GitLab

GitLab introduced GitLab Duo Enterprise, providing automated AI code security remediation that generates merge requests to patch discovered CVE vulnerabilities.

GitLab 19.4 introduces centralized governance for MCP server tools and expands Advanced SAST to include Kotlin, Dart, and Scala. The release also adds support for SPDX license expressions in dependency and license scanning.

GitLab 19.3 introduces the Flow Creator agent for AI-driven YAML generation and moves GitLab Secrets Manager into Limited Availability on GitLab.com. The release also promotes GitLab Duo's merge conflict and review discussion resolution features to General Availability.

GitLab 19.2 introduces the GitLab Duo CLI for terminal-based AI interaction and makes custom AI-powered workflows generally available. Additionally, scheduled pipeline execution policies are now GA, allowing centralized enforcement of CI/CD schedules across multiple projects.

GitLab 19.1 introduces AI-driven false positive detection for secret scanning via GitLab Duo and adds an 'Always on' enforcement setting for AI features at the instance or group level. These updates target security triage efficiency and centralized AI governance for enterprise compliance.

GitLab 19.0 introduces group-level custom review instructions for GitLab Duo and configurable custom work item types. Additionally, the GitLab Secrets Manager has transitioned from a closed beta to an open beta for Premium and Ultimate tiers.

GitLab 18.11 introduces generally available Agentic SAST Vulnerability Resolution and the Data Analyst Foundational Agent. Additionally, the CI Expert Agent has been launched in beta across all tiers.

GitLab 18.10 transitions SAST false positive detection from beta to general availability. The feature utilizes the GitLab Duo Agent Platform to analyze critical and high-severity vulnerabilities for false positive likelihood.