GitLab

Disallow path traversal in Docker credential helper in `DOCKER_AUTH_CONFIG`

See merge request gitlab-org/security/gitlab-runner!15

Merge branch 'security-remove-file-based-variables-at-the-end-of-job-execution-13-3' into '13-3-stable'

13.3: Remove file based variables at the end of job execution

See merge request gitlab-org/security/gitlab-runner!23

Through `DOCKER_AUTH_CONFIG`

# Conflicts:
#	helpers/docker/auth/auth.go
#	helpers/docker/auth/auth_test.go

Merge branch 'security-add-support-for-cap-add-and-drop-in-kubernetes-executor-13-3' into '13-3-stable'

13.3: Add support for cap_add and cap_drop in Kubernetes executor

See merge request gitlab-org/security/gitlab-runner!18

13.3: Fix possible DoS via CI jobs

See merge request gitlab-org/security/gitlab-runner!8

Document how to renew GPG key

See merge request gitlab-org/gitlab-runner!2336

Synchronize lint rules and fix where required

See merge request gitlab-org/gitlab-runner!2341

Docs: Update Documentation template to reflect standard

See merge request gitlab-org/gitlab-runner!2332

Fix name script

See merge request gitlab-org/gitlab-runner!2339

Creation of Openshift Runner doc.

See merge request gitlab-org/gitlab-runner!2296

Add an ENTRYPOINT script to the helper image Dockerfiles to add CA certificates

See merge request gitlab-org/gitlab-runner!2058

Update changelog generator to accept new labels

See merge request gitlab-org/gitlab-runner!2271

Entry point script will install certificate from well-known directory if
it exists

Every year the GPG key we use to sign packages expires. We don't have
the process of how to renew the key anywhere.

reference https://gitlab.com/gitlab-org/gitlab-runner/-/issues/26677

Document security release process

See merge request gitlab-org/gitlab-runner!2322

reference https://gitlab.com/gitlab-org/gitlab-runner/-/issues/21301

Docs: Added specific token steps

See merge request gitlab-org/gitlab-runner!2317

Related to: https://gitlab.com/gitlab-org/gitlab/-/issues/221499