GitLab - Package Updates

[nebulon]

[1.91.1]

• Update GitLab to 17.0.2
• Release announcement

[girish]

[1.91.2]

• Update GitLab to 17.0.3

[girish]

[1.92.0]

• Update GitLab to 17.1.1
• Release announcement
• Improved wiki user experience
• Require confirmation for manual jobs
• Keep inherited membership structure when importing by direct transfer
• Re-import a chosen project relation by using the API

[Package Updates]

[1.92.1]

• Update GitLab to 17.1.2
• Release announcement

[Package Updates]

[1.93.0]

• Update GitLab to 17.2.1
• Release announcement

[Package Updates]

[1.93.1]

• Update GitLab to 17.2.2
• Release announcement

[Package Updates]

[1.94.0]

• Update GitLab to 17.3.0

[Package Updates]

[1.94.1]

• Update GitLab to 17.3.1
• Release announcement

[Package Updates]

[1.94.2]

• Update GitLab to 17.3.2

[Package Updates]

[1.94.3]

• Update GitLab to 17.3.3

[Package Updates]

[1.95.0]

• Update GitLab to 17.4.1
• Release announcement

[Package Updates]

[1.95.1]

• Update GitLab to 17.4.2

[Package Updates]

[1.96.0]

• Update GitLab to 17.5.1
• Release announcement

[Package Updates]

[1.96.1]

• Update gitlab-foss to 17.5.2
• Full Changelog
• Fix group wiki activity events breaking the user feed
• Add param filtering to avoid error while saving project settings (merge request) GitLab Enterprise Edition
• Fix new project group templates pagination GitLab Enterprise Edition
• Update pdf worker file path in pdf viewer
• Add missing project_id for build_chat_data (merge request)
• Use custom adapter for parsing FogBugz XML (merge request)
• Removed id from authorize buttons and added specs (merge request)
• HTML injection in vulnerability Code flow leads to XSS on self hosted instances (merge request)
• Remove is-unsafe-link from product analytics tables to prevent XSS (merge request)
• Details of blocking merge request can be exposed via list (merge request)
• Prevent agent access via unconfirmed or disallowed group members (merge request)
• Remove permissions JSONB column from the condition

[Package Updates]

[1.96.2]

• Update gitlab-foss to 17.5.3
• Full Changelog
• Ensure auto_merge_enabled is set when validating merge trains GitLab Enterprise Edition
• Add size check for harbor registry (merge request)
• Adding JobArtifactReport class to pre-emptively validate job artifacts (merge request)
• Fix: unsubscribe from actioncable channel when PAT is revoked (merge request)
• Allow a LFS token to be used only for LFS related requests (merge request)
• Fix possible DOS with TOML file parsing (merge request)
• Move allow_access_with_scope to class level (merge request)

[Package Updates]

[1.97.0]

• Update gitlab-foss to 17.6.2
• Full Changelog

[Package Updates]

[1.98.0]

• Update gitlab-foss to 17.7.1
• Full Changelog
• Add a migration to regenerate CI job token signing key
• Fix CI job token signing key not always generated
• Prevent cyclic reference in work item hierarchy widget from frontend (merge request)
• Allow external_provider config take precedence over external_groups (merge request)
• Filter out sensitive parameters on Auth logs (merge request)
• Don't allow unauthorized users to close issues automatically (merge request)
• Add iteration autocomplete to RTE by @​salihudickson (merge request) GitLab Enterprise Edition

[Package Updates]

[1.98.1]

• Update gitlab-foss to 17.7.2
• Full Changelog
• Fix handling of short gzip metadata files (merge request)
• Remove download_code dependency from access to read merge requests (merge request)

[Package Updates]

[1.99.0]

• Update gitlab-foss to 17.8.1
• Full Changelog
• Fix protected variable exfiltration (merge request)
• Enhance rich viewer sanitization (merge request)
• Avoid recursive sidekiq calls on cyclic work item hierarchies (merge request)
• Respect the private profile constraints (merge request)
• Add more specs for most_recent_commit_sha method (merge request) GitLab Enterprise Edition
• Update runners owned by non-existent projects (merge request)

[Package Updates]

[1.99.1]

• Update gitlab-foss to 17.8.2
• Full Changelog
• Fix storing incorrect policy index in scan_result_policies GitLab Enterprise Edition
• Enable ai tracking even with feature flag disabled GitLab Enterprise Edition
• Fix Workhorse failing on 64-bit unaligned access on Raspberry Pi 32-bit
• Security Duo Chat Escape Unknown Domain Hyperlinks (merge request)
• Hide sensitive workhorse headers and fix route confusion between web and workhorse routes (merge request)
• Do not allow Planner role to update or delete incidents (merge request)
• Reduce memory allocations on create PAT endpoint (merge request)
• Prevent SSRF attacks for Workspaces (merge request)
• Prevent read code access when repository is disabled (merge request)
• Fixes XSS on the target branch in the merge request widget (merge request)
• Unsubscribe from actioncable channel when PAT is revoked (merge request)