GitLab
詳細情報
| タイトル | GitLab |
|---|---|
| URL | https://about.gitlab.com/ |
| バージョン | ver 19.4.2 |
| 更新日 | 2026/10/12 |
| 追加日 | 2016/02/23 |
| 種別 | フリーソフト |
| 説明 | GitHubのようなサービスをローカルで提供することができるGitリポジトリ管理ソフト。 |
レビュー
概要
GitLabは、ソフトウェア開発ライフサイクル全体を統合したDevSecOpsプラットフォームです。2011年9月、ウクライナ人プログラマーのDmitry Zaporozhetsが個人プロジェクトとして開発を開始しました。自身が「モダンなオープンソースのGitリポジトリ管理ツールがない」と感じたことがきっかけで、Ruby on Railsで実装されました。毎月22日に定期リリースを行う慣習は創業当初から続いています。
2012年にSid Sijbrandijがコーポレートとして法人化に参加し、CEOとして商業化を推進。Community Edition（CE）のオープンソースモデルを維持しつつ、Enterprise Edition（EE）を追加することで、オープンコアモデルでビジネスを展開しています。現在は5,000万人以上のユーザーが利用する大規模プラットフォームへ成長し、2021年にはNasdaq（GTLB）に上場しました。
主要な特徴・機能
- Gitリポジトリ管理: コードのホスティング・ブランチ管理・マージリクエスト
- CI/CD: 継続的インテグレーション・継続的デリバリーのパイプラインを内蔵
- DevSecOps統合: SAST・SCA・Secret Detection・DASTなどのセキュリティスキャンを開発フローに統合
- イシュートラッカー: バグ管理・プロジェクト計画・マイルストーン管理
- コンテナレジストリ: Dockerイメージの管理・配布
- Kubernetes連携: コンテナオーケストレーション環境との統合
- AI機能（GitLab Duo）: コード補完・セキュリティ分析・自動化を支援するAIエージェント
- セルフホスト対応: 自社サーバーでのオンプレミス運用が可能
対象ユーザー
- オープンソースプロジェクトの開発チーム（Community Edition）
- CI/CDやセキュリティ検査を統合した開発環境を必要とする企業（Enterprise Edition）
- GitHubの代替としてセルフホストを希望する組織・エンジニアリングチーム
- 金融・公共・通信・航空宇宙など厳格なコンプライアンスが求められる業界
ライセンス情報
GitLabはオープンコアモデルを採用しています。
- Community Edition（CE）: MITライセンスで提供される無料のオープンソース版
- Enterprise Edition（EE）: 有償のプレミアム機能を追加したエンタープライズ向け有料版（Free・Premium・Ultimateの各プランあり）
セルフホスト版のほか、GitLab.comによるSaaS（クラウド）版も提供されています。
スクリーンショット
スクリーンショットはありません。
更新グラフ
バージョン履歴
## 19.4.2 (2026-10-07)
### Fixed (13 changes)
- [Fix Gitaly up-to-date check for versions with a revision suffix](https://gitlab.com/gitlab-org/security/gitlab/-/commit/66d160c68acc997e37faf4149b9497eda0d46fcf)
- [Tolerate malformed Content-Range in HttpIO](https://gitlab.com/gitlab-org/security/gitlab/-/commit/43830e9dd549b5e8f5a0d1a79212dbebe0fedd84)
- [Send canonical timezone identifiers to Gitaly](https://gitlab.com/gitlab-org/security/gitlab/-/commit/1d798e1c173a7f031cba70a901429aa4503428c6)
- [Stop coverage delta timeouts from breaking the MR widget](https://gitlab.com/gitlab-org/security/gitlab/-/commit/d17a37d9ac292fad00bb9f8be799c86212c2f175)
- [Allow security policy bot cross-project container registry access](https://gitlab.com/gitlab-org/security/gitlab/-/commit/cad83ecc5bd61c5d4741909845a6d671d6e4aadf) **GitLab Enterprise Edition**
- [Align self-managed Restricted access with User.billable](https://gitlab.com/gitlab-org/security/gitlab/-/commit/544711003d7cd014f929335620f76ac306c8cf14) **GitLab Enterprise Edition**
- [Sign chat agent requests from the chat feature setting](https://gitlab.com/gitlab-org/security/gitlab/-/commit/91104d1d9ea970f646f48fdd3f67da55370d32a4) **GitLab Enterprise Edition**
- [Truncate Jira issue keys at the 500 per-entity API limit](https://gitlab.com/gitlab-org/security/gitlab/-/commit/27da71cdb8beb696a74d128be26ecc0a19960825)
- [Fix status filter dropping matching items](https://gitlab.com/gitlab-org/security/gitlab/-/commit/301d657c6c16a40790c7a67f1b1e15158f219426) **GitLab Enterprise Edition**
- [Make git exclusions in rate limit rules unconditional again](https://gitlab.com/gitlab-org/security/gitlab/-/commit/1b98e1fe6fa5995327492b40e1495288ee801ca2)
- [Update status category when a removed status is re-added](https://gitlab.com/gitlab-org/security/gitlab/-/commit/ac9b15a53dc564a26cc171859e04b9d5bb4caf74) **GitLab Enterprise Edition**
- [Create policy violations before scheduling MR preparation](https://gitlab.com/gitlab-org/security/gitlab/-/commit/e7de8263de677f375546cd7ad33680683e305f2b) **GitLab Enterprise Edition**
- [Retry transient chunk failures in Gitlab::HttpIO](https://gitlab.com/gitlab-org/security/gitlab/-/commit/c3f4effef7a7a956979c90e93b48ab21f9372350)
### Security (22 changes)
- [Build merge request header URLs without the request host](https://gitlab.com/gitlab-org/security/gitlab/-/commit/1138a67f58a3e3272cc559c5c9e70e161b218a52) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6850))
- [Stop direct_access from issuing a Duo Workflow Service token](https://gitlab.com/gitlab-org/security/gitlab/-/commit/3736c446e31fd7713e747650c115285ebf473a5e) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6875))
- [Remove admin compliance pipeline config from custom role](https://gitlab.com/gitlab-org/security/gitlab/-/commit/fe19fc868cffd7ba73f7eb3f4d8950cfd163b3ca) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6867))
(省略されました)
### Fixed (13 changes)
- [Fix Gitaly up-to-date check for versions with a revision suffix](https://gitlab.com/gitlab-org/security/gitlab/-/commit/66d160c68acc997e37faf4149b9497eda0d46fcf)
- [Tolerate malformed Content-Range in HttpIO](https://gitlab.com/gitlab-org/security/gitlab/-/commit/43830e9dd549b5e8f5a0d1a79212dbebe0fedd84)
- [Send canonical timezone identifiers to Gitaly](https://gitlab.com/gitlab-org/security/gitlab/-/commit/1d798e1c173a7f031cba70a901429aa4503428c6)
- [Stop coverage delta timeouts from breaking the MR widget](https://gitlab.com/gitlab-org/security/gitlab/-/commit/d17a37d9ac292fad00bb9f8be799c86212c2f175)
- [Allow security policy bot cross-project container registry access](https://gitlab.com/gitlab-org/security/gitlab/-/commit/cad83ecc5bd61c5d4741909845a6d671d6e4aadf) **GitLab Enterprise Edition**
- [Align self-managed Restricted access with User.billable](https://gitlab.com/gitlab-org/security/gitlab/-/commit/544711003d7cd014f929335620f76ac306c8cf14) **GitLab Enterprise Edition**
- [Sign chat agent requests from the chat feature setting](https://gitlab.com/gitlab-org/security/gitlab/-/commit/91104d1d9ea970f646f48fdd3f67da55370d32a4) **GitLab Enterprise Edition**
- [Truncate Jira issue keys at the 500 per-entity API limit](https://gitlab.com/gitlab-org/security/gitlab/-/commit/27da71cdb8beb696a74d128be26ecc0a19960825)
- [Fix status filter dropping matching items](https://gitlab.com/gitlab-org/security/gitlab/-/commit/301d657c6c16a40790c7a67f1b1e15158f219426) **GitLab Enterprise Edition**
- [Make git exclusions in rate limit rules unconditional again](https://gitlab.com/gitlab-org/security/gitlab/-/commit/1b98e1fe6fa5995327492b40e1495288ee801ca2)
- [Update status category when a removed status is re-added](https://gitlab.com/gitlab-org/security/gitlab/-/commit/ac9b15a53dc564a26cc171859e04b9d5bb4caf74) **GitLab Enterprise Edition**
- [Create policy violations before scheduling MR preparation](https://gitlab.com/gitlab-org/security/gitlab/-/commit/e7de8263de677f375546cd7ad33680683e305f2b) **GitLab Enterprise Edition**
- [Retry transient chunk failures in Gitlab::HttpIO](https://gitlab.com/gitlab-org/security/gitlab/-/commit/c3f4effef7a7a956979c90e93b48ab21f9372350)
### Security (22 changes)
- [Build merge request header URLs without the request host](https://gitlab.com/gitlab-org/security/gitlab/-/commit/1138a67f58a3e3272cc559c5c9e70e161b218a52) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6850))
- [Stop direct_access from issuing a Duo Workflow Service token](https://gitlab.com/gitlab-org/security/gitlab/-/commit/3736c446e31fd7713e747650c115285ebf473a5e) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6875))
- [Remove admin compliance pipeline config from custom role](https://gitlab.com/gitlab-org/security/gitlab/-/commit/fe19fc868cffd7ba73f7eb3f4d8950cfd163b3ca) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6867))
(省略されました)
## 19.4.1 (2026-09-22)
### Fixed (1 change)
- [Resume mid-delta on the package metadata label path](https://gitlab.com/gitlab-org/security/gitlab/-/commit/8e3207d7d7bcc78c8dcce3429a00ebf46ed31574) **GitLab Enterprise Edition**
### Security (11 changes)
- [Bound compiled size of CI rules regexp patterns](https://gitlab.com/gitlab-org/security/gitlab/-/commit/360a5f4c0430ea2961dcdad511069007079db602) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6830))
- [Fix authorization bypass in MemberRole.dependentSecurityPolicies](https://gitlab.com/gitlab-org/security/gitlab/-/commit/5de5231473be3f6b6045fa62e52d17dc07583230) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6823))
- [Hide private child items in Epic API](https://gitlab.com/gitlab-org/security/gitlab/-/commit/f6e93099d96e22e4dde27b014cdc890269a6eb50) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6798))
- [Authorize GraphQL CiJob.trace with read_build_trace](https://gitlab.com/gitlab-org/security/gitlab/-/commit/2427e771fa368cc6282463fe56e32ce993d4143e) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6649))
- [Restrict mcp scope auth to routes with an mcp route setting](https://gitlab.com/gitlab-org/security/gitlab/-/commit/2a2778a745af51e672afff4cb68e6ae9480bf18c) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6809))
- [Fix thread-safety race in MCP aggregated tool instances](https://gitlab.com/gitlab-org/security/gitlab/-/commit/5b6320b50e1ac2b640b163728f904a6e0ad60e2d) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6799))
- [Prevent user resolution downgrade in bulk and third-party importers](https://gitlab.com/gitlab-org/security/gitlab/-/commit/c21119eee4620be5efd65e65c0c6f0e918667e18) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6797))
- [Enforce read_build_trace on Duo job trace paths](https://gitlab.com/gitlab-org/security/gitlab/-/commit/e6cf275403335954237125e2e0c017f1fffe336a) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6720))
- [Reject traversal segments in diff file URLs](https://gitlab.com/gitlab-org/security/gitlab/-/commit/a1113420f4e2343543ac491e11474a087c53b561) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6793))
- [Guard regexp compilation in CI rules clauses](https://gitlab.com/gitlab-org/security/gitlab/-/commit/291ad637d2c333035ee03e1f6ad6223f20870d5a) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6804))
## 19.3.3 (2026-09-22)
### Fixed (1 change)
- [Fix infinite loop parsing errored SARIF security reports](https://gitlab.com/gitlab-org/security/gitlab/-/commit/a1c14b1767ccbb205b4f1b28ba3bcc938b95b010) **GitLab Enterprise Edition**
### Security (11 changes)
- [Bound compiled size of CI rules regexp patterns](https://gitlab.com/gitlab-org/security/gitlab/-/commit/4be91decdf8095ca95df5e6ccba5c6e3b530530f) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6829))
(省略されました)
### Fixed (1 change)
- [Resume mid-delta on the package metadata label path](https://gitlab.com/gitlab-org/security/gitlab/-/commit/8e3207d7d7bcc78c8dcce3429a00ebf46ed31574) **GitLab Enterprise Edition**
### Security (11 changes)
- [Bound compiled size of CI rules regexp patterns](https://gitlab.com/gitlab-org/security/gitlab/-/commit/360a5f4c0430ea2961dcdad511069007079db602) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6830))
- [Fix authorization bypass in MemberRole.dependentSecurityPolicies](https://gitlab.com/gitlab-org/security/gitlab/-/commit/5de5231473be3f6b6045fa62e52d17dc07583230) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6823))
- [Hide private child items in Epic API](https://gitlab.com/gitlab-org/security/gitlab/-/commit/f6e93099d96e22e4dde27b014cdc890269a6eb50) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6798))
- [Authorize GraphQL CiJob.trace with read_build_trace](https://gitlab.com/gitlab-org/security/gitlab/-/commit/2427e771fa368cc6282463fe56e32ce993d4143e) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6649))
- [Restrict mcp scope auth to routes with an mcp route setting](https://gitlab.com/gitlab-org/security/gitlab/-/commit/2a2778a745af51e672afff4cb68e6ae9480bf18c) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6809))
- [Fix thread-safety race in MCP aggregated tool instances](https://gitlab.com/gitlab-org/security/gitlab/-/commit/5b6320b50e1ac2b640b163728f904a6e0ad60e2d) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6799))
- [Prevent user resolution downgrade in bulk and third-party importers](https://gitlab.com/gitlab-org/security/gitlab/-/commit/c21119eee4620be5efd65e65c0c6f0e918667e18) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6797))
- [Enforce read_build_trace on Duo job trace paths](https://gitlab.com/gitlab-org/security/gitlab/-/commit/e6cf275403335954237125e2e0c017f1fffe336a) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6720))
- [Reject traversal segments in diff file URLs](https://gitlab.com/gitlab-org/security/gitlab/-/commit/a1113420f4e2343543ac491e11474a087c53b561) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6793))
- [Guard regexp compilation in CI rules clauses](https://gitlab.com/gitlab-org/security/gitlab/-/commit/291ad637d2c333035ee03e1f6ad6223f20870d5a) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6804))
## 19.3.3 (2026-09-22)
### Fixed (1 change)
- [Fix infinite loop parsing errored SARIF security reports](https://gitlab.com/gitlab-org/security/gitlab/-/commit/a1c14b1767ccbb205b4f1b28ba3bcc938b95b010) **GitLab Enterprise Edition**
### Security (11 changes)
- [Bound compiled size of CI rules regexp patterns](https://gitlab.com/gitlab-org/security/gitlab/-/commit/4be91decdf8095ca95df5e6ccba5c6e3b530530f) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6829))
(省略されました)
## 19.4.0 (2026-09-16)
### Added (300 changes)
- [Add sidebar to display audit event additional details](https://gitlab.com/gitlab-org/gitlab/-/commit/5264b617bdf6f54bf9350bacd977f033b3022aa4) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/254401)) **GitLab Enterprise Edition**
- [Emit semantic search confidence and record its SLI](https://gitlab.com/gitlab-org/gitlab/-/commit/325482c13bf1a36fc54dec21d4b6bac74ed87bcf) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/253574)) **GitLab Enterprise Edition**
- [Default enable sdlc_context_agent_trigger feature flag](https://gitlab.com/gitlab-org/gitlab/-/commit/4c0ea033f2ec77362b86ade7e9351d58e9a3078a) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/250459)) **GitLab Enterprise Edition**
- [Add AiTracking for the Duo Chat IDE code tools](https://gitlab.com/gitlab-org/gitlab/-/commit/2f02f124f2f88adc2b126c436af17112cc9f4252) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/246385)) **GitLab Enterprise Edition**
- [Route Duo in Slack to the slack_assistant flow behind a flag](https://gitlab.com/gitlab-org/gitlab/-/commit/92c3f70e5b50b82c4b6f1017312f7f0907589d72) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/254801))
- [Add control: duo_agentic_flow_audit_events_streaming](https://gitlab.com/gitlab-org/gitlab/-/commit/6c04948ccfd8a56f8ade43b2759f337fe2be3fbe) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/252332)) **GitLab Enterprise Edition**
- [DB Diagnostics: Add per-table autovacuum overrides and scale-factor risk](https://gitlab.com/gitlab-org/gitlab/-/commit/23b9f4edcfc4b5e4fd4d4f2c60a638100b892459) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/245561))
- [Show Edit action on organization users admin page](https://gitlab.com/gitlab-org/gitlab/-/commit/a8626c940dc8e5158477e26593288f153d222174) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/254693))
- [Add merge request risk classification widget](https://gitlab.com/gitlab-org/gitlab/-/commit/bbc18da2e3b4e029b48d26786ffb21259bc9b1c1) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/251381)) **GitLab Enterprise Edition**
- [Add instance setting to auto-index root namespaces for Orbit](https://gitlab.com/gitlab-org/gitlab/-/commit/264f0d50fdda2bedbf7401cf838a812a72df325a) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/253942))
- [Add triage and remediation docs](https://gitlab.com/gitlab-org/gitlab/-/commit/d2d5ae4a1f0f51431875d03528963c3588eb353c) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/254850))
- [Scroll the panel with the keyboard on page load](https://gitlab.com/gitlab-org/gitlab/-/commit/b168de1e8b1350922327ca86981f74c9efb8c57a) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/240808))
- [Add RegoValidator and depend on gitlab-glaz](https://gitlab.com/gitlab-org/gitlab/-/commit/df88ac3791e2ad42df1a2c00890ae84b1ac4ab74) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/254245))
- [Allow ownerless clients on the IAM consent page](https://gitlab.com/gitlab-org/gitlab/-/commit/2c3f1e6e7952a4a35d1caf51683865bd64700045) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/253086))
- [Return 429 and RateLimit headers for entry-less labkit rules](https://gitlab.com/gitlab-org/gitlab/-/commit/fbc673ac25bb8c1a5556a6a69f560bfbfe620aa2) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/254081))
- [Add block_jwt_for_reclaimed_paths application setting](https://gitlab.com/gitlab-org/gitlab/-/commit/4bb24a9fa901ed9e91bcc4c90967b1492cf5ef5d) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/254058))
- [Add Instance level enable add-on graphql mutation](https://gitlab.com/gitlab-org/gitlab/-/commit/8d176e1c970f55553db768c8e5e1041392a6adbc) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/254563)) **GitLab Enterprise Edition**
(省略されました)
### Added (300 changes)
- [Add sidebar to display audit event additional details](https://gitlab.com/gitlab-org/gitlab/-/commit/5264b617bdf6f54bf9350bacd977f033b3022aa4) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/254401)) **GitLab Enterprise Edition**
- [Emit semantic search confidence and record its SLI](https://gitlab.com/gitlab-org/gitlab/-/commit/325482c13bf1a36fc54dec21d4b6bac74ed87bcf) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/253574)) **GitLab Enterprise Edition**
- [Default enable sdlc_context_agent_trigger feature flag](https://gitlab.com/gitlab-org/gitlab/-/commit/4c0ea033f2ec77362b86ade7e9351d58e9a3078a) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/250459)) **GitLab Enterprise Edition**
- [Add AiTracking for the Duo Chat IDE code tools](https://gitlab.com/gitlab-org/gitlab/-/commit/2f02f124f2f88adc2b126c436af17112cc9f4252) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/246385)) **GitLab Enterprise Edition**
- [Route Duo in Slack to the slack_assistant flow behind a flag](https://gitlab.com/gitlab-org/gitlab/-/commit/92c3f70e5b50b82c4b6f1017312f7f0907589d72) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/254801))
- [Add control: duo_agentic_flow_audit_events_streaming](https://gitlab.com/gitlab-org/gitlab/-/commit/6c04948ccfd8a56f8ade43b2759f337fe2be3fbe) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/252332)) **GitLab Enterprise Edition**
- [DB Diagnostics: Add per-table autovacuum overrides and scale-factor risk](https://gitlab.com/gitlab-org/gitlab/-/commit/23b9f4edcfc4b5e4fd4d4f2c60a638100b892459) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/245561))
- [Show Edit action on organization users admin page](https://gitlab.com/gitlab-org/gitlab/-/commit/a8626c940dc8e5158477e26593288f153d222174) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/254693))
- [Add merge request risk classification widget](https://gitlab.com/gitlab-org/gitlab/-/commit/bbc18da2e3b4e029b48d26786ffb21259bc9b1c1) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/251381)) **GitLab Enterprise Edition**
- [Add instance setting to auto-index root namespaces for Orbit](https://gitlab.com/gitlab-org/gitlab/-/commit/264f0d50fdda2bedbf7401cf838a812a72df325a) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/253942))
- [Add triage and remediation docs](https://gitlab.com/gitlab-org/gitlab/-/commit/d2d5ae4a1f0f51431875d03528963c3588eb353c) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/254850))
- [Scroll the panel with the keyboard on page load](https://gitlab.com/gitlab-org/gitlab/-/commit/b168de1e8b1350922327ca86981f74c9efb8c57a) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/240808))
- [Add RegoValidator and depend on gitlab-glaz](https://gitlab.com/gitlab-org/gitlab/-/commit/df88ac3791e2ad42df1a2c00890ae84b1ac4ab74) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/254245))
- [Allow ownerless clients on the IAM consent page](https://gitlab.com/gitlab-org/gitlab/-/commit/2c3f1e6e7952a4a35d1caf51683865bd64700045) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/253086))
- [Return 429 and RateLimit headers for entry-less labkit rules](https://gitlab.com/gitlab-org/gitlab/-/commit/fbc673ac25bb8c1a5556a6a69f560bfbfe620aa2) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/254081))
- [Add block_jwt_for_reclaimed_paths application setting](https://gitlab.com/gitlab-org/gitlab/-/commit/4bb24a9fa901ed9e91bcc4c90967b1492cf5ef5d) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/254058))
- [Add Instance level enable add-on graphql mutation](https://gitlab.com/gitlab-org/gitlab/-/commit/8d176e1c970f55553db768c8e5e1041392a6adbc) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/254563)) **GitLab Enterprise Edition**
(省略されました)
## 19.3.2 (2026-09-10)
### Fixed (4 changes)
- [Stop resetting mcp_server_enabled when Duo settings change](https://gitlab.com/gitlab-org/security/gitlab/-/commit/25b02f48d85610be4fdc3e0dfdeb5ec727fec989) **GitLab Enterprise Edition**
- [Fix partition cache crash on single-pipeline ranges](https://gitlab.com/gitlab-org/security/gitlab/-/commit/f642741b2fa04abce2d74f4e4ced3d97e807ccfb)
- [Geo: Support SSH cert gl_id formats in proxied Git requests](https://gitlab.com/gitlab-org/security/gitlab/-/commit/8c6b338efc7f2f1239680db73e246c21316965d7) **GitLab Enterprise Edition**
- [Default SHA on merge requirement for new groups to false](https://gitlab.com/gitlab-org/security/gitlab/-/commit/5a962f1829dff1c05490d43b0e33784394641296)
### Changed (1 change)
- [Show "No available solution" message for CS when solution is empty](https://gitlab.com/gitlab-org/security/gitlab/-/commit/4373039e55954d599e047ce4c6334db3f49c4237) **GitLab Enterprise Edition**
### Security (17 changes)
- [Prevent scheduled PEP test runs from bypassing policy scope](https://gitlab.com/gitlab-org/security/gitlab/-/commit/d3e0d40707f5da43fc97f1945b5b985f1b410468) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6714))
- [Reassign sole approver rules on permanent deletion (19.3)](https://gitlab.com/gitlab-org/security/gitlab/-/commit/eca64bf0cafb7444b4fe577a6604933c891cca5b) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6696))
- [Sanitise items in JSONTable before passing to BTable](https://gitlab.com/gitlab-org/security/gitlab/-/commit/b3ca25f01d2d032d90b0ef355b5b8292a8e3c6ca) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6703))
- [Fix complexity multiplier logic enables Unauthenticated DoS](https://gitlab.com/gitlab-org/security/gitlab/-/commit/196385d8e37fa4270f4c3ca4b5745fbdf1ff7a82) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6665))
- [Require update_package to change generic package status](https://gitlab.com/gitlab-org/security/gitlab/-/commit/cce55f4ae4a2f321dc414735bc9ec8bdf652c195) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6669))
- [Fix routing manipulation with group wiki [Backport 19.3]](https://gitlab.com/gitlab-org/security/gitlab/-/commit/06cc56559e85fce91bc18a14bd05af420e4d1c15) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6678))
- [Content editor vets iframe sources before rendering](https://gitlab.com/gitlab-org/security/gitlab/-/commit/a8bd90a4c9a442976a57bbbd0ec48a6a9970bf8a) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6637))
- [Pin checkout_sha at push time to prevent MR pipeline code injection](https://gitlab.com/gitlab-org/security/gitlab/-/commit/30642b48e6f70ffab572d5064c399efb973d6865) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6682))
- [Read Terraform state upload path from verified UploadedFile](https://gitlab.com/gitlab-org/security/gitlab/-/commit/56582c7e25a3bb5563bd399c0f7da8f5fbc63abc) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6625))
- [Remove admin compliance pipeline config from SM role](https://gitlab.com/gitlab-org/security/gitlab/-/commit/4656f4c7b1545016432b6d0a8a789e16a1f40887) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6607))
(省略されました)
### Fixed (4 changes)
- [Stop resetting mcp_server_enabled when Duo settings change](https://gitlab.com/gitlab-org/security/gitlab/-/commit/25b02f48d85610be4fdc3e0dfdeb5ec727fec989) **GitLab Enterprise Edition**
- [Fix partition cache crash on single-pipeline ranges](https://gitlab.com/gitlab-org/security/gitlab/-/commit/f642741b2fa04abce2d74f4e4ced3d97e807ccfb)
- [Geo: Support SSH cert gl_id formats in proxied Git requests](https://gitlab.com/gitlab-org/security/gitlab/-/commit/8c6b338efc7f2f1239680db73e246c21316965d7) **GitLab Enterprise Edition**
- [Default SHA on merge requirement for new groups to false](https://gitlab.com/gitlab-org/security/gitlab/-/commit/5a962f1829dff1c05490d43b0e33784394641296)
### Changed (1 change)
- [Show "No available solution" message for CS when solution is empty](https://gitlab.com/gitlab-org/security/gitlab/-/commit/4373039e55954d599e047ce4c6334db3f49c4237) **GitLab Enterprise Edition**
### Security (17 changes)
- [Prevent scheduled PEP test runs from bypassing policy scope](https://gitlab.com/gitlab-org/security/gitlab/-/commit/d3e0d40707f5da43fc97f1945b5b985f1b410468) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6714))
- [Reassign sole approver rules on permanent deletion (19.3)](https://gitlab.com/gitlab-org/security/gitlab/-/commit/eca64bf0cafb7444b4fe577a6604933c891cca5b) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6696))
- [Sanitise items in JSONTable before passing to BTable](https://gitlab.com/gitlab-org/security/gitlab/-/commit/b3ca25f01d2d032d90b0ef355b5b8292a8e3c6ca) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6703))
- [Fix complexity multiplier logic enables Unauthenticated DoS](https://gitlab.com/gitlab-org/security/gitlab/-/commit/196385d8e37fa4270f4c3ca4b5745fbdf1ff7a82) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6665))
- [Require update_package to change generic package status](https://gitlab.com/gitlab-org/security/gitlab/-/commit/cce55f4ae4a2f321dc414735bc9ec8bdf652c195) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6669))
- [Fix routing manipulation with group wiki [Backport 19.3]](https://gitlab.com/gitlab-org/security/gitlab/-/commit/06cc56559e85fce91bc18a14bd05af420e4d1c15) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6678))
- [Content editor vets iframe sources before rendering](https://gitlab.com/gitlab-org/security/gitlab/-/commit/a8bd90a4c9a442976a57bbbd0ec48a6a9970bf8a) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6637))
- [Pin checkout_sha at push time to prevent MR pipeline code injection](https://gitlab.com/gitlab-org/security/gitlab/-/commit/30642b48e6f70ffab572d5064c399efb973d6865) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6682))
- [Read Terraform state upload path from verified UploadedFile](https://gitlab.com/gitlab-org/security/gitlab/-/commit/56582c7e25a3bb5563bd399c0f7da8f5fbc63abc) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6625))
- [Remove admin compliance pipeline config from SM role](https://gitlab.com/gitlab-org/security/gitlab/-/commit/4656f4c7b1545016432b6d0a8a789e16a1f40887) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6607))
(省略されました)
## 19.3.1 (2026-08-25)
### Fixed (2 changes)
- [Provision inherited foundational flows without user elevation](https://gitlab.com/gitlab-org/security/gitlab/-/commit/a513951f5312300a2387053ecf306dea86d0e361) **GitLab Enterprise Edition**
- [Gate tracked ref filter on advanced vulnerability management](https://gitlab.com/gitlab-org/security/gitlab/-/commit/de72d253dc60a0f436489f17eda40af81004f67e) **GitLab Enterprise Edition**
### Security (7 changes)
- [Reject overflow username length in SCIM and OAuth sign-in](https://gitlab.com/gitlab-org/security/gitlab/-/commit/578ac74e9d16789ee168f7e20c3a9906b803f670) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6620))
- [Prevent Sidekiq exhaustion via unbounded import jobs](https://gitlab.com/gitlab-org/security/gitlab/-/commit/2991d98139a1bde0f4e30dd88f855656d9d6fe6e) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6583))
- [Ignore Claude project settings in Claude agent](https://gitlab.com/gitlab-org/security/gitlab/-/commit/82ef713165280f7be03efd4512de8327171c8529) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6612))
- [Check :update_approvers before resetting MR approval rules](https://gitlab.com/gitlab-org/security/gitlab/-/commit/0874f9cc943b5a7723d2f3e250d0f3065feff9ce) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6614))
- [Prevent policy job needs from resolving to untrusted jobs](https://gitlab.com/gitlab-org/security/gitlab/-/commit/2b9203af2702913916e635c229a361e3aa4d9a98) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6606))
- [Enforce protected environment check on terminal websocket auth](https://gitlab.com/gitlab-org/security/gitlab/-/commit/d3cd1ef51a43d7197b10d83b053c1917313a05ca) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6621))
### Other (1 change)
- [Reorder deployments bigint cleanup so the FK sorts first](https://gitlab.com/gitlab-org/security/gitlab/-/commit/14a4c9b3bb15df5a6aa217a592f1efbcc95d06af)
## 19.2.5 (2026-08-25)
### Fixed (2 changes)
- [Fix infinite loop parsing errored SARIF security reports](https://gitlab.com/gitlab-org/security/gitlab/-/commit/8f97e3d059af34a182761afe83ae9d1eb3b9c77a) **GitLab Enterprise Edition**
- [Preserve email reply content after lone bullet lines](https://gitlab.com/gitlab-org/security/gitlab/-/commit/084287b841982d5c3c7a3ec2f8c00e95b0a20dfb)
### Security (7 changes)
- [Reject overflow username length in SCIM and OAuth sign-in](https://gitlab.com/gitlab-org/security/gitlab/-/commit/7e6c7b5f251d0ce9469a06317e318eb6d3a8575c) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6586))
(省略されました)
### Fixed (2 changes)
- [Provision inherited foundational flows without user elevation](https://gitlab.com/gitlab-org/security/gitlab/-/commit/a513951f5312300a2387053ecf306dea86d0e361) **GitLab Enterprise Edition**
- [Gate tracked ref filter on advanced vulnerability management](https://gitlab.com/gitlab-org/security/gitlab/-/commit/de72d253dc60a0f436489f17eda40af81004f67e) **GitLab Enterprise Edition**
### Security (7 changes)
- [Reject overflow username length in SCIM and OAuth sign-in](https://gitlab.com/gitlab-org/security/gitlab/-/commit/578ac74e9d16789ee168f7e20c3a9906b803f670) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6620))
- [Prevent Sidekiq exhaustion via unbounded import jobs](https://gitlab.com/gitlab-org/security/gitlab/-/commit/2991d98139a1bde0f4e30dd88f855656d9d6fe6e) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6583))
- [Ignore Claude project settings in Claude agent](https://gitlab.com/gitlab-org/security/gitlab/-/commit/82ef713165280f7be03efd4512de8327171c8529) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6612))
- [Check :update_approvers before resetting MR approval rules](https://gitlab.com/gitlab-org/security/gitlab/-/commit/0874f9cc943b5a7723d2f3e250d0f3065feff9ce) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6614))
- [Prevent policy job needs from resolving to untrusted jobs](https://gitlab.com/gitlab-org/security/gitlab/-/commit/2b9203af2702913916e635c229a361e3aa4d9a98) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6606))
- [Enforce protected environment check on terminal websocket auth](https://gitlab.com/gitlab-org/security/gitlab/-/commit/d3cd1ef51a43d7197b10d83b053c1917313a05ca) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6621))
### Other (1 change)
- [Reorder deployments bigint cleanup so the FK sorts first](https://gitlab.com/gitlab-org/security/gitlab/-/commit/14a4c9b3bb15df5a6aa217a592f1efbcc95d06af)
## 19.2.5 (2026-08-25)
### Fixed (2 changes)
- [Fix infinite loop parsing errored SARIF security reports](https://gitlab.com/gitlab-org/security/gitlab/-/commit/8f97e3d059af34a182761afe83ae9d1eb3b9c77a) **GitLab Enterprise Edition**
- [Preserve email reply content after lone bullet lines](https://gitlab.com/gitlab-org/security/gitlab/-/commit/084287b841982d5c3c7a3ec2f8c00e95b0a20dfb)
### Security (7 changes)
- [Reject overflow username length in SCIM and OAuth sign-in](https://gitlab.com/gitlab-org/security/gitlab/-/commit/7e6c7b5f251d0ce9469a06317e318eb6d3a8575c) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6586))
(省略されました)
## 19.3.0 (2026-08-20)
### Added (275 changes)
- [Add GraphQL mutation to remove an organization user](https://gitlab.com/gitlab-org/gitlab/-/commit/ad6f0888a3dbba9f756eb289d2612f1a82f17b00) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/249299))
- [Prepare composite FK for vulnerability_occurrences](https://gitlab.com/gitlab-org/gitlab/-/commit/a8ab341fe2476090e0318b55c681e25e06f3f6ca) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/247863))
- [add list_duo_sessions mcp tool](https://gitlab.com/gitlab-org/gitlab/-/commit/f25f4c4742d4bac5a99b310b081c5d6c00e83d15) by @DhairyaMajmudar ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/248587)) **GitLab Enterprise Edition**
- [Record and expose approval gates on rollouts](https://gitlab.com/gitlab-org/gitlab/-/commit/deeac878af0872602a1c96b044e4db525ab32d05) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/250186)) **GitLab Enterprise Edition**
- [Add project-level setting for SDLC Context Agent](https://gitlab.com/gitlab-org/gitlab/-/commit/71a9ae8c77fc20f8b4036d169e6226a0f14c69db) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/250192)) **GitLab Enterprise Edition**
- [Add project-level setting for SDLC Context Agent](https://gitlab.com/gitlab-org/gitlab/-/commit/dc4c94b1ae2e929cc1b91e00103d12bcd90b97a5) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/250024)) **GitLab Enterprise Edition**
- [Add project-level setting for SDLC Context Agent](https://gitlab.com/gitlab-org/gitlab/-/commit/2f0b180562ed3f485dc5df5299dc626e2c4d98fc) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/249617)) **GitLab Enterprise Edition**
- [Add a View session button to agent replies in MRs](https://gitlab.com/gitlab-org/gitlab/-/commit/c88b2c962eda423c3fca88cfe65b29f186823283) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/249432)) **GitLab Enterprise Edition**
- [Send CI/CD OTel data with optional bearer token](https://gitlab.com/gitlab-org/gitlab/-/commit/2e75a61e4289407da327229818b65874ecd3a3e1) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/249026))
- [Add GLQL schema endpoint](https://gitlab.com/gitlab-org/gitlab/-/commit/3b7257776ecef9c9e9ddac3995fe6d7885b26835) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/247360))
- [Add get_repository_file MCP tool](https://gitlab.com/gitlab-org/gitlab/-/commit/f5992438db8b3c92330d41a1e7bcd296b9180217) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/248744))
- [Add GraphQL fields for Note Duo session status](https://gitlab.com/gitlab-org/gitlab/-/commit/7f638e0d9d3d628a39001966f76d7d1235206d11) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/249833)) **GitLab Enterprise Edition**
- [Add "Archived" tooltip to archived label chips](https://gitlab.com/gitlab-org/gitlab/-/commit/f039c658e07e9d3995311c6de4131333144e5f97) by @nwittstruck ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/244270))
- [Add archived badge to merge request header](https://gitlab.com/gitlab-org/gitlab/-/commit/3c17787d818631b05cb06223cffecc1f83375563) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/249593))
- [Add ai_enabled field to work item agent plan widget](https://gitlab.com/gitlab-org/gitlab/-/commit/eeb0ead3ce82bfd3a1d14c313645b40a31748f99) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/249644)) **GitLab Enterprise Edition**
- [feat: Add Cargo package upload authorize endpoint](https://gitlab.com/gitlab-org/gitlab/-/commit/5ce2fb9bfe0bb0020eb231edfc1bcbb41335e77b) by @kiran-4444 ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/240512))
- [Add SendGrid API token validity check](https://gitlab.com/gitlab-org/gitlab/-/commit/d971ac61168c74b928bff2d18843cbbcaa5bdb60) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/248116)) **GitLab Enterprise Edition**
(省略されました)
### Added (275 changes)
- [Add GraphQL mutation to remove an organization user](https://gitlab.com/gitlab-org/gitlab/-/commit/ad6f0888a3dbba9f756eb289d2612f1a82f17b00) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/249299))
- [Prepare composite FK for vulnerability_occurrences](https://gitlab.com/gitlab-org/gitlab/-/commit/a8ab341fe2476090e0318b55c681e25e06f3f6ca) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/247863))
- [add list_duo_sessions mcp tool](https://gitlab.com/gitlab-org/gitlab/-/commit/f25f4c4742d4bac5a99b310b081c5d6c00e83d15) by @DhairyaMajmudar ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/248587)) **GitLab Enterprise Edition**
- [Record and expose approval gates on rollouts](https://gitlab.com/gitlab-org/gitlab/-/commit/deeac878af0872602a1c96b044e4db525ab32d05) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/250186)) **GitLab Enterprise Edition**
- [Add project-level setting for SDLC Context Agent](https://gitlab.com/gitlab-org/gitlab/-/commit/71a9ae8c77fc20f8b4036d169e6226a0f14c69db) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/250192)) **GitLab Enterprise Edition**
- [Add project-level setting for SDLC Context Agent](https://gitlab.com/gitlab-org/gitlab/-/commit/dc4c94b1ae2e929cc1b91e00103d12bcd90b97a5) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/250024)) **GitLab Enterprise Edition**
- [Add project-level setting for SDLC Context Agent](https://gitlab.com/gitlab-org/gitlab/-/commit/2f0b180562ed3f485dc5df5299dc626e2c4d98fc) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/249617)) **GitLab Enterprise Edition**
- [Add a View session button to agent replies in MRs](https://gitlab.com/gitlab-org/gitlab/-/commit/c88b2c962eda423c3fca88cfe65b29f186823283) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/249432)) **GitLab Enterprise Edition**
- [Send CI/CD OTel data with optional bearer token](https://gitlab.com/gitlab-org/gitlab/-/commit/2e75a61e4289407da327229818b65874ecd3a3e1) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/249026))
- [Add GLQL schema endpoint](https://gitlab.com/gitlab-org/gitlab/-/commit/3b7257776ecef9c9e9ddac3995fe6d7885b26835) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/247360))
- [Add get_repository_file MCP tool](https://gitlab.com/gitlab-org/gitlab/-/commit/f5992438db8b3c92330d41a1e7bcd296b9180217) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/248744))
- [Add GraphQL fields for Note Duo session status](https://gitlab.com/gitlab-org/gitlab/-/commit/7f638e0d9d3d628a39001966f76d7d1235206d11) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/249833)) **GitLab Enterprise Edition**
- [Add "Archived" tooltip to archived label chips](https://gitlab.com/gitlab-org/gitlab/-/commit/f039c658e07e9d3995311c6de4131333144e5f97) by @nwittstruck ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/244270))
- [Add archived badge to merge request header](https://gitlab.com/gitlab-org/gitlab/-/commit/3c17787d818631b05cb06223cffecc1f83375563) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/249593))
- [Add ai_enabled field to work item agent plan widget](https://gitlab.com/gitlab-org/gitlab/-/commit/eeb0ead3ce82bfd3a1d14c313645b40a31748f99) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/249644)) **GitLab Enterprise Edition**
- [feat: Add Cargo package upload authorize endpoint](https://gitlab.com/gitlab-org/gitlab/-/commit/5ce2fb9bfe0bb0020eb231edfc1bcbb41335e77b) by @kiran-4444 ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/240512))
- [Add SendGrid API token validity check](https://gitlab.com/gitlab-org/gitlab/-/commit/d971ac61168c74b928bff2d18843cbbcaa5bdb60) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/248116)) **GitLab Enterprise Edition**
(省略されました)
## 19.2.4 (2026-08-14)
No changes.
## 19.2.3 (2026-08-13)
### Security (2 changes)
- [Prevent query swapping with multiplexed queries and gl-introduced](https://gitlab.com/gitlab-org/security/gitlab/-/commit/d2ea4b971a985ae7c6ec83502a6bb57bb5a0cde8) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6570))
- [Prevent calling object method when resolving fallback field](https://gitlab.com/gitlab-org/security/gitlab/-/commit/e283c6adeb3d7c69967c830d85bb6d47004660f5) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6565))
## 19.1.6 (2026-08-14)
No changes.
## 19.1.5 (2026-08-13)
### Security (2 changes)
- [Prevent query swapping with multiplexed queries and gl-introduced](https://gitlab.com/gitlab-org/security/gitlab/-/commit/710f7dba77091c39abde2bd2bc2a5ff20f9ea290) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6571))
- [Prevent calling object method when resolving fallback field](https://gitlab.com/gitlab-org/security/gitlab/-/commit/df6f3085fa47f99397e1d86fdeff3967e7afcc77) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6566))
## 19.0.8 (2026-08-14)
No changes.
## 19.0.7 (2026-08-13)
### Security (2 changes)
- [Prevent query swapping with multiplexed queries and gl-introduced](https://gitlab.com/gitlab-org/security/gitlab/-/commit/3121b998c8f39285a71481e7a46f853364185c95) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6572))
- [Prevent calling object method when resolving fallback field](https://gitlab.com/gitlab-org/security/gitlab/-/commit/2bd1fa9c203ac158781f017bc7dac458af349382) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6567))
## 18.11.11 (2026-08-14)
(省略されました)
No changes.
## 19.2.3 (2026-08-13)
### Security (2 changes)
- [Prevent query swapping with multiplexed queries and gl-introduced](https://gitlab.com/gitlab-org/security/gitlab/-/commit/d2ea4b971a985ae7c6ec83502a6bb57bb5a0cde8) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6570))
- [Prevent calling object method when resolving fallback field](https://gitlab.com/gitlab-org/security/gitlab/-/commit/e283c6adeb3d7c69967c830d85bb6d47004660f5) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6565))
## 19.1.6 (2026-08-14)
No changes.
## 19.1.5 (2026-08-13)
### Security (2 changes)
- [Prevent query swapping with multiplexed queries and gl-introduced](https://gitlab.com/gitlab-org/security/gitlab/-/commit/710f7dba77091c39abde2bd2bc2a5ff20f9ea290) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6571))
- [Prevent calling object method when resolving fallback field](https://gitlab.com/gitlab-org/security/gitlab/-/commit/df6f3085fa47f99397e1d86fdeff3967e7afcc77) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6566))
## 19.0.8 (2026-08-14)
No changes.
## 19.0.7 (2026-08-13)
### Security (2 changes)
- [Prevent query swapping with multiplexed queries and gl-introduced](https://gitlab.com/gitlab-org/security/gitlab/-/commit/3121b998c8f39285a71481e7a46f853364185c95) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6572))
- [Prevent calling object method when resolving fallback field](https://gitlab.com/gitlab-org/security/gitlab/-/commit/2bd1fa9c203ac158781f017bc7dac458af349382) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6567))
## 18.11.11 (2026-08-14)
(省略されました)
## 19.2.2 (2026-08-11)
### Fixed (10 changes)
- [Update Codex Agent to use gpt-5.3-codex](https://gitlab.com/gitlab-org/security/gitlab/-/commit/f62b8388d0964679ea4eded13c7ba1bdd946a75d)
- [Fix duplicated content when copying across blob viewer chunks](https://gitlab.com/gitlab-org/security/gitlab/-/commit/c8a70d5b3a878f701ba9f39d7ca4039d12eba847)
- [[19.2] Remove project_id FKs from two Geo verification state tables](https://gitlab.com/gitlab-org/security/gitlab/-/commit/685182cb30de9fcd22880673e795c169723ed1f6)
- [Preserve Geo verification retry fields across resyncs](https://gitlab.com/gitlab-org/security/gitlab/-/commit/647075a901b1cabeb5ede738fc6e88dc68f3b118) **GitLab Enterprise Edition**
- [Fix Open in full page action in board issue drawer](https://gitlab.com/gitlab-org/security/gitlab/-/commit/40bcd2fbb4dec7cde39617ffb241a84ed1212772)
- [Fix work item drawer expand crash on issue boards](https://gitlab.com/gitlab-org/security/gitlab/-/commit/922ec0322ff15d5c9065f75147744a261ad97b81)
- [Pre-approve GitLab MCP server read tools in the claim](https://gitlab.com/gitlab-org/security/gitlab/-/commit/2b248bf4f55150b2bbecb444a9f266d3d8ded6ff) **GitLab Enterprise Edition**
- [Pre-approve Orbit MCP tools in tool access policies claim](https://gitlab.com/gitlab-org/security/gitlab/-/commit/e589eff2c87a8596afbccadc3c6a55e853caac42) **GitLab Enterprise Edition**
- [Sign Workhorse MCP client requests with the API JWT](https://gitlab.com/gitlab-org/security/gitlab/-/commit/0737f1aef3bf1d340cdd87dcdc20813d3a98cdfa)
- [Push agent_artifacts_page flag on project settings edit page](https://gitlab.com/gitlab-org/security/gitlab/-/commit/7826f8211b9e2d104b3cfdb9c3a5db6e6a1422de) **GitLab Enterprise Edition**
### Changed (1 change)
- [Reuse ci_max_total_yaml_size_bytes for job definition config limit](https://gitlab.com/gitlab-org/security/gitlab/-/commit/ad4489b91642887a8b87d4ef9d2bb3b44d6173b2)
### Security (15 changes)
- [Enforce namespace containment in aiToolRules resolver](https://gitlab.com/gitlab-org/security/gitlab/-/commit/4336fc0d8fb55477e5c3cac657b05c2174cbd6e4) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6539))
- [Fix authorize_admin_project! being skipped on project update](https://gitlab.com/gitlab-org/security/gitlab/-/commit/32a74eac4323077abb603d0bcba2ce8270e1ca6c) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6544))
- [Exclude awaiting project members from custom role permissions](https://gitlab.com/gitlab-org/security/gitlab/-/commit/aae05ccb61847dbbcc744ec22f11105b47fbd2d7) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6535))
- [Migrate Conan JWT authentication to dedicated conan_jwt_secret](https://gitlab.com/gitlab-org/security/gitlab/-/commit/1c4bf0c3d8d1937e1aa7d9563d4880c0691b42e3) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6494))
(省略されました)
### Fixed (10 changes)
- [Update Codex Agent to use gpt-5.3-codex](https://gitlab.com/gitlab-org/security/gitlab/-/commit/f62b8388d0964679ea4eded13c7ba1bdd946a75d)
- [Fix duplicated content when copying across blob viewer chunks](https://gitlab.com/gitlab-org/security/gitlab/-/commit/c8a70d5b3a878f701ba9f39d7ca4039d12eba847)
- [[19.2] Remove project_id FKs from two Geo verification state tables](https://gitlab.com/gitlab-org/security/gitlab/-/commit/685182cb30de9fcd22880673e795c169723ed1f6)
- [Preserve Geo verification retry fields across resyncs](https://gitlab.com/gitlab-org/security/gitlab/-/commit/647075a901b1cabeb5ede738fc6e88dc68f3b118) **GitLab Enterprise Edition**
- [Fix Open in full page action in board issue drawer](https://gitlab.com/gitlab-org/security/gitlab/-/commit/40bcd2fbb4dec7cde39617ffb241a84ed1212772)
- [Fix work item drawer expand crash on issue boards](https://gitlab.com/gitlab-org/security/gitlab/-/commit/922ec0322ff15d5c9065f75147744a261ad97b81)
- [Pre-approve GitLab MCP server read tools in the claim](https://gitlab.com/gitlab-org/security/gitlab/-/commit/2b248bf4f55150b2bbecb444a9f266d3d8ded6ff) **GitLab Enterprise Edition**
- [Pre-approve Orbit MCP tools in tool access policies claim](https://gitlab.com/gitlab-org/security/gitlab/-/commit/e589eff2c87a8596afbccadc3c6a55e853caac42) **GitLab Enterprise Edition**
- [Sign Workhorse MCP client requests with the API JWT](https://gitlab.com/gitlab-org/security/gitlab/-/commit/0737f1aef3bf1d340cdd87dcdc20813d3a98cdfa)
- [Push agent_artifacts_page flag on project settings edit page](https://gitlab.com/gitlab-org/security/gitlab/-/commit/7826f8211b9e2d104b3cfdb9c3a5db6e6a1422de) **GitLab Enterprise Edition**
### Changed (1 change)
- [Reuse ci_max_total_yaml_size_bytes for job definition config limit](https://gitlab.com/gitlab-org/security/gitlab/-/commit/ad4489b91642887a8b87d4ef9d2bb3b44d6173b2)
### Security (15 changes)
- [Enforce namespace containment in aiToolRules resolver](https://gitlab.com/gitlab-org/security/gitlab/-/commit/4336fc0d8fb55477e5c3cac657b05c2174cbd6e4) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6539))
- [Fix authorize_admin_project! being skipped on project update](https://gitlab.com/gitlab-org/security/gitlab/-/commit/32a74eac4323077abb603d0bcba2ce8270e1ca6c) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6544))
- [Exclude awaiting project members from custom role permissions](https://gitlab.com/gitlab-org/security/gitlab/-/commit/aae05ccb61847dbbcc744ec22f11105b47fbd2d7) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6535))
- [Migrate Conan JWT authentication to dedicated conan_jwt_secret](https://gitlab.com/gitlab-org/security/gitlab/-/commit/1c4bf0c3d8d1937e1aa7d9563d4880c0691b42e3) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6494))
(省略されました)
## 19.2.1 (2026-07-29)
### Fixed (6 changes)
- [Fix self-managed admin/owner cannot enroll namespaces into Orbit](https://gitlab.com/gitlab-org/security/gitlab/-/commit/3003847e771358a43ae556f03fc6bd0ebecec45b) **GitLab Enterprise Edition**
- [Restore AI infrastructure settings after upgrade](https://gitlab.com/gitlab-org/security/gitlab/-/commit/f78561c4a696a12264ef3781461df2f0524748ed) **GitLab Enterprise Edition**
- [Remove --unlink-first and --recursive-unlink from tar extract](https://gitlab.com/gitlab-org/security/gitlab/-/commit/b8ac96f7853f0b5f67f7bab20f3777e9f4423159)
- [Fix keys org_id NOT NULL constraint on Self-Managed/Dedicated](https://gitlab.com/gitlab-org/security/gitlab/-/commit/ca70368ae653a40fcfcccf26f72d7a7d577afef5)
- [Enforce admin Duo lock on group settings update](https://gitlab.com/gitlab-org/security/gitlab/-/commit/acfd6ad416ef5f30fda3d88951631959f5b782d7) **GitLab Enterprise Edition**
- [Use self-hosted TLS setting in DWS flow validation and metadata](https://gitlab.com/gitlab-org/security/gitlab/-/commit/06b0993fa78599879a2162ebaab56de48ad88bc4) **GitLab Enterprise Edition**
### Security (14 changes)
- [Enforce artifact access control on pipeline test reports](https://gitlab.com/gitlab-org/security/gitlab/-/commit/8ce7ec879ee636fb356f45e585e5c0fcdee91ead) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6469))
- [feat: Implement Workhorse JWT for all senddata requests](https://gitlab.com/gitlab-org/security/gitlab/-/commit/8885576fe7968b226189c175813929b36fbd10bc) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6478))
- [Fix virtual registry redirect handler and file request service](https://gitlab.com/gitlab-org/security/gitlab/-/commit/8111fc80a2dfc9bb10f3b07c3eb39976f95fc11a) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6488))
- [Fix reflected XSS in oAuth apps list page](https://gitlab.com/gitlab-org/security/gitlab/-/commit/11386fa551c87b388d5f861a68f8f154436e7af9) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6473))
- [Disable MR collaboration when project access is reduced](https://gitlab.com/gitlab-org/security/gitlab/-/commit/48d3f8bb57134d9876d16d487fec6fec5f04d55f) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6483))
- [Filter undeclared attributes from pipeline schedule input params](https://gitlab.com/gitlab-org/security/gitlab/-/commit/c5c79ce3bc3667d90b9d2694788d0030cdf2c605) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6479))
- [Prevent reading of diff files over limit from external storage](https://gitlab.com/gitlab-org/security/gitlab/-/commit/d2daee9d19f2e3e09e0136d699488b744209a644) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6468))
- [Refresh approval unapproved-key during MR creation flow](https://gitlab.com/gitlab-org/security/gitlab/-/commit/b920a39eaa95d36e688c30deca7f5cfb4cfce5e5) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6465))
- [Read code review custom instructions from default branch](https://gitlab.com/gitlab-org/security/gitlab/-/commit/396722411c61cca66475bfd4d79889ac2fabf9b1) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6474))
- [Apply namespace tool governance to direct_access DWS token](https://gitlab.com/gitlab-org/security/gitlab/-/commit/acde316c07ab8caf97644709c3b6fba2414faccc) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6460))
(省略されました)
### Fixed (6 changes)
- [Fix self-managed admin/owner cannot enroll namespaces into Orbit](https://gitlab.com/gitlab-org/security/gitlab/-/commit/3003847e771358a43ae556f03fc6bd0ebecec45b) **GitLab Enterprise Edition**
- [Restore AI infrastructure settings after upgrade](https://gitlab.com/gitlab-org/security/gitlab/-/commit/f78561c4a696a12264ef3781461df2f0524748ed) **GitLab Enterprise Edition**
- [Remove --unlink-first and --recursive-unlink from tar extract](https://gitlab.com/gitlab-org/security/gitlab/-/commit/b8ac96f7853f0b5f67f7bab20f3777e9f4423159)
- [Fix keys org_id NOT NULL constraint on Self-Managed/Dedicated](https://gitlab.com/gitlab-org/security/gitlab/-/commit/ca70368ae653a40fcfcccf26f72d7a7d577afef5)
- [Enforce admin Duo lock on group settings update](https://gitlab.com/gitlab-org/security/gitlab/-/commit/acfd6ad416ef5f30fda3d88951631959f5b782d7) **GitLab Enterprise Edition**
- [Use self-hosted TLS setting in DWS flow validation and metadata](https://gitlab.com/gitlab-org/security/gitlab/-/commit/06b0993fa78599879a2162ebaab56de48ad88bc4) **GitLab Enterprise Edition**
### Security (14 changes)
- [Enforce artifact access control on pipeline test reports](https://gitlab.com/gitlab-org/security/gitlab/-/commit/8ce7ec879ee636fb356f45e585e5c0fcdee91ead) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6469))
- [feat: Implement Workhorse JWT for all senddata requests](https://gitlab.com/gitlab-org/security/gitlab/-/commit/8885576fe7968b226189c175813929b36fbd10bc) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6478))
- [Fix virtual registry redirect handler and file request service](https://gitlab.com/gitlab-org/security/gitlab/-/commit/8111fc80a2dfc9bb10f3b07c3eb39976f95fc11a) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6488))
- [Fix reflected XSS in oAuth apps list page](https://gitlab.com/gitlab-org/security/gitlab/-/commit/11386fa551c87b388d5f861a68f8f154436e7af9) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6473))
- [Disable MR collaboration when project access is reduced](https://gitlab.com/gitlab-org/security/gitlab/-/commit/48d3f8bb57134d9876d16d487fec6fec5f04d55f) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6483))
- [Filter undeclared attributes from pipeline schedule input params](https://gitlab.com/gitlab-org/security/gitlab/-/commit/c5c79ce3bc3667d90b9d2694788d0030cdf2c605) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6479))
- [Prevent reading of diff files over limit from external storage](https://gitlab.com/gitlab-org/security/gitlab/-/commit/d2daee9d19f2e3e09e0136d699488b744209a644) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6468))
- [Refresh approval unapproved-key during MR creation flow](https://gitlab.com/gitlab-org/security/gitlab/-/commit/b920a39eaa95d36e688c30deca7f5cfb4cfce5e5) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6465))
- [Read code review custom instructions from default branch](https://gitlab.com/gitlab-org/security/gitlab/-/commit/396722411c61cca66475bfd4d79889ac2fabf9b1) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6474))
- [Apply namespace tool governance to direct_access DWS token](https://gitlab.com/gitlab-org/security/gitlab/-/commit/acde316c07ab8caf97644709c3b6fba2414faccc) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6460))
(省略されました)
## 19.2.0 (2026-07-15)
### Added (263 changes)
- [Add Duo Workflow Service check to self-hosted diagnostics](https://gitlab.com/gitlab-org/gitlab/-/commit/151b60582dd1cb1b736cd91c259cdff8177a9483) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/245339))
- [Add instance setting for Policy Store experiment](https://gitlab.com/gitlab-org/gitlab/-/commit/6c208a6b9ad7518ae3f986acd6bcd7ccf912d358) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/243541)) **GitLab Enterprise Edition**
- [Bump attributes limit to 100](https://gitlab.com/gitlab-org/gitlab/-/commit/57b5f66a00ea42e7dc5ac75baf59048cc5940ccf) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/244916)) **GitLab Enterprise Edition**
- [Make inline blame column width user-resizable via drag handle](https://gitlab.com/gitlab-org/gitlab/-/commit/7b8d739b9d6551d5e05897bba8e91037d5a5eda3) by @therealrinku ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/239543))
- [Add WWW-Authenticate challenge to MCP 401 responses](https://gitlab.com/gitlab-org/gitlab/-/commit/93735462b4a5c4f7911ca4ce055beb1dc3e4662c) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/243210))
- [Add model to Duo Agent Platform session details](https://gitlab.com/gitlab-org/gitlab/-/commit/6ef2b47f562d688da126a937be5aa394f4112e5d) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/243971)) **GitLab Enterprise Edition**
- [Add Orbit named query templates endpoint](https://gitlab.com/gitlab-org/gitlab/-/commit/914436c58e5032448c629c921f148bc1d6a91662) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/244701)) **GitLab Enterprise Edition**
- [Support path parameter with keyset pagination in Commits API](https://gitlab.com/gitlab-org/gitlab/-/commit/d12659d097e080745a2cd6e7288a4b45edc78b39) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/243938))
- [Support boards filtered by 'me'](https://gitlab.com/gitlab-org/gitlab/-/commit/af7ef1fe95caedef76521f2070e90ac86c35b9f2) by @ajuckel ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/234369))
- [Enabling FFs for dependency MR resolution to default](https://gitlab.com/gitlab-org/gitlab/-/commit/3c8c8eaeff6ab94abcc4319754ad77a70ac3c2d3) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/244742)) **GitLab Enterprise Edition**
- [Add pipelines finished counter, histogram and UX SLI](https://gitlab.com/gitlab-org/gitlab/-/commit/1309641539cb0730795ac31237e5023285c7a4bc) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/244288))
- [Geo logcursor: invalidate both L1 and L2 caches](https://gitlab.com/gitlab-org/gitlab/-/commit/45d7afb8d46fc63f3aaacce5d7ae851bfe67aec4) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/244137)) **GitLab Enterprise Edition**
- [Add variables_override support for scheduled pipeline execution policies](https://gitlab.com/gitlab-org/gitlab/-/commit/5fdf1410009a7658f2e4f0f740d0c5e193612c1a) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/244302))
- [Remove use_built_in_project_templates_enabled FF](https://gitlab.com/gitlab-org/gitlab/-/commit/fba347c957c76234bf087ff0b3a55d31137d3a1f) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/244702)) **GitLab Enterprise Edition**
- [Expose granular_scopes in REST personal access token responses](https://gitlab.com/gitlab-org/gitlab/-/commit/2046d403c722beec59bbeb9a85126162a5e70f02) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/243754))
- [Enable agent_artifacts_page by default](https://gitlab.com/gitlab-org/gitlab/-/commit/06911adee3637e4560e3513df5f1a288ae461b34) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/244459)) **GitLab Enterprise Edition**
- [Add AiTracking for Merge Commit Message Generation](https://gitlab.com/gitlab-org/gitlab/-/commit/a679e4978eee99a0a1338c0aaf12f8b42069590c) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/240198)) **GitLab Enterprise Edition**
(省略されました)
### Added (263 changes)
- [Add Duo Workflow Service check to self-hosted diagnostics](https://gitlab.com/gitlab-org/gitlab/-/commit/151b60582dd1cb1b736cd91c259cdff8177a9483) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/245339))
- [Add instance setting for Policy Store experiment](https://gitlab.com/gitlab-org/gitlab/-/commit/6c208a6b9ad7518ae3f986acd6bcd7ccf912d358) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/243541)) **GitLab Enterprise Edition**
- [Bump attributes limit to 100](https://gitlab.com/gitlab-org/gitlab/-/commit/57b5f66a00ea42e7dc5ac75baf59048cc5940ccf) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/244916)) **GitLab Enterprise Edition**
- [Make inline blame column width user-resizable via drag handle](https://gitlab.com/gitlab-org/gitlab/-/commit/7b8d739b9d6551d5e05897bba8e91037d5a5eda3) by @therealrinku ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/239543))
- [Add WWW-Authenticate challenge to MCP 401 responses](https://gitlab.com/gitlab-org/gitlab/-/commit/93735462b4a5c4f7911ca4ce055beb1dc3e4662c) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/243210))
- [Add model to Duo Agent Platform session details](https://gitlab.com/gitlab-org/gitlab/-/commit/6ef2b47f562d688da126a937be5aa394f4112e5d) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/243971)) **GitLab Enterprise Edition**
- [Add Orbit named query templates endpoint](https://gitlab.com/gitlab-org/gitlab/-/commit/914436c58e5032448c629c921f148bc1d6a91662) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/244701)) **GitLab Enterprise Edition**
- [Support path parameter with keyset pagination in Commits API](https://gitlab.com/gitlab-org/gitlab/-/commit/d12659d097e080745a2cd6e7288a4b45edc78b39) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/243938))
- [Support boards filtered by 'me'](https://gitlab.com/gitlab-org/gitlab/-/commit/af7ef1fe95caedef76521f2070e90ac86c35b9f2) by @ajuckel ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/234369))
- [Enabling FFs for dependency MR resolution to default](https://gitlab.com/gitlab-org/gitlab/-/commit/3c8c8eaeff6ab94abcc4319754ad77a70ac3c2d3) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/244742)) **GitLab Enterprise Edition**
- [Add pipelines finished counter, histogram and UX SLI](https://gitlab.com/gitlab-org/gitlab/-/commit/1309641539cb0730795ac31237e5023285c7a4bc) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/244288))
- [Geo logcursor: invalidate both L1 and L2 caches](https://gitlab.com/gitlab-org/gitlab/-/commit/45d7afb8d46fc63f3aaacce5d7ae851bfe67aec4) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/244137)) **GitLab Enterprise Edition**
- [Add variables_override support for scheduled pipeline execution policies](https://gitlab.com/gitlab-org/gitlab/-/commit/5fdf1410009a7658f2e4f0f740d0c5e193612c1a) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/244302))
- [Remove use_built_in_project_templates_enabled FF](https://gitlab.com/gitlab-org/gitlab/-/commit/fba347c957c76234bf087ff0b3a55d31137d3a1f) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/244702)) **GitLab Enterprise Edition**
- [Expose granular_scopes in REST personal access token responses](https://gitlab.com/gitlab-org/gitlab/-/commit/2046d403c722beec59bbeb9a85126162a5e70f02) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/243754))
- [Enable agent_artifacts_page by default](https://gitlab.com/gitlab-org/gitlab/-/commit/06911adee3637e4560e3513df5f1a288ae461b34) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/244459)) **GitLab Enterprise Edition**
- [Add AiTracking for Merge Commit Message Generation](https://gitlab.com/gitlab-org/gitlab/-/commit/a679e4978eee99a0a1338c0aaf12f8b42069590c) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/240198)) **GitLab Enterprise Edition**
(省略されました)
## 19.1.2 (2026-07-07)
### Fixed (4 changes)
- [Fix approval rule override regression for Developer MR authors](https://gitlab.com/gitlab-org/security/gitlab/-/commit/21bb811451fd8effd7d3b9a8ab77cbee0b1cfeaa) **GitLab Enterprise Edition**
- [Remove ActiveUserCountThresholdWorker cron schedule](https://gitlab.com/gitlab-org/security/gitlab/-/commit/46e8e5343eed6d2fcbb38feaf2ea6a9ff2d8c600) **GitLab Enterprise Edition**
- [Backfill NULL organization_id on oauth_applications](https://gitlab.com/gitlab-org/security/gitlab/-/commit/50c1398ee852267b549378768a9cff26d83ad47e)
- [Make ci_finished_builds engine swap work on ClickHouse 23.x](https://gitlab.com/gitlab-org/security/gitlab/-/commit/4ba255adf09bcee5c5af4c9098969d4db77217aa)
### Security (9 changes)
- [Clear stored password when pull mirror destination changes](https://gitlab.com/gitlab-org/security/gitlab/-/commit/b4882686c5d25b4b86cca5bd8063da68d185a9bd) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6399))
- [Address private project cross-references visibility issue](https://gitlab.com/gitlab-org/security/gitlab/-/commit/b94fcf3247df6dd53955363f8c70d04dc37907e7) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6346))
- [Treat failing markup renders as plain text](https://gitlab.com/gitlab-org/security/gitlab/-/commit/ccee03b0c5a362c97fe3a5e9d6ac126faa03fbac) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6387))
- [Fix tag/branch ambiguity in blob view](https://gitlab.com/gitlab-org/security/gitlab/-/commit/36bf9a651fea9953878fc21ed6676b2ddc00b4a4) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6423))
- [Don't attempt placeholder replacement without a URL](https://gitlab.com/gitlab-org/security/gitlab/-/commit/e7f6f708e1060359f2fab9cbf2f8dcce836ac89d) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6376))
- [Fix auditor write access to compliance violation mutations](https://gitlab.com/gitlab-org/security/gitlab/-/commit/5eaccd504fecc48f660e7c09ec7b3aaca94f4d48) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6380))
- [Enforce group-level approval rule lock in approval policies](https://gitlab.com/gitlab-org/security/gitlab/-/commit/8c0e536dea72ae59c143a9c928e6164b11f816ea) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6349))
- [Fix WorkItems auth bypass for Minimal Access users](https://gitlab.com/gitlab-org/security/gitlab/-/commit/5b5d349eb526df9d04a0eb743969aa9100dbbd9b) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6225))
## 19.0.4 (2026-07-07)
### Fixed (2 changes)
- [Backfill NULL organization_id on oauth_applications](https://gitlab.com/gitlab-org/security/gitlab/-/commit/5039efa471f24b04100c341ffdd02d2ce77fa0d7)
- [Fix ci_finished_builds engine swap on deferred post-deploy](https://gitlab.com/gitlab-org/security/gitlab/-/commit/48ae73d20a63fdca3f2bf9bedc14c0e37b661cfc)
(省略されました)
### Fixed (4 changes)
- [Fix approval rule override regression for Developer MR authors](https://gitlab.com/gitlab-org/security/gitlab/-/commit/21bb811451fd8effd7d3b9a8ab77cbee0b1cfeaa) **GitLab Enterprise Edition**
- [Remove ActiveUserCountThresholdWorker cron schedule](https://gitlab.com/gitlab-org/security/gitlab/-/commit/46e8e5343eed6d2fcbb38feaf2ea6a9ff2d8c600) **GitLab Enterprise Edition**
- [Backfill NULL organization_id on oauth_applications](https://gitlab.com/gitlab-org/security/gitlab/-/commit/50c1398ee852267b549378768a9cff26d83ad47e)
- [Make ci_finished_builds engine swap work on ClickHouse 23.x](https://gitlab.com/gitlab-org/security/gitlab/-/commit/4ba255adf09bcee5c5af4c9098969d4db77217aa)
### Security (9 changes)
- [Clear stored password when pull mirror destination changes](https://gitlab.com/gitlab-org/security/gitlab/-/commit/b4882686c5d25b4b86cca5bd8063da68d185a9bd) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6399))
- [Address private project cross-references visibility issue](https://gitlab.com/gitlab-org/security/gitlab/-/commit/b94fcf3247df6dd53955363f8c70d04dc37907e7) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6346))
- [Treat failing markup renders as plain text](https://gitlab.com/gitlab-org/security/gitlab/-/commit/ccee03b0c5a362c97fe3a5e9d6ac126faa03fbac) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6387))
- [Fix tag/branch ambiguity in blob view](https://gitlab.com/gitlab-org/security/gitlab/-/commit/36bf9a651fea9953878fc21ed6676b2ddc00b4a4) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6423))
- [Don't attempt placeholder replacement without a URL](https://gitlab.com/gitlab-org/security/gitlab/-/commit/e7f6f708e1060359f2fab9cbf2f8dcce836ac89d) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6376))
- [Fix auditor write access to compliance violation mutations](https://gitlab.com/gitlab-org/security/gitlab/-/commit/5eaccd504fecc48f660e7c09ec7b3aaca94f4d48) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6380))
- [Enforce group-level approval rule lock in approval policies](https://gitlab.com/gitlab-org/security/gitlab/-/commit/8c0e536dea72ae59c143a9c928e6164b11f816ea) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6349))
- [Fix WorkItems auth bypass for Minimal Access users](https://gitlab.com/gitlab-org/security/gitlab/-/commit/5b5d349eb526df9d04a0eb743969aa9100dbbd9b) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6225))
## 19.0.4 (2026-07-07)
### Fixed (2 changes)
- [Backfill NULL organization_id on oauth_applications](https://gitlab.com/gitlab-org/security/gitlab/-/commit/5039efa471f24b04100c341ffdd02d2ce77fa0d7)
- [Fix ci_finished_builds engine swap on deferred post-deploy](https://gitlab.com/gitlab-org/security/gitlab/-/commit/48ae73d20a63fdca3f2bf9bedc14c0e37b661cfc)
(省略されました)
RSS[全体]
Tw[@softantenna]