Update docker.io/gitlab/gitlab-ce Docker tag to v19.5.0
No problems automatically updating the monolithic Docker image and run the container by Watchtower with dependency update facilitated by Mend's Renovate Bot.
This MR contains the following updates:
| Package | Update | Change |
|---|---|---|
| docker.io/gitlab/gitlab-ce (changelog) | minor | 19.4.2-ce.0 → 19.5.0-ce.0 |
Release Notes
gitlab-org/gitlab (docker.io/gitlab/gitlab-ce)
v19.5.0
Added (306 changes)
- Expose the Orbit trial offer on OrbitTrial (merge request) GitLab Enterprise Edition
- Show the session source referrer in the Triggered by row (merge request) GitLab Enterprise Edition
- Add per-user rate limits to job erasure (merge request)
- Enable note_agent_session_bar by default (merge request) GitLab Enterprise Edition
- Add v2 session credits table and CustomersDot query (merge request) GitLab Enterprise Edition
- Add batch label search to MCP tool by @wqyeo (merge request)
- Add fetch prompt for recommended reviewers (merge request) GitLab Enterprise Edition
- Record MCP client name and version on tool calls (merge request)
- Add a goal field to each flow trigger condition (merge request) GitLab Enterprise Edition
- Add tier annotations to shared CE API route loops (merge request) GitLab Enterprise Edition
- Serve integrations pages in organization admin area (merge request)
- Send opted-out owners to settings from the vulnerability page CTA (merge request) GitLab Enterprise Edition
- Show code snippets and suggestions in the overview conversations (merge request) GitLab Enterprise Edition
- Remove ci_optional_needs_for_cross_pipeline feature flag (merge request)
- Name the to-do's author and time in mobile push payloads (merge request)
- Defaulted on duo_chat_goal_command (merge request) GitLab Enterprise Edition
- Add a discussions facet to the get_work_item MCP tool by @arjun40779 (merge request)
- Add trigger_source to agent presence (merge request) GitLab Enterprise Edition
- Add createLabel to NamespacePermissions (merge request)
- Enable security_profile_banner FF by default (merge request) GitLab Enterprise Edition
- Show disabled Implement button when Developer flow is off (merge request) GitLab Enterprise Edition
- Enable AI Governance dashboard flags by default (merge request)
- Add frontend support for profile banner (merge request) GitLab Enterprise Edition
- Add agent presence for notes (merge request) GitLab Enterprise Edition
- Add User.contributionCalendar GraphQL field (merge request)
- Add refresh button for merge request risk assessment (merge request) GitLab Enterprise Edition
- Add ai_workflows scope to job artifacts and deployments GET endpoints (merge request)
- Add backend support for profile banner (merge request) GitLab Enterprise Edition
- Expose token_expires_at in runner details API (merge request)
- Default enable the optimized_all_security_jobs_complete_check ff (merge request) GitLab Enterprise Edition
- Record the client version on backend analytics events (merge request)
- Add a validity check for EasyPost test API tokens (merge request) GitLab Enterprise Edition
- Add a validity check for EasyPost API tokens (merge request) GitLab Enterprise Edition
- Show non-billable usage on the GitLab Credits dashboard chart (merge request) GitLab Enterprise Edition
- Expose AI catalog skills over GraphQL (merge request) GitLab Enterprise Edition
- Add a validity check for HashiCorp Terraform API tokens (merge request) GitLab Enterprise Edition
- Accept trigger goals when enabling a catalog item (merge request) GitLab Enterprise Edition
- Add ai_web_fetch_invoked audit event type (merge request) GitLab Enterprise Edition
- Rate limit GitHub OAuth webhook deliveries per project (merge request) GitLab Enterprise Edition
- Allow several db_key_base keys (merge request)
- Attach videos via copy-paste in the plain text editor by @skkzsh (merge request)
- Record flow or agent identity of MCP-started Duo sessions (merge request) GitLab Enterprise Edition
- Enable ai_governance_sessions_api by default (merge request) GitLab Enterprise Edition
- Expose issue start dates in GraphQL by @ryo-whaletech (merge request)
- Remove ci_pipeline_otlp_trace_correlation feature flag (merge request)
- Add oauth_application_granular_scopes table and trigger update (merge request)
- Backfill triage and remediation coverage columns (merge request) GitLab Enterprise Edition
- Adds feature flag vue3_migrate_integrations (merge request)
- Infer MCP sessions from a sliding window (merge request) GitLab Enterprise Edition
- Add
excludeSourceTypestoduoWorkflowWorkflows(merge request) GitLab Enterprise Edition - Enable air-gapped billable usage capture by default (merge request) GitLab Enterprise Edition
- Offer a slash command for each flow enabled in a project (merge request) GitLab Enterprise Edition
- Index group milestones in Advanced Search (merge request) GitLab Enterprise Edition
- Add audit event for service account creation by @lkorbasiewicz-gtlb (merge request) GitLab Enterprise Edition
- Add GraphQL endpoint for workflow-workflow links (merge request) GitLab Enterprise Edition
- Add escalation policy widget to incidents in GraphQL (merge request)
- Remove homepage_merge_requests_widget feature flag (merge request)
- Add admin UI for SMS cost-restricted dial codes (merge request) GitLab Enterprise Edition
- Read the trigger goal when dispatching flow runs (merge request) GitLab Enterprise Edition
- Pass the Bedrock IAM role in code suggestions requests (merge request) GitLab Enterprise Edition
- Promote credit_caps_bulk_update FF to beta and enable by default (merge request) GitLab Enterprise Edition
- Add nonBillableUsage to GitlabSubscriptionUsage (merge request) GitLab Enterprise Edition
- Forward the client identity on Workhorse-run agent actions (merge request)
- Add
defaultMergeRequestTargetGraphQL field to Project type (merge request) - Add IAM role to Bedrock self-hosted models (merge request) GitLab Enterprise Edition
- Add service building MCP audit events (merge request) GitLab Enterprise Edition
- Remove owasp2025_vulnerability_filter feature flag (merge request)
- Add configured_at column to namespace_ai_settings (merge request)
- Update table_size database dictionary entries (merge request)
- Add MCP server rate limit settings to the admin Network page (merge request)
- Add tier annotations to auth and access API endpoints (merge request) GitLab Enterprise Edition
- Backfill security_scan_profiles_projects archived column (merge request) GitLab Enterprise Edition
- Attribute backend analytics events to the requesting client (merge request)
- Expose triage and remediation capabilities coverage types (merge request) GitLab Enterprise Edition
- Add sorting to the Kubernetes agents table (merge request)
- Explain the 30-day retention window on the Sessions list (merge request) GitLab Enterprise Edition
- Enable the Slack Agents feature for the Duo app (merge request)
- Add instance-wide daily totals for billable usage (merge request) GitLab Enterprise Edition
- Add not_applicable compliance control status (merge request) GitLab Enterprise Edition
- Release workspace agents as an experimental feature (merge request) GitLab Enterprise Edition
- Make Markdown table sorting generally available (merge request)
- Remove zoekt_language_aggregations feature flag (merge request) GitLab Enterprise Edition
- Add thread actions to the overview conversations (merge request) GitLab Enterprise Edition
- Expose flow trigger goals through GraphQL (merge request) GitLab Enterprise Edition
- Add REST API endpoint for GitHub webhook deliveries (merge request)
- Say why a Duo session failed in get_duo_session (merge request) GitLab Enterprise Edition
- Let code_review/v1 accept a checkout review from Duo CLI (merge request) GitLab Enterprise Edition
- Enable duo_agent_readiness_settings by default (merge request) GitLab Enterprise Edition
- Expose Secrets Manager grace period end date in entitlement (merge request) GitLab Enterprise Edition
- Add reachability column to sbom_occurrence_refs (merge request) GitLab Enterprise Edition
- Add
recommend_reviewers_assignmodel selection feature setting (merge request) - Make advanced configuration editable in the scan profile form (merge request) GitLab Enterprise Edition
- Grant org owners access to user groups (merge request)
- Sync inventory filters with URL query params (merge request) GitLab Enterprise Edition
- Track deletion failure count and alert on stuck project/group deletion (merge request)
- Make advanced configuration editable in the scan profile form (merge request) GitLab Enterprise Edition
- Make advanced configuration editable in the scan profile form (merge request) GitLab Enterprise Edition
- Add trial_usages table for post-trial usage snapshots (merge request) GitLab Enterprise Edition
- Register the Duo Chat token usage events and setting ahead of use (merge request) GitLab Enterprise Edition
- Log MCP origin of Duo sessions to mcp.log (merge request) GitLab Enterprise Edition
- Add caller to triage and remediation coverage updates (merge request) GitLab Enterprise Edition
- Add group-level policy store experiment toggle UI (merge request) GitLab Enterprise Edition
- Parse v3 advisory records (merge request) GitLab Enterprise Edition
- Add mcp as an AI governance session source (merge request) GitLab Enterprise Edition
- Read external agent metrics from ai_governance_sessions in ClickHouse (merge request) GitLab Enterprise Edition
- Add AiTracking for Duo Chat tool calls (merge request) GitLab Enterprise Edition
- Grant Developer default secrets permissions on project provisioning (merge request) GitLab Enterprise Edition
- Make advanced configuration editable in the scan profile form (merge request) GitLab Enterprise Edition
- Add read_package custom ability (merge request) GitLab Enterprise Edition
- Enable custom Code dropdown clients by default (merge request)
- Add a validity check for npm access tokens (merge request) GitLab Enterprise Edition
- Add a work item plan source type for Duo workflows (merge request) GitLab Enterprise Edition
- Allow setting the external flag on Service Accounts API by @jspagnola (merge request)
- Add groups projects transfer observability follow-ups (merge request)
- Add update_organization_integration permission for org owners (merge request)
- Add exact-match filter for model_used on Duo Workflows analytics (merge request) GitLab Enterprise Edition
- Add escalation status widget to incidents in GraphQL (merge request)
- Scope instance integration propagation to organization (merge request)
- Accept username in BudgetCapUserOverrideInput (merge request) GitLab Enterprise Edition
- Add force stop option for environments in the UI (merge request)
- Add filters, roles and file links to the overview conversations (merge request) GitLab Enterprise Edition
- Remove the sync_ai_governance_sessions feature flag (merge request) GitLab Enterprise Edition
- Add per-kind reference limits for AI Catalog flows (merge request) GitLab Enterprise Edition
- Allow job, source project claims in ID token sub claims (merge request)
- Track and Persist source types for triggers (merge request) GitLab Enterprise Edition
- Remove the mcp_toolsets feature flag (merge request)
- Add Orbit indexing status and item counts endpoints (merge request) GitLab Enterprise Edition
- Add backward pagination and thread fields to MR notes facet (merge request)
- Add rake task to generate an OpenBao root token (merge request) GitLab Enterprise Edition
- Add watched hold mode to WithLockRetries for lock acquisition (merge request)
- Add a maxSeries option to the GLQL column chart (merge request)
- feat: Add Cargo package publish endpoint (merge request)
- Add pinned version FK for AI Catalog dependencies (merge request) GitLab Enterprise Edition
- Add a goals column to AI flow triggers (merge request)
- Register notify_me_when so admins can govern it (merge request) GitLab Enterprise Edition
- Add session lifecycle hooks for foundational flows (merge request) GitLab Enterprise Edition
- Add ai_web_search_invoked audit event type (merge request) GitLab Enterprise Edition
- Add syntax highlighting for the 4D language by @loganswartz (merge request)
- Remove
duo_code_review_on_pushfeature flag (merge request) GitLab Enterprise Edition - Return the session URL when starting a Duo flow (merge request) GitLab Enterprise Edition
- Add status checks report to the merge request reports tab (merge request) GitLab Enterprise Edition
- Add sidebar navigation preferences to tailored sidebar (merge request)
- Add create-only action for Secrets Manager permissions (merge request) GitLab Enterprise Edition
- Roll up and rotate pg_ash samples from Sidekiq cron (merge request)
- Add agent_identity_id to ai_governance_sessions (merge request) GitLab Enterprise Edition
- Add tags connection to the GraphQL Repository type by @sjestonsingh (merge request)
- Enforce the MCP Server rate limit at the request edge (merge request)
- Add GraphQL project fields for fork merge request detection (merge request)
- Add GitHub OAuth webhook management service (merge request) GitLab Enterprise Edition
- Add PostgreSQL CA driver (merge request)
- Extend request_channel tracking to remaining import types (merge request)
- Make session credits ingestion drain its backlog safely (merge request) GitLab Enterprise Edition
- Log Zoekt enabled namespaces without replicas (merge request) GitLab Enterprise Edition
- Add discussions to the replacement MR overview (merge request) GitLab Enterprise Edition
- Add triage and remediation metrics count (merge request) GitLab Enterprise Edition
- Add cancel_auto_merge merge request API endpoint by @jmrp (merge request)
- Add ai_governance_session_id to ClickHouse ai_audit_events (merge request) GitLab Enterprise Edition
- Add the risk assessment to the replacement MR overview (merge request) GitLab Enterprise Edition
- Remove
duo_code_review_previous_discussionsfeature flag (merge request) GitLab Enterprise Edition - Add not_applicable_count to requirement compliance statuses (merge request) GitLab Enterprise Edition
- Add GLQL presenters for model metadata and event-filtered counts (merge request)
- Add is one of filter to epic board search (merge request) GitLab Enterprise Edition
- Default registration country from Cloudflare IP header (merge request) GitLab Enterprise Edition
- Link restarted Duo sessions to their source workflow (merge request) GitLab Enterprise Edition
- Add is one of filter to issue board search (merge request)
- Adds triage coverage bitmask workers and services (merge request) GitLab Enterprise Edition
- Add a rate limit for pipeline cancellation (merge request)
- Allow policy store mutations to accept a group path (merge request) GitLab Enterprise Edition
- Add Dependency Scanning scan profile configuration schema (merge request)
- Allow optional: true with needs:pipeline:job by @jspagnola (merge request)
- Add agent_identity_id to siphon_ai_governance_sessions (merge request)
- Replicate ai_governance_sessions to ClickHouse with Siphon (merge request)
- Report MCP tool rate limits with retry detail by @otutukingsley (merge request)
- Content editor: Add icons to more dropdown (merge request)
- Add OAuth consent grant schema and trigger update (merge request)
- Make CI job trace update intervals configurable by @aleksandr-kotlyar (merge request)
- Add rate limits for job retry and job play (merge request)
- Add a searchable select field type to the policy editor (merge request) GitLab Enterprise Edition
- Add severity meter to risk assessment MR widget (merge request) GitLab Enterprise Edition
- Add concurrency limit to ScanProfileStatus::UpdateWorker (merge request) GitLab Enterprise Edition
- Strip a duplicate task prefix from the Phorge issues URL by @sjestonsingh (merge request)
- Add root CA driver (merge request)
- Enable explicit_mr_work_item_relations by default (merge request)
- Add application settings for the MCP Server rate limit (merge request)
- Add Siphon replication for workflow notes and work items (merge request)
- Support GitLab flows and project URLs in start_duo_session (merge request) GitLab Enterprise Edition
- Add labels and milestone to the replacement MR overview (merge request) GitLab Enterprise Edition
- Add Dependency Scanning scan profile configuration schema (merge request)
- Enforce retention policy definition (merge request)
- Add Dependency Scanning scan profile configuration schema (merge request)
- Add event parameter to AI usage events count metric (merge request) GitLab Enterprise Edition
- Track DT-OT job level events (merge request)
- Track request_channel on import lifecycle events (merge request)
- Add the description to the replacement MR overview (merge request) GitLab Enterprise Edition
- Skip merge request pipelines from title (merge request)
- Enable Orbit in DAP by default (merge request) GitLab Enterprise Edition
- Backfill remediated_at in vulnerabilities ES index (merge request) GitLab Enterprise Edition
- Add Terraform report to the merge request reports tab (merge request) GitLab Enterprise Edition
- Enable duo_admin_access_rules_subgroups by default (merge request) GitLab Enterprise Edition
- Create sec project and namespace mirror tables (merge request)
- Add ai_governance_session_id to ai_audit_events (merge request) GitLab Enterprise Edition
- Expose restartDuoWorkflow on the Duo workflow permission type (merge request) GitLab Enterprise Edition
- Update table_size database dictionary entries (merge request)
- Bump gitlab_query_language and query-language-rust to 0.40.0 (merge request)
- Add GLQL open MR count and credits per merged MR metrics (merge request)
- Add purpose-built error states to DAP Impact panels (merge request)
- Add reviewers and recommended reviewers to the replacement MR overview (merge request) GitLab Enterprise Edition
- Expose author bot status in merge request API responses by @ivane_gkomarteli (merge request)
- Add test summary report to the merge request reports tab (merge request)
- Add ai_governance_sessions table for Duo and external agent sessions (merge request) GitLab Enterprise Edition
- Index ci_pending_builds.runner_machine_id and add its loose FK (merge request)
- Add exact_not_match filters to all aggregation engines (merge request) GitLab Enterprise Edition
- Enable and remove the
elasticsearch_group_searchfeature flag (merge request) - Route Rust (.rs) files to gitlab-advanced-sast-ext (merge request)
- Add a variable table to each scan trigger card (merge request) GitLab Enterprise Edition
- Add commit summary fields to the Pipeline GraphQL type (merge request)
- Expose environment name on CiJob in GraphQL (merge request)
- Add rate limit for pipeline cancellation (merge request)
- Add group-scoped frontend support for policy store editor and detail (merge request) GitLab Enterprise Edition
- Add CI job project and commit to token-exchange payload (merge request) GitLab Enterprise Edition
- Add projectId filter to duoWorkflowWorkflows query (merge request) GitLab Enterprise Edition
- Group inheritance creation, with GraphQL support (merge request) GitLab Enterprise Edition
- Add feature_category to database query log comments (merge request)
- Add GLQL user tiers, group dimension and fixed-day date buckets (merge request)
- Add an Explore dashboards banner to the legacy dashboards list (merge request) GitLab Enterprise Edition
- Add versions connection to the GraphQL TerraformState type by @sjestonsingh (merge request)
- Feat: Add Backend Support for Sessions Search Project Filtering (merge request) GitLab Enterprise Edition
- Show linked pipelines in session details (merge request) GitLab Enterprise Edition
- Track gitea and github self hosted events (merge request)
- Add Orbit excluded groups administration (merge request) GitLab Enterprise Edition
- Support false_positive_confidence for SAST vulnerability resolution (merge request) GitLab Enterprise Edition
- Add sync timestamp and rename Anthropic integration model (merge request) GitLab Enterprise Edition
- Add statuses filter argument to duoWorkflowWorkflows query (merge request) GitLab Enterprise Edition
- Add feature flag for merge request risk classification widget (merge request) GitLab Enterprise Edition
- Add PRIVATE-TOKEN security scheme to the OpenAPI v3 spec (merge request)
- Add SkillGuard risky skills card to the AI Governance dashboard (merge request) GitLab Enterprise Edition
- Offer 7 day and 30 day windows on the AI Governance dashboard (merge request) GitLab Enterprise Edition
- Add the credits by model panel to the DAP Impact Spend view (merge request) GitLab Enterprise Edition
- Add the credits over time panel to the DAP Impact Spend view (merge request) GitLab Enterprise Edition
- Add exact_not_match filter support (merge request)
- Expose key fingerprint in SSH Certificate Grape entity (merge request)
- Add stacked two-dimension support to the GLQL bar list (merge request)
- Track DT and OT entity-level events (merge request)
- Render GLQL bar list rows from metrics when a query has no dimension (merge request)
- Instrument Analyze with Duo usage (merge request) GitLab Enterprise Edition
- Add compact option to the GLQL stat display type (merge request)
- Add rate limit to group audit events API (merge request) GitLab Enterprise Edition
- Integrate decision archiving with GraphQL mutation (merge request) GitLab Enterprise Edition
- Score a merge request risk classification and record it (merge request) GitLab Enterprise Edition
- Add restart functionality to workflows (merge request) GitLab Enterprise Edition
- Add verification alert to pipeline editor (merge request) GitLab Enterprise Edition
- Show an alert when a note deep link targets a deleted note (merge request)
- Add group filter to AiUsageEvents engine (merge request) GitLab Enterprise Edition
- Persist the functional verification run's outcome (merge request) GitLab Enterprise Edition
- Prepare schema for group-level AI catalog item enablement (merge request)
- Add status filter to the work item trigger form (merge request) GitLab Enterprise Edition
- Add accessibility report to the merge request reports tab (merge request)
- Persist Duo Chat message drafts to localStorage (merge request) GitLab Enterprise Edition
- Create Orbit excluded namespaces table (merge request) GitLab Enterprise Edition
- Add monthly cadence to scan execution rule mode (merge request) GitLab Enterprise Edition
- Add status column to work item decisions (merge request)
- Interpolate query values into the GLQL stat description (merge request)
- Add
scale: logoption for GLQL bar charts (merge request) - Add a sampler thread that drives pg_ash sampling (merge request)
- Add the credit stat panels to the DAP Impact Spend view (merge request) GitLab Enterprise Edition
- Add Analyze with Duo to explore analytics dashboards (merge request)
- Add Pub support to dependency scanning auto-remediation (merge request) GitLab Enterprise Edition
- Add query_log_usage table and materialized view (merge request)
- Chore: Remove session_details_right_rail FF (merge request) GitLab Enterprise Edition
- Add client-surface source values to Duo Agent Platform session tracking (merge request) GitLab Enterprise Edition
- Notify chat integrations when a merge request review is requested by @eldardada (merge request)
- Add group dimension to AiUsageEvents engine (merge request) GitLab Enterprise Edition
- Add label, color, scale and trend options to the GLQL bar list (merge request)
- Add ai_model_release feature flag (merge request) GitLab Enterprise Edition
- Add siphon_p_vulnerability_identifiers ClickHouse table (merge request)
- Expose the Artifact Registry namespace UUID (merge request) GitLab Enterprise Edition
- Add start_duo_session MCP tool (merge request) GitLab Enterprise Edition
- Add rate limit to project audit events API (merge request) GitLab Enterprise Edition
- Add artifacts facet to get_job and get_pipeline MCP tools (merge request)
- Document project-creation gap in cascading settings (merge request)
- Surface trigger controls on the flow configuration page (merge request) GitLab Enterprise Edition
- Add artifacts facet to get_job and get_pipeline MCP tools (merge request)
- Add duo_auto_mode_enabled cascading setting database migrations (merge request)
- Add send_duo_session_input MCP tool (merge request) GitLab Enterprise Edition
- Track DT and OT group lifecycle events (merge request)
- Emit a Zoekt task queue-wait histogram with an exact 60s bucket edge (merge request) GitLab Enterprise Edition
- Run the Slack assistant flow server-side instead of in CI (merge request) GitLab Enterprise Edition
- Add validity checks for the remaining OpenAI token types (merge request) GitLab Enterprise Edition
- Bump gitlab_query_language to 0.36.0 for DuoWorkflows (merge request)
- Add previousBlamePath to blame CommitData GraphQL type (merge request)
- Add backpressure for group and project deletion workers (merge request)
- Integrate create manual decision with GraphQL mutation (merge request) GitLab Enterprise Edition
- Roll out blob permalink embeds (merge request)
- Define the upgrade order for Geo logical replication pairs (merge request) GitLab Enterprise Edition
- Add share labels, category colors and subtitles to GLQL bar charts (merge request)
- Feat: Add NoteSessionBar to work item notes (merge request) GitLab Enterprise Edition
- Enforce CWE classes on AI triage auto-run (merge request) GitLab Enterprise Edition
- Enable Artifact Registry role assignments and owner role sync (merge request) GitLab Enterprise Edition
- Display a list of available offline export history (merge request)
- Add browser performance report to the merge request reports tab (merge request)
- Add signing_method enum to SLSA attestations (merge request)
- Add commits_count variable to commit message templates by @sjestonsingh (merge request)
- Add group support to GraphQL PoliciesResolver (merge request) GitLab Enterprise Edition
- Declare assignable_when conditions on the experiments API (merge request)
- Add suggested questions to the Data Analyst agent by @sjestonsingh (merge request) GitLab Enterprise Edition
- Add locationId to Credits usage event GraphQL type by @xingli.wu (merge request) GitLab Enterprise Edition
Fixed (532 changes)
- Exclude dependency proxy requests from unauthenticated IP throttle (merge request)
- Match rule schedules to scan execution policies by enabled position (merge request) GitLab Enterprise Edition
- Fix dimension appending for non-embeddable media pastes by @Refa3e (merge request)
- Skip Topology Service claim warmup outside Puma and Sidekiq (merge request)
- Reject duplicate granular scopes within one request (merge request)
- Show Maven local upstreams in the registry upstream list (merge request) GitLab Enterprise Edition
- Return Orbit MCP client errors as tool results (merge request) GitLab Enterprise Edition
- Respect admin mode when enabling deploy keys (merge request)
- Cap MR reviewer and assignee page size at backend limit (merge request)
- Fix crash in combined search authorization filter (merge request) GitLab Enterprise Edition
- Preserve issue references in copied cherry-pick descriptions by @ryo-whaletech (merge request)
- Return granular_scopes when rotating a service account token by @jmrp (merge request)
- Add original revision context to review replies [skip ci] (merge request) GitLab Enterprise Edition
- Annotate the context commit list with the entity it presents by @jmrp (merge request)
- Restore missing table captions by @skkzsh (merge request)
- Return bad request for invalid blob preview content (merge request)
- Make Secrets Manager activation read-your-writes safe on replicas (merge request) GitLab Enterprise Edition
- Forward locale variables into the Duo Workflow sandbox (merge request) GitLab Enterprise Edition
- Name null group and project buckets in GLQL tables (merge request)
- Stop a project being returned as a fork of itself by @gerardo-navarro (merge request)
- Fix DAP Impact Abandonment panel to measure users who did not return (merge request) GitLab Enterprise Edition
- Fix swapped fork notices in MergeRequestPresenter (merge request)
- Validate conflict resolution input before calling Gitaly (merge request)
- Translate out-of-range seeks for rubyzip central directory scan (merge request)
- Return a 400 when a board name fails validation in the boards API by @jmrp (merge request)
- Fix double backslashes in observability setup curl example (merge request)
- Report refused approvals when submitting a review (merge request)
- Fix error and warning showing on SARIF ingestion (merge request) GitLab Enterprise Edition
- Return granular_scopes when creating or rotating a personal access token by @jmrp (merge request)
- Set a 2 second timeout on the usage quota check (merge request) GitLab Enterprise Edition
- Cap group vulnerability autocomplete at the result limit (merge request) GitLab Enterprise Edition
- Emit billing events when product usage data is disabled (merge request)
- Restore missing table footers by @skkzsh (merge request)
- Replay read-only Secrets Manager entitlement during CDot outages (merge request) GitLab Enterprise Edition
- Render Mermaid and other GFM in iteration descriptions (merge request) GitLab Enterprise Edition
- Add accessible names to release form title and date inputs (merge request)
- Align removed lines with code quality findings in Rapid Diffs (merge request)
- Fix create merge request button for forked projects (merge request)
- Fix code suggestions on line ranges with expanded lines (merge request)
- Fetch every page of milestones on the roadmap (merge request) GitLab Enterprise Edition
- Return granular_scopes from the impersonation token API by @jmrp (merge request)
- Add model allowlist claim to third-party agent tokens (merge request)
- Handle failed dependency location requests by @arjun40779 (merge request) GitLab Enterprise Edition
- Stop deferring
PublishCommentsWorkeron database health (merge request) GitLab Enterprise Edition - Pass an Apollo provider to group approval settings (merge request) GitLab Enterprise Edition
- Fix connecting to Slack's MCP server (merge request) GitLab Enterprise Edition
- Skip compliance violations for MRs auto-merged via another MR (merge request) GitLab Enterprise Edition
- Authorize CustomEmoji for granular tokens (merge request)
- Size partitioned tables by their largest partition in UpdateTableSizes by @dev-Adhithiya (merge request)
- Skip resolved-thread note when discussion already resolved by @bobby-nandigam (merge request)
- Fix TeamCity/DroneCi MR trigger race on merge_status (merge request)
- Add missing tiers to license-gated Feature catalog nav items (merge request) GitLab Enterprise Edition
- Store the label event reference when the event is written (merge request)
- Show agent sessions load errors inside the widget (merge request) GitLab Enterprise Edition
- Guard snippet view against empty and errored GraphQL responses (merge request)
- Answer external status check create and delete role refusals with 403 by @jmrp (merge request) GitLab Enterprise Edition
- Report CI/CD observability metric durations in seconds (merge request)
- Preserve Slack user mentions when escaping Duo prompt (merge request) GitLab Enterprise Edition
- Stop the SAST vulnerability resolution flow opening empty merge requests (merge request) GitLab Enterprise Edition
- Stop deferring Slack turns on the database health signal (merge request) GitLab Enterprise Edition
- Track find_no_issues Duo Code Review event once per review (merge request) GitLab Enterprise Edition
- Resolve MCP tool-call event namespace from tool declaration (merge request) GitLab Enterprise Edition
- Fix Duo panel verify account click tracking (merge request) GitLab Enterprise Edition
- Fix fast-forward merge when a tag shares the target branch name (merge request)
- Keep GHES asset links that redirect to the login page by @sjestonsingh (merge request)
- Fix CVE enrichment sync stopping after the first export file (merge request) GitLab Enterprise Edition
- Fix epics milestone filter combined with title sort (merge request) GitLab Enterprise Edition
- Verify TLS certificates in the Duo verifier WebSocket check (merge request) GitLab Enterprise Edition
- Fix flaky test (merge request) GitLab Enterprise Edition
- Drop read_namespace_via_membership ability from non-member roles by @Taucher2003 (merge request)
- Revoke org owner role as the user when actor is not an owner (merge request)
- Fix invalid Mattermost notification attachment colors (merge request)
- Trigger pipeline by @kittusontineni (merge request)
- Use quantileExactInclusive in the shared ClickHouse quantile metric (merge request)
- Count developer/v1 sessions in the DAP Impact Developer panels (merge request) GitLab Enterprise Edition
- Return granular_scopes from GET /personal_access_tokens/self by @jmrp (merge request)
- Fix contributors analytics sidebar permission check by @kittusontineni (merge request)
- Track namespace-level agent sessions with their namespace (merge request) GitLab Enterprise Edition
- Remove auto_merge_abort_uses_target_project feature flag (merge request)
- Preserve recovery records during orphaned pool cleanup (merge request)
- Keep the draft note position when updating only its text by @arjun40779 (merge request)
- Include work item status change in the issue reopen (merge request) GitLab Enterprise Edition
- Include scheduled pipeline execution policy scans in approval baseline (merge request) GitLab Enterprise Edition
- Send a single x-gitlab-client-name to DWS (merge request)
- Resolve the ws governance surface from the request environment (merge request) GitLab Enterprise Edition
- Check disk space before restoring backup archives by @aleksandr-kotlyar (merge request)
- Count CI job tokens sent as basic auth or bearer against the job user (merge request)
- Hide branch protections from users who cannot read them (merge request)
- Count external issue links in vulnerability has_issues (merge request) GitLab Enterprise Edition
- Exclude OAuth registration and MCP discovery from per-IP limit (merge request)
- Fix orphaned pools after concurrent project storage moves (merge request)
- Handle dangling reference error from RefExists (merge request)
- Resolve runner discovery and exclude registration from per-IP limit (merge request)
- Don't track agent plan reads on mutation responses (merge request) GitLab Enterprise Edition
- Add loose foreign key from deployments.user_id to users by @dev-Adhithiya (merge request)
- Include work item status in close webhook payload (merge request) GitLab Enterprise Edition
- Surface why a group or project transfer failed (merge request)
- Remove the auto_merge_readd_to_train_after_completed_pipeline flag (merge request) GitLab Enterprise Edition
- Set tracked context on trigger-created vulnerability reads (merge request) GitLab Enterprise Edition
- Stop security widget spinning on blocked pipelines (merge request) GitLab Enterprise Edition
- Handle Invalid LFS Batch Objects (merge request)
- Add IP fallback errors to Gitlab::HTTP HTTP_ERRORS (merge request)
- Remove stale merge_request event from Developer flow triggers (merge request)
- Resolve group work items for fine-grained access tokens by @jmrp (merge request) GitLab Enterprise Edition
- Scope
MarkDoneFinalizedMergeRequestTodosfilters to the sub-batch ids (merge request) - Self-hosted models: test embedding model family on embeddings route (merge request) GitLab Enterprise Edition
- Resolve Duo merge request ids before backfill mutation by @Modjo85 (merge request)
- Skip fine-grained token enforcement for bot users (merge request)
- Fix doubled border on the Users tab of the secrets permissions table (merge request) GitLab Enterprise Edition
- Pair partition indexes by parent index in schema validation (merge request)
- Block PAT creation for service accounts pending deletion by @Sahil8383 (merge request)
- Ignore OWASP identifiers in vulnerability deduplication by @anishisbusy (merge request)
- Fix description of renamed global ID types (merge request)
- Batch failures for geo checksum mismatch self heal (merge request) GitLab Enterprise Edition
- Skip unresolved groups when preloading SAML providers by @arjun40779 (merge request) GitLab Enterprise Edition
- Fix the Duo verifier WebSocket check rejecting itself (merge request) GitLab Enterprise Edition
- Anchor online self-managed Secrets Manager grace on license end (merge request) GitLab Enterprise Edition
- Exclude archived projects from scan profile project count (merge request) GitLab Enterprise Edition
- Hide unactionable secrets manager settings in the paid experience (merge request) GitLab Enterprise Edition
- Strip empty params before pushing vulnerability filters (merge request) GitLab Enterprise Edition
- Handle mid-stream read failures in Rapid Diffs (merge request)
- Only mark secrets removed from code after full scans (merge request) GitLab Enterprise Edition
- Fix layout of login page bloom (merge request)
- Fix padding gap between Secrets Manager permission tabs and table (merge request) GitLab Enterprise Edition
- Rebind issues work item transitions trigger after swap (merge request)
- Geo: Resync instead of fail on checksum mismatch from primary update (merge request) GitLab Enterprise Edition
- Treat legacy licenses as offline in the billing events client (merge request) GitLab Enterprise Edition
- Return masked to-dos behind expired group SAML sessions (merge request) GitLab Enterprise Edition
- Fix source text in MR related work items tooltip (merge request)
- Compute traversal_path in Ruby for ClickHouse AI audit events (merge request) GitLab Enterprise Edition
- Fix mobile back navigation for work item panels (merge request)
- Tolerate malformed Content-Range in HttpIO (merge request)
- Remove the extended_organization_url_scoping feature flag (merge request)
- Throttle partitioned table ANALYZE on the parent's last analyze time (merge request)
- Fix GraphQL issuesSort error for weight sort preferences by @arjun40779 (merge request) GitLab Enterprise Edition
- Show all top-level groups in Orbit admin settings (merge request) GitLab Enterprise Edition
- Fix enum-typed scan profile configuration values on the GraphQL wire (merge request) GitLab Enterprise Edition
- Use OpenBao ACL to determine showing New secret button (merge request) GitLab Enterprise Edition
- Authorize branch rules on read_branch_rule (merge request) GitLab Enterprise Edition
- Fix upgrade modal recommending current version (merge request)
- Fix first file in a diff never collapsing when generated (merge request)
- Skip commit pipeline summary when pipeline has no iid (merge request)
- Skip rule diffing for policy types without rules (merge request) GitLab Enterprise Edition
- Prevent Gmail from collapsing duplicate notification emails (merge request)
- Fix phantom scrollbar in DetailLayout sticky sidebar (merge request)
- Remap stale pins in code completion model metadata (merge request) GitLab Enterprise Edition
- Fix Gitaly up-to-date check for versions with a revision suffix by @fredfrazao (merge request)
- Forward CA and proxy env vars into the SRT sandbox (merge request) GitLab Enterprise Edition
- Keep approved tool results when rebuilding Duo Chat history (merge request) GitLab Enterprise Edition
- Allow group work item bulk update on all tiers (merge request)
- Sync Organization Administrator role on changes in Users::UpdateService (merge request)
- Remove read_branch_rule from the auditor role (merge request) GitLab Enterprise Edition
- Start policy evaluation timeout after security report ingestion (merge request) GitLab Enterprise Edition
- Skip bridge status worker for pipelines failed at creation (merge request)
- Render inline code in merge request sticky header (merge request)
- Share an approver budget in
ReviewerDataBuilder(merge request) GitLab Enterprise Edition - Align resolve locally link in Rapid Diffs conflict alert (merge request)
- Stop sending
reviewer_datain therecommend_reviewersflow (merge request) GitLab Enterprise Edition - Make cascading setting lock message keyboard accessible (merge request)
- Stop breadcrumb overflow toggle from showing hidden panel header (merge request)
- Deliver long Duo answers to Slack and report failed deliveries (merge request) GitLab Enterprise Edition
- Scope policy approval rule name uniqueness to the policy rule (merge request) GitLab Enterprise Edition
- Authenticate self-hosted billing events with CustomersDot token by @Modjo85 (merge request) GitLab Enterprise Edition
- Render a dash for null metric cells in GLQL tables (merge request)
- Fix header area blob controls missing blobPath route check by @usefmahmud (merge request)
- Restore statement_timeout after syncing sequences (merge request)
- Send duo_agent_platform as the Duo Workflow unit primitive header (merge request) GitLab Enterprise Edition
- Hide Duo availability namespaces table on group settings (merge request) GitLab Enterprise Edition
- Find namespaces by full path in the token scope picker (merge request)
- Enforce preconfigured policy defaults as override exceptions (merge request) GitLab Enterprise Edition
- Skip transfer event handling when the group is gone (merge request) GitLab Enterprise Edition
- Serialize CI_JOB_TAGS as valid JSON by @ryo-whaletech (merge request)
- Deduplicate scheduled code repository index jobs (merge request) GitLab Enterprise Edition
- Wiki form edit message modal: Change primary action (merge request)
- Attach the authorization code to inaccessible-source errors (merge request)
- Geo: Skip duplicate rows when bulk inserting registries (merge request) GitLab Enterprise Edition
- Anchor ref selector icon check to ref prefix (merge request)
- Stop the SAST report inheriting the taint cache expiry by @sjestonsingh (merge request)
- Keep CI job token in LFS batch action headers (merge request) GitLab Enterprise Edition
- Hide Ultimate trial link from Ultimate tier owners (merge request) GitLab Enterprise Edition
- Stop repeating failing incremental code indexing runs (merge request) GitLab Enterprise Edition
- Prevent IME Enter from submitting Duo Agentic Chat prompt (merge request) GitLab Enterprise Edition
- Fix HEAD on cached container virtual registry manifests (merge request) GitLab Enterprise Edition
- Make HLJS extension matching case-insensitive (merge request)
- Allow ai_workflows scope to download uploads by secret (merge request)
- Update GitLab Elasticsearch Indexer to 5.14.16 (merge request) GitLab Enterprise Edition
- Keep side-by-side view when expanding a file in Rapid Diffs by @arjun40779 (merge request)
- Allow security policy bot cross-project container registry access (merge request) GitLab Enterprise Edition
- Calibrate untracked-branch finding UUIDs to default-branch record (merge request) GitLab Enterprise Edition
- Fix "Change type" when subepics feature is not available (merge request)
- Show truncated bar list labels in full on hover (merge request)
- Change-gate web_search_enabled in group Duo form (merge request) GitLab Enterprise Edition
- Fix code Advanced Search for Planner role (merge request) GitLab Enterprise Edition
- Fix quote reply shortcut in work item side panel by @rspeicher (merge request)
- Fix comment Advanced Search for the Planner role (merge request) GitLab Enterprise Edition
- Refresh STS credentials early for Pages deployment URLs (merge request)
- Provision
EnableCodeReviewFlowServiceas the group owner (merge request) - Keep per-tool allows when one rule demotes the group (merge request) GitLab Enterprise Edition
- Remove extra space below the feature library modal (merge request)
- Prevent nested work item TOC entries from being sortable by @Kxrma47 (merge request)
- Fix MR sticky header flicker on stacked merge requests (merge request)
- Remove fix_scan_result_policy_violation_reconciliation flag (merge request) GitLab Enterprise Edition
- Fix compressed time_window for initial SPEP schedule creation (merge request) GitLab Enterprise Edition
- Reject an unrecognized key on POST /features/:name by @otutukingsley (merge request)
- Stop retrying failed incremental code indexing runs (merge request) GitLab Enterprise Edition
- Hide
Add summaryinReviewDrawerwithout draft notes (merge request) - Allow a null revoke OAuth URL on the Google Cloud panel (merge request)
- Bound and rescue the MR coverage delta lookup (merge request)
- MR reference filter understands "_A123" from rapid diffs (merge request)
- Keep following linked note while notes load (merge request)
- Redirect scope-only personal access token URLs by @torben.buck (merge request)
- Keep reindexed work items when deleting a group's old documents (merge request) GitLab Enterprise Edition
- Send canonical timezone identifiers to Gitaly (merge request)
- Read Secrets Manager instance enrollment uncached (merge request) GitLab Enterprise Edition
- Internationalize the moved path redirect banner by @arjun40779 (merge request)
- Show feedback when required approvals are auto-saved by @Sahil8383 (merge request) GitLab Enterprise Edition
- Scope stream adoption to the workflow the socket belongs to (merge request) GitLab Enterprise Edition
- Serve the Orbit MCP server without the mcp_client feature flag (merge request) GitLab Enterprise Edition
- Align self-managed Restricted access with User.billable (merge request) GitLab Enterprise Edition
- Use organization overview path in org switcher (merge request)
- Log fractional GraphQL complexity scores (merge request)
- Do not retry Topology Service BeginUpdate after a timeout (merge request)
- fix(duo): Normalise DAP origin URL to drop the CI job token (merge request) GitLab Enterprise Edition
- Reindex Zoekt projects moved within the same top-level group (merge request) GitLab Enterprise Edition
- Sync AI governance sessions when ClickHouse is enabled (merge request) GitLab Enterprise Edition
- Fix deploy key pushes for exact protected branches (merge request)
- Skip Duo review on force-push to a target branch (merge request)
- Clear tracked sign-in field changes the throttle did not write by @jmrp (merge request)
- Fix type query parameter for work item creation (merge request)
- Add the scan profile advanced configuration variable catalog (merge request) GitLab Enterprise Edition
- Skip automatic
Duo Code Reviewwithout flow pipeline access (merge request) GitLab Enterprise Edition - Fix TypeError in repository router afterEach hook (merge request)
- Refetch work item in board drawer after a card move (merge request)
- Keep comment text when editing its line range (merge request)
- Stop code repositories getting stuck in embedding indexing (merge request) GitLab Enterprise Edition
- Geo: Add UNIQUE indexes for file_registry table (merge request) GitLab Enterprise Edition
- Keep snippet table of contents dropdown above later file headers (merge request)
- Stop storing externally stored payloads that hold nothing (merge request)
- Hide work item heading anchors with CSS (merge request)
- Skip billing emission on offline-licensed instances (merge request) GitLab Enterprise Edition
- Show the commit title and author when the commit is not readable (merge request)
- Increase FeatureDiscoverySearch AI Gateway timeout to 5 seconds (merge request) GitLab Enterprise Edition
- Keep an empty identifier filter meaning no records by @otutukingsley (merge request) GitLab Enterprise Edition
- Fix NoMethodError for GitHub suggestions with stale diff positions (merge request)
- Guard tooltip delay localStorage read (merge request)
- Catalog post_suggested_reviewers as a governed tool (merge request) GitLab Enterprise Edition
- Fix group vulnerability export segment boundaries (merge request) GitLab Enterprise Edition
- Fix live pipeline status updates on the last commit widget (merge request)
- Avoid complex :not() selector in copy_code behavior (merge request)
- Preserve ampersands in legacy user detail sanitization by @gerardo-navarro (merge request)
- Respect user selected model when changing mid agentic chat (merge request) GitLab Enterprise Edition
- Fix 500 when a type-changing quick action drops custom fields (merge request)
- Continue marking merge requests merged when one fails (merge request)
- Geo: Add UNIQUE indexes for package_file_registry table (merge request) GitLab Enterprise Edition
- Fix rules:exists directory lookup missing existing directories (merge request)
- Fix 500 when creating a branch with an integer name (merge request)
- Fail pull mirror when Sidekiq interruptions are exhausted (merge request) GitLab Enterprise Edition
- Hide vulnerability file contents without a commit ref (merge request) GitLab Enterprise Edition
- Block scheduling deletion when transfer_in_progress (merge request)
- Remove trailing punctuation after URLs in EE plain-text emails by @torben.buck (merge request) GitLab Enterprise Edition
- Keep the create branch submit button disabled while validating by @plus3x (merge request)
- Fix truncated send-url bodies in Duo Workflow HTTP actions (merge request)
- Make internal bot usernames and emails unique across cells (merge request)
- Allow updating controls when requirement has five controls by @Sahil8383 (merge request) GitLab Enterprise Edition
- Decide subscription primary fallback before loading payload (merge request)
- Handle a null currentUser in homepage widgets (merge request)
- Pin the source viewer horizontal scrollbar to the viewport (merge request)
- Keep the pipeline header when the pipeline is no longer found (merge request)
- Stop Vue 2 and @vue/compat from mutating shared SFC exports (merge request)
- Align group secret update CI policy refresh order (merge request) GitLab Enterprise Edition
- Schedule CI mirror sync workers after organization transfer (merge request)
- Reconcile interrupted merge train merges instead of aborting (merge request) GitLab Enterprise Edition
- Fix Zoekt planner placing two indices for one namespace on one node (merge request) GitLab Enterprise Edition
- Fix deep-linked job log line hidden behind sticky top bar (merge request)
- Fix job log auto-scroll to bottom on initial page load (merge request)
- Apply the layout width preference without a reload (merge request)
- Support registry path prefixes for flow execution images (merge request) GitLab Enterprise Edition
- Fix custom role approvers lookup without container (merge request) GitLab Enterprise Edition
- Refresh auto-merge strategies on approval in MR widget (merge request)
- Truncate Jira issue keys at the 500 per-entity API limit (merge request)
- Resolve flow context in
BuildAdditionalContextService(merge request) - Check update_organization_user when updating organization users by @sjestonsingh (merge request)
- Allow the ai_workflows scope to read repository blobs in batch by @sjestonsingh (merge request)
- Bail from unfolding when the old blob no longer resolves by @sjestonsingh (merge request)
- Detect duplicate variable keys from git push options by @sjestonsingh (merge request)
- Prevent archived labels from being newly assigned by @ryo-whaletech (merge request)
- Read CVE enrichment from a verbatim offline mirror (merge request) GitLab Enterprise Edition
- Return the branch web_url from the add_branch MCP tool by @sjestonsingh (merge request)
- Gate the the secrets manager empty state button on user abilities (merge request) GitLab Enterprise Edition
- Fix GroupSamlMicrosoftGroupSyncWorker bug (merge request) GitLab Enterprise Edition
- Keep formatting marks in one span around links in rich text editor (merge request)
- Keep emphasis delimiters renderable in rich text editor markdown (merge request)
- Plan an empty Zoekt index when no project can be indexed (merge request) GitLab Enterprise Edition
- Match Duo Chat tool approval badges to tool results by id (merge request) GitLab Enterprise Edition
- Guard device OAuth confirm and unify admin warning (merge request)
- Preserve git log order in commit list date grouping (merge request)
- Hide Duo panel when Duo availability is never on (merge request) GitLab Enterprise Edition
- Add job-level retry to DAP session workload jobs (merge request) GitLab Enterprise Edition
- Keep the DAP session open when a Workhorse MCP tool call fails (merge request) GitLab Enterprise Edition
- Reject mismatched timestamps when creating a dismissed vulnerability (merge request) GitLab Enterprise Edition
- Fix date_bucket origin on Nullable ClickHouse columns (merge request)
- Verify legacy uploads on Geo secondaries by reading the file (merge request) GitLab Enterprise Edition
- Fix commit Advanced Search for Planner role (merge request) GitLab Enterprise Edition
- Stop the GraphQL tracer re-executing unexecuted queries (merge request)
- fix: Follow file renames on the commits page (merge request)
- Pass the subject root namespace to the Code Suggestions seat check (merge request) GitLab Enterprise Edition
- Bump gitlab-shell to 14.57.6 (merge request)
- Identify Orbit indexer requests without a user principal (merge request) GitLab Enterprise Edition
- Evaluate legacy approval rules for unenforceable policies (merge request) GitLab Enterprise Edition
- Skip IAM disabled log for non-IAM tokens (merge request)
- Fix ref cache searches during concurrent rebuilds (merge request)
- Distinguish deploy signals from indexer failures (merge request)
- Hide zero values in stacked column tooltips and fix legend contrast (merge request)
- Fix group milestone results in milestone search (merge request)
- Prevent changing the target branch of a merged MR (merge request)
- Scope credits-sorted usage users to the namespace hierarchy (merge request) GitLab Enterprise Edition
- Honor download mode for runner artifacts by @duewel1982 (merge request)
- Point identity-linking redirects at 2FA page (merge request)
- Check read_boundary instead of membership for token boundaries (merge request)
- Fix ability for admin_security_attributes and read_security_attribute (merge request) GitLab Enterprise Edition
- Ask questions in the thread from
ResolveWithDuoDropdownItem(merge request) GitLab Enterprise Edition - Fix Planner role in group and global merge request search (merge request)
- Sign chat tool requests from the resolved feature setting (merge request) GitLab Enterprise Edition
- Declare the webhook alert_status field as a String (merge request)
- Fix Workhorse hang when rejecting Geo SSH git requests (merge request) GitLab Enterprise Edition
- Return NULL from rate metrics when the denominator is zero (merge request)
- Ignore revoked UIDs when listing the identities of a GPG key by @jmrp (merge request)
- Cap the size of the workload job environment (merge request)
- Fix decision log header wrapping and spacing (merge request) GitLab Enterprise Edition
- Respect LFS rules when Commits API creates a branch (merge request)
- Share etag cache keys between scoped and unscoped URLs (merge request)
- Fix Pages deletion modal title and accessible label (merge request)
- Fixes an issue for printing a page with panels and layouts (merge request)
- Sanitize malformed tags in navigator.languages (merge request)
- Load first compare diff in file-by-file mode (merge request)
- Stop splitting milestone titles on commas in work items REST API (merge request)
- Backfill inventory filters table with traversal_ids (merge request) GitLab Enterprise Edition
- Validate numeric project IDs in get repository file by @MooSayed11 (merge request)
- Truncate flow descriptions in slash commands menu (merge request) GitLab Enterprise Edition
- Release the Rack env only after the response body is closed (merge request)
- Fix email confirmation for subgroup/project service accounts (merge request) GitLab Enterprise Edition
- Suppress progress note for risk classification flow (merge request) GitLab Enterprise Edition
- Support session artifact filters on the PostgreSQL path (merge request) GitLab Enterprise Edition
- Fix false value lookup in FilterEvaluator dig_value (merge request)
- Restrict Risk Classification flow to run only on MR creation (merge request) GitLab Enterprise Edition
- Resolve catalog item version for foundational flows (merge request) GitLab Enterprise Edition
- Reindex group level work items when their author is banned (merge request) GitLab Enterprise Edition
- Replace ambiguous Cancel session modal copy with Stop session (merge request) GitLab Enterprise Edition
- Put the PAT settings URL on its own line in expiry emails by @torben.buck (merge request)
- Strip the trusted flag from client-supplied MCP tools in Workhorse (merge request)
- Guard blob name in highlight mixin against null (merge request)
- Resolve tool aliases in the MCP list_tools allowed filter by @sjestonsingh (merge request)
- Keep feature library results visible during search (merge request)
- Clear the tool coverage status for a new scanner (merge request) GitLab Enterprise Edition
- Sync tracked context traversal_ids on group transfer (merge request) GitLab Enterprise Edition
- Fix prompt queue overriding approvals and leaking into new chats (merge request) GitLab Enterprise Edition
- Clear BatchLoader executor after GraphQL subscription updates (merge request)
- Hide Secrets manager sidebar item from users who cannot open the page (merge request) GitLab Enterprise Edition
- Fix v4 code suggestion requests sent to the AI Gateway (merge request) GitLab Enterprise Edition
- Fix omniauth_login_failed audit event streaming (merge request) GitLab Enterprise Edition
- Expire Flipper cache before Geo promotion mode check (merge request) GitLab Enterprise Edition
- Fix Secrets Manager entitlement gate failing open on CDot timeout (merge request) GitLab Enterprise Edition
- Do not count short-circuited requests as search errors (merge request)
- Restore the two-line clamp on the role selector (merge request)
- Fix memory distillation attribution to the MR author (merge request) GitLab Enterprise Edition
- Change-gate AI settings in group Duo settings form (merge request) GitLab Enterprise Edition
- Stop reporting include_attachments_context as an available feature (merge request) GitLab Enterprise Edition
- Skip tracked context lease inside open transactions (merge request) GitLab Enterprise Edition
- Serve Secrets Manager last-known-good entitlement on CDot 5xx (merge request) GitLab Enterprise Edition
- Request only the current model in the Code indexing queue (merge request) GitLab Enterprise Edition
- Create policy violations before scheduling MR preparation (merge request) GitLab Enterprise Edition
- Name the namespace as a repository's parent for IAM (merge request)
- Fix ClickHouse TTL compatibility with early 25.x releases (merge request)
- Give ?vue3 SFC copies their own hot-reload record id (merge request)
- Do not redirect beta users from secrets details (merge request) GitLab Enterprise Edition
- Respect num_context_lines in exact code search (merge request) GitLab Enterprise Edition
- Fix JavaScript path helpers for browsers without Array.at (merge request)
- Handle null filters in saved view updates by @ryo-whaletech (merge request)
- Fix "New item" button flow on group work items list for CE (merge request)
- Fix filter evaluator rejecting delegated hash payloads (merge request)
- Check read_boundary instead of membership for token boundaries (merge request)
- Update status category when a removed status is re-added (merge request) GitLab Enterprise Edition
- Fix inconsistent bold/muted styling on webhook URLs (merge request)
- Fix crash when shortcuts chunk fails to load (merge request)
- Scope tracked context lock and add lock-free fast path (merge request) GitLab Enterprise Edition
- Apply policy editor split widths only at lg container width (merge request) GitLab Enterprise Edition
- Geo: Add UNIQUE indexes for job_artifact_registry table (merge request) GitLab Enterprise Edition
- Render deployment release notes GFM when the release loads (merge request)
- Serialize CI_RUNNER_TAGS as valid JSON by @ryo-whaletech (merge request)
- Fix status filter dropping matching items (merge request) GitLab Enterprise Edition
- Fix GLQL copy contents for chart display types by @rob.hunt (merge request)
- Update traversal ids on inventory filters on group transfer (merge request) GitLab Enterprise Edition
- Fix merge request Advanced Search for Planner role (merge request) GitLab Enterprise Edition
- fix: Validate HTML entities in StringRangeMarker position mapping (merge request)
- Move Credits over time below the Spend credit tiles (merge request) GitLab Enterprise Edition
- Fix OAuth 2.0 URLs in the OpenAPI v3 spec (merge request)
- Fix JQL reserved keyword query (merge request) GitLab Enterprise Edition
- Trim the migration's comments to the repo's density rule (merge request)
- Skip a non-object zoekt_settings row instead of aborting the migration (merge request)
- Strip undeclared keys from application_settings.zoekt_settings (merge request) GitLab Enterprise Edition
- Return 408 for Elasticsearch timeouts on the search API (merge request) GitLab Enterprise Edition
- Render group level work item label notes against the group (merge request)
- Serialize default tracked context creation per project (merge request) GitLab Enterprise Edition
- Fix merge-train pipeline canceled on skip_merge_train race (merge request) GitLab Enterprise Edition
- Coerce nil import_sources to an empty array (merge request)
- Remove membership requirement from granular token authorization (merge request)
- Bugfix cross field validation (merge request) GitLab Enterprise Edition
- Attach deployment approvals to per-deployment copies of approval rules (merge request) GitLab Enterprise Edition
- Filter
flow_trigger_formflow listbox by search term (merge request) GitLab Enterprise Edition - Do not resolve abuse_payload_metadata for
SearchController#opensearch(merge request) - Preserve full board page title on load (merge request)
- Allow subgroups in Duo admin group membership access rules (merge request) GitLab Enterprise Edition
- Pass reasoned 403s through unchanged in send_duo_session_input (merge request) GitLab Enterprise Edition
- Fix overflowing deployments table on the release page (merge request)
- Fix orphaned uploads from vulnerability export FK cleanup (merge request) GitLab Enterprise Edition
- Send a correct instance_id for self managed and dedicated (merge request)
- Alert when batch review publishing fails (merge request)
- Render UNCHECKED merge status as the widget checking state (merge request)
- Allow ai_workflows tokens to read award emoji by @xingli.wu (merge request)
- Fix TooltipOnTruncate child target under Vue 3 (merge request)
- Stop reporting Rego parse refusals to Sentry (merge request) GitLab Enterprise Edition
- Retry initial indexing for repositories in failed state (merge request) GitLab Enterprise Edition
- Consider admin mode for agent user access authorizations by @gerardo-navarro (merge request)
- Avoid duplicate Arkose verify call for mixed-case emails (merge request) GitLab Enterprise Edition
- Strip draft prefix before title regex mergeability check (merge request)
- Cross-validate numeric project IDs in MCP add_branch by @ryo-whaletech (merge request)
- Enforce maximum attachment size on blob uploads (merge request)
- Surface top-level GraphQL error messages in the policy store UI (merge request) GitLab Enterprise Edition
- Fix inconsistent AI catalog list typography across pages (merge request) GitLab Enterprise Edition
- Match gitlab:db:sos schema dump file extension to its content (merge request)
- Improve table paste menu sizing (merge request)
- Skip expired SBOM scans when reusing cached scan results by @sjestonsingh (merge request) GitLab Enterprise Edition
- Let Enter and Tab through the suggestion popup with no highlighted item (merge request)
- Allow Premium DFW tenants to resolve policy scope linked groups (merge request) GitLab Enterprise Edition
- Skip fenced code blocks when isolating quick actions in RTE (merge request)
- Fix inconsistent spelling of canceled in session status (merge request) GitLab Enterprise Edition
- Convert blocking MR form params to booleans (merge request) GitLab Enterprise Edition
- Fix ability for admin_security_attributes and read_security_attribute (merge request) GitLab Enterprise Edition
- Fix framework deletion blocked by archived policy projects (merge request) GitLab Enterprise Edition
- Sign chat agent requests from the chat feature setting (merge request) GitLab Enterprise Edition
- Keep raw blob bytes out of checkpoint decode error (merge request) GitLab Enterprise Edition
- Copy the branch list before prepending the last commit branch (merge request)
- Reject non-object entries in the pipeline variables param (merge request)
- Recover Rapid Diffs Changes tab when MR preparation is missed (merge request)
- Pass the features variable to the work item convert mutation (merge request)
- Do not log a search count request that timed out (merge request)
- Evaluate compound SPDX expressions in license compliance (merge request) GitLab Enterprise Edition
- Fix comment template NumpadEnter click under Vue 3 (merge request)
- Reserve Zoekt indices above the critical watermark (merge request) GitLab Enterprise Edition
- Remove AI Catalog breadcrumb from Duo Agents Platform pages (merge request)
- Return success for a forced stop of a stopped environment (merge request)
- Fix Duo Chat code preview contrast in dark mode (merge request)
- Wait for the blob editor before switching edit mode tabs (merge request)
- Fix remote mirror hostname case validation by @ryo-whaletech (merge request)
- Record the approval patch ID from the asserted head SHA (merge request)
- Fix status_changed event not firing on board drag (merge request) GitLab Enterprise Edition
- Retry transient chunk failures in Gitlab::HttpIO (merge request)
- Resume mid-delta on the package metadata label path (merge request) GitLab Enterprise Edition
- Render inline blame in a CSS subgrid instead of an overlay (merge request)
- Tell the messaging adapter when a run fails or pauses (merge request) GitLab Enterprise Edition
- Skip the promote label modal when its mount point is absent (merge request)
- Fix dependency firewall drawer showing license text for all rule types (merge request) GitLab Enterprise Edition
- Fix hide comments doing nothing on repositioned diffs (merge request)
- fix: Return 503 when Gitaly is unavailable in Files API (merge request)
- Restore subtle empty row background in white diff theme (merge request)
- Return the errors payload from environment local mutations (merge request)
- Fix "New related item" action in drawer on boards (merge request)
- Fix copying HTML comments in the rich text editor (merge request)
- Skip timeago elements with an unparsable datetime (merge request)
- Job log: Small visual fixes (merge request)
- Wait for the blob editor before switching edit mode tabs (merge request)
- Only init empty project tabs that are on the page (merge request)
- Fix Duo Chat topic section spacing (merge request) GitLab Enterprise Edition
- Remove sweep_orphaned_mounted_uploads feature flag (merge request)
- Retry notes dual sharding key repair trigger migration (merge request)
- Fix custom-template pull mirrors after transient repository misses by @ryo-whaletech (merge request) GitLab Enterprise Edition
- Pass work item status name to flow trigger filters (merge request)
- Update the canvas width from the longest subject in the loaded commits (merge request)
- Avoid Sentry capture for expected attribute validation errors (merge request) GitLab Enterprise Edition
- Evaluate database_capture flag outside the query execution path (merge request)
- Scope inherited policies against their own configuration (merge request) GitLab Enterprise Edition
- Bind only declared props to GLQL field presenters (merge request)
- Match the Repositories nav item on its controller (merge request) GitLab Enterprise Edition
- Fix enum typo in pipeline_sources policy schema (merge request) GitLab Enterprise Edition
- Fix emoji search to normalize spaces, hyphens, underscores (merge request)
- Remove security_policy_target_branch_desync_detection feature flag (merge request) GitLab Enterprise Edition
- Only reload the merge request page from the Changes tab (merge request)
- Allow opening overflowed saved views in a new tab (merge request)
- Require update access to create closing work item relations (merge request)
- Move load balancing middleware above the rate limiter (merge request)
- Fix bulk closing work items timing out on group work items list (merge request)
- Always resolve the README preview html field (merge request)
- Return 429 and 503 for semantic search backend failures (merge request) GitLab Enterprise Edition
- Handle an Arkose script load failure while its payload loads (merge request) GitLab Enterprise Edition
- Fix doubled /v1 in Duo self-hosted endpoint probe (merge request) GitLab Enterprise Edition
- Keep cached list values when a work item widget has no data (merge request)
- Authorize
UserMergeRequestInteractionfor granular tokens (merge request) - Remove stylesheet link to a deleted error tracking page bundle (merge request)
- Fix vulnerability location URLs (merge request) GitLab Enterprise Edition
- Fixes a small issue for Firefox 115.40.0esr (Part II) (merge request)
- Guard object pool destruction against late joiners (merge request)
- Return 503 when no Zoekt node is available (merge request) GitLab Enterprise Edition
- Fix cross-project cherry-pick branch collisions by @ryo-whaletech (merge request)
- Persist epic date change system note for project-level issues (merge request) GitLab Enterprise Edition
- Stop the Zoekt planner reusing a node within a replica (merge request) GitLab Enterprise Edition
- Drop hard FK fk_634bc9f2e3 from snippet_repository_states (merge request)
- Render GLQL date buckets as date-only labels in tables and lists (merge request)
- Mount the math rendering alert before inline math blocks (merge request)
- Skip board list count updates for lists not in the cache (merge request)
- Render the DevOps adoption table before its data loads (merge request) GitLab Enterprise Edition
- Skip user cap radio setup when the cap input is absent (merge request) GitLab Enterprise Edition
- Default agent config folders when a project has no tree (merge request)
- Hide Pages deploy job link when the build is gone (merge request)
- Fix NoMethodError in expired-namespace policy unassign worker (merge request) GitLab Enterprise Edition
- Account for pending Work Item Types in limit validation by @ryo-whaletech (merge request) GitLab Enterprise Edition
- Show an alert when a protected environment update fails by @sjestonsingh (merge request) GitLab Enterprise Edition
- Track tab clicks on the trial Credits Dashboard views by @sjestonsingh (merge request) GitLab Enterprise Edition
- Expose every policy violation error code in the GraphQL enum by @sjestonsingh (merge request) GitLab Enterprise Edition
- Report an Artifact Registry outage inside the page, not as a 503 (merge request) GitLab Enterprise Edition
- Fix nil author in organization transfer audit event (merge request) GitLab Enterprise Edition
- Fix role updates in the direct members role drawer by @xingli.wu (merge request) GitLab Enterprise Edition
- Set the request IP before rate limiting resolves the user (merge request)
- Set SEARCH_MAX_DEPTH to 20 for the Advanced SAST C++ job by @sjestonsingh (merge request)
- Reject dashboard values missing from the flipped mapping (merge request)
- Delete part uploads before destroying dependency list exports (merge request) GitLab Enterprise Edition
- Skip Managed Settings initialization if there are pending migration by @brodock (merge request)
- Merge pasted list items into the list item under the cursor (merge request)
- Check auto-merge permission against resolved target branch by @bobby-nandigam (merge request)
- Stop forwarding listeners twice in frequent items wrappers (merge request)
- Reject auto_merge push option without merge permission by @bobby-nandigam (merge request)
- Fix organization scoping in REST API project list endpoints (merge request)
- Make GL_VSCODE_HOST configurable by @sushrut1058 (merge request) GitLab Enterprise Edition
Changed (230 changes)
- ToDo item: Add selected state background (merge request)
- Add sharding key to dast_site_tokens token unique index (merge request)
- Redesign the Admin area Orbit page (merge request) GitLab Enterprise Edition
- Replace the Orbit dashboard with the new shell and Overview tab (merge request) GitLab Enterprise Edition
- List security MCP tools only when they are licensed (merge request) GitLab Enterprise Edition
- Move the Orbit query editor into its own tab (merge request) GitLab Enterprise Edition
- Send SaaS promotion CTAs to checkout instead of trial (merge request) GitLab Enterprise Edition
- Use GlTable for Duo model selection feature tables (merge request) GitLab Enterprise Edition
- Grant auditors read access to security scan profiles (merge request) GitLab Enterprise Edition
- Mark
recommend_reviewers_assignas generally available (merge request) - Rename Fetch to Generate for recommended reviewers (merge request) GitLab Enterprise Edition
- Start a new Duo review on push only for DAP reviews (merge request) GitLab Enterprise Edition
- Replace unused boolean with unused enum argument in AttachWorker (merge request) GitLab Enterprise Edition
- Forward Orbit SDLC and code indexing phases in graph_status (merge request) GitLab Enterprise Edition
- Improve policy bot enforcement on failed ingestion (merge request) GitLab Enterprise Edition
- Simplify non-billable usage labels on the credits chart (merge request) GitLab Enterprise Edition
- Remove secrets_manager_paid_experience flag (merge request) GitLab Enterprise Edition
- Move group Governance page to /-/automate/governance (merge request) GitLab Enterprise Edition
- Link project names in the group scanner details list by @arjun40779 (merge request) GitLab Enterprise Edition
- Always emit Secrets Manager billable usage events (merge request) GitLab Enterprise Edition
- Add credits freshness caveat to DAP Impact tooltips (merge request) GitLab Enterprise Edition
- Remove Secrets Manager enrollment feature flags (merge request) GitLab Enterprise Edition
- Add security guidance and least-privilege example to flow YAML template by @hrlpavan (merge request) GitLab Enterprise Edition
- Convert GitlabSubscriptions::AddOn to a fixed items model (merge request) GitLab Enterprise Edition
- Remove dependency malware detection feature flag definition by @mawueli (merge request) GitLab Enterprise Edition
- Bump cluster management project template version (merge request)
- Clarify AI Catalog search scope by @arjun40779 (merge request) GitLab Enterprise Edition
- Feat: Add agentPresence to MR comments (merge request) GitLab Enterprise Edition
- Remove Secrets Manager enrollment feature flags (merge request) GitLab Enterprise Edition
- Show sole-owned groups in remove organization user modal (merge request)
- Move GitLab Observability from experiment to beta (merge request)
- Unlist the manage_pipeline MCP tool (merge request)
- Use the Developer flow for Convert to GitLab CI/CD (merge request) GitLab Enterprise Edition
- Rename the MCP tool-call session_id property to request_id (merge request)
- Enable software_development_flow_registry by default (merge request)
- Add H100 and H200 GPUs to Duo Self-Hosted hardware requirements by @UltChowsk (merge request)
- Collapse agent sessions widget when there are no sessions (merge request) GitLab Enterprise Edition
- ItemConsumersFinder & GraphQL support inheritance (merge request) GitLab Enterprise Edition
- Remove the billing_event_tracking feature flag (merge request)
- Migrate wiki sidebar width to a CSS variable (merge request)
- Store the created filter on Risk and Reviewers flow triggers (merge request) GitLab Enterprise Edition
- Add enum constraint to scope parameter in MCP search tool by @dev-Adhithiya (merge request)
- Extend post-trial status widget window to 45 days (merge request) GitLab Enterprise Edition
- Document restoring the OpenBao JWT audience (merge request) GitLab Enterprise Edition
- Swap primary key of vulnerability_identifiers to (id, partition_id) (merge request) GitLab Enterprise Edition
- Surface AiCatalogItemConsumerCreate warnings when enabling a flow (merge request)
- Document issue URLs for save_note by @duewel1982 (merge request)
- Add user state to seat-limit audit events by @duewel1982 (merge request) GitLab Enterprise Edition
- Tell the Data Analyst agent how to query the previous period (merge request) GitLab Enterprise Edition
- Mark the duoWorkflowWorkflows GraphQL query as generally available (merge request) GitLab Enterprise Edition
- Add live validation and immutability hint to secret name field (merge request) GitLab Enterprise Edition
- Add line change metrics to contributor graphs by @aleksandr-kotlyar (merge request)
- Remove the author header from drafts in the review drawer (merge request)
- Reword the vulnerability resolution alert title by @arjun40779 (merge request) GitLab Enterprise Edition
- Start fix_pipeline from MCP on the pipeline's branch and merge request (merge request) GitLab Enterprise Edition
- Use fuzzy searching in label widgets (merge request)
- Return 404 from Orbit skills routes for users without enabled namespaces (merge request) GitLab Enterprise Edition
- Enable Geo upload partition checksumming by default (merge request) GitLab Enterprise Edition
- Fix copy_metadata execution message to reflect what was actually copied by @amrmahdy461 (merge request)
- Tell the Data Analyst agent when dashboard data is unavailable (merge request) GitLab Enterprise Edition
- Show New project in groups with no projects (merge request)
- Stop counting the agent configuration file as required (merge request)
- Chore: Align Status Icons in agent_status_icon component (merge request) GitLab Enterprise Edition
- Move DisconnectGitAlternates call to Sidekiq worker (merge request)
- Grant metric image permissions through role YAML (merge request) GitLab Enterprise Edition
- Remove deprecate_scan_result_policies flag definition (merge request) GitLab Enterprise Edition
- Grant group Maintainers the default Secrets Manager permissions (merge request) GitLab Enterprise Edition
- Scope instance-level integration lookups to organization (merge request)
- Add small size to Pajamas alert action buttons (merge request) GitLab Enterprise Edition
- Remove deprecate_scan_result_policies from violations and workers (merge request)
- Increase maximum token_expires_at for runner tokens from 15 to 21 days (merge request) GitLab Enterprise Edition
- Work item index view: Update selected item background (merge request)
- Ask GitLab Duo for short, chat-style answers in Slack (merge request) GitLab Enterprise Edition
- Partition and rename the per-namespace billable usage table (merge request) GitLab Enterprise Edition
- Bump auto remediation MR limit to 30 (merge request) GitLab Enterprise Edition
- Remove security_report_related_pipelines feature flag (merge request) GitLab Enterprise Edition
- Increase the CI cache key file limit to 10 (merge request)
- Scope admin user badges to their area (merge request)
- Move ScanProfileStatus counter arithmetics to SQL (merge request) GitLab Enterprise Edition
- Move o11y service settings tool to admin area (merge request)
- Job log: Move troubleshoot button to panel header (merge request)
- Updates the plan limit default for ai flow_schedules (merge request)
- Remove tree_entries_filesystem_sort feature flag (merge request)
- Move note View session and Edit actions to overflow menu below md (merge request)
- Move Agentic Chat allow-list under Default model (merge request) GitLab Enterprise Edition
- Move pipeline header actions to panel header portal (merge request)
- Add positional argument to ScanProfiles::AttachWorker (merge request) GitLab Enterprise Edition
- Move group Governance page into the AI sidebar menu (merge request) GitLab Enterprise Edition
- Stop auto-opening the workplan panel after generation by @sjestonsingh (merge request) GitLab Enterprise Edition
- Add ai_workflows scope to work item write REST endpoints (merge request)
- Replace to-do dropdown filter with tabs and counts (merge request)
- Move the merge request reports tab from EE to CE (merge request)
- Update Session Widget List Linking (merge request) GitLab Enterprise Edition
- Sort stacked GLQL chart tooltip rows by value (merge request)
- Turn on MCP server for existing instances at GA (merge request)
- Merge request dashboard adjustments (merge request)
- Render review drawer drafts like notes in
PreviewItem(merge request) - Enable the pipeline creation logger by default (merge request)
- Default local file reads to allow, not ask (merge request) GitLab Enterprise Edition
- docs: Remove redundant archival-plan step from decision tree (merge request)
- Sync projects in bulk when a policy configuration is assigned (merge request) GitLab Enterprise Edition
- Hide filter tokens on organization admin users search bar (merge request)
- Remove cache_ci_build_trace_chunk_fog_connection feature flag (merge request)
- Change the any scanner option value to ANY (merge request) GitLab Enterprise Edition
- Chore: Remove Failed and Canceled replies on Session Notes (merge request) GitLab Enterprise Edition
- Add vue3_migration.yml to project importers (merge request)
- Redesign recommended reviewers sidebar group (merge request)
- Unfold the folded bar list segments from a Show all control (merge request)
- Remove work_item_delete_rate_limit feature flag (merge request)
- Move merge request actions to panel header (merge request)
- Enable MCP server by default for new groups (merge request) GitLab Enterprise Edition
- Feat: Update session bar copy (merge request) GitLab Enterprise Edition
- Feat: Cleanup, remove comment for session status (merge request) GitLab Enterprise Edition
- Include created_at attribute in file exports for offline transfer by @DhairyaMajmudar (merge request)
- Update keela to 0.5.0 (merge request)
- Use session-specific empty state illustration for agent sessions (merge request) GitLab Enterprise Edition
- Remove unused merge_request_metrics index (merge request)
- Serve archived job logs from the job trace API through Workhorse (merge request)
- Use tertiary buttons in reviewer sidebar actions (merge request) GitLab Enterprise Edition
- Show Slack logo for GitLab for Slack app integration (merge request)
- Migrate two-factor authentication sign-in screens to Vue (merge request)
- Rephrase URL sentences in token and SSH key plain-text emails by @torben.buck (merge request)
- Update gitlab_secret-detection gem to v0.46.0 (merge request) GitLab Enterprise Edition
- Move cost per merged change above credits on DAP Impact Overview (merge request) GitLab Enterprise Edition
- Page bar list rows instead of folding them into Other (merge request)
- Show state badge in work item sticky header for all states (merge request)
- Raise ScanProfileStatus UpdateWorker concurrency limit (merge request) GitLab Enterprise Edition
- Rework AI model selection bulk update UI (merge request) GitLab Enterprise Edition
- Run
recommend_reviewersflow when a merge request is created (merge request) GitLab Enterprise Edition - Default enable reindex_malware_advisory_occurrence_refs (merge request) GitLab Enterprise Edition
- Confirm before replacing direct with inheritance (merge request) GitLab Enterprise Edition
- Add tooltip hint for archived labels in issue and MR lists by @nwittstruck (merge request)
- Rework Duo panel trial and access-denied empty states (merge request) GitLab Enterprise Edition
- Add sortable title sub-field and title_asc/title_desc for work items (merge request) GitLab Enterprise Edition
- Run
CleanupAiSuggestedReviewersWorkeronMergeRequests::ClosedEvent(merge request) GitLab Enterprise Edition - Align organization user type terminology in add users modal (merge request)
- fix(ui): Replace deprecated design tokens in sidebar.scss by @kkier (merge request)
- Document the quick action rule on the save_work_item description by @sjestonsingh (merge request)
- Replace vulnerability file content with data flow (merge request) GitLab Enterprise Edition
- Unlist the get_merge_request_conflicts MCP tool (merge request)
- Add bitmap columns to sec inventory_filters table (merge request)
- Small adjustments to user popover (merge request)
- Update dependency auto-deploy-image to v2.148.0 (merge request)
- Migrate Workhorse S3 uploads to AWS transfermanager (merge request)
- Tidy the DAP Impact dashboard layout (merge request) GitLab Enterprise Edition
- Add model-level validation for events sharding key (merge request)
- Simplify Dependency Firewall rule descriptions (merge request) GitLab Enterprise Edition
- Convert Session intensity by tier panel to GLQL (merge request)
- Show only the busiest capabilities on the DAP heat map (merge request)
- Adds reschedule_once to ScanProfileStatus UpdateWorker deduplication (merge request) GitLab Enterprise Edition
- Disable transaction_timeout where statement timeouts are lifted (merge request)
- Increase affected_range limit on pm_affected_packages to 1024 (merge request)
- Stop collapsing the metrics widget when a reports tab exists (merge request)
- Upgrade Openbao version to 2.6.2 (merge request) GitLab Enterprise Edition
- Replace infinite scroll with Load more button in logs list (merge request) GitLab Enterprise Edition
- Polish the add and edit self-hosted model form (merge request) GitLab Enterprise Edition
- Deprecate users.static_object_token column (M-phase) (merge request) GitLab Enterprise Edition
- Reset ci_lint_limit_per_user to unlimited (merge request)
- Chart DAP Impact share of users and sessions by tier (merge request) GitLab Enterprise Edition
- Give risk assessment confidence its own tier enum (merge request) GitLab Enterprise Edition
- Add distinct alert for bulk edit GraphQL timeouts (merge request)
- Group Admin access pages under an Access category (merge request)
- Remind about escalation policies after creating a rotation by @sjestonsingh (merge request) GitLab Enterprise Edition
- Remove
recommend_reviewers_flow_v3feature flag (merge request) - Add extensions codes to aggregation GraphQL errors (merge request)
- Declare admin assignable_when conditions on granular token consumers (merge request)
- Cascade membership removal on organization user removal (merge request)
- Persist event source to source_type on duo workflow creation (merge request) GitLab Enterprise Edition
- Send the request's User-Agent on backend Snowplow events (merge request)
- Redirect org-scoped Your Work dashboards to global path (merge request)
- Show real user tiers on the DAP Impact heat map (merge request)
- Replace "Unknown" progress label in background migrations UI (merge request)
- Sync licenses and advisories for Premium via dependency firewall (merge request) GitLab Enterprise Edition
- Scheduling async indexes to support TC BBM (merge request)
- Remove agentic_foundational_flow_tool feature flag (merge request)
- Merge request recommended reviewers hierarchy adjustments (merge request) GitLab Enterprise Edition
- Let Duo sessions resume from the approval statuses (merge request) GitLab Enterprise Edition
- Move New button next to title in Explore Catalog (merge request) GitLab Enterprise Edition
- Consolidate Secrets Manager billing link text and target (merge request) GitLab Enterprise Edition
- Update SPDX vendor file to 3.29.0 (merge request)
- Make the explore dashboard filter bar sticky (merge request) GitLab Enterprise Edition
- Report typed authorization errors in aggregation engine (merge request)
- Remove organization scoping from member invite search (merge request)
- Productize whats_new_placement experiment candidate (merge request)
- Refactor job sidebar to use shared sidebar styling (merge request)
- Add rollout safeguards for session credits ingestion (merge request) GitLab Enterprise Edition
- Redirect to Project when duplicating item in Explore (merge request) GitLab Enterprise Edition
- Remove experiment tag for BulkSetVulnerabilityFindingsDueDates (merge request) GitLab Enterprise Edition
- Keep pipeline warnings in memory instead of the database (merge request)
- Split the MCP 403 message by denial reason (merge request)
- Auto-paginate GLQL analytics charts past the 100-row page (merge request)
- Remove allow/deny toggle from DFW license rule UI (merge request) GitLab Enterprise Edition
- Clarify reply delivery in Developer mention conversations (merge request) GitLab Enterprise Edition
- Improve UX copy for code review template project (merge request) GitLab Enterprise Edition
- Gate Siphon-dependent analytics engines on replication (merge request) GitLab Enterprise Edition
- Suppress the progress note for
RecommendReviewers(merge request) GitLab Enterprise Edition - Remove the placeholder owner for mirrored dynamic apps (merge request)
- Chore: Move sessions filter token helper to util (merge request) GitLab Enterprise Edition
- Convert triggers list from table to cards (merge request) GitLab Enterprise Edition
- Refactor duo cascading defaults into a single data-driven method (merge request) GitLab Enterprise Edition
- Add json output to geo tools rake task cleanup_check (merge request) GitLab Enterprise Edition
- Enable the incremental checkpoint read gates by default (merge request) GitLab Enterprise Edition
- Bump sarif full_description and message limits (merge request) GitLab Enterprise Edition
- Remove fix_minute_contention feature flag (merge request) GitLab Enterprise Edition
- Graduate member_role branch protection GraphQL fields to stable (merge request) GitLab Enterprise Edition
- Remove deprecate_scan_result_policies from approval enforcement (merge request) GitLab Enterprise Edition
- Remove bail_flow_trigger_on_unsupported_resource feature flag (merge request) GitLab Enterprise Edition
- AI panels restructuring (merge request)
- Sync organization_id to CI mirror tables (merge request)
- Render the DAP Impact new vs returning panel as a bar chart (merge request) GitLab Enterprise Edition
- Requeue backfill of model features access levels (merge request)
- Remove DiffNotesImporter and single_endpoint_notes_import branching (merge request)
- Exclude per-site migration bookkeeping from the Geo LR publication (merge request) GitLab Enterprise Edition
- Update policy store policies through the GraphQL mutation (merge request) GitLab Enterprise Edition
- Update the test embedding model service (merge request) GitLab Enterprise Edition
- Hide deprecated Slack integration from the settings list (merge request) GitLab Enterprise Edition
- Added rate limit handling in GHES imports (merge request)
- Rename More features nav item to Feature catalog (merge request)
- Trigger Orbit auto-index on settings update (merge request) GitLab Enterprise Edition
- Advertise required scope in MCP WWW-Authenticate challenge (merge request) GitLab Enterprise Edition
- Ensure markdown extensions when opening the live preview by @skkzsh (merge request)
- Declare SaaS and self-managed assignable_when conditions (merge request)
- Declare assignable_when conditions on the admin token API (merge request)
- Declare assignable_when conditions on system hook consumers (merge request)
- Declare assignable_when conditions on Geo granular token consumers (merge request)
- Declare assignable_when conditions on CI granular token consumers (merge request)
- Render the DAP Impact users by activity panel as a bar list (merge request) GitLab Enterprise Edition
- Remove static concurrency_limit from scan result policy workers (merge request) GitLab Enterprise Edition
- Redirect the replicable details page when replication is disabled by @sjestonsingh (merge request) GitLab Enterprise Edition
- Extract Gitlab::Mfe into gems/gitlab-mfe (merge request)
Deprecated (3 changes)
- docs: Correct the cancel merge when pipeline succeeds contract by @jmrp (merge request)
- Mark get_pipeline_jobs and get_merge_request_diffs unlisted (merge request)
- Unlist get_merge_request_commits and get_merge_request_pipelines (merge request)
Removed (15 changes)
- Clean up change_dap_land_default_credits experiment (invalidated) (merge request)
- Remove superseded secretPermission GraphQL mutations (merge request) GitLab Enterprise Edition
- Remove aiMetricsBasic GraphQL field (merge request) GitLab Enterprise Edition
- Remove sbom_scan_malware_findings feature flag by @mawueli (merge request)
- Remove o11y_settings_access flag and gated settings page (merge request)
- Retire the legacy blame page actions and routes (merge request)
- Remove CheckParity from ai_harness doctor tool (merge request)
- Drop abuse_report_user_mentions table (merge request)
- Remove EnabledFoundationalFlowCheckResult model (merge request) GitLab Enterprise Edition
- Remove the Security Manager New badge (merge request)
- Remove reverse-sync trigger and FKs from archived MR diff files (merge request)
- Remove organization-scoped Duo flow callback registration API (merge request) GitLab Enterprise Edition
- Remove the feature library modal's feedback link (merge request)
- Drop public column from ai_catalog_items (merge request)
- Remove views field from the customizable dashboard GraphQL type (merge request) GitLab Enterprise Edition
Security (45 changes)
- Restrict Duo Agent Platform job logs to Developer and above (merge request)
- Use constant-time comparison for alert webhook tokens (merge request)
- fix: Use named subject to fix failing Rubocop
- Stop direct_access from issuing a Duo Workflow Service token
- Remove admin compliance pipeline config from custom role
- Prevent commit authors from approving merge requests
- Escape note body in ConversationContextBuilder
- Audit log protected environment approval rule reassignment
- Bump GITLAB_PAGES_VERSION to 1303468145
- Enforce granular token boundary on import target namespaces
- Authorize granular token against resolved integration and work item parent
- Require CI/CD admin ability to change auto_rollback_enabled
- Build merge request header URLs without the request host
- External authorization bypass: legacy epic content leaks via GraphQL group.workItem
- security: Anchor raw ref SHA match to start of string
- Enforce package protection rules on npm dist-tag delete
- Authorize report artifacts by viewer for accessibility and codequality
- Enforce granular token group boundary on project label edits
- Security fix workload ci pipeline vulnerability
- Fix cascading auth skip on work item hierarchy widget
- Fix cascading auth skip on merge request discussions
- Fix DNS rebinding SSRF across all import features
- Fix cascading auth skip on work item notes widget discussions
- Enforce a disabled package registry set through the API
- Map rich line positions when markup is present
- Require read_code to read ciConfigPathOrDefault in GraphQL (merge request)
- Update gitaly version
- Apply incident visibility rules to metric image reads (merge request) GitLab Enterprise Edition
- Update sidekiq-cron to 2.4.0 by @jarv-gitlab (merge request)
- Prevent downgraded incident authors from managing metric images by @snarayanan_gl (merge request) GitLab Enterprise Edition
- Enforce read_build_trace on Duo job trace paths
- Bound compiled size of CI rules regexp patterns
- Fix authorization bypass in MemberRole.dependentSecurityPolicies
- Restrict mcp scope auth to routes with an mcp route setting
- Resolve Duo Workflow tool governance from the executed workflow and bind the token to it (#605431)
- Delete orphaned pipeline execution schedules on project transfer
- Reject traversal segments in diff file URLs
- Hide private child items in Epic API
- Authorize GraphQL CiJob.trace with read_build_trace
- Fix thread-safety race in MCP aggregated tool instances
- Prevent user resolution downgrade in bulk and third-party importers
- Filter API keys from LLM logs by @shreychen (merge request) GitLab Enterprise Edition
- Bind workplan resume tokens to foundational flow ID (merge request) GitLab Enterprise Edition
- Update GitLab Elasticsearch Indexer to 5.14.14 (merge request)
- Guard regexp compilation in CI rules clauses
Performance (92 changes)
- Speed up the PostgreSQL group read of AI usage events (merge request) GitLab Enterprise Edition
- Remove batch_preload_pipeline_job_associations feature flag (merge request)
- Remove web_hook_log_insert_without_transaction feature flag (merge request)
- Check protected branch before reading CODEOWNERS (merge request) GitLab Enterprise Edition
- Use array form for single workflow blob thread_ts reads (merge request) GitLab Enterprise Edition
- Group CI Lint builds by stage once to avoid redundant calls (merge request)
- Fix N+1 queries in
project.aiFlowTriggers(merge request) GitLab Enterprise Edition - Remove the GLQL dashboard panels in reading order flag (merge request) GitLab Enterprise Edition
- Enqueue the widget mergeability check instead of running it inline (merge request)
- Speed up roadmap rendering when milestones are shown (merge request) GitLab Enterprise Edition
- Skip highlight cache when selecting AI reviewable diff files (merge request) GitLab Enterprise Edition
- Build pipeline hook data lazily for flow triggers (merge request) GitLab Enterprise Edition
- Upload external diffs before the MergeRequestDiff save transaction (merge request)
- Remove the suggestion_highlight_uses_note_diff_file flag (merge request)
- Remove approval_rules_finalize_bulk_copy_approvers feature flag (merge request) GitLab Enterprise Edition
- Remove the approval_rules_finalize_shorter_transaction flag (merge request) GitLab Enterprise Edition
- Remove merge_request_metrics_outside_merge_transaction feature flag (merge request)
- Fix N+1 and version over-fetch in getCatalogResources (merge request)
- Preload merge request authors for project pipelines (merge request)
- Share group and policy configurations across approver batches (merge request) GitLab Enterprise Edition
- Preload
latest_merge_request_diffforheadPipeline(merge request) - Prune security_findings partition in has_vulnerabilities check (merge request) GitLab Enterprise Edition
- Skip the statistics refresh when nothing transitioned (merge request) GitLab Enterprise Edition
- Reuse the loaded commit in
CommitSignature#verification_status(merge request) - Batch lastDuoMessage across GraphQL pages (merge request) GitLab Enterprise Edition
- Reduce example count in processor (merge request) GitLab Enterprise Edition
- Remove unnecessary committer batch-load from mergeability fields (merge request) GitLab Enterprise Edition
- Add default analyze_interval for partitioned tables (merge request)
- Batch group lookups for inherited CI variables (merge request)
- Skip unused diff commits preload for MR approval fields (merge request) GitLab Enterprise Edition
- Avoid re-fetching issues by id for board list counts (merge request)
- Default enable member prune authorizations refresh flag (merge request)
- Reduce example count in all_policies_finder (merge request) GitLab Enterprise Edition
- Avoid loading all project members for bulk permission checks (merge request)
- Raise the GLQL dashboard request concurrency to 8 (merge request)
- Use set lookups for dropped identifier resolution (merge request) GitLab Enterprise Edition
- Reduce example count in Geo registries update mutation spec (merge request)
- Decode each checkpoint blob once per list page (merge request) GitLab Enterprise Edition
- Avoid loading all MR commits in cross-reference guard by @philstutz (merge request)
- Pass checkpoint blob thread_ts chains as one array (merge request) GitLab Enterprise Edition
- Add a channels filter to the checkpoint list endpoint (merge request) GitLab Enterprise Edition
- Raise the ClickHouse aggregation page size cap to 500 (merge request) GitLab Enterprise Edition
- Load GLQL dashboard panels half a viewport ahead (merge request) GitLab Enterprise Edition
- Speed up assignee and reviewer pickers for Duo service accounts (merge request) GitLab Enterprise Edition
- Skip charset detection where it cannot change the diff outcome (merge request)
- Create MCP audit event index asynchronously (merge request)
- Preload state transition authors for security findings (merge request) GitLab Enterprise Edition
- Remove the defer offscreen GLQL dashboard panels flag (merge request) GitLab Enterprise Edition
- Size GLQL aggregated pages from the backend's page cap (merge request) GitLab Enterprise Edition
- Raise the ClickHouse aggregation page size cap to 250 (merge request) GitLab Enterprise Edition
- Share the Duo seat lookup within a request (merge request) GitLab Enterprise Edition
- Reduce example count in nuget_project_packages (merge request)
- Reduce example count in integrations (merge request)
- Memoize policy class maps during Orbit redaction batches (merge request) GitLab Enterprise Edition
- Memoize ActiveContext Elasticsearch and OpenSearch clients (merge request)
- Reuse the Code Climate schema when validating degradations (merge request)
- Raise the GLQL dashboard request concurrency to 6 (merge request)
- Preload milestone parents in work items REST group listing (merge request)
- Read artifact archives through ranged requests in get_artifact_file (merge request)
- Use loaded approval rules in the security policy merge check (merge request) GitLab Enterprise Edition
- Cache the high limit warning in
RepositoryLimit::AlertComponent(merge request) - Add runtime limiter to ProjectComplianceEvaluatorWorker (merge request) GitLab Enterprise Edition
- Preload the work item owner project for the flows list (merge request) GitLab Enterprise Edition
- Run GLQL trend comparisons alongside the main query (merge request)
- Accept prefixed resource header in GraphQL ETag router by @deviavir (merge request)
- Skip queued GLQL requests from unmounted resolvers (merge request)
- Preload artifact jobs when storing security scans (merge request) GitLab Enterprise Edition
- Batch policy loads for the Duo workflows GraphQL list (merge request) GitLab Enterprise Edition
- Derive aggregation count from the last page (merge request) GitLab Enterprise Edition
- Add partial index for MCP audit events on group_audit_events (merge request)
- Preload job artifacts in the pipeline jobs resolver (merge request)
- Limit has_timestamps? to reading the header prefix (merge request)
- Remove bulk_stick for safety net project_authorization refresh (merge request)
- Preload the tracked context when comparing findings (merge request) GitLab Enterprise Edition
- Pool marshal buffers for Duo Workflow action writes (merge request)
- Remove the unused policy_violation field from the cached MR widget (merge request) GitLab Enterprise Edition
- Skip trace stream loading when coverage regex is absent (merge request)
- Index runner owner project lookup on (runner_id, id) (merge request)
- Index mirrors on first sync only, not every update (merge request) GitLab Enterprise Edition
- Batch GraphQL containerRepositoriesCount to avoid N+1 (merge request)
- Preload work item and merge request rows for the flows list (merge request) GitLab Enterprise Edition
- Shorten the database-health defer delay for messaging turns (merge request) GitLab Enterprise Edition
- Preload system_note_metadata in the GraphQL notes resolver (merge request)
- Match existing SBOM components on their organization (merge request) GitLab Enterprise Edition
- Reduce OpenBao requests when loading the secrets page (merge request) GitLab Enterprise Edition
- Batch vulnerability identifier upserts during ingestion (merge request) GitLab Enterprise Edition
- Highlight suggestions without a Gitaly compare per discussions load (merge request)
- Raise sec database health defer delay to 5 minutes (merge request) GitLab Enterprise Edition
- Enqueue build hooks with a build id instead of the payload (merge request)
- Speed up filtered vulnerability CSV export enqueue (merge request) GitLab Enterprise Edition
- Remove the
use_cte_for_label_filterfeature flag (merge request) - Set analyze_interval on Security::Finding partitions (merge request)
Other (180 changes)
- Consolidate Secrets Manager entitlement selections into fragment (merge request) GitLab Enterprise Edition
- Add drop_reason column to duo_workflows_workflows (merge request) GitLab Enterprise Edition
- Update AuditLog spec fixtures for 3-level OpenBao paths by @hrlpavan (merge request)
- Remove resolve_discussion_with_duo feature flag (merge request) GitLab Enterprise Edition
- Add project_visibility_level to the main index mapping (merge request) GitLab Enterprise Edition
- Extract AttachmentChip from the composer attachment previews (merge request) GitLab Enterprise Edition
- Scope system hooks REST API by organization (merge request)
- Regenerate RuboCop TODO files (merge request)
- Remove secrets_manager_denial_telemetry flag (merge request) GitLab Enterprise Edition
- Extract billing event instance identity (merge request) GitLab Enterprise Edition
- Move findComponent helpers to top of pipeline_editor_tabs_spec.js by @hrlpavan (merge request) GitLab Enterprise Edition
- GA malware advisory docs and drop malware GraphQL experiment status (merge request)
- Bump Elasticsearch schema versions and reindex affected documents (merge request) GitLab Enterprise Edition
- Remove the homepage pipelines widget experiment (merge request)
- Remove secrets_manager and group_secrets_manager flags (merge request) GitLab Enterprise Edition
- Finalize BBM SyncScanResultPolicies (merge request)
- Finalize BBM BackfillMcpServerEnabled (merge request)
- Remove unused attr_reader Epics::TransferService#epic_created_events (merge request)
- Indent curl continuation lines in Sidekiq queues API docs by @tambochimp (merge request)
- Remove the CI partitioning routing analyzer (merge request)
- Remove security_policies_malware_attribute feature flag (merge request) GitLab Enterprise Edition
- Remove vulnerability_malware_detection feature flag (merge request)
- Remove bso_minimal_access_fallback feature flag (merge request) GitLab Enterprise Edition
- Remove orbit_foundational_agent feature flag (merge request) GitLab Enterprise Edition
- Remove unused delegation Packages::PackageFile#debian_file_type (merge request)
- Show "Raw text search not supported" in repositories filter bar by @anishisbusy (merge request)
- Remove unused scope EE::Project.with_security_reports_stored (merge request) GitLab Enterprise Edition
- Remove unused EE::UserPreference#no_eligible_duo_add_on_assignments? (merge request)
- Add consecutive_auth_failures to import_sync_repositories (merge request)
- Remove unused Admin::PlansFinder and run plan limits 404 specs on CE by @dev-Adhithiya (merge request)
- Clean up bigint conversion for ci_sources_pipelines (merge request)
- Add database health indicator docs (merge request)
- Rename development_analytics product group to development_health (merge request)
- Remove mark_mergeability_checking_in_worker feature flag (merge request)
- Update gitlab-glaz to 2.1.0 (merge request)
- Log organization_id in integration workers and services (merge request)
- Remove migrated AI infrastructure columns from ai_settings (merge request)
- Add a table recording generated usage exports (merge request) GitLab Enterprise Edition
- Fix non-auto-correctable Naming/HeredocDelimiterNaming offenses by @JonstonChan (merge request)
- Remove ai_gateway_multi_default_models and duo_workflow_stickiness FFs (merge request) GitLab Enterprise Edition
- Extract the preferences Integrations section into its own Vue app (merge request)
- Backfill ai_governance_sessions from existing Duo workflows (merge request) GitLab Enterprise Edition
- Remove duo_ui_next feature flag (merge request) GitLab Enterprise Edition
- Updating Topology Service Client Gem to ba1d221 (merge request)
- Prepare async unique index on vulnerability_occurrence_identifiers (merge request)
- Remove knowledge_graph and knowledge_graph_infra feature flags (merge request)
- Sync issues bigint indexes batch two (merge request)
- Add queueing history projection to siphon_p_ci_builds (merge request)
- Remove unused method AvatarsHelper#avatar_without_link (merge request)
- Point MCP spec guidance at the token clients actually send (merge request)
- Squash database migrations up to v18.11.0-ee (merge request)
- Remove editor_sticky_table_headers feature flag (merge request)
- Remove unused scope PoolRepository.by_source_project (merge request)
- Finalize BBM RenameWriteWorkItemPermissionInGranularScopes (merge request)
- Remove orbit_enroll_namespace feature flag (merge request) GitLab Enterprise Edition
- fix(code-review): Backfill diff commits missed by partitioning (merge request)
- Enable work_item_features_field by default (merge request)
- Add parent_workflow_id to duo_workflows_workflows (merge request)
- Remove avoid_branch_names_cache feature flag (merge request)
- Add needs_archival exclusion (merge request)
- Add seat link series and coverage for the billable usage export (merge request) GitLab Enterprise Edition
- Re-add ai_governance_session_id to ClickHouse ai_audit_events (merge request) GitLab Enterprise Edition
- Remove unused delegations on Packages::Debian::Package (merge request)
- Remove orbit_user_preference feature flag (merge request)
- Remove sync_malware_advisories feature flag (merge request) GitLab Enterprise Edition
- Remove cvs_malware_advisories feature flag (merge request) GitLab Enterprise Edition
- Remove ingest_malware_advisories feature flag (merge request) GitLab Enterprise Edition
- Build the ZenTao issues pages under Vue 3 behind a flag by @otutukingsley (merge request)
- Drop enabled_foundational_flow_check_results table (merge request)
- Add unique index for org integration defaults (merge request)
- Remove unused constant RESPAWN_WAIT_TIME (merge request)
- Remove unused delegates Event#note_title and #design_title (merge request)
- Remove unused attribute DraftNotes::CreateService#in_draft_mode (merge request)
- Remove unused method Ci::JobArtifact.artifacts_size_for (merge request)
- Remove unused method RemoteMirror#update_failed? (merge request)
- Add heading size and label description options to shared inputs (merge request)
- Regenerate keela baseline for 0.5.0 deduplication (merge request)
- Make placeholder labkit rate-limit rules use callable zero limits (merge request) GitLab Enterprise Edition
- Remove the Service Desk project key address slug claims flag (merge request)
- Remove end_secrets_manager_beta_program feature flag (merge request) GitLab Enterprise Edition
- Improve projects membership query performance (merge request)
- Remove unused method Ci::Runner#fallback_owner_project (merge request)
- Make patch-package patches invalidate asset caches and run specs (merge request)
- Remove unused scope PagesDomain.instance_serverless (merge request)
- Rename backend risk classification strings to risk assessment (merge request) GitLab Enterprise Edition
- Remove seat data syncing worker job instances (deprecation step M+1) (merge request)
- Give the secrets read billing emit its own idempotency marker (merge request) GitLab Enterprise Edition
- Remove the ratelimiting_include_plan_info flag (merge request)
- Fix two malformed i18n namespace prefixes (merge request) GitLab Enterprise Edition
- Remove inline_blame feature flag (merge request)
- Remove unused scope DesignManagement::Design.for_reference (merge request)
- Rename frontend risk classification strings to risk assessment (merge request) GitLab Enterprise Edition
- Add BBM to backfill Duo Workflow checkpoint headers and blobs (merge request)
- Remove dap_schema_auto_tool_choice feature flag (merge request) GitLab Enterprise Edition
- Fix undercoverage error (merge request) GitLab Enterprise Edition
- Remove mr_throughput_clickhouse_data_source feature flag (merge request)
- Use PascalCase for i18n namespaces containing spaces (merge request)
- Transfer ai_catalog_item_version_dependencies with organization by @sjestonsingh (merge request) GitLab Enterprise Edition
- Build the Jira pages under Vue 3 behind a flag by @otutukingsley (merge request)
- Allow OAuth-connected repos without installation xid (merge request)
- Remove ci_reject_yaml_tags_in_inputs and document tag behavior (merge request)
- Add patch guarding classList in GlFilteredSearch blur handler (merge request)
- Remove tooltip-on-truncate from the pipeline ref name (merge request)
- Remove security_attributes_policy_scope feature flag (backend) (merge request) GitLab Enterprise Edition
- Backfill organization_id on CI mirror tables (merge request)
- Bump gitlab-labkit to 5.2.0 (merge request)
- Add import_sync database tables and models (merge request)
- Drop readme columns from catalog_bundled_resource_versions (merge request)
- Rename custom_roles_for_protected_branches_enabled key (merge request) GitLab Enterprise Edition
- Delete orphaned group-level rows from scim_oauth_access_tokens (merge request)
- Add license checksum claim to the Orbit JWT (merge request) GitLab Enterprise Edition
- Move organization owner role sync to CE (merge request)
- Stop writing CLAUDE.md in the principles distiller (merge request)
- Update IAM gRPC Client Gem to 0a44f0f (merge request)
- Update stage and group metadata for Duo access control docs (merge request)
- Add rake task to classify dead-shard pool members (merge request)
- Remove ignore_column for ci_max_artifact_size_environment_key (merge request)
- Persist billable usage locally on air-gapped instances (merge request) GitLab Enterprise Edition
- Name the autocomplete Global Search SLI target (merge request)
- Use trees-first filesystem sort for repository tree entries (merge request)
- Remove tmp bigint FK and index for deployment_id (merge request)
- Update stage and group metadata for AI reorg batch 3 (merge request)
- Remove use_vertex_codestral_code_completion flag (merge request) GitLab Enterprise Edition
- Set p_ci_build_trace_metadata to detach archived partitions (merge request)
- Extend Mcp/UseGraphqlQueryFile to cover ee/app/services/mcp/tools (merge request)
- Remove unused constant Admin::JobsController::BUILDS_PER_PAGE (merge request)
- Remove the SecurityManagerConfig class (merge request)
- Remove unused scope Packages::BuildInfo.pluck_pipeline_ids (merge request)
- Remove unused method Namespace#any_project_with_pages_deployed? (merge request)
- Regenerate RuboCop TODO files (merge request)
- Mark 20260216152309 as obsolete (merge request) GitLab Enterprise Edition
- Add a database default for project_authorizations.is_unique (merge request)
- Drop reverse triggers added during merge_request_diff_commits swap (merge request)
- Remove project_access_token_upgrade_card feature flag (merge request) GitLab Enterprise Edition
- Remove unused roadmapShellEl from roadmap list sections (merge request) GitLab Enterprise Edition
- Remove Security Manager gate from access name helper (merge request)
- Remove Security Manager visibility gate from GraphQL enums (merge request)
- Remove Security Manager gate from access options (merge request)
- Remove Security Manager guard from members scope (merge request)
- Use server-built path for inline blame prior-blame link (merge request)
- Remove group_access_tokens_premium_offer feature flag (merge request) GitLab Enterprise Edition
- Remove Security Manager frontend feature flag gate (merge request)
- Remove Security Manager guards from add_security_manager (merge request)
- Add deletion-scheduled backlog metric (merge request)
- Remove the six labkit rack cohort feature flags (merge request)
- Attribute approve_merge_request SLI errors from the service result (merge request)
- Add bigint index on deployment_merge_requests to fix FK removals (merge request)
- Remove skip_pipelines_for_mirror_first_sync feature flag (merge request)
- Roll out backend work item task list toggling (merge request)
- Remove legacy vulnerability details page (merge request) GitLab Enterprise Edition
- Remove custom_roles_for_protected_branches feature flag (merge request) GitLab Enterprise Edition
- Prepare issues bigint indexes batch two (merge request)
- Remove generated_ref_commits_for_automatic_rebase feature flag (merge request)
- Swap issues bigint columns batch one (merge request)
- Remove merge_request_refresh_batched_commit_lookup feature flag (merge request)
- Remove merge_request_refresh_skip_diff_commit_preload feature flag (merge request)
- Remove discard_stale_mergeability_verdicts feature flag (merge request)
- Docs: clarify MRAP target-branch comparison pipeline selection (merge request)
- Roll out the pipeline Security tab under vue3_migrate_pipelines (merge request)
- Add a partitioned table for pipeline processing data (merge request)
- Publish Orbit REST API endpoints in OpenAPI spec (merge request) GitLab Enterprise Edition
- Clarify encoding behavior in repository files API docs (merge request)
- Remove the duo_workflow_incremental_checkpoints feature flag (merge request) GitLab Enterprise Edition
- Add missing dedup and pause_control attributes to ActiveContext workers (merge request) GitLab Enterprise Edition
- Collapse consecutive stubs into receive_messages (merge request)
- Remove redundant type: :component metatag from component specs (merge request)
- Remove unused scope Nuget::Package.without_nuget_temporary_name (merge request)
- Update GraphQL API reference documentation (merge request)
- Add plumbing to resume a server-side messaging flow (merge request) GitLab Enterprise Edition
- Validate deployment_merge_requests bigint foreign keys (merge request)
- Fix flaky protected branches code owner feature specs (merge request)
- Remove project bot authorization refresh priority feature flag (merge request)
- Add index on namespace_details.deletion_scheduled_at (merge request)
- Remove unused method ProjectGroupLink#owner_access? (merge request)
- Mark project_topic_upload_states as needing no transfer work by @sjestonsingh (merge request) GitLab Enterprise Edition
- Track runner bulk selection and bulk delete by @sjestonsingh (merge request)
- Remove unused scope Ci::Pipeline.not_ref_protected (merge request)
- Add different root namespace spec (merge request) GitLab Enterprise Edition
- Remove the personal_homepage feature flag (merge request)
- Sync translations from crowdin (2026-09-01) (merge request)
