Update docker.io/gitlab/gitlab-ce Docker tag to v19.4.0
No problems automatically updating the monolithic Docker image and run the container by Watchtower with dependency update facilitated by Mend's Renovate Bot.
This MR contains the following updates:
| Package | Update | Change |
|---|---|---|
| docker.io/gitlab/gitlab-ce (changelog) | minor | 19.3.2-ce.0 → 19.4.0-ce.0 |
Release Notes
gitlab-org/gitlab (docker.io/gitlab/gitlab-ce)
v19.4.0
Added (300 changes)
- Add sidebar to display audit event additional details (merge request) GitLab Enterprise Edition
- Emit semantic search confidence and record its SLI (merge request) GitLab Enterprise Edition
- Default enable sdlc_context_agent_trigger feature flag (merge request) GitLab Enterprise Edition
- Add AiTracking for the Duo Chat IDE code tools (merge request) GitLab Enterprise Edition
- Route Duo in Slack to the slack_assistant flow behind a flag (merge request)
- Add control: duo_agentic_flow_audit_events_streaming (merge request) GitLab Enterprise Edition
- DB Diagnostics: Add per-table autovacuum overrides and scale-factor risk (merge request)
- Show Edit action on organization users admin page (merge request)
- Add merge request risk classification widget (merge request) GitLab Enterprise Edition
- Add instance setting to auto-index root namespaces for Orbit (merge request)
- Add triage and remediation docs (merge request)
- Scroll the panel with the keyboard on page load (merge request)
- Add RegoValidator and depend on gitlab-glaz (merge request)
- Allow ownerless clients on the IAM consent page (merge request)
- Return 429 and RateLimit headers for entry-less labkit rules (merge request)
- Promote credit_caps_ui FF to beta and enable by default (merge request) GitLab Enterprise Edition
- Add block_jwt_for_reclaimed_paths application setting (merge request)
- Add Instance level enable add-on graphql mutation (merge request) GitLab Enterprise Edition
- Add a previous-period trend column to GLQL analytics tables (merge request)
- Add group_filter LDAP configuration setting by @tnt4brain (merge request) GitLab Enterprise Edition
- Add internal visibility option to send_bot_message policy action (merge request) GitLab Enterprise Edition
- Add closes_issue variable for merge request templates by @sjestonsingh (merge request)
- Add real verification for GCP API key validity checks (merge request) GitLab Enterprise Edition
- Warn when the HTTP Router routing snapshot has drifted (merge request)
- Add keyboard shortcut to paste a table into a cell (merge request)
- Add cloud credential provider auth for Redis (merge request)
- Add rake task to clean up orphaned pools on removed storages (merge request)
- Add a divergingBarChart GLQL display type (merge request)
- Show agent type in the AI audit event report (merge request) GitLab Enterprise Edition
- Add state filter to ListVulnerabilities MCP tool (merge request) GitLab Enterprise Edition
- Enable bulk vulnerabilities Duo workflow API by default (merge request)
- Add granular token authorization to Secrets & CI mutations (merge request)
- Add get_user MCP tool and service (merge request)
- Add Kotlin support to gitlab-advanced-sast-ext (merge request) GitLab Enterprise Edition
- Support delta archives in the offline v3 connector (merge request) GitLab Enterprise Edition
- Add trigger_event_type column to duo_workflows_workflows (merge request) GitLab Enterprise Edition
- Feat: Update Project Session Details with ciJobs label util (merge request) GitLab Enterprise Edition
- Enable mcp_server_block_enforcement by default (merge request) GitLab Enterprise Edition
- Show the flow name and link it to its AI catalog item (merge request) GitLab Enterprise Edition
- Add doc for auto remediation profile and triage and remediation profiles (merge request)
- Add Geo LR rake tasks to seed and verify schema_migrations (merge request) GitLab Enterprise Edition
- Add internal org_mover API for organization maintenance (merge request)
- Expose ci_skip_branch_pipelines_for_mrs in REST API (merge request)
- Add user-facing documentation for the SDLC Context Agent (merge request)
- Add assignable_when argument to GraphQL granular scope directive (merge request)
- Enforce retention policy definition (merge request)
- Add readiness_score_feedback as externally stored markdown field (merge request) GitLab Enterprise Edition
- Add cumulative trend to AI governance KPIs (merge request) GitLab Enterprise Edition
- Docs: full workflow for CI/CD OTel bearer-token auth (merge request)
- Allow client override for proxy download in object storage by @duewel1982 (merge request)
- Add severity value to SD false positive profile configuration (merge request) GitLab Enterprise Edition
- Add AI triage eligibility module with profile support (merge request) GitLab Enterprise Edition
- Add an option to copy the picked description on cherry-pick by @Vchekryzhov1 (merge request) GitLab Enterprise Edition
- Make Cohorts tab work in the organization admin area (merge request)
- Add versioned scoring function for merge request risk classification (merge request) GitLab Enterprise Edition
- Grant Maintainer default secrets permissions on project provisioning (merge request) GitLab Enterprise Edition
- Add organization_id to CI mirror tables (merge request)
- Show application owner details in authorized applications list by @tachyons (merge request)
- Add list_groups MCP server tool (merge request)
- Add start_sha and start_project to the add_commit MCP tool (merge request)
- Add MCP to Duo workflow source_type enum (merge request) GitLab Enterprise Edition
- Expose SAST profile configuration type (merge request) GitLab Enterprise Edition
- Add group setting for web search in Duo Chat (merge request) GitLab Enterprise Edition
- Add status and model dimensions to DuoWorkflows engine (merge request) GitLab Enterprise Edition
- Add conflicts facet to get_merge_request (merge request)
- Enable malware detection by default on vuln and dependency pages (merge request)
- Record the session that produced a risk classification (merge request) GitLab Enterprise Edition
- Add list_projects MCP tool by @rantoniuk (merge request)
- Docs: Add Azure Managed Identity option for Gitaly server-side backup (merge request)
- Set AI planning flag when work item created via MCP tool (merge request) GitLab Enterprise Edition
- Add settings UI for feature flag minimum role (merge request)
- Add group scope to list_merge_requests MCP tool by @Mahaveer1013 (merge request)
- Add validity checks for more GitHub token types (merge request) GitLab Enterprise Edition
- Add granular token authorization to mlops types in GraphQL (merge request)
- Add view options to the Artifact Registry repositories list (merge request) GitLab Enterprise Edition
- Add supply_chain_signing_certificates table (merge request)
- Receive runtime env key from runner and expose API for querying it (merge request)
- Add ai_claude_* audit event types (merge request) GitLab Enterprise Edition
- Log successful CI variable value access via GraphQL (merge request)
- Add previous-period trend badge to GLQL stat blocks (merge request)
- Split agent type filtering into two scopes (merge request) GitLab Enterprise Edition
- Enable slack_duo_agent feature flag by default (merge request)
- Add ListVulnerabilities and GetVulnerability MCP Server tools (merge request) GitLab Enterprise Edition
- Add project dimension, filter, and count to DuoWorkflows AE (merge request)
- Add a date range filter to the AI Governance dashboard (merge request) GitLab Enterprise Edition
- Add load performance report to the merge request reports tab (merge request)
- Limit AI Governance agent-class filter to DAP behind a feature flag (merge request) GitLab Enterprise Edition
- Add description popover to MCP server activity card (merge request) GitLab Enterprise Edition
- Filter session artifacts on the local agent_type column (merge request) GitLab Enterprise Edition
- Add agentClass filter to Duo Workflow session artifacts (merge request)
- Add readiness_score_feedback as externally stored markdown field (merge request) GitLab Enterprise Edition
- Rate limit outbound Service Desk emails per namespace (merge request)
- Add readiness_score_feedback as externally stored markdown field (merge request) GitLab Enterprise Edition
- Add single note endpoint to WorkItem REST API (merge request)
- Add Write/Preview tabs to the new file page by @skkzsh (merge request)
- Bump gitlab_query_language to 0.35.0 for AgentPlatformSession (merge request)
- Add credits CTAs to AI Agents empty state for Free users (merge request) GitLab Enterprise Edition
- Derive GLQL stat description and direction defaults (merge request)
- Segment Developer activity and Project exposure by agent class (merge request) GitLab Enterprise Edition
- Remove merge_request_create_flow_trigger feature flag (merge request)
- Add code_dropdown_custom_clients application setting by @stanislav43 (merge request)
- Add agent_type to duo_workflow_session_artifacts (merge request) GitLab Enterprise Edition
- Enable security_policies_malware_attribute by default (merge request) GitLab Enterprise Edition
- Support similarity sort in the groups GraphQL query (merge request)
- Validate flow trigger filter fields and values (merge request) GitLab Enterprise Edition
- Accept client trace headers for Orbit requests (merge request) GitLab Enterprise Edition
- Add metrics report to the merge request reports tab (merge request)
- Expose triage and remediation profile configuration (merge request) GitLab Enterprise Edition
- Expose triage and remediation profile configuration (merge request) GitLab Enterprise Edition
- Add support for triage and remediation profile in auto remediation flow (merge request) GitLab Enterprise Edition
- Expose startSha and startProject on the commitCreate mutation (merge request)
- Add a cheap closing merge requests count to the development widget (merge request)
- Add a toggle to turn AI flow triggers on and off (merge request) GitLab Enterprise Edition
- Add connected agents to AI governance metrics (merge request) GitLab Enterprise Edition
- Add risk domain catalog for merge request risk classification (merge request) GitLab Enterprise Edition
- Enable geo_proxy_push_ssh_to_primary by default (merge request) GitLab Enterprise Edition
- Enable geo_proxy_fetch_ssh_to_primary by default (merge request) GitLab Enterprise Edition
- Add order params coercion for AEs (merge request) GitLab Enterprise Edition
- Add leave organization action (merge request)
- Add MCP servers card to AI Governance dashboard (merge request)
- Add get_project MCP tool by @gkepas (merge request)
- Add ability to edit organization user (merge request)
- Validate cluster agent before starting a CD rollout (merge request) GitLab Enterprise Edition
- Reuse open merge requests Duo flows create by idempotency key (merge request)
- Add Service Desk email rate limit columns to plan_limits (merge request)
- Add list_tags MCP server tool (merge request)
- Add flow_type dimension and filter to AiUsageEvents engine (merge request) GitLab Enterprise Edition
- Docs: Add self-hosted Sigstore keyless signing guide (merge request)
- feat(api): Add file_type parameter to job artifacts API by @and2345 (merge request)
- Add part-authorization to AEs (merge request) GitLab Enterprise Edition
- Add top user and project session rankings to AI governance metrics (merge request)
- Add status, timing, and merge request data to user pipelines (merge request)
- Introduce basic DuoWorkflows AE (merge request) GitLab Enterprise Edition
- Use Gitaly exclude_patterns for unprotected branches pagination (merge request)
- Add rate limit to instance audit events API (merge request) GitLab Enterprise Edition
- Enable date filtering for all users by @rantoniuk (merge request)
- Add internal event tracking for markdown table column sorting (merge request)
- Add instance_ssh_certificates table, model, and feature flag (merge request)
- Expose signal and missing-signal labels over GraphQL (merge request) GitLab Enterprise Edition
- Queue Duo chat prompts during an active agent turn (merge request) GitLab Enterprise Edition
- Add an application SLI for Rails to OpenBao calls (merge request)
- Add observability project override schema and model by @erdaref (merge request)
- Add SAST configuration type to GraphQL mutations (merge request) GitLab Enterprise Edition
- Add project-scoped tag creation rate limiting (merge request)
- Add Dart and Scala support to gitlab-advanced-sast-ext (merge request)
- Add scheduled event type to AI flow triggers (merge request) GitLab Enterprise Edition
- Expose source_type and source_link on DuoWorkflow GraphQL type (merge request) GitLab Enterprise Edition
- Add option to hide GLQL panel actions dropdown (merge request) GitLab Enterprise Edition
- Add labels to merge request risk classification signals (merge request) GitLab Enterprise Edition
- Add link to item consumer for duo workflow (merge request) GitLab Enterprise Edition
- Add tier scoring and status to MergeRequestRiskAssessment (merge request) GitLab Enterprise Edition
- Add Linked items section to agent session details (merge request) GitLab Enterprise Edition
- Wire the rule builder into the DFW policy editor (merge request) GitLab Enterprise Edition
- Auto-assign reviewer on review submission (merge request)
- Add control: model_experiments_access_level_configured (merge request) GitLab Enterprise Edition
- Change spec to check excluding bots by @kouta_kumagai (merge request) GitLab Enterprise Edition
- Remove
combined_code_owner_approval_rulesfeature flag (merge request) - Remove and clean up validate-flow-trigger-actions ff (merge request) GitLab Enterprise Edition
- Exclude gitlab-qa from application rate limiting (merge request)
- Add list_releases MCP server tool (merge request)
- Add organization settings toggle for the Policy Store experiment (merge request) GitLab Enterprise Edition
- Expose project details in the user pipelines API (merge request)
- Add triage and remediation preset profile values (merge request) GitLab Enterprise Edition
- Add ai_compliance_anthropic_integrations table (merge request) GitLab Enterprise Edition
- Support the location OmniAuth attribute in profile sync by @shackermeier (merge request)
- Add semantic_search MCP tool as aggregated service by @arunsdev (merge request) GitLab Enterprise Edition
- Add fuzzySearch argument to labels GraphQL queries (merge request)
- Expose automatic_rebase_enabled on project read endpoints (merge request)
- Add user filter and dimension to Deployments aggregation engine (merge request) GitLab Enterprise Edition
- Annotate ClickHouse queries with request context (merge request)
- Add readiness_score support to MCP work item read and mutation tools (merge request) GitLab Enterprise Edition
- Add approvedAt to UserMergeRequestInteraction GraphQL type by @jspagnola (merge request)
- Apply dedicated rate limit to create snippet APIs (merge request)
- Attach Slack source_type and source_link to workflows (merge request) GitLab Enterprise Edition
- Accept eight new ecosystems in dependency firewall evaluations (merge request)
- Add save_note MCP tool (merge request)
- Add NuGet support to dependency scanning auto-remediation (merge request) GitLab Enterprise Edition
- Add approvals facet to the get_merge_request MCP tool (merge request)
- Validate flow is valid before allowing triggers (merge request) GitLab Enterprise Edition
- Add audit events for MCP server block and unblock (merge request) GitLab Enterprise Edition
- Add REST API for feature flag management minimum role (merge request)
- Add API to list pipelines triggered by the current user (merge request)
- Add group-level custom AI instructions to AI context block (merge request)
- Add ai_suggested_reviewers table and model (merge request)
- Add REST endpoint for risk classification tool results (merge request) GitLab Enterprise Edition
- Add merge_request created Duo Agent Platform trigger (merge request) GitLab Enterprise Edition
- Assign user as a reviewer when they submit a review by @mfischer5 (merge request)
- Add ref cache operation and trust metrics (merge request)
- Add CI_JOB_TOKEN support for the commit refs endpoint (merge request)
- Add /internal_note quick action to mark a comment as an internal note by @priyansh3133 (merge request)
- Implement control: model_registry_access_level_configured (merge request) GitLab Enterprise Edition
- Allow users to set Duo default namespace from drawer (merge request) GitLab Enterprise Edition
- Add milestone and label-name parameters to save_work_item (merge request)
- Gate the organization Policy Store behind an organization setting (merge request) GitLab Enterprise Edition
- Feat: Add session_details_right_rail feature flag (merge request) GitLab Enterprise Edition
- Feat: Add FF for note session bar component (merge request) GitLab Enterprise Edition
- Add virtual preset_key to default profiles (merge request) GitLab Enterprise Edition
- Add active column to ai_flow_triggers (merge request) GitLab Enterprise Edition
- Add audit events for Pages Domains lifecycle (merge request) GitLab Enterprise Edition
- Update CD rollout endpoint (merge request) GitLab Enterprise Edition
- Address review of the Policy Store config field renderer (merge request) GitLab Enterprise Edition
- Add mergeRequest.conflictFiles GraphQL field (merge request)
- Add audit event for blocked secret push protection pushes (merge request) GitLab Enterprise Edition
- Add slash-command suggestions menu to Duo Chat composer (merge request) GitLab Enterprise Edition
- Add tables for parallel test balancing (merge request)
- Enable and remove the
use_user_group_member_roles_members_pagefeature (merge request) - Add info about debug report in GSS for source code (merge request)
- Add related_branches endpoint to WorkItem REST API (merge request)
- Add list_commits MCP server tool (merge request)
- Revoke routable and versioned routable personal access tokens (merge request) GitLab Enterprise Edition
- Add accept_merge_request MCP server tool (merge request)
- Update table_size database dictionary entries (merge request)
- Add add_commit MCP server tool by @ashishsoniii (merge request) GitLab Enterprise Edition
- Add webPath field to NamespaceType GraphQL type (merge request)
- Handle CD approval_requested event (merge request) GitLab Enterprise Edition
- Transfer Slack API scopes during group organization transfers (merge request)
- Add NATS audit streaming consumer workers (merge request) GitLab Enterprise Edition
- Add Manage organization sidebar item for org admins (merge request)
- Add GraphQL read API for merge request risk assessments (merge request)
- Push human approval into paused workflow (merge request) GitLab Enterprise Edition
- Add user filter and dimension to Pipelines aggregation engine (merge request) GitLab Enterprise Edition
- Add REST endpoint for Dependency Firewall evaluation (merge request) GitLab Enterprise Edition
- Add Service Ping metrics for restricted AI Catalog items (merge request) GitLab Enterprise Edition
- Show the foundational agent name in the breadcrumb (merge request) GitLab Enterprise Edition
- Add a View session button to agent replies in work items (merge request) GitLab Enterprise Edition
- Add list_project_members MCP tool by @gkepas (merge request)
- Show loose foreign keys cleanup backlog on database diagnostics page (merge request)
- Add GraphQL endpoints for workflow-pipeline links (merge request) GitLab Enterprise Edition
- Adds flow schedules table (merge request)
- Add save_merge_request MCP tool folding create and update (merge request)
- Use branch targets in the work item merge request modal (merge request) GitLab Enterprise Edition
- Add MergeRequests::RiskAssessment and RiskOutcome models (merge request) GitLab Enterprise Edition
- Add source_type and source_link fields to duo_workflows_workflows (merge request) GitLab Enterprise Edition
- Require card verification for cost-restricted dial codes (merge request) GitLab Enterprise Edition
- Add agent-class filter to AI Governance dashboard (merge request)
- Expose two_factor_enabled in group members API for owners (merge request)
- Add fork_repository MCP server tool (merge request)
- Add Prometheus metrics for Rails to OpenBao calls (merge request) GitLab Enterprise Edition
- Add flowTriggers field to catalog item consumer (merge request) GitLab Enterprise Edition
- Sort AI agent inventory card by most-used agent first (merge request)
- Give approval gates a step reference (merge request) GitLab Enterprise Edition
- Add NATS audit streaming observability metrics (merge request) GitLab Enterprise Edition
- Add Dependency Firewall enforcement check API (merge request) GitLab Enterprise Edition
- Add author filter and dimension to MergeRequests aggregation engine (merge request) GitLab Enterprise Edition
- Add author dimension to Contributions aggregation engine (merge request) GitLab Enterprise Edition
- Add rollout channel token model (merge request) GitLab Enterprise Edition
- Expose alternatives count on user messages (merge request) GitLab Enterprise Edition
- Track bypass header traffic through labkit metrics (merge request)
- Add autovacuum configuration audit to database diagnostics (merge request)
- Warn about secret loss on group &project transfer (merge request) GitLab Enterprise Edition
- Add get_work_item MCP server tool (merge request)
- Add full_patch diff detail to get_merge_request MCP tool (merge request)
- Add first_parent and order arguments to repository commits (merge request)
- Add copy session ID option to classic Duo Chat (merge request) GitLab Enterprise Edition
- Sync sequences before Geo promotion with logical replication (merge request)
- Add list_repository_tree MCP tool (merge request)
- Expose duoCreatedSessionId on the note GraphQL payload (merge request) GitLab Enterprise Edition
- Add Geo LR subscription create and drop rake tasks (merge request) GitLab Enterprise Edition
- Match SBOM components against malware advisories (merge request) GitLab Enterprise Edition
- Prepare async index for CVE-name lookups on vulnerability_identifiers (merge request)
- Add Policy Store evaluation and violation tables (merge request) GitLab Enterprise Edition
- Add conditional debug artifact to secret detection job (merge request)
- Add save_work_item MCP server tool (merge request)
- Expose job and runner tags to the Job Router (merge request)
- Add commit diff stats to GraphQL Commit type (merge request)
- Use WorkflowStream in Duo Agentic Chat (merge request) GitLab Enterprise Edition
- Show human author in audit event summary and filter from details (merge request) GitLab Enterprise Edition
- Create offline import form (merge request)
- Add assignable_when conditions to assignable permissions (merge request) GitLab Enterprise Edition
- Expose automatic_rebase_enabled in Projects REST API (merge request)
- Serve /oauth/userinfo for IAM-issued JWTs (merge request)
- Enhance SARIF support in usage metrics (merge request) GitLab Enterprise Edition
- Add mocked Developer activity and Project exposure dashboard cards (merge request) GitLab Enterprise Edition
- Add dependency_firewall_setting_changed event definition (merge request) GitLab Enterprise Edition
- Apply measurements to common engines (merge request) GitLab Enterprise Edition
- Surface service account role in flow trigger and catalog UI (merge request) GitLab Enterprise Edition
- Add merge_requests risk_assessments and risk_outcomes tables (merge request) GitLab Enterprise Edition
- Expose visibility field on foundational chat agent GraphQL type (merge request) GitLab Enterprise Edition
- Allow CD Version name to be free-form (merge request) GitLab Enterprise Edition
- Add diffs field with patch text to MergeRequest type (merge request)
- Add project_id dimension to AgentPlatformSessions engine (merge request)
- Add content field to WikiPage GraphQL type (merge request)
- Add get_job MCP tool (merge request)
- Add dependency_firewall_policy_rule_changed event (merge request) GitLab Enterprise Edition
- Seed AI audit events filtered search from URL params (merge request) GitLab Enterprise Edition
- Add inputs to configure dependency resolution timeouts by @Taucher2003 (merge request) GitLab Enterprise Edition
- Add setting to accept awarded achievements for recipients by @BoxBoxJason (merge request)
- Register GitLab Flex Offline Add-on (merge request) GitLab Enterprise Edition
- Render human author on behalf of service account in audit events list (merge request) GitLab Enterprise Edition
- Expose static definition steps (merge request) GitLab Enterprise Edition
- Add save_merge_request_review MCP server tool (merge request)
- Handle query source copy feedback by @theinfosecguy (merge request)
- Add Edit file link to the README preview header (merge request)
- Allow /type Epic quick action to promote issues to epics by @aryanndwivedi2403 (merge request) GitLab Enterprise Edition
- Expose alternatives count on user messages (merge request) GitLab Enterprise Edition
- Add preference to disable emoji autocomplete picker (merge request)
- Add API endpoints to get one service account by @jspagnola (merge request)
- Add malware advisory value object for finding construction (merge request) GitLab Enterprise Edition
- Support markdown live preview for snippet file editor by @skkzsh (merge request)
- Expose provisioned_by_project_id in admin users API (merge request)
Fixed (333 changes)
- Fix race leaving pool repositories orphaned (merge request)
- Resolve Current.organization from git-over-HTTP repository paths (merge request)
- Lock the approval project rule row while syncing it to an MR (merge request) GitLab Enterprise Edition
- Fix policy approval rule desync detection and resync failures (merge request) GitLab Enterprise Edition
- Bound time in processing for Zoekt tasks (merge request) GitLab Enterprise Edition
- Improve Rapid Diffs accessibility for screen reader users (merge request)
- Fix 500 when moving or cloning epics via quick actions (merge request) GitLab Enterprise Edition
- Rate limit dependency proxy requests separately from web traffic (merge request)
- Use Labkit::Fields::CLASS_NAME in purge worker log (merge request)
- Fix purge worker lease specs and apply review nits (merge request)
- Drain stale scans via bounded self-re-enqueuing purge (merge request) GitLab Enterprise Edition
- Fix feature flag metadata for security_scans purge health check (merge request) GitLab Enterprise Edition
- Make security scan purge worker responsive to DB state (merge request) GitLab Enterprise Edition
- Fix scoped label wildcards not persisting in saved views by @aryanndwivedi2403 (merge request)
- Reconcile silently-merged MRs instead of aborting the train (merge request) GitLab Enterprise Edition
- Skip the award emoji cache update when the query is not cached (merge request)
- Upload an empty part for zero byte multipart objects by @sjestonsingh (merge request)
- Scope invited group member roles to the correct shared group (merge request) GitLab Enterprise Edition
- Hide repository actions from unauthorized users (merge request)
- Cap search page depth so from + size cannot exceed max_result_window (merge request)
- Preserve sessions index page when navigating back (merge request) GitLab Enterprise Edition
- Gate CVS advisory scanner findings on the scanning license (merge request) GitLab Enterprise Edition
- Reduce work items list query complexity for anonymous users (merge request) GitLab Enterprise Edition
- Fix mistyped table name in security scans ingestion (merge request) GitLab Enterprise Edition
- Send fully qualified ref in commits list query (merge request)
- Fix AwardEmoji namespace during work item moves by @ryo-whaletech (merge request)
- Gate pipeline list cancel and retry buttons on permissions (merge request)
- Add resolve_pagination_direction to CursorPagination concern (merge request)
- Fix label association and error handling in UserOverrideSelect (merge request) GitLab Enterprise Edition
- Generate the Pages unique domain when the API enables it (merge request)
- Fix data race in Duo Workflow HTTP transport (merge request)
- Anchor streaming destination schema patterns to whole strings (merge request) GitLab Enterprise Edition
- Keep the rich text editor document load out of undo history (merge request)
- Allow MINIMAL_ACCESS as group_access when sharing groups (merge request)
- Fix subscription status in moved issue responses by @ryo-whaletech (merge request)
- Record the global_search error SLI on the zoekt web success path (merge request) GitLab Enterprise Edition
- Backfill missing epic_issues rows from parent links (merge request)
- Fix profile mutations server error on user namespace (merge request) GitLab Enterprise Edition
- Strip HTTP quality values from navigator.languages entries (merge request)
- Permit mentioned param in project members autocomplete (merge request)
- Fix rapid diffs file nav shortcuts across modes (merge request)
- Fix email overflow into phone column in CRM contacts table (merge request)
- Stop denying Secrets Manager access when CDot down (merge request) GitLab Enterprise Edition
- Map Postman 401s to inactive only on the vendor verdict (merge request) GitLab Enterprise Edition
- Resume offline snapshots shard by shard on every sync (merge request) GitLab Enterprise Edition
- Wait for the workflow lock before draining queued prompts (merge request) GitLab Enterprise Edition
- Allow security bot to access components from internal projects (merge request) GitLab Enterprise Edition
- Fix: Add FF to MR Note Session Bar (merge request)
- Enforce CI job assignment phase timeouts (merge request)
- Skip the Duo agent config lookup on an empty repository by @sjestonsingh (merge request)
- Stop deferring mobile push deliveries on database health signals (merge request)
- Read the Secrets Manager beta cohort from the entitlement (merge request) GitLab Enterprise Edition
- Guard against null viewer in hasRenderError computed property (merge request)
- Force internal notes for SRF mention-triggered replies (merge request) GitLab Enterprise Edition
- Serve the malware filter alongside a project filter (merge request) GitLab Enterprise Edition
- Apply AI file exclusions to add_commit MCP partial-edit reads (merge request)
- Add AgentEvents::Usage for the Duo Chat usage event (merge request) GitLab Enterprise Edition
- Unwrap project GIDs to numeric IDs in list_projects output (merge request)
- Fix the pipeline header refresh, remove wait_for_requests (merge request)
- Fix code comment (merge request) GitLab Enterprise Edition
- Delete approval policy reads before their project rules (merge request) GitLab Enterprise Edition
- Add weight field to iteration label-filter query (merge request) GitLab Enterprise Edition
- Update security_platform_management to security_controls (merge request) GitLab Enterprise Edition
- Guard repository page Apollo hooks against missing data (merge request)
- Recognize the self-managed Secrets Manager beta cohort (merge request) GitLab Enterprise Edition
- Echo the JSON-RPC request id in MCP errors (merge request)
- Keep Users sidebar item active on Cohorts page (merge request)
- Fix milestone Advanced Search for Planner role via merge_requests path (merge request) GitLab Enterprise Edition
- Track ObjectPool::DestroyWorker retries exhaustion (merge request)
- Fix crash when squashing a merge request with a missing commit (merge request)
- Fixes a small bug in forced-colors mode (merge request)
- Fix missing code navigation for blame on legacy files by @sjestonsingh (merge request)
- Show the aggregations load error in the language filter (merge request)
- Open Mermaid links in rich text editor via parent delegation by @skkzsh (merge request)
- Open Mermaid links in rendered Markdown via parent delegation by @skkzsh (merge request)
- Restore email scoped label styles (merge request) GitLab Enterprise Edition
- Show item name in AI Catalog breadcrumbs (merge request) GitLab Enterprise Edition
- Fix merge trains checkbox race on project settings page (merge request) GitLab Enterprise Edition
- Delete orphaned uploads when destroying vulnerability exports (merge request) GitLab Enterprise Edition
- Fix inline blame previous-blame link on relative URL installs (merge request)
- Fix Apply to all tooltip not rendering in Vue 3 (merge request) GitLab Enterprise Edition
- Allow hyphenated input names in CI array index access (merge request)
- Keep mobile push deliveries timely and log APNs rejections (merge request)
- Make ObjectPool::DestroyWorker idempotent (merge request)
- Harden Secrets Manager add-on enable mutation (merge request) GitLab Enterprise Edition
- Reduce work items list query complexity (merge request)
- Treat the retired dap_powered strategy as disabled (merge request)
- Enable retry on transient "Commit not found" errors (merge request)
- Allow enabling secret detection token revocation without URLs by @bobby-nandigam (merge request) GitLab Enterprise Edition
- Derive Secrets Manager trial state on read (merge request)
- Show why a rebase was rejected in the merge request widget by @gerardo-navarro (merge request)
- Fix nondeterministic finding calibration on duplicates (merge request) GitLab Enterprise Edition
- Default enable discard_stale_mergeability_verdicts flag (merge request)
- Reuse orphaned scan result policy reads on approval rule sync (merge request) GitLab Enterprise Edition
- Fix table of contents heading indentation (merge request)
- Fix Rapid Diffs line number clicks reloading the page (merge request)
- Fix file browser jumping when resized in Firefox (merge request)
- Fixes a small issue for Firefox 115.40.0esr (merge request)
- Authorize labels in GraphQl for ai_workflows scope (merge request) GitLab Enterprise Edition
- Bail out of a flow trigger run for an unsupported resource type (merge request) GitLab Enterprise Edition
- Retry rate-limited ActiveContext batches until they succeed (merge request)
- Fix AiGenie throwing when container element is absent (merge request) GitLab Enterprise Edition
- Report truncated Duo Workflow checkpoint ancestry (merge request) GitLab Enterprise Edition
- Preserve user selection during rich text editor uploads (merge request)
- Negotiate a handshake version in MCP initialize (merge request)
- Guard add_commit MCP partial edits against truncated large files (merge request)
- Fix Cisco Duo OTP 2FA rejecting valid passcodes (merge request)
- Fix partition cache crash on single-pipeline ranges (merge request)
- Restore Bitbucket Cloud API-token imports without OAuth provider (merge request)
- Stop resetting mcp_server_enabled when Duo settings change (merge request) GitLab Enterprise Edition
- Skip burned-path check in SecretsManagement::PipelineJwt (merge request) GitLab Enterprise Edition
- Fix flaky subgroup transfer feature spec (merge request)
- Geo: Support SSH cert gl_id formats in proxied Git requests (merge request) GitLab Enterprise Edition
- Bump gitlab-shell to 14.57.3 (merge request)
- Show a chat error when the workflow service rejects a request (merge request) GitLab Enterprise Edition
- Validate the flow-trigger goal for flows that resolve a resource (merge request) GitLab Enterprise Edition
- Derive Current.organization from repository in git audit and LFS API (merge request)
- Limit the malware filter to the default branch (merge request) GitLab Enterprise Edition
- Display custom emoji in emails (again) (merge request)
- Offer nested table insertion after pasting cells into a table (merge request)
- Delegate organization on wikis and snippets for maintenance mode (merge request)
- Disable DAP flow toggles in project settings when platform is off (merge request) GitLab Enterprise Edition
- Test button fix for vuln events (merge request) GitLab Enterprise Edition
- Fix active nav state for ai features (merge request) GitLab Enterprise Edition
- Skip secrets_stored billing events for unenrolled instances (merge request) GitLab Enterprise Edition
- Grant create_approval_rule to eligible Developer MR authors (merge request) GitLab Enterprise Edition
- Fix the error shown when Duo group settings fail to save (merge request) GitLab Enterprise Edition
- Fix rich text editor paste over a select-all selection (merge request)
- Align navigated thread to content top (merge request)
- Scope Rapid Diffs tab pane caching to the diffs pane (merge request)
- Bump gitlab-shell to 14.57.2 (merge request)
- Restore Bitbucket Cloud API-token imports without OAuth provider (merge request)
- Reactivate deactivated users signing in with 2FA enforced (merge request)
- Set explicit errorPolicy on blob viewer Apollo queries (merge request)
- Resolve addressed organization for AR per-user token exchange (merge request) GitLab Enterprise Edition
- Fix inverted tool approval badge in Duo chat by @bobby-nandigam (merge request) GitLab Enterprise Edition
- Log and surface the real reason LDAP group sync fails by @tnt4brain (merge request) GitLab Enterprise Edition
- Fix dynamic registration dropping the mcp_orbit scope (merge request)
- Sync markdown extensions with the filename, not Monaco's language by @skkzsh (merge request)
- Use named queries for Orbit map filter search (merge request) GitLab Enterprise Edition
- Prevent report ingestion readiness from blocking on dormant jobs (merge request)
- Update deprecated security_infrastructure product group (merge request) GitLab Enterprise Edition
- Stop sharing module state across the Vue 2 and Vue 3 lanes (merge request)
- Enable AI planning when an agent plan is written (merge request) GitLab Enterprise Edition
- Fix Secrets Manager error reporting to Sentry (merge request) GitLab Enterprise Edition
- Skip secrets_stored billing events for opted-out namespaces (merge request) GitLab Enterprise Edition
- Fix type-mixed rows_added_slice breaking refresh log ingestion (merge request)
- Do not resolve tool rules for an ungoverned local surface (merge request) GitLab Enterprise Edition
- Record CD service health when a deployment finishes (merge request) GitLab Enterprise Edition
- Fix work items list hanging after renaming a type (merge request)
- Show checking message for conflict check while CHECKING by @Gamezordd (merge request)
- Fix triage and remediation profile defaults (merge request) GitLab Enterprise Edition
- Resolve the Duo Code Review actor for a composite requester (merge request) GitLab Enterprise Edition
- Aggregate security findings from related pipelines in MR widget (merge request) GitLab Enterprise Edition
- Fix double-escaped special characters in breadcrumb names by @eldardada (merge request)
- Handle the 32-bit Elasticsearch missing-sort sentinel (merge request) GitLab Enterprise Edition
- Include target project pipelines in merge request pipelines resolver (merge request)
- Guard /internal_note quick action on a persisted target (merge request)
- Report correct missing merge base ref by @tvgorshkov (merge request)
- Fixes browser error when no sbom errors (merge request) GitLab Enterprise Edition
- Disable query deduplication for runner list queries (merge request)
- Fix board columns inheriting list view pagination cursors (merge request)
- Resolve programming languages through stable identifiers (merge request)
- Fix TypeError in EE BlobOverflowMenu when Apollo query errors (merge request) GitLab Enterprise Edition
- Drop hard FK to organizations from four snippet child tables (merge request)
- Fix perf mark race in commit list instrumentation (merge request)
- Skip clearing repositories for exclusion-based backups (merge request)
- Drive preview tabs by loaded markdown extensions by @skkzsh (merge request)
- Call resetFormState if the board comes through after the modal (merge request)
- Refresh DORA metrics when an incident is deleted (merge request) GitLab Enterprise Edition
- Merge request pipelines are a valid source context (merge request) GitLab Enterprise Edition
- Do not memoize a nil user in ApplicationContext (merge request)
- Guard against unresolvable root ref in diverging commit counts (merge request)
- Handle insufficient privilege in vacuum activity query (merge request)
- Gate pipeline creation failure alerts on user-initiated requests (merge request)
- Sync snippet Markdown live preview with mid-edit renames by @skkzsh (merge request)
- Select the preview renderer from the submitted file path by @skkzsh (merge request)
- Handle missing SSH mirror host URLs (merge request)
- Validate embeddings before indexing to prevent silent corruption (merge request) GitLab Enterprise Edition
- Respect username filters in audit event CSV export (merge request) GitLab Enterprise Edition
- Default SHA on merge requirement for new groups to false (merge request)
- Ignore stacked on single-metric GLQL column charts (merge request)
- Update deprecated static_analysis product group (merge request) GitLab Enterprise Edition
- Allow one request to link several AI service accounts (merge request) GitLab Enterprise Edition
- Updated CD SendToWorkflowChannel idempotency key (merge request) GitLab Enterprise Edition
- Guard oauth_application_created audit on persisted? in CreateService (merge request) GitLab Enterprise Edition
- Drop project_id FK from packages_helm_metadata_cache_states (merge request)
- fix: Align CI schema with backend keyword validation by @vertisan (merge request)
- Fix stale flash alerts (merge request)
- Always set TempPath in workhorse_authorize for direct uploads (merge request)
- Add cache-busting version parameter to avatar URLs (merge request)
- Restrict credits date ranges to subscription period (merge request) GitLab Enterprise Edition
- Sweep orphaned upload records left behind by CarrierWave (merge request)
- Use webhook_email for push webhook user_email (merge request)
- Fix inline blame not opening on first line click (merge request)
- Fix audit events UI showing '(removed)' for system authors (merge request) GitLab Enterprise Edition
- Skip stale markdown extension load after rename by @skkzsh (merge request)
- Allow client-executed Duo flows with a seat in another namespace (merge request)
- Send originating namespace when categorizing Duo Chat questions (merge request) GitLab Enterprise Edition
- Fix wrong source branch when creating MR from issue (merge request)
- Fix SSH signature email case verification (merge request)
- Validate
tag_gpg_signaturesproject_id foreign key (merge request) - Sort foundational AI Catalog items first for anonymous users (merge request) GitLab Enterprise Edition
- Fix keyboard activation of disabled Pajamas button links (merge request)
- Fix GLQL status sort to break ties alphabetically by name by @rob.hunt (merge request)
- Create missing epic_issues row when re-ordering children (merge request) GitLab Enterprise Edition
- Allocate deletion rule index past the current maximum (merge request) GitLab Enterprise Edition
- Fix 500 on git push for projects with dependency_firewall policy (merge request) GitLab Enterprise Edition
- Keep comment text when a Rapid Diffs save fails (merge request)
- Fix flaky custom roles spec in group repository settings (merge request) GitLab Enterprise Edition
- Trim last_used_ips reliably regardless of replica lag (merge request)
- Show a clear error when automatic rebase before merge conflicts (merge request)
- Fix ExternalUsernameSanitizer matching nested project paths by @tnt4brain (merge request)
- Hide table sticky-header shadow when description is truncated (merge request)
- Fixes alter_new_sequences_max_value fn to handle only managed_schemas (merge request)
- Fix backward Elasticsearch pagination from a null cursor (merge request) GitLab Enterprise Edition
- Rescue validation race in McpServerBlock.block! (merge request) GitLab Enterprise Edition
- Reword emoji autocomplete preference help text (merge request)
- Enforce namespace filter limit at filter creation (merge request) GitLab Enterprise Edition
- Sort bulk update VALUES lists by primary key (merge request) GitLab Enterprise Edition
- Change default sort order of CI/CD component inputs by @nwittstruck (merge request)
- Sum JUnit report times across multiple files by @gerardo-navarro (merge request)
- Set tier: :add_on on credits-backed Feature Library items (merge request) GitLab Enterprise Edition
- Stamp deploy timestamps on CD rollout environments (merge request) GitLab Enterprise Edition
- Guard AiCatalogConfiguredItemsWrapper update callback against null (merge request) GitLab Enterprise Edition
- Treat zero work_item_iid as create in save_work_item MCP tool (merge request)
- Fix MissingTemplate error in Gitaly error handler (merge request)
- Gate every Artifact Registry surface on a configured base URL (merge request) GitLab Enterprise Edition
- Fix CiPipelineCreationRequest id field resolution (merge request)
- Fix Vue 3 recent searches dropdown via explicit event push (merge request)
- Fix multi-line commit errors collapsing to a single line (merge request)
- Remove dead scrollbar gutter in the Duo AI panel (merge request) GitLab Enterprise Edition
- Reserve profile name for default profiles (merge request) GitLab Enterprise Edition
- Qualify default branch ref in ignore_revs_file_blob (merge request)
- Cap last_used_ips to the 5 most recent when rendered (merge request)
- Guard blob viewer computeds against missing blob (merge request)
- Track retry failure state for Duo Chat responses (merge request) GitLab Enterprise Edition
- Skip Lockable reset_failed_attempts! on read-only replicas (merge request) GitLab Enterprise Edition
- Stick to primary after creating composite OAuth token (merge request) GitLab Enterprise Edition
- Add spec for members outside organization (merge request)
- Encode commit message patterns as binary in list_commits (merge request)
- Remove ancient CSS (and its counter) to fix
alignment(merge request) - Fix command palette first item lookup under Vue 3 (merge request)
- Fix admin deletion of banned users being skipped (merge request)
- Do not prefill SM welcome form with placeholder email (merge request)
- Use latestPipeline for commit list CI status badge (merge request)
- Preserve offset pagination marker through merge and unscope (merge request)
- Show all triggers for a configured flow (merge request) GitLab Enterprise Edition
- Allow group-owned Direct Transfer export uploads (merge request)
- Fix Vue 2 cleanup gaps from Vue-3-only beforeUnmount hooks (merge request)
- Suppress the Duo trial CTA on Dedicated (merge request) GitLab Enterprise Edition
- Block saving Policy Store rules with blank required config (merge request) GitLab Enterprise Edition
- Fix NotImplementedError for Duo Agent Platform session web_url (merge request) GitLab Enterprise Edition
- Log failsafe failures and prove store-time v2 resolution (merge request)
- Fix branch truncation in the merge request header (merge request)
- Point feature flag introduced_by_url at this MR (merge request)
- Fix burned path ID token remediation guidance by @gerardo-navarro (merge request)
- Ensure VAC default context exists before store phase (merge request)
- Respect Secrets Manager toggle under the paid experience (merge request) GitLab Enterprise Edition
- Prevent org membership removal with existing memberships (merge request)
- Remove code_suggestions_direct_access_cloud_connected flag (merge request) GitLab Enterprise Edition
- Make credits remaining float to avoid edge case rounding (merge request)
- Dismissals persist after merge across contexts (merge request) GitLab Enterprise Edition
- Register keyboard shortcuts on the Commit page (merge request)
- Reject offline malware archives whose purl_type mismatches the directory (merge request) GitLab Enterprise Edition
- Resume malware advisory /all first sync from the last ingested shard (merge request) GitLab Enterprise Edition
- Fix: Fix note session bar border and change GID var (merge request) GitLab Enterprise Edition
- Render commit title references in commit list (merge request)
- Scope DWS client governing namespace to the request container (merge request) GitLab Enterprise Edition
- Fix SQL errors in organization group transfer (merge request)
- Fix Vue console warnings on Security Inventory page (merge request) GitLab Enterprise Edition
- OverrideUuidsService picks from default branch (merge request) GitLab Enterprise Edition
- Prevent Workhorse keywatcher GET cancellation race (merge request)
- Remove ci_skip_pipelines_with_fully_filtered_includes flag (merge request)
- Sync sticky header title when draft status changes by @Mahaveer1013 (merge request)
- Fix AI Catalog private-item alert copy (merge request) GitLab Enterprise Edition
- Show scan profile name on disabled rows and surface mutation errors (merge request) GitLab Enterprise Edition
- Apply clearfix to .note-text (merge request)
- Require full group config before pre-approving privilege group (merge request) GitLab Enterprise Edition
- Hide Update role button in drawer for inherited members by @Mahaveer1013 (merge request)
- Reset legacy 'gl' instance token prefix by @nwittstruck (merge request)
- Fix info popovers not opening on permission forms (merge request)
- Fix stuck disabled submit buttons after failed ajax calls (merge request)
- Fix MCP OAuth resource field to return string instead of array (merge request)
- Fix Sawyer::Error crash when GitHub GraphQL search returns nil nodes (merge request)
- Guard repository page entrypoints against degraded rendering (merge request)
- Return an empty array when country/state fetch fails (merge request) GitLab Enterprise Edition
- Add ai_workflows scope to group GraphQL fields by @xingli.wu (merge request)
- Derive expression from name for internal compliance controls (merge request) GitLab Enterprise Edition
- Fix removing a group-to-group share link when LDAP sync is enabled by @tnt4brain (merge request)
- Fix with_fix_available treating empty solution as fix-available (merge request) GitLab Enterprise Edition
- Position label drag clone under the cursor (merge request)
- Strip time from date filter values in saved view tokens (merge request)
- Hide the wiki sidebar toggles fully when the sidebar is expanded (merge request)
- Fix double-encoded image paths in classic diff view (merge request)
- Fix commit column width on legacy blame page (merge request)
- Fix super sidebar focus after unpinning item (merge request)
- Fix 500 errors on commit lists when Redis runs in cluster mode (merge request)
- Require production env to reach the production malware PDS (merge request) GitLab Enterprise Edition
- Gate tracked ref filter on advanced vulnerability management (merge request) GitLab Enterprise Edition
- Prevent premature Merge button before auto-merge loads (merge request) GitLab Enterprise Edition
- Add ai_workflows scope to vulnerability dependency GraphQL fields (merge request) GitLab Enterprise Edition
- Use project settings template for new work items by @aryanndwivedi2403 (merge request) GitLab Enterprise Edition
- Drop stuck session when its workload pipeline finishes cleanly (merge request) GitLab Enterprise Edition
- Fixes the gap and size of CRUD components used in Work Items (merge request)
- Fix the epic reference in the work item popover (merge request)
- Provision inherited foundational flows without user elevation (merge request) GitLab Enterprise Edition
- Fix downstream pipeline failure on nil variable value (merge request)
- Use absolute links in Atom feeds (merge request)
- Stamp feature_qualified_name in GSM billable event metadata (merge request) GitLab Enterprise Edition
- Remove prevent_reopen_merge_request_without_branch flag (merge request)
- Redirect organization-scoped URLs naming the wrong organization (merge request)
- Show epic suggested questions on epic work items (merge request) GitLab Enterprise Edition
- Scope remaining abuse report reads and writes to one organization (merge request)
- Invalidate cached SBOM scan results on a malware advisory sync (merge request) GitLab Enterprise Edition
- Handle empty and malformed coverage report artifacts (merge request)
- Fix trial widget delayed on initial landing after registration (merge request) GitLab Enterprise Edition
- Strip characters Atlassian rejects from Jira Connect payloads (merge request)
- Do not report empty include expansion as invalid YAML (merge request)
- Add missing namespace operator (merge request)
- Add header-sticky to the What's new drawer (merge request)
- Rotate x-axis labels on burndown and burnup charts (merge request) GitLab Enterprise Edition
- Show quick action errors inline instead of a page-level alert (merge request)
- Fix infinite loop parsing errored SARIF security reports (merge request) GitLab Enterprise Edition
- Fix typo: occured -> occurred in namespace_storage_app.vue by @RedZapdos123 (merge request)
- Update product_group knowledge_graph to context_systems (merge request) GitLab Enterprise Edition
- Fix inverted Write/Preview tabs in single file editor by @skkzsh (merge request)
- Fix Vue warning in Security inventory breadcrumbs during load (merge request) GitLab Enterprise Edition
- Fix nil capture handling in coverage extraction (merge request)
- Remove prevent_approval_removal_during_merge feature flag (merge request)
- Report unresolvable reviewer usernames in setReviewers (merge request)
- Extract markdown extension check into shared helper by @skkzsh (merge request)
- Add blob path to markup rendering cache key by @skkzsh (merge request)
Changed (159 changes)
- Fix award_emoji namespace_id for issue related records (merge request)
- Add dedicated org admin users templates (merge request)
- Bound the size of a single token in jsonstream by @sjestonsingh (merge request)
- Move session details to a bottom overlay in the Duo side panel (merge request) GitLab Enterprise Edition
- Move organization General settings to admin area (merge request)
- Scope GPG commit-signature lookups by project_id (merge request)
- Bump duo-cli version from 9.8.0 to 9.19.0 in StartWorkflowService (merge request) GitLab Enterprise Edition
- Enable ai_governance_mcp_server_activity by default for 19.4 (merge request) GitLab Enterprise Edition
- Make secrets_manager_access_denied message environment-aware (merge request)
- Allow secret deletion in read-only Secrets Manager states (merge request) GitLab Enterprise Edition
- Cap Retry-After waits and drop URLs from attachment errors by @sjestonsingh (merge request)
- Accept plain iids for link_work_items targets (merge request)
- Promote reviewState and reviewStates GraphQL arguments to GA (merge request)
- Restrict MCP server blocking to Owner at project scope (merge request) GitLab Enterprise Edition
- Move Secrets Manager settings to the group Secure tab (merge request) GitLab Enterprise Edition
- Bump UnenforceablePolicyRulesPipelineNotificationWorker timeout to 150s (merge request) GitLab Enterprise Edition
- Set vulnerability_occurrence_id in SBOM ingestion (merge request) GitLab Enterprise Edition
- Migrate policy store policy delete to GraphQL (merge request) GitLab Enterprise Edition
- Render the DAP Impact users by activity panel as a table (merge request) GitLab Enterprise Edition
- Semantic Search: allow batch size update in Admin UI (merge request) GitLab Enterprise Edition
- Remove
aura_tinted_themes feature flag (merge request)
- Chart cumulative trend on the AI Governance KPI tiles (merge request) GitLab Enterprise Edition
- Update the icon for the feature library (merge request)
- Fill missing Feature Library metadata for four nav items (merge request)
- Default enable repository_lock_information flag (merge request) GitLab Enterprise Edition
- Fold Description/URL into MCP server cell with expandable row (merge request) GitLab Enterprise Edition
- Enable Rapid Diffs by default on the MR Changes tab (merge request)
- Add data retention expiry columns to user mapping tables (merge request)
- Update selected line style in the blob file view (merge request)
- Change Policy Store default mode from enforce to warn (merge request) GitLab Enterprise Edition
- Revert group SAML extern_uid trust changes (merge request)
- Enable sync_v3_license_expressions by default (merge request) GitLab Enterprise Edition
- Migrate policy store list view to GraphQL policies query (merge request) GitLab Enterprise Edition
- Derive dependency malware status from malware advisories (merge request) GitLab Enterprise Edition
- Enable duo_mcp_tool_governance by default (merge request) GitLab Enterprise Edition
- Promote malware filter feature flag to beta (merge request) GitLab Enterprise Edition
- Fold last used ips into PersonalAccessToken and remove flag by @jspagnola (merge request)
- Allow administrators in Admin Mode to open job terminals by @gerardo-navarro (merge request)
- Rename model selection label to Non-Agentic Code Review (merge request) GitLab Enterprise Edition
- Graduate ai_governance_dashboard feature flag to beta (merge request)
- Add empty state for offline/export/history (merge request)
- Rename MalwareOffline to the dataset-neutral OfflineV3 connector (merge request) GitLab Enterprise Edition
- Add info about Secret Categories and Generic Detection (merge request)
- Remove duo_non_agentic_chat_ai_message_cut_off_warning feature flag (merge request) GitLab Enterprise Edition
- Protect creditsUsed behind read_agent_artifacts ability (merge request) GitLab Enterprise Edition
- Return specific error message when DWS unavailable (merge request) GitLab Enterprise Edition
- Paginate the get_work_item notes facet in both directions (merge request)
- Rename Restrict to group hierarchy to "Confine" (merge request) GitLab Enterprise Edition
- Feat: Update Session Details Information View on Pages (merge request) GitLab Enterprise Edition
- Show the project full path in the side panel session header (merge request) GitLab Enterprise Edition
- Wire date range filter to DAP Impact dashboard panels (merge request) GitLab Enterprise Edition
- Allow group-scoped rollout of session credits ingestion (merge request) GitLab Enterprise Edition
- Generate title when goal is set later (merge request) GitLab Enterprise Edition
- Bump highlightjs-veryl from 0.20.3 to 0.21.0 (merge request)
- Add report_artifacts support for foundational flows (merge request) GitLab Enterprise Edition
- Compute Secrets Manager grace period for self-managed installs (merge request) GitLab Enterprise Edition
- Remove groups_and_projects_async_transfer feature flag (merge request)
- Remove oauth_consents client_id foreign key for cross-cell compatibility (merge request)
- Add fetch_glql_schema to Data Analyst agent tools (merge request) GitLab Enterprise Edition
- Remove the
merge_request_code_dropdown_vue feature flag (merge request)
- Stop auto-expanding Duo for disabled access (merge request) GitLab Enterprise Edition
- Sort feature settings alphabetically within sections (merge request) GitLab Enterprise Edition
- Make Geo LR subscription rake tasks Rails-free (merge request) GitLab Enterprise Edition
- Add avatars and search to Duo Chat drawer group selector (merge request) GitLab Enterprise Edition
- Hide unconfigured reports and add empty states to the reports tab (merge request) GitLab Enterprise Edition
- SBOM ingestion uses correct project archive check (merge request) GitLab Enterprise Edition
- Bump gitlab-shell to 14.57.1 (merge request)
- Semantic Search: rate limit embeddings generation on GitLab Self-Managed (merge request) GitLab Enterprise Edition
- Migrate flow trigger modal to the conditions CRUD panel (merge request) GitLab Enterprise Edition
- Move approval_policies_block_on_failed_scan_job flag to beta (merge request) GitLab Enterprise Edition
- Add loading state for security attribute admin ui (merge request) GitLab Enterprise Edition
- Update merge request assignee to
GlCollapsibleListbox (merge request)
- Surface conflicting file names in merge train drop reasons by @shackermeier (merge request)
- Feat: Add Overview to Session Header view (merge request) GitLab Enterprise Edition
- Allow mail with no subject to service desk by @pravi (merge request)
- Refine OAuth consent warnings and device anti-phishing (merge request)
- Enable duo_cli_default_flow by default (merge request) GitLab Enterprise Edition
- Reword burned path ID token failure messages by @gerardo-navarro (merge request)
- Remove use_loose_foreign_keys_deleted_record_store feature flag (merge request)
- Attribute Secrets Manager GraphQL feature category (merge request) GitLab Enterprise Edition
- Remove redundant token format checks from partner clients (merge request) GitLab Enterprise Edition
- Make merge request
Reports tab badge count real reports (merge request) GitLab Enterprise Edition
- Include Duo Chat in AI governance sessions KPI (merge request)
- Migrate policy store create to GraphQL mutation (merge request) GitLab Enterprise Edition
- Report process-wide GVL wait from the Ruby sampler (merge request)
- Update work item type icon to include "Type" context for screen readers (merge request)
- Hardcode alternative comments import method as always enabled (merge request)
- Handle scim_group_uid on SamlGroupLink create/destroy (merge request) GitLab Enterprise Edition
- Make IAM gRPC transport a configuration item (merge request)
- Roll out duo_chat_workplan_empty_state flag (merge request)
- Feat: Add Overview to Session Header view (merge request) GitLab Enterprise Edition
- Start using ViewTransitions for MPA navigations (merge request)
- Update internal events validation (merge request)
- Add update action to rename pipelines in save_pipeline (merge request)
- Chore: Remove duo_panel_history_stack_persistence FF (merge request) GitLab Enterprise Edition
- Consolidate MR import concurrency limits into shared setting (merge request)
- Remove specific mention of GPG keys when rejecting an unsigned commit (merge request) GitLab Enterprise Edition
- Improve merge train drop reason messages by @shackermeier (merge request)
- Keep current conversation when switching model in Duo Agentic Chat by @bbodenmiller (merge request) GitLab Enterprise Edition
- Surface specific Gitaly conflict reasons in the merge widget (merge request)
- Replace user profile loading spinners with skeleton loaders (merge request)
- Accept issue and epic URLs for MCP work item resolution (merge request)
- Add tolerance window to @gl_introduced milestone check (merge request)
- Replace SaaS-only feature flag with workhorse config (merge request) GitLab Enterprise Edition
- Move agent todos above the session activity log (merge request) GitLab Enterprise Edition
- Add approve and unapprove methods to save_merge_request_review (merge request)
- Use data context for Your work sidebar links (merge request)
- Transfer burned routes and agent org auths on group transfer (merge request) GitLab Enterprise Edition
- Move user popover busy badge onto the avatar (merge request)
- Validate govern_policies rules at the persistence layer (merge request)
- Gate Cells claims verification behind attribute flag (merge request)
- Increase AI Gateway embeddings HTTP timeout above 20s (merge request) GitLab Enterprise Edition
- Tell users to rewrite Git history in GitGuardian message (merge request) GitLab Enterprise Edition
- Fix pinned items empty state under hide_unpinned_sidebar_items (merge request)
- Rename auto resolve profile to triage and remediation profile (merge request) GitLab Enterprise Edition
- Explain missing OAuth client when DCR is disabled (merge request)
- Feat: Update Session Header with Overview (Side Panel) (merge request) GitLab Enterprise Edition
- Shorten the get_work_item not-found message (merge request)
- Bump Duo Developer foundational flow config to ^3.0.0 (merge request) GitLab Enterprise Edition
- Send resume_checkpoint_ts on Duo Chat retries (merge request)
- Send ask tools in the tool access policies claim (merge request) GitLab Enterprise Edition
- Add retry chain for ActiveContext failure handling (merge request)
- Order the user comment templates alphabetically by @nathanaelhoun (merge request)
- Skip username stamp for dynamic OAuth apps on SaaS (merge request)
- Update Duo default group field in user preferences (merge request) GitLab Enterprise Edition
- Allow admins to change enterprise user primary email via Users API (merge request) GitLab Enterprise Edition
- Show "No available solution" message for CS when solution is empty (merge request) GitLab Enterprise Edition
- Remove arbitrary position classes (merge request)
- Align workplan panel header buttons with top bar redesign (merge request) GitLab Enterprise Edition
- Remove broken post_duo_code_review tool and add MR review tools (merge request) GitLab Enterprise Edition
- Add user_initiated flag to MR pipeline creation requests (merge request)
- Feat: Add new Note Session Status Bar component (merge request) GitLab Enterprise Edition
- Update commit list item SHA actions to a button group (merge request)
- Remove config warning for legacy retry:when values (merge request)
- Remove dap_powered reviewer assignment strategy from settings and API (merge request) GitLab Enterprise Edition
- Improve Authentication, Authorization, and Sensitive data info tooltips (merge request) GitLab Enterprise Edition
- Include foundational agents and project in AI agent inventory card (merge request) GitLab Enterprise Edition
- Disable Enable button for Developers at the Explore level (merge request) GitLab Enterprise Edition
- Resolve sequences to their owning table in search path check (merge request)
- Update Mermaid to 11.16.1 by @Jorgagu (merge request)
- Improve wording on in-app Ultimate trial form (merge request) GitLab Enterprise Edition
- Remove four failure-joke greetings from homepage (merge request)
- Allow additional properties in malware advisory identifiers (merge request) GitLab Enterprise Edition
- Add dated sparkline axis, full-width tiles, loading skeletons (merge request) GitLab Enterprise Edition
- Remove loose_foreign_keys_backlog_diagnostic feature flag (merge request)
- Use sentence case for mid-sentence work item type names (merge request)
- Update Triggers page description and add docs link (merge request) GitLab Enterprise Edition
- Remove group_uploads_api feature flag (merge request)
- Send pinnedVersion in AI catalog bulk enablement (merge request) GitLab Enterprise Edition
- Show a loading state while a project transfer runs (merge request)
- Group invite modal errors that share a message (merge request) GitLab Enterprise Edition
- Explain what is loading on the Run pipeline variables form (merge request)
- Explain why project feature visibility selects are disabled (merge request)
- Remove
split_ghost_user_migration_queue_into_human_and_non_human FF (merge request)
- Remove mr_changed_paths_net_diff feature flag (merge request)
- Remove Feature Flag isolation_status_check (merge request)
- Align GLQL table shadow with sticky header tables (merge request)
- Send root_namespace_id header in Code Embeddings indexing (merge request) GitLab Enterprise Edition
- Add compute minute data to API (merge request) GitLab Enterprise Edition
Removed (16 changes)
- Remove Group principal from Secrets Manager permissions (merge request) GitLab Enterprise Edition
- Remove Duo Workflow connection metrics from workhorse (merge request)
- Drop groups claim from Secrets Manager user JWTs (merge request) GitLab Enterprise Edition
- Remove legacy AuditEvent model and all application code referencing it (merge request)
- Remove unused experimental field (merge request) GitLab Enterprise Edition
- Remove the labkit rack shadow comparison machinery (merge request)
- Use ApplicationContext for FallbackOrganizationTracker (merge request)
- Chore: remove formatAgentFlowTitle from code (merge request) GitLab Enterprise Edition
- Chore: Remove unused setPanelSubtitle from code (merge request) GitLab Enterprise Edition
- Drop unused project_push_rules table (merge request)
- Remove the ignored shallow_clone API parameter (merge request) GitLab Enterprise Edition
- Remove unused ProjectPushRule model (merge request)
- Remove delete_user permission from organization user (merge request)
- Remove unenforced traversal directive option (merge request)
- Remove
FinishedPipelines ClickHouse aggregation engine (merge request) GitLab Enterprise Edition
- Remove FinishedBuildsDeduplicatedFinder and deprecated mode argument (merge request) GitLab Enterprise Edition
Security (41 changes)
- Apply namespace bans to AI Catalog item visibility (merge request) GitLab Enterprise Edition
- Bind workflow tokens to catalog flow config (merge request) GitLab Enterprise Edition
- Bind workflow tokens to foundational flow IDs (merge request) GitLab Enterprise Edition
- Upgrade graphql gem and backport GlobalID serialization fixes
- Fix unauthenticated arbitrary local file read in commits API
- Prevent scheduled PEP test runs from bypassing policy scope
- Reassign sole approver rules on permanent deletion
- Fix complexity multiplier logic enables Unauthenticated DoS
- Verify Workhorse JWT on all remaining senddata emitters
- Sanitise items in JSONTable before passing to BTable
- Require update_package to change generic package status
- Anchor and escape EnvironmentMatcher wildcard patterns
- Preserve protected environment approval rule on approver revoke
- Fix routing manipulation with group wiki
- Pin checkout_sha at push time to prevent MR pipeline code injection
- Read Terraform state upload path from verified UploadedFile
- Prevent email OTP from bypassing SSO enforcement
- Remove admin compliance pipeline config from SM role
- Content editor vets iframe sources before rendering
- Update GitLab Elasticsearch Indexer to 5.14.12
- Scope global group approvers to policy's organization (merge request) GitLab Enterprise Edition
- Reject cross-organization pipeline execution config project (merge request) GitLab Enterprise Edition
- Reject cross-organization compliance framework relink (merge request) GitLab Enterprise Edition
- Remove predictable ids from OAuth consent form fields (merge request)
- Bump websocket-driver to 0.8.2 in remaining lockfiles (merge request)
- Scope CSP project batches to the namespace's organization (merge request) GitLab Enterprise Edition
- Validate CSP namespace belongs to the setting's organization (merge request) GitLab Enterprise Edition
- Make Slack-originated Duo flow sessions private to the invoker (merge request) GitLab Enterprise Edition
- Scope security policy project suggestions to the caller's organization (merge request) GitLab Enterprise Edition
- Scope policy scope projects and groups to the policy's hierarchy (merge request) GitLab Enterprise Edition
- Fix workflow ID enumeration via distinct not-found vs permission errors (merge request) GitLab Enterprise Edition
- Revert "Merge branch 'update-kas-version' into 'master'"
- Ignore Claude project settings in Claude agent
- Prevent Sidekiq exhaustion via unbounded import jobs
- Update KAS version
- Reject overflow username length in SCIM and OAuth sign-in
- Fix Compliance Framework Cross-Namespace Assignment on self-managed instances
- Prevent policy job needs from resolving to untrusted jobs
- Enforce protected environment check on terminal websocket auth
- Check :update_approvers before resetting MR approval rules
- Refuse routing service desk email on slug collision (merge request)
Performance (41 changes)
- Swap workflow_id index for a composite index on checkpoint blobs (merge request)
- Cap milestone show page count queries to prevent timeouts (merge request)
- Memoize dependency linker selection per highlighter (merge request)
- Analyze newly created partitions bypassing the analyze interval (merge request)
- Skip new_blob_path in noteable data for Rapid Diffs (merge request)
- Skip unused reference filters when extracting issue references (merge request)
- Stop reserving 4MB per Duo Workflow WebSocket connection (merge request)
- Compute MR approver-id set once instead of per rule (merge request) GitLab Enterprise Edition
- Commit the completed sync unit when a v3 run is interrupted (merge request) GitLab Enterprise Edition
- Bound the checkpoint blob fetch at the current_thread group (merge request) GitLab Enterprise Edition
- Batch firstCheckpoint across GraphQL pages (merge request) GitLab Enterprise Edition
- Batch latestCheckpoint and duoMessages across GraphQL pages (merge request) GitLab Enterprise Edition
- Speed up the licenses v3 sync throttle (merge request)
- Enable batched commit lookup in RefreshService by default (merge request)
- Enable RefreshService diff commit preload skip by default (merge request)
- Improve HTMLGitlab formatter performance (merge request)
- Ask 1Password to skip merge request pages (merge request)
- Paginate the Duo Agentic Chat history list (merge request) GitLab Enterprise Edition
- Read dependency artifact sizes from the database (merge request)
- Replace partial user_id/created_at index with a full index (merge request)
- Geo: Deduplicate registry_count query in GeoNodeStatus (merge request) GitLab Enterprise Edition
- Read authorization rows as raw pairs, not AR objects (merge request)
- Avoid group N+1 in approval rule contains_hidden_groups? (merge request) GitLab Enterprise Edition
- Add synchronous index on vulnerability_identifiers CVE names (merge request) GitLab Enterprise Edition
- Swap cd_rollout_environments environment_id index for composite (merge request) GitLab Enterprise Edition
- Push the channel_keys membership into the blob read query (merge request) GitLab Enterprise Edition
- Remove optimized_codeowners_pattern_matching feature flag (merge request) GitLab Enterprise Edition
- Remove merge_trains_batch_car_lookups feature flag (merge request) GitLab Enterprise Edition
- Geo: Add reverification index to ci_job_artifact_states (merge request) GitLab Enterprise Edition
- Add (user_id, created_at DESC) index for Duo Workflow session lists (merge request)
- Support ascending keyset pagination for runner jobs (merge request)
- Fix N+1 queries in MemberRole.dependentSecurityPolicies (merge request) GitLab Enterprise Edition
- Exclude deprecated status from installable NuGet packages (merge request)
- Always cache the previous chunk in Gitlab::HttpIO (merge request)
- Use persistent connections with timeouts in Gitlab::HttpIO (merge request)
- Skip the post-merge diff commit preload in RefreshService (merge request)
- Reduce database queries in compliance evaluator worker (merge request) GitLab Enterprise Edition
- Fix deduplication strategy in AuthorizedProjectUpdate workers (merge request)
- Remove ci_skip_fork_mr_lookup_for_non_forks feature flag (merge request)
- Look up only referenced SHAs in commit reference filter (merge request)
- Improve attribute delete operation index usage (merge request) GitLab Enterprise Edition
Other (202 changes)
- Remove enable_dependency_bump_breaking_changes flag (merge request)
- Remove enable_dependency_bump_breaking_changes_pipeline_tracking flag (merge request) GitLab Enterprise Edition
- Remove the gitlab_duo_governance_settings feature flag (merge request) GitLab Enterprise Edition
- Add index on identities provider and id (merge request)
- Add BBM to migrate legacy step_url values with prefix match (merge request)
- Remove unused method Postgresql::ReplicationSlot.slots_retained_bytes (merge request)
- Remove unused constant PARAM_JOB_ID_MAX_SIZE (merge request)
- Revert "Add Vue 3 migration flag for MR rapid diffs page" (merge request)
- Remove cancel_pipelines_when_policy_disabled feature flag (merge request) GitLab Enterprise Edition
- Always install the Duo CLI binary in flow executor jobs (merge request) GitLab Enterprise Edition
- Extract Duo Workflow connection config into a helper (merge request) GitLab Enterprise Edition
- Skip pipeline IID allocation on CI lint dry runs (merge request)
- Accept a build id and state snapshot in ExecuteBuildHooksWorker (merge request)
- Update IAM gRPC Client Gem to 467484f (merge request)
- Remove mcp_tool_alias_resolution feature flag (merge request)
- Move dependency_bump_web_search flag to ops type (merge request) GitLab Enterprise Edition
- Remove unused dependency_bump_run_command feature flag (merge request) GitLab Enterprise Edition
- Remove unused attribute Gitlab::Git::Tag#object_sha (merge request)
- Remove unused scope Ci::Pipeline.where_not_sha (merge request)
- Fix governPolicyUpdate passing wrong keyword to UpdateService (merge request) GitLab Enterprise Edition
- Add columns for allowlisting CI/CD variables in flows (merge request)
- Add BBM to migrate OTP secrets (merge request)
- Track project import lifecycle internal events (merge request)
- Track group import lifecycle internal events (merge request)
- Remove the standalone DAP onboarding page (merge request) GitLab Enterprise Edition
- Remove unused method Group#blocked_owners (merge request)
- Add missing @gitlab/ui translation fallbacks (merge request)
- Guard against nil source project in GitDeduplicationService (merge request)
- Remove unused constant Projects::CommitController::BRANCH_SEARCH_LIMIT (merge request)
- Remove unused method Ci::Runner#belongs_to_one_project? (merge request)
- Clean up async_mirror_branch_creation feature flag (merge request)
- Add bulk vulnerability resolution demo (merge request)
- Document the fork_repository MCP server tool (merge request)
- Point connected agents filter flag at its own MR (merge request) GitLab Enterprise Edition
- Add issues bigint foreign keys batch one (merge request)
- FE - Clean up ai_catalog_internal_visibility feature flag (merge request) GitLab Enterprise Edition
- Regenerate RuboCop TODO files (merge request)
- Remove retry_failed_keep_around_ref_writes feature flag (merge request)
- Remove organization_id from bulk_import_exports (merge request)
- Mark 20260515123343 as obsolete (merge request) GitLab Enterprise Edition
- Drop principal_id from CD transition tables (merge request)
- Delete the bespoke DAP reviewer assignment code path (merge request)
- Remove ai_catalog_internal_visibility feature flag (merge request) GitLab Enterprise Edition
- Cleanup IN operator optimization on MR finder (merge request)
- Drop group_id from CD tables (merge request)
- Drop group_id from CD version and artifact tables (merge request) GitLab Enterprise Edition
- Add AI audit events by event name metric for PostgreSQL (merge request) GitLab Enterprise Edition
- Update IAM gRPC Client Gem to 6119be5 (merge request)
- Remove ai_catalog_public_explore feature flag (merge request) GitLab Enterprise Edition
- Store bundled catalog readmes in object storage (merge request)
- Remove security_dashboard_agentic_adoption feature flag (merge request)
- Add BBM to delete duplicate scan_result_policy_violations (merge request)
- Finalize BBM BackfillAnalyzerStatusesInSecurityInventoryFilters (merge request)
- Guard work item detail queries against the anonymous complexity cap (merge request)
- Add BEFORE UPDATE trigger to repair dual sharding keys on notes (merge request)
- Rename DuoChatHelper to PanelCommon (merge request) GitLab Enterprise Edition
- Queue deployment merge request bigint FK validations (merge request)
- Sync issues bigint indexes batch one for self-managed (merge request)
- Remove sbom_occurrence_ref_es_indexing feature flag (merge request) GitLab Enterprise Edition
- Remove configurable_security_scan_profiles feature flag (merge request) GitLab Enterprise Edition
- Remove the gate_token_exchange_endpoint feature flag (merge request) GitLab Enterprise Edition
- Remove stale ignore_column entries from CD models (merge request) GitLab Enterprise Edition
- Bump gitlab-labkit to 5.0.0 (merge request)
- Add pending_detach to postgres_partitions view (merge request)
- Use render_inline instead of send in DuoChatPanel::Component spec (merge request) GitLab Enterprise Edition
- Fetch work item CRM contacts in their own query (merge request)
- Fix Secrets Manager observability issues (merge request) GitLab Enterprise Edition
- Support transferring security export tables on org group transfer (merge request) GitLab Enterprise Edition
- Add rule list orchestration and rule-type picker (merge request) GitLab Enterprise Edition
- Finalize deployment_merge_requests bigint backfill (merge request)
- Add feature_category to Gitlab::Diff specs (merge request)
- Trim excess last_used_ips down to five per token (merge request)
- Fetch work item to-do items in their own query (merge request)
- Add license, vulnerability, and malicious rule builders (merge request) GitLab Enterprise Edition
- Update css_parser gem from 1.14.0 to 1.22.0 (merge request)
- Route deleted records by sharding key for three pilot tables (merge request)
- Externalize job callout failure messages by @gerardo-navarro (merge request)
- Clean up deployments bigint conversion (merge request)
- Clean up deployment_clusters bigint conversion (merge request)
- Instruct agents to select and apply MR description templates by @bbodenmiller (merge request)
- Swap bigint columns for ci_sources_pipelines (merge request)
- Add billable usage daily aggregate table for air-gapped instances (merge request) GitLab Enterprise Edition
- Remove preload_member_roles feature flag (merge request)
- Fetch work item linked resources in their own query (merge request)
- Remove unused method Project#issue_exists? (merge request)
- Add shared widgets for the DFW rule-builder UI (merge request) GitLab Enterprise Edition
- Add push_pipelines_for_job_token_allowed to ci_cd_settings by @tachyons (merge request)
- Clean up partition_aware_pipeline_preload feature flag (merge request)
- Move logger into CD namespace (merge request) GitLab Enterprise Edition
- Regenerate RuboCop TODO files (merge request)
- Retire the environment_key string-matching routing mechanism (merge request)
- Route the git basic auth ban through labkit behind a flag (merge request)
- Remove duo_developer_model_config feature flag (merge request) GitLab Enterprise Edition
- Merge work item features widget by widget in the Apollo cache (merge request)
- Batch plainly on merge_requests, filter in the sub-batch (merge request)
- Remove the cells_unique_claims feature flag (merge request)
- Suppress workflow deprecation warning for both linters (merge request)
- Remove unused scope Ci::JobArtifact.for_job_name (merge request)
- Drop ci_build_runtime_environments table (merge request)
- Remove obsolete push_rules organizations loose foreign key (merge request)
- Remove Cells claiming feature flags (merge request)
- Remove ai_catalog_bulk_item_consumer_create flag (merge request) GitLab Enterprise Edition
- Remove unused ContainerExpirationPolicy.with_container_repositories (merge request)
- Finalize BBM RenameMergeRequestDependencyAndPackagePipelinePermissions (merge request)
- Extract additional context builder into its own service (merge request) GitLab Enterprise Edition
- Remove package_metadata_sync_using_labels feature flag (merge request)
- Consume the routed runner machine when assigning jobs (merge request)
- Relax subscription_add_on_id constraints on add-on purchases (merge request)
- Remove dead ApplicationSetting push_rule association (merge request)
- Remove ff: chatgpt_oauth_sign_in+link_omniauth_to_existing_user_on_login (merge request)
- Remove elasticsearch_migrations_type_class FF (merge request) GitLab Enterprise Edition
- Requeue
MigrateProjectAuthorizations batched migration (merge request)
- Finalize BBM BackfillMergeRequestDiffsShaBytea (merge request)
- Remove duo_client_executed_flow_governance feature flag (merge request) GitLab Enterprise Edition
- Remove defer_on_heath_signal from project_authorizations workers (merge request)
- Add select all eligible for bulk AI vulnerability actions (merge request) GitLab Enterprise Edition
- Gate the dependency malware field on dependency_malware_detection (merge request) GitLab Enterprise Edition
- Remove unused partitioned index (merge request)
- Finalize BBM RenameGranularScopePermission (merge request)
- Remove unused method Ci::Tag.find_or_create_with_like_by_name (merge request)
- Remove stale keela exclusions (merge request)
- Remove unused scope Packages::Npm::Metadatum.package_id_in (merge request)
- Extract CI lint rate limit error message to shared method (merge request)
- Remove unused method Clusters::Cluster#platform_kubernetes_active? (merge request)
- Add vue3_migrate_web_ide flag and migrate Web IDE pages (merge request)
- Rename malware detection frontend feature flags (merge request) GitLab Enterprise Edition
- Update keela gem to 0.4.1 (merge request)
- Stop logging GraphQL type conflict deprecation warnings (merge request)
- Consolidate malware detection feature flags (merge request) GitLab Enterprise Edition
- Support multi-select answers for Duo question (merge request) GitLab Enterprise Edition
- Add seat_assignment_model_enabled namespace setting (merge request)
- Finalize BBM BackfillClearDetectedVulnerabilityTimestamps (merge request)
- Prepare issues bigint indexes batch one (merge request)
- Remove security_remediation_profiles feature flag (merge request) GitLab Enterprise Edition
- Remove security_scan_profiles_status_indicators FF (merge request) GitLab Enterprise Edition
- Fix tiers on AI audit events metric definitions (merge request) GitLab Enterprise Edition
- Base org-scoped URL generation on the request's URL, not scoped_paths? (merge request)
- Remove single_pipeline_for_resolver workaround (merge request)
- Add auto resolve JSON schemas (merge request) GitLab Enterprise Edition
- Add auto resolve JSON schemas (merge request) GitLab Enterprise Edition
- Bump gitlab-labkit to 4.5.0 for new rate limiter metrics (merge request)
- Add metrics to git basic auth IP bans (merge request)
- Add namespaces with AI audit storage enabled metric (merge request) GitLab Enterprise Edition
- Regenerate RuboCop TODO files (merge request)
- Remove unused infinite retry code from ActiveContext (merge request)
- Sync translations from crowdin (2026-08-24) (merge request)
- Cap refs logged on ActiveContext batch failures (merge request)
- Migrate seeded external agents off wakemeops glab install (merge request)
- Disable bulk AI flow actions instead of hiding them (merge request) GitLab Enterprise Edition
- Add distinct AI agent sessions metric for PostgreSQL (merge request) GitLab Enterprise Edition
- Finalize BBM BackfillExcludedMergeRequestDiffCommits (merge request)
- Finalize BBM StripWhitespaceFromMembersInviteEmail (merge request)
- Add vue3_migrate_blob_edit flag and migrate blob edit pages (merge request)
- Move organization_switching to org_creation release stage (merge request)
- Mark 20260202172643 as obsolete (merge request) GitLab Enterprise Edition
- Set all work_item_agent_plans.ai_planning_enabled to true (merge request)
- Add feature_category to Gitlab::Git spec files (merge request)
- Remove mr_ai_resolve_conflicts feature flag (merge request)
- Reintroduce vulnerability_read_es_dual_write feature flag (merge request) GitLab Enterprise Edition
- Remove lock_workflows_for_web_only feature flag (merge request) GitLab Enterprise Edition
- Remove unused constant Users::CalloutsHelper::TABS_POSITION_HIGHLIGHT (merge request)
- Remove defer_on_heath_signal from project_authorizations workers (merge request)
- Remove unused method UserMentionBehaviour#has_mentions? (merge request)
- Finalize BBM BackfillDismissedStatusInVulnerabilityFlags (merge request)
- Finalize BBM BackfillAggregateBooleansInSecurityInventoryFilters (merge request)
- Finalize BBM BackfillCiRunnersUuid (merge request)
- Finalize BBM UpdateDuoSecretDetectionFpEnabledToFalse (merge request)
- Retire vue3_migrate_repository feature flag (merge request)
- Updating Topology Service Client Gem to 20b54ff (merge request)
- Remove attributes bulk update worker FF (merge request) GitLab Enterprise Edition
- Reorder deployments bigint cleanup so the FK sorts first (merge request)
- Remove security_inventory_filtering FF (merge request) GitLab Enterprise Edition
- Resolve runner_machine_id when queuing (merge request)
- refactor(code-review): Derive commit query shape from table partitioning (merge request)
- Resolve both aliased and plain targets for CONTEXT_ALIASES specifiers (merge request)
- Remove deleting_account_disabled_for_enterprise_users flag (merge request)
- Finalize BBM BackfillArchivedInSecurityInventoryFilters (merge request)
- Finalize BBM BackfillSbomOccurrenceRefs (merge request)
- Finalize BBM ResyncMcpServerEnabled (merge request)
- Finalize BBM MigrateEpicSentNotificationsToWorkItems (merge request)
- Finalize BBM DeleteOrphanedProjectRepositories (merge request)
- Remove security_bulk_operations_notifications FF (merge request) GitLab Enterprise Edition
- Allow adding custom response to Duo question (merge request) GitLab Enterprise Edition
- Record the runner machine assignment when a build starts running (merge request)
- Remove
Users::MigrateNonHumanRecordsToGhostUserInBatchesWorker jobs (merge request)
- Remove the security_scan_profiles_feature feature flag (merge request) GitLab Enterprise Edition
- Clear stale group 2FA requirement from users (merge request)
- Removed unused FF from Projects::TransferService (merge request)
- Finalize BBM FixGitlabSubscriptionHistoriesHostedPlanNameUid (merge request)
- Remove pre_approved_agent_privileges from FoundationalFlow (merge request)
- Pass skip_ci to CreateBranchWorker for first mirror sync (merge request) GitLab Enterprise Edition
- Retire vue3_migrate_repository feature flag (merge request)
- Add metric for namespaces streaming AI audit events (merge request) GitLab Enterprise Edition
- Add channel_keys to duo workflow checkpoint headers (merge request)
- Remove accessible_disabled_button feature flag (merge request)
- Model the RackAttack user allowlist as an explicit skip rule (merge request)
- Finalize DeduplicatePipelineIids batched migrations (merge request)
- Add feature_category to Admin::PlansFinder spec (merge request)
- Remove cvs_ingestion_finding_per_occurrence_ref feature flag (merge request) GitLab Enterprise Edition
- Remove "diff_line_syntax_highlighting" feature flag (merge request)
- Remove unused scope GpgKey.externally_invalid (merge request)
- Remove audit_event_pat_unseen_ip feature flag (merge request)