Prepare gitlab for bookworm

Bookworm freeze started and we should be ready with gitlab for bookworm by the time of release. The biggest gain is being able to use a recent nodejs as more and more modules are dropping support for nodejs we have in bullseye (yaml, mermaid to name some), this will only increase in the coming days.

• Create bookworm-* suites in fasttrack.debian.net https://salsa.debian.org/fasttrack-team/support/-/issues/47
• Create bookworm-* suites in fasttrack-staging
• Create list of packages that need to be rebuilt - ruby-grape
• Create list of dependency updates in control for smoother upgrades - nodejs, node-babel7 (webpack fails) - this is in bookworm-backports branch, should be cherry-picked to master once we drop support for bullseye.
• Upstream support for ruby 3.1 https://gitlab.com/groups/gitlab-org/-/epics/10034 (expected in 15.11) - there is also an upstream MR which we can include https://gitlab.com/gitlab-org/gitlab/-/merge_requests/114366

Packages that needs to be rebuilt for bookworm,

• libruby 3.1 from experimental for openssl 3 fix @praveen https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1033395 - work around is install openssl 3.0.1 gem from rubygems.org
• Depends: gitlab-common/ruby-gitaly/gitaly (>= 15.8~) but it is not installable @praveen
  • unsat-dependency: golang-github-go-enry-go-license-detector-dev:amd64 (>= 4.3.0+git20221007~) @praveen
    • unsat-dependency: golang-github-hhatto-gorst-dev:amd64 @praveen
    • unsat-dependency: golang-gonum-v1-gonum-dev:amd64 @praveen
• Depends: gitlab-shell (>= 14.15~) but it is not installable @praveen
  • unsat-dependency: golang-github-hashicorp-yamux-dev:amd64 (>= 0.0+git20210316.a95892c~) @praveen
  • unsat-dependency: golang-github-pires-go-proxyproto-dev:amd64 (>= 0.6~) @praveen
• Depends: ruby-omniauth-auth0 (>= 2.0~) but it is not installable - tests fail in bookworm with omniauth 2.x and gitlab upstream has not yet moved to 3.x. Ignoring test failure may be a way forward. A better option is to try and update omniauth-auth0 to 3.1 in upstream gitlab. https://gitlab.com/gitlab-org/gitlab/-/merge_requests/115200 (ci is green)
• Depends: ruby-omniauth-facebook (>= 4.0~) but it is not installable @praveen
• Depends: ruby-omniauth-google-oauth2 (>= 1.1~) but it is not installable - @praveen
  • Depends: ruby-oauth2 (>= 2.0~) but 1.4.4-1 is to be installed - we can still try to get it into bookworm @praveen
• Depends: ruby-omniauth-oauth2-generic (>= 0.2.2~) but it is not installable - looks fine on ruby 3.0, since ruby 3.1 and 3.0 tests fail the same way, probably fine on ruby 3.1 as well https://gitlab.com/gitlab-org/gitlab/-/issues/386908 - so we can probably ignore the test failure.
• Depends: ruby-omniauth-shibboleth (>= 1.3~) - upstream removed it in 15.9 and we should remove this dependency - https://gitlab.com/gitlab-org/gitlab/-/merge_requests/109667 @praveen
• Depends: ruby-invisible-captcha (>= 2.0~) but it is not going to be installed - @praveen
• Depends: ruby-browser (>= 5.3.1~) but it is not going to be installed - @praveen
• Depends: ruby-fog-google (>= 1.19~) but it is not going to be installed - @praveen
  • ruby-googleauth @praveen
  • ruby-google-apis-core - @praveen
  • ruby-google-apis-storage-v1, @praveen
  • ruby-google-apis-iamcredentials-v1, @praveen
  • ruby-google-apis-compute-v1, @praveen
  • ruby-google-apis-monitoring-v3, @praveen
  • ruby-google-apis-dns-v1, @praveen
  • ruby-google-apis-pubsub-v1, @praveen
  • ruby-google-apis-sqladmin-v1beta4, @praveen
• Depends: ruby-aws-sdk-core (>= 3.168.4~) but 3.168.1-2 is to be installed - @praveen
• Depends: ruby-asciidoctor-include-ext (>= 0.4~) but it is not going to be installed @praveen
• Depends: ruby-sidekiq (>= 6.5.7~) but 6.4.1+dfsg-1 is to be installed - @praveen
• Depends: ruby-gitlab-sidekiq-fetcher (>= 0.9~) but it is not going to be installed - @praveen
• Depends: ruby-gitlab-labkit (>= 0.29~) but it is not going to be installed - @praveen
• Depends: ruby-snowplow-tracker (>= 0.8~) but it is not going to be installed - @praveen
• Depends: ruby-memory-profiler (>= 1.0~) but 0.9.14-4.1 is to be installed @praveen
• Depends: ruby-kas-grpc but it is not installable @praveen
• Depends: ruby-countries (>= 4.0~) but it is not going to be installed @praveen
  • unsat-dependency: ruby-i18n-data:amd64 (>= 0.15~) @praveen
• Depends: ruby-net-http-persistent (>= 4.0~) but 3.1.0-2 is to be installed - @praveen
• Depends: node-mermaid (>= 8.13.10~) but it is not installable - this dependency could be removed
• Depends: ruby-recaptcha (>= 5.12~) but it is not going to be installed @praveen
• Depends: ruby-net-ldap (>= 0.17.1~) but 0.17.0-1 is to be installed @praveen
• Depends: ruby-grape (>= 1.7~) but 1.6.2-3 is to be installed @praveen
• Depends: ruby-rack-proxy (>= 0.7.6~) but it is not going to be installed @praveen
• Depends: ruby-lockbox (>= 1.1.1~) but it is not going to be installed @praveen

How to test upgrade:

See https://wiki.debian.org/gitlab/#Bookworm_FastTrack_.28Ready_for_Testing.29

Packages to upgrade if only gitlab is installed: ruby-rubygems ruby-activesupport ruby-rqrcode-rails3 ruby-sorted-set ruby-chunky-png ruby-recursive-open-struct ruby-psych (possibly incomplete)

Install on fresh bookworm

See https://wiki.debian.org/gitlab/#Bookworm_FastTrack_.28Ready_for_Testing.29