gitlab: 18.5.2 -> 18.6.0

https://about.gitlab.com/releases/2025/11/20/gitlab-18-6-released/ (cherry picked from commit 671d377637)
2026-08-25 17:55:21 +00:00 · 2025-11-20 11:01:32 +01:00
parent 678b499b36
commit 7eec2ed01a
11 changed files with 247 additions and 194 deletions
--- a/pkgs/by-name/gi/gitaly/package.nix
+++ b/pkgs/by-name/gi/gitaly/package.nix
@@ -7,7 +7,7 @@
 }:

 let
-  version = "18.5.2";
+  version = "18.6.0";
  package_version = "v${lib.versions.major version}";
  gitaly_package = "gitlab.com/gitlab-org/gitaly/${package_version}";

@@ -21,10 +21,10 @@ let
      owner = "gitlab-org";
      repo = "gitaly";
      rev = "v${version}";
-      hash = "sha256-UOcO6iEFLSkQNU+UGWO6fQ67XmXisz6WRGXC8xNFmuM=";
+      hash = "sha256-uPbTjmixStlPaUuy9TAaMoYCPVrnpxf67ath+xDFLnw=";
    };

-    vendorHash = "sha256-I2YMn84wEAY+Z02bmkyP/b0eix7FW3hP/noyEKYsEaQ=";
+    vendorHash = "sha256-+5CTncYwtGlScFvVc3QaEScfuqMqvsjnGhggM1HMhNU=";

    ldflags = [
      "-X ${gitaly_package}/internal/version.version=${version}"
--- a/pkgs/by-name/gi/gitlab-elasticsearch-indexer/code-parser.nix
+++ b/pkgs/by-name/gi/gitlab-elasticsearch-indexer/code-parser.nix
@@ -11,16 +11,16 @@ let
 in
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "gitlab-code-parser";
-  version = "0.19.3";
+  version = "0.20.2";

  src = fetchFromGitLab {
    owner = "gitlab-org";
    repo = "rust/gitlab-code-parser";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-gwldgZsiHjNafebtgiy5mVAmNNAj0Mz+krz4sI18zj4=";
+    hash = "sha256-JjWWlbSjbV9StDNI+aNExLcSNvLsuOPnqhyymEs8+Cg=";
  };

-  cargoHash = "sha256-h6JWOhdjN4Ikwzvuv7PIYmsk1KxJyGHbjibJKVWtExY=";
+  cargoHash = "sha256-pcWsVoC6076gdWTy3GgMXQIlKiGJZe2q7LSA9fVYxE8=";

  nativeBuildInputs = [
    pkg-config
--- a/pkgs/by-name/gi/gitlab-elasticsearch-indexer/package.nix
+++ b/pkgs/by-name/gi/gitlab-elasticsearch-indexer/package.nix
@@ -11,17 +11,17 @@ let
 in
 buildGoModule rec {
  pname = "gitlab-elasticsearch-indexer";
-  version = "5.9.4";
+  version = "5.10.1";

  # nixpkgs-update: no auto update
  src = fetchFromGitLab {
    owner = "gitlab-org";
    repo = "gitlab-elasticsearch-indexer";
    rev = "v${version}";
-    hash = "sha256-Vj3QqskgrQIMF9mNY8WzvHL0KCU9Ebr3eDm4mUwQJL0=";
+    hash = "sha256-UB3rR6Fk/5M8rpixyg7R0Zd5JZYpG4gEEDHXOQ4b3vI=";
  };

-  vendorHash = "sha256-nmgRQwjf6F7IkED0S7Q03T6Wad5sEmYLbBHLyA33WjU=";
+  vendorHash = "sha256-EM41vNyE4nkv5IcGyRXqn+d7EHGMju2e76KWfHuOTmY=";

  buildInputs = [ icu ];
  nativeBuildInputs = [ pkg-config ];
@@ -31,6 +31,21 @@ buildGoModule rec {
    CGO_CFLAGS = "-I${codeParserBindings}/include";
  };

+  checkFlags =
+    let
+      # Skip tests that require an elasticsearch instance
+      skippedTests = [
+        "TestBulkSizeTracking"
+        "TestProactiveFlushOnSizeLimit"
+        "TestRemoveBulkSizeTracking"
+        "TestDeleteBulkSizeTracking"
+        "TestMixedOperationsBulkSizeTracking"
+        "TestConcurrentOperationsThreadSafety"
+        "TestConcurrentFlushOperations"
+      ];
+    in
+    [ "-skip=^${builtins.concatStringsSep "$|^" skippedTests}$" ];
+
  passthru = {
    inherit codeParserBindings;
  };
--- a/pkgs/by-name/gi/gitlab-pages/package.nix
+++ b/pkgs/by-name/gi/gitlab-pages/package.nix
@@ -6,17 +6,17 @@

 buildGoModule rec {
  pname = "gitlab-pages";
-  version = "18.5.2";
+  version = "18.6.0";

  # nixpkgs-update: no auto update
  src = fetchFromGitLab {
    owner = "gitlab-org";
    repo = "gitlab-pages";
    rev = "v${version}";
-    hash = "sha256-KxlgJlRuy3q24NJ9kVfOJ3zG4k14wWPKYPTb6QfviHc=";
+    hash = "sha256-ndxdgvf+mjt6PYQpEvyinEP64qRVB5lQXvtgR1eUjWs=";
  };

-  vendorHash = "sha256-VWD/AXqEVWo7G9p1q1BM2LUNwAFmkPm+Gm2s9EPu6nM=";
+  vendorHash = "sha256-AL6V2LPzCGo/7IuY8msip35OScfocp3zO2ZzM8cZfnU=";
  subPackages = [ "." ];

  ldflags = [
--- a/pkgs/by-name/gi/gitlab/data.json
+++ b/pkgs/by-name/gi/gitlab/data.json
@@ -1,16 +1,16 @@
 {
-  "version": "18.5.2",
-  "repo_hash": "1gbhkg5m9gv8bj5nrppklajmxzmfq8r4sq4mxak8g2jsm7yxkhg1",
-  "yarn_hash": "16f7r4v4mjjdsfbzy5vy1g18p0l3gnjvfvzrl2xrxdibx7a3b4xs",
-  "frontend_islands_yarn_hash": "0kks9hzm5fq3fss9ys8zxls3d3860l1fvsfcrbhf9rccmwvmjn3l",
+  "version": "18.6.0",
+  "repo_hash": "0pnl0n4yx15i2p7c7738vs4wk4w922zw5nv8p2mjgi6h4frkcg89",
+  "yarn_hash": "1qrgi5zkjy3d74lfjhqwnlh9il572vjwcb63q0s1mcq7cpk8fwhs",
+  "frontend_islands_yarn_hash": "0m64xhlybjlax33k5rmj9kxcj1vzqqygybyz1yzzx9pd87570k2h",
  "owner": "gitlab-org",
  "repo": "gitlab",
-  "rev": "v18.5.2-ee",
+  "rev": "v18.6.0-ee",
  "passthru": {
-    "GITALY_SERVER_VERSION": "18.5.2",
-    "GITLAB_PAGES_VERSION": "18.5.2",
+    "GITALY_SERVER_VERSION": "18.6.0",
+    "GITLAB_PAGES_VERSION": "18.6.0",
    "GITLAB_SHELL_VERSION": "14.45.3",
-    "GITLAB_ELASTICSEARCH_INDEXER_VERSION": "5.9.4",
-    "GITLAB_WORKHORSE_VERSION": "18.5.2"
+    "GITLAB_ELASTICSEARCH_INDEXER_VERSION": "5.10.1",
+    "GITLAB_WORKHORSE_VERSION": "18.6.0"
  }
 }
--- a/pkgs/by-name/gi/gitlab/gitlab-workhorse/default.nix
+++ b/pkgs/by-name/gi/gitlab/gitlab-workhorse/default.nix
@@ -10,7 +10,7 @@ in
 buildGoModule rec {
  pname = "gitlab-workhorse";

-  version = "18.5.2";
+  version = "18.6.0";

  # nixpkgs-update: no auto update
  src = fetchFromGitLab {
@@ -22,7 +22,7 @@ buildGoModule rec {

  sourceRoot = "${src.name}/workhorse";

-  vendorHash = "sha256-wO+QuWptrcpqy3K3tvYpQQFzlr7A2m2rhPM64Or3qaY=";
+  vendorHash = "sha256-FCaqoDS6qbKs4Uy8X76cco24HIRxf9gsnQpIjJOHba0=";
  buildInputs = [ git ];
  ldflags = [ "-X main.Version=${version}" ];
  doCheck = false;
--- a/pkgs/by-name/gi/gitlab/package.nix
+++ b/pkgs/by-name/gi/gitlab/package.nix
@@ -147,7 +147,7 @@ let
      sha256 = data.yarn_hash;
    };
    frontendIslandsYarnOfflineCache = fetchYarnDeps {
-      yarnLock = src + "/ee/frontend_islands/apps/duo_next/yarn.lock";
+      yarnLock = src + "/ee/frontend_islands/yarn.lock";
      sha256 = data.frontend_islands_yarn_hash;
    };

@@ -194,7 +194,7 @@ let
    + lib.optionalString gitlabEnterprise ''
      # Get node modules for frontend islands
      export HOME=$(mktemp -d)
-      pushd ee/frontend_islands/apps/duo_next
+      pushd ee/frontend_islands
      yarn config --offline set yarn-offline-mirror "$frontendIslandsYarnOfflineCache"
      fixup-yarn-lock yarn.lock
      yarn install \
--- a/pkgs/by-name/gi/gitlab/rubyEnv/Gemfile
+++ b/pkgs/by-name/gi/gitlab/rubyEnv/Gemfile
@@ -26,9 +26,9 @@ gem 'bundler-checksum', '~> 0.1.0', path: 'gems/bundler-checksum', require: fals
 # See https://docs.gitlab.com/ee/development/gemfile.html#upgrade-rails for guidelines when upgrading Rails

 if next?
-  gem 'rails', '~> 7.2.2.2', feature_category: :shared
+  gem 'rails', '~> 7.2.3', feature_category: :shared
 else
-  gem 'rails', '~> 7.1.5.2', feature_category: :shared
+  gem 'rails', '~> 7.1.6', feature_category: :shared
 end

 # Pin Zeitwerk until https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/9408 is fixed
@@ -50,7 +50,7 @@ else
  gem 'ffi', '~> 1.17.2', force_ruby_platform: true, feature_category: :shared
 end

-gem 'openssl', '~> 3.0', feature_category: :shared
+gem 'openssl', '~> 3.3.2', feature_category: :shared

 gem 'gitlab-safe_request_store', path: 'gems/gitlab-safe_request_store', feature_category: :shared

@@ -179,9 +179,9 @@ gem 'gitlab-topology-service-client', '~> 0.1',
  feature_category: :cell

 # Duo Workflow
-gem 'gitlab-duo-workflow-service-client', '~> 0.4',
+gem 'gitlab-duo-workflow-service-client', '~> 0.6',
  path: 'vendor/gems/gitlab-duo-workflow-service-client',
-  feature_category: :agent_foundations
+  feature_category: :duo_agent_platform

 # Generate Fake data
 gem 'ffaker', '~> 2.24', feature_category: :shared
@@ -230,7 +230,7 @@ gem 'google-apis-container_v1', '~> 0.100.0', feature_category: :shared
 gem 'google-apis-container_v1beta1', '~> 0.91.0', feature_category: :shared
 gem 'google-apis-cloudbilling_v1', '~> 0.22.0', feature_category: :shared
 gem 'google-apis-cloudresourcemanager_v1', '~> 0.44.0', feature_category: :shared
-gem 'google-apis-iam_v1', '~> 0.73.0', feature_category: :shared
+gem 'google-apis-iam_v1', '~> 0.79.0', feature_category: :shared
 gem 'google-apis-serviceusage_v1', '~> 0.28.0', feature_category: :shared
 gem 'google-apis-sqladmin_v1beta4', '~> 0.41.0', feature_category: :shared
 gem 'google-apis-androidpublisher_v3', '~> 0.86.0', feature_category: :shared
@@ -334,8 +334,7 @@ gem 'js_regex', '~> 3.8', feature_category: :shared
 gem 'device_detector', feature_category: :shared

 # Redis
-# Do NOT upgrade until Rails is upgraded with a version that contains https://github.com/rails/rails/pull/55359.
-gem 'redis', '= 5.4.0', feature_category: :redis
+gem 'redis', '~> 5.4.1', feature_category: :redis
 gem 'redis-client', '~> 0.25', feature_category: :redis
 gem 'redis-cluster-client', '~> 0.13', feature_category: :redis
 gem 'redis-clustering', '~> 5.4.0', feature_category: :redis
@@ -385,7 +384,7 @@ gem 'rack-proxy', '~> 0.7.7', feature_category: :shared
 gem 'cssbundling-rails', '1.4.3', feature_category: :shared
 gem 'terser', '1.0.2', feature_category: :shared

-gem 'click_house-client', '0.8.0', feature_category: :database
+gem 'click_house-client', '0.8.2', feature_category: :database
 gem 'addressable', '~> 2.8', feature_category: :shared
 gem 'gon', '~> 6.5.0', feature_category: :shared
 gem 'request_store', '~> 1.7.0', feature_category: :shared
@@ -393,7 +392,7 @@ gem 'base32', '~> 0.3.0', feature_category: :shared
 gem 'gitlab-license', '~> 2.6', feature_category: :shared

 # Protect against bruteforcing
-gem 'rack-attack', '~> 6.7.0', feature_category: :shared
+gem 'rack-attack', '~> 6.8.0', feature_category: :shared

 # Sentry integration
 gem 'sentry-ruby', '~> 5.23.0', feature_category: :observability
@@ -408,7 +407,7 @@ gem 'gitlab-schema-validation', path: 'gems/gitlab-schema-validation', feature_c
 gem 'gitlab-http', path: 'gems/gitlab-http', feature_category: :shared

 gem 'premailer-rails', '~> 1.12.0', feature_category: :notifications
-gem 'gitlab-labkit', '~> 0.42.0', feature_category: :shared
+gem 'gitlab-labkit', '~> 0.42.2', feature_category: :shared
 gem 'thrift', '~> 0.22.0', feature_category: :shared

 # I18n
@@ -512,7 +511,7 @@ end
 group :development, :test do
  gem 'deprecation_toolkit', '~> 2.2.3', require: false, feature_category: :shared
  gem 'bullet', '~> 8.0.0', feature_category: :shared
-  gem 'parser', '= 3.3.9.0', feature_category: :shared
+  gem 'parser', '= 3.3.10.0', feature_category: :shared
  gem 'pry-byebug', feature_category: :shared
  gem 'pry-rails', '~> 0.3.9', feature_category: :shared
  gem 'pry-shell', '~> 0.6.4', feature_category: :shared
@@ -609,7 +608,7 @@ group :test do
  # Moved in `test` because https://gitlab.com/gitlab-org/gitlab/-/issues/217527
  gem 'derailed_benchmarks', require: false, feature_category: :shared

-  gem 'gitlab_quality-test_tooling', '~> 2.20.0', require: false, feature_category: :tooling
+  gem 'gitlab_quality-test_tooling', '~> 2.26.0', require: false, feature_category: :tooling
 end

 gem 'octokit', '~> 9.0', feature_category: :importers
@@ -645,12 +644,12 @@ gem 'ssh_data', '~> 2.0', feature_category: :shared
 gem 'spamcheck', '~> 1.3.0', feature_category: :insider_threat

 # Gitaly GRPC protocol definitions
-gem 'gitaly', '~> 18.4.0.pre.rc1', feature_category: :gitaly
+gem 'gitaly', '~> 18.6.0.pre.rc1', feature_category: :gitaly

 # KAS GRPC protocol definitions
 gem 'gitlab-kas-grpc', '~> 18.5.0-rc4', feature_category: :deployment_management

-gem 'grpc', '~> 1.75.0', feature_category: :shared
+gem 'grpc', '~> 1.76.0', feature_category: :shared

 gem 'google-protobuf', '~> 3.25', '>= 3.25.3', feature_category: :shared

@@ -685,7 +684,7 @@ gem 'lru_redux', feature_category: :shared
 # `config/initializers/mail_starttls_patch.rb` has also been patched to
 # fix STARTTLS handling until https://github.com/mikel/mail/pull/1536 is
 # released.
-gem 'mail', '= 2.8.1', feature_category: :shared
+gem 'mail', '= 2.9.0', feature_category: :shared
 gem 'mail-smtp_pool', '~> 0.1.0', path: 'gems/mail-smtp_pool', require: false, feature_category: :shared

 gem 'microsoft_graph_mailer', '~> 0.1.0', path: 'vendor/gems/microsoft_graph_mailer', feature_category: :shared
@@ -752,7 +751,7 @@ gem 'net-http', '= 0.6.0', feature_category: :shared
 # This is locked to 0.13.0 because the default parser changes from RFC2396 to RFC3986,
 # which can be removed after Rails 7.2 upgrade
 # See https://gitlab.com/gitlab-org/gitlab/-/merge_requests/173142#note_2277952450
-gem 'uri', '= 0.13.2', feature_category: :shared
+gem 'uri', '= 0.13.3', feature_category: :shared

 gem 'duo_api', '~> 1.3', feature_category: :system_access

@@ -762,4 +761,4 @@ gem 'paper_trail', '~> 16.0', feature_category: :shared

 gem "i18n_data", "~> 0.13.1", feature_category: :system_access

-gem "gitlab-cloud-connector", "~> 1.26", require: 'gitlab/cloud_connector', feature_category: :plan_provisioning
+gem "gitlab-cloud-connector", "~> 1.35", require: 'gitlab/cloud_connector', feature_category: :plan_provisioning
--- a/pkgs/by-name/gi/gitlab/rubyEnv/Gemfile.lock
+++ b/pkgs/by-name/gi/gitlab/rubyEnv/Gemfile.lock
@@ -87,7 +87,6 @@ PATH
      httparty (~> 0.21)
      ipaddress (~> 0.8.3)
      net-http (= 0.6.0)
-      railties (~> 7)

 PATH
  remote: gems/gitlab-rspec_flaky
@@ -156,7 +155,7 @@ PATH
 PATH
  remote: vendor/gems/gitlab-duo-workflow-service-client
  specs:
-    gitlab-duo-workflow-service-client (0.5)
+    gitlab-duo-workflow-service-client (0.6)
      grpc

 PATH
@@ -214,35 +213,36 @@ GEM
      base64 (~> 0.2)
      faraday (>= 1.0, < 3.0.0)
      faraday-retry (>= 1.0, < 3.0.0)
-    actioncable (7.1.5.2)
-      actionpack (= 7.1.5.2)
-      activesupport (= 7.1.5.2)
+    actioncable (7.1.6)
+      actionpack (= 7.1.6)
+      activesupport (= 7.1.6)
      nio4r (~> 2.0)
      websocket-driver (>= 0.6.1)
      zeitwerk (~> 2.6)
-    actionmailbox (7.1.5.2)
-      actionpack (= 7.1.5.2)
-      activejob (= 7.1.5.2)
-      activerecord (= 7.1.5.2)
-      activestorage (= 7.1.5.2)
-      activesupport (= 7.1.5.2)
+    actionmailbox (7.1.6)
+      actionpack (= 7.1.6)
+      activejob (= 7.1.6)
+      activerecord (= 7.1.6)
+      activestorage (= 7.1.6)
+      activesupport (= 7.1.6)
      mail (>= 2.7.1)
      net-imap
      net-pop
      net-smtp
-    actionmailer (7.1.5.2)
-      actionpack (= 7.1.5.2)
-      actionview (= 7.1.5.2)
-      activejob (= 7.1.5.2)
-      activesupport (= 7.1.5.2)
+    actionmailer (7.1.6)
+      actionpack (= 7.1.6)
+      actionview (= 7.1.6)
+      activejob (= 7.1.6)
+      activesupport (= 7.1.6)
      mail (~> 2.5, >= 2.5.4)
      net-imap
      net-pop
      net-smtp
      rails-dom-testing (~> 2.2)
-    actionpack (7.1.5.2)
-      actionview (= 7.1.5.2)
-      activesupport (= 7.1.5.2)
+    actionpack (7.1.6)
+      actionview (= 7.1.6)
+      activesupport (= 7.1.6)
+      cgi
      nokogiri (>= 1.8.5)
      racc
      rack (>= 2.2.4)
@@ -250,35 +250,36 @@ GEM
      rack-test (>= 0.6.3)
      rails-dom-testing (~> 2.2)
      rails-html-sanitizer (~> 1.6)
-    actiontext (7.1.5.2)
-      actionpack (= 7.1.5.2)
-      activerecord (= 7.1.5.2)
-      activestorage (= 7.1.5.2)
-      activesupport (= 7.1.5.2)
+    actiontext (7.1.6)
+      actionpack (= 7.1.6)
+      activerecord (= 7.1.6)
+      activestorage (= 7.1.6)
+      activesupport (= 7.1.6)
      globalid (>= 0.6.0)
      nokogiri (>= 1.8.5)
-    actionview (7.1.5.2)
-      activesupport (= 7.1.5.2)
+    actionview (7.1.6)
+      activesupport (= 7.1.6)
      builder (~> 3.1)
+      cgi
      erubi (~> 1.11)
      rails-dom-testing (~> 2.2)
      rails-html-sanitizer (~> 1.6)
-    activejob (7.1.5.2)
-      activesupport (= 7.1.5.2)
+    activejob (7.1.6)
+      activesupport (= 7.1.6)
      globalid (>= 0.3.6)
-    activemodel (7.1.5.2)
-      activesupport (= 7.1.5.2)
-    activerecord (7.1.5.2)
-      activemodel (= 7.1.5.2)
-      activesupport (= 7.1.5.2)
+    activemodel (7.1.6)
+      activesupport (= 7.1.6)
+    activerecord (7.1.6)
+      activemodel (= 7.1.6)
+      activesupport (= 7.1.6)
      timeout (>= 0.4.0)
-    activestorage (7.1.5.2)
-      actionpack (= 7.1.5.2)
-      activejob (= 7.1.5.2)
-      activerecord (= 7.1.5.2)
-      activesupport (= 7.1.5.2)
+    activestorage (7.1.6)
+      actionpack (= 7.1.6)
+      activejob (= 7.1.6)
+      activerecord (= 7.1.6)
+      activesupport (= 7.1.6)
      marcel (~> 1.0)
-    activesupport (7.1.5.2)
+    activesupport (7.1.6)
      base64
      benchmark (>= 0.3)
      bigdecimal
@@ -413,6 +414,7 @@ GEM
      mime-types (>= 1.16)
      ssrf_filter (~> 1.0, < 1.1.0)
    cbor (0.5.9.8)
+    cgi (0.5.0)
    character_set (1.8.0)
    charlock_holmes (0.7.9)
    chef-config (18.3.0)
@@ -432,7 +434,7 @@ GEM
      cork
      nap
      open4 (~> 1.3)
-    click_house-client (0.8.0)
+    click_house-client (0.8.2)
      activerecord (>= 7.0, < 9.0)
      activesupport (>= 7.0, < 9.0)
      addressable (~> 2.8)
@@ -730,14 +732,14 @@ GEM
    git (1.19.1)
      addressable (~> 2.8)
      rchardet (~> 1.8)
-    gitaly (18.4.1)
+    gitaly (18.6.0.pre.rc1)
      grpc (~> 1.0)
    gitlab (4.19.0)
      httparty (~> 0.20)
      terminal-table (>= 1.5.1)
    gitlab-chronic (0.10.6)
      numerizer (~> 0.2)
-    gitlab-cloud-connector (1.33.0)
+    gitlab-cloud-connector (1.36.0)
      activesupport (~> 7.0)
      jwt (~> 2.9)
    gitlab-crystalball (1.1.1)
@@ -763,7 +765,7 @@ GEM
      rb_sys (~> 0.9.109)
    gitlab-kas-grpc (18.5.0.pre.rc4)
      grpc (~> 1.0)
-    gitlab-labkit (0.42.0)
+    gitlab-labkit (0.42.2)
      actionpack (>= 5.0.0, < 8.1.0)
      activesupport (>= 5.0.0, < 8.1.0)
      google-protobuf (~> 3)
@@ -788,7 +790,7 @@ GEM
      activesupport (>= 5.2.0)
      rake (~> 13.0)
      snowplow-tracker (~> 0.8.0)
-    gitlab-secret_detection (0.35.1)
+    gitlab-secret_detection (0.38.0)
      grpc (>= 1.63.0, < 2)
      grpc_reflection (~> 0.1)
      parallel (~> 1)
@@ -816,7 +818,7 @@ GEM
      omniauth (>= 1.3, < 3)
      pyu-ruby-sasl (>= 0.0.3.3, < 0.1)
      rubyntlm (~> 0.5)
-    gitlab_quality-test_tooling (2.20.3)
+    gitlab_quality-test_tooling (2.26.0)
      activesupport (>= 7.0, < 7.3)
      amatch (~> 0.4.1)
      fog-google (~> 1.24, >= 1.24.1)
@@ -860,7 +862,7 @@ GEM
      retriable (>= 2.0, < 4.a)
    google-apis-dns_v1 (0.36.0)
      google-apis-core (>= 0.11.0, < 2.a)
-    google-apis-iam_v1 (0.73.0)
+    google-apis-iam_v1 (0.79.0)
      google-apis-core (>= 0.15.0, < 2.a)
    google-apis-iamcredentials_v1 (0.24.0)
      google-apis-core (>= 0.15.0, < 2.a)
@@ -975,7 +977,7 @@ GEM
      logger (~> 1.6)
      ostruct (~> 0.6)
      sass-embedded (~> 1.58)
-    grpc (1.75.0)
+    grpc (1.76.0)
      google-protobuf (>= 3.25, < 5.0)
      googleapis-common-protos-types (~> 1.0)
    grpc-google-iam-v1 (1.5.0)
@@ -1180,7 +1182,8 @@ GEM
      zeitwerk (~> 2.5)
    lru_redux (1.1.0)
    lumberjack (1.2.7)
-    mail (2.8.1)
+    mail (2.9.0)
+      logger
      mini_mime (>= 0.1.1)
      net-imap
      net-pop
@@ -1299,11 +1302,11 @@ GEM
    omniauth-github (2.0.1)
      omniauth (~> 2.0)
      omniauth-oauth2 (~> 1.8)
-    omniauth-google-oauth2 (1.1.1)
-      jwt (>= 2.0)
-      oauth2 (~> 2.0.6)
+    omniauth-google-oauth2 (1.2.1)
+      jwt (>= 2.9.2)
+      oauth2 (~> 2.0)
      omniauth (~> 2.0)
-      omniauth-oauth2 (~> 1.8.0)
+      omniauth-oauth2 (~> 1.8)
    omniauth-oauth2 (1.8.0)
      oauth2 (>= 1.4, < 3)
      omniauth (~> 2.0)
@@ -1471,7 +1474,7 @@ GEM
      activerecord (>= 6.1)
      request_store (~> 1.4)
    parallel (1.27.0)
-    parser (3.3.9.0)
+    parser (3.3.10.0)
      ast (~> 2.4.1)
      racc
    parslet (1.8.2)
@@ -1539,10 +1542,10 @@ GEM
    pyu-ruby-sasl (0.0.3.3)
    raabro (1.4.0)
    racc (1.8.1)
-    rack (2.2.20)
+    rack (2.2.21)
    rack-accept (0.4.5)
      rack (>= 0.4)
-    rack-attack (6.7.0)
+    rack-attack (6.8.0)
      rack (>= 1.0, < 4)
    rack-cors (2.0.2)
      rack (>= 2.0.0)
@@ -1565,20 +1568,20 @@ GEM
    rackup (1.0.1)
      rack (< 3)
      webrick
-    rails (7.1.5.2)
-      actioncable (= 7.1.5.2)
-      actionmailbox (= 7.1.5.2)
-      actionmailer (= 7.1.5.2)
-      actionpack (= 7.1.5.2)
-      actiontext (= 7.1.5.2)
-      actionview (= 7.1.5.2)
-      activejob (= 7.1.5.2)
-      activemodel (= 7.1.5.2)
-      activerecord (= 7.1.5.2)
-      activestorage (= 7.1.5.2)
-      activesupport (= 7.1.5.2)
+    rails (7.1.6)
+      actioncable (= 7.1.6)
+      actionmailbox (= 7.1.6)
+      actionmailer (= 7.1.6)
+      actionpack (= 7.1.6)
+      actiontext (= 7.1.6)
+      actionview (= 7.1.6)
+      activejob (= 7.1.6)
+      activemodel (= 7.1.6)
+      activerecord (= 7.1.6)
+      activestorage (= 7.1.6)
+      activesupport (= 7.1.6)
      bundler (>= 1.15.0)
-      railties (= 7.1.5.2)
+      railties (= 7.1.6)
    rails-controller-testing (1.0.5)
      actionpack (>= 5.0.1.rc1)
      actionview (>= 5.0.1.rc1)
@@ -1593,13 +1596,15 @@ GEM
    rails-i18n (7.0.10)
      i18n (>= 0.7, < 2)
      railties (>= 6.0.0, < 8)
-    railties (7.1.5.2)
-      actionpack (= 7.1.5.2)
-      activesupport (= 7.1.5.2)
+    railties (7.1.6)
+      actionpack (= 7.1.6)
+      activesupport (= 7.1.6)
+      cgi
      irb
      rackup (>= 1.0.0)
      rake (>= 12.2)
      thor (~> 1.0, >= 1.2.2)
+      tsort (>= 0.2)
      zeitwerk (~> 2.6)
    rainbow (3.1.1)
    rake (13.0.6)
@@ -1624,7 +1629,7 @@ GEM
      json
    recursive-open-struct (1.1.3)
    redcarpet (3.6.0)
-    redis (5.4.0)
+    redis (5.4.1)
      redis-client (>= 0.22.0)
    redis-actionpack (5.5.0)
      actionpack (>= 5)
@@ -1634,8 +1639,8 @@ GEM
      connection_pool
    redis-cluster-client (0.13.5)
      redis-client (~> 0.24)
-    redis-clustering (5.4.0)
-      redis (= 5.4.0)
+    redis-clustering (5.4.1)
+      redis (= 5.4.1)
      redis-cluster-client (>= 0.10.0)
    redis-namespace (1.11.0)
      redis (>= 4)
@@ -1955,6 +1960,7 @@ GEM
    truncato (0.7.13)
      htmlentities (~> 4.3.1)
      nokogiri (>= 1.7.0, <= 2.0)
+    tsort (0.2.0)
    ttfunk (1.8.0)
      bigdecimal (~> 3.1)
    tty-color (0.6.0)
@@ -2001,7 +2007,7 @@ GEM
    unparser (0.6.7)
      diff-lcs (~> 1.3)
      parser (>= 3.2.0)
-    uri (0.13.2)
+    uri (0.13.3)
    valid_email (0.1.3)
      activemodel
      mail (>= 2.6.1)
@@ -2115,7 +2121,7 @@ DEPENDENCIES
  carrierwave (~> 1.3)
  charlock_holmes (~> 0.7.9)
  circuitbox (= 2.0.0)
-  click_house-client (= 0.8.0)
+  click_house-client (= 0.8.2)
  commonmarker (~> 0.23.10)
  concurrent-ruby (~> 1.1)
  connection_pool (~> 2.5.3)
@@ -2172,14 +2178,14 @@ DEPENDENCIES
  gettext (~> 3.5, >= 3.5.1)
  gettext_i18n_rails (~> 1.13.0)
  git (~> 1.8)
-  gitaly (~> 18.4.0.pre.rc1)
+  gitaly (~> 18.6.0.pre.rc1)
  gitlab-active-context!
  gitlab-backup-cli!
  gitlab-chronic (~> 0.10.5)
-  gitlab-cloud-connector (~> 1.26)
+  gitlab-cloud-connector (~> 1.35)
  gitlab-crystalball (~> 1.1.0)
  gitlab-dangerfiles (~> 4.10.0)
-  gitlab-duo-workflow-service-client (~> 0.4)!
+  gitlab-duo-workflow-service-client (~> 0.6)!
  gitlab-experiment (~> 1.0.0)
  gitlab-fog-azure-rm (~> 2.4.0)
  gitlab-glfm-markdown (~> 0.0.38)
@@ -2187,7 +2193,7 @@ DEPENDENCIES
  gitlab-housekeeper!
  gitlab-http!
  gitlab-kas-grpc (~> 18.5.0.pre.rc4)
-  gitlab-labkit (~> 0.42.0)
+  gitlab-labkit (~> 0.42.2)
  gitlab-license (~> 2.6)
  gitlab-mail_room (~> 0.0.24)
  gitlab-markup (~> 2.0.0)
@@ -2205,7 +2211,7 @@ DEPENDENCIES
  gitlab-utils!
  gitlab_chronic_duration (~> 0.12)
  gitlab_omniauth-ldap (~> 2.3.0)
-  gitlab_quality-test_tooling (~> 2.20.0)
+  gitlab_quality-test_tooling (~> 2.26.0)
  gon (~> 6.5.0)
  google-apis-androidpublisher_v3 (~> 0.86.0)
  google-apis-cloudbilling_v1 (~> 0.22.0)
@@ -2214,7 +2220,7 @@ DEPENDENCIES
  google-apis-container_v1 (~> 0.100.0)
  google-apis-container_v1beta1 (~> 0.91.0)
  google-apis-core (~> 0.18.0, >= 0.18.0)
-  google-apis-iam_v1 (~> 0.73.0)
+  google-apis-iam_v1 (~> 0.79.0)
  google-apis-serviceusage_v1 (~> 0.28.0)
  google-apis-sqladmin_v1beta4 (~> 0.41.0)
  google-apis-storage_v1 (~> 0.29)
@@ -2234,7 +2240,7 @@ DEPENDENCIES
  graphlyte (~> 1.0.0)
  graphql (= 2.5.11)
  graphql-docs (~> 5.2.0)
-  grpc (~> 1.75.0)
+  grpc (~> 1.76.0)
  gssapi (~> 1.3.1)
  guard-rspec
  haml_lint (~> 0.58)
@@ -2272,7 +2278,7 @@ DEPENDENCIES
  loofah (~> 2.24.0)
  lookbook (~> 2.3)
  lru_redux
-  mail (= 2.8.1)
+  mail (= 2.9.0)
  mail-smtp_pool (~> 0.1.0)!
  marcel (~> 1.0.4)
  marginalia (~> 1.11.1)
@@ -2308,7 +2314,7 @@ DEPENDENCIES
  omniauth_crowd (~> 2.4.0)!
  omniauth_openid_connect (~> 0.8.0)
  openid_connect (~> 2.3.0)
-  openssl (~> 3.0)
+  openssl (~> 3.3.2)
  opentelemetry-exporter-otlp
  opentelemetry-instrumentation-action_pack
  opentelemetry-instrumentation-action_view
@@ -2337,7 +2343,7 @@ DEPENDENCIES
  pact (~> 1.64)
  paper_trail (~> 16.0)
  parallel (~> 1.19)
-  parser (= 3.3.9.0)
+  parser (= 3.3.10.0)
  parslet (~> 1.8)
  peek (~> 1.1)
  pg (~> 1.6.1)
@@ -2352,19 +2358,19 @@ DEPENDENCIES
  pry-shell (~> 0.6.4)
  puma (= 6.6.1)
  rack (~> 2.2.9)
-  rack-attack (~> 6.7.0)
+  rack-attack (~> 6.8.0)
  rack-cors (~> 2.0.1)
  rack-oauth2 (~> 2.2.1)
  rack-proxy (~> 0.7.7)
  rack-timeout (~> 0.7.0)
-  rails (~> 7.1.5.2)
+  rails (~> 7.1.6)
  rails-controller-testing
  rails-i18n (~> 7.0, >= 7.0.9)
  rainbow (~> 3.0)
  rbtrace (~> 0.4)
  re2 (~> 2.15)
  recaptcha (~> 5.12)
-  redis (= 5.4.0)
+  redis (~> 5.4.1)
  redis-actionpack (~> 5.5.0)
  redis-client (~> 0.25)
  redis-cluster-client (~> 0.13)
@@ -2435,7 +2441,7 @@ DEPENDENCIES
  undercover (~> 0.7.0)
  unicode-emoji (~> 4.0)
  unleash (~> 3.2.2)
-  uri (= 0.13.2)
+  uri (= 0.13.3)
  valid_email (~> 0.1)
  validates_hostname (~> 1.0.13)
  version_sorter (~> 2.3)
--- a/pkgs/by-name/gi/gitlab/rubyEnv/gemset.nix
+++ b/pkgs/by-name/gi/gitlab/rubyEnv/gemset.nix
@@ -30,10 +30,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0dsyppp79da5p5jh3wxry08vy401xrff4sgww47i2l93mdyldpbr";
+      sha256 = "1nn30fnsbqhx3yyy6vf7wxcqz3fnv7rkrbi010b5414119gqshmd";
      type = "gem";
    };
-    version = "7.1.5.2";
+    version = "7.1.6";
  };
  actionmailbox = {
    dependencies = [
@@ -55,10 +55,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0kmcvibpi4ppk1j1dkqhglix73xhyr29k6l2ziy92azy0b0isaqr";
+      sha256 = "0cgpq8xn5apfrx89pc3phwcayqvhy10kb0sm8pqsaiy1isnminfy";
      type = "gem";
    };
-    version = "7.1.5.2";
+    version = "7.1.6";
  };
  actionmailer = {
    dependencies = [
@@ -80,15 +80,16 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "02w6kq5c2pjp1svfxxqqa46z6zgj2y7x6wybgpln9g5i3vn5yp3s";
+      sha256 = "0wyj251glxf2n00k6yc29r8dbys9b03mr8x5knd2kgb6xhh68zxh";
      type = "gem";
    };
-    version = "7.1.5.2";
+    version = "7.1.6";
  };
  actionpack = {
    dependencies = [
      "actionview"
      "activesupport"
+      "cgi"
      "nokogiri"
      "racc"
      "rack"
@@ -105,10 +106,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1za4sv0ch8j7adfldglp8jalcc8s68h031sqldw0f9pbmb4fvgx7";
+      sha256 = "1sq328ark8wa4c8x3y3nsv9qfysjbnn3bv8ily83dz6wdyijv91z";
      type = "gem";
    };
-    version = "7.1.5.2";
+    version = "7.1.6";
  };
  actiontext = {
    dependencies = [
@@ -127,15 +128,16 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "01q275ihq4gds2yvlbzdpqap95z5divwany0x5lcnqhpc7j7hmjh";
+      sha256 = "0rky5702sixkxb04fmpsyycqdv49kpn7nsl68v5whz6n5m15gmkr";
      type = "gem";
    };
-    version = "7.1.5.2";
+    version = "7.1.6";
  };
  actionview = {
    dependencies = [
      "activesupport"
      "builder"
+      "cgi"
      "erubi"
      "rails-dom-testing"
      "rails-html-sanitizer"
@@ -149,10 +151,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1jd1biyrf3n45jilazfqli27jnlk60bpn82mi4i1wqxcgsn1djag";
+      sha256 = "0rpmxm1vvga9jjym371h9q26wi4gdxf80xra5c3awr84z60ps50i";
      type = "gem";
    };
-    version = "7.1.5.2";
+    version = "7.1.6";
  };
  activejob = {
    dependencies = [
@@ -167,10 +169,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0kl0ppvvxhd4igaxpbn64yyam120vyf0h2bbzqs1xa6dqnjn5dmg";
+      sha256 = "1fyc5paw29kwc6v5mqvpvd8354y3c4z3l8nrkls0hij93l2wvn8d";
      type = "gem";
    };
-    version = "7.1.5.2";
+    version = "7.1.6";
  };
  activemodel = {
    dependencies = [ "activesupport" ];
@@ -183,10 +185,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1df89b7pf66r5v6ixf2kn5mb3mzhpkggqqw544685vhlhrmabdjg";
+      sha256 = "08g7lar9g9bqlvmhyc8bsvp0kzs18hhqiz1zksbbaq5530052bzp";
      type = "gem";
    };
-    version = "7.1.5.2";
+    version = "7.1.6";
  };
  activerecord = {
    dependencies = [
@@ -203,10 +205,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0alxm4yk5zqnzfj8jj06cwfzgb3gvcvab8mzd0lgs9x75lmsfgcj";
+      sha256 = "0yghfgk627mc5gf5p549ilhs2hvjs5ms81dvkrixhzn9gz6ri8hs";
      type = "gem";
    };
-    version = "7.1.5.2";
+    version = "7.1.6";
  };
  activerecord-gitlab = {
    dependencies = [ "activerecord" ];
@@ -234,10 +236,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "163wq77fx38vjdb4jhvfphahnrzdp2kq9ngg02g5y4zaghacp6pd";
+      sha256 = "167k9fgv7ymvrk737mf5zwfl8za7qhxajgdwkhypifljcn7cn6ig";
      type = "gem";
    };
-    version = "7.1.5.2";
+    version = "7.1.6";
  };
  activesupport = {
    dependencies = [
@@ -263,10 +265,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1lbfsgmbn87mim29v7h5w4v8zflhx6zxrbbp95hfmgxcr2wk204h";
+      sha256 = "0z1szpkxgxkq4ckgl4n51y2g3bi9f5a3wri2lci4j71vh45184kz";
      type = "gem";
    };
-    version = "7.1.5.2";
+    version = "7.1.6";
  };
  addressable = {
    dependencies = [ "public_suffix" ];
@@ -1025,6 +1027,21 @@ src: {
    };
    version = "3.0.7";
  };
+  cgi = {
+    groups = [
+      "default"
+      "development"
+      "monorepo"
+      "test"
+    ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "1njrjznc2j5xqqw71sp9130b9hyv59h2gfrf6yaf4in1n9dzd6gy";
+      type = "gem";
+    };
+    version = "0.5.0";
+  };
  character_set = {
    groups = [ "default" ];
    platforms = [ ];
@@ -1148,10 +1165,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "166j9r2pn6hbqqhgjx37c245yhd60dz00jphp18snrsfcxx841ds";
+      sha256 = "1k35sm731qmxznzyhjcbqlypf070radmd4ai0i8yn4dzl4bmdqj9";
      type = "gem";
    };
-    version = "0.8.0";
+    version = "0.8.2";
  };
  coderay = {
    groups = [
@@ -2785,10 +2802,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1qg3kc103v767hjw77wcx5mwx5dg2b6vlhxk3bb4hpbsjqgm4mf3";
+      sha256 = "0xn347pk7zkks3zhzi73s2zg8ps5cbc8z6y0k678iafpsbnj0ayc";
      type = "gem";
    };
-    version = "18.4.1";
+    version = "18.6.0.pre.rc1";
  };
  gitlab = {
    dependencies = [
@@ -2882,10 +2899,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0bvjvc2yvc2sjn4f6lgww46gw39pb1ripsl5a6rq6wldfahvp7mw";
+      sha256 = "0x5qk0llskwk50qirlpmi1z4jfywfm3m1d6j9d0hsncjlphawyyy";
      type = "gem";
    };
-    version = "1.33.0";
+    version = "1.36.0";
  };
  gitlab-crystalball = {
    dependencies = [
@@ -2931,7 +2948,7 @@ src: {
      path = "${src}/vendor/gems/gitlab-duo-workflow-service-client";
      type = "path";
    };
-    version = "0.5";
+    version = "0.6";
  };
  gitlab-experiment = {
    dependencies = [
@@ -3016,7 +3033,6 @@ src: {
      "httparty"
      "ipaddress"
      "net-http"
-      "railties"
    ];
    groups = [ "default" ];
    platforms = [ ];
@@ -3054,10 +3070,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "07xbjd5vap486vspzz164hf2j5x0v9g4q6j0whzlh3ak1svqb22j";
+      sha256 = "0pa92lw9s9nz4xdv4hlh381niq8kj4lxdpafnkjhimfka8iibb63";
      type = "gem";
    };
-    version = "0.42.0";
+    version = "0.42.2";
  };
  gitlab-license = {
    groups = [ "default" ];
@@ -3197,10 +3213,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0s9akkxm69i9mlcl5n3ikv9dy678cqqa3jl3cq785653gcx8p8ww";
+      sha256 = "0v22xi0pvdnpzszlqhlc5xi547amlrs7a9s6qzygc07mnwbvzihj";
      type = "gem";
    };
-    version = "0.35.1";
+    version = "0.38.0";
  };
  gitlab-security_report_schemas = {
    dependencies = [
@@ -3327,10 +3343,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0b3db3p68b8h2089rhi5z3m927xkv4vcxa998v17lmspj2496wra";
+      sha256 = "0n9m042lmpxpyr9nldz6d9rksczra7agjkrvrwkqjj9a5w1grigy";
      type = "gem";
    };
-    version = "2.20.3";
+    version = "2.26.0";
  };
  globalid = {
    dependencies = [ "activesupport" ];
@@ -3485,10 +3501,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0jba8g7iykvmgbar1xvfwar18896bls2shccx59lvpb1y5ji263g";
+      sha256 = "1s3saxkxzrfyabc2ahrvxhvy02pk6bh16gs2z6alg5lcq564l0fw";
      type = "gem";
    };
-    version = "0.73.0";
+    version = "0.79.0";
  };
  google-apis-iamcredentials_v1 = {
    dependencies = [ "google-apis-core" ];
@@ -3982,10 +3998,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1na1h7nkc9s9s33g1pliml1nm3dq56ffwp9ajs95kpazbplbcd79";
+      sha256 = "162mayssd5y1jz7blwghdmjldxrb9gg7bffi1x2fwfhm8bx1c90i";
      type = "gem";
    };
-    version = "1.75.0";
+    version = "1.76.0";
  };
  grpc-google-iam-v1 = {
    dependencies = [
@@ -5046,6 +5062,7 @@ src: {
  };
  mail = {
    dependencies = [
+      "logger"
      "mini_mime"
      "net-imap"
      "net-pop"
@@ -5059,10 +5076,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1bf9pysw1jfgynv692hhaycfxa8ckay1gjw5hz3madrbrynryfzc";
+      sha256 = "0ha9sgkfqna62c1basc17dkx91yk7ppgjq32k4nhrikirlz6g9kg";
      type = "gem";
    };
-    version = "2.8.1";
+    version = "2.9.0";
  };
  mail-smtp_pool = {
    dependencies = [
@@ -5885,10 +5902,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0fahkghfa2iczmwss9bz5l4rh7siwzjnjp3akh7pdbsfx0kg35j4";
+      sha256 = "1pdf3bx036l6ggz6lkkykv77m9k4jypwsiw1q7874czwh2v50768";
      type = "gem";
    };
-    version = "1.1.1";
+    version = "1.2.1";
  };
  omniauth-oauth2 = {
    dependencies = [
@@ -6668,10 +6685,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1wl7frfk68q6gsf6q6j32jl5m3yc0b9x8ycxz3hy79miaj9r5mll";
+      sha256 = "1mmb59323ldv6vxfmy98azgsla9k3di3fasvpb28hnn5bkx8fdff";
      type = "gem";
    };
-    version = "3.3.9.0";
+    version = "3.3.10.0";
  };
  parslet = {
    groups = [
@@ -7080,10 +7097,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0w3iq14y3ldjq29qv2ll7y1dj7adxl9p9m0312h30ll4li3k9nl5";
+      sha256 = "0fgpa9qm5qgza69fjnagg2alxs2wmj41aq7z4kj5yib50wpzgqhl";
      type = "gem";
    };
-    version = "2.2.20";
+    version = "2.2.21";
  };
  rack-accept = {
    dependencies = [ "rack" ];
@@ -7102,10 +7119,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0z6pj5vjgl6swq7a33gssf795k958mss8gpmdb4v4cydcs7px91w";
+      sha256 = "1wpcxspprm187k6mch9fxhaaq1a3s9bzybd2fdaw1g45pzg9yjgj";
      type = "gem";
    };
-    version = "6.7.0";
+    version = "6.8.0";
  };
  rack-cors = {
    dependencies = [ "rack" ];
@@ -7235,10 +7252,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0ikmj9p48n8mms39jq8w91y12cm7zmxc7a1r9i7vzfn509r0i4m2";
+      sha256 = "0w3librd55ifs5za27afch673zyqycd7kka2fnnxmqqda5g362ls";
      type = "gem";
    };
-    version = "7.1.5.2";
+    version = "7.1.6";
  };
  rails-controller-testing = {
    dependencies = [
@@ -7312,10 +7329,12 @@ src: {
    dependencies = [
      "actionpack"
      "activesupport"
+      "cgi"
      "irb"
      "rackup"
      "rake"
      "thor"
+      "tsort"
      "zeitwerk"
    ];
    groups = [
@@ -7326,10 +7345,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "08fnm4bfkmjknnzmi1wkvyw9b2r4c5ammk0jzp4mgfgv1fgwh2mg";
+      sha256 = "076ywx2xs824c8bgy0fgshlfxri6v3sb3x7yy08nv9mc5rzyj41a";
      type = "gem";
    };
-    version = "7.1.5.2";
+    version = "7.1.6";
  };
  rainbow = {
    groups = [
@@ -7528,10 +7547,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0syhyw1bp9nbb0fvcmm58y1c6iav6xw6b4bzjz1rz2j1d7c012br";
+      sha256 = "1bpsh5dbvybsa8qnv4dg11a6f2zn4sndarf7pk4iaayjgaspbrmm";
      type = "gem";
    };
-    version = "5.4.0";
+    version = "5.4.1";
  };
  redis-actionpack = {
    dependencies = [
@@ -7579,10 +7598,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0fsnfi15xiy8sal6av11fqfjmdmjpy93amf790i0zwqcf1iq1qbw";
+      sha256 = "1sj4b3j7i3rb5a276g7yyd95kji4j9sl6wmqfgpz39gx06qlni47";
      type = "gem";
    };
-    version = "5.4.0";
+    version = "5.4.1";
  };
  redis-namespace = {
    dependencies = [ "redis" ];
@@ -9402,6 +9421,20 @@ src: {
    };
    version = "0.7.13";
  };
+  tsort = {
+    groups = [
+      "default"
+      "development"
+      "test"
+    ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "17q8h020dw73wjmql50lqw5ddsngg67jfw8ncjv476l5ys9sfl4n";
+      type = "gem";
+    };
+    version = "0.2.0";
+  };
  ttfunk = {
    dependencies = [ "bigdecimal" ];
    groups = [ "default" ];
@@ -9692,10 +9725,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0mz4hxi8lxh8rs6aph1mrihczvvz8ag9zlin1gzvq490cmp1jmx5";
+      sha256 = "19qy5sdl7c7h793r8dy8r06avz7y4srwqvaxlhvj8q3kbg0naigd";
      type = "gem";
    };
-    version = "0.13.2";
+    version = "0.13.3";
  };
  valid_email = {
    dependencies = [
--- a/pkgs/by-name/gi/gitlab/update.py
+++ b/pkgs/by-name/gi/gitlab/update.py
@@ -112,7 +112,7 @@ class GitLabRepo:
            version=self.rev2version(rev),
            repo_hash=self.get_git_hash(rev),
            yarn_hash=self.get_yarn_hash(rev),
-            frontend_islands_yarn_hash=self.get_yarn_hash(rev, "/ee/frontend_islands/apps/duo_next/yarn.lock"),
+            frontend_islands_yarn_hash=self.get_yarn_hash(rev, "/ee/frontend_islands/yarn.lock"),
            owner=self.owner,
            repo=self.repo,
            rev=rev,