chore(deps): update dependency gitlab-org/gitlab-runner to v17.8.3

[Adphi]

This PR contains the following updates:

Package	Update	Change
gitlab-org/gitlab-runner	minor	v17.3.1 -> v17.8.3

---

Release Notes

gitlab-org/gitlab-runner (gitlab-org/gitlab-runner)

v17.8.3

Compare Source

See the changelog 🚀

GitLab Runner documentation can be found at https://docs.gitlab.com/runner/.

v17.8.2

Compare Source

See the changelog 🚀

GitLab Runner documentation can be found at https://docs.gitlab.com/runner/.

v17.8.1

Compare Source

See the changelog 🚀

GitLab Runner documentation can be found at https://docs.gitlab.com/runner/.

v17.8.0

Compare Source

New features

• Add mount propagation mode for hostpath mounts on kubernetes !5157 (Brinn Joyce @​brinn.joyce)
• Add RoleARN to handle both upload and download S3 transfers !5246
• Expand variables for the docker platform with unit tests !5146 (John Sallay @​jasallay)
• Document RoleARN configuration parameter !5264
• Add support for Windows 24H2 !5170 (Martin Blecker @​AdrianDeWinter)

Bug fixes

• Fix docker network config for Windows !5182
• Limit UploadARN session duration to 1 hour !5230
• Incompatible pull policies should not be a retryable error !5256
• Fix issue #​29381: Missing labels from Docker config when starting service containers !4913 (Andrew Rifken @​arifken)
• Fix runner deb package upgrade !5251

Maintenance

• Fix incorrect references to packagecloud.io !5242
• Fixed Vale issues in Runner docs: Part 9 !5239
• Upgrade Akeyless SDK to v4 !5234 (Amir Maor @​amir.m2)
• Update documentation for manual installation of the new packages !5247 (Victor De Jong @​victordejong)
• Note Reuse previous clone if it exists support for k8s !5248 (Ben Bodenmiller @​bbodenmiller)
• Add note about being unable to change some settings via config template due to known issue !5240
• A couple of minor tweaks to the gitlab-runner-helper-images package !5262
• Correct spelling in comment !5181 (MarlinMr @​MarlinMr)
• Clarify docker container support policy !5232
• Fixed Vale issues in the Configure GitLab Runner on OpenShift doc !5208
• Remove misleading information about the initiation of the session server !5238 (Nicolas @​nicoklaus)
• Use runner base images !5148
• Update 17-7 changelogs !5259
• Let Docker site redirect to latest version !5222
• Improve documentation for Azure workload identities !5221
• Change anyuid service account to gitlab-runner-app-sa !5237
• Put RPM in backticks !5255
• Fix a 404 error in the Runner repo !5254
• Clarify ServiceAccount of the runner manager !5250
• Add Troubleshooting for docker autoscaler executor !5220
• Runner cache s3 table cleanup !5267
• Fix fork pipelines by ensuring windows tag refs exist !5241
• Update steps version to 0.2.0 !5219
• Update step-runner library version to 0.3.0 !5272
• Update golang.org/x/crypto to v0.31.0 !5253

v17.7.1

Compare Source

See the changelog 🚀

GitLab Runner documentation can be found at https://docs.gitlab.com/runner/.

v17.7.0

Compare Source

New features

• Move exported helper images into separete package !5190

Bug fixes

• Update gitlab.com/gitlab-org/fleeting/fleeting version and other deps !5207
• Fix flaky step-integration test !5199
• [k8s] Do not wait poll timeout when container has terminated !5112
• Fix docker network config for Windows !5182
• Use GoCloud URLs for Azure downloads !5188
• Merge Outstanding Security MRs !5171

Maintenance

• Add 'Example' column to Docker runner advanced configuration docs !5177
• Bump UBI base images to the newest 9.5.x versions !5185
• Revert "Merge branch 'avonbertoldi/git-lfs-is-bad' into 'main'" !5169
• Make build environment cache friendly !5179
• Doc/runner spelling exceptions !5162
• Moved some contextual info to runner registration section !5178
• Note in logs when runner manager is being unregistered !5166
• Custom.md: Fix typo !5163 (Per Lundberg @​perlun)
• Fix podman troubleshooting doc !5211 (Thorsten Banhart @​banhartt)
• Bump Go compiler version to 1.23.2 !5153
• Skip homedir fix test on Windows to not block the release !5164
• Update supported runner OS versions !5217
• Add docker connection error to troubleshooting !5165
• Skip testKubernetesBuildCancelFeatureFlag as it's flaky !5228
• Update file configuring_runner_operator.md !5198
• Add Windows Server 2025 to the Windows version support policy !5183
• Actually update step-runner version to 0.2.0 !5227
• Migrate Kubernetes integration tests to use the Runner Kubernetes Cluster !5175
• Remove redundant prepare runner-incept variables job !5197
• Fix apt package install version string and change to a newer version in the docs !5180 (Thorsten Banhart @​banhartt)
• Kubernetes API reference analyzer based on types instead of field names !5158
• Update steps version to 0.2.0 !5219
• Fix limitations in gitlab-runner repo !5201
• Fix Vale issues in Kubernetes executor doc !5196
• Add feature flag issue templates !5156
• Fix TestStackDumping test freezing !5210
• Separate kubernetes integration tests resource groups !5223
• Make fuzz variable mask job required to pass !5209
• Remove semgrep-sast CI rules !5184
• Speed up windows test runs !5174
• Added information about Docker Autoscaler and Instance executors in the executor selection table !5161
• Bump docker-machine to v0.16.2-gitlab.30 !5218
• Fix fuzz variable mask test !5135
• Remove the term worker from the Plan and operate a fleet of instance or group runners doc !5189
• Remove links to interactive web terminals !5176
• Make homedir easier to test !5168
• Add node tolerations to kubernetes integration tests !5229
• Document how to use Azure workload identities for the cache !5204
• Simplify kubernetes integration test names !5024
• Clarify docker container support policy !5232
• Update alpine versions !5214
• Add ability to create review apps by using the GitLab Docs Hugo project !5205
• Update dependency danger-review to v2 !5206
• Fix Vale issues in Runner docs: Part 5 !5191
• Update experiment-beta page path !5193

v17.6.1

Compare Source

Bug fixes

• Fix docker network config for Windows !5182

v17.6.0

Compare Source

New features

• Invoke step-runner from $PATH instead of / !5140
• Native Step Runner Integration for Docker Executor !5069
• Really publish sles/opensuse runner packages !5101
• Terminate job and display error when services are oom killed on the kubernetes executor !4915 (Zach Hammer @​zhammer)
• Add taskscaler state storage options !5061
• Create a GitLab Runner process wrapper !5083
• Warn user if no fleeting plugins to install !5115 (ZhengYuan Loo @​loozhengyuan)

Bug fixes

• [k8s] Terminate PowerShell Script children processes when cancelling the job through UI !5081
• Fix path-style requests with Upload ARN functionality !5150
• Remove trailing "/" from cache fallback keys !5076
• Omit canonical ports for S3 endpoints !5139
• Fix UploadRoleARN URL when other regions are used !5113
• Fix home directory detection !5087
• Upgrade github.com/mvdan/sh to v3.9.0 !5085
• Disable FF_GIT_URLS_WITHOUT_TOKENS by default !5088
• Fix S3 cache access for buckets located outside US !5111
• Fix auth issues with FF_GIT_URLS_WITHOUT_TOKENS: 1 !5103
• Wait for k8s pod to become attachable as part of poll period in exec mode !5079
• Default to us-east-1 region for AWS SDK v2 !5093
• Hide Pod wait to be attachable behind a FF !5098
• Fix fleeting plugin installation architecture selection !5090

Maintenance

• Remove fault tolerance section !5154
• Update CONTRIBUTING.md and LICENSE !5133
• Fix Vale issues in Runner docs: Part 4 !5160
• Added docker autoscaler and instance executors info !5128
• Replace the term shared runner with instance runner in Runner docs !5104
• Add AWS hosted MacOS instance troubleshooting note !5082
• Upgrade github.com/BurntSushi/toml, dario.cat/mergo !5086
• Add comment to help future users !5070
• Documented Podman with Runner K8s executor !5056
• Update CHANGELOG for v17.5.3 !5136
• Fix mage k8s:generatePermissionsDocs intermittent test faliures !5107
• Update CI release task to upload with AWS CLI !5106
• Remove broken link !5118 (Zubeen @​syedzubeen)
• Set gitlab-advanced-sast job to run on code changes !5097
• Fix Vale issues in Runner docs: Part 1 !5149
• Make docker and helper image jobs optional !5141
• Install git-lfs in ubi image from upstream RPM repo !5122
• Follow up MR to add changes to MR 5120 !5123
• Restore 2nd method of restarting after config !5077
• Improve helpers/cli/FixHOME !5089
• Add integration tests to cover service container behaviour !5144
• Skip TestBuildContainerOOMKilled integration test !5151
• Update GitLab Runner CHANGELOG after v17.5.2, v17.4.2, v17.3.3, v17.2.3 patches !5120
• Stop testing UseWindowsLegacyProcessStrategy for KillerTest !5102
• Skip homedir fix test on Windows to not block the release !5164
• Update GitLab Runner CHANGELOG after v17.5.1 patch !5121
• Fix a technical error in the Podman doc !5138
• Remove github.com/tevino/abool in favor of atomic.Bool !5072
• Removed fault tolerance section !5159
• Doc/executor intro feedback !5155
• Note in logs when runner manager is being unregistered !5166
• Delete Runner topics marked for removal !5124
• Minor documentation corrections !5110
• Explain relationship between limit and burst in runner autoscaler configs !5100
• Transfer MR short commit SHA to Runner Incept !5130
• Update Configuration of the metrics HTTP server for runners !5142
• Replace config_exec_args with config_args !5109 (Davide Benini @​davidebenini)
• Add tests for service name empty !5065
• Fixed Vale issues Runner docs: Part 2 !5152

v17.5.5

Compare Source

Bug fixes

• Fix docker network config for Windows !5182

v17.5.4

Compare Source

See the changelog 🚀

GitLab Runner documentation can be found at https://docs.gitlab.com/runner/.

v17.5.3

Compare Source

Bug fixes

• Fix UploadRoleARN URL when other regions are used !5113
• Fix S3 cache access for buckets located outside US !5111

v17.5.2

Compare Source

New features

• Publish SLES and openSUSE runner packages !5101

Bug fixes

• Fix fleeting plugin installation architecture selection !5090
• Default to us-east-1 region for AWS SDK v2 !5093
• Hide Pod wait to be attachable behind a feature flag !5098

Maintenance

• Stop testing UseWindowsLegacyProcessStrategy for KillerTest !5102

v17.5.1

Compare Source

Bug fixes

• Disable FF_GIT_URLS_WITHOUT_TOKENS by default !5088
• Fix home directory detection !5087

v17.5.0

Compare Source

New features

• Document fault tolerance feature !5058
• Add namespace support for DOCKER_AUTH_CONFIG !4727 (Tobias Rautenkranz @​tobiasrautenkranz)
• Support AWS S3 multipart uploads via scoped temporary credentials !5027
• Limit token exposure !5031
• Add support for Azure Managed Identities in cache !5007
• Publish runner and helper packages for SLES and OpenSUSE !4993 (Aazam Thakur @​Alcadeus0)

Bug fixes

• Cancel stage script upon job cancellation in attach mode !4813
• Make invalid service image name a build error !5063
• Allow pull_policy to be unset when defining allowed_pull_policies !4943 (Mike Mayo @​magicmayo)
• Resolve "get "panic: EOF" when register runners run in a container" !5012
• Adjust autoscaler policy on config reloading !5064
• Require only build container to start in Kubernetes !5039
• Track kubernetes pull policies based off of the container name !5036
• Downgrade go-fips base image to ubi8 !5040
• Fix graceful termination of jobs on Windows !4808 (Nils Gladitz @​nilsgladitz)
• Switch to AWS SDK for S3 cache access !4987
• Remove quotes around IP address in ssh invocation in example !4899 (Yassine Ibr @​yassineibr1)
• Wait for k8s pod to become attachable as part of poll period !3556 (Jimmy Berry @​jimmy-outschool)
• Prevent script dump on job cancellation through UI !4980
• Fix pod_annotations_overwrite_allowed parsing error !5032
• Fix bug in scripts/logs dir for k8s executor !4893 (Thomas John Randowski @​WojoInc)
• Address CVE-2024-41110/GHSA-v23v-6jw2-98fq by upgrading github.com/docker/docker and github.com/docker/cli !4925

Maintenance

• Update CHANGELOG after patches release !5073
• Helm chart install page: start structural revisions !5038
• Refactor container entrypoint forwarder !5018
• docs: set admin access for rancher desktop !5062
• Update gocloud.dev for AWS client-side rate limiting fix !5066
• Use latest markdownlint-cli2 and linter configuration !5055
• Add use case to docs for system_id and reusing configurations !5051
• Bump docker-machine to v0.16.2-gitlab.29 !5047
• Docs: Link to Docker certificate docs !5023
• Update GitLab release version for DualStack and Accelerate config !5042
• Fix capitalization !5015 (maximilian @​maximiliankolb)
• Use Windows test code coverage reports !5041
• Update Docker image for docs review apps !5020
• Remove trailing whitespace from GitLab Runner docs !5074
• Updating intro sentence again !5025
• Bump golang to 1.22.7 !5035
• Fix community Merge Request pipeline parse errors !4973 (Thorsten Banhart @​banhartt)
• Docker install: start with line-level cleanups !5033
• Improve flaky waitForRunningContainer test !5016
• Enable timestamps for CI/CD jobs !5048
• Refactor the linux repository page to follow CTRT !5019
• [k8s] more explicit docs on OS, Arch, KernelVersion selection !5009
• Squelch jsonschema warning about DualStack config !5022
• Clean up stray whitespace in gitlab-runner project !5052
• Update interactive runner registration documentation !5008
• Break apart Helm chart optional config into new page !5054
• [docs] Fix concurrent_id being used when it is concurrent_project_id !5026 (Nils @​NilsIRL)
• K8s install page: move troubleshooting info, tackle 2 subheads !5034
• Add deprecation note to the Docker Machine autoscale configuration docs page !5060
• Implement distroless UBI pattern !4971
• Add deprecation note to the Docker Machine executor docs page !5059
• Docker install page: clean up installation steps !5037
• Fix code coverage visualization not working in merge requests !5029
• Skip TestDockerCommand_MacAddressConfig on Windows OS !4999
• Resolve "Proxy configuration docs missing NO_PROXY instructions" !5017
• Remove license scanning template !4735
• Add markdownlint-cli2 as asdf dependency !5053
• Remove note that the Azure Fleeting plug-in is in beta from docs !5046
• Fix example trust relationship in UploadRoleARN config !5043
• Address line-level findings in Kubernetes install page !5030

v17.4.2

Compare Source

Bug fixes

• Remove trailing "/" from cache fallback keys !5076

v17.4.1

Compare Source

Bug fixes

• Require only build container to start in Kubernetes !5039
• Downgrade go-fips base image to ubi8 !5040

v17.4.0

Compare Source

New features

• Forward entrypoint logs !4883
• Akeyless support !4975

Bug fixes

• Custom executor script shouldn't end with '.' when no file extension !4898
• Fix Docker+machine download URL !5014
• Resolve "gitlab-runner start throws "FATAL: Failed to start GitLab-runner: exit status 134" when started prior to being logged in" !4995
• Fix segfault in unregisterRunner when called with no arguments !4932
• Prevent script dump on job cancellation through UI !4980
• Make image generation fail upon failure to download dumb-init ubi-fips !4955

Maintenance

• Remove the GitLab Hosted Runners as an example of security risks with DIND !5011
• CTRT: Refactor the intro for Install GitLab Runner !4974
• Add link to debug trace docs page in the Runner Advanced Configuration doc !4938
• Add reference to troubleshooting to install step 3c of the Install GitLab Runner on macOS doc !4991
• Copy edit GitLab Runner system services doc !4981
• Update the version of Ruby referenced in the Setup macOS runners docs. !4977
• Add links to new autoscaling executors to the [[runners]] section in the Runner Advanced Configuration doc !4930
• Update the default container registry of the helper images !4935
• Fix fleeting plugin version constraint format documentation !4985 (joola @​jooola)
• Add GitLab Advanced SAST to CI/CD config !4965
• Change Docker to container in Kubernetes section of the Runner Advanced Configuration doc !4957
• Update tooling for local development, fix FIPS requirements !4937
• Add Instance and Docker Autoscaler executors to the default build dir section in the Runner Advanced Configuration doc !4964
• Change docker to container in the image_pull_secrets parameter in the Runner Advanced Configuration doc !4959
• Docker integration test for MacAddress setting !4967
• Add docker autoscaler and instance executors to the runners custom build section in the runner Advanced Configuration doc !4963
• Change executor description in the [[runners]] section in the Runner Advanced Configuration doc !4931
• Runner instance generally available !4998
• Update install GitLab Runner documentation for Amazon Linux !4934
• Remove Beta from the [[runners.autoscaler]] section in the Runner Advanced Configuration doc !4952
• Update the intro to the Shells table in Runner Advanced Configuration !4941
• Add link to the services docs page in the Runner Advanced Configuration doc !4948
• Change URL for nesting to docs page entry in the Runner Advanced Config doc !4953
• Update 3.18 and 3.19 alpine info !4944
• Fix broken links !4936
• Use latest docs Docker image and linting configuration docs !5001
• Revise install step 2 in the Install GitLab Runner on macOS doc !4989
• Change the intro section in the Install GitLab Runner on macOS doc !4988
• Don't depend on k8s.io/Kubernetes !4984
• Remove Alpine 3.16 from the runner images section in the Advanced Configuration doc !4960
• Skip TestDockerCommand_MacAddressConfig on Windows OS !4999
• CTRT: Refactor install GitLab Runner !4983
• Add token newline troubleshooting item !4966
• Add an example config for check interval !4928
• Delete experiment label from idleScaleFactor !4950
• Change designation of Fleeting plugin for Azure from BETA to generally available !5013
• Updated Ruby version from 3.3 to 3.3.x !4979
• Update the config.TOML example in Runner Advanced Config !4927
• Add intro to the [[runners.nachine.autoscaling]] section !4951
• Add link to the Git LFS page in the Runner Advanced Configuration doc !4939
• Fleeting.md: fix bin path !4914 (Naftoli Gugenheim @​nafg)
• Bump UBI base image from 9.4-1194 to 9.4-1227 !4997
• Add rules to semgrep-sast job !4923
• Update the Global Section in the Runner Advanced Config doc !4926
• Docs(Kubernetes): mention AWS ASG Zone rebalancing !5002 (Ummet Civi @​ummetcivi)
• Clarify allowed_pull_policies default !4969
• Re-order sentences in the Helper image registry section of the Runner Advanced Config doc !4961
• Change images to container images in the Kubernetes section of the Runner Advanced Configuration doc !4958
• Add reference to Docker executor in the [runners.Docker] section !4942
• Change to terminate process in the runner Advanced Configuration dov !4947
• Revise install Step 3a in the Install GitLab Runner on macOS doc !4990
• Backfill test for waitForRunningContainer !4996
• Address GHSA-xr7q-jx4m-x55m by updating Google.golang.org/grpc to 1.64.1 !4946
• Change text on the use of runner in offline environments in Runner Advanced Configuration doc !4962
• Add instance and docker-autoscaler executors to the executors table !4940
• Improve flaky waitForRunningContainer test !5016
• Update dumb-init version on GitLab Runner images !4956
• Bump Docker-machine to 0.16.2-GitLab.28 !4924
• Change intro in the [runner.Kubernetes] section in the Runner Advanced Config doc !4954
• Add troubleshooting step to resolve install error on Apple M1 to the Install GitLab Runner on macOS !4992
• Update from EOL Ruby 2.7 to Ruby 3.3 in examples used in the Runner Advanced Configuration Doc !4978
• Expand session server configuration example !4929

Documentation changes

• Add planning issue template !4986

v17.3.3

Compare Source

Bug fixes

• Remove trailing "/" from cache fallback keys !5076

v17.3.2

Compare Source

Bug fixes

• Downgrade go-fips base image to ubi8 !5040
• Prevent script dump on job cancellation through UI !4980

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.