Merge "gerrit-build: jammy updates: update to nodejs 18.x, allow submodule clones"

playbooks/zuul/gerrit/repos.yaml

@@ -3,7 +3,7 @@
     - role: ensure-java
       java_version: 11
     - role: ensure-nodejs
-      node_version: 10
+      node_version: 18
     - ensure-bazelisk
   tasks:
     - name: Install essential build packages

playbooks/zuul/gerrit/submodules.yaml

@@ -1,8 +1,8 @@
 - hosts: all
   tasks:
-
+    # https://github.blog/2022-10-18-git-security-vulnerabilities-announced/
     - name: Checkout submodules
-      shell: "if [ -d {{ item }} ] ; then git submodule update --init {{ item }} ; fi"
+      shell: "if [ -d {{ item }} ] ; then git -c protocol.file.allow=always submodule update --init {{ item }} ; fi"
       args:
         chdir: /home/zuul/src/gerrit.googlesource.com/gerrit
       loop: