Update docker.io/gitlab/gitlab-ce Docker tag to v19.4.2
No problems automatically updating the monolithic Docker image and run the container by Watchtower with dependency update facilitated by Mend's Renovate Bot.
This MR contains the following updates:
| Package | Update | Change |
|---|---|---|
| docker.io/gitlab/gitlab-ce (changelog) | patch | 19.4.1-ce.0 → 19.4.2-ce.0 |
Release Notes
gitlab-org/gitlab (docker.io/gitlab/gitlab-ce)
v19.4.2
Fixed (13 changes)
- Fix Gitaly up-to-date check for versions with a revision suffix
- Tolerate malformed Content-Range in HttpIO
- Send canonical timezone identifiers to Gitaly
- Stop coverage delta timeouts from breaking the MR widget
- Allow security policy bot cross-project container registry access GitLab Enterprise Edition
- Align self-managed Restricted access with User.billable GitLab Enterprise Edition
- Sign chat agent requests from the chat feature setting GitLab Enterprise Edition
- Truncate Jira issue keys at the 500 per-entity API limit
- Fix status filter dropping matching items GitLab Enterprise Edition
- Make git exclusions in rate limit rules unconditional again
- Update status category when a removed status is re-added GitLab Enterprise Edition
- Create policy violations before scheduling MR preparation GitLab Enterprise Edition
- Retry transient chunk failures in Gitlab::HttpIO
Security (22 changes)
- Build merge request header URLs without the request host (merge request)
- Stop direct_access from issuing a Duo Workflow Service token (merge request)
- Remove admin compliance pipeline config from custom role (merge request)
- Enforce package protection rules on npm dist-tag delete (merge request)
- Enforce granular token group boundary on project label edits (merge request)
- Enforce granular token boundary on import target namespaces (merge request)
- Authorize granular token against resolved integration and work item parent (merge request)
- Security fix workload ci pipeline vulnerability (merge request)
- External authorization bypass: legacy epic content leaks via GraphQL group.workItem (merge request)
- security: Anchor raw ref SHA match to start of string (merge request)
- Fix DNS rebinding SSRF across all import features (merge request)
- Require CI/CD admin ability to change auto_rollback_enabled (merge request)
- Delete orphaned pipeline execution schedules on project transfer (merge request)
- Authorize report artifacts by viewer for accessibility and codequality (merge request)
- Prevent commit authors from approving merge requests (merge request)
- Enforce a disabled package registry set through the API (merge request)
- Escape note body in ConversationContextBuilder (merge request)
- Audit log protected environment approval rule reassignment (19.4) (merge request)
- Fix cascading auth skip on work item hierarchy widget (merge request)
- Fix cascading auth skip on work item notes widget discussions (merge request)
- Fix cascading auth skip on merge request discussions (merge request)
- Map rich line positions when markup is present (merge request)
Performance (1 change)
- Speed up assignee and reviewer pickers for Duo service accounts GitLab Enterprise Edition
