chore(deps): update dependency gitlab-org/gitlab-runner to v18

[Adphi]

This PR contains the following updates:

Package	Update	Change
gitlab-org/gitlab-runner	major	v17.3.1 -> v18.6.1

---

Release Notes

gitlab-org/gitlab-runner (gitlab-org/gitlab-runner)

v18.6.1

Compare Source

See the changelog 🚀

GitLab Runner documentation can be found at https://docs.gitlab.com/runner/.

v18.6.0

Compare Source

New features

• Functions subcommands in runner binary !5875
• Add namespace support to GitLab Secrets Manager !5918
• Disallow shim execution mode if executor supports native steps execution !5898
• Add MachineOptionsWithName configuration option !5920
• Add slot-based cgroup support for Docker executor !5870
• Add LoongArch (loong64) build support !5800 (Mingcong Bai @​MingcongBai)
• Bootstrap gitlab-helper-binary for Docker !5892
• Add correlation_id to "Update job..." log line !5887

Bug fixes

• Retry etcd request timeout error in Kubernetes executor !5877
• Always pass as a file for custom executor !5904
• Handle unexpected panics in trace buffer !5890
• Fix removing files recursively for bash on z/OS !5623 (Kai McGregor @​kmcgreg-ibm)
• Externalize git configuration !5912
• Fix job logs duplicating as service logs !5863 (Markus Kaihola @​makeri89)
• Expand variables in image.docker.platform before pulling images !5897 (Bert Wesarg @​bertwesarg)

Maintenance

• Update Vale rules from GitLab project !5884
• AI Translated Documentation Push: GITTECHA-374 !5935
• Add troubleshooting docs for services on windows k8s executor !5913 (Erik Petzold @​erik.petzold1)
• Move build execute prepare/user scripts to their own functions !5893
• Docs: Add note for PowerShell versions in the custom executor !5894
• Steps execution via Connect() !5927
• Clarify docs for supported caching feature !5910
• Pull in fixes for CVEs !5895
• Translation Push - All - For English Anchor LInks !5896
• Integration Tests for GCP Secrets Manager !5881
• Use passed context in NewStepsDocker.Exec() !5915
• Remove obsolete code !5902
• Build linux/riscv64 platform for registry.gitlab.com/gitlab-org/gitlab-runner image !5923 (Ludovic Henry @​luhenry)
• docs(docker.md): add podman selinux mcs section !5879 (vtardiveau @​vtardiveau)
• Verify all: only use creds for local images !5914
• Update cache S3 SSE Key ID docs !5919
• Add warning regarding podman and GPUs !5937
• AI Translated Documentation Push: GITTECHA-370 !5917
• Fix typo !5924
• Make structured "job finished" log line with failure_reason and exit_code !5885
• [steps] Deflake steps command tests !5905
• Add s3:ListBucket to the required permissions for IAM role to access S3 bucket !5903
• docs: Update docker-machine version !5899
• Add link to UI redesign doc !5925
• Document error when performing sts:AssumeRoleWithWebIdentity for s3 cache !5921
• Minor copy edits in runner docs !5944
• Add link checking to i18n docs linting !5943
• Document Kubernetes CI !5786
• Copy edits to runner docs !5911
• Pull in some changes from the security fork !5906
• Use RFC3339Nano timestamp format for JSON logs !5888
• Remove curly brackets from example !5942
• chore: refactor TestAttach using canonical client !5838 (Muhammad Daffa Dinaya @​mdaffad)

v18.5.0

Compare Source

New features

• Add Kubernetes context support for executor !5859
• Add label support to runner configuration !5802
• Implement minimal job confirmation API !5843
• Update Usage Log with more job context !5869
• Add project name to build logging fields !5846

Bug fixes

• Fix logging of duration_s field !5874
• Remove duplicate prefix in docker service containers !5840

Maintenance

• Refactor autoscaler provider for readability and update dependencies !5807 (Sven Geisler @​sge70)
• Remove EOL spaces in doc files - 2025-10-07 !5873
• Latest Translation Yaml enhancements !5842
• Reduce over-linking in GitLab Runner registration documentation !5834
• Improve branch selection logic for docs:check Hugo build job !5866
• Update Hugo version for Docs test !5852
• Update the ubuntu version used as a base image !5845
• Docs feedback: Add more context for Parallels executor !5878
• Rename Connect() to TerminalConnect() !5880
• Improve error logging in docker-machine executor !5862
• Update docker device documentation link !5833 (Quentin MICHAUD @​mh4ckt3mh4ckt1c4s)
• Add VMware vSphere to community maintained fleeting plugins !5818 (Santhanu V @​santhanuv)
• Update fleeting plugin and other dependencies !5830
• Clean up docs redirects - 2025-09-25 !5847
• Fix log field name for docker machine executor !5860
• Docs feedback: Clarify SSH StrictHostKeyChecking default behavior !5871
• Fix duplicate test cases !5857
• OKR: Reduce over-linking in GitLab Runner manual installation guide !5854
• Chore: rename VersionInfo to Info !5849
• Upgrades taskscaler for slot info on no capacity !5872
• Docs feedback: Make the executor selection workflow diagram readable !5876
• Integration Tests for AWS Secrets Manager !5841
• Group/stage change: Verify/Runner -> Verify/Runner Core and CI Functions Platform in the GitLab Runner project !5858

v18.4.0

Compare Source

New features

• Add support for GIT_CLONE_EXTRA_FLAGS for native git clone !5809 (Sven Geisler @​sge70)
• Cache keys can be hashed !5751
• Update step-runner version to 0.16.0 !5825

Bug fixes

• Fix arch label for IBM PPC arch !5827
• Make docker volumes really unique !5783
• Fix cache key sanitation issues, esp. re. "cache key files" !5741
• Update fleeting plugin dependency !5784
• [docker] Separate cache volumes for builds against protected and unprotected !5773
• Add new ruleset to cover all docs patterns !5832
• Upgrade base images to v0.0.26 !5829
• Ensure TOML feature flags are used and take precedence over job env !5782
• Remove health check from Vault client call !5803
• Add timeouts to all docker-machine command executions !5789
• Handle config concurrency deadlock with warnings and documentation !5759

Maintenance

• Update docs links !5814
• Document community supported plugins !5532
• Remove EOL spaces in doc files - 2025-08-26 !5804
• Bump golang to 1.24.6 !5796
• Implement Kubernetes allowed users/groups in Runner config !5724
• Update fleeting plugin and other dependencies !5823
• Update API metric description to bring consistency !5779
• Add CI to test Hugo build with translated documentation !5806
• Add path verifications for localized files - Runner !5790
• Refactor registering of commands to be more explicit !5816
• Make the default helper alpine flavour point to latest !5768
• Use Hugo 0.148.2 for docs builds !5815
• Enable static checks !5811
• Fix nanosecond padding of timestamps !5799 (Philipp Hahn @​pmhahn)
• Bump RUNNER_IMAGES_VERSION to 0.0.25 !5794
• Revert changes made by Auto Releaser Bot !5795
• Migrate golangci lint to version 2 !5772
• Cross reference a KB article in the concurrency and limit docs !5785
• CI: Skip downloading artifacts of previous jobs !5808 (Philipp Hahn @​pmhahn)
• Use testing linter with t.Context related settings !5812
• Add support for signing and notarizing macOS binaries !5792
• Change option signature to not return error !5775
• Fix flaky unit test with TestDefaultDocker_Exec !5798
• Display seconds since epoch using a more widely supported method !5736 (Kai McGregor @​kmcgreg-ibm)
• Fix non-semantic linking word !5801
• Fix flaky Docker integration tests !5797

v18.3.1

Compare Source

Bug fixes

• Remove health check from Vault client call !5803

v18.3.0

Compare Source

New features

• Add native GitLab Secrets Manager support to GitLab Runner !5733
• Add method label to status counter metrics !5739
• Add status_class and method label to request duration metrics !5752
• Update step-runner version to 0.15.0 !5757
• Record request retries. !5758

Bug fixes

• Update fastzip to v0.2.0 !5778
• Fix identity for aws_secrets_manager_resolver !5747
• Consume docker auth info in order !5686
• [docker] Separate cache volumes for builds against protected and unprotected !5773
• Add correlation id header to outgoing requests !5743
• Add support for 503 http code when the GitLab instance is in maintenance mode !5685
• Enable image executor opts in the kubernetes executor !5745
• Fix job duration reporting !5711
• Update fleeting plugin dependency !5776
• Parse the last line of stdout for UID/GID !5765
• Fix proxy-exec store temporary directory !5780
• Fix cache key sanitation issues, esp. re. "cache key files" !5741
• Tighten cache key sanitation !5719

Maintenance

• Add operator pod_spec and deployment_spec docs !5766
• Remove unused lock from client struct !5770
• Mention that systempaths security_opt is not supported !5769 (Andrés Delfino @​andresdelfino)
• Change link to GA issue for the overwrite pod spec feature !5732
• Update a few region/zone IDs in examples !5720
• Add a max age of 24h for Kubernetes integration RBAC resources !5760
• Chore: Use stable alpine for RISC-V !5714 (Aaron Dewes @​AaronDewes)
• Allow customization of taskscaler and fleeting parameters in config.toml !5777 (Sven Geisler @​sge70)
• Move backoff retry logic to retry requester !5754
• Refactor gitlab client unregister runner to table tests !5670
• Fix localization codeowners !5712
• Lbhardwaj/refactor/unregister command methods !5742
• Refactor move retry 429 status code logic to one place !5727
• Add test for abstract shell guardGetSourcesScriptHooks method !5702
• Sync vale rules from main project - Runner !5753
• Refactor verify runner tests to table tests and better assertions !5763
• Bridge releases with Hosted Runners !5746
• Cleanup dead code related to disabled Akeyless secrets integration feature !5762
• Drop Alpine Version 3.18 !5744
• Refactor kubernetes feature checker tests !5774
• Remove EOL spaces in docs !5749
• Remove line length rule for markdownlint for i18n files !5723
• Fix minor typos with executor interface docs !5717
• Correct erroneous compatibility chart features for docker-autoscaler !5755
• Docker machine AMI update !5718
• Add errorlint linter to golangci-lint settings !5750
• Introduce unnecessary-traversal Markdownlint rule to Runner docs !5735
• Upgrade prebuilt runner images back to Alpine 3.21 !5730 (Aaron Dewes @​AaronDewes)
• Upstream batch push 2025-07-21 !5734
• Refactor errors to wrap errors !5731
• Minor grammar updates in GitLab Runner README !5756 (Anshi Mehta @​anshikmehtaa)
• Unregister command unit tests !5738
• A bit of general copy edit cleanup !5740
• Update index file for getting started !5722
• Update hosted runners bridge wiki entry !5767
• Minor improvements to runner fleet scaling best practices doc !5737
• Add a note about the experiment status of GRIT !5729

v18.2.2

Compare Source

See the changelog 🚀

GitLab Runner documentation can be found at https://docs.gitlab.com/runner/.

v18.2.1

Compare Source

See the changelog 🚀

GitLab Runner documentation can be found at https://docs.gitlab.com/runner/.

v18.2.0

Compare Source

New features

• Add reference to z/OS on the main runner install page !5647
• Thread job request correlation ID to git operations !5653
• Add functionality to retrieve secrets from AWS SecretsManager !5587 (Markus Siebert @​m-s-db)
• Update docs on how to use env variables for S3 cache access !5648
• Improve runner_name metric label coverage !5609 (Josh Smith @​jsmith25)
• Log usage of deault image for Docker and K8S executors !5688

Bug fixes

• Tighten cache key sanitation !5719
• Add troubleshooting guide for GCS workload identity !5651
• Skip pre and post checkout hooks for empty !5677
• Docs: Fix protocol_port default for SSH !5701
• Revert MRs 5531 and 5676 !5715
• Reimplement ShortenToken !5681
• Put the fips binary in the fips runner image !5669
• Set helper_image_flavor to ubi-fips when fips mode is enabled !5698
• Ensure BuildErrors have FailureReason !5676
• Fix kubernetes executor helper image override log !5655 (Ricard Bejarano @​ricardbejarano)
• Add -depth option to find -exec rm invocations !5692

Maintenance

• Add known SELinux issue regarding tmp and pip to the Podman docs !5661
• Switch jobs to Kubernetes !5631
• Updated the documents !5596 (Jithin Vijayan @​jithin.vijayan)
• Update docker machine versions !5672
• Add autoscaler IP address logging options !5519 (Brayden White @​bwhite117)
• Docs: Improve prometheus scraping metrics docs including Operator !5657
• Update default ruby version in examples !5693
• Add aardvark-dns bug notice to podman guide !5689 (Felix @​f.preuschoff)
• Update region from us-central-1 to eu-central-1 !5713
• Run fewer vale lint rules on i18n (translation) docs MRs !5699
• Add additonal info about SHA-pinned images !5700
• Bump golang to 1.24.4 !5668
• chore: refactor TestAttachPodNotRunning !5650 (Muhammad Daffa Dinaya @​mdaffad)
• Update access a private registry from kubernetes executor !5622
• Add configure runner on OCI to the index page !5649
• Clean up runner docs !5697
• Fix OS version package support docs !5703
• Add .markdownlint-cli2.yaml for doc-locale !5690
• Fix this test !5682
• Update mockery to latest version 3.3.4 and generate mocks !5646
• Remove outdated information !5691
• Update file _index.md !5665
• Update SLSA build type documentation !5639
• Document tarzstd as an argument for CACHE_COMPRESSION_FORMAT !5673
• Clarify documentation on reading S3 credentials from the environment !5671
• Add Kubernetes executors docs for helper container memory sizing !5659
• Runner doc restructuring: Revamp the admin section index page !5678
• Add formatting target for easy fixes with golangci-lint !5658
• Add overprovisioning note, fix typos !5656
• Refactor gitlab client request job tests to table tests !5666
• Fix indent in config.toml example. !5667 (Mathieu Gouin @​mathieugouin)
• Update PowerShell UTF8 integration test !5493 (Guillaume Chauvel @​guillaume.chauvel)
• Update step-runner version to 0.13.0 !5705
• Fix docs pipelines for forks !5664
• Small typo fixes !5652

v18.1.3

Compare Source

See the changelog 🚀

GitLab Runner documentation can be found at https://docs.gitlab.com/runner/.

v18.1.2

Compare Source

See the changelog 🚀

GitLab Runner documentation can be found at https://docs.gitlab.com/runner/.

v18.1.1

Compare Source

See the changelog 🚀

GitLab Runner documentation can be found at https://docs.gitlab.com/runner/.

v18.1.0

Compare Source

New features

• Added safety checks for nil sessions and empty endpoints !5515 (Zubeen @​syedzubeen)
• Log a different message for policy jobs with highest precedence !5628
• Add adaptive request concurrency !5546
• Allow to install/manipulate the gitlab-runner service as a user service (systemd) !5534 (Tiago Teixeira @​tiago.teixeira.erx)
• Bump base images to allow native clone to work !5561
• Support user as integer for Docker/Kubernetes executor_opts !5552
• Thread job request correlation ID to git operations !5653
• make preemptive mode configurable !5565 (Pascal Sochacki @​pascal.sochacki)
• Add queue_size and queue_depth metrics !5592
• Log policy job information !5591
• Add more request_concurrency related metrics !5558
• Enable powershell native clone !5577 (Guillaume Chauvel @​guillaume.chauvel)
• Add support for Overlay Volume Mounts when Podman is used with Docker Executor !5522 (Napuu @​napuu)

Bug fixes

• Stop following symlinks when archiving documents !5543
• Docker+autoscaler: Properly clean up when a job times out or is cancelled !5593
• Fix AWS GovCloud with AWS S3 cache !5613
• Fix final job duration handling !5583
• Document DinD DNS behavior with network-per-build feature !5611
• Run git config cleanup before creating the template dir !5598
• Fix authentication towards HTTP docker registries !5329 (François HORTA @​fhorta1)
• Switch the default for FF_GIT_URLS_WITHOUT_TOKENS back to false !5572
• Handle the new glrtr- prefix !5580

Maintenance

• Update golang.org/x/net to fix CVE-2025-22872 !5594
• Added missing commas !5579
• Docker executor image clarification and macOS virtualization info !5571 (Charles Uneze @​network-charles)
• Fix rules for the unit test job !5618
• Tidy runner_wrapper/api !5604
• Limit Unit test job to only MR pipelines for forks !5608
• Making timeout to acquire a new instance configurable within gitlab-runner !5563 (Moritz Scheve @​schevmo)
• Remove outdated information !5620
• Add correlation_id to request logs !5615
• Bump base-images to 0.0.18 !5633
• Fix pipelines for forks !5607
• Update redirected links !5605
• Improve pipelines for community, fork, docs MRs !5576
• Fix protoc binary download for macos !5570
• Document how to install GitLab Runner on z/OS manually !5641
• Upgrade Go to v1.24.3 !5562
• Clean up stray whitespace !5585
• Remove kaniko references in GitLab Runner docs !5560
• Update step-runner dependency version to 0.11.0 !5645
• Update dates in examples !5621
• Clean up tables in misc runner docs !5589
• Docs: more bold cleanup !5586
• Document how to set environment variables in GitLab Runner Helm chart !5559
• Restrict danger-review to canonical GitLab forks !5640
• Push GitLab Documentation Translations Upstream [2025-06-09] !5630
• docs: Add custom executor "shell" property !5578 (Guillaume Chauvel @​guillaume.chauvel)
• Remove randomness of TestProcessRunner_BuildLimit failures !5588
• Run Hugo build test on the correct Docs branch !5545
• Install local dev tools and dependency binaries in on go !5632
• chore: install tool binaries in tmp bin !5629
• docs: Remove a line that is not accurate to the current usages of GRIT !5601
• Config options refactor !5373
• Move internal docs into development directory !5595
• Update CHANGELOG to take in account 17.10.x to 18.0.x releases !5643
• Update docker machine in docs !5603
• Remove outdated mention !5582
• Added Experimental Status !5602
• Remove outdated content !5597
• Use mockery constructors in tests !5581
• Auto-format all remaining runner tables !5584
• Update the cntlm link to the new fork !5556 (Dan Fredell @​DFredell)
• Update docker-machine version in docs !5617

v18.0.5

Compare Source

See the changelog 🚀

GitLab Runner documentation can be found at https://docs.gitlab.com/runner/.

v18.0.4

Compare Source

See the changelog 🚀

GitLab Runner documentation can be found at https://docs.gitlab.com/runner/.

v18.0.3

Compare Source

Bug fixes

• Fix AWS GovCloud with AWS S3 cache !5613
• Run Git config cleanup before creating the template dir !5598

Maintenance

• Remove randomness of TestProcessRunner_BuildLimit failures !5588

v18.0.2

Compare Source

Bug fixes

• Handle the new glrtr- prefix !5580
• Fix final job duration handling !5583

v18.0.1

Compare Source

Bug fixes

• Switch the default for FF_Git_URLS_WITHOUT_TOKENS back to false !5572

v18.0.0

Compare Source

New features

• Add exponential backoff to execute stage retries !4517
• Add support for uid:gid format for Kubernetes executor options !5540
• Add adaptive request concurrency !5546
• Add more request_concurrency related metrics !5558
• Suppress unnecessary warnings when Kubernetes user values are empty !5551
• Shells: Implement the use of Git-clone(1) again !5010
• Adding How To Configure PVC Cache !5536
• Improve runner build failure reasons !5531

Bug fixes

• Add support for submodules in the exec command !75 (Lucas @​fresskoma)
• Reimplement pull-policy validation !5514
• Update fleeting dependency !5535
• Add Cloud provider error message details for cache upload failures to cloud storage targets !5527

Maintenance

• FF_Git_URLS_WITHOUT_TOKENS defaults to true !5525
• Wait for MR image before starting runner incept !5528
• Remove outdated mentions !5510
• Update markdownlint for JP Docs & Push Translations !5547
• Remove GitHub.com/Docker/machine library dependency !5554
• Promote FF_RETRIEVE_POD_WARNING_EVENTS to a config print_pod_warning_events !5377
• Deprecate ServiceAccountName !5523
• Create Japanese documentation directory !5513
• Bump base images to address CVE-2024-8176 !5518
• Retry packagecloud 504 errors !5520
• Remove outdated registration in test script !5511
• Use Hugo 0.145.0 for docs builds !5521
• Sync vale rules from main repo !5549
• Remove section referring to unapplied breaking change !5529
• Add recommendation to read Readme for plugin before installing !5530
• Add troubleshooting section for AZRebalance issue !5494
• Upgrade taskscaler dependency with updated heartbeat functionality !5553
• Update GPG key expiry date !5539
• Add instructions for installing prebuilt images while using binaries !5508
• Add note regarding support for only Azure VMSS Uniform Orchestration mode !5526
• Remove "Autoscaler algorithm and parameters" from the GitLab Runner instance group autoscaler page !5517
• Add argo_translation.yml for continuous translation process !5541
• Clean up tables in runner docs !5548
• Make dependant Docker images optional for runner incept !5538

v17.11.4

Compare Source

See the changelog 🚀

GitLab Runner documentation can be found at https://docs.gitlab.com/runner/.

v17.11.3

Compare Source

Bug fixes

• Fix AWS GovCloud with AWS S3 cache !5613

v17.11.2

Compare Source

Bug fixes

• Handle the new glrtr- prefix !5580
• Fix final job duration handling !5583

v17.11.1

Compare Source

Bug fixes

• Update fleeting dependency !5535

v17.11.0

Compare Source

New features

• Add ubuntu arm64 pwsh runner helper image !5512
• kubernetes/docker executor: add job timeout as annotations/labels !5463 (Gordon Bleux @​UiP9AV6Y)
• docs: add information about GRIT support and min_support to docs !5460
• GLR | winrm+https and Protocol Port !5301 (Brayden White @​brayden-lm)
• docs: add section to docs about who is using GRIT !5462
• Fix cache's Last-Modified header by ensuring it is set to UTC !5249 (clyfish @​clyfish)
• Specify which "user" shall run the job from the gitlab-ci.yaml for k8s executor !5469
• Allow overriding FILTER_FLAG in clear-docker-cache script !5417
• docs: Add documentation about Advanced Configuration for GRIT !5500
• Expose started_at and finished_at values in Usage Log job details !5484
• Ensure automatic git gc operations run in the foreground !5458 (Ben Brown @​benjamb)
• Enable FF_USE_NATIVE_STEPS by default !5490
• docs: add contributing section for GRIT docs !5461

Bug fixes

• RmFilesRecursive should not attempt to delete directories !5454
• Sign Windows runner binary executables !5466
• Clean git config !5438
• Add note mentioning PathTooLongException regression on Windows !5485
• Update docs re. ECS Fargate image override !5476
• Fix powershell stdin data race !5507 (Guillaume Chauvel @​guillaume.chauvel)
• Change directories and files permissions for bash shell when FF_DISABLE_UMASK_FOR_KUBERNETES_EXECUTOR is enabled !5415
• Fix usage log timestamp generation !5453
• Fix cache extractor redownloading up-to-date caches for Go Cloud URLs !5394
• Fix CI_JOB_TOKEN storage and removal of credentials !5430 (Guillaume Chauvel @​guillaume.chauvel)
• Authenticate runner requests with JOB-TOKEN instead of PRIVATE-TOKEN !5470

Maintenance

• SNPowerShell is only for Windows, remove OS check !5498 (Guillaume Chauvel @​guillaume.chauvel)
• ServiceAccountName deprecation !5501
• Consistent CI yaml formatting !5465
• Mask sensitive config fields for debug logs !5116 (ZhengYuan Loo @​loozhengyuan)
• Make sure that inline config can't override the 'default: false' setting !5436
• chore: consolidate regexes into a single regex !5390
• remove outdated mentions !5499
• Update target milestone from 18.0 to 20.0 for runner registration token !5487
• docs: Clarify how autoscaler idle_time is calculated !5474
• Update GitLab Runner Ubuntu support matrix to pin to end of standard support !5424
• Update link to tech writing course in gitlab-runner repo !5433
• Fix broken test due to sort order !5479
• Run unit tests in the Kubernetes cluster !5420
• feat: describe how to use FARGATE_TASK_DEFINITION !5439 (Jonathan @​KJLJon)
• Remove v0.2 of SLSA as no longer supported !5475
• Backfill missing changelog entries for v17 releases !5450
• Make Alpine 3.19 the default base for helper images !5435
• Update linting tools in project !5503
• Docs: Update link to documen

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.