chore(deps): update dependency gitlab-org/gitlab-runner to v18

[Adphi]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Update	Change
gitlab-org/gitlab-runner	major	v17.3.1 → v18.8.0

---

Release Notes

gitlab-org/gitlab-runner (gitlab-org/gitlab-runner)

v18.8.0

Compare Source

New features

• Job Router !5945
• Implement mage pulp:supportedOSVersions target !6024
• Improve Portability of Git Version Check for z/OS !6001 (Kai McGregor @​kmcgreg-ibm)
• Introduce better job inputs interpolation error !6014
• Emulate deprecated Docker links functionality with ExtraHosts !5980
• Mage target to create Pulp CLI configuration !6039

Bug fixes

• Ensure buildlogger uses available masks (issue reported by Christian Sousa from Blue Origin Manufacturing, LLC) !5909
• Support Git submodules with different hosts via RepoURL insteadOf !6025
• Add IPv6 address when emulating links functionality !6027
• Cleanup dangling virtualbox resources !5941
• Add -protected suffix to docker cache volumes if any of the cache keys include the -protected suffix !6021
• Fix connector interface not being exposed for docker+machine and docker-autoscaler executors !6015

Maintenance

• Fix service container log collection wait time !6019
• Fix race condition in TestDockerCommandWithRunnerServiceEnvironmentVariables !6018
• Fix a typo in the GitLab Runner system requirements page !6031
• Fix privileged setting for general Podman usage !6023
• Update Golang to 1.25.3 !5978
• Make Alpine 3.21 the default base for helper images !5995
• docs: Replace curl | bash commands with safer steps !6036 (Yasssmiine @​Yasssmiine-x)
• Remove alpine 3.19 !5993
• Restructure GitLab Runner installation documentation with card-based navigation !6030
• Clarify details about arm helper image, cleanup extra wording, fix link !6012 (Ben Bodenmiller @​bbodenmiller)
• Allow the i18n lint paths job to fail !6017

v18.7.2

Compare Source

Bug fixes

• Support Git submodules with different hosts via RepoURL insteadOf !6025

v18.7.1

Compare Source

Bug fixes

• Add IPv6 address when emulating links functionality !6027

v18.7.0

Compare Source

New features

• Add reservation throttling config option !6010
• Introduce first iteration of job inputs interpolation behind FF !5855
• Emulate deprecated Docker links functionality with ExtraHosts !5980

Bug fixes

• Fix connector interface not being exposed for docker+machine and docker-autoscaler executors !6015
• Do not fail install if gitlab-runner service commands not available !5948
• Fix shell executor not working with variables that use file variables !5958
• Configure submodules to inherit parent repository credentials !5962
• Fix "unable to get password from user" errors in shell executor !5961
• Fix handling of relative builds dir !5977
• Ensure buildlogger uses available masks (issue reported by Christian Sousa from Blue Origin Manufacturing, LLC) !5909
• Fix clear-docker-cache script for Docker 29 !5969
• Fix bash shell cleanup to support variable expansion in paths !5966
• Ignore user-defined AWS_PROFILE variable in cache uploads !5986
• Fix misleading retry message when GET_SOURCES_ATTEMPTS=1 !5998
• Support resolving Windows 10.0.26200 helper image !5984

Maintenance

• Add dashboard generation process and usage guidance !5989
• Remove CertificateDirectory global !5956
• Docs metadata update for group change from Deploy/Environments -> Verify/Runner Core !5955
• Bump golang.org/x/crypto !5991
• Enable log timestamps by default !5861
• AI Translated Documentation Push: GITTECHA-373 !5934
• Bump gitlab.com/gitlab-org/fleeting/taskscaler to pull a fix !5999
• Fix flaky tests !5994
• Regenerate mocks !5974
• Bump runner image version !6007
• Recursively set up Git submodules credentials !5997
• Roll documentation linting tool versions forward !5954
• Shorten headers to avoid markdownlint exclusion code (Runnner) !5951
• Use CI_RUNNER_VERSION for arm helper image !6004 (Ben Bodenmiller @​bbodenmiller)
• Bump step-runner to v0.20.0 !5970
• AI Translated Documentation Push: GITTECHA-371 !5932
• Fix typo of libvirt !5953
• Remove EOL spaces in doc files - 2025-11-17 !5952
• Fix service container log collection wait time !6019
• Document architecture support in gitlab-runner-helper-images package !5976
• Update GitLab Runner developer docs !5853
• Ensure stable docker images only runs after all tests pass !5990
• Update Kubernetes client-go library to 0.32.10 !5929 (Stéphane Talbot @​stalb)
• Refactor commands, construct a single GitLab client in a single place !5950
• Fix race condition in TestDockerServiceHealthcheckOverflow !5985
• Tidy go mod !5973
• AI Translated Documentation Push: GITTECHA-375 GITTECHA-420 !5938
• Docs(docker-machine): update docs !6006
• Fix a teeny-tiny typo in runner common/config.go !5967 (Sadra Barikbin @​s.barikbin)
• Misc refactors !5949
• Include go.mod changes when checking modules in pipeline !5975
• Fix toml spacing inconsistencies in k8s runner docs !6003 (Ben Bodenmiller @​bbodenmiller)
• Update instructions after UI redesign !6000
• Warn users about legacy /ci URL suffix in runner configuration !5988
• Update to Go 1.24.11 !5992
• Update supported OS distro/version docs !5959
• Fix flaky TestCredSetup with -race by removing CI_DEBUG_TRACE !5987
• AI Translated Documentation Push: GITTECHA-372 !5933
• Allow overriding git credentials in shell integration tests !5982

Documentation changes

• Clarify documentation describing configuration for AWS ASGs with Docker autoscaler !5996 (Dan Puttick @​dan_oklo)

v18.6.6

Compare Source

Bug fixes

• Ignore user-defined AWS_PROFILE variable in cache uploads !5986

Maintenance

• Fix flaky tests !5994
• Update to Go 1.24.11 !5992
• Ensure stable docker images only runs after all tests pass !5990

v18.6.5

Compare Source

See the changelog 🚀

GitLab Runner documentation can be found at https://docs.gitlab.com/runner/.

v18.6.4

Compare Source

Bug fixes

• Fix handling of relative builds dir !5977

v18.6.3

Compare Source

Bug fixes

• Configure submodules to inherit parent repository credentials !5962
• Fix bash shell cleanup to support variable expansion in paths !5966

v18.6.2

Compare Source

Bug fixes

• Fix "unable to get password from user" errors in shell executor !5961

v18.6.1

Compare Source

See the changelog 🚀

GitLab Runner documentation can be found at https://docs.gitlab.com/runner/.

v18.6.0

Compare Source

New features

• Functions subcommands in runner binary !5875
• Add namespace support to GitLab Secrets Manager !5918
• Disallow shim execution mode if executor supports native steps execution !5898
• Add MachineOptionsWithName configuration option !5920
• Add slot-based cgroup support for Docker executor !5870
• Add LoongArch (loong64) build support !5800 (Mingcong Bai @​MingcongBai)
• Bootstrap gitlab-helper-binary for Docker !5892
• Add correlation_id to "Update job..." log line !5887

Bug fixes

• Retry etcd request timeout error in Kubernetes executor !5877
• Always pass as a file for custom executor !5904
• Handle unexpected panics in trace buffer !5890
• Fix removing files recursively for bash on z/OS !5623 (Kai McGregor @​kmcgreg-ibm)
• Externalize git configuration !5912
• Fix job logs duplicating as service logs !5863 (Markus Kaihola @​makeri89)
• Expand variables in image.docker.platform before pulling images !5897 (Bert Wesarg @​bertwesarg)

Maintenance

• Update Vale rules from GitLab project !5884
• AI Translated Documentation Push: GITTECHA-374 !5935
• Add troubleshooting docs for services on windows k8s executor !5913 (Erik Petzold @​erik.petzold1)
• Move build execute prepare/user scripts to their own functions !5893
• Docs: Add note for PowerShell versions in the custom executor !5894
• Steps execution via Connect() !5927
• Clarify docs for supported caching feature !5910
• Pull in fixes for CVEs !5895
• Translation Push - All - For English Anchor LInks !5896
• Integration Tests for GCP Secrets Manager !5881
• Use passed context in NewStepsDocker.Exec() !5915
• Remove obsolete code !5902
• Build linux/riscv64 platform for registry.gitlab.com/gitlab-org/gitlab-runner image !5923 (Ludovic Henry @​luhenry)
• docs(docker.md): add podman selinux mcs section !5879 (vtardiveau @​vtardiveau)
• Verify all: only use creds for local images !5914
• Update cache S3 SSE Key ID docs !5919
• Add warning regarding podman and GPUs !5937
• AI Translated Documentation Push: GITTECHA-370 !5917
• Fix typo !5924
• Make structured "job finished" log line with failure_reason and exit_code !5885
• [steps] Deflake steps command tests !5905
• Add s3:ListBucket to the required permissions for IAM role to access S3 bucket !5903
• docs: Update docker-machine version !5899
• Add link to UI redesign doc !5925
• Document error when performing sts:AssumeRoleWithWebIdentity for s3 cache !5921
• Minor copy edits in runner docs !5944
• Add link checking to i18n docs linting !5943
• Document Kubernetes CI !5786
• Copy edits to runner docs !5911
• Pull in some changes from the security fork !5906
• Use RFC3339Nano timestamp format for JSON logs !5888
• Remove curly brackets from example !5942
• chore: refactor TestAttach using canonical client !5838 (Muhammad Daffa Dinaya @​mdaffad)

v18.5.0

Compare Source

New features

• Add Kubernetes context support for executor !5859
• Add label support to runner configuration !5802
• Implement minimal job confirmation API !5843
• Update Usage Log with more job context !5869
• Add project name to build logging fields !5846

Bug fixes

• Fix logging of duration_s field !5874
• Remove duplicate prefix in docker service containers !5840

Maintenance

• Refactor autoscaler provider for readability and update dependencies !5807 (Sven Geisler @​sge70)
• Remove EOL spaces in doc files - 2025-10-07 !5873
• Latest Translation Yaml enhancements !5842
• Reduce over-linking in GitLab Runner registration documentation !5834
• Improve branch selection logic for docs:check Hugo build job !5866
• Update Hugo version for Docs test !5852
• Update the ubuntu version used as a base image !5845
• Docs feedback: Add more context for Parallels executor !5878
• Rename Connect() to TerminalConnect() !5880
• Improve error logging in docker-machine executor !5862
• Update docker device documentation link !5833 (Quentin MICHAUD @​mh4ckt3mh4ckt1c4s)
• Add VMware vSphere to community maintained fleeting plugins !5818 (Santhanu V @​santhanuv)
• Update fleeting plugin and other dependencies !5830
• Clean up docs redirects - 2025-09-25 !5847
• Fix log field name for docker machine executor !5860
• Docs feedback: Clarify SSH StrictHostKeyChecking default behavior !5871
• Fix duplicate test cases !5857
• OKR: Reduce over-linking in GitLab Runner manual installation guide !5854
• Chore: rename VersionInfo to Info !5849
• Upgrades taskscaler for slot info on no capacity !5872
• Docs feedback: Make the executor selection workflow diagram readable !5876
• Integration Tests for AWS Secrets Manager !5841
• Group/stage change: Verify/Runner -> Verify/Runner Core and CI Functions Platform in the GitLab Runner project !5858

v18.4.0

Compare Source

New features

• Add support for GIT_CLONE_EXTRA_FLAGS for native git clone !5809 (Sven Geisler @​sge70)
• Cache keys can be hashed !5751
• Update step-runner version to 0.16.0 !5825

Bug fixes

• Fix arch label for IBM PPC arch !5827
• Make docker volumes really unique !5783
• Fix cache key sanitation issues, esp. re. "cache key files" !5741
• Update fleeting plugin dependency !5784
• [docker] Separate cache volumes for builds against protected and unprotected !5773
• Add new ruleset to cover all docs patterns !5832
• Upgrade base images to v0.0.26 !5829
• Ensure TOML feature flags are used and take precedence over job env !5782
• Remove health check from Vault client call !5803
• Add timeouts to all docker-machine command executions !5789
• Handle config concurrency deadlock with warnings and documentation !5759

Maintenance

• Update docs links !5814
• Document community supported plugins !5532
• Remove EOL spaces in doc files - 2025-08-26 !5804
• Bump golang to 1.24.6 !5796
• Implement Kubernetes allowed users/groups in Runner config !5724
• Update fleeting plugin and other dependencies !5823
• Update API metric description to bring consistency !5779
• Add CI to test Hugo build with translated documentation !5806
• Add path verifications for localized files - Runner !5790
• Refactor registering of commands to be more explicit !5816
• Make the default helper alpine flavour point to latest !5768
• Use Hugo 0.148.2 for docs builds !5815
• Enable static checks !5811
• Fix nanosecond padding of timestamps !5799 (Philipp Hahn @​pmhahn)
• Bump RUNNER_IMAGES_VERSION to 0.0.25 !5794
• Revert changes made by Auto Releaser Bot !5795
• Migrate golangci lint to version 2 !5772
• Cross reference a KB article in the concurrency and limit docs !5785
• CI: Skip downloading artifacts of previous jobs !5808 (Philipp Hahn @​pmhahn)
• Use testing linter with t.Context related settings !5812
• Add support for signing and notarizing macOS binaries !5792
• Change option signature to not return error !5775
• Fix flaky unit test with TestDefaultDocker_Exec !5798
• Display seconds since epoch using a more widely supported method !5736 (Kai McGregor @​kmcgreg-ibm)
• Fix non-semantic linking word !5801
• Fix flaky Docker integration tests !5797

v18.3.1

Compare Source

Bug fixes

• Remove health check from Vault client call !5803

v18.3.0

Compare Source

New features

• Add native GitLab Secrets Manager support to GitLab Runner !5733
• Add method label to status counter metrics !5739
• Add status_class and method label to request duration metrics !5752
• Update step-runner version to 0.15.0 !5757
• Record request retries. !5758

Bug fixes

• Update fastzip to v0.2.0 !5778
• Fix identity for aws_secrets_manager_resolver !5747
• Consume docker auth info in order !5686
• [docker] Separate cache volumes for builds against protected and unprotected !5773
• Add correlation id header to outgoing requests !5743
• Add support for 503 http code when the GitLab instance is in maintenance mode !5685
• Enable image executor opts in the kubernetes executor !5745
• Fix job duration reporting !5711
• Update fleeting plugin dependency !5776
• Parse the last line of stdout for UID/GID !5765
• Fix proxy-exec store temporary directory !5780
• Fix cache key sanitation issues, esp. re. "cache key files" !5741
• Tighten cache key sanitation !5719

Maintenance

• Add operator pod_spec and deployment_spec docs !5766
• Remove unused lock from client struct !5770
• Mention that systempaths security_opt is not supported !5769 (Andrés Delfino @​andresdelfino)
• Change link to GA issue for the overwrite pod spec feature !5732
• Update a few region/zone IDs in examples !5720
• Add a max age of 24h for Kubernetes integration RBAC resources !5760
• Chore: Use stable alpine for RISC-V !5714 (Aaron Dewes @​AaronDewes)
• Allow customization of taskscaler and fleeting parameters in config.toml !5777 (Sven Geisler @​sge70)
• Move backoff retry logic to retry requester !5754
• Refactor gitlab client unregister runner to table tests !5670
• Fix localization codeowners !5712
• Lbhardwaj/refactor/unregister command methods !5742
• Refactor move retry 429 status code logic to one place !5727
• Add test for abstract shell guardGetSourcesScriptHooks method !5702
• Sync vale rules from main project - Runner !5753
• Refactor verify runner tests to table tests and better assertions !5763
• Bridge releases with Hosted Runners !5746
• Cleanup dead code related to disabled Akeyless secrets integration feature !5762
• Drop Alpine Version 3.18 !5744
• Refactor kubernetes feature checker tests !5774
• Remove EOL spaces in docs !5749
• Remove line length rule for markdownlint for i18n files !5723
• Fix minor typos with executor interface docs !5717
• Correct erroneous compatibility chart features for docker-autoscaler !5755
• Docker machine AMI update !5718
• Add errorlint linter to golangci-lint settings !5750
• Introduce unnecessary-traversal Markdownlint rule to Runner docs !5735
• Upgrade prebuilt runner images back to Alpine 3.21 !5730 (Aaron Dewes @​AaronDewes)
• Upstream batch push 2025-07-21 !5734
• Refactor errors to wrap errors !5731
• Minor grammar updates in GitLab Runner README !5756 (Anshi Mehta @​anshikmehtaa)
• Unregister command unit tests !5738
• A bit of general copy edit cleanup !5740
• Update index file for getting started !5722
• Update hosted runners bridge wiki entry !5767
• Minor improvements to runner fleet scaling best practices doc !5737
• Add a note about the experiment status of GRIT !5729

v18.2.2

Compare Source

See the changelog 🚀

GitLab Runner documentation can be found at https://docs.gitlab.com/runner/.

v18.2.1

Compare Source

See the changelog 🚀

GitLab Runner documentation can be found at https://docs.gitlab.com/runner/.

v18.2.0

Compare Source

New features

• Add reference to z/OS on the main runner install page !5647
• Thread job request correlation ID to git operations !5653
• Add functionality to retrieve secrets from AWS SecretsManager !5587 (Markus Siebert @​m-s-db)
• Update docs on how to use env variables for S3 cache access !5648
• Improve runner_name metric label coverage !5609 (Josh Smith @​jsmith25)
• Log usage of deault image for Docker and K8S executors !5688

Bug fixes

• Tighten cache key sanitation !5719
• Add troubleshooting guide for GCS workload identity !5651
• Skip pre and post checkout hooks for empty !5677
• Docs: Fix protocol_port default for SSH !5701
• Revert MRs 5531 and 5676 !5715
• Reimplement ShortenToken !5681
• Put the fips binary in the fips runner image !5669
• Set helper_image_flavor to ubi-fips when fips mode is enabled !5698
• Ensure BuildErrors have FailureReason !5676
• Fix kubernetes executor helper image override log !5655 (Ricard Bejarano @​ricardbejarano)
• Add -depth option to find -exec rm invocations !5692

Maintenance

• Add known SELinux issue regarding tmp and pip to the Podman docs !5661
• Switch jobs to Kubernetes !5631
• Updated the documents !5596 (Jithin Vijayan @​jithin.vijayan)
• Update docker machine versions !5672
• Add autoscaler IP address logging options !5519 (Brayden White @​bwhite117)
• Docs: Improve prometheus scraping metrics docs including Operator !5657
• Update default ruby version in examples !5693
• Add aardvark-dns bug notice to podman guide !5689 (Felix @​f.preuschoff)
• Update region from us-central-1 to eu-central-1 !5713
• Run fewer vale lint rules on i18n (translation) docs MRs !5699
• Add additonal info about SHA-pinned images !5700
• Bump golang to 1.24.4 !5668
• chore: refactor TestAttachPodNotRunning !5650 (Muhammad Daffa Dinaya @​mdaffad)
• Update access a private registry from kubernetes executor !5622
• Add configure runner on OCI to the index page !5649
• Clean up runner docs !5697
• Fix OS version package support docs !5703
• Add .markdownlint-cli2.yaml for doc-locale !5690
• Fix this test !5682
• Update mockery to latest version 3.3.4 and generate mocks !5646
• Remove outdated information !5691
• Update file _index.md !5665
• Update SLSA build type documentation !5639
• Document tarzstd as an argument for CACHE_COMPRESSION_FORMAT !5673
• Clarify documentation on reading S3 credentials from the environment !5671
• Add Kubernetes executors docs for helper container memory sizing !5659
• Runner doc restructuring: Revamp the admin section index page !5678
• Add formatting target for easy fixes with golangci-lint !5658
• Add overprovisioning note, fix typos !5656
• Refactor gitlab client request job tests to table tests !5666
• Fix indent in config.toml example. !5667 (Mathieu Gouin @​mathieugouin)
• Update PowerShell UTF8 integration test !5493 (Guillaume Chauvel @​guillaume.chauvel)
• Update step-runner version to 0.13.0 !5705
• Fix docs pipelines for forks !5664
• Small typo fixes !5652

v18.1.3

Compare Source

See the changelog 🚀

GitLab Runner documentation can be found at https://docs.gitlab.com/runner/.

v18.1.2

Compare Source

See the changelog 🚀

GitLab Runner documentation can be found at https://docs.gitlab.com/runner/.

v18.1.1

Compare Source

See the changelog 🚀

GitLab Runner documentation can be found at https://docs.gitlab.com/runner/.

v18.1.0

Compare Source

New features

• Added safety checks for nil sessions and empty endpoints !5515 (Zubeen @​syedzubeen)
• Log a different message for policy jobs with highest precedence !5628
• Add adaptive request concurrency !5546
• Allow to install/manipulate the gitlab-runner service as a user service (systemd) !5534 (Tiago Teixeira @​tiago.teixeira.erx)
• Bump base images to allow native clone to work !5561
• Support user as integer for Docker/Kubernetes executor_opts !5552
• Thread job request correlation ID to git operations !5653
• make preemptive mode configurable !5565 (Pascal Sochacki @​pascal.sochacki)
• Add queue_size and queue_depth metrics !5592
• Log policy job information !5591
• Add more request_concurrency related metrics !5558
• Enable powershell native clone !5577 (Guillaume Chauvel @​guillaume.chauvel)
• Add support for Overlay Volume Mounts when Podman is used with Docker Executor !5522 (Napuu @​napuu)

Bug fixes

• Stop following symlinks when archiving documents !5543
• Docker+autoscaler: Properly clean up when a job times out or is cancelled !5593
• Fix AWS GovCloud with AWS S3 cache !5613
• Fix final job duration handling !5583
• Document DinD DNS behavior with network-per-build feature !5611
• Run git config cleanup before creating the template dir !5598
• Fix authentication towards HTTP docker registries !5329 (François HORTA @​fhorta1)
• Switch the default for FF_GIT_URLS_WITHOUT_TOKENS back to false !5572
• Handle the new glrtr- prefix !5580

Maintenance

• Update golang.org/x/net to fix CVE-2025-22872 !5594
• Added missing commas !5579
• Docker executor image clarification and macOS virtualization info !5571 (Charles Uneze @​network-charles)
• Fix rules for the unit test job !5618
• Tidy runner_wrapper/api !5604
• Limit Unit test job to only MR pipelines for forks !5608
• Making timeout to acquire a new instance configurable within gitlab-runner !5563 (Moritz Scheve @​schevmo)
• Remove outdated information !5620
• Add correlation_id to request logs !5615
• Bump base-images to 0.0.18 !5633
• Fix pipelines for forks !5607
• Update redirected links !5605
• Improve pipelines for community, fork, docs MRs !5576
• Fix protoc binary download for macos !5570
• Document how to install GitLab Runner on z/OS manually !5641
• Upgrade Go to v1.24.3 !5562
• Clean up stray whitespace !5585
• Remove kaniko references in GitLab Runner docs !5560
• Update step-runner dependency version to 0.11.0 !5645
• Update dates in examples !5621
• Clean up tables in misc runner docs !5589
• Docs: more bold cleanup !5586
• Document how to set environment variables in GitLab Runner Helm chart !5559
• Restrict danger-review to canonical GitLab forks !5640
• Push GitLab Documentation Translations Upstream [2025-06-09] !5630
• docs: Add custom executor "shell" property !5578 (Guillaume Chauvel @​guillaume.chauvel)
• Remove randomness of TestProcessRunner_BuildLimit failures !5588
• Run Hugo build test on the correct Docs branch !5545
• Install local dev tools and dependency binaries in on go !5632
• chore: install tool binaries in tmp bin !5629
• docs: Remove a line that is not accurate to the current usages of GRIT !5601
• Config options refactor !5373
• Move internal docs into development directory !5595
• Update CHANGELOG to take in account 17.10.x to 18.0.x releases !5643
• Update docker machine in docs !5603
• Remove outdated mention !5582
• Added Experimental Status !5602
• Remove outdated content !5597
• Use mockery constructors in tests !5581
• Auto-format all remaining runner tables !5584
• Update the cntlm link to the new fork !5556 (Dan Fredell @​DFredell)
• Update docker-machine version in docs !5617

v18.0.5

Compare Source

See the changelog 🚀

GitLab Runner documentation can be found at https://docs.gitlab.com/runner/.

v18.0.4

Compare Source

See the changelog 🚀

GitLab Runner documentati

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.