ccf2b1bef868f7e353) ([merge request](gitlab-org/security/omnibus-gitlab!237))\n- [Pass necessary headers on accessing healthcheck endpoints](gitlab-org/security/omnibus-gitlab@5601e4db7f660dd17f5c11bc31dad44baba5f293) ([merge request](gitlab-org/security/omnibus-gitlab!235))\n\n## 15.3.3 (2022-09-01)\n\n### Changed (1 change)\n\n- [Improve error message when omnibus_gitconfig is not set properly](gitlab-org/omnibus-gitlab@1a77c08ef096d64482d7d08ce716d085765ae225) ([merge request](gitlab-org/omnibus-gitlab!6304))\n\n## 15.3.2 (2022-08-30)\n\n### Security (4 changes)\n\n- [Update libxml2 from 2.9.10 to 2.9.14](gitlab-org/security/omnibus-gitlab@96138c7c299ef038554e809462f98229bf902451) ([merge request](gitlab-org/security/omnibus-gitlab!218))\n- [Bump gitlab-exporter version to 11.18.2 to mitigate VULNDB-255039](gitlab-org/security/omnibus-gitlab@ccd42069e018253b751228e66ffffc35dc6c5b79) ([merge request](gitlab-org/security/omnibus-gitlab!232))\n- [Update unzip to 6.0.27](gitlab-org/security/omnibus-gitlab@c82fcd26e4fda6a734b32036381a4cb2915569f5) ([merge request](gitlab-org/security/omnibus-gitlab!228))\n- [Bump nginx version to 1.20.2](gitlab-org/security/omnibus-gitlab@8917dbf9f158bc010918e9e757bff29fe339acce) ([merge request](gitlab-org/security/omnibus-gitlab!222))\n\n## 15.3.1 (2022-08-22)\n\nNo changes.\n\n## 15.3.0 (2022-08-19)\n\n### Added (2 changes)\n\n- [Add perl as runtime dependency](gitlab-org/omnibus-gitlab@89e6dc81c0745a30450cdf45fd849dbced1f2fc4) ([merge request](gitlab-org/omnibus-gitlab!6237))\n- [Add ci_runner_versions_reconciliation_worker setting](gitlab-org/omnibus-gitlab@22d70d6862e415e6d746bd4a97feccccee2851e3) ([merge request](gitlab-org/omnibus-gitlab!6198))\n\n### Fixed (3 changes)\n\n- [Ensure Omnibus Docker image has exiftool deps](gitlab-org/omnibus-gitlab@30de86b06e7cf55d9a07963720b20c854e293d39) ([merge request](gitlab-org/omnibus-gitlab!6236))\n- [Gracefully handle blank CPU information](gitlab-org/omnibus-gitlab@fa684b35d8fbb5bec34cf3aa80bb0b182ad3f6ad) ([merge request](gitlab-org/omnibus-gitlab!6230))\n- [Reload Consul only if the service is enabled](gitlab-org/omnibus-gitlab@6ae828d4176e5be37653ef2d4d185a56819240a2) ([merge request](gitlab-org/omnibus-gitlab!6218))\n\n### Changed (4 changes)\n\n- [gitaly: Unconditionally ignore the gitconfig](gitlab-org/omnibus-gitlab@8508277a72b2d5e81c28e9956b5d541e2ebf55a1) ([merge request](gitlab-org/omnibus-gitlab!6245))\n- [Remove svlogd filter from consul configuration](gitlab-org/omnibus-gitlab@b6ae0f59fb18037e92ecf5efc4973431ccb80706) ([merge request](gitlab-org/omnibus-gitlab!6154))\n- [Update cacerts to 2022.07.19](gitlab-org/omnibus-gitlab@7d0650d92758e83d8f4b06164152d3b6bf7c29ae) ([merge request](gitlab-org/omnibus-gitlab!6232))\n- [Set webhook as MailRoomm\'s default delivery strategy](gitlab-org/omnibus-gitlab@785f20c486c36ec4ba7205337a6145f94af08cd6) ([merge request](gitlab-org/omnibus-gitlab!6149))\n\n### Removed (1 change)\n\n- [Stop enabling Grafana for new installs](gitlab-org/omnibus-gitlab@0ae2fb20e78c769e59e78229b2b09ebc1f0f9cbf) ([merge request](gitlab-org/omnibus-gitlab!6271))\n\n### Security (3 changes)\n\n- [Update libxslt from 1.1.32 to 1.1.35](gitlab-org/omnibus-gitlab@13db4d38c377c5e7be6bdee249cab5a1989b5028) ([merge request](gitlab-org/omnibus-gitlab!6249))\n- [Upgrade bzip2 to use version 1.0.8](gitlab-org/omnibus-gitlab@013b8b94479a9c8baa33fec5835fec2fca4a71a5)\n- [Bump exiftool version to 12.42](gitlab-org/omnibus-gitlab@9fb6f2f8297f975fa2413ccf1ecd48b1b5990b06)\n\n### Other (6 changes)\n\n- [Update erubi from 1.10.0 to 1.11.0](gitlab-org/omnibus-gitlab@e1f2b452c877ff5a8d7693f27e12206514ee5e7a) ([merge request](gitlab-org/omnibus-gitlab!6256))\n- [Update rack from 2.2.3 to 2.2.4](gitlab-org/omnibus-gitlab@081dcfbc1d78d992e21a07c7c51b993574b1dbd9) ([merge request](gitlab-org/omnibus-gitlab!6255))\n- [Use updated syntax in OpenSSL::Digest](gitlab-org/omnibus-gitlab@434514b2192b9511d3d9d2deb1f22abf500eb3a7) ([merge request](gitlab-org/omnibus-gitlab!6254))\n- [Use rubygems bundled with ruby language](gitlab-org/omnibus-gitlab@c16b20b5c433a8605075bacb2903a07fd5bf5f2d) ([merge request](gitlab-org/omnibus-gitlab!6242))\n- [Use official sha256 as checksum for cacerts](gitlab-org/omnibus-gitlab@576a8c296da6b2b89ac684d014c1192c4b13c50b) ([merge request](gitlab-org/omnibus-gitlab!6251))\n- [Add GITLAB_METRICS_EXPORTER_VERSION for releases](gitlab-org/omnibus-gitlab@25b3c469015ae487fa390cf5cae567f06f1df288) ([merge request](gitlab-org/omnibus-gitlab!6222))\n\n## 15.2.5 (2022-09-29)\n\n### Security (3 changes)\n\n- [Mattermost security release for 2022-08](gitlab-org/security/omnibus-gitlab@3d5112f1e3f9bbcf3a495cf0cd81245ef4edf6de) ([merge request](gitlab-org/security/omnibus-gitlab!242))\n- [Apply Grafana CVE-2022-3110 patch](gitlab-org/security/omnibus-gitlab@63099fde11ae26ff9d74d6f28f8ff7e83596a414) ([merge request](gitlab-org/security/omnibus-gitlab!238))\n- [Pass necessary headers on accessing healthcheck endpoints](gitlab-org/security/omnibus-gitlab@0b1f054956091d6fe9ea6fc4f613db863ac5e4a2) ([merge request](gitlab-org/security/omnibus-gitlab!236))\n\n## 15.2.4 (2022-08-30)\n\n### Security (4 changes)\n\n- [Update libxslt and libxml](gitlab-org/security/omnibus-gitlab@47ff9e8beb445fa7f14f9f7854c810c3fcabb217) ([merge request](gitlab-org/security/omnibus-gitlab!221))\n- [Bump gitlab-exporter version to 11.18.2 to mitigate VULNDB-255039](gitlab-org/security/omnibus-gitlab@d77281ac01120901f40743427c8a18fc3cea7e4c) ([merge request](gitlab-org/security/omnibus-gitlab!231))\n- [Update unzip to 6.0.27](gitlab-org/security/omnibus-gitlab@146bcbebe071444cdc46f3ab9566cc86c24454f0) ([merge request](gitlab-org/security/omnibus-gitlab!227))\n- [Bump nginx version to 1.20.2](gitlab-org/security/omnibus-gitlab@6327df5fba9e4e26b2bbf48f025169e0cc367b87) ([merge request](gitlab-org/security/omnibus-gitlab!223))\n\n## 15.2.3 (2022-08-22)\n\nNo changes.\n\n## 15.2.2 (2022-08-01)\n\n### Fixed (1 change)\n\n- [Gracefully handle blank CPU information](gitlab-org/omnibus-gitlab@d95763e7c02ad78300ba41a8f2526dee86b8e5cd) ([merge request](gitlab-org/omnibus-gitlab!6234))\n\n## 15.2.1 (2022-07-28)\n\n### Security (2 changes)\n\n- [Bump exiftool version to 12.42](gitlab-org/security/omnibus-gitlab@53294ab72ff4ce07edbb1028e5311ff49196c378) ([merge request](gitlab-org/security/omnibus-gitlab!211))\n- [Upgrade bzip2 to use version 1.0.8](gitlab-org/security/omnibus-gitlab@ff77949fc27633df0b9a8c5ad478133c650e5a94) ([merge request](gitlab-org/security/omnibus-gitlab!210))\n\n## 15.2.0 (2022-07-21)\n\n### Added (6 changes)\n\n- [gitaly: Reintroduce migration to `[[git.config]]` stanzas](gitlab-org/omnibus-gitlab@4bf3bf85045cd94373184761e6f9a3b7fb6cd7cd) ([merge request](gitlab-org/omnibus-gitlab!6186))\n- [Add praefect list-storages subcommand](gitlab-org/omnibus-gitlab@e0e0b0ebf8db5893cb543a2bfa9c57ffa564c560) ([merge request](gitlab-org/omnibus-gitlab!6147))\n- [Add [gitlab] section to praefect config toml](gitlab-org/omnibus-gitlab@e9b444b63e690b1dc4d573ae37a40c7408b76a85) ([merge request](gitlab-org/omnibus-gitlab!6146))\n- [Make gitlab-pages redirects limits configurable](gitlab-org/omnibus-gitlab@e5cfe22be99037081aedb4d45b1f63c718329050) by @nejc ([merge request](gitlab-org/omnibus-gitlab!6144))\n- [Add TLS support for dedicated metrics servers](gitlab-org/omnibus-gitlab@d8558c80fe9c234b0fa7e1769a8403922e1706c4) ([merge request](gitlab-org/omnibus-gitlab!6155))\n- [Add failover timeout to Praefect config](gitlab-org/omnibus-gitlab@ebddd96305ab24b46a630f16d85ac269c4e43087) ([merge request](gitlab-org/omnibus-gitlab!6150))\n\n### Fixed (8 changes)\n\n- [Ensure FIPS builds are EE](gitlab-org/omnibus-gitlab@0efee70f93086181fdc652be3f6d5b72686ff9c0) ([merge request](gitlab-org/omnibus-gitlab!6217))\n- [Adjust worker processes to use real CPUs instead of cores](gitlab-org/omnibus-gitlab@182bc46016c73f5a9a2d39d676e7ed8eff811322) ([merge request](gitlab-org/omnibus-gitlab!6210))\n- [Ensure Ruby platform is set globally on ARM64 OSes](gitlab-org/omnibus-gitlab@ad98bf31735ba0242d8c3376eaca335c143b3c09) ([merge request](gitlab-org/omnibus-gitlab!6208))\n- [Fix worker processes not starting up due to 0 processes](gitlab-org/omnibus-gitlab@fb8549a22789347424ef6ba0454573c532ea2aa9) ([merge request](gitlab-org/omnibus-gitlab!6192))\n- [Properly escape S3 credentials in Workhorse config TOML](gitlab-org/omnibus-gitlab@cafff1b049296de9c2822f45be02f86c473dac48) ([merge request](gitlab-org/omnibus-gitlab!6187))\n- [Fix KAS address when running GitLab on a relative URL](gitlab-org/omnibus-gitlab@059115935b3cd6a2ab309452401f000af9811081) by @paddy-hack ([merge request](gitlab-org/omnibus-gitlab!6185))\n- [Force nginx proxy to use IPv4](gitlab-org/omnibus-gitlab@11e43467114a1aabe42e21d3936328909a6e0140) ([merge request](gitlab-org/omnibus-gitlab!6143))\n- [Fix DISABLE_PUMA_WORKER_KILLER env var check](gitlab-org/omnibus-gitlab@05c1e99593b8f3b2e3b44298d4fe34ae84ad5947) ([merge request](gitlab-org/omnibus-gitlab!6173))\n\n### Changed (13 changes)\n\n- [Configure local Gemfile before force_ruby_platform](gitlab-org/omnibus-gitlab@8415a921304f68f4a75e28e8130e7f52199c78e1) by @vincent_stchu ([merge request](gitlab-org/omnibus-gitlab!6207))\n- [Update to openssl 1.1.1q](gitlab-org/omnibus-gitlab@52727ac1bbf405da7d5a1ca3a49e4bfe8aa638eb) ([merge request](gitlab-org/omnibus-gitlab!6215))\n- [Update gitlab-org/container-registry from v3.51.0-gitlab to v3.51.1-gitlab](gitlab-org/omnibus-gitlab@093e518deffad656af8b8c9832dd83f6f4282586) ([merge request](gitlab-org/omnibus-gitlab!6214))\n- [Update acme-client to 2.0.11](gitlab-org/omnibus-gitlab@e3b88da7fa0899ac29274140b24c0288741047a5) ([merge request](gitlab-org/omnibus-gitlab!6131))\n- [Update to openssl 1.1.1p](gitlab-org/omnibus-gitlab@54bedc1dac06571c5fbb1d9417fd2afdd7e1da6a) ([merge request](gitlab-org/omnibus-gitlab!6176))\n- [Update container registry to 3.51.0](gitlab-org/omnibus-gitlab@a362b10c0cb9c1d78d752654147daa4bd956ab6e) ([merge request](gitlab-org/omnibus-gitlab!6194))\n- [Set force_ruby_platform to true locally for Gitaly and GitLab Rails](gitlab-org/omnibus-gitlab@628f5581dd6802296ae75b564a999a56977656fa) ([merge request](gitlab-org/omnibus-gitlab!6212))\n- [Update jemalloc from 5.2.1 to 5.3.0](gitlab-org/omnibus-gitlab@7a82726701f97f68218523ebc2f2d12835a8195e) ([merge request](gitlab-org/omnibus-gitlab!6085))\n- [Bump Container Registry to v3.49.0-gitlab](gitlab-org/omnibus-gitlab@519dfca3677913699d1914c65ef08cfea4517083) ([merge request](gitlab-org/omnibus-gitlab!6181))\n- [Disable KAS by default in FIPS environments](gitlab-org/omnibus-gitlab@96406491400f7d975cf6772050c09b3c6c07b817) ([merge request](gitlab-org/omnibus-gitlab!6184))\n- [Disable doc generation in grpc gem compilation for FIPS builds](gitlab-org/omnibus-gitlab@640ef48f3be8dfbf38667e8d0a728b0ba27bd92d) ([merge request](gitlab-org/omnibus-gitlab!6177))\n- [gitaly: Migrate to inject Git configuration via `config.toml`](gitlab-org/omnibus-gitlab@2727686d248cffa6c3883f9daa8e0d02c479b11b) ([merge request](gitlab-org/omnibus-gitlab!6128))\n- [Add dry run option to registry-garbage-collect command.](gitlab-org/omnibus-gitlab@44bf128b02deff84e89611bdc90e0f66748c6537) ([merge request](gitlab-org/omnibus-gitlab!6145))\n\n### Deprecated (1 change)\n\n- [global: Remove deprecated `self_signed_cert` setting](gitlab-org/omnibus-gitlab@0021a2c1e28ded37c428b4f3ee4d10abf6099840) ([merge request](gitlab-org/omnibus-gitlab!6196))\n\n## 15.1.6 (2022-08-30)\n\n### Security (5 changes)\n\n- [Update libxslt and libxml](gitlab-org/security/omnibus-gitlab@829e0c7c007d0fe9120c06609e6569f42433405a) ([merge request](gitlab-org/security/omnibus-gitlab!220))\n- [Upgrade mattermost to use version 6.7.1](gitlab-org/security/omnibus-gitlab@6dad6fd8d5123dca58290b63f4eaf3f68a992fb8) ([merge request](gitlab-org/security/omnibus-gitlab!213))\n- [Bump gitlab-exporter version to 11.18.2 to mitigate VULNDB-255039](gitlab-org/security/omnibus-gitlab@4374bc384c8626e1a635435efc8804ebfce284cb) ([merge request](gitlab-org/security/omnibus-gitlab!230))\n- [Update unzip to 6.0.27](gitlab-org/security/omnibus-gitlab@7b0997e0350cee1b8cefc8106c566e1be9c25721) ([merge request](gitlab-org/security/omnibus-gitlab!226))\n- [Bump nginx version to 1.20.2](gitlab-org/security/omnibus-gitlab@20647e2748f1f7b5f4b029a0d122ac8ce4ed4428) ([merge request](gitlab-org/security/omnibus-gitlab!224))\n\n## 15.1.5 (2022-08-22)\n\nNo changes.\n\n## 15.1.4 (2022-07-28)\n\n### Security (2 changes)\n\n- [Bump exiftool version to 12.42](gitlab-org/security/omnibus-gitlab@85a6446d5aea2c353231abed1c2ff411c7d5e66d) ([merge request](gitlab-org/security/omnibus-gitlab!206))\n- [Upgrade bzip2 to use version 1.0.8](gitlab-org/security/omnibus-gitlab@1e84e9ed015def9f34e5c107f91a275ac9042917) ([merge request](gitlab-org/security/omnibus-gitlab!209))\n\n## 15.1.3 (2022-07-19)\n\n### Fixed (3 changes)\n\n- [Adjust worker processes to use real CPUs instead of cores](gitlab-org/omnibus-gitlab@056ba003d899862c5d251b83e050a33d59e6b1eb) ([merge request](gitlab-org/omnibus-gitlab!6216))\n- [Ensure Ruby platform is set globally for arm64 based operating systems](gitlab-org/omnibus-gitlab@b65a681a3c123969e18b6c311c38e9c8cb64c791) ([merge request](gitlab-org/omnibus-gitlab!6216))\n- [Fix worker processes not starting up due to 0 processes](gitlab-org/omnibus-gitlab@143e340f82bc34439b88a835c2597d28537cac25) ([merge request](gitlab-org/omnibus-gitlab!6216))\n\n### Changed (1 change)\n\n- [Set force_ruby_platform to true locally for Gitaly and GitLab Rails](gitlab-org/omnibus-gitlab@4bc3f6259284c298ecac94f9d27516dc7bec7681) ([merge request](gitlab-org/omnibus-gitlab!6216))\n\n## 15.1.2 (2022-07-05)\n\nNo changes.\n\n## 15.1.1 (2022-06-30)\n\nNo changes.\n\n## 15.1.0 (2022-06-21)\n\n### Added (1 change)\n\n- [Add gitlab_rails[\'cdn_host\'] setting](gitlab-org/omnibus-gitlab@456dda0db813e0d3baae01642497a33c61cf714c) ([merge request](gitlab-org/omnibus-gitlab!6096))\n\n### Fixed (4 changes)\n\n- [Handle standby leader nodes properly in pg-upgrade](gitlab-org/omnibus-gitlab@41383d3c89a82b067891114ac44996348ed7779c) ([merge request](gitlab-org/omnibus-gitlab!6036))\n- [pgbouncer reload failure should provide insight](gitlab-org/omnibus-gitlab@0a09f57484a0053765cd729bea834c06a7096ded) ([merge request](gitlab-org/omnibus-gitlab!6127))\n- [Skip auto-restart of PG during reconfigure as part of pg-upgrade](gitlab-org/omnibus-gitlab@817c0fea370a1aceeffd9f5ef539bfed96cb00e1) ([merge request](gitlab-org/omnibus-gitlab!6122))\n- [redis: Add announce_ip_from_hostname support to sentinel](gitlab-org/omnibus-gitlab@eca430a9af3daf04379ca43d4b851c3a72f57caf) ([merge request](gitlab-org/omnibus-gitlab!6101))\n\n### Changed (6 changes)\n\n- [Update GitLab Omnibus Builder to v3.5.0](gitlab-org/omnibus-gitlab@9b0c9d8d7f189f69dcd9de9c312bdc170692ba35) ([merge request](gitlab-org/omnibus-gitlab!6142))\n- [nginx: Disable request buffering by default for gitlab project imports](gitlab-org/omnibus-gitlab@4b0e528ea58766d6a4faaeeada4523b765e3edb0) by @mirsal ([merge request](gitlab-org/omnibus-gitlab!6117))\n- [Turn off proxy_buffering for KAS](gitlab-org/omnibus-gitlab@8ebacd1fa1fd09c9e351959e296ec379572ce45e) ([merge request](gitlab-org/omnibus-gitlab!6136))\n- [Update libtiff/libtiff from 4.3.0 to 4.4.0](gitlab-org/omnibus-gitlab@df4acda97c4dd8407d31f40ebbef26b06cd61508) ([merge request](gitlab-org/omnibus-gitlab!6125))\n- [Update chef-acme to 4.1.5](gitlab-org/omnibus-gitlab@fa354561697820b58c2fa146995a43d628e05fb7) ([merge request](gitlab-org/omnibus-gitlab!6095))\n- [Add frame-pointer support to zlib](gitlab-org/omnibus-gitlab@48a3d020e3053cdff44d0c16b19ff5d722796cb4) ([merge request](gitlab-org/omnibus-gitlab!6104))\n\n### Deprecated (1 change)\n\n- [Gitaly: update cgroups configuration](gitlab-org/omnibus-gitlab@05fc776f1173b0d35d677a5017c69daffc6d4d75) ([merge request](gitlab-org/omnibus-gitlab!6076))\n\n### Removed (2 changes)\n\n- [gitaly: Remove configuration for Rugged\'s gitconfig search path](gitlab-org/omnibus-gitlab@279eb2fe4866817f2621611d9b42af83ea7c8484) ([merge request](gitlab-org/omnibus-gitlab!6105))\n- [Remove geo_file_download_dispatch_worker_cron settings](gitlab-org/omnibus-gitlab@e90dbef21f156021bed3d18f2c7a139e6948df46) ([merge request](gitlab-org/omnibus-gitlab!6106))\n\n### Security (1 change)\n\n- [Update to Redis v6.2.7](gitlab-org/omnibus-gitlab@0409a6a11d8a1585fe38895125bb22edf9170105) ([merge request](gitlab-org/omnibus-gitlab!6069))\n\n### Performance (1 change)\n\n- [Upgrade to bundler v2.3.15](gitlab-org/omnibus-gitlab@28c48c44d5c14511086aab54da3cf751d03810e4) ([merge request](gitlab-org/omnibus-gitlab!6139))\n\n### Other (1 change)\n\n- [Disallow bundle to any changes to Gemfile.lock](gitlab-org/omnibus-gitlab@cd4f464c27058bebc0033ed2e013c56e86ff38f1) ([merge request](gitlab-org/omnibus-gitlab!6090))\n\n## 15.0.5 (2022-07-28)\n\n### Security (2 changes)\n\n- [Bump exiftool version to 12.42](gitlab-org/security/omnibus-gitlab@0564b3878692dc21c8eea0785ce3d95cccb05e0f) ([merge request](gitlab-org/security/omnibus-gitlab!207))\n- [Upgrade bzip2 to use version 1.0.8](gitlab-org/security/omnibus-gitlab@5b9c29a2db9b49df87e1bdcf861cc4005e56cd78) ([merge request](gitlab-org/security/omnibus-gitlab!208))\n\n## 15.0.4 (2022-06-30)\n\nNo changes.\n\n## 15.0.3 (2022-06-16)\n\n### Performance (1 change)\n\n- [Upgrade to bundler v2.3.15](gitlab-org/omnibus-gitlab@f722fa80e725a028e54f7b800f0df832dab210fb) ([merge request](gitlab-org/omnibus-gitlab!6157))\n\n## 15.0.2 (2022-06-06)\n\n### Fixed (1 change)\n\n- [Skip auto-restart of PG during reconfigure as part of pg-upgrade](gitlab-org/omnibus-gitlab@d4eb21d6a9406be4812c0ab5539f522cf7eeaefb) ([merge request](gitlab-org/omnibus-gitlab!6135))\n\n## 15.0.1 (2022-06-01)\n\nNo changes.\n\n## 15.0.0 (2022-05-20)\n\n### Added (7 changes)\n\n- [Add ci_runners_stale_group_runners_prune_worker_cron setting](gitlab-org/omnibus-gitlab@4fe5c08204b54052fc0b9953873291ce82ff8e4b) ([merge request](gitlab-org/omnibus-gitlab!6094))\n- [Add Praefect verifier deletion logic config option](gitlab-org/omnibus-gitlab@daa5197b5ea4a21b0bb38c877a3132eb81ef9d26) ([merge request](gitlab-org/omnibus-gitlab!6081))\n- [Add option to configure Elasticsearch probe for gitlab-exporter](gitlab-org/omnibus-gitlab@9d6c7f4ad45e76f4c71bfad63212a6350ae38df8) ([merge request](gitlab-org/omnibus-gitlab!5960))\n- [Add Puma config support for SSL](gitlab-org/omnibus-gitlab@4b4e52105948b2f2c22baae61872227702f91840) ([merge request](gitlab-org/omnibus-gitlab!6004))\n- [Introduce redis.announce_ip_from_hostname option, to enable setting the hostname at runtime](gitlab-org/omnibus-gitlab@2c2aca3e2ecc2aa9ed3742ce7ee0f095cda55113) ([merge request](gitlab-org/omnibus-gitlab!6027))\n- [Add observability listener configuration for KAS](gitlab-org/omnibus-gitlab@747fde2e41398f85a5ad36cdff6788dcd0c4fffe) ([merge request](gitlab-org/omnibus-gitlab!6066))\n- [Expose Praefect\'s background verification config via gitlab.rb](gitlab-org/omnibus-gitlab@580a9007ac865785abd43ab54c0fea124c50c52f) ([merge request](gitlab-org/omnibus-gitlab!6044))\n\n### Fixed (4 changes)\n\n- [Only check listen address and port if both exporter and health checks are enabled](gitlab-org/omnibus-gitlab@b8c45ee89a40158cb3ad8d65975f06bc40c13448) ([merge request](gitlab-org/omnibus-gitlab!6086))\n- [Remove Geo database settings only if some services are enabled](gitlab-org/omnibus-gitlab@10681dd601b9ab05ffd19ce1296918ac20063eb2) ([merge request](gitlab-org/omnibus-gitlab!6072))\n- [Nginx: implement HSTS support in the mattermost configuration template](gitlab-org/omnibus-gitlab@217fa57d2822a434e8cbc57be7acf340552a8e0b) by @hcartiaux ([merge request](gitlab-org/omnibus-gitlab!6033))\n- [Fix permissions on Grafana folder in Docker container](gitlab-org/omnibus-gitlab@0bdef8a586a56c78a2a2ef1301c21f9e1c807d81) by @cHiv0rz ([merge request](gitlab-org/omnibus-gitlab!6055))\n\n### Changed (7 changes)\n\n- [Update to PostgreSQL to v12.10 and v13.6](gitlab-org/omnibus-gitlab@b99198ae364b33c0a55543c226693b609bb0f0c6) ([merge request](gitlab-org/omnibus-gitlab!5728))\n- [Update to OpenSSL 1.1.1o](gitlab-org/omnibus-gitlab@4b2b99524b5df302a4b125a56440ffafcbcd9b7c) ([merge request](gitlab-org/omnibus-gitlab!6080))\n- [Change the sidekiq warning on using same address for healthcheck to raise an error instead](gitlab-org/omnibus-gitlab@d0b622e2c9e208a1bcb1dec76f350c49ba1d445d) ([merge request](gitlab-org/omnibus-gitlab!6065))\n- [Delete code for deprecated geo commands](gitlab-org/omnibus-gitlab@4d61a7be8e9ede7082a0336a083cf450479c9b93) ([merge request](gitlab-org/omnibus-gitlab!6059))\n- [Bump Container Registry to v3.39.2-gitlab](gitlab-org/omnibus-gitlab@1350edfdbc5af0851a9c88b3ca376af45b2f4619) ([merge request](gitlab-org/omnibus-gitlab!6064))\n- [Bump BUILDER_IMAGE_REVISION to v3.3.1](gitlab-org/omnibus-gitlab@6b73a7ad96d88dd741abf8a631b952fa871f9598) ([merge request](gitlab-org/omnibus-gitlab!6056))\n- [Remove AES256-GCM-SHA384 from default list of allowed NGINX SSL ciphers](gitlab-org/omnibus-gitlab@77238e0e6478308e6be709d557a63f404dd92efe) by @m.baur ([merge request](gitlab-org/omnibus-gitlab!5913))\n\n### Removed (3 changes)\n\n- [Remove background_upload and direct_upload configs](gitlab-org/omnibus-gitlab@6d841dc2d6d38c089fbe7fee025309c960f4ac94) ([merge request](gitlab-org/omnibus-gitlab!6091))\n- [Remove cveignore file and references](gitlab-org/omnibus-gitlab@99e659f5c66b3356ba6fcdbaca5a874e2187a335) ([merge request](gitlab-org/omnibus-gitlab!6061))\n- [gitaly: Remove support for configuring the internal socket directory](gitlab-org/omnibus-gitlab@0d5aaf031c3f03640cbdd8774ac9ce7b8b8650b4) ([merge request](gitlab-org/omnibus-gitlab!6068))\n\n### Other (1 change)\n\n- [Update deprecated settings list](gitlab-org/omnibus-gitlab@842cb755e72429663439b592c431b5d8cb7ffbc8) ([merge request](gitlab-org/omnibus-gitlab!6040))\n\n## 14.10.5 (2022-06-30)\n\nNo changes.\n\n## 14.10.4 (2022-06-01)\n\n### Security (1 change)\n\n- [Mattermost Security Updates May 2022](gitlab-org/security/omnibus-gitlab@0c61238d916a545b89f8d2d52a8996ce36b58bc5) ([merge request](gitlab-org/security/omnibus-gitlab!202))\n\n## 14.10.3 (2022-05-20)\n\n### Fixed (1 change)\n\n- [Remove Geo database settings only if some services are enabled](gitlab-org/omnibus-gitlab@13366f11d2430307f13ad874305540c0f01c8782) ([merge request](gitlab-org/omnibus-gitlab!6103))\n\n## 14.10.2 (2022-05-04)\n\n### Other (1 change)\n\n- [Update deprecations for 15.0](gitlab-org/omnibus-gitlab@a16dc47312d81f47875cbbf960291234f77b0737) ([merge request](gitlab-org/omnibus-gitlab!6075))\n\n## 14.10.1 (2022-04-29)\n\nNo changes.\n\n## 14.10.0 (2022-04-21)\n\n### Added (3 changes)\n\n- [Gitaly: Add rate_limiting section to config toml](gitlab-org/omnibus-gitlab@89d8f26a49063b1ec55b613d139e6de4f081e3ab) ([merge request](gitlab-org/omnibus-gitlab!6023))\n- [Add pages http server timeout options](gitlab-org/omnibus-gitlab@50ba3875f12a5c7e754e1c9d13162cfe3d3e588d) ([merge request](gitlab-org/omnibus-gitlab!6029))\n- [Expose `db_database_tasks` attribute](gitlab-org/omnibus-gitlab@c17057d17fbefeccef1f93768b4d90414e10e8ed) ([merge request](gitlab-org/omnibus-gitlab!5982))\n\n### Fixed (3 changes)\n\n- [consul: Disable logging of timestamps if JSON log enabled](gitlab-org/omnibus-gitlab@d376b30f25472a4c09e317135495b8a41af4c040) ([merge request](gitlab-org/omnibus-gitlab!6034))\n- [ruby: Enable OPENSSL_FIPS macro for system SSL builds](gitlab-org/omnibus-gitlab@cb0137add87ad37aa266a05f30313a1cd32ffb63) ([merge request](gitlab-org/omnibus-gitlab!6030))\n- [Always disable proxy_intercept_errors for kas](gitlab-org/omnibus-gitlab@2c76574dc69483a8c41bdadda3a0a83e810422f8) ([merge request](gitlab-org/omnibus-gitlab!5995))\n\n### Changed (5 changes)\n\n- [Update Mattermost to 6.5.0](gitlab-org/omnibus-gitlab@090603d39ddf8ebfe64ece70e6019e2d9779a084) by @stavros.foteinopoulos ([merge request](gitlab-org/omnibus-gitlab!5996))\n- [gitaly: Set up newly introduced runtime directory](gitlab-org/omnibus-gitlab@00534f346f11d02a5fe550257f5424b6e998bee1) ([merge request](gitlab-org/omnibus-gitlab!5999))\n- [Migrate Geo Tracking database configuration into database.yml](gitlab-org/omnibus-gitlab@4b88e899ecb99a0c0eef9dec8ef7b9df2903f2d0) ([merge request](gitlab-org/omnibus-gitlab!5962))\n- [add pages zip http client timeout option](gitlab-org/omnibus-gitlab@d6d0a17bc97505ff12205b05b943cf2ec355f02c) ([merge request](gitlab-org/omnibus-gitlab!5975))\n- [Update Mattermost to 6.4.2](gitlab-org/omnibus-gitlab@0e2ebff67f9ccf71c8d5f93d1f2c5893683d1809) by @stylianosrigas ([merge request](gitlab-org/omnibus-gitlab!5966))\n\n### Security (3 changes)\n\n- [mark credentials as sensitive](gitlab-org/omnibus-gitlab@9354ccc5d43df012eaacf46029e67ff4ecc2d482) ([merge request](gitlab-org/omnibus-gitlab!5971))\n- [Upgrade zlib version](gitlab-org/omnibus-gitlab@056875b6497087a33fa837e5549baa1ecea33674) by @srslypascal ([merge request](gitlab-org/omnibus-gitlab!6015))\n- [Update grafana version to 7.5.15](gitlab-org/omnibus-gitlab@5e98cbfb95cc3176fbaf5f38de99775d9cae512e)\n\n## 14.9.5 (2022-06-01)\n\n### Security (1 change)\n\n- [Mattermost Security Updates May 2022](gitlab-org/security/omnibus-gitlab@04aba5468f2a0a7b1f52f7ec755d08ecf5859b22) ([merge request](gitlab-org/security/omnibus-gitlab!203))\n\n## 14.9.4 (2022-04-29)\n\n### Security (1 change)\n\n- [Upgrade zlib version](gitlab-org/security/omnibus-gitlab@22de3296bc229d7812d1adb0de8b846390ca494b) ([merge request](gitlab-org/security/omnibus-gitlab!200))\n\n## 14.9.3 (2022-04-12)\n\nNo changes.\n\n## 14.9.2 (2022-03-31)\n\n### Security (2 changes)\n\n- [Update Mattermost version](gitlab-org/security/omnibus-gitlab@8f0ca9426e8c2226c715ee7adff9a93c147f1f00) ([merge request](gitlab-org/security/omnibus-gitlab!193))\n- [Update grafana version to 7.5.15](gitlab-org/security/omnibus-gitlab@838321a59c0824d3d66d1e52f45b1ba2cd660c33) ([merge request](gitlab-org/security/omnibus-gitlab!196))\n\n## 14.9.1 (2022-03-23)\n\nNo changes.\n\n## 14.9.0 (2022-03-21)\n\n### Added (9 changes)\n\n- [Make GitLab Pages server shutdown timeout configurable](gitlab-org/omnibus-gitlab@ad23a2ae7fd982edf5cb82559bbd02868806bd13) by @HuseyinEmreAksoy ([merge request](gitlab-org/omnibus-gitlab!5965))\n- [Exclude unnecessary files in gitlab-grpc gem](gitlab-org/omnibus-gitlab@7d8542a247df1245b81211a0ad500b7c3bd84cfc) ([merge request](gitlab-org/omnibus-gitlab!5968))\n- [Add webhook delivery method to mailroom](gitlab-org/omnibus-gitlab@c5b5872edf9a32615cbdc23ae992441c4cddc054) ([merge request](gitlab-org/omnibus-gitlab!5927))\n- [Add possibility to change nginx proxy buffer size](gitlab-org/omnibus-gitlab@6a680200bb6d52c2211f0db21ee5f0c53bb1a466) ([merge request](gitlab-org/omnibus-gitlab!5930))\n- [Add gitlab_kas[\'log_level\'] customization](gitlab-org/omnibus-gitlab@68986fe1a6e4b2589a53bd3ed1ae2107d19cf2f5) ([merge request](gitlab-org/omnibus-gitlab!5921))\n- [Add bizible settings](gitlab-org/omnibus-gitlab@a9e9df87ecb223b0c4f233ca41d36a22b061a854) ([merge request](gitlab-org/omnibus-gitlab!5911))\n- [Add tls rate-limiting options for GitLab Pages](gitlab-org/omnibus-gitlab@aa77e638d3dc491f9e96ca0ce3d67602f0f53610) ([merge request](gitlab-org/omnibus-gitlab!5926))\n- [Add role for Spamcheck](gitlab-org/omnibus-gitlab@e366c575f4b46fe54a1ade3afa947189ef949fdf) ([merge request](gitlab-org/omnibus-gitlab!5893))\n- [Add gitaly concurrency queue limit configs](gitlab-org/omnibus-gitlab@0c6c4ec78e570565b7c0833fcc6075e1c584c2e4) ([merge request](gitlab-org/omnibus-gitlab!5892))\n\n### Fixed (4 changes)\n\n- [Allow ACME challenge over HTTPS](gitlab-org/omnibus-gitlab@45eed63f3d42fa269e4ea9778547c4b60c89f8c1) ([merge request](gitlab-org/omnibus-gitlab!5916))\n- [Enable C99 in CentOS 7 and SLES for building Git](gitlab-org/omnibus-gitlab@7656cc049abb180f4bfc9b3d8f6f805161354762) ([merge request](gitlab-org/omnibus-gitlab!5948))\n- [gitlab-redis-cli: Fix passing of args to redis-cli](gitlab-org/omnibus-gitlab@7e1ff775cf4034a5aeaa8167a956cf9c0640b1a1) ([merge request](gitlab-org/omnibus-gitlab!5929))\n- [Fix Gitaly max_queue_wait TOML config](gitlab-org/omnibus-gitlab@4652c08bd215f8c51d6f4bb0d1884a132e287f2d) ([merge request](gitlab-org/omnibus-gitlab!5935))\n\n### Changed (5 changes)\n\n- [Upgrade MailRoom to v0.0.20](gitlab-org/omnibus-gitlab@5f505cde8a1801387981410b397c8ea92ef6eadb) ([merge request](gitlab-org/omnibus-gitlab!5978))\n- [Bump BUILDER_IMAGE_REVISION to v2.14.0](gitlab-org/omnibus-gitlab@162d3862b648d368f2e7942cb2ec21e411af145f) ([merge request](gitlab-org/omnibus-gitlab!5972))\n- [Default enable separate metrics for Praefect](gitlab-org/omnibus-gitlab@fa7c52e32eb27e831855c872e2402af5436ff673) ([merge request](gitlab-org/omnibus-gitlab!5887))\n- [Bump Container Registry to v3.31.0-gitlab](gitlab-org/omnibus-gitlab@3c267261bdc4b5d5a12208811d3b42b439e6eafa) ([merge request](gitlab-org/omnibus-gitlab!5944))\n- [gitaly: enable bundled git as default and set a default binary](gitlab-org/omnibus-gitlab@b157bbe564298b47c136507d13a2996a5ab4823d) ([merge request](gitlab-org/omnibus-gitlab!5885))\n\n### Security (5 changes)\n\n- [Update OpenSSL to v1.1.1n](gitlab-org/omnibus-gitlab@5a4dcf2bcb7d361029760ced56c0b13c07eb3e7c) ([merge request](gitlab-org/omnibus-gitlab!5979))\n- [Verifies full certificate rather than just CA](gitlab-org/omnibus-gitlab@9e005c447ac13549aef71c778103f5cd589304ed) ([merge request](gitlab-org/omnibus-gitlab!5963))\n- [Update Bundler version to 2.2.33](gitlab-org/omnibus-gitlab@82e3d3e2618569de796a823dd1b93231d71ad4d7) ([merge request](gitlab-org/omnibus-gitlab!5889))\n- [Upgrade gitlab-exporter to 11.11.0](gitlab-org/omnibus-gitlab@07fd1058c347a69177e4fa7bf879dbf88a4b1d56) ([merge request](gitlab-org/omnibus-gitlab!5915))\n- [Upgrade gitlab-exporter to 11.10.0](gitlab-org/omnibus-gitlab@a54f42c2fec705774602efe7df9a48a4c45c2745) ([merge request](gitlab-org/omnibus-gitlab!5898))\n\n### Other (3 changes)\n\n- [Improve success message after promoting secondary nodes](gitlab-org/omnibus-gitlab@d19ed935875778233151fe9b19a07134d757f133) ([merge request](gitlab-org/omnibus-gitlab!5959))\n- [Enable live stdout/stderr](gitlab-org/omnibus-gitlab@ae79d717a0f7735442463ec65121b1b19b67ec8a) ([merge request](gitlab-org/omnibus-gitlab!5958))\n- [Update Mattermost to 6.4.0](gitlab-org/omnibus-gitlab@2db39bba83bede1ec856b519289eb6f44b003882) by @angelos.kyratzakos ([merge request](gitlab-org/omnibus-gitlab!5919))\n\n## 14.8.6 (2022-04-29)\n\n### Security (1 change)\n\n- [Upgrade zlib version](gitlab-org/security/omnibus-gitlab@a197f94fd54297077c02704cff9309ae8f2ad3ed) ([merge request](gitlab-org/security/omnibus-gitlab!199))\n\n## 14.8.5 (2022-03-31)\n\n### Security (2 changes)\n\n- [Update Mattermost version](gitlab-org/security/omnibus-gitlab@3ceef837a8d28b68eced040158bbc70d2a7ec66b) ([merge request](gitlab-org/security/omnibus-gitlab!194))\n- [Update grafana version to 7.5.15](gitlab-org/security/omnibus-gitlab@dd99aa32346b2074167e2b0168d4fad23fc76678) ([merge request](gitlab-org/security/omnibus-gitlab!192))\n\n## 14.8.4 (2022-03-16)\n\n### Security (1 change)\n\n- [Update OpenSSL to v1.1.1n](gitlab-org/omnibus-gitlab@f20bc5b7ae7f093a302b08d5766d306b5ca22d2f) ([merge request](gitlab-org/omnibus-gitlab!5983))\n\n## 14.8.3 (2022-03-14)\n\nNo changes.\n\n## 14.8.2 (2022-02-25)\n\nNo changes.\n\n## 14.8.1 (2022-02-23)\n\nNo changes.\n\n## 14.8.0 (2022-02-21)\n\n### Added (10 changes)\n\n- [Add TLS configuration to Consul](gitlab-org/omnibus-gitlab@dd830bcbfca95ec5e17b828a47feeff68d5006fd) ([merge request](gitlab-org/omnibus-gitlab!5822))\n- [Add TLS termination options to GitLab KAS\'s APIs](gitlab-org/omnibus-gitlab@be8062afe1c2ce2c63f2da9482e8f53ed4c41085) by @fh1ch ([merge request](gitlab-org/omnibus-gitlab!5852))\n- [Add ability for Sentinel to leverage hostnames](gitlab-org/omnibus-gitlab@4875705279cc76daf430c8a0afcc3c266ca81782) ([merge request](gitlab-org/omnibus-gitlab!5853))\n- [Adding Secure Files settings](gitlab-org/omnibus-gitlab@4624ab3e884eed2a3c274c6033b9ef55f2cca66d) ([merge request](gitlab-org/omnibus-gitlab!5857))\n- [Add gitaly concurrency queue limit configs](gitlab-org/omnibus-gitlab@acb7b76c1a420db1cb8ef40da590eebee764f95e) ([merge request](gitlab-org/omnibus-gitlab!5875))\n- [Add openssl FIPS runtime dependencies](gitlab-org/omnibus-gitlab@bf51384b2c781f7ed45b616c446fce539db49bb4) ([merge request](gitlab-org/omnibus-gitlab!5865))\n- [Add sentry configuration options for GitLab KAS](gitlab-org/omnibus-gitlab@e7891deb3332c66ae40633624bf8ef7a48e2977c) by @fh1ch ([merge request](gitlab-org/omnibus-gitlab!5826))\n- [Add GITLAB_SKIP_TAIL_LOGS to docker wrapper](gitlab-org/omnibus-gitlab@7002b2d742f0975e91cdf9eb7666d596c24cf1f9) by @jpflouret ([merge request](gitlab-org/omnibus-gitlab!5799))\n- [Add spamcheck to the package](gitlab-org/omnibus-gitlab@ea23589a7eb867ba672840ddee15e8a56d6766d5) ([merge request](gitlab-org/omnibus-gitlab!5478))\n- [Provide packages for SLES 15.2](gitlab-org/omnibus-gitlab@05a700957052ef254aac0d71366b6eff20df0c62) ([merge request](gitlab-org/omnibus-gitlab!5811))\n\n### Fixed (6 changes)\n\n- [Update MailRoom to v0.0.19](gitlab-org/omnibus-gitlab@3a0d4355d00f2a07092befc6971ae84ace1c2c71) ([merge request](gitlab-org/omnibus-gitlab!5905))\n- [Update Omnibus to v8.2.1.7](gitlab-org/omnibus-gitlab@e051251228d494e784f712cd2dbf275827502ea6) ([merge request](gitlab-org/omnibus-gitlab!5902))\n- [Fix nginx www directory permission](gitlab-org/omnibus-gitlab@13d546ef9e5229532d332e9b2adb5e606aed3444) by @JulianForster01 ([merge request](gitlab-org/omnibus-gitlab!5619))\n- [Correct GitLab KAS default redis port configuration](gitlab-org/omnibus-gitlab@15d2c741574ae10f00beebd8f068a254a2abaace) by @fh1ch ([merge request](gitlab-org/omnibus-gitlab!5825))\n- [Update PG runtime conf before restarting](gitlab-org/omnibus-gitlab@15d0d1f7aa69789e039bb527335b494605bcde8e) ([merge request](gitlab-org/omnibus-gitlab!5848))\n- [Ensure EE services are added when gitlab-ee::config recipe is included](gitlab-org/omnibus-gitlab@57058af7fc324374845b890b95f383ecc7ae829d) ([merge request](gitlab-org/omnibus-gitlab!5861))\n\n### Changed (16 changes)\n\n- [Add QA_BRANCH trigger var](gitlab-org/omnibus-gitlab@c495e01de5bf8bd9c5ccb3fae514a1cc4a4653e2) ([merge request](gitlab-org/omnibus-gitlab!5910))\n- [Update Mattermost to 6.3.3](gitlab-org/omnibus-gitlab@59859b16cc9f97959212364a2683bda18baca6c4) by @spirosoik ([merge request](gitlab-org/omnibus-gitlab!5884))\n- [Bump Container Registry to v3.24.1-gitlab](gitlab-org/omnibus-gitlab@6a72ffff1458266fa679063bdb5c56d1e863fc87) ([merge request](gitlab-org/omnibus-gitlab!5899))\n- [Update libjpeg-turbo/libjpeg-turbo from 2.1.0 to 2.1.2](gitlab-org/omnibus-gitlab@f48e3a506d123a3d234505d9ed32619ff13207b1) ([merge request](gitlab-org/omnibus-gitlab!5534))\n- [Enable KAS by default](gitlab-org/omnibus-gitlab@518103b793791e87fa94739764f4f2fc5b8b879d) ([merge request](gitlab-org/omnibus-gitlab!4762))\n- [gitaly: Install both external and bundled Git](gitlab-org/omnibus-gitlab@e68e455716a29ef9d104e394ebb27dbb56062f6d) ([merge request](gitlab-org/omnibus-gitlab!5874))\n- [Update Mattermost to 6.2.2](gitlab-org/omnibus-gitlab@280d9a23f8fc00756f89ed6594fe773fb66341c6) by @spirosoik ([merge request](gitlab-org/omnibus-gitlab!5872))\n- [Update config/software/prometheus.rb](gitlab-org/omnibus-gitlab@ae9ea0a5fc7506c30d74ee17afb5fceeb97b0c01) ([merge request](gitlab-org/omnibus-gitlab!5849))\n- [Upgrade Redis from 6.0 to 6.2](gitlab-org/omnibus-gitlab@3b613f875b26bc3b84fd9a1427c71924d26a64ee) ([merge request](gitlab-org/omnibus-gitlab!5867))\n- [Upgrade Redis from 6.0 to 6.2](gitlab-org/omnibus-gitlab@bfa25f3e8b363f18d5a8a3ff6778a50509abb82c) ([merge request](gitlab-org/omnibus-gitlab!5843))\n- [Bump postgres-exporter to 0.10.0](gitlab-org/omnibus-gitlab@f620283eee40fd426eb715dc5021ae81697d88d5) ([merge request](gitlab-org/omnibus-gitlab!5850))\n- [Bump redis-exporter to 1.33.0](gitlab-org/omnibus-gitlab@96861ec6d370720bbd8bd30b8078320e53ae5bea) ([merge request](gitlab-org/omnibus-gitlab!5850))\n- [Bump node-exporter to 1.3.1](gitlab-org/omnibus-gitlab@e30165e8bb60d493b0bf38b0017a526097767b0e) ([merge request](gitlab-org/omnibus-gitlab!5850))\n- [Bump Alertmanager to 0.23.0](gitlab-org/omnibus-gitlab@3aaa25efbefb49b43d146a8d3b92d3386035eaa5) ([merge request](gitlab-org/omnibus-gitlab!5850))\n- [Bump Grafana to 7.5.12](gitlab-org/omnibus-gitlab@4b34583492911dc468caca801f1a67cd5784db20) ([merge request](gitlab-org/omnibus-gitlab!5850))\n\n### Deprecated (1 change)\n\n- [Add a warning if Sidekiq exporter and health checks are on the same port](gitlab-org/omnibus-gitlab@2f142b79d1c9d8a7cd879df736255ae223cffb2a) ([merge request](gitlab-org/omnibus-gitlab!5844))\n\n## 14.7.7 (2022-03-31)\n\n### Security (2 changes)\n\n- [Update Mattermost version](gitlab-org/security/omnibus-gitlab@c79f7657299a014485d73154726e380ee838c3be) ([merge request](gitlab-org/security/omnibus-gitlab!195))\n- [Update grafana version to 7.5.15](gitlab-org/security/omnibus-gitlab@bbf79c23818c10906577d4168be2c44949e8a26a) ([merge request](gitlab-org/security/omnibus-gitlab!191))\n\n## 14.7.6 (2022-03-24)\n\n### Security (1 change)\n\n- [Update OpenSSL to v1.1.1n](gitlab-org/omnibus-gitlab@4021e806ff4db72e0e2b956f137cefb20d633078) ([merge request](gitlab-org/omnibus-gitlab!5986))\n\n## 14.7.5 (2022-03-09)\n\nNo changes.\n\n## 14.7.4 (2022-02-25)\n\n### Security (2 changes)\n\n- [Mattermost February security updates](gitlab-org/security/omnibus-gitlab@a33d088a428e9f390352cd971fc63afa2f8eb5c6) ([merge request](gitlab-org/security/omnibus-gitlab!186))\n- [Bump Grafana to 7.5.12](gitlab-org/security/omnibus-gitlab@29c7f7f88385d3b0d822466f866feb43bfa92da5) ([merge request](gitlab-org/security/omnibus-gitlab!183))\n\n## 14.7.3 (2022-02-15)\n\n### Fixed (1 change)\n\n- [Update Omnibus to v8.2.1.7](gitlab-org/omnibus-gitlab@0847ad87f499ad8312f2aaa7367b957165c0e341) ([merge request](gitlab-org/omnibus-gitlab!5907))\n\n## 14.7.2 (2022-02-08)\n\n### Fixed (1 change)\n\n- [Ensure EE services are added when gitlab-ee::config recipe is included](gitlab-org/omnibus-gitlab@bb7a99e05274969671dd5e0e0d82abeb9b5644a3) ([merge request](gitlab-org/omnibus-gitlab!5886))\n\n## 14.7.1 (2022-02-03)\n\nNo changes.\n\n## 14.7.0 (2022-01-21)\n\n### Added (6 changes)\n\n- [Add Redis TLS related settings](gitlab-org/omnibus-gitlab@660586e7aefc5f38f8b6ec796b6f32e941388f28) ([merge request](gitlab-org/omnibus-gitlab!5770))\n- [Add gossip encryption configuration to Consul](gitlab-org/omnibus-gitlab@b08ff3cf8139f4f99b6602189802cae07cd7a5e9) ([merge request](gitlab-org/omnibus-gitlab!5842))\n- [Add domain rate-limiting options for GitLab Pages](gitlab-org/omnibus-gitlab@b2dd448cbe8c60960c10f3ac55a9c87a61fd0182) ([merge request](gitlab-org/omnibus-gitlab!5832))\n- [Add packages to skip list in preinst](gitlab-org/omnibus-gitlab@66de9c6c839b2e7eb0bbcfda25db889a707ab8ad) ([merge request](gitlab-org/omnibus-gitlab!5837))\n- [add nginx proxy_protocol option for gitlab-http](gitlab-org/omnibus-gitlab@f87ff7372d414bb97d9feb6f299fd81eb8a11000) by @cruelsmith ([merge request](gitlab-org/omnibus-gitlab!5663))\n- [Add config support for container registry middleware](gitlab-org/omnibus-gitlab@bd43f9134fb4dc593b9d0433be31ebacfc50cc66) ([merge request](gitlab-org/omnibus-gitlab!5807))\n\n### Fixed (4 changes)\n\n- [Include the cert file location by default as well](gitlab-org/omnibus-gitlab@b6bdff0fa3b022a9be514e09315dd1ff78742dcd) ([merge request](gitlab-org/omnibus-gitlab!5839))\n- [Sync trailing slash usage for GitLab KAS routes](gitlab-org/omnibus-gitlab@da816362ef00c62a569a0515d0aecd5ab84c1d04) by @fh1ch ([merge request](gitlab-org/omnibus-gitlab!5824))\n- [Revert chef-acme cookbook update](gitlab-org/omnibus-gitlab@3a595ef7921a2273c387f32005599e6a72bcbd60) ([merge request](gitlab-org/omnibus-gitlab!5819))\n- [Set SSL_CERT_DIR variable for all services](gitlab-org/omnibus-gitlab@ed9beda692797fa8e7b5576b47c30bd4285a1e0a) ([merge request](gitlab-org/omnibus-gitlab!5765))\n\n### Changed (6 changes)\n\n- [Bump omnibus to 8.2.1.5](gitlab-org/omnibus-gitlab@611add7bacd7e1108ad87eeb642055fc40e488fc) ([merge request](gitlab-org/omnibus-gitlab!5855))\n- [Upgrade MailRoom to v0.0.18](gitlab-org/omnibus-gitlab@f37f798b2e09af0bcdf3e34b556784038bdd8d7a) ([merge request](gitlab-org/omnibus-gitlab!5816))\n- [Enable frame pointer in PostgreSQL compile options](gitlab-org/omnibus-gitlab@129be61ae511cd6aeacce30bb73ef6b9b64b51a6) ([merge request](gitlab-org/omnibus-gitlab!5845))\n- [Bump Container Registry to v3.21.0-gitlab](gitlab-org/omnibus-gitlab@1dd3ce09f351acaab237c5b8d6783128ec510363) ([merge request](gitlab-org/omnibus-gitlab!5827))\n- [Create cgroup root directory on gitaly startup](gitlab-org/omnibus-gitlab@d1e09648b557d7a6d2349b354744e59f506d2a14) ([merge request](gitlab-org/omnibus-gitlab!5800))\n- [Skip terraform_state in preinst backup](gitlab-org/omnibus-gitlab@8dc6af4771f9089fa69e11c8199150754ff0b2d8) ([merge request](gitlab-org/omnibus-gitlab!5336))\n\n### Security (1 change)\n\n- [* bump prometheus version to 2.25.2](gitlab-org/omnibus-gitlab@303c2b4d97066357bbffc607d23f0fa94771bb21)\n\n### Other (1 change)\n\n- [Update Mattermost to 6.2.1](gitlab-org/omnibus-gitlab@05a5869b18ab109fffb7d0723ab04cb6da68ecf9) by @hmhealey ([merge request](gitlab-org/omnibus-gitlab!5828))\n\n## 14.6.7 (2022-03-31)\n\n### Security (1 change)\n\n- [Update OpenSSL to v1.1.1n](gitlab-org/omnibus-gitlab@8a4fdc5fa226e5f17c235dc49317d64cf4731d43) ([merge request](gitlab-org/omnibus-gitlab!6001))\n\n## 14.6.6 (2022-03-01)\n\n### Fixed (1 change)\n\n- [Ensure EE services are added when gitlab-ee::config recipe is included](gitlab-org/omnibus-gitlab@b90e485b01e3ca821c27b8884aef09b08d91c1c8) ([merge request](gitlab-org/omnibus-gitlab!5940))\n\n## 14.6.5 (2022-02-25)\n\n### Security (2 changes)\n\n- [Mattermost February security updates](gitlab-org/security/omnibus-gitlab@96536555ac828a91719b680a9b2ada22b5cd33da) ([merge request](gitlab-org/security/omnibus-gitlab!187))\n- [Bump Grafana to 7.5.12](gitlab-org/security/omnibus-gitlab@ca5139ba89ff852bbbd2ffdca4e0985ad7e98e20) ([merge request](gitlab-org/security/omnibus-gitlab!184))\n\n## 14.6.4 (2022-02-03)\n\n### Security (2 changes)\n\n- [Update builder image to use golang 1.16.12](gitlab-org/security/omnibus-gitlab@97046c4ab099e663032b5d62a4c232122f2ed237) ([merge request](gitlab-org/security/omnibus-gitlab!180))\n- [Update Mattermost to 6.1.1 (GitLab 14.6)](gitlab-org/security/omnibus-gitlab@2832fe9da7658bdfae28818517afd9ca4c514a19) ([merge request](gitlab-org/security/omnibus-gitlab!178))\n\n## 14.6.3 (2022-01-18)\n\n### Fixed (1 change)\n\n- [Revert chef-acme cookbook update](gitlab-org/omnibus-gitlab@387e132a3d8b2a3b25591e2a79102713f1ab3eb1) ([merge request](gitlab-org/omnibus-gitlab!5856))\n\n## 14.6.2 (2022-01-11)\n\nNo changes.\n\n## 14.6.1 (2022-01-04)\n\nNo changes.\n\n## 14.6.0 (2021-12-21)\n\n### Added (5 changes)\n\n- [Add --replicate-immediately flag to Praefect track-repository subcommand](gitlab-org/omnibus-gitlab@d35e0cc3c47835532ed54561ee9e18dac43fec81) ([merge request](gitlab-org/omnibus-gitlab!5789))\n- [Provide packages for Debian Bullseye](gitlab-org/omnibus-gitlab@9eeffc1dd5e5180d5015ce1bb557fc4eab0b0097) ([merge request](gitlab-org/omnibus-gitlab!5755))\n- [Add apply flag to praefect remove-repository subcommand](gitlab-org/omnibus-gitlab@0dd3d51a5723a38492152029f1a7a0eb2993a74d) ([merge request](gitlab-org/omnibus-gitlab!5785))\n- [Add google tag manager nonce config](gitlab-org/omnibus-gitlab@28d0da1135961c79e2ef008fcf0ee02ad71dc907) ([merge request](gitlab-org/omnibus-gitlab!5763))\n- [Add health-checks settings keys for Sidekiq](gitlab-org/omnibus-gitlab@6c7393963f6ef7d005b58f36051e08682274f312) ([merge request](gitlab-org/omnibus-gitlab!5743))\n\n### Fixed (4 changes)\n\n- [Return early from trusted certificate handling if hashing/symlinking failed](gitlab-org/omnibus-gitlab@edbd9514bad14b6921b06423745067b4df52bb2d) ([merge request](gitlab-org/omnibus-gitlab!5788))\n- [Fix Google Memorystore support for Action Cable](gitlab-org/omnibus-gitlab@bf959c1b8ead8dc076a7b255962e0028ddeb2013) ([merge request](gitlab-org/omnibus-gitlab!5753))\n- [Move deprecation message to gitlabc-ctl commands](gitlab-org/omnibus-gitlab@6631b5f7f9b8c9d96e54dd643f79d65ce049e6af) ([merge request](gitlab-org/omnibus-gitlab!5739))\n- [gitlab-ctl geo promote requires restart of puma and workhorse services](gitlab-org/omnibus-gitlab@56ce0d27ee550547eba5a49f882eccfc0feb73fc) ([merge request](gitlab-org/omnibus-gitlab!5738))\n\n### Changed (8 changes)\n\n- [Upgrade mailroom to v0.0.15](gitlab-org/omnibus-gitlab@936956c794a42ed6b13970a02be994c2cef4887d) ([merge request](gitlab-org/omnibus-gitlab!5794))\n- [Add patch to prevent Python from building nis module in Debian 11](gitlab-org/omnibus-gitlab@90a2190d5c2d8e873c2d3288812daab239960e32) ([merge request](gitlab-org/omnibus-gitlab!5755))\n- [Update gitlab-exporter to 11.8.0](gitlab-org/omnibus-gitlab@bd8a21e5b953cda735f1cb2f93215190a4f9f84e) ([merge request](gitlab-org/omnibus-gitlab!5759))\n- [Merge branch \'add-redis-ssl-kas\' into \'master\'](gitlab-org/omnibus-gitlab@acfcd985c6fe2b8cbeb88b71e6bbd8e4afad46d5) ([merge request](https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/5632))\n- [Update 2 dependencies from git](gitlab-org/omnibus-gitlab@1a408cb1d73f64dc3975bb9a0a2087667036849a) ([merge request](gitlab-org/omnibus-gitlab!5590))\n- [Use `geo:site:role` rake task to retrieve node role for the promote command](gitlab-org/omnibus-gitlab@0cae546fd9c5d04b59dac44b468217b244541782) ([merge request](gitlab-org/omnibus-gitlab!5724))\n- [Use public sources for omnibus-gitlab builds by default](gitlab-org/omnibus-gitlab@981e78d0162c8f202a38093ed5ead9ab059f07c7) ([merge request](gitlab-org/omnibus-gitlab!5659))\n- [Build rugged gem with system SSL on FIPS builds](gitlab-org/omnibus-gitlab@da0a44b28982ea1399e060396e892932b7e430d1) ([merge request](gitlab-org/omnibus-gitlab!5592))\n\n## 14.5.4 (2022-02-03)\n\n### Security (2 changes)\n\n- [Update builder image to use golang 1.16.12](gitlab-org/security/omnibus-gitlab@143f67f02155945c7b4b3ab1d32e7ea9d4534e77) ([merge request](gitlab-org/security/omnibus-gitlab!181))\n- [Update Mattermost to 5.38.3](gitlab-org/security/omnibus-gitlab@0a5be862558b2737903df134525a662388cd9073) ([merge request](gitlab-org/security/omnibus-gitlab!179))\n\n## 14.5.3 (2022-01-11)\n\nNo changes.\n\n## 14.5.2 (2021-12-03)\n\n### Security (1 change)\n\n- [Bump Mattermost to 5.39.2](gitlab-org/security/omnibus-gitlab@3095b598767458e264db42d820c14784c8e46ec1) ([merge request](gitlab-org/security/omnibus-gitlab!163))\n\n## 14.5.1 (2021-12-01)\n\n### Fixed (1 change)\n\n- [Fix Google Memorystore support for Action Cable](gitlab-org/omnibus-gitlab@2da850830b22ca01d7ee1449b9c7d505d6b4af43) ([merge request](gitlab-org/omnibus-gitlab!5764))\n\n## 14.5.0 (2021-11-19)\n\n### Added (11 changes)\n\n- [Add praefect prometheus_exclude_database_from_default_metrics config value](gitlab-org/omnibus-gitlab@35d37fd96323b1846b43d1c75a722aabd7e8624b) ([merge request](gitlab-org/omnibus-gitlab!5740))\n- [Build packages for openSUSE 15.3](gitlab-org/omnibus-gitlab@afdc5f3b699dbe64de56a290e0b87fb113a0ab1d) ([merge request](gitlab-org/omnibus-gitlab!5720))\n- [Add max_uri_length to GitLab Pages config](gitlab-org/omnibus-gitlab@594675b8e1a25a09a612f4389f9a1bca4706869e) ([merge request](gitlab-org/omnibus-gitlab!5729))\n- [Add source-IP rate-limiting options to GitLab Pages](gitlab-org/omnibus-gitlab@b19a99391f7c95fdcfd408e7ce22a887fc48fca3) ([merge request](gitlab-org/omnibus-gitlab!5704))\n- [Configure the Loose foreign key cleanup job](gitlab-org/omnibus-gitlab@2cc32e21b28f3570946de2f522199bbcf964c519) ([merge request](gitlab-org/omnibus-gitlab!5708))\n- [Add configuration for the KAS CI tunnel feature](gitlab-org/omnibus-gitlab@832b8fffe7a96a75d5ee745b514ac2cf1886e392) ([merge request](gitlab-org/omnibus-gitlab!5686))\n- [Add praefect check command](gitlab-org/omnibus-gitlab@503df6dbed3949f4aadecc693bd395187f9906de) ([merge request](gitlab-org/omnibus-gitlab!5688))\n- [Allow configuring redis instance for sessions](gitlab-org/omnibus-gitlab@182245701d498863b703265bce7dd24a5b5d44a3) ([merge request](gitlab-org/omnibus-gitlab!5690))\n- [Create a Consul service for GitLab Exporter](gitlab-org/omnibus-gitlab@5aebc282f4e7d4b00e21c58a7e4ce7141d2336df) ([merge request](gitlab-org/omnibus-gitlab!5672))\n- [Build and publish ARM64 AMIs](gitlab-org/omnibus-gitlab@997afab74ebb5b8fc03e6841444a8b3bef6e8d30) ([merge request](gitlab-org/omnibus-gitlab!5682))\n- [Add one_trust_id configuration](gitlab-org/omnibus-gitlab@e71fd56e87e0a53a1b24178da12c037ee54785eb) ([merge request](gitlab-org/omnibus-gitlab!5655))\n\n### Fixed (5 changes)\n\n- [Drop --without-gnutls flag from curl](gitlab-org/omnibus-gitlab@98901806aa0b37db3356bc1d2197f5e6a0d3006f) ([merge request](gitlab-org/omnibus-gitlab!5730))\n- [adding helper text for subcommands](gitlab-org/omnibus-gitlab@655b5ee078728978e5d3bec0450068b09ef94d91) ([merge request](gitlab-org/omnibus-gitlab!5706))\n- [Fix URL for unzip v6.0 download](gitlab-org/omnibus-gitlab@08806a5686a469779151d330808397338b53c7bd) ([merge request](gitlab-org/omnibus-gitlab!5705))\n- [Geo - Restart Gitaly/Praefect services during promotion](gitlab-org/omnibus-gitlab@3b4160fb40f2de6e4ac5dc37a6021e64ae23289c) ([merge request](gitlab-org/omnibus-gitlab!5691))\n- [Ensure letsencrypt is enabled when running  gitlab-ctl renew-le-certs](gitlab-org/omnibus-gitlab@0821de816202aac0019a9ab04d453b38c3954561) ([merge request](gitlab-org/omnibus-gitlab!5681))\n\n### Changed (11 changes)\n\n- [Update grafana-dashboards to 1.9.0](gitlab-org/omnibus-gitlab@7c2bef94efe6694c03871ebcf607273dea5ef6b1) ([merge request](gitlab-org/omnibus-gitlab!5736))\n- [Bump container registry to v3.14.3](gitlab-org/omnibus-gitlab@43ee251ea2a68d5194c09b6d74c33c160d62f335) ([merge request](gitlab-org/omnibus-gitlab!5727))\n- [Upgrade gitlab-exporter to v11.7.0](gitlab-org/omnibus-gitlab@7268bf80da3cedcab04f3ad9481e13e17f031136) ([merge request](gitlab-org/omnibus-gitlab!5725))\n- [Make gitlab-ctl geo promote production ready](gitlab-org/omnibus-gitlab@e2b9eb88b5a88ed767ccd61436a03832de315989) ([merge request](gitlab-org/omnibus-gitlab!5719))\n- [Ensure the selinux modules are enabled on rocky and almalinux](gitlab-org/omnibus-gitlab@8896fe22315369add8ec8c40d91b8bd74cb59c36) ([merge request](gitlab-org/omnibus-gitlab!5714))\n- [Bump container registry to v3.14.1](gitlab-org/omnibus-gitlab@bc9f23610f94e298d716371c648dcfe5e6e91c42) ([merge request](gitlab-org/omnibus-gitlab!5709))\n- [Drop custom compiler for CentOS 6](gitlab-org/omnibus-gitlab@bc8099a15b45676f1e9a2cbaddee4707949d08b4) ([merge request](gitlab-org/omnibus-gitlab!5707))\n- [Upgrade Omnibus Builder to v2.5.0](gitlab-org/omnibus-gitlab@187830c0c70711ce04633faecff7d7f7e9143685) ([merge request](gitlab-org/omnibus-gitlab!5701))\n- [Bump omnibus to 8.2.1.1](gitlab-org/omnibus-gitlab@d94c515b9b312147e018de9d89502c087ee691ea) ([merge request](gitlab-org/omnibus-gitlab!5667))\n- [Update gitlab-mail_room to 0.0.14](gitlab-org/omnibus-gitlab@70dbff79af988b760eb9844c8c5899395bbcb1fb) ([merge request](https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/5687))\n- [Bump Container Registry to v3.13.0-gitlab](gitlab-org/omnibus-gitlab@98e6ec691071322a324fdf821db5ca5d8e379ac5) ([merge request](gitlab-org/omnibus-gitlab!5684))\n\n### Removed (1 change)\n\n- [Remove Action Cable in-app setting](gitlab-org/omnibus-gitlab@e23ce52074df3e69bf9357f8531be3e0efe432a4) ([merge request](gitlab-org/omnibus-gitlab!5700))\n\n### Security (2 changes)\n\n- [Update Curl to version 7.79.1](gitlab-org/omnibus-gitlab@5e1d27acf27eed44f9f69609cd19d21a8147ec74)\n- [Update openssl to 1.1.1l](gitlab-org/omnibus-gitlab@f107290e750c4df586bb475ca537401eb46094e3)\n\n## 14.4.5 (2022-01-11)\n\nNo changes.\n\n## 14.4.4 (2021-12-03)\n\n### Security (1 change)\n\n- [Bump Mattermost to 5.39.2](gitlab-org/security/omnibus-gitlab@57bf68e0fe9f165641ea2d39a2ba785824cf49d3) ([merge request](gitlab-org/security/omnibus-gitlab!161))\n\n## 14.4.3 (2021-12-01)\n\n### Added (1 change)\n\n- [Add praefect prometheus_exclude_database_from_default_metrics config value](gitlab-org/omnibus-gitlab@4be6a278a6401c70e0676d2f487b8752a30c41d7) ([merge request](gitlab-org/omnibus-gitlab!5762))\n\n## 14.4.2 (2021-11-08)\n\n### Added (1 change)\n\n- [Build and publish ARM64 AMIs](gitlab-org/omnibus-gitlab@062aef7148073a8b336b5394a5b1b19bc75957c8) ([merge request](gitlab-org/omnibus-gitlab!5715))\n\n### Fixed (1 change)\n\n- [Fix URL for unzip v6.0 download](gitlab-org/omnibus-gitlab@85ca56906a376ff746a62c0054c9704cbac48116) ([merge request](gitlab-org/omnibus-gitlab!5715))\n\n## 14.4.1 (2021-10-28)\n\n### Security (2 changes)\n\n- [Update Curl to version 7.79.1](gitlab-org/security/omnibus-gitlab@882a0b93e38669049aa13d824945010b6895a382) ([merge request](gitlab-org/security/omnibus-gitlab!154))\n- [Update openssl to 1.1.1l](gitlab-org/security/omnibus-gitlab@22584f0661c4dba0103caf083f30bd818ec63537) ([merge request](gitlab-org/security/omnibus-gitlab!152))\n\n## 14.4.0 (2021-10-21)\n\n### Added (6 changes)\n\n- [add list-untracked-repositories command](gitlab-org/omnibus-gitlab@e42713ef3a93df8050e78e12a1a95069ebd99c14) ([merge request](gitlab-org/omnibus-gitlab!5662))\n- [Introduce praefect track-repository command](gitlab-org/omnibus-gitlab@c893910cb7c77262a3bf8740af91c9caa34e392e) ([merge request](gitlab-org/omnibus-gitlab!5658))\n- [Allow configuring redis instance for rate-limiting](gitlab-org/omnibus-gitlab@b3d85c90f911018e9fa4e9f1aea5cfee3b312106) ([merge request](gitlab-org/omnibus-gitlab!5624))\n- [Introduce "praefect remove-repository" command](gitlab-org/omnibus-gitlab@c19995c77e8383212fedd7c4520af0d27f1c7cec) ([merge request](gitlab-org/omnibus-gitlab!5614))\n- [Add new max_saml_message_size setting](gitlab-org/omnibus-gitlab@5de647796be4bcbc1353bad94e1090263f95a7db) ([merge request](gitlab-org/omnibus-gitlab!5613))\n- [Make Redis stop-writes-on-bgsave-error setting configurable](gitlab-org/omnibus-gitlab@573dd55e824acf91161b67e585a81a6c92fc669b) ([merge request](gitlab-org/omnibus-gitlab!5616))\n\n### Fixed (4 changes)\n\n- [Don\'t generate public_attributes.json on non-reconfigure runs](gitlab-org/omnibus-gitlab@890543e38b89031d927ed0539ddbf753959d5320) ([merge request](gitlab-org/omnibus-gitlab!5674))\n- [Update cacerts to 2021-09-30](gitlab-org/omnibus-gitlab@a90a59323c72277275c67c12de4bb2a0aaa6db08) ([merge request](gitlab-org/omnibus-gitlab!5650))\n- [Delay praefect database[_direct_host,_port_no_proxy] removals](gitlab-org/omnibus-gitlab@fb1b94a1e1cd7d93fe54b17b7d87facec781eb4f) ([merge request](gitlab-org/omnibus-gitlab!5647))\n- [Properly reload Patroni on config change](gitlab-org/omnibus-gitlab@e1697c547a421073dad5961219e0106cd4915f9b) ([merge request](gitlab-org/omnibus-gitlab!5644))\n\n### Changed (7 changes)\n\n- [Update gitlab-mail_room to 0.0.14](gitlab-org/omnibus-gitlab@7ea548474c0e9ba8aa15ba09e3410df03a5aeffa) ([merge request](https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/5687))\n- [Downgrade grafana to the 7.x release branch](gitlab-org/omnibus-gitlab@ea6bb0bf64a22f2ede0aec0bcbb74905345d3647) ([merge request](gitlab-org/omnibus-gitlab!5675))\n- [Add timeout block for Consul get_api](gitlab-org/omnibus-gitlab@b7f63aca40675d1db85a672f4c2082e57c19eea8) ([merge request](gitlab-org/omnibus-gitlab!5638))\n- [Bump omnibus to 8.2.1](gitlab-org/omnibus-gitlab@0b970c9ecea72097f8031a2f2138cd4f5fe2cc4b) ([merge request](gitlab-org/omnibus-gitlab!5602))\n- [Switch to supporting the new ee/db/geo/structure.sql](gitlab-org/omnibus-gitlab@9e2f2a4ef1ab907e318c4a7137ae2b6db1603ea6) ([merge request](gitlab-org/omnibus-gitlab!5637))\n- [Gracefully handle empty roles](gitlab-org/omnibus-gitlab@69ec50023de59a6a05c5fc81e2c5d400b3f84052) ([merge request](gitlab-org/omnibus-gitlab!5634))\n- [Bump Container Registry to v3.11.1-gitlab](gitlab-org/omnibus-gitlab@2499016a479c3747c30eef8945955dd49273f2b2) ([merge request](gitlab-org/omnibus-gitlab!5623))\n\n### Deprecated (1 change)\n\n- [Deprecate Pages `inplace_chroot` flag and stop running Pages as a daemon](gitlab-org/omnibus-gitlab@ae3cdf3bf6846415391a765661090456a06ce32b) by @feistel ([merge request](gitlab-org/omnibus-gitlab!5639))\n\n## 14.3.6 (2021-12-03)\n\n### Security (1 change)\n\n- [Bump Mattermost to 5.38.4](gitlab-org/security/omnibus-gitlab@28663f0c7a3fd084d461a836c6dbe53282008074) ([merge request](gitlab-org/security/omnibus-gitlab!162))\n\n## 14.3.5 (2021-11-26)\n\n### Added (1 change)\n\n- [Add praefect prometheus_exclude_database_from_default_metrics config value](gitlab-org/omnibus-gitlab@29473df822968966dfc640a53d95be908998f389) ([merge request](gitlab-org/omnibus-gitlab!5752))\n\n### Fixed (2 changes)\n\n- [Fix URL for unzip v6.0 download](gitlab-org/omnibus-gitlab@21fcea1eb78cdae7ceba302f6abef1b49135b48a) ([merge request](gitlab-org/omnibus-gitlab!5752))\n- [Conditionally generate public_attributes.json](gitlab-org/omnibus-gitlab@7dbfb5e782a269040eebd673ba6279ae2de6d3b1) ([merge request](gitlab-org/omnibus-gitlab!5752))\n\n### Changed (1 change)\n\n- [Downgrade grafana to the 7.x release branch](gitlab-org/omnibus-gitlab@f32b875f748d763cfda4f231a9cfb4210d5793e6) ([merge request](gitlab-org/omnibus-gitlab!5752))\n\n## 14.3.4 (2021-10-28)\n\n### Security (2 changes)\n\n- [Update Curl to version 7.79.1](gitlab-org/security/omnibus-gitlab@152ecf0a7e6888f7d301aef27d3db8b68fd7e252) ([merge request](gitlab-org/security/omnibus-gitlab!155))\n- [Update openssl to 1.1.1l](gitlab-org/security/omnibus-gitlab@4a566defdbb9f224f932c8876c666840d6d3e77e) ([merge request](gitlab-org/security/omnibus-gitlab!147))\n\n## 14.3.3 (2021-10-12)\n\n### Fixed (2 changes)\n\n- [Update cacerts to 2021-09-30](gitlab-org/omnibus-gitlab@b39f98773f7e3e6ac4817f7fb93efb2bee1ec795) ([merge request](gitlab-org/omnibus-gitlab!5668))\n- [Delay praefect database_*_no_proxy removals](gitlab-org/omnibus-gitlab@b30716ae18cf94b69befb2de607ae5434864a8f1) ([merge request](gitlab-org/omnibus-gitlab!5668))\n\n## 14.3.2 (2021-10-01)\n\nNo changes.\n\n## 14.3.1 (2021-09-30)\n\nNo changes.\n\n## 14.3.0 (2021-09-21)\n\n### Added (6 changes)\n\n- [Adds symantic metadata to consul services](gitlab-org/omnibus-gitlab@08b43e3b498cafa56902ba652141329aa1a99431) ([merge request](gitlab-org/omnibus-gitlab!5594))\n- [Add AWS SSE-KMS support for backups](gitlab-org/omnibus-gitlab@088fa1ed836de22203488beb443f7cec75bcd4f7) ([merge request](gitlab-org/omnibus-gitlab!5584))\n- [Allow specifying additional config directory to consul](gitlab-org/omnibus-gitlab@6cb5b0f45992f9f16352b5570a197e4774da83fc) ([merge request](gitlab-org/omnibus-gitlab!5559))\n- [Allow service names used to register with Consul be customized](gitlab-org/omnibus-gitlab@96526d5a825348f0d98002b6dc011af4db80ad24) ([merge request](gitlab-org/omnibus-gitlab!5560))\n- [Add support for gitlab[\'omniauth_cas3_session_duration\']](gitlab-org/omnibus-gitlab@0bd4ac5958b82501291bc1260e54cfa4cc531612) ([merge request](gitlab-org/omnibus-gitlab!5558))\n- [Add SMTP configuration support for SMTP secret encryption](gitlab-org/omnibus-gitlab@1bb2a4003fe10ba8d24d7eb70e119f1b1598ac14) ([merge request](gitlab-org/omnibus-gitlab!5536))\n\n### Fixed (3 changes)\n\n- [Fixes the use of wal_keep_size with GEO on PG13](gitlab-org/omnibus-gitlab@8bd646ad8f1223a937050b4878f316c88d0c8582) ([merge request](gitlab-org/omnibus-gitlab!5601))\n- [Update gitlab.rb.template for Service Desk](gitlab-org/omnibus-gitlab@2ec10e4090ed4b1ad62ae643991ec51428434916) ([merge request](gitlab-org/omnibus-gitlab!5556))\n- [Fix migration NameError in rails env helper](gitlab-org/omnibus-gitlab@62974d5c13bb072683dcc08a2d83437a48361331) ([merge request](gitlab-org/omnibus-gitlab!5552))\n\n### Changed (8 changes)\n\n- [Bump container registry to v3.11.0](gitlab-org/omnibus-gitlab@8d724a2c96e021e365352be1c9c7234913e6b67a) ([merge request](gitlab-org/omnibus-gitlab!5600))\n- [Update grafana to 8.1.3](gitlab-org/omnibus-gitlab@90c9eb0487af4e852553d2fdee89d1904584cfc0) ([merge request](gitlab-org/omnibus-gitlab!5449))\n- [Bump container registry to v3.10.1](gitlab-org/omnibus-gitlab@a83eae00206ad500141111afd0bcb63e22c197e4) ([merge request](gitlab-org/omnibus-gitlab!5585))\n- [Update Ruby to 2.7.4](gitlab-org/omnibus-gitlab@3a4304d9f9547619e955bf2b5971d73193a9f9f4) ([merge request](gitlab-org/omnibus-gitlab!5545))\n- [Update chef gems to 15.17.4](gitlab-org/omnibus-gitlab@62f95b0ab9f75566f60d4f9623f66566f8b7e0d0) ([merge request](gitlab-org/omnibus-gitlab!5450))\n- [Bump Container Registry to v3.10.0-gitlab](gitlab-org/omnibus-gitlab@2b8c96cf8442928cf80723b154faee5161d374b5) ([merge request](gitlab-org/omnibus-gitlab!5562))\n- [Bump container registry to v3.9.0](gitlab-org/omnibus-gitlab@dda7bdf4cd9c6eea21359e919d6cfc81b21c4989) ([merge request](gitlab-org/omnibus-gitlab!5542))\n- [Use Python 3.9.6](gitlab-org/omnibus-gitlab@82d52ccf3727b4603d39657794f02fa0f4b588de) ([merge request](gitlab-org/omnibus-gitlab!5547))\n\n### Deprecated (1 change)\n\n- [Prefer gitaly custom_hooks_dir setting](gitlab-org/omnibus-gitlab@136d789f675b0a13c848ca68eb0332ffa489fe11) ([merge request](gitlab-org/omnibus-gitlab!4208))\n\n### Removed (1 change)\n\n- [Remove support for gitlab_pages[\'use_legacy_storage\'] setting](gitlab-org/omnibus-gitlab@4c96751a8fa8b4dd814f781133fb558c90343ed8) by @feistel ([merge request](gitlab-org/omnibus-gitlab!5529))\n\n### Security (1 change)\n\n- [Update cURL to 7.77.0](gitlab-org/omnibus-gitlab@dd9bc79002b84a110bc4a1e6ce87fb36b165424e)\n\n### Other (2 changes)\n\n- [Update Mattermost to 5.38.2](gitlab-org/omnibus-gitlab@02d9eb7adfbd2c13048cd0db4550ab994fb9feaa) by @hmhealey ([merge request](gitlab-org/omnibus-gitlab!5587))\n- [Update Python from 3.7.10 to 3.9.5](gitlab-org/omnibus-gitlab@055e29c12442df3ef278a566160e1664e5da331b) ([merge request](gitlab-org/omnibus-gitlab!5547))\n\n## 14.2.7 (2021-11-26)\n\n### Added (1 change)\n\n- [Add praefect prometheus_exclude_database_from_default_metrics config value](gitlab-org/omnibus-gitlab@a92ad24941e479d2e30ba087107081d36cf888e4) ([merge request](gitlab-org/omnibus-gitlab!5750))\n\n### Fixed (3 changes)\n\n- [Fix URL for unzip v6.0 download](gitlab-org/omnibus-gitlab@23f4f83c0926fc81ebd3b2932b7e5a1bcd31b2e1) ([merge request](gitlab-org/omnibus-gitlab!5750))\n- [Conditionally generate public_attributes.json](gitlab-org/omnibus-gitlab@440ce859b9bca7f2147c835b7f199a4e4b6f8f38) ([merge request](gitlab-org/omnibus-gitlab!5750))\n- [Delay praefect database_*_no_proxy removals](gitlab-org/omnibus-gitlab@dddf6f9d893d5f59a089a7d039360c5918840bea) ([merge request](gitlab-org/omnibus-gitlab!5750))\n\n## 14.2.6 (2021-10-28)\n\n### Security (2 changes)\n\n- [Update Curl to version 7.79.1](gitlab-org/security/omnibus-gitlab@151269917214a2b791b90949e7794d19a5fc304d) ([merge request](gitlab-org/security/omnibus-gitlab!156))\n- [Update openssl to 1.1.1l](gitlab-org/security/omnibus-gitlab@df6605f7b2cf0042ec156fd8b8bd35a2b5be0d1f) ([merge request](gitlab-org/security/omnibus-gitlab!148))\n\n## 14.2.5 (2021-09-30)\n\nNo changes.\n\n## 14.2.4 (2021-09-17)\n\nNo changes.\n\n## 14.2.3 (2021-09-01)\n\nNo changes.\n\n## 14.2.2 (2021-08-31)\n\n### Security (1 change)\n\n- [Update cURL to 7.77.0](gitlab-org/security/omnibus-gitlab@416f65f903ee27f107e6378413649e002d85c4b6) ([merge request](gitlab-org/security/omnibus-gitlab!144))\n\n## 14.2.1 (2021-08-23)\n\n### Fixed (1 change)\n\n- [Fix migration NameError in rails env helper](gitlab-org/omnibus-gitlab@6a1ddc413f4ac1b4d56abac3aa148f4cd81deec3) ([merge request](gitlab-org/omnibus-gitlab!5553))\n\n## 14.2.0 (2021-08-20)\n\n### Added (8 changes)\n\n- [Add option to specify log level for nginx logs](gitlab-org/omnibus-gitlab@89b91fc05ae583143e757c1febdbdeb61314f46c) ([merge request](gitlab-org/omnibus-gitlab!5530))\n- [Add a (experimental) single command to promote a Geo secondary node](gitlab-org/omnibus-gitlab@be85c4d2f060caa5301ed72ac99dc969d8c6f13d) ([merge request](https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/5401))\n- [Add missing Patroni configuration - tags, recovery_conf, callbacks](gitlab-org/omnibus-gitlab@c862f1f98f84b4a84d925e1a9c76524c6f7a8cba) ([merge request](gitlab-org/omnibus-gitlab!5525))\n- [Add support to specify additional databases to Rails application](gitlab-org/omnibus-gitlab@80349389150549e02721795cd46a5e8b48ced65c) ([merge request](gitlab-org/omnibus-gitlab!5480))\n- [Enable TLS support for Patroni API](gitlab-org/omnibus-gitlab@f0f94de248bba9f73e331df544b2c989c9cf8a46) ([merge request](gitlab-org/omnibus-gitlab!5486))\n- [Support Workhorse config options for propagating correlation IDs](gitlab-org/omnibus-gitlab@dd74092e5e7e812c355bf8540dd7bd23a19c59ef) ([merge request](gitlab-org/omnibus-gitlab!5496))\n- [Connect Puma low-level error handler to Sentry](gitlab-org/omnibus-gitlab@b1ebcc1924e5a9093ac79ad7f5150309e9536a55) ([merge request](gitlab-org/omnibus-gitlab!5490))\n- [Add patroni allowlist support](gitlab-org/omnibus-gitlab@9b366bb46878964b7d09b368abc54604dbc69170) ([merge request](gitlab-org/omnibus-gitlab!5476))\n\n### Fixed (3 changes)\n\n- [Add AES256-GCM-SHA384 to allowed list of Nginx SSL ciphers](gitlab-org/omnibus-gitlab@127525c7f57daf7ca5ec38209180f3dcf0e8940e) ([merge request](gitlab-org/omnibus-gitlab!5513))\n- [Fix `could not change directory to "/root": Permission denied`](gitlab-org/omnibus-gitlab@aa91ab2988958af1dd0bcf6cedbf68babec804f8) ([merge request](gitlab-org/omnibus-gitlab!5498))\n- [Don\'t ask users to upgrade to PG 13 yet](gitlab-org/omnibus-gitlab@74f82ad556f70c1159267c25180cff7a2b8b54d5) ([merge request](gitlab-org/omnibus-gitlab!5488))\n\n### Changed (7 changes)\n\n- [Update Mattermost to 5.37.1 and update websocket support](gitlab-org/omnibus-gitlab@af32991925af80fbf723195b1e84ef9c04d333ba) ([merge request](https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/5516))\n- [Bump Container Registry to v3.7.0-gitlab](gitlab-org/omnibus-gitlab@ada9e5ac7d67a99fff614b4570ba4236c4fd5175) ([merge request](gitlab-org/omnibus-gitlab!5520))\n- [Transform database.yml to use main syntax](gitlab-org/omnibus-gitlab@7a379098fb5f45849d9be8e8f4a7054245393387) ([merge request](gitlab-org/omnibus-gitlab!5510))\n- [Bump Container Registry to v3.6.2-gitlab](gitlab-org/omnibus-gitlab@6672574804c36591dc5eee51eaaf8f079df30827) ([merge request](gitlab-org/omnibus-gitlab!5506))\n- [Bump Container Registry to v3.6.1-gitlab](gitlab-org/omnibus-gitlab@7649c01c3bb370dad23bf2ce4aa6860e714b6ae2) ([merge request](gitlab-org/omnibus-gitlab!5489))\n- [Transform database.yml to use main syntax](gitlab-org/omnibus-gitlab@4fd5be4dccd006eb9f9321478e67401529641356) ([merge request](gitlab-org/omnibus-gitlab!5491))\n- [Avoid generic NoMethodError on non-Patroni nodes](gitlab-org/omnibus-gitlab@e26450d3f473dc7dc9443c240f6adfce6adc1881) ([merge request](gitlab-org/omnibus-gitlab!5472))\n\n### Security (1 change)\n\n- [Update libgcrypt to 1.9.3](gitlab-org/omnibus-gitlab@1b8e0bb1b3bf39a339b7a8a63d2d232ef132cbe2)\n\n### Other (2 changes)\n\n- [Remove docs redirects cleanup task](gitlab-org/omnibus-gitlab@c03703f3c3f678e383ce92b17bf2e888dbcfa883) ([merge request](gitlab-org/omnibus-gitlab!5539))\n- [Bump gitlab-exporter to 11.2.0](gitlab-org/omnibus-gitlab@9e005c8e8ccf16766327bd872ad284ae612bf6fd) ([merge request](gitlab-org/omnibus-gitlab!5518))\n\n## 14.1.8 (2021-11-15)\n\n### Fixed (2 changes)\n\n- [Conditionally generate public_attributes.json](gitlab-org/omnibus-gitlab@4c2df93ec3abd466b233b99dd1558043347d98f9) ([merge request](gitlab-org/omnibus-gitlab!5717))\n- [Delay praefect database_*_no_proxy removals](gitlab-org/omnibus-gitlab@9679474648e51a2ae699c8aa23dbb523e45fb6e3) ([merge request](gitlab-org/omnibus-gitlab!5717))\n\n## 14.1.7 (2021-09-30)\n\nNo changes.\n\n## 14.1.6 (2021-09-27)\n\nNo changes.\n\n## 14.1.5 (2021-09-02)\n\nNo changes.\n\n## 14.1.4 (2021-08-31)\n\n### Security (1 change)\n\n- [Update cURL to 7.77.0](gitlab-org/security/omnibus-gitlab@77b0ac2436a269b52318dd39390efbacfc8c8244) ([merge request](gitlab-org/security/omnibus-gitlab!136))\n\n## 14.1.3 (2021-08-17)\n\n### Fixed (1 change)\n\n- [Add AES256-GCM-SHA384 to allowed list of Nginx SSL ciphers](gitlab-org/omnibus-gitlab@43169882dfb36046dc01ae681eb7cc5df4a2887f) ([merge request](gitlab-org/omnibus-gitlab!5546))\n\n## 14.1.2 (2021-08-03)\n\n### Security (1 change)\n\n- [Update libgcrypt to 1.9.3](gitlab-org/security/omnibus-gitlab@05a6f88dea9600243178741169fe243c48a9bcb2) ([merge request](gitlab-org/security/omnibus-gitlab!131))\n\n## 14.1.1 (2021-07-28)\n\n### Fixed (1 change)\n\n- [Don\'t ask users to upgrade to PG 13 yet](gitlab-org/omnibus-gitlab@ea97a631cc97fd193f28f50a7a7510d0aa2fc8b1) ([merge request](gitlab-org/omnibus-gitlab!5493))\n\n## 14.1.0 (2021-07-21)\n\n### Added (6 changes)\n\n- [Nginx: further modernisation and standardisation](gitlab-org/omnibus-gitlab@aa320de20a678cd27c730d7cc123aaaa276b9367) ([merge request](gitlab-org/omnibus-gitlab!5461))\n- [Add PostgreSQL 13 binaries to Omnibus](gitlab-org/omnibus-gitlab@1400ba430e2abc4bd7f37fa08dc8276898564897) ([merge request](gitlab-org/omnibus-gitlab!5390))\n- [Allow nginx keepalive_time to be configured](gitlab-org/omnibus-gitlab@eb756b2708595d2f88075d62bd07c77ff84ef444) ([merge request](gitlab-org/omnibus-gitlab!5427))\n- [Add configuration for gitaly-backup path](gitlab-org/omnibus-gitlab@4e864e1243f689d0dcdb234fb903600331cfc1aa) ([merge request](gitlab-org/omnibus-gitlab!5419))\n- [Add basic auth settings for patroni rest api](gitlab-org/omnibus-gitlab@082964bc706ddc1566d95949982d12fb66df2637) ([merge request](gitlab-org/omnibus-gitlab!5403))\n- [Add role for Sidekiq](gitlab-org/omnibus-gitlab@9064ab1758476c19a9d7d1f7fb7b83ae75fdfc3d) ([merge request](gitlab-org/omnibus-gitlab!5365))\n\n### Fixed (3 changes)\n\n- [Centralize enabling and disabling of crond](gitlab-org/omnibus-gitlab@44375da451be5199a4412b322eeecfc8e0ebcebe) ([merge request](gitlab-org/omnibus-gitlab!5394))\n- [Exempt unicorn[\'svlogd_prefix\'] from deprecation check](gitlab-org/omnibus-gitlab@f1ff80d38a7398047524a13f384b8384bf0c0ea1) ([merge request](gitlab-org/omnibus-gitlab!5395))\n- [Fix preinstall upgrade message](gitlab-org/omnibus-gitlab@1ddf5a8af58068fa82c25d9017cf5890fde8264b) ([merge request](gitlab-org/omnibus-gitlab!5385))\n\n### Changed (11 changes)\n\n- [Ensure systemd under Docker is correctly detected](gitlab-org/omnibus-gitlab@cafe7cc4ba6e45c021c67c05f24ed0d5d69acfaf) ([merge request](gitlab-org/omnibus-gitlab!5446))\n- [Nginx: modernise TLS config](gitlab-org/omnibus-gitlab@ec870943213718e1c221bb17b1ae9db3b7a2e72f) ([merge request](gitlab-org/omnibus-gitlab!5461))\n- [Bump Container Registry to v3.5.2-gitlab](gitlab-org/omnibus-gitlab@2b9508557beafda31823d66a37ca49d65d9620ea) ([merge request](gitlab-org/omnibus-gitlab!5463))\n- [Update libjpeg-turbo 2.1.0](gitlab-org/omnibus-gitlab@75276e02b7d3ac56959862181268fcd0369985d8) ([merge request](gitlab-org/omnibus-gitlab!5451))\n- [Bump ffi to 1.15.3](gitlab-org/omnibus-gitlab@fc84c088c9867bafe26c5f39350c6a8129821dad) ([merge request](gitlab-org/omnibus-gitlab!5468))\n- [Update alertmanager to 0.22.2](gitlab-org/omnibus-gitlab@59542be7ba4155d6078421acfb95791211200798) ([merge request](gitlab-org/omnibus-gitlab!5301))\n- [Update chef-acme to 4.1.3](gitlab-org/omnibus-gitlab@2a87d1f2b112a39e08f649ce271ccaa83754079e) ([merge request](gitlab-org/omnibus-gitlab!5459))\n- [Update gitlab-exporter from 10.3.0 to 10.4.0](gitlab-org/omnibus-gitlab@259e16c2cc3951bfc7f64f278972d2becba8f271) ([merge request](gitlab-org/omnibus-gitlab!5324))\n- [Set 14.0 as minimum version permitted to upgrade from](gitlab-org/omnibus-gitlab@0ee66c3aa5ee3b14c409ba7a8e63a7ec4df295ed) ([merge request](gitlab-org/omnibus-gitlab!5398))\n- [Update grafana/grafana from 7.5.5 to 7.5.9](gitlab-org/omnibus-gitlab@ff6eca926c669d2431d5ae9225e9138ccf59920a) ([merge request](gitlab-org/omnibus-gitlab!5246))\n- [Update go-crond from 20.7.0 to 21.5.0](gitlab-org/omnibus-gitlab@6077e939274d21b6e8af1e1eb5191f74ff9aed1a) ([merge request](https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/5237))\n\n### Removed (3 changes)\n\n- [Update Praefect defaults in template](gitlab-org/omnibus-gitlab@f5c06c3e080a14660daf7b54fff1a0b0df17648a) ([merge request](gitlab-org/omnibus-gitlab!5375))\n- [Remove seat link setting](gitlab-org/omnibus-gitlab@c05c309c15b57fc3b306eb8ebaea537c95e4e48f) ([merge request](gitlab-org/omnibus-gitlab!5235))\n- [Remove git2go software module](gitlab-org/omnibus-gitlab@c7638374fecadb2e7bc2b06e4d9a06591b9be775) ([merge request](gitlab-org/omnibus-gitlab!5396))\n\n### Security (2 changes)\n\n- [Move gitlab-rails-rc to more secure location](gitlab-org/omnibus-gitlab@21ab274d8951f6a0fd3c5659e07bf364e5e0f50f) ([merge request](gitlab-org/omnibus-gitlab!5421))\n- [Add libxml2 security patches released as of May 2021](gitlab-org/omnibus-gitlab@371d600f0161ceab9e922068f86d9b93059392bb)\n\n### Other (2 changes)\n\n- [Space savings from stripping promethues build](gitlab-org/omnibus-gitlab@b3ba9e00b9b521eb6a56dbf2c672ab0ee86efc6f) ([merge request](gitlab-org/omnibus-gitlab!5443))\n- [Update Mattermost to 5.36.1](gitlab-org/omnibus-gitlab@ee8c540ae04ad493ba4acaa5d4e398057697a83f) ([merge request](gitlab-org/omnibus-gitlab!5439))\n\n### updated (2 changes)\n\n- [Update Patroni to 2.1.0](gitlab-org/omnibus-gitlab@dbb5f1de558cd0e3405a7e48f90cac046d26b992) ([merge request](gitlab-org/omnibus-gitlab!5440))\n- [Upgrade nginx to 1.20.1](gitlab-org/omnibus-gitlab@bceaa58eb380cbf20753454c6e60820a2845d1cf) ([merge request](gitlab-org/omnibus-gitlab!5417))\n\n### fix (1 change)\n\n- [Fix Praefect configuration template for session pooled connection](gitlab-org/omnibus-gitlab@1825c88764508a7efdccbf3eb70cb32e6bbb91d8) ([merge request](gitlab-org/omnibus-gitlab!5424))\n\n## 14.0.12 (2021-11-05)\n\n### Fixed (1 change)\n\n- [Conditionally generate public_attributes.json](gitlab-org/omnibus-gitlab@84109feb04962e6af2c42a50fd2a56d0c7ced334) ([merge request](gitlab-org/omnibus-gitlab!5712))\n\n## 14.0.11 (2021-09-23)\n\nNo changes.\n\n## 14.0.10 (2021-09-02)\n\nNo changes.\n\n## 14.0.9 (2021-08-31)\n\n### Security (2 changes)\n\n- [Patch NGINX against CVE-2021-23017](gitlab-org/security/omnibus-gitlab@b7a035067769fe6167f43d9ba13f316423a3523c) ([merge request](gitlab-org/security/omnibus-gitlab!142))\n- [Update cURL to 7.77.0](gitlab-org/security/omnibus-gitlab@fdc278a442075eb3ed70aeede942bb10eadc75a5) ([merge request](gitlab-org/security/omnibus-gitlab!135))\n\n## 14.0.8 (2021-08-25)\n\nNo changes.\n\n## 14.0.7 (2021-08-03)\n\n### Security (2 changes)\n\n- [Update libgcrypt to 1.9.3](gitlab-org/security/omnibus-gitlab@4923730ca28a0ad461988378c0d416850658277d) ([merge request](gitlab-org/security/omnibus-gitlab!132))\n- [Update Mattermost to 5.35.4 (GitLab 14.0)](gitlab-org/security/omnibus-gitlab@13f1bb4ed61d7f59479cfae473608167ff3042c6) ([merge request](gitlab-org/security/omnibus-gitlab!128))\n\n## 14.0.6 (2021-07-20)\n\nNo changes.\n\n## 14.0.5 (2021-07-08)\n\nNo changes.\n\n## 14.0.4 (2021-07-07)\n\nNo changes.\n\n## 14.0.3 (2021-07-06)\n\nNo changes.\n\n## 14.0.2 (2021-07-01)\n\n### Security (1 change)\n\n- [Add libxml2 security patches released as of May 2021](gitlab-org/security/omnibus-gitlab@47261456691197d7c4baa722af96eb3f02740bf5) ([merge request](gitlab-org/security/omnibus-gitlab!123))\n\n## 14.0.1 (2021-06-24)\n\n### Fixed (1 change)\n\n- [Exempt unicorn[\'svlogd_prefix\'] from deprecation check](gitlab-org/omnibus-gitlab@8aa7c341a4f7fdc24833daf66a7abcc3333b6128) ([merge request](gitlab-org/omnibus-gitlab!5404))\n\n## 14.0.0 (2021-06-21)\n\n### Added (8 changes)\n\n- [Prevent Docker upgrade to 14.0 if there data on legacy storage](gitlab-org/omnibus-gitlab@2609201ecaa54d4fe871802783e5b4c94d37ae54) ([merge request](gitlab-org/omnibus-gitlab!5320))\n- [Build gitaly-git2go from previous gitaly version](gitlab-org/omnibus-gitlab@f55201824a745751dbcb9ae571aedbdc3cb7089c) ([merge request](gitlab-org/omnibus-gitlab!5359))\n- [Add option to write initial root password to a file](gitlab-org/omnibus-gitlab@4d7757243ad8bfc6f6a449e174c5f5f626333a43) ([merge request](gitlab-org/omnibus-gitlab!5331))\n- [Add option to disable printing of root password during initialization](gitlab-org/omnibus-gitlab@7369fd762861082057e5e6165917c625f9c1d39e) ([merge request](gitlab-org/omnibus-gitlab!5331))\n- [Add Workhorse shutdown_timeout config setting](gitlab-org/omnibus-gitlab@3bf28cb060186b654fc639215c46df49634c745a) ([merge request](gitlab-org/omnibus-gitlab!5343))\n- [Prevent upgrade to 14.0 if there is data on legacy storage](gitlab-org/omnibus-gitlab@35b97442337616b1147159c6f556c8ddc39276db) ([merge request](gitlab-org/omnibus-gitlab!5311))\n- [Allow configuring redis instance for trace chunks](gitlab-org/omnibus-gitlab@8416adf9755ec5e63ac0e31595dfb049366ce4c7) ([merge request](gitlab-org/omnibus-gitlab!5316))\n- [Prevent upgrade to 14.0 if there is data on legacy storage](gitlab-org/omnibus-gitlab@ad4e6d1a3b72f2bd1549d32f7b905e4fca2ede6d) ([merge request](gitlab-org/omnibus-gitlab!5256))\n\n### Fixed (8 changes)\n\n- [Fix get-postgresql-primary command for Geo](gitlab-org/omnibus-gitlab@87e7496565d851d8d37f2c6a78ccf12f9ab8239e) ([merge request](gitlab-org/omnibus-gitlab!5382))\n- [Fix pitr_file to use the right path for ConsulError](gitlab-org/omnibus-gitlab@70216599a13ff7f8d83970d5888bd4503697f8d3) ([merge request](gitlab-org/omnibus-gitlab!5378))\n- [Update consul lookup in get-postgresql-primary](gitlab-org/omnibus-gitlab@13eec4ee7dadf36f1f84c74efd30440acfb946eb) ([merge request](gitlab-org/omnibus-gitlab!5369))\n- [Do not show Praefect deprecation if Praefect is disabled](gitlab-org/omnibus-gitlab@0a3fdc1c6a0df1b26eebbfed6808c1af1fdc218b) ([merge request](gitlab-org/omnibus-gitlab!5350))\n- [Adds default for prepared_statements config in Geo secondary db.yml](gitlab-org/omnibus-gitlab@8637044b1c9bb9ab019441629e6b2c59a6921e7c) ([merge request](gitlab-org/omnibus-gitlab!5347))\n- [Rotate mailroom logs](gitlab-org/omnibus-gitlab@47d3cebe00366181346e87797036f5cb314fbc42) ([merge request](gitlab-org/omnibus-gitlab!5319))\n- [Fix passing environment variables for migrations](gitlab-org/omnibus-gitlab@11ea132e7ca8ce61a8fca8af5837669388b4a179) ([merge request](gitlab-org/omnibus-gitlab!5310))\n- [Recreate SSL key if it does not match the config](gitlab-org/omnibus-gitlab@ee5b35f6278309c0c474b58ae71be70c7fba8b66) ([merge request](gitlab-org/omnibus-gitlab!5204))\n\n### Changed (17 changes)\n\n- [Use Busybox for editor in docker](gitlab-org/omnibus-gitlab@29b4f428f54b0534a556444b3bd26657f6b42b53) ([merge request](https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/4142))\n- [Upgrade Omnibus Builder to v1.6.0](gitlab-org/omnibus-gitlab@ade4aa24b943abbeac0cad3e37dcdd057c48a04e) ([merge request](gitlab-org/omnibus-gitlab!5374))\n- [Don\'t enable consul with `postgres_role`.](gitlab-org/omnibus-gitlab@af8b3b46967b14fe29a6e56d3d3ac5fe99715265) ([merge request](gitlab-org/omnibus-gitlab!5370))\n- [Upgrade postgresql-exporter to 0.9.0](gitlab-org/omnibus-gitlab@8bd053793c38c51c25d43a36696967e86e3822d0) ([merge request](gitlab-org/omnibus-gitlab!5364))\n- [Use consul if available when pausing Geo replication](gitlab-org/omnibus-gitlab@bfeef1355c7187c10313ca6c8ee32afb0a82debb) ([merge request](gitlab-org/omnibus-gitlab!5300))\n- [Upgrade docker-distribution-pruner to v0.2.0](gitlab-org/omnibus-gitlab@c75d2a948874d7f13597e5de08e92d557e96d65b) ([merge request](gitlab-org/omnibus-gitlab!5362))\n- [Bump Container Registry to v3.5.0-gitlab](gitlab-org/omnibus-gitlab@104115b39b085628d0931220a7c697a03fc5c4ab) ([merge request](gitlab-org/omnibus-gitlab!5354))\n- [Automatically generate initial root password if not set](gitlab-org/omnibus-gitlab@0af09d880118149e0d2e4ab6516679c489500489) ([merge request](gitlab-org/omnibus-gitlab!5331))\n- [Update consul to version 1.9.6](gitlab-org/omnibus-gitlab@4fde3786d470f112d9894177afb89c3009df0c77) ([merge request](gitlab-org/omnibus-gitlab!5344))\n- [change the default to `true` for deleting old backups](gitlab-org/omnibus-gitlab@99027bbefbd9fc53e3df2c77806d47fa79fa0c06) ([merge request](gitlab-org/omnibus-gitlab!5322))\n- [Expand configuration of Praefect direct database connection](gitlab-org/omnibus-gitlab@6931fc428aa0746071cbf3d8fc52d1ec623dbc8e) ([merge request](gitlab-org/omnibus-gitlab!5251))\n- [Bump redis to 6.0.14, drop custom patch](gitlab-org/omnibus-gitlab@238b13d1d78de96067e4ddd11fce5fc948fb31b1) ([merge request](gitlab-org/omnibus-gitlab!5327))\n- [Upgrade Patroni to version 2.0.2](gitlab-org/omnibus-gitlab@bf36ff4fc22f3137f4a7d0113e70e551aebe5f1f) ([merge request](gitlab-org/omnibus-gitlab!5314))\n- [Fix package-scripts version string](gitlab-org/omnibus-gitlab@8ee43bd70723f97467ac5da1be6e6fc94724960d) ([merge request](gitlab-org/omnibus-gitlab!5287))\n- [Remove sidekiq_cluster service and settings](gitlab-org/omnibus-gitlab@be7a659861002803e2bf8c0244083c2d0e822ace) ([merge request](gitlab-org/omnibus-gitlab!5291))\n- [Always use sidekiq-cluster binary for Sidekiq service](gitlab-org/omnibus-gitlab@9d754a15c2bc52d1823a5d7e68d075f424ce6504) ([merge request](gitlab-org/omnibus-gitlab!5291))\n- [Set 13.12 as minimum version required to upgrade from](gitlab-org/omnibus-gitlab@2e65138d645cb92c79682c8a83b504b81a29ec3c) ([merge request](gitlab-org/omnibus-gitlab!5259))\n\n### Removed (18 changes)\n\n- [Remove repmgr installation support](gitlab-org/omnibus-gitlab@69c19633b786962d1eb511631e6994ce393153e0) ([merge request](gitlab-org/omnibus-gitlab!5372))\n- [Remove support for Praefect election strategy](gitlab-org/omnibus-gitlab@60d4e3de2bce833b1fdcb46cd29dc332f7870465) ([merge request](gitlab-org/omnibus-gitlab!5351))\n- [Omnibus v14 requires PG12 or higher](gitlab-org/omnibus-gitlab@f8bb478bd2dfe1136820c74e27af1d3fe927b3e0) ([merge request](gitlab-org/omnibus-gitlab!5348))\n- [Remove deprecated `experimental_queue_selector` option for Sidekiq](gitlab-org/omnibus-gitlab@64fc0fcaaca69ec73ad6960bfe60080a9345831c) ([merge request](gitlab-org/omnibus-gitlab!5317))\n- [Remove deprecated `experimental_queue_selector` option for Sidekiq](gitlab-org/omnibus-gitlab@02a2435eb46a0c2a5bd0877c7a3b95f005de967d) ([merge request](gitlab-org/omnibus-gitlab!5306))\n- [Remove support for postgresql[\'data_dir\'] setting](gitlab-org/omnibus-gitlab@2a2669ed9c89e8a7010c551c58668c879c3ac03c) ([merge request](gitlab-org/omnibus-gitlab!5279))\n- [Remove deprecated `pgbouncer` public attributes](gitlab-org/omnibus-gitlab@1f954f5216694b1ce7812ba11d4c85eb4e23020a) ([merge request](gitlab-org/omnibus-gitlab!5299))\n- [Remove node[\'gitlab\'][\'pgbouncer-exporter\'] deprecation](gitlab-org/omnibus-gitlab@14182dc8c0b471f0e60d7c1ab9e6e8aa3aa04377) ([merge request](gitlab-org/omnibus-gitlab!5298))\n- [Remove Unicorn and related code](gitlab-org/omnibus-gitlab@b7566558b82396e262d7a8e8012365ad5fd3e872) ([merge request](gitlab-org/omnibus-gitlab!5295))\n- [Remove Deprecated Piwik settings](gitlab-org/omnibus-gitlab@1723f793e4dc9a62eb198a4a26a2c6f6f27ba3aa) ([merge request](gitlab-org/omnibus-gitlab!5277))\n- [Remove support for gitlab_pages[\'http_proxy\']](gitlab-org/omnibus-gitlab@9f66bf2fe2adaf1a0c3942b60a20606a3dc56460) ([merge request](gitlab-org/omnibus-gitlab!5278))\n- [Remove obsolete sidekiq[\'cluster\'] setting](gitlab-org/omnibus-gitlab@84fcf243d8f165bb3cfd1376243240fa5c5936a2) ([merge request](gitlab-org/omnibus-gitlab!5291))\n- [Remove support for client_output_buffer_limit_slave](gitlab-org/omnibus-gitlab@f1bdc7900d4a5ee1814ffc623ca0e5aece366af6) ([merge request](gitlab-org/omnibus-gitlab!5290))\n- [Remove support for redis_slave_role](gitlab-org/omnibus-gitlab@78177c126c3532cf16bd0effad7773d79e2e1bd9) ([merge request](gitlab-org/omnibus-gitlab!5290))\n- [Remove support for analytics_instance_statistics_count_job_trigger_worker_cron...](gitlab-org/omnibus-gitlab@697710c02dab6d4699662bcc51df55b5fce517e5) ([merge request](gitlab-org/omnibus-gitlab!5285))\n- [Remove support for nginx[\'gzip\'] in favor of nginx[\'gzip_enabled\']](gitlab-org/omnibus-gitlab@4d8bb0429fffe4fde027e170b21fbdf7cdef1c8e) ([merge request](gitlab-org/omnibus-gitlab!5284))\n- [Remove deprecated PostgreSQL FDW settings](gitlab-org/omnibus-gitlab@3f7a5ccd68be8391b565ec6a2a6d745161e3b923) ([merge request](gitlab-org/omnibus-gitlab!5255))\n- [Stop building packages for openSUSE Leap 15.1](gitlab-org/omnibus-gitlab@b8780946690f3dc56c2095aabc6be2ad4869decd) ([merge request](gitlab-org/omnibus-gitlab!5264))\n\n### Security (1 change)\n\n- [Update Mattermost to 5.35.3](gitlab-org/omnibus-gitlab@891ae9c1cfd338d9a0f4612379a916645b475f57) ([merge request](gitlab-org/omnibus-gitlab!5358))\n\n### Other (2 changes)\n\n- [Bump gitlab-exporter to 10.3.0](gitlab-org/omnibus-gitlab@ff48e6e54f1da086711ea85b586713816eb6a42d) ([merge request](gitlab-org/omnibus-gitlab!5315))\n- [Update Mattermost to 5.35.2](gitlab-org/omnibus-gitlab@c0592b2bb4be3ce0f61ae2e287410cf9128f6c19) ([merge request](gitlab-org/omnibus-gitlab!5329))\n\n## 13.12.15 (2021-11-03)\n\nNo changes.\n\n## 13.12.14 (2021-11-03)\n\nNo changes.\n\n## 13.12.13 (2021-10-29)\n\n### Fixed (1 change)\n\n- [Conditionally generate public_attributes.json](gitlab-org/omnibus-gitlab@466e0c357dae6f66d12a558364a2bc5b62bcf2d6) ([merge request](gitlab-org/omnibus-gitlab!5699))\n\n## 13.12.12 (2021-09-21)\n\nNo changes.\n\n## 13.12.11 (2021-09-02)\n\nNo changes.\n\n## 13.12.10 (2021-08-10)\n\nNo changes.\n\n## 13.12.9 (2021-08-03)\n\n### Security (2 changes)\n\n- [Update libgcrypt to 1.9.3](gitlab-org/security/omnibus-gitlab@42eede86a73071d83db9297d1ad15778f95b0a83) ([merge request](gitlab-org/security/omnibus-gitlab!133))\n- [Update Mattermost to 5.34.5 (GitLab 13.12)](gitlab-org/security/omnibus-gitlab@73c3c9eec3c1254f0f135728a013d9a02c2cdd1b) ([merge request](gitlab-org/security/omnibus-gitlab!129))\n\n## 13.12.8 (2021-07-07)\n\nNo changes.\n\n## 13.12.7 (2021-07-05)\n\nNo changes.\n\n## 13.12.6 (2021-07-01)\n\n### Security (2 changes)\n\n- [Add libxml2 security patches released as of May 2021](gitlab-org/security/omnibus-gitlab@93950f475de418e473732ef6e3ae4b7255b242ac) ([merge request](gitlab-org/security/omnibus-gitlab!124))\n- [Update Redis to 6.0.14](gitlab-org/security/omnibus-gitlab@5cc03fd6dffebdc2cf4053d5c6d54a5803d42b35) ([merge request](gitlab-org/security/omnibus-gitlab!120))\n\n## 13.12.5 (2021-06-21)\n\nNo changes.\n\n## 13.12.4 (2021-06-14)\n\n### Fixed (1 change)\n\n- [Do not show Praefect deprecation if Praefect is disabled](gitlab-org/omnibus-gitlab@a4101169ca38b46bed71f0e4546d87bc38f88fbb) ([merge request](gitlab-org/omnibus-gitlab!5368))\n\n### Security (1 change)\n\n- [Update Mattermost to 5.34.4](gitlab-org/omnibus-gitlab@0a44c28f79b5cade9be27942178f2c2e6b4c9f48) ([merge request](gitlab-org/omnibus-gitlab!5361))\n\n## 13.12.3 (2021-06-07)\n\nNo changes.\n\n## 13.12.2 (2021-06-01)\n\nNo changes.\n\n## 13.12.1 (2021-05-25)\n\nNo changes.\n\n## 13.12.0 (2021-05-21)\n\n### Added (8 changes)\n\n- [Add expired and expiring SSH key notification cron](gitlab-org/omnibus-gitlab@8c2740fb4ab9af542d40926e84d1077937348931) ([merge request](gitlab-org/omnibus-gitlab!5119))\n- [Add support to configure Sidekiq routing rules](gitlab-org/omnibus-gitlab@9b75bd4218196590b70c40184e8504c0c941c9f3) ([merge request](gitlab-org/omnibus-gitlab!5202))\n- [Add enable_disk flag for Pages](gitlab-org/omnibus-gitlab@7308676169f8d14173c38e470f0152d59a445363) ([merge request](gitlab-org/omnibus-gitlab!5242))\n- [Added environment support for ECS/Fargate](gitlab-org/omnibus-gitlab@e94fbc72f6c0a1ae4bf656624a1ee2584bf6befb) ([merge request](gitlab-org/omnibus-gitlab!5164))\n- [Add hide_server_tokens option for NGINX](gitlab-org/omnibus-gitlab@bd5b246d5885ea545865854c09c3aad76872db2b) ([merge request](gitlab-org/omnibus-gitlab!5208))\n- [Add support in Workhorse for X-Request-Id header propagation](gitlab-org/omnibus-gitlab@ae97ab2dc7cf90b53379ba891f501828fea98600) ([merge request](gitlab-org/omnibus-gitlab!5207))\n- [Toogle for workhorse keywatcher](gitlab-org/omnibus-gitlab@aa6dc87f520325037649a19bef38445afb62a4e4) ([merge request](gitlab-org/omnibus-gitlab!5173))\n- [Add support for SMTP connection pooling](gitlab-org/omnibus-gitlab@6bf6e1039d1ac33812235f73d4981b885db287b6) ([merge request](gitlab-org/omnibus-gitlab!5175))\n\n### Fixed (4 changes)\n\n- [Fix an error where reconfigure would swap the praefect election strategy](gitlab-org/omnibus-gitlab@3a2ca5eecaba0282f62cbbcad2dc1999856c86f2) ([merge request](gitlab-org/omnibus-gitlab!5260))\n- [Fix deprecation logic which could auto-enable services](gitlab-org/omnibus-gitlab@5798c379da43df0779e0baafe6540d645dc8c9a3) ([merge request](gitlab-org/omnibus-gitlab!5226))\n- [Fix pg-upgrade failing on mattermost only deploys](gitlab-org/omnibus-gitlab@1df80f6c68587fe9b5f2abe700a70b899976f82a) ([merge request](gitlab-org/omnibus-gitlab!5223))\n- [Fix crash in gitlab-exporter when running on Puma](gitlab-org/omnibus-gitlab@dd86f2bbbe9f9789cd1be6817a0b113df6002e26) ([merge request](gitlab-org/omnibus-gitlab!5181))\n\n### Changed (6 changes)\n\n- [Bump container registry to v3.4.1](gitlab-org/omnibus-gitlab@79f804d851e985b8b99cd3c56eae14115f4e877a) ([merge request](gitlab-org/omnibus-gitlab!5243))\n- [Upgrade mailroom to v0.0.12](gitlab-org/omnibus-gitlab@a49943237377d14078091cc74a5d0ad34b3278dc) ([merge request](gitlab-org/omnibus-gitlab!5250))\n- [Use backup_keep_time to prune configuration backups](gitlab-org/omnibus-gitlab@58cdb7aa419efb040863c9b2bdc9f4365fbaa8c4) ([merge request](gitlab-org/omnibus-gitlab!5102))\n- [Update acme-client from 2.0.7 to 2.0.8](gitlab-org/omnibus-gitlab@55ea32ba4eddcb130e7b83a452f88691c2734eb1) ([merge request](gitlab-org/omnibus-gitlab!5211))\n- [Include gzip directives in main nginx.conf only if enabled](gitlab-org/omnibus-gitlab@2624c960fca970eec4a6e31886596113bfd5f823) ([merge request](gitlab-org/omnibus-gitlab!5225))\n- [Update git vendor to gitlab](gitlab-org/omnibus-gitlab@7a62e8b5141287823a674a153033f580901718fb) ([merge request](gitlab-org/omnibus-gitlab!5184))\n\n### Deprecated (5 changes)\n\n- [Deprecate Praefect\'s failover_election_strategy config option](gitlab-org/omnibus-gitlab@0c00c13f1be742a82ea887e9f734cfcc719d2161) ([merge request](gitlab-org/omnibus-gitlab!5228))\n- [Deprecate configuring Gitaly nodes in virtual storage\'s config root](gitlab-org/omnibus-gitlab@4cb5946e9b55ad870412b07ac69aa7f1a229df2b) ([merge request](gitlab-org/omnibus-gitlab!5240))\n- [Deprecate nginx[\'gzip\'] setting in favor of nginx[\'gzip_enabled\']](gitlab-org/omnibus-gitlab@f204a982e850bb781c0fa0562f45cdf82ccdfc8f) ([merge request](gitlab-org/omnibus-gitlab!5225))\n- [Deprecate Unicorn settings](gitlab-org/omnibus-gitlab@da7349da515f895f9be5a2e7c0a9cff30f39410c) ([merge request](gitlab-org/omnibus-gitlab!5214))\n- [Deprecate Unicorn settings](gitlab-org/omnibus-gitlab@ecdf7ff19fc1f91b1274d71245cc7e59b93aff74) ([merge request](gitlab-org/omnibus-gitlab!5180))\n\n### Security (2 changes)\n\n- [Update Python to 3.7.10](gitlab-org/omnibus-gitlab@88e5c6a1e047ceb965299282e47b2b07b0f24dc4)\n- [Upgrade redis to 6.0.12](gitlab-org/omnibus-gitlab@0aac392e6315f0cf363fb0ec35f6fc711aee66bb)\n\n### Performance (1 change)\n\n- [Reuse `postgresql::sysctl` in geo-postgresql](gitlab-org/omnibus-gitlab@9ac7d69394559163356fb23af21bf830ef71bfbc) ([merge request](gitlab-org/omnibus-gitlab!5153))\n\n### Other (4 changes)\n\n- [Make `puma_config` `install_dir` resource attribute optional](gitlab-org/omnibus-gitlab@4908919a3e66429e7507fe5ad68a864a98ec8fb2) ([merge request](gitlab-org/omnibus-gitlab!5201))\n- [Update Mattermost to 5.34.2](gitlab-org/omnibus-gitlab@1e7d5463b598950472870b346cd44e9368596f66) ([merge request](gitlab-org/omnibus-gitlab!5206))\n- [Update libtiff from 4.2.0 to 4.3.0](gitlab-org/omnibus-gitlab@c4ebbb5116ddb6ce76cf61625a51b6ee6c4c2d26) ([merge request](gitlab-org/omnibus-gitlab!5189))\n- [Update grafana from 7.5.1 to 7.5.4](gitlab-org/omnibus-gitlab@a322670d961092b7bde707af2ba94af864b09216) ([merge request](gitlab-org/omnibus-gitlab!5178))\n\n## 13.11.7 (2021-07-07)\n\nNo changes.\n\n## 13.11.6 (2021-07-01)\n\n### Security (3 changes)\n\n- [Add libxml2 security patches released as of May 2021](gitlab-org/security/omnibus-gitlab@b9df8cc391c18657f697ddba1e451725096bdf79) ([merge request](gitlab-org/security/omnibus-gitlab!125))\n- [Update Redis to 6.0.14](gitlab-org/security/omnibus-gitlab@283f77dd10b91384a86edc7c0c872de0b44e2c0c) ([merge request](gitlab-org/security/omnibus-gitlab!121))\n- [Update Mattermost to 5.33.5](gitlab-org/security/omnibus-gitlab@06a53e3a307d22d851468f63dfc7ffaeb4a9ad10) ([merge request](gitlab-org/security/omnibus-gitlab!118))\n\n## 13.11.5 (2021-06-01)\n\nNo changes.\n\n## 13.11.4 (2021-05-14)\n\nNo changes.\n\n## 13.11.3 (2021-04-30)\n\nNo changes.\n\n## 13.11.2 (2021-04-27)\n\n### Security (2 changes)\n\n- [Update Python to 3.7.10](gitlab-org/security/omnibus-gitlab@a2cf223f65bc6877e811fd745c40a1f5152e4dbc) ([merge request](gitlab-org/security/omnibus-gitlab!109))\n- [Upgrade redis to 6.0.12](gitlab-org/security/omnibus-gitlab@94962afe65714eb8bb8c6ecf8a0c42907b12a4eb) ([merge request](gitlab-org/security/omnibus-gitlab!108))\n\n## 13.11.1+ee.0 (2021-04-22)\n\nNo changes.\n\n## 13.11.0+ee.0 (2021-04-21)\n\n### Added (9 changes)\n\n- [Add in-product marketing emails cron worker](gitlab-org/omnibus-gitlab@3930fad0ec906d6a61b44f1470f2638542faff17) ([merge request](gitlab-org/omnibus-gitlab!5096))\n- [Allow config for geo_secondary_usage_data_cron](gitlab-org/omnibus-gitlab@92026ace7583a0563682b8a27e18506248b23e75) ([merge request](gitlab-org/omnibus-gitlab!5165))\n- [Add summarized gitaly apdex for usage ping](gitlab-org/omnibus-gitlab@bc8880331a03dad963461045f0b1b86a55e3802e) ([merge request](gitlab-org/omnibus-gitlab!5148))\n- [Added new local_store config for Pages](gitlab-org/omnibus-gitlab@09801f4a99709074d7c19543c6c9b66805c0218a) ([merge request](gitlab-org/omnibus-gitlab!5058))\n- [Render Gitaly pack_objects_cache settings](gitlab-org/omnibus-gitlab@4d20f64edb46fe3a69f71bc5310e63480601337e) ([merge request](gitlab-org/omnibus-gitlab!5120))\n- [Build openSUSE Leap 15.2 packages](gitlab-org/omnibus-gitlab@6868ce60edfcc883f769154e1761293623bfce4a) ([merge request](gitlab-org/omnibus-gitlab!5134))\n- [Use git provided by Gitaly](gitlab-org/omnibus-gitlab@d7db53d06f149a0aa34d982edc034e62837596f3) ([merge request](gitlab-org/omnibus-gitlab!5113))\n- [Gitaly default maintenance override](gitlab-org/omnibus-gitlab@13de4d226be5de0b29a596e9a1fef076a2a9e3c6) ([merge request](gitlab-org/omnibus-gitlab!5089))\n- [Add net-protocol BSD-2 license](gitlab-org/omnibus-gitlab@baa4f138e03bf9ed3d74666a3ba98fe1b3a75c5a) ([merge request](gitlab-org/omnibus-gitlab!5118))\n\n### Fixed (7 changes)\n\n- [Fix grafana for RPi](gitlab-org/omnibus-gitlab@6c460d41a15737f5ebd13ebf250827a38eec963e) ([merge request](gitlab-org/omnibus-gitlab!5162))\n- [Update AWS Marketplace Release code to match new API requirements](gitlab-org/omnibus-gitlab@9cffb5bd967bf32dc57437e8e09c3406c8398f38) ([merge request](gitlab-org/omnibus-gitlab!5146))\n- [Run AWS jobs on both CE and EE non-RC-or-auto-deploy tags](gitlab-org/omnibus-gitlab@cf4b73b40d5634b8d7fad13d89b5abde2e749e18) ([merge request](gitlab-org/omnibus-gitlab!5147))\n- [Update gitlab-exporter to 10.1.0 to avoid query failures](gitlab-org/omnibus-gitlab@301afe78fc9e6620d5eb4578be62d1d161ba9639) ([merge request](gitlab-org/omnibus-gitlab!5123))\n- [Use specified key size for self-signed certificate also](gitlab-org/omnibus-gitlab@fad9c0441b309cf1aa1ae5911d1039fd62c4614d) ([merge request](gitlab-org/omnibus-gitlab!5083))\n- [Fix use_http2 & redirect_http GitLab Pages settings](gitlab-org/omnibus-gitlab@5afa8c3ed302f78e0688b4ffcda123f9c113aa42) ([merge request](gitlab-org/omnibus-gitlab!5116))\n- [Update Gitaly log permissions in Docker image](gitlab-org/omnibus-gitlab@cd0d3666f8d0a6503466f91847029a02afb3e209) ([merge request](https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/5117))\n\n### Changed (6 changes)\n\n- [Change devops adoption update to be weekly](gitlab-org/omnibus-gitlab@abbd439e1c64cee4637cd9bf6623caf5ed3ec898) ([merge request](gitlab-org/omnibus-gitlab!5142))\n- [Upgrade OpenSSL to 1.1.1k](gitlab-org/omnibus-gitlab@fadd066fcb28c14e86440640629648413bd18e85) ([merge request](gitlab-org/omnibus-gitlab!5140))\n- [Add mail_room as a separate Gem dependency](gitlab-org/omnibus-gitlab@7926d212f199bff8ed3702be06b8adcabb3463be) ([merge request](gitlab-org/omnibus-gitlab!5122))\n- [Disable statement timeout while running analyze for pg-upgrade](gitlab-org/omnibus-gitlab@1b0c2ce3a1e780df2467ab4c4770d0cda38a2be3) ([merge request](gitlab-org/omnibus-gitlab!5121))\n- [Bump container registry version to v3.2.1](gitlab-org/omnibus-gitlab@9b0da5a1c51e4bfe186a7dbcd370dac9ed1d9977) ([merge request](gitlab-org/omnibus-gitlab!5111))\n- [Bump Container Registry to v3.2.0-gitlab](gitlab-org/omnibus-gitlab@e852191df15ce4d49fb931fd14a9a8ad253e2589) ([merge request](gitlab-org/omnibus-gitlab!5097))\n\n### Deprecated (1 change)\n\n- [Add deprecation warning for openSUSE Leap 15.1](gitlab-org/omnibus-gitlab@04deb3c05eb489d342073b8d43b20f016abb88a9) ([merge request](gitlab-org/omnibus-gitlab!5135))\n\n### Security (3 changes)\n\n- [Only allow exiftool to process JPEG and TIFF files](gitlab-org/omnibus-gitlab@e52dc79d56bf7673c417a9aab8887222891958ae)\n- [Bump PostgreSQL versions to 11.11 and 12.6](gitlab-org/omnibus-gitlab@363a4d13f830ae8e7939c018f28a8db637d05e87)\n- [Update GraphicsMagick to 1.3.36](gitlab-org/omnibus-gitlab@8548cb9e419d91c526376ecf0bb988ecc32753b5) ([merge request](gitlab-org/omnibus-gitlab!5075))\n\n### Performance (1 change)\n\n- [Backport BLOCKED_MODULE performance fix from Redis unstable](gitlab-org/omnibus-gitlab@a9de7c8fe3a45d7f6a12271dda3b2524e6004afc) ([merge request](gitlab-org/omnibus-gitlab!5125))\n\n### Other (2 changes)\n\n- [Update grafana from 7.4.2 to 7.5.1](gitlab-org/omnibus-gitlab@f24acaa0eda025c8a2982770b1a012775a2e1ecc) ([merge request](gitlab-org/omnibus-gitlab!5041))\n- [Update Mattermost to 5.33.3](gitlab-org/omnibus-gitlab@5ea328d92881bfc991582bf83bb3aba2a248aaad) ([merge request](gitlab-org/omnibus-gitlab!5151))\n\n## 13.10.5 (2021-06-01)\n\nNo changes.\n\n## 13.10.4 (2021-04-27)\n\n### Security (2 changes)\n\n- [Update Python to 3.7.10](gitlab-org/security/omnibus-gitlab@f893a4a8369c8d9ce077e71a3aec756f9b5aac47) ([merge request](gitlab-org/security/omnibus-gitlab!106))\n- [Upgrade redis to 6.0.12](gitlab-org/security/omnibus-gitlab@b286c6ed65dfc1cac8c1d04545b610e8d205469b) ([merge request](gitlab-org/security/omnibus-gitlab!103))\n\n## 13.10.3 (2021-04-13)\n\n### Security (1 change)\n\n- Only allow exiftool to process JPEG and TIFF files.\n\n### Fixed (1 change)\n\n- Update AWS Marketplace Release code to match new API requirements. !5146\n\n\n## 13.10.2 (2021-04-01)\n\n### Fixed (1 change)\n\n- Update gitlab-exporter to avoid query failures. !5123\n\n\n## 13.10.1 (2021-03-31)\n\n### Security (1 change)\n\n- Bump PostgreSQL versions to 11.11 and 12.6.\n\n\n## 13.10.0 (2021-03-22)\n\n### Removed (2 changes)\n\n- Drop unused awesomeprint gem. !5023\n- Remove upgrade survey. !5045\n\n### Fixed (5 changes, 1 of them is from the community)\n\n- gitlab-redis-cli: fix authentication with unquoted values. !5010\n- Ensure that pg_basebackup will not ask for password. !5012\n- Geo - Fix command to work with Patroni. !5033\n- Fix postgresql[\'dir\'] references in geo commands. !5061\n- Fix gitlab pages on alternate port. !5070 (Lee Tickett @leetickett)\n\n### Deprecated (1 change)\n\n- Deprecate gitlab_pages[\'domain_config_source\']. !5079\n\n### Changed (10 changes, 1 of them is from the community)\n\n- Add Grafana reporting option. !5000\n- Update monitoring components. !5013\n- Add internal and external URL config for KAS. !5016\n- Add member option for command. !5025\n- Update the package metadata vendor name to be GitLab, Inc. !5027\n- Set permissions on assets that were copied into the container. !5036 (Edison Hanchell)\n- Set Grafana auth scope based on allowed groups. !5038\n- Bump Container Registry to v3.1.0-gitlab. !5054\n- Use sha256 for signing RPM packages. !5072\n- Remove recommended Pages max_connections limit. !5078\n\n### Added (6 changes, 2 of them are from the community)\n\n- Added Debian 10 ARM64 builds. !5018\n- Add GitLab Pages propagate-correlation-id configuration parameter. !5043 (Ercan Ucan)\n- Allow custom smtp configuration for grafana in omnibus-gitlab. !5047 (msschl)\n- Expose Rails allowed_hosts setting in gitlab.rb. !5057\n- Allow gitlab build remote overrides from the environment. !5067\n- Add GitLab Pages cache configuration settings. !5084\n\n### Other (7 changes, 2 of them are from the community)\n\n- Add user_status_cleanup_batch cronjob. !5009\n- Rename instance statistics count worker. !5021\n- Explicitly set group for GitLab data directories. !5090 (Ben Bodenmiller (@bbodenmiller))\n- Use builders with updated Go version. !5092\n- Enable `nakayoshi_fork` by default.\n- Update Mattermost to 5.32.1.\n- Remove apt-transport-https as apt natively support https. (Simon Deziel)\n\n\n## 13.9.7 (2021-04-27)\n\n### Security (2 changes)\n\n- [Update Python to 3.7.10](gitlab-org/security/omnibus-gitlab@ceab316d499057d89e63524e3f368dda8622eb79) ([merge request](gitlab-org/security/omnibus-gitlab!107))\n- [Upgrade redis to 6.0.12](gitlab-org/security/omnibus-gitlab@54d594a01573ba5fbff173b0395e9e394373192a) ([merge request](gitlab-org/security/omnibus-gitlab!104))\n\n## 13.9.6 (2021-04-13)\n\n### Security (1 change)\n\n- Only allow exiftool to process JPEG and TIFF files.\n\n### Fixed (1 change)\n\n- Update AWS Marketplace Release code to match new API requirements. !5146\n\n\n## 13.9.5 (2021-03-31)\n\n### Security (2 changes)\n\n- Update openssl from 1i to 1j.\n- Bump PostgreSQL versions to 11.11 and 12.6.\n\n\n## 13.9.4 (2021-03-17)\n\n- No changes.\n\n## 13.9.3 (2021-03-08)\n\n- No changes.\n\n## 13.9.2 (2021-03-04)\n\n- No changes.\n\n## 13.9.1 (2021-02-23)\n\n### Fixed (1 change)\n\n- Ensure Marketplace AMIs have licenses embedded. !5031\n\n\n## 13.9.0 (2021-02-22)\n\n### Security (1 change)\n\n- Add HTTP header to prevent content sniffing in /assets/* directory.\n\n### Fixed (2 changes, 1 of them is from the community)\n\n- Reconfigure nolonger errors in a FIPS environment. !4932\n- configure sshd and git account so that pam is not used any longer in docker. !4953 (Fnordpol)\n\n### Deprecated (2 changes)\n\n- Add warning message to migration nodes for PG verisons older than 12. !4918\n- Deprecate support for Ubuntu 16.04. !5006\n\n### Changed (7 changes)\n\n- Update libtiff to 4.2.0. !4859\n- Make GitLab Docker image and AWS AMIs use Ubuntu 20.04 packages. !4876\n- Raise warning if node attribute file can\'t be found. !4894\n- Update logrotate to 3.18.0. !4902\n- Upgrade Redis to 6.0.10. !4930\n- Bump Container Registry to v3.0.0-gitlab. !4962\n- Add redis config for gitlab-kas. !4974\n\n### Performance (3 changes)\n\n- Bump gitlab-exporter to 10.0.0, use jemalloc allocator. !4922\n- Add Git refs performance patches. !4977\n- Tune Ruby GC for gitlab-exporter. !4987\n\n### Added (6 changes)\n\n- Add application settings cache expiry to gitlab.rb. !4938\n- Emit Ruby Prometheus metrics for gitlab-exporter. !4958\n- Add flag to disable kernel parameter modification. !4967\n- Add matomo_disable_cookies setting. !4979\n- Add default replication factor configuration option to Praefect. !4988\n- Patch Ruby 2.7 with counting memory allocations.\n\n### Other (4 changes, 2 of them are from the community)\n\n- Compile workhorse as part of gitlab-rails. !4829\n- Remove Bundler 1.17.3 bundling. !4903 (Takuya Noguchi)\n- Bump Grafana version to 7.3.7. !4933\n- Update Mattermost to 5.31.1. !5003 (Harrison Healey)\n\n\n## 13.8.8 (2021-04-13)\n\n### Security (1 change)\n\n- Only allow exiftool to process JPEG and TIFF files.\n\n\n## 13.8.7 (2021-03-31)\n\n### Security (2 changes)\n\n- Update openssl from 1i to 1j.\n- Bump PostgreSQL versions to 11.11 and 12.6.\n\n\n## 13.8.6 (2021-03-17)\n\n- No changes.\n\n## 13.8.5 (2021-03-04)\n\n- No changes.\n\n## 13.8.4 (2021-02-11)\n\n- No changes.\n\n## 13.8.3 (2021-02-05)\n\n### Fixed (1 change)\n\n- Fix selinux nil error when workhorse is set to use tcp. !4978\n\n\n## 13.8.2 (2021-02-01)\n\n### Security (2 changes)\n\n- Add patch for libxml2 CVE-2019-20388,CVE-2020-7595.\n- Update PG11 and PG12 minor versions.\n\n\n## 13.8.1 (2021-01-26)\n\n### Fixed (1 change)\n\n- Skip pages auth settings when access control is disabled. !4952\n\n\n## 13.8.0 (2021-01-22)\n\n### Security (1 change)\n\n- Update OpenSSL to 1.1.1i. !4830\n\n### Removed (2 changes)\n\n- Remove `process_*` metrics from probes config. !4853\n- Remove `git_process` metrics probes. !4863\n\n### Fixed (4 changes)\n\n- Patroni switchover and failover commands do not ask for user confirmation. !4909\n- Fix https and custom domains pages settings. !4919\n- Ensure EE services are considered disabled when on CE. !4927\n- Safely lookup PostgreSQL parameters in Patroni settings. !4928\n\n### Deprecated (1 change)\n\n- Deprecate node[\'gitlab\'][\'pgbouncer-exporter\'] in favor of node[\'monitoring\'][\'pgbouncer-exporter\']. !4766\n\n### Changed (10 changes)\n\n- Update logrotate to 3.17.0. !4432\n- Print PG11 deprecation notice. !4706\n- Update consul to 1.6.10. !4789\n- Update configs for Puma 5.1.0. !4803\n- Generate Pages access control secrets only if access control is enabled. !4842\n- Auto-upgrade to PG12 for single node installs. !4848\n- Switch to enabling patroni by default with new patroni role. !4851\n- Use more PostgreSQL attributes for Patroni parameters. !4857\n- Add setting to change Rack server used for gitlab-exporter, bump it to 8.0.0. !4896\n- Bump Container Registry to v2.13.1-gitlab. !4913\n\n### Performance (1 change)\n\n- Use Puma `nakayoshi_fork`. !4914\n\n### Added (5 changes)\n\n- Add support for configuring Workhorse alternate root path. !4856\n- Add Patroni check-standby-leader command. !4864\n- Expose setting for encrypted settings path. !4884\n- Add logging to Let\'s Encrypt auto renewal cron job. !4911\n- Add package upgrade survey link. !4931\n\n### Other (6 changes, 3 of them are from the community)\n\n- Bump Patroni to version 2.0.1. !4820\n- Remove deprecated Prometheus settings from gitlab.yml. !4869\n- Bump Grafana to 7.3.6. !4873\n- Update Docker to 20.10 in our pipelines on CI/CD. !4878 (Takuya Noguchi)\n- Use Debian 10 as examples in development docs. !4883 (Takuya Noguchi)\n- Update Mattermost to 5.30.1. !4885 (hmhealey)\n\n\n## 13.7.9 (2021-03-17)\n\n- No changes.\n\n## 13.7.8 (2021-03-04)\n\n- No changes.\n\n## 13.7.7 (2021-02-11)\n\n- No changes.\n\n## 13.7.6 (2021-02-01)\n\n### Security (3 changes)\n\n- Update OpenSSL to 1.1.1i.\n- Update PG11 and PG12 minor versions.\n- Add patch for libxml2 CVE-2019-20388,CVE-2020-7595.\n\n\n## 13.7.5 (2021-01-25)\n\n### Fixed (2 changes)\n\n- Patroni switchover and failover commands do not ask for user confirmation. !4909\n- Fix https and custom domains pages settings. !4919\n\n\n## 13.7.4 (2021-01-13)\n\n- No changes.\n\n## 13.7.3 (2021-01-08)\n\n- No changes.\n\n## 13.7.2 (2021-01-07)\n\n### Security (2 changes)\n\n- Patch bundler to not use insecure temp directory as home.\n- Update curl to 7_74_0.\n\n\n## 13.7.1 (2020-12-23)\n\n### Fixed (1 change)\n\n- Ensure patroni and consul remain up during upgrade migrations. !4854\n\n\n## 13.7.0 (2020-12-22)\n\n### Fixed (8 changes)\n\n- Improve PostgreSQL service status check. !4672\n- Switch to gitlab:db:active for GEO replication. !4763\n- Make Build::Check.on_tag? silent. !4769\n- Update Promethes and Grafana. !4774\n- Fix shmmax for arm64. !4799\n- Increase jemalloc page size on arm64. !4800\n- Exclude windows .ruby files from gems. !4838\n- Fix incorrect deprecation warning for Sidekiq experimental queue selector. !4839\n\n### Deprecated (1 change)\n\n- Remove CentOS 6 Builds. !4782\n\n### Changed (11 changes, 1 of them is from the community)\n\n- Update OpenSSL to 1.1.1h. !4593\n- Rename Piwik config items after rebranding to Matomo. !4667 (Katrin Leinweber @katrinleinweber)\n- Update libjpeg-turbo to 2.0.6. !4765\n- Default to PostgreSQL 12 in fresh installs. !4777\n- Use the configurable PostgreSQL readiness check for Patroni. !4787\n- Bump Container Registry to v2.12.0-gitlab. !4796\n- PostgreSQL status helper should not fail fast. !4798\n- Always `pg_rewind` when Patroni primary resumes. !4810\n- Update gitlab-kas to v13.7.0. !4817\n- Generate warning on consul configuration change. !4828\n- Add install survey link to package installation. !4845\n\n### Performance (2 changes)\n\n- Update gitlab-exporter to v7.1.1. !4783\n- Adjust Postgres memory settings to current best practice. !4788\n\n### Added (11 changes)\n\n- Generate encrypted_settings_key_base rails secret. !4687\n- Patroni: reinitialize-replica command. !4692\n- Add centos 8 arm64 packages. !4743\n- Add Pages zip configuration flags. !4754\n- Allow PostgreSQL adapter tcp parameter tuning. !4776\n- Add /database_bloat endpoint for gitlab-exporter. !4785\n- Add support for configuring database application_name for Rails. !4808\n- Add options for Patroni pg_rewind assumptions. !4811\n- Add devops adoption worker settings. !4812\n- Add FortiToken Cloud configuration to gitlab.rb. !4824\n- Allow setting Gitaly cgroups configuration. !4837\n\n### Other (4 changes, 1 of them is from the community)\n\n- Bump consul version to 1.6.4. !3802\n- pages: Support for HTTPS over PROXYv2 protocol. !4760\n- Use the \'main\' branch for gitlab-shell nightlies. !4772\n- Update Mattermost to 5.29.1. !4807 (hmhealey)\n\n\n## 13.6.7 (2021-02-11)\n\n- No changes.\n\n## 13.6.6 (2021-02-01)\n\n### Security (3 changes)\n\n- Update OpenSSL to 1.1.1i.\n- Update PG11 and PG12 minor versions.\n- Add patch for libxml2 CVE-2019-20388,CVE-2020-7595.\n\n\n## 13.6.5 (2021-01-13)\n\n- No changes.\n\n## 13.6.4 (2021-01-07)\n\n### Security (2 changes)\n\n- Patch bundler to not use insecure temp directory as home.\n- Update curl to 7_74_0.\n\n\n## 13.6.3 (2020-12-10)\n\n### Fixed (1 change)\n\n- Fix Unicorn custom socket not being honored by Workhorse. !4778\n\n\n## 13.6.2 (2020-12-07)\n\n### Security (3 changes)\n\n- Update GnuPG to version 2.2.23.\n- Update libxml2 to version 2.9.10.\n- Update GraphicsMagick to 1.3.35 and patch PNG vulnerability.\n\n\n## 13.6.1 (2020-11-23)\n\n- No changes.\n\n## 13.6.0 (2020-11-22)\n\n### Security (1 change)\n\n- Set instance ID as root password on AMI instance startup. !4638\n\n### Fixed (6 changes)\n\n- Add support for custom database ports to pg_upgrade. !4665\n- Use PostgreSQL\'s default values to override Patroni dynamic config. !4677\n- Ensure pg_rewind can be used and won\'t fail for Patroni. !4689\n- Restart Gitaly when Ruby version changes. !4696\n- Use license_finder on GitLab Workhorse. !4705\n- Drop --with-cflags gRPC argument from Raspberry Pi build. !4711\n\n### Changed (4 changes)\n\n- logrotate defaults: set notifempty so empty files are not rotated. !3820\n- Support for alternative auth_types in pgbouncer. !4671\n- Mark Sidekiq queue selector as no longer experimental. !4714\n- Bump Container Registry to v2.11.0-gitlab. !4741\n\n### Performance (2 changes)\n\n- Update postgres_exporter metrics. !4586\n- Update Prometheus components. !4682\n\n### Added (7 changes)\n\n- Support gitlab-shell ssl_cert_dir config setting. !4379\n- Add google_tag_manager_id configuration. !4473\n- Allow setting Gitaly\'s git.bin_path. !4668\n- Upgrade Git to v2.29.0. !4690\n- Instruct more cleary how to proceed when old failed PostgreSQL upgrades exist on disk. !4694\n- Display root account username at the end of first reconfigure. !4712\n- Add role for GitLab Pages. !4740\n\n### Other (12 changes)\n\n- Upgrade Ruby to v2.7.2. !4632\n- Add Image Resizer config defaults. !4639\n- Clean up pg_query gem native extension directory. !4683\n- Clean up nokogumbo extension dir. !4698\n- Exclude exe files from Python libraries from the package. !4699\n- Ensure users are using Patroni before upgrading PG to 12. !4700\n- Bump development Ruby version to v2.7.2. !4703\n- Add note about backing up gitlab.rb in Docker. !4707\n- Update Grafana version to 7.3.1. !4722\n- Update GITLAB_KAS_VERSION to 13.6.1. !4742\n- Update rake to v13. !4745\n- Update Mattermost to 5.28.1.\n\n\n## 13.5.7 (2021-01-13)\n\n- No changes.\n\n## 13.5.6 (2021-01-07)\n\n### Security (2 changes)\n\n- Patch bundler to not use insecure temp directory as home.\n- Update curl to 7_74_0.\n\n\n## 13.5.5 (2020-12-07)\n\n### Security (3 changes)\n\n- Update GnuPG to version 2.2.23.\n- Update libxml2 to version 2.9.10.\n- Update GraphicsMagick to 1.3.35 and patch PNG vulnerability.\n\n\n## 13.5.4 (2020-11-13)\n\n- No changes.\n\n## 13.5.3 (2020-11-03)\n\n### Fixed (1 change)\n\n- Geo: Perform point-in-time recovery before promotion of secondary node. !4636\n\n### Performance (1 change)\n\n- Set net.core.somaxconn kernel parameter for Puma. !4688\n\n\n## 13.5.2 (2020-11-02)\n\n- No changes.\n\n## 13.5.1 (2020-10-22)\n\n### Fixed (1 change)\n\n- Ensure group is set before mode in storage_directory. !4661\n\n\n## 13.5.0 (2020-10-22)\n\n### Fixed (10 changes, 2 of them are from the community)\n\n- Configure pg-upgrade to work with patroni service. !4529\n- Exit non-zero during upgrade if reconfigure fails. !4591\n- Remove EE only note for packages in gitlab.yml.erb. !4594 (Ben Bodenmiller (@bbodenmiller))\n- Add selinux module for gitlab-shell. !4598\n- Support geo data dir for pg-upgrade. !4603\n- Allows special characters in Grafana admin password. !4606\n- Update workhorse auth socket when puma uses custom socket. !4620\n- Error during docker build on package download failure. !4641\n- Fix onsolidated form object storage configuration template. !4656\n- Fix libatomic package name for RHEL/CentOS. !4660 (Hi Key @HiKey)\n\n### Deprecated (1 change)\n\n- Add deprecation warning for CentOS 6. !4596\n\n### Changed (6 changes)\n\n- Update Chef from 15.12.22 to 15.14.0. !4537\n- Update unixcharles/acme-client from 2.0.6 to 2.0.7. !4581\n- Only send one Referrer-Policy header. !4584\n- Make Gitaly internal API calls go through Workhorse. !4592\n- Add support for cert authentication with PostgreSQL. !4618\n- Remove extraneous rbtrace files from build. !4647\n\n### Added (14 changes)\n\n- Allow configuring permanent replication slots in patroni. !4534\n- Allow bootstrapping patroni Standby Cluster. !4558\n- Gitaly daily maintenance config. !4572\n- Add gitlab-kas to omnibus. !4579\n- Praefect configuration for database with no proxy. !4583\n- Add wrappers for Patroni restart and reload commands. !4601\n- Add database reindexing cronjob. !4602\n- Add Kerberos LDAP mapping configuration. !4608\n- Allow promotion task to alter Geo node configuration. !4609\n- Support revert-pg-upgrade for Patroni cluster nodes. !4611\n- Specify display_version for sofware without proper version string. !4622\n- Add pages object storage settings. !4623\n- Expose wal_log_hints PostgreSQL setting. !4642\n- Add FortiAuthenticator configuration to gitlab.rb. !4645\n\n### Other (7 changes, 1 of them is from the community)\n\n- Remove Praefect primary config. !4559\n- Add member invitation reminder emails cron worker. !4582\n- Explicitly set group for repositories_storages and improve manage-storage-directories tests. !4589 (Ben Bodenmiller (@bbodenmiller))\n- Remove ee/spec from final package. !4621\n- Move email configuration section closer to SMTP settings in template. !4631\n- Reduce Ubuntu 20 ARM package size. !4637\n- Update Mattermost to 5.27.0.\n\n\n## 13.4.7 (2020-12-07)\n\n### Security (3 changes)\n\n- Update GnuPG to version 2.2.23.\n- Update libxml2 to version 2.9.10.\n- Update GraphicsMagick to 1.3.35 and patch PNG vulnerability.\n\n\n## 13.4.6 (2020-11-03)\n\n### Fixed (1 change)\n\n- Geo: Perform point-in-time recovery before promotion of secondary node. !4636\n\n\n## 13.4.5 (2020-11-02)\n\n- No changes.\n\n## 13.4.4 (2020-10-15)\n\n### Fixed (1 change)\n\n- Force install PrettyTable 0.7. !4628\n\n\n## 13.4.3 (2020-10-06)\n\n- No changes.\n\n## 13.4.2 (2020-10-01)\n\n### Security (1 change)\n\n- Add config for remove unaccepted member invites cron worker.\n\n\n## 13.4.1 (2020-09-24)\n\n- No changes.\n\n## 13.4.0 (2020-09-22)\n\n### Security (3 changes, 3 of them are from the community)\n\n- Update Python to 3.7.9. !4544 (Takuya Noguchi)\n- Update PostgreSQL 11 from 11.7 to 11.9. !4545 (Takuya Noguchi)\n- Update PostgreSQL 12 from 12.3 to 12.4. !4546 (Takuya Noguchi)\n\n### Fixed (6 changes, 2 of them are from the community)\n\n- Remove stub_status => on from nginx status on gitlab.rb config file. !4500 (Kelvin Jasperson)\n- fix: remove useless query string match and disable buffering for artifacts. !4516 (Chieh-Min Wang)\n- Reload PostgreSQL configuration when Patroni is enabled. !4548\n- Fix missing gitlab-geo.conf when initiating replication. !4556\n- Improve pgbouncer running? method. !4557\n- Move TLS below Prometheus in Praefect config. !4575\n\n### Changed (8 changes, 1 of them is from the community)\n\n- Allow Prometheus external_labels to be configured. !4494 (Chris Weyl @rsrchboy)\n- Update replicate-geo-database to support PostgreSQL 12. !4495\n- Make gitlab-shell go through Workhorse. !4498\n- Added ability to disable a previously enabled consul service. !4502\n- Geo: Add final confirmation for promotion to primary. !4523\n- Upgrade GnuPG related software. !4525\n- Add guidance for setting the timeout value for PG upgrades. !4563\n- Add option to enable Sidekiq Exporter logs. !4573\n\n### Performance (1 change)\n\n- Inline Gitaly gRPC recording rule. !4561\n\n### Added (6 changes)\n\n- Add auto_link_user setting. !4415\n- Add arm64 package for ubuntu 20.04. !4478\n- Add Azure Blob Storage configuration. !4505\n- Build openSUSE 15.1 arm64. !4535\n- Add PostgreSQL connect_timeout parameter. !4555\n- Add Praefect reconciliation config options. !4571\n\n### Other (7 changes)\n\n- Update Prometheus components. !4303\n- Expose Consul api_url to gitlab.yml. !4482\n- Add prometheus recording rule for database query Apdex. !4489\n- Cron worker settings for CI platform target metrics. !4526\n- Address TODOs for removing legacy attribute support. !4533\n- Add instance statistics cron worker. !4567\n- Update Mattermost to 5.26.2.\n\n\n## 13.3.9 (2020-11-02)\n\n- No changes.\n\n## 13.3.8 (2020-10-21)\n\n- No changes.\n\n## 13.3.6 (2020-09-14)\n\n- No changes.\n\n## 13.3.5 (2020-09-04)\n\n### Fixed (1 change)\n\n- Fix geo fdw deprecation message. !4528\n\n\n## 13.3.4 (2020-09-02)\n\n- No changes.\n\n## 13.3.3 (2020-09-02)\n\n- No changes.\n\n## 13.3.2 (2020-08-28)\n\n- No changes.\n\n## 13.3.1 (2020-08-25)\n\n- No changes.\n\n## 13.3.0 (2020-08-22)\n\n### Removed (3 changes)\n\n- Remove gitlab_rails[\'db_pool\'] setting. !4426\n- Does not refresh the foreign tables on the Geo secondary server. !4475\n- Remove Foreign Data Wrapper support for Geo. !4491\n\n### Fixed (6 changes)\n\n- Re-apply gitlab-pages SSL_CERT_DIR change. !4411\n- Recording rules: Fix potential CPU overcounting problem. !4420\n- Allow postgres-exporter to use local socket and Rails db_name. !4439\n- Revert Block requests to the grafana avatar endpoint. !4484\n- Add rhel 8 to helper and selinux files. !4501\n- libatomic is required on both armhf and aarch64.\n\n### Changed (4 changes)\n\n- Update chef dependencies to 15.15.22. !4384\n- Update Praefect defaults. !4416\n- Remove read-only config toggle from Praefect. !4462\n- Bump Container Registry to v2.10.1-gitlab. !4480\n\n### Added (9 changes)\n\n- Add PostgreSQL 12 support. !4399\n- Add support for ActionCable in-app mode. !4407\n- Upgrade Grafana Dashboard to v1.8.0. !4409\n- Add free space check to pre-flight for pg-upgrade. !4421\n- Add -domain-config-source for GitLab Pages. !4428\n- Add cron settings for expired PAT notification. !4465\n- Add support for configuring AWS server side encryption. !4469\n- Upgrade Git to v2.28.0. !4483\n- Support units other than milliseconds for the pg-upgrade timeout option. !4493\n\n### Other (5 changes)\n\n- Use S3-compatible remote directory for Terraform state storage. !4412\n- Record average CPU and memory utilization for Usage Ping. !4455\n- Use gcc v6.3 for CentOS 6 to build Rails C extensions. !4466\n- Use new CMake for building libgit2 as part of Gitaly build. !4468\n- Update Mattermost to 5.25.3.\n\n\n## 13.2.9 (2020-09-04)\n\n### Fixed (1 change)\n\n- Add rhel 8 to helper and selinux files. !4501\n\n\n## 13.2.8 (2020-09-02)\n\n- No changes.\n\n## 13.2.7 (2020-09-02)\n\n- No changes.\n\n## 13.2.6 (2020-08-18)\n\n- No changes.\n\n## 13.2.5 (2020-08-17)\n\n- No changes.\n\n## 13.2.4 (2020-08-11)\n\n### Fixed (1 change)\n\n- Fix Geo replication resuming. !4461\n\n\n## 13.2.3 (2020-08-05)\n\n- No changes.\n\n## 13.2.2 (2020-07-29)\n\n### Fixed (1 change)\n\n- Disable crond if LetsEncrypt disabled. !4434\n\n\n## 13.2.1 (2020-07-23)\n\n### Fixed (1 change)\n\n- Make actioncable recipe and control files match new runit requirement. !4419\n\n\n## 13.2.0 (2020-07-22)\n\n### Fixed (9 changes)\n\n- Grafana Server SHOULD have serve_from_sub_path set to true. !4160\n- Fix reconfigure failure with sidekiq_cluster config. !4337\n- Convert a standalone PostgreSQL to a Patroni member. !4350\n- Ensure we are properly restarting the unicorn service. !4354\n- Absolute SSL path should work for postgres recipe. !4356\n- Allow patroni to receive the term signal. !4366\n- Centralize upgrade version check in order to include docker upgrades. !4381\n- Merge Chef attributes more conservatively. !4394\n- Handle a down server when checking if a database is in standby. !4404\n\n### Changed (6 changes, 1 of them is from the community)\n\n- Geo: Check if replication/verification is up-to-date in promotion preflight checks. !4314\n- Add Commands to Pause/Resume Replication. !4331\n- Update alertmanager to 0.21.0. !4347\n- Allow backup-etc to follow symlinks. !4349 (mterhar)\n- Add --delete-untagged alias for registry-garbage-collect command. !4371\n- Geo: Remove confirm-removing-keys option from promote-to-primary-node command. !4403\n\n### Performance (1 change)\n\n- Lower gzip compression threshold. !4387\n\n### Added (7 changes)\n\n- Allow forced ssl on defined cidr_addresses. !3724\n- Add Patroni sub-commands to gitlab-ctl. !4286\n- Add Ubuntu 20.04 packaging jobs. !4344\n- Update Grafana Dashboards. !4348\n- Praefect: support of TLS. !4352\n- Support consolidated object storage configuration. !4368\n- Add get-postgresql-primary command to gitlab-ctl. !4383\n\n### Other (12 changes)\n\n- Upgrade Chef libraries to Chef 15. !4092\n- Add setting to specify external Prometheus address to the rails application. !4309\n- Geo: Add force mode to promote-to-primary-node command. !4321\n- Bump GitLab Exporter to 7.0.6. !4328\n- Update builder image to 0.0.65, to pick up license_finder update. !4338\n- Add recording rules to support Prometheus usage pings. !4343\n- Record application server type in Prometheus. !4374\n- Update webdevops/go-crond from 0.6.1 to 20.7.0. !4385\n- Update gitlab-org/gitlab-exporter from 7.0.6 to 7.1.0. !4391\n- Add deprecation message for Geo::MigratedLocalFilesCleanUpWorker config options. !4401\n- Update libjpeg-turbo/libjpeg-turbo from 2.0.4 to 2.0.5.\n- Update Mattermost to 5.24.2.\n\n\n## 13.1.10 (2020-09-02)\n\n- No changes.\n\n## 13.1.9 (2020-09-02)\n\n- No changes.\n\n## 13.1.8 (2020-08-18)\n\n- No changes.\n\n## 13.1.7 (2020-08-17)\n\n- No changes.\n\n## 13.1.6 (2020-08-05)\n\n- No changes.\n\n## 13.1.5 (2020-07-23)\n\n### Fixed (3 changes)\n\n- Fix reconfigure failure with sidekiq_cluster config. !4337\n- Centralize upgrade version check in order to include docker upgrades. !4381\n- Make actioncable recipe and control files match new runit requirement. !4419\n\n\n## 13.1.3 (2020-07-06)\n\n- No changes.\n\n## 13.1.2 (2020-07-01)\n\n### Security (1 change)\n\n- Update PCRE to version 8.44.\n\n\n## 13.1.1 (2020-06-23)\n\n### Fixed (1 change)\n\n- Manually disable copy_file_range() on RedHat kernels. !4346\n\n### Added (1 change)\n\n- Update to Grafana 7. !4297\n\n\n## 13.1.0 (2020-06-22)\n\n### Removed (1 change)\n\n- Praefect configuration: remove postgres_queue_enabled. !4267\n\n### Fixed (1 change)\n\n- Enable consul service for sidekiq-cluster. !4266\n\n### Changed (8 changes)\n\n- Move hook values to [hooks] and gitlab connection values to [gitlab] in gitaly.toml. !4243\n- Geo - Confirm if primary can be contacted after manual preflight checks. !4260\n- gitlab.rb example template should show puma default. !4268\n- Praefect: Enable SQL failover by default. !4271\n- Update gitlab-exporter to 7.0.4. !4272\n- Enable btree_gist postgres extension. !4274\n- Update parser gem version. !4275\n- Make it possible to disable Workhorse -authSocket argument. !4324\n\n### Added (6 changes)\n\n- Add Patroni to Omnibus. !3984\n- Add libtiff as a dependency. !4047\n- Add command promotion-preflight-checks to run before promoting to primary node. !4246\n- Allow enabling Praefect read-only mode through gitlab.rb. !4250\n- Upgrade Grafana dashboards to v1.6.0. !4278\n- Add capability to supply env vars to gitlab-pages. !4296\n\n### Other (8 changes)\n\n- Build and release packages for Raspberry Pi Buster. !3953\n- Add (optional) list of manual checks to promote_to_primary script. !4231\n- Update nginx to stable version 1.18.0. !4242\n- Stop deleting rack attack files. !4269\n- Mark 13.0 as minimum version required to upgrade to 13.x. !4270\n- Upgrade to Git 2.27.0. !4294\n- Use latest Ubuntu AMI as base for our AMIs. !4308\n- Update Mattermost to 5.23.1.\n\n\n## 13.0.14 (2020-08-18)\n\n- No changes.\n\n## 13.0.13 (2020-08-17)\n\n- No changes.\n\n## 13.0.12 (2020-08-05)\n\n- No changes.\n\n## 13.0.11 (2020-08-05)\n\nThis version has been skipped due to packaging problems.\n\n## 13.0.10 (2020-07-09)\n\n### Performance (1 change, 1 of them is from the community)\n\n- Run vacuumdb with 2 commands simultaneously. !4373 (Ben Bodenmiller @bbodenmiller)\n\n\n## 13.0.9 (2020-07-06)\n\n- No changes.\n\n## 13.0.8 (2020-07-01)\n\n### Security (1 change)\n\n- Update PCRE to version 8.44.\n\n\n## 13.0.7 (2020-06-25)\n\n### Fixed (2 changes)\n\n- Fix geo timeout issue with pg-upgrade. !4148\n- Manually disable copy_file_range() on RedHat kernels. !4346\n\n\n## 13.0.6 (2020-06-10)\n\n- No changes.\n\n## 13.0.5 (2020-06-04)\n\n- No changes.\n\n## 13.0.4 (2020-06-03)\n\n- No changes.\n\n## 13.0.3 (2020-05-29)\n\n- No changes.\n\n## 13.0.2 (2020-05-28)\n\n### Security (1 change)\n\n- Update Ruby to 2.6.6.\n\n### Fixed (2 changes)\n\n- Fix nginx duplicate MIME type warning. !4251\n- Do not run Grafana reset during docker startup. !4264\n\n### Added (1 change)\n\n- Update Praefect Grafana dashboards. !4241\n\n\n## 13.0.1 (2020-05-27)\n\n### Security (1 change)\n\n- Block requests to the grafana avatar endpoint.\n\n\n## 13.0.0 (2020-05-22)\n\n### Security (2 changes)\n\n- Update Ruby to 2.6.6.\n- Upgrade Openssl to 1.1.1.g.\n\n### Removed (6 changes)\n\n- Remove old settings for gitlab-monitor, pages auth-server, and other components. !4139\n- Remove support for protected paths throttling via Rack attack. !4149\n- Remove support for user attributes for Repmgr and Consul. !4153\n- Remove Grafana reset during upgrades. !4155\n- Remove PostgreSQL 9.6 and 10. !4186\n- Remove flag to set protected paths from gitlab.rb. !4207\n\n### Fixed (10 changes, 2 of them are from the community)\n\n- Remove crond job if Let\'s Encrypt autorenew is disabled. !4075\n- Install `less` to fix #5257. !4112 (Yannic Haupenthal)\n- Env dir content should not be displayed by chef. !4119\n- Fix geo timeout issue with pg-upgrade. !4148\n- Upgrade to pgbouncer_exporter v0.2.0. !4167\n- Update gitlab exporter to 7.0.2. !4178\n- Set gitlab_url from gitlab_rails attributes. !4225\n- Fix dbvacuum on pgupgrade. !4227\n- Bump version of `gitlab-exporter` gem. !4232\n- Disabling vts status module should keep gitlab-workhorse upstream. !4233 (Ovv)\n\n### Changed (4 changes, 1 of them is from the community)\n\n- Provide and implement a custom resource for restarting a daemon when the version changes. !3958 (Mitch Nielsen)\n- Enable Puma by default instead of Unicorn. !4141\n- List all existing roles as options in gitlab.rb. !4192\n- Bump Container Registry to v2.9.1-gitlab. !4197\n\n### Performance (5 changes)\n\n- Enable frame pointer in Ruby compile options. !4030\n- Disable RubyGems for Gitaly gitlab-shell hooks. !4103\n- upgrade redis to 5.0.9. !4126\n- Enable frame pointer in Git compile options. !4134\n- Update nginx gzip settings. !4200\n\n### Added (13 changes, 3 of them are from the community)\n\n- Add service_desk_email configuration. !3963\n- Add new extra CAs configuration file to smime email signing. !4085 (Diego Louzán)\n- Write gitlab shell configs to gitaly\'s config. !4110\n- Enable sidekiq-cluster by default. !4140\n- Add support for RSA private key for signing CI json web tokens. !4158\n- gitlab-pages: introduce internal_gitlab_server parameter. !4174\n- Add Prometheus rules for Puma. !4177\n- Copy AMIs to all regions we have access to. !4185\n- Add experimental support for ActionCable. !4204\n- Add expunge deleted messages option to mailroom. !4211 (Diego Louzán)\n- Add SSL_CERT_DIR to praefect\'s env. !4216\n- Allow enabling of grafana alerting in omnibus-gitlab. !4229 (msschl)\n- Update Praefect Grafana dashboards. !4241\n\n### Other (8 changes, 1 of them is from the community)\n\n- Make GitLab 12.10 the minimum version to upgrade to 13.0. !4111\n- Update links to PostgreSQL docs, point to version 11. !4150\n- Rename slave to replica in the omnibus-gitlab Redis configuration. !4168\n- Add troubleshooting doc for SMTP settings. !4170\n- Update documentation link and comments in Unleash settings. !4191\n- Patch Git to fix partial clone bug. !4217\n- Update CA certificate bundle. !4230\n- Update Mattermost to 5.22.2. (Harrison Healey)\n\n\n## 12.10.14 (2020-07-06)\n\n- No changes.\n\n## 12.10.13 (2020-07-01)\n\n### Security (1 change)\n\n- Update PCRE to version 8.44.\n\n\n## 12.10.12 (2020-06-24)\n\n### Fixed (2 changes)\n\n- Fix geo timeout issue with pg-upgrade. !4148\n- Manually disable copy_file_range() on RedHat kernels. !4346\n\n\n## 12.10.11 (2020-06-10)\n\n- No changes.\n\n## 12.10.8 (2020-05-28)\n\n### Fixed (1 change)\n\n- Fix dbvacuum on pgupgrade. !4227\n\n\n## 12.10.7 (2020-05-27)\n\n### Security (2 changes)\n\n- Block requests to the grafana avatar endpoint.\n- Update Ruby to 2.6.6.\n\n\n## 12.10.6 (2020-05-15)\n\n### Fixed (4 changes)\n\n- Fix tracking db revert from pg-upgrade. !4116\n- Ignore the PG_VERSION value if database is not enabled. !4136\n- Fix pg-upgrade wrong number of args error. !4189\n- Only print pg upgrade message when postgres is actually enabled. !4209\n\n### Changed (1 change)\n\n- Do not set a default value for client side database statement timeout. !4154\n\n\n## 12.10.6 (2020-05-15)\n\n- No changes.\n\n## 12.10.5 (2020-05-13)\n\n- No changes.\n\n## 12.10.4 (2020-05-05)\n\n- No changes.\n\n## 12.10.3 (2020-05-04)\n\n- No changes.\n\n## 12.10.2 (2020-04-30)\n\n### Security (2 changes)\n\n- Backport change for updating openssl/openssl from 1f to 1g.\n- Remove sensitive info from Docker image.\n\n\n## 12.10.1 (2020-04-24)\n\n### Fixed (4 changes)\n\n- Rhel/centos8 rpm changed the arg input to posttrans. !4093\n- Ensure the pg bin files fallback for geo-postgresql. !4118\n- Prevent gitlab upgrades from GitLab 11.x. !4138\n- Rename Repmgr to RepmgrHandler in HA pg-upgrade scenario. !4146\n\n### Deprecated (1 change)\n\n- Print a deprecation notice for postgres upgrades if <11. !4054\n\n\n## 12.10.0 (2020-04-22)\n\n### Security (1 change)\n\n- Update openssl/openssl from 1.1.1d to 1.1.1e. !4019\n\n### Fixed (5 changes)\n\n- Fixes sysctl error on reconfigure after reinstall. !3921\n- Fix pg-upgrade error during sysctl commands. !4080\n- Fix pg-upgrade error format exception. !4090\n- Fixed pg upgrade for separate geo tracking db. !4091\n- Fix repmgr failure during pg-upgrade. !4117\n\n### Deprecated (1 change)\n\n- Deprecate user attributes of consul and repmgr in favor of username. !3489\n\n### Changed (4 changes)\n\n- Upgrade Prometheus to 2.16.0. !3888\n- Bump Container Registry to v2.9.0-gitlab. !4071\n- Default to PG 11 for fresh installs. !4099\n- Set PG 11 as the default for pg-upgrade, and update automatically. !4115\n\n### Performance (2 changes, 1 of them is from the community)\n\n- Adjust Puma worker tuning. !4000\n- Add more optimized gitconfig. !4050 (Son Luong Ngoc <sluongng@gmail.com)\n\n### Added (12 changes)\n\n- Allow database timeout to be configured for the Rails app. !3844\n- Add storage setting for terraform state. !3983\n- Allow enabling experimental sidekiq-cluster. !4006\n- redis: introduce options for lazy freeing. !4008\n- Introduce gitlab-redis-cli. !4020\n- Include libjpeg-turbo to enable jpeg support in graphicsmagick. !4027\n- Add configuration for Praefect election strategy. !4048\n- Generate ActionCable configuration file. !4066\n- Adds gitlab-wrapper to praefect runit service to allow setting environment variables and graceful restarts. !4068\n- Update Grafana to include Praefect dashboards. !4084\n- Add Praefect config for enabling PostgreSQL-backed queue. !4096\n- Set server_name for smartcard NGINX server context. !4105\n\n### Other (11 changes, 1 of them is from the community)\n\n- Update logrotate version to 3.16.0. !3961\n- Use structure.sql instead of schema.rb. !3969\n- Update docutils from 0.13.1 to 0.16. !4017 (Takuya Noguchi)\n- Use Go 1.13.9 to build components. !4025\n- Build AMIs for all tags except RC and auto-deploy ones. !4036\n- Upgrade to Git 2.26.0. !4039\n- Update gitlab.rb.template with gitconfig defaults. !4049\n- Update gitlab-exporter from 6.1.0 to 7.0.1. !4065\n- Upgrade to Git 2.26.2. !4127\n- Upgrade Mattermost to 5.21.0.\n- Upgrade to Git 2.26.1.\n\n\n## 12.9.10 (2020-06-10)\n\n- No changes.\n\n## 12.9.9 (2020-06-03)\n\n- No changes.\n\n## 12.9.8 (2020-05-27)\n\n### Security (2 changes)\n\n- Block requests to the grafana avatar endpoint.\n- Update Ruby to 2.6.6.\n\n\n## 12.9.6 (2020-05-05)\n\n- No changes.\n\n## 12.9.5 (2020-04-30)\n\n### Security (2 changes)\n\n- Backport change for updating openssl/openssl from 1f to 1g.\n- Remove sensitive info from Docker image.\n\n### Other (1 change)\n\n- Upgrade to Git 2.24.3. !4128\n\n\n## 12.9.4 (2020-04-16)\n\n### Other (1 change)\n\n- Upgrade to Git 2.24.2.\n\n\n## 12.9.4 (2020-04-17)\n\n### Other (1 change)\n\n- Upgrade to Git 2.24.2.\n\n\n## 12.9.3 (2020-04-14)\n\n### Fixed (1 change)\n\n- Upgrade to OpenSSL v1.1.1f. !4087\n\n\n## 12.9.2 (2020-03-31)\n\n### Fixed (1 change)\n\n- Configures logrotate service for puma. !4024\n\n### Added (1 change)\n\n- Allow setting in seat_link_enabled in gitlab.rb. !4042\n\n### Other (1 change)\n\n- Update Mattermost to 5.20.2.\n\n\n## 12.9.1 (2020-03-26)\n\n### Security (1 change)\n\n- Bump pcre2 version to 10.34.\n\n\n## 12.9.0 (2020-03-22)\n\n### Fixed (5 changes, 1 of them is from the community)\n\n- Support running pg-upgrade on geo-postgres in isolation. !3924\n- Don\'t change group ownership of registry directory. !3931 (Henrik Christian Grove <grove@one.com>)\n- Fix fetch_assets script for branch names with -z. !3941\n- Upgrade pgbouncer_exporter to v0.1.3. !3982\n- Fixes case when Geo secondary db changes do not restart the dependent services. !4002\n\n### Changed (5 changes, 1 of them is from the community)\n\n- Restart GitLab Pages when new CA certs installed. !3842 (Ben Bodenmiller)\n- Make PostgreSQL log settings configurable. !3949\n- Move PostgreSQL runtime logging configuration to runtime.conf. !3955\n- Update chef-acme to 4.1.1. !3980\n- Bump Container Registry to v2.8.2-gitlab. !3996\n\n### Added (8 changes)\n\n- Build AMIs for GitLab Premium. !3841\n- Expose ssh_user as a distinct configuration option. !3925\n- Allow advertise_addr to flow to consul services. !3948\n- Add logrotate support for services not under gitlab namespace. !3952\n- Add the elastic bulk indexer cron worker. !3965\n- Geo: Symlink gitlab-pg-ctl command for Geo failover for HA. !3976\n- Add smartcard_client_certificate_required_host to gitlab.rb. !3985\n- Add failover_enabled top level option in praefect. !3987\n\n### Other (6 changes)\n\n- Add docs about PG 11 being available. !3936\n- Update gitlab-org/gitlab-exporter from 6.0.0 to 6.1.0. !3940\n- Adds documentation note about updating environment variables for Puma. !3944\n- Use the updated gitlab-depscan tool that allows whitelisting CVEs. !3947\n- Modify mail_room to output crash logs as json. !3960\n- Update Mattermost to 5.20.1.\n\n\n## 12.8.10 (2020-04-30)\n\n### Security (2 changes)\n\n- Backport change for updating openssl/openssl from 1f to 1g.\n- Remove sensitive info from Docker image.\n\n\n## 12.8.9 (2020-04-14)\n\n### Fixed (1 change)\n\n- Upgrade to OpenSSL v1.1.1f. !4088\n\n\n## 12.8.7 (2020-03-16)\n\n- No changes.\n\n## 12.8.6 (2020-03-11)\n\n- No changes.\n\n## 12.8.5\n\n- No changes.\n\n## 12.8.4\n\n- No changes.\n\n## 12.8.3\n\n- No changes.\n\n## 12.8.1\n\n- No changes.\n\n## 12.8.0\n\n### Security (2 changes, 1 of them is from the community)\n\n- Update GraphicsMagick to 1.3.34. !3905 (Takuya Noguchi)\n- Update postgresql 10.9->10.11, 9.6.14->9.6.16. Resolves CVE-2019-10208.\n\n### Fixed (2 changes)\n\n- Handle worker timeouts configured as strings. !3877\n- Fix prepared statements limit in database.yml. !3937\n\n### Deprecated (1 change)\n\n- Pass GitLab Pages secrets as environment variables. !3689\n\n### Changed (10 changes)\n\n- Update gitlab-exporter to 5.2.2. !3848\n- Bump registry to v2.7.6-gitlab from v2.7.4-gitlab. !3862\n- Bump registry to v2.7.7-gitlab from v2.7.6-gitlab. !3879\n- Update gitlab-org/gitlab-exporter from 5.2.2 to 6.0.0. !3906\n- Add support for PostgreSQL 11 to gitlab-ctl pg-upgrade. !3907\n- Check root before gitlab-ctl reconfigure. !3913\n- Don\'t restart and hup gitaly right after a fresh install. !3918\n- Format Unicorn timestamp logs in ISO8601.3 format. !3926\n- Bump Container Registry to v2.8.0-gitlab. !3929\n- Bump Container Registry to v2.8.1-gitlab. !3934\n\n### Added (9 changes)\n\n- Provide packages for CentOS/RHEL 8. !3748\n- Adding Vacuum Queue metrics to postgres-exporter.yaml. !3771\n- Support min_concurrency option for sidekiq-cluster. !3867\n- Add Pages -gitlab-client-http-timeout and -gitlab-client-jwt-expiry". !3886\n- Make GitLab GraphQL timeout configurable. !3916\n- Compile repmgr for PG 11. !3919\n- Support experimental_queue_selector option for sidekiq-cluster. !3920\n- Add setting for environment auto stop worker. !3927\n- Add notification on install for PG11. !3935\n\n### Other (6 changes)\n\n- Add PostgreSQL 11 as an alpha database version. !3858\n- Update monitoring components. !3874\n- Patch Git to get better pack reuse. !3896\n- Bump PostgreSQL versions to 9.6.17, 10.12, and 11.7. !3933\n- Upgrade Mattermost to 5.19.1.\n- Update Mattermost to 5.18.1.\n\n\n## 12.7.9 (2020-04-14)\n\n### Fixed (1 change)\n\n- Upgrade to OpenSSL v1.1.1f. !4089\n\n\n## 12.7.8 (2020-03-26)\n\n### Security (1 change)\n\n- Bump pcre2 version to 10.34.\n\n\n## 12.7.7\n\n### Security (1 change)\n\n- Update postgresql 10.9->10.12, 9.6.14->9.6.17. Resolves CVE-2019-10208.\n\n\n## 12.7.6\n\n- No changes.\n\n## 12.7.5\n\n### Fixed (1 change)\n\n- Fix prometheus duplicate rule. !3891\n\n\n## 12.7.4\n\n- No changes.\n\n## 12.7.3\n\n- No changes.\n\n## 12.7.2\n\n- No changes.\n\n## 12.7.1\n\n### Fixed (1 change)\n\n- Fetch external URL from EC2 only on fresh installations. !3878\n\n\n## 12.7.0\n\n### Security (1 change)\n\n- Update Mattermost to 5.17.3 (GitLab 12.6).\n\n### Fixed (1 change)\n\n- Check for puma when setting Geo primary. !3855\n\n### Changed (7 changes, 1 of them is from the community)\n\n- Disable Grafana Reporting & Update Check. !3793 (Stefan Schlesi)\n- Update exiftool to 11.70. !3801\n- Update gitlab-exporter to 5.1.0. !3806\n- Update jemalloc to 5.2.1. !3807\n- Update logrotate from r3-8-5 to 3.15.1. !3809\n- Use value provided as EXTERNAL_URL during installation/upgrade in gitlab.rb. !3828\n- Add grpc_latency_bucket config to praefect. !3854\n\n### Performance (2 changes)\n\n- Update Redis to 5.0.7 and redis-exporter to 1.3.4. !3392\n- Raise unicorn memory limits. !3853\n\n### Added (3 changes, 1 of them is from the community)\n\n- Add gitlab-ctl command to fetch Redis master connection details. !3811\n- Configure a maximum request duration for GitLab rails. !3830\n- Add Service Platform Metrics Grafana dashboard by updating grafana-dashboards to v1.3.0. !3843 (Ben Bodenmiller)\n\n### Other (6 changes)\n\n- Update https://git.code.sf.net/p/libpng/code from 1.6.35 to 1.6.37. !3800\n- Update rubygems/rubygems from 2.7.9 to 2.7.10. !3805\n- Update chef and chef-zero versions. !3810\n- Patch Git to get reused pack info. !3812\n- Collect NOTICE files of softwares under Apache license. !3821\n- Bump Ruby version to 2.6.5. !3827\n\n\n## 12.6.7\n\n- No changes.\n\n## 12.6.6\n\n- No changes.\n\n## 12.6.5\n\n### Security (1 change)\n\n- Update Mattermost to 5.17.3 (GitLab 12.6).\n\n\n## 12.6.4\n\n- No changes.\n\n## 12.6.3\n\n- No changes.\n\n## 12.6.2\n\n- No changes.\n\n## 12.6.1\n\n### Fixed (1 change)\n\n- Revert to passing Redis password as command line argument. !3816\n\n\n## 12.6.0\n\n### Removed (1 change)\n\n- Stop building packages for openSUSE 15.0. !3753\n\n### Fixed (10 changes, 2 of them are from the community)\n\n- Fix SELinux installation failures on CentOS 8. !3752\n- Grafana login should not require local PostgreSQL. !3761\n- Set Referrer-Policy for Mattermost to strict-origin-when-cross-origin, allow customization. !3763 (Florian Kaiser)\n- write pages template, when api_secret_key is defined. !3770 (Max Wittig)\n- Add rack_attack_admin_area_protected_paths_enabled setting. !3773\n- Use valid sslmode setting in postgres-exporter. !3777\n- Fix inability to disable Connection and Upgrade NGINX headers. !3781\n- Fix admin_email_worker_cron rendering in gitlab.yml. !3790\n- Use password if provided to detect running Redis version. !3796\n- Revert to passing Redis password as command line argument. !3816\n\n### Changed (1 change)\n\n- Allow multiple virtual storages in praefect config. !3754\n\n### Added (5 changes)\n\n- Add personal_access_tokens_expiring_worker configuration to gitlab.rb. !3679\n- Add incoming_email_log_file config. !3719\n- Add Praefect sentry configs. !3759\n- Show warning during reconfigure if version of running Redis instance is different than the installed one. !3787\n- Praefect: render database section in config.toml. !3791\n\n### Other (3 changes)\n\n- Upgrade to Git 2.24. !3768\n- Change Puma log format to JSON. !3785\n- Update Mattermost to 5.17.1.\n\n\n## 12.5.10\n\n- No changes.\n\n## 12.5.8\n\n### Security (1 change)\n\n- Update Mattermost to 5.16.5 (GitLab 12.5).\n\n\n## 12.5.7\n\n- No changes.\n\n## 12.5.5\n\n### Fixed (2 changes)\n\n- Fix unwanted Grafana resets during upgrades. !3772\n- Bump acme-client version to 2.0.5. !3782\n\n\n## 12.5.5\n\n- No changes.\n\n## 12.5.4\n\n### Security (1 change, 1 of them is from the community)\n\n- Upgrade git to security patch 2.22.2. (Marin Jankovski)\n\n\n## 12.5.3\n\n- No changes.\n\n## 12.5.2\n\n### Security (1 change)\n\n- Disable grafana metrics api by default and add option to enable it.\n\n\n## 12.5.1\n\n- No changes.\n\n## 12.5.0\n\n### Security (1 change)\n\n- Update Mattermost to 5.15.2.\n\n### Fixed (4 changes)\n\n- Build from Docker Distribution fork and update to v2.7.4-gitlab. !3686\n- Support alternative PG directories in pg-upgrade. !3701\n- Geo: Fix refresh foreign tables on reconfigure. !3728\n- Fix praefect prometheus configuration. !3731\n\n### Changed (4 changes)\n\n- Add new format for praefect storage node configuration. !3699\n- Make Puma/Unicorn exclusive. !3703\n- Add internal_socket_dir to gitaly config. !3711\n- Allow to specify `shutdown_blackout_seconds`. !3734\n\n### Added (6 changes)\n\n- Add settings for feature flags unleash client. !3681\n- Add gitlab-etc backup to pre-install. !3682\n- Add support for GitLab Pages authentication secret. !3705\n- Check for non-UTF8 locale during reconfigure. !3708\n- Make systemd unit ordering configurable. !3743\n- Enable registry using external_url when https is auto enabled. !3747\n\n### Other (6 changes)\n\n- Update Consul Version. !3400\n- Add logging directory default for gitlab shell in gitaly config.toml. !3680\n- Add prevent_ldap_sign_in option to gitlab.rb. !3692\n- Update instructions for adding setting to gitlab.yml. !3710\n- Refactor LetsEncrypt auto-enabling logic. !3712\n- Update Mattermost to 5.16.2.\n\n\n## 12.4.8\n\n- No changes.\n\n## 12.4.7\n\n- No changes.\n\n## 12.4.6\n\n### Security (1 change, 1 of them is from the community)\n\n- Upgrade git to security patch 2.22.2. (Marin Jankovski)\n\n\n## 12.4.4\n\n- No changes.\n\n## 12.4.3\n\n### Security (1 change)\n\n- Update Mattermost to 5.15.2.\n\n\n## 12.4.2\n\n- No changes.\n\n## 12.4.1\n\n- No changes.\n\n## 12.4.0\n\n### Security (2 changes)\n\n- Update openssl to 1.1.1d. !3674\n- Update Grafana version to 6.3.5.\n\n### Fixed (11 changes)\n\n- Nginx responds to health checks with correct content types. !3594\n- Fix pg-upgrade handling of secondary database nodes. !3631\n- Do not cleanup old gitlab-monitor directory if explicitly using it. !3634\n- Resolve "Reconfigure skips Geo DB migrations if Geo DB is not running on the same machine". !3635\n- Fix database replication bootstrap with `gitlab-ctl repmgr standby setup`. !3636\n- Ensure user\'s gitconfig contains system\'s core options. !3648\n- Warn when LD_LIBRARY_PATH env var is set. !3652\n- Add Rugged search path to Gitaly config. !3656\n- Use MD5 checksums in the registry\'s Google storage driver. !3660\n- Don\'t fail gitaly startup if setting ulimit fails. !3684\n- Upgrade PgBouncer to v1.12.0. !3691\n\n### Deprecated (2 changes)\n\n- Deprecates Protected Paths setting. !3597\n- Mark openSUSE 15.0 to be warned about during reconfigure. !3687\n\n### Changed (3 changes)\n\n- Update Geo zero downtime instructions. !3562\n- Add saturation recording rules to Prometheus. !3665\n- Add virtual_storage_name, auth to praefect. !3672\n\n### Added (6 changes, 2 of them are from the community)\n\n- Add skip-auto-backup flag to skip backup during upgrade. !3245 (Dany Jupille)\n- Add Praefect as a GitLab service. !3580\n- Allow setting of alertmanager global config. !3611\n- Update grafana-dashboards to v1.2.0. !3627 (Takuya Noguchi)\n- Add TasksMax setting to systemd unit file. !3649\n- Build packages for openSUSE 15.1. !3683\n\n### Other (5 changes)\n\n- Consult the gitlab-elasticsearch-indexer version from GitLab. !3276\n- Add core.fsyncObjectFiles as default git config. !3632\n- Use postgresql_config resource for postgresql configuration files. !3647\n- gitlab-shell: use make build instead of bin/compile. !3653\n- Update Mattermost to 5.15.\n\n\n## 12.3.9\n\n### Security (1 change, 1 of them is from the community)\n\n- Upgrade git to security patch 2.22.2. (Marin Jankovski)\n\n\n## 12.3.8\n\n### Security (2 changes)\n\n- Update Mattermost to 5.14.5 (GitLab 12.3).\n- Disable grafana metrics api by default and add option to enable it.\n\n\n## 12.3.7\n\n- No changes.\n\n## 12.3.4\n\n### Fixed (1 change)\n\n- Update postgresql-bin.json to be generated from a template. !3643\n\n\n## 12.3.3\n\n- No changes.\n\n## 12.3.2\n\n### Security (1 change)\n\n- Update Grafana version to 6.3.5.\n\n\n## 12.3.1\n\n- No changes.\n\n## 12.3.0\n\n### Security (2 changes)\n\n- Make logrotate perform operations not as root user.\n- Add documentation for configuring an asset proxy server.\n\n### Fixed (5 changes, 1 of them is from the community)\n\n- Wrap prometheus.listen_address value in quotes in the config/gitlab.yml file. !3561\n- Show errors when misspelled top-level config is used. !3563\n- Change download mirror for unzip software. !3602\n- Invoke die method from proper scope. !3604\n- Update Mattermost to 5.14.2. (Harrison Healey)\n\n### Changed (3 changes)\n\n- Clean up disabled services for service discovery for prometheus. !3506\n- Use file resource instead of using gitlab-keys. !3558\n- Removed non-gzipped files for sourcemaps to save on package size. !3592\n\n### Performance (1 change)\n\n- Fix slow fetches for repositories using object deduplication. !3559\n\n### Added (6 changes, 2 of them are from the community)\n\n- Add SMIME email notification settings. !3514 (Diego Louzán)\n- Add settings to specify SSL cert and key for DB server. !3529\n- Add option to allow some provider bypass two factor. !3543 (Dodocat)\n- [Geo]Configuration for Docker Registry Replication. !3549\n- Make gitaly open files ulimit configurable. !3560\n- Add smartcard_san_extensions to gitlab.rb. !3566\n\n### Other (8 changes, 1 of them is from the community)\n\n- Rename gitlab-monitor to gitlab-exporter. Service name, log directory, prometheus job names and more have been updated. !3517\n- Add backup of /etc/gitlab to upgrade process. !3518\n- Cleanup deprecated settings list. !3527\n- Update monitoring components. !3550\n- Regenerate database.ini if missing. !3555\n- Deprecate node[\'gitlab\'] monitoring attributes instead of removal. !3583\n- Update gitlab-elasticsearch-indexer to v1.3.0. !3587\n- Update Mattermost to 5.14. (Harrison Healey)\n\n\n## 12.2.12\n\n### Security (1 change, 1 of them is from the community)\n\n- Upgrade git to security patch 2.22.2. (Marin Jankovski)\n\n\n## 12.2.11\n\n### Security (1 change, 1 of them is from the community)\n\n- Upgrade git to security patch 2.22.2. (Marin Jankovski)\n\n\n## 12.2.10\n\n### Security (1 change, 1 of them is from the community)\n\n- Upgrade git to security patch 2.22.2. (Marin Jankovski)\n\n\n## 12.2.8\n\n- No changes.\n\n## 12.2.6\n\n### Security (1 change)\n\n- Update Grafana version to 6.3.5.\n\n\n## 12.2.5\n\n- No changes.\n\n## 12.2.4\n\n### Security (1 change, 1 of them is from the community)\n\n- Update Mattermost to 5.13.3 (GitLab 12.2). (Harrison Healey)\n\n\n## 12.2.3\n\n- No changes.\n\n## 12.2.2\n\n- No changes.\n\n## 12.2.1\n\n### Fixed (1 change)\n\n- Fix Error 500s when loading repositories with license files. !3542\n\n\n## 12.2.1\n\n### Security (2 changes)\n\n- Add documentation for configuring an asset proxy server.\n- Make logrotate perform operations not as root user.\n\n\n## 12.2.0\n\n### Security (5 changes, 1 of them is from the community)\n\n- Update nginx to 1.16.1. !3525\n- Rename unused redis commands by default. !3436\n- Update PostgreSQL to 9.6.14 and 10.9. !3492\n- Update GraphicsMagick to 1.3.33. !3494 (Takuya Noguchi)\n- Update nginx to 1.16.1. !3525\n- Rename Grafana directory as part of upgrade to invalidate user sessions.\n\n### Removed (1 change)\n\n- Stop building packages for openSUSE 42.3. !3469\n\n### Fixed (5 changes)\n\n- Validate runit can set ownership of config files. !3332\n- Use armv7 build of Grafana in RPi package. !3401\n- A new wrapper for backup and restore to change ownership of registry directory automatically. !3447\n- Clean up stale Redis instance config files. !3464\n- Typo in initial_license in gitlab.rb. !3497\n\n### Changed (5 changes, 1 of them is from the community)\n\n- Update nginx to version 1.16.0. !3442\n- Enable TLS v1.3 by default in NGINX. !3458\n- Cleanup unnecessary gem files in gitlab package. !3471\n- Support manually setting the db version for psql bin. !3485\n- Add default support of ECDSA https certificates in nginx. !3511 (ptymatt)\n\n### Performance (1 change)\n\n- Adjust unicorn worker CPU formula. !3473\n\n### Added (4 changes, 1 of them is from the community)\n\n- Build packages for Debian Buster. !3426\n- add option to define custom page headers. !3465 (Max Wittig)\n- Add support for Content Security Type. !3499\n- Bump the Git version to 2.22. !3502\n\n### Other (6 changes, 1 of them is from the community)\n\n- Upgrade rubocop to 0.69.0. !3473\n- Upgrade gitlab-monitor to 4.2.0. !3483\n- Attempt to upgrade the database in the docker image. !3515\n- Bump ohai version to 14.14.0. !3523\n- Update Mattermost to 5.13.2. (Harrison Healey)\n- Add perl dependency to SSL troubleshooting steps.\n\n\n## 12.1.17\n\n### Security (1 change, 1 of them is from the community)\n\n- Upgrade git to security patch 2.21.1. (Marin Jankovski)\n\n### Other (1 change)\n\n- Consult the gitlab-elasticsearch-indexer version from GitLab. !3663\n\n\n## 12.1.16\n\n- No changes.\n\n## 12.1.15\n\n### Security (1 change, 1 of them is from the community)\n\n- Upgrade git to security patch 2.21.1. (Marin Jankovski)\n\n### Other (1 change)\n\n- Consult the gitlab-elasticsearch-indexer version from GitLab. !3663\n\n\n## 12.1.14\n\n- No changes.\n\n## 12.1.13\n\n- No changes.\n\n## 12.1.12\n\n- No changes.\n\n## 12.1.11\n\n- No changes.\n\n## 12.1.10\n\n- No changes.\n\n## 12.1.10\n\n### Security (1 change)\n\n- Update Grafana version to 6.3.5.\n\n\n## 12.1.5\n\n### Security (1 change)\n\n- Automatically set an admin password for Grafana and disable basic authentication.\n\n\n## 12.1.4\n\n- No changes.\n\n## 12.1.3\n\n### Other (1 change)\n\n- Fix bzip2 location. !3448\n\n\n## 12.1.2\n\n- No changes.\n\n## 12.1.2\n\n- No changes.\n\n## 12.1.1\n\n- No changes.\n\n## 12.1.0\n\n### Security (1 change, 1 of them is from the community)\n\n- Update Mattermost to 5.11.1 (GitLab 12.0). (Harrison Healey)\n\n### Fixed (15 changes, 2 of them are from the community)\n\n- Auto-enable Let\'s Encrypt for certificate renewal. !3342\n- Use PostgreSQL username from node attribute file in gitlab-ctl command. !3352\n- gitaly: prometheus not working with tls enabled. !3353 (Roger Meier)\n- Support pg-upgrade on dbs with collate and ctype values that differ from each other. !3371\n- Properly check whether postgres is enabled when doing pg-upgrade. !3381\n- Bring back the option to use the authorized keyfile in docker. !3388\n- Get prometheus home directory from node attributes. !3395\n- Create the uploads_storage_path directory. !3396\n- Fix upgrade time calculation metric. !3397\n- Fix GitLab upgrades crashing when LetsEncrypt cert needs renewal. !3402\n- Set ALTERNATIVE_SOURCES for tests. !3412\n- Fix error with repmgr and PostgreSQL 9. !3417\n- Make Roles respect user specified configuration. !3423\n- Enable specifying --path in bundle install on Ruby docker images. !3432\n- Update Mattermost to 5.12.4. (Harrison Healey)\n\n### Deprecated (1 change)\n\n- Remove bundled MySQL client and related docs. !3382\n\n### Changed (5 changes)\n\n- Ensure we only grab the last line of stdout from rails runner. !3406\n- Set INSTALLATION_TYPE of Marketplace AMI to gitlab-aws-marketplace-ami. !3414\n- Add support for ACME v2. !3420\n- Run before_fork only once on boot for Unicorn.\n- Update redis_exporter to 1.0.3.\n\n### Added (8 changes, 1 of them is from the community)\n\n- Add recording rules for SLIs. !3335\n- Build packages for openSUSE 15.0. !3343\n- Add worker configuration for pages domain ssl renewal through Let\'s Encrypt. !3355\n- Add prometheus settings to gitlab.yml. !3383\n- Add a role for monitoring. !3404\n- Add smartcard_required_for_git_access to gitlab.rb. !3415\n- Add ability to set \'maxsize\' for logrotate configs. !3419\n- add option to enable sentry and to define dsn/environment for pages. !3424 (Roger Meier)\n\n### Other (7 changes, 2 of them are from the community)\n\n- Upgrade to OpenSSL 1.1.1c. !3069\n- Add GEO support to pg-upgrade. !3316\n- Use Go module vendoring for builds. !3337\n- Bump Chef related libraries to 14.x. !3344\n- Use Postgresql 10.7 instead of 10.7.0. !3387 (Takuya Noguchi)\n- Enable frame pointer in Redis compile options. !3421\n- Update Mattermost to 5.12.2. (Harrison Healey)\n\n## 12.0.10\n\n### Security (2 changes, 2 of them are from the community)\n\n- Update Mattermost to 5.11.1 (GitLab 12.0). (Harrison Healey)\n- Upgrade git to security patch 2.21.1. (Marin Jankovski)\n\n### Fixed (5 changes)\n\n- Support pg-upgrade on dbs with collate and ctype values that differ from each other. !3371\n- Properly check whether postgres is enabled when doing pg-upgrade. !3381\n- Use armv7 build of Grafana in RPi package. !3401\n- Fix error with repmgr and PostgreSQL 9. !3417\n- Enable specifying --path in bundle install on Ruby docker images. !3432\n\n### Performance (1 change)\n\n- Fix slow pushes for repositories using object deduplication. !3364\n\n### Other (1 change)\n\n- Fix bzip2 location. !3448\n\n\n## 12.0.10\n\n### Security (2 changes, 2 of them are from the community)\n\n- Update Mattermost to 5.11.1 (GitLab 12.0). (Harrison Healey)\n- Upgrade git to security patch 2.21.1. (Marin Jankovski)\n\n### Fixed (5 changes)\n\n- Support pg-upgrade on dbs with collate and ctype values that differ from each other. !3371\n- Properly check whether postgres is enabled when doing pg-upgrade. !3381\n- Use armv7 build of Grafana in RPi package. !3401\n- Fix error with repmgr and PostgreSQL 9. !3417\n- Enable specifying --path in bundle install on Ruby docker images. !3432\n\n### Performance (1 change)\n\n- Fix slow pushes for repositories using object deduplication. !3364\n\n### Other (1 change)\n\n- Fix bzip2 location. !3448\n\n\n## 12.0.9\n\n### Security (2 changes, 1 of them is from the community)\n\n- Patch nginx 1.14.2 for CVE-2019-9511, CVE-2019-9513, CVE-2019-9516.\n- Update Mattermost to 5.11.1. (Marc Schwede)\n\n\n## 12.0.8\n\n### Security (2 changes)\n\n- Add documentation for configuring an asset proxy server.\n- Make logrotate perform operations not as root user.\n\n\n## 12.0.7\n\n### Security (2 changes)\n\n- Add documentation for configuring an asset proxy server.\n- Make logrotate perform operations not as root user.\n\n\n## 12.0.6\n\n### Security (1 change)\n\n- Rename Grafana directory as part of upgrade.\n\n\n## 12.0.5\n\n### Security (1 change)\n\n- Automatically set an admin password for Grafana and disable basic authentication.\n\n\n## 12.0.3 (2019-07-01)\n\n- No changes.\n\n## 12.0.2 (2019-06-25)\n\n- No changes.\n\n## 12.0.1 (2019-06-24)\n\n### Fixed (1 change)\n\n- Fix upgrade version check in preinst to handle double-decimal-digit versions. !3369\n\n\n## 12.0.0 (2019-06-22)\n\n### Removed (4 changes)\n\n- Remove old env directory cleaning. !3290\n- Remove support for skip-auto-migrations file. !3306\n- Remove TLSv1.1 support in nginx. !3307\n- Remove Prometheus 1.x support. !3315\n\n### Fixed (11 changes)\n\n- Add timeout option to pg-upgrade command. !3284\n- Ensure reconfigure has succeeded reading node attributes. !3302\n- Set default path for git storage directories if user didn\'t specify one. !3304\n- Get node attribute file from directory contents if hostname is empty. !3309\n- Ensure sidekiq and gitlab-monitor are restarted when the ruby version changes. !3317\n- Upgrade node-exporter to 0.18.1. !3326\n- Update Prometheus exporters. !3328\n- Handle special characters in FDW passwords. !3339\n- Hup Mattermost after a version upgrade. !3340\n- Fix Unicorn not cleaning up stale metrics file at startup. !3350\n- Don\'t fail on public attribute file on missing \'normal\' key. !3358\n\n### Deprecated (1 change)\n\n- Mark openSUSE 42.3 as deprecated. !3334\n\n### Changed (6 changes)\n\n- Extracted postgresql recipe logic in gitlab recipe to its own recipe. !2794\n- Enable Grafana by default and configure GitLab SSO. !3272\n- Make PostgreSQL 10.7 the default version. !3291\n- Default to JSON logging when possible. !3292\n- Allow health check endpoints to be access via plain http. !3296\n- Remove old chef state before running chef commands. !3310\n\n### Performance (2 changes)\n\n- Upgrade Ruby to 2.6.3. !3119\n- Disable AuthorizedKeysFile in Docker. !3198\n\n### Added (6 changes, 1 of them is from the community)\n\n- Allow configuring an HTTP proxy for GitLab Pages. !3060 (Ben Anderson)\n- Add Pages `-insecure-ciphers` support. !3275\n- Add Pages -tls-min-version and -tls-max-version support. !3286\n- Service discovery for Prometheus via Consul. !3295\n- Replace --auth-server with --gitlab-server flag for pages. !3314\n- Make gitaly git.catfile_cache_size configurable. !3329\n\n### Other (13 changes, 2 of them are from the community)\n\n- Update python to 3.7.3 with updated libedit patches. !3274 (Takuya Noguchi)\n- GitLab-Pages can output JSON format logs. !3288\n- Ensure reconfigure runs with our desired version of the acme-client gem. !3294\n- Update sysctl to use --system option. !3298\n- Set 11.11 to be the minimum version required to upgrade to 12.0. !3300\n- Document Setting Logs to Non-JSON Format. !3303\n- Remove PG 9.6 to 9.6.8 directory symlink. !3305\n- Publish unlicensed EE AMI to Community AMIs. !3331\n- Update gitlab-elasticsearch-indexer to v1.2.0. !3331\n- Skip automatic pg-upgrade on GEO. !3338\n- Specify Ruby 2.6.3 for development. !3345\n- Update Mattermost to 5.11.0. (Harrison Healey)\n- Stop printing certificate skipped messages, instead list which certs were copied.\n\n\n## 11.11.8\n\n### Security (1 change, 1 of them is from the community)\n\n- Update Mattermost to 5.10.2 (GitLab 11.11). (Harrison Healey)\n\n\n## 11.11.7\n\n- No changes.\n\n## 11.11.5 (2019-06-27)\n\n- No changes.\n\n## 11.11.4 (2019-06-26)\n\n### Other (1 change)\n\n- Publish unlicensed EE AMI to Community AMIs. !3331\n\n\n## 11.11.3 (2019-06-10)\n\n### Fixed (2 changes)\n\n- Fix bug in pg-upgrade HA detection. !3287\n- Pass cron directory to crond run file. !3327\n\n\n## 11.11.2 (2019-06-04)\n\n### Fixed (1 change, 1 of them is from the community)\n\n- Update Mattermost to 5.10.1 (GitLab 11.11). (Harrison Healey)\n\n\n## 11.11.1 (2019-05-30)\n\n- No changes.\n\n## 11.11.0 (2019-05-22)\n\n### Security (1 change)\n\n- Upgrade RubyGems to 2.7.9. !3082\n\n### Removed (1 change)\n\n- Remove postgres auto-upgrade from Docker images for 11.11.0 release.\n\n### Fixed (4 changes)\n\n- Run pg_upgrade with configured postgres username. !3162\n- Fix Grafana GitLab Authentication. !3195\n- Run repmgr\'s psql commands as the specified user. !3224\n- Remove timestamp prefix from JSON formatted registry logs.\n\n### Deprecated (1 change)\n\n- Stop building Ubuntu 14.04 packages. !3192\n\n### Changed (4 changes)\n\n- Patch bundle install in CentOS 6 to install sassc gem using newer GCC. !3112\n- Enable additional node metrics. !3207\n- geo_log_cursor is located in ee/bin/ now. !3223\n- Bump Grafana Dashboards. !3241\n\n### Performance (2 changes)\n\n- Use AuthorizedKeysCommand in Docker builds. !3191\n- Remove smaps metrics from gitlab-monitor. !3279\n\n### Added (12 changes, 2 of them are from the community)\n\n- Bundle PostgreSQL 10 with the package. !3142\n- Docker: attempt to cleanup stale pids on restart. !3200\n- Decouple Geo node identity from external_url. !3201\n- Add configuration support for dependency proxy feature. !3206\n- add option to define Sentry settings. !3214 (Roger Meier)\n- Support gitlab-shell feature flags through gitlab.rb. !3215\n- Upgrade Git to 2.21. !3220\n- Add HA support for pg-upgrade command. !3240\n- Add pages domain removal cron configuration. !3246\n- Allow Sentry client-side DSN to be passed on gitlab.yml. !3249\n- add option to define Sentry environment for gitaly. !3253 (Roger Meier)\n- Add option to provide license during initial installation. !3265\n\n### Other (7 changes, 2 of them are from the community)\n\n- Bump Prometheus components to the latest. !3182\n- Update liblzma to 5.2.4. !3197\n- Update libtool to 2.4.6. !3210\n- Move sidekiq-cluster to ee/bin. !3216\n- Rename library methods to make their function explicit. !3222\n- Update Mattermost to 5.10.0. (Harrison Healey)\n- Stop raspberry pi builds during nightlies. (John T Skarbek)\n\n## 11.10.8 (2019-07-01)\n\n- No changes.\n\n## 11.10.7 (2019-06-26)\n\n- No changes.\n\n\n## 11.10.6 (2019-06-04)\n\n### Fixed (1 change)\n\n- Pin procfs version used for building redis-exporter. !3319\n\n\n## 11.10.4 (2019-05-01)\n\n### Security (1 change, 1 of them is from the community)\n\n- Update Mattermost to 5.9.1 (GitLab 11.10). (Harrison Healey)\n\n\n## 11.10.3 (2019-04-30)\n\n### Fixed (1 change)\n\n- Update exclusion of gem cache to match ruby 2.5. !3243\n\n## 11.10.2 (2019-04-25)\n\n- No changes.\n\n## 11.10.1 (2019-04-23)\n\n- No changes.\n\n\n## 11.10.0 (2019-04-22)\n\n### Security (1 change)\n\n- Bundle exiftool as a dependency.\n\n### Fixed (3 changes)\n\n- Use a fixed git abbrev parameter when we fetch a git revision. !3143\n- Fix bug where passing -w to pg-upgrade aborted the process. !3164\n- Update WorkhorseHighErrorRate alert. !3183\n\n### Changed (3 changes)\n\n- Remove gitlab-markup custom patches. !3115\n- Add grafana-dashboards to auto-provisioning. !3141\n- Set the default LANG variable in docker to support UTF-8. !3159\n\n### Added (7 changes, 2 of them are from the community)\n\n- Refactor Prometheus rails scrape config. !3046 (Ben Kochie <bjk@gitlab.com>)\n- Support conditional external diffs. !3059\n- Support for registry-garbage-collect command. !3097\n- Add sub_module to bundled nginx. !3100 (Rafael Gomez)\n- Add gitaly graceful restart wrapper. !3116\n- Add optional db_name to "gitlab-ctl replicate-geo-database". !3124\n- Add default Referrer-Policy header. !3138\n\n### Other (9 changes, 2 of them are from the community)\n\n- Upgrade jemalloc to 5.1.0. !2957\n- Update CA Certificates to 2019-01-23. !3095\n- Add gitlab_shell.authorized_keys_file to gitlab.yml. !3096\n- Update to latest krb5 version 1.17. !3114\n- Update to latest libxml2. !3156\n- Update bundler to 1.17.3. !3157 (Takuya Noguchi)\n- Share AWS AMIs with the Marketplace account. !3190\n- Move software built from git to omnibus-mirror. !3228\n- Update Mattermost to 5.9.0 (GitLab 11.10). (Harrison Healey)\n\n## 11.9.12 (2019-05-30)\n\n### Security (1 change, 1 of them is from the community)\n\n- Update Mattermost to 5.8.2 (GitLab 11.9). (Harrison Healey)\n\n## 11.9.11 (2019-04-30)\n\n- No changes.\n\n## 11.9.10 (2019-04-26)\n\n- No changes.\n\n\n## 11.9.9 (2019-04-23)\n\n### Other (1 change)\n\n- Move software built from git to omnibus-mirror. !3228\n\n## 11.9.8 (2019-04-11)\n\n- No changes.\n\n## 11.9.7 (2019-04-09)\n\n- No changes.\n\n## 11.9.6 (2019-04-04)\n\n### Fixed (1 change)\n\n- Fix Grafana auth URLs. !3139\n\n## 11.9.5 (2019-04-03)\n\n### Security (1 change, 1 of them is from the community)\n\n- Update Mattermost to 5.8.1. (Harrison Healey)\n\n### Fixed (1 change)\n\n- Fix typo in Prometheus v2 rules. !3145\n\n## 11.9.3 (2019-03-27)\n\n- No changes.\n\n## 11.9.2 (2019-03-26)\n\n### Security (1 change)\n\n- Bundle exiftool as a dependency.\n\n\n## 11.9.1 (2019-03-25)\n\n- No changes.\n\n\n## 11.9.0 (2019-03-22)\n\n### Security (2 changes)\n\n- Delete build artifacts from AMIs before publishing. !3044\n- Upgrade to OpenSSL 1.0.2r. !3066\n\n### Fixed (6 changes, 2 of them are from the community)\n\n- Fix permissions of repositories directory in update-permissions script. !3029 (Matthias Lohr <mail@mlohr.com>)\n- Fix issue with sshd failing in docker with user remap and privileged. !3047\n- Allow Geo tracking DB user password to be set. !3058\n- Restore docker registry compatibility with old clients using manifest v2 schema1. !3061 (Julien Pervillé)\n- Automatically configure Prometheus alertmanager. !3071\n- Ensure gitaly is setup before migrations are run.\n\n### Deprecated (1 change)\n\n- Update nginx to version 1.14.2. !3065\n\n### Changed (1 change)\n\n- Upgrade gitlab-monitor to 3.1.0. !3052\n\n### Added (5 changes)\n\n- Add Prometheus support to Docker Registry. !2884\n- Add option to disable init detection. !3028\n- Add Grafana service. !3057\n- Support Google Cloud Memorystore by disabling Redis CLIENT. !3072\n- Support Google Cloud Memorystore in gitlab-monitor. !3084\n\n### Other (6 changes, 4 of them are from the community)\n\n- Update mixlib-log from 1.7.1 to 3.0.1. !2951\n- Stop building packages for Raspbian Jessie. !3004\n- Update python to 3.4.9. !3040 (Takuya Noguchi)\n- Update docutils to 0.13.1. !3042 (Takuya Noguchi)\n- Replace deprecated "--no-ri --no-rdoc" in rubygems. !3050 (Takuya Noguchi)\n- Update Mattermost to 5.8. !3070 (Harrison Healey)\n\n## 11.8.10 (2019-04-30)\n\n- No changes.\n\n## 11.8.9 (2019-04-25)\n\n- No changes.\n\n## 11.8.8 (2019-04-23)\n\n### Security (1 change, 1 of them is from the community)\n\n- Upgrade Mattermost to 5.7.3 (GitLab 11.8). !3137 (Harrison Healey)\n\n## 11.8.7 (2019-04-09)\n\n- No changes.\n\n## 11.8.6 (2019-03-28)\n\n- No changes.\n\n## 11.8.5 (2019-03-27)\n\n- No changes.\n\n\n## 11.8.4 (2019-03-26)\n\n### Security (1 change)\n\n- Bundle exiftool as a dependency.\n\n## 11.8.3 (2019-03-19)\n\n- No changes.\n\n## 11.8.2 (2019-03-13)\n\n### Fixed (2 changes, 1 of them is from the community)\n\n- Restore docker registry compatibility with old clients using manifest v2 schema1. !3061 (Julien Pervillé)\n- Ensure gitaly is setup before migrations are run.\n\n### Other (1 change, 1 of them is from the community)\n\n- Update Mattermost to 5.7.2. !3080 (Harrison Healey)\n\n## 11.8.1 (2019-02-28)\n\n### Fixed (1 change)\n\n- Add support for restart_command in runit cookbook. !3062\n\n### Added (1 change, 1 of them is from the community)\n\n- Adding scripts/changelog. !3009 (Ian Baum)\n\n\n## 11.8.0 (2019-02-22)\n\n- Remove Redis config from gitlab-shell !3000\n- Add AWS customer provided encryption key configuration option !2928\n- Fix mattermost data directory permissions with ```update-permissions```\n- Properly encode the Redis password component in the URL !2999\n- Patch runit to not consider status of log service for `status` command exit\n  code !2949\n- Upgrade libpng to 1.6.36 !2950\n- Fix invalid registry redirect url when using the default ports (jelhan) !2961\n- Update runit cookbook to v4.3.0 !2902\n- Turn on http to https redirection for Registry and Mattermost if LE\n  integration is used !2968\n- Make registry validation configurable !2992\n- Upgrade Docker registry to 2.7.1 !2970\n- Upgrade Nginx to 1.12.2 !2988\n- Bump gitlab-elasticsearch-indexer to 1.0.0\n- Include experimental Docker Distribution Pruner !2946\n- Update Prometheus to v2.6.1 !2981\n- Update Prometheus node_exporter to v0.17.0 !2981\n- Update Prometheus redis_exporter to v0.26.0 !2981\n- Support smartcard auth against LDAP server !3006\n- Update Mattermost to 5.7.1\n- Update Prometheus alerting rules !3011\n- Allow external diffs for merge requests to be configured\n\n## 11.7.12 (2019-04-23)\n\n- No changes.\n\n## 11.7.11 (2019-04-09)\n\n- No changes.\n\n## 11.7.10 (2019-03-28)\n\n- No changes.\n\n## 11.7.9 (2019-03-27)\n\n- No changes.\n\n\n## 11.7.8 (2019-03-26)\n\n### Security (1 change)\n\n- Bundle exiftool as a dependency.\n\n## 11.7.7 (2019-03-19)\n\n- No changes.\n\n## 11.7.0\n\n- Disable nginx proxy_request_buffering for git-receive-pack !2935\n- Hide transfer of refs/remotes/* in git config !2932\n- Add option to specify a registry log formatter !2911\n- Ensure env values are converted to strings (Romain Tartière) !2923\n- Make location of repmgr.conf dynamic in run file and gitlab-ctl commands !2924\n- Enabled ENA networking and SRIOV support to AMIs !2867\n- Drop support for Debian Wheezy !2943\n- Restart sidekiq-cluster when relevant changes occur !2945\n- Support TLS communication with gitaly\n\n## 11.6.11 (2019-04-23)\n\n- No changes.\n\n## 11.6.10 (2019-02-28)\n\n- No changes.\n\n## 11.6.3\n\n- Fix Docker registry not working with Windows layers !2938\n- Remove deprecated OpenShift template !2936\n- Update Mattermost to 5.6.2\n- Fix warnings/errors when Prometheus is disabled. !2940\n\n## 11.6.2\n\n- Fix environment variables not being cleaned up !2934\n\n## 11.6.0\n\n- Switch restart_command for Unicorn service to signal HUP instead of USR2 !2905\n- Upgrade Ruby to 2.5.3 !2806\n- Deprecate postgresql[\'data_dir\'] !2846\n- Move env directory of all services to `/opt/gitlab/etc/<service>/env` !2825\n- Move the postgres install to being located under its major version path !2818\n- Add support for Git v2 protocol in docker image\'s `sshd_config` !2864\n- Add client support for Redis over SSL !2843\n- Disable sidekiq probes of gitlab-monitor by default in Redis HA mode and\n  provide `probe_sidekiq` attribute to control it. !2872\n- Update docker registry to include a set of patches from the upcoming 2.7.0 release !2888\n- Update Mattermost to 5.5.0\n- Add impersonation_enabled configuration to gitlab.rb !2880\n- Update runit version to 2.1.2 !2897\n- Update Prometheus components !2891\n- Add smartcard configuration to gitlab.rb !2894\n\n## 11.5.11 (2019-04-23)\n\n- No changes.\n\n## 11.5.8\n\n- Hide transfer of refs/remotes/* in git config\n\n## 11.5.2\n\n- Make remote-syslog detect log directories of all services correctly !2871\n\n## 11.5.1\n\n- Update GITLAB_PAGES_VERSION to 1.3.1\n- Update GITLAB_WORKHORSE_VERSION to 7.1.3\n- Update postgresql to 9.6.11 !2840\n\n## 11.5.0\n\n- Add experimental support for Puma !2801\n- Move to standardized cluster lifecycle event handlers in preparation for Puma support !2728\n- Update gitlab-monitor to 2.19.1\n- Add option to configure consul group !2781\n- Add Prometheus alerts for GitLab components !2753\n- Update required `gitlab-elasticsearch-indexer` version to 0.3.0 for Elasticsearch 6 support !2791\n- Add option to configure postgresql group !2780\n- Add option to configure prometheus group !2782\n- Add option to configure redis group !2784\n- Upgrade Bundler version to 1.16.6\n- Omit Gitaly development and test gems !2808\n- Support for Pages access control settings (Turo Soisenniemi)\n- Pages: Support limiting connection concurrency !2815\n- Geo: Fix adding a password to the FDW user mapping !2799\n- Specify groups while running services and `gitlab-` prefixed commands !2785\n- Update Mattermost to 5.4.0\n- Warn users when postgresql needs to be restarted due to version changes !2823\n- Ensure postgres doesn\'t automatically restart when it\'s run file changes !2830\n- Add nginx-module-vts for Prometheus metrics collection !2795\n- Ensure pgbouncer is shut down when multiple master situation is encountered\n  and resumed when it is cleared !2812\n- Provide SSL_CERT_DIR to embedded Go services !2813\n\n## 11.4.8\n\n- Update GITLAB_PAGES_VERSION to 1.1.1\n- Update GITLAB_WORKHORSE_VERSION to 7.0.1\n\n## 11.4.1\n\n- Upgrade Ruby version to 2.4.5\n\n## 11.4.0\n\n- Enable omniauth by default !2728\n- Update Mattermost to 5.3.1\n- Fix identification of Prometheus\'s rule directory !2736\n- Run geo_prune_event_log_worker_cron every 5min\n- Fix workhorse log path in the Docker fix update-permission script !2742 (Matteo Mazza)\n- Remove recursive chown for public directory !2743\n- Update libpng to 1.6.35 !2746\n- Update redis to 3.2.12 !2750\n- Update libgcrypt to 1.8.3 !2747\n- Update npth version to 1.6\n- Update libgpg-error to 1.32\n- Update libassuan to 2.5.1\n- Update gpgme to 1.10.0\n- Update gnupg to 2.2.10\n- Bump git to 2.18.1\n- Set only files under trusted_cert directory explicitly to user read/write and group/other read. !2755\n- Use Prometheus 2.4.2 for new installs. Deprecate Prometheus 1.x and add\n  prometheus-upgrade command !2733\n\n## 11.3.11\n\n- Update GITLAB_PAGES_VERSION to 1.1.1\n- Update GITLAB_WORKHORSE_VERSION to 6.1.2\n\n## 11.3.4\n\n- Bump git to 2.18.1\n\n## 11.3.2\n\n- Update pgbouncer cookbook to not regenerate databases.ini on hosts using consul watchers\n\n## 11.3.1\n\n- Update Mattermost to 5.2.2\n\n## 11.3.0\n\n- Support max_concurrency option in sidekiq_cluster\n- Support Redis hz parameter\n- Support Redis tcp-backlog parameter\n- Disable SSL compression by default when using gitlab-psql or gitlab-geo-psql\n- Increase Sidekiq RSS memory limit from 1 GB to 2 GB\n- Add /metrics endpoint to gitlab_monitor !2719 (Maxime)\n- Reload sysctl if a new symlink is created in /etc/sysctl.d\n- Bump omnibus-ctl to v0.6.0 !2715\n- Add missing pgbouncer options\n- Add plugin_directory and plugin_client_directory to supported Mattermost\n  settings !2649\n\n## 11.2.3\n\n- Fix custom runtime_dir not working\n- Geo Secondary: ensure rails enabled when Gitaly enabled !2720\n- Update Mattermost to 5.2.1\n- Update libiconv to 1.15\n- Update libiconv zlib and makedepend build recipe to improve build cache reuse\n\n## 11.2.1\n\n- Fix bzip2 download source\n- Allow configuration of maven package repository\n\n## 11.2.0\n\n- Bump git to 2.18.0 !2636\n- Bump Prometheus Alertmanager to 0.15.1 !2664\n- Update gitlab-monitor to 2.18.0 !2662\n- Update gitlab-monitor to 2.17.0\n- Enable rbtrace for unicorn if ENABLE_RBTRACE is set\n- Fix database.yml group setting to point at the proper user[\'group\']\n- Fix Prometheus metrics not working out of the box in Docker\n- Make gitlab-ctl repmgr standby setup honor postgresql[\'data_dir\']\n- Update Mattermost to 5.1.1\n- Update repmgr-check-master to exit 1 for standby nodes\n- Run GitLab service after systemd multi-user.target !2632\n- Update repmgr-check-master to exit 1 for standby nodes\n- Geo: Fix replicate-geo-database not working with a custom port\n\n## 11.1.1\n\n- Update Mattermost to 5.0.2\n- Omit SLAVEOF if Redis is in an HA environment !2651\n- Export PYTHONPATH and ICU_DATA to gitaly !2650\n- Restore gitaly default log level to \'info\' !2661\n\n## 11.1.0\n\n- Include OSS driver for object storage support in the registry\n- Support setting of PostgreSQL SSL mode and compression in repmgr conninfo\n- Disable PostgreSQL SSL compression by default\n- Tighten permission on Mattermost\'s config.json file !2587\n- Tighten permission on Gitaly\'s config.toml file !2589\n- Tighten permission on gitlab-shell\'s config.yml file !2585\n- Add an option to activate verbose logging for GitLab Pages (maxmeyer)\n- Don\'t attempt to modify PostgreSQL users if database is in read-only mode\n- Remove NGINX custom page for 422 errors\n- Tighten permission on gitlab-monitor\'s gitlab-monitor.yml file !2584\n- Tighten permission on gitlab.yml file !2591\n- Tighten permission on database.yml file !2592\n- Add support for Prometheus remote read/write services.\n- Add support for database service discovery\n- Tighten permission on geo\'s database_geo.yml file !2590\n- Set TZ environment variable for gitlab-rails to \':/etc/localtime\' to decrease\n  number of system callse - !2600\n- Don\'t add timestamp to gitaly logs if logging format is json !2615\n- Remove hardcoded path for pages secrets (julien MILLAU)\n- Tighten permission on gitlab-workhorse\'s config.toml file !2586\n- Add pseudonymizer data collection worker\n- Update node_exporter to 0.16.0, metric names have been changed !2639\n- Update alertmanager to 0.15.0 !2639\n- Update redis_exporter to 0.20.2 !2639\n- Update postgres_exporter to 0.4.6 !2641\n- Update pgbouncer_exporter to 0.0.3-gitlab !2617\n- Update Mattermost to 5.0.0\n\n## 11.0.3\n\n- Revert change to default unicorn/sidekiq listen address.\n- Add Prometheus relabel configs to change display from 127.0.0.1 to localhost\n- Tighten permission on pgbouncer and consul related config files !2588\n\n## 11.0.2\n\n- Set the default for geo_prune_event_log_worker_cron to once/2hours\n- Restart geo-logcursor when unicorn or sidekiq are updated\n- Fix Prometheus Unicorn metrics not coming back after a HUP\n- Set the default for geo_prune_event_log_worker_cron to once/2hours\n\n## 11.0.1\n\n- No changes\n\n## 11.0.0\n\n- Disable PgBouncer PID file by default\n- Add pgbouncer_exporter\n- Bump minimum version required for upgrade to 10.8 2df263267\n- Geo: Only create database_geo.yml and run migrations if Rails is enabled\n- Render gitlab-pages admin settings\n- Fix old unicorn master not quitting after a new process is running\n- Mattermost: Fix reconfiguration of GitLab OAuth configuration settings\n- Bump PgBouncer to 1.8.1\n- Automatically add registry hostname to the to alt_name of the\n  LetsEncrypt certificate #3343\n- Use localhost hostname for unicorn and sidekiq listeners\n- Add ipv6 loopback to monitoring whitelist\n- Remove deprecated Mattermost settings and use environment variables to set\n  supported ones. !2522\n- Bump git to 2.17.1 !2552\n- Updated Mattermost to 4.10.1\n- Render gitaly-ruby num_workers config\n- Set installation type information to be used by usage ping - !2561\n- Add graphicsmagick dependency\n- Add cron job for archiving-trace worker\n- Add attribute to control automatic registration of a database node as master\n  on initialization !2571\n- Add PostgreSQL support for default_statistics_target\n\n## 10.8.5\n- Geo: Make sure gitlab_secondary schema has the correct owner\n\n## 10.8.2\n\n- Automatically restart Gitaly when its VERSION file changes\n- Update gitlab-monitor to 2.16.0\n- No need to patch `lib/gitlab.rb` anymore since it now reads the REVISION file if present\n- Upgrade git to 2.16.4\n\n## 10.8.1\n\n- Add git_data_dir to the deprecation list 7d04ed06b\n- Geo: Set recovery_target_timeline to latest by default\n- Remove deprecated git_data_dir configuration and old hash format of\n  git_data_dirs configuration !2520\n- Upgrade Ruby version to 2.4.4\n- Upgrade Bundler version to 1.16.2\n- Upgrade Rubygems version to 2.7.6\n- Add support for Prometheus rules files\n\n## 10.8.0\n\n- Force kill unicorn process if it is still running after a TERM or INT signal\n- Upgrade Ruby version to 2.3.7\n- Update gitlab-monitor to 2.13.0\n- Add Prometheus Alertmanager\n- Bump git to 2.16.3\n- Bump curl to 7.59.0 aab088263\n- Bump pcre to 8.42 07c83a5ab\n- Bump rubygems to 2.6.14 84b2510fd\n- Bump openssl to 1.0.2o 1fe9f4ef2\n- Do not ship cached gem archives. #3235\n- Excludes source assets from gitlab-rails component.  #3238\n- Keep gitaly service running during package upgrades 034992fbc\n- Geo: Error when primary promotion fails\n- Geo: Disable SSL compression by default in generating recovery.conf\n- Add option to disable healthcheck for storagedriver in registry\n- Enable gzip by default\n- Restart runsv when log directory is changed 0a784647b\n- Bump rsync to 3.1.3 f539aa946\n- Patch bzip2 against CVE-2016-3189 552730bfa\n- Fix pgbouncer recipe to use the correct user for standalone instances\n- Commands `gitlab-psql` and `gitlab-geo-psql` will use respective GitLab databases by default. #3485\n- Make pg-upgrade start the bundled postgresql server if it isn\'t already running\n- Enforce upgrade paths for package upgrades 56a250b1a\n- Patch unzip to fix multiple CVEs cefd5b1b6\n- Geo: Success message for `gitlab-ctl promote-to-primary-node` command\n\n## 10.7.5\n\n- Upgrade Git to 2.14.4\n\n## 10.7.4\n\n- Geo: promoting secondary node into primary doesnt remove `database_geo.yml` #3463\n- Only create gitlab-consul database user after repmgr database has been created\n- Make migrations during upgrade only stop unnecessary services\n\n## 10.7.3\n\n- Add support for the `-daemon-inplace-chroot` command-line flag to GitLab Pages\n\n## 10.7.2\n\n- No changes\n\n## 10.7.1\n\n- No changes\n- Bump libxslt to 1.1.32 f584de1d7\n- Bump libxml2 to 2.9.8 e3a117275\n- Update Mattermost to 4.9.1\n\n## 10.7.0\n\n- Geo: Increase default WAL standby settings from 30s to 60s\n- Geo: Add support for creating a user for the  pgbouncer on the Geo DB\n- Geo: Add cron job for migrated local files worker\n- Disable 3DES ssl_ciphers of nginx for gitlab-rails, mattermost, pages, and\n  registry (Takuya Noguchi)\n- Add option to configure log_statement config in PostgreSQL\n- Internal: Speed up rubocop job (Takuya Noguchi)\n- Bump redis_exporter to 0.17.1\n- Excludes static libraries, header files, and `*-config` binaries from package.\n- Support Sidekiq log_format option\n- Render gitlab-shell log_format option\n- Support `direct_upload` for Artifacts and Uploads\n- Set proxy_http_version to ensure request buffering is disabled for GitLab Container Registry\n- Auto-enable Let\'s Encrypt certificate management when `external_url`\n  is of the https protocol, we are terminating ssl with the embedded\n  nginx, and certficate files are absent.\n- Fix bug where changing log directory of gitlab-monitor had no effect 1e451dc2\n- Updated Mattermost to 4.8.1\n- Create shared/{tmp,cache} directories when manage-storage-directories is enabled\n- Render Gitaly logging_ruby_sentry_dsn config option\n- Fix bug in error reporting of `gitlab-ctl renew-le-certs` #3389\n- Adds go-crond to the package #3251\n- Auto-renew LetsEncrypt with go-crond #3251\n\n## 10.6.6\n\n- Update Git to 2.14.4\n\n## 10.6.5\n\n- Update Mattermost to 4.7.4\n\n## 10.6.4\n\n- Fixes an issue where unicorn and sidekiq services weren\'t being restarted after their configuration changed.\n- Added missing Mattermost settings to gitlab.rb\n\n## 10.6.2\n\n- Geo: many fixes in FDW support, making it enabled by default in Secondary node.\n- Fixed omnibus deprecations in PostgreSQL resources DSL\n\n## 10.6.1\n\n- Pages: if logformat set to json, do not append timestamps with svlogd.\n- Downgrade jemalloc to 4.2.1 to avoid segfaults in Ruby\n\n## 10.6.0\n\n- Geo: When upgrading we keep geo-postgresql up to run database migrations\n- Geo: Add cron configuration for repository verification workers\n- Warn users of stale sprockets manifest file after install 8d4cd46c (David Haltinner)\n- Geo: Don\'t attempt to refresh FDW tables if FDW is not enabled\n- Deprecate `/etc/gitlab/skip-auto-migrations` for `/etc/gitlab/skip-auto-reconfigure`\n- Update python to 3.4.8 (Takuya Noguchi)\n- Update jemalloc to 5.0.1\n- Update chef to 13.6.4\n- Unsets `RUBYLIB` in `gitlab-rails`, `gitlab-rake`, and `gitlab-ctl` to avoid\n  interactions with system ruby libraries.\n- Update rainbow to 2.2.2, package_cloud to 0.3.04 and rest-client to 2.0.2 (Takuya Noguchi)\n- Use awesome_print gem to print Ruby objects to the user 761a1e6a\n- Update postgresql to 9.6.8\n- Remove possible remains of relative_url.rb file that was used in earlier versions 88de20f18\n- Add `announce-ip` and `announce-port` options for Redis and Sentinel (Borja Aparicio)\n- Support the `-logFormat` option in Workhorse\n- Update rubocop to 0.52.1 (Takuya Noguchi)\n- Restart geo-logcursor when database_geo.yml is updated\n- Change the default location of pgbouncer socket to /var/opt/gitlab/pgbouncer\n- Excludes unused `/opt/gitlab/embedded/service/gitlab-shell/{go,go_build}`\n  directories.\n- Updated Mattermost to 4.7.3\n- Add `proxy_download` options to object storage\n- Add `lfs_object_store_direct_upload` option\n- Render the gitlab-pages \'-log-format\' option\n- Workhorse: if logformat set to json, do not update timestamps with svlogd.\n## 10.5.8\n\n- Update Mattermost to 4.6.3\n\n## 10.5.7\n\n- No changes\n\n## 10.5.6\n\n- No changes\n\n## 10.5.5\n\n- Resolve "consul service postgresql_service failing on db host - no access to /opt/gitlab/embedded/node\n\n## 10.5.8\n\n- Update Mattermost to 4.6.3\n\n## 10.5.7\n\n- No changes\n\n## 10.5.6\n\n- No changes\n\n## 10.5.5\n\n- Resolve "consul service postgresql_service failing on db host - no access to /opt/gitlab/embedded/node\n\n## 10.5.4\n\n- Update Let\'s Encrypt to use fullchain instead of certificate\n\n## 10.5.2\n\n- Fix regression where `redirect_http_to_https` was always on for hosts using https\n- Geo: Add support to configure a custom PostgreSQL FDW external user on the tracking database\n\n## 10.5.1\n\n- Fix regression where using new Hash format for git_data_dirs broke reconfigure 542aea4aa\n\n## 10.5.0\n\n- Add support to configure the `fdw` parameter in database_geo.yml\n- Extends rspec to `gitlab-ctl consul`\'s helper class, and refactors to avoid\n  namespace conflicts.\n- Geo: Use a background WAL receiver and replication slot to improve initial sync\n- Support Redis as an LRU cache\n- Remove usage of gitlab_shell[\'git_data_directories\'] configuration 2003bc5d\n- Set PostgreSQL archive_timeout to 0 by default\n- Added LDAP configuration option for lowercase_usernames\n- Support authorized_keys database lookups with SELinux on CentOS 7.4\n- Add support for generating Let\'s Encrypt certificates as part of reconfigure\n- Support configuration of Redis Sentinels by persistence class\n- Add support for setting environment variables for Registry (Anthony Dong)\n- Don\'t attempt to backup non-existent PostgreSQL data file in gitlab-ctl replicate-geo-database\n- Add object storage support for uploads\n- Do not attempt to load postgresql_extension if database in question doesn\'t\n  exist.\n- Honor the `unicorn[\'worker_processes\']` setting for a Geo secondary node\n- Upgrades Chef to 12.21.31\n\n## 10.4.1\n\n- Update gitlab-monitor to 2.5.0\n- Add GitLab pages status page configuration\n\n## 10.4.0\n\n- Upgrade Ruby version to 2.3.6\n- Add support for enabling FDW for GitLab Geo\n- Request confirmation of Geo replication user password\n- Make sure db/geo/schema.rb is writable when node is a Geo secondary\n- Add warning to LoggingHelper\n- Update gitlab-monitor to 2.4.0 92312d6\n- Update CA certificates bundle to one from 2017.09.20 a8f56b7f\n\n## 10.3.6\n\n- Specify initial tag of QA image for pushing to dockerhub\n- Use dash instead of spaces in cache keys and build jobs\n\n## 10.3.1\n\n- Make it possible to configure an external Geo tracking database\n- Process reconfigure failures and print out a message\n- Remove unused redis bin gitlab-shell configuration\n- Bump bundled git version to 2.14.3 a2b4bedf\n- Update pgbouncer recipe to better handle initial configuration\n- Render gitaly-ruby memory settings\n- Add a runit service to probe repository storages\n\n## 10.3.0\n\n- Add workhorse metrics to Prometheus\n- Add sidekiq metrics to Prometheus\n- Include gpgme, gnupg and their dependencies\n- Add gitaly metrics to Prometheus\n- Upgrade node-exporter to 0.15.2\n- Upgrade postgres-exporter to 0.4.1\n- Upgrade prometheus to 1.8.2\n- Remove duplicated shared object files from grpc gem (Takuya Noguchi)\n- Update default gitlab-shell git timeout to 3 hours ec9ed900\n- Enable support for git push options in the git config (Romain Maffina) 08edd3e4\n- Update Redis to 3.2.11 (Takuya Noguchi)\n- Turn on postgresql SSL by default b18597e3\n- Update pgbouncer and repmgr recipes to prevent errors on reconfigure\n- Add a command to promote secondary node to primary for GitLab Geo\n- Fixed behaviour of postgres_user provider with unspecified passwords/options 8bd2e615\n- Added roles to ease HA Postgres configuration d7d0f32a\n\n## 10.2.6\n\n- Update Mattermost to 4.3.4\n\n## 10.2.3\n\n- Adjust number of unicorn workers if running a Geo secondary node\n\n## 10.2.0\n\n- Enable pgbouncer application_name_add_host config by default 29dab6af1\n- Move configuration for failing storages to the admin panel 83ad75c0\n- Upgrade curl to 7.56.1\n- Update backup directory management with better support for non-root NFS\n- Disable prepared statements by default\n- Remove deprecated settings from gitlab.yml template: geo_primary_role, geo_secondary_role\n- Add options to enable SSL with PostgreSQL\n- Change the default pgbouncer settings to be suitable for larger environments\n- Bump openssl to 1.0.2m (Takuya Noguchi)\n- Upgrade Mattermost to 4.3.2\n- Stop creating SSH keys for Geo secondaries f7147d8b\n- Make postgresql replication client sslmode configurable 1e2be156\n- Disable TLSv1 and SSLv3 ciphers for postgresql 7ab9004f\n- Add support for multiple Redis instances f6af9a81\n\n## 10.1.6\n\n- Update Mattermost to 4.2.2\n\n## 10.1.3\n\n- No changes\n\n## 10.1.2\n\n- Bump embedded Git version to 2.13.6 921ba935\n- Update Mattermost to 4.2.1 640c88\n\n## 10.1.1\n\n- No changes\n\n## 10.1.0\n\n- Add a gitlab-ctl command to remove master nodes from cluster b50d50478\n- Restart Unicorn and Sidekiq on the Geo secondary if the tracking database is migrated 1aaed2\n- Remove unused Grit configuration settings 90f403a26193fb\n- Add concurrency configuration for Gitaly 402f23b28\n- Enable profiler for jemalloc c40b82c4037\n- Update Postgres exporter to 0.2.3 1f847e9e96\n- Update Prometheus to 1.7.2 1f847e9e96\n- Update Redis exporter to 0.12.2 1f847e9e96\n- Increase wal_keep_segments setting from 10 to 50 for Geo primary 9b1304fe\n- Disable NGINX buffering with container registry 2413adb\n- Add -artifacts-server and -artifacts-server-timeout support to Omnibus 188def96b3\n- Introduce `roles` configuration to allow enabling of multiple sets of services 8535073e64\n- Added PostgreSQL support for effective_io_concurrency 37799aea3\n- Added PostgreSQL support for max_worker_processes and max_parallel_workers_per_gather 37799aea3\n- Added PostgreSQL support for log_lock_waits and deadlock_timeout 37799aea3\n- Added PostgreSQL support for track_io_timing 37799aea3\n- Rename Rails secret jws_private_key to openid_connect_signing_key (Markus Koller) 24d56df29b\n- Render gitaly.client_path in gitlab.yml 80a9c492e\n- Correct Registry permissions in Docker update-permissions script 0b624f8ed\n- Upgrade PostgreSQL to 9.6.5 (Takuya Noguchi) 84a3f5c09\n\n## 10.0.7\n\n- Fix an issue causing symlinking against system binaries if old PostgreSQL data was present on the filesystem a712c\n\n## 10.0.6\n\n- Upgrade curl to 7.56.1 17ea571\n- Update Mattermost to 4.2.1 640c88\n\n## 10.0.5\n\n- No changes\n\n## 10.0.4\n\n- Ensure pgbouncer doesn\'t fail reconfigure if database isn\'t ready yet b50d50478\n\n## 10.0.3\n\n- No changes\n\n## 10.0.4\n\n- Ensure pgbouncer doesn\'t fail reconfigure if database isn\'t ready yet\n\n## 10.0.3\n\n- No changes\n\n## 10.0.2\n\n- Fix an issue where enabling a GitLab Geo role would also disable all default services 11e6dbf\n- Reload consul on config change instead of restarting 097cf5\n- Update pg-upgrade output to be more clear when a bundled PostgreSQL is not in use 7b80458b\n- Add option to configure redis snapshot frequency 400f3a54\n\n## 10.0.1\n\n- No changes\n\n## 10.0.0\n\n- Use semanage instead of chcon for setting SELinux security contexts (Elliot Wright) 45abda5f4\n- Add option to override the hostname for remote syslog\n- Add backup_timeout argument to geo db replication command\n- Remove sensitive params from the NGINX access logs 6983fe59\n- Upgrade rubygems to 2.6.13 4650cd70a\n- Add option to pass EXTERNAL_URL during installation d0f30ef2\n  * Saves users from manually editing gitlab.rb just to set the URL and hence\n    makes installation process easier\n- Remove TLSv1 from the list of accepted ssl protocols\n- Moved the settings handling into the package cookbook and reduced code duplication in settings\n- Move the GitLab HA roles into their own files, and switch default services to be enabled by a Default role\n- Remove geo_bulk_notify_worker_cron 44def4b5\n- Rework `single_quote` helper as `quote` that can handle escaping\n  strings with embedded quotes fdc6a93\n- Add gitlab-ctl pgb-console command\n- Increase warning visibility of the deprecated git_data_dir setting\n- Add omniauth sync_profile_from_provider and sync_profile_attributes configuration\n- Only generate a private SSH key on Geo secondaries c2f2dcba\n- Support LFS object storage options for GitLab EEP\n- Upgrade ruby version to 2.3.5\n- Upgrade libyaml version to 0.1.7\n- Add NGINX RealIP module configuration templating for Pages and Registry\n- Fix gitlab-ctl wrapper to allow \'*\' in arguments\n- Update failover_pgbouncer script to use the pgbouncer user for the database configuration\n- Update Mattermost to 4.2.0\n\n## 9.5.5\n\n- Add more options to repmgr.conf template\n- Update pgbouncer to use one style of logging\n- Set bootstrap_expect to default to 3 for consul servers\n- Fix bug where pgb-notify would fail when databases.json was empty\n- Restart repmgrd after nodes are registered with a cluster\n- Add --node option to gitlab-ctl repmgr standby unregister\n- Upgrade ruby version to 2.3.5\n- Upgrade libyaml version to 0.1.7\n\n## 9.5.4\n\n- Changing pg_hba configuration should only reload PG c99ef6\n\n## 9.5.3\n\n- Fix Mattermost log location 2126c7b3\n\n## 9.5.2\n\n- No changes\n\n## 9.5.1\n\n- No changes\n\n## 9.5.0\n\n- Fix the NGINX configuration for GitLab Pages with Cache-Control headers 2242884e\n- Bump openssl to 1.0.2l 04ae64d7\n- Allow deeply nested configuration settings in gitlab.rb\n- Build and configure gitaly-ruby\n- Added support for PostgreSQL\'s "idle_in_transaction_session_timeout" setting\n- UDP log shipping as part of CE\n- Bump Git version to 2.13.5\n- Added Consul service in EE\n- Update gitlab-elasticsearch-indexr to v0.2.1 11a2e7fd\n- Add configuration options for handling repository storage failures\n- Add support for `--negate` in sidekiq-cluster\n- Update Mattermost to 4.1.0\n\n## 9.4.3\n\n- Fix LDAP SSL config: Use ca_file, not ca_cert.\n- Fix Mattermost setting teammate_name_display not working.\n  * Renamed mattermost[\'service_teammate_name_display\'] to mattermost[\'team_teammate_name_display\'] ad3a4f58\n\n## 9.4.3\n\n- Add Prometheus client after_fork hook to reset file backed metrics\n\n## 9.4.2\n\n- Update LDAP SSL config: Rename method to encryption. Add ca_cert, ssl_version and verify_certificates\n\n## 9.4.1\n\n- Expose new Mattermost config options that went into 4.0.1\n\n## 9.4.0\n\n- Add configuration options of monitoring ip whitelist and Unicorn sampler interval\n- Bump NGINX version to 1.12.1 f8c349bf\n- Add support in Geo replicate-geo-database command for replication slots 9fa27e9a0\n- Fix gitlab-shell not able to import projects from trusted SSL certificates\n- Remove software definition of expat 59c39870\n- Add unicorn metrics to Prometheus\n- Bump gitlab-elasticsearch-indexer version to 0.2.0 bba8edd3\n- Disable RubyGems in gitlab-shell scripts for performance\n- Adjust various default values for PostgreSQL based on GitLab.com\n- Gitaly can no longer be disabled\n- Bump omnibus-ctl version to 0.5.0\n- Add GeoLogCursor EE service\n- Set max_replication_slots to 1 by default for primary Geo instances\n- Set TZ environment variable for Gitaly\n- Automate repmgr configuration\n- Render Gitaly token authentication settings\n- Update Mattermost to 4.0.1\n- Drop GitProbe settings from gitlab-monitor\n- Move registry internal key population to gitlab-rails recipe 683bdcfb\n\n## 9.3.8\n\n- Upgrade Mattermost to 3.10.2 6ebf54\n\n## 9.3.7\n\n- No Changes\n\n## 9.3.6\n\n- No Changes\n\n## 9.3.5\n\n- Update gitlab-monitor to 1.9.0 c18672\n- Fix port not being passed to pg_basebackup in replicate-geo-database script ca92eb\n\n## 9.3.4\n\n- No Changes\n\n## 9.3.3\n\n- Allow sidekiq-cluster to run without having sidekiq enabled\n- Remove outdated Mattermost v2 DB upgrade code\n- Fix port not being passed to pg_basebackup in replicate-geo-database script\n- Switch postgresql[\'custom_pg_hba_entries\'] from Array to Hash\n\n## 9.3.2\n\n- Update gitlab-monitor to 1.8.0\n\n## 9.3.1\n\n- Use the new "gettext:compile" task during build  59dbbd8b\n- Create the postgresql user for postgresql-exporter  3fedab4f\n\n## 9.3.0\n\n- Ensure PostgreSQL user is created for Geo installations 4bedc5f1\n- Add a --skip-backup option in Geo replicate-geo-database command 22a01a23\n- Rename geo_download_dispatch worker configuration\n- Rename geo_backfill worker configuration\n- Upgrade Prometheus to 1.6.3\n- Bump Git version to 2.13.0 b8a4bc4f\n- Upgrade PostgreSQL to 9.6.3 8f144d\n- Upgrade ES indexer to 0.1.0\n- Changing relative URL requires a hard reset ccd76ae2\n- Add omniauth sync_email_from_provider configuration\n- Add libre2 to support the \'re2\' gem\n- Add a runtime directory for unicorn metrics\n- Support object storage for artifacts for GitLab EEP\n- Add repmgr as an EE dependency\n- Upgrade Mattermost to 3.10.0\n\n## 9.2.8\n\n- Update Mattermost to 3.9.2 f55f9f\n\n## 9.2.7\n\n- No changes\n\n## 9.2.6\n\n- Backport: Upgrade ES indexer to 0.1.0\n\n## 9.2.5\n\n- Add default values to GitLab Geo roles 77e7bdfa\n\n## 9.2.5\n\n- Fix gitlab-ctl replicate-geo-database when run in a Docker container\n\n## 9.2.2\n\n- Fix bug where cron values are not set to nil and default to a set value\n\n## 9.2.1\n\n- Use ln -sf to prevent sshd startup errors upon a full Docker restart ecf4fd62b\n\n## 9.2.0\n\n- Add a missing symlink for /opt/gitlab/init/sshd to make `gitlab-ctl stop` work in Docker 4a098168\n- Allow setting `usage_ping_enabled` in `gitlab.rb`\n- Update mysql client to 5.5.55\n- Add a build env variable ALTERNATIVE_SOURCES f0cab0c6\n- Create reconfigure log dir explicitly (Anastas Dancha) 9654cfe3\n- Upgrade docker/distribution to 2.6.1 5fe36ffe\n- Upgrade Prometheus to 1.6.1 d4bdd143\n- Upgrade gitlab-monitor to 1.6 b245f2c1\n- Add ldap_group_sync worker configuration f21c3886\n- Add gitlab_shell_timeout configuration 0289f50b\n- Generate license .csv file 5478b1aa\n- Postgresql configuration changle will now reload Postgresql instead of restart\n- Generate PO translation files 6b6c936a\n- Change service running detection 18b51873\n- Rename trigger schedules to pipeline schedules\n- Compile new binaries for gitlab-shell\n- Compile python with libedit\n- Disable Nginx proxy_request_buffering for Git LFS endpoints\n\n## 9.1.7\n\n-  Update Mattermost to 3.7.6 ce50d5f\n\n## 9.1.6\n\n- No changes\n\n## 9.1.5\n\n- No changes\n\n## 9.1.4\n\n- Fix gitlab.yml template to quote sidekiq-cron 285fbb\n\n## 9.1.3\n\n- Update mysql client to 5.5.56. 5e673\n\n## 9.1.2\n\n- Add support for the following PostgreSQL settings: random_page_cost, max_locks_per_transaction, log_temp_files, log_checkpoints\n\n## 9.1.1\n\n- No changes\n\n## 9.1.0\n\n- Remove deprecated satellites configuration f88ba40b\n- Add configuration file for Gitaly 7c7c728\n- Add support for Gitaly address per shard 2096928\n- Build Container Registry with include_gcs flags (Lars Larsson) deb707fd\n- Update Prometheus flags, tweak resource usage b2dcb8da\n- EE: Create and migrate GitLab Geo database and configure Geo replication b71f72\n- EE: Add set-geo-primary-node command ecbcf2\n- EE: Add hot-standby configuration for Geo DB 82158\n- EE: Change the order of configuration loading for EE recipes ba19b7c0\n- Add support storages in Gitaly config f3205fa\n- Update Node exporter to 0.14.0 84f71c0\n- Update Redis exporter to 0.10.9.1 84f71c0\n\n## 9.0.6\n\n- No changes\n\n## 9.0.5\n\n- Build SLES 12 EE package at the same time as others.\n- Fix AWS build errors\n- Updating documentation for external PostgreSQL usage\n- Added quotes to GITLAB_SKIP_PG_UPGRADE\n\n## 9.0.4\n\n- Update Mattermost version to 3.7.3 b8abd225\n\n## 9.0.3\n\n- Added support for managing PostgreSQL\'s hot_standby_feedback option 8971a5e0\n- Add configuration support for new Mattermost 3.7 settings (Robin Naundorf) 3c9d6936\n- Fix \'template1 being accessed by other users\' error c8633b8b\n- Fix ability to disable postgres and redis exporters 04eaf7f6\n- Start new services after they are enabled  42c9af27\n\n## 9.0.2\n\n- No changes\n\n## 9.0.1\n\n- Allow configuration of prepared statement caching in Rails 169891c2\n- Default redis prometheus exporter to off if redis is not managed locally 63056441\n- Default postgres prometheus exporter to off if postgres is not managed locally 63056441\n- Default pages http to https redirect to off 1ece2480\n- Make HSTS easier to configure, and the docs on it accurate 4ba90ff8\n- Move the automatic PG Upgrade to happen after migrations have run 8cf38d43\n\n## 9.0\n\n- Remove Bitbucket from templates as it does not require special settings anymore b87ae1f\n- Fix the issue that prevents registry from starting when user and group\nare not the same (O Schwede) c4e83c5\n- Add configuration options for GitLab container registry to support notification endpoints to template (Alexandre Gomes) ef9b0f255\n- Update curl to 7.53.0 38aea7179\n- Update directory configuration structure to allow multiple settings per data directory\n- Remove mailroom configuration template, reuse the default from GitLab 5511b246\n- Remove deprecated standalone GitLab CI configuration ad126ba\n- Expose configuration for HSTS which was removed from GitLab Rails f5919f\n- Expose KUBERNETES_SERVICE_HOST and KUBERNETES_SERVICE_PORT to Prometheus for k8s 8a4e7d\n- Disable Nginx caching except for assets 6c1cdd8\n- Update Prometheus to 1.5.2 0edcf58\n- Update GitLab Monitor to 1.2.0 0edcf58\n- Update Postgres-exporter to 0.1.2 0edcf58\n- Update Redis-exporter to 0.10.7 0edcf58\n- Expose apiCiLongPollingDuration for GitLab Workhorse f88ae849\n- Add storage class configuration option for S3 backups (Jon Keys) 1e4a6ac4\n- Generate RSA private key for doorkeeper-openid_connect (Markus Koller) a447c41\n- Change default syntax for git_data_dirs ee831d9\n- Remove deprecated git-annex configuration 527b942\n- Expose GitLab Workhorse configuration file 835144e\n- Add option to verify clients with an SSL certificate to Mattermost, Registry and GitLab Pages\n- Rename stuck_ci_builds_worker to stuck_ci_jobs_worker in the gitlab_rails config\n- EE: Add a tracking database for GitLab Geo f1077d10\n- Provide default Host header for requests that do not have one 14f77c\n- Gitaly service on by default 350dea\n- Update Nginx to 1.10.3 211a89fb6\n\n## 8.17.5\n\n- Update Mattermost version to 3.6.5 bb826eeb\n\n## 8.17.4\n\n- No changes\n\n## 8.17.3\n\n- Changing call to create tmp dir as the database user 7b54cd76\n\n## 8.17.0\n\n- Add support for setting PostgreSQL\'s synchronous_commit and\n  synchronous_standby_names settings\n- Remove deprecated Elasticsearch configuration options ab660c56\n- Include GitLab Pages in the Community Edition\n- Add HealthCheck support to our Docker image 845b52b2\n- Remove Nodejs dependency 7d22e0a8\n- Add an option to skip cache:clear task (Adam Hamsik) e4ba9913\n- Update Mattermost OAuth2 endpoints when GitLab\'s url changes\n- Include Redis exporter, off by default 3bd03d2d\n- Include Postgres exporter, off by default e8755757\n- Fixed trusted certificates being lost during Docker image restarts\n- Make pam_loginuid.so optional for SSH in our Docker image (Martin von Gagern) eb73ecea\n- Introduce gitlab-ctl diff-config command to compare existing and new configuration bb0bd\n- Remove update_all_mirrors_worker_cron and update_all_remote_mirrors_worker_cron settings 49706b\n- Expose max_standby_archive_delay and max_standby_streaming_delay Postgresql settings\n- Disconnect and reconnect database connections when forking in Unicorn a7b35aaf\n- Add support for the PostgreSQL max_replication_slots setting\n- Allow exposing prometheus metrics on gitlab-pages\n\n## 8.16.9\n\n- Update Mattermost version to 3.6.5 e5f65b8\n\n## 8.16.8\n\n- No changes\n\n## 8.16.7\n\n- No changes\n\n## 8.16.6\n\n- EE: Make sure `ssh_keygen` creates the directory first e5483177\n\n## 8.16.5\n\n- Upgrade Mattermost to 3.6.2 2c7dab9f\n- EE: Make sure `ssh_keygen` creates the directory first e5483177\n\n## 8.16.4\n\n- Make pam_loginuid.so optional for SSH in our Docker image (Martin von Gagern) eb73ecea\n\n## 8.16.3\n\n- Pin bundler to version 1.13.7 0ec1b67f\n- Upgrade zlib to 1.2.11 cfa4e3c0\n\n## 8.16.2\n\n- No changes\n\n## 8.16.1\n\n- No changes\n\n## 8.16.0\n\n- Update git to 2.10.2 27cde301\n- Allow users to specify an initial shared runner registration token 11de915b\n- Update Mattermost to version 3.6  4fcdc632\n- Include Prometheus and Node Exporter, off by default  bef79732\n- Let users expose Mattermost host if installed on other server  2aec8f66\n- Make gitlab.rb template file scraping friendly 92e5eedf\n\n## 8.15.7\n- Update Mattermost to 3.5.3 to patch a security vulnerability\n\n## 8.15.6\n- Pin bundler version to 1.13.7 to avoid breaking changes\n- Update Mattermost to 3.5.2 to patch a XSS vulnerability\n\n## 8.15.5\n\n- No changes\n\n## 8.15.4\n\n- No changes\n\n## 8.15.3\n\n- No changes\n\n## 8.15.2\n\n- No changes\n\n## 8.15.1\n\n- No changes\n\n## 8.15.0\n\n- Update git to 2.8.4 381c0b9d\n- Clean up apt lists to reduce the Docker image size (Tao Wang) 7e796c5f\n- Enable Mattermost slash commands by default 2b3406\n- Enable overriding of username and profile picture for webhook on Mattermost by default 8528864\n- Fix Mattermost authorization with Gitlab (Tyranron) d704d3\n- Expose Mattermost url in gitlab.yml 4d90c7fa\n- Add prometheusListenAddr config setting for gitlab-workhorse 12bb9df2\n- Fix Mattermost service file not respecting `mattermost[\'home\']` option ca96b4e\n- Bump ruby version to 2.3.3 9f5fe2c2\n- Add configuration that allows overriding proxy headers for GitLab Pages NGINX (BruXy) c2722f1e\n- Make hideRefs option of git default in omnibus installations e7484a9b\n- Use internal GitLab mirrors of rb-readline and registry as cache 2d137543\n- Adding attribute for gitlab-shell custom hooks f753e1f0\n- Pass websockets through to workhorse for terminal support 849ffc\n- Add notification for new PostgreSQL version 05dbb3ec\n- Update libcurl to 7.52.0 ea11a83\n- Add EE sidekiq_cluster configurable for setting up extra Sidekiq processes\n\n## 8.14.10\n- Update Mattermost to 3.5.3 to patch a security vulnerability\n\n## 8.14.9\n- Pin bundler version to 1.13.7 to avoid breaking changes\n\n## 8.14.8\n- Update Mattermost to 3.5.2 to patch a XSS vulnerability\n\n## 8.14.7\n\n- No changes\n\n## 8.14.6\n\n- No changes\n\n## 8.14.5\n\n- Expose client_output_buffer_limit redis settings 5f1503\n\n## 8.14.4\n\n- Fix gitlab-ctl pg-upgrade to properly handle database encodings 46e71561\n- Update symlinks of postgres on both upgrade and reconfigure 484a3d8a\n\n## 8.14.3\n\n- Patch Git 2.7.4 for security vulnerabilities 568753c3\n\n## 8.14.2\n\n- Revert 34e28112 so we don\'t listen on IPv6 by default\n\n## 8.14.1\n\n- No changes\n\n## 8.14.0\n\n- Switch the redis user\'s shell to /bin/false 9d60ee4\n- NGINX listen on IPv6 by default (George Gooden) 34e28112\n- Upgrade Nginx to 1.10.2 085bf610\n- Update Redis to 3.2.5 (Takuya Noguchi) edf0575c1\n- Updarted cacerts.pem to 2016-11-02 version aca2f5e88\n- Stopped using PCRE in the storage directory helper 0e06490\n- Add git-trace logging for gitlab-shell 1dab1c\n- Update mattermost to 3.5 7ecf31\n- Add support for OpenSUSE 13.2 and 42.1 82b7345 6ea9e2\n- Support Redis Sentinel daemon (EE only) 457c4764\n- Separate package repositories for OL and SL e37eaae\n- Add mailroom idle timeout configuration 0488f3de\n\n## 8.13.12\n\n- No changes\n\n## 8.13.11\n\n- No changes\n\n## 8.13.10\n\n- No changes\n\n## 8.13.9\n\n- No changes\n\n## 8.13.8\n\n- Patch Git 2.7.4 for security vulnerabilities 2d7cf04a\n\n## 8.13.7\n\n- No changes\n\n## 8.13.6\n\n- No changes\n\n## 8.13.5\n\n- No changes\n\n## 8.13.4\n\n- Update curl to 7.51.0 to get the latest security patches fc32c83\n- Fix executable file mode for the Docker image update-permissions command 6c80205\n\n## 8.13.2\n\n- Move mail_room queue from incoming_email to email_receiver 373609c\n\n## 8.13.1\n\n- Update docs for nginx status, fix the default server for status config b49fb1\n\n## 8.13.0\n\n- Add support for registry debug addr configuration 87b7a780\n- Add support for configuring workhorse\'s api limiting 1b6c85d4\n- Fix unsetting the sticky bit for storage directory permissions and improved error messages 7467b51\n- Fixed a bug with disabling registry storage deletion be305d40\n- Support specifying a post reconfigure script to run in the docker container aa8bec5\n- Add support for nginx status (Luis Sagastume) 3cd7b36\n- Enable jemalloc by default 0a7799d2\n- Move database migration log to a persisted location b368c46c\n\n## 8.12.13\n\n- No changes\n\n## 8.12.12\n\n- No changes\n\n## 8.12.11\n\n- Patch Git 2.7.4 for security vulnerabilities 564cfddf\n\n## 8.12.10\n\n- No changes\n\n## 8.12.9\n\n- No changes\n\n## 8.12.8\n\n- No changes\n\n## 8.12.7\n\n- Use forked gitlab-markup gem (forked from github-markup) 422d9bf20\n\n## 8.12.6\n\n- No changes\n\n## 8.12.5\n\n- Update the storage directory helper to check permissions for symlink targets\n\n## 8.12.4\n\n- No changes\n\n## 8.12.3\n\n- Updated cacerts.pem to 2016-09-14 version 9bc1fec\n\n## 8.12.2\n\n- Update openssl to 1.0.2j 527d02\n\n## 8.12.1\n\n- Fix gitlab-workhorse Runit template bug e20e5ff\n\n## ## 8.12.0\n\n- Add support for using NFS root_squash for storage directories d5cf0d1d\n- Update mattermost to 3.4 6857c902\n- Add `gitlab-ctl deploy-page status` command b8ffd251\n- Set read permissions on the trusted certificates in case they are restricted\n- Fix permissions for nginx proxy_cache directory (Charles Blaxland) 4eb85976\n- Render gitlab-workhorse token c50c85\n- Enable git packfile bitmap creation 2a07f08\n- Localise all custom sources in .custom_sources.yml 5bcbd4f\n- Update the mode of the certificate files when using trusted certificates b00cd4\n- Allow configuring Rack Attack endpoints (Dmitry Ivanov) 7aee63\n- Bundle jemalloc and allow optional enable 1381ba\n- Use single db_host when multi postgresql::listen_adresses (Julien Garcia Gonzalez) 717dc269\n- Add gitlab-ctl registry-garbage-collect command  5f5526d3\n- Update curl to version 7.50.3 7848b550\n- Add default HOME variable to workhorse fcfa3672\n- Show GitLab ascii art after installation (Luis Sagastume) 17ed6cb\n\n## 8.11.11\n\n- No changes\n\n## 8.11.10\n\n- No changes\n\n## 8.11.9\n\n- No changes\n\n## 8.11.8\n\n- No changes\n\n## 8.11.7\n\n- No changes\n\n## 8.11.6\n\n- Fix registry build by enabling vendor feature\n\n## 8.11.5\n\n- No changes\n\n## 8.11.4\n\n- Fix missing Logrotate directory 453ea\n- Expose shared_preload_libraries Postresql settings f0557\n- Expose log_line_prefix Postresql settings cae662\n\n## 8.11.3\n\n- Patch docutils to work with Python3 to restore .RST rendering 70ee88c2\n\n## 8.11.2\n\n- Fixed a regression where the default container registry and mattermost nginx proxy headers were not being set\n\n## 8.11.1\n\n- Unreleased\n\n## 8.11.0\n\n- Add configuration that allows overriding proxy headers for Mattermost NGINX config (Cody Mize) 4985ca\n- Upgrade krb5 lib to 1.14.2 3670e5\n- Set ICU_DATA to the right path to make Charlock Holmes and libicu work properly 60e8061d\n- Upgrade chef-zero to 4.8.0 e390cd\n- Create logrotate folders and configs even when the service is disabled (Gennady Trafimenkov) eae7c9\n- Added nginx options to enable 2-way SSL client authentication (Oliver Hernandez) c51085\n- Upgrade libicu to 57.1 f58a4b15\n- Upgrade Nginx to 1.10.1 67a0bd0\n- Allow configuration of the authorized_keys file location used by gitlab-shell\n- Upgrade omnibus to 5.4.0 7bac2\n- Add configuration that allows disabling of db migrations (Jason Plum) a50d09\n- Initial support for Redis Sentinel 267ace\n- Do not manage authorized keys anymore 7dc1d6\n- Upgrade to Chef 12.12.15 c930fbd4\n- Tidy up key names for secrets to match GitLab Rails app\n- Update rsync to 3.1.2 8cc078\n- Upgrade ruby to 2.3.1 58a13\n- Change config_guess to a private mirror 1b197\n- Remove Redis dump.rdb on downgrades for furuture packages (Gustavo Lopez) 824530\n- Update postgresql to 9.2.18 (Takuya Noguchi)\n- Update expat to 2.2.0 (Takuya Noguchi)\n- Ignore and don\'t write `gitlab_ci:gitlab_server` key in gitlab-secrets file 10bcb\n\n## 8.10.10\n\n- No changes\n\n## 8.10.9\n\n- Fix registry build by enabling vendor feature\n\n## 8.10.8\n\n- No changes\n\n## 8.10.7\n\n- No changes\n\n## 8.10.6\n\n- No changes\n\n## 8.10.5\n\n- Pin mixlib-log to version 1.6.0 in order to keep the log open for writes during reconfigure 7345d\n\n## 8.10.4\n\n- Revert Host and X-Forwarded-Host headers in NGINX 9ac08\n- Better handle the ssl certs whitelisted files when the directory has been symlinked 97493919d\n- Fix issue where mattermost log file is created by the root user 581fa\n\n## 8.10.3\n\n- No changes\n\n## 8.10.2\n\n- Exclude standard ports from Host header\n\n## 8.10.1\n\n- Fix custom HTTP/HTTPS external ports ddcf302f\n\n## 8.10.0\n\n- Fix RangeError bignum too big errors on armhf platforms 4ba24bfe\n- Update redis to 3.2.1 (Takuya Noguchi) 144bf\n- Updated Chef version to 12.10.24 6e0c66\n- Disable nodejs Snapshot feature on ARM platforms f9a7b4bf\n- Update the trusted certs recipe to copy in certs that were linked in from external folders\n- Use gitlab:db:configure to seed and migrate the database 047cfd\n- Update Mattermost to 3.2 28cf3\n- Lower expiry date of registry internal certificate b269b4\n- Add personal access token to rack attack whitelist 21abc\n\n## 8.9.10\n\n- No changes\n\n## 8.9.9\n\n- Fix registry build by enabling vendor feature\n\n## 8.9.8\n\n- No changes\n\n## 8.9.7\n\n- No changes\n\n## 8.9.6\n\n- Bump chef-zero to 4.7.1 to squelch debug messages 9eefa12f\n\n## 8.9.5\n\n- No changes\n\n## 8.9.4\n\n- Bump chef-zero to 4.7.0 to retain Ruby 2.1 compatibility 8495179\n\n## 8.9.3\n\n- IMPORTANT: Location of the trusted certificate directory has changed e2e7b\n\n## 8.9.2\n\n- Restart unicorn for the adjusted trusted certs if unicorn is running 3748d9\n- Change the default imap timeout to 60 03684d\n\n## 8.9.1\n\n- Prevent running CREATE EXTENSION in a slave server 7821bbaa\n- Skip choosing an init system recipe when running in a container e229a968\n\n## 8.9.0\n\n- Make default IMAP incoming mailbox "inbox" in case user omits this setting d3c187\n- Make NGINX server_names_hash_bucket_size configurable and default it to 64 bytes 7cb488\n- Use gitlab:db:configure to seed and migrate the database\n- Add log prefix for pages and registry services 48e29b\n- Add configuration option for the Container Registry storage driver\n- Change the autovacuum configuration defaults f5ac85\n- Update redis to 3.2.0 (Takuya Noguchi) 357263\n- Add configuration that allows overriding proxy headers for Registry NGINX config (Alexander Zigelski) 046c84c\n- Update version of pcre ac72670\n- Update version of expat ac72670\n- Update postgresql to 9.2.17 (Takuya Noguchi) 6e0c0f\n- Make one unicorn new default 0ddd2\n- Trim Docker image size 2aedc2\n- Expose track_activity_query_size setting for Postgresql 5ebd7c\n- Expose maxclients setting for Redis 535540c\n- Add expire_build_artifacts_worker cron config 3603b\n- Upgrade Mattermost to 3.1 d446f0\n- Add expire_build_artifacts_worker cron config 3603b7\n- Allow adding custom trusted certificates (Robert Habermann) 48e891\n- Increase the Unicorn memory limits to 400-650MB 8f688\n- Add configuration for Registry storage config 545856\n\n## 8.8.9\n\n- No changes\n\n## 8.8.8\n\n- No changes\n\n## 8.8.7\n\n- No changes\n\n## 8.8.6\n\n- Update version of pcre\n- Update version of expat\n\n## 8.8.5\n\n- No changes\n\n## 8.8.4\n\n- No changes\n\n## 8.8.3\n\n- Add gitlab_default_projects_features_container_registry variable\n\n## 8.8.2\n\n- Update docker/distribution to 2.4.1 1c01c9c\n- Update libxml2 to 2.9.4 a3f7d6\n- Add Postgresql autovacuuming configuration 289c25\n\n## 8.8.1\n\n- No changes\n\n## 8.8.0\n\n- Disable Rack Attack throttling if specified in config 631511f8\n- Update postgresql to 9.2.16 (CVE-2016-2193/CVE-2016-3065) (Takuya Noguchi) d02125\n- Check mountpoint before starting up pages daemon a53e7a0\n- Add support for Container Registry f74472d\n- Add maintenance_work_mem and wal_buffers Postgresql settings 5675dc\n\n## 8.7.9\n\n- No changes\n\n## 8.7.8\n\n- Update version of pcre\n- Update version of expat\n\n## 8.7.7\n\n- No changes\n\n## 8.7.3\n\n- Update openssl to 1.0.2h\n\n## 8.7.2\n\n- No changes\n\n## 8.7.1\n\n- Package supports Ubuntu 16.04 8a4ce1f5\n- Pin versions of ohai and chef-zero to prevent reconfigure outputting too much info f9b2307c\n\n## 8.7.0\n\n- Added db_sslca to the configuration options for connecting to an external database 2b4033cb\n- Compile NGINX with the real_ip module and add configuration options b4830b90\n- Added trusted_proxies configuration option for non-bundled web-server 3f137f1c\n- Support the ability to change mattermost UID and GID c5a588da\n- Updated libicu to 56.1 4de944d9\n- Updated liblzma to 5.2.2 4de944d9\n- Change the way db:migrate is triggered 3b42520a\n- Allow Omniauth providers to be marked as external 7dd68edf\n- Enable Git LFS by default (Ben Bodenmiller) 22345799\n- Updated how we detect when to update the :latest and :rc docker build tags cb3af445\n- Disable automatic git gc 8ed13f4b\n- Restart GitLab pages daemon on version change 922f7655\n- Add git-annex to the docker image c1fdc4ff\n- Update Nginx to 1.9.12 96ca0916\n- Update Mattermost to v2.2.0 fd740e17\n- Update cacerts to 2016.04.20  edefbe2e\n- Add configuration for geo_bulk_notify_worker_cron 219125bf\n- Add configuration repository_archive_cache_worker_cron 8240ab3a\n- Update the docker update-permissions script 13343b4f\n- Add SMTP ssl configuration option (wu0407) 4a377fc2\n- Build curl dependency without libssh2 17e41f8\n\n## 8.6.9\n\n- Build curl dependency without libssh2 17e41f8\n\n## 8.6.8\n\n- Update Mattermost download URL from GitHub to releases.mattermost.com\n\n## 8.6.7\n\n- No changes\n\n## 8.6.6\n\n- No changes\n\n## 8.6.5\n\n- No changes\n\n## 8.6.4\n\n- No changes\n\n## 8.6.3\n\n- No changes\n\n## 8.6.2\n\n- Updated chef version to 12.6.0 37bf798\n- Use `:before` from Chef 12.6 to enable extension before migration or database seed fd6c88e0\n\n## 8.6.1\n\n- Fix artifacts path key in gitlab.yml.erb c29c1a5d\n\n## 8.6.0\n\n- Update redis version to 2.8.24 2773274\n- Pass listen_network of gitlab_workhorse to gitlab nginx template 51b20e2\n- Enable NGINX proxy caching 8b91c071\n- Restart unicorn when bundled ruby is updated aca3cb2\n- Add ability to use dateformat for logrotate configuration (Steve Norman) 6667865d\n- Added configuration option that allows disabling http2 protocol bcaa9e9\n- Enable pg_trgm extension for packaged Postgres f88fe25\n- Update postgresql to 9.2.15 to address CVE-2016-0773 (Takuya Noguchi) 16bf321\n- If gitlab rails is disabled, reconfigure needs to run without errors 5e695aac\n- Update mattermost to v2.1.0 f555c232\n- No static content delivery via nginx anymore as we have workhorse (Artem Sidorenko) 89b72505\n- Add configuration option to disable management of storage directories 81a370d3\n\n## 8.5.13\n\n- Build curl dependency without libssh2 17e41f8\n\n## 8.5.12\n\n- No changes\n\n## 8.5.11\n\n- Update Mattermost download URL from GitHub to releases.mattermost.com\n\n## 8.5.10\n\n- No changes\n\n## 8.5.9\n\n- No changes\n\n## 8.5.8\n\n- Bump Git version to 2.7.4\n\n## 8.5.7\n\n- Bump Git version to 2.7.3\n\n## 8.5.6\n\n- No changes\n\n## 8.5.5\n\n- Add ldap_sync_time global configuration as the EE is still supporting it 3a58bfd\n\n## 8.5.4\n\n- No changes\n\n## 8.5.3\n\n- No changes\n\n## 8.5.2\n\n- Fix regression where NGINX config for standalone ci was not created d3352a78b4c3653d922e415de5c9dece1d8e10f8\n- Update openssl to 1.0.2g 0e44b8e91033f3e1662c8ea92641f1a653b5b871\n\n## 8.5.1\n\n- Push Raspbian repository for RPI2 to packagecloud 57acdde0465ed9213726d84e2b92545344449002\n- Update GitLab pages daemon to v0.2.0 326add9babb605d4116da22dcfa30ed1aa12271f\n- Unset env variables that could interfere with gitlab-rake and gitlab-rails commands e72a6f0e256dc6cc415248ce6bc63a5580bb22f6\n\n## 8.5.0\n\n- Add experimental support for relative url installations (Artem Sidorenko) c3639dc311f2f70ec09dcd579a09443189266864\n- Restart mailroom service when a config changes f77dcfe9949ba6a425c448aff34fdb9cbe289164\n- Remove gitlab-ci standalone from the build, not all gitlab-ci code de6419c850d0302a230b172c06d9e542845bc5b7\n- Switch openssl to 1.0.2f a53d77674f32de055e7f6b4128e25ff7c801a284\n- Update nginx to 1.9.10 8201623411c028202392d7f90056e1494812ced0\n- Use http2 module 8201623411c028202392d7f90056e1494812ced0\n- Update omnibus to include -O2 compiler flag e9acc03ca296f9146fd5824e8818861c7b584a63\n- Add configuration options to override default proxy headers 3807ed87ec887ca60343a5dc09fc99af746e1535\n- Change permissions of public/uploads directory to be more restrictive 7e4aa2f5e60cbb8a5f6c6475514a73be813b74fe\n- Update mattermost to v2.0.0 8caacf73e23c930bab286b0affbf1a3c0bd93361\n- Add support for gitlab-pages daemon 0bbaba4d698306f5a2640cdf915129f5e6dd6d80\n- Added configuration options for new allow_single_sign_on behavior and auto_link_saml_user 96ba41274864857f494e220a684e9e34954c85d1\n\n## 8.4.11\n\n- Build curl dependency without libssh2 17e41f8\n\n## 8.4.10\n\n- No changes\n\n## 8.4.9\n\n- Update Mattermost download URL from GitHub to releases.mattermost.com\n\n## 8.4.8\n\n- No changes\n\n## 8.4.7\n\n- No changes\n\n## 8.4.6\n\n- No changes\n\n## 8.4.5\n\n- No changes\n\n## 8.4.4\n\n- Allow webserver user to access the gitlab pages e0cbafafad88d2478514c1485f69fc41cc076a85\n\n## 8.4.3\n\n- Update openssl to 1.0.1r 541a0ed432bfa6a5eac58be7aeb70b15b1b6ea43\n\n## 8.4.2\n\n- Update gitlab-workhorse to 0.6.2 32b3a74179e28c1572608cc62c1484caf907cb9c\n\n## 8.4.1\n\n- No changes\n\n## 8.4.0\n\n- Add support for ecdsa and ed25519 keys to Docker image (Matthew Monaco) 3bfcb2617d240937fdb77d38900ee00f1ffbce02\n- Pull the latest base image before building the GitLab Docker image (Ben Sjoberg) c9926773d708b7e94cd70b190e213ae322dbee17\n- Remove runit files when service is disabled 8c4c446c2ba42cf8a76d9a61882ac0605f678532\n- Add GITLAB_OMNIBUS_CONFIG to Docker image bfe5cb8187b0c05778fe401c2a6bbbd31b1efe2e\n- Compile all .py files during packaging b131e0fc0562c416fd62d84f43a6b3e3a03baa23\n- Correctly update md5sums for deb packager b131e0fc0562c416fd62d84f43a6b3e3a03baa23\n- Fix syntax for md5sums file b131e0fc0562c416fd62d84f43a6b3e3a03baa23\n- Update git to use symlinks for alias commands 65df6a4dcfc89557ec8413e8e967242f4db96dba\n- Remove libgit definition and rely on it being built by rugged fe38fa17db9e855f2a844a1b68a4aaf2ac169184\n- Update ruby to 2.1.8 6f1d4204ca24f67bbf453c7d751ba7977c23f55e\n- Update git to 2.6.2 6f1d4204ca24f67bbf453c7d751ba7977c23f55e\n- Ensure that cache clear is run after db:migrate b4dfb1f7b493ae5ef5fabda5c04e2dee6f4b849e\n- Add support for Elasticsearch config (EE only) 04961dd0667c7eb5946836ffae6a5d6f6c3d66e0\n- Update cacerts to 2016.01.20 8ddedf2effd8944bd79b46682ce48a1c8f635c76\n- Change the way version is specified for gitlab-rails, gitlab-shell and gitlab-workhorse a8676c647aca93c428335d35350f00bf757ee42a\n- Update Mattermost to v1.4.0 82149cf5fa9d556be558b69867c0859ea15e1a64\n- Add config for specifying environmental variables for gitlab-workhorse 79b807649d54384ddf93b214b2a23d7a2180b48e\n- Increase default Unicorn memory limits to 300-350 814ee578bbfe1f9eb2a83a9c728cd56565e89cb8\n- Forward git-annex config to gitlab.yml 796a0d9875b2c7d889878a2db29bb4689cd64b64\n- Prevent mailroom from going into restart loop 378f2355c5e9728c43baf14595bf9362c03b8b4c\n- Add gitlab-workhorse config for proxy_headers_timeout d3de62c54b5efe1d5f60c2dccef65e786b631c3b\n- Bundle unzip which is required for EE features 56e1fc0b11cd2fb5458fa8a9585d3a1f4faa8d6f\n\n## 8.3.10\n\n- Build curl dependency without libssh2 17e41f8\n\n## 8.3.9\n\n- No changes\n\n## 8.3.8\n\n- Update Mattermost download URL from GitHub to releases.mattermost.com\n\n## 8.3.7\n\n- No changes\n\n## 8.3.6\n\n- No changes\n\n## 8.3.5\n\n- No changes\n\n## 8.3.4\n\n- Update gitlab-workhorse to 0.5.4 7968c80843ac7deaaebe313c6976615a2268ac03\n\n## 8.3.3\n\n- Update gitlab-workhorse to 0.5.3 6fbe783cfd677ea16fcfe1e1090887e5ee0a0028\n\n## 8.3.2\n\n- No changes\n\n## 8.3.1\n\n- Increase default worker memory from 250MB to 300MB.\n- Update GitLab workhorse to 0.5.1 cd01ed859e6ace690a4f57a8c16d56a8fd1b7b47\n- Update rubygemst to 2.5.1 58fcbbdb31a3e6ea478e223c659634e60d82e191\n- Update libgit2 to 0.23.4 and let rugged be compiled during bundle install fb54c1f0f2dc4f122d814de408f4d751f7cc8ed5\n\n## 8.3.0\n\n- Add sidekiq concurrency setting 787aa2ffc3b50783ae17e32d69e4b8efae8ca9ac\n- Explicitly create directory that holds the logs 50caed92198aef685c8e7815a67bcb13d9ebf911\n- Updated omnibus to v5.0.0 18835f14453fd4fb834d228caf1bc1b37f1fe910\n- Change mailer to mailers sidekiq queue d4d52734072382159b0c4249fe76c104c1c3f9cd\n- Update openssl to 1.0.1q f99fd257a6aa541662095fb72ce8af802c59c3a0\n- Added support for GitLab Pages aef69fe5fccbd14c9c0112bae58d5ecaa6e680bd\n- Updated Mattermost to v1.3.0 53d8606cf3642949ced4d6e8432d4b45b0541c88\n\n## 8.2.6\n\n- Build curl dependency without libssh2 17e41f8\n\n## 8.2.5\n\n- cacerts to 2016.04.20\n- Change URL for Mattermost to releases.mattermost.com\n\n## 8.2.4\n\n- Cacerts 20.01.2016.\n- Upgrade rubygems to 2.5.1.\n\n## 8.2.3\n\n- Add gitlab_default_projects_features_builds variable (Patrice Bouillet) e13556d33772c2d6b084d358ff67ea7da2c78a91\n\n## 8.2.2\n\n- Set client_max_body_size back to all required blocks 40047e09192686a739e2b7e52133885d192dab7c\n- Specific replication entry in pg_hba.conf for Postgresql replication 7e32b1f96aaebe810d320ade965244fc2352314e\n\n## 8.2.1\n\n- Expose artifacts configuration options 4aca77a5ae78a836cc9f3be060afacc3c4e72a28\n- Display deploy page on all pages b362ee7d70851c291ff0d090fd75ef550c5c5baa\n\n## 8.2.0\n\n- Skip builds directory backup in preinstall 1bfbf440866e0834f133e305f7659df1ee1c9e8a\n- GitLab Mattermost version 1.2.1, few default settings changed 34a3a366eb9b6e5deb8117bcf4430659c0fb7ecc\n- Refactor mailroom into a separate service 959c1b3f437d49eb1a173dea5d6d5ca3d79cd098\n- Update nginx config for artifacts and lfs 4e365f159e3c70aa1aa3a578bb7440e27fcdc179\n- Added lfs config settings 4e365f159e3c70aa1aa3a578bb7440e27fcdc179\n- Rename gitlab-git-http-server to gitlab-workhorse 47afb19142fcb68d5c35645a1efa637f367e6f84\n- Updated chef version to 12.5.1 (Jayesh Mistry) 814263c9ecdd3e6a95148dfdb15867468ef43c7e\n- gitlab-workhorse version 0.4.2 3b66c9be19e5718d3e92df3a32df4edaea0d85c2\n- Fix docker image pushing when package is RC 99bad0cf400460ade2b2360a1e4e19605539a6c9\n\n## 8.1.3\n\n- Update cacerts to 2015.10.28 e349060c81b75f9543ececec14f5c9c721c91d50\n\n## 8.1.2\n\n- Load the sysctl config as soon as it is set a9f5ece8e7f08a23ceb792e919c941d01d3e14b7\n- Added postgresql replication settings f1949604de8017355c26710205156a0147ffa793\n\n## 8.1.1\n\n- Fix missing email feedback address for Mattermost (Pete Deffendol) 4121e5853a00ed882a6eb97a40fc274f05d3b68c\n- Fix reply by email support in the package 49cc150360028d62d8d64c6416fad78d474a5933\n- Add mailroom to the log 01e26d3412a4e2fac7411874bc81a20a27123921\n- Fix sysctl param loading da0c487ff8518f0989052a53d397a7cb669acb35\n\n## 8.1.0\n\n- Restart gitlab-git-http-server on version change\n- Moved docker build to omnibus-gitlab repository 9757575747c9d78e355ecd76b11dd7b9dc4d94b5\n- Using sv to check for service status e7b00e4a5d8f0195d9a3f59a6d398a6d0dba3773\n- Set kernel.sem for postgres connections dff749b36a929f9a7dfc128b60f3d53cf2464ed8\n- Use ruby 2.1.7 6fb46c4db9e5daf8a724f5c389b56ea8d918b36e\n- Add backup encryption option for AWS backups 8562644f3dfe44b6faed35f8e0769a0b7c202569\n- Update git to 2.6.1 b379c1060a6af314209b86161ea44c8467c5a49f\n- Update gitlab-git-http-server to 0.3.0 737815fd22a71f1b94379a1a11d8b82367cc7b3a\n- Move incoming email settings to gitlab.yml 9d8673e221ad869199d633c7feccab167a64df6d\n- Add config to enable slow query logging e3c4013d4c01ec372962b1310f17af5ded963ea4\n- GitLab Mattermost to 1.1.1 38ef5d7b609c190502d48374cc2b88cbe0caa307\n- Do not try to stop ci services if they are already disabled 635d7952fad2d501a8f1a38a9e977c4297ce2e52\n\n## 8.0.4\n\n- Fix accidental removal of creating backup directory cb7afb0dff528b8e7f3e8c54801e3635576e33a7\n- Create secrets and database templates for gitlab-ci for users upgrading from versions prior to 7.14 b9df5e8ce58b818c3b0650ab4d99c883bead3991\n- Change the ownership of gitlab-shell/hooks directory a6fe61e7e1f54c1eadce78072ba902388db5453f\n\n## 8.0.3\n\n- Update gitlab-git-http-server to 0.2.10 76ea52321be798329e5ece9f4b935bb1f2b579ad\n- Switch to chef-gem 6b15effce70a41c0041e0bca8b80d72c02be1fcf\n\n## 8.0.2\n\n- If using external mysql for mattermost don\'t run postgres code d847479b8bcb523110aae9230bcf480def3eab15\n- Add incoming_email_start_tls config ec02a9076f1c59dbd9a85cbfd8b164f56a8c4da7\n\n## 8.0.1\n\n- Revert "Do not buffer with nginx git http requests"\n\n## 8.0.0\n\n- gitlab-git-http-server 0.2.9 is enabled by default e6fa1b77c9501da6b6ef44c92e2705b1e94166ea\n- Added reply by email configuration 3181425e05bd7be76832957367a24df771bdc84c\n- Add to host to ssh config for git user for bitbucket importer 3b0f7ebefcb9221b4ed97f234f9e728e3faf0b7d\n- Add ability to configure the format of nginx logs 03511afa1d3440459b327bd873550c3cc6a6a44e\n- Add option to configure db driver for Mattermost f8f00ff20304753b3eeef5d004930c4a8c404e1c\n- Remove local_mode_cache_warning warnings durning reconfigure run 6cd30475cde59803f2d6f9ff8e00bde520512113\n- Update chef server version to 12.4.1 435183d75f4d2c8333923e95fc6254c52901295f\n- Enable spdy support when using ssl (Manuel Gutierrez) caafd1d9cf86ccecfc1f7ecddd3fd005727beddd\n- Explicitly set scheme for X-Forwarded-Proto (Stan Hu) 19d71ac3cbd086f25a2e4ce284ea341d96b7ec46\n- Add option to set ssl_client_certificate path (Brayden Lopez) fc0f7e9344a80ff882f4247049668ac1636e4229\n- Add new Kerberos configuration settings for EE 40fc4a8687e649b0b662014dfa61442aaf4bd437\n- Add proxy_read_timeout and proxy_connect_timeout config (Alexey Zalesnyi) 286695fd91bef6d784e21e80bf20d406440176b4\n- Add option to disable accounts management through omnibus-gitlab b7f5f2bea422f190dd260eb555cbf4c6c7e1b351\n- Change the way sysctl configuration is being invoked 5481024558c4881d7c30942419358e12a0340673\n- Fix redirect ports in nginx templates 54e342cd8dc6315bcabafc4efb81be108c78b5ee\n- Do not buffer with nginx git http requests 99ea9025a48427f1cbfeafe3a577c88d7dd7817d\n\n## 7.14.3\n\n- Add redis password option when using TCP auth d847479b8bcb523110aae9230bcf480def3eab15\n\n## 7.14.2\n\n- Update gitlab-git-http-server to version 0.2.9 82a3bec2eb3f006bb9327a59608f99cae81d5c92\n- Ignore unknown values from gitlab-secrets.json (Stan Hu) ef76c81d7b71f72d6438e3458d61ecaef8965e17\n- Update cacerts to 2015.09.02 6bb15558b681035e0db75e41f5a14cc878344c9d\n\n## 7.14.1\n\n- Update gitlab-git-http-server to version 0.2.8 505de5318f8e464f88e7a57e65d76387ef86cfe5\n- Fix automatic SSO authorization between GitLab and Mattermost (Hiroyuki Sato) 1e7453bb71b92ba0fb095fc9ebab25015451b6bc\n\n## 7.14.0\n\n- Add gitlab-git-http-server (disabled by default) 009aa7d2e68bc84717fd363c88e655ee510aa8e5\n- Resolved intermittent issues in gitlab-ctl reconfigure 83ce5ac3fe50acf3da1da572cd8b88016039f1a0\n- Added backup_archive_permissions configuration option fdf9a793d533c0b3ca19295746ba6cba33b1af7a\n- Refactor gitlab-ctl stop for unicorn and logrotate b692b824454681c6a204f627b9be72d6fcf7838d\n- Include GitLab Mattermost in the package 7a6f6012b8c3a8e187bd6213278e5b37d533d228\n\n## 7.13.2\n\n- Move config.ru out of etc directory to prevent passenger problems 5ee0ac221485ce0e385f4999838f319ba65755ed\n- Fix merge gone wrong to include upgrade to redis 2.8.21 528400090ed82ff212f08c4402c0b4681f91dc2e\n\n## 7.13.1\n\n- No changes\n\n## 7.13.0\n\n- IMPORTANT: Default number of unicorn workers is at minimum 2, maximum number is calculated to leave 1GB of RAM free 2f623a5e9b6d8c64b9ac30cd656a4e852895fcf0\n- IMPORTANT: Postgresql unix socket is now moved from Postgresql default to prevent clashes between packaged and (possibly) existing Postgresql installation 9ca63f517d1bc6876abe90738e1fd99ea6f17ef6\n- Packages will be built with new tags b81165d93422a8cb7ed80b0f33107bba636b094f\n- Unicorn worker restart memory range is now configurable 69e0f8f2412509bead62944c6cd891a57926303a\n- Updated redis to 2.8.21 d1f2f38da7381507624e18fcb77e489dff1d988b\n- Updated omnibus-ctl to 0.3.6 d1f2f38da7381507624e18fcb77e489dff1d988b\n- Updated chef to 12.4.0.rc.2 d1f2f38da7381507624e18fcb77e489dff1d988b\n- Updated nginx to 1.7.12 d1f2f38da7381507624e18fcb77e489dff1d988b\n- Updated libxml2 to 2.9.2 d1f2f38da7381507624e18fcb77e489dff1d988b\n- Updated postgresql to 9.2.10 d1f2f38da7381507624e18fcb77e489dff1d988b\n- Updated omnibus to commit 0abab93bb67377d20c94bc4322018e2248b4a610 d1f2f38da7381507624e18fcb77e489dff1d988b\n- Postinstall message will check if instance is on EC2. Improved message output. dba7d1ed2ad06c6830b2f51d0d2090e2fc1d1490\n- Change systemd service so GitLab starts up only after all FS are mounted and services started 2fc8482dafed474cb508b67ef17e982e3a30bdd1\n- Use posttrans scriplet for RHEL systems to run upgrade or symlink omnibus-gitlab commands f9169ba540ae82017680d3bb313ecc1f5dc3567d\n- Set net.core.somaxconn parameter for unicorn f147911fd0f9ddb4b55c26010bcedca1705c1b0b\n- Add configuration option for builds directory for GitLab CI a9bb2580db4f9aabf086d25122d30aeb78e2f756\n- Skip running selinux module load if selinux is disabled 5707ef1d25ff3ea202ce88d444154b5c5a6a9158\n\n## 7.12.2\n\n- Fix gitlab_shell_secret symlink which was removed by previous package on Redhat platform systems b34d4bcf4fae9581d94bdc5ed104a4655b72f4ad\n- Upgrade openssl to 1.0.1p 0ebb908e130d191c3fa7e98b0a16f1e303d50890\n\n## 7.12.1\n\n- Added configuration options for auto_link_ldap_user and auto_sign_in_with_provider fdb185c14fa8fd7e57fddb41b62ce15ae4544380\n- Update remote_syslog to 1.6.15 a1b3772ad32a3989b172aea175e7850609deb6e2\n- Fixed callback url for CI autoauthorization dbb46b073d70aec5385efd056cfa45e39fbce764\n\n## 7.12.0\n\n- Allow install_dir to be changed to allow different build paths (DJ Mountney) d205dc9e4da86ea39af18a6715f9538d3893488cf\n- Switched to omnibus fork 99c713cb579e8371a334b4e43a7d7863794d8374\n- Upgraded chef to 12.4.0.rc.0 b1a3870bd5a5bc60335655a4965f8f80a9be939f\n- Remove generated gitlab_shell_secret file during build 8ba8e9221516a0235f565bc5560bd0cec9c3c48e\n- Update redis to 2.8.20 6589e23ed79c883988e0ebefc356699f5f94228f\n- Exit on package installation if backup failed and wasn\'t skipped 710253c318a029bf1bb158c6c9fc81f0f695fe34\n- Added sslmode and sslrootcert database configuration option (Anthony Brodard) dbeb00346ccafdda50e52cf601c6b457b5981b74\n- Added option to disable HTTPS on nginx to support proxied SSL for GitLab CI\n- Added custom listen_port for GitLab CI nginx to support reverse proxies\n- IMPORTANT: secret_token in gitlab.rb for GitLab, GitLab-shell and GitLab CI will now take presedence over the auto generated one\n- Automatically authorise GitLab CI with GitLab when they are on the same server\n- Transmit gitlab-shell logs with remote_syslog 9242b83525cc18df22d1f44fb002a67e94b4ad5c\n- Moved GitLab CI cronjob from root to the gitlab-ci user 4b9926b8c016c2c10f8511a5b083f6d5a7071041\n- gitlab-rake and gitlab-ci-rake can be ran without sudo 4d4e3702ffee890eabed1d4cb61dd351baf2b554\n- Git username and email are removed from git users gitconfig 1911109c0679f90e5184415c52ad5da4e31b7171\n- Updated openssl to 1.0.1o 163305cac9ecd37425c3b1e10a390176a753717c\n- Updated git version to 2.4.3 88186e3e71064c0d9e7ae674c5f68450226dfa68\n- Updated SSL ciphers to exclude all DHE suites 08f790400b31eb3fbf4ce0ee736f7cc9082b28fc\n- Updated rubygems version to 2.2.5 c85aed400bd8e17c5e919d19cd93c08616190e0b\n- Rewrite runit default recipe which will now decide differently on which init is used  d3156878eadd643f136ee49d233e6c0b4ccebb28\n- Do not depend on Ohai platform helper for running selinux recipe cee73a23488f61fd5a0c2b090a8e86ca5209cd3c\n\n## 7.11.0\n\n- Set the default certificate authority bundle to the embedded copy (Stan Hu) 673ac210216b9c01d58196e826b98db780a4ccd5\n- Use a different mirror for libossp-uuid (DJ Mountney) 7f46d70855a4d97eb2b833fc2d120ddfc514dfd4\n- Update omnibus-software 42839a91c297b9c637a13fbe4beb05058672abe2\n- Add option to disable gitlab-rails when using only CI a784851e268ca1f23ce817c13a8d421c3211f96a\n- Point to different state file for gitlab logrotate 42591805f64c48cb845538012b2a43fe765637d2\n- Allow setting ssl_dhparam in nginx config 7b0c80ed9c1d85bebeedfc211a9b9e395593278c\n\n## 7.10.0\n\n- Add option to disable HTTPS on nginx to support proxied SSL (Stan Hu) 80f4204052ceb3d47a0fdde2e006e79c099e5237\n- Add openssh as runtime dependency e9b4f537a67ea6a060d8a974d3fc56f927a218b2\n- Upgrade chef-gem version to 11.18.0 5a5300fe6b43c3ce11b796bb0ffc9fe62c731b1b\n- Upgrade gitlab-ctl version to 0.3.3 cdcbb3b4bc299ef264633188570228d886d1a5c4\n- Specify build directory for pip for docutils build a0e240c9693ebd8ec272282d37626f12dfee5da5\n- Upgrade ruby to 2.1.6 5058dd591df5bcea08b98ed365eb29f955715ea6\n- Add archive_repo sidekiq queue 3ed5e6e162794f4dc173a5e801dab975be6f61a2\n- Add CI services to remote syslog 5fa5235aef0b8b119b3deb1ab1274a9e72ac6a2d\n- Set number of unicorn workers to CPU core count + 1 5ad7e8b89c10417d8663520ecc43432bf3d8a0db\n- Upgrade omnibusy-ruby to 4.0.0 d8d6a20551cd8376e2cfc05b53487911da7aa7b1\n- Upgrade postgresql version to 9.2.9  d8d6a20551cd8376e2cfc05b53487911da7aa7b1\n- Upgrade nginx to 1.7.11 528658852f9f5a1cc75a80ea86f48f92b75d54a3\n- Upgrade zlib to 1.2.8 20ed5ce4d0a6eb5326319761fc7fd53dbcebb620\n- Create database using the database name in attributes c5dfbe87869f85f45d6df16b1ebd3f4967fc7eb0\n- Add gitlab_email_reply_to property (Stan Hu) e34317a289ae2a904c981b1ff6db7c4098571835\n- Add configuration option for gitlab-www user home dir e975b3ab47a4ccb795da4721ef32b54340434354\n- Restart nginx instead of issuing a HUP signal changes so that changes in listen_address work (Stan Hu) 72d09b9b29a1a974e35aa6088912b6a6c4d7e4ac\n- Automatically stop GitLab, backup, reconfigure and start after a new package is installed\n- Rename the package from \'gitlab\' to \'gitlab-ce\' / \'gitlab-ee\'\n- Update cacerts version e57085281e9f4d3ae15d4f2e14a88b3399cb4df3\n- Better parsing of DB settings in gitlab.rb 503fad5f9d0a4653d8540331f77f487a7b51ce3d\n- Update omnibus-ctl version to 0.3.4 b5972560c801bc22658d459ad00fa4f33a6c34d2\n- Try to detect init system in use on Debian (nextime) 7dd0234c19616e1cbe0656e55ef8a53be3fe882b\n- Devuan support added in runit (nextime) 7dd0234c19616e1cbe0656e55ef8a53be3fe882b\n- Disable EC2 plugin 70ba5285e1e89ababf25c9cb9ac817bb582f5a43\n- Disable multiple ohai plugins 0026ba26757a2b7168e7de86ab0652c0aec62ddf\n\n## 7.9.0\n\n- Respect gitlab_email_enabled property (Daniel Serodio) e2982692d49772c4f896a775e476a62b4831b8a1\n- Use correct cert for CI (Flávio J. Saraiva) 484227e2dfe33f59e3683a5757be6842d7ce79d2\n- Add ca_path and ca_file params for smtp email configuration (Thireus) fa9c1464bc1eb173660edfded1a2f7add7ac24b3\n- Add custom listen_port to nginx config for reverse proxies (Stan Hu) 8c438a68fb155bd3489c32a1478484ccfd9b3ffb\n- Update openssl to 1.0.1k 0aa00aecf0867e5d454ebf089cb3a23d4645632c\n- DEPRECATION: \'gitlab_signup_enabled\', \'gitlab_signin_enabled\', \'gitlab_default_projects_limit\', \'gravatar_enabled\' are deprecated, settings can be changed in admin section of GitLab UI\n- DEPRECATION: CI setting `gitlab_ci_add_committer` is deprecated. Use `gitlab_ci_add_pusher` to notify user who pushed the commit of a failing build\n- DEPRECATION: \'issues_tracker_redmine\', \'issues_tracker_jira\' and related settings are deprecated. Configuring external issues tracker has been moved to Project Services section of GitLab UI\n- Change default number of unicorn workers from 2 to 3 3d3f6e632b61326f6ff0376d7151cf7cf945383b\n- Use systemd for debian 8 6f8a9e2c8258de883a437d1b8104d69726a18bdd\n- Increase unicorn timeout to 1 hour f21dddc2d2e20c7a7d3376dc2839fff2629ec406\n- Add nodejs dependency\n- Added option to add keys needed for bitbucket importer c8c720f97098774679bca2c1d1200e2a8126827f\n- Add rack attack and email_display name config options e3dcc9a7efcec9b4ddf7e715fed9da7ac971cc57\n\n## 7.8.0\n\n- Add gitlab-ci to logrotate (François Conil) 397ce5bab202d9d86e30a62538dca1323b7f6f4c\n- New LDAP defaults, port and method 7a65245c59fd094e88784f924ecd968d134716fa\n- Disable GCE plugin 35b7b89c78fe7e1c35bb7063c2a03e70d6915c1d\n\n## 7.7.0\n\n- Update ruby to 2.1.5 79e6833045e70a43ac66f65252d40773c20438df\n- Change the root_password setting to initial_root_password 577a4b7b895e17cbe159bf317169d173c6d3567a\n- Include CI Oauth settings option 2e5ae7414ecd9f73cbfe284af5d38ee65ac892e4\n- Include option to set global git config options 8eae0942ec27ffeec534ba02e4171a3b6cd6d193\n\n## 7.6.0\n- Update git to 2.0.5 0749ffc43b4583fae6fc8ac1b91111340a225f92\n- Update libgit2 and rugged to version 0.21.2 66ac2e805a166ecb10bdf8ba001b106acd7e49f3\n- Generate SMTP settings using one template for both applications (Michael Ruoss) a6d6ff11f102c6fa9da6209f80162c5e137feeb9\n- Add gitlab-shell configuration settings for http_settings, audit_usernames, log_level 5e4310442a608c5c420ffe670a9ab6f111489151\n- Enable Sidekiq MemoryKiller by default with a 1,000,000 kB limit 99bbe20b8f0968c4e3c4a42281014db3d3635a7f\n- Change runit recipe for Fedora to systemd (Nathan) fbb7687f3cc2f38faaf6609d1396b76d2f6f7507\n- Added kerberos lib to support gitlab dependency 66fd3a85cce74754e850034894a87d554fdb04b7\n- gitlab.rb now lists all available configuration options 6080f125697f9fe7113af1dc80e0a7bc9ddb284e\n- Add option to insert configuration settings in nginx template (Sander Boom) 5ba0485a489549a0bb33531e027a206b1775b3c0\n\n## 7.5.0\n- Use system UIDs and GIDs when creating accounts (Tim Bishop) cfc04342129a4c4dca5c4827d541c8888adadad3\n- Bundle GitLab CI with the package 3715204d86900e8501483f70c6370ba4e3f2bb3d\n- Fix inserting external_url in gitlab.rb after installation 59f5976562ce3439fb3a6e43caac489a5c230db4\n- Avoid duplicate sidekiq log entries on remote syslog servers cb514282f03add2fa87427e4601438653882fa03\n- Update nginx config and SSL ciphers (Ben Bodenmiller) 0722d29c 89afa691\n- Remove duplicate http headers (Phill Campbell) 8ea0d201c32527f095d3afa707a38865984e27d2\n- Parallelize bundle install during build c53e92b80f423c90f2169fbd2d9ef33ce0233cb6\n- Use Ruby 2.1.4 e083162579f00814086f34c1cf02c96dc9796f69\n- Remove exec symlinks after gitlab uninstall 70c9a6e00be8814b8cad337b1e6d212be88a3f99\n- Generate required gitlab_shell_secret d65d4832f1164dfe62036a65d1899ccf80cbe0c6\n\n## 7.4.0\n- Fix broken environment variable removal\n- Hard-code the environment directory for gitlab-rails\n- Set PATH and RAILS_ENV via the env directory\n- Set the environment for gitlab-rails and gitlab-rake via chpst\n- Configure bundle exec wrapper with gitlab-rails-rc\n- Add a logrotate service for `gitlab-rails/production.log` etc.\n- Again using backwards compatible ssl ciphers\n- Increased Unicorn timeout to 60s\n- For non-bundled webserver added an option of supplying external webserver user username\n- Add option for using backup uploader\n- Update openssl to 1.0.1j\n- If hostname is correctly set, omnibus will prefill external_url\n\n## 7.3.1\n- Fix web-server recipe order\n- Make /var/opt/gitlab/nginx gitlab-www\'s home dir\n- Remove unneeded write privileges from gitlab-www\n\n## 7.3.0\n- Add systemd support for Centos 7\n- Add a Centos 7 SELinux module for ssh-keygen permissions\n- Log `rake db:migrate` output in /tmp\n- Support `issue_closing_pattern` via gitlab.rb (Michael Hill)\n- Use SIGHUP for zero-downtime NGINX configuration changes\n- Give NGINX its own working directory\n- Use the default NGINX directory layout\n- Raise the default Unicorn socket backlog to 1024 (upstream default)\n- Connect to Redis via sockets by default\n- Set Sidekiq shutdown timeout to 4 seconds\n- Add the ability to insert custom NGINX settings into the gitlab server block\n- Change the owner of gitlab-rails/public back to root:root\n- Restart Redis and PostgreSQL immediately after configuration changes\n- Perform chown 7.2.x security fix in postinst\n\n## 7.2.0\n- Pass environment variables to Unicorn and Sidekiq (Chris Portman)\n- Add openssl_verify_mode to SMTP email configuration (Dionysius Marquis)\n- Enable the \'ssh_host\' field in gitlab.yml (Florent Baldino)\n- Create git\'s home directory if necessary\n- Update openssl to 1.0.1i\n- Fix missing sidekiq.log in the GitLab admin interface\n- Defer more gitlab.yml defaults to upstream\n- Allow more than one NGINX listen address\n- Enable NGINX SSL session caching by default\n- Update omnibus-ruby to 3.2.1\n- Add rugged and libgit2 as dependencies at the omnibus level\n- Remove outdated Vagrantfile\n\n## 7.1.0\n- Build: explicitly use .forward for sending notifications\n- Fix MySQL build for Ubuntu 14.04\n- Built-in UDP log shipping (Enterprise Edition only)\n- Trigger Unicorn/Sidekiq restart during version change\n- Recursively set the SELinux type of ~git/.ssh\n- Add support for the LDAP admin_group attribute (GitLab EE)\n- Fix TLS issue in SMTP email configuration (provides new attribute tls) (Ricardo Langner)\n- Support external Redis instances (sponsored by O\'Reilly Media)\n- Only reject SMTP attributes which are nil\n- Support changing the \'restricted_visibility_levels\' option (Javier Palomo)\n- Only start omnibus-gitlab services after a given filesystem is mounted\n- Support the repository_downloads_path setting in gitlab.yml\n- Use Ruby 2.1.2\n- Pin down chef-gem\'s ohai dependency to 7.0.4\n- Raise the default maximum Git output to 20 MB\n\n## 7.0.0-ee.omnibus.1\n- Fix MySQL build for Ubuntu 14.04\n\n## 7.0.0\n- Specify numeric user / group identifiers\n- Support AWS S3 attachment storage\n- Send application email via SMTP\n- Support changing the name of the "git" user / group (Michael Fenn)\n- Configure omniauth in gitlab.yml\n- Expose more fields under \'extra\' in gitlab.yml\n- Zero-downtime Unicorn restarts\n- Support changing the \'signin_enabled\' option (Konstantinos Paliouras)\n- Fix Nginx HTTP-to-HTTPS log configuration error (Konstantinos Paliouras)\n- Create the authorized-keys.lock file for gitlab-shell 1.9.4\n- Include Python and docutils for reStructuredText support\n- Update Ruby to version 2.1.1\n- Update Git to version 2.0.0\n- Make Runit log rotation configurable\n- Change default Runit log rotation from 10x1MB to 30x24h\n- Security: Restrict redis and postgresql log directory permissions to 0700\n- Add a \'gitlab-ctl deploy-page\' command\n- Automatically create /etc/gitlab/gitlab.rb after the package is installed\n- Security: Use sockets and peer authentication for Postgres\n- Avoid empty Piwik or Google Analytics settings\n- Respect custom Unicorn port setting in gitlab-shell\n\n## 6.9.4-ee.omnibus.1\n- Security: Use sockets and peer authentication for Postgres\n\n## 6.9.2.omnibus.2\n- Security: Use sockets and peer authentication for Postgres\n\n## 6.9.2\n- Create the authorized-keys.lock file for gitlab-shell 1.9.4\n\n## 6.9.1\n- Fix Nginx HTTP-to-HTTPS log configuration error (Konstantinos Paliouras)\n\n## 6.9.0\n- Make SSH port in clone URLs configurable (Julien Pivotto)\n- Fix default Postgres port for non-packaged DBMS (Drew Blessing)\n- Add migration instructions coming from an existing GitLab installation (Goni Zahavy)\n- Add a gitlab.yml conversion support script\n- Correct default gravatar configuration (#112) (Julien Pivotto)\n- Update Ruby to 2.0.0p451\n- Fix name clash between release.sh and `make release`\n- Fix Git CRLF bug\n- Enable the \'sign_in_text\' field in gitlab.yml (Mike Nestor)\n- Use more fancy SSL ciphers for Nginx\n- Use sane LDAP defaults\n- Clear the Rails cache after modifying gitlab.yml\n- Only run `rake db:migrate` when the gitlab-rails version has changed\n- Ability to change the Redis port\n\n## 6.8.1\n- Use gitlab-rails 6.8.1\n\n## 6.8.0\n- MySQL client support (EE only)\n- Update to omnibus-ruby 3.0\n- Update omnibus-software (e.g. Postgres to 9.2.8)\n- Email notifications in release.sh\n- Rewrite parts of release.sh as a Makefile\n- HTTPS support (Chuck Schweizer)\n- Specify the Nginx bind address (Marco Wessel)\n- Debian 7 build instructions (Kay Strobach)\n\n## 6.7.3-ee.omnibus.1\n- Update gitlab-rails to v6.7.3-ee\n\n## 6.7.3-ee.omnibus\n\n## 6.7.4.omnibus\n- Update gitlab-rails to v6.7.4\n\n## 6.7.2-ee.omnibus.2\n- Update OpenSSL to 1.0.1g to address CVE-2014-0160\n\n## 6.7.3.omnibus.3\n- Update OpenSSL to 1.0.1g to address CVE-2014-0160\n', 'message': 'Add 8.5.4 CHANGELOG items\n\n[ci skip]\n', 'author_name': 'Rémy Coutable', 'lang': 'md'}