GitLab

詳細情報

タイトル GitLab
URL https://about.gitlab.com/
バージョン ver 19.5.3
更新日 2026/10/28
追加日 2016/02/23
種別 フリーソフト
説明 GitHubのようなサービスをローカルで提供することができるGitリポジトリ管理ソフト。

レビュー

概要

GitLabは、ソフトウェア開発ライフサイクル全体を統合したDevSecOpsプラットフォームです。2011年9月、ウクライナ人プログラマーのDmitry Zaporozhetsが個人プロジェクトとして開発を開始しました。自身が「モダンなオープンソースのGitリポジトリ管理ツールがない」と感じたことがきっかけで、Ruby on Railsで実装されました。毎月22日に定期リリースを行う慣習は創業当初から続いています。

2012年にSid Sijbrandijがコーポレートとして法人化に参加し、CEOとして商業化を推進。Community Edition(CE)のオープンソースモデルを維持しつつ、Enterprise Edition(EE)を追加することで、オープンコアモデルでビジネスを展開しています。現在は5,000万人以上のユーザーが利用する大規模プラットフォームへ成長し、2021年にはNasdaq(GTLB)に上場しました。

主要な特徴・機能

  • Gitリポジトリ管理: コードのホスティング・ブランチ管理・マージリクエスト
  • CI/CD: 継続的インテグレーション・継続的デリバリーのパイプラインを内蔵
  • DevSecOps統合: SAST・SCA・Secret Detection・DASTなどのセキュリティスキャンを開発フローに統合
  • イシュートラッカー: バグ管理・プロジェクト計画・マイルストーン管理
  • コンテナレジストリ: Dockerイメージの管理・配布
  • Kubernetes連携: コンテナオーケストレーション環境との統合
  • AI機能(GitLab Duo): コード補完・セキュリティ分析・自動化を支援するAIエージェント
  • セルフホスト対応: 自社サーバーでのオンプレミス運用が可能

対象ユーザー

  • オープンソースプロジェクトの開発チーム(Community Edition)
  • CI/CDやセキュリティ検査を統合した開発環境を必要とする企業(Enterprise Edition)
  • GitHubの代替としてセルフホストを希望する組織・エンジニアリングチーム
  • 金融・公共・通信・航空宇宙など厳格なコンプライアンスが求められる業界

ライセンス情報

GitLabはオープンコアモデルを採用しています。

  • Community Edition(CE): MITライセンスで提供される無料のオープンソース版
  • Enterprise Edition(EE): 有償のプレミアム機能を追加したエンタープライズ向け有料版(Free・Premium・Ultimateの各プランあり)

セルフホスト版のほか、GitLab.comによるSaaS(クラウド)版も提供されています。

スクリーンショット

スクリーンショットはありません。

更新グラフ

バージョン履歴

## 19.5.3 (2026-10-28)
No changes.
## 19.4.5 (2026-10-28)
No changes.
## 19.5.2 (2026-10-27)
### Added (6 changes)
- [Backport Orbit grep and context changes and turn on monetization in 19.5](https://gitlab.com/gitlab-org/gitlab/-/commit/75a57f7ee9e8463192524286c2d8c495026d4fa3) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/265285))
- [Backport the 2026-10-26 Orbit changes to 19.5](https://gitlab.com/gitlab-org/gitlab/-/commit/d5733808bbdddf99c87fc65e6a9e9cf9ac8de643) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/265147))
- [Backport the 2026-10-25 Orbit changes to 19.5](https://gitlab.com/gitlab-org/gitlab/-/commit/184d4f30195fd0c9f61c0be1da3372ae6d9ba8e8) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/264911))
- [Backport the 2026-10-23 Orbit changes to 19.5](https://gitlab.com/gitlab-org/gitlab/-/commit/5c71dea1f0ad9f5432ee79e7faca76cdd70c1ef1) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/264801))
- [Add scoped Orbit grep endpoint](https://gitlab.com/gitlab-org/gitlab/-/commit/846b95b4d19d4dbfc30808f88d83bbdfc12760c7) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/264269)) **GitLab Enterprise Edition**
- [Add POST /orbit/context endpoint](https://gitlab.com/gitlab-org/gitlab/-/commit/daf47ee96b058d46dbb28372a27ed1b7c9e91aa6) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/264270)) **GitLab Enterprise Edition**
### Fixed (2 changes)
- [Backport the Orbit trial credit grants fix to 19.5](https://gitlab.com/gitlab-org/gitlab/-/commit/639d228d90612f2c8c53b10689e369a8bf3c8bd8) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/265205))
### Performance (2 changes)
## 19.4.4 (2026-10-27)
### Added (7 changes)
- [Backport Orbit grep and context changes and turn on monetization in 19.4](https://gitlab.com/gitlab-org/gitlab/-/commit/5ed28f7eeaa4f4b907620761d68d29d51e1ff999) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/265286))
- [Backport the 2026-10-26 Orbit changes to 19.4](https://gitlab.com/gitlab-org/gitlab/-/commit/7f8b6c2af761afacb2d513493dad15f31b0c1fe1) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/265148))
- [Backport the 2026-10-25 Orbit changes to 19.4](https://gitlab.com/gitlab-org/gitlab/-/commit/f7805f573eca5686068bf8d0cce1043bc02a3703) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/264912))
- [Add scoped Orbit grep endpoint](https://gitlab.com/gitlab-org/gitlab/-/commit/46cdfa8f9c56c36e038fb48e14b44608b32cc6e2) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/264303)) **GitLab Enterprise Edition**
- [Add POST /orbit/context endpoint](https://gitlab.com/gitlab-org/gitlab/-/commit/88d5542b32eec20fe5820036c6da91cb8e66a9ef) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/264304)) **GitLab Enterprise Edition**
- [Backport the 2026-10-23 Orbit changes to 19.4](https://gitlab.com/gitlab-org/gitlab/-/commit/6c00eac882cffe6c0f4ad3caa4c6b5eff39d5e5f) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/264802))
(省略されました)
## 19.5.1 (2026-10-20)
### Fixed (7 changes)
- [Return 404 for Orbit archive when repository is missing](https://gitlab.com/gitlab-org/security/gitlab/-/commit/f1a589a035c936a5b9b39bd06280f279c47bccd0) **GitLab Enterprise Edition**
- [Fix work item change type and child milestone with features field](https://gitlab.com/gitlab-org/security/gitlab/-/commit/2d2816956a64923481a7a0d11f7dcda5d42f97d5)
- [Cache foundational flow catalog item per request](https://gitlab.com/gitlab-org/security/gitlab/-/commit/e35c680194e3aca10d6720e0fdca2436a9c20ed6) **GitLab Enterprise Edition**
- [Return 429 when Gitaly rejects GetArchive with ResourceExhausted](https://gitlab.com/gitlab-org/security/gitlab/-/commit/d981ad405a44343b29798bc86fde26be3d4f493b)
- [Link commit list browse button to the current file path](https://gitlab.com/gitlab-org/security/gitlab/-/commit/9953e45348d26002187185cef9c5dc857c2ad8a6)
- [Allocate pipeline IID for pipeline execution policy pipelines](https://gitlab.com/gitlab-org/security/gitlab/-/commit/eb0fa72702064f828967823e417dfb984c4bc115) **GitLab Enterprise Edition**
- [Pin the Baseline date in .browserslistrc](https://gitlab.com/gitlab-org/security/gitlab/-/commit/0a0c92260eb44c63b6667cadc45c6fa93e1f6986)
### Changed (1 change)
- [Update gitlab-markup to 2.2.0 and rdoc to 8.1.0](https://gitlab.com/gitlab-org/security/gitlab/-/commit/0fc0b1b839d5b0478cdba19c7c54b78ddb3c3be3)
### Security (14 changes)
- [Escape LDAP email filter value to prevent auth bypass](https://gitlab.com/gitlab-org/security/gitlab/-/commit/663f0cc24f5900287d8e2ef625f3d5220ced97e0) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6972))
- [Use declared params when listing milestones in the API](https://gitlab.com/gitlab-org/security/gitlab/-/commit/480d6f2656bafa21ae2812ff2340a71cc28e8991) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6968))
- [Gate newWorkItemEmailAddress on write-level token scope](https://gitlab.com/gitlab-org/security/gitlab/-/commit/c23b8bcb75c8ef2407d22202273882f76efae864) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6963))
- [Build OAuth discovery endpoint URLs from configured instance URL](https://gitlab.com/gitlab-org/security/gitlab/-/commit/bdcb7ea8e9abb585db10f83e5561dd9933db5d17) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6960))
- [Remove MR title from cached fragment](https://gitlab.com/gitlab-org/security/gitlab/-/commit/49a0d312a2f6cf370fbb1e32e22bb737ee1091bd) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6958))
- [Strip sensitive workhorse headers using canonical casing](https://gitlab.com/gitlab-org/security/gitlab/-/commit/23616412e2ce0ac9e5d7ff583994c55d93507adf) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6953))
- [Validate push checks on all ref types](https://gitlab.com/gitlab-org/security/gitlab/-/commit/602eba3f0833f458bf1d902fb3e0b6e9566645c6) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6952)) **GitLab Enterprise Edition**
(省略されました)
## 19.5.0 (2026-10-15)
### Added (306 changes)
- [Expose the Orbit trial offer on OrbitTrial](https://gitlab.com/gitlab-org/gitlab/-/commit/ac7fb5f53b759e07623531e4d3c60fac33f138af) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/261362)) **GitLab Enterprise Edition**
- [Add per-user rate limits to job erasure](https://gitlab.com/gitlab-org/gitlab/-/commit/c01f5da82533d530ff3340e137c9f66a064698c8) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/259439))
- [Enable note_agent_session_bar by default](https://gitlab.com/gitlab-org/gitlab/-/commit/2ee9efd985d1631f01102c0db5336fb21b24d9a7) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/261224)) **GitLab Enterprise Edition**
- [Add v2 session credits table and CustomersDot query](https://gitlab.com/gitlab-org/gitlab/-/commit/a38a02c6cdab9f40a7950afb9b2e734f84aa4b62) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/258596)) **GitLab Enterprise Edition**
- [Add batch label search to MCP tool](https://gitlab.com/gitlab-org/gitlab/-/commit/822826c20e7aecbf42f36b4ad6184cd9d1e1e8ee) by @wqyeo ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/257723))
- [Add fetch prompt for recommended reviewers](https://gitlab.com/gitlab-org/gitlab/-/commit/1ec73bb1dbc7c911a447d73abcfc501ccccf0445) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/260988)) **GitLab Enterprise Edition**
- [Record MCP client name and version on tool calls](https://gitlab.com/gitlab-org/gitlab/-/commit/77148c3892416daef712a75c0d27defb22da38bf) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/259976))
- [Add a goal field to each flow trigger condition](https://gitlab.com/gitlab-org/gitlab/-/commit/c24330ce4228a3e9e65fc118a3f648b7a8e225d0) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/260639)) **GitLab Enterprise Edition**
- [Add tier annotations to shared CE API route loops](https://gitlab.com/gitlab-org/gitlab/-/commit/4de2bc490fef52029faa2d4c798db950ce817a1d) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/259753)) **GitLab Enterprise Edition**
- [Serve integrations pages in organization admin area](https://gitlab.com/gitlab-org/gitlab/-/commit/f0a781ab2e87671b76906e1ee38e3b25d051a649) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/260001))
- [Remove ci_optional_needs_for_cross_pipeline feature flag](https://gitlab.com/gitlab-org/gitlab/-/commit/b76652d97ed13177441c9624c339644d6a6a18ed) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/261067))
- [Name the to-do's author and time in mobile push payloads](https://gitlab.com/gitlab-org/gitlab/-/commit/d08842fac5c408742386df6195c723bd65462115) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/260623))
- [Defaulted on duo_chat_goal_command](https://gitlab.com/gitlab-org/gitlab/-/commit/e0575ec648ab4745fce93c77e4cc339684ee2b00) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/260971)) **GitLab Enterprise Edition**
- [Add a discussions facet to the get_work_item MCP tool](https://gitlab.com/gitlab-org/gitlab/-/commit/e2802181f3f74f67dbee723e55b9de42d90e65cb) by @arjun40779 ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/259096))
- [Add trigger_source to agent presence](https://gitlab.com/gitlab-org/gitlab/-/commit/1591edb5280048323a8be5bc78082c2e97c89973) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/260943)) **GitLab Enterprise Edition**
- [Add createLabel to NamespacePermissions](https://gitlab.com/gitlab-org/gitlab/-/commit/f607a623873a1f65953b2186f324e6735b2edd07) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/260507))
- [Enable security_profile_banner FF by default](https://gitlab.com/gitlab-org/gitlab/-/commit/d2814d959be3a6e179ca46643ec5839b44a1a2d6) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/260928)) **GitLab Enterprise Edition**
(省略されました)
## 19.4.2 (2026-10-07)
### Fixed (13 changes)
- [Fix Gitaly up-to-date check for versions with a revision suffix](https://gitlab.com/gitlab-org/security/gitlab/-/commit/66d160c68acc997e37faf4149b9497eda0d46fcf)
- [Tolerate malformed Content-Range in HttpIO](https://gitlab.com/gitlab-org/security/gitlab/-/commit/43830e9dd549b5e8f5a0d1a79212dbebe0fedd84)
- [Send canonical timezone identifiers to Gitaly](https://gitlab.com/gitlab-org/security/gitlab/-/commit/1d798e1c173a7f031cba70a901429aa4503428c6)
- [Stop coverage delta timeouts from breaking the MR widget](https://gitlab.com/gitlab-org/security/gitlab/-/commit/d17a37d9ac292fad00bb9f8be799c86212c2f175)
- [Allow security policy bot cross-project container registry access](https://gitlab.com/gitlab-org/security/gitlab/-/commit/cad83ecc5bd61c5d4741909845a6d671d6e4aadf) **GitLab Enterprise Edition**
- [Align self-managed Restricted access with User.billable](https://gitlab.com/gitlab-org/security/gitlab/-/commit/544711003d7cd014f929335620f76ac306c8cf14) **GitLab Enterprise Edition**
- [Sign chat agent requests from the chat feature setting](https://gitlab.com/gitlab-org/security/gitlab/-/commit/91104d1d9ea970f646f48fdd3f67da55370d32a4) **GitLab Enterprise Edition**
- [Truncate Jira issue keys at the 500 per-entity API limit](https://gitlab.com/gitlab-org/security/gitlab/-/commit/27da71cdb8beb696a74d128be26ecc0a19960825)
- [Fix status filter dropping matching items](https://gitlab.com/gitlab-org/security/gitlab/-/commit/301d657c6c16a40790c7a67f1b1e15158f219426) **GitLab Enterprise Edition**
- [Make git exclusions in rate limit rules unconditional again](https://gitlab.com/gitlab-org/security/gitlab/-/commit/1b98e1fe6fa5995327492b40e1495288ee801ca2)
- [Update status category when a removed status is re-added](https://gitlab.com/gitlab-org/security/gitlab/-/commit/ac9b15a53dc564a26cc171859e04b9d5bb4caf74) **GitLab Enterprise Edition**
- [Create policy violations before scheduling MR preparation](https://gitlab.com/gitlab-org/security/gitlab/-/commit/e7de8263de677f375546cd7ad33680683e305f2b) **GitLab Enterprise Edition**
- [Retry transient chunk failures in Gitlab::HttpIO](https://gitlab.com/gitlab-org/security/gitlab/-/commit/c3f4effef7a7a956979c90e93b48ab21f9372350)
### Security (22 changes)
- [Build merge request header URLs without the request host](https://gitlab.com/gitlab-org/security/gitlab/-/commit/1138a67f58a3e3272cc559c5c9e70e161b218a52) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6850))
- [Stop direct_access from issuing a Duo Workflow Service token](https://gitlab.com/gitlab-org/security/gitlab/-/commit/3736c446e31fd7713e747650c115285ebf473a5e) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6875))
- [Remove admin compliance pipeline config from custom role](https://gitlab.com/gitlab-org/security/gitlab/-/commit/fe19fc868cffd7ba73f7eb3f4d8950cfd163b3ca) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6867))
(省略されました)
## 19.4.1 (2026-09-22)
### Fixed (1 change)
- [Resume mid-delta on the package metadata label path](https://gitlab.com/gitlab-org/security/gitlab/-/commit/8e3207d7d7bcc78c8dcce3429a00ebf46ed31574) **GitLab Enterprise Edition**
### Security (11 changes)
- [Bound compiled size of CI rules regexp patterns](https://gitlab.com/gitlab-org/security/gitlab/-/commit/360a5f4c0430ea2961dcdad511069007079db602) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6830))
- [Fix authorization bypass in MemberRole.dependentSecurityPolicies](https://gitlab.com/gitlab-org/security/gitlab/-/commit/5de5231473be3f6b6045fa62e52d17dc07583230) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6823))
- [Hide private child items in Epic API](https://gitlab.com/gitlab-org/security/gitlab/-/commit/f6e93099d96e22e4dde27b014cdc890269a6eb50) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6798))
- [Authorize GraphQL CiJob.trace with read_build_trace](https://gitlab.com/gitlab-org/security/gitlab/-/commit/2427e771fa368cc6282463fe56e32ce993d4143e) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6649))
- [Restrict mcp scope auth to routes with an mcp route setting](https://gitlab.com/gitlab-org/security/gitlab/-/commit/2a2778a745af51e672afff4cb68e6ae9480bf18c) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6809))
- [Fix thread-safety race in MCP aggregated tool instances](https://gitlab.com/gitlab-org/security/gitlab/-/commit/5b6320b50e1ac2b640b163728f904a6e0ad60e2d) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6799))
- [Prevent user resolution downgrade in bulk and third-party importers](https://gitlab.com/gitlab-org/security/gitlab/-/commit/c21119eee4620be5efd65e65c0c6f0e918667e18) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6797))
- [Enforce read_build_trace on Duo job trace paths](https://gitlab.com/gitlab-org/security/gitlab/-/commit/e6cf275403335954237125e2e0c017f1fffe336a) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6720))
- [Reject traversal segments in diff file URLs](https://gitlab.com/gitlab-org/security/gitlab/-/commit/a1113420f4e2343543ac491e11474a087c53b561) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6793))
- [Guard regexp compilation in CI rules clauses](https://gitlab.com/gitlab-org/security/gitlab/-/commit/291ad637d2c333035ee03e1f6ad6223f20870d5a) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6804))
## 19.3.3 (2026-09-22)
### Fixed (1 change)
- [Fix infinite loop parsing errored SARIF security reports](https://gitlab.com/gitlab-org/security/gitlab/-/commit/a1c14b1767ccbb205b4f1b28ba3bcc938b95b010) **GitLab Enterprise Edition**
### Security (11 changes)
- [Bound compiled size of CI rules regexp patterns](https://gitlab.com/gitlab-org/security/gitlab/-/commit/4be91decdf8095ca95df5e6ccba5c6e3b530530f) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6829))
(省略されました)
## 19.4.0 (2026-09-16)
### Added (300 changes)
- [Add sidebar to display audit event additional details](https://gitlab.com/gitlab-org/gitlab/-/commit/5264b617bdf6f54bf9350bacd977f033b3022aa4) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/254401)) **GitLab Enterprise Edition**
- [Emit semantic search confidence and record its SLI](https://gitlab.com/gitlab-org/gitlab/-/commit/325482c13bf1a36fc54dec21d4b6bac74ed87bcf) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/253574)) **GitLab Enterprise Edition**
- [Default enable sdlc_context_agent_trigger feature flag](https://gitlab.com/gitlab-org/gitlab/-/commit/4c0ea033f2ec77362b86ade7e9351d58e9a3078a) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/250459)) **GitLab Enterprise Edition**
- [Add AiTracking for the Duo Chat IDE code tools](https://gitlab.com/gitlab-org/gitlab/-/commit/2f02f124f2f88adc2b126c436af17112cc9f4252) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/246385)) **GitLab Enterprise Edition**
- [Route Duo in Slack to the slack_assistant flow behind a flag](https://gitlab.com/gitlab-org/gitlab/-/commit/92c3f70e5b50b82c4b6f1017312f7f0907589d72) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/254801))
- [Add control: duo_agentic_flow_audit_events_streaming](https://gitlab.com/gitlab-org/gitlab/-/commit/6c04948ccfd8a56f8ade43b2759f337fe2be3fbe) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/252332)) **GitLab Enterprise Edition**
- [DB Diagnostics: Add per-table autovacuum overrides and scale-factor risk](https://gitlab.com/gitlab-org/gitlab/-/commit/23b9f4edcfc4b5e4fd4d4f2c60a638100b892459) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/245561))
- [Show Edit action on organization users admin page](https://gitlab.com/gitlab-org/gitlab/-/commit/a8626c940dc8e5158477e26593288f153d222174) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/254693))
- [Add merge request risk classification widget](https://gitlab.com/gitlab-org/gitlab/-/commit/bbc18da2e3b4e029b48d26786ffb21259bc9b1c1) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/251381)) **GitLab Enterprise Edition**
- [Add instance setting to auto-index root namespaces for Orbit](https://gitlab.com/gitlab-org/gitlab/-/commit/264f0d50fdda2bedbf7401cf838a812a72df325a) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/253942))
- [Add triage and remediation docs](https://gitlab.com/gitlab-org/gitlab/-/commit/d2d5ae4a1f0f51431875d03528963c3588eb353c) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/254850))
- [Scroll the panel with the keyboard on page load](https://gitlab.com/gitlab-org/gitlab/-/commit/b168de1e8b1350922327ca86981f74c9efb8c57a) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/240808))
- [Add RegoValidator and depend on gitlab-glaz](https://gitlab.com/gitlab-org/gitlab/-/commit/df88ac3791e2ad42df1a2c00890ae84b1ac4ab74) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/254245))
- [Allow ownerless clients on the IAM consent page](https://gitlab.com/gitlab-org/gitlab/-/commit/2c3f1e6e7952a4a35d1caf51683865bd64700045) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/253086))
- [Return 429 and RateLimit headers for entry-less labkit rules](https://gitlab.com/gitlab-org/gitlab/-/commit/fbc673ac25bb8c1a5556a6a69f560bfbfe620aa2) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/254081))
- [Add block_jwt_for_reclaimed_paths application setting](https://gitlab.com/gitlab-org/gitlab/-/commit/4bb24a9fa901ed9e91bcc4c90967b1492cf5ef5d) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/254058))
- [Add Instance level enable add-on graphql mutation](https://gitlab.com/gitlab-org/gitlab/-/commit/8d176e1c970f55553db768c8e5e1041392a6adbc) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/254563)) **GitLab Enterprise Edition**
(省略されました)
## 19.3.2 (2026-09-10)
### Fixed (4 changes)
- [Stop resetting mcp_server_enabled when Duo settings change](https://gitlab.com/gitlab-org/security/gitlab/-/commit/25b02f48d85610be4fdc3e0dfdeb5ec727fec989) **GitLab Enterprise Edition**
- [Fix partition cache crash on single-pipeline ranges](https://gitlab.com/gitlab-org/security/gitlab/-/commit/f642741b2fa04abce2d74f4e4ced3d97e807ccfb)
- [Geo: Support SSH cert gl_id formats in proxied Git requests](https://gitlab.com/gitlab-org/security/gitlab/-/commit/8c6b338efc7f2f1239680db73e246c21316965d7) **GitLab Enterprise Edition**
- [Default SHA on merge requirement for new groups to false](https://gitlab.com/gitlab-org/security/gitlab/-/commit/5a962f1829dff1c05490d43b0e33784394641296)
### Changed (1 change)
- [Show "No available solution" message for CS when solution is empty](https://gitlab.com/gitlab-org/security/gitlab/-/commit/4373039e55954d599e047ce4c6334db3f49c4237) **GitLab Enterprise Edition**
### Security (17 changes)
- [Prevent scheduled PEP test runs from bypassing policy scope](https://gitlab.com/gitlab-org/security/gitlab/-/commit/d3e0d40707f5da43fc97f1945b5b985f1b410468) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6714))
- [Reassign sole approver rules on permanent deletion (19.3)](https://gitlab.com/gitlab-org/security/gitlab/-/commit/eca64bf0cafb7444b4fe577a6604933c891cca5b) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6696))
- [Sanitise items in JSONTable before passing to BTable](https://gitlab.com/gitlab-org/security/gitlab/-/commit/b3ca25f01d2d032d90b0ef355b5b8292a8e3c6ca) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6703))
- [Fix complexity multiplier logic enables Unauthenticated DoS](https://gitlab.com/gitlab-org/security/gitlab/-/commit/196385d8e37fa4270f4c3ca4b5745fbdf1ff7a82) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6665))
- [Require update_package to change generic package status](https://gitlab.com/gitlab-org/security/gitlab/-/commit/cce55f4ae4a2f321dc414735bc9ec8bdf652c195) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6669))
- [Fix routing manipulation with group wiki [Backport 19.3]](https://gitlab.com/gitlab-org/security/gitlab/-/commit/06cc56559e85fce91bc18a14bd05af420e4d1c15) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6678))
- [Content editor vets iframe sources before rendering](https://gitlab.com/gitlab-org/security/gitlab/-/commit/a8bd90a4c9a442976a57bbbd0ec48a6a9970bf8a) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6637))
- [Pin checkout_sha at push time to prevent MR pipeline code injection](https://gitlab.com/gitlab-org/security/gitlab/-/commit/30642b48e6f70ffab572d5064c399efb973d6865) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6682))
- [Read Terraform state upload path from verified UploadedFile](https://gitlab.com/gitlab-org/security/gitlab/-/commit/56582c7e25a3bb5563bd399c0f7da8f5fbc63abc) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6625))
- [Remove admin compliance pipeline config from SM role](https://gitlab.com/gitlab-org/security/gitlab/-/commit/4656f4c7b1545016432b6d0a8a789e16a1f40887) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6607))
(省略されました)
## 19.3.1 (2026-08-25)
### Fixed (2 changes)
- [Provision inherited foundational flows without user elevation](https://gitlab.com/gitlab-org/security/gitlab/-/commit/a513951f5312300a2387053ecf306dea86d0e361) **GitLab Enterprise Edition**
- [Gate tracked ref filter on advanced vulnerability management](https://gitlab.com/gitlab-org/security/gitlab/-/commit/de72d253dc60a0f436489f17eda40af81004f67e) **GitLab Enterprise Edition**
### Security (7 changes)
- [Reject overflow username length in SCIM and OAuth sign-in](https://gitlab.com/gitlab-org/security/gitlab/-/commit/578ac74e9d16789ee168f7e20c3a9906b803f670) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6620))
- [Prevent Sidekiq exhaustion via unbounded import jobs](https://gitlab.com/gitlab-org/security/gitlab/-/commit/2991d98139a1bde0f4e30dd88f855656d9d6fe6e) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6583))
- [Ignore Claude project settings in Claude agent](https://gitlab.com/gitlab-org/security/gitlab/-/commit/82ef713165280f7be03efd4512de8327171c8529) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6612))
- [Check :update_approvers before resetting MR approval rules](https://gitlab.com/gitlab-org/security/gitlab/-/commit/0874f9cc943b5a7723d2f3e250d0f3065feff9ce) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6614))
- [Prevent policy job needs from resolving to untrusted jobs](https://gitlab.com/gitlab-org/security/gitlab/-/commit/2b9203af2702913916e635c229a361e3aa4d9a98) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6606))
- [Enforce protected environment check on terminal websocket auth](https://gitlab.com/gitlab-org/security/gitlab/-/commit/d3cd1ef51a43d7197b10d83b053c1917313a05ca) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6621))
### Other (1 change)
- [Reorder deployments bigint cleanup so the FK sorts first](https://gitlab.com/gitlab-org/security/gitlab/-/commit/14a4c9b3bb15df5a6aa217a592f1efbcc95d06af)
## 19.2.5 (2026-08-25)
### Fixed (2 changes)
- [Fix infinite loop parsing errored SARIF security reports](https://gitlab.com/gitlab-org/security/gitlab/-/commit/8f97e3d059af34a182761afe83ae9d1eb3b9c77a) **GitLab Enterprise Edition**
- [Preserve email reply content after lone bullet lines](https://gitlab.com/gitlab-org/security/gitlab/-/commit/084287b841982d5c3c7a3ec2f8c00e95b0a20dfb)
### Security (7 changes)
- [Reject overflow username length in SCIM and OAuth sign-in](https://gitlab.com/gitlab-org/security/gitlab/-/commit/7e6c7b5f251d0ce9469a06317e318eb6d3a8575c) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6586))
(省略されました)
## 19.3.0 (2026-08-20)
### Added (275 changes)
- [Add GraphQL mutation to remove an organization user](https://gitlab.com/gitlab-org/gitlab/-/commit/ad6f0888a3dbba9f756eb289d2612f1a82f17b00) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/249299))
- [Prepare composite FK for vulnerability_occurrences](https://gitlab.com/gitlab-org/gitlab/-/commit/a8ab341fe2476090e0318b55c681e25e06f3f6ca) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/247863))
- [add list_duo_sessions mcp tool](https://gitlab.com/gitlab-org/gitlab/-/commit/f25f4c4742d4bac5a99b310b081c5d6c00e83d15) by @DhairyaMajmudar ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/248587)) **GitLab Enterprise Edition**
- [Record and expose approval gates on rollouts](https://gitlab.com/gitlab-org/gitlab/-/commit/deeac878af0872602a1c96b044e4db525ab32d05) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/250186)) **GitLab Enterprise Edition**
- [Add project-level setting for SDLC Context Agent](https://gitlab.com/gitlab-org/gitlab/-/commit/71a9ae8c77fc20f8b4036d169e6226a0f14c69db) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/250192)) **GitLab Enterprise Edition**
- [Add project-level setting for SDLC Context Agent](https://gitlab.com/gitlab-org/gitlab/-/commit/dc4c94b1ae2e929cc1b91e00103d12bcd90b97a5) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/250024)) **GitLab Enterprise Edition**
- [Add project-level setting for SDLC Context Agent](https://gitlab.com/gitlab-org/gitlab/-/commit/2f0b180562ed3f485dc5df5299dc626e2c4d98fc) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/249617)) **GitLab Enterprise Edition**
- [Add a View session button to agent replies in MRs](https://gitlab.com/gitlab-org/gitlab/-/commit/c88b2c962eda423c3fca88cfe65b29f186823283) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/249432)) **GitLab Enterprise Edition**
- [Send CI/CD OTel data with optional bearer token](https://gitlab.com/gitlab-org/gitlab/-/commit/2e75a61e4289407da327229818b65874ecd3a3e1) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/249026))
- [Add GLQL schema endpoint](https://gitlab.com/gitlab-org/gitlab/-/commit/3b7257776ecef9c9e9ddac3995fe6d7885b26835) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/247360))
- [Add get_repository_file MCP tool](https://gitlab.com/gitlab-org/gitlab/-/commit/f5992438db8b3c92330d41a1e7bcd296b9180217) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/248744))
- [Add GraphQL fields for Note Duo session status](https://gitlab.com/gitlab-org/gitlab/-/commit/7f638e0d9d3d628a39001966f76d7d1235206d11) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/249833)) **GitLab Enterprise Edition**
- [Add "Archived" tooltip to archived label chips](https://gitlab.com/gitlab-org/gitlab/-/commit/f039c658e07e9d3995311c6de4131333144e5f97) by @nwittstruck ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/244270))
- [Add archived badge to merge request header](https://gitlab.com/gitlab-org/gitlab/-/commit/3c17787d818631b05cb06223cffecc1f83375563) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/249593))
- [Add ai_enabled field to work item agent plan widget](https://gitlab.com/gitlab-org/gitlab/-/commit/eeb0ead3ce82bfd3a1d14c313645b40a31748f99) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/249644)) **GitLab Enterprise Edition**
- [feat: Add Cargo package upload authorize endpoint](https://gitlab.com/gitlab-org/gitlab/-/commit/5ce2fb9bfe0bb0020eb231edfc1bcbb41335e77b) by @kiran-4444 ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/240512))
- [Add SendGrid API token validity check](https://gitlab.com/gitlab-org/gitlab/-/commit/d971ac61168c74b928bff2d18843cbbcaa5bdb60) ([merge request](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/248116)) **GitLab Enterprise Edition**
(省略されました)
## 19.2.4 (2026-08-14)
No changes.
## 19.2.3 (2026-08-13)
### Security (2 changes)
- [Prevent query swapping with multiplexed queries and gl-introduced](https://gitlab.com/gitlab-org/security/gitlab/-/commit/d2ea4b971a985ae7c6ec83502a6bb57bb5a0cde8) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6570))
- [Prevent calling object method when resolving fallback field](https://gitlab.com/gitlab-org/security/gitlab/-/commit/e283c6adeb3d7c69967c830d85bb6d47004660f5) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6565))
## 19.1.6 (2026-08-14)
No changes.
## 19.1.5 (2026-08-13)
### Security (2 changes)
- [Prevent query swapping with multiplexed queries and gl-introduced](https://gitlab.com/gitlab-org/security/gitlab/-/commit/710f7dba77091c39abde2bd2bc2a5ff20f9ea290) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6571))
- [Prevent calling object method when resolving fallback field](https://gitlab.com/gitlab-org/security/gitlab/-/commit/df6f3085fa47f99397e1d86fdeff3967e7afcc77) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6566))
## 19.0.8 (2026-08-14)
No changes.
## 19.0.7 (2026-08-13)
### Security (2 changes)
- [Prevent query swapping with multiplexed queries and gl-introduced](https://gitlab.com/gitlab-org/security/gitlab/-/commit/3121b998c8f39285a71481e7a46f853364185c95) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6572))
- [Prevent calling object method when resolving fallback field](https://gitlab.com/gitlab-org/security/gitlab/-/commit/2bd1fa9c203ac158781f017bc7dac458af349382) ([merge request](https://gitlab.com/gitlab-org/security/gitlab/-/merge_requests/6567))
## 18.11.11 (2026-08-14)
(省略されました)