Update docker.io/gitlab/gitlab-ce Docker tag to v19.3.2
No problems automatically updating the monolithic Docker image and run the container by Watchtower with dependency update facilitated by Mend's Renovate Bot.
This MR contains the following updates:
| Package | Update | Change |
|---|---|---|
| docker.io/gitlab/gitlab-ce (changelog) | patch | 19.3.1-ce.0 → 19.3.2-ce.0 |
Release Notes
gitlab-org/gitlab (docker.io/gitlab/gitlab-ce)
v19.3.2
Fixed (4 changes)
- Stop resetting mcp_server_enabled when Duo settings change GitLab Enterprise Edition
- Fix partition cache crash on single-pipeline ranges
- Geo: Support SSH cert gl_id formats in proxied Git requests GitLab Enterprise Edition
- Default SHA on merge requirement for new groups to false
Changed (1 change)
- Show "No available solution" message for CS when solution is empty GitLab Enterprise Edition
Security (17 changes)
- Prevent scheduled PEP test runs from bypassing policy scope (merge request)
- Reassign sole approver rules on permanent deletion (19.3) (merge request)
- Preserve protected environment approval rule on approver revoke (19.3) (merge request)
- Sanitise items in JSONTable before passing to BTable (merge request)
- Fix complexity multiplier logic enables Unauthenticated DoS (merge request)
- Require update_package to change generic package status (merge request)
- Fix routing manipulation with group wiki [Backport 19.3] (merge request)
- Content editor vets iframe sources before rendering (merge request)
- Pin checkout_sha at push time to prevent MR pipeline code injection (merge request)
- Read Terraform state upload path from verified UploadedFile (merge request)
- Remove admin compliance pipeline config from SM role (merge request)
- Verify Workhorse JWT on all remaining senddata emitters (merge request)
- Prevent email OTP from bypassing SSO enforcement (merge request)
- Anchor and escape EnvironmentMatcher wildcard patterns (merge request)
- Upgrade graphql gem and backport GlobalID serialization fixes (merge request)
- Update GitLab Elasticsearch Indexer to 5.14.13 (merge request)
- Fix unauthenticated arbitrary local file read in commits API (merge request)
Performance (2 changes)
- Cache the previous chunk in Gitlab::HttpIO
- Reuse HTTP connections and add timeouts in Gitlab::HttpIO