GitLab - Package Updates

[Package Updates]

[1.117.4]

• Reduce logging

[Package Updates]

[1.117.5]

• Update gitlab-foss to 19.1.2
• Full Changelog
• Fix approval rule override regression for Developer MR authors GitLab Enterprise Edition
• Remove ActiveUserCountThresholdWorker cron schedule GitLab Enterprise Edition
• Backfill NULL organization_id on oauth_applications
• Make ci_finished_builds engine swap work on ClickHouse 23.x
• Clear stored password when pull mirror destination changes (merge request)
• Address private project cross-references visibility issue (merge request)
• Treat failing markup renders as plain text (merge request)
• Sanitize vulnerability detail keys to prevent XSS via thAttr injection (merge request)
• Fix tag/branch ambiguity in blob view (merge request)
• Fix WorkItems auth bypass for Minimal Access users (merge request)

[Package Updates]

[1.117.6]

• hardcap worker to 4

[Package Updates]

[1.118.0]

• Update gitlab-foss to 19.2.0
• Full Changelog
• Make automatic rebase before merge generally available (merge request)
• Promote granular personal access tokens to GA (merge request)
• Update custom flows from beta to GA (merge request)
• Promote dependency management auto-remediation to Beta (merge request)
• Remove securityPoliciesSyncStatus GraphQL query (merge request)
• Dropping security_training_providers table (merge request)
• Drop trending_projects table and remove FK (merge request)
• Fix branches API offset pagination returning empty pages (merge request)
• Fix rules:changes net diff for reverted files in MR pipelines (merge request)
• Prevent no-op rebase collapse from deleting MR source branch (merge request)

[Package Updates]

[1.118.1]

• Update gitlab-foss to 19.2.1
• Full Changelog
• Fix self-managed admin/owner cannot enroll namespaces into Orbit
• Restore AI infrastructure settings after upgrade
• Remove --unlink-first and --recursive-unlink from tar extract
• Fix keys org_id NOT NULL constraint on Self-Managed/Dedicated
• Enforce admin Duo lock on group settings update
• Use self-hosted TLS setting in DWS flow validation and metadata
• Enforce artifact access control on pipeline test reports
• feat: Implement Workhorse JWT for all senddata requests
• Fix virtual registry redirect handler and file request service
• Fix reflected XSS in oAuth apps list page

[Package Updates]

[1.118.2]

• Fix trust IP from cloudron proxy

[Package Updates]

[1.118.2-1]

• Fix trust IP from cloudron proxy

[Package Updates]

[1.118.3]

• Update gitlab-foss to 19.2.2
• Full Changelog
• Update Codex Agent to use gpt-5.3-codex
• Fix duplicated content when copying across blob viewer chunks
• Fix Open in full page action in board issue drawer
• Fix work item drawer expand crash on issue boards
• Reuse ci_max_total_yaml_size_bytes for job definition config limit
• Fix authorize_admin_project! being skipped on project update (merge request)
• Filter unauthorized merge requests from global API endpoint (merge request)
• Prevent pipeline creation for spoofed merge request refs (merge request)
• Reject oversized integers during JSON validation (merge request)
• Fix pipeline test report timeout on large pipelines

[Package Updates]

[1.118.4]

• Update gitlab-foss to 19.2.4
• Full Changelog

[Package Updates]

[1.119.0]

• Update gitlab-foss to 19.3.0
• Full Changelog
• Remove types base-type filter from Work Items REST API (merge request)
• Reduce WebHookLog retention from 14 to 7 days (merge request)
• Add new CI_JOB_RETRY_COUNT job predefined variable by @gkepas (merge request)
• Send webhook when a merge request review is submitted by @tayllanr (merge request)
• Add SCIM access token reset to admin token API by @nwittstruck (merge request)
• Fix approvers leaking across rules from multi-action approval policies (merge request)
• Fix issue auto-close for merge commits from non-default branches by @calebdw (merge request)
• Fix 500 on unauthenticated group members CSV export (merge request)
• Fix passkey sign-in ignoring stored return location (merge request)
• Scan Swift and Objective-C with GitLab Advanced SAST (merge request)