<![CDATA[GitLab - Package Updates]]>You can use this thread to track updates to the GitLab package.

Please open issues in a separate topic instead of replying here.

]]>https://forum.cloudron.io/topic/2402/gitlab-package-updatesRSS for NodeSun, 13 Sep 2026 01:48:16 GMTTue, 28 Apr 2020 21:22:42 GMT60<![CDATA[Reply to GitLab - Package Updates on Wed, 26 Aug 2026 18:16:38 GMT]]>[1.119.1]

]]>https://forum.cloudron.io/post/128589https://forum.cloudron.io/post/128589Wed, 26 Aug 2026 18:16:38 GMT<![CDATA[Reply to GitLab - Package Updates on Thu, 20 Aug 2026 21:22:58 GMT]]>[1.119.0]

]]>https://forum.cloudron.io/post/128363https://forum.cloudron.io/post/128363Thu, 20 Aug 2026 21:22:58 GMT<![CDATA[Reply to GitLab - Package Updates on Tue, 18 Aug 2026 09:43:18 GMT]]>[1.118.4]

]]>https://forum.cloudron.io/post/128241https://forum.cloudron.io/post/128241Tue, 18 Aug 2026 09:43:18 GMT<![CDATA[Reply to GitLab - Package Updates on Thu, 13 Aug 2026 13:42:54 GMT]]>[1.118.3]

]]>https://forum.cloudron.io/post/128128https://forum.cloudron.io/post/128128Thu, 13 Aug 2026 13:42:54 GMT<![CDATA[Reply to GitLab - Package Updates on Sat, 08 Aug 2026 17:50:53 GMT]]>[1.118.2-1]

  • Fix trust IP from cloudron proxy
]]>https://forum.cloudron.io/post/127945https://forum.cloudron.io/post/127945Sat, 08 Aug 2026 17:50:53 GMT<![CDATA[Reply to GitLab - Package Updates on Sat, 08 Aug 2026 13:17:38 GMT]]>[1.118.2]

  • Fix trust IP from cloudron proxy
]]>https://forum.cloudron.io/post/127938https://forum.cloudron.io/post/127938Sat, 08 Aug 2026 13:17:38 GMT<![CDATA[Reply to GitLab - Package Updates on Thu, 30 Jul 2026 07:19:48 GMT]]>[1.118.1]

  • Update gitlab-foss to 19.2.1
  • Full Changelog
  • Fix self-managed admin/owner cannot enroll namespaces into Orbit
  • Restore AI infrastructure settings after upgrade
  • Remove --unlink-first and --recursive-unlink from tar extract
  • Fix keys org_id NOT NULL constraint on Self-Managed/Dedicated
  • Enforce admin Duo lock on group settings update
  • Use self-hosted TLS setting in DWS flow validation and metadata
  • Enforce artifact access control on pipeline test reports
  • feat: Implement Workhorse JWT for all senddata requests
  • Fix virtual registry redirect handler and file request service
  • Fix reflected XSS in oAuth apps list page
]]>https://forum.cloudron.io/post/127454https://forum.cloudron.io/post/127454Thu, 30 Jul 2026 07:19:48 GMT<![CDATA[Reply to GitLab - Package Updates on Fri, 17 Jul 2026 05:52:56 GMT]]>[1.118.0]

]]>https://forum.cloudron.io/post/126874https://forum.cloudron.io/post/126874Fri, 17 Jul 2026 05:52:56 GMT<![CDATA[Reply to GitLab - Package Updates on Tue, 14 Jul 2026 16:48:58 GMT]]>[1.117.6]

  • hardcap worker to 4
]]>https://forum.cloudron.io/post/126773https://forum.cloudron.io/post/126773Tue, 14 Jul 2026 16:48:58 GMT<![CDATA[Reply to GitLab - Package Updates on Thu, 09 Jul 2026 15:01:35 GMT]]>[1.117.5]

  • Update gitlab-foss to 19.1.2
  • Full Changelog
  • Fix approval rule override regression for Developer MR authors GitLab Enterprise Edition
  • Remove ActiveUserCountThresholdWorker cron schedule GitLab Enterprise Edition
  • Backfill NULL organization_id on oauth_applications
  • Make ci_finished_builds engine swap work on ClickHouse 23.x
  • Clear stored password when pull mirror destination changes (merge request)
  • Address private project cross-references visibility issue (merge request)
  • Treat failing markup renders as plain text (merge request)
  • Sanitize vulnerability detail keys to prevent XSS via thAttr injection (merge request)
  • Fix tag/branch ambiguity in blob view (merge request)
  • Fix WorkItems auth bypass for Minimal Access users (merge request)
]]>https://forum.cloudron.io/post/126599https://forum.cloudron.io/post/126599Thu, 09 Jul 2026 15:01:35 GMT<![CDATA[Reply to GitLab - Package Updates on Thu, 09 Jul 2026 10:51:41 GMT]]>[1.117.4]

  • Reduce logging
]]>https://forum.cloudron.io/post/126585https://forum.cloudron.io/post/126585Thu, 09 Jul 2026 10:51:41 GMT<![CDATA[Reply to GitLab - Package Updates on Wed, 08 Jul 2026 12:16:49 GMT]]>[1.117.3]

  • Reduce puma worker count
]]>https://forum.cloudron.io/post/126551https://forum.cloudron.io/post/126551Wed, 08 Jul 2026 12:16:49 GMT<![CDATA[Reply to GitLab - Package Updates on Mon, 06 Jul 2026 12:52:12 GMT]]>[1.117.2]

  • scale puma worker count to the processor count
  • increase queue concurrency
]]>https://forum.cloudron.io/post/126461https://forum.cloudron.io/post/126461Mon, 06 Jul 2026 12:52:12 GMT<![CDATA[Reply to GitLab - Package Updates on Wed, 24 Jun 2026 09:57:42 GMT]]>[1.117.1]

]]>https://forum.cloudron.io/post/126058https://forum.cloudron.io/post/126058Wed, 24 Jun 2026 09:57:42 GMT<![CDATA[Reply to GitLab - Package Updates on Tue, 23 Jun 2026 11:33:26 GMT]]>[1.117.0]

]]>https://forum.cloudron.io/post/126020https://forum.cloudron.io/post/126020Tue, 23 Jun 2026 11:33:26 GMT<![CDATA[Reply to GitLab - Package Updates on Wed, 10 Jun 2026 20:33:23 GMT]]>[1.116.2]

]]>https://forum.cloudron.io/post/125673https://forum.cloudron.io/post/125673Wed, 10 Jun 2026 20:33:23 GMT<![CDATA[Reply to GitLab - Package Updates on Wed, 27 May 2026 15:15:32 GMT]]>[1.116.1]

]]>https://forum.cloudron.io/post/125184https://forum.cloudron.io/post/125184Wed, 27 May 2026 15:15:32 GMT<![CDATA[Reply to GitLab - Package Updates on Thu, 21 May 2026 11:11:34 GMT]]>[1.116.0]

]]>https://forum.cloudron.io/post/124958https://forum.cloudron.io/post/124958Thu, 21 May 2026 11:11:34 GMT<![CDATA[Reply to GitLab - Package Updates on Thu, 14 May 2026 08:07:53 GMT]]>[1.115.2]

]]>https://forum.cloudron.io/post/124705https://forum.cloudron.io/post/124705Thu, 14 May 2026 08:07:53 GMT<![CDATA[Reply to GitLab - Package Updates on Tue, 05 May 2026 17:49:13 GMT]]>[1.115.1]

  • Update gitlab-foss to 18.11.2
  • Full Changelog
  • Expose X-Streaming-Format header for api requests (merge request)
  • Fix JSON tables with non-string values
  • Enforce pagination in issuable discussions endpoint (merge request)
  • Unwrap nested a no matter how they're produced (merge request)
  • Fix OAuth token not rejected (merge request)
  • Owner of a project (Developer in the top-level group) can create a fork inside... (merge request)
  • Add configurable Markdown length limit (merge request)
  • Fix CSRF bypass via parser-differential in GraphQL API (merge request)
  • Fix TOCTOU vulnerability in Web IDE asset authorization (merge request)
  • Validate JSON-like responses regardless of Content-Type header (merge request)
]]>https://forum.cloudron.io/post/124415https://forum.cloudron.io/post/124415Tue, 05 May 2026 17:49:13 GMT<![CDATA[Reply to GitLab - Package Updates on Tue, 05 May 2026 15:33:12 GMT]]>[1.115.0]

]]>https://forum.cloudron.io/post/124413https://forum.cloudron.io/post/124413Tue, 05 May 2026 15:33:12 GMT<![CDATA[Reply to GitLab - Package Updates on Wed, 08 Apr 2026 18:52:14 GMT]]>[1.114.4]

]]>https://forum.cloudron.io/post/123091https://forum.cloudron.io/post/123091Wed, 08 Apr 2026 18:52:14 GMT<![CDATA[Reply to GitLab - Package Updates on Wed, 01 Apr 2026 07:06:20 GMT]]>[1.114.3]

]]>https://forum.cloudron.io/post/122774https://forum.cloudron.io/post/122774Wed, 01 Apr 2026 07:06:20 GMT<![CDATA[Reply to GitLab - Package Updates on Thu, 26 Mar 2026 13:51:19 GMT]]>[1.114.2]

  • Fix avatar uploads
]]>https://forum.cloudron.io/post/122540https://forum.cloudron.io/post/122540Thu, 26 Mar 2026 13:51:19 GMT