chore(deps): update dependency gitlab-org/gitlab-runner to v18

[Adphi]

This PR contains the following updates:

Package	Update	Change
gitlab-org/gitlab-runner	major	v17.3.1 -> v18.3.0

---

Release Notes

gitlab-org/gitlab-runner (gitlab-org/gitlab-runner)

v18.3.0

Compare Source

New features

• Add native GitLab Secrets Manager support to GitLab Runner !5733
• Add method label to status counter metrics !5739
• Add status_class and method label to request duration metrics !5752
• Update step-runner version to 0.15.0 !5757
• Record request retries. !5758

Bug fixes

• Update fastzip to v0.2.0 !5778
• Fix identity for aws_secrets_manager_resolver !5747
• Consume docker auth info in order !5686
• [docker] Separate cache volumes for builds against protected and unprotected !5773
• Add correlation id header to outgoing requests !5743
• Add support for 503 http code when the GitLab instance is in maintenance mode !5685
• Enable image executor opts in the kubernetes executor !5745
• Fix job duration reporting !5711
• Update fleeting plugin dependency !5776
• Parse the last line of stdout for UID/GID !5765
• Fix proxy-exec store temporary directory !5780
• Fix cache key sanitation issues, esp. re. "cache key files" !5741
• Tighten cache key sanitation !5719

Maintenance

• Add operator pod_spec and deployment_spec docs !5766
• Remove unused lock from client struct !5770
• Mention that systempaths security_opt is not supported !5769 (Andrés Delfino @​andresdelfino)
• Change link to GA issue for the overwrite pod spec feature !5732
• Update a few region/zone IDs in examples !5720
• Add a max age of 24h for Kubernetes integration RBAC resources !5760
• Chore: Use stable alpine for RISC-V !5714 (Aaron Dewes @​AaronDewes)
• Allow customization of taskscaler and fleeting parameters in config.toml !5777 (Sven Geisler @​sge70)
• Move backoff retry logic to retry requester !5754
• Refactor gitlab client unregister runner to table tests !5670
• Fix localization codeowners !5712
• Lbhardwaj/refactor/unregister command methods !5742
• Refactor move retry 429 status code logic to one place !5727
• Add test for abstract shell guardGetSourcesScriptHooks method !5702
• Sync vale rules from main project - Runner !5753
• Refactor verify runner tests to table tests and better assertions !5763
• Bridge releases with Hosted Runners !5746
• Cleanup dead code related to disabled Akeyless secrets integration feature !5762
• Drop Alpine Version 3.18 !5744
• Refactor kubernetes feature checker tests !5774
• Remove EOL spaces in docs !5749
• Remove line length rule for markdownlint for i18n files !5723
• Fix minor typos with executor interface docs !5717
• Correct erroneous compatibility chart features for docker-autoscaler !5755
• Docker machine AMI update !5718
• Add errorlint linter to golangci-lint settings !5750
• Introduce unnecessary-traversal Markdownlint rule to Runner docs !5735
• Upgrade prebuilt runner images back to Alpine 3.21 !5730 (Aaron Dewes @​AaronDewes)
• Upstream batch push 2025-07-21 !5734
• Refactor errors to wrap errors !5731
• Minor grammar updates in GitLab Runner README !5756 (Anshi Mehta @​anshikmehtaa)
• Unregister command unit tests !5738
• A bit of general copy edit cleanup !5740
• Update index file for getting started !5722
• Update hosted runners bridge wiki entry !5767
• Minor improvements to runner fleet scaling best practices doc !5737
• Add a note about the experiment status of GRIT !5729

v18.2.2

Compare Source

See the changelog 🚀

GitLab Runner documentation can be found at https://docs.gitlab.com/runner/.

v18.2.1

Compare Source

See the changelog 🚀

GitLab Runner documentation can be found at https://docs.gitlab.com/runner/.

v18.2.0

Compare Source

New features

• Add reference to z/OS on the main runner install page !5647
• Thread job request correlation ID to git operations !5653
• Add functionality to retrieve secrets from AWS SecretsManager !5587 (Markus Siebert @​m-s-db)
• Update docs on how to use env variables for S3 cache access !5648
• Improve runner_name metric label coverage !5609 (Josh Smith @​jsmith25)
• Log usage of deault image for Docker and K8S executors !5688

Bug fixes

• Tighten cache key sanitation !5719
• Add troubleshooting guide for GCS workload identity !5651
• Skip pre and post checkout hooks for empty !5677
• Docs: Fix protocol_port default for SSH !5701
• Revert MRs 5531 and 5676 !5715
• Reimplement ShortenToken !5681
• Put the fips binary in the fips runner image !5669
• Set helper_image_flavor to ubi-fips when fips mode is enabled !5698
• Ensure BuildErrors have FailureReason !5676
• Fix kubernetes executor helper image override log !5655 (Ricard Bejarano @​ricardbejarano)
• Add -depth option to find -exec rm invocations !5692

Maintenance

• Add known SELinux issue regarding tmp and pip to the Podman docs !5661
• Switch jobs to Kubernetes !5631
• Updated the documents !5596 (Jithin Vijayan @​jithin.vijayan)
• Update docker machine versions !5672
• Add autoscaler IP address logging options !5519 (Brayden White @​bwhite117)
• Docs: Improve prometheus scraping metrics docs including Operator !5657
• Update default ruby version in examples !5693
• Add aardvark-dns bug notice to podman guide !5689 (Felix @​f.preuschoff)
• Update region from us-central-1 to eu-central-1 !5713
• Run fewer vale lint rules on i18n (translation) docs MRs !5699
• Add additonal info about SHA-pinned images !5700
• Bump golang to 1.24.4 !5668
• chore: refactor TestAttachPodNotRunning !5650 (Muhammad Daffa Dinaya @​mdaffad)
• Update access a private registry from kubernetes executor !5622
• Add configure runner on OCI to the index page !5649
• Clean up runner docs !5697
• Fix OS version package support docs !5703
• Add .markdownlint-cli2.yaml for doc-locale !5690
• Fix this test !5682
• Update mockery to latest version 3.3.4 and generate mocks !5646
• Remove outdated information !5691
• Update file _index.md !5665
• Update SLSA build type documentation !5639
• Document tarzstd as an argument for CACHE_COMPRESSION_FORMAT !5673
• Clarify documentation on reading S3 credentials from the environment !5671
• Add Kubernetes executors docs for helper container memory sizing !5659
• Runner doc restructuring: Revamp the admin section index page !5678
• Add formatting target for easy fixes with golangci-lint !5658
• Add overprovisioning note, fix typos !5656
• Refactor gitlab client request job tests to table tests !5666
• Fix indent in config.toml example. !5667 (Mathieu Gouin @​mathieugouin)
• Update PowerShell UTF8 integration test !5493 (Guillaume Chauvel @​guillaume.chauvel)
• Update step-runner version to 0.13.0 !5705
• Fix docs pipelines for forks !5664
• Small typo fixes !5652

v18.1.3

Compare Source

See the changelog 🚀

GitLab Runner documentation can be found at https://docs.gitlab.com/runner/.

v18.1.2

Compare Source

See the changelog 🚀

GitLab Runner documentation can be found at https://docs.gitlab.com/runner/.

v18.1.1

Compare Source

See the changelog 🚀

GitLab Runner documentation can be found at https://docs.gitlab.com/runner/.

v18.1.0

Compare Source

New features

• Added safety checks for nil sessions and empty endpoints !5515 (Zubeen @​syedzubeen)
• Log a different message for policy jobs with highest precedence !5628
• Add adaptive request concurrency !5546
• Allow to install/manipulate the gitlab-runner service as a user service (systemd) !5534 (Tiago Teixeira @​tiago.teixeira.erx)
• Bump base images to allow native clone to work !5561
• Support user as integer for Docker/Kubernetes executor_opts !5552
• Thread job request correlation ID to git operations !5653
• make preemptive mode configurable !5565 (Pascal Sochacki @​pascal.sochacki)
• Add queue_size and queue_depth metrics !5592
• Log policy job information !5591
• Add more request_concurrency related metrics !5558
• Enable powershell native clone !5577 (Guillaume Chauvel @​guillaume.chauvel)
• Add support for Overlay Volume Mounts when Podman is used with Docker Executor !5522 (Napuu @​napuu)

Bug fixes

• Stop following symlinks when archiving documents !5543
• Docker+autoscaler: Properly clean up when a job times out or is cancelled !5593
• Fix AWS GovCloud with AWS S3 cache !5613
• Fix final job duration handling !5583
• Document DinD DNS behavior with network-per-build feature !5611
• Run git config cleanup before creating the template dir !5598
• Fix authentication towards HTTP docker registries !5329 (François HORTA @​fhorta1)
• Switch the default for FF_GIT_URLS_WITHOUT_TOKENS back to false !5572
• Handle the new glrtr- prefix !5580

Maintenance

• Update golang.org/x/net to fix CVE-2025-22872 !5594
• Added missing commas !5579
• Docker executor image clarification and macOS virtualization info !5571 (Charles Uneze @​network-charles)
• Fix rules for the unit test job !5618
• Tidy runner_wrapper/api !5604
• Limit Unit test job to only MR pipelines for forks !5608
• Making timeout to acquire a new instance configurable within gitlab-runner !5563 (Moritz Scheve @​schevmo)
• Remove outdated information !5620
• Add correlation_id to request logs !5615
• Bump base-images to 0.0.18 !5633
• Fix pipelines for forks !5607
• Update redirected links !5605
• Improve pipelines for community, fork, docs MRs !5576
• Fix protoc binary download for macos !5570
• Document how to install GitLab Runner on z/OS manually !5641
• Upgrade Go to v1.24.3 !5562
• Clean up stray whitespace !5585
• Remove kaniko references in GitLab Runner docs !5560
• Update step-runner dependency version to 0.11.0 !5645
• Update dates in examples !5621
• Clean up tables in misc runner docs !5589
• Docs: more bold cleanup !5586
• Document how to set environment variables in GitLab Runner Helm chart !5559
• Restrict danger-review to canonical GitLab forks !5640
• Push GitLab Documentation Translations Upstream [2025-06-09] !5630
• docs: Add custom executor "shell" property !5578 (Guillaume Chauvel @​guillaume.chauvel)
• Remove randomness of TestProcessRunner_BuildLimit failures !5588
• Run Hugo build test on the correct Docs branch !5545
• Install local dev tools and dependency binaries in on go !5632
• chore: install tool binaries in tmp bin !5629
• docs: Remove a line that is not accurate to the current usages of GRIT !5601
• Config options refactor !5373
• Move internal docs into development directory !5595
• Update CHANGELOG to take in account 17.10.x to 18.0.x releases !5643
• Update docker machine in docs !5603
• Remove outdated mention !5582
• Added Experimental Status !5602
• Remove outdated content !5597
• Use mockery constructors in tests !5581
• Auto-format all remaining runner tables !5584
• Update the cntlm link to the new fork !5556 (Dan Fredell @​DFredell)
• Update docker-machine version in docs !5617

v18.0.5

Compare Source

See the changelog 🚀

GitLab Runner documentation can be found at https://docs.gitlab.com/runner/.

v18.0.4

Compare Source

See the changelog 🚀

GitLab Runner documentation can be found at https://docs.gitlab.com/runner/.

v18.0.3

Compare Source

Bug fixes

• Fix AWS GovCloud with AWS S3 cache !5613
• Run Git config cleanup before creating the template dir !5598

Maintenance

• Remove randomness of TestProcessRunner_BuildLimit failures !5588

v18.0.2

Compare Source

Bug fixes

• Handle the new glrtr- prefix !5580
• Fix final job duration handling !5583

v18.0.1

Compare Source

Bug fixes

• Switch the default for FF_Git_URLS_WITHOUT_TOKENS back to false !5572

v18.0.0

Compare Source

New features

• Add exponential backoff to execute stage retries !4517
• Add support for uid:gid format for Kubernetes executor options !5540
• Add adaptive request concurrency !5546
• Add more request_concurrency related metrics !5558
• Suppress unnecessary warnings when Kubernetes user values are empty !5551
• Shells: Implement the use of Git-clone(1) again !5010
• Adding How To Configure PVC Cache !5536
• Improve runner build failure reasons !5531

Bug fixes

• Add support for submodules in the exec command !75 (Lucas @​fresskoma)
• Reimplement pull-policy validation !5514
• Update fleeting dependency !5535
• Add Cloud provider error message details for cache upload failures to cloud storage targets !5527

Maintenance

• FF_Git_URLS_WITHOUT_TOKENS defaults to true !5525
• Wait for MR image before starting runner incept !5528
• Remove outdated mentions !5510
• Update markdownlint for JP Docs & Push Translations !5547
• Remove GitHub.com/Docker/machine library dependency !5554
• Promote FF_RETRIEVE_POD_WARNING_EVENTS to a config print_pod_warning_events !5377
• Deprecate ServiceAccountName !5523
• Create Japanese documentation directory !5513
• Bump base images to address CVE-2024-8176 !5518
• Retry packagecloud 504 errors !5520
• Remove outdated registration in test script !5511
• Use Hugo 0.145.0 for docs builds !5521
• Sync vale rules from main repo !5549
• Remove section referring to unapplied breaking change !5529
• Add recommendation to read Readme for plugin before installing !5530
• Add troubleshooting section for AZRebalance issue !5494
• Upgrade taskscaler dependency with updated heartbeat functionality !5553
• Update GPG key expiry date !5539
• Add instructions for installing prebuilt images while using binaries !5508
• Add note regarding support for only Azure VMSS Uniform Orchestration mode !5526
• Remove "Autoscaler algorithm and parameters" from the GitLab Runner instance group autoscaler page !5517
• Add argo_translation.yml for continuous translation process !5541
• Clean up tables in runner docs !5548
• Make dependant Docker images optional for runner incept !5538

v17.11.4

Compare Source

See the changelog 🚀

GitLab Runner documentation can be found at https://docs.gitlab.com/runner/.

v17.11.3

Compare Source

Bug fixes

• Fix AWS GovCloud with AWS S3 cache !5613

v17.11.2

Compare Source

Bug fixes

• Handle the new glrtr- prefix !5580
• Fix final job duration handling !5583

v17.11.1

Compare Source

Bug fixes

• Update fleeting dependency !5535

v17.11.0

Compare Source

New features

• Add ubuntu arm64 pwsh runner helper image !5512
• kubernetes/docker executor: add job timeout as annotations/labels !5463 (Gordon Bleux @​UiP9AV6Y)
• docs: add information about GRIT support and min_support to docs !5460
• GLR | winrm+https and Protocol Port !5301 (Brayden White @​brayden-lm)
• docs: add section to docs about who is using GRIT !5462
• Fix cache's Last-Modified header by ensuring it is set to UTC !5249 (clyfish @​clyfish)
• Specify which "user" shall run the job from the gitlab-ci.yaml for k8s executor !5469
• Allow overriding FILTER_FLAG in clear-docker-cache script !5417
• docs: Add documentation about Advanced Configuration for GRIT !5500
• Expose started_at and finished_at values in Usage Log job details !5484
• Ensure automatic git gc operations run in the foreground !5458 (Ben Brown @​benjamb)
• Enable FF_USE_NATIVE_STEPS by default !5490
• docs: add contributing section for GRIT docs !5461

Bug fixes

• RmFilesRecursive should not attempt to delete directories !5454
• Sign Windows runner binary executables !5466
• Clean git config !5438
• Add note mentioning PathTooLongException regression on Windows !5485
• Update docs re. ECS Fargate image override !5476
• Fix powershell stdin data race !5507 (Guillaume Chauvel @​guillaume.chauvel)
• Change directories and files permissions for bash shell when FF_DISABLE_UMASK_FOR_KUBERNETES_EXECUTOR is enabled !5415
• Fix usage log timestamp generation !5453
• Fix cache extractor redownloading up-to-date caches for Go Cloud URLs !5394
• Fix CI_JOB_TOKEN storage and removal of credentials !5430 (Guillaume Chauvel @​guillaume.chauvel)
• Authenticate runner requests with JOB-TOKEN instead of PRIVATE-TOKEN !5470

Maintenance

• SNPowerShell is only for Windows, remove OS check !5498 (Guillaume Chauvel @​guillaume.chauvel)
• ServiceAccountName deprecation !5501
• Consistent CI yaml formatting !5465
• Mask sensitive config fields for debug logs !5116 (ZhengYuan Loo @​loozhengyuan)
• Make sure that inline config can't override the 'default: false' setting !5436
• chore: consolidate regexes into a single regex !5390
• remove outdated mentions !5499
• Update target milestone from 18.0 to 20.0 for runner registration token !5487
• docs: Clarify how autoscaler idle_time is calculated !5474
• Update GitLab Runner Ubuntu support matrix to pin to end of standard support !5424
• Update link to tech writing course in gitlab-runner repo !5433
• Fix broken test due to sort order !5479
• Run unit tests in the Kubernetes cluster !5420
• feat: describe how to use FARGATE_TASK_DEFINITION !5439 (Jonathan @​KJLJon)
• Remove v0.2 of SLSA as no longer supported !5475
• Backfill missing changelog entries for v17 releases !5450
• Make Alpine 3.19 the default base for helper images !5435
• Update linting tools in project !5503
• Docs: Update link to documentation labels in runner repo !5472
• Trigger downstream pipeline to test OS packages !5416
• docs: Add warning against sharing autoscaling resources !5445
• Add job to rebase branches on main !5497
• Eliminate dependencies needed in yaml:lint CI job !5467
• Update docker-machine version to v0.16.2-gitlab.34 !5451
• Deploy to Kubernetes cluster with KUBERNETES_DEPLOY_BRANCH condition !5489
• Update step-runner module to v0.8.0 !5488
• Migrate to mockery's packages configuration !5480
• Add Support Warning to Fargate custom tutorial !4911
• Bump base images for CVE !5483
• Docs: Hugo migration - Updating gitlab-runner doc links !5448
• Separate GitLab Runner autoscaler content !5468
• Add a prerequisite to Windows Runner documentation !5473
• Update example !5509
• Add "file name too long" troubleshooting error due to job token breaking change !5496
• Update docker machine version !5482
• Revert "Don't make this pipeline depend on the downstream pipeline" !5449
• Remove mention of GitLab 18.0 removal !5437
• Simplify git credential get !5447 (Guillaume Chauvel @​guillaume.chauvel)
• Back up unsigned binaries !5478
• Improve concurrent-related messages and docs !5143
• Add permissions docs for Operator containers !5444
• Fix k8s integration tests resource groups !5502
• GitLab Runner instance group autoscaler doc improvements !5492
• Add note to not install runner in AMI and standardize capitalization, note no multi-zone instance group support !5495
• Fix incept tests !5434
• Add how to exclude image !5335
• Handle vulnerabilty against CVE-2025-30204 !5481
• Fix package tests pipeline trigger !5452

v17.10.2

Compare Source

Bug fixes

• Fix AWS GovCloud with AWS S3 cache !5613

v17.10.1

Compare Source

Bug fixes

• RmFilesRecursive should not attempt to delete directories !5454
• Fix usage log timestamp generation !5453

v17.10.0

Compare Source

New features

• Add support for fleeting heartbeats/connectivity check before instance acquisition !5340
• Add GPUs support for services !5380 (Sigurd Spieckermann @​sisp)
• Add add-mask functionality to proxy-exec !5401
• [docker] Expand variables in volume destinations !5396
• Update runner process wrapper !5349
• Add devices support on services !5343 (Sigurd Spieckermann @​sisp)
• Add proxy shell execution !5361

Security fixes

• Merge branch 'sh-cache-upload-env-file' into 'main' !5408

Bug fixes

• Allow OS overwrite via ShellScriptInfo !5384
• Downgrade prebuilt runner helper images to Alpine 3.19 !5426
• Fix HTTP retries not working properly !5409
• Make submodule --remote more resilient !5389
• Fix runner_wrapper gRPC API client !5400
• Fix inconsistent arguments when creating a service in tests !5355 (Sigurd Spieckermann @​sisp)
• Exclute helpers/runner_wrapper/api/v* tags from version evaluation !5427
• Clean git config !5442
• Support non-ASCII characters in gzip artifact headers !5186
• Only add step-runner volume mount when native steps is enabled !5398
• Fix json schema validation warnings !5374
• Detect bucket location when not provided !5381
• Clean git config !5438
• Fix table rendering !5393

Maintenance

• Update vale rules for runner docs !5388
• Fix Vale issues in Runner docs: Part 17 !5405
• Avoid using deprecated class for review apps !5382
• Fix Vale issues in Runner docs: Part 21 !5419
• Update the example versions !5413
• Merge 17.9.1 CHANGELOG into main !5410
• Fix CVE-2024-45338 by updating golang.org/x/net !5404
• Fix autoscaler policy table format !5387
• Use pipeline helper-binary for custom, instance and ssh integration tests !5386
• Update docker-machine version in docs !5366
• Update route map for runner review apps !5365
• Update docs content to use Hugo shortcodes !5362
• Update zstandard version to 1.5.7.20250308 !5411
• Fix CVE-2025-27144 by upgrading github.com/go-jose/go-jose/v3 !5403
• Use correct values for log_format !5376
• Upgrade Ubuntu image to 24.04 !5428
• Bump runner base images version to 0.0.10 !5423
• Only use docs-gitlab-com project for review apps !5364
• Add new supported runner package distros !5425
• Bump base image version to 0.0.9 !5407
• Bump Go to version 1.23.6 !5326
• Fix Vale issues in Runner docs: Part 14 !5383
• Fix rules for trigger deploy kube job !5369
• Fix small typo !5422
• Make UBI image wait for downstream pipeline success !5360
• Add clarification on the support policy for the docker machine executor to autoscale.md !5359
• Use TW Team Docker image for site build test !5391
• Consistently use local helper image in CI !5371
• Add clarification on the support policy for the docker machine executor to dockermachine.md !5358
• Update feature flag docs template for Hugo site launch !5258
• Fix Vale issues in Runner docs: Part 20 !5418
• Fix Vale issues in Runner docs: Part 19 !5412
• Fix Vale issues in Runner docs: Part 18 !5406
• Added executor supported OS and selection criteria - part 1 !5345
• Remove duplicate hugo code to fix broken master !5368
• Add comment regarding scale in protection for an AWS auto scaling group !5348
• Update links to docs from runner docs !5363
• Update links for jobs and tags !5375
• Update documentation to point to Rake task to deduplicate tags !5356
• Pin zstandard version and specify checksum !5395
• Move trigger deploy to kubernetes to a deploy stage !5372
• Fixed Vale issues !5378

v17.9.3

Compare Source

See the changelog 🚀

GitLab Runner documentation can be found at https://docs.gitlab.com/runner/.

v17.9.2

Compare Source

Bug fixes

• [17.9] Downgrade prebuilt runner helper images to Alpine 3.18 !5431
• Clean git config !5441
• Clean git config !5438
• [17.9] Fix HTTP retries not working properly !5432

v17.9.1

Compare Source

Security fixes

• Merge branch 'sh-cache-upload-env-file' into 'main' !5408

v17.9.0

Compare Source

New features

• Add support for fleeting heartbeats/connectivity check before instance acquisition !5340
• Remove lock files left over in .git/refs !5260 (Ben Brown @​benjamb)
• Autogenerate documentation for supported linux distros/versions !5276
• use '-f' to allow for race condition (issue #​38447) !5324 (Christian Moore @​moorehfl)
• Allow custom naming of service container for the k8s executor !4469
• Mask by default all known token prefixes !4853
• Introduce new custom executor build exit code !5028 (Paul Bryant @​paulbry)
• Add GRIT documentation !5263
• Expand default labels on build pods !5212 (Zalan Meggyesi @​zmeggyesi)
• Add finished job usage data logging !5202
• Add gitlab_runner_job_prepare_stage_duration_seconds histogram !5334
• Inject the step-runner binary into the build container [docker executor] !5322
• Run rpm_verify_fips against FIPS images !5317
• Support ImageLoad for prebuilt images !5187
• Update step-runner docker executor integration docs !5347
• Add labeling to Usage Logger !5283

Security fixes

• Bump base images version to 0.0.6 !5346

Bug fixes

• Upgrade RUNNER_IMAGES_VERSION to v0.0.4 !5305
• Fix Role ARN support with S3 Express buckets [!5291](https://gitlab.com/gitlab-org/gitlab-runner/-/merge_requests/5291

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.