diff --git a/nixos/doc/manual/redirects.json b/nixos/doc/manual/redirects.json
index 06582cf0d305..d1c6fb11e098 100644
--- a/nixos/doc/manual/redirects.json
+++ b/nixos/doc/manual/redirects.json
@@ -1451,6 +1451,9 @@
   "module-services-gitlab-maintenance-rake": [
     "index.html#module-services-gitlab-maintenance-rake"
   ],
+  "module-services-gitlab-registry-database-migration": [
+    "index.html#module-services-gitlab-registry-database-migration"
+  ],
   "module-services-gitlab-runner": [
     "index.html#module-services-gitlab-runner"
   ],
diff --git a/nixos/doc/manual/release-notes/rl-2611.section.md b/nixos/doc/manual/release-notes/rl-2611.section.md
index 450f2e754acd..d9d9193ac45f 100644
--- a/nixos/doc/manual/release-notes/rl-2611.section.md
+++ b/nixos/doc/manual/release-notes/rl-2611.section.md
@@ -121,6 +121,8 @@
 
 - String values passed to `services.phpfpm.settings`, `services.phpfpm.pools.<name>.phpEnv`, and `services.phpfpm.pools.<name>.settings` are now properly quoted and escaped, except for the `${}` syntax that is left as-is. If you are manually escaping these values, please adjust accordingly.
 
+- `services.gitlab.registry` has been modified so that the GitLab container registry runs in the `gitlab-container-registry` system user. This behavior can be modified with the `services.gitlab.registry.user` option.
+
 - `systemd.user.extraConfig` has been removed in favor of the structured [](#opt-systemd.user.settings.Manager) option. Use `systemd.user.settings.Manager` to set any `systemd-user.conf(5)` option directly. For example, replace `systemd.user.extraConfig = "DefaultTimeoutStartSec=60";` with `systemd.user.settings.Manager.DefaultTimeoutStartSec = 60;`.
 
 - `matrix-appservice-discord` was removed from nixpkgs along with its NixOS module (`services.matrix-appservice-discord`) as it is no longer actively maintained upstream. Use the actively-maintained puppeting bridge [`mautrix-discord`](#opt-services.mautrix-discord.enable) instead.
@@ -184,6 +186,8 @@
   This makes fully declarative deployments safer: Otherwise the user needed to either accept Plausible's unauthenticated "first launch" setup wizard, which lets anyone reaching the instance create the first admin account, or do more work (deploying with NixOS's default binding to `localhost` without exposing it publicly, going through the wizard, and then deploying Plausible exposed to the Internet).
   This option was previously removed with NixOS 25.05 due to an upstream Plausible change making declarative admin creation more difficult, but this change re-implements the admin creation directly.
 
+- `services.gitlab.registry` now uses PostgreSQL as database storage for new installations and supports old installations that use the filesystem as metadata storage. It creates the required PostgreSQL database and user. Users can manually migrate their filesystem based metadata storage. See [GitLab Container Registry Migration to database metadata store](#module-services-gitlab-registry-database-migration).
+
 - The `newuidmap` and `newgidmap` security wrappers are now installed with `cap_setuid`/`cap_setgid` file capabilities instead of the setuid-root bit, matching shadow's `--with-fcaps` install mode and other major distributions. Rootless containers (podman, docker-rootless, unprivileged user namespaces) are unaffected. The only behavioural change is that mapping host uid 0 via `/etc/subuid` (which NixOS never configures by default) additionally requires `cap_setfcap`; users who explicitly grant uid 0 in a subuid range can restore the previous behaviour with `security.wrappers.newuidmap.capabilities = lib.mkForce "cap_setuid,cap_setfcap+ep";`.
 
 - The `authelia` module now uses systemd's `LoadCredential` to load all files defined in `secrets`. As such, these files no longer need to be readable by the authelia user and group: they can for example be set to be only readable by the root user.
diff --git a/nixos/modules/module-list.nix b/nixos/modules/module-list.nix
index bf8283bd0b02..b9b3fade7ea3 100644
--- a/nixos/modules/module-list.nix
+++ b/nixos/modules/module-list.nix
@@ -885,7 +885,8 @@
   ./services/misc/gammu-smsd.nix
   ./services/misc/geoipupdate.nix
   ./services/misc/gitea.nix
-  ./services/misc/gitlab.nix
+  ./services/misc/gitlab/container-registry.nix
+  ./services/misc/gitlab/default.nix
   ./services/misc/gitolite.nix
   ./services/misc/gitweb.nix
   ./services/misc/gollum.nix
diff --git a/nixos/modules/services/misc/gitlab/container-registry.nix b/nixos/modules/services/misc/gitlab/container-registry.nix
new file mode 100644
index 000000000000..94649f3d2d49
--- /dev/null
+++ b/nixos/modules/services/misc/gitlab/container-registry.nix
@@ -0,0 +1,387 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+let
+  cfg = config.services.gitlab.registry;
+
+  jsonFmt = pkgs.formats.json { };
+
+  enableDatabase = cfg.settings.database.enabled == true || cfg.settings.database.enabled == "prefer";
+  # We only want to create a database if we're actually going to connect to it.
+  databaseActuallyCreateLocally = cfg.databaseCreateLocally && cfg.settings.database.host == "";
+  enableDatabaseLocally = enableDatabase && cfg.settings.database.host == "";
+  configFile = jsonFmt.generate "gitlab-container-registry-config.json" cfg.settings;
+in
+{
+  imports = [
+    (lib.mkRenamedOptionModule
+      [ "services" "gitlab" "registry" "issuer" ]
+      [
+        "services"
+        "gitlab"
+        "registry"
+        "settings"
+        "auth"
+        "token"
+        "issuer"
+      ]
+    )
+    (lib.mkRenamedOptionModule
+      [ "services" "gitlab" "registry" "serviceName" ]
+      [
+        "services"
+        "gitlab"
+        "registry"
+        "settings"
+        "auth"
+        "token"
+        "service"
+      ]
+    )
+    (lib.mkRemovedOptionModule [
+      "services"
+      "gitlab"
+      "registry"
+      "port"
+    ] "Use services.gitlab.registry.settings.http.addr instead.")
+  ];
+  options.services.gitlab.registry = {
+    enable = lib.mkEnableOption "GitLab container registry";
+    package = lib.mkPackageOption pkgs "gitlab-container-registry" {
+      extraDescription = ''
+        External container registries such as `pkgs.distribution` are not supported
+        anymore since GitLab 16.0.0.
+      '';
+    };
+    host = lib.mkOption {
+      type = lib.types.str;
+      default = config.services.gitlab.host;
+      defaultText = lib.literalExpression "config.services.gitlab.host";
+      description = "Address of the GitLab instance, Gitlab Contianer Registry connects to.";
+    };
+    certFile = lib.mkOption {
+      type = lib.types.path;
+      description = "Path to GitLab container registry certificate.";
+    };
+    keyFile = lib.mkOption {
+      type = lib.types.path;
+      description = "Path to GitLab container registry certificate key.";
+    };
+    defaultForProjects = lib.mkOption {
+      type = lib.types.bool;
+      default = cfg.enable;
+      defaultText = lib.literalExpression "config.services.gitlab.registry.enable";
+      description = "If GitLab container registry should be enabled by default for projects.";
+    };
+
+    user = lib.mkOption {
+      type = lib.types.str;
+      default = "gitlab-container-registry";
+      description = "User the registry runs as";
+    };
+
+    externalAddress = lib.mkOption {
+      type = lib.types.str;
+      default = "";
+      description = "External address used to access registry from the internet";
+    };
+    externalPort = lib.mkOption {
+      type = lib.types.port;
+      description = "External port used to access registry from the internet";
+    };
+
+    databaseCreateLocally = lib.mkOption {
+      type = lib.types.bool;
+      default = true;
+      description = ''
+        Whether a database should be automatically created on the
+        local host. Set this to `false` if you plan
+        to provision a local database yourself. This has no effect
+        if {option}`services.gitlab.registry.settings.database.host` is customized.
+      '';
+    };
+
+    storagePath = lib.mkOption {
+      type = lib.types.nullOr lib.types.path;
+      default =
+        if lib.versionAtLeast config.system.stateVersion "27.05" then
+          "/var/lib/gitlab-container-registry"
+        else
+          "/var/lib/docker-registry";
+      defaultText = lib.literalExpression ''
+        if lib.versionAtLeast config.system.stateVersion "27.05" then
+        "/var/lib/gitlab-container-registry"
+        else
+        "/var/lib/docker-registry"
+      '';
+      description = ''
+        GitLab container registry storage path for the filesystem storage backend. Set to
+        null to configure another backend via settings.
+      '';
+    };
+
+    enableDelete = lib.mkOption {
+      type = lib.types.bool;
+      default = false;
+      description = "Enable delete for manifests and blobs.";
+    };
+
+    enableRedisCache = lib.mkEnableOption "redis as blob cache";
+
+    redisUrl = lib.mkOption {
+      type = lib.types.str;
+      default = "localhost:6379";
+      description = "Set redis host and port.";
+    };
+
+    redisPassword = lib.mkOption {
+      type = lib.types.str;
+      default = "";
+      description = "Set redis password.";
+    };
+
+    settings = lib.mkOption {
+      description = ''
+        GitLab container registry configuration.
+      '';
+      default = { };
+      type = lib.types.submodule {
+        freeformType = jsonFmt.type;
+
+        options = {
+          version = lib.mkOption {
+            type = lib.types.str;
+            default = "0.1";
+            description = "Version of the configuration file";
+          };
+
+          auth.token = {
+            realm = lib.mkOption {
+              type = lib.types.str;
+              description = "The realm in which the registry server authenticates.";
+              default = "http${
+                lib.optionalString (config.services.gitlab.https == true) "s"
+              }://${cfg.host}/jwt/auth";
+              defaultText = lib.literalExpression ''
+                "http''${
+                  lib.optionalString (config.services.gitlab.https == true) "s"
+                }://''${cfg.host}/jwt/auth"
+              '';
+            };
+            service = lib.mkOption {
+              type = lib.types.str;
+              description = "The service being authenticated";
+              default = "container_registry";
+            };
+            issuer = lib.mkOption {
+              type = lib.types.str;
+              description = "The name of the token issuer. The issuer inserts this into the token so it must match the value configured for the issuer.";
+              default = "gitlab-issuer";
+            };
+            rootcertbundle = lib.mkOption {
+              type = lib.types.path;
+              default = cfg.certFile;
+              defaultText = lib.literalExpression "config.services.gitlab.registry.certFile";
+              readOnly = true;
+              description = "The absolute path to the root certificate bundle. This bundle contains the public part of the certificates used to sign authentication tokens.";
+            };
+          };
+          database = {
+            enabled = lib.mkOption {
+              type = lib.types.oneOf [
+                lib.types.bool
+                (lib.types.enum [ "prefer" ])
+              ];
+              default = "prefer";
+              description = ''
+                Whether to enable the database metadata store.
+
+                "prefer" is a mode that uses the database as metadata store, but falls back to the filesystem store when it has not been imported yet into the database.
+              '';
+            };
+            dbname = lib.mkOption {
+              type = lib.types.str;
+              default = "gitlab-container-registry";
+              description = "The database name that is used.";
+            };
+            host = lib.mkOption {
+              type = lib.types.str;
+              default = "";
+              description = "The database host GitLab container registry connects to. An empty string means 'use local unix socket connection'";
+            };
+          };
+          health.storagedriver = {
+            enabled = lib.mkEnableOption "storage driver health checks" // {
+              default = true;
+            };
+            threshold = lib.mkOption {
+              type = lib.types.ints.unsigned;
+              default = 3;
+              description = "The number of times the check must fail before the state is marked as unhealthy";
+            };
+          };
+          http = {
+            addr = lib.mkOption {
+              type = lib.types.str;
+              default = "127.0.0.1:4567";
+              description = "Address the contianer registry listens on.";
+            };
+            headers.X-Content-Type-Options = lib.mkOption {
+              type = lib.types.listOf lib.types.str;
+              default = [ "nosniff" ];
+              description = "Value the X-Content-Type-Options HTTP header should be set to. 'nosniff' is recommended by GitLab.";
+            };
+          };
+          log.fields.service = lib.mkOption {
+            type = lib.types.str;
+            default = "gitlab-container-registry";
+            description = "The service name added to log messages";
+          };
+          storage.cache.blobdescriptor = lib.mkOption {
+            type = lib.types.str;
+            default = if cfg.enableRedisCache then "redis" else "inmemory";
+            defaultText = lib.literalExpression "if config.services.gitlab.registry.enableRedisCache then \"redis\" else \"inmemory\"";
+            description = "Backend to use for caching.";
+          };
+        };
+      };
+    };
+
+    garbageCollection = {
+      enable = lib.mkEnableOption "garbage collection";
+
+      dates = lib.mkOption {
+        default = "daily";
+        type = lib.types.str;
+        description = ''
+          Specification (in the format described by
+          {manpage}`systemd.time(7)`) of the time at
+          which the garbage collection will occur.
+        '';
+      };
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
+    assertions = [
+      {
+        assertion = cfg.databaseCreateLocally -> databaseActuallyCreateLocally;
+        message = "'services.gitlab.registry.databaseCreateLocally' has no effect when services.gitlab.registry.database.host is customized. Please set 'services.gitlab.registry.databaseCreateLocally' to 'false' and setup the database manually or remove your custom value for 'services.gitlab.registry.database.host'";
+      }
+    ];
+    environment.etc."gitlab-container-registry-config.json".source = configFile;
+    services.gitlab.registry.settings = {
+      # This must be true, otherwise GitLab won't manage it correctly
+      delete.enabled = true;
+      # GitLab container registry enables the redis cache as soon as the redis key exists in the config file.
+      redis = lib.mkIf cfg.enableRedisCache (
+        {
+          addr = "${cfg.redisUrl}";
+          password = "${cfg.redisPassword}";
+        }
+        // (builtins.mapAttrs (_: lib.mkDefault) {
+          db = 0;
+          dialtimeout = "10ms";
+          readtimeout = "10ms";
+          writetimeout = "10ms";
+          pool = {
+            maxidle = 16;
+            maxactive = 64;
+            idletimeout = "300s";
+          };
+        })
+      );
+      storage.filesystem.rootdirectory = lib.mkIf (cfg.storagePath != null) cfg.storagePath;
+    };
+
+    systemd.services.gitlab-registry-cert = {
+      path = with pkgs; [ openssl ];
+
+      script =
+        let
+          user = config.services.gitlab.user;
+          group = config.services.gitlab.group;
+        in
+        ''
+          mkdir -p $(dirname ${cfg.keyFile}) $(dirname ${cfg.certFile})
+          openssl req -nodes -newkey rsa:4096 -keyout ${cfg.keyFile} -out /tmp/registry-auth.csr -subj "/CN=${cfg.settings.auth.token.issuer}"
+          openssl x509 -in /tmp/registry-auth.csr -out ${cfg.certFile} -req -signkey ${cfg.keyFile} -days 3650
+          chown ${user}:${group} $(dirname ${cfg.keyFile}) $(dirname ${cfg.certFile}) ${cfg.keyFile} ${cfg.certFile}
+        '';
+
+      unitConfig = {
+        ConditionPathExists = "!${cfg.certFile}";
+      };
+      serviceConfig = {
+        Type = "oneshot";
+        Slice = "system-gitlab.slice";
+      };
+    };
+
+    systemd.services.gitlab-container-registry = {
+      description = "GitLab Container Registry";
+      wantedBy = [ "multi-user.target" ];
+      # Ensure Docker Registry launches after the certificate generation job
+      wants = [ "gitlab-registry-cert.service" ];
+      after = [
+        "network.target"
+        "gitlab-registry-cert.service"
+      ]
+      ++ lib.optionals enableDatabaseLocally [ "postgresql.target" ];
+      requires = lib.optionals enableDatabaseLocally [ "postgresql.target" ];
+
+      preStart = lib.mkIf enableDatabaseLocally "${lib.getExe cfg.package} database migrate up --skip-post-deployment ${configFile}";
+
+      postStart = lib.mkIf enableDatabaseLocally "${lib.getExe cfg.package} database migrate up ${configFile}";
+
+      serviceConfig = {
+        ExecStart = "${lib.getExe cfg.package} serve ${configFile}";
+        User = cfg.user;
+        WorkingDirectory = cfg.storagePath;
+        AmbientCapabilities = "cap_net_bind_service";
+      };
+    };
+
+    # This is only required for legacy metadata, database metadata backend does online garbage collection
+    systemd.services.gitlab-container-registry-garbage-collect = {
+      description = "Run Garbage Collection for GitLab container registry";
+
+      restartIfChanged = false;
+      unitConfig.X-StopOnRemoval = false;
+
+      serviceConfig.Type = "oneshot";
+
+      script = ''
+        ${lib.getExe cfg.package} garbage-collect ${configFile}
+        /run/current-system/systemd/bin/systemctl restart gitlab-container-registry.service
+      '';
+
+      startAt = lib.optional cfg.garbageCollection.enable cfg.garbageCollection.dates;
+    };
+
+    services.postgresql = lib.mkIf databaseActuallyCreateLocally {
+      ensureDatabases = [ "gitlab-container-registry" ];
+      ensureUsers = [
+        {
+          name = "gitlab-container-registry";
+          ensureDBOwnership = true;
+        }
+      ];
+    };
+
+    users.users.gitlab-container-registry = lib.mkIf (cfg.user == "gitlab-container-registry") (
+      (lib.optionalAttrs (cfg.storagePath != null) {
+        createHome = true;
+        home = cfg.storagePath;
+      })
+      // {
+        group = "gitlab-container-registry";
+        isSystemUser = true;
+      }
+    );
+    users.groups.gitlab-container-registry = lib.mkIf (cfg.user == "gitlab-container-registry") { };
+  };
+}
diff --git a/nixos/modules/services/misc/gitlab.md b/nixos/modules/services/misc/gitlab/default.md
similarity index 90%
rename from nixos/modules/services/misc/gitlab.md
rename to nixos/modules/services/misc/gitlab/default.md
index f37feb9df6fe..4b0b105b1145 100644
--- a/nixos/modules/services/misc/gitlab.md
+++ b/nixos/modules/services/misc/gitlab/default.md
@@ -124,6 +124,20 @@ A list of all available rake tasks can be obtained by running:
 $ sudo -u git -H gitlab-rake -T
 ```
 
+## GitLab Container Registry Migration to database metadata store {#module-services-gitlab-registry-database-migration}
+
+For a general explanation please read the [official documentation](https://docs.gitlab.com/administration/packages/container_registry_metadata_database/).
+
+With the NixOS module, please run the following steps for the three-step import:
+
+* `systemctl stop gitlab-container-registry`
+* `sudo -u gitlab-container-registry database import --step-one --log-to-stdout /etc/gitlab-container-registry-config.json`
+* `sudo -u gitlab-container-registry database import --step-two --log-to-stdout /etc/gitlab-container-registry-config.json`
+* `sudo -u gitlab-container-registry database import --step-three --log-to-stdout /etc/gitlab-container-registry-config.json`
+
+Please make sure that `services.gitlab.registry.settings.database.enabled` is `true` or `"prefer"` before restarting the
+`gitlab-container-registry` systemd service.
+
 ## Runner {#module-services-gitlab-runner}
 
 GitLab Runner is a CI runner which is an executable which you can host yourself.
diff --git a/nixos/modules/services/misc/gitlab.nix b/nixos/modules/services/misc/gitlab/default.nix
similarity index 92%
rename from nixos/modules/services/misc/gitlab.nix
rename to nixos/modules/services/misc/gitlab/default.nix
index 0601454e9b2e..fcd99a6d5a00 100644
--- a/nixos/modules/services/misc/gitlab.nix
+++ b/nixos/modules/services/misc/gitlab/default.nix
@@ -22,7 +22,7 @@ let
     if config.services.postgresql.enable then
       config.services.postgresql.package
     else
-      pkgs.postgresql_16;
+      pkgs.postgresql_17;
 
   gitlabSocket = "${cfg.statePath}/tmp/sockets/gitlab.socket";
   gitalySocket = "${cfg.statePath}/tmp/sockets/gitaly.socket";
@@ -176,8 +176,8 @@ let
         host = cfg.registry.externalAddress;
         port = cfg.registry.externalPort;
         key = cfg.registry.keyFile;
-        api_url = "http://${config.services.dockerRegistry.listenAddress}:${toString config.services.dockerRegistry.port}/";
-        issuer = cfg.registry.issuer;
+        api_url = "http://${cfg.registry.externalAddress}:${toString cfg.registry.externalPort}/";
+        issuer = cfg.registry.settings.auth.token.issuer;
       };
       elasticsearch.indexer_path = "${pkgs.gitlab-elasticsearch-indexer}/bin/gitlab-elasticsearch-indexer";
       extra = { };
@@ -576,73 +576,6 @@ in
         '';
       };
 
-      registry = {
-        enable = mkOption {
-          type = types.bool;
-          default = false;
-          description = "Enable GitLab container registry.";
-        };
-        package = mkOption {
-          type = types.package;
-          default =
-            if versionAtLeast config.system.stateVersion "23.11" then
-              pkgs.gitlab-container-registry
-            else
-              pkgs.distribution;
-          defaultText = literalExpression "pkgs.distribution";
-          description = ''
-            Container registry package to use.
-
-            External container registries such as `pkgs.distribution` are not supported
-            anymore since GitLab 16.0.0.
-          '';
-        };
-        host = mkOption {
-          type = types.str;
-          default = config.services.gitlab.host;
-          defaultText = literalExpression "config.services.gitlab.host";
-          description = "GitLab container registry host name.";
-        };
-        port = mkOption {
-          type = types.port;
-          default = 4567;
-          description = "GitLab container registry port.";
-        };
-        certFile = mkOption {
-          type = types.path;
-          description = "Path to GitLab container registry certificate.";
-        };
-        keyFile = mkOption {
-          type = types.path;
-          description = "Path to GitLab container registry certificate-key.";
-        };
-        defaultForProjects = mkOption {
-          type = types.bool;
-          default = cfg.registry.enable;
-          defaultText = literalExpression "config.${opt.registry.enable}";
-          description = "If GitLab container registry should be enabled by default for projects.";
-        };
-        issuer = mkOption {
-          type = types.str;
-          default = "gitlab-issuer";
-          description = "GitLab container registry issuer.";
-        };
-        serviceName = mkOption {
-          type = types.str;
-          default = "container_registry";
-          description = "GitLab container registry service name.";
-        };
-        externalAddress = mkOption {
-          type = types.str;
-          default = "";
-          description = "External address used to access registry from the internet";
-        };
-        externalPort = mkOption {
-          type = types.port;
-          description = "External port used to access registry from the internet";
-        };
-      };
-
       smtp = {
         enable = mkOption {
           type = types.bool;
@@ -1175,16 +1108,6 @@ in
 
   config = mkIf cfg.enable {
     warnings = [
-      (mkIf
-        (
-          cfg.registry.enable
-          && versionAtLeast (getVersion cfg.packages.gitlab) "16.0.0"
-          && cfg.registry.package == pkgs.distribution
-        )
-        ''
-          Support for container registries other than gitlab-container-registry has ended since GitLab 16.0.0 and is scheduled for removal in a future release.
-          Please back up your data and migrate to the gitlab-container-registry package.''
-      )
       (mkIf
         (
           versionAtLeast (getVersion cfg.packages.gitlab) "16.2.0"
@@ -1237,11 +1160,25 @@ in
         assertion = cfg.secrets.activeRecordSaltFile != null;
         message = "services.gitlab.secrets.activeRecordSaltFile must be set!";
       }
-      {
-        assertion = versionAtLeast postgresqlPackage.version "16";
-        message = "PostgreSQL >= 16 is required to run GitLab 18. Follow the instructions in the manual section for upgrading PostgreSQL here: https://nixos.org/manual/nixos/stable/index.html#module-services-postgres-upgrading";
-      }
-    ];
+    ]
+    ++
+      map
+        (x: {
+          assertion =
+            lib.versions.major (lib.getVersion cfg.packages.gitlab) == x.gitlabMajorVersion
+            -> lib.versionAtLeast (lib.getVersion postgresqlPackage) x.requiresMinimumPostgres;
+          message = "PostgreSQL >= ${x.requiresMinimumPostgres} is required to run GitLab ${x.gitlabMajorVersion}. Follow the instructions in the manual section for upgrading PostgreSQL here: https://nixos.org/manual/nixos/stable/index.html#module-services-postgres-upgrading";
+        })
+        [
+          {
+            gitlabMajorVersion = "18";
+            requiresMinimumPostgres = "16";
+          }
+          {
+            gitlabMajorVersion = "19";
+            requiresMinimumPostgres = "17";
+          }
+        ];
 
     environment.systemPackages = [
       gitlab-rake
@@ -1335,51 +1272,6 @@ in
         };
       };
 
-    systemd.services.gitlab-registry-cert = optionalAttrs cfg.registry.enable {
-      path = with pkgs; [ openssl ];
-
-      script = ''
-        mkdir -p $(dirname ${cfg.registry.keyFile})
-        mkdir -p $(dirname ${cfg.registry.certFile})
-        openssl req -nodes -newkey rsa:4096 -keyout ${cfg.registry.keyFile} -out /tmp/registry-auth.csr -subj "/CN=${cfg.registry.issuer}"
-        openssl x509 -in /tmp/registry-auth.csr -out ${cfg.registry.certFile} -req -signkey ${cfg.registry.keyFile} -days 3650
-        chown ${cfg.user}:${cfg.group} $(dirname ${cfg.registry.keyFile})
-        chown ${cfg.user}:${cfg.group} $(dirname ${cfg.registry.certFile})
-        chown ${cfg.user}:${cfg.group} ${cfg.registry.keyFile}
-        chown ${cfg.user}:${cfg.group} ${cfg.registry.certFile}
-      '';
-
-      unitConfig = {
-        ConditionPathExists = "!${cfg.registry.certFile}";
-      };
-      serviceConfig = {
-        Type = "oneshot";
-        Slice = "system-gitlab.slice";
-      };
-    };
-
-    # Ensure Docker Registry launches after the certificate generation job
-    systemd.services.docker-registry = optionalAttrs cfg.registry.enable {
-      wants = [ "gitlab-registry-cert.service" ];
-      after = [ "gitlab-registry-cert.service" ];
-    };
-
-    # Enable Docker Registry, if GitLab-Container Registry is enabled
-    services.dockerRegistry = optionalAttrs cfg.registry.enable {
-      enable = true;
-      enableDelete = true; # This must be true, otherwise GitLab won't manage it correctly
-      package = cfg.registry.package;
-      port = cfg.registry.port;
-      extraConfig = {
-        auth.token = {
-          realm = "http${optionalString (cfg.https == true) "s"}://${cfg.host}/jwt/auth";
-          service = cfg.registry.serviceName;
-          issuer = cfg.registry.issuer;
-          rootcertbundle = cfg.registry.certFile;
-        };
-      };
-    };
-
     # Use postfix to send out mails.
     services.postfix.enable = mkDefault (cfg.smtp.enable && cfg.smtp.address == "localhost");
 
@@ -1910,6 +1802,6 @@ in
 
   };
 
-  meta.doc = ./gitlab.md;
+  meta.doc = ./default.md;
   meta.teams = [ teams.gitlab ];
 }
diff --git a/nixos/tests/gitlab/gitlab.nix b/nixos/tests/gitlab/gitlab.nix
index d2ccfe1d7ab3..14c65a0f3c9d 100644
--- a/nixos/tests/gitlab/gitlab.nix
+++ b/nixos/tests/gitlab/gitlab.nix
@@ -15,17 +15,20 @@ let
   inherit (import ../ssh-keys.nix pkgs) snakeOilPrivateKey snakeOilPublicKey;
   initialRootPassword = "notproduction";
   rootProjectId = "2";
+  rootPAT = "root-PAT-01234567890";
 
   aliceUsername = "alice";
   aliceUserId = "2";
   alicePassword = "R5twyCgU0uXC71wT9BBTCqLs6HFZ7h3L";
   aliceProjectId = "1";
   aliceProjectName = "test-alice";
+  alicePAT = "alice-PAT-0123456789";
 
   bobUsername = "bob";
   bobUserId = "3";
   bobPassword = "XwkkBbl2SiIwabQzgcoaTbhsotijEEtF";
   bobProjectId = "2";
+  bobPAT = "bob-PAT-012345678901";
 in
 {
   name = "gitlab";
@@ -135,14 +138,6 @@ in
   testScript =
     { nodes, ... }:
     let
-      auth = pkgs.writeText "auth.json" (
-        builtins.toJSON {
-          grant_type = "password";
-          username = "root";
-          password = initialRootPassword;
-        }
-      );
-
       createUserAlice = pkgs.writeText "create-user-alice.json" (
         builtins.toJSON rec {
           username = aliceUsername;
@@ -163,22 +158,6 @@ in
         }
       );
 
-      aliceAuth = pkgs.writeText "alice-auth.json" (
-        builtins.toJSON {
-          grant_type = "password";
-          username = aliceUsername;
-          password = alicePassword;
-        }
-      );
-
-      bobAuth = pkgs.writeText "bob-auth.json" (
-        builtins.toJSON {
-          grant_type = "password";
-          username = bobUsername;
-          password = bobPassword;
-        }
-      );
-
       aliceAddSSHKey = pkgs.writeText "alice-add-ssh-key.json" (
         builtins.toJSON {
           id = aliceUserId;
@@ -235,9 +214,10 @@ in
         gitlab.wait_for_unit("gitlab.service")
         gitlab.wait_for_unit("gitlab-pages.service")
         gitlab.wait_for_unit("gitlab-sidekiq.service")
+        gitlab.wait_for_unit("gitlab.target")
         gitlab.wait_for_file("${nodes.gitlab.services.gitlab.statePath}/tmp/sockets/gitlab.socket")
         gitlab.wait_until_succeeds("curl -sSf http://gitlab/users/sign_in")
-        gitlab.wait_for_unit("docker-registry.service")
+        gitlab.wait_for_unit("gitlab-container-registry.service")
       '';
 
       # The actual test of GitLab. Only push data to GitLab if
@@ -251,27 +231,27 @@ in
               "curl -isSf http://gitlab | grep -i location | grep http://gitlab/users/sign_in"
           )
           gitlab.succeed(
-              "${pkgs.sudo}/bin/sudo -u gitlab -H gitlab-rake gitlab:check 1>&2"
-          )
-          gitlab.succeed(
-              "echo \"Authorization: Bearer $(curl -X POST -H 'Content-Type: application/json' -d @${auth} http://gitlab/oauth/token | ${pkgs.jq}/bin/jq -r '.access_token')\" >/tmp/headers"
+              "/run/wrappers/bin/sudo -u gitlab -H gitlab-rake gitlab:check 1>&2"
           )
         ''
         + lib.optionalString doSetup ''
+          gitlab.succeed(
+              "/run/wrappers/bin/sudo -u gitlab gitlab-rails runner \"token = User.find_by_username('root').personal_access_tokens.create(scopes: ['api'], name: 'Test Token', expires_at: 365.days.from_now); token.set_token('${rootPAT}'); token.save!\""
+          )
           with subtest("Create user Alice"):
               gitlab.succeed(
-                  """[ "$(curl -o /dev/null -w '%{http_code}' -X POST -H 'Content-Type: application/json' -H @/tmp/headers -d @${createUserAlice} http://gitlab/api/v4/users)" = "201" ]"""
+                  """[ "$(curl -o /dev/null -w '%{http_code}' -X POST -H 'Content-Type: application/json' -H 'Authorization: Bearer ${rootPAT}' -d @${createUserAlice} http://gitlab/api/v4/users)" = "201" ]"""
               )
               gitlab.succeed(
-                  "echo \"Authorization: Bearer $(curl -X POST -H 'Content-Type: application/json' -d @${aliceAuth} http://gitlab/oauth/token | ${pkgs.jq}/bin/jq -r '.access_token')\" >/tmp/headers-alice"
+                  "/run/wrappers/bin/sudo -u gitlab gitlab-rails runner \"token = User.find_by_username('alice').personal_access_tokens.create(scopes: ['api'], name: 'Test Token', expires_at: 365.days.from_now); token.set_token('${alicePAT}'); token.save!\""
               )
 
           with subtest("Create user Bob"):
               gitlab.succeed(
-                  """ [ "$(curl -o /dev/null -w '%{http_code}' -X POST -H 'Content-Type: application/json' -H @/tmp/headers -d @${createUserBob} http://gitlab/api/v4/users)" = "201" ]"""
+                  """ [ "$(curl -o /dev/null -w '%{http_code}' -X POST -H 'Content-Type: application/json' -H 'Authorization: Bearer ${rootPAT}' -d @${createUserBob} http://gitlab/api/v4/users)" = "201" ]"""
               )
               gitlab.succeed(
-                  "echo \"Authorization: Bearer $(curl -X POST -H 'Content-Type: application/json' -d @${bobAuth} http://gitlab/oauth/token | ${pkgs.jq}/bin/jq -r '.access_token')\" >/tmp/headers-bob"
+                "/run/wrappers/bin/sudo -u gitlab gitlab-rails runner \"token = User.find_by_username('bob').personal_access_tokens.create(scopes: ['api'], name: 'Test Token', expires_at: 365.days.from_now); token.set_token('${bobPAT}'); token.save!\""
               )
 
           with subtest("Setup Git and SSH for Alice"):
@@ -287,7 +267,7 @@ in
                       -w '%{http_code}' \
                       -X POST \
                       -H 'Content-Type: application/json' \
-                      -H @/tmp/headers-alice -d @${aliceAddSSHKey} \
+                      -H 'Authorization: Bearer ${alicePAT}' -d @${aliceAddSSHKey} \
                       http://gitlab/api/v4/user/keys)" = "201" ]
                   """
               )
@@ -301,7 +281,7 @@ in
                       -w '%{http_code}' \
                       -X POST \
                       -H 'Content-Type: application/json' \
-                      -H @/tmp/headers-alice \
+                      -H 'Authorization: Bearer ${alicePAT}' \
                       -d @${createProjectAlice} \
                       http://gitlab/api/v4/projects)" = "201" ]
                   """
@@ -315,7 +295,7 @@ in
                       -w '%{http_code}' \
                       -X POST \
                       -H 'Content-Type: application/json' \
-                      -H @/tmp/headers-alice \
+                      -H 'Authorization: Bearer ${alicePAT}' \
                       -d @${putFile} \
                       http://gitlab/api/v4/projects/${aliceProjectId}/repository/files/some-file.txt)" = "201" ]"""
               )
@@ -363,7 +343,7 @@ in
                       -w '%{http_code}' \
                       -X POST \
                       -H 'Content-Type: application/json' \
-                      -H @/tmp/headers-bob \
+                      -H 'Authorization: Bearer ${bobPAT}' \
                       http://gitlab/api/v4/projects/${aliceProjectId}/fork)" = "201" ]
                   """
               )
@@ -376,7 +356,7 @@ in
                       -w '%{http_code}' \
                       -X POST \
                       -H 'Content-Type: application/json' \
-                      -H @/tmp/headers-bob \
+                      -H 'Authorization: Bearer ${bobPAT}' \
                       -d @${putFile} \
                       http://gitlab/api/v4/projects/${bobProjectId}/repository/files/some-other-file.txt)" = "201" ]
                   """
@@ -391,7 +371,7 @@ in
                       -w '%{http_code}' \
                       -X POST \
                       -H 'Content-Type: application/json' \
-                      -H @/tmp/headers-bob \
+                      -H 'Authorization: Bearer ${bobPAT}' \
                       -d @${mergeRequest} \
                       http://gitlab/api/v4/projects/${bobProjectId}/merge_requests)" = "201" ]
                   """
@@ -405,7 +385,7 @@ in
                       -w '%{http_code}' \
                       -X PUT \
                       -H 'Content-Type: application/json' \
-                      -H @/tmp/headers-alice \
+                      -H 'Authorization: Bearer ${alicePAT}' \
                       -d @${mergeRequest} \
                       http://gitlab/api/v4/projects/${aliceProjectId}/merge_requests/1/merge)" = "200" ]
                   """
@@ -419,7 +399,7 @@ in
                       -w '%{http_code}' \
                       -X POST \
                       -H 'Content-Type: application/json' \
-                      -H @/tmp/headers-bob \
+                      -H 'Authorization: Bearer ${bobPAT}' \
                       -d @${newIssue} \
                       http://gitlab/api/v4/projects/${aliceProjectId}/issues)" = "201" ]
                   """
@@ -433,7 +413,7 @@ in
                       -w '%{http_code}' \
                       -X PUT \
                       -H 'Content-Type: application/json' \
-                      -H @/tmp/headers-alice -d @${closeIssue} http://gitlab/api/v4/projects/${aliceProjectId}/issues/1)" = "200" ]
+                      -H 'Authorization: Bearer ${alicePAT}' -d @${closeIssue} http://gitlab/api/v4/projects/${aliceProjectId}/issues/1)" = "200" ]
                   """
               )
         ''
@@ -444,14 +424,14 @@ in
                   [ "$(curl \
                       -o /dev/null \
                       -w '%{http_code}' \
-                      -H @/tmp/headers-alice \
+                      -H 'Authorization: Bearer ${alicePAT}' \
                       http://gitlab/api/v4/projects/${aliceProjectId}/repository/archive.tar.gz)" = "200" ]
                   """
               )
               gitlab.succeed(
                   """
                   curl \
-                      -H @/tmp/headers-alice \
+                      -H 'Authorization: Bearer ${alicePAT}' \
                       http://gitlab/api/v4/projects/${aliceProjectId}/repository/archive.tar.gz > /tmp/archive.tar.gz
                   """
               )
@@ -463,14 +443,14 @@ in
                   [ "$(curl \
                       -o /dev/null \
                       -w '%{http_code}' \
-                      -H @/tmp/headers-alice \
+                      -H 'Authorization: Bearer ${alicePAT}' \
                       http://gitlab/api/v4/projects/${aliceProjectId}/repository/archive.tar.bz2)" = "200" ]
                   """
               )
               gitlab.succeed(
                   """
                   curl \
-                      -H @/tmp/headers-alice \
+                      -H 'Authorization: Bearer ${alicePAT}' \
                       http://gitlab/api/v4/projects/${aliceProjectId}/repository/archive.tar.bz2 > /tmp/archive.tar.bz2
                   """
               )
@@ -506,6 +486,7 @@ in
           "sudo -u gitlab -H gitlab-rake gitlab:backup:restore RAILS_ENV=production BACKUP=dump force=yes"
       )
       gitlab.systemctl("start gitlab.target")
+      gitlab.systemctl("start gitlab-container-registry")
     ''
     + waitForServices
     + ''
diff --git a/nixos/tests/gitlab/runner.nix b/nixos/tests/gitlab/runner.nix
index 37e42dfa8850..8a748f1298bf 100644
--- a/nixos/tests/gitlab/runner.nix
+++ b/nixos/tests/gitlab/runner.nix
@@ -137,14 +137,6 @@ in
   testScript =
     { nodes, ... }:
     let
-      authPayload = pkgs.writeText "auth.json" (
-        builtins.toJSON {
-          grant_type = "password";
-          username = "root";
-          password = initialRootPassword;
-        }
-      );
-
       runnerTokenEnv = pkgs.writeText "runner-token.env" ''
         CI_SERVER_URL=http://gitlab
         CI_SERVER_TOKEN=$token
@@ -162,7 +154,6 @@ in
       JQ_BINARY="${pkgs.jq}/bin/jq"
       GITLAB_STATE_PATH="${nodes.gitlab.services.gitlab.statePath}"
       RUNNER_TOKEN_ENV_FILE="${runnerTokenEnv}"
-      AUTH_PAYLOAD_FILE="${authPayload}"
       CREATE_RUNNER_PAYLOAD_FILE="${createRunnerPayload}"
 
       ${lib.readFile ./runner_test.py}
diff --git a/nixos/tests/gitlab/runner_test.py b/nixos/tests/gitlab/runner_test.py
index 4d0b7e80eeb8..8b23543433a8 100644
--- a/nixos/tests/gitlab/runner_test.py
+++ b/nixos/tests/gitlab/runner_test.py
@@ -26,7 +26,6 @@ class Nix:
     jq: str
     gitlab_state_path: str
     create_runner_payload_file: str
-    auth_payload_file: str
     runner_token_env_file: str
 
 
@@ -35,12 +34,12 @@ out_dir = os.environ.get("out", os.getcwd())
 nix = Nix(
     jq=JQ_BINARY,
     gitlab_state_path=GITLAB_STATE_PATH,
-    auth_payload_file=AUTH_PAYLOAD_FILE,
     create_runner_payload_file=CREATE_RUNNER_PAYLOAD_FILE,
     runner_token_env_file=RUNNER_TOKEN_ENV_FILE,
 )
 vms = Machines(gitlab, gitlab_runner)
 runnerConfigs: dict[str, Runner] = {}
+rootPAT = "root-PAT-01234567890"
 
 
 def wait_for_services():
@@ -63,15 +62,11 @@ def test_connection():
     )
 
     vms.gitlab.succeed(
-        f"echo \"Authorization: Bearer $(curl -X POST -H 'Content-Type: application/json' -d @{nix.auth_payload_file} http://gitlab/oauth/token | {nix.jq} -r '.access_token')\" >/tmp/headers"
+      f"/run/wrappers/bin/sudo -u gitlab gitlab-rails runner \"token = User.find_by_username('root').personal_access_tokens.create(scopes: ['api'], name: 'Test Token', expires_at: 365.days.from_now); token.set_token('{rootPAT}'); token.save!\""
     )
 
-    vms.gitlab.copy_from_vm("/tmp/headers")
-    out_dir = os.environ.get("out", os.getcwd())
-    vms.gitlab_runner.copy_from_host(str(Path(out_dir, "headers")), "/tmp/headers")
-
     print("==> Testing connection.")
-    vms.gitlab_runner.succeed("curl -v -H @/tmp/headers http://gitlab/api/v4/version")
+    vms.gitlab_runner.succeed(f"curl -v -H 'Authorization: Bearer {rootPAT}' http://gitlab/api/v4/version")
 
 
 def test_register_runner(name: str, tokenFile: str):
@@ -93,7 +88,7 @@ def test_register_runner(name: str, tokenFile: str):
         f"""
     curl -s -X POST \
         -H 'Content-Type: application/json' \
-        -H @/tmp/headers \
+        -H 'Authorization: Bearer {rootPAT}' \
         -d @{nix.create_runner_payload_file} \
         http://gitlab/api/v4/user/runners
     """
@@ -138,7 +133,7 @@ def test_runner_registered(r: Runner):
         f"""
         curl -s -X GET \
         -H 'Content-Type: application/json' \
-        -H @/tmp/headers \
+        -H 'Authorization: Bearer {rootPAT}' \
         http://gitlab/api/v4/runners/{r.id}"""
     )[1]
     runnerStatus = json.loads(resp)
diff --git a/pkgs/by-name/gi/gitaly/package.nix b/pkgs/by-name/gi/gitaly/package.nix
index c4e01515718d..64c7688b8ab8 100644
--- a/pkgs/by-name/gi/gitaly/package.nix
+++ b/pkgs/by-name/gi/gitaly/package.nix
@@ -7,7 +7,7 @@
 }:
 
 let
-  version = "18.11.7";
+  version = "19.0.4";
   package_version = "v${lib.versions.major version}";
   gitaly_package = "gitlab.com/gitlab-org/gitaly/${package_version}";
 
@@ -21,10 +21,10 @@ let
       owner = "gitlab-org";
       repo = "gitaly";
       rev = "v${version}";
-      hash = "sha256-CupoX+Jv/4JDn50T7KF4+k9dd2bL+1zWd+3BsFIKOM8=";
+      hash = "sha256-IkOS2XYo+QkLkhodeqmzz5bR2FxMG68hUsT357h7cKo=";
     };
 
-    vendorHash = "sha256-/RJnCcmUoqGy08MSGEVM/taV1qZK65kiZw19n6S3ZQ0=";
+    vendorHash = "sha256-oc+H5DV2B++buxH2LI0BoaWjDUVJGRcbuofnIX69ddI=";
 
     ldflags = [
       "-X ${gitaly_package}/internal/version.version=${version}"
diff --git a/pkgs/by-name/gi/gitlab-container-registry/package.nix b/pkgs/by-name/gi/gitlab-container-registry/package.nix
index 6f7021ae3974..01f8f222233e 100644
--- a/pkgs/by-name/gi/gitlab-container-registry/package.nix
+++ b/pkgs/by-name/gi/gitlab-container-registry/package.nix
@@ -6,7 +6,7 @@
 
 buildGo125Module rec {
   pname = "gitlab-container-registry";
-  version = "4.39.0";
+  version = "4.40.2";
   rev = "v${version}-gitlab";
 
   # nixpkgs-update: no auto update
@@ -14,10 +14,10 @@ buildGo125Module rec {
     owner = "gitlab-org";
     repo = "container-registry";
     inherit rev;
-    hash = "sha256-7dGKV2Pc3OPdM4OZqYjp3B9/s6DHtPvrqcWnWb3wHYw=";
+    hash = "sha256-k94uEM2VoOtdFRXWm6CDmeRt8LMXSNegRGes3ZKPg0I=";
   };
 
-  vendorHash = "sha256-s08LsgYZTRJm0sWkbEUsmTYGkfb/5PJl9o9ozY1KOms=";
+  vendorHash = "sha256-MD98JYwTo/t5/E7clIlUfjmv8t7nDPpVElbuYDRjMMc=";
 
   excludedPackages = [
     "devvm/*"
diff --git a/pkgs/by-name/gi/gitlab-pages/package.nix b/pkgs/by-name/gi/gitlab-pages/package.nix
index 3ca2ef8a06e4..8b8f371be0c6 100644
--- a/pkgs/by-name/gi/gitlab-pages/package.nix
+++ b/pkgs/by-name/gi/gitlab-pages/package.nix
@@ -6,14 +6,14 @@
 
 buildGoModule (finalAttrs: {
   pname = "gitlab-pages";
-  version = "18.11.7";
+  version = "19.0.4";
 
   # nixpkgs-update: no auto update
   src = fetchFromGitLab {
     owner = "gitlab-org";
     repo = "gitlab-pages";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-AW/zzQiiGz8JBw1c5JAwo2boWKoeD1wx0dUA4nOyARA=";
+    hash = "sha256-hadZk9ghc1bNJTSsonyiKsJcMiHxkvQb/lifcE3EVyw=";
   };
 
   vendorHash = "sha256-PUW4cgAiM1GTtvja894OZ4pe0SWChf5JsL4/fkns2kI=";
diff --git a/pkgs/by-name/gi/gitlab-shell/package.nix b/pkgs/by-name/gi/gitlab-shell/package.nix
index eab9023fe3f8..babb2d964683 100644
--- a/pkgs/by-name/gi/gitlab-shell/package.nix
+++ b/pkgs/by-name/gi/gitlab-shell/package.nix
@@ -8,14 +8,14 @@
 
 buildGoModule (finalAttrs: {
   pname = "gitlab-shell";
-  version = "14.50.0";
+  version = "14.51.0";
 
   # nixpkgs-update: no auto update
   src = fetchFromGitLab {
     owner = "gitlab-org";
     repo = "gitlab-shell";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-a9s+TCm5yKPjNh+BD9fm6iVA4H9KJiMyWNulY+7BKZo=";
+    hash = "sha256-x/dondbgw8bJGovZ7arKrxRqdEmNW8AYYgaL6UfjsZo=";
   };
 
   buildInputs = [
diff --git a/pkgs/by-name/gi/gitlab/data.json b/pkgs/by-name/gi/gitlab/data.json
index 9001efd1dd54..155a173b4d77 100644
--- a/pkgs/by-name/gi/gitlab/data.json
+++ b/pkgs/by-name/gi/gitlab/data.json
@@ -1,17 +1,17 @@
 {
-  "version": "18.11.7",
-  "repo_hash": "sha256-LSrdAz4bt5h3Z2V4vlazH5hKoq3LNvoRz02AyUb4Ka4=",
-  "yarn_hash": "sha256-og09R28lwYvDk4pe7z1dRMaanYiTsUSx+SUKoWc53do=",
+  "version": "19.0.4",
+  "repo_hash": "sha256-qDHaYzy+GfaGPsshIUq9AO5VSZzTErruy9YCUlgLBYs=",
+  "yarn_hash": "sha256-maKKpsAgbpVEB9DBkpe/ipGvK+5l1/gSRsNccK61iy8=",
   "frontend_islands_yarn_hash": "sha256-EvGQin+5DqqIgM36jlVkVI49WcJzVvceYnkSS9ybfcY=",
   "owner": "gitlab-org",
   "repo": "gitlab",
-  "rev": "v18.11.7-ee",
+  "rev": "v19.0.4-ee",
   "passthru": {
-    "GITALY_SERVER_VERSION": "18.11.7",
-    "GITLAB_KAS_VERSION": "18.11.7",
-    "GITLAB_PAGES_VERSION": "18.11.7",
-    "GITLAB_SHELL_VERSION": "14.50.0",
+    "GITALY_SERVER_VERSION": "19.0.4",
+    "GITLAB_KAS_VERSION": "19.0.4",
+    "GITLAB_PAGES_VERSION": "19.0.4",
+    "GITLAB_SHELL_VERSION": "14.51.0",
     "GITLAB_ELASTICSEARCH_INDEXER_VERSION": "5.14.7",
-    "GITLAB_WORKHORSE_VERSION": "18.11.7"
+    "GITLAB_WORKHORSE_VERSION": "19.0.4"
   }
 }
diff --git a/pkgs/by-name/gi/gitlab/gitlab-workhorse/default.nix b/pkgs/by-name/gi/gitlab/gitlab-workhorse/default.nix
index 6aa8bbbc513a..7d1dbead3c73 100644
--- a/pkgs/by-name/gi/gitlab/gitlab-workhorse/default.nix
+++ b/pkgs/by-name/gi/gitlab/gitlab-workhorse/default.nix
@@ -10,7 +10,7 @@ in
 buildGoModule (finalAttrs: {
   pname = "gitlab-workhorse";
 
-  version = "18.11.7";
+  version = "19.0.4";
 
   # nixpkgs-update: no auto update
   src = fetchFromGitLab {
@@ -22,7 +22,7 @@ buildGoModule (finalAttrs: {
 
   sourceRoot = "${finalAttrs.src.name}/workhorse";
 
-  vendorHash = "sha256-X1+neA2g61BR1VRKXzeqNath0+SYXRbU4vzEg1KD2sY=";
+  vendorHash = "sha256-4uSwO74tfoT7QV3fUa2F1i9v6JLOuzTLPcBVpEvloXA=";
   buildInputs = [ git ];
   ldflags = [ "-X main.Version=${finalAttrs.version}" ];
   doCheck = false;
diff --git a/pkgs/by-name/gi/gitlab/package.nix b/pkgs/by-name/gi/gitlab/package.nix
index fc20ffb3e2cb..b66f2c495e03 100644
--- a/pkgs/by-name/gi/gitlab/package.nix
+++ b/pkgs/by-name/gi/gitlab/package.nix
@@ -135,7 +135,7 @@ let
             cp Cargo.lock $out
           '';
 
-          hash = "sha256-KIMs5Zed6mcbq06oxA2eVHLfifSlcfJvACZMblDQC3M=";
+          hash = "sha256-BRbBijOg2nQK2Nzrkpk7mwCjr+AaF3D/3HUrS5GwIz4=";
         };
 
         postPatch = ''
diff --git a/pkgs/by-name/gi/gitlab/rubyEnv/Gemfile b/pkgs/by-name/gi/gitlab/rubyEnv/Gemfile
index ee306fa79e70..9c0d95c1f103 100644
--- a/pkgs/by-name/gi/gitlab/rubyEnv/Gemfile
+++ b/pkgs/by-name/gi/gitlab/rubyEnv/Gemfile
@@ -6,12 +6,6 @@ end
 
 source 'https://rubygems.org'
 
-if ENV.fetch('BUNDLER_CHECKSUM_VERIFICATION_OPT_IN', 'false') != 'false' # this verification is still experimental
-  $LOAD_PATH.unshift(File.expand_path("gems/bundler-checksum/lib", __dir__))
-  require 'bundler-checksum'
-  BundlerChecksum.patch!
-end
-
 # Please see https://docs.gitlab.com/ee/development/feature_categorization/#gemfile
 ignore_feature_category = Module.new do
   def gem(*arguments, feature_category: nil, **keyword_arguments) # rubocop:disable Lint/UnusedMethodArgument -- Ignoring feature_category intentionally
@@ -21,33 +15,30 @@ end
 
 extend ignore_feature_category
 
-gem 'bundler-checksum', '~> 0.1.0', path: 'gems/bundler-checksum', require: false, feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
+# Deprecated
+gem 'bundler-checksum', '~> 0.1.0', path: 'gems/bundler-checksum', require: false, feature_category: :rails_platform
+gem 'auto_freeze', path: 'gems/auto_freeze', feature_category: :rails_platform
 
 # See https://docs.gitlab.com/ee/development/gemfile.html#upgrade-rails for guidelines when upgrading Rails
-gem 'rails', '~> 7.2.3', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
+gem 'rails', '~> 7.2.3', feature_category: :rails_platform
 
 # Pin Zeitwerk until https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/9408 is fixed
-gem 'zeitwerk', '= 2.6.18', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
+gem 'zeitwerk', '= 2.6.18', feature_category: :rails_platform
 
-gem 'activerecord-gitlab', path: 'gems/activerecord-gitlab', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
+gem 'activerecord-gitlab', path: 'gems/activerecord-gitlab', feature_category: :rails_platform
+gem 'gitlab-database-data_isolation', path: 'gems/gitlab-database-data_isolation', feature_category: :organization
 
 gem 'action_dispatch-draw_all',
   path: 'gems/action_dispatch-draw_all',
   require: 'action_dispatch/draw_all',
-  feature_category: :tooling
+  feature_category: :rails_platform
 
 # Need by Rails
-gem 'drb', '~> 2.2', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
+gem 'drb', '~> 2.2', feature_category: :rails_platform
 
-gem 'bootsnap', '~> 1.23.0', require: false, feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
+gem 'bootsnap', '~> 1.24.0', require: false, feature_category: :rails_platform
 
-# Avoid the precompiled native gems because Omnibus needs to build this to ensure
-# LD_LIBRARY_PATH is correct: https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/7730
-if RUBY_PLATFORM.include?('darwin')
-  gem 'ffi', '~> 1.17.3', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
-else
-  gem 'ffi', '~> 1.17.3', force_ruby_platform: true, feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
-end
+gem 'ffi', '~> 1.17.3', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
 
 gem 'openssl', '~> 3.3.2', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
 
@@ -63,10 +54,10 @@ gem 'gitlab-backup-cli', path: 'gems/gitlab-backup-cli', require: 'gitlab/backup
 gem 'gitlab-secret_detection', '< 1.0', feature_category: :secret_detection
 
 # Responders respond_to and respond_with
-gem 'responders', '~> 3.0', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
+gem 'responders', '~> 3.0', feature_category: :rails_platform
 
-gem 'sprockets', '~> 3.7.0', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
-gem 'sprockets-rails', '~>  3.5.1', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
+gem 'sprockets', '~> 3.7.0', feature_category: :rails_platform
+gem 'sprockets-rails', '~>  3.5.1', feature_category: :rails_platform
 
 gem 'view_component', '~> 3.23.2', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
 
@@ -92,7 +83,7 @@ gem 'devise-pbkdf2-encryptable', '~> 0.0.0', path: 'vendor/gems/devise-pbkdf2-en
   feature_category: :system_access
 gem 'bcrypt', '~> 3.1', '>= 3.1.14', feature_category: :system_access
 gem 'doorkeeper', '~> 5.8', '>= 5.8.1', feature_category: :system_access
-gem 'doorkeeper-openid_connect', '~> 1.8.10', feature_category: :system_access
+gem 'doorkeeper-openid_connect', '~> 1.9.0', feature_category: :system_access
 gem 'doorkeeper-device_authorization_grant', '~> 1.0.0', feature_category: :system_access
 gem 'rexml', '~> 3.4.0', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
 gem 'ruby-saml', '~> 1.18', feature_category: :system_access
@@ -129,7 +120,7 @@ gem 'akismet', '~> 3.0', feature_category: :insider_threat
 gem 'invisible_captcha', '~> 2.3.0', feature_category: :insider_threat
 
 # Two-factor authentication
-gem 'devise-two-factor', '~> 5.1.0', feature_category: :system_access
+gem 'devise-two-factor', '~> 6.4.0', feature_category: :system_access
 gem 'rqrcode', '~> 2.2', feature_category: :system_access
 gem 'webauthn', '~> 3.0', feature_category: :system_access
 
@@ -163,10 +154,10 @@ gem 'grape-swagger', '~> 2.1.2', group: [:development, :test], feature_category:
 gem 'grape-swagger-entity', '~> 0.7.0', group: [:development, :test], feature_category: :api
 gem 'grape-path-helpers', '~> 2.0.1', feature_category: :api
 gem 'gitlab-grape-openapi', path: 'gems/gitlab-grape-openapi', feature_category: :api
-gem 'rack-cors', '~> 2.0.1', require: 'rack/cors', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
+gem 'rack-cors', '~> 2.0.1', require: 'rack/cors', feature_category: :api
 
 # GraphQL API
-gem 'graphql', '2.5.11', feature_category: :api
+gem 'graphql', '2.5.23', feature_category: :api
 gem 'graphql-docs', '~> 5.2.0', group: [:development, :test], feature_category: :api
 gem 'apollo_upload_server', '~> 2.1.6', feature_category: :api
 
@@ -177,7 +168,7 @@ gem 'gitlab-topology-service-client', '~> 0.1',
   feature_category: :cell
 
 # Duo Workflow
-gem 'gitlab-duo-workflow-service-client', '~> 0.7',
+gem 'gitlab-duo-workflow-service-client', '~> 0.8',
   path: 'vendor/gems/gitlab-duo-workflow-service-client',
   feature_category: :duo_agent_platform
 
@@ -213,7 +204,7 @@ gem 'fog-local', '~> 0.8', feature_category: :shared # rubocop:todo Gemfile/Miss
 # We may want to update this dependency if this is ever addressed upstream, e.g. via
 # https://github.com/aliyun/aliyun-oss-ruby-sdk/pull/93
 gem 'fog-aliyun', '~> 0.4', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
-gem 'gitlab-fog-azure-rm', '~> 2.4.0', require: 'fog/azurerm', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
+gem 'gitlab-fog-azure-rm', '~> 2.5.0', require: 'fog/azurerm', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
 
 # for Google storage
 
@@ -276,7 +267,7 @@ gem 'tanuki_emoji', '~> 0.13', feature_category: :markdown
 gem 'unicode-emoji', '~> 4.0', feature_category: :markdown
 
 # Calendar rendering
-gem 'icalendar', '~> 2.10.1', feature_category: :team_planning
+gem 'icalendar', '~> 2.12.0', feature_category: :team_planning
 
 # Diffs
 gem 'diffy', '~> 3.4', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
@@ -288,7 +279,7 @@ gem 'rack', '~> 2.2.9', feature_category: :shared # rubocop:todo Gemfile/Missing
 gem 'rack-timeout', '~> 0.7.0', require: 'rack/timeout/base', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
 
 group :puma do
-  gem 'puma', '~> 7.2', require: false, feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
+  gem 'puma', '~> 8.0', require: false, feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
   gem 'sd_notify', '~> 0.1.0', require: false, feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
 end
 
@@ -351,7 +342,7 @@ gem 'slack-messenger', '~> 2.3.5', feature_category: :integrations
 gem 'kubeclient', '~> 4.12.0', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
 
 # AI
-gem 'circuitbox', '2.0.0', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
+gem 'circuitbox', '2.0.0', feature_category: :ai_abstraction_layer
 
 # Sanitize user input
 gem 'sanitize', '~> 6.0.2', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
@@ -361,12 +352,7 @@ gem 'babosa', '~> 2.0', feature_category: :shared # rubocop:todo Gemfile/Missing
 gem 'loofah', '~> 2.25.0', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
 
 # Used to provide license templates
-gem 'licensee', '~> 9.16', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
-
-# Pinned below 1.8 so rugged.so links libgit2's old http-parser instead of
-# the bundled llhttp, which collides with llhttp-ffi symbols at runtime.
-# See https://gitlab.com/gitlab-org/gitlab/-/issues/598564
-gem 'rugged', '~> 1.7.2', require: false, feature_category: :gitaly
+gem 'licensee', '~> 10', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
 
 # Detect and convert string character encoding
 gem 'charlock_holmes', '~> 0.7.9', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
@@ -391,7 +377,7 @@ gem 'addressable', '~> 2.8', feature_category: :shared # rubocop:todo Gemfile/Mi
 gem 'gon', '~> 6.5.0', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
 gem 'request_store', '~> 1.7.0', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
 gem 'base32', '~> 0.3.0', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
-gem 'gitlab-license', '~> 2.6', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
+gem 'gitlab-license', '~> 2.6', feature_category: :plan_provisioning
 
 # Protect against bruteforcing
 gem 'rack-attack', '~> 6.8.0', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
@@ -409,7 +395,7 @@ gem 'gitlab-schema-validation', path: 'gems/gitlab-schema-validation', feature_c
 gem 'gitlab-http', path: 'gems/gitlab-http', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
 
 gem 'premailer-rails', '~> 1.12.0', feature_category: :notifications
-gem 'gitlab-labkit', '~> 1.5.0', feature_category: :error_budgets
+gem 'gitlab-labkit', '~> 2.0.0', feature_category: :error_budgets
 gem 'thrift', '~> 0.22.0', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
 
 # I18n
@@ -436,7 +422,7 @@ gem 'prometheus-client-mmap', '~> 1.5.0', require: 'prometheus/client', feature_
 
 # Event-driven reactor for Ruby
 # Required manually in config/initializers/require_async_gem
-gem 'async', '~> 2.32.0', require: false, feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
+gem 'async', '~> 2.39.0', require: false, feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
 gem 'io-event', '~> 1.14', require: false, feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
 
 # Security report schemas used to validate CI job artifacts of security jobs
@@ -486,7 +472,7 @@ group :development do
   gem 'rubocop', feature_category: :tooling, require: false
   gem 'debug', '~> 1.11.0', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
 
-  gem 'solargraph', '~> 0.54.0', require: false, feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
+  gem 'solargraph', '~> 0.58.0', require: false, feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
   gem 'solargraph-rspec', '~> 0.5.1', require: false, feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
 
   gem 'letter_opener_web', '~> 3.0.0', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
@@ -507,7 +493,8 @@ group :development do
   # Used by
   # * `lib/tasks/gitlab/security/update_banned_ssh_keys.rake`
   # * `lib/tasks/gitlab/db/migration_squash.rake`
-  gem 'git', '~> 1.8', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
+  # * `lib/gitlab/diff/diff_refs.rb`
+  gem 'git', '~> 1.8', feature_category: :source_code_management
 end
 
 group :development, :test do
@@ -529,7 +516,7 @@ group :development, :test do
   gem 'spring', '~> 4.3.0', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
   gem 'spring-commands-rspec', '~> 1.0.4', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
 
-  gem 'gitlab-styles', '~> 13.1.0', feature_category: :tooling, require: false
+  gem 'gitlab-styles', '~> 14.0', feature_category: :tooling, require: false
   gem 'haml_lint', '~> 0.58', feature_category: :tooling, require: false
 
   # Benchmarking & profiling
@@ -553,26 +540,17 @@ group :development, :test do
   gem 'gitlab-housekeeper', path: 'gems/gitlab-housekeeper', feature_category: :tooling
 
   gem 'yard', '~> 0.9', require: false, feature_category: :tooling
-end
 
-group :development, :test, :danger do
-  gem 'gitlab-dangerfiles', '~> 4.10.0', require: false, feature_category: :tooling
-end
+  # Gems required for Dangerfile
+  gem 'gitlab-dangerfiles', '~> 4.11.1', require: false, feature_category: :tooling
 
-group :development, :test, :coverage do
+  # Gems required for code coverage
   gem 'simplecov', '~> 0.22', require: false, feature_category: :tooling
   gem 'simplecov-lcov', '~> 0.8.0', require: false, feature_category: :tooling
   gem 'simplecov-cobertura', '~> 3.1.0', require: false, feature_category: :tooling
   gem 'undercover', '~> 0.8.0', require: false, feature_category: :tooling
-end
 
-# Gems required in omnibus-gitlab pipeline
-group :development, :test, :omnibus do
-  gem 'license_finder', '~> 7.0', require: false, feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
-end
-
-# Gems required in various pipelines
-group :development, :test, :monorepo do
+  # Gems required in various pipelines
   gem 'gitlab-rspec', path: 'gems/gitlab-rspec', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
   gem 'gitlab-rspec_flaky', path: 'gems/gitlab-rspec_flaky', feature_category: :tooling
 end
@@ -589,11 +567,6 @@ group :test do
 
   gem 'graphlyte', '~> 1.0.0', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
 
-  # Upload CI metrics to a GCP BigQuery instance
-  #
-  # We only use this gem in CI.
-  gem 'google-cloud-bigquery', '~> 1.0', feature_category: :tooling
-
   gem 'shoulda-matchers', '~> 6.4.0', require: false, feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
   gem 'email_spec', '~> 2.3.0', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
   gem 'webmock', '~> 3.26.0', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
@@ -608,7 +581,7 @@ group :test do
   # Moved in `test` because https://gitlab.com/gitlab-org/gitlab/-/issues/217527
   gem 'derailed_benchmarks', require: false, feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
 
-  gem 'gitlab_quality-test_tooling', '~> 3.10.0', require: false, feature_category: :tooling
+  gem 'gitlab_quality-test_tooling', '~> 3.14.0', require: false, feature_category: :tooling
 end
 
 gem 'octokit', '~> 9.0', feature_category: :importers
@@ -617,7 +590,7 @@ gem 'faraday-multipart', '~> 1.0', feature_category: :importers
 
 gem 'gitlab-mail_room', '~> 1.0.0', require: 'mail_room', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
 
-gem 'email_reply_trimmer', '~> 0.1', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
+gem 'email_reply_trimmer', '~> 0.1', feature_category: :team_planning
 gem 'html2text', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
 
 gem 'stackprof', '~> 0.2.26', require: false, feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
@@ -632,10 +605,10 @@ gem 'health_check', '~> 3.0', feature_category: :shared # rubocop:todo Gemfile/M
 
 # System information
 gem 'vmstat', '~> 2.3.0', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
-gem 'sys-filesystem', '~> 1.4.3', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
+gem 'sys-filesystem', '~> 1.5.0', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
 
 # NTP client
-gem 'net-ntp', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
+gem 'net-ntp', feature_category: :geo_replication
 
 # SSH keys support
 gem 'ssh_data', '~> 2.0', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
@@ -644,13 +617,13 @@ gem 'ssh_data', '~> 2.0', feature_category: :shared # rubocop:todo Gemfile/Missi
 gem 'spamcheck', '~> 1.3.0', feature_category: :insider_threat
 
 # Gitaly GRPC protocol definitions
-gem 'gitaly', '~> 18.10.0', feature_category: :gitaly
+gem 'gitaly', '~> 18.11.0', feature_category: :gitaly
 
 # KAS GRPC protocol definitions
 gem 'gitlab-kas-grpc', '~> 18.5.0-rc4', feature_category: :deployment_management
 
 # Knowledge Graph GRPC protocol definitions
-gem 'gitlab-gkg-proto', '~> 0.7.0', feature_category: :knowledge_graph
+gem 'gitlab-gkg-proto', '~> 0.37.0', feature_category: :knowledge_graph
 
 gem 'grpc', '~> 1.80.0', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
 
@@ -662,7 +635,7 @@ gem 'toml-rb', '~> 4.1', feature_category: :shared # rubocop:todo Gemfile/Missin
 gem 'flipper', '~> 1.3.6', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
 gem 'flipper-active_record', '~> 1.3.6', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
 gem 'flipper-active_support_cache_store', '~> 1.3.6', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
-gem 'unleash', '~> 3.2.2', feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
+gem 'unleash', '~> 3.2.2', feature_category: :feature_flags # https://docs.gitlab.com/operations/feature_flags/
 gem 'gitlab-experiment', '~> 1.3.0', feature_category: :acquisition
 
 # Structured logging
@@ -727,7 +700,7 @@ gem 'cvss-suite', '~> 4.1.1', require: 'cvss_suite', feature_category: :software
 gem 'arr-pm', '~> 0.0.12', feature_category: :package_registry
 
 # Remote Development
-gem 'devfile', '~> 0.5.0', feature_category: :workspaces
+gem 'devfile', '~> 0.5.1', feature_category: :workspaces
 gem 'hashdiff', '~> 1.2.0', feature_category: :workspaces
 
 # Apple plist parsing
@@ -764,10 +737,13 @@ gem "gitlab-cloud-connector", "~> 1.45", require: 'gitlab/cloud_connector', feat
 
 gem "gvltools", "~> 0.4.0", feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
 
-gem 'gitlab_query_language', '~> 0.26.0', feature_category: :integrations
+gem 'gitlab_query_language', '~> 0.27.1', feature_category: :integrations
 
 # standard Gem, version increase to resolve vulnerabilities
 gem "zlib", "~> 3.2", ">= 3.2.3", feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/work_items/596593
 
-# standard Gem, pin version to resolve vulnerabilities
+# Gems required in omnibus-gitlab pipeline
+gem 'license_finder', '~> 7.0', require: false, feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/issues/581839
+
+# standard Gem, pin version to resolve vulnerabilities and match omnibus-gitlab
 gem "erb", "= 4.0.3.1", feature_category: :shared # rubocop:todo Gemfile/MissingFeatureCategory -- https://gitlab.com/gitlab-org/gitlab/-/work_items/596593
diff --git a/pkgs/by-name/gi/gitlab/rubyEnv/Gemfile.lock b/pkgs/by-name/gi/gitlab/rubyEnv/Gemfile.lock
index ef81560ad325..e2658d8ed859 100644
--- a/pkgs/by-name/gi/gitlab/rubyEnv/Gemfile.lock
+++ b/pkgs/by-name/gi/gitlab/rubyEnv/Gemfile.lock
@@ -10,6 +10,13 @@ PATH
     activerecord-gitlab (0.2.0)
       activerecord (>= 7)
 
+PATH
+  remote: gems/auto_freeze
+  specs:
+    auto_freeze (0.2.0)
+      freezolite (~> 0.6)
+      require-hooks (~> 0.2.3)
+
 PATH
   remote: gems/bundler-checksum
   specs:
@@ -68,12 +75,19 @@ PATH
       rexml (~> 3.4.0)
       thor (~> 1.3)
 
+PATH
+  remote: gems/gitlab-database-data_isolation
+  specs:
+    gitlab-database-data_isolation (0.1.0)
+      activerecord (>= 7)
+
 PATH
   remote: gems/gitlab-grape-openapi
   specs:
     gitlab-grape-openapi (0.1.0)
       grape (~> 2.0.0)
       grape-entity (~> 1.0.1)
+      js_regex (~> 3.8)
 
 PATH
   remote: gems/gitlab-housekeeper
@@ -88,7 +102,7 @@ PATH
   remote: gems/gitlab-http
   specs:
     gitlab-http (0.1.0)
-      activesupport (~> 7)
+      activesupport (>= 7, < 9)
       concurrent-ruby (~> 1.2)
       httparty (~> 0.21)
       ipaddress (~> 0.8.3)
@@ -98,16 +112,16 @@ PATH
   remote: gems/gitlab-rspec_flaky
   specs:
     gitlab-rspec_flaky (0.1.0)
-      activesupport (>= 6.1, < 8)
+      activesupport (>= 7, < 9)
       rspec (~> 3.0)
 
 PATH
   remote: gems/gitlab-rspec
   specs:
     gitlab-rspec (0.1.0)
-      activerecord (>= 6.1, < 8)
-      activesupport (>= 6.1, < 8)
-      gitlab_quality-test_tooling (>= 3.8, < 4)
+      activerecord (>= 7, < 9)
+      activesupport (>= 7, < 9)
+      gitlab_quality-test_tooling (>= 3.13, < 4)
       rspec (~> 3.0)
       test-prof (~> 1.5)
 
@@ -159,7 +173,7 @@ PATH
   specs:
     devise-pbkdf2-encryptable (0.0.0)
       devise (~> 4.0)
-      devise-two-factor (~> 5.1.0)
+      devise-two-factor (~> 6.4.0)
 
 PATH
   remote: vendor/gems/diff_match_patch
@@ -169,7 +183,7 @@ PATH
 PATH
   remote: vendor/gems/gitlab-duo-workflow-service-client
   specs:
-    gitlab-duo-workflow-service-client (0.7)
+    gitlab-duo-workflow-service-client (0.8)
       grpc
 
 PATH
@@ -337,8 +351,8 @@ GEM
       asciidoctor (~> 2.0)
     asciidoctor-plantuml (0.0.16)
       asciidoctor (>= 2.0.17, < 3.0.0)
-    ast (2.4.2)
-    async (2.32.0)
+    ast (2.4.3)
+    async (2.39.0)
       console (~> 1.29)
       fiber-annotation
       io-event (~> 1.11)
@@ -391,18 +405,18 @@ GEM
     base64 (0.2.0)
     batch-loader (2.0.5)
     bcrypt (3.1.22)
-    benchmark (0.4.1)
+    benchmark (0.5.0)
     benchmark-ips (2.14.0)
     benchmark-malloc (0.2.0)
     benchmark-memory (0.2.0)
       memory_profiler (~> 1)
     benchmark-perf (0.6.0)
     benchmark-trend (0.4.0)
-    bigdecimal (3.2.3)
+    bigdecimal (3.3.1)
     bindata (2.5.1)
     binding_of_caller (1.0.0)
       debug_inspector (>= 0.0.1)
-    bootsnap (1.23.0)
+    bootsnap (1.24.1)
       msgpack (~> 1.2)
     browser (5.3.1)
     builder (3.3.0)
@@ -428,7 +442,7 @@ GEM
       mime-types (>= 1.16)
       ssrf_filter (~> 1.0, < 1.1.0)
     cbor (0.5.10.1)
-    cgi (0.5.0)
+    cgi (0.5.1)
     character_set (1.8.0)
     charlock_holmes (0.7.9)
     chef-config (18.3.0)
@@ -475,8 +489,9 @@ GEM
     coverband (6.2.0)
       base64
       redis (>= 3.0)
-    crack (0.4.3)
-      safe_yaml (~> 1.0.0)
+    crack (1.0.1)
+      bigdecimal
+      rexml
     crass (1.0.6)
     creole (0.5.0)
     cronex (0.15.0)
@@ -487,7 +502,7 @@ GEM
     cssbundling-rails (1.4.3)
       railties (>= 6.0.0)
     csv (3.3.0)
-    cvss-suite (4.1.2)
+    cvss-suite (4.1.3)
       bigdecimal (~> 3.1)
     danger (9.4.2)
       claide (~> 1.0)
@@ -537,7 +552,10 @@ GEM
       thor (>= 0.19, < 2)
     descendants_tracker (0.0.4)
       thread_safe (~> 0.3, >= 0.3.1)
-    devfile (0.5.2)
+    devfile (0.5.1)
+    devfile (0.5.1-aarch64-linux)
+    devfile (0.5.1-arm64-darwin)
+    devfile (0.5.1-x86_64-linux)
     device_detector (1.1.3)
     devise (4.9.4)
       bcrypt (~> 3.0)
@@ -545,10 +563,10 @@ GEM
       railties (>= 4.1.0)
       responders
       warden (~> 1.2.3)
-    devise-two-factor (5.1.0)
-      activesupport (~> 7.0)
-      devise (~> 4.0)
-      railties (~> 7.0)
+    devise-two-factor (6.4.0)
+      activesupport (>= 7.2, < 8.2)
+      devise (>= 4.0, < 6.0)
+      railties (>= 7.2, < 8.2)
       rotp (~> 6.0)
     diff-lcs (1.5.0)
     diffy (3.4.4)
@@ -561,8 +579,8 @@ GEM
       railties (>= 5)
     doorkeeper-device_authorization_grant (1.0.3)
       doorkeeper (~> 5.5)
-    doorkeeper-openid_connect (1.8.11)
-      doorkeeper (>= 5.5, < 5.9)
+    doorkeeper-openid_connect (1.9.0)
+      doorkeeper (>= 5.5, < 6.0)
       jwt (>= 2.5)
       ostruct (>= 0.5)
     dotenv (2.7.6)
@@ -586,7 +604,8 @@ GEM
       dry-logic (~> 1.4)
       zeitwerk (~> 2.6)
     dumb_delegator (1.0.0)
-    duo_api (1.4.0)
+    duo_api (1.5.1)
+      base64 (>= 0.2.0)
     ed25519 (1.4.0)
     elasticsearch (7.17.11)
       elasticsearch-api (= 7.17.11)
@@ -602,7 +621,7 @@ GEM
       base64
       faraday (>= 1, < 3)
       multi_json
-    email_reply_trimmer (0.1.6)
+    email_reply_trimmer (0.2.0)
     email_spec (2.3.0)
       htmlentities (~> 4.3.3)
       launchy (>= 2.1, < 4.0)
@@ -631,11 +650,11 @@ GEM
     factory_bot_rails (6.5.1)
       factory_bot (~> 6.5)
       railties (>= 6.1.0)
-    faraday (2.13.4)
+    faraday (2.14.1)
       faraday-net_http (>= 2.0, < 3.5)
       json
       logger
-    faraday-follow_redirects (0.3.0)
+    faraday-follow_redirects (0.5.0)
       faraday (>= 1, < 3)
     faraday-http-cache (2.5.0)
       faraday (>= 0.8)
@@ -659,7 +678,12 @@ GEM
       prime
       racc
     ffaker (2.25.0)
-    ffi (1.17.3)
+    ffi (1.17.4)
+    ffi (1.17.4-aarch64-linux-gnu)
+    ffi (1.17.4-arm64-darwin)
+    ffi (1.17.4-x86-linux-gnu)
+    ffi (1.17.4-x86_64-darwin)
+    ffi (1.17.4-x86_64-linux-gnu)
     ffi-compiler (1.0.1)
       ffi (>= 1.0.0)
       rake
@@ -685,7 +709,7 @@ GEM
       fog-json
       ipaddress (~> 0.8)
       xml-simple (~> 1.1)
-    fog-aws (3.33.1)
+    fog-aws (3.33.2)
       base64 (>= 0.2, < 0.4)
       fog-core (~> 2.6)
       fog-json (~> 1.1)
@@ -718,6 +742,8 @@ GEM
       nokogiri (>= 1.5.11, < 2.0.0)
     formatador (0.2.5)
     forwardable (1.3.3)
+    freezolite (0.6.0)
+      require-hooks (~> 0.2)
     fugit (1.11.2)
       et-orbi (~> 1, >= 1.2.11)
       raabro (~> 1.4)
@@ -749,42 +775,51 @@ GEM
     git (1.19.1)
       addressable (~> 2.8)
       rchardet (~> 1.8)
-    gitaly (18.10.0)
+    gitaly (18.11.2)
       grpc (~> 1.0)
     gitlab (4.19.0)
       httparty (~> 0.20)
       terminal-table (>= 1.5.1)
     gitlab-chronic (0.10.6)
       numerizer (~> 0.2)
-    gitlab-cloud-connector (1.46.0)
+    gitlab-cloud-connector (1.47.0)
       activesupport (>= 7.0)
       jwt (~> 2.9)
     gitlab-crystalball (1.1.3)
       git (< 4)
       ostruct (< 1)
-    gitlab-dangerfiles (4.10.0)
+    gitlab-dangerfiles (4.11.1)
       danger (>= 9.3.0)
       danger-gitlab (>= 8.0.0)
       rake (~> 13.0)
     gitlab-experiment (1.3.0)
       activesupport (>= 3.0)
       request_store (>= 1.0)
-    gitlab-fog-azure-rm (2.4.0)
+    gitlab-fog-azure-rm (2.5.0)
+      base64
       faraday (~> 2.0)
-      faraday-follow_redirects (~> 0.3.0)
+      faraday-follow_redirects (~> 0.5.0)
       faraday-net_http_persistent (~> 2.0)
       fog-core (~> 2.1)
       fog-json (~> 1.2)
       mime-types
       net-http-persistent (~> 4.0)
       nokogiri (~> 1, >= 1.10.8)
-    gitlab-gkg-proto (0.7.0)
+    gitlab-gkg-proto (0.37.0)
       grpc (~> 1.0)
     gitlab-glfm-markdown (0.0.41)
       rb_sys (~> 0.9.124)
+    gitlab-glfm-markdown (0.0.41-aarch64-linux-gnu)
+      rb_sys (~> 0.9.124)
+    gitlab-glfm-markdown (0.0.41-arm64-darwin)
+      rb_sys (~> 0.9.124)
+    gitlab-glfm-markdown (0.0.41-x86_64-darwin)
+      rb_sys (~> 0.9.124)
+    gitlab-glfm-markdown (0.0.41-x86_64-linux-gnu)
+      rb_sys (~> 0.9.124)
     gitlab-kas-grpc (18.5.0.pre.rc4)
       grpc (~> 1.0)
-    gitlab-labkit (1.5.1)
+    gitlab-labkit (2.0.0)
       actionpack (>= 5.0.0, < 8.1.0)
       activesupport (>= 5.0.0, < 8.1.0)
       google-protobuf (>= 3.25, < 5.0)
@@ -813,7 +848,7 @@ GEM
       activesupport (>= 5.2.0)
       rake (~> 13.0)
       snowplow-tracker (~> 0.8.0)
-    gitlab-secret_detection (0.40.0)
+    gitlab-secret_detection (0.41.0)
       grpc (>= 1.63.0, < 2)
       grpc_reflection (~> 0.1)
       parallel (~> 1)
@@ -825,15 +860,15 @@ GEM
       activesupport (>= 6, < 8.1)
       json_schemer (~> 2.4.0)
       mutex_m (~> 0.3.0)
-    gitlab-styles (13.1.0)
-      rubocop (= 1.71.1)
-      rubocop-capybara (~> 2.21.0)
-      rubocop-factory_bot (~> 2.26.1)
-      rubocop-graphql (~> 1.5.4)
-      rubocop-performance (~> 1.21.1)
-      rubocop-rails (~> 2.26.0)
-      rubocop-rspec (~> 3.0.4)
-      rubocop-rspec_rails (~> 2.30.0)
+    gitlab-styles (14.0.0)
+      rubocop (= 1.81.7)
+      rubocop-capybara (= 2.21.0)
+      rubocop-factory_bot (= 2.26.1)
+      rubocop-graphql (= 1.5.4)
+      rubocop-performance (= 1.23.1)
+      rubocop-rails (= 2.29.1)
+      rubocop-rspec (= 3.4.0)
+      rubocop-rspec_rails (= 2.30.0)
     gitlab_chronic_duration (0.12.0)
       numerizer (~> 0.2)
     gitlab_omniauth-ldap (2.3.0)
@@ -841,19 +876,28 @@ GEM
       omniauth (>= 1.3, < 3)
       pyu-ruby-sasl (>= 0.0.3.3, < 0.1)
       rubyntlm (~> 0.5)
-    gitlab_quality-test_tooling (3.10.1)
+    gitlab_quality-test_tooling (3.14.0)
       activesupport (>= 7.0)
       amatch (~> 0.4.1)
       fog-google (~> 1.24, >= 1.24.1)
       gitlab (>= 4.19, < 7.0)
       http (~> 5.0)
+      http-cookie (>= 1.0, < 1.1.1)
       nokogiri (~> 1.10)
       parallel (>= 1, < 2)
       rainbow (>= 3, < 4)
       rspec-parameterized (>= 1.0, < 3.0)
       table_print (= 1.5.7)
       zeitwerk (>= 2, < 3)
-    gitlab_query_language (0.26.0)
+    gitlab_query_language (0.27.1)
+      rb_sys (~> 0.9.91)
+    gitlab_query_language (0.27.1-aarch64-linux-gnu)
+      rb_sys (~> 0.9.91)
+    gitlab_query_language (0.27.1-arm64-darwin)
+      rb_sys (~> 0.9.91)
+    gitlab_query_language (0.27.1-x86_64-darwin)
+      rb_sys (~> 0.9.91)
+    gitlab_query_language (0.27.1-x86_64-linux-gnu)
       rb_sys (~> 0.9.91)
     globalid (1.1.0)
       activesupport (>= 5.0)
@@ -864,8 +908,6 @@ GEM
       request_store (>= 1.0)
     google-apis-androidpublisher_v3 (0.92.0)
       google-apis-core (>= 0.15.0, < 2.a)
-    google-apis-bigquery_v2 (0.90.0)
-      google-apis-core (>= 0.15.0, < 2.a)
     google-apis-cloudbilling_v1 (0.22.0)
       google-apis-core (>= 0.9.1, < 2.a)
     google-apis-cloudresourcemanager_v1 (0.44.0)
@@ -905,14 +947,6 @@ GEM
       google-cloud-errors (~> 1.0)
       google-cloud-location (>= 0.4, < 2.a)
       grpc-google-iam-v1 (~> 1.1)
-    google-cloud-bigquery (1.62.0)
-      bigdecimal (~> 3.0)
-      concurrent-ruby (~> 1.0)
-      google-apis-bigquery_v2 (~> 0.71)
-      google-apis-core (>= 0.18, < 2)
-      google-cloud-core (~> 1.6)
-      googleauth (~> 1.9)
-      mini_mime (~> 1.0)
     google-cloud-common (1.9.0)
       google-protobuf (>= 3.18, < 5.a)
       googleapis-common-protos-types (~> 1.20)
@@ -945,15 +979,30 @@ GEM
       gapic-common (>= 0.20.0, < 2.a)
       google-cloud-errors (~> 1.0)
     google-logging-utils (0.1.0)
-    google-protobuf (4.33.5)
+    google-protobuf (4.34.1)
       bigdecimal
-      rake (>= 13)
+      rake (~> 13.3)
+    google-protobuf (4.34.1-aarch64-linux-gnu)
+      bigdecimal
+      rake (~> 13.3)
+    google-protobuf (4.34.1-arm64-darwin)
+      bigdecimal
+      rake (~> 13.3)
+    google-protobuf (4.34.1-x86-linux-gnu)
+      bigdecimal
+      rake (~> 13.3)
+    google-protobuf (4.34.1-x86_64-darwin)
+      bigdecimal
+      rake (~> 13.3)
+    google-protobuf (4.34.1-x86_64-linux-gnu)
+      bigdecimal
+      rake (~> 13.3)
     googleapis-common-protos (1.7.0)
       google-protobuf (>= 3.18, < 5.a)
       googleapis-common-protos-types (~> 1.7)
       grpc (~> 1.41)
-    googleapis-common-protos-types (1.20.0)
-      google-protobuf (>= 3.18, < 5.a)
+    googleapis-common-protos-types (1.22.0)
+      google-protobuf (~> 4.26)
     googleauth (1.14.0)
       faraday (>= 1.0, < 3.a)
       google-cloud-env (~> 2.2)
@@ -989,7 +1038,7 @@ GEM
       grape
       rack
     graphlyte (1.0.0)
-    graphql (2.5.11)
+    graphql (2.5.23)
       base64
       fiber-storage
       logger
@@ -1006,6 +1055,21 @@ GEM
     grpc (1.80.0)
       google-protobuf (>= 3.25, < 5.0)
       googleapis-common-protos-types (~> 1.0)
+    grpc (1.80.0-aarch64-linux-gnu)
+      google-protobuf (>= 3.25, < 5.0)
+      googleapis-common-protos-types (~> 1.0)
+    grpc (1.80.0-arm64-darwin)
+      google-protobuf (>= 3.25, < 5.0)
+      googleapis-common-protos-types (~> 1.0)
+    grpc (1.80.0-x86-linux-gnu)
+      google-protobuf (>= 3.25, < 5.0)
+      googleapis-common-protos-types (~> 1.0)
+    grpc (1.80.0-x86_64-darwin)
+      google-protobuf (>= 3.25, < 5.0)
+      googleapis-common-protos-types (~> 1.0)
+    grpc (1.80.0-x86_64-linux-gnu)
+      google-protobuf (>= 3.25, < 5.0)
+      googleapis-common-protos-types (~> 1.0)
     grpc-google-iam-v1 (1.11.0)
       google-protobuf (>= 3.18, < 5.a)
       googleapis-common-protos (~> 1.7.0)
@@ -1072,11 +1136,13 @@ GEM
       multi_xml (>= 0.5.2)
     httpclient (2.9.0)
       mutex_m
-    i18n (1.14.7)
+    i18n (1.14.8)
       concurrent-ruby (~> 1.0)
     i18n_data (0.13.1)
-    icalendar (2.10.3)
+    icalendar (2.12.2)
+      base64
       ice_cube (~> 0.16)
+      logger
       ostruct
     ice_cube (0.16.4)
     ice_nine (0.11.2)
@@ -1085,7 +1151,7 @@ GEM
     invisible_captcha (2.3.0)
       rails (>= 5.2)
     io-console (0.8.2)
-    io-event (1.14.3)
+    io-event (1.14.5)
     ipaddress (0.8.3)
     irb (1.18.0)
       pp (>= 0.6.0)
@@ -1102,12 +1168,12 @@ GEM
       multipart-post
       oauth (~> 0.5, >= 0.5.0)
     jmespath (1.6.2)
-    js-routes (2.3.6)
+    js-routes (2.3.7)
       railties (>= 5)
       sorbet-runtime
-    js_regex (3.13.0)
+    js_regex (3.14.0)
       character_set (~> 1.4)
-      regexp_parser (~> 2.10)
+      regexp_parser (~> 2.11)
       regexp_property_values (~> 1.0)
     json (2.19.2)
     json-jwt (1.16.6)
@@ -1122,7 +1188,7 @@ GEM
       hana (~> 1.3)
       regexp_parser (~> 2.0)
       simpleidn (~> 0.2)
-    jsonb_accessor (1.4)
+    jsonb_accessor (1.4.2)
       activerecord (>= 6.1)
       activesupport (>= 6.1)
       pg (>= 0.18.1)
@@ -1173,12 +1239,12 @@ GEM
       tomlrb (>= 1.3, < 2.1)
       with_env (= 1.1.0)
       xml-simple (~> 1.1.9)
-    licensee (9.18.0)
+    licensee (10.0.0)
       dotenv (>= 2, < 4)
-      octokit (>= 4.20, < 10.0)
+      octokit (>= 4.20, < 11.0)
       reverse_markdown (>= 1, < 4)
-      rugged (>= 0.24, < 2.0)
       thor (>= 0.19, < 2.0)
+    lint_roller (1.1.0)
     listen (3.9.0)
       rb-fsevent (~> 0.10, >= 0.10.3)
       rb-inotify (~> 0.9, >= 0.9.10)
@@ -1196,7 +1262,7 @@ GEM
     loofah (2.25.1)
       crass (~> 1.0.2)
       nokogiri (>= 1.12.0)
-    lookbook (2.3.13)
+    lookbook (2.3.14)
       activemodel
       css_parser
       htmlbeautifier (~> 1.3)
@@ -1279,19 +1345,27 @@ GEM
     nokogiri (1.19.3)
       mini_portile2 (~> 2.8.2)
       racc (~> 1.4)
+    nokogiri (1.19.3-aarch64-linux-gnu)
+      racc (~> 1.4)
+    nokogiri (1.19.3-arm64-darwin)
+      racc (~> 1.4)
+    nokogiri (1.19.3-x86_64-darwin)
+      racc (~> 1.4)
+    nokogiri (1.19.3-x86_64-linux-gnu)
+      racc (~> 1.4)
     notiffany (0.1.3)
       nenv (~> 0.1)
       shellany (~> 0.0)
     numerizer (0.2.0)
     oauth (0.5.6)
-    oauth2 (2.0.10)
+    oauth2 (2.0.18)
       faraday (>= 0.17.3, < 4.0)
       jwt (>= 1.0, < 4.0)
       logger (~> 1.2)
       multi_xml (~> 0.5)
       rack (>= 1.2, < 4)
-      snaky_hash (~> 2.0)
-      version_gem (>= 1.1.8, < 3)
+      snaky_hash (~> 2.0, >= 2.0.3)
+      version_gem (~> 1.1, >= 1.1.9)
     observer (0.1.2)
     octokit (9.2.0)
       faraday (>= 1, < 3)
@@ -1352,6 +1426,7 @@ GEM
     omniauth_openid_connect (0.8.0)
       omniauth (>= 1.9, < 3)
       openid_connect (~> 2.2)
+    open3 (0.2.1)
     open4 (1.3.4)
     openid_connect (2.3.1)
       activemodel
@@ -1372,8 +1447,9 @@ GEM
     openssl (3.3.2)
     openssl-signature_algorithm (1.3.0)
       openssl (> 2.0)
-    opentelemetry-api (1.7.0)
-    opentelemetry-common (0.21.0)
+    opentelemetry-api (1.9.0)
+      logger
+    opentelemetry-common (0.24.0)
       opentelemetry-api (~> 1.0)
     opentelemetry-exporter-otlp (0.31.1)
       google-protobuf (>= 3.18)
@@ -1382,29 +1458,29 @@ GEM
       opentelemetry-common (~> 0.20)
       opentelemetry-sdk (~> 1.10)
       opentelemetry-semantic_conventions
-    opentelemetry-helpers-mysql (0.4.0)
+    opentelemetry-helpers-mysql (0.6.0)
       opentelemetry-api (~> 1.7)
       opentelemetry-common (~> 0.21)
-    opentelemetry-helpers-sql (0.3.0)
+    opentelemetry-helpers-sql (0.4.0)
       opentelemetry-api (~> 1.7)
-    opentelemetry-helpers-sql-processor (0.4.0)
+    opentelemetry-helpers-sql-processor (0.5.0)
       opentelemetry-api (~> 1.0)
       opentelemetry-common (~> 0.21)
-    opentelemetry-instrumentation-action_mailer (0.6.1)
+    opentelemetry-instrumentation-action_mailer (0.7.0)
       opentelemetry-instrumentation-active_support (~> 0.10)
-    opentelemetry-instrumentation-action_pack (0.15.1)
+    opentelemetry-instrumentation-action_pack (0.17.0)
       opentelemetry-instrumentation-rack (~> 0.29)
-    opentelemetry-instrumentation-action_view (0.11.2)
+    opentelemetry-instrumentation-action_view (0.12.0)
       opentelemetry-instrumentation-active_support (~> 0.10)
-    opentelemetry-instrumentation-active_job (0.10.1)
+    opentelemetry-instrumentation-active_job (0.11.0)
       opentelemetry-instrumentation-base (~> 0.25)
     opentelemetry-instrumentation-active_model_serializers (0.24.0)
       opentelemetry-instrumentation-active_support (>= 0.7.0)
-    opentelemetry-instrumentation-active_record (0.11.1)
+    opentelemetry-instrumentation-active_record (0.12.0)
       opentelemetry-instrumentation-base (~> 0.25)
-    opentelemetry-instrumentation-active_storage (0.3.1)
+    opentelemetry-instrumentation-active_storage (0.4.0)
       opentelemetry-instrumentation-active_support (~> 0.10)
-    opentelemetry-instrumentation-active_support (0.10.1)
+    opentelemetry-instrumentation-active_support (0.11.0)
       opentelemetry-instrumentation-base (~> 0.25)
     opentelemetry-instrumentation-all (0.89.1)
       opentelemetry-instrumentation-active_model_serializers (~> 0.24.0)
@@ -1450,7 +1526,7 @@ GEM
       opentelemetry-instrumentation-base (~> 0.25)
     opentelemetry-instrumentation-aws_sdk (0.11.0)
       opentelemetry-instrumentation-base (~> 0.25)
-    opentelemetry-instrumentation-base (0.25.0)
+    opentelemetry-instrumentation-base (0.26.0)
       opentelemetry-api (~> 1.7)
       opentelemetry-common (~> 0.21)
       opentelemetry-registry (~> 0.1)
@@ -1458,7 +1534,7 @@ GEM
       opentelemetry-instrumentation-base (~> 0.25)
     opentelemetry-instrumentation-concurrent_ruby (0.24.0)
       opentelemetry-instrumentation-base (~> 0.25)
-    opentelemetry-instrumentation-dalli (0.29.0)
+    opentelemetry-instrumentation-dalli (0.29.2)
       opentelemetry-instrumentation-base (~> 0.25)
     opentelemetry-instrumentation-delayed_job (0.25.1)
       opentelemetry-instrumentation-base (~> 0.25)
@@ -1468,7 +1544,7 @@ GEM
       opentelemetry-instrumentation-base (~> 0.25)
     opentelemetry-instrumentation-faraday (0.30.1)
       opentelemetry-instrumentation-base (~> 0.25)
-    opentelemetry-instrumentation-grape (0.5.0)
+    opentelemetry-instrumentation-grape (0.5.1)
       opentelemetry-instrumentation-rack (~> 0.29)
     opentelemetry-instrumentation-graphql (0.31.2)
       opentelemetry-instrumentation-base (~> 0.25)
@@ -1486,7 +1562,7 @@ GEM
       opentelemetry-instrumentation-base (~> 0.25)
     opentelemetry-instrumentation-lmdb (0.25.0)
       opentelemetry-instrumentation-base (~> 0.25)
-    opentelemetry-instrumentation-mongo (0.25.0)
+    opentelemetry-instrumentation-mongo (0.25.1)
       opentelemetry-instrumentation-base (~> 0.25)
     opentelemetry-instrumentation-mysql2 (0.32.1)
       opentelemetry-helpers-mysql
@@ -1536,14 +1612,15 @@ GEM
       opentelemetry-helpers-sql-processor
       opentelemetry-instrumentation-base (~> 0.25)
       opentelemetry-semantic_conventions (>= 1.8.0)
-    opentelemetry-registry (0.3.0)
+    opentelemetry-registry (0.5.0)
       opentelemetry-api (~> 1.1)
-    opentelemetry-sdk (1.10.0)
+    opentelemetry-sdk (1.11.0)
+      logger
       opentelemetry-api (~> 1.1)
       opentelemetry-common (~> 0.20)
       opentelemetry-registry (~> 0.2)
       opentelemetry-semantic_conventions
-    opentelemetry-semantic_conventions (1.10.0)
+    opentelemetry-semantic_conventions (1.37.0)
       opentelemetry-api (~> 1.0)
     opentracing (0.5.0)
     optimist (3.0.1)
@@ -1587,6 +1664,10 @@ GEM
     peek (1.1.0)
       railties (>= 4.0.0)
     pg (1.6.3)
+    pg (1.6.3-aarch64-linux)
+    pg (1.6.3-arm64-darwin)
+    pg (1.6.3-x86_64-darwin)
+    pg (1.6.3-x86_64-linux)
     pg_query (6.2.2)
       google-protobuf (>= 3.25.3)
     plist (3.7.0)
@@ -1624,6 +1705,26 @@ GEM
       bigdecimal
       logger
       rb_sys (~> 0.9.124)
+    prometheus-client-mmap (1.5.0-aarch64-linux-gnu)
+      base64
+      bigdecimal
+      logger
+      rb_sys (~> 0.9.124)
+    prometheus-client-mmap (1.5.0-arm64-darwin)
+      base64
+      bigdecimal
+      logger
+      rb_sys (~> 0.9.124)
+    prometheus-client-mmap (1.5.0-x86_64-darwin)
+      base64
+      bigdecimal
+      logger
+      rb_sys (~> 0.9.124)
+    prometheus-client-mmap (1.5.0-x86_64-linux-gnu)
+      base64
+      bigdecimal
+      logger
+      rb_sys (~> 0.9.124)
     pry (0.14.2)
       coderay (~> 1.1)
       method_source (~> 1.0)
@@ -1640,7 +1741,7 @@ GEM
       date
       stringio
     public_suffix (6.0.1)
-    puma (7.2.0)
+    puma (8.0.1)
       nio4r (~> 2.0)
     pyu-ruby-sasl (0.0.3.3)
     raabro (1.4.0)
@@ -1665,7 +1766,7 @@ GEM
       rack
     rack-session (1.0.2)
       rack (< 3)
-    rack-test (2.1.0)
+    rack-test (2.2.0)
       rack (>= 1.3)
     rack-timeout (0.7.0)
     rackup (1.0.1)
@@ -1689,12 +1790,12 @@ GEM
       actionpack (>= 5.0.1.rc1)
       actionview (>= 5.0.1.rc1)
       activesupport (>= 5.0.1.rc1)
-    rails-dom-testing (2.2.0)
+    rails-dom-testing (2.3.0)
       activesupport (>= 5.0.0)
       minitest
       nokogiri (>= 1.6)
-    rails-html-sanitizer (1.6.1)
-      loofah (~> 2.21)
+    rails-html-sanitizer (1.7.0)
+      loofah (~> 2.25)
       nokogiri (>= 1.15.7, != 1.16.7, != 1.16.6, != 1.16.5, != 1.16.4, != 1.16.3, != 1.16.2, != 1.16.1, != 1.16.0.rc1, != 1.16.0)
     rails-i18n (7.0.10)
       i18n (>= 0.7, < 2)
@@ -1710,12 +1811,13 @@ GEM
       tsort (>= 0.2)
       zeitwerk (~> 2.6)
     rainbow (3.1.1)
-    rake (13.0.6)
+    rake (13.4.2)
     rake-compiler-dock (1.11.0)
     rb-fsevent (0.11.2)
     rb-inotify (0.10.1)
       ffi (~> 1.0)
-    rb_sys (0.9.124)
+    rb_sys (0.9.126)
+      json (>= 2)
       rake-compiler-dock (= 1.11.0)
     rbs (3.9.5)
       logger
@@ -1730,6 +1832,10 @@ GEM
       tsort
     re2 (2.23.0)
       mini_portile2 (~> 2.8.9)
+    re2 (2.23.0-aarch64-linux-gnu)
+    re2 (2.23.0-arm64-darwin)
+    re2 (2.23.0-x86_64-darwin)
+    re2 (2.23.0-x86_64-linux-gnu)
     recaptcha (5.12.3)
       json
     recursive-open-struct (1.1.3)
@@ -1740,10 +1846,10 @@ GEM
       actionpack (>= 5)
       redis-rack (>= 2.1.0, < 4)
       redis-store (>= 1.1.0, < 2)
-    redis-client (0.26.4)
+    redis-client (0.28.0)
       connection_pool
-    redis-cluster-client (0.13.5)
-      redis-client (~> 0.24)
+    redis-cluster-client (0.15.0)
+      redis-client (~> 0.28)
     redis-clustering (5.4.1)
       redis (= 5.4.1)
       redis-cluster-client (>= 0.10.0)
@@ -1754,7 +1860,7 @@ GEM
       redis-store (>= 1.2, < 2)
     redis-store (1.11.0)
       redis (>= 4, < 6)
-    regexp_parser (2.10.0)
+    regexp_parser (2.12.0)
     regexp_property_values (1.0.0)
     reline (0.6.3)
       io-console (~> 0.5)
@@ -1764,6 +1870,7 @@ GEM
       uber (< 0.2.0)
     request_store (1.7.0)
       rack (>= 1.4)
+    require-hooks (0.2.3)
     responders (3.0.1)
       actionpack (>= 5.0)
       railties (>= 5.0)
@@ -1826,33 +1933,35 @@ GEM
       activerecord
       get_process_mem
       rails
-    rubocop (1.71.1)
+    rubocop (1.81.7)
       json (~> 2.3)
-      language_server-protocol (>= 3.17.0)
+      language_server-protocol (~> 3.17.0.2)
+      lint_roller (~> 1.1.0)
       parallel (~> 1.10)
       parser (>= 3.3.0.2)
       rainbow (>= 2.2.2, < 4.0)
       regexp_parser (>= 2.9.3, < 3.0)
-      rubocop-ast (>= 1.38.0, < 2.0)
+      rubocop-ast (>= 1.47.1, < 2.0)
       ruby-progressbar (~> 1.7)
       unicode-display_width (>= 2.4.0, < 4.0)
-    rubocop-ast (1.38.0)
-      parser (>= 3.3.1.0)
+    rubocop-ast (1.49.0)
+      parser (>= 3.3.7.2)
+      prism (~> 1.7)
     rubocop-capybara (2.21.0)
       rubocop (~> 1.41)
     rubocop-factory_bot (2.26.1)
       rubocop (~> 1.61)
     rubocop-graphql (1.5.4)
       rubocop (>= 1.50, < 2)
-    rubocop-performance (1.21.1)
+    rubocop-performance (1.23.1)
       rubocop (>= 1.48.1, < 2.0)
       rubocop-ast (>= 1.31.1, < 2.0)
-    rubocop-rails (2.26.2)
+    rubocop-rails (2.29.1)
       activesupport (>= 4.2.0)
       rack (>= 1.1)
       rubocop (>= 1.52.0, < 2.0)
       rubocop-ast (>= 1.31.1, < 2.0)
-    rubocop-rspec (3.0.5)
+    rubocop-rspec (3.4.0)
       rubocop (~> 1.61)
     rubocop-rspec_rails (2.30.0)
       rubocop (~> 1.61)
@@ -1867,7 +1976,7 @@ GEM
       ruby-lsp (~> 0.26.0)
     ruby-magic (0.6.0)
       mini_portile2 (~> 2.8)
-    ruby-progressbar (1.11.0)
+    ruby-progressbar (1.13.0)
     ruby-saml (1.18.1)
       nokogiri (>= 1.13.10)
       rexml
@@ -1877,7 +1986,6 @@ GEM
     rubypants (0.2.0)
     rubyzip (2.4.1)
     rugged (1.7.2)
-    safe_yaml (1.0.4)
     safety_net_attestation (0.5.0)
       jwt (>= 2.0, < 4.0)
     sanitize (6.0.2)
@@ -1886,6 +1994,16 @@ GEM
     sass-embedded (1.77.5)
       google-protobuf (>= 3.25, < 5.0)
       rake (>= 13)
+    sass-embedded (1.77.5-aarch64-linux-gnu)
+      google-protobuf (>= 3.25, < 5.0)
+    sass-embedded (1.77.5-arm64-darwin)
+      google-protobuf (>= 3.25, < 5.0)
+    sass-embedded (1.77.5-x86-linux-gnu)
+      google-protobuf (>= 3.25, < 5.0)
+    sass-embedded (1.77.5-x86_64-darwin)
+      google-protobuf (>= 3.25, < 5.0)
+    sass-embedded (1.77.5-x86_64-linux-gnu)
+      google-protobuf (>= 3.25, < 5.0)
     sawyer (0.9.2)
       addressable (>= 2.3.5)
       faraday (>= 0.17.3, < 3)
@@ -1944,28 +2062,32 @@ GEM
     sixarm_ruby_unaccent (1.2.0)
     slack-messenger (2.3.6)
       re2 (~> 2.7, >= 2.7.0)
-    snaky_hash (2.0.0)
-      hashie
-      version_gem (~> 1.1)
+    snaky_hash (2.0.3)
+      hashie (>= 0.1.0, < 6)
+      version_gem (>= 1.1.8, < 3)
     snowplow-tracker (0.8.0)
-    solargraph (0.54.4)
+    solargraph (0.58.3)
+      ast (~> 2.4.3)
       backport (~> 1.2)
       benchmark (~> 0.4)
-      bundler (~> 2.0)
+      bundler (>= 2.0)
       diff-lcs (~> 1.4)
       jaro_winkler (~> 1.6, >= 1.6.1)
       kramdown (~> 2.3)
       kramdown-parser-gfm (~> 1.1)
       logger (~> 1.6)
       observer (~> 0.1)
+      open3 (~> 0.2.1)
       ostruct (~> 0.6)
       parser (~> 3.0)
-      rbs (~> 3.3)
+      prism (~> 1.4)
+      rbs (>= 3.6.1, <= 4.0.0.dev.4)
       reverse_markdown (~> 3.0)
-      rubocop (~> 1.38)
+      rubocop (~> 1.76)
       thor (~> 1.0)
       tilt (~> 2.0)
       yard (~> 0.9, >= 0.9.24)
+      yard-activesupport-concern (~> 0.0)
       yard-solargraph (~> 0.1)
     solargraph-rspec (0.5.4)
       solargraph (>= 0.52.0)
@@ -2011,7 +2133,7 @@ GEM
       faraday (~> 2.0)
       faraday-follow_redirects
     sync (0.5.0)
-    sys-filesystem (1.4.3)
+    sys-filesystem (1.5.5)
       ffi (~> 1.1)
     sysexits (1.2.0)
     table_print (1.5.7)
@@ -2087,8 +2209,9 @@ GEM
     tzinfo (2.0.6)
       concurrent-ruby (~> 1.0)
     uber (0.1.0)
-    undercover (0.8.4)
+    undercover (0.8.5)
       base64
+      benchmark
       bigdecimal
       imagen (>= 0.2.0)
       rainbow (>= 2.1, < 4.0)
@@ -2119,7 +2242,7 @@ GEM
     validates_hostname (1.0.13)
       activerecord (>= 3.0)
       activesupport (>= 3.0)
-    version_gem (1.1.8)
+    version_gem (1.1.9)
     version_sorter (2.3.0)
     view_component (3.23.2)
       activesupport (>= 5.2.0, < 8.1)
@@ -2132,7 +2255,7 @@ GEM
     vite_rails (3.10.0)
       railties (>= 5.1, < 9)
       vite_ruby (~> 3.0, >= 3.2.2)
-    vite_ruby (3.10.1)
+    vite_ruby (3.10.2)
       dry-cli (>= 0.7, < 2)
       logger (~> 1.6)
       mutex_m
@@ -2158,7 +2281,7 @@ GEM
       addressable (>= 2.8.0)
       crack (>= 0.3.2)
       hashdiff (>= 0.4.0, < 2.0.0)
-    webrick (1.9.1)
+    webrick (1.9.2)
     websocket (1.2.10)
     websocket-driver (0.8.0)
       base64
@@ -2177,13 +2300,22 @@ GEM
       nokogiri (~> 1.8)
     yajl-ruby (1.4.3)
     yard (0.9.38)
+    yard-activesupport-concern (0.0.1)
+      yard (>= 0.8)
     yard-solargraph (0.1.0)
       yard (~> 0.9)
     zeitwerk (2.6.18)
     zlib (3.2.3)
 
 PLATFORMS
+  aarch64-linux
+  aarch64-linux-gnu
+  arm64-darwin
   ruby
+  x86-linux-gnu
+  x86_64-darwin
+  x86_64-linux
+  x86_64-linux-gnu
 
 DEPENDENCIES
   CFPropertyList (~> 3.0.0)
@@ -2201,9 +2333,10 @@ DEPENDENCIES
   asciidoctor-include-ext (~> 0.4.0)
   asciidoctor-kroki (~> 0.10.0)
   asciidoctor-plantuml (~> 0.0.16)
-  async (~> 2.32.0)
+  async (~> 2.39.0)
   atlassian-jwt (~> 0.2.1)
   attr_encrypted (~> 4.2)
+  auto_freeze!
   aws-sdk-cloudformation (~> 1)
   aws-sdk-core (~> 3.242.0)
   aws-sdk-s3 (~> 1.213.0)
@@ -2215,7 +2348,7 @@ DEPENDENCIES
   bcrypt (~> 3.1, >= 3.1.14)
   benchmark-ips (~> 2.14.0)
   benchmark-memory (~> 0.1)
-  bootsnap (~> 1.23.0)
+  bootsnap (~> 1.24.0)
   browser (~> 5.3.1)
   bullet (~> 8.0.0)
   bundler-checksum (~> 0.1.0)!
@@ -2238,16 +2371,16 @@ DEPENDENCIES
   debug (~> 1.11.0)
   declarative_policy (~> 2.1.0)
   derailed_benchmarks
-  devfile (~> 0.5.0)
+  devfile (~> 0.5.1)
   device_detector
   devise (~> 4.9.3)
   devise-pbkdf2-encryptable (~> 0.0.0)!
-  devise-two-factor (~> 5.1.0)
+  devise-two-factor (~> 6.4.0)
   diff_match_patch (~> 0.1.0)!
   diffy (~> 3.4)
   doorkeeper (~> 5.8, >= 5.8.1)
   doorkeeper-device_authorization_grant (~> 1.0.0)
-  doorkeeper-openid_connect (~> 1.8.10)
+  doorkeeper-openid_connect (~> 1.9.0)
   drb (~> 2.2)
   duo_api (~> 1.3)
   ed25519 (~> 1.4.0)
@@ -2280,23 +2413,24 @@ DEPENDENCIES
   gettext (~> 3.5, >= 3.5.1)
   gettext_i18n_rails (~> 1.13.0)
   git (~> 1.8)
-  gitaly (~> 18.10.0)
+  gitaly (~> 18.11.0)
   gitlab-active-context!
   gitlab-backup-cli!
   gitlab-chronic (~> 0.10.5)
   gitlab-cloud-connector (~> 1.45)
   gitlab-crystalball (~> 1.1.3)
-  gitlab-dangerfiles (~> 4.10.0)
-  gitlab-duo-workflow-service-client (~> 0.7)!
+  gitlab-dangerfiles (~> 4.11.1)
+  gitlab-database-data_isolation!
+  gitlab-duo-workflow-service-client (~> 0.8)!
   gitlab-experiment (~> 1.3.0)
-  gitlab-fog-azure-rm (~> 2.4.0)
-  gitlab-gkg-proto (~> 0.7.0)
+  gitlab-fog-azure-rm (~> 2.5.0)
+  gitlab-gkg-proto (~> 0.37.0)
   gitlab-glfm-markdown (~> 0.0.41)
   gitlab-grape-openapi!
   gitlab-housekeeper!
   gitlab-http!
   gitlab-kas-grpc (~> 18.5.0.pre.rc4)
-  gitlab-labkit (~> 1.5.0)
+  gitlab-labkit (~> 2.0.0)
   gitlab-license (~> 2.6)
   gitlab-mail_room (~> 1.0.0)
   gitlab-markup (~> 2.0.0)
@@ -2309,13 +2443,13 @@ DEPENDENCIES
   gitlab-secret_detection (< 1.0)
   gitlab-security_report_schemas (= 0.2.0.min15.0.0.max15.2.4)
   gitlab-sidekiq-fetcher!
-  gitlab-styles (~> 13.1.0)
+  gitlab-styles (~> 14.0)
   gitlab-topology-service-client (~> 0.1)!
   gitlab-utils!
   gitlab_chronic_duration (~> 0.12)
   gitlab_omniauth-ldap (~> 2.3.0)
-  gitlab_quality-test_tooling (~> 3.10.0)
-  gitlab_query_language (~> 0.26.0)
+  gitlab_quality-test_tooling (~> 3.14.0)
+  gitlab_query_language (~> 0.27.1)
   gon (~> 6.5.0)
   google-apis-androidpublisher_v3 (~> 0.92.0)
   google-apis-cloudbilling_v1 (~> 0.22.0)
@@ -2329,7 +2463,6 @@ DEPENDENCIES
   google-apis-sqladmin_v1beta4 (~> 0.41.0)
   google-apis-storage_v1 (~> 0.29)
   google-cloud-artifact_registry-v1 (~> 0.11.0)
-  google-cloud-bigquery (~> 1.0)
   google-cloud-compute-v1 (~> 2.6.0)
   google-cloud-storage (~> 1.57.0)
   google-protobuf (>= 3.25, < 5.0)
@@ -2342,7 +2475,7 @@ DEPENDENCIES
   grape-swagger-entity (~> 0.7.0)
   grape_logging (~> 1.8, >= 1.8.4)
   graphlyte (~> 1.0.0)
-  graphql (= 2.5.11)
+  graphql (= 2.5.23)
   graphql-docs (~> 5.2.0)
   grpc (~> 1.80.0)
   gssapi (~> 1.3.1)
@@ -2357,7 +2490,7 @@ DEPENDENCIES
   html2text
   httparty (~> 0.24.0)
   i18n_data (~> 0.13.1)
-  icalendar (~> 2.10.1)
+  icalendar (~> 2.12.0)
   invisible_captcha (~> 2.3.0)
   io-event (~> 1.14)
   ipaddress (~> 0.8.3)
@@ -2376,7 +2509,7 @@ DEPENDENCIES
   lefthook (~> 1.13.0)
   letter_opener_web (~> 3.0.0)
   license_finder (~> 7.0)
-  licensee (~> 9.16)
+  licensee (~> 10)
   listen (~> 3.7)
   lockbox (~> 1.4.0)
   logger (~> 1.7.0)
@@ -2461,7 +2594,7 @@ DEPENDENCIES
   pry-byebug
   pry-rails (~> 0.3.9)
   pry-shell (~> 0.6.4)
-  puma (~> 7.2)
+  puma (~> 8.0)
   rack (~> 2.2.9)
   rack-attack (~> 6.8.0)
   rack-cors (~> 2.0.1)
@@ -2499,7 +2632,6 @@ DEPENDENCIES
   ruby-progressbar (~> 1.10)
   ruby-saml (~> 1.18)
   rubyzip (~> 2.4.0)
-  rugged (~> 1.7.2)
   sanitize (~> 6.0.2)
   sd_notify (~> 0.1.0)
   seed-fu (~> 2.3.7)
@@ -2518,7 +2650,7 @@ DEPENDENCIES
   simplecov-lcov (~> 0.8.0)
   slack-messenger (~> 2.3.5)
   snowplow-tracker (~> 0.8.0)
-  solargraph (~> 0.54.0)
+  solargraph (~> 0.58.0)
   solargraph-rspec (~> 0.5.1)
   spamcheck (~> 1.3.0)
   spring (~> 4.3.0)
@@ -2530,7 +2662,7 @@ DEPENDENCIES
   stackprof (~> 0.2.26)
   state_machines-activerecord (~> 0.100.0)
   state_machines-rspec (~> 0.6)
-  sys-filesystem (~> 1.4.3)
+  sys-filesystem (~> 1.5.0)
   tanuki_emoji (~> 0.13)
   telesignenterprise (~> 2.6)
   terser (= 1.0.2)
@@ -2594,11 +2726,12 @@ CHECKSUMS
   asciidoctor-include-ext (0.4.0) sha256=406adb9d2fbfc25536609ca13b787ed704dc06a4e49d6709b83f3bad578f7878
   asciidoctor-kroki (0.10.0) sha256=8e4225d88f120e2e7b5d3f5ddb67c5e69496d7344a16c57db5036ac900123062
   asciidoctor-plantuml (0.0.16) sha256=407e47cd1186ded5ccc75f0c812e5524c26c571d542247c5132abb8f47bd1793
-  ast (2.4.2) sha256=1e280232e6a33754cde542bc5ef85520b74db2aac73ec14acef453784447cc12
-  async (2.32.0) sha256=79ffbc8a5a99a8e7e5e65c7622ecf1e38e2193f0b920c5fec2316f09ff184787
+  ast (2.4.3) sha256=954615157c1d6a382bc27d690d973195e79db7f55e9765ac7c481c60bdb4d383
+  async (2.39.0) sha256=df18730073f2bbb45788077dfa20cb365ecc1b9453969f44de6796b5191a00aa
   atlassian-jwt (0.2.1) sha256=2fd2d87418773f2e140c038cb22e049069708aff2bd0a423a7e1740574e97823
   attr_encrypted (4.2.0) sha256=7e5c80159e6e38ed40dc4e2e65c4f57234fe1f376bddc40c8b773bfb9b81ad51
   attr_required (1.0.2) sha256=f0ebfc56b35e874f4d0ae799066dbc1f81efefe2364ca3803dc9ea6a4de6cb99
+  auto_freeze (0.2.0)
   awesome_print (1.9.2) sha256=e99b32b704acff16d768b3468680793ced40bfdc4537eb07e06a4be11133786e
   aws-eventstream (1.3.0) sha256=f1434cc03ab2248756eb02cfa45e900e59a061d7fbdc4a9fd82a5dd23d796d3f
   aws-partitions (1.1001.0) sha256=2979f3317d3a757508d35d0f322839f422cbc8459589b7cc4a3889d0085a8307
@@ -2616,16 +2749,16 @@ CHECKSUMS
   base64 (0.2.0) sha256=0f25e9b21a02a0cc0cea8ef92b2041035d39350946e8789c562b2d1a3da01507
   batch-loader (2.0.5) sha256=964bf638b8f498bab40abaafc6f89c057b2e02aa25b64fc1ec12872ad6bff213
   bcrypt (3.1.22) sha256=1f0072e88c2d705d94aff7f2c5cb02eb3f1ec4b8368671e19112527489f29032
-  benchmark (0.4.1) sha256=d4ef40037bba27f03b28013e219b950b82bace296549ec15a78016552f8d2cce
+  benchmark (0.5.0) sha256=465df122341aedcb81a2a24b4d3bd19b6c67c1530713fd533f3ff034e419236c
   benchmark-ips (2.14.0) sha256=b72bc8a65d525d5906f8cd94270dccf73452ee3257a32b89fbd6684d3e8a9b1d
   benchmark-malloc (0.2.0) sha256=37c68f0435261634026f584d79956a35325a3027e3e6b4cc8d7575aa10537e6b
   benchmark-memory (0.2.0) sha256=ca1e436433b09535ee8f64f80600a5edb407cff1f6ac70e089ca238118e6ab5c
   benchmark-perf (0.6.0) sha256=fe2b01959f3de0f9dd34820d54ef881eb4f3589fccb7d17b63068ac92d7f9621
   benchmark-trend (0.4.0) sha256=de5a02a9f443babefbbd97784759820decee8554a0c273d859c02a0990845d81
-  bigdecimal (3.2.3) sha256=ffd11d1ac67a0d3b2f44aec0a6487210b3f813f363dd11f1fcccf5ba00da4e1b
+  bigdecimal (3.3.1) sha256=eaa01e228be54c4f9f53bf3cc34fe3d5e845c31963e7fcc5bedb05a4e7d52218
   bindata (2.5.1) sha256=53186a1ec2da943d4cb413583d680644eb810aacbf8902497aac8f191fad9e58
   binding_of_caller (1.0.0) sha256=3aad25d1d538fc6e7972978f9bf512ccd992784009947c81633bea776713161d
-  bootsnap (1.23.0) sha256=c1254f458d58558b58be0f8eb8f6eec2821456785b7cdd1e16248e2020d3f214
+  bootsnap (1.24.1) sha256=d7faea1dc24aa5b22dacc049c9236b64ebf60b14dd49c615e15d8402375d39ef
   browser (5.3.1) sha256=62745301701ff2c6c5d32d077bb12532b20be261929dcb52c6781ed0d5658b3c
   builder (3.3.0) sha256=497918d2f9dca528fdca4b88d84e4ef4387256d984b8154e9d5d3fe5a9c8835f
   bullet (8.0.8) sha256=b4b9905eb6b803d9a0ba620944ed79c8bb27ff3ca90ef8f8e39ff21db5b7c542
@@ -2635,7 +2768,7 @@ CHECKSUMS
   capybara-screenshot (1.0.27) sha256=afa1896cc23df77be1774e8d3b3ce3953bf060aeaa04ff87607b5daf689174f2
   carrierwave (1.3.4) sha256=81772dabd1830edbd7f4526d2ae2c79f974f1d48900c3f03f7ecb7c657463a21
   cbor (0.5.10.1) sha256=79cdf79f18dcd9ee97e0b849c6d573e5a2e3ddc1954d180f384d6ed2612b6df0
-  cgi (0.5.0) sha256=fe99f65bb2c146e294372ebb27602adbc3b4c008e9ea7038c6bd48c1ec9759da
+  cgi (0.5.1) sha256=e93fcafc69b8a934fe1e6146121fa35430efa8b4a4047c4893764067036f18e9
   character_set (1.8.0) sha256=2b7317462adaedff0bd1576ae86d71bc5efe133a5d0b7c257021b00fe3153f51
   charlock_holmes (0.7.9) sha256=b49e8a11ce1921e2c5b65511bb864ae51720ce9bd1c336ccf0e89e6c8ae62db0
   chef-config (18.3.0) sha256=c183a2ff41da8d63b1e4a60853c9c701a053ab9afe13df767a578db5f07072df
@@ -2657,7 +2790,7 @@ CHECKSUMS
   cose (1.3.1) sha256=d5d4dbcd6b035d513edc4e1ab9bc10e9ce13b4011c96e3d1b8fe5e6413fd6de5
   countries (4.0.1) sha256=d32e8a3c0b22949f1a41ea6d9005f5168ffce226f8fe077d1d6be785fffa81c5
   coverband (6.2.0) sha256=2769926059237dab37627a4bb6e27423cb4f3689781330a70d283b64bd8a8aab
-  crack (0.4.3) sha256=5318ba8cd9cf7e0b5feb38948048503ba4b1fdc1b6ff30a39f0a00feb6036b29
+  crack (1.0.1) sha256=ff4a10390cd31d66440b7524eb1841874db86201d5b70032028553130b6d4c7e
   crass (1.0.6) sha256=dc516022a56e7b3b156099abc81b6d2b08ea1ed12676ac7a5657617f012bd45d
   creole (0.5.0) sha256=951701e2d80760f156b1cb2a93471ca97c076289becc067a33b745133ed32c03
   cronex (0.15.0) sha256=21c794e085fad2951c4f2e279f440340a35ba2297e0b738f22f263f69fbe2186
@@ -2665,7 +2798,7 @@ CHECKSUMS
   cssbundling-rails (1.4.3) sha256=53aecd5a7d24ac9c8fcd92975acd0e830fead4ee4583d3d3d49bb64651946e41
   csv (3.3.0) sha256=0bbd1defdc31134abefed027a639b3723c2753862150f4c3ee61cab71b20d67d
   csv_builder (0.1.0)
-  cvss-suite (4.1.2) sha256=b2ced80bb9573d29cd42f728e7653b3df740b480bc18f8ab1c350fde859896f5
+  cvss-suite (4.1.3) sha256=625cdebdf2a1a940450d11bb8c8637b96c7004fb48559d59700079ca7a6f875c
   danger (9.4.2) sha256=43e552c6731030235a30fdeafe703d2e2ab9c30917154489cb0ecd9ad3259d80
   danger-gitlab (8.0.0) sha256=497dd7d0f6513913de651019223d8058cf494df10acbd17de92b175dfa04a3a8
   database_cleaner-active_record (2.2.2) sha256=88296b9f3088c31f7c0d4fcec10f68e4b71c96698043916de59b04debec10388
@@ -2678,11 +2811,14 @@ CHECKSUMS
   declarative_policy (2.1.0) sha256=f9ab705da726174bde97785c319311a4abf6143c07862f882bd8bc1b69361eea
   derailed_benchmarks (2.2.1) sha256=654280664fded41c9cd8fc27fc0fcfaf096023afab90eb4ac1185ba70c5d4439
   descendants_tracker (0.0.4) sha256=e9c41dd4cfbb85829a9301ea7e7c48c2a03b26f09319db230e6479ccdc780897
-  devfile (0.5.2) sha256=2398cc38726f7bce03088eb74e4157f7839b353e36a488565e3fcc7739cd613d
+  devfile (0.5.1) sha256=089dca6afd8fffedd315f068d231f8acddaee514ef5ee6c04cfcaa13033c09ad
+  devfile (0.5.1-aarch64-linux) sha256=6cbe39a779cc3ef4aedc1c4a6e3b1f0a401ed163dea898ad3e5d1182f1e45e05
+  devfile (0.5.1-arm64-darwin) sha256=f66a0a7436bab535195f9caaee9da630a7b1a36ed3031eaff90c9553d9c672cb
+  devfile (0.5.1-x86_64-linux) sha256=92b4f7cd105977dc1381919bc75fb14c8a03f6c075f78c4ae1528273a4e89958
   device_detector (1.1.3) sha256=c5fe3fe42cab2e8aa01f193b2074b8bb1510373ce47127206f28c7dea75a9c79
   devise (4.9.4) sha256=920042fe5e704c548aa4eb65ebdd65980b83ffae67feb32c697206bfd975a7f8
   devise-pbkdf2-encryptable (0.0.0)
-  devise-two-factor (5.1.0) sha256=eae7a78d562e7ff623932d6c0b7f1bdbd4809c63e916875da3db7abaadf41ae1
+  devise-two-factor (6.4.0) sha256=09e3a23b5b9ae7da78881d238a89860454d9e2ba0912e175576e9c028757adb4
   diff-lcs (1.5.0) sha256=49b934001c8c6aedb37ba19daec5c634da27b318a7a3c654ae979d6ba1929b67
   diff_match_patch (0.1.0)
   diffy (3.4.4) sha256=79384ab5ca82d0e115b2771f0961e27c164c456074bd2ec46b637ebf7b6e47e3
@@ -2691,7 +2827,7 @@ CHECKSUMS
   domain_name (0.5.20190701) sha256=000a600454cb4a344769b2f10b531765ea7bd3a304fe47ed12e5ca1eab969851
   doorkeeper (5.8.2) sha256=a73d07aeaf590b1e7e2a35390446f23131c9f37bc0561653e514d3973f4d50d3
   doorkeeper-device_authorization_grant (1.0.3) sha256=94c3ac12a0d50942850ecd58ed64298b397a5e903e8880cb68d4085600932679
-  doorkeeper-openid_connect (1.8.11) sha256=52a9a9c03176f5fa54d04b8f5378902beff126e3423fa447288b168276b7f6d3
+  doorkeeper-openid_connect (1.9.0) sha256=f689f727bbe60a0e7174b00ccd1e38c52a12c0c34dd096d49018b98cfaec7eb3
   dotenv (2.7.6) sha256=2451ed5e8e43776d7a787e51d6f8903b98e446146c7ad143d5678cc2c409d547
   drb (2.2.3) sha256=0b00d6fdb50995fe4a45dea13663493c841112e4068656854646f418fda13373
   dry-cli (1.0.0) sha256=28ead169f872954dd08910eb8ead59cf86cd18b4aab321e8eeefe945749569f0
@@ -2700,14 +2836,14 @@ CHECKSUMS
   dry-logic (1.6.0) sha256=da6fedbc0f90fc41f9b0cc7e6f05f5d529d1efaef6c8dcc8e0733f685745cea2
   dry-types (1.8.3) sha256=b5d97a45e0ed273131c0c3d5bc9f5633c2d1242e092ee47401ce7d5eab65c1bc
   dumb_delegator (1.0.0) sha256=ff5e411816d2d8ad8e260b269e712ae3839dddb0f9f8e18d3b1a3fe08f6d2e94
-  duo_api (1.4.0) sha256=06a6b406184e6e4b14af7389ac3990e667fb8509a1feba7de3af2f78d98c0877
+  duo_api (1.5.1) sha256=77ff891716970f07fb83d28a7562cbe364b6037fa84643dc67a6787e0db5ba9e
   ed25519 (1.4.0) sha256=16e97f5198689a154247169f3453ef4cfd3f7a47481fde0ae33206cdfdcac506
   elasticsearch (7.17.11) sha256=ed080f085d939f21d07f424ebcea95326e4bdb5f770a8f33aac699374f2ffc86
   elasticsearch-api (7.17.11) sha256=fed8f7b64493c97cf3984a33396a798204b54b8e1b01c5b6c099fa3fd4209107
   elasticsearch-model (7.2.1) sha256=8b5c4b57664bb29f4854fa39603b5ccecfbf9b22fee87bcd16917321dae6a20b
   elasticsearch-rails (7.2.1) sha256=0750dc0e956358d9a3a0912a8186c266ef19f8de0b178c61996ed1a6998156e4
   elasticsearch-transport (7.17.11) sha256=d18057d5295e4c39fe80084ede9e00e9c0e0d74580348985f8677b2fb7f70f03
-  email_reply_trimmer (0.1.6) sha256=9fede222ce660993e4e2e3dad282535ceb7914e246eb8302c19aa9e021f7326e
+  email_reply_trimmer (0.2.0) sha256=05843fa5ee1a2037235f1f3c876e922f613e2b4406fea5bb14212d1708d6c525
   email_spec (2.3.0) sha256=df23be7a131186f7a3d5be3b35eaac9196f9ac13bd26c9c3d59341e13d852d11
   email_validator (2.2.4) sha256=5ab238095bec7aef9389f230e9e0c64c5081cdf91f19d6c5cecee0a93af20604
   encryptor (3.0.0) sha256=abf23f94ab4d864b8cea85b43f3432044a60001982cda7c33c1cd90da8db1969
@@ -2724,8 +2860,8 @@ CHECKSUMS
   extended-markdown-filter (0.7.0) sha256=c8eeef7409fbae18c6b407cd3e4eeb5d25c35cb08fe1ac06f375df3db2d4f138
   factory_bot (6.5.0) sha256=6374b3a3593b8077ee9856d553d2e84d75b47b912cc24eafea4062f9363d2261
   factory_bot_rails (6.5.1) sha256=d3cc4851eae4dea8a665ec4a4516895045e710554d2b5ac9e68b94d351bc6d68
-  faraday (2.13.4) sha256=c719ff52cfd0dbaeca79dd83ed3aeea3f621032abf8bc959d1c05666157cac26
-  faraday-follow_redirects (0.3.0) sha256=d92d975635e2c7fe525dd494fcd4b9bb7f0a4a0ec0d5f4c15c729530fdb807f9
+  faraday (2.14.1) sha256=a43cceedc1e39d188f4d2cdd360a8aaa6a11da0c407052e426ba8d3fb42ef61c
+  faraday-follow_redirects (0.5.0) sha256=5cde93c894b30943a5d2b93c2fe9284216a6b756f7af406a1e55f211d97d10ad
   faraday-http-cache (2.5.0) sha256=64b7366d66e508e1c3dd855ebb20ce9da429330e412a23d9ebbc0a7a7b227463
   faraday-multipart (1.1.1) sha256=77a18ff40149030fd1aef55bb4fc7a67ce46419a8a3fcd010e28c2526e8d8903
   faraday-net_http (3.1.0) sha256=1627be414960d0131691190ff524506ba6607402a50fb6eccda9e64ca60f859f
@@ -2736,7 +2872,12 @@ CHECKSUMS
   fast_blank (1.0.1) sha256=269fc30414fed4e6403bc4a49081e1ea539f8b9226e59276ed1efaefabaa17ea
   fast_gettext (4.1.0) sha256=8e6b612676d601209662d2cd793ed4a067f834c8ca65ede793bacc9bcc1c2763
   ffaker (2.25.0) sha256=e485c5adf8195aac55662875b7f515469bca46d77b60d0e7d08db6861bcbec40
-  ffi (1.17.3) sha256=0e9f39f7bb3934f77ad6feab49662be77e87eedcdeb2a3f5c0234c2938563d4c
+  ffi (1.17.4) sha256=bcd1642e06f0d16fc9e09ac6d49c3a7298b9789bcb58127302f934e437d60acf
+  ffi (1.17.4-aarch64-linux-gnu) sha256=b208f06f91ffd8f5e1193da3cae3d2ccfc27fc36fba577baf698d26d91c080df
+  ffi (1.17.4-arm64-darwin) sha256=19071aaf1419251b0a46852abf960e77330a3b334d13a4ab51d58b31a937001b
+  ffi (1.17.4-x86-linux-gnu) sha256=38e150df5f4ca555e25beca4090823ae09657bceded154e3c52f8631c1ed72cf
+  ffi (1.17.4-x86_64-darwin) sha256=aa70390523cf3235096cf64962b709b4cfbd5c082a2cb2ae714eb0fe2ccda496
+  ffi (1.17.4-x86_64-linux-gnu) sha256=9d3db14c2eae074b382fa9c083fe95aec6e0a1451da249eab096c34002bc752d
   ffi-compiler (1.0.1) sha256=019f389b078a2fec9de7f4f65771095f80a447e34436b4588bcb629e2a564c30
   ffi-yajl (2.6.0) sha256=69baa612273991e4c79667464eb25f3feb169899aab33929a33b03234af24336
   fiber-annotation (0.2.0) sha256=7abfadf1d119f508867d4103bf231c0354d019cc39a5738945dec2edadaf6c03
@@ -2747,7 +2888,7 @@ CHECKSUMS
   flipper-active_record (1.3.6) sha256=0c172224e4024637abd47fbd1429ded2cd2042693757f3caa7b80f4bb06b2abe
   flipper-active_support_cache_store (1.3.6) sha256=c03c2d231e7f1f39b94b772fb856b4e5274697f87268497822cb117150cd1037
   fog-aliyun (0.4.0) sha256=8f2334604beb781eafbb9cd5f50141fbb2c7eb77c7f2b01f45c2e04db0e5cc38
-  fog-aws (3.33.1) sha256=20c7336ed978be6cbf2765844c53f30676288af98f1cb49945aa7b7b45a799a5
+  fog-aws (3.33.2) sha256=bd9c1b045f19daad8942d65d7e9c9c7c1cd144beeabde63e34df7c58a9bb0f5b
   fog-core (2.6.0) sha256=3fe08aa83a23cddce42f4ba412040c08f890d7ff04c175c0ee59119371245be6
   fog-google (1.29.4) sha256=5185b727cedbdd7710d0703cd513b4b80c2aa356d3616839f6a2b841fd467ce3
   fog-json (1.2.0) sha256=dd4f5ab362dbc72b687240bba9d2dd841d5dfe888a285797533f85c03ea548fe
@@ -2755,6 +2896,7 @@ CHECKSUMS
   fog-xml (0.1.5) sha256=52b9fea10701461dd3eaf9d9839702169b418dbbf50426786b9b74fade373bd6
   formatador (0.2.5) sha256=80821869ddacb79e72870ff4bb1531efacd278c04f2df26bc6b4529ee13582bd
   forwardable (1.3.3) sha256=f17df4bd6afa6f46a003217023fe5716ef88ce261f5c4cf0edbdeed6470cafac
+  freezolite (0.6.0) sha256=a1305e324738633a30904b50f085bebe7b43c64ebc1e23ce848ee0eeaf3b1dfd
   fugit (1.11.2) sha256=4c2e234f750c78d4514d0ca343a0b923847eac3846976fdb23ed4245d8fde6fe
   fuzzyurl (0.9.0) sha256=542efa80f2bcaadbdc402c2f0b572f2e335a1d53e375aecad68bbb3d86860c0f
   gapic-common (1.2.0) sha256=b477ec1eebbed7eed80efc04267369ce623e18b14e573c806e8920f76dc60dde
@@ -2764,24 +2906,29 @@ CHECKSUMS
   gettext (3.5.2) sha256=ada02c59aa7e9f56bd2522faedaed16421dd2f3ddb5fe28628c0be5abcbf3c74
   gettext_i18n_rails (1.13.0) sha256=d4a4739d928b6ce52a2d694d33a831dcb06c7c8e197b3172fc73dfaa20ac8ee6
   git (1.19.1) sha256=b0a422d9f6517353c48a330d6114de4db9e0c82dbe7202964a1d9f1fbc827d70
-  gitaly (18.10.0) sha256=7b809d0ba1895983ac0bf55974183d8c1e7011214faa41e725e4b0bf455a89ec
+  gitaly (18.11.2) sha256=1b6eba9ce3794d9bfa662d3b59ff9c70fb12cac4b3b8fb7ed0546e89b2b38c42
   gitlab (4.19.0) sha256=3f645e3e195dbc24f0834fbf83e8ccfb2056d8e9712b01a640aad418a6949679
   gitlab-active-context (0.0.1)
   gitlab-backup-cli (0.0.1)
   gitlab-chronic (0.10.6) sha256=a244d11a1396d2aac6ae9b2f326adf1605ec1ad20c29f06e8b672047d415a9ac
-  gitlab-cloud-connector (1.46.0) sha256=8188c8a7a91f3d220cd0feebe80c3bdf45a8380eb70076b136129deb68e48da9
+  gitlab-cloud-connector (1.47.0) sha256=1c16d8d0944e1d729f4b16eb482d6a8b09a5f13d2bda3a94c1d67163868fb63c
   gitlab-crystalball (1.1.3) sha256=ea9a90d659704a042d763ce6d343a9f664cd650e0787a19adec7036ea4390861
-  gitlab-dangerfiles (4.10.0) sha256=0adb9cfec58ffce42f68b1aef528503bdc89aed3994ba461c67e1d9246513e1c
-  gitlab-duo-workflow-service-client (0.7)
+  gitlab-dangerfiles (4.11.1) sha256=e0fda94e7581b76e46b41aa89d56abdf3bbb19d5c36902570de7c8beb8034031
+  gitlab-database-data_isolation (0.1.0)
+  gitlab-duo-workflow-service-client (0.8)
   gitlab-experiment (1.3.0) sha256=747c720edb6bd1a3f6974fbdd389a7f79d26a74a4f7927525104ecfe3281e6be
-  gitlab-fog-azure-rm (2.4.0) sha256=678b86e542a37eda10e63ca02d04c9ff998b771df4aabc1f87e5c20148cb360b
-  gitlab-gkg-proto (0.7.0) sha256=b840aa48567e2089a1646d25f807200a4a2f9caac9d94f2518ea3587bdfbc9a5
+  gitlab-fog-azure-rm (2.5.0) sha256=f10fd3f6667925e4ce97cea2fa707b926320c7b7fa06978788e2f452ee7f4db0
+  gitlab-gkg-proto (0.37.0) sha256=3cbb5eec14158a4122fc0131008989a0eb6d045ead993a0ad9d59b653f6ada71
   gitlab-glfm-markdown (0.0.41) sha256=f7ea03194aa760913c68bad76dbada3b96735b307453e1c88cbee0f8f90f0124
+  gitlab-glfm-markdown (0.0.41-aarch64-linux-gnu) sha256=ff8cfded556277cd8143820657cb8f6490305e8ea0382e87fafbc760662f00bf
+  gitlab-glfm-markdown (0.0.41-arm64-darwin) sha256=8589ed60fd91ee564378800926518a581fdb4198c657428af2242c495de2a342
+  gitlab-glfm-markdown (0.0.41-x86_64-darwin) sha256=964f5d32d09e47f1055d6b6b70fe67a9b412eb55e9008a8b1c0ba921b3206f2e
+  gitlab-glfm-markdown (0.0.41-x86_64-linux-gnu) sha256=66c6b35a496848a89cef8e664854173ae49afbd4ed8fd5026e0955c27cf822ae
   gitlab-grape-openapi (0.1.0)
   gitlab-housekeeper (0.1.0)
   gitlab-http (0.1.0)
   gitlab-kas-grpc (18.5.0.pre.rc4) sha256=8efe8bc957572bad2ee90c22836b285eb65574591db5c8a7bc8080f69ddebcc6
-  gitlab-labkit (1.5.1) sha256=07c88cb63ae6d44ffca734e4c5a9c89b4143317c1daa6c85d0771acedbfbb727
+  gitlab-labkit (2.0.0) sha256=16292af3f0cfc0ca94aaff9a007b1ee88bb44e6dc4b362628ad21eba82eb59b7
   gitlab-license (2.6.0) sha256=2c1f8ae73835640ec77bf758c1d0c9730635043c01cf77902f7976e826d7d016
   gitlab-mail_room (1.0.0) sha256=00910bc000ff819f8e2030fd2260f7b40f025c410b11b82de8f67de7922c0159
   gitlab-markup (2.0.0) sha256=951a1c871463a8f329e6c002b2da337cd547febcc1e33d84df4a212419fba02e
@@ -2791,20 +2938,23 @@ CHECKSUMS
   gitlab-safe_request_store (0.1.0)
   gitlab-schema-validation (0.1.0)
   gitlab-sdk (0.3.1) sha256=48ba49084f4ab92df7c7ef9f347020d9dfdf6ed9c1e782b67264e98ffe6ea710
-  gitlab-secret_detection (0.40.0) sha256=d9ecde145b0aa6a609ff2fda734562a07437150a83dc585b57bf0d7609e07ca0
+  gitlab-secret_detection (0.41.0) sha256=6d64971af2c4b37eda3eb79f61ef6cbe67e841e730fc52e1549a9ceb34c3329c
   gitlab-security_report_schemas (0.2.0.min15.0.0.max15.2.4) sha256=7ed47c45096101514327ad512979a672889ac899531bfc948cb5905c816e39bf
   gitlab-sidekiq-fetcher (0.12.1)
-  gitlab-styles (13.1.0) sha256=46c7c5729616355868b7b40a4ffcd052b36346076042abe8cafaee1688cbf2c1
+  gitlab-styles (14.0.0) sha256=68b18899d795f70b67d6f190871c18cf194833cb57b4ea4c3070548464565783
   gitlab-topology-service-client (0.1)
   gitlab-utils (0.2.0)
   gitlab_chronic_duration (0.12.0) sha256=0d766944d415b5c831f176871ee8625783fc0c5bfbef2d79a3a616f207ffc16d
   gitlab_omniauth-ldap (2.3.0) sha256=167036fe37c2711f2e1d2047260766e4c9b31ac37dfc873b101bcd4ea2a3a3b4
-  gitlab_quality-test_tooling (3.10.1) sha256=5a2e7a2d2369d7b15be023adfc04e36874650687c9afe7e2457abcb876742872
-  gitlab_query_language (0.26.0) sha256=3476c5e141766c24d02f3bb96dbf7e57e5b5d1a35adef58c601a9890c55e6c5d
+  gitlab_quality-test_tooling (3.14.0) sha256=05bc9167e881e46c0982c0a47c5d30cb8c447569f767f1f309da0b9c5c90c163
+  gitlab_query_language (0.27.1) sha256=ddd6e80ca09ca018e795598deacd1b8812ed9d6c87a3f8180dbdce472b89077c
+  gitlab_query_language (0.27.1-aarch64-linux-gnu) sha256=00136630b9747e49a8470a11a8f0e48fbd2b2487751719b7128e65732f5a329c
+  gitlab_query_language (0.27.1-arm64-darwin) sha256=aa8ade82aa5e991dd1075df979678246932f1aa11b4941414dc38c656333d1a5
+  gitlab_query_language (0.27.1-x86_64-darwin) sha256=13a20ba5cd377cf6c47a3b649b609b52fc72d437711b184dcafe209c2a2ec5f8
+  gitlab_query_language (0.27.1-x86_64-linux-gnu) sha256=f4483b154a5ef1bd7805a07d19ce8acd778b65abcb1de162d20177896aa36774
   globalid (1.1.0) sha256=b337e1746f0c8cb0a6c918234b03a1ddeb4966206ce288fbb57779f59b2d154f
   gon (6.5.0) sha256=2226e3c921f26bde69b4586660bb67e3252b3a8a3caaa955a77212188a5d81ab
   google-apis-androidpublisher_v3 (0.92.0) sha256=e700dea8608494ff70fd9c9ed10c3caa8323b9a15eea85098db65d1178e79035
-  google-apis-bigquery_v2 (0.90.0) sha256=8b622912b45fb7ab75f0600a062db17b7d25a057265366750512e574ec333d7b
   google-apis-cloudbilling_v1 (0.22.0) sha256=db2b72aebdc2664fd5095264a160cf757119ba3a83a036817b78d0d2ad7886fd
   google-apis-cloudresourcemanager_v1 (0.44.0) sha256=be96723ff28664407dd86724857f9cd7402bf6dd63ef4257cbd42002816705f8
   google-apis-compute_v1 (0.129.0) sha256=b767d4564519fc47fc86b10159ec27ad515292e92b979b10720b02fd3b06f5d3
@@ -2820,7 +2970,6 @@ CHECKSUMS
   google-apis-sqladmin_v1beta4 (0.41.0) sha256=551553b6481879f1cd39fb83cc2a2c2ea9334afc4bf261b96900dd559f96749d
   google-apis-storage_v1 (0.56.0) sha256=b4e8d90db1a2085de66fbb915b3bcd792179dfcc573320900435f91b8d0d182b
   google-cloud-artifact_registry-v1 (0.11.0) sha256=ba80d2dce9767e663931ded7929b7f8bf5983a6e2ea68078e27e7ca9a940783e
-  google-cloud-bigquery (1.62.0) sha256=ec47296f978acae7eb7df70b09bda152e7e4d45fe87c07413abc6f72f0cf0e65
   google-cloud-common (1.9.0) sha256=a593848e01c23705571df08e5b3019db4a09d7c91b2aff98c85ca36332a7a82c
   google-cloud-compute-v1 (2.6.0) sha256=b96059b33ffc2f25644d20161a0c1aa1331197073c2e44786b18f8b670f1141e
   google-cloud-core (1.7.0) sha256=748028a48530ea5bce159722eb7a02cd0562f1c52f0569e9ed69da3cba6b4f35
@@ -2831,9 +2980,14 @@ CHECKSUMS
   google-cloud-storage_transfer (1.2.0) sha256=132901f50889e02a0d378e6117c6408cbfc4fdbd15c9d31fabec4f4189ef1658
   google-cloud-storage_transfer-v1 (0.8.0) sha256=9dbef80275db556e046bb24139ca6559affe641d1e38b2537b8caaf2f8896176
   google-logging-utils (0.1.0) sha256=70950b1e49314273cf2e167adb47b62af7917a4691b580da7e9be67b9205fcd5
-  google-protobuf (4.33.5) sha256=1b64fb774c101b23ac3f6923eca24be04fd971635d235c4cd4cfe0d752620da0
+  google-protobuf (4.34.1) sha256=347181542b8d659c60f028fa3791c9cccce651a91ad27782dbc5c5e374796cdc
+  google-protobuf (4.34.1-aarch64-linux-gnu) sha256=f9c07607dc139c895f2792a7740fcd01cd94d4d7b0e0a939045b50d7999f0b1d
+  google-protobuf (4.34.1-arm64-darwin) sha256=2745061f973119e6e7f3c81a0c77025d291a3caa6585a2cd24a25bbc7bedb267
+  google-protobuf (4.34.1-x86-linux-gnu) sha256=b6da7891fe96b13038e5435d8ac8b8a84d78a468147a48a377fe8da40aba1c88
+  google-protobuf (4.34.1-x86_64-darwin) sha256=4dc498376e218871613589c4d872400d42ad9ae0c700bdb2606fe1c77a593075
+  google-protobuf (4.34.1-x86_64-linux-gnu) sha256=87088c9fd8e47b5b40ca498fc1195add6149e941ff7e81c532a5b0b8876d4cc9
   googleapis-common-protos (1.7.0) sha256=b684c0b9e1800c6bb89ad64e0dcabb377a01a31ff7aec1bfebd26c183b2c9241
-  googleapis-common-protos-types (1.20.0) sha256=5e374b06bcfc7e13556e7c0d87b99f1fa3d42de6396a1de3d8fc13aefb4dd07f
+  googleapis-common-protos-types (1.22.0) sha256=f97492b77bd6da0018c860d5004f512fe7cd165554d7019a8f4df6a56fbfc4c7
   googleauth (1.14.0) sha256=62e7de11791890c3d3dc70582dfd9ab5516530e4e4f56d96451fd62c76475149
   gpgme (2.0.26) sha256=1aebfd2eb83b745341e6f416f318597568af5ad4d7d1f55bfab4f1078123abaa
   grape (2.0.0) sha256=3aeff94c17e84ccead4ff98833df691e7da0c108878cc128ca31f80c1047494a
@@ -2843,9 +2997,14 @@ CHECKSUMS
   grape-swagger-entity (0.7.1) sha256=082144811cdd14c15b9d9f0a27a4e3ff9c27c7081130d334a3de59953769b37d
   grape_logging (1.8.4) sha256=efcc3e322dbd5d620a68f078733b7db043cf12680144cd03c982f14115c792d1
   graphlyte (1.0.0) sha256=b5af4ab67dde6e961f00ea1c18f159f73b52ed11395bb4ece297fe628fa1804d
-  graphql (2.5.11) sha256=1169ffc6e215fd4d60056455b672c40a0cafa0607262049c2cca343b0f6bdb5c
+  graphql (2.5.23) sha256=cb59b2e67e4c23ce675755e4671136124d1016e14e9103de6d20cc11a58ec190
   graphql-docs (5.2.0) sha256=44d41724529f531adf9265ded7478b74b0c4b927cddc8b9f114337a73f32de08
   grpc (1.80.0) sha256=2ded0c8bc3a1f3d34b8c790e00dd0120768ba0e9f9fd841e1dc67f7a2566d07d
+  grpc (1.80.0-aarch64-linux-gnu) sha256=1c15048887224575cb38026fea5b9abb14ae955bfce8beb0701e0946959a8520
+  grpc (1.80.0-arm64-darwin) sha256=c4b5871ad7673c526b64e54e70a99d84e35e2c26a1fc9a91f9c3341c7821e0c7
+  grpc (1.80.0-x86-linux-gnu) sha256=b9fbce2480b2f1e965a6241a5df033c0d20a19f99a637e3cb8a12a6f5c3e68c6
+  grpc (1.80.0-x86_64-darwin) sha256=4484d1280a43f94e8f1ab6ae53d282a4832f8ffb61b6996f43fc50716f464f1c
+  grpc (1.80.0-x86_64-linux-gnu) sha256=25ba8beb5438152fb60656161dc729c1258c6963ec568361f601e19b2fb7ac23
   grpc-google-iam-v1 (1.11.0) sha256=8f0aa8a8503b3e001cb1561f31e43aa0445752fb675334afa1afac7f023f368c
   grpc_reflection (0.4.0) sha256=72d3e743f049821f976a4280b3d1b1a3369775121d75d35954f0e139e4e3f0cf
   gssapi (1.3.1) sha256=c51cf30842ee39bd93ce7fc33e20405ff8a04cda9dec6092071b61258284aee1
@@ -2871,15 +3030,15 @@ CHECKSUMS
   http-form_data (2.3.0) sha256=cc4eeb1361d9876821e31d7b1cf0b68f1cf874b201d27903480479d86448a5f3
   httparty (0.24.2) sha256=8fca6a54aa0c4aa4303a0fd33e5e2156175d6a5334f714263b458abd7fda9c38
   httpclient (2.9.0) sha256=4b645958e494b2f86c2f8a2f304c959baa273a310e77a2931ddb986d83e498c8
-  i18n (1.14.7) sha256=ceba573f8138ff2c0915427f1fc5bdf4aa3ab8ae88c8ce255eb3ecf0a11a5d0f
+  i18n (1.14.8) sha256=285778639134865c5e0f6269e0b818256017e8cde89993fdfcbfb64d088824a5
   i18n_data (0.13.1) sha256=e5aa99b09a69b463bb0443fc1f9540351a49f3d1541c5e91316bafa035c63f66
-  icalendar (2.10.3) sha256=0ebfc2672f9fa77b86b4d8c0e25e9b2319aad45a33319fed06d0be8ddd0cd485
+  icalendar (2.12.2) sha256=b63dfb784b4d1214bceaec40097e61eaf78c8691929d7f217779956d9019d9f5
   ice_cube (0.16.4) sha256=da117e5de24bdc33931be629f9b55048641924442c7e9b72fedc05e5592531b7
   ice_nine (0.11.2) sha256=5d506a7d2723d5592dc121b9928e4931742730131f22a1a37649df1c1e2e63db
   imagen (0.2.0) sha256=369fe912078877dba92615ebfc6f35a7d833e31f24f47bdd3ad5371a4139e24b
   invisible_captcha (2.3.0) sha256=309ee5a5e891ecfb732c85b12f1aa9252a648df6f2761b3b41205e824e30ff15
   io-console (0.8.2) sha256=d6e3ae7a7cc7574f4b8893b4fca2162e57a825b223a177b7afa236c5ef9814cc
-  io-event (1.14.3) sha256=c15cbbdd3b1cbf65bb87153a4c5bbc6d7dc07a357f6154601d5290f39ab2ac06
+  io-event (1.14.5) sha256=68ac367032a3873416dc2e0b67332dfaf2e23b65b58e6465d301c7e5cd9163b1
   ipaddress (0.8.3) sha256=85640c4f9194c26937afc8c78e3074a8e7c97d5d1210358d1440f01034d006f5
   ipynbdiff (0.4.8)
   irb (1.18.0) sha256=de9454a0703a54704b9811a5ef31a60c86949fbf4013fcf244fabc7c775248e3
@@ -2887,12 +3046,12 @@ CHECKSUMS
   jaro_winkler (1.6.1) sha256=c056b61bbf7f1fc0151bde7c8f589a2d666d42d0cdb889395b9b73b328e1b393
   jira-ruby (2.3.0) sha256=abf26e6bff4a8ea40bae06f7df6276a5776905c63fb2070934823ca54f62eb62
   jmespath (1.6.2) sha256=238d774a58723d6c090494c8879b5e9918c19485f7e840f2c1c7532cf84ebcb1
-  js-routes (2.3.6) sha256=a46220beadddf3ee4dc7a1e0b908587c0b3418d44d84ef7970ed72e849598474
-  js_regex (3.13.0) sha256=bda9e25eebd0b48c0e927c611be0be8c5ae0a7d4491ebdb3d1c94413588c1901
+  js-routes (2.3.7) sha256=56e97bb300f34f2c569268bf28358b7ed82f455a32975c7c7d38befa76b722ed
+  js_regex (3.14.0) sha256=49547691c75cf201769f7e432fde3e2071cbd3e0c4ef42bd341e260b683350a3
   json (2.19.2) sha256=e7e1bd318b2c37c4ceee2444841c86539bc462e81f40d134cf97826cb14e83cf
   json-jwt (1.16.6) sha256=ab451f9cd8743cecc4137f4170806046c1d8a6d4ee6e8570e0b5c958409b266c
   json_schemer (2.4.0) sha256=56cb6117bb5748d925b33ad3f415b513d41d25d0bbf57fe63c0a78ff05597c24
-  jsonb_accessor (1.4) sha256=010e087cb843e76b6a624d68af918a8efd6b0ff2ae25b6f0acebdfea45f776ab
+  jsonb_accessor (1.4.2) sha256=e0197ce6f13b2ef489a67aa1c63c634e8efe49553191b5e61e9e2628dd554013
   jsonpath (1.1.2) sha256=6804124c244d04418218acb85b15c7caa79c592d7d6970195300428458946d3a
   jwt (2.10.3) sha256=e4d9352fbc7309b1a7448c7dd713dfe4d8c47077af80759cdbed8f878ea0b484
   kaminari (1.2.2) sha256=c4076ff9adccc6109408333f87b5c4abbda5e39dc464bd4c66d06d9f73442a3e
@@ -2910,7 +3069,8 @@ CHECKSUMS
   letter_opener_web (3.0.0) sha256=3f391efe0e8b9b24becfab5537dfb17a5cf5eb532038f947daab58cb4b749860
   libyajl2 (2.1.0) sha256=aa5df6c725776fc050c8418450de0f7c129cb7200b811907c4c0b3b5c0aea0ef
   license_finder (7.2.1) sha256=179ead19b64b170638b72fd16024233813673ac9d20d5ba75ae0b4444887ef14
-  licensee (9.18.0) sha256=3e83db984fb7e4e51c98fea0e434138dcb6112f8c26dc7693734a4f8df99df77
+  licensee (10.0.0) sha256=b0832ae91bd84bf7b4ec16dca72966b1116e10b6fc8a3c050517d20654b46d3b
+  lint_roller (1.1.0) sha256=2c0c845b632a7d172cb849cc90c1bce937a28c5c8ccccb50dfd46a485003cc87
   listen (3.9.0) sha256=db9e4424e0e5834480385197c139cb6b0ae0ef28cc13310cfd1ca78377d59c67
   llhttp-ffi (0.5.1) sha256=9a25a7fc19311f691a78c9c0ac0fbf4675adbd0cca74310228fdf841018fa7bc
   locale (2.1.4) sha256=522f9973ef3eee64aac9bca06d21db2fba675fa3d2cf61d21f42d1ca18a9f780
@@ -2918,7 +3078,7 @@ CHECKSUMS
   logger (1.7.0) sha256=196edec7cc44b66cfb40f9755ce11b392f21f7967696af15d274dde7edff0203
   lograge (0.11.2) sha256=4cbd1554b86f545d795eff15a0c24fd25057d2ac4e1caa5fc186168b3da932ef
   loofah (2.25.1) sha256=d436c73dbd0c1147b16c4a41db097942d217303e1f7728704b37e4df9f6d2e04
-  lookbook (2.3.13) sha256=acfa04a1ba7a87b057c222d78a2d72763546f52549e97590993344c8373f6d21
+  lookbook (2.3.14) sha256=c11a693bde9915b553c4463440ad5e750829f90bff08abdb6b8610373864cd7c
   lru_redux (1.1.0) sha256=ee71d0ccab164c51de146c27b480a68b3631d5b4297b8ffe8eda1c72de87affb
   lumberjack (1.2.7) sha256=a5c6aae6b4234f1420dbcd80b23e3bca0817bd239440dde097ebe3fa63c63b1f
   mail (2.9.0) sha256=6fa6673ecd71c60c2d996260f9ee3dd387d4673b8169b502134659ece6d34941
@@ -2967,10 +3127,14 @@ CHECKSUMS
   nkf (0.2.0) sha256=fbc151bda025451f627fafdfcb3f4f13d0b22ae11f58c6d3a2939c76c5f5f126
   no_proxy_fix (0.1.2) sha256=4e9b4c31bb146de7fcf347dc1087bb13ac2039b56d50aa019e61036256abcd00
   nokogiri (1.19.3) sha256=78312cbac32a40c812780d9678221b79d51288eec00054c1a8d15f7ce05960e8
+  nokogiri (1.19.3-aarch64-linux-gnu) sha256=46b89e5d7b9e844c2ee360794240c6ea2a4e6fa0c5892a4ed487db621224b639
+  nokogiri (1.19.3-arm64-darwin) sha256=71b9bd424b1b7abc18b05052a1a3cfd3627abdca62be280854cc411791357e42
+  nokogiri (1.19.3-x86_64-darwin) sha256=77f3fba57d46c53ab31e62fc6c28f705109d1bf6264356c76f132b2be5728d4d
+  nokogiri (1.19.3-x86_64-linux-gnu) sha256=2f5078620fe12e83669b5b17311b32532a8153d02eee7ad06948b926d6080976
   notiffany (0.1.3) sha256=d37669605b7f8dcb04e004e6373e2a780b98c776f8eb503ac9578557d7808738
   numerizer (0.2.0) sha256=e58076d5ee5370417b7e52d9cb25836d62acd1b8d9a194c308707986c1705d7b
   oauth (0.5.6) sha256=4085fe28e0c5e2434135e00a6555294fd2a4ff96a98d1bdecdcd619fc6368dff
-  oauth2 (2.0.10) sha256=8f132679598d21885d4bcc68d7e7e6ef0a29f9a782abca00d67d884280dc3a42
+  oauth2 (2.0.18) sha256=bacf11e470dfb963f17348666d0a75c7b29ca65bc48fd47be9057cf91a403287
   observer (0.1.2) sha256=d8a3107131ba661138d748e7be3dbafc0d82e732fffba9fccb3d7829880950ac
   octokit (9.2.0) sha256=4fa47ff35ce654127edf2c836ab9269bcc8829f5542dc1e86871f697ce7f4316
   ohai (19.1.24) sha256=a15f3fd2298321a494c536a7af0e97020d71e4034963d42598bd4f33eacd7758
@@ -2991,38 +3155,39 @@ CHECKSUMS
   omniauth-shibboleth-redux (2.0.0) sha256=e9b353fd103405fcc8549e8510b9cad857acf0b286d764fac5dba8a93ab8ffe1
   omniauth_crowd (2.4.0)
   omniauth_openid_connect (0.8.0) sha256=1f2f3890386e2a742221cee0d2e903b78d874e6fab9ea3bfa31c1462f4793d25
+  open3 (0.2.1) sha256=8e2d7d2113526351201438c1aa35c8139f0141c9e8913baa007c898973bf3952
   open4 (1.3.4) sha256=a1df037310624ecc1ea1d81264b11c83e96d0c3c1c6043108d37d396dcd0f4b1
   openid_connect (2.3.1) sha256=5d808380cff80d78e3d3d54cfaebe2d6461d835c674faa29e2314a402c1b2182
   opensearch-ruby (3.4.0) sha256=0a8621686bed3c59b4c23e08cbaef873685a3fe4568e9d2703155ca92b8ca05d
   openssl (3.3.2) sha256=7f4e01215dc9c4be1fca71d692406be3e6340b39c1f71a47fea9c497decd0f6c
   openssl-signature_algorithm (1.3.0) sha256=a3b40b5e8276162d4a6e50c7c97cdaf1446f9b2c3946a6fa2c14628e0c957e80
-  opentelemetry-api (1.7.0) sha256=ccfd264ea6f2db5bf4185e3c07a1297977b44a944e2ce65457c4fe63a697214f
-  opentelemetry-common (0.21.0) sha256=fe891a44583a20bc3217b324aec76d066504494951682d391cfd57d40cd01c98
+  opentelemetry-api (1.9.0) sha256=d24065dd26583babd8d498d38ea35f74dfa193fb7102512e6e161649440079fb
+  opentelemetry-common (0.24.0) sha256=f1647b233b8ac667feeb74d66a65b702008d9ab55aae825c220b4fe2c14fa773
   opentelemetry-exporter-otlp (0.31.1) sha256=5358be17d7849cbcc4f49e1fc24105edc780a6f96c8e57b64192ab9a8e47474a
-  opentelemetry-helpers-mysql (0.4.0) sha256=d309c0b20825bdd14d4dbc75e0d3b381ffdad37d16424ceca3cb8453d9cb5a4f
-  opentelemetry-helpers-sql (0.3.0) sha256=4bb08017d6a16dd41c4d1c53c7fd30f9c5bb691195d8b458933724627b3f37f9
-  opentelemetry-helpers-sql-processor (0.4.0) sha256=ec238d7a2887219bd247dc31d0eb8a1a03d414a899963b68e14bb9f4d18b23f4
-  opentelemetry-instrumentation-action_mailer (0.6.1) sha256=8384866bdb066ae14b9a1fe686ffaf1f23468326a35af64390c0395fcd471057
-  opentelemetry-instrumentation-action_pack (0.15.1) sha256=84fade740783caeebf260aaefcbf8f1a7a4c49f946944ff520a2fb1d6b07f273
-  opentelemetry-instrumentation-action_view (0.11.2) sha256=e6a099015d672dabc19993d6fca99ef1e7210361ef21549a6e2076a67719fafc
-  opentelemetry-instrumentation-active_job (0.10.1) sha256=aea1311224c20d064a8f218a44299171152dc36eeb531b9eba84bed8b3942a89
+  opentelemetry-helpers-mysql (0.6.0) sha256=7eeb5e6950c434775a8cf28b5fde4defc12e8b865c86479ce3119fcf593d9337
+  opentelemetry-helpers-sql (0.4.0) sha256=b10e8c3a2cca28a98af951bbb3e4efdc59e68b25ba0825e055574af543420afb
+  opentelemetry-helpers-sql-processor (0.5.0) sha256=b199241bc9451fcbd9f00b2f454830af19d4ca27c2219ea379c9b0d53cd0e0f1
+  opentelemetry-instrumentation-action_mailer (0.7.0) sha256=197f935aa37776a725bfb6aeb7e60da2ebb5d5489b11c908bd6e8f51f15c07f2
+  opentelemetry-instrumentation-action_pack (0.17.0) sha256=ab78d8bed50554fa097b39fe3351857bc2ab1566fbfb9bcffaba1b9bbf089fd4
+  opentelemetry-instrumentation-action_view (0.12.0) sha256=2a5615954ef95068f3f768e6c6c35b93aff81cf8ca8399c31fbaa47474e2d732
+  opentelemetry-instrumentation-active_job (0.11.0) sha256=baf70048ac2eea6c228ab71706bc458e570cab7465c7f0e81afaf59ab7e86a8d
   opentelemetry-instrumentation-active_model_serializers (0.24.0) sha256=8fe81e44167d17e45d9acfa588d20140c7640c323e58aca99e266de1bb3fce15
-  opentelemetry-instrumentation-active_record (0.11.1) sha256=1b083f34eea0449f8d6f4370b3fb4b935757fac6e4e538e67bb98211809e7c92
-  opentelemetry-instrumentation-active_storage (0.3.1) sha256=f89b0fef54921f17c0c4c38a6e0926d29afabd0ac98436fcdbb8bde85dfde89e
-  opentelemetry-instrumentation-active_support (0.10.1) sha256=82ea98367158797e33c6de96581f10aa4fe8adf0ebec832dcff5fd04c59bc57d
+  opentelemetry-instrumentation-active_record (0.12.0) sha256=2b3f1b79c10096cee2e5a59185137988244868165ce14ba6e7c74c05cf5fb6ef
+  opentelemetry-instrumentation-active_storage (0.4.0) sha256=f74a7c0186cf1079d4a726acd6844837a6faf4fb800b977852e8d347bb7f3035
+  opentelemetry-instrumentation-active_support (0.11.0) sha256=7bda5ded233095141be4472a453030558635a4923af0ab191dcc532dd6a5d968
   opentelemetry-instrumentation-all (0.89.1) sha256=6a7de5fd7498024a34eecb63f3d69e8d3e1a3c7933bfef444e1d64e8c2b69f04
   opentelemetry-instrumentation-anthropic (0.3.0) sha256=09bd9b4ba6189389a6c0f7ba49f1d11f387d93b411ab585137a48b59925a48de
   opentelemetry-instrumentation-aws_lambda (0.6.0) sha256=1a3161393cfe9bc9eddd81a0668d076c38a0a2c3d5df40e95d02f5a8fcd3334c
   opentelemetry-instrumentation-aws_sdk (0.11.0) sha256=67a21e754ddf51e2bb8c3e46e116aa9158d8db800f34c2a9b1e0da5a6ca911e3
-  opentelemetry-instrumentation-base (0.25.0) sha256=642a3a7f08354e6e969423327a4fa67ed2cca7ac6fe5ee09e55b17d1c576da27
+  opentelemetry-instrumentation-base (0.26.0) sha256=fdec8bff9a8de04d113bd4e8d490b17414c92d6c79dd457dfa079c97ba922be0
   opentelemetry-instrumentation-bunny (0.24.0) sha256=1ec484e48a5f42a1d0c33e8e6bc7e9e78dd80f3ed9d63520b8a22ba564aa2585
   opentelemetry-instrumentation-concurrent_ruby (0.24.0) sha256=229bd8b72000c59de693609bb637b8a9114992f5e0ab03730d7fd7ef91f7d1d2
-  opentelemetry-instrumentation-dalli (0.29.0) sha256=a2686650545609e8d7e281c9fd1aef529ab578ef2dcf9a6258737e4ba214bc2f
+  opentelemetry-instrumentation-dalli (0.29.2) sha256=21b82772ced1529288c7f08285d44d5690de11f3d275e24558a062f39a270f4f
   opentelemetry-instrumentation-delayed_job (0.25.1) sha256=47f35b10d2bfd9ac7c2bbbe10dea095a2e25db2a84f5351860ead969d180c3ec
   opentelemetry-instrumentation-ethon (0.26.0) sha256=d4461082c84e8912ab1204340f31cae4aba58b4ae2a854d517b27116750e3752
   opentelemetry-instrumentation-excon (0.26.1) sha256=a856816c98d45ff4cd3ec3b0d7fc1e5e340390f47478f882eb4a688cfc678fef
   opentelemetry-instrumentation-faraday (0.30.1) sha256=526822c0575aba333e53bfdb26a4a7b6a30c9cb1b1d400d514d891f4507732f9
-  opentelemetry-instrumentation-grape (0.5.0) sha256=b9fcbe13b015b663577b8bde5b419c297da2588d0a022f4ce40f9ffc49df7624
+  opentelemetry-instrumentation-grape (0.5.1) sha256=a623608ef10e96c413f4d50b840082bf1ab9700126185d89ddbc8a29b49ec0ef
   opentelemetry-instrumentation-graphql (0.31.2) sha256=a4455f225427f8f9058247c8c0b351b8932567913c35ef049f7958801d401b1f
   opentelemetry-instrumentation-grpc (0.4.1) sha256=5ffa2bb1d5ec69bcd1fe23e1d8c1a563a00351ce052fe9d76885cc43f21ebc87
   opentelemetry-instrumentation-gruf (0.5.0) sha256=ee21be36e312e71b847c9a87168225625890121140a364b68d3668e0df58dacd
@@ -3031,7 +3196,7 @@ CHECKSUMS
   opentelemetry-instrumentation-httpx (0.5.1) sha256=3ef926ec56e208290052c8d278e3f82890a7f6dadeb01a7c9a706a3fb4da52dd
   opentelemetry-instrumentation-koala (0.23.0) sha256=8f324b50a2a64fd4994bb2b105a4cb0c80b64ec05cf5487d2daa906c650bc6f9
   opentelemetry-instrumentation-lmdb (0.25.0) sha256=1e4d66d583ea242d4f72051062971f5af1ea353484d224abbd0aabdd1ce5f5cb
-  opentelemetry-instrumentation-mongo (0.25.0) sha256=d04585669f928ea82e7c469f996061d39d8ff184278d57cf4fc77a6d607f9c7a
+  opentelemetry-instrumentation-mongo (0.25.1) sha256=b66a8544bb0c60ab032ecd224333d50138f2b280d2d394c508d2ff8ca3fb94b9
   opentelemetry-instrumentation-mysql2 (0.32.1) sha256=9f5c705b374f7804d374e4fdb5b793c0321dea25644a006bbb76b2150452277a
   opentelemetry-instrumentation-net_http (0.26.1) sha256=354ebf161f2aca0eaafdc9decc014f98b246994308a5de3ccf303f1d4abdfa2c
   opentelemetry-instrumentation-pg (0.34.1) sha256=8d6d75f8d895eea040f72ac7765257e82f9aaa81eed44bd1afbcaa7f49ebb5c2
@@ -3048,9 +3213,9 @@ CHECKSUMS
   opentelemetry-instrumentation-sidekiq (0.28.1) sha256=abc85d62996a5362e7a9fd7af9f6c709d01ce04795514d12fee5126335ae97ae
   opentelemetry-instrumentation-sinatra (0.28.0) sha256=9f11d68c580a421cadd633aca1f8f92707d6b6995d48fffa045a48c187347f26
   opentelemetry-instrumentation-trilogy (0.65.1) sha256=4e20ef2aee15613ea9e5468c1561184fc94cde615f3174c6f5d80c76fea8ccbd
-  opentelemetry-registry (0.3.0) sha256=116ab6114a706340900718298c126f720e50b1ef3cfdbe5997611ff232fe6822
-  opentelemetry-sdk (1.10.0) sha256=43719949be8df24dcaeb86ebbf75636cda87d51a01af2729499b92a48b80521a
-  opentelemetry-semantic_conventions (1.10.0) sha256=13d24c1071736004a6c09113ee9fe163a25daa0defe6ab279a42cac7b92b1b76
+  opentelemetry-registry (0.5.0) sha256=726ca58ada93a23efaa5f7bb81b8ab7a8a1e14602935c9c65dfa2e597a19fb4f
+  opentelemetry-sdk (1.11.0) sha256=427c6708f4732105ffa46c11afecb91807085c59e92538eaa6cf46b97b1850c6
+  opentelemetry-semantic_conventions (1.37.0) sha256=1e2dc5ad649e19ba2fb0fa7c6f9303e5cdd8d3952511415cb07efe28a0f8f4c3
   opentracing (0.5.0) sha256=deb5d7abe6b0e7631d866d8cb5ee7bb9352650a504a32f61591302bc510b9286
   optimist (3.0.1) sha256=336b753676d6117cad9301fac7e91dab4228f747d4e7179891ad3a163c64e2ed
   org-ruby (0.9.12) sha256=93cbec3a4470cb9dca6a4a98dc276a6434ea9d9e7bc2d42ea33c3aedd5d1c974
@@ -3068,6 +3233,10 @@ CHECKSUMS
   pdf-core (0.10.0) sha256=0a5d101e2063c01e3f941e1ee47cbb97f1adfc1395b58372f4f65f1300f3ce91
   peek (1.1.0) sha256=d6501ead8cde46d8d8ed0d59eb6f0ba713d0a41c11a2c4a81447b2dce37b3ecc
   pg (1.6.3) sha256=1388d0563e13d2758c1089e35e973a3249e955c659592d10e5b77c468f628a99
+  pg (1.6.3-aarch64-linux) sha256=0698ad563e02383c27510b76bf7d4cd2de19cd1d16a5013f375dd473e4be72ea
+  pg (1.6.3-arm64-darwin) sha256=7240330b572e6355d7c75a7de535edb5dfcbd6295d9c7777df4d9dddfb8c0e5f
+  pg (1.6.3-x86_64-darwin) sha256=ee2e04a17c0627225054ffeb43e31a95be9d7e93abda2737ea3ce4a62f2729d6
+  pg (1.6.3-x86_64-linux) sha256=5d9e188c8f7a0295d162b7b88a768d8452a899977d44f3274d1946d67920ae8d
   pg_query (6.2.2) sha256=316c194160ccfac8af9a7aff55cdc5b2d13bdd8bd8734976c6bddc477e779b6f
   plist (3.7.0) sha256=703ca90a7cb00e8263edd03da2266627f6741d280c910abbbac07c95ffb2f073
   png_quantizator (0.2.1) sha256=6023d4d064125c3a7e02929c95b7320ed6ac0d7341f9e8de0c9ea6576ef3106b
@@ -3081,13 +3250,17 @@ CHECKSUMS
   prism (1.9.0) sha256=7b530c6a9f92c24300014919c9dcbc055bf4cdf51ec30aed099b06cd6674ef85
   proc_to_ast (0.1.0) sha256=92a73fa66e2250a83f8589f818b0751bcf227c68f85916202df7af85082f8691
   prometheus-client-mmap (1.5.0) sha256=361eb98d6c19ae0f44ae5e02f9e6750436fd92d1c501d1c69843609c1daf0117
+  prometheus-client-mmap (1.5.0-aarch64-linux-gnu) sha256=e7fe1a630dda83a237efb0eb4a29ee3da37922722fc89ecac6057a1187372c5d
+  prometheus-client-mmap (1.5.0-arm64-darwin) sha256=78703435f76d246e31a04344071630133608a4e624275a910cfb2c19346b5aa3
+  prometheus-client-mmap (1.5.0-x86_64-darwin) sha256=96d360bbffc5603f8322a0b8c3353cf531c06410cf80dbdeda46efbd27a6a5a2
+  prometheus-client-mmap (1.5.0-x86_64-linux-gnu) sha256=2f5e7be72ea0b8bddd0e6a123e8f2468d7e2bdfa664a4d355fec4ed4f659d457
   pry (0.14.2) sha256=c4fe54efedaca1d351280b45b8849af363184696fcac1c72e0415f9bdac4334d
   pry-byebug (3.11.0) sha256=0b0abb7d309bc7f00044d512a3c8567274f7012b944b38becc8440439a1cea72
   pry-rails (0.3.11) sha256=a69e28e24a34d75d1f60bcf241192a54253f8f7ef8a62cba1e75750a9653593d
   pry-shell (0.6.4) sha256=ad024882d29912b071a7de65ebea538b242d2dc1498c60c7c2352ef94769f208
   psych (5.3.1) sha256=eb7a57cef10c9d70173ff74e739d843ac3b2c019a003de48447b2963d81b1974
   public_suffix (6.0.1) sha256=61d44e1cab5cbbbe5b31068481cf16976dd0dc1b6b07bd95617ef8c5e3e00c6f
-  puma (7.2.0) sha256=bf8ef4ab514a4e6d4554cb4326b2004eba5036ae05cf765cfe51aba9706a72a8
+  puma (8.0.1) sha256=7b94e50c07655718c1fb8ae41a11fc06c7d61293208b3aa608ff71a46d3ad37c
   pyu-ruby-sasl (0.0.3.3) sha256=5683a6bc5738db5a1bf5ceddeaf545405fb241b4184dd4f2587e679a7e9497e5
   raabro (1.4.0) sha256=d4fa9ff5172391edb92b242eed8be802d1934b1464061ae5e70d80962c5da882
   racc (1.8.1) sha256=4a7f6929691dbec8b5209a0b373bc2614882b55fc5d2e447a21aaa691303d62f
@@ -3099,42 +3272,47 @@ CHECKSUMS
   rack-protection (2.2.2) sha256=fd41414dbabbec274af0bdb1f72a48504449de4d979782c9af38cbb5dfff3299
   rack-proxy (0.7.7) sha256=446a4b57001022145d5c3ba73b775f66a2260eaf7420c6907483141900395c8a
   rack-session (1.0.2) sha256=a02115e5420b4de036839b9811e3f7967d73446a554b42aa45106af335851d76
-  rack-test (2.1.0) sha256=0c61fc61904049d691922ea4bb99e28004ed3f43aa5cfd495024cc345f125dfb
+  rack-test (2.2.0) sha256=005a36692c306ac0b4a9350355ee080fd09ddef1148a5f8b2ac636c720f5c463
   rack-timeout (0.7.0) sha256=757337e9793cca999bb73a61fe2a7d4280aa9eefbaf787ce3b98d860749c87d9
   rackup (1.0.1) sha256=ba86604a28989fe1043bff20d819b360944ca08156406812dca6742b24b3c249
   rails (7.2.3.1) sha256=96c0a0160081ef3f1e407438880f6194c6ec94cdf40c8f83fc7bb22c279eba94
   rails-controller-testing (1.0.5) sha256=741448db59366073e86fc965ba403f881c636b79a2c39a48d0486f2607182e94
-  rails-dom-testing (2.2.0) sha256=e515712e48df1f687a1d7c380fd7b07b8558faa26464474da64183a7426fa93b
-  rails-html-sanitizer (1.6.1) sha256=e3d2fb10339f03b802e39c7f6cac28c54fd404d3f65ae39c31cca9d150c5cbf0
+  rails-dom-testing (2.3.0) sha256=8acc7953a7b911ca44588bf08737bc16719f431a1cc3091a292bca7317925c1d
+  rails-html-sanitizer (1.7.0) sha256=28b145cceaf9cc214a9874feaa183c3acba036c9592b19886e0e45efc62b1e89
   rails-i18n (7.0.10) sha256=efae16e0ac28c0f42e98555c8db1327d69ab02058c8b535e0933cb106dd931ca
   railties (7.2.3.1) sha256=aea3393ee10243ceedcbeccb45458a0d58b524b6d21bf32eff8b93853baae15a
   rainbow (3.1.1) sha256=039491aa3a89f42efa1d6dec2fc4e62ede96eb6acd95e52f1ad581182b79bc6a
-  rake (13.0.6) sha256=5ce4bf5037b4196c24ac62834d8db1ce175470391026bd9e557d669beeb19097
+  rake (13.4.2) sha256=cb825b2bd5f1f8e91ca37bddb4b9aaf345551b4731da62949be002fa89283701
   rake-compiler-dock (1.11.0) sha256=eab51f2cd533eb35cea6b624a75281f047123e70a64c58b607471bb49428f8c2
   rb-fsevent (0.11.2) sha256=43900b972e7301d6570f64b850a5aa67833ee7d87b458ee92805d56b7318aefe
   rb-inotify (0.10.1) sha256=050062d4f31d307cca52c3f6a7f4b946df8de25fc4bd373e1a5142e41034a7ca
-  rb_sys (0.9.124) sha256=513476557b12eaf73764b3da9f8746024558fe8699bda785fb548c9aa3877ae7
+  rb_sys (0.9.126) sha256=ba958e0b8b4b89eeae0b3d24b64c809eb2c37e0ab0773a49e9b1c2e22c95aef8
   rbs (3.9.5) sha256=eabaaf60aee84e38cbf94839c6e1b9cd145c7295fc3cc0e88c92e4069b1119b0
   rbtrace (0.5.3) sha256=c432292f305d9ab12fd47d9722e0d5210d983758a951fe6107c36cc955cb923f
   rchardet (1.8.0) sha256=693acd5253d5ade81a51940697955f6dd4bb2f0d245bda76a8e23deec70a52c7
   rdoc (6.17.0) sha256=0f50d4e568fc98195f9bb155a9e8dff6c7feabfb515fb22ef6df1d12ad5a02b7
   re2 (2.23.0) sha256=5545b7709832c26ded88f1829fa9b24cdd7c5f0ebb0526c3c476b92505ef256f
+  re2 (2.23.0-aarch64-linux-gnu) sha256=9b2fa8b565574ed5adad20f3b0af75842fe7913d638edce435b9be68ae70f792
+  re2 (2.23.0-arm64-darwin) sha256=c45864c4963bb5b1ba88387c6040f1af2c0dfd49a14099b3cfb22eab7222efce
+  re2 (2.23.0-x86_64-darwin) sha256=e7cb5114f63101c41871946ce17cf491033764406d5e40323ce71a32a5aedcc6
+  re2 (2.23.0-x86_64-linux-gnu) sha256=6ea94be71293defa16298e16adefc72df8d158c915ac51d46e7c99c41515d9a2
   recaptcha (5.12.3) sha256=37d1894add9e70a54d0c6c7f0ecbeedffbfa7d075acfbd4c509818dfdebdb7ee
   recursive-open-struct (1.1.3) sha256=a3538a72552fcebcd0ada657bdff313641a4a5fbc482c08cfb9a65acb1c9de5a
   redcarpet (3.6.0) sha256=8ad1889c0355ff4c47174af14edd06d62f45a326da1da6e8a121d59bdcd2e9e9
   redis (5.4.1) sha256=b5e675b57ad22b15c9bcc765d5ac26f60b675408af916d31527af9bd5a81faae
   redis-actionpack (5.5.0) sha256=dc0570b78c14ec62b35c17b97fab778ee5986bc55e695bfb6826488088693311
-  redis-client (0.26.4) sha256=3ad70beff5da2653e02dfeae996e7d8d7147a558da12b16b2282ad345e4c7120
-  redis-cluster-client (0.13.5) sha256=18d6c9598009bcdb47b2a62bd6d00b833444aace740d2a2f00113774b298204c
+  redis-client (0.28.0) sha256=888892f9cd8787a41c0ece00bdf5f556dfff7770326ce40bb2bc11f1bfec824b
+  redis-cluster-client (0.15.0) sha256=c50891ade8585ecb2dfab8cabf88df5077f38708a7b34fc95a4a96786e2ce201
   redis-clustering (5.4.1) sha256=87444bb101fda5f1ef73b87243759224ca5952f3fe3c73842a2b8f78e45844ea
   redis-namespace (1.11.0) sha256=e91a1aa2b2d888b6dea1d4ab8d39e1ae6fac3426161feb9d91dd5cca598a2239
   redis-rack (3.0.0) sha256=abb50b82ae10ad4d11ca2e4901bfc2b98256cdafbbd95f80c86fc9e001478380
   redis-store (1.11.0) sha256=edc4f3e239dcd1fdd9905584e6b1e623a84618e14436e6e8a07c70891008eda4
-  regexp_parser (2.10.0) sha256=cb6f0ddde88772cd64bff1dbbf68df66d376043fe2e66a9ef77fcb1b0c548c61
+  regexp_parser (2.12.0) sha256=35a916a1d63190ab5c9009457136ae5f3c0c7512d60291d0d1378ba18ce08ebb
   regexp_property_values (1.0.0) sha256=162499dc0bba1e66d334273a059f207a61981cc8cc69d2ca743594e7886d080f
   reline (0.6.3) sha256=1198b04973565b36ec0f11542ab3f5cfeeec34823f4e54cebde90968092b1835
   representable (3.2.0) sha256=cc29bf7eebc31653586849371a43ffe36c60b54b0a6365b5f7d95ec34d1ebace
   request_store (1.7.0) sha256=e1b75d5346a315f452242a68c937ef8e48b215b9453a77a6c0acdca2934c88cb
+  require-hooks (0.2.3) sha256=224be5b4be0fd2a47cb73286c500da366704a54ec195b6627366380c950efac8
   responders (3.0.1) sha256=613fe28e498987f4feaa3230aa6313ca4bd5f0563a3da83511b0dd6cd8f47292
   rest-client (2.1.0) sha256=35a6400bdb14fae28596618e312776c158f7ebbb0ccad752ff4fa142bf2747e3
   retriable (3.1.2) sha256=0a5a5d0ca4ba61a76fb31a17ab8f7f80281beb040c329d34dfc137a1398688e0
@@ -3157,20 +3335,20 @@ CHECKSUMS
   rspec-support (3.13.1) sha256=48877d4f15b772b7538f3693c22225f2eda490ba65a0515c4e7cf6f2f17de70f
   rspec_junit_formatter (0.6.0) sha256=40dde674e6ae4e6cc0ff560da25497677e34fefd2338cc467a8972f602b62b15
   rspec_profiling (0.0.9) sha256=6199be2daeaa14bac3d10d704dbb0a8df052cf046332c505603263aea24f7590
-  rubocop (1.71.1) sha256=d3dfd1e484a3a619dcf76c6a4fba694cd833921e4fd254d111845c26bcecfcfa
-  rubocop-ast (1.38.0) sha256=4fdf6792fe443a9a18acb12dbc8225d0d64cd1654e41fedb30e79c18edbb26ae
+  rubocop (1.81.7) sha256=6fb5cc298c731691e2a414fe0041a13eb1beed7bab23aec131da1bcc527af094
+  rubocop-ast (1.49.0) sha256=49c3676d3123a0923d333e20c6c2dbaaae2d2287b475273fddee0c61da9f71fd
   rubocop-capybara (2.21.0) sha256=5d264efdd8b6c7081a3d4889decf1451a1cfaaec204d81534e236bc825b280ab
   rubocop-factory_bot (2.26.1) sha256=8de13cd4edcee5ca800f255188167ecef8dbfc3d1fae9f15734e9d2e755392aa
   rubocop-graphql (1.5.4) sha256=2d888d40b08577daf1e74ca4623be1e3058c1a93543d5a7220818f561a254192
-  rubocop-performance (1.21.1) sha256=5cf20002a544275ad6aa99abca4b945d2a2ed71be925c38fe83700360ed8734e
-  rubocop-rails (2.26.2) sha256=f5561a09d6afd2f54316f3f0f6057338ca55b6c24a25ba6a938d3ed0fded84ad
-  rubocop-rspec (3.0.5) sha256=c6a8e29fb1b00d227c32df159e92f5ebb9e0ff734e52955fb13aff5c74977e0f
+  rubocop-performance (1.23.1) sha256=f22f86a795f5e6a6180aac2c6fc172534b173a068d6ed3396d6460523e051b82
+  rubocop-rails (2.29.1) sha256=41c2fcf48d5d62f4a5f574d5f1c97bbaf4cba88ee367936c98b3422d047b17aa
+  rubocop-rspec (3.4.0) sha256=8721c13b6a8c9530a7ac481cea9423022f946fcf72428bda8289f8b57e4d4885
   rubocop-rspec_rails (2.30.0) sha256=888112e83f9d7ef7ad2397e9d69a0b9614a4bae24f072c399804a180f80c4c46
   ruby-lsp (0.26.4) sha256=1cb3046a066c8f1983dfe5f0cd3baa76034d6ba156e8ab460b15ab129d37a9f7
   ruby-lsp-rails (0.4.8) sha256=f09d1f926d4063deeb2f3049311925c20dfe6c912371e3bcd04a265a865c44ae
   ruby-lsp-rspec (0.1.28) sha256=0db3b3ffba08c6d70eb7831e79090a1863f572fe131ed0ecfce8a2f7d01bf491
   ruby-magic (0.6.0) sha256=7b2138877b7d23aff812c95564eba6473b74b815ef85beb0eb792e729a2b6101
-  ruby-progressbar (1.11.0) sha256=cc127db3866dc414ffccbf92928a241e585b3aa2b758a5563e74a6ee0f57d50a
+  ruby-progressbar (1.13.0) sha256=80fc9c47a9b640d6834e0dc7b3c94c9df37f08cb072b7761e4a71e22cff29b33
   ruby-saml (1.18.1) sha256=1b0e7a44aef150b4197955f5e015d593672e242cfdc5d06aa7554ec2350b9107
   ruby-statistics (4.1.0) sha256=7d697abd5dc4e6141d21ecb4165482807564f11bbe154cf1c60a2677b507f2a9
   ruby2_keywords (0.0.5) sha256=ffd13740c573b7301cf7a2e61fc857b2a8e3d3aff32545d6f8300d8bae10e3ef
@@ -3178,10 +3356,14 @@ CHECKSUMS
   rubypants (0.2.0) sha256=f07e38eac793655a0323fe91946081052341b9e69807026fcf102346589eedee
   rubyzip (2.4.1) sha256=8577c88edc1fde8935eb91064c5cb1aef9ad5494b940cf19c775ee833e075615
   rugged (1.7.2) sha256=9049b1f4c37f39d7b0e6fc5768815c5c5f470bf27d3fd725ab032258c2b38ce9
-  safe_yaml (1.0.4) sha256=248193992ef1730a0c9ec579999ef2256a2b3a32a9bd9d708a1e12544a489ec2
   safety_net_attestation (0.5.0) sha256=c8cd01dd550dbe8553862918af6355a04672db11d218ec96104ce3955293f2aa
   sanitize (6.0.2) sha256=48c4eb8e92bb1699056b6000986ac50fc9df82f458a941abf2c4d6759bccd5cf
   sass-embedded (1.77.5) sha256=a2a6adc4ce695ece780f40388d207de396e5091ddd28767440c7907a4501beda
+  sass-embedded (1.77.5-aarch64-linux-gnu) sha256=c84eda6b86669a15695d9a7ddbc7a6e3cb706735d17fe37c5c4e1c584d467534
+  sass-embedded (1.77.5-arm64-darwin) sha256=a6a524aefe8b181c55d5f11c26b2329a06e20de32180f18904fc8488b89bdb36
+  sass-embedded (1.77.5-x86-linux-gnu) sha256=de9255b988ce9866a4734acfcb44f55e73055607e11a1cfa4a0105e5fd6fd928
+  sass-embedded (1.77.5-x86_64-darwin) sha256=228ee25c012e50bef83e433415b20dddaaaa9c01c8c40c4f99669d919f26bfc3
+  sass-embedded (1.77.5-x86_64-linux-gnu) sha256=3000a6b984ea746eac1f0c9a17400134fe76c3d41b33436262ac82b5d153d7b4
   sawyer (0.9.2) sha256=fa3a72d62a4525517b18857ddb78926aab3424de0129be6772a8e2ba240e7aca
   sd_notify (0.1.1) sha256=cbc7ac6caa7cedd26b30a72b5eeb6f36050dc0752df263452ea24fb5a4ad3131
   securerandom (0.4.1) sha256=cc5193d414a4341b6e225f0cb4446aceca8e50d5e1888743fac16987638ea0b1
@@ -3207,9 +3389,9 @@ CHECKSUMS
   singleton (0.3.0) sha256=83ea1bca5f4aa34d00305ab842a7862ea5a8a11c73d362cb52379d94e9615778
   sixarm_ruby_unaccent (1.2.0) sha256=0043a6077bdf2c4b03040152676a07f8bf77144f9b007b1960ee5c94d13a4384
   slack-messenger (2.3.6) sha256=58581e587debcbb769336cc7ebe4eb6ae411947fccf347e967a17ac9813e66d8
-  snaky_hash (2.0.0) sha256=fe8b2e39e8ff69320f7812af73ea06401579e29ff1734a7009567391600687de
+  snaky_hash (2.0.3) sha256=25a3d299566e8153fb02fa23fd9a9358845950f7a523ddbbe1fa1e0d79a6d456
   snowplow-tracker (0.8.0) sha256=7ba6f4f1443a829845fd28e63eda72d9d3d247f485310ddcccaebbc52b734a38
-  solargraph (0.54.4) sha256=842705cc511a085e967314de8bd2dd89b00f90238b5582e665ffa39efbd880e0
+  solargraph (0.58.3) sha256=debefdc927d1e72383b2c4add89e71373d902b9904617efdb687749509fe2e69
   solargraph-rspec (0.5.4) sha256=295fc5ae98694edcc638488a93d4c8cd66f56883cf7961f47f1409602baf7e1c
   sorbet-runtime (0.6.12984) sha256=3fff20a5b147a2e191210563d61886ac121fc1cd8b5e0faf6bc18873139e0fe4
   spamcheck (1.3.3) sha256=3a29ba9dfcd59543d88054d38c657f79e0a6cf44d763df08ad47680abed50ec7
@@ -3230,7 +3412,7 @@ CHECKSUMS
   strings-ansi (0.2.0) sha256=90262d760ea4a94cc2ae8d58205277a343409c288cbe7c29416b1826bd511c88
   swd (2.0.3) sha256=4cdbe2a4246c19f093fce22e967ec3ebdd4657d37673672e621bf0c7eb770655
   sync (0.5.0) sha256=668356cc07c59ac7ed9ecf34fec3929831f179c07adb1f3e1c3b7a1609a638fd
-  sys-filesystem (1.4.3) sha256=390919de89822ad6d3ba3daf694d720be9d83ed95cdf7adf54d4573c98b17421
+  sys-filesystem (1.5.5) sha256=6f995890a734b9f0aa55df5e09d99adeb9fd1c288f2c4097269a1f8c95e15033
   sysexits (1.2.0) sha256=598241c4ae57baa403c125182dfdcc0d1ac4c0fb606dd47fbed57e4aaf795662
   table_print (1.5.7) sha256=436664281f93387b882335795e16cfeeb839ad0c785ff7f9110fc0f17c68b5cb
   tanuki_emoji (0.13.0) sha256=dee2182a5cad6f88ed91cd4e39088bd2a8f313e24f83ff5d4b5b0fecf29f6d93
@@ -3269,7 +3451,7 @@ CHECKSUMS
   typhoeus (1.4.1) sha256=1c17db8364bd45ab302dc61e460173c3e69835896be88a3df07c206d5c55ef7c
   tzinfo (2.0.6) sha256=8daf828cc77bcf7d63b0e3bdb6caa47e2272dcfaf4fbfe46f8c3a9df087a829b
   uber (0.1.0) sha256=5beeb407ff807b5db994f82fa9ee07cfceaa561dad8af20be880bc67eba935dc
-  undercover (0.8.4) sha256=99a6df93a6bb2c8d06e701df5fdb3be9411f50eae3f9f9e1d67672176258d09c
+  undercover (0.8.5) sha256=054a3c77ef3a08a2e8ebcc272a383b7e187fb30b55c2a164ff1643dc2999aaa9
   unf (0.1.4) sha256=4999517a531f2a955750f8831941891f6158498ec9b6cb1c81ce89388e63022e
   unf_ext (0.0.8.2) sha256=90b9623ee359cc4878461c5d2eab7d3d3ce5801a680a9e7ac83b8040c5b742fa
   unicode (0.4.4.5) sha256=42f294bfc8e186d29da89d1f766071505a20a22776168a31bb3408e03fa7a9d7
@@ -3284,19 +3466,19 @@ CHECKSUMS
   valid_email (0.1.3) sha256=b81452b51b64c4beb67913f68db52c20ecb4d73d45512f5b282ab4a3f4416570
   validate_url (1.0.15) sha256=72fe164c0713d63a9970bd6700bea948babbfbdcec392f2342b6704042f57451
   validates_hostname (1.0.13) sha256=eac40178cc0b4f727df9cc6a5cb5bc2550718ad8d9bb3728df9aba6354bdda19
-  version_gem (1.1.8) sha256=a964767ecbe36551b9ff2e59099548c27569f2f7f94bdb09f609d76393a8e008
+  version_gem (1.1.9) sha256=0c1a0962ae543c84a00889bb018d9f14d8f8af6029d26b295d98774e3d2eb9a4
   version_sorter (2.3.0) sha256=2147f2a1a3804fbb8f60d268b7d7c1ec717e6dd727ffe2c165b4e05e82efe1da
   view_component (3.23.2) sha256=3c2fed4b9e38bf074fa3d42ca55eedbb2cc070e0f3c31d7c13a50b0db530892b
   virtus (2.0.0) sha256=8841dae4eb7fcc097320ba5ea516bf1839e5d056c61ee27138aa4bddd6e3d1c2
   vite_rails (3.10.0) sha256=8c4471554870c043e8d9ff7d379302a01d147ade2cd61476ddf020fed32a107a
-  vite_ruby (3.10.1) sha256=f13b81f46bac616c1278e7d2301f11896a6e6313b0daee4ff40cf7eb9987d322
+  vite_ruby (3.10.2) sha256=db465451eb180abbdc81f596ba63671d2b2552e2bb7bf3c1f7b79f9d58ca9a86
   vmstat (2.3.1) sha256=5587cb430a54dbfc4a5c29dd01bd6a4031b2ff4c1d387504d74ff246f3b39104
   warden (1.2.9) sha256=46684f885d35a69dbb883deabf85a222c8e427a957804719e143005df7a1efd0
   warning (1.5.0) sha256=0f12c49fea0c06757778eefdcc7771e4fd99308901e3d55c504d87afdd718c53
   webauthn (3.4.3) sha256=9be6f5f838f3405b0226e560aa40b67cc8c15ec9154509b997caa7ec9a05e1fc
   webfinger (2.1.3) sha256=567a52bde77fb38ca6b67e55db755f988766ec4651c1d24916a65aa70540695c
   webmock (3.26.2) sha256=774556f2ea6371846cca68c01769b2eac0d134492d21f6d0ab5dd643965a4c90
-  webrick (1.9.1) sha256=b42d3c94f166f3fb73d87e9b359def9b5836c426fc8beacf38f2184a21b2a989
+  webrick (1.9.2) sha256=beb4a15fc474defed24a3bda4ffd88a490d517c9e4e6118c3edce59e45864131
   websocket (1.2.10) sha256=2cc1a4a79b6e63637b326b4273e46adcddf7871caa5dc5711f2ca4061a629fa8
   websocket-driver (0.8.0) sha256=ed0dba4b943c22f17f9a734817e808bc84cdce6a7e22045f5315aa57676d4962
   websocket-extensions (0.1.5) sha256=1c6ba63092cda343eb53fc657110c71c754c56484aad42578495227d717a8241
@@ -3308,6 +3490,7 @@ CHECKSUMS
   xpath (3.2.0) sha256=6dfda79d91bb3b949b947ecc5919f042ef2f399b904013eb3ef6d20dd3a4082e
   yajl-ruby (1.4.3) sha256=8c974d9c11ae07b0a3b6d26efea8407269b02e4138118fbe3ef0d2ec9724d1d2
   yard (0.9.38) sha256=721fb82afb10532aa49860655f6cc2eaa7130889df291b052e1e6b268283010f
+  yard-activesupport-concern (0.0.1) sha256=be790cb0efc23e2e87677063598ac8b743586154657bbd9655a7f03ce78390ef
   yard-solargraph (0.1.0) sha256=a19a4619c942181a618fb9458970a9d2534cf7fda69fc43949629a7948a5930e
   zeitwerk (2.6.18) sha256=bd2d213996ff7b3b364cd342a585fbee9797dbc1c0c6d868dc4150cc75739781
   zlib (3.2.3) sha256=5bd316698b32f31a64ab910a8b6c282442ca1626a81bbd6a1674e8522e319c20
diff --git a/pkgs/by-name/gi/gitlab/rubyEnv/gemset.nix b/pkgs/by-name/gi/gitlab/rubyEnv/gemset.nix
index 4391115257d4..86c6ba2d290a 100644
--- a/pkgs/by-name/gi/gitlab/rubyEnv/gemset.nix
+++ b/pkgs/by-name/gi/gitlab/rubyEnv/gemset.nix
@@ -184,7 +184,6 @@ src: {
     groups = [
       "default"
       "development"
-      "monorepo"
       "test"
     ];
     platforms = [ ];
@@ -204,7 +203,6 @@ src: {
     groups = [
       "default"
       "development"
-      "monorepo"
       "test"
     ];
     platforms = [ ];
@@ -332,6 +330,7 @@ src: {
     ];
     groups = [
       "default"
+      "development"
       "test"
     ];
     platforms = [ ];
@@ -456,10 +455,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "04nc8x27hlzlrr5c2gn7mar4vdr0apw5xg22wp6m8dx3wqr04a0y";
+      sha256 = "10yknjyn0728gjn6b5syynvrvrwm66bhssbxq8mkhshxghaiailm";
       type = "gem";
     };
-    version = "2.4.2";
+    version = "2.4.3";
   };
   async = {
     dependencies = [
@@ -473,10 +472,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "11s733zhjvriqbzca85ry29j33p3y7n24xjwwvjyga4rba5brzvr";
+      sha256 = "1ah038cvb5k7vr29z5jkjhdwqpinrchglz87i1bv9fzjfc07666z";
       type = "gem";
     };
-    version = "2.32.0";
+    version = "2.39.0";
   };
   atlassian-jwt = {
     dependencies = [ "jwt" ];
@@ -510,6 +509,19 @@ src: {
     };
     version = "1.0.2";
   };
+  auto_freeze = {
+    dependencies = [
+      "freezolite"
+      "require-hooks"
+    ];
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      path = "${src}/gems/auto_freeze";
+      type = "path";
+    };
+    version = "0.2.0";
+  };
   awesome_print = {
     groups = [
       "development"
@@ -744,10 +756,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "1kicilpma5l0lwayqjb5577bm0hbjndj2gh150xz09xsgc1l1vyl";
+      sha256 = "0v1337j39w1z7x9zs4q7ag0nfv4vs4xlsjx2la0wpv8s6hig2pa6";
       type = "gem";
     };
-    version = "0.4.1";
+    version = "0.5.0";
   };
   benchmark-ips = {
     groups = [
@@ -817,19 +829,19 @@ src: {
   };
   bigdecimal = {
     groups = [
-      "coverage"
       "default"
       "development"
       "monorepo"
+      "opentelemetry"
       "test"
     ];
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "06sfv80bmxfczkqi3pb3yc9zicqhf94adh5f8hpkn3bsqqd1vlgz";
+      sha256 = "0612spks81fvpv2zrrv3371lbs6mwd7w6g5zafglyk75ici1x87a";
       type = "gem";
     };
-    version = "3.2.3";
+    version = "3.3.1";
   };
   bindata = {
     groups = [ "default" ];
@@ -861,10 +873,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "057jsch213i42qgdsz2vg1b190n2xvvbi3hgprc8nmaqim2ly9f1";
+      sha256 = "1vrrblvh512xw4awcjfx2h5zdsv4dciwjjf0mhnv59aaq8fymynp";
       type = "gem";
     };
-    version = "1.23.0";
+    version = "1.24.1";
   };
   browser = {
     groups = [ "default" ];
@@ -1017,10 +1029,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "1njrjznc2j5xqqw71sp9130b9hyv59h2gfrf6yaf4in1n9dzd6gy";
+      sha256 = "1s8qdw1nfh3njd47q154njlfyc2llcgi4ik13vz39adqd7yclgz9";
       type = "gem";
     };
-    version = "0.5.0";
+    version = "0.5.1";
   };
   character_set = {
     groups = [ "default" ];
@@ -1314,7 +1326,10 @@ src: {
     version = "6.2.0";
   };
   crack = {
-    dependencies = [ "safe_yaml" ];
+    dependencies = [
+      "bigdecimal"
+      "rexml"
+    ];
     groups = [
       "default"
       "test"
@@ -1322,10 +1337,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "0abb0fvgw00akyik1zxnq7yv391va148151qxdghnzngv66bl62k";
+      sha256 = "0zjcdl5i6lw508r01dym05ibhkc784cfn93m1d26c7fk1hwi0jpz";
       type = "gem";
     };
-    version = "0.4.3";
+    version = "1.0.1";
   };
   crass = {
     groups = [
@@ -1419,10 +1434,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "1xcnk22xw3rm3jmzh65wh2s41xrx7djyfa7p8b6jjgapp45xikmj";
+      sha256 = "0p47dxxcly80f1crsma8zc270v5r6y38rfqi1m2l1ad1yayxwp32";
       type = "gem";
     };
-    version = "4.1.2";
+    version = "4.1.3";
   };
   danger = {
     dependencies = [
@@ -1621,10 +1636,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "0gb1rlwpgk1zbrb8i91n7qsrp0zpax0lxdwf101wwyvgf8wcr613";
+      sha256 = "1b897h1i7apw9k0fcppg2kjsxpdcz0qx4s7h2p9yvzwgzmmcm788";
       type = "gem";
     };
-    version = "0.5.2";
+    version = "0.5.1";
   };
   device_detector = {
     groups = [ "default" ];
@@ -1677,10 +1692,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "1q8syjnvlynvldfqf5p9cff81m6v3dzhnv1djcizczrfas6sgrza";
+      sha256 = "1d5day3h573faxsy24h9pbidjm04hs4ql8qxi1wdmrwsbcxs5qq9";
       type = "gem";
     };
-    version = "5.1.0";
+    version = "6.4.0";
   };
   diff-lcs = {
     groups = [
@@ -1784,10 +1799,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "1lznnxv845lb513s8gs2wckg3vrbj1w573sbs1agmxbn670akaaj";
+      sha256 = "1cvyxkx8rf8qj3a9dl2dqg014an570gcs35hfiqhw2p6pckzg2gn";
       type = "gem";
     };
-    version = "1.8.11";
+    version = "1.9.0";
   };
   dotenv = {
     groups = [ "default" ];
@@ -1913,14 +1928,15 @@ src: {
     version = "1.0.0";
   };
   duo_api = {
+    dependencies = [ "base64" ];
     groups = [ "default" ];
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "0xq8ikcphbxgwdyvmzm1162znrz6j0wsr2bkmwa4nvjf303b99h6";
+      sha256 = "17msnl6pwy56czf46im8gw1vcr73rdi7b2njhgxhf3wp2qbqkzvp";
       type = "gem";
     };
-    version = "1.4.0";
+    version = "1.5.1";
   };
   ed25519 = {
     groups = [ "default" ];
@@ -2002,10 +2018,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "0vijywhy1acsq4187ss6w8a7ksswaf1d5np3wbj962b6rqif5vcz";
+      sha256 = "09f5sq41fb912jxsbzh68hmkwq9gj9p8fg0zbwikf80sxsjkz105";
       type = "gem";
     };
-    version = "0.1.6";
+    version = "0.2.0";
   };
   email_spec = {
     dependencies = [
@@ -2222,7 +2238,6 @@ src: {
       "logger"
     ];
     groups = [
-      "danger"
       "default"
       "development"
       "test"
@@ -2230,10 +2245,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "09mcghancmn0s5cwk2xz581j3xm3xqxfv0yxg75axnyhrx9gy6f7";
+      sha256 = "077n5ss3z3ds4vj54w201kd12smai853dp9c9n7ii7g3q7nwwg54";
       type = "gem";
     };
-    version = "2.13.4";
+    version = "2.14.1";
   };
   faraday-follow_redirects = {
     dependencies = [ "faraday" ];
@@ -2241,10 +2256,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "1y87p3yk15bjbk0z9mf01r50lzxvp7agr56lbm9gxiz26mb9fbfr";
+      sha256 = "1b8hgpci3wjm3rm41bzpasvsc5j253ljyg5rsajl62dkjk497pjw";
       type = "gem";
     };
-    version = "0.3.0";
+    version = "0.5.0";
   };
   faraday-http-cache = {
     dependencies = [ "faraday" ];
@@ -2381,16 +2396,15 @@ src: {
       "default"
       "development"
       "kerberos"
-      "monorepo"
       "test"
     ];
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "0k1xaqw2jk13q3ss7cnyvkp8fzp75dk4kazysrxgfd1rpgvkk7qf";
+      sha256 = "1kqasqvy8d7r09ri4n6bkdwbk63j7afd9ilsw34nzlgh0qp69ldw";
       type = "gem";
     };
-    version = "1.17.3";
+    version = "1.17.4";
   };
   ffi-compiler = {
     dependencies = [
@@ -2530,10 +2544,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "19crlx2pnyxa8ncv874gz652hxh6yd9lr1354yznrgkqv5p37ir0";
+      sha256 = "0nqgpflmhz6z6hzfdggapr2d273wkjf7wpfn8a4svnhrbw21p75x";
       type = "gem";
     };
-    version = "3.33.1";
+    version = "3.33.2";
   };
   fog-core = {
     dependencies = [
@@ -2648,6 +2662,17 @@ src: {
     };
     version = "1.3.3";
   };
+  freezolite = {
+    dependencies = [ "require-hooks" ];
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "1z8x7fpyxq4fhk7267mw9v346yxyps2z0l2bj0q3lqrq8wr5wc51";
+      type = "gem";
+    };
+    version = "0.6.0";
+  };
   fugit = {
     dependencies = [
       "et-orbi"
@@ -2792,10 +2817,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "1v49b92vzc744pkl3ajg448p07lc7lc78ngm1fn86nc9l45rv03v";
+      sha256 = "0hlcnfr8jvjls1zgpf5kqk515yvhkkzmjfrdcvx9nkbrwffblvhv";
       type = "gem";
     };
-    version = "18.10.0";
+    version = "18.11.2";
   };
   gitlab = {
     dependencies = [
@@ -2889,10 +2914,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "1acdwilfp78j6sqpc05p1qwahifz7c6fiszys0624g8zm6kwi241";
+      sha256 = "0g5niy366wfnq6a3mnib7pqsa2cbd8nlisqn9fgp47afjk8dh5hw";
       type = "gem";
     };
-    version = "1.46.0";
+    version = "1.47.0";
   };
   gitlab-crystalball = {
     dependencies = [
@@ -2918,17 +2943,26 @@ src: {
       "rake"
     ];
     groups = [
-      "danger"
       "development"
       "test"
     ];
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "071ya53947byqrhs8jwrsfp8kp1va0lgbbmid0py9z4gqpz9rnqa";
+      sha256 = "0ca00fwbxj771mbh4sf3slcvnfyzmdb9va0sni36xdw1fm7akzg0";
       type = "gem";
     };
-    version = "4.10.0";
+    version = "4.11.1";
+  };
+  gitlab-database-data_isolation = {
+    dependencies = [ "activerecord" ];
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      path = "${src}/gems/gitlab-database-data_isolation";
+      type = "path";
+    };
+    version = "0.1.0";
   };
   gitlab-duo-workflow-service-client = {
     dependencies = [ "grpc" ];
@@ -2938,7 +2972,7 @@ src: {
       path = "${src}/vendor/gems/gitlab-duo-workflow-service-client";
       type = "path";
     };
-    version = "0.7";
+    version = "0.8";
   };
   gitlab-experiment = {
     dependencies = [
@@ -2956,6 +2990,7 @@ src: {
   };
   gitlab-fog-azure-rm = {
     dependencies = [
+      "base64"
       "faraday"
       "faraday-follow_redirects"
       "faraday-net_http_persistent"
@@ -2969,10 +3004,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "02rnrd403hp5hwgvrapl3mvqp6gzr422v81wwq8dlzm38bjqd2v7";
+      sha256 = "1c2dgzp55x72i23rf1psnz3j0qwjgdqgm8nfjz7f89brcvvd63zi";
       type = "gem";
     };
-    version = "2.4.0";
+    version = "2.5.0";
   };
   gitlab-gkg-proto = {
     dependencies = [ "grpc" ];
@@ -2980,10 +3015,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "19f9zfyqfdga30jlznf9maf2yjha403zh9bdcjhqj83yar4alh5q";
+      sha256 = "0wfsd8znb6ymv453m6ddbq26vsx0i64h0c81zhi432hm2kn5xfrw";
       type = "gem";
     };
-    version = "0.7.0";
+    version = "0.37.0";
   };
   gitlab-glfm-markdown = {
     dependencies = [ "rb_sys" ];
@@ -3000,6 +3035,7 @@ src: {
     dependencies = [
       "grape"
       "grape-entity"
+      "js_regex"
     ];
     groups = [ "default" ];
     platforms = [ ];
@@ -3075,10 +3111,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "09xpzgdww6kps22nrahxghql6hcvr2lwbr1llzy4zm767av8rj07";
+      sha256 = "1dsrxf1bl7nji9i65cy4dm7b92z83rxh16pzmaacmh6gy3rjla8n";
       type = "gem";
     };
-    version = "1.5.1";
+    version = "2.0.0";
   };
   gitlab-license = {
     groups = [ "default" ];
@@ -3138,7 +3174,6 @@ src: {
     ];
     groups = [
       "development"
-      "monorepo"
       "test"
     ];
     platforms = [ ];
@@ -3155,7 +3190,6 @@ src: {
     ];
     groups = [
       "development"
-      "monorepo"
       "test"
     ];
     platforms = [ ];
@@ -3220,10 +3254,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "183ww04pc3dzaxdmip4318akfx50c92p7nigzw4sd9habcadxv6r";
+      sha256 = "171jqcsfp74sakhm5z1hwx0yhrxydkpn37xp7vd7xcy4y8d9fr3d";
       type = "gem";
     };
-    version = "0.40.0";
+    version = "0.41.0";
   };
   gitlab-security_report_schemas = {
     dependencies = [
@@ -3271,10 +3305,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "1hgjrf41dvpsrblanhk00x367csjs3y4y2mlnxl5hd8njrrcbis6";
+      sha256 = "10sparj88m3h616fmd2prcrlh6fg30f8g47isrkhpxwmsycqicb8";
       type = "gem";
     };
-    version = "13.1.0";
+    version = "14.0.0";
   };
   gitlab-topology-service-client = {
     dependencies = [
@@ -3344,6 +3378,7 @@ src: {
       "fog-google"
       "gitlab"
       "http"
+      "http-cookie"
       "nokogiri"
       "parallel"
       "rainbow"
@@ -3353,16 +3388,15 @@ src: {
     ];
     groups = [
       "development"
-      "monorepo"
       "test"
     ];
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "0wi8fivbig3s8pifgby9hw36ax38wc2grb93w1dv3mv94cnplbjs";
+      sha256 = "0qy1j1f9q2ys17rz2rzpd5sl936b61fpr960h84nrr41x1kr3g05";
       type = "gem";
     };
-    version = "3.10.1";
+    version = "3.14.0";
   };
   gitlab_query_language = {
     dependencies = [ "rb_sys" ];
@@ -3370,10 +3404,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "0pbcbv2r160sc26gbpjslg8vbrapgsznvf9v5z828v3n87hwaxil";
+      sha256 = "0z07i4mlgkmx1lcgi8w7djfys4l83g6ym3arjpkii84wl06fimnx";
       type = "gem";
     };
-    version = "0.26.0";
+    version = "0.27.1";
   };
   globalid = {
     dependencies = [ "activesupport" ];
@@ -3417,20 +3451,6 @@ src: {
     };
     version = "0.92.0";
   };
-  google-apis-bigquery_v2 = {
-    dependencies = [ "google-apis-core" ];
-    groups = [
-      "default"
-      "test"
-    ];
-    platforms = [ ];
-    source = {
-      remotes = [ "https://rubygems.org" ];
-      sha256 = "0yrx6gn79r8j0msnclr6ayh2azbvn4nhc2k0y1sspdsznh92jqlb";
-      type = "gem";
-    };
-    version = "0.90.0";
-  };
   google-apis-cloudbilling_v1 = {
     dependencies = [ "google-apis-core" ];
     groups = [ "default" ];
@@ -3621,25 +3641,6 @@ src: {
     };
     version = "0.11.0";
   };
-  google-cloud-bigquery = {
-    dependencies = [
-      "bigdecimal"
-      "concurrent-ruby"
-      "google-apis-bigquery_v2"
-      "google-apis-core"
-      "google-cloud-core"
-      "googleauth"
-      "mini_mime"
-    ];
-    groups = [ "test" ];
-    platforms = [ ];
-    source = {
-      remotes = [ "https://rubygems.org" ];
-      sha256 = "0r8frzq74vxw790hfz78bzaf9rsjl6yhj2zpgpmygjlajxpjjizc";
-      type = "gem";
-    };
-    version = "1.62.0";
-  };
   google-cloud-common = {
     dependencies = [
       "google-protobuf"
@@ -3796,10 +3797,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "180dc99dgq6gsi65q8sxcdqxjkz09fifq8v97yn266qh9ivznr0v";
+      sha256 = "1p3cg5sf7if5vf17glhsm58ydk6cr68kgyi8y1h9qrcd5da82w9l";
       type = "gem";
     };
-    version = "4.33.5";
+    version = "4.34.1";
   };
   googleapis-common-protos = {
     dependencies = [
@@ -3825,10 +3826,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "0zyh9pxsw4zwv3iissirwqnx98qzkywqf3bwdrai6zpwph34ndsy";
+      sha256 = "1iy4pxpsbxjdiyd03mslalbcvrrga57h1mb0r0c01nnngfvr4x7r";
       type = "gem";
     };
-    version = "1.20.0";
+    version = "1.22.0";
   };
   googleauth = {
     dependencies = [
@@ -3991,10 +3992,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "0p6vdc7knd6a5jf08qkjc2hay30aqirbcmb40mh4vz8mwb3gys8i";
+      sha256 = "1461isji3k10dpg074afw4b10k8j6q8ngr2maxkww8scgvkb4nfb";
       type = "gem";
     };
-    version = "2.5.11";
+    version = "2.5.23";
   };
   graphql-docs = {
     dependencies = [
@@ -4401,10 +4402,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "03sx3ahz1v5kbqjwxj48msw3maplpp2iyzs22l4jrzrqh4zmgfnf";
+      sha256 = "1994i044vdmzzkyr76g8rpl1fq1532wf0sb21xg5r1ilj5iphmr8";
       type = "gem";
     };
-    version = "1.14.7";
+    version = "1.14.8";
   };
   i18n_data = {
     groups = [ "default" ];
@@ -4418,17 +4419,19 @@ src: {
   };
   icalendar = {
     dependencies = [
+      "base64"
       "ice_cube"
+      "logger"
       "ostruct"
     ];
     groups = [ "default" ];
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "11fl1kfqvgnh0vnryc9kbbaal693kdgf5h6qnj37p9wz5xkw5gqf";
+      sha256 = "1xfr3686v5brfwhpz7cjj638rxzac5z0jh7cxay184jd9dwgngdn";
       type = "gem";
     };
-    version = "2.10.3";
+    version = "2.12.2";
   };
   ice_cube = {
     groups = [ "default" ];
@@ -4499,10 +4502,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "01mcnadg742j3mh58qbz6mxc0zbdpidlqfhmhyxnbgqw7gfvnp61";
+      sha256 = "1cb3j76ybiq1sdjn93mmclxy5wps5lrnf2rfvhb391x369q3db38";
       type = "gem";
     };
-    version = "1.14.3";
+    version = "1.14.5";
   };
   ipaddress = {
     groups = [ "default" ];
@@ -4609,10 +4612,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "0x44b54yhwpdf1wyz12dshc382vwb04bkq51qx6yxwyxmnz20qm4";
+      sha256 = "1v92nxvgmgiqgmy5r5rjb92jzn3yicsjigv8j9b2qkzk02rppsan";
       type = "gem";
     };
-    version = "2.3.6";
+    version = "2.3.7";
   };
   js_regex = {
     dependencies = [
@@ -4624,10 +4627,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "008riic16i69s6rvs7j9sjky0nlcpvh1nqbwj878rd6hxdgf5adx";
+      sha256 = "18sh6dl0n9hy6jyl5vy4w39wnw907vg2yhvykxv03wjwqy8pcm29";
       type = "gem";
     };
-    version = "3.13.0";
+    version = "3.14.0";
   };
   json = {
     groups = [
@@ -4689,10 +4692,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "1avnyx2ympzbmkqbc9dfy87npzcfia8sys2dc9m6prs3p1y0h3h1";
+      sha256 = "04s0apfjh9ly3vkbb49iam4zx3jfccycd8bsls4z8bivy7k7q6g0";
       type = "gem";
     };
-    version = "1.4";
+    version = "1.4.2";
   };
   jsonpath = {
     dependencies = [ "multi_json" ];
@@ -4710,7 +4713,6 @@ src: {
     groups = [
       "default"
       "development"
-      "monorepo"
       "test"
     ];
     platforms = [ ];
@@ -4941,17 +4943,30 @@ src: {
       "dotenv"
       "octokit"
       "reverse_markdown"
-      "rugged"
       "thor"
     ];
     groups = [ "default" ];
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "0xyzk7gzi91l6xlwfvf2z0963jwd2csf987yk0ffbr5p9ycdp0ry";
+      sha256 = "0fvdnia0dlhp0l2kr2pwnq86w4dicqlsgp0nxjsgfjyq3gljm0xh";
       type = "gem";
     };
-    version = "9.18.0";
+    version = "10.0.0";
+  };
+  lint_roller = {
+    groups = [
+      "default"
+      "development"
+      "test"
+    ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "11yc0d84hsnlvx8cpk4cbj6a4dz9pk0r1k29p0n1fz9acddq831c";
+      type = "gem";
+    };
+    version = "1.1.0";
   };
   listen = {
     dependencies = [
@@ -5083,10 +5098,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "08bd7wvwhi1kk687bsa94pslcdbnf8nqmmr2q9bv11vspahh9ymc";
+      sha256 = "0z6dchw3f446dgdsn27z1gwjj23mbsnl0d26qi9va5crvqxnj6n1";
       type = "gem";
     };
-    version = "2.3.13";
+    version = "2.3.14";
   };
   lru_redux = {
     groups = [ "default" ];
@@ -5291,10 +5306,8 @@ src: {
   };
   mini_mime = {
     groups = [
-      "danger"
       "default"
       "development"
-      "monorepo"
       "test"
     ];
     platforms = [ ];
@@ -5770,10 +5783,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "0hisvj04523xsq0cmaw2lzwjj2pgwvkxfs6c9dfqh8cdb5wjc4wg";
+      sha256 = "11rj80dgjz05x5xx93y4bfk9rcn7fl56srj8fgqn7ffzf3j13kxs";
       type = "gem";
     };
-    version = "2.0.10";
+    version = "2.0.18";
   };
   observer = {
     groups = [
@@ -6063,6 +6076,19 @@ src: {
     };
     version = "0.8.0";
   };
+  open3 = {
+    groups = [
+      "default"
+      "development"
+    ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "0lirpxrqk2bw02m3p4g8r50h37qkr0ssmh9q2hh52qsj2chpsbcf";
+      type = "gem";
+    };
+    version = "0.2.1";
+  };
   open4 = {
     groups = [
       "default"
@@ -6136,6 +6162,7 @@ src: {
     version = "1.3.0";
   };
   opentelemetry-api = {
+    dependencies = [ "logger" ];
     groups = [
       "default"
       "opentelemetry"
@@ -6143,10 +6170,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "0kr1jyk67zn4axafcb2fji5b8xvr56hhfg2y33s5pnzjlr72dzfc";
+      sha256 = "1yvr0124j5hndqp520kizf9s3pvlbyiqxlwqskcanfsq4vfnah6j";
       type = "gem";
     };
-    version = "1.7.0";
+    version = "1.9.0";
   };
   opentelemetry-common = {
     dependencies = [ "opentelemetry-api" ];
@@ -6157,10 +6184,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "160ws06d8mzx3hwjss2i954h8r86dp3sw95k2wrbq81sb121m2gy";
+      sha256 = "0wx79z0y4kqb49f85bjsnnd8s002nxjnmmklxgz6gila7cipnr7i";
       type = "gem";
     };
-    version = "0.21.0";
+    version = "0.24.0";
   };
   opentelemetry-exporter-otlp = {
     dependencies = [
@@ -6189,10 +6216,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "0kssrgcm716blgn4qhhngp9xmzw1ng9y0xdw9m6x3g9512rc02fk";
+      sha256 = "0dwk7mcwz7qiwff4g1jwhs5jxhgg9pg5z2zjiid7fd64a1lmxsvy";
       type = "gem";
     };
-    version = "0.4.0";
+    version = "0.6.0";
   };
   opentelemetry-helpers-sql = {
     dependencies = [ "opentelemetry-api" ];
@@ -6203,10 +6230,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "1y9p7xxn491pjdcb9n4m25lvpigr63ywflqw9lfd8vd1sqbq1c2b";
+      sha256 = "1yqa891zajjpaph2a25s4n5ycnfwxzjb7fsiz65aja6a5hx8q3mi";
       type = "gem";
     };
-    version = "0.3.0";
+    version = "0.4.0";
   };
   opentelemetry-helpers-sql-processor = {
     dependencies = [
@@ -6220,10 +6247,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "1x13ig8z9fabw5l3p5lrm0ad80qsibmx0cfw8z99n8c751x8s8zc";
+      sha256 = "1wg0s0ydbc69g6irw8f24z5d86dg6144abqby3cwn7s5r4dj96di";
       type = "gem";
     };
-    version = "0.4.0";
+    version = "0.5.0";
   };
   opentelemetry-instrumentation-action_mailer = {
     dependencies = [ "opentelemetry-instrumentation-active_support" ];
@@ -6234,10 +6261,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "0mqh8z6myff0j11zcnm34s1lc8qzmzzqdrhzk95y2sh6vdmqd143";
+      sha256 = "1wh7bkqm33vfpl4cj4cv93avbsx21pkbgbmnpwjsfxkpldd96zqr";
       type = "gem";
     };
-    version = "0.6.1";
+    version = "0.7.0";
   };
   opentelemetry-instrumentation-action_pack = {
     dependencies = [ "opentelemetry-instrumentation-rack" ];
@@ -6245,10 +6272,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "0wzj0xmivyx243slz526z54lqyhsiyzzrbha4szyxjl30xsdxyl4";
+      sha256 = "1m4z12zrn6xszb7rpyzvcqasphkvhm8k7zirgc4zlm05snzdhy5b";
       type = "gem";
     };
-    version = "0.15.1";
+    version = "0.17.0";
   };
   opentelemetry-instrumentation-action_view = {
     dependencies = [ "opentelemetry-instrumentation-active_support" ];
@@ -6256,10 +6283,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "1z7s35vscxi0dsd588ggc41j3rzikslzrmlkk70snbb7bl0rk876";
+      sha256 = "0cnpw9s7995s3z1rk0yaz0fgibwkbg1wdrk8yzrnhl7r9saiamia";
       type = "gem";
     };
-    version = "0.11.2";
+    version = "0.12.0";
   };
   opentelemetry-instrumentation-active_job = {
     dependencies = [ "opentelemetry-instrumentation-base" ];
@@ -6267,10 +6294,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "129ajjrxigl4pag1nlzbdv1js5bij4ll92i1ix50c3f24h9338df";
+      sha256 = "13bax2vrmxgs3blg1iv5fjmhqmwf8ny0c5xpi8i6rsifmi401xxs";
       type = "gem";
     };
-    version = "0.10.1";
+    version = "0.11.0";
   };
   opentelemetry-instrumentation-active_model_serializers = {
     dependencies = [ "opentelemetry-instrumentation-active_support" ];
@@ -6289,10 +6316,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "14kwks0130mrggk3irg4qvx5fmwk9gxv6w23dy6ryi50xqs3y20v";
+      sha256 = "1vxnbz7hak67wyk4pqaw2rl4h948g49qb4d5wpicx5h0q5wingrb";
       type = "gem";
     };
-    version = "0.11.1";
+    version = "0.12.0";
   };
   opentelemetry-instrumentation-active_storage = {
     dependencies = [ "opentelemetry-instrumentation-active_support" ];
@@ -6303,10 +6330,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "17p8zmfyigdqvgy3d1691ayzm6nj4q4nx2n3qk01f7wjakphz6zq";
+      sha256 = "0d9hgyxlglz8a9w9f2w0zgsgm9ip922ddb16lza7j46ghq0pqjpp";
       type = "gem";
     };
-    version = "0.3.1";
+    version = "0.4.0";
   };
   opentelemetry-instrumentation-active_support = {
     dependencies = [ "opentelemetry-instrumentation-base" ];
@@ -6314,10 +6341,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "0zf5kg2h9zgmrwnq7v7by2nyhkxa20gmi5nyqqrpwyaqf4v9isl2";
+      sha256 = "0s6rlpb2slyc3lcspw1sjaj3b1jm60q4aaj7whdi959h4gnmvnkv";
       type = "gem";
     };
-    version = "0.10.1";
+    version = "0.11.0";
   };
   opentelemetry-instrumentation-all = {
     dependencies = [
@@ -6414,10 +6441,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "09ysfv2x25svwl4yxrbgmjkwrlkylr7plci3jjb6wkim11zklak4";
+      sha256 = "1q1bjax9g707z9ylbpbrdhnwj53ln68d9s6l7c8lvq4dkbzqpv7x";
       type = "gem";
     };
-    version = "0.25.0";
+    version = "0.26.0";
   };
   opentelemetry-instrumentation-bunny = {
     dependencies = [ "opentelemetry-instrumentation-base" ];
@@ -6447,10 +6474,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "0bxw2ji4nzkkb1i9mkrdxxwbb6jjxwdgvjc1wbbyh2anai86cs52";
+      sha256 = "0kqg4ydg6qm0b12y4xfjyc8xx42n9pa8b0phqy494lnirrr2gf11";
       type = "gem";
     };
-    version = "0.29.0";
+    version = "0.29.2";
   };
   opentelemetry-instrumentation-delayed_job = {
     dependencies = [ "opentelemetry-instrumentation-base" ];
@@ -6502,10 +6529,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "093nvx4zr7qgwi62y0haimca4z99ki0mpplbgdbn7dhmn09vxz5r";
+      sha256 = "1vy0kss2k2mwvn4ms61605qbj6mzh80882ymyh9w95hfy67608x6";
       type = "gem";
     };
-    version = "0.5.0";
+    version = "0.5.1";
   };
   opentelemetry-instrumentation-graphql = {
     dependencies = [ "opentelemetry-instrumentation-base" ];
@@ -6601,10 +6628,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "0ylwgxh6syn79z7mg397hkqqz7fkc5h9k7s6ghpai3ljkxk8aifh";
+      sha256 = "1fclzfiqrzyj132r9lyjh2rg4f01slrl68nd5q1snq0cpd28asmn";
       type = "gem";
     };
-    version = "0.25.0";
+    version = "0.25.1";
   };
   opentelemetry-instrumentation-mysql2 = {
     dependencies = [
@@ -6815,13 +6842,14 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "08k8zqrg47v1jxcvxz9wxyqm03kjdw98qa8q0y840qvh988vcshi";
+      sha256 = "0kzv35x5jbpsbp3cjd99c0a1x2ksmfw83fzplpx3x8lkva5aav3j";
       type = "gem";
     };
-    version = "0.3.0";
+    version = "0.5.0";
   };
   opentelemetry-sdk = {
     dependencies = [
+      "logger"
       "opentelemetry-api"
       "opentelemetry-common"
       "opentelemetry-registry"
@@ -6831,10 +6859,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "06jjh25s94lv94ljgbq13baqgnkccdsvzsw6xg54vwldpr4rjwa3";
+      sha256 = "1ijh31xvjinglvm3h9g9b5f0h1qqp7nay4bclkzha8bkyh46fz22";
       type = "gem";
     };
-    version = "1.10.0";
+    version = "1.11.0";
   };
   opentelemetry-semantic_conventions = {
     dependencies = [ "opentelemetry-api" ];
@@ -6845,10 +6873,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "0xhv5fwwgjj2k8ksprpg1nm5v8k3w6gyw4wiq2k08q3kf484rlhk";
+      sha256 = "1hzlz2h2izkyn1f42495jp9xikg50f9nyz7sn0pvl6cycjnwab8y";
       type = "gem";
     };
-    version = "1.10.0";
+    version = "1.37.0";
   };
   opentracing = {
     groups = [ "default" ];
@@ -7384,10 +7412,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "1a3jd9qakasizrf7dkq5mqv51fjf02r2chybai2nskjaa6mz93mz";
+      sha256 = "0z6k79ns8wgz12k3m2r0jc9ddiq6zh8imr4azg0ihmv50w6fb53v";
       type = "gem";
     };
-    version = "7.2.0";
+    version = "8.0.1";
   };
   pyu-ruby-sasl = {
     groups = [ "default" ];
@@ -7533,10 +7561,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "1ysx29gk9k14a14zsp5a8czys140wacvp91fja8xcja0j1hzqq8c";
+      sha256 = "0qy4ylhcfdn65a5mz2hly7g9vl0g13p5a0rmm6sc0sih5ilkcnh0";
       type = "gem";
     };
-    version = "2.1.0";
+    version = "2.2.0";
   };
   rack-timeout = {
     groups = [ "default" ];
@@ -7624,10 +7652,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "0fx9dx1ag0s1lr6lfr34lbx5i1bvn3bhyf3w3mx6h7yz90p725g5";
+      sha256 = "07awj8bp7jib54d0khqw391ryw8nphvqgw4bb12cl4drlx9pkk4a";
       type = "gem";
     };
-    version = "2.2.0";
+    version = "2.3.0";
   };
   rails-html-sanitizer = {
     dependencies = [
@@ -7643,10 +7671,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "1w6bqm8d3afc66ff6npnsc2d8ky552n6qzwwwc1bh0wz6c8gplp3";
+      sha256 = "128y5g3fyi8fds41jasrr4va1jrs7hcamzklk1523k7rxb64bc98";
       type = "gem";
     };
-    version = "1.6.1";
+    version = "1.7.0";
   };
   rails-i18n = {
     dependencies = [
@@ -7706,15 +7734,17 @@ src: {
     groups = [
       "default"
       "development"
+      "monorepo"
+      "opentelemetry"
       "test"
     ];
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "15whn7p9nrkxangbs9hh75q585yfn66lv0v2mhj6q6dl6x8bzr2w";
+      sha256 = "009p524zl0p0kfa65nii8wdmaigkmawv9pbvlcffky7islmmp0nb";
       type = "gem";
     };
-    version = "13.0.6";
+    version = "13.4.2";
   };
   rake-compiler-dock = {
     groups = [ "default" ];
@@ -7756,15 +7786,18 @@ src: {
     version = "0.10.1";
   };
   rb_sys = {
-    dependencies = [ "rake-compiler-dock" ];
+    dependencies = [
+      "json"
+      "rake-compiler-dock"
+    ];
     groups = [ "default" ];
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "1rvshyirm32lzf2sggcrhvz5hi828s3rznmkchvzgshjgdapcd2i";
+      sha256 = "1y5fjlnf5hmix54klxxh19zc7clyh16bc91x1fpfx2abic5qx5ds";
       type = "gem";
     };
-    version = "0.9.124";
+    version = "0.9.126";
   };
   rbs = {
     dependencies = [ "logger" ];
@@ -7914,10 +7947,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "083i9ig39bc249mv24nsb2jlfwcdgmp9kbpy5ph569nsypphpmrs";
+      sha256 = "0jw2xjzz24dwn85y8v1jf1vzzpsnypsvs06f1qfa91w7rpwr5248";
       type = "gem";
     };
-    version = "0.26.4";
+    version = "0.28.0";
   };
   redis-cluster-client = {
     dependencies = [ "redis-client" ];
@@ -7925,10 +7958,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "0k10k2r78dqi00pjl3blrsm48d431g8dcax6n93xpg09h1cwkmhq";
+      sha256 = "00g25ip7i5jabb4lzcx7123z6xshvy4bzjmqz8nwnpjqx2nr2265";
       type = "gem";
     };
-    version = "0.13.5";
+    version = "0.15.0";
   };
   redis-clustering = {
     dependencies = [
@@ -7989,10 +8022,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "0qccah61pjvzyyg6mrp27w27dlv6vxlbznzipxjcswl7x3fhsvyb";
+      sha256 = "1fwfw26a32rps78920nn29shqg2zmqv72i89j1fap41isshida9m";
       type = "gem";
     };
-    version = "2.10.0";
+    version = "2.12.0";
   };
   regexp_property_values = {
     groups = [ "default" ];
@@ -8045,6 +8078,16 @@ src: {
     };
     version = "1.7.0";
   };
+  require-hooks = {
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "1j7s1sahqf36fdibd5f19sjh8rrnv80cb1ijnxya9lhgpssfajr2";
+      type = "gem";
+    };
+    version = "0.2.3";
+  };
   responders = {
     dependencies = [
       "actionpack"
@@ -8381,6 +8424,7 @@ src: {
     dependencies = [
       "json"
       "language_server-protocol"
+      "lint_roller"
       "parallel"
       "parser"
       "rainbow"
@@ -8396,13 +8440,16 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "1ypwxjy2cp44278m9ljg3s937n2cd6x4yskcyzf1k9m3hkjd3pyk";
+      sha256 = "157hg99cq6ys670sw8xbggnvxc9yl50h1zhllki925kkihlwrdbg";
       type = "gem";
     };
-    version = "1.71.1";
+    version = "1.81.7";
   };
   rubocop-ast = {
-    dependencies = [ "parser" ];
+    dependencies = [
+      "parser"
+      "prism"
+    ];
     groups = [
       "default"
       "development"
@@ -8411,10 +8458,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "1bi6pgnii77763dzwhafcp8lrmnh4n1bqbdimhc9lfj4zs96gpsg";
+      sha256 = "1zbikzd6237fvlzjfxdlhwi2vbmavg1cc81y6cyr581365nnghs9";
       type = "gem";
     };
-    version = "1.38.0";
+    version = "1.49.0";
   };
   rubocop-capybara = {
     dependencies = [ "rubocop" ];
@@ -8474,10 +8521,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "0kkkv073c01px27w69g93gbjwajxji5wmawrmbb5l9s4ll101wjw";
+      sha256 = "10hv0lz54q34dlwx6vld0qx1fjskfb0nyb5c18cadrpmjnkqcbzj";
       type = "gem";
     };
-    version = "1.21.1";
+    version = "1.23.1";
   };
   rubocop-rails = {
     dependencies = [
@@ -8494,10 +8541,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "1bc4xpyx0gldjdmbl9aaqav5bjiqfc2zdw7k2r1zblmgsq4ilmpm";
+      sha256 = "1ahpgc22shmkk1n96rz3islcpx5sgg4z3mblynjz8qjxipsgrhj1";
       type = "gem";
     };
-    version = "2.26.2";
+    version = "2.29.1";
   };
   rubocop-rspec = {
     dependencies = [ "rubocop" ];
@@ -8509,10 +8556,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "03vyjxs5rzrsn5graljffgzy1fgbyn99w5fz69y243dhn6gy5a66";
+      sha256 = "11a89mzbby49hbd8nhkjrxpr8bq24fafl728mjkk15ccd8xw28c7";
       type = "gem";
     };
-    version = "3.0.5";
+    version = "3.4.0";
   };
   rubocop-rspec_rails = {
     dependencies = [
@@ -8589,10 +8636,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "02nmaw7yx9kl7rbaan5pl8x5nn0y4j5954mzrkzi9i3dhsrps4nc";
+      sha256 = "0cwvyb7j47m7wihpfaq7rc47zwwx9k4v7iqd9s1xch5nm53rrz40";
       type = "gem";
     };
-    version = "1.11.0";
+    version = "1.13.0";
   };
   ruby-saml = {
     dependencies = [
@@ -8686,19 +8733,6 @@ src: {
     };
     version = "1.7.2";
   };
-  safe_yaml = {
-    groups = [
-      "default"
-      "test"
-    ];
-    platforms = [ ];
-    source = {
-      remotes = [ "https://rubygems.org" ];
-      sha256 = "1hly915584hyi9q9vgd968x2nsi5yag9jyf5kq60lwzi5scr7094";
-      type = "gem";
-    };
-    version = "1.0.4";
-  };
   safety_net_attestation = {
     dependencies = [ "jwt" ];
     groups = [ "default" ];
@@ -9111,10 +9145,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "1pl70rh92wsn15q4lwzikzi7j5a00vm77bqjg07k4sgzx0wjx2zy";
+      sha256 = "0mnllrwhs7psw6xxs8x5yx85k12qjfdgs8zs0bxm70bfascx58r5";
       type = "gem";
     };
-    version = "2.0.0";
+    version = "2.0.3";
   };
   snowplow-tracker = {
     groups = [ "default" ];
@@ -9128,6 +9162,7 @@ src: {
   };
   solargraph = {
     dependencies = [
+      "ast"
       "backport"
       "benchmark"
       "diff-lcs"
@@ -9136,24 +9171,27 @@ src: {
       "kramdown-parser-gfm"
       "logger"
       "observer"
+      "open3"
       "ostruct"
       "parser"
+      "prism"
       "rbs"
       "reverse_markdown"
       "rubocop"
       "thor"
       "tilt"
       "yard"
+      "yard-activesupport-concern"
       "yard-solargraph"
     ];
     groups = [ "development" ];
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "1q40v3xrx8zzcpk84mcb4f80zc49vp98pphlffb5w20sa760a9w4";
+      sha256 = "0s9fzq4rax47nvypwq84k4mr0g9pf6gdibf4na1j7ryi4z4zvgny";
       type = "gem";
     };
-    version = "0.54.4";
+    version = "0.58.3";
   };
   solargraph-rspec = {
     dependencies = [ "solargraph" ];
@@ -9424,10 +9462,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "08bln6c3qmylakgpmpswv4zdis8bf96nkbrxpb9xcal2i7g1j29r";
+      sha256 = "0cshw6aqq7ws4sbl0b4g50fgvffykbchjpnzanmg1f9lly85i6bg";
       type = "gem";
     };
-    version = "1.4.3";
+    version = "1.5.5";
   };
   sysexits = {
     groups = [
@@ -9590,7 +9628,6 @@ src: {
     groups = [
       "default"
       "development"
-      "omnibus"
       "test"
     ];
     platforms = [ ];
@@ -9642,7 +9679,6 @@ src: {
     groups = [
       "default"
       "development"
-      "monorepo"
       "test"
     ];
     platforms = [ ];
@@ -9948,6 +9984,7 @@ src: {
   undercover = {
     dependencies = [
       "base64"
+      "benchmark"
       "bigdecimal"
       "imagen"
       "rainbow"
@@ -9956,17 +9993,16 @@ src: {
       "simplecov_json_formatter"
     ];
     groups = [
-      "coverage"
       "development"
       "test"
     ];
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "176hb1i1fwknsvhzkyg3x981yhg97gdmzpq1ww38sb5vls9xz9lr";
+      sha256 = "1adak4lxqhqnzxja3hjm1frpy63y7cw2l9ycxgla421sxxvkqjh5";
       type = "gem";
     };
-    version = "0.8.4";
+    version = "0.8.5";
   };
   unf = {
     dependencies = [ "unf_ext" ];
@@ -10153,10 +10189,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "0270m29n7mq9yq4xnjzryzr6jxf292ahjn9fzywm2rg3rdz7cr59";
+      sha256 = "195r5qylwxwqbllnpli9c2pzin0lky6h3fw912h88g2lmri0j6hc";
       type = "gem";
     };
-    version = "1.1.8";
+    version = "1.1.9";
   };
   version_sorter = {
     groups = [ "default" ];
@@ -10230,10 +10266,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "08nkhycypxqcyi7yxnmh2dinwsl924gk1lp7g096qqdcdgs82fzi";
+      sha256 = "11lsr9c9v7xpyz0z6yxvw992aaqxcxivm5pmh7fbn2hqxd8m8inv";
       type = "gem";
     };
-    version = "3.10.1";
+    version = "3.10.2";
   };
   vmstat = {
     groups = [ "default" ];
@@ -10324,10 +10360,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "12d9n8hll67j737ym2zw4v23cn4vxyfkb6vyv1rzpwv6y6a3qbdl";
+      sha256 = "0ca1hr2rxrfw7s613rp4r4bxb454i3ylzniv9b9gxpklqigs3d5y";
       type = "gem";
     };
-    version = "1.9.1";
+    version = "1.9.2";
   };
   websocket = {
     groups = [
@@ -10480,6 +10516,20 @@ src: {
     };
     version = "0.9.38";
   };
+  yard-activesupport-concern = {
+    dependencies = [ "yard" ];
+    groups = [
+      "default"
+      "development"
+    ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "1vwhhgkkrw57anbbsyv5aihmhhxpr255jqvhcy3jwgn2xyq0qydy";
+      type = "gem";
+    };
+    version = "0.0.1";
+  };
   yard-solargraph = {
     dependencies = [ "yard" ];
     groups = [