GitLab - Package Updates

[Package Updates]

[1.99.0]

• Update gitlab-foss to 17.8.1
• Full Changelog
• Fix protected variable exfiltration (merge request)
• Enhance rich viewer sanitization (merge request)
• Avoid recursive sidekiq calls on cyclic work item hierarchies (merge request)
• Respect the private profile constraints (merge request)
• Add more specs for most_recent_commit_sha method (merge request) GitLab Enterprise Edition
• Update runners owned by non-existent projects (merge request)

[Package Updates]

[1.99.1]

• Update gitlab-foss to 17.8.2
• Full Changelog
• Fix storing incorrect policy index in scan_result_policies GitLab Enterprise Edition
• Enable ai tracking even with feature flag disabled GitLab Enterprise Edition
• Fix Workhorse failing on 64-bit unaligned access on Raspberry Pi 32-bit
• Security Duo Chat Escape Unknown Domain Hyperlinks (merge request)
• Hide sensitive workhorse headers and fix route confusion between web and workhorse routes (merge request)
• Do not allow Planner role to update or delete incidents (merge request)
• Reduce memory allocations on create PAT endpoint (merge request)
• Prevent SSRF attacks for Workspaces (merge request)
• Prevent read code access when repository is disabled (merge request)
• Fixes XSS on the target branch in the merge request widget (merge request)
• Unsubscribe from actioncable channel when PAT is revoked (merge request)

[Package Updates]

[1.100.0]

• Update gitlab-foss to 17.9.0
• Full Changelog
• Allow adding comments on Wiki pages (merge request)
• Add integrity verification for remote CI includes (merge request)
• ActiveContext add preprocessors for references (merge request)
• ActiveContext postgres indexer (merge request)
• Add support for created_at on work_items create API (merge request)
• Add Shared groups tab to group overview (merge request)
• Model registry: Support loading runs (merge request)
• Add API endpoints for group level integrations (merge request)
• Admin Token API: Revoke Feature Flags Client token by @​nwittstruck (merge request)
• Add pipeline analytics for groups on GraphQL (merge request)
• Add organization and job title to user synced attributes (merge request)

[Package Updates]

[1.101.0]

• Update base image to 5.0.0

[Package Updates]

[1.101.1]

• Update gitlab-foss to 17.9.1
• Full Changelog
• Fix instance level dashboard by default severity override GitLab Enterprise Edition
• Increase minimum role in SPP to read policy yaml (merge request)
• Fix access to read code review analytics in private projects (merge request)
• Escape work item dropdown items and restrict HTML tags (merge request)
• Use stricter CSP values in the packages dependency proxy (merge request)

[Package Updates]

[1.101.2]

• Update gitlab-foss to 17.9.2
• Full Changelog
• Fix the pipe search for zoekt exact search mode
• Prevent deletion of project_bot users with non-expiring access tokens
• Use correct project when fetching managed resources templates
• Vendor GraphQL gem
• Ruby-SAML updates
• Prevent custom role to activate group members
• approval_rules name is unbounded
• Limit preview size
• Maintainer can inject shell code in Google integration configurations that...
• Filter out internal notes if the recipient do not have access

[Package Updates]

[1.102.0]

• Update gitlab-foss to 17.10.0
• Full Changelog
• GitLab Query Language views Beta
• Enhanced markdown experience
• New issues look now in beta
• Description templates for epics, issues, tasks, objectives and key results
• Bulk edit to-do items

[Package Updates]

[1.102.1]

• Update gitlab-foss to 17.10.1

[Package Updates]

[1.102.2]

• Update gitlab-foss to 17.10.3

[Package Updates]

[1.102.3]

• Update gitlab-foss to 17.10.4

[Package Updates]

[1.103.0]

• Update gitlab-foss to 17.11.0

[Package Updates]

[1.103.1]

• Update gitlab-foss to 17.11.1

[Package Updates]

[1.103.2]

• Update gitlab-foss to 17.11.2
• Full Changelog
• Bump devfile gem to v0.4.3
• Only check records with encrypted data in gitlab:doctor:encryption_keys
• Fix MR diffs endpoint to respond with pagination headers
• Change to async_delete for ci_running_builds.runner_id
• Improve Octokit::ResponseValidation middleware and add rate limits
• Remove id attribute from OAuth form
• Use IssuePolicy for #issues_readable_by_user

[Package Updates]

[1.104.0]

• Update gitlab-foss to 18.0.0

[Package Updates]

[1.104.1]

• Update gitlab-foss to 18.0.1

[Package Updates]

[1.104.2]

• Update gitlab-foss to 18.0.2
• Full Changelog

[Package Updates]

[1.104.3]

• Update gitlab-foss to 18.0.3

[Package Updates]

[1.104.4]

• Update gitlab-foss to 18.0.4

[Package Updates]

[1.104.5]

• Update gitlab-foss to 18.0.5
• Sensitive Information Disclosure via resource_group API Despite Repository and...
• Prevent Duo Code Review from Showing Internal Notes
• Restrict Service Desk email visibility to reporter+ role
• Add authorization to job field on deployment type

[Package Updates]

[1.105.0]

• Update gitlab-foss to 18.2.1