GitLab - Package Updates

[Package Updates]

[1.112.3]

• Update gitlab-foss to 18.8.3
• Full Changelog
• Send the uuid for usage quota when it is a trial for SM (merge request) GitLab Enterprise Edition
• Unsubscribe from pipeline status updates when pipeline ID changes (merge request)
• Fix JWT token expiration when memoized before timeout is set (merge request)
• Fix encoding error in related branches work item widget (merge request)
• Disable Sidekiq retries for ClickHouse pipeline/build sync workers (merge request)
• Disable async_insert in build and pipeline sync operations (merge request)
• Add work item support to missing chat integrations (merge request)
• Only check optional ActionCable Redis instance if necessary (merge request)
• Fixes preserving external author on work item move and clone (merge request)
• Refactor Redis TLS options parsing to fix ActionCable configuration (merge request)

[Package Updates]

[1.112.4]

• Update gitlab-foss to 18.8.4
• Full Changelog

[Package Updates]

[1.113.0]

• Update gitlab-foss to 18.9.1
• Full Changelog
• Navigate repositories with collapsible file tree
• Include CI/CD inputs from a file
• Rapid Diffs improves performance for commit changes

[Package Updates]

[1.114.0]

• Update gitlab-foss to 18.10.0
• Add #find_by_id_through_partition to Ci::Pipeline (merge request)
• Prevent use of REST lifecycle terms in free text fields (merge request)
• Reduce GraphQL query complexity for security inventory query (merge request) GitLab Enterprise Edition
• Add separate queue for backfilling (merge request) GitLab Enterprise Edition
• Adds work_item_type_ids filter to GraphQL (merge request)
• Create offline transfer route and controller (merge request)
• Enable bso_minimal_access_fallback feature flag by default (merge request) GitLab Enterprise Edition
• Show custom WI types within Custom Fields config (merge request) GitLab Enterprise Edition
• Add Vulnerabilities Over Time chart to PDF export (merge request) GitLab Enterprise Edition
• Add override action display to policy drawer (merge request) GitLab Enterprise Edition

[Package Updates]

[1.114.1]

• Update gitlab-foss to 18.10.1
• Full Changelog

[Package Updates]

[1.114.2]

• Fix avatar uploads

[Package Updates]

[1.114.3]

• Update gitlab-foss to 18.10.2
• Full Changelog
• Surface group-level Duo setting with DAP self-hosted (merge request) GitLab Enterprise Edition
• Fix regression: "Git operations for Deploy keys fail on a Geo Site" (merge request) GitLab Enterprise Edition
• Merge branch '588699-treat-scheduled-deletion-as-archived' into 'master' (merge request)

[Package Updates]

[1.114.4]

• Update gitlab-foss to 18.10.3
• Full Changelog

[Package Updates]

[1.115.0]

• Update gitlab-foss to 18.11.0
• Full Changelog
• Fix deploy token authentication for Go module proxy (merge request)
• Fix IPv6 literal addresses bypassing no_proxy when outbound proxy is set (merge request)
• Add REST API GET endpoint for Terraform state protection rules by @gerardo-navarro (merge request)
• Add negation support in pipeline expressions by @mewp (merge request)
• Add CI_CONFIG_REF_URI predefined CI/CD variable (merge request)
• Fix privilege escalation in member role management (merge request)
• Fix XSS vulnerability in Analytics dashboards DataTable component (merge request)
• Enhance security for passkey authentication & passkey creation (merge request)
• Add Terraform module support to package protection rules (merge request)
• gitaly-backup: Remove layout arg (merge request)

[Package Updates]

[1.115.1]

• Update gitlab-foss to 18.11.2
• Full Changelog
• Expose X-Streaming-Format header for api requests (merge request)
• Fix JSON tables with non-string values
• Enforce pagination in issuable discussions endpoint (merge request)
• Unwrap nested a no matter how they're produced (merge request)
• Fix OAuth token not rejected (merge request)
• Owner of a project (Developer in the top-level group) can create a fork inside... (merge request)
• Add configurable Markdown length limit (merge request)
• Fix CSRF bypass via parser-differential in GraphQL API (merge request)
• Fix TOCTOU vulnerability in Web IDE asset authorization (merge request)
• Validate JSON-like responses regardless of Content-Type header (merge request)