Note that openssl-3 has to be masked until upstream finishes the work
on upgrading to ruby-3.1 because ruby-3.0 still requires openssl-1. Do
echo ">=dev-libs/openssl-3" >> /etc/portage/package.mask/gitlab