At some point we have to upgrade to GitLab version 16. This tasks tracks all deprecation.

A list of all deprecation in version 16: https://docs.gitlab.com/ee/update/deprecations.html?removal_milestone=16.0

• Auto DevOps no longer provisions a PostgreSQL database by default
• Azure Storage Driver defaults to the correct root prefix
• Bundled Grafana Helm Chart is deprecated
• CAS OmniAuth provider
  • https://docs.gitlab.com/ee/update/deprecations.html?removal_milestone=16.0#cas-omniauth-provider
  • migration to OIDC happened in T320390
• CI/CD jobs will fail when no secret is returned from Hashicorp Vault
• Changing MobSF-based SAST analyzer behavior in multi-module Android projects
• Changing merge request approvals with the /approvals API endpoint
• Conan project-level search endpoint returns project-specific results
• Configuration fields in GitLab Runner Helm Chart
  • https://docs.gitlab.com/ee/update/deprecations.html?removal_milestone=16.0#configuration-fields-in-gitlab-runner-helm-chart
  • We have to check all configuration in https://gitlab.wikimedia.org/repos/releng/gitlab-cloud-runner/
  • one value deprecated: https://gitlab.wikimedia.org/repos/releng/gitlab-cloud-runner/-/merge_requests/236
• Configuring Redis config file paths using environment variables is deprecated
• Container Registry pull-through cache
• Container Scanning variables that reference Docker
• Cookie authorization in the GitLab for Jira Cloud app
• DAST API scans using DAST template is deprecated
• DAST API variables
• DAST report variables deprecation
• Default CI/CD job token (CI_JOB_TOKEN) scope changed
  • https://docs.gitlab.com/ee/update/deprecations.html?removal_milestone=16.0#default-cicd-job-token-ci_job_token-scope-changed
  • we have to check if that affects any of our pipelines
  • tbd
• Dependency Scanning support for Java 13, 14, 15, and 16
• Deployment API returns error when updated_at and updated_at are not used together
• Deprecate legacy Gitaly configuration methods
• Deprecated Consul http metrics
• Deprecation and planned removal for CI_PRE_CLONE_SCRIPT variable on GitLab SaaS
• Developer role providing the ability to import projects to a group
  • https://docs.gitlab.com/ee/update/deprecations.html?removal_milestone=16.0#developer-role-providing-the-ability-to-import-projects-to-a-group
  • some users might be promoted to maintainers
  • tbd
• Development dependencies reported for PHP and Python
• Embedding Grafana panels in Markdown is deprecated
• Enforced validation of CI/CD parameter character lengths
  • https://docs.gitlab.com/ee/update/deprecations.html?removal_milestone=16.0#enforced-validation-of-cicd-parameter-character-lengths
  • maybe check all gitlab-ci files for those constraints? not too critical
  • tbd
• Environment search query requires at least three characters
• External field in GraphQL ReleaseAssetLink type
• External field in Releases and Release Links APIs
• Geo: Project repository redownload is deprecated
• GitLab self-monitoring project
• GitLab.com importer
• GraphQL API Runner status will not return paused
  • https://docs.gitlab.com/ee/update/deprecations.html?removal_milestone=16.0#graphql-api-runner-status-will-not-return-paused
  • maybe used in https://gitlab.wikimedia.org/repos/releng/gitlab-trusted-runner/-/blob/main/add-project.py
  • tbd
• GraphQL API legacyMode argument for Runner status
• GraphQL field confidential changed to internal on notes
• Jira DVCS connector for Jira Cloud
• KAS Metrics Port in GitLab Helm Chart
• Legacy Gitaly configuration method
  • https://docs.gitlab.com/ee/update/deprecations.html?removal_milestone=16.0#legacy-gitaly-configuration-method
  • GitLab log also returns some errors:
    • gitaly['prometheus_listen_addr'] has been deprecated since 15.10 and will be removed in 16.0.
    • https://gerrit.wikimedia.org/r/c/operations/puppet/+/935753
    • gitaly['storage'] has been deprecated since 15.10 and will be removed in 16.0. In GitLab 15.10,
• Legacy Praefect configuration method
• Legacy URLs replaced or removed
  • https://docs.gitlab.com/ee/update/deprecations.html?removal_milestone=16.0#legacy-urls-replaced-or-removed
  • not in use, we started using GitLab after this was depricated
• License-Check and the Policies tab on the License Compliance page
• Limit personal access token and deploy token’s access with external authorization
  • https://docs.gitlab.com/ee/update/deprecations.html?removal_milestone=16.0#limit-personal-access-token-and-deploy-tokens-access-with-external-authorization
  • tbd
• Major bundled Helm Chart updates for the GitLab Helm Chart
• Managed Licenses API
• Maximum number of active pipelines per project limit (ci_active_pipelines)
  • https://docs.gitlab.com/ee/update/deprecations.html?removal_milestone=16.0#maximum-number-of-active-pipelines-per-project-limit-ci_active_pipelines
  • not in use
• Monitor performance metrics through Prometheus
• Non-expiring access tokens
  • https://docs.gitlab.com/ee/update/deprecations.html?removal_milestone=16.0#non-expiring-access-tokens
  • tbd
• Non-standard default Redis ports are deprecated
  • https://docs.gitlab.com/ee/update/deprecations.html?removal_milestone=16.0#non-standard-default-redis-ports-are-deprecated
  • omnibus installations are not affected
• Option to delete projects immediately is deprecated from deletion protection settings
• PipelineSecurityReportFinding name GraphQL field
• PostgreSQL 12 deprecated
  • https://docs.gitlab.com/ee/update/deprecations.html?removal_milestone=16.0#postgresql-12-deprecated
  • we are using PostreSQL 13.*
• Projects API field operations_access_level is deprecated
• Rake task for importing bare repositories
• Redis 5 deprecated
  • https://docs.gitlab.com/ee/update/deprecations.html?removal_milestone=16.0#redis-5-deprecated
  • we are using Redis version 6.*
• Remove job_age parameter from POST /jobs/request Runner endpoint
• SAST analyzer coverage changing in GitLab 16.0
• Secure analyzers major version update
• Secure scanning CI/CD templates will use new job rules
• Security report schemas version 14.x.x
• Shimo integration
• Starboard directive in the config for the GitLab Agent for Kubernetes
• Support for Praefect custom metrics endpoint configuration
• Support for periods (.) in Terraform state names might break existing states
• The API no longer returns revoked tokens for the agent for Kubernetes
• The Phabricator task importer is deprecated
  • https://docs.gitlab.com/ee/update/deprecations.html?removal_milestone=16.0#the-phabricator-task-importer-is-deprecated
  • not in use
• The latest Terraform templates will overwrite current stable templates
• Toggle behavior of /draft quick action in merge requests
• Toggle notes confidentiality on APIs
• Use of id field in vulnerabilityFindingDismiss mutation
• Use of third party container registries is deprecated
  • https://docs.gitlab.com/ee/update/deprecations.html?removal_milestone=16.0#use-of-third-party-container-registries-is-deprecated
  • we don't have the registry integrated into GitLab, we just push images with generic json web tokens
• Vulnerability confidence field
• Work items path with global ID at the end of the path is deprecated
• ZenTao integration
• CI_BUILD_* predefined variables
  • https://docs.gitlab.com/ee/update/deprecations.html?removal_milestone=16.0#ci_build_-predefined-variables
  • tbd
• POST ci/lint API endpoint deprecated
• environment_tier parameter for DORA API
• started iteration state
• vulnerabilityFindingDismiss GraphQL mutation
• Log message when restarting GitLab: gitlab_rails['gitlab_default_can_create_group'] has been deprecated since 15.5 and will be removed in 16.0
  • https://gerrit.wikimedia.org/r/931259
  • https://gitlab.wikimedia.org/repos/releng/gitlab-settings/-/merge_requests/32