Update docker.io/gitlab/gitlab-ce Docker tag to v19.4.0

v19.4.0

Added (300 changes)

• Add sidebar to display audit event additional details (merge request) GitLab Enterprise Edition
• Emit semantic search confidence and record its SLI (merge request) GitLab Enterprise Edition
• Default enable sdlc_context_agent_trigger feature flag (merge request) GitLab Enterprise Edition
• Add AiTracking for the Duo Chat IDE code tools (merge request) GitLab Enterprise Edition
• Route Duo in Slack to the slack_assistant flow behind a flag (merge request)
• Add control: duo_agentic_flow_audit_events_streaming (merge request) GitLab Enterprise Edition
• DB Diagnostics: Add per-table autovacuum overrides and scale-factor risk (merge request)
• Show Edit action on organization users admin page (merge request)
• Add merge request risk classification widget (merge request) GitLab Enterprise Edition
• Add instance setting to auto-index root namespaces for Orbit (merge request)
• Add triage and remediation docs (merge request)
• Scroll the panel with the keyboard on page load (merge request)
• Add RegoValidator and depend on gitlab-glaz (merge request)
• Allow ownerless clients on the IAM consent page (merge request)
• Return 429 and RateLimit headers for entry-less labkit rules (merge request)
• Promote credit_caps_ui FF to beta and enable by default (merge request) GitLab Enterprise Edition
• Add block_jwt_for_reclaimed_paths application setting (merge request)
• Add Instance level enable add-on graphql mutation (merge request) GitLab Enterprise Edition
• Add a previous-period trend column to GLQL analytics tables (merge request)
• Add group_filter LDAP configuration setting by @​tnt4brain (merge request) GitLab Enterprise Edition
• Add internal visibility option to send_bot_message policy action (merge request) GitLab Enterprise Edition
• Add closes_issue variable for merge request templates by @​sjestonsingh (merge request)
• Add real verification for GCP API key validity checks (merge request) GitLab Enterprise Edition
• Warn when the HTTP Router routing snapshot has drifted (merge request)
• Add keyboard shortcut to paste a table into a cell (merge request)
• Add cloud credential provider auth for Redis (merge request)
• Add rake task to clean up orphaned pools on removed storages (merge request)
• Add a divergingBarChart GLQL display type (merge request)
• Show agent type in the AI audit event report (merge request) GitLab Enterprise Edition
• Add state filter to ListVulnerabilities MCP tool (merge request) GitLab Enterprise Edition
• Enable bulk vulnerabilities Duo workflow API by default (merge request)
• Add granular token authorization to Secrets & CI mutations (merge request)
• Add get_user MCP tool and service (merge request)
• Add Kotlin support to gitlab-advanced-sast-ext (merge request) GitLab Enterprise Edition
• Support delta archives in the offline v3 connector (merge request) GitLab Enterprise Edition
• Add trigger_event_type column to duo_workflows_workflows (merge request) GitLab Enterprise Edition
• Feat: Update Project Session Details with ciJobs label util (merge request) GitLab Enterprise Edition
• Enable mcp_server_block_enforcement by default (merge request) GitLab Enterprise Edition
• Show the flow name and link it to its AI catalog item (merge request) GitLab Enterprise Edition
• Add doc for auto remediation profile and triage and remediation profiles (merge request)
• Add Geo LR rake tasks to seed and verify schema_migrations (merge request) GitLab Enterprise Edition
• Add internal org_mover API for organization maintenance (merge request)
• Expose ci_skip_branch_pipelines_for_mrs in REST API (merge request)
• Add user-facing documentation for the SDLC Context Agent (merge request)
• Add assignable_when argument to GraphQL granular scope directive (merge request)
• Enforce retention policy definition (merge request)
• Add readiness_score_feedback as externally stored markdown field (merge request) GitLab Enterprise Edition
• Add cumulative trend to AI governance KPIs (merge request) GitLab Enterprise Edition
• Docs: full workflow for CI/CD OTel bearer-token auth (merge request)
• Allow client override for proxy download in object storage by @​duewel1982 (merge request)
• Add severity value to SD false positive profile configuration (merge request) GitLab Enterprise Edition
• Add AI triage eligibility module with profile support (merge request) GitLab Enterprise Edition
• Add an option to copy the picked description on cherry-pick by @​Vchekryzhov1 (merge request) GitLab Enterprise Edition
• Make Cohorts tab work in the organization admin area (merge request)
• Add versioned scoring function for merge request risk classification (merge request) GitLab Enterprise Edition
• Grant Maintainer default secrets permissions on project provisioning (merge request) GitLab Enterprise Edition
• Add organization_id to CI mirror tables (merge request)
• Show application owner details in authorized applications list by @​tachyons (merge request)
• Add list_groups MCP server tool (merge request)
• Add start_sha and start_project to the add_commit MCP tool (merge request)
• Add MCP to Duo workflow source_type enum (merge request) GitLab Enterprise Edition
• Expose SAST profile configuration type (merge request) GitLab Enterprise Edition
• Add group setting for web search in Duo Chat (merge request) GitLab Enterprise Edition
• Add status and model dimensions to DuoWorkflows engine (merge request) GitLab Enterprise Edition
• Add conflicts facet to get_merge_request (merge request)
• Enable malware detection by default on vuln and dependency pages (merge request)
• Record the session that produced a risk classification (merge request) GitLab Enterprise Edition
• Add list_projects MCP tool by @​rantoniuk (merge request)
• Docs: Add Azure Managed Identity option for Gitaly server-side backup (merge request)
• Set AI planning flag when work item created via MCP tool (merge request) GitLab Enterprise Edition
• Add settings UI for feature flag minimum role (merge request)
• Add group scope to list_merge_requests MCP tool by @​Mahaveer1013 (merge request)
• Add validity checks for more GitHub token types (merge request) GitLab Enterprise Edition
• Add granular token authorization to mlops types in GraphQL (merge request)
• Add view options to the Artifact Registry repositories list (merge request) GitLab Enterprise Edition
• Add supply_chain_signing_certificates table (merge request)
• Receive runtime env key from runner and expose API for querying it (merge request)
• Add ai_claude_* audit event types (merge request) GitLab Enterprise Edition
• Log successful CI variable value access via GraphQL (merge request)
• Add previous-period trend badge to GLQL stat blocks (merge request)
• Split agent type filtering into two scopes (merge request) GitLab Enterprise Edition
• Enable slack_duo_agent feature flag by default (merge request)
• Add ListVulnerabilities and GetVulnerability MCP Server tools (merge request) GitLab Enterprise Edition
• Add project dimension, filter, and count to DuoWorkflows AE (merge request)
• Add a date range filter to the AI Governance dashboard (merge request) GitLab Enterprise Edition
• Add load performance report to the merge request reports tab (merge request)
• Limit AI Governance agent-class filter to DAP behind a feature flag (merge request) GitLab Enterprise Edition
• Add description popover to MCP server activity card (merge request) GitLab Enterprise Edition
• Filter session artifacts on the local agent_type column (merge request) GitLab Enterprise Edition
• Add agentClass filter to Duo Workflow session artifacts (merge request)
• Add readiness_score_feedback as externally stored markdown field (merge request) GitLab Enterprise Edition
• Rate limit outbound Service Desk emails per namespace (merge request)
• Add readiness_score_feedback as externally stored markdown field (merge request) GitLab Enterprise Edition
• Add single note endpoint to WorkItem REST API (merge request)
• Add Write/Preview tabs to the new file page by @​skkzsh (merge request)
• Bump gitlab_query_language to 0.35.0 for AgentPlatformSession (merge request)
• Add credits CTAs to AI Agents empty state for Free users (merge request) GitLab Enterprise Edition
• Derive GLQL stat description and direction defaults (merge request)
• Segment Developer activity and Project exposure by agent class (merge request) GitLab Enterprise Edition
• Remove merge_request_create_flow_trigger feature flag (merge request)
• Add code_dropdown_custom_clients application setting by @​stanislav43 (merge request)
• Add agent_type to duo_workflow_session_artifacts (merge request) GitLab Enterprise Edition
• Enable security_policies_malware_attribute by default (merge request) GitLab Enterprise Edition
• Support similarity sort in the groups GraphQL query (merge request)
• Validate flow trigger filter fields and values (merge request) GitLab Enterprise Edition
• Accept client trace headers for Orbit requests (merge request) GitLab Enterprise Edition
• Add metrics report to the merge request reports tab (merge request)
• Expose triage and remediation profile configuration (merge request) GitLab Enterprise Edition
• Expose triage and remediation profile configuration (merge request) GitLab Enterprise Edition
• Add support for triage and remediation profile in auto remediation flow (merge request) GitLab Enterprise Edition
• Expose startSha and startProject on the commitCreate mutation (merge request)
• Add a cheap closing merge requests count to the development widget (merge request)
• Add a toggle to turn AI flow triggers on and off (merge request) GitLab Enterprise Edition
• Add connected agents to AI governance metrics (merge request) GitLab Enterprise Edition
• Add risk domain catalog for merge request risk classification (merge request) GitLab Enterprise Edition
• Enable geo_proxy_push_ssh_to_primary by default (merge request) GitLab Enterprise Edition
• Enable geo_proxy_fetch_ssh_to_primary by default (merge request) GitLab Enterprise Edition
• Add order params coercion for AEs (merge request) GitLab Enterprise Edition
• Add leave organization action (merge request)
• Add MCP servers card to AI Governance dashboard (merge request)
• Add get_project MCP tool by @​gkepas (merge request)
• Add ability to edit organization user (merge request)
• Validate cluster agent before starting a CD rollout (merge request) GitLab Enterprise Edition
• Reuse open merge requests Duo flows create by idempotency key (merge request)
• Add Service Desk email rate limit columns to plan_limits (merge request)
• Add list_tags MCP server tool (merge request)
• Add flow_type dimension and filter to AiUsageEvents engine (merge request) GitLab Enterprise Edition
• Docs: Add self-hosted Sigstore keyless signing guide (merge request)
• feat(api): Add file_type parameter to job artifacts API by @​and2345 (merge request)
• Add part-authorization to AEs (merge request) GitLab Enterprise Edition
• Add top user and project session rankings to AI governance metrics (merge request)
• Add status, timing, and merge request data to user pipelines (merge request)
• Introduce basic DuoWorkflows AE (merge request) GitLab Enterprise Edition
• Use Gitaly exclude_patterns for unprotected branches pagination (merge request)
• Add rate limit to instance audit events API (merge request) GitLab Enterprise Edition
• Enable date filtering for all users by @​rantoniuk (merge request)
• Add internal event tracking for markdown table column sorting (merge request)
• Add instance_ssh_certificates table, model, and feature flag (merge request)
• Expose signal and missing-signal labels over GraphQL (merge request) GitLab Enterprise Edition
• Queue Duo chat prompts during an active agent turn (merge request) GitLab Enterprise Edition
• Add an application SLI for Rails to OpenBao calls (merge request)
• Add observability project override schema and model by @​erdaref (merge request)
• Add SAST configuration type to GraphQL mutations (merge request) GitLab Enterprise Edition
• Add project-scoped tag creation rate limiting (merge request)
• Add Dart and Scala support to gitlab-advanced-sast-ext (merge request)
• Add scheduled event type to AI flow triggers (merge request) GitLab Enterprise Edition
• Expose source_type and source_link on DuoWorkflow GraphQL type (merge request) GitLab Enterprise Edition
• Add option to hide GLQL panel actions dropdown (merge request) GitLab Enterprise Edition
• Add labels to merge request risk classification signals (merge request) GitLab Enterprise Edition
• Add link to item consumer for duo workflow (merge request) GitLab Enterprise Edition
• Add tier scoring and status to MergeRequestRiskAssessment (merge request) GitLab Enterprise Edition
• Add Linked items section to agent session details (merge request) GitLab Enterprise Edition
• Wire the rule builder into the DFW policy editor (merge request) GitLab Enterprise Edition
• Auto-assign reviewer on review submission (merge request)
• Add control: model_experiments_access_level_configured (merge request) GitLab Enterprise Edition
• Change spec to check excluding bots by @​kouta_kumagai (merge request) GitLab Enterprise Edition
• Remove combined_code_owner_approval_rules feature flag (merge request)
• Remove and clean up validate-flow-trigger-actions ff (merge request) GitLab Enterprise Edition
• Exclude gitlab-qa from application rate limiting (merge request)
• Add list_releases MCP server tool (merge request)
• Add organization settings toggle for the Policy Store experiment (merge request) GitLab Enterprise Edition
• Expose project details in the user pipelines API (merge request)
• Add triage and remediation preset profile values (merge request) GitLab Enterprise Edition
• Add ai_compliance_anthropic_integrations table (merge request) GitLab Enterprise Edition
• Support the location OmniAuth attribute in profile sync by @​shackermeier (merge request)
• Add semantic_search MCP tool as aggregated service by @​arunsdev (merge request) GitLab Enterprise Edition
• Add fuzzySearch argument to labels GraphQL queries (merge request)
• Expose automatic_rebase_enabled on project read endpoints (merge request)
• Add user filter and dimension to Deployments aggregation engine (merge request) GitLab Enterprise Edition
• Annotate ClickHouse queries with request context (merge request)
• Add readiness_score support to MCP work item read and mutation tools (merge request) GitLab Enterprise Edition
• Add approvedAt to UserMergeRequestInteraction GraphQL type by @​jspagnola (merge request)
• Apply dedicated rate limit to create snippet APIs (merge request)
• Attach Slack source_type and source_link to workflows (merge request) GitLab Enterprise Edition
• Accept eight new ecosystems in dependency firewall evaluations (merge request)
• Add save_note MCP tool (merge request)
• Add NuGet support to dependency scanning auto-remediation (merge request) GitLab Enterprise Edition
• Add approvals facet to the get_merge_request MCP tool (merge request)
• Validate flow is valid before allowing triggers (merge request) GitLab Enterprise Edition
• Add audit events for MCP server block and unblock (merge request) GitLab Enterprise Edition
• Add REST API for feature flag management minimum role (merge request)
• Add API to list pipelines triggered by the current user (merge request)
• Add group-level custom AI instructions to AI context block (merge request)
• Add ai_suggested_reviewers table and model (merge request)
• Add REST endpoint for risk classification tool results (merge request) GitLab Enterprise Edition
• Add merge_request created Duo Agent Platform trigger (merge request) GitLab Enterprise Edition
• Assign user as a reviewer when they submit a review by @​mfischer5 (merge request)
• Add ref cache operation and trust metrics (merge request)
• Add CI_JOB_TOKEN support for the commit refs endpoint (merge request)
• Add /internal_note quick action to mark a comment as an internal note by @​priyansh3133 (merge request)
• Implement control: model_registry_access_level_configured (merge request) GitLab Enterprise Edition
• Allow users to set Duo default namespace from drawer (merge request) GitLab Enterprise Edition
• Add milestone and label-name parameters to save_work_item (merge request)
• Gate the organization Policy Store behind an organization setting (merge request) GitLab Enterprise Edition
• Feat: Add session_details_right_rail feature flag (merge request) GitLab Enterprise Edition
• Feat: Add FF for note session bar component (merge request) GitLab Enterprise Edition
• Add virtual preset_key to default profiles (merge request) GitLab Enterprise Edition
• Add active column to ai_flow_triggers (merge request) GitLab Enterprise Edition
• Add audit events for Pages Domains lifecycle (merge request) GitLab Enterprise Edition
• Update CD rollout endpoint (merge request) GitLab Enterprise Edition
• Address review of the Policy Store config field renderer (merge request) GitLab Enterprise Edition
• Add mergeRequest.conflictFiles GraphQL field (merge request)
• Add audit event for blocked secret push protection pushes (merge request) GitLab Enterprise Edition
• Add slash-command suggestions menu to Duo Chat composer (merge request) GitLab Enterprise Edition
• Add tables for parallel test balancing (merge request)
• Enable and remove the use_user_group_member_roles_members_page feature (merge request)
• Add info about debug report in GSS for source code (merge request)
• Add related_branches endpoint to WorkItem REST API (merge request)
• Add list_commits MCP server tool (merge request)
• Revoke routable and versioned routable personal access tokens (merge request) GitLab Enterprise Edition
• Add accept_merge_request MCP server tool (merge request)
• Update table_size database dictionary entries (merge request)
• Add add_commit MCP server tool by @​ashishsoniii (merge request) GitLab Enterprise Edition
• Add webPath field to NamespaceType GraphQL type (merge request)
• Handle CD approval_requested event (merge request) GitLab Enterprise Edition
• Transfer Slack API scopes during group organization transfers (merge request)
• Add NATS audit streaming consumer workers (merge request) GitLab Enterprise Edition
• Add Manage organization sidebar item for org admins (merge request)
• Add GraphQL read API for merge request risk assessments (merge request)
• Push human approval into paused workflow (merge request) GitLab Enterprise Edition
• Add user filter and dimension to Pipelines aggregation engine (merge request) GitLab Enterprise Edition
• Add REST endpoint for Dependency Firewall evaluation (merge request) GitLab Enterprise Edition
• Add Service Ping metrics for restricted AI Catalog items (merge request) GitLab Enterprise Edition
• Show the foundational agent name in the breadcrumb (merge request) GitLab Enterprise Edition
• Add a View session button to agent replies in work items (merge request) GitLab Enterprise Edition
• Add list_project_members MCP tool by @​gkepas (merge request)
• Show loose foreign keys cleanup backlog on database diagnostics page (merge request)
• Add GraphQL endpoints for workflow-pipeline links (merge request) GitLab Enterprise Edition
• Adds flow schedules table (merge request)
• Add save_merge_request MCP tool folding create and update (merge request)
• Use branch targets in the work item merge request modal (merge request) GitLab Enterprise Edition
• Add MergeRequests::RiskAssessment and RiskOutcome models (merge request) GitLab Enterprise Edition
• Add source_type and source_link fields to duo_workflows_workflows (merge request) GitLab Enterprise Edition
• Require card verification for cost-restricted dial codes (merge request) GitLab Enterprise Edition
• Add agent-class filter to AI Governance dashboard (merge request)
• Expose two_factor_enabled in group members API for owners (merge request)
• Add fork_repository MCP server tool (merge request)
• Add Prometheus metrics for Rails to OpenBao calls (merge request) GitLab Enterprise Edition
• Add flowTriggers field to catalog item consumer (merge request) GitLab Enterprise Edition
• Sort AI agent inventory card by most-used agent first (merge request)
• Give approval gates a step reference (merge request) GitLab Enterprise Edition
• Add NATS audit streaming observability metrics (merge request) GitLab Enterprise Edition
• Add Dependency Firewall enforcement check API (merge request) GitLab Enterprise Edition
• Add author filter and dimension to MergeRequests aggregation engine (merge request) GitLab Enterprise Edition
• Add author dimension to Contributions aggregation engine (merge request) GitLab Enterprise Edition
• Add rollout channel token model (merge request) GitLab Enterprise Edition
• Expose alternatives count on user messages (merge request) GitLab Enterprise Edition
• Track bypass header traffic through labkit metrics (merge request)
• Add autovacuum configuration audit to database diagnostics (merge request)
• Warn about secret loss on group &project transfer (merge request) GitLab Enterprise Edition
• Add get_work_item MCP server tool (merge request)
• Add full_patch diff detail to get_merge_request MCP tool (merge request)
• Add first_parent and order arguments to repository commits (merge request)
• Add copy session ID option to classic Duo Chat (merge request) GitLab Enterprise Edition
• Sync sequences before Geo promotion with logical replication (merge request)
• Add list_repository_tree MCP tool (merge request)
• Expose duoCreatedSessionId on the note GraphQL payload (merge request) GitLab Enterprise Edition
• Add Geo LR subscription create and drop rake tasks (merge request) GitLab Enterprise Edition
• Match SBOM components against malware advisories (merge request) GitLab Enterprise Edition
• Prepare async index for CVE-name lookups on vulnerability_identifiers (merge request)
• Add Policy Store evaluation and violation tables (merge request) GitLab Enterprise Edition
• Add conditional debug artifact to secret detection job (merge request)
• Add save_work_item MCP server tool (merge request)
• Expose job and runner tags to the Job Router (merge request)
• Add commit diff stats to GraphQL Commit type (merge request)
• Use WorkflowStream in Duo Agentic Chat (merge request) GitLab Enterprise Edition
• Show human author in audit event summary and filter from details (merge request) GitLab Enterprise Edition
• Create offline import form (merge request)
• Add assignable_when conditions to assignable permissions (merge request) GitLab Enterprise Edition
• Expose automatic_rebase_enabled in Projects REST API (merge request)
• Serve /oauth/userinfo for IAM-issued JWTs (merge request)
• Enhance SARIF support in usage metrics (merge request) GitLab Enterprise Edition
• Add mocked Developer activity and Project exposure dashboard cards (merge request) GitLab Enterprise Edition
• Add dependency_firewall_setting_changed event definition (merge request) GitLab Enterprise Edition
• Apply measurements to common engines (merge request) GitLab Enterprise Edition
• Surface service account role in flow trigger and catalog UI (merge request) GitLab Enterprise Edition
• Add merge_requests risk_assessments and risk_outcomes tables (merge request) GitLab Enterprise Edition
• Expose visibility field on foundational chat agent GraphQL type (merge request) GitLab Enterprise Edition
• Allow CD Version name to be free-form (merge request) GitLab Enterprise Edition
• Add diffs field with patch text to MergeRequest type (merge request)
• Add project_id dimension to AgentPlatformSessions engine (merge request)
• Add content field to WikiPage GraphQL type (merge request)
• Add get_job MCP tool (merge request)
• Add dependency_firewall_policy_rule_changed event (merge request) GitLab Enterprise Edition
• Seed AI audit events filtered search from URL params (merge request) GitLab Enterprise Edition
• Add inputs to configure dependency resolution timeouts by @​Taucher2003 (merge request) GitLab Enterprise Edition
• Add setting to accept awarded achievements for recipients by @​BoxBoxJason (merge request)
• Register GitLab Flex Offline Add-on (merge request) GitLab Enterprise Edition
• Render human author on behalf of service account in audit events list (merge request) GitLab Enterprise Edition
• Expose static definition steps (merge request) GitLab Enterprise Edition
• Add save_merge_request_review MCP server tool (merge request)
• Handle query source copy feedback by @​theinfosecguy (merge request)
• Add Edit file link to the README preview header (merge request)
• Allow /type Epic quick action to promote issues to epics by @​aryanndwivedi2403 (merge request) GitLab Enterprise Edition
• Expose alternatives count on user messages (merge request) GitLab Enterprise Edition
• Add preference to disable emoji autocomplete picker (merge request)
• Add API endpoints to get one service account by @​jspagnola (merge request)
• Add malware advisory value object for finding construction (merge request) GitLab Enterprise Edition
• Support markdown live preview for snippet file editor by @​skkzsh (merge request)
• Expose provisioned_by_project_id in admin users API (merge request)

Fixed (333 changes)

• Fix race leaving pool repositories orphaned (merge request)
• Resolve Current.organization from git-over-HTTP repository paths (merge request)
• Lock the approval project rule row while syncing it to an MR (merge request) GitLab Enterprise Edition
• Fix policy approval rule desync detection and resync failures (merge request) GitLab Enterprise Edition
• Bound time in processing for Zoekt tasks (merge request) GitLab Enterprise Edition
• Improve Rapid Diffs accessibility for screen reader users (merge request)
• Fix 500 when moving or cloning epics via quick actions (merge request) GitLab Enterprise Edition
• Rate limit dependency proxy requests separately from web traffic (merge request)
• Use Labkit::Fields::CLASS_NAME in purge worker log (merge request)
• Fix purge worker lease specs and apply review nits (merge request)
• Drain stale scans via bounded self-re-enqueuing purge (merge request) GitLab Enterprise Edition
• Fix feature flag metadata for security_scans purge health check (merge request) GitLab Enterprise Edition
• Make security scan purge worker responsive to DB state (merge request) GitLab Enterprise Edition
• Fix scoped label wildcards not persisting in saved views by @​aryanndwivedi2403 (merge request)
• Reconcile silently-merged MRs instead of aborting the train (merge request) GitLab Enterprise Edition
• Skip the award emoji cache update when the query is not cached (merge request)
• Upload an empty part for zero byte multipart objects by @​sjestonsingh (merge request)
• Scope invited group member roles to the correct shared group (merge request) GitLab Enterprise Edition
• Hide repository actions from unauthorized users (merge request)
• Cap search page depth so from + size cannot exceed max_result_window (merge request)
• Preserve sessions index page when navigating back (merge request) GitLab Enterprise Edition
• Gate CVS advisory scanner findings on the scanning license (merge request) GitLab Enterprise Edition
• Reduce work items list query complexity for anonymous users (merge request) GitLab Enterprise Edition
• Fix mistyped table name in security scans ingestion (merge request) GitLab Enterprise Edition
• Send fully qualified ref in commits list query (merge request)
• Fix AwardEmoji namespace during work item moves by @​ryo-whaletech (merge request)
• Gate pipeline list cancel and retry buttons on permissions (merge request)
• Add resolve_pagination_direction to CursorPagination concern (merge request)
• Fix label association and error handling in UserOverrideSelect (merge request) GitLab Enterprise Edition
• Generate the Pages unique domain when the API enables it (merge request)
• Fix data race in Duo Workflow HTTP transport (merge request)
• Anchor streaming destination schema patterns to whole strings (merge request) GitLab Enterprise Edition
• Keep the rich text editor document load out of undo history (merge request)
• Allow MINIMAL_ACCESS as group_access when sharing groups (merge request)
• Fix subscription status in moved issue responses by @​ryo-whaletech (merge request)
• Record the global_search error SLI on the zoekt web success path (merge request) GitLab Enterprise Edition
• Backfill missing epic_issues rows from parent links (merge request)
• Fix profile mutations server error on user namespace (merge request) GitLab Enterprise Edition
• Strip HTTP quality values from navigator.languages entries (merge request)
• Permit mentioned param in project members autocomplete (merge request)
• Fix rapid diffs file nav shortcuts across modes (merge request)
• Fix email overflow into phone column in CRM contacts table (merge request)
• Stop denying Secrets Manager access when CDot down (merge request) GitLab Enterprise Edition
• Map Postman 401s to inactive only on the vendor verdict (merge request) GitLab Enterprise Edition
• Resume offline snapshots shard by shard on every sync (merge request) GitLab Enterprise Edition
• Wait for the workflow lock before draining queued prompts (merge request) GitLab Enterprise Edition
• Allow security bot to access components from internal projects (merge request) GitLab Enterprise Edition
• Fix: Add FF to MR Note Session Bar (merge request)
• Enforce CI job assignment phase timeouts (merge request)
• Skip the Duo agent config lookup on an empty repository by @​sjestonsingh (merge request)
• Stop deferring mobile push deliveries on database health signals (merge request)
• Read the Secrets Manager beta cohort from the entitlement (merge request) GitLab Enterprise Edition
• Guard against null viewer in hasRenderError computed property (merge request)
• Force internal notes for SRF mention-triggered replies (merge request) GitLab Enterprise Edition
• Serve the malware filter alongside a project filter (merge request) GitLab Enterprise Edition
• Apply AI file exclusions to add_commit MCP partial-edit reads (merge request)
• Add AgentEvents::Usage for the Duo Chat usage event (merge request) GitLab Enterprise Edition
• Unwrap project GIDs to numeric IDs in list_projects output (merge request)
• Fix the pipeline header refresh, remove wait_for_requests (merge request)
• Fix code comment (merge request) GitLab Enterprise Edition
• Delete approval policy reads before their project rules (merge request) GitLab Enterprise Edition
• Add weight field to iteration label-filter query (merge request) GitLab Enterprise Edition
• Update security_platform_management to security_controls (merge request) GitLab Enterprise Edition
• Guard repository page Apollo hooks against missing data (merge request)
• Recognize the self-managed Secrets Manager beta cohort (merge request) GitLab Enterprise Edition
• Echo the JSON-RPC request id in MCP errors (merge request)
• Keep Users sidebar item active on Cohorts page (merge request)
• Fix milestone Advanced Search for Planner role via merge_requests path (merge request) GitLab Enterprise Edition
• Track ObjectPool::DestroyWorker retries exhaustion (merge request)
• Fix crash when squashing a merge request with a missing commit (merge request)
• Fixes a small bug in forced-colors mode (merge request)
• Fix missing code navigation for blame on legacy files by @​sjestonsingh (merge request)
• Show the aggregations load error in the language filter (merge request)
• Open Mermaid links in rich text editor via parent delegation by @​skkzsh (merge request)
• Open Mermaid links in rendered Markdown via parent delegation by @​skkzsh (merge request)
• Restore email scoped label styles (merge request) GitLab Enterprise Edition
• Show item name in AI Catalog breadcrumbs (merge request) GitLab Enterprise Edition
• Fix merge trains checkbox race on project settings page (merge request) GitLab Enterprise Edition
• Delete orphaned uploads when destroying vulnerability exports (merge request) GitLab Enterprise Edition
• Fix inline blame previous-blame link on relative URL installs (merge request)
• Fix Apply to all tooltip not rendering in Vue 3 (merge request) GitLab Enterprise Edition
• Allow hyphenated input names in CI array index access (merge request)
• Keep mobile push deliveries timely and log APNs rejections (merge request)
• Make ObjectPool::DestroyWorker idempotent (merge request)
• Harden Secrets Manager add-on enable mutation (merge request) GitLab Enterprise Edition
• Reduce work items list query complexity (merge request)
• Treat the retired dap_powered strategy as disabled (merge request)
• Enable retry on transient "Commit not found" errors (merge request)
• Allow enabling secret detection token revocation without URLs by @​bobby-nandigam (merge request) GitLab Enterprise Edition
• Derive Secrets Manager trial state on read (merge request)
• Show why a rebase was rejected in the merge request widget by @​gerardo-navarro (merge request)
• Fix nondeterministic finding calibration on duplicates (merge request) GitLab Enterprise Edition
• Default enable discard_stale_mergeability_verdicts flag (merge request)
• Reuse orphaned scan result policy reads on approval rule sync (merge request) GitLab Enterprise Edition
• Fix table of contents heading indentation (merge request)
• Fix Rapid Diffs line number clicks reloading the page (merge request)
• Fix file browser jumping when resized in Firefox (merge request)
• Fixes a small issue for Firefox 115.40.0esr (merge request)
• Authorize labels in GraphQl for ai_workflows scope (merge request) GitLab Enterprise Edition
• Bail out of a flow trigger run for an unsupported resource type (merge request) GitLab Enterprise Edition
• Retry rate-limited ActiveContext batches until they succeed (merge request)
• Fix AiGenie throwing when container element is absent (merge request) GitLab Enterprise Edition
• Report truncated Duo Workflow checkpoint ancestry (merge request) GitLab Enterprise Edition
• Preserve user selection during rich text editor uploads (merge request)
• Negotiate a handshake version in MCP initialize (merge request)
• Guard add_commit MCP partial edits against truncated large files (merge request)
• Fix Cisco Duo OTP 2FA rejecting valid passcodes (merge request)
• Fix partition cache crash on single-pipeline ranges (merge request)
• Restore Bitbucket Cloud API-token imports without OAuth provider (merge request)
• Stop resetting mcp_server_enabled when Duo settings change (merge request) GitLab Enterprise Edition
• Skip burned-path check in SecretsManagement::PipelineJwt (merge request) GitLab Enterprise Edition
• Fix flaky subgroup transfer feature spec (merge request)
• Geo: Support SSH cert gl_id formats in proxied Git requests (merge request) GitLab Enterprise Edition
• Bump gitlab-shell to 14.57.3 (merge request)
• Show a chat error when the workflow service rejects a request (merge request) GitLab Enterprise Edition
• Validate the flow-trigger goal for flows that resolve a resource (merge request) GitLab Enterprise Edition
• Derive Current.organization from repository in git audit and LFS API (merge request)
• Limit the malware filter to the default branch (merge request) GitLab Enterprise Edition
• Display custom emoji in emails (again) (merge request)
• Offer nested table insertion after pasting cells into a table (merge request)
• Delegate organization on wikis and snippets for maintenance mode (merge request)
• Disable DAP flow toggles in project settings when platform is off (merge request) GitLab Enterprise Edition
• Test button fix for vuln events (merge request) GitLab Enterprise Edition
• Fix active nav state for ai features (merge request) GitLab Enterprise Edition
• Skip secrets_stored billing events for unenrolled instances (merge request) GitLab Enterprise Edition
• Grant create_approval_rule to eligible Developer MR authors (merge request) GitLab Enterprise Edition
• Fix the error shown when Duo group settings fail to save (merge request) GitLab Enterprise Edition
• Fix rich text editor paste over a select-all selection (merge request)
• Align navigated thread to content top (merge request)
• Scope Rapid Diffs tab pane caching to the diffs pane (merge request)
• Bump gitlab-shell to 14.57.2 (merge request)
• Restore Bitbucket Cloud API-token imports without OAuth provider (merge request)
• Reactivate deactivated users signing in with 2FA enforced (merge request)
• Set explicit errorPolicy on blob viewer Apollo queries (merge request)
• Resolve addressed organization for AR per-user token exchange (merge request) GitLab Enterprise Edition
• Fix inverted tool approval badge in Duo chat by @​bobby-nandigam (merge request) GitLab Enterprise Edition
• Log and surface the real reason LDAP group sync fails by @​tnt4brain (merge request) GitLab Enterprise Edition
• Fix dynamic registration dropping the mcp_orbit scope (merge request)
• Sync markdown extensions with the filename, not Monaco's language by @​skkzsh (merge request)
• Use named queries for Orbit map filter search (merge request) GitLab Enterprise Edition
• Prevent report ingestion readiness from blocking on dormant jobs (merge request)
• Update deprecated security_infrastructure product group (merge request) GitLab Enterprise Edition
• Stop sharing module state across the Vue 2 and Vue 3 lanes (merge request)
• Enable AI planning when an agent plan is written (merge request) GitLab Enterprise Edition
• Fix Secrets Manager error reporting to Sentry (merge request) GitLab Enterprise Edition
• Skip secrets_stored billing events for opted-out namespaces (merge request) GitLab Enterprise Edition
• Fix type-mixed rows_added_slice breaking refresh log ingestion (merge request)
• Do not resolve tool rules for an ungoverned local surface (merge request) GitLab Enterprise Edition
• Record CD service health when a deployment finishes (merge request) GitLab Enterprise Edition
• Fix work items list hanging after renaming a type (merge request)
• Show checking message for conflict check while CHECKING by @​Gamezordd (merge request)
• Fix triage and remediation profile defaults (merge request) GitLab Enterprise Edition
• Resolve the Duo Code Review actor for a composite requester (merge request) GitLab Enterprise Edition
• Aggregate security findings from related pipelines in MR widget (merge request) GitLab Enterprise Edition
• Fix double-escaped special characters in breadcrumb names by @​eldardada (merge request)
• Handle the 32-bit Elasticsearch missing-sort sentinel (merge request) GitLab Enterprise Edition
• Include target project pipelines in merge request pipelines resolver (merge request)
• Guard /internal_note quick action on a persisted target (merge request)
• Report correct missing merge base ref by @​tvgorshkov (merge request)
• Fixes browser error when no sbom errors (merge request) GitLab Enterprise Edition
• Disable query deduplication for runner list queries (merge request)
• Fix board columns inheriting list view pagination cursors (merge request)
• Resolve programming languages through stable identifiers (merge request)
• Fix TypeError in EE BlobOverflowMenu when Apollo query errors (merge request) GitLab Enterprise Edition
• Drop hard FK to organizations from four snippet child tables (merge request)
• Fix perf mark race in commit list instrumentation (merge request)
• Skip clearing repositories for exclusion-based backups (merge request)
• Drive preview tabs by loaded markdown extensions by @​skkzsh (merge request)
• Call resetFormState if the board comes through after the modal (merge request)
• Refresh DORA metrics when an incident is deleted (merge request) GitLab Enterprise Edition
• Merge request pipelines are a valid source context (merge request) GitLab Enterprise Edition
• Do not memoize a nil user in ApplicationContext (merge request)
• Guard against unresolvable root ref in diverging commit counts (merge request)
• Handle insufficient privilege in vacuum activity query (merge request)
• Gate pipeline creation failure alerts on user-initiated requests (merge request)
• Sync snippet Markdown live preview with mid-edit renames by @​skkzsh (merge request)
• Select the preview renderer from the submitted file path by @​skkzsh (merge request)
• Handle missing SSH mirror host URLs (merge request)
• Validate embeddings before indexing to prevent silent corruption (merge request) GitLab Enterprise Edition
• Respect username filters in audit event CSV export (merge request) GitLab Enterprise Edition
• Default SHA on merge requirement for new groups to false (merge request)
• Ignore stacked on single-metric GLQL column charts (merge request)
• Update deprecated static_analysis product group (merge request) GitLab Enterprise Edition
• Allow one request to link several AI service accounts (merge request) GitLab Enterprise Edition
• Updated CD SendToWorkflowChannel idempotency key (merge request) GitLab Enterprise Edition
• Guard oauth_application_created audit on persisted? in CreateService (merge request) GitLab Enterprise Edition
• Drop project_id FK from packages_helm_metadata_cache_states (merge request)
• fix: Align CI schema with backend keyword validation by @​vertisan (merge request)
• Fix stale flash alerts (merge request)
• Always set TempPath in workhorse_authorize for direct uploads (merge request)
• Add cache-busting version parameter to avatar URLs (merge request)
• Restrict credits date ranges to subscription period (merge request) GitLab Enterprise Edition
• Sweep orphaned upload records left behind by CarrierWave (merge request)
• Use webhook_email for push webhook user_email (merge request)
• Fix inline blame not opening on first line click (merge request)
• Fix audit events UI showing '(removed)' for system authors (merge request) GitLab Enterprise Edition
• Skip stale markdown extension load after rename by @​skkzsh (merge request)
• Allow client-executed Duo flows with a seat in another namespace (merge request)
• Send originating namespace when categorizing Duo Chat questions (merge request) GitLab Enterprise Edition
• Fix wrong source branch when creating MR from issue (merge request)
• Fix SSH signature email case verification (merge request)
• Validate tag_gpg_signatures project_id foreign key (merge request)
• Sort foundational AI Catalog items first for anonymous users (merge request) GitLab Enterprise Edition
• Fix keyboard activation of disabled Pajamas button links (merge request)
• Fix GLQL status sort to break ties alphabetically by name by @​rob.hunt (merge request)
• Create missing epic_issues row when re-ordering children (merge request) GitLab Enterprise Edition
• Allocate deletion rule index past the current maximum (merge request) GitLab Enterprise Edition
• Fix 500 on git push for projects with dependency_firewall policy (merge request) GitLab Enterprise Edition
• Keep comment text when a Rapid Diffs save fails (merge request)
• Fix flaky custom roles spec in group repository settings (merge request) GitLab Enterprise Edition
• Trim last_used_ips reliably regardless of replica lag (merge request)
• Show a clear error when automatic rebase before merge conflicts (merge request)
• Fix ExternalUsernameSanitizer matching nested project paths by @​tnt4brain (merge request)
• Hide table sticky-header shadow when description is truncated (merge request)
• Fixes alter_new_sequences_max_value fn to handle only managed_schemas (merge request)
• Fix backward Elasticsearch pagination from a null cursor (merge request) GitLab Enterprise Edition
• Rescue validation race in McpServerBlock.block! (merge request) GitLab Enterprise Edition
• Reword emoji autocomplete preference help text (merge request)
• Enforce namespace filter limit at filter creation (merge request) GitLab Enterprise Edition
• Sort bulk update VALUES lists by primary key (merge request) GitLab Enterprise Edition
• Change default sort order of CI/CD component inputs by @​nwittstruck (merge request)
• Sum JUnit report times across multiple files by @​gerardo-navarro (merge request)
• Set tier: :add_on on credits-backed Feature Library items (merge request) GitLab Enterprise Edition
• Stamp deploy timestamps on CD rollout environments (merge request) GitLab Enterprise Edition
• Guard AiCatalogConfiguredItemsWrapper update callback against null (merge request) GitLab Enterprise Edition
• Treat zero work_item_iid as create in save_work_item MCP tool (merge request)
• Fix MissingTemplate error in Gitaly error handler (merge request)
• Gate every Artifact Registry surface on a configured base URL (merge request) GitLab Enterprise Edition
• Fix CiPipelineCreationRequest id field resolution (merge request)
• Fix Vue 3 recent searches dropdown via explicit event push (merge request)
• Fix multi-line commit errors collapsing to a single line (merge request)
• Remove dead scrollbar gutter in the Duo AI panel (merge request) GitLab Enterprise Edition
• Reserve profile name for default profiles (merge request) GitLab Enterprise Edition
• Qualify default branch ref in ignore_revs_file_blob (merge request)
• Cap last_used_ips to the 5 most recent when rendered (merge request)
• Guard blob viewer computeds against missing blob (merge request)
• Track retry failure state for Duo Chat responses (merge request) GitLab Enterprise Edition
• Skip Lockable reset_failed_attempts! on read-only replicas (merge request) GitLab Enterprise Edition
• Stick to primary after creating composite OAuth token (merge request) GitLab Enterprise Edition
• Add spec for members outside organization (merge request)
• Encode commit message patterns as binary in list_commits (merge request)
• Remove ancient CSS (and its counter) to fix alignment (merge request)
• Fix command palette first item lookup under Vue 3 (merge request)
• Fix admin deletion of banned users being skipped (merge request)
• Do not prefill SM welcome form with placeholder email (merge request)
• Use latestPipeline for commit list CI status badge (merge request)
• Preserve offset pagination marker through merge and unscope (merge request)
• Show all triggers for a configured flow (merge request) GitLab Enterprise Edition
• Allow group-owned Direct Transfer export uploads (merge request)
• Fix Vue 2 cleanup gaps from Vue-3-only beforeUnmount hooks (merge request)
• Suppress the Duo trial CTA on Dedicated (merge request) GitLab Enterprise Edition
• Block saving Policy Store rules with blank required config (merge request) GitLab Enterprise Edition
• Fix NotImplementedError for Duo Agent Platform session web_url (merge request) GitLab Enterprise Edition
• Log failsafe failures and prove store-time v2 resolution (merge request)
• Fix branch truncation in the merge request header (merge request)
• Point feature flag introduced_by_url at this MR (merge request)
• Fix burned path ID token remediation guidance by @​gerardo-navarro (merge request)
• Ensure VAC default context exists before store phase (merge request)
• Respect Secrets Manager toggle under the paid experience (merge request) GitLab Enterprise Edition
• Prevent org membership removal with existing memberships (merge request)
• Remove code_suggestions_direct_access_cloud_connected flag (merge request) GitLab Enterprise Edition
• Make credits remaining float to avoid edge case rounding (merge request)
• Dismissals persist after merge across contexts (merge request) GitLab Enterprise Edition
• Register keyboard shortcuts on the Commit page (merge request)
• Reject offline malware archives whose purl_type mismatches the directory (merge request) GitLab Enterprise Edition
• Resume malware advisory /all first sync from the last ingested shard (merge request) GitLab Enterprise Edition
• Fix: Fix note session bar border and change GID var (merge request) GitLab Enterprise Edition
• Render commit title references in commit list (merge request)
• Scope DWS client governing namespace to the request container (merge request) GitLab Enterprise Edition
• Fix SQL errors in organization group transfer (merge request)
• Fix Vue console warnings on Security Inventory page (merge request) GitLab Enterprise Edition
• OverrideUuidsService picks from default branch (merge request) GitLab Enterprise Edition
• Prevent Workhorse keywatcher GET cancellation race (merge request)
• Remove ci_skip_pipelines_with_fully_filtered_includes flag (merge request)
• Sync sticky header title when draft status changes by @​Mahaveer1013 (merge request)
• Fix AI Catalog private-item alert copy (merge request) GitLab Enterprise Edition
• Show scan profile name on disabled rows and surface mutation errors (merge request) GitLab Enterprise Edition
• Apply clearfix to .note-text (merge request)
• Require full group config before pre-approving privilege group (merge request) GitLab Enterprise Edition
• Hide Update role button in drawer for inherited members by @​Mahaveer1013 (merge request)
• Reset legacy 'gl' instance token prefix by @​nwittstruck (merge request)
• Fix info popovers not opening on permission forms (merge request)
• Fix stuck disabled submit buttons after failed ajax calls (merge request)
• Fix MCP OAuth resource field to return string instead of array (merge request)
• Fix Sawyer::Error crash when GitHub GraphQL search returns nil nodes (merge request)
• Guard repository page entrypoints against degraded rendering (merge request)
• Return an empty array when country/state fetch fails (merge request) GitLab Enterprise Edition
• Add ai_workflows scope to group GraphQL fields by @​xingli.wu (merge request)
• Derive expression from name for internal compliance controls (merge request) GitLab Enterprise Edition
• Fix removing a group-to-group share link when LDAP sync is enabled by @​tnt4brain (merge request)
• Fix with_fix_available treating empty solution as fix-available (merge request) GitLab Enterprise Edition
• Position label drag clone under the cursor (merge request)
• Strip time from date filter values in saved view tokens (merge request)
• Hide the wiki sidebar toggles fully when the sidebar is expanded (merge request)
• Fix double-encoded image paths in classic diff view (merge request)
• Fix commit column width on legacy blame page (merge request)
• Fix super sidebar focus after unpinning item (merge request)
• Fix 500 errors on commit lists when Redis runs in cluster mode (merge request)
• Require production env to reach the production malware PDS (merge request) GitLab Enterprise Edition
• Gate tracked ref filter on advanced vulnerability management (merge request) GitLab Enterprise Edition
• Prevent premature Merge button before auto-merge loads (merge request) GitLab Enterprise Edition
• Add ai_workflows scope to vulnerability dependency GraphQL fields (merge request) GitLab Enterprise Edition
• Use project settings template for new work items by @​aryanndwivedi2403 (merge request) GitLab Enterprise Edition
• Drop stuck session when its workload pipeline finishes cleanly (merge request) GitLab Enterprise Edition
• Fixes the gap and size of CRUD components used in Work Items (merge request)
• Fix the epic reference in the work item popover (merge request)
• Provision inherited foundational flows without user elevation (merge request) GitLab Enterprise Edition
• Fix downstream pipeline failure on nil variable value (merge request)
• Use absolute links in Atom feeds (merge request)
• Stamp feature_qualified_name in GSM billable event metadata (merge request) GitLab Enterprise Edition
• Remove prevent_reopen_merge_request_without_branch flag (merge request)
• Redirect organization-scoped URLs naming the wrong organization (merge request)
• Show epic suggested questions on epic work items (merge request) GitLab Enterprise Edition
• Scope remaining abuse report reads and writes to one organization (merge request)
• Invalidate cached SBOM scan results on a malware advisory sync (merge request) GitLab Enterprise Edition
• Handle empty and malformed coverage report artifacts (merge request)
• Fix trial widget delayed on initial landing after registration (merge request) GitLab Enterprise Edition
• Strip characters Atlassian rejects from Jira Connect payloads (merge request)
• Do not report empty include expansion as invalid YAML (merge request)
• Add missing namespace operator (merge request)
• Add header-sticky to the What's new drawer (merge request)
• Rotate x-axis labels on burndown and burnup charts (merge request) GitLab Enterprise Edition
• Show quick action errors inline instead of a page-level alert (merge request)
• Fix infinite loop parsing errored SARIF security reports (merge request) GitLab Enterprise Edition
• Fix typo: occured -> occurred in namespace_storage_app.vue by @​RedZapdos123 (merge request)
• Update product_group knowledge_graph to context_systems (merge request) GitLab Enterprise Edition
• Fix inverted Write/Preview tabs in single file editor by @​skkzsh (merge request)
• Fix Vue warning in Security inventory breadcrumbs during load (merge request) GitLab Enterprise Edition
• Fix nil capture handling in coverage extraction (merge request)
• Remove prevent_approval_removal_during_merge feature flag (merge request)
• Report unresolvable reviewer usernames in setReviewers (merge request)
• Extract markdown extension check into shared helper by @​skkzsh (merge request)
• Add blob path to markup rendering cache key by @​skkzsh (merge request)