Hi, The changes to update copy-conditionals and submit-requirements have multiplied a bit, so I thought it might be good to have a bit of a written-down plan to get us ready for Gerrit 3.7. I think we should probably start with a manual update to All-Projects, as we don't really manage that in Ansible. The two reviews to update the bootstrap documentation should serve as review for the production change: https://review.opendev.org/c/opendev/system-config/+/876236 https://review.opendev.org/c/opendev/system-config/+/876237 I've consolidated those changes an actual diff to our production All-Projects/project.config shown in https://paste.opendev.org/show/bmy36m7TO2b4cpndO5gO/ I have that in a checkout, so if we're happy with that, I can manually push it (or will rework for comments). I think this gives us a good place to start and covers both the copy-conditions and submit-requirements changes for the top-level All-Projects. Updating the copy-conditions for the project ACL's is already reviewed in https://review.opendev.org/c/openstack/project-config/+/867931 I think I'll feel better about that having already done All-Projects and seen that working, but that just needs to be applied. Then we need to move onto submit-requirements for the project ACL's. Firstly https://review.opendev.org/c/openstack/project-config/+/875992/1 is just mechnical to handle the arguments in the normalize tool. The first change https://review.opendev.org/c/openstack/project-config/+/875804/3 updates labels using "function = NoOp" to also have a no-op submit-requirement. We know from testing that labels must still specify a function. Strictly, I don't think the s-r is necessary; but it does seem that we can use this to add a description explaining what the label is doing. I also think this future-proofs us against the removal of label functions (although it is currently unclear how future gerrit will deal with this). The second change is similar https://review.opendev.org/c/openstack/project-config/+/875993/2 except this is a large selection of Backport-Candidate labels using "function = NoBlock", which is alised to NoOp. For consistency, this is all changed to NoOp and, again, given a submit-requirement as well. Following that is https://review.opendev.org/c/openstack/project-config/+/875994/2 which is a mechanical change again for the normalize tool, and then the two final changes https://review.opendev.org/c/openstack/project-config/+/875995 https://review.opendev.org/c/openstack/project-config/+/875996 convert more complex labels that have blocking semantics submit-requirements. I think these just want careful review to ensure I've translated what they're doing correctly. At that point, I think we're fully migrated off the deprecated ACL options, clearing our path for a Gerrit 3.7 upgrade, general notes for which are kept at https://etherpad.opendev.org/p/gerrit-upgrade-3.7 -i