gitlab-ce/CHANGELOG.md

Note: This file is automatically generated. Please see the developer documentation for instructions on adding your own entry.

17.9.1 (2025-02-26)

Fixed (1 change)

• Fix instance level dashboard by default severity override GitLab Enterprise Edition

Security (4 changes)

• Increase minimum role in SPP to read policy yaml (merge request)
• Fix access to read code review analytics in private projects (merge request)
• Escape work item dropdown items and restrict HTML tags (merge request)
• Use stricter CSP values in the packages dependency proxy (merge request)

17.9.0 (2025-02-19)

Added (202 changes)

• Add GraphQL API for visualizing dedicated hosted runner compute usage (merge request) GitLab Enterprise Edition
• Adds the experiment status for analytics dashboards (merge request) GitLab Enterprise Edition
• Allow adding comments on Wiki pages (merge request)
• Add integrity verification for remote CI includes (merge request)
• Set default_enabled to true for feature flag (merge request) GitLab Enterprise Edition
• Set default_enabled to true for the feature flag (merge request) GitLab Enterprise Edition
• Remove maven_extract_package_model feature flag (merge request)
• ActiveContext add preprocessors for references (merge request)
• Add worker to unassign security bot (merge request) GitLab Enterprise Edition
• Introduce project.vulnerabilityArchives GraphQL field (merge request) GitLab Enterprise Edition
• ActiveContext postgres indexer (merge request)
• Add support for created_at on work_items create API (merge request)
• Add Shared groups tab to group overview (merge request)
• Model registry: Support loading runs (merge request)
• Add API endpoints for group level integrations (merge request)
• Admin Token API: Revoke Feature Flags Client token by @nwittstruck (merge request)
• Update flag for duo chat include file context (merge request) GitLab Enterprise Edition
• Add pipeline analytics for groups on GraphQL (merge request)
• Add organization and job title to user synced attributes (merge request)
• Query evaluator for expression control (merge request) GitLab Enterprise Edition
• Add vulnerability_severity_overrides table (merge request) GitLab Enterprise Edition
• Display dropdown text explainer on component token (merge request) GitLab Enterprise Edition
• feat: Protected packages: Maven package push protection by @gerardo-navarro (merge request)
• Show message when approaching Pages deployments limit (merge request) GitLab Enterprise Edition
• Add error tracking widget to work items (merge request)
• Added resources widget (merge request)
• Expose sign_in_restrictions from ApplicationSettings API (merge request)
• Add thread ID to AI completion response (merge request) GitLab Enterprise Edition
• Add enforce_email_subaddress_restrictions application setting (merge request)
• Add support for severity overrides in pipeline security finding type (merge request) GitLab Enterprise Edition
• Add inject_policy_ci as default pipeline execution config strategy (merge request) GitLab Enterprise Edition
• Add service class to trigger external control (merge request) GitLab Enterprise Edition
• Implement revisions/:recipe_revision/:file_name endpoint by @oceane_scania (merge request)
• Add MALFORMED_ENTRY_OWNER error for CODEOWNERS (merge request) GitLab Enterprise Edition
• Reschedule backfill of vulnerabilities.detected_at (merge request)
• Add UI for subscribed filter by @Taucher2003 (merge request)
• Promote runs in standalone experiments to a model version (merge request)
• Add an option to specify language for file icon (merge request)
• Added ability to manage compliance frameworks at project level (merge request) GitLab Enterprise Edition
• Add swift to package_metadata_purl_types (merge request)
• Pipeline mini graph downstream jobs (merge request)
• Expose lastDuoActivityOn user field in GraphQL (merge request) GitLab Enterprise Edition
• Load SoftwareLicenses names from catalogue (merge request) GitLab Enterprise Edition
• Add rebase button to MR widget if available (merge request)
• Adds root redirect feature (merge request)
• Add updatedAt ExperimentType graphql type (merge request)
• Document how to use Azure workload and managed identities (merge request)
• Add missing json fields to WorkspacesAgentConfigType (merge request) GitLab Enterprise Edition
• Add scim_group_uid to saml_group_links (merge request)
• Add vulnerability_severity_overrides table (merge request) GitLab Enterprise Edition
• Add model-level default for Vulnerability#detected_at (merge request) GitLab Enterprise Edition
• Browser history added by @nraj0408 (merge request)
• Extend GraphQL dependency type (merge request) GitLab Enterprise Edition
• Add the model record id to a replicable item in the Geo replicables list by @antonkalmykov (merge request) GitLab Enterprise Edition
• Update Create Page with Default Devfile (merge request) GitLab Enterprise Edition
• Remove oauth2_device_grant_flow FF (merge request)
• Add group-level pages access control setting (merge request)
• Add service class to trigger external control (merge request) GitLab Enterprise Edition
• Remove async dependency export feature flags (merge request) GitLab Enterprise Edition
• This commit adds support to delete Duo Chat threads through GraphQL (merge request) GitLab Enterprise Edition
• Admin Token API: Identify Incoming Email Tokens by @nwittstruck (merge request)
• Add new sort option placeholders (merge request)
• Add clusters_managed_resources table (merge request)
• Add support for unassigning user from an admin custom role in GraohQL (merge request)
• Remove the check_ip_address_for_email_verification FF (merge request)
• Introduce CloudConnector::Keys model (merge request) GitLab Enterprise Edition
• Add parameter to toggle if email is sent on export completion (merge request)
• Add streaming to new audit event models (merge request) GitLab Enterprise Edition
• Exempt specific files from Codeowners rules (merge request) GitLab Enterprise Edition
• Add popover support on milestone in WI Sidebar (merge request)
• Audit authorizing an OAuth application (merge request)
• Allow read_admin_monitoring access to audit_logs (merge request) GitLab Enterprise Edition
• Markdown: Select text and paste URL to create link by @ajuckel (merge request)
• Prompt user to enter missing access token (merge request)
• Adding correlation_id attribute to duo workflow message event api (merge request) GitLab Enterprise Edition
• Feat(Blob): Add PlantUML render support for Blob Viewer by @schurzi (merge request)
• Add ability to snooze to-dos until a custom time (merge request)
• Add queue_namespace as an attribute for Sidekiq routing rules (merge request)
• Enforce NOT NULL constraint on vulnerabilities.detected_at (merge request)
• Admin Token API: Revoke Runner authentication token by @nwittstruck (merge request)
• Add indexes to web_hook_logs_daily (merge request)
• Add read_admin_users permission (merge request) GitLab Enterprise Edition
• Introduce archival related entities (merge request)
• Add a new 'Index version' to the elastic info rake task (merge request) GitLab Enterprise Edition
• Add license check to the fields allowedParentTypes and allowedChildTypes (merge request) GitLab Enterprise Edition
• Resolve MR issue with new work item (merge request)
• ActiveContext OpenSearch indexer (merge request) GitLab Enterprise Edition
• Extend dashboard date range filter configuration (merge request) GitLab Enterprise Edition
• Remove microsoft_azure_group_sync FF (merge request)
• Add project_design_management_routes_view database view (merge request)
• Add project_routes_view database view (merge request)
• Add “Added from log” icon in job token allowlist UI (merge request)
• Add ActiveContext reference class (merge request) GitLab Enterprise Edition
• Introduce a NamespaceSettingsUpdate mutation (merge request)
• Enable ability to view IP addresses in access tokens (merge request)
• Create work_item_user_preferences table (merge request)
• GraphQL: Populate timeSeries.count field in AnalyticsType (merge request)
• Prevent unnecessary processing of AutoDevops with overriding PEP (merge request)
• Allow SSH keys to be filtered by created at and expires at (merge request)
• Added severity override support in MR security widget (merge request) GitLab Enterprise Edition
• Admin Token API: Identify GitLab sessions by @nwittstruck (merge request)
• Add Security Risk Management feature categories (merge request)
• Add external_url to compliance_requirements_control (merge request) GitLab Enterprise Edition
• Admin Token API: Add support for revocation of Cluster Agent Tokens by @nwittstruck (merge request)
• GraphQL: Add timeSeries.durationStatistics field to AnalyticsType (merge request)
• Update GitLab Pages version (merge request)
• Add Amazon Q role arn validation by @protsivd (merge request)
• Add read_admin_monitoring permission (merge request) GitLab Enterprise Edition
• Add security findings severity override mutation (merge request) GitLab Enterprise Edition
• Add anti_abuse_settings column to application_settings table (merge request)
• Prioritize vulnerability severity when resolving security findings (merge request) GitLab Enterprise Edition
• Backfill web_hook_logs_daily (merge request)
• Enable Vulnerability Change Status modal by default (merge request) GitLab Enterprise Edition
• Add more details for zoekt performance bar in multimatch (merge request) GitLab Enterprise Edition
• Release SAML Groups Duo Add On Assignment (merge request) GitLab Enterprise Edition
• ActiveContext indexer for elasticsearch (merge request) GitLab Enterprise Edition
• Add AI impact visualizations to the analytics dashboard designer (merge request) GitLab Enterprise Edition
• Add GraphQL fields for pipeline creation status (merge request)
• Allow to configure LFS link batch size via environment variable (merge request)
• Crud HAML component: Adds collapsible feature (merge request)
• Adding GraphQL mutations to trigger Allowlist Autopopulation processes (merge request)
• Added update mutation for compliance requirement controls (merge request) GitLab Enterprise Edition
• Block Seat Overage for SM (merge request) GitLab Enterprise Edition
• Introduce endpoint to discover cert-based clusters (merge request)
• Add clusters_managed_resources table (merge request)
• Remove composite identity FF (merge request)
• Admin Token API: Identify Feature Flags client token by @nwittstruck (merge request)
• Add raw_diff endpoint to merge request API (merge request)
• Adds not-null migration for ComplianceViolation on target_project (merge request) GitLab Enterprise Edition
• Add diff_lines endpoint to blobs controller (merge request)
• Throw error when incorrect scope is used in auditor (merge request) GitLab Enterprise Edition
• Add self_rotate scope for access token self rotate endpoint by @ajuckel (merge request)
• Backfill archived and traversal_ids for vulnerability_statistics (merge request)
• Add manage protected tags custom permission (merge request) GitLab Enterprise Edition
• ActiveContext processes refs from queues via cron worker (merge request) GitLab Enterprise Edition
• Add cloud_connector_keys ApplicationSetting (merge request) GitLab Enterprise Edition
• Create AiUserMetrics table and model (merge request) GitLab Enterprise Edition
• Expose linkType in field linkedWorkItems (merge request)
• Use security_findings for security mr widget (merge request) GitLab Enterprise Edition
• Add protection rules to TagType (merge request)
• Schedule web_hook_logs_daily indexes (merge request)
• Add skip ci configuration (merge request) GitLab Enterprise Edition
• Changes to support group level report for severities count api (merge request) GitLab Enterprise Edition
• Support expires_at param for group service account PAT rotation API (merge request)
• Add skip ci configuration to a policy drawer (merge request) GitLab Enterprise Edition
• Add instance setting to restrict private user profiles (merge request) GitLab Enterprise Edition
• Add migration to enable read_compliance_dashboard in member roles (merge request)
• Improve throttling during user record reassignment (merge request)
• List threads GraphQL API (merge request) GitLab Enterprise Edition
• Add Duo Chat usage rate to AI analytics dashboard metric table (merge request) GitLab Enterprise Edition
• Add worker architecture for scheduled PEP (merge request)
• Fix documentation for confidential incidents visibility (merge request)
• Introduce codeSuggestionsContexts for CurrentUser (merge request) GitLab Enterprise Edition
• GraphQL: add TagDelete mutation (merge request)
• Remove the todos_snoozing feature flag (merge request)
• Use helper to update stream destinations from legacy API (merge request) GitLab Enterprise Edition
• Expose cvss v3 in vulnerability details page (merge request) GitLab Enterprise Edition
• Add "PATCH /groups/:id/enterprise_users/:user_id/disable_two_factor" API endpoint (merge request) GitLab Enterprise Edition
• Support thread id in AiAction GraphQL mutation (merge request) GitLab Enterprise Edition
• Define sharding key for events (merge request)
• Delete paired audit event destinations (merge request) GitLab Enterprise Edition
• Add project topics to CI/CD Catalog (merge request)
• Add Ci/CD job token policies static analysis (merge request)
• Adding mutation for creating compliance controls (merge request) GitLab Enterprise Edition
• Add AiDuoChatEvent model (merge request) GitLab Enterprise Edition
• Defined event and metrics (merge request) GitLab Enterprise Edition
• Add last_approved_at event to VSA (merge request)
• Surface user.type to frontend (merge request)
• Improve UX of registering a GitLab agent (merge request)
• Release DAST UI additional varibles feature (merge request) GitLab Enterprise Edition
• Introduce write_virtual_registry scope (merge request)
• Add metrics for sep scheduled scans using time_window (merge request) GitLab Enterprise Edition
• Add ability to add related item for work items (merge request)
• Let ActiveContext add references to a queue (merge request) GitLab Enterprise Edition
• Update vulnerability_statistic.archived when project is archived (merge request) GitLab Enterprise Edition
• Prepare not-null for ci_pipeline_messages.project_id (merge request)
• Implement filtered search UI for credentials (merge request)
• Add Code Suggestions acceptance rate to AI usage metrics table (merge request) GitLab Enterprise Edition
• Persist licenses column to support component filtering (merge request) GitLab Enterprise Edition
• Add feature flag for anthropic prompt caching (merge request) GitLab Enterprise Edition
• Update Report class to return new dependencies for licenses (merge request) GitLab Enterprise Edition
• Admin Token API: Identify CI/CD Job Tokens by @nwittstruck (merge request)
• Extend selective sync scope to the primary checksumming (merge request) GitLab Enterprise Edition
• Add uri validation for licenses purl (merge request) GitLab Enterprise Edition
• Add expires_at column to vulnerability_exports (merge request)
• Add expires_at column to dependency_list_exports (merge request)
• Add elastic client to active context gem (merge request) GitLab Enterprise Edition
• GitLab storybook add missing features (merge request)
• Allow gem to register queues (merge request) GitLab Enterprise Edition
• Allow users to configure skip_ci behavior for scan execution policy (merge request) GitLab Enterprise Edition
• Add "GET /groups/:id/enterprise_users/:user_id" API endpoint (merge request) GitLab Enterprise Edition
• Remove Epics scope and replace it with work_item type epic (merge request) GitLab Enterprise Edition
• Add vulnerability_severity_overrides table (merge request) GitLab Enterprise Edition
• Defined event and metrics (merge request) GitLab Enterprise Edition
• Add traversal_ids to vulnerability_statistics (merge request)
• Add helper method to update legacy destination from stream destination (merge request) GitLab Enterprise Edition
• Model Registry: Add ability to get Model Version by alias (merge request)
• Fetch latest pipeline if no arguments are passed (merge request)
• Add /create_merge_request quickaction to work items (merge request)
• Add reports identification (merge request)
• Run dependency scanning on uv.lock detection (merge request)
• Release group credentials inventory feature (merge request)

Fixed (242 changes)

• Hide Edit button for work item metadata for Guest users (merge request)
• Update net-imap gem (merge request)
• Fix runner owner if necessary when runner assigned to a project (merge request)
• Fix vulnerability severify badge rendering (merge request) GitLab Enterprise Edition
• Fix incident layout when new issue look is turned on (merge request)
• Fix returning cached severity value after severity override (merge request) GitLab Enterprise Edition
• Backfill default pages deployment limit (merge request)
• Upgrade net-http-persistent gem to 4.0.2 to fix connection pool issues (merge request)
• Fix: Removing all domains does not reset primary domain (merge request)
• Add default value to plan deployment limits (merge request)
• Render files based on the correct file sizes (merge request)
• Fix incorrect branch access check (merge request)
• Fixed UX flow when when author filter dropdown opens (merge request)
• Update getBlobSearchCountQuery variables (merge request) GitLab Enterprise Edition
• It is not necessary to set FK when moving issue under new parent (merge request) GitLab Enterprise Edition
• Enforce SEP jobs when pipeline_source is a string (merge request) GitLab Enterprise Edition
• Fix Ci::RunnerTagging sharding_key_id validation (merge request)
• Fix overflow issues on snippets page (merge request)
• Fix work item issues webhook event type and object kind (merge request)
• Add custom role preloader to projects resolver (merge request) GitLab Enterprise Edition
• Fix CRM issue filters when contacts not sourced from root group (merge request)
• Add content_disposition to export downloads (merge request) GitLab Enterprise Edition
• Strip trailing newline from rendered Kroki and PlantUML diagram source by @puxlit (merge request)
• Width correction (merge request)
• Remove repo if agent project is null (merge request)
• Change Security Finding to reference project from scan (merge request) GitLab Enterprise Edition
• Fix overlap with description (merge request)
• Ensure issues has fixed dates (merge request)
• Make any_merge_request rules respect branch_exceptions (merge request) GitLab Enterprise Edition
• Fix member guidelines resulting in overflow in group member view by @nwittstruck (merge request)
• Increase query limiting threshold (merge request)
• Update stop environment API to use different policy (merge request)
• Clean up remote_mirror_retry_with_delay feature flag (merge request)
• Fix linking of policy to the project (merge request) GitLab Enterprise Edition
• Zoekt cache should invalidate if multi match chunk size changes (merge request) GitLab Enterprise Edition
• Fix broken vulnerability management save functionality (merge request) GitLab Enterprise Edition
• Determine file id from hash by @crenz (merge request)
• Nav eval > Enable filters button (merge request)
• Handle invalid repository names gracefully (merge request)
• Add group-level validation for audit events feature flag (merge request) GitLab Enterprise Edition
• Dismiss alert upon toggling labels in Tasks by type chart in VSA (merge request) GitLab Enterprise Edition
• Support merge request variables in pipeline execution policies (merge request) GitLab Enterprise Edition
• Fix link rendering in GitHub integration (merge request) GitLab Enterprise Edition
• Fix AddOnPurchase API override trial attribute bug when deprovision (merge request) GitLab Enterprise Edition
• Prevent Direct Transfer from re-enqueueing timed-out pipelines (merge request)
• Fix getExperiments Graphql Query (merge request)
• Use common insertText in dropzone_input to preserve browser undo by @Bubbis (merge request)
• Fix: add name prop to instances of devops_adoption_table_cell_flag.vue (merge request)
• Do not list pending migrations if search service unreachable (merge request) GitLab Enterprise Edition
• Do not allow assigning non-admin custom roles directly to users (merge request)
• Display download message conditionally (merge request)
• Fix issue work item spacing issue related to gutter classes (merge request)
• Update policy for stop environment REST API (merge request)
• Fix console error during filter search (merge request) GitLab Enterprise Edition
• Fix remote response broadcast messages with target path (merge request)
• Ensure correct header is present for work item detail (merge request)
• Fix bug of missing groups in JobTokenAllowlist (merge request)
• Display the correct Direct Connections value in Duo admin page (merge request) GitLab Enterprise Edition
• Add conditional operation for system note (merge request)
• Exclude file upload trigger from closing drawer (merge request)
• Send additional params to getBlobSearchCountQuery (merge request) GitLab Enterprise Edition
• Ignore database policies check for enforcing SEP (merge request) GitLab Enterprise Edition
• Fix scrolling to clipped file browser items (merge request)
• Fix dependency proxy with some object storage providers (merge request)
• Fix button name (merge request)
• Return false for pending_migrations? if indexing disabled (merge request) GitLab Enterprise Edition
• Add aria-label to delete project modal (merge request)
• Capture enter & tab in related MR field (merge request) GitLab Enterprise Edition
• Update topics path for badges (merge request)
• Add gitRef support for workspaces (merge request) GitLab Enterprise Edition
• Fix compare branches from the fork (merge request)
• Add ids to a policy actions and rules (merge request) GitLab Enterprise Edition
• Persist payload attributes of code suggestion events (merge request) GitLab Enterprise Edition
• Fixes Restricted access gitlab.com bugs (merge request) GitLab Enterprise Edition
• Improve error-handling when editing blobs (merge request)
• Fix epic creation when instance templates are set (merge request) GitLab Enterprise Edition
• Fix Duo Chat getting slower by message increase (merge request) GitLab Enterprise Edition
• Fix QueryCanceled error in PersistSecurityPoliciesWorker (merge request) GitLab Enterprise Edition
• Fix SecurityPolicyDefault to work with mr pipelines (merge request) GitLab Enterprise Edition
• Add aria-label to single file editor search input for accessible name (merge request)
• Add comment to cache when submitting a comment on a work item (merge request)
• Improve Value Stream Analytics path navigation accessibility (merge request) GitLab Enterprise Edition
• Fix calculation of owner project when project runner is assigned (merge request)
• MLOps run with no metrics with step results in failed display (merge request)
• Fix find file on blame page (merge request)
• Update pipeline graph (merge request)
• Dismiss value stream created/updated success alert upon its deletion (merge request) GitLab Enterprise Edition
• Fix GQL Error on accessing Job Token Authentication log (merge request)
• Remove jobs_api_use_primary_to_authenticate feature flag (merge request)
• Fix Ctrl+k command palette keyboard shortcut (merge request)
• Add a way to present Epics using WorkItem new logic (merge request) GitLab Enterprise Edition
• Use comma-separated IDs for skipping groups (merge request)
• Remove graphql_minimal_auth_methods FpF (merge request)
• Display custom permission title (merge request) GitLab Enterprise Edition
• Only check pending migrations if indexing enabled (merge request) GitLab Enterprise Edition
• Remove duplicated controls for narrow viewport (merge request)
• Fix the exact code search (merge request) GitLab Enterprise Edition
• Fix "Edit single file" option for empty files by @sahilsarawagi (merge request)
• Redirect group searches when SSO enabled and expired (merge request) GitLab Enterprise Edition
• Fix storing incorrect policy index in scan_result_policies (merge request) GitLab Enterprise Edition
• MR actions: Fix alignment and responsive behavior (merge request)
• Include SEP jobs with overriding PEPs (merge request) GitLab Enterprise Edition
• Fix todos for user mentions in wiki page comments (merge request)
• Add missing hasParent to Hierarchy widget definition (merge request) GitLab Enterprise Edition
• Ensure dropdown toggle has accessible text on work item create MR button (merge request)
• Decrease inline button min-height in merge conflict page by @mschoenlaub (merge request)
• Enable submit buttons (merge request) GitLab Enterprise Edition
• Fix MergeRequestsComplianceViolations not null migrations (merge request)
• Allow user to have only 1 admin member role (merge request)
• Removed coverage check learn more link by @peterhdangg (merge request) GitLab Enterprise Edition
• Add a post deploment migration fixing the scim data (merge request)
• Update error message for validation errors of slugs by @schurzi (merge request)
• Fix a11y issue for new todos dashboard (merge request)
• Model Registry: Fix default_experiment path (merge request)
• Fix CI_RUNNER_TAGS regression (merge request)
• Fix API logging of JSON float/boolean param values (merge request)
• Filter out SAML projects when SAML session has expired (merge request) GitLab Enterprise Edition
• Filter out SAML projects when SAML session has expired (merge request) GitLab Enterprise Edition
• Add alert when global search and logged out groups exist (merge request) GitLab Enterprise Edition
• Filter out SAML projects when SAML session has expired (merge request) GitLab Enterprise Edition
• Ensure file tree table has row headers (merge request)
• Fix commit length (merge request)
• Tags list: Fix alignment of actions (merge request)
• Add role to informative icons for monitor settings (merge request)
• Two-factor quth: Add title to QR Code SVG (merge request)
• Add work item title and description in draft (merge request)
• Fixed invalid states for custom stage fields in VSA settings form (merge request) GitLab Enterprise Edition
• Use proper HTML semantics in shortcuts modal window (merge request)
• Avoid hard-coding test integer (merge request)
• Only show re-request review button to users who have permission (merge request) GitLab Enterprise Edition
• Wrap devops table help icon with gl-button (merge request) GitLab Enterprise Edition
• Fix loading pipeline execution policies with missing project (merge request) GitLab Enterprise Edition
• Fix bug with contacts autocomplete checking root group not CRM group (merge request)
• Uses billable or nonbillable trait for member roles (merge request) GitLab Enterprise Edition
• Hide comment template button in work item description (merge request)
• Update to use gl-button instead of gl-icon in visibility-icon (merge request) GitLab Enterprise Edition
• Remove exclude_child_pipelines_from_tag_branch_query feature flag (merge request)
• Fix category of collapsed issue sidebar notification button (merge request)
• Rescue timeout errors in GeoNodeStatus metrics queries (merge request) GitLab Enterprise Edition
• Use primary DB when authenticating via job token in jobs API (merge request)
• Skip scheduling service cache if no period is provided (merge request) GitLab Enterprise Edition
• Fix resource_tokens page in credentials (merge request) GitLab Enterprise Edition
• Fix pages multiple deployments limit for forgotten plans (merge request)
• Take scrollbar width into account when calculating collapsed sidebar (merge request)
• Use canUpdate policy to control close button visibility (merge request)
• Work items design management: Fix alignment (merge request)
• Update validations for pipeline removal (merge request)
• Localize type names in work item create form (merge request)
• Fix NoMethodError when quick action users are not set (merge request)
• Fix routing for projects with dots in catalog (merge request)
• Update project settings approval widget (merge request) GitLab Enterprise Edition
• Skip cyclonedx report when its type is set to (merge request) GitLab Enterprise Edition
• Ensure DevOps Reports tables have row headers (merge request) GitLab Enterprise Edition
• Ensure admin subscripton page tables have row headers (merge request)
• Ensure Admin users table has appropriate row headers (merge request)
• Ensure PAT table rows have a row header (merge request)
• Add labels to color picker inputs in user preferences (merge request)
• Ensure Kubernetes cluster table rows have row headers (merge request)
• Ensure Job cell is the row header for Jobs table (merge request)
• Ensure board move to top/bottom buttons have role (merge request)
• Update to use gl-button for feature flag description info (merge request)
• Fix review/draft notes using only quick actions (merge request)
• Fix alignment of user profile info (merge request)
• Editor toolbar: Add role and aria-label (merge request)
• Pass schedule param to execution policy pipelines (merge request) GitLab Enterprise Edition
• Verification: Add missing id for form label to work (merge request)
• Monitor settings: Fix a11y issue with labels (merge request)
• Pages: Adds label to input fields on step 2 (merge request)
• Design management (legacy): Add aria-label to checkbox (merge request)
• Project acess tokens: Fix select label for attribute value (merge request)
• Remove "project_templates_reporter_access" feature flag (merge request)
• Make sure badges visible for non-admins (merge request)
• Content editor: Add missing aria-label (merge request)
• Add missing name for disclosure button on group list page (merge request)
• Add missing name for disclosure button (merge request)
• Instance overview: Fix link focus (merge request)
• Fix ActionView::MissingTemplate for CompareController (merge request)
• Commment user link: Add focus ring (merge request)
• Fix intermittent logouts even with remember me (merge request)
• Add missing names for buttons on policies, labels and clusters table (merge request)
• Fix error for anonymous users on Projects::Ml::CandidatesController#show (merge request)
• Finalize deduplication of issuable_resource_links (merge request)
• Fix memory leak in DiffFile.vue (merge request)
• Upload large export files outside DB transaction (merge request) GitLab Enterprise Edition
• Fixes merge reports section in the widget not being fully hidden (merge request)
• Add error handling to dependency export creation (merge request) GitLab Enterprise Edition
• Fixed layout issue on the invite member modal component by @zillemarco (merge request)
• Wrap project card content on small screens (merge request)
• Fix projectAnalytics.aggregate.durationStatistics nil values (merge request)
• Fix 500 error when tag delete process fails (merge request)
• Remove useless validations for subgroup settings (merge request)
• Add static analysis checks for job token policies (merge request)
• Fix DumpWriteBufferCronWorker with multiple attribute groups (merge request) GitLab Enterprise Edition
• Fix permission issue for On-demand scans (merge request) GitLab Enterprise Edition
• Fix 500 error when ciPipelineStage query has an invalid id (merge request)
• Add db trigger to fill wiki user mention sharding key (merge request)
• Fix 500 error on unauthenticated audit event (merge request) GitLab Enterprise Edition
• Fix vulnerability details header alignment (merge request) GitLab Enterprise Edition
• Fix Workhorse failing on 64-bit unaligned access on Raspberry Pi 32-bit (merge request)
• Support capitalized response for smart server reply (merge request)
• Fix nil input in causing SetGroupSecretPushProtectionService to fail (merge request) GitLab Enterprise Edition
• Ensure user external attribute is preserved and not null (merge request)
• Delete scan_result_policy_reads when deleting security policies (merge request) GitLab Enterprise Edition
• Use moveDesign permission to control design reordering (merge request)
• Fix rescue statement by returning expected value (merge request)
• Fix descendant filter for security policies (merge request) GitLab Enterprise Edition
• Use naive component-based state approach for infinite list (merge request) GitLab Enterprise Edition
• Include support_bot comments in MRs to Duo Chat context (merge request) GitLab Enterprise Edition
• Fix weight attribute truncation on related items (merge request)
• Fix shared agents list (merge request)
• Fix member role preloaders when IDs are passed instead of objects (merge request) GitLab Enterprise Edition
• Don't show incorrect median value for Overview tab of VSA (merge request)
• Check for admin in remote_mirror_setting_enabled? (merge request) GitLab Enterprise Edition
• Fix commit tags badge link text color in dark mode (merge request)
• Prevent guest users from locking issue discussion (merge request)
• Fix work item parent reset error on create work item (merge request)
• Cloud Connector: Fix health check for dev use case (merge request) GitLab Enterprise Edition
• Redirect users not in onboarding to root_path (merge request) GitLab Enterprise Edition
• Fix text color of rich text suggestion added line text (merge request)
• Remove limit of max 5 defined policies from json schema (merge request) GitLab Enterprise Edition
• Show diff when diff_refs.head_sha has been pruned (merge request)
• Fix SCIM revoked identities (merge request) GitLab Enterprise Edition
• Fix console warning on work items new page (merge request)
• Move to-dos actions out of the main link (merge request)
• GitHub import handle requested_reviewer nil (merge request)
• Fix console error on work item detail page (merge request)
• Use UTF-8 encoding for email notifications (merge request)
• Show diff when diff_refs.head_sha has been pruned (merge request)
• Handle case when deployable is nil (merge request)
• Apply all filters to flowMetricsQuery (merge request)
• Handle nil #mapped_user_id in SourceUserMapper (merge request)
• Reset variable visibility on form reset (merge request)
• Fix issue template loading for templates with spaces in names (merge request)
• Fix merge_after moving on each edit if server timezone is not UTC by @Taucher2003 (merge request)
• Fix merge request list empty state (merge request)
• Resolve vulnerability modal error race condition (merge request) GitLab Enterprise Edition
• Fix error when deleting all optional variables (merge request) GitLab Enterprise Edition
• Render code line breaks in vulnerability (merge request) GitLab Enterprise Edition
• Fix scroll position while loading comments (merge request)
• Prevent guests from locking MR or assigning reviewers (merge request)
• Add H1 to legacy issue edit page for screen reader users (merge request)
• Fix HAML rendering (merge request)

Changed (273 changes)

• Adjust import history table row toggle (merge request)
• Add dropdown to load projects for multiple groups (merge request) GitLab Enterprise Edition
• Add db migration for vscode_extension_marketplace (merge request)
• Update the latest DS template to use the new DS analyzer (merge request) GitLab Enterprise Edition
• Remove mark_resolved_vulnerabilities_with_sbom_scans feature flag (merge request)
• Apply gl-card styling to code suggestion blocks (merge request)
• Move Add to tree control (merge request)
• Improve accessibility for project and commit views (merge request)
• Pass interface and client information to AI Gateway (merge request) GitLab Enterprise Edition
• Fix 500 error on IP restrictions when checking snippets (merge request) GitLab Enterprise Edition
• Update the CI templates for DS to use the new DS analyzer (merge request) GitLab Enterprise Edition
• Change new github project error message (merge request) GitLab Enterprise Edition
• Migrate model experiments listing page to graphql (merge request)
• Improve invalid owners detection in CODEOWNERS (merge request) GitLab Enterprise Edition
• Link custom software license to software license policies (merge request) GitLab Enterprise Edition
• Admin Token API: Revoke Incoming Email Tokens by @nwittstruck (merge request)
• Call MarkAsResolvedService after an SBOM security scan (merge request) GitLab Enterprise Edition
• Show a visual when the environment is in the stopping state by @antonkalmykov (merge request)
• Consider user permissions when validating Code Owners (merge request) GitLab Enterprise Edition
• Add v2 approval rule table and model (merge request) GitLab Enterprise Edition
• Document inject_policy strategy for pipeline execution policies (merge request)
• Fix Pages CI Variables (merge request) GitLab Enterprise Edition
• Cloud Connector: Expose keys from database (merge request) GitLab Enterprise Edition
• Prevent user from downloading empty CSV (merge request)
• Zoekt: Rollout the zoekt_reemit_events FF (merge request) GitLab Enterprise Edition
• Remove unnecessary codes (merge request) GitLab Enterprise Edition
• Remove loose_foreign_keys_for_polymorphic_associations FF (merge request) GitLab Enterprise Edition
• Removed feature flag search_mr_filter_source_branch (merge request) GitLab Enterprise Edition
• Change label ID field type to Types::GlobalIDType[::Label] (merge request)
• Update squash options update mutation to support all branches rules (merge request)
• Remove claude_3_5_sonnet_20241022_for_code_gen feature flag (merge request)
• Update links to full docs URLs to skip index (merge request)
• Update comment to be mandatory in bulk severity override mutation (merge request) GitLab Enterprise Edition
• Update links to full docs URLs to skip index (merge request)
• Add import history table destination formatter (merge request)
• Documentation changes for rename prsd to spp (merge request)
• Add import history table row and header container components (merge request)
• Rename index files in application security docs (merge request)
• Allow shortcuts to remove markdown by @Bubbis (merge request)
• Import group: Migrate components used (merge request)
• Import groups by direct transfer: Cleanup interface (merge request)
• Use work item epic-issue adapter by default (merge request) GitLab Enterprise Edition
• Automatically update subsequent ordered lines in plain markdown editor by @Bubbis (merge request)
• Disallow project runners from being unassigned from owner (merge request)
• Update links to full docs URLs to skip index (merge request)
• Improve error messages for custom stage fields in VSA settings form (merge request) GitLab Enterprise Edition
• Change user ID field type to Types::GlobalIDType[::User] (merge request)
• Add an explanation why the CI variable value cannot be masked by @antonkalmykov (merge request)
• Change repository controls into a dropdown (merge request)
• Update error message for needs CI keyword (merge request)
• Move the troubleshoot button to a sticky footer (merge request)
• Handle ghost users consistently (merge request)
• Update sort labels to be consistent across groups and projects (merge request)
• Store recently delete billable members to ease the sync up (merge request) GitLab Enterprise Edition
• Cleanup left over cross-db suppressions (merge request) GitLab Enterprise Edition
• Default-enable security policy project deletion prevention (merge request) GitLab Enterprise Edition
• Update links to full docs URLs to skip index (merge request)
• Rename index files for user/group clusters and contribution_analytics (merge request)
• Update CI_JOB_TOKEN JWT payload (merge request)
• Add the ability to download compliance frameworks (merge request) GitLab Enterprise Edition
• Add GET /projects/:id/remote_mirrors/:mirror_id/public_key API endpoint (merge request)
• Enhance resilience of single relation import Sidekiq worker (merge request)
• Do not drill props to BlobButtonGroup (merge request) GitLab Enterprise Edition
• Rename index files for Hugo migration (merge request)
• Remove codeowner_role_approvers ff (merge request) GitLab Enterprise Edition
• Advanced search: Cleanup sections (merge request)
• Zoekt: Update dot_com_rollout task (merge request) GitLab Enterprise Edition
• Rename index.md to _index.md for compatibility with docs-gitlab-com (merge request)
• Rename index.md to _index.md for compatibility with docs-gitlab-com (merge request)
• Rename index.md to _index.md for compatibility with docs-gitlab-com (merge request)
• Restructures code coverage doc and incorporates test coverage viz doc (merge request)
• Rename index.md to _index.md for compatibility with docs-gitlab-com (merge request)
• Rename from index.md to _index.md (merge request)
• Update pages service (merge request)
• Update create pipeline mutation to use GraphQL (merge request)
• Add ComplianceFrameworksController for JSON export (merge request) GitLab Enterprise Edition
• Change UX flow of license exclude packages (merge request) GitLab Enterprise Edition
• Include AllBranchesRules in non-EE branch rules responses (merge request)
• Remove $registryClass from replicableTypeUpdate mutation in Geo by @antonkalmykov (merge request) GitLab Enterprise Edition
• Create downstream_pipeline_dropdown.vue (merge request)
• Add cronjob_child tag to Sidekiq cronjob workers (merge request)
• Add v2 approval rule table and model (merge request) GitLab Enterprise Edition
• Remove fully rolled-out feature flag for Duo Chat conciseness (merge request) GitLab Enterprise Edition
• Check root namespace for ci_jwt_groups_direct feature flag (merge request)
• Set traversal_ids on vulnerability stat insert (merge request) GitLab Enterprise Edition
• Add more spacing to super-sidebar toggle button (merge request)
• Rename index.md to _index.md for compatibility with docs-gitlab-com (merge request)
• Include users from custom roles as MR approvers (merge request) GitLab Enterprise Edition
• Import status: Update component (merge request)
• Rename variable and environments index files (merge request)
• Remove without_archived_projects (merge request) GitLab Enterprise Edition
• Rename CI YAML index file (merge request)
• Reflow work item buttons (merge request)
• Cleanup pages_multiple_versions_setting feature flag (merge request)
• Remove cross-DB modification (merge request) GitLab Enterprise Edition
• Expose squash options for all branches rules in free plan (merge request)
• Topic badge tooltip enhancement (merge request)
• Ingest all licenses for components with at least one known license (merge request) GitLab Enterprise Edition
• Make project visibility icon keyboard focusable (merge request)
• Model Experiments: Sort data descending (merge request)
• Visibility settings: Migrate to GlCard (merge request)
• Remove callback for adding user to default organization (merge request)
• Permanently enables duplicate exceptions for packages (merge request)
• Admin Token API: Reset OAuth Application Secrets by @nwittstruck (merge request)
• Remove feature-flag drop_lease_usage_project_recalculate_workers (merge request)
• Cleanup bigint conversion for geo_event_log.geo_event_id (merge request)
• Update text for license rule (merge request) GitLab Enterprise Edition
• Commit: Update page header to use PageHeading component (merge request)
• Add import history to your work nav bar (merge request)
• Fix duplicate emails sent for PrAT and GrAT expiring tokens (merge request)
• Enable FF by default for project dependency page (merge request)
• Improve UI text for syntax theme selection (merge request)
• Move publish to pages.publish (merge request)
• Add discernible text to project notifications button (merge request)
• Use background status warning on matched text (merge request)
• Improve seat controls copy (merge request) GitLab Enterprise Edition
• Split microsoft_applications tables (merge request) GitLab Enterprise Edition
• Improve to-do items' styling (merge request)
• Always allow pipeline variables in ondemand_dast_validation pipelines (merge request)
• Increase fileSize threshold for Highlight.js (merge request)
• Add in-product announcement for legacy IDE removal (merge request)
• Update gitlab-glfm-markdown and prometheus-client-mmap gems (merge request)
• Update import page header (merge request)
• Change group SPP feature category to security_testing_configuration (merge request) GitLab Enterprise Edition
• Add table creator to plain markdown editor by @Bubbis (merge request)
• Load linked to SPP groups (merge request) GitLab Enterprise Edition
• Remove feature-flag drop_lease_usage_authorized_projects_worker (merge request)
• Add partially disabled mode (merge request) GitLab Enterprise Edition
• Refactor limit check (merge request)
• Update breadcrumbs to match tabs and view in the Geo replication by @antonkalmykov (merge request) GitLab Enterprise Edition
• Truncate the project description when it is long in the CI/CD Catalog by @antonkalmykov (merge request)
• Add ordering when updating used storage bytes for zoekt indices (merge request) GitLab Enterprise Edition
• Add number formatting to ci minutes limit banner (merge request) GitLab Enterprise Edition
• Add sast tooltip and download link (merge request)
• Allow MarkAsResolvedService to scope by report type (merge request) GitLab Enterprise Edition
• Update re2 to v2.15.0 (merge request)
• Make file tree and modified icon focusable (merge request)
• Rename seat controls section to singular (merge request) GitLab Enterprise Edition
• Rename Sign-up restrictions settings section (merge request) GitLab Enterprise Edition
• Restrict tag rule ops when Gitlab API is not supported (merge request)
• Add project_id to DescriptionTemplates & split singular/bulk fields (merge request) GitLab Enterprise Edition
• Runner Authentication Tokens: Explain how a token can be resetted by @nwittstruck (merge request)
• Sync security policies when protected branch is modified (merge request) GitLab Enterprise Edition
• Add linked groups resolver (merge request) GitLab Enterprise Edition
• Resolve cross-join in security project statistics (merge request) GitLab Enterprise Edition
• Update notification to Admin (merge request) GitLab Enterprise Edition
• Pipeline wizard placeholder use design tokens (merge request)
• Migrate authored todos to GhostUser (merge request)
• Add discernible text to merge request overview activity sorting button (merge request)
• Set vuln stat traversal_ids when setting pipeline (merge request) GitLab Enterprise Edition
• Restrict creation of new rules if over maximum (merge request)
• Allow option to do multi node search on zoekt proxy (merge request) GitLab Enterprise Edition
• Add partially disabled mode (merge request) GitLab Enterprise Edition
• Remove feature flag (merge request) GitLab Enterprise Edition
• Papercuts 17.9 (merge request)
• Enhance CI/CD variable drawer UI with popovers for help content by @antonkalmykov (merge request)
• Enable specifying a semantic element for the CRUD component container (merge request)
• Return ids of created vulnerabilities with SBOM scanning (merge request) GitLab Enterprise Edition
• Add protected tag to the container registry (merge request)
• Do not update target entities if todos change (merge request)
• Refactored non-billable check for Gitlab.com BSO (merge request) GitLab Enterprise Edition
• Reduce layout shifts in usage quotas > pipelines (merge request) GitLab Enterprise Edition
• Integration: Item changes (merge request)
• Single/Multiple choice component: Update selected and disabled (merge request)
• Remove cross-join from namespace historical statistics (merge request) GitLab Enterprise Edition
• Fix some RSpec/BeEmpty offenses (merge request)
• Use small text for description. by @nomad_blaze (merge request)
• Remove feature flag after globally enbaling (merge request) GitLab Enterprise Edition
• Update software license policies with custom licenses (merge request) GitLab Enterprise Edition
• Show commit SHA in target column of AuditEvents table (merge request) GitLab Enterprise Edition
• Admin Token API: Clarify historic prefixes are only excluded for PATs by @nwittstruck (merge request)
• Elaticsearch issue query boost iid by 50 (merge request) GitLab Enterprise Edition
• Validate not-null and update sharding key for ci_pipeline_messages (merge request)
• Compliance framework dropdown order change & style update (merge request) GitLab Enterprise Edition
• Finalize backfilling epic work item data (merge request)
• Allow null access levels on rule creation (merge request)
• Execute pipelines for PEP project schedules (merge request) GitLab Enterprise Edition
• Work item note activity buttons enabled while loading (merge request)
• Show timeago tooltip on tab (merge request)
• Add discernible text to network/repository graph search button (merge request)
• Add label to feature flag instance ID regeneration input (merge request)
• Create and trigger the an event to update the (merge request) GitLab Enterprise Edition
• Remove branch_names_sorting feature flag (merge request)
• Specify username and password required (merge request)
• Update dependency @gitlab/web-ide to ^0.0.1-dev-20250110172049 by @gitlab-dependency-update-bot (merge request)
• Update traversal_ids for vulnerability statistic (merge request) GitLab Enterprise Edition
• Only log elasticsearch metrics if the cluster is red (merge request) GitLab Enterprise Edition
• Release create NuGet packages on the fly feature (merge request)
• Allow max_artifact_size to be changed via the REST API (merge request)
• Integrations detail page: Migrations and small visual fixes (merge request)
• Clean up duo_chat_storage_postgresql feature flags (merge request) GitLab Enterprise Edition
• fix: Move call to AiRelatedSettingsChangedEvent by @yashikajotwani12 (merge request) GitLab Enterprise Edition
• Make new header app default (merge request)
• Clean up PATs::ExpiringWorker extended logging (merge request)
• Clean up rewrite_history_ui flag (merge request)
• Add class level config for simple zoekt scheduling service tasks (merge request) GitLab Enterprise Edition
• Allow access fields on Protection::TagRule to be null (merge request)
• Remove move_ai_tracking_to_instrumentation_layer feature flag (merge request)
• Only claim human users as enterprise (merge request) GitLab Enterprise Edition
• Update skip ci payload (merge request) GitLab Enterprise Edition
• Improve heading hierarchy and accessibility on group import (merge request)
• Replace '.' character on organization path (merge request)
• Update SPDX to 3.26.0 (merge request)
• Show only folder name and a link to the folder in the environments list by @antonkalmykov (merge request)
• Fix counter and remove first/last pages from applications (merge request)
• Process repo_to_delete worker in a single batch (merge request) GitLab Enterprise Edition
• Resolve cross-joins from InstanceSecurityDashboard (merge request) GitLab Enterprise Edition
• Expand publish variables for pages deployment (merge request)
• Prevent creation of placeholder users for deleted users (merge request)
• Remove delete_inactive_project_bot_users FF (merge request)
• Align deletion action between groups and projects in the settings page by @antonkalmykov (merge request) GitLab Enterprise Edition
• Clean up duo_chat_storage_postgresql feature flags (merge request) GitLab Enterprise Edition
• Update streaming filters docs links (merge request) GitLab Enterprise Edition
• Add setup_for_company to onboarding status json (merge request)
• Show "delete model" and "version" links only with permission (merge request)
• Add sast/dast identification on job (merge request)
• Remove retain_resource_access_token_user_after_revoke FF (merge request)
• Remove policies check from pipeline tooling (merge request)
• Add secret_token for compliance requirement controls (merge request) GitLab Enterprise Edition
• Hide "promote run" button when no permission exists (merge request)
• Extend DescriptionTemplate type to include category (merge request)
• Add notes to mention permissions related to a DAST scan (merge request) GitLab Enterprise Edition
• Add pending status for req. controls (merge request) GitLab Enterprise Edition
• Remove search_mr_filter_author feature flag (merge request) GitLab Enterprise Edition
• Update license exceptions format (merge request) GitLab Enterprise Edition
• Remove enable_inactive_tokens_deletion_cron_worker FF (merge request)
• Fix jira api required field (merge request)
• Refactor where actions appear in the accessibility MR widget by @antonkalmykov (merge request)
• Increase spacing between to-do link and actions (merge request)
• Hide "Delete experiment" for model experiment without permission (merge request)
• Added ability to close the board modal with esc or background click by @zillemarco (merge request)
• Remove deprecated and disabled SAST jobs (merge request)
• Bump nokogiri to v1.18 (merge request)
• Refactor scheduling service to use dispatch helper (merge request) GitLab Enterprise Edition
• Update error message when password validation fails (merge request) GitLab Enterprise Edition
• Remove cross-join from .grades_for with instance (merge request) GitLab Enterprise Edition
• Add new workspace_variables query API (merge request) GitLab Enterprise Edition
• Return all validation errors when manual vulnerability creation fails (merge request) GitLab Enterprise Edition
• Remove unused prop (merge request)
• Get group grades using vulnerability statistics (merge request) GitLab Enterprise Edition
• Remove alert_message_faq from storage banners (merge request) GitLab Enterprise Edition
• Save the LDAP tab pressed in cookie (merge request)
• Change registry protection rule admin text to Adminstrator (merge request)
• Update spacing (merge request)
• Enable the highlighting and memoization of admin tabs (merge request)
• Update dependency auto-deploy-image to v2.118.0 (merge request)
• LicenseScanning Report refactoring (merge request) GitLab Enterprise Edition
• Update pre-populated branch name when user can push to branch (merge request)
• Warn user if iteration has confidential issues they can't access (merge request) GitLab Enterprise Edition
• Replace paginator for keyset paginator admin applications (merge request)
• Use page heading component in feature flags list view (merge request)
• Model Registry: Rename candidate to run (merge request)
• Show agent version warnings from KAS (merge request)
• Add separate tabs for project and shared agents (merge request) GitLab Enterprise Edition
• Topics subpage: Cleanup and layout refinements (merge request)
• Add index to import_source_user_placeholder_references (merge request)
• Set traversal_ids upon vuln statistics ingestion (merge request) GitLab Enterprise Edition
• Move conan v1 search endpoint to conan shared endpoint by @oceane_scania (merge request)
• Get group grades using vulnerability statistics (merge request) GitLab Enterprise Edition
• Support multiple oidc providers (merge request) GitLab Enterprise Edition
• Process repo_to_index event with one batch at a time (merge request) GitLab Enterprise Edition
• Use page heading component in compliance center dashboard (merge request) GitLab Enterprise Edition
• Replace VulnerabilitiesFinder with VulnerabilityReadsFinder (merge request) GitLab Enterprise Edition
• Generalize relationship quick action copy (merge request)
• Move full page tooltip to right (merge request)
• Drop ipaddr as a dependency (merge request)
• Expose linked work item state on LinkedItemType (merge request)
• Move Seat Control to licensed feature (merge request) GitLab Enterprise Edition
• Add an icon to the bypassed reviews event in the MR timeline by @antonkalmykov (merge request)
• Change checkbox placement in Artifacts stacked view by @Deepak18-06 (merge request)
• Remove job token auth feature flag (merge request)
• Unhide container repository protection rules API by @nwittstruck (merge request)
• Switch from delete_all to destroy_all for user add-on assignments (merge request) GitLab Enterprise Edition

Deprecated (5 changes)

• Add deprecation announcements for DS build support and Gemnasium (merge request)
• Geo GraphQL API: Deprecate keyword arg (merge request) GitLab Enterprise Edition
• Fix deprecated field name (merge request)
• Redirect page visit on group projects page to the group overview (merge request)
• Ignore confidence columns on Vulnerability model (merge request) GitLab Enterprise Edition

Removed (24 changes)

• Remove rake task to enable or disable work item epics (merge request) GitLab Enterprise Edition
• Ignoring expression and type column from requirement (merge request) GitLab Enterprise Edition
• Remove availableFromAccessLevel field (merge request) GitLab Enterprise Edition
• Remove buildForecast graphQL endpoint (merge request) GitLab Enterprise Edition
• Remove All tab from To-Do dashboard (merge request)
• Removed feature flag by_pass_two_factor_for_current_session (merge request)
• Remove richText from bloblSearch graphQL (merge request) GitLab Enterprise Edition
• Remove epic_metrics table, models and associated references (merge request)
• Remove web_ide_settings_context_hash feature flag (merge request)
• Remove scan_execution_pipeline_concurrency_control ff (merge request)
• Remove temporary indicies from packages_dependencies table (merge request)
• Revert "Merge branch 'autoflow/basic-workitems-events' into 'master'" (merge request)
• Add post-deploy migration to drop unused column (merge request)
• Remove function-based namespace lookups (merge request)
• Ignore sep max_concurrency application setting (merge request) GitLab Enterprise Edition
• Removed the ignore rule for dropped column (merge request) GitLab Enterprise Edition
• Remove todos_vue_application feature flag and all inactive code (merge request)
• Remove index_vulnerabilities_on_detected_at_and_id synchronously (merge request)
• Remove license_scanning_with_sbom_licenses feature flag (merge request)
• Remove sep scheduled scans application settings unused view (merge request) GitLab Enterprise Edition
• Remove hybrid search (merge request) GitLab Enterprise Edition
• Drop advanced_scopes from personal_access_tokens (merge request)
• Remove failing merge request approval rules metric (merge request) GitLab Enterprise Edition
• Remove broken compliance_total_unique_counts weekly, monthly metrics (merge request) GitLab Enterprise Edition

Security (15 changes)

• Revert "Update Kas version to the lastest sha"
• Do not allow Planner role to update or delete incidents
• Reduce number of object allocations on PAT endpoint
• Prevent SSRF attacks for Workspaces
• Security Duo Chat Escape Unknown Domain Hyperlinks
• Fixes XSS on the target branch in the merge request widget
• Prevent read code access when repository is disabled
• Unsubscribe from actioncable channel when PAT is revoked
• Update Kas version to the lastest sha
• Add offset optimization to audits event API (merge request) GitLab Enterprise Edition
• Fix protected variable exfiltration (merge request)
• Avoid recursive sidekiq calls on cyclic work item hierarchies (merge request)
• Enhance rich viewer sanitization (merge request)
• Respect the private profile constraints (merge request)
• Reduce REGEXP_TIMEOUT_SECONDS to 40 seconds (merge request)

Performance (11 changes)

• Optimize build.execute_hooks when creating pipeline (merge request)
• Set idempotency_arguments to SyncProjectPolicyWorker (merge request) GitLab Enterprise Edition
• Fix cache of branch_requires_code_owner_approval? (merge request) GitLab Enterprise Edition
• Reduce N+1 in project GraphQL project queries (merge request)
• Update import_failures sharding (merge request)
• Share preloads across multiple GraphQL project resolvers (merge request)
• Remove auto_merge_process_worker_pipeline feature flag (merge request)
• Replace check_rate_limit! with check_rate_limit_by_user_or_ip! (merge request)
• Remove check_oversized_blobs_without_blob_stitcher ff (merge request)
• Improve resolved vulnerabilities performance with SM-specific index (merge request)
• Create system_hooks table (merge request)

Other (283 changes)

• Add Telegram instance integration (merge request) GitLab Enterprise Edition
• Add sharding_key to board_labels table (merge request)
• Validate not null on vulnerability_finding_evidences sharding key (merge request)
• Regenerate RuboCop TODO files (merge request)
• Finalize migration BackfillIssuesDatesWithWorkItemDatesSources (merge request)
• Remove deprecation notice for runner fields in REST entity (merge request)
• Quarantine a flaky test (merge request)
• Finalize migration BackfillWikiPageSlugsProjectId (merge request)
• Set pipl user soft deletion (merge request) GitLab Enterprise Edition
• Add MicrosoftTeams instance integration (merge request)
• Address non-blocking comments (merge request) GitLab Enterprise Edition
• Add new CDot internal endpoint (merge request) GitLab Enterprise Edition
• Sync setup_for_company in user_preferences and onboarding_status (merge request) GitLab Enterprise Edition
• Fix rubocop offenses for conan package tests by @gerardo-navarro (merge request)
• Expose project/root_namespace ids for Workhorse requests (merge request)
• Remove numbers from alerts integration settings (merge request)
• Remove current_page_context_prompt_in_aigw feature flag (merge request) GitLab Enterprise Edition
• Remove Search::Zoekt::IndexOverWatermarkEventWorker job instances (merge request)
• Reject API calls from orphaned project runners with HTTP 403 (merge request)
• Add and backfill namespace_id for design_management_repository_states (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Finalize migration BackfillZoektReplicas (merge request)
• Finalize migration BackfillPackagesDependencyLinksProjectId (merge request)
• Finalize migration BackfillPackagesDebianProjectComponentsProjectId (merge request)
• Add & backfill sharding keys for bulk_import_failures (merge request)
• Model registry: Remove unused components (merge request)
• Add Teamcity instance integration (merge request)
• Add a migration to limit group visibility by organization visibility (merge request)
• Set packages_debian_project_architectures.project_id as NOT NULL (merge request)
• Add NOT NULL constraint on packages_debian_group_architectures.group_id (merge request)
• Add NOT NULL constraint on packages_conan_metadata.project_id (merge request)
• Set external_status_checks_protected_branches.project_id as NOT NULL (merge request)
• Quarantine a flaky test (merge request)
• Validate NOT NULL on vulnerability_findings_remediations sharding key (merge request)
• Validate NOT NULL on terraform_state_versions sharding key (merge request)
• Add unique constraints on ci_runners_e59bb2812d partitions (merge request)
• Add ExternalWiki instance integration (merge request)
• Remove search_group_sso_redirect feature flag (merge request) GitLab Enterprise Edition
• Remove search_global_sso_redirect feature flag (merge request)
• Add Harbor instance integration (merge request)
• Use ResetAuthenticationTokenService in Runner API by @nwittstruck (merge request)
• Validate NOT NULL on wiki_repository_states sharding key (merge request)
• Regenerate RuboCop TODO files (merge request)
• Cleanup feature flag ff_pages_use_open_file (merge request)
• Validate NOT NULL on work_item_parent_links sharding key (merge request)
• Validate NOT NULL on approval_project_rules_users sharding key (merge request)
• Validate NOT NULL on approval_merge_request_rule_sources sharding key (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Add EmailsOnPush instance integration (merge request)
• Add and backfill project_id for merge_request_cleanup_schedules (merge request)
• Add & backfill sharding keys for bulk_import_trackers (merge request)
• Add and backfill project_id for merge_request_predictions (merge request)
• Add and backfill project_id for requirements_management_test_reports (merge request)
• Add and backfill namespace_id for design_user_mentions (merge request)
• Admin Token API: Revoke Impersonation tokens by @nwittstruck (merge request)
• Add NOT NULL constraint on approvals sharding key (merge request)
• Validate NOT NULL on vulnerability_finding_signatures sharding key (merge request)
• Add NOT NULL constraint on ml_model_metadata.project_id (merge request)
• Requeue backfill for target_project_id on ComplianceViolations table (merge request)
• Refactor NuGet package enqueuing by @holtvogt (merge request)
• Add Discord instance integration (merge request)
• Add and backfill project_id for operations_scopes (merge request)
• Add and backfill project_id for merge_request_diff_details (merge request)
• Add & backfill sharding keys for bulk_import_export_batches (merge request)
• Add & backfill sharding keys for required_code_owners_sections (merge request)
• Mark 20241025160103 as obsolete (merge request) GitLab Enterprise Edition
• Mark 20241106201829 as obsolete (merge request) GitLab Enterprise Edition
• Add and backfill namespace_id for design_management_designs_versions (merge request)
• Validate not null on sbom_occurrences_vulnerabilities sharding key (merge request)
• Add & backfill sharding keys for snippet_repository_storage_moves (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Remove vulnerability_report_security_scores feature flag (merge request) GitLab Enterprise Edition
• Reindex Elasticsearch projects index to update integer with long type (merge request) GitLab Enterprise Edition
• Reindex Elasticsearch users index to update integer with long type (merge request) GitLab Enterprise Edition
• Remove sourcegraph feature flag (merge request)
• refactor: Use BaseProjectService for container protection services by @gerardo-navarro (merge request)
• Protected packages: Remove deprecation warnings in GRAPHQL by @gerardo-navarro (merge request)
• Change FF ownership (merge request) GitLab Enterprise Edition
• Delete track_user_access_from_pipl_countries FF (merge request) GitLab Enterprise Edition
• Mark 20241105111645 as obsolete (merge request) GitLab Enterprise Edition
• Regenerate RuboCop TODO files (merge request)
• Add milestones not null sharding key constraint (merge request)
• Instrument the creation of CI runners (merge request)
• Regenerate RuboCop TODO files (merge request)
• Add and backfill group_id for boards_epic_list_user_preferences (merge request)
• Extend SyncNamespaceService for add-on purchases (merge request) GitLab Enterprise Edition
• Add and backfill project_id for dast_pre_scan_verification_steps (merge request)
• Reindex Elasticsearch wiki index to update integer with long type (merge request) GitLab Enterprise Edition
• Add Confluence instance integraiton model (merge request)
• Add sharding key to board_assignees (merge request)
• Set sharding key for merge_requests_compliance_violations (merge request)
• Fix Layout/LineLength offenses by @ikelax (merge request)
• Add new provision service (merge request) GitLab Enterprise Edition
• test: Improve readability of test by applying table syntax by @gerardo-navarro (merge request)
• Remove start and due date widget from incident WIT (merge request)
• Regenerate RuboCop TODO files (merge request)
• Add NOT NULL constraint to release_links.project_id column (merge request)
• Add NOT NULL constraint on draft_notes.project_id (merge request)
• Fix 20 rubocop violations for Layout/ArrayAlignment (merge request)
• Add project_namespace_id_from and project_namespace_id_to (merge request) GitLab Enterprise Edition
• Extend documentation for includes in code blocks by @schurzi (merge request)
• Mark 20240814223217 as obsolete (merge request) GitLab Enterprise Edition
• Add NOT NULL constraint on ml_candidate_metadata.project_id (merge request)
• Add FK back to issues.work_item_type_id (merge request)
• Add NOT NULL constraint on merge_request_blocks.project_id (merge request)
• Create siphon tables for namespace details and bulk imports (merge request)
• Add NOT NULL constraint to boards sharding key (merge request)
• Remove vulnerability_filtering_by_identifier feature flag (merge request) GitLab Enterprise Edition
• Add custom fields widget to all work item types (merge request)
• Partition Manager to automatically attack LFK trigger to new partitions (merge request)
• Remove duplicate shared spec (merge request)
• Finalize migration BackfillPackagesDebianProjectArchitecturesProjectId (merge request)
• Add trigger token expiration by @william.allen1 (merge request)
• Add not null constraint on vulnerability_finding_signatures.project_id (merge request)
• Add NOT NULL constraint on approval_merge_request_rules.project_id (merge request)
• Add NOT NULL constraint on work_item_parent_links.namespace_id (merge request)
• Add NOT NULL constraint on merge_request_context_commits.project_id (merge request)
• Add not null constraint on dast_scanner_profiles_builds.project_id (merge request)
• Add NOT NULL constraint on epic_user_mentions.group_id (merge request)
• Add NOT NULL constraint on status_check_responses.project_id (merge request)
• Cleanup throttle_with_process_commit_worker_pool feature flag (merge request)
• Create cluster_agent_migrations table (merge request)
• test: Fix typo in test by @gerardo-navarro (merge request)
• Create ClickHouse siphon tables for milestones and events (merge request)
• Rename feature flag for enhanced vulnerability bulk actions (merge request) GitLab Enterprise Edition
• Add MattermostSlashCommands instance integration (merge request)
• Add MockCi instance integration (merge request)
• Regenerate RuboCop TODO files (merge request)
• Remove the index_curation feature (merge request)
• Fix pngquant script by requiring logger (merge request)
• Add MockMonitoring instance integration (merge request)
• Add Phorge instance integration (merge request)
• Add PipelinesEmail instance integration (merge request)
• Add Pivotaltracker instance integration (merge request)
• Fix Usernamespace Audit events (merge request)
• Add Pumble instance integration (merge request)
• Add Pushover instance integration (merge request)
• Remove Ci::Tagging model (merge request)
• Add Redmine instance integration (merge request)
• Remove enforce_global_file_size_limit feature flag (merge request)
• Handle case where pipeline can be nil in FindingsFinder (merge request) GitLab Enterprise Edition
• Add NOT NULL constraint on project_relation_exports.project_id (merge request)
• Add NOT NULL constraint on merge_request_assignees.project_id (merge request)
• Add NOT NULL constraint on vulnerability_finding_links.project_id (merge request)
• Mark 20241003142503 as obsolete (merge request) GitLab Enterprise Edition
• Add UnifyCircuit instance integration (merge request)
• Remove Ci::Tagging association (merge request)
• Finalize migration BackfillMergeRequestReviewersProjectId (merge request)
• Add WebexTeams instance integration (merge request)
• Finalize migration for backfilling security policies (merge request)
• Backfill p_ci_pipeline_variables from ci_trigger_requests (merge request)
• Add Youtrack instance integration (merge request)
• Add warning to DT docs (merge request)
• Move registration_objective to onboarding_status column (merge request) GitLab Enterprise Edition
• Validate not null constraint on projects.project_namespace_id column by @c0rydoras (merge request)
• Refactor Cell Configuration (merge request)
• Mark 20241017094601 as obsolete (merge request) GitLab Enterprise Edition
• Remove multiple_todos feature flag (merge request)
• Add CustomIssueTracker instance integration (merge request)
• Add DiffblueCover instance integration (merge request)
• Add Ewm instance integration (merge request)
• Finalize 20250109133913 batched migration (merge request)
• Finalize 20250108170045 batched migration (merge request)
• Finalize RecalculateShardingKeyIdForOrphanedProjectRunners (merge request)
• Remove merge_request_dashboard_new_lists feature flag (merge request)
• Set vulnerability_findings_remediations.project_id as NOT NULL (merge request)
• Add NOT NULL constraint on issue_links.namespace_id (merge request)
• Consolidate secure tokens feature flags (merge request)
• Add not null constraint on packages_build_infos.project_id (merge request)
• Remove feature flag for pipeline cleanup (merge request)
• Add Irker instance intergration (merge request)
• Finalize migration BackfillResourceLinkEvents (merge request)
• Create ClickHouse siphon table for notes (merge request)
• Remove toggle_redis_6_0_compatibility FF (merge request)
• Finalize migration BackfillPackagesConanMetadataProjectId (merge request)
• Store failed pipeline counts on ClickHouse (merge request)
• Finalize migration BackfillDetectedAtFromCreatedAtColumn (merge request)
• Creating table for scheduling user deletion by @Anzala09 (merge request)
• Remove Gitlab::Redis::ClusterDbLoadBalancing store post migration (merge request)
• Add not null constraint on dast_profiles_pipelines.project_id (merge request)
• Add not null constraint on vulnerability_finding_evidences.project_id (merge request)
• Finalize SkipCompanyOnboardingStep batched migration (merge request)
• Finalize migration ResyncHasVulnerabilities (merge request)
• Mark 20240716141532 as obsolete (merge request) GitLab Enterprise Edition
• Clean up dora_charts_forecast feature flag (merge request) GitLab Enterprise Edition
• Add HangoutsChat instance integration (merge request)
• Mark 20240807160655 as obsolete (merge request) GitLab Enterprise Edition
• Mark 20241003151804 as obsolete (merge request) GitLab Enterprise Edition
• Add Clickup instance integration (merge request)
• Optimize the update_index_used_bytes (merge request) GitLab Enterprise Edition
• Mark 20240704125425 as obsolete (merge request) GitLab Enterprise Edition
• Validate namespaces.organization_id foreign key (merge request)
• feat: Abstracting SLIs' initialization step (merge request) GitLab Enterprise Edition
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Finalize migration BackfillPackagesDebianGroupComponentsGroupId (merge request)
• Use project_id as sharding key for packages_nuget_symbols (merge request)
• Add placeholder instance integration models (merge request)
• Guard against status changes (merge request) GitLab Enterprise Edition
• Mark 20240826172514 as obsolete (merge request) GitLab Enterprise Edition
• Remove the FF zoekt_index_marked_as_ready_event (merge request)
• Set approval_merge_request_rule_sources.project_id as NOT NULL (merge request)
• Add NOT NULL constraint on approval_project_rules_users.project_id (merge request)
• Add NOT NULL constraint on terraform_state_versions.project_id (merge request)
• Add NOT NULL constraint on terraform_state_versions.project_id (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Finalize migration RestoreOptInToGitlabCom (merge request)
• Drop the virtual_registries_packages_maven_cached_responses table (merge request)
• Mark 20241002103536 as obsolete (merge request) GitLab Enterprise Edition
• Mark 20240814231502 as obsolete (merge request) GitLab Enterprise Edition
• Remove feature flag new_pages_ui (merge request)
• Add alert_management_alert_user_mentions.project_id NOT NULL constraint (merge request)
• feat: Record error rate on security scan reports (merge request) GitLab Enterprise Edition
• Remove project and group vulnerability management feature flags (merge request) GitLab Enterprise Edition
• Create ClickHouse table siphon_merge_requests (merge request)
• Removing cascading-duo-features-for-instance FF (merge request) GitLab Enterprise Edition
• Validate the not null constraint on projects.organization_id (merge request)
• Add NOT NULL constraint on design_management_designs.namespace_id (merge request)
• Finalize copy runner taggings migrations (merge request)
• Add not null constraint on sbom_occurrences_vulnerabilities.project_id (merge request)
• Add NOT NULL constraint on operations_strategies_user_lists.project_id (merge request)
• Quarantine a flaky test (merge request)
• Create ClickHouse siphon for issues (merge request)
• docs: Extend docs that delete protection is not yet implemented by @gerardo-navarro (merge request)
• Add Bugzilla instance integration (merge request)
• Drop table subscription_provision_syncs (merge request) GitLab Enterprise Edition
• Finalize BackfillCiRunnerMachinesPartitionedTable (merge request)
• Finalize migration BackfillPackagesDebianGroupArchitecturesGroupId (merge request)
• [Feature flag] Cleanup mr_vulnerability_code_flow (merge request)
• Remove advanced_search_multi_project_select feature flag (merge request) GitLab Enterprise Edition
• Add NOT NULL constraint on design_management_repositories.namespace_id (merge request)
• Update sharding_key_id for project runners if project is deleted (merge request)
• Add NOT NULL constraint to cluster_agent_tokens.project_id column (merge request)
• Add not null constraint on related_epic_links.group_id (merge request)
• Add NOT NULL constraint on packages_debian_publications.project_id (merge request)
• Add schema for work item custom field values (merge request)
• Quarantine a flaky test (merge request)
• Direct code generation requests to v4 when client supports sse (merge request)
• Add NOT NULL constraint on operations_strategies.project_id (merge request)
• Finalize backfill_onboarding_status_role migration (merge request)
• Finalize migration for backfilling status checks project ID (merge request)
• Remove ApplicationSetting legacy AI columns (merge request)
• Finalize QueueBackfillComplianceViolationNullTargetProjectIds migration (merge request)
• Remove orphaned managers from .com ci_runner_machines_687967fa8a (merge request)
• Fix backfill_p_ci_pipelines_trigger_id (merge request)
• Add not null constraint on dast_pre_scan_verifications.project_id (merge request)
• Validate fk_0e743433ff foreign key (merge request)
• Finalize the DeleteOrphanedCiRunnerProjects migration (merge request)
• Finalize BackfillCiRunnersPartitionedTable (merge request)
• Model Registry: Add metrics for users (merge request)
• Schedule the namespaces.organization_id foreign key to be validated (merge request)
• Add not null constraint on dast_profiles_tags.project_id (merge request)
• Set compliance_framework_security_policies sharding keys as NOT NULL (merge request)
• Add not null constraint on boards_epic_user_preferences.group_id (merge request)
• Finalize migration BackfillMlModelMetadataProjectId (merge request)
• Finalize migration for Software Licenses without spdx (merge request)
• Remove DeleteProjectWorker and feature flag (merge request) GitLab Enterprise Edition
• Finalize migration BackfillMergeRequestsClosingIssuesProjectId (merge request)
• Add Bamboo instance integration (merge request)
• Set approval_group_rules_protected_branches.group_id as NOT NULL (merge request)
• Add NOT NULL constraint on user_achievements.namespace_id (merge request)
• Add NOT NULL constraint on audit_events_streaming_headers.group_id (merge request)
• Set audit_events_streaming_event_type_filters.group_id as NOT NULL (merge request)
• Add NOT NULL constraint on workspace_variables.project_id (merge request)
• Add NOT NULL constraint on vulnerability_user_mentions.project_id (merge request)
• Add NOT NULL constraint on vulnerability_flags.project_id (merge request)
• Add NOT NULL constraint on operations_feature_flags_issues.project_id (merge request)
• Set packages_debian_project_distribution_keys.project_id as NOT NULL (merge request)
• Set packages_debian_group_distribution_keys.group_id as NOT NULL (merge request)
• Add not null constraint on dast_site_validations.project_id (merge request)
• Add not null constraint on dast_site_profile_secret_variables.project_id (merge request)
• Add not null constraint on dora_daily_metrics.project_id (merge request)
• Add not null constraint on boards_epic_board_positions.group_id (merge request)
• Add not null constraint on boards_epic_board_labels.group_id (merge request)
• Add alert_management_alert_metric_images.project_id NOT NULL constraint (merge request)
• Add NOT NULL constraint to alert_management_alert_assignees.project_id (merge request)
• Add NOT NULL constraint to ml_experiment_metadata.project_id column (merge request)
• Quarantine a flaky test (merge request)
• Finalize migration BackfillRemoteDevelopmentAgentConfigsProjectId (merge request)

17.8.4 (2025-02-26)

Security (4 changes)

• Increase minimum role in SPP to read policy yaml (merge request)
• Fix access to read code review analytics in private projects (merge request)
• Escape work item dropdown items and restrict HTML tags (merge request)
• Use stricter CSP values in the packages dependency proxy (merge request)

17.8.3 (2025-02-21)

Fixed (2 changes)

• Use primary DB when authenticating via job token in jobs API (merge request)
• Revert stricter workhorse route regexes (merge request)

17.8.2 (2025-02-11)

Fixed (3 changes)

• Fix storing incorrect policy index in scan_result_policies GitLab Enterprise Edition
• Enable ai tracking even with feature flag disabled GitLab Enterprise Edition
• Fix Workhorse failing on 64-bit unaligned access on Raspberry Pi 32-bit

Security (8 changes)

• Security Duo Chat Escape Unknown Domain Hyperlinks (merge request)
• Hide sensitive workhorse headers and fix route confusion between web and workhorse routes (merge request)
• Do not allow Planner role to update or delete incidents (merge request)
• Reduce memory allocations on create PAT endpoint (merge request)
• Prevent SSRF attacks for Workspaces (merge request)
• Prevent read code access when repository is disabled (merge request)
• Fixes XSS on the target branch in the merge request widget (merge request)
• Unsubscribe from actioncable channel when PAT is revoked (merge request)

17.8.1 (2025-01-22)

Security (4 changes)

• Fix protected variable exfiltration (merge request)
• Enhance rich viewer sanitization (merge request)
• Avoid recursive sidekiq calls on cyclic work item hierarchies (merge request)
• Respect the private profile constraints (merge request)

17.8.0 (2025-01-15)

Added (127 changes)

• Add more specs for most_recent_commit_sha method (merge request) GitLab Enterprise Edition
• Update runners owned by non-existent projects (merge request)
• Delete orphaned project runners when project is deleted (merge request)
• Allow configuring "auto_stop_setting" through graphql (merge request)
• Create GraphQL query for the pages settings by @antonkalmykov (merge request)
• Add elastic client to active context gem (merge request) GitLab Enterprise Edition
• Save branch name of code suggestion events (merge request) GitLab Enterprise Edition
• Release protected pypi packages feature (merge request)
• Model experiments: Add href to CI Job (merge request)
• Add graphql field ai_xray_reports to ProjectType (merge request)
• Add LinkedResources work item widget placeholder (merge request)
• Add ability to add related item for work items (merge request)
• Create siphon ClickHouse table for projects (merge request)
• Add Rest and GraphQL API to configure scheduled merge by @Taucher2003 (merge request)
• Promote runs in a model's experiments to a model version (merge request)
• Allow users to configure skip_ci for pipeline execution policies (merge request) GitLab Enterprise Edition
• Add indices for sharding_key_id for runners and runner managers (merge request)
• Release protected container repositories feature (merge request)
• Add resolve MR discussion arguments to create work item mutation (merge request)
• Add directory or file name with icon (merge request)
• Adds workflows_definition to Duo Workflow (merge request) GitLab Enterprise Edition
• Allow filtering tokens by before and after expires at (merge request)
• Adds bso instrumentation metric (merge request) GitLab Enterprise Edition
• Update runner taggings owned by non-existing projects (merge request)
• Update runner managers owned by non-existing projects (merge request)
• Mock Api for custom statuses (merge request) GitLab Enterprise Edition
• Surface user.type to frontend (merge request)
• Remove use_list_commits_rpc_network_graph feature flag (merge request)
• Add support in UI to select Pages primary domain (merge request)
• Model experiments: Improve candidate table (merge request)
• Add Restricted Access option to Seat Controls (merge request) GitLab Enterprise Edition
• Add linkedWorkItems field to EpicType (merge request) GitLab Enterprise Edition
• Use legacy destination helper in legacy destination create APIs (merge request) GitLab Enterprise Edition
• Add xray context to /refactor (merge request) GitLab Enterprise Edition
• Add optional variables for passing on to CI (merge request) GitLab Enterprise Edition
• Group level support for dropdown API (merge request) GitLab Enterprise Edition
• Enable group-level vulnerability management policies by default (merge request) GitLab Enterprise Edition
• Update GitLab Pages version (merge request)
• Full support for Vulnerability Webhook events (merge request) GitLab Enterprise Edition
• Remove amazon_q_integration feature flag (merge request)
• Search in accessible deploy keys (merge request)
• Model experiments: Add copy button to MLflow usage (merge request)
• Model experiments: Add experiment id (merge request)
• Add linkedWorkItems field to EpicType (merge request) GitLab Enterprise Edition
• Model experiments: Add creator to candidates table (merge request)
• Adding project control status table (merge request) GitLab Enterprise Edition
• Model experiments: Add creator field to candidates type (merge request)
• Add retry_duo_workflow_execution event (merge request) GitLab Enterprise Edition
• Model experiments: Add Experiments to GraphQL (merge request)
• Added destroy requested changes GraphQL mutation (merge request) GitLab Enterprise Edition
• Sync index for p_ci_pipelines.trigger_id (merge request)
• Add CUD endpoints for tag protection rule (merge request)
• Introduce lazy loading of projects list in framework drawer (merge request) GitLab Enterprise Edition
• Add skip ci configuration (merge request) GitLab Enterprise Edition
• Add optional variables to dast_site_profiles table (merge request) GitLab Enterprise Edition
• Helper method for legacy audit event destinations graphql create (merge request) GitLab Enterprise Edition
• Helper method for audit event destinations graphql create (merge request) GitLab Enterprise Edition
• Create v2 enpoints and add feature flag by @ScanianJP (merge request)
• Link user_destroyed event for user provisioned by group to the group (merge request) GitLab Enterprise Edition
• Remove log_advanced_search_cluster_health_elastic flag (merge request) GitLab Enterprise Edition
• Add skip ci configuration to a policy drawer (merge request) GitLab Enterprise Edition
• Add licenses to scan_result_policies (merge request) GitLab Enterprise Edition
• GraphQL: add TagCreate mutation (merge request)
• Update policy schema to support package exclusion (merge request) GitLab Enterprise Edition
• Delete orphaned ci_runner_projects records (merge request)
• Add an audit event for user provisioning by group SCIM (merge request) GitLab Enterprise Edition
• Reorganise project-level packages and registries settings (merge request)
• Added merge request requested changes to the merge request GraphQL type (merge request)
• Enable third-party UCM flags by default (merge request)
• Set gh user mapping ff to true (merge request)
• Update loading state of create merge request button (merge request)
• Show title suggestions to project work items (merge request)
• Add new table subcsrption_provision_syncs (merge request) GitLab Enterprise Edition
• Automatically enable group hierarchy optimization (merge request)
• Fix policies update MR blocked (merge request) GitLab Enterprise Edition
• Expose move_design policy in GraphQL permission type (merge request)
• Adding tables and models for requirement controls (merge request) GitLab Enterprise Edition
• Log all AI Gateway responses related to Amazon Q (merge request)
• Expose EPSS and KEV in finding entity (merge request) GitLab Enterprise Edition
• Remove track_member_activity feature flag (merge request)
• Remove epic_and_work_item_associations_unification ff (merge request) GitLab Enterprise Edition
• Show modal when updating with pipeline (merge request) GitLab Enterprise Edition
• Add API endpoints and services for Account Ownership Verification PIN (merge request)
• Add read compliance dashboard as a custom ability (merge request) GitLab Enterprise Edition
• Add Amazon Q system note support (merge request)
• Add async arg to PipelineCreate mutation (merge request)
• Add quick actions messages to work items (merge request)
• Add topic to catalog resources (merge request)
• Add a confirmation alert when an environment is protected/unprotected by @antonkalmykov (merge request) GitLab Enterprise Edition
• Implement project secrets graphql query (merge request)
• Show Closed MRs deprecated in the list (merge request)
• Defined event and metrics (merge request) GitLab Enterprise Edition
• Remove create branch and merge request from behind FF (merge request)
• Show warning when approval settings are overridden for MR (merge request) GitLab Enterprise Edition
• Make composite_identity FF default enabled (merge request)
• Model registry: Add empty state to candidate list (merge request)
• Implement delete pipl users (merge request) GitLab Enterprise Edition
• Add arkose_labs_data_exchange_enabled setting (merge request) GitLab Enterprise Edition
• Model experiments: Split Experiment card into tabs (merge request)
• Allow configuring "auto_stop_setting" through Environments API (merge request)
• Connect Amazon Q trigger service to issuable create/update (merge request) GitLab Enterprise Edition
• Connect Amazon Q trigger service to quick actions (merge request) GitLab Enterprise Edition
• Add inputs key to trigger include objects CI schema by @Ben.Leith (merge request)
• Add 'Start review' button to MR Overview (merge request)
• Add group_analytics_dashboard_editor feature flag (merge request) GitLab Enterprise Edition
• Add base support for Amazon Q quick actions service (merge request)
• Add duo_add_on_groups config for LDAP (merge request) GitLab Enterprise Edition
• Model registry: Add link to candidate (merge request)
• Add audit event to CreateRunnerService (merge request) GitLab Enterprise Edition
• Model experiments: Enhance experiment card title (merge request)
• Show Related MR's in dev widget with deduplication (merge request)
• Add iteration support to content editor (merge request)
• Adds scheduled workers for dormant member removal (merge request)
• Add web_hook_logs_daily table (merge request)
• Update semver_dialects to 3.4.5 (merge request)
• Add status deprecated to the packages statuses (merge request)
• Add ability to assign GitLab Duo seats based on SAML groups (merge request) GitLab Enterprise Edition
• Extend GraphQL with policies overriding project approval settings in MR (merge request) GitLab Enterprise Edition
• Update GitLab Pages version (merge request)
• Add container tag protection rules to project (merge request)
• Model registry: Add Experiment to model card (merge request)
• Add unique domain regenerate button (merge request)
• Add warning modal when creating work item (merge request)
• Add arkose_labs_enabled application setting (merge request) GitLab Enterprise Edition
• Remove feature flag custom_ability_admin_push_rules & keep new code (merge request)
• Adding Service Ping metric for dependency api (merge request) GitLab Enterprise Edition
• Add support for using ActiveRecord::Encryption (merge request)

Fixed (88 changes)

• Prevent Direct Transfer from incorrectly marking entities as stale (merge request)
• Reassign runner's owner when owning project is deleted (merge request)
• Fix visitor location country localization (merge request)
• Reset resolved_at attribute vulnerabilities (merge request) GitLab Enterprise Edition
• Fix /unlink quick command to work with epic work items (merge request) GitLab Enterprise Edition
• Use NamespaceProjectIdsEachBatch instead of for_group_and_its_subgroups (merge request)
• Add resource context to Duo Chat history (merge request) GitLab Enterprise Edition
• Protected Container Repositories: Fix link in documentation by @nwittstruck (merge request)
• Fix UI text in lock and unlock file modal (merge request) GitLab Enterprise Edition
• BBS handle missing users when user mapping (merge request)
• Documentation and refactor for Duo group/subgroups bug fix (merge request) GitLab Enterprise Edition
• Make ClickHouse write buffer workers compatible with Redis 6.0 (merge request)
• Update FinishBatchedRelationExportWorker to fail export on timeout (merge request)
• Last commit: Fix alignemnt of right content (merge request)
• Fix circular reference with pipeline execution policy variables (merge request) GitLab Enterprise Edition
• Update Secure sub-section of the sidebar to show only permitted items (merge request) GitLab Enterprise Edition
• Fix Pages primary domain not getting saved (merge request)
• Set the used_storage_bytes to default when it is 0 (merge request) GitLab Enterprise Edition
• Lazily initiate a Redis publish/subscribe channel (merge request)
• Fix handling of short gzip metadata files (merge request)
• Apply all filters to flowMetricsQuery (merge request)
• Update the default API value for environment auto stop setting (merge request)
• Make sure MR sticky header is accessible when browser font size=large (merge request)
• Fix mobile layout for requirements list page (merge request) GitLab Enterprise Edition
• Show Iteration field on items within the work items Child widget by @vedant-jain03 (merge request)
• Fix pipeline execution policies skipping when allowed (merge request) GitLab Enterprise Edition
• Reverse toggle to enable skip ci behavior for policy (merge request) GitLab Enterprise Edition
• Fix sizing of done/redo button on mobile todo page (merge request)
• Show milestone popover for GFM references to group milestones (merge request)
• Use data from current tab of Vue MR list page for export to CSV (merge request)
• Geo Replication - Fix incorrect breadcrumbs (merge request) GitLab Enterprise Edition
• Ensure REST API handles SSH key expiry todos (merge request)
• Ensure users can receive notifications before verifying email (merge request)
• Fix typo in policy UI editor for skip ci allowlist (merge request) GitLab Enterprise Edition
• Fix undefined method error for remaining_pipl_access_days (merge request) GitLab Enterprise Edition
• Fix missing variables for DAST scans (merge request) GitLab Enterprise Edition
• Fix resource access token bot namespace bug for admin users (merge request)
• Remove unnecessary padding for policy warning icon (merge request)
• Remove "go_get_handle_relative_url" feature flag (merge request)
• Use add on trial dates for combined trial on premium (merge request) GitLab Enterprise Edition
• Fix policy name in MR with trailing numbers (merge request) GitLab Enterprise Edition
• Move User namespace audit events to instance scope (merge request) GitLab Enterprise Edition
• Don't post policy bot comments in MRs of archived projects (merge request) GitLab Enterprise Edition
• Fixing audit event group path failure (merge request)
• Add BoardEpicConnection type policy for pagination (merge request) GitLab Enterprise Edition
• Fix 500 error when banzai commit filter incorrectly captures a group (merge request)
• Add reference permission check for group level items (merge request)
• Merge branch... (merge request)
• Update acme-client to v2.0.19 (merge request)
• Fix failed jobs widget polling issue (merge request)
• Restore diff file draft note editing state (merge request)
• Add a migration to regenerate CI job token signing key (merge request)
• Fix CI job token signing key not always generated (merge request)
• Fix issues boards unable to fetch issues for anonymous users (merge request)
• bug: Fix appearance of protected badge in group package overview by @gerardo-navarro (merge request)
• Fix NoMethodError on most_recent_commit_sha method (merge request) GitLab Enterprise Edition
• Only create Geo verification records if primary checksumming enabled (merge request) GitLab Enterprise Edition
• Update subscription check for hide duo section (merge request) GitLab Enterprise Edition
• Provide a workaround for users that do not have a registration_type (merge request) GitLab Enterprise Edition
• Only show repo file tooltip when truncated (merge request)
• Make ClickHouse exclusive lock compatilble with Redis 6 (merge request)
• Fix Analytics dashboards description Show more toggle button (merge request) GitLab Enterprise Edition
• Use the project_id_from and project_id_to in InitialIndexingEventWorker (merge request) GitLab Enterprise Edition
• Fix resetting timer on ChunkWriter (merge request)
• Fix last commit styling when description is expanded (merge request)
• Preserve saved access levels when re-enabling project features (merge request)
• Handle SSO redirect during authorization (merge request) GitLab Enterprise Edition
• Fix Gitlab::Audit::NullAuthor string keyword splat (merge request)
• Protected containers: Show protected badge in group container overview by @gerardo-navarro (merge request)
• Fix index to evict event worker (merge request) GitLab Enterprise Edition
• Fix foreign key error while backfilling (merge request) GitLab Enterprise Edition
• Fix appearance of merge split button (merge request)
• Fix infinite scroll when inviting a group to a project (merge request)
• Pipeline stage job polling fix (merge request)
• Fix backoff of disabled webhooks ramp up too fast (merge request)
• Fix audit events destination_url to be public (merge request) GitLab Enterprise Edition
• MR widget alert warning: border bottom and fix border-radius (merge request)
• Zoekt: Fix negative unclaimed storage bytes (merge request) GitLab Enterprise Edition
• Replace DB unique index with model validator (merge request)
• Fix edge case when trying to access policy approval_settings (merge request) GitLab Enterprise Edition
• Fix issue in RTE with image resize (merge request)
• Fix issue with preserving checkboxes whitespace (merge request)
• Use correct height value for emoji picker rows (merge request)
• Fix a case-sensitivity issue in the application rate limiter (merge request)
• Skip copying over custom award emoji that do not exist (merge request)
• Fix Random.rand for zero values in RuleScheduleService (merge request) GitLab Enterprise Edition
• Ignore system notes when indexing notes on work items by @joe-snyder (merge request) GitLab Enterprise Edition
• Restrict PAT informaton endpoint to PAT authentication (merge request)

Changed (102 changes)

• Fix layout of requirements (merge request)
• Abstract project topics to reusable component (merge request)
• Change language filter icon to "code" (merge request)
• Update environments list page (merge request) GitLab Enterprise Edition
• Modify gl-icon in email_verification.vue to use info variant and size 16 by @alvinowyong (merge request)
• Update operational vulnerabilities info (merge request)
• Fix AdjustmentService to use SEC DB connection (merge request) GitLab Enterprise Edition
• Split SCIM tables (merge request)
• Reject soft-deletion of groups containing security policy projects (merge request) GitLab Enterprise Edition
• Specify SCIM as reason for DestroyService audit event (merge request) GitLab Enterprise Edition
• Set Amazon Q service account username (merge request) GitLab Enterprise Edition
• Adjust hidden variables error messages (merge request)
• Set codeowner_role_approvers to default enabled (merge request)
• Added project id to the internal workflow API get method (merge request) GitLab Enterprise Edition
• Remove flag gitaly_pack_objects_hook_with_sidechannel (merge request)
• Update edit blob to use commit change modal (merge request)
• Amazon Q service account has private profile (merge request) GitLab Enterprise Edition
• Easily copy link to current issue template from URL (merge request)
• Remove auto_resolve_vulnerabilities feature flag (merge request) GitLab Enterprise Edition
• Support enablement of Fireworks/Qwen model by top-level group (merge request) GitLab Enterprise Edition
• Remove tooltip from activity item (merge request)
• Model experiments: Rename candidate to run (merge request)
• Remove duo_seat_assignment_email_for_sm feature flag (merge request) GitLab Enterprise Edition
• Model registry: rename candidate to "run" (merge request)
• Enable FF policies_always_override_project_ci by default (merge request) GitLab Enterprise Edition
• Dont show amazon q with duo add ons (merge request)
• Make in-app trials display fixed (merge request) GitLab Enterprise Edition
• Show file type in security scan artifact download dropdown (merge request)
• Promote project.dependencies to generally available (merge request) GitLab Enterprise Edition
• Update adherence report drawer heading (merge request) GitLab Enterprise Edition
• Add X-Gitlab-Feature-Enablement-Type AI Gateway header (merge request) GitLab Enterprise Edition
• Enhance model experiments listing page (merge request)
• Ref container darkmode color changes (merge request)
• Remove automatic feature access level adjustments when updating project visibility (merge request)
• Remove WalReceiverSaturation indicator (merge request)
• Rename pages_default_domain_redirect to pages_primary_domain (merge request)
• Drop use of AWS SDK v1 in Workhorse uploads (merge request)
• Change tooltip text and icon for Summarize button on issues (merge request)
• Allow nil values for project_id_to in zoekt index metadata (merge request) GitLab Enterprise Edition
• Update CreateIssueService rollback (merge request) GitLab Enterprise Edition
• Remove default value for organization_id (merge request)
• Change tooltips to HelpPopover in projects import (merge request)
• Use diff_blobs for streaming compare rapid diffs (merge request)
• Reject deletion of security policy projects (merge request) GitLab Enterprise Edition
• Change pipeline identifier priority (merge request)
• Repaced and removed css gl-last-of-type-border-b-0 by @illia_bakunovskyi (merge request)
• Group usage quotas: Update page hierarchy (merge request) GitLab Enterprise Edition
• Refactor topics admin page to use PageHeadingComponent by @bufferoverflow (merge request)
• Add validation for license rule (merge request) GitLab Enterprise Edition
• Update widget in pipeline editor to use pipeline summary component (merge request)
• Update licenses validation (merge request) GitLab Enterprise Edition
• Unify error messages styling when onboarding (merge request)
• Updates BBM docs (merge request)
• New split view for a policy editor (merge request) GitLab Enterprise Edition
• Remove validation for branches on group level (merge request) GitLab Enterprise Edition
• Enhance experiment candidate(run) detail page (merge request)
• Fix icon text alignment (merge request) GitLab Enterprise Edition
• Sync index creation for p_ci_builds.trigger_request_id (merge request)
• Moved seat_control from helper to controller (merge request) GitLab Enterprise Edition
• Remove old completions class and update service_class (merge request)
• Enable scan_execution_pipeline_concurrency_control ff (merge request) GitLab Enterprise Edition
• Remove database default for organization_id from oauth tables (merge request)
• Removed sync code for seat_control and new_user_signups_cap (merge request) GitLab Enterprise Edition
• Changes index on namespace_settings (merge request)
• Add instructions in the pipeline editor for configuring jobs for MRs by @antonkalmykov (merge request)
• New machine learning runs use ml_model package type (merge request)
• Make details disclosures easier to spot in rendered markdown (merge request)
• Added link to project and group (merge request)
• Update label text for protected branch in commit change modal (merge request)
• Help Icon: Removes small size and replaces it with default (merge request)
• Consolidate pipeline queries (merge request)
• Update Kubernetes agent registration (merge request) GitLab Enterprise Edition
• Improve readability of status icon (merge request) GitLab Enterprise Edition
• feat: Toggle Duo Chat drawer state instead of only showing (merge request) GitLab Enterprise Edition
• Remove download_code dependency from access to read merge requests (merge request)
• Markdown: Use fixed type scale (merge request)
• Add auto-approval param in CE (merge request)
• Use diff_blobs for streaming commit rapid diffs (merge request)
• Updated SeatControl UX (merge request) GitLab Enterprise Edition
• Allow dots in path_prefix in Pages (merge request)
• Fix Direct Transfer scopes copy to be precise (merge request)
• Use YMD date for value stream metrics queries (merge request)
• Update edit blob to use commit change modal (merge request)
• Update styling in pipeline mini graph dropdown (merge request)
• Show an Actions column name on the pipelines list on the desktop view by @antonkalmykov (merge request)
• Release feature flag ml_experiment_tracking (merge request)
• Model Experiments: Add menu item to MLflow usage example (merge request)
• Remove default value from namespaces.organization_id column (merge request)
• Replace NamespaceSettings index with composite (merge request)
• Add Auditor badge to Admin area Users page (merge request) GitLab Enterprise Edition
• Uses organization id on Topics GraphQL (merge request)
• Update sign up path on Admin Settings (merge request)
• Remove BackfillPCiPipelinesTriggerId (merge request)
• Change CreateMergeRequestService rollback for sec (merge request) GitLab Enterprise Edition
• Fix first and last pagination icon sizes (merge request)
• Use projects icon and add tooltips in admin > groups (merge request)
• Update text in dependency table (merge request) GitLab Enterprise Edition
• Remove increase_lsif_artifacts_limit feature flag (merge request)
• Increase ci_max_artifact_size_lsif default limit (merge request)
• Remove correct_work_item_type feature flags (merge request)
• Update dependency auto-deploy-image to v2.115.0 (merge request)
• Set cache: [] in SAST latest CI templates (merge request)

Removed (17 changes)

• Removed the ignore rule (merge request) GitLab Enterprise Edition
• Remove top-level group concurrency docs (merge request) GitLab Enterprise Edition
• Remove feature flag 'vulnerability_code_flow' (merge request)
• Remove ci_graphql_pipeline_mini_graph (merge request)
• Remove pipeline editor dead code (merge request)
• Removing ci_secure_files_read_only feature flag (merge request)
• Remove epic cached count checking (merge request) GitLab Enterprise Edition
• Remove sync_audit_events_to_clickhouse feature flag (merge request)
• Create migration for synchronous index removal (merge request)
• Remove namespace_descendants_cache_expiration FF (merge request)
• Dropping confidence column from security_findings (merge request)
• Remove use_holt_winters_forecast_for_deployment_frequency (merge request) GitLab Enterprise Edition
• Remove require_resource_id feature flag (merge request)
• Remove self_hosted_models_beta_ended FF (merge request)
• Remove code_suggestions_usage_events_in_pg feature flag (merge request) GitLab Enterprise Edition
• Remove groups_with_event_streaming_destinations metric (merge request) GitLab Enterprise Edition
• Remove the 'auth_finder_no_token_length_detection' FF (merge request)

Security (12 changes)

• Update KaTeX to fix several CVEs (merge request)
• Update rails to 7.0.8.7 (merge request)
• Revert "Merge branch 'sh-fix-http-io-empty-gz-handling' into 'master'"
• Add strong parameters to the passwords_controller (merge request)
• Fix handling of short gzip metadata files
• Filter out sensitive parameters on Auth logs
• Prevent cyclic reference in work item hierarchy widget from frontend
• Allow external_provider config take precedence over external_groups
• Don't allow unauthorized users to close issues automatically
• Update golang.org/x/net package (merge request)
• Update net-ssh to fix CVE-2023-48795 (merge request)
• Update yard to fix CVE-2024-27285 (merge request)

Performance (4 changes)

• Implement included remote checksum in the Maven package registry (merge request)
• Remove auto_merge_process_worker_sticky feature flag (merge request)
• Load entire discussion first when linking to a note (merge request)
• Lazy load create epic modal in group sidebar (merge request)

Other (83 changes)

• Finalize migration BackfillMlCandidateMetadataProjectId (merge request)
• Add not null constraint on boards_epic_lists.group_id (merge request)
• Introduce partitioned table for maven virtual registry cache entries (merge request)
• Remove ci_catalog_ranking_from_new_usage_table feature flag (merge request)
• Add Asana instance integraiton model (merge request)
• Regenerate RuboCop TODO files (merge request)
• Quarantine a flaky test (merge request)
• Cleanup lfs_sync_before_branch_updates FF (merge request)
• Remove actor override flag for GH and BBS importer (merge request)
• Finalize migration BackfillVulnerabilityIssueLinksProjectId (merge request)
• Remove unnecessary wrapper method (merge request)
• Re-queue migration to delete orphaned groups (merge request)
• Add closed reason urls to work item GraphQL types (merge request)
• Reorder migrations for ci_deleted_objects (merge request)
• Add ClickHouse table siphon for namespaces (merge request)
• Remove actor override when Direct Transfer disabled (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Cell ID to default to null instead of 1 (merge request)
• Add Assembla instance integraiton model (merge request)
• Revert ElasticsearchSettingsFromApplicationSettings pd migration (merge request)
• Remove Search::Zoekt::DeleteProjectWorker job instances (merge request)
• Drop sequence for work_item_types.id column (merge request)
• Simplify Rouge/HLJS mapping (merge request)
• Fix issues.work_item_type_id values (merge request)
• Regenerate RuboCop TODO files (merge request)
• refactor: Extract shared examples in create_package_service_spec.rb by @gerardo-navarro (merge request)
• Only show active trial widget for ultimate trial plans (merge request) GitLab Enterprise Edition
• Quarantine a flaky test (merge request)
• Finalize migration BackfillVulnerabilityMergeRequestLinksProjectId (merge request)
• Finalize migration MigrateOsSbomOccurrencesToComponentsWithoutPrefix (merge request)
• Update downtime migration docs (merge request)
• Remove feature flag definition (merge request)
• Cleanup multiple_approval_actions feature flag (merge request) GitLab Enterprise Edition
• Finalize migration BackfillVulnerabilityUserMentionsProjectId (merge request)
• Fix work_item_types.id values with sequential values 1-9 (merge request)
• Enable pause control for zoekt workers (merge request) GitLab Enterprise Edition
• Cleanup premium_can_trial_again feature flag (merge request) GitLab Enterprise Edition
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Remove orphaned managers from .com ci_runner_machines_687967fa8a (merge request)
• Requeue backfill of ci_runners_e59bb2812d table (merge request)
• Fix a misspelling in BBM docs (merge request)
• Add tracking metrics for multiple approver actions (merge request) GitLab Enterprise Edition
• Delete redundant docs link from "Linked items" (merge request)
• Remove UpdateIndexUsedBytesWorker job instances (merge request)
• Quarantine a flaky test (merge request)
• Add feature category to github import specs (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Remove feature_flag admin_agnostic_token_finder (merge request)
• Finalize migration BackfillVulnerabilityFindingLinksProjectId (merge request)
• Finalize migration BackfillVulnerabilityFlagsProjectId (merge request)
• Finalize migration BackfillVulnerabilityFindingEvidencesProjectId (merge request)
• Finalize migration BackfillVulnerabilityFindingSignaturesProjectId (merge request)
• Protected packages: Add regex validation for pypi protection rules by @gerardo-navarro (merge request)
• Merge branch '458891-metadata-api-get-kas-version-by-serverinfo-rpc' into 'master' (merge request)
• Create helper method for tree header app (merge request) GitLab Enterprise Edition
• Removed git_guardian_integration FF (merge request)
• Detail view renders legcy issue view for unsupported work item types (merge request)
• Quarantine a flaky test (merge request)
• Updates step_url for users that do not have registration_type (merge request)
• Update vulnerability_management_policy to clarify group availability (merge request) GitLab Enterprise Edition
• Consolidate elasticsearch application settings into one JSON field (merge request) GitLab Enterprise Edition
• Run EnsureFactoryForTable in CE to avoid RedundantCopDisableDirective (merge request)
• Add missing widgets to incidents for parity with issues (merge request)
• Add & backfill sharding keys for protected_branch_unprotect_access_level (merge request)
• Remove feature flag write_to_ci_runner_taggings (merge request)
• test: Move test from feature test to model test by @gerardo-navarro (merge request)
• Reclaim disk space used by old job tokens (merge request)
• Quarantine a flaky test (merge request)
• Fix variable literal (merge request) GitLab Enterprise Edition
• Add and backfill namespace_id for issuable_slas (merge request)
• Add & backfill sharding keys for bulk_import_export_uploads (merge request)
• Use the project_id_from and project_id_to in InitialIndexingEventWorker (merge request) GitLab Enterprise Edition
• Remove cache_autocomplete_sources_* feature flags (merge request)
• Remove feature flag ai_custom_model (merge request)
• Remove default on `group_saved_replies_flag feature flag (merge request)
• Remove use_actual_plan_in_license_check flag (merge request)

17.7.6 (2025-02-26)

Fixed (1 change)

• Fix failed jobs widget polling issue

Security (4 changes)

• Increase minimum role in SPP to read policy yaml (merge request)
• Fix access to read code review analytics in private projects (merge request)
• Escape work item dropdown items and restrict HTML tags (merge request)
• Use stricter CSP values in the packages dependency proxy (merge request)

17.7.5 (2025-02-21)

Fixed (1 change)

• Revert stricter workhorse route regexes (merge request)

17.7.4 (2025-02-11)

Security (8 changes)

• Security Duo Chat Escape Unknown Domain Hyperlinks (merge request)
• Hide sensitive workhorse headers and fix route confusion between web and workhorse routes (merge request)
• Do not allow Planner role to update or delete incidents (merge request)
• Reduce memory allocations on create PAT endpoint (merge request)
• Prevent SSRF attacks for Workspaces (merge request)
• Prevent read code access when repository is disabled (merge request)
• Fixes XSS on the target branch in the merge request widget (merge request)
• Unsubscribe from actioncable channel when PAT is revoked (merge request)

17.7.3 (2025-01-22)

Fixed (1 change)

• Add BoardEpicConnection type policy for pagination GitLab Enterprise Edition

Security (4 changes)

• Fix protected variable exfiltration (merge request)
• Enhance rich viewer sanitization (merge request)
• Avoid recursive sidekiq calls on cyclic work item hierarchies (merge request)
• Respect the private profile constraints (merge request)

17.7.2 (2025-01-14)

Fixed (1 change)

• Fix handling of short gzip metadata files (merge request)

Changed (1 change)

• Remove download_code dependency from access to read merge requests (merge request)

17.7.1 (2025-01-08)

Fixed (3 changes)

• Update acme-client to v2.0.19
• Add a migration to regenerate CI job token signing key
• Fix CI job token signing key not always generated

Security (4 changes)

• Prevent cyclic reference in work item hierarchy widget from frontend (merge request)
• Allow external_provider config take precedence over external_groups (merge request)
• Filter out sensitive parameters on Auth logs (merge request)
• Don't allow unauthorized users to close issues automatically (merge request)

17.7.0 (2024-12-18)

Added (178 changes)

• Add iteration autocomplete to RTE by @salihudickson (merge request) GitLab Enterprise Edition
• Add pages domain verify API (merge request)
• Add foreign key constraints to ci_runner_machines_687967fa8a (merge request)
• Register new audit event (merge request) GitLab Enterprise Edition
• Add credit_card_verification_enabled setting (merge request) GitLab Enterprise Edition
• Add internal events tracking to the individual release page by @antonkalmykov (merge request)
• GraphQL: add BranchDelete mutation (merge request)
• Update qa github spec (merge request)
• Add deny allow list to a policy drawer (merge request) GitLab Enterprise Edition
• Add search for Kubernetes pods (merge request)
• Add /relate quick action to WorkItems (merge request) GitLab Enterprise Edition
• Model experiments: Add empty state to performance graph (merge request)
• In project update service add support for pages default domain redirect (merge request)
• Log scope when auditor initialized (merge request)
• Add validation key for license exceptions (merge request) GitLab Enterprise Edition
• Enable markdown description lists (merge request)
• Add backticks and remove FF (merge request)
• Add note regarding user namespaces (merge request)
• Model experiments: Add user, created_at, model_id (merge request)
• Remove npm_extract_npm_package_model feature flag (merge request)
• Add ability to assign GitLab Duo seats based on SAML groups (merge request) GitLab Enterprise Edition
• Add ci_requires_identity_verification_on_free_plan setting (merge request) GitLab Enterprise Edition
• GraphQL API: add endpoint to return a list open merge requests (merge request)
• Admin Token API: Revoke token by @nwittstruck (merge request)
• Default enable FF vulnerability_filtering_by_identifier (merge request) GitLab Enterprise Edition
• Allow default editor setting to be optional (merge request)
• Support for Vulnerability webhook events (merge request) GitLab Enterprise Edition
• Introduce Rotate Token in UI - Impersonation Tokens by @shangsuru (merge request)
• Add and track events for Vulnerability auto-resolution (merge request) GitLab Enterprise Edition
• Add pipeline summary for reusable pipeline widgets (merge request)
• Add UI for managing integrations allowlist (merge request) GitLab Enterprise Edition
• Add warning to group approval settings when policies may override it (merge request) GitLab Enterprise Edition
• Add a warning when approval settings may be affected by policies (merge request) GitLab Enterprise Edition
• Add new API to update secret push protection for group (merge request) GitLab Enterprise Edition
• Add build source filter to GraphQL Project Job query (merge request)
• Added the ability to query EPSS data in GraphQL through vulnerabilities (merge request) GitLab Enterprise Edition
• Model experiments: Add candidates table (merge request)
• Document skip_ci option for pipeline execution policies (merge request)
• Adding metric for when a vulnerability is resolved (merge request) GitLab Enterprise Edition
• Support composite identity in Runner activity (merge request)
• Allow users to configure skip ci behavior for pipeline execution policy (merge request) GitLab Enterprise Edition
• Enable VR in MR by default (merge request) GitLab Enterprise Edition
• Include snippet import requirements (merge request)
• Add vulnerabilities in Import and Export and Direct Transfer (merge request)
• Add include_forked for blobs search graphql api (merge request) GitLab Enterprise Edition
• Add new KAS fields to GraphQl (merge request)
• Fix the response order (merge request) GitLab Enterprise Edition
• Add yaml update for allow list (merge request) GitLab Enterprise Edition
• Create approval rules for multiple policy approvers (merge request) GitLab Enterprise Edition
• Document that Planner role can import issues from CSV (merge request)
• Add migration to reindex all work items by @joe-snyder (merge request) GitLab Enterprise Edition
• Add phone_verification_enabled application setting (merge request) GitLab Enterprise Edition
• Added total policy violations count to the GrpahQL API (merge request) GitLab Enterprise Edition
• Add new API to update secret push protection for group (merge request) GitLab Enterprise Edition
• Add composite identity enforce setting to users (merge request)
• Model experiments: Performance graph (merge request)
• Backfill namespace shared_runner_minutes_limits (merge request) GitLab Enterprise Edition
• Update GitLab Pages version (merge request)
• Add custom_role_approvers to MR approval policies (merge request) GitLab Enterprise Edition
• Remove merge_when_checks_pass_merge_train feature flag (merge request)
• Add indent and outdent functionality to RTE by @salihudickson (merge request)
• Add include_archived for blobs search graphql api (merge request) GitLab Enterprise Edition
• Adds autopopulated to group and project scope links tables (merge request)
• Support composite identity in CI pipelines (merge request)
• Create entry in package reference when adding new package file by @oceane_scania (merge request)
• Add documentation and roll out ensure PEP pre stage complete (merge request) GitLab Enterprise Edition
• Allow unverified users to opt-in to identity verification for access (merge request) GitLab Enterprise Edition
• Add a type field to UserCore (merge request)
• Add ai_conversation_threads and ai_conversation_messages tables (merge request) GitLab Enterprise Edition
• Add auto stop setting to environments (merge request)
• Update issue tracking integrations to work with instance integrations (merge request)
• Added new author filter for merge request scope (merge request) GitLab Enterprise Edition
• Add GQL type on project for component usages (merge request) GitLab Enterprise Edition
• Settings block: Add id to url to make them shareable (merge request)
• Add pages_default_domain_redirect in project_settings (merge request)
• Write trigger_id to Ci::Pipeline (merge request)
• Allow promoting a work item issue to an epic using quick actions (merge request) GitLab Enterprise Edition
• Add backticks around username mentions (merge request)
• Implement WorkItemWidgetDevelopment.relatedMergeRequests field (merge request)
• Add policy action_idx to approval rules validation (merge request) GitLab Enterprise Edition
• Enable filtering by subscriptions in GraphQL (merge request)
• Add concurrency limit to CreateBotWorker (merge request) GitLab Enterprise Edition
• Vue Projects - Inactive project descriptions (merge request)
• Add error_messages to GraphQL (merge request)
• Introduce failed jobs in MR (merge request)
• Add option without auto-approvals to User Signup settings (merge request) GitLab Enterprise Edition
• Handle variables_attributes for policy pipelines (merge request) GitLab Enterprise Edition
• Enable work item epics (merge request) GitLab Enterprise Edition
• Remove api_audit_requests_with_scope flag (merge request)
• Promote planner role on invite members page (merge request)
• Add with_highest_role_planner field to users_statistics table (merge request) GitLab Enterprise Edition
• Specify namespace and flux_resource_path in CI job (merge request)
• Fix: Completions worker accessing deleting feature flag (merge request) GitLab Enterprise Edition
• Update Initial Duo Config Box Settings (merge request) GitLab Enterprise Edition
• Add markdown include directive (merge request)
• Add rotate via UI to project and group access tokens by @shangsuru (merge request)
• Update dormant member docs to reference max value (merge request)
• Remove specialized_worker_for_group_lock_update_auth_recalculation FF (merge request)
• Add Owners to Allowed to create projects options on Group by @yasuk (merge request)
• Add pages_default_domain_redirect in project_settings (merge request)
• Backfill issue_links_id on related_epic_links (merge request) GitLab Enterprise Edition
• Fix AiSetting race condition (merge request) GitLab Enterprise Edition
• Added completion notification for project imports (merge request)
• Add sharding key columns to uploads (merge request)
• Clean up expiring_pats_30d_60d_notifications FF (merge request)
• Add stream destination mapping to legacy models (merge request) GitLab Enterprise Edition
• Add remaining licenses without spdx to custom software license table (merge request)
• Model registry: Add default experiment to model card (merge request)
• Add persisted related item to new work item flow (merge request)
• Add processing for additional error codes (merge request) GitLab Enterprise Edition
• Add the model for registry tag protection rules (merge request)
• Added Work item frontend ground work (merge request) GitLab Enterprise Edition
• Integrations observe settings allow list (merge request) GitLab Enterprise Edition
• Add dormant scope to seat assignments (merge request)
• Add suspended status for Flux sync badge (merge request)
• Rename to follow convention (merge request) GitLab Enterprise Edition
• Add pages_default_domain_redirect in project_settings (merge request)
• Add Duo seats usage panel to AI Impact dashboard (merge request) GitLab Enterprise Edition
• Allow transfer of project with tags (merge request)
• Add trial date attribute validations (merge request) GitLab Enterprise Edition
• Model registry: Add candidates tab to Model card (merge request)
• Enforce allowlisted policies for CI/CD Jobs (merge request)
• Add additional fields and optional slot to commit changes modal (merge request)
• Adding update mutation for compliance requirements (merge request) GitLab Enterprise Edition
• Add new index to alert management alerts by @max.woolf (merge request)
• Exposed pre_receive_secret_detection_enabled in ProjectTypes (merge request) GitLab Enterprise Edition
• Enable auto_stop_in for non-deployment environment actions (merge request)
• Add notes fields to work item query by @joe-snyder (merge request)
• Add entry for GLQL to code block languages (merge request)
• Remove feature flag "beyond_identity_exclusions" (merge request)
• Set assign_custom_roles_to_group_links_sm to true by default (merge request) GitLab Enterprise Edition
• Dynamically populate Duo Chat slash command suggestions based on URL (merge request) GitLab Enterprise Edition
• GraphQL: Expose user timezone (merge request)
• Add "GET /groups/:id/enterprise_users" API endpoint (merge request) GitLab Enterprise Edition
• Remove work_items_rolledup_dates feature flag (merge request) GitLab Enterprise Edition
• Include identifierName argument to vulnerabilitySeveritiesCount GraphQL (merge request) GitLab Enterprise Edition
• Add duo workflow status check (merge request) GitLab Enterprise Edition
• View branches in development widget (merge request)
• Setup associations for inviting a group to a project with a custom role (merge request) GitLab Enterprise Edition
• Support job token auth for read-only changelog generation API (merge request)
• Admin Token API: Cluster Agent Tokens by @nwittstruck (merge request)
• Admin Token API: Add support for reading OAuth Application Secrets by @nwittstruck (merge request)
• Update project statistics when create/delete NuGet symbols (merge request)
• Make PersonalAccessToken#token routable (merge request)
• Update UI text referencing confidentiality visibility (merge request)
• Show anchors in cleanup image tags regex input fields (merge request)
• Add PostgresTableSize (merge request)
• Add Planner role to access level GraphQL enums (merge request) GitLab Enterprise Edition
• Add permissions for Planner role (merge request)
• Add Planner role to Roles and permissions admin page (merge request) GitLab Enterprise Edition
• Add Planner role (merge request)
• Implement new routable token specification (merge request)
• New GraphQL API for filter by identifier dropdown (merge request) GitLab Enterprise Edition
• Initial checkin for Admin Duo Configuration page (merge request) GitLab Enterprise Edition
• Destroy mutation for compliance requirements (merge request) GitLab Enterprise Edition
• Add migration to create missing terraform module metadata (merge request)
• Create is_known_exploit column in pm_cve_enrichment and add tests (merge request)
• Expose can_create_organization through application settings API (merge request)
• Remove merge_when_checks_pass feature flag (merge request)
• Remove feature flag lfs_misconfiguration_banner (merge request)
• Link compliance frameworks with vulnerability management policies (merge request) GitLab Enterprise Edition
• Fetch linked context lines (merge request)
• Update GitLab Pages version (merge request)
• Add additional JWT audiences for Jira Connect (merge request)
• Clean up sm_duo_pro_bulk_user_assignment (merge request) GitLab Enterprise Edition
• Add legacy_destination mapping for audit event streaming destinations (merge request) GitLab Enterprise Edition
• Add transclusion markdown syntax (merge request)
• Add ciJobTokenScopeAllowlist graphql type (merge request)
• Support claude 3.5 Sonnet new model version (merge request) GitLab Enterprise Edition
• Use feature flag to new streamers (merge request) GitLab Enterprise Edition
• Project template becomes an official part of the product (merge request) GitLab Enterprise Edition
• Add support for using ActiveRecord::Encryption (merge request)
• Initial checkin for duo configuration page (merge request) GitLab Enterprise Edition
• Mark note as internal permission on frontend (merge request)
• Added Work item frontend ground work (merge request)
• Added keyboard shortcuts for command platte (merge request)
• Enable ingestion of EPSS data to GitLab database (merge request) GitLab Enterprise Edition
• Default Duo Chat output tokens to 8k (merge request) GitLab Enterprise Edition

Fixed (181 changes)

• Fix duplicate reply bug on wiki comments by @salihudickson (merge request)
• Set CVSS vectors during vulnerability scanning (merge request) GitLab Enterprise Edition
• Fix CreateService for buffered_token_expiration_limit by @joe-snyder (merge request) GitLab Enterprise Edition
• Render a warning for pull mirroring when the project is read-only (merge request)
• Fix classification label default behaviour (merge request)
• Return title field from YAML for name custom role graphql field by @Florian_Lang (merge request) GitLab Enterprise Edition
• Fix alignment of MR approvals widget revoke button (merge request)
• Additional updates to PAT buffered expiration flow by @joe-snyder (merge request)
• Improve confusing UX when deleting free project on gitlab.com (merge request) GitLab Enterprise Edition
• Fix styling in Analytics data explorer (merge request) GitLab Enterprise Edition
• Fix work item create new draft data (merge request)
• Don't rewrite applies_to_all_protected_branches value on update (merge request) GitLab Enterprise Edition
• BranchRuleDelete mutation: fix 500 error when rule is missing (merge request)
• Fix incorrect query parameters for commits request (merge request)
• Backport bugfix for diff_files highlighting (merge request)
• fix: Add missing gitlab_sec schema to PrometheusAlertIndicator (merge request)
• Fix message for the restart merge train popup (merge request)
• Sync any_merge_request rules based on scan_result_policy_reads (merge request) GitLab Enterprise Edition
• Show group dropdown for minimal access users (merge request)
• Set minimum override role to developer (merge request)
• Fix vulnerability_states filter for pre-existing approval rules (merge request) GitLab Enterprise Edition
• Fix composite identities with Gitaly calls (merge request)
• Fix a strange bug with preserving paragraphs and list items (merge request)
• Strip frontmatter when including wiki content (merge request)
• Allow issuable expansion when previewing wiki (merge request)
• Fix: last commit box action styling (merge request)
• Allow deactivated users with password reset to reactivate their accounts (merge request)
• Make finalzie background migration no-op (merge request)
• Clean up upgrade_pdf flag (merge request)
• Capture composite identity in Git workflows (merge request)
• Namespace api find un-replicated newly created trial group by id (merge request) GitLab Enterprise Edition
• Remove Owner from base_access_level roles when creating custom role (merge request) GitLab Enterprise Edition
• Fix free shared runners minutes backfill (merge request) GitLab Enterprise Edition
• Fix ability to use password for Git when password for Web is disabled (merge request)
• Fix color of emoji picker sticky header category header (merge request)
• Ensure p element inside details summary behaves properly (merge request)
• Only truncate/scroll to anchor on mount of work item description (merge request)
• Add pagination to group applications (merge request)
• Fix empty branch name exception for branch delete (merge request)
• Set engine for OpenSearch indices (merge request) GitLab Enterprise Edition
• Deprecate :labels negatable filter value (merge request)
• Fix note creation error for SHA256 repositories (merge request)
• Improve checking on status of SAST jobs (merge request)
• Set request_path when rendering repository blobs (merge request)
• Remove redacting inaccessible wiki link slugs (merge request)
• Make discussions API work with quick actions-only notes (merge request)
• Update doorkeeper to v5.8.1 (merge request)
• Fix date re-calculation when moving children (merge request)
• Changed A tag to pajamas button by @mehulsharma (merge request)
• Fix Flux status popover with long message (merge request)
• Add additional checks for diff tabs (merge request)
• Fix font weight when selecting status (merge request) GitLab Enterprise Edition
• Style fixes for on call schedules page (merge request) GitLab Enterprise Edition
• Remove FF update_approval_rules_for_related_mrs (merge request)
• Fix scrolling in markdown/RTE (merge request)
• Adjust styles of Value stream filters row (merge request)
• Adjust styling of Merge request analytics filters bar (merge request)
• Fix reference to inline code bug by @mehulsharma (merge request)
• Emails on Push: fix wrong number of changed files (merge request)
• Only add matching roles for codeowner role approvers (merge request) GitLab Enterprise Edition
• Disable read_dependency and read_licenses policies for Planner role (merge request) GitLab Enterprise Edition
• Fix GlCard rendering in dark mode for empty repository message (merge request)
• Re-order concurrency limit and deduplication middleware (merge request)
• Make control expression nullable (merge request) GitLab Enterprise Edition
• Update styles of Error tracking list page (merge request)
• Mention ClickHouse requirement in GraphQL queries (merge request) GitLab Enterprise Edition
• Set defaults format to csv (merge request)
• Handle other errors from TomlRB library (merge request)
• Allow approvals widget content to wrap (merge request)
• Fix wording on vulnerability state transitions (merge request) GitLab Enterprise Edition
• Backfill ci_cd_settings when updating project (merge request)
• Move nuget symbol files creation outside uploading package transaction (merge request)
• Ensure project deletion with external pipeline works (merge request)
• Use :not(.gl-button) selector to avoid overriding GlButton usage (merge request)
• Remove box-shadow from old dropdowns on hover (merge request)
• Pre-load the TanukiEmoji index (merge request)
• Add a namespace to the csv_download_path (merge request)
• Fix dropdown variant for AI actions (merge request) GitLab Enterprise Edition
• Re-add Tier/Offering details to bulk edit issues documentation (merge request)
• Add budget into Auto Resolve process (merge request) GitLab Enterprise Edition
• Backfill nil started_at values (merge request)
• Fix vertical alignment of MR approvals summary (merge request)
• Reset unconfirmed_email if it exists on /users/identity_verification/verify_email_code (merge request) GitLab Enterprise Edition
• Avoid creating approval rules from policies for unprotected branches (merge request) GitLab Enterprise Edition
• Fix alignment of wiki pages buttons (merge request)
• Fix page header button alignment (merge request)
• Fix incorrect conflict warnings on issuable update (merge request)
• Fix Psych::DisallowedClass in WebHookLog (merge request)
• Fix integration test settings (merge request)
• Fix gap between avatar and text for board assignee in config modal (merge request) GitLab Enterprise Edition
• Fix spacing of boad configuration modal buttons at small size (merge request)
• Continue to show roadmap filters bar when no results to access settings (merge request) GitLab Enterprise Edition
• Revert removing default value from oauth tables (merge request)
• Allow plus icons in project nav to inherit color (merge request)
• Do not warn changelog required when removing feature flag patches (merge request)
• Ensure access_level is present before comparison (merge request)
• Fix undefined method error 'assigned_to_duo_enterprise?' (merge request) GitLab Enterprise Edition
• Fix accessibility violation for vue_shared/settings-block (merge request)
• Support quick actions in commits and discussions API (merge request)
• Avoid reporting error in Sentry for known failures (merge request)
• Add optional chaining to avoid null error (merge request)
• Fix is_blocked_by for epic work item (merge request) GitLab Enterprise Edition
• Fix protected tags with Deploy keys (merge request)
• Fix Dangerfile parsing non-Ruby files (merge request)
• Fix epic work item rake task progressbar (merge request) GitLab Enterprise Edition
• Fix search on the environments page (merge request)
• Only show LFS misconfiguration banner when objects exist in project repo (merge request)
• Skip validations when transforming references (merge request)
• Mark repository at URL not found as missing on primary (merge request) GitLab Enterprise Edition
• Fixed z-index issue in content editor box by @mehulsharma (merge request)
• Add guard clause to Wiki#find_page when title is nil (merge request)
• Rewrite the InitialIndexingEventWorker to fix the SQL timeout (merge request)
• Fix the logic of mark_indices_as_ready (merge request) GitLab Enterprise Edition
• Cache Cloud Connector keys in process memory (merge request) GitLab Enterprise Edition
• Refactor to check if user has access to experimental features (merge request) GitLab Enterprise Edition
• Do not create system not when linked on same EPIC (merge request) GitLab Enterprise Edition
• Fetch projects in subgroups for DORA projects comparison chart (merge request) GitLab Enterprise Edition
• Ensure cron manager receives updated geo node (merge request) GitLab Enterprise Edition
• Raise internal/suggested_reviewers query limit to 110 (merge request)
• Fix code block style in RTE (merge request)
• Release use_exclusive_lease_in_mvn_find_or_create_package FF (merge request)
• Allow pushing locked LFS files merged from upstream (merge request)
• Ensure .pipeline-policy-pre jobs finish before starting others (merge request) GitLab Enterprise Edition
• Zoekt: Do not process failed repos (merge request) GitLab Enterprise Edition
• Fix stages_compatible? not being restrictive enough (merge request) GitLab Enterprise Edition
• Make sure ref_type for History control is appended only once (merge request)
• Fix wrong changes counter on merge request commit diffs (merge request)
• Temporary fix for activity feed tooltip contrast (merge request)
• Fix 403 errors when setting CI/CD variables via REST API (merge request)
• Improve error message for runner creation with invalid scope (merge request)
• Fix model registry version table error with null author (merge request)
• Fix dependency on ApplicationSetting stubs for let_it_be (merge request)
• Improve MR resource prompt to avoid misunderstandings of LLM (merge request) GitLab Enterprise Edition
• Allow invited Owners to top-level group to manage its enterprise users (merge request) GitLab Enterprise Edition
• Ensure placeholder references are creating in Direct Transfer (merge request)
• Revert "Merge branch 'remove-ff-lfs_misconfiguration_banner' into 'master'" (merge request)
• Fix translated string used in comparison (merge request) GitLab Enterprise Edition
• Fix 500 error for /api/v4/groups?all_available=false&statistics=true API (merge request)
• Mini Pipeline Graph dropdown: Change job action button size to sm (merge request)
• Notes: Confidential or locked message see-through fix (merge request)
• Fix edit snippet button alignment (merge request)
• Add a loading state for branch rule query (merge request)
• Ensures margin in confidential badge (merge request)
• Fix creating current iterations by @umahasu (merge request) GitLab Enterprise Edition
• Fix code reloading problems with custom database types (merge request)
• fix: Ordering of metadata on work items Child & Linked widgets by @vedant-jain03 (merge request)
• Sync security policies when compliance framework is changed (merge request) GitLab Enterprise Edition
• Return unique project set on any framework filter (merge request) GitLab Enterprise Edition
• Fix issue dashboard ANY/NONE assignee filters (merge request)
• Enable nested expansion in rules:changes/exists (merge request)
• Enforce both scan and pipeline execution policies with missing CI (merge request) GitLab Enterprise Edition
• Sort by member role when a user has the same access_level (merge request)
• Improvements for markdown editor resize behavior (merge request)
• Hotix: filtering out licenses with a nil spdx_identifier (merge request) GitLab Enterprise Edition
• Update glql docs link (merge request)
• Fix behavior of copy buttons on Wiki clone modal (merge request)
• Ensure collapsed sidebar todo button is correct color (merge request)
• Only show "can only add issues" warning when issuableType is issue (merge request)
• Remove description text limit on security_policies (merge request)
• Fix wrong MR reference in draft notes (merge request)
• Fix ElasticIndexingControlWorker exception (merge request) GitLab Enterprise Edition
• Fix Keyboard shortcuts for work items (merge request)
• Log AI Gateway client HTTP errors (merge request)
• Ensure new issues in iteration list have that iteration (merge request) GitLab Enterprise Edition
• Fix X-Gitlab-Token always present in webhook logs (merge request)
• Revert external_audit_event_destination url generation change (merge request) GitLab Enterprise Edition
• Ensure ! is used for MR identifiers in Vue MR list page (merge request)
• Filter security_findings by latest successful security_scan (merge request) GitLab Enterprise Edition
• Add pagination to projects DORA comparison table (merge request) GitLab Enterprise Edition
• Fix responsive layout of failed pipeline job troubleshoot button (merge request) GitLab Enterprise Edition
• Fix 401 errors when installing the GitLab for Jira app (merge request)
• Fix ActionView::Template::Error: undefined method `xpath' (merge request)
• Nil check in after_sign_in_path_for (merge request)
• Support stages from policies with override_project_ci strategy (merge request) GitLab Enterprise Edition
• Pre-populate branch name for delete and replace blob (merge request)
• Fix logic and styling of archived project warning in diff comments (merge request)
• Change audit label to 30 days instead of month (merge request) GitLab Enterprise Edition
• Fix incorrect pull mirror configuration after re-creation (merge request) GitLab Enterprise Edition
• Fix: incorrect sorting url for branches (merge request)
• Add missing email suffix for Emails On Push and Admin emails (merge request)
• Show None role for invited group members when project sharing disabled (merge request)

Changed (227 changes)

• Remove feature flag (merge request)
• Add currentUser query to LockDirectoryButton (merge request) GitLab Enterprise Edition
• Resolve cross-transaction when destroying project (merge request) GitLab Enterprise Edition
• Extend topics explore page to provide more details by @bufferoverflow (merge request)
• HelpIcon migrations (merge request)
• Remove set_feature_flag_service feature flag (merge request)
• Basic MVP for wiki template management from create page (merge request)
• Add feature flags for all included duo context (merge request) GitLab Enterprise Edition
• Add summarize new mr aigw service (merge request) GitLab Enterprise Edition
• Use cloud connector gem config and remove access_data.yml (merge request)
• Update existing approvers when yaml updates (merge request) GitLab Enterprise Edition
• Queue AfterImportWorker after every import (merge request)
• Enable closing issues automatically, cross-project (merge request)
• Distinguish Jira Connect apps by hostname (merge request)
• Write organization_id to oauth tables (merge request)
• Migrate value_stream_metrics REST queries to Graphql (merge request)
• Resolve "Geo - Rename Replication Status to Database Replication status and... (merge request) GitLab Enterprise Edition
• Use commit changes modal for upload/replace blob (merge request)
• Rearrage viewer swithcer and table contents (merge request)
• Refactor getIterationPeriod() to support locale dateformat (merge request)
• Add currentUser query to LockDirectoryButton (merge request) GitLab Enterprise Edition
• Protected branches settings: Change breakpoint of table (merge request)
• Don't expose url credentials for bulk import (merge request)
• Remove cross-join from ProjectsGrade (merge request) GitLab Enterprise Edition
• Remove isNotSastIACTemporaryHack (merge request) GitLab Enterprise Edition
• Update feature flag type for 3rd party importer user mapping to beta (merge request)
• Move compliance center up in project nav (merge request)
• Enabled importer_user_mapping by default (merge request)
• Enabled bulk_import_importer_user_mapping by default (merge request)
• Enable auto-resolve feature flags by default (merge request)
• Add currentUser query to LockDirectoryButton (merge request) GitLab Enterprise Edition
• Change default of restrict_user_defined_variables to true behind FF (merge request)
• Rollout feature flag for self-maneged instances (merge request) GitLab Enterprise Edition
• Add exceptions selector to allow deny list (merge request) GitLab Enterprise Edition
• Add time window for sep schedule scans (merge request) GitLab Enterprise Edition
• Raise error on rename/move if geo is enabled (merge request) GitLab Enterprise Edition
• Move confidentiality to actions menu for legacy issuable (merge request)
• Update validation for multiple approval actions (merge request) GitLab Enterprise Edition
• Switch duo pro cdot direct linking in favour of redirect (merge request) GitLab Enterprise Edition
• Update validation of multiple approval actions (merge request) GitLab Enterprise Edition
• Add conditions to LFK definition (merge request) GitLab Enterprise Edition
• Move work item dev widget to main body and add create entity (merge request) GitLab Enterprise Edition
• Move Import::GithubService#repository_size_limit to EE (merge request)
• Add disable password authentication to group audit events (merge request) GitLab Enterprise Edition
• Update labels for required comments and dismissal reasons (merge request) GitLab Enterprise Edition
• Iterations: Migrate to use Crud (merge request)
• Remove role question from new group creation (merge request)
• Empty project page follow up by @mh4ckt3mh4ckt1c4s (merge request)
• Remove search_auth_filter_for_work_items feature flag (merge request) GitLab Enterprise Edition
• Delete remote_development_agent_configs table (merge request)
• Update dependency auto-deploy-image to v2.114.0 (merge request)
• Fix CI_PAGES_DOMAIN and CI_PAGES_URL for parallel deployments (merge request)
• Add assignee_ids field to merge request index (merge request) GitLab Enterprise Edition
• Update compliance center framework drawer UX (merge request) GitLab Enterprise Edition
• Remove temporary_ignore_tables_in_transaction issue already solved (merge request) GitLab Enterprise Edition
• Remove temporary_ignore_tables_in_transaction issue already solved (merge request) GitLab Enterprise Edition
• Add correlation_id to mergeability check error (merge request)
• Remove multi column null constraint (merge request) GitLab Enterprise Edition
• Remove search_query_authorization_refactor feature flag (merge request) GitLab Enterprise Edition
• Do not show username for vulnerability details system notes (merge request) GitLab Enterprise Edition
• Admin Token API: Identify Pipeline trigger tokens by @nwittstruck (merge request)
• Tag the ID/path in Projects::DestroyService logs (merge request)
• Model creation screens "cancel" buttons to move back (merge request)
• Improve underscore error and Geo doc (merge request) GitLab Enterprise Edition
• Add collapsible commit component for blob page on narrow viewports (merge request)
• Make CI job token JWT available for composite identity users (merge request)
• Model version creation screen "cancel" button to move back (merge request)
• Set default for desired_config_generator_version fiedl (merge request) GitLab Enterprise Edition
• Store vulnerability user mentions after commit (merge request) GitLab Enterprise Edition
• Use "Advanced SAST" name for SAST_ADVANCED report (merge request) GitLab Enterprise Edition
• Handle bespoke integrations observe allowlist (merge request) GitLab Enterprise Edition
• Update new pipeline button (merge request)
• Add toast when work item confidentiality is toggled (merge request)
• Extend policy editor sidebar width (merge request) GitLab Enterprise Edition
• Changed shared component to be more universal (merge request)
• Format numbers in statistics_card.vue (merge request) GitLab Enterprise Edition
• Remove prompt_migration_categorize_question flag (merge request) GitLab Enterprise Edition
• Makes verify_self_hosted_setup accepts username (merge request)
• Change approval selector disabled state (merge request) GitLab Enterprise Edition
• Update self-hosted models table column name (merge request)
• Use link variant for merge trains button on MR list (merge request)
• Add allow deny list modal (merge request) GitLab Enterprise Edition
• Don't fetch projects in subgroups for DORA projects comparison chart (merge request) GitLab Enterprise Edition
• Adding a limit to the number of auto-resolved vulnerabilities (merge request) GitLab Enterprise Edition
• Code flow: Make file title into a link to the file (merge request) GitLab Enterprise Edition
• Additional webhook types for Datadog integration by @rpelliard (merge request)
• Activity contribution calendar: Migitate grid illusion (merge request)
• Expose invite_accepted_at field to display member access granted date by @antonkalmykov (merge request)
• ML Model registry: Update create/edit forms (merge request)
• Refactor container registry list_spec.js by @antonkalmykov (merge request)
• Customize edit button in code flow file header (merge request) GitLab Enterprise Edition
• Update audit event streaming destination name validations (merge request) GitLab Enterprise Edition
• Add copy branch button on branch creation alert (merge request)
• Add usage of CustomersDot error messages to view helpers (merge request) GitLab Enterprise Edition
• Highlight changed fields in framework update audit log (merge request) GitLab Enterprise Edition
• Pluralize job_token_policy route_setting (merge request)
• Admin Token API: Identify Impersonation Tokens by @nwittstruck (merge request)
• Remove redundant self-hosted models HAML views (merge request) GitLab Enterprise Edition
• Model registry: List all Experiments (merge request)
• Improve mobile layout of (Vue) Todos page (merge request)
• Changed text on the breadcrumbs for creating new entities in projects: by @illia_bakunovskyi (merge request)
• Replace unique index on scan_result_policies with action_idx (merge request) GitLab Enterprise Edition
• Use correct entity value in runner audit log events (merge request) GitLab Enterprise Edition
• Remove epic and reaction from GLQL docs (merge request)
• Add gitlab standard layout to admin emails by @jimender2 (merge request)
• Model registry: Bump patch by default instead of major (merge request)
• Move history button into commit box on repository and blob pages (merge request)
• Updates add seats button on duo seat utilization (merge request) GitLab Enterprise Edition
• Resolve cross-transaction when moving issues (merge request) GitLab Enterprise Edition
• Update sast and dast adherence wording (merge request) GitLab Enterprise Edition
• Regularly update zoekt indices with mismatched watermark levels (merge request) GitLab Enterprise Edition
• Package registry: Pretty wrap long names (merge request)
• Display role labels instead of counters (merge request)
• Pipeline mini graph polling update (merge request)
• Used seat_control_user_cap? to check user_cap enabled (merge request) GitLab Enterprise Edition
• Remove allow_cross_joins_across_databases (merge request) GitLab Enterprise Edition
• Rephrase API forbidden error message (merge request)
• Not use translated strings for deployment target on project creation by @antonkalmykov (merge request)
• Update group for export_csv_preload_in_batches (merge request)
• Remove btn-color SCSS mixin and usage (merge request)
• Split Microsoft applications table (merge request)
• Expose exitCode on jobs in GraphQL (merge request)
• Remove feature flag glql_rust (merge request)
• Use correct entity value in runner audit log events (merge request) GitLab Enterprise Edition
• Show rule button tooltip for merge request approval policy (merge request) GitLab Enterprise Edition
• Adjust the style of admin breakdown cards (merge request)
• Convert token_expiry_notify_inherited to cascading setting (merge request)
• Create Dangerfile for internal user changes (merge request)
• Include last contacted time on audit log when runner is deleted (merge request) GitLab Enterprise Edition
• Add policy action index to approval rules and scan_result_policies (merge request) GitLab Enterprise Edition
• Write organization_id on OAuth tables (merge request)
• Admin Token Api: Identify Runner Authentication Tokens by @nwittstruck (merge request)
• Enable not-null constraint on namespaces.organization_id column (merge request)
• Remove multiple versions setting from project settings (merge request) GitLab Enterprise Edition
• Generate audit event per project association from runner (merge request) GitLab Enterprise Edition
• Remove allow_cross_joins_across_databases (merge request) GitLab Enterprise Edition
• Adds page description to Usage Quotas Pipelines tab (merge request) GitLab Enterprise Edition
• Stop creating keep-arounds for sent notifications (merge request)
• Stop creating keep-arounds for Todos (merge request)
• Model card tabs rendering without versions (merge request)
• Move groups_controller from subscriptions (merge request) GitLab Enterprise Edition
• Move history button into commit box on repository and blob pages (merge request)
• Remove the ci_skip_persistent_ref_existence_check feature flag (merge request)
• Sort compliance framework project settings by created_at (merge request) GitLab Enterprise Edition
• Set namespaces.organization_id to NOT NULL (merge request)
• Prevents db.rake to alter cell sequences range (merge request)
• Update VR MR disclaimer text to Fix' from Patch` (merge request) GitLab Enterprise Edition
• Add ci minutes usage details to the warning banner (merge request) GitLab Enterprise Edition
• Diff viewed files: Make visual difference more evident (merge request)
• Display bolder warning if email TLD is missing (merge request)
• Support cost factor fields in runner creation GraphQL (merge request) GitLab Enterprise Edition
• Remove bulk_push_concurrency_limit_resume_worker FF (merge request)
• Update security policy yaml when filter is updated (merge request) GitLab Enterprise Edition
• It does not alter cell sequences for legacy cell (merge request)
• Backfill spdx column in software_license_policies table (merge request) GitLab Enterprise Edition
• Remove purchase seats button for duo enterprise trial (merge request) GitLab Enterprise Edition
• Add Ability to reference maintainers or developers from codeowners (merge request) GitLab Enterprise Edition
• Route minimal access user to groups dashboard (merge request) GitLab Enterprise Edition
• Style improvements in the 2FA page (merge request)
• Only remove SeatAssignment if no other membership (merge request) GitLab Enterprise Edition
• Requeue backfill security policies background migration (merge request) GitLab Enterprise Edition
• Make dismissal comment required in finding modal (merge request) GitLab Enterprise Edition
• Update Doorkeeper to version 5.8.0 (merge request)
• Add infinite scroll to exceptions dropdown (merge request) GitLab Enterprise Edition
• Remove file path tooltips from repo page (merge request)
• Fix failed jobs widget size (merge request)
• Send stop indexing signal to zoekt nodes on critical watermark (merge request) GitLab Enterprise Edition
• Replace database token with JWT for CI Job Tokens (merge request)
• Ignore failed zoekt repositories when checking non_ready instances (merge request) GitLab Enterprise Edition
• Reduce size and padding of collapse replies button (merge request)
• Mark all ready zoekt indices as pending (merge request) GitLab Enterprise Edition
• Ensure grouped iteration cadences are sorted alphabetically (merge request) GitLab Enterprise Edition
• Support submitting create work item form with keyboard (merge request)
• Removes unnecessary top margin on Members page (merge request)
• Disable OfflineCloudLicenseProvisionWorker for SaaS (merge request)
• Remove embedding_cron_worker_re_enqueue feature flag (merge request) GitLab Enterprise Edition
• Log requested scopes when auth is denied (merge request)
• Update dependency auto-deploy-image to v2.113.0 (merge request)
• Update seat_control based on new_user_signups_cap (merge request)
• Add feature flag for multiple approver action (merge request) GitLab Enterprise Edition
• User profile contribution activity calendar darkmode update (merge request)
• Use WARN log level when vulnerable code is too long for an LLM (merge request) GitLab Enterprise Edition
• Code flow: Truncate steps file path and file name (merge request) GitLab Enterprise Edition
• Add feature flag for validation service (merge request) GitLab Enterprise Edition
• Replace api calls with graphql queries (merge request) GitLab Enterprise Edition
• Resolve cross-join in vuln bulk dismiss service (merge request) GitLab Enterprise Edition
• Log check result status in mergeability logger (merge request)
• Adds traversal_ids to merge request index (merge request) GitLab Enterprise Edition
• Add animation to a recation picker (merge request)
• Super sidebar: Refine Gray and Neutral themes in darkmode (merge request)
• Change ProcessFileService to return error response when error (merge request)
• Make Jenkins Banner dismissable (merge request)
• Move daysToSeconds local function to the shared utils by @antonkalmykov (merge request) GitLab Enterprise Edition
• Sticky submit buttons in work item epic modal (merge request)
• Refine feature flags documentation (merge request)
• Add indexes to improve syncing security policy to approval_rules (merge request)
• Update documentation regarding custom stages and override_project_ci (merge request)
• Clean up wiki clone steps (merge request)
• Move types and enums to registry namespace (merge request)
• Update focused file styles (merge request)
• Backfill target_project_id for ComplianceViolation (merge request)
• Always show Flux resource selector on the environment settings page by @antonkalmykov (merge request)
• Update emojis from tanuki_emoji gem (merge request)
• Update zoekt watermark level whenever reservations change (merge request) GitLab Enterprise Edition
• Update dependency auto-deploy-image to v2.112.0 (merge request)
• Re-redesignate merge_request_diff_commit_users as gitlab_main_cell (merge request)
• Modify approval_rules when security policy is changed (merge request) GitLab Enterprise Edition
• Remove job polling (merge request)
• Do not create DiffNote commented event in GithubImport (merge request)
• Reduce repository batch size for zoekt initial indexing (merge request) GitLab Enterprise Edition
• Update title copy for stop environment modal by @antonkalmykov (merge request)
• Clarify origin of changes in merge conflicts (merge request)
• Do not assign users to the default organization if it does not exist (merge request)
• Two Factor Auth page: Migrate components (merge request)
• Align note layout to legacy (merge request)
• Remove cross-DB from related_vulnerabilities (merge request) GitLab Enterprise Edition
• Add top_level_only argument to a group resolver (merge request)
• Update sharding_key for ci_pipeline_chat_data (merge request)
• Update sharding key for p_ci_pipelines_config (merge request)
• Allow a non admin developers to download Terraform state via the UI by @antonkalmykov (merge request)
• Improve Stopping Environments Modal usability by @antonkalmykov (merge request)
• Fix links to docs from misc ruby files (merge request)
• Drop broken FK for p_ci_builds.upstream_pipeline_id (merge request)
• Enhance consistency between dynamic and static 503 error pages (merge request)
• Skip create index tasks for indices that should be deleted (merge request) GitLab Enterprise Edition
• Remove dont_ignore_alternate_directories feature flag (merge request)
• Delete zoekt replicas during evictions (merge request) GitLab Enterprise Edition

Deprecated (3 changes)

• Initial checkin for GitLab Duo Usage Quotas alert (merge request) GitLab Enterprise Edition
• Initial checkin for decomissioning general duo settings (merge request) GitLab Enterprise Edition
• Deprecate RunnersRegistrationTokenReset GraphQL mutation (merge request)

Removed (21 changes)

• Remove migrate_memberships column (merge request)
• Remove feature flag pre_receive_secret_detection_push_check (merge request) GitLab Enterprise Edition
• Remove dead code associated with commit box pipeline status (merge request)
• Remove the enable_vsd_visual_editor feature flag (merge request) GitLab Enterprise Edition
• Remove revisions columns from packages_conan_file_metadata table by @oceane_scania (merge request)
• Remove feature flag - soft_limit_daily_phone_verifications (merge request)
• Remove feature flag - credit_card_validation_daily_limit (merge request)
• Remove feature flag - unverified-account-group-creation-limit (merge request)
• Remove bitbucket_server_user_mapping_by_username feature flag (merge request)
• Remove feature flag cloud_connector_jwt_replace (merge request) GitLab Enterprise Edition
• Remove feature flag: secret_detection_project_level_exclusions (merge request)
• Revert "Relax criteria for proxying Git fetches" (merge request) GitLab Enterprise Edition
• Remove duplicated Duo Pro alert (merge request) GitLab Enterprise Edition
• Remove feature flag - require_identity_verification_for_old_users (merge request)
• Drop namespace_details pending_delete column (merge request)
• Drop temporary_storage_increase_ends_on column (merge request)
• Remove vsa_standalone_settings_page feature flag (merge request) GitLab Enterprise Edition
• Remove git_write_at column from onboarding_progresses (merge request) GitLab Enterprise Edition
• Drops file_checksum column from xray_reports table (merge request)
• Remove last_activity_on from members table (merge request)
• Cleanup references to epic_color_highlight feature flag (merge request) GitLab Enterprise Edition

Security (25 changes)

• Update rails-html-sanitizer to 1.6.1 (merge request)
• Revert "Merge branch '456922-confidential-issue' into 'master'"
• Update file GITLAB_KAS_VERSION
• Fix: unsubscribe from actioncable channel when PAT is revoked
• HTML injection in vulnerability details, leads to XSS on self hosted servers
• Add timeout around Parslet in template parser
• Add authorization check to protectableBranches field
• Ignore titles for GFM links in rich text editor
• Add query to filter_parameters
• Restrict user and group creation when same pages unique domain exist
• Check harbor name & digest for path traversal
• Added invalid redirect fragment check
• Do not set session cookie for /v2 endpoints in the response
• DoS by repeatedly sending unauthenticated requests for diff-files of a commit or merge request
• Make confidential threads unresolvable via new issue
• Reduce REGEXP_TIMEOUT_SECONDS to 45 seconds (merge request)
• Update rails to version 7.0.8.6 (merge request)
• Upgrade fugit to 1.11.1 (merge request)
• Add size check for harbor registry
• Allow a LFS token to be used only for LFS related requests
• Adding JobArtifactReport class to pre-emptively validate job artifacts
• Move allow_access_with_scope to class level
• Fix possible DOS with TOML file parsing
• Update cross-spawn to resolve CVE-2024-21538 (merge request)
• Update webrick to 1.8.2 (merge request)

Performance (9 changes)

• Resolve N+1 queries in Groups::ChildrenController (merge request)
• Add responsive throttling for ph reassignment (merge request)
• Improve performance of rendering fork button (merge request)
• Improve performance of feature checks with actor (merge request) GitLab Enterprise Edition
• Stop creating keep-arounds on merge-request notes (merge request)
• Fetch sidebar counts async (merge request)
• Stop creating keep-arounds in cleanup ref service (merge request)
• Remove billed_project_members_performance_improvement feature flag (merge request) GitLab Enterprise Edition
• Optimize packages lookup in the deprecate npm packages service (merge request)

Other (143 changes)

• test: Refactor test utility configure_mock_auth by @gerardo-navarro (merge request)
• Add foreign key constraint to namespaces.organization_id (merge request)
• Backfill onboarding_status_role from role column in users table (merge request)
• Implement pipl alert (merge request) GitLab Enterprise Edition
• Cleanup globally enabled feature flag incubation_5mp_google_cloud (merge request)
• Quarantine a flaky test (merge request)
• Remove ignore_policies_for_unprotected_branches feature flag (merge request) GitLab Enterprise Edition
• Remove default on project_saved_replies_flag feature flag (merge request)
• Fix rubocop bounded context for GitLab pages by @gerardo-navarro (merge request)
• Implement block pipl users (merge request) GitLab Enterprise Edition
• Add telesign_intelligence application setting (merge request) GitLab Enterprise Edition
• Remove feature flag - hard_limit_daily_phone_verifications (merge request) GitLab Enterprise Edition
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine spec/features/cycl_analytics_spec.rb test (merge request)
• Add new FK for builds execution configs (merge request)
• Change data consistency for permissions workers (merge request)
• refactor: Use ServiceResponse for VerifyPagesDomainService by @gerardo-navarro (merge request)
• Enable ci_optimize_memory_for_variables and remove the FF (merge request)
• Allow premium namespaces who trialed as free to do it again (merge request) GitLab Enterprise Edition
• Add a new scheduling task adjust_indices_reserved_storage_bytes (merge request) GitLab Enterprise Edition
• Excludes existing bigint IDs from bigint conversion helpers (merge request)
• Schedule async FK validation for p_ci_stages partitions (merge request)
• Remove the deprecated worker (merge request)
• Add the FF zoekt_optimized_performance_indexing (merge request) GitLab Enterprise Edition
• Remove software licenses sharding key issue url (merge request)
• Ensures the ticket work item type has the same widgets as issues (merge request)
• Update github service (merge request)
• Remove company question from duo pro and ultimate trial forms (merge request) GitLab Enterprise Edition
• Cleanup stop_bulk_sidekiq_job_activation feature flag (merge request) GitLab Enterprise Edition
• Regenerate RuboCop TODO files (merge request)
• Requeue backfill milestone releases (merge request)
• Add RuboCop rule to enforce class-level allow_access_with_scope (merge request)
• Remove references to Codestral model for SaaS (merge request)
• Quarantine a flaky test (merge request)
• Add and backfill namespace_id for status_page_published_incidents (merge request)
• Finalize migration BackfillResourceLinkEvents (merge request)
• Add & backfill sharding keys for protected_branch_merge_access_levels (merge request)
• Add new FK for build execution configs (merge request)
• Add and backfill namespace_id for resource_weight_events (merge request)
• Remove sharding key issue from geo_events (merge request)
• Add NOT NULL constraint on project.organization_id column (merge request)
• Remove run_keyword_instrumentation feature flag (merge request)
• Clean up YAML definition file for prompt_migration_summarize_review ff (merge request)
• Add and backfill namespace_id for issue_emails (merge request)
• Add and backfill namespace_id for issue_user_mentions (merge request)
• Remove feature flags for pre-Chat GA (merge request) GitLab Enterprise Edition
• Add desired sharding key for BuildPendingStates (merge request)
• Quarantine a flaky test (merge request)
• Add and backfill namespace_id for issue_metrics (merge request)
• Add and backfill namespace_id for sentry_issues (merge request)
• Add and backfill namespace_id for issue_customer_relations_contacts (merge request)
• Add and backfill namespace_id for issue_email_participants (merge request)
• Add and backfill namespace_id for resource_link_events (merge request)
• Add and backfill namespace_id for issuable_metric_images (merge request)
• Add and backfill namespace_id for issue_assignment_events (merge request)
• Add missing rollout issues for feature flags (merge request) GitLab Enterprise Edition
• New web_hooks.vulnerability_events migration (merge request)
• Store WAL locations in concurrency limiter (merge request)
• Quarantine a flaky test (merge request)
• Add and backfill namespace_id for incident_management_issuable_escalatio (merge request)
• Add and backfill namespace_id for work_item_progresses (merge request)
• Add and backfill namespace_id for issuable_resource_links (merge request)
• Backfill missing user_detail records for specific user_types (merge request)
• Add Edit button to tree header (merge request) GitLab Enterprise Edition
• Add and backfill namespace_id for issuable_severities (merge request)
• Regenerate RuboCop TODO files (merge request)
• Quarantine a flaky test (merge request)
• Set missing/incorrect feature categories for tests (merge request)
• Sync approval policies after creating security_policies (merge request) GitLab Enterprise Edition
• Set pipeline expiry time (merge request)
• Quarantine a flaky test (merge request)
• Cleanup security_policies_sync feature flag (merge request) GitLab Enterprise Edition
• Add foreign key beween builds and pipelines (merge request)
• Change data consistency for workers maintained by code_testing (merge request)
• Async validate new ci_pipelines FKs (merge request)
• Remove broken FK between pipelines and build exec configs (merge request)
• Remove duo_chat_stream_help_answer feature flag (merge request) GitLab Enterprise Edition
• Finalize migration BackfillVulnerabilityFindingsRemediationsProjectId (merge request)
• Remove feature flag: fail_stuck_mirrors (merge request)
• Remove "remote_mirror_fail_on_lfs" feature flag (merge request)
• Start implementing recurring PIPL email (merge request) GitLab Enterprise Edition
• Finalize DisableAllowRunnerRegistrationOnNamespaceSettingsForGitlabCom (merge request)
• Remove unused matched_lines_count (merge request)
• Fix all RSpec/IsExpectedSpecify offenses by @richie_ctr360 (merge request)
• Quarantine a flaky test (merge request)
• Backfill subscription_seat_assignments table (merge request) GitLab Enterprise Edition
• Remove ssh_certificates_rest_endpoints feature flag (merge request)
• Cleanup use_latest_security_scans_for_security_policies flag (merge request) GitLab Enterprise Edition
• Quarantine a flaky test (merge request)
• Add and backfill group_id for group_wiki_repository_states (merge request)
• Fix Layout/LineLength offenses by @ikelax (merge request)
• Change data consistency for workers maintained by importers (merge request)
• Change data consistency for workers maintained by pipeline_composition (merge request)
• Fix the spacing between trials title and text (merge request) GitLab Enterprise Edition
• Model registry: Add metrics for projects and namespaces (merge request)
• Create foreign key for build execution configs (merge request)
• Remove "cached_commits" feature flag (merge request)
• Remove the variable from manual_confirmation message by @francoisauclair911 (merge request)
• Regenerate RuboCop TODO files (merge request)
• Update chat-based integrations to use shared modules (merge request) GitLab Enterprise Edition
• Remove 'explain_code_chat' feature flag (merge request)
• Remove web_ui_commit_author_change feature flag (merge request)
• Remove the FF ci_variables_optimize_kubernetes_variables (merge request)
• Cleanup trial gitlab subscription date attributes (merge request) GitLab Enterprise Edition
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Adding ci_pipelines to LFK config file (merge request)
• Fix Style/IfUnlessModifier offences by @divyamtayal (merge request)
• Regenerate RuboCop TODO files (merge request)
• Remove "handle_structured_gitaly_errors" feature flag (merge request)
• Mark 20240626145458 as obsolete (merge request) GitLab Enterprise Edition
• Remove zoekt_send_tasks feature flag (merge request) GitLab Enterprise Edition
• Add UX improvement for in-app trials on button and titles (merge request) GitLab Enterprise Edition
• Refactor RubyGems package enqueuing by @holtvogt (merge request)
• Finalize migration BackfillProjectRelationExportsProjectId (merge request)
• Cleanup "enforce_ssh_certificates_via_settings" feature flag (merge request)
• config: Disable GitLab container registry by default in gitlab test env by @gerardo-navarro (merge request)
• Bulk enqueue for ConcurrencyLimit::ResumeWorker (merge request)
• Add resource_usage_limits column to application_settings (merge request)
• Add async validation for p_ci_builds - p_ci_pipelines FK (merge request)
• Validate duplicate jobs cookie against schema (merge request)
• Finalize migration BackfillStatusCheckResponsesProjectId (merge request)
• Remove CiEditor tool (merge request) GitLab Enterprise Edition
• refactor: Use single quote in shared example by @gerardo-navarro (merge request)
• Cleanup spamcheck_runway_migration feature flag (merge request)
• Remove ai_impact_only_on_duo_enterprise feature flag (merge request) GitLab Enterprise Edition
• Bump ruby-lsp version (merge request)
• Remove search_mr_filter_label_ids feature flag (merge request) GitLab Enterprise Edition
• Mark 20240517092224 as obsolete (merge request) GitLab Enterprise Edition
• Update step JSON schema (merge request)
• Finalize CopyTaggingsToPCiBuildTags migration (merge request)
• Send invited_user_ids on MembersAdded event (merge request)
• Finalize DeleteOrphanedBuildRecords migration (merge request)
• Concurrency limit: parallelize resume worker (merge request) GitLab Enterprise Edition
• Finalize migration BackfillUserAchievementsNamespaceId (merge request)
• Finalize migration BackfillTerraformStateVersionsProjectId (merge request)
• Model registry: Add additional tests (merge request)
• Fix Layout/LineLength offenses by @ikelax (merge request)
• Protected packages: Use CheckRuleExistenceService in npm push protection by @gerardo-navarro (merge request)
• Finalize migration BackfillMlExperimentMetadataProjectId (merge request)
• Finalize migration BackfillDastSiteValidationsProjectId (merge request)

17.6.5 (2025-02-11)

Security (7 changes)

• Security Duo Chat Escape Unknown Domain Hyperlinks (merge request)
• Hide sensitive workhorse headers and fix route confusion between web and workhorse routes (merge request)
• Reduce memory allocations on create PAT endpoint (merge request)
• Prevent SSRF attacks for Workspaces (merge request)
• Prevent read code access when repository is disabled (merge request)
• Fixes XSS on the target branch in the merge request widget (merge request)
• Unsubscribe from actioncable channel when PAT is revoked (merge request)

17.6.4 (2025-01-22)

Fixed (2 changes)

• Add BoardEpicConnection type policy for pagination GitLab Enterprise Edition
• Fix handling of short gzip metadata files

Security (4 changes)

• Fix protected variable exfiltration (merge request)
• Enhance rich viewer sanitization (merge request)
• Avoid recursive sidekiq calls on cyclic work item hierarchies (merge request)
• Respect the private profile constraints (merge request)

Other (1 change)

• Reorder migrations for ci_deleted_objects

17.6.3 (2025-01-08)

Fixed (2 changes)

• Backport bugfix for diff_files highlighting
• Fix ability to use password for Git when password for Web is disabled

Security (4 changes)

• Prevent cyclic reference in work item hierarchy widget from frontend (merge request)
• Allow external_provider config take precedence over external_groups (merge request)
• Filter out sensitive parameters on Auth logs (merge request)
• Don't allow unauthorized users to close issues automatically (merge request)

17.6.2 (2024-12-10)

Fixed (2 changes)

• Add guard clause to Wiki#find_page when title is nil
• Fix 401 errors when installing the GitLab for Jira app

Security (11 changes)

• Add timeout around Parslet in template parser (merge request)
• Add authorization check to protectableBranches field (merge request)
• Check harbor name & digest for path traversal (merge request)
• Ignore titles for GFM links in rich text editor (merge request)
• Restrict user and group creation when same pages unique domain exist (merge request)
• DoS by repeatedly sending unauthenticated requests for diff-files of a commit or merge request (merge request)
• Add query to filter_parameters (merge request)
• Added invalid redirect fragment check (merge request)
• Make confidential threads unresolvable via new issue (merge request)
• Do not set session cookie for /v2 endpoints in the response (merge request)
• HTML injection in vulnerability details, leads to XSS on self hosted servers (merge request)

17.6.1 (2024-11-26)

Security (6 changes)

• Add size check for harbor registry (merge request)
• Adding JobArtifactReport class to pre-emptively validate job artifacts (merge request)
• Fix: unsubscribe from actioncable channel when PAT is revoked (merge request)
• Allow a LFS token to be used only for LFS related requests (merge request)
• Fix possible DOS with TOML file parsing (merge request)
• Move allow_access_with_scope to class level (merge request)

17.6.0 (2024-11-20)

Added (181 changes)

• Added type and controls column to requirements and api (merge request) GitLab Enterprise Edition
• Allow Sidekiq workers to be disabled by default by configuration (merge request) GitLab Enterprise Edition
• Remove nuget_extract_nuget_package_model feature flag (merge request)
• Introduce rotation of personal tokens in UI by @shangsuru (merge request)
• Add worker for member deletion (merge request)
• Adds ciJobTokenScopeAllowlistEntry graphql type (merge request)
• Update docs to reflect workspaces private container registry support (merge request)
• Track epic syncing errors (merge request) GitLab Enterprise Edition
• Create ci_runner_tags table (merge request)
• Add ai_settings table (merge request)
• Add network polling and pagination (merge request)
• Added API for Project Security Settings (merge request) GitLab Enterprise Edition
• Add sep concurrency control documentation (merge request)
• Add DORA projects comparison panel to group Value Streams Dashboard (merge request) GitLab Enterprise Edition
• Add missing fields to WorkspaceType (merge request) GitLab Enterprise Edition
• Update routes to redirect to duo home (merge request) GitLab Enterprise Edition
• Support workspace suspension (merge request)
• Backfill security policies table from YAML (merge request) GitLab Enterprise Edition
• Add spdx column to software_license_policies table (merge request) GitLab Enterprise Edition
• Create streamers for audit events streaming destinations (merge request) GitLab Enterprise Edition
• Add job to create missing ExternalIssueLinks (merge request) GitLab Enterprise Edition
• Persist add on seat assignments records on CH (merge request) GitLab Enterprise Edition
• Add base importers for GitHub import user mapping (merge request)
• Add rake task to enable work item epics (merge request) GitLab Enterprise Edition
• Sync Application Settings seat_control value with new_user_signups_cap (merge request) GitLab Enterprise Edition
• Protected packages: Integrate push package protection for conan packages by @gerardo-navarro (merge request)
• Backfill project bot user details bot namespace (merge request)
• Add placeholder field for work_item related merge requests (merge request)
• Remove feature flag unblock_rules_using_execution_policies (merge request) GitLab Enterprise Edition
• Claude 3.5 Haiku model addition gitlab-rails (merge request) GitLab Enterprise Edition
• Add support for changing group contact source (for CRM) (merge request)
• Add Conda to supported SBoM PURL_TYPES by @duncanmmacleod (merge request) GitLab Enterprise Edition
• Add webhook for creating a repo (project) (merge request) GitLab Enterprise Edition
• Expose KAS Kubernetes API Proxy URL in metadata APIs (merge request)
• Include model changes and graphql arg for filter by identifier name (merge request) GitLab Enterprise Edition
• User Mapping: Add warning about reasssignments being permanent (merge request)
• Add frameworks tab at project compliance center (merge request) GitLab Enterprise Edition
• Add filter by group inside compliance center projects tab (merge request) GitLab Enterprise Edition
• Show comment tooltips for markdown links to comments (merge request)
• Update GitLab Pages version (merge request)
• GitHub importer add backticks to imported notes (merge request)
• Adds user_seat_management setting (merge request)
• Add frontend and controllers for scheduled merge by @Taucher2003 (merge request)
• Create is_known_exploit column in pm_cve_enrichment and add tests (merge request)
• Allow to regenerate the schema from the beginning by loading init schema (merge request)
• Enable FF true for VR filter in the vulnerability (merge request) GitLab Enterprise Edition
• Add licenses without spdx to custom software license table (merge request)
• Update GitLab Pages version (merge request)
• Adding adherence check for DAST scanner on UI (merge request) GitLab Enterprise Edition
• Add paper trail to seat assignment models (merge request)
• Add policy_tuning into merge request approval policies documentation (merge request)
• Adds Members::DeletionSchedule model (merge request)
• Allow non-epics to use new related item (merge request)
• Model registry: Add actions to models table (merge request)
• Backfill ci_runner_machines_687967fa8a partitioned table (merge request)
• Add DORA projects comparison analytics dashboard visualization (merge request) GitLab Enterprise Edition
• Enable internal Repository X-Ray service (merge request)
• Display project visibility level (merge request)
• Enable admin agnostic token finder (merge request)
• Consolidate audit event streaming strategies to streaming destinations (merge request) GitLab Enterprise Edition
• Added validation for streaming destinations on secret token (merge request) GitLab Enterprise Edition
• Create todos for expiring and expired SSH keys (merge request)
• Log current organization id (merge request)
• Adds syntax highlight support to richt text editor diffs (merge request)
• Model registry: Add artifacts tab on Version card (merge request)
• Add application settings to allowlist integrations (merge request) GitLab Enterprise Edition
• Added headers hash for http destinations (merge request)
• Render description column as HTML in GLQL (merge request)
• Backfill p_ci_runners table (merge request)
• chore: Adding changelog (merge request)
• Update package registry list to show accurate number of error packages (merge request)
• Unset auto-resolved status on Vulnerability when unresolving (merge request) GitLab Enterprise Edition
• Allow maintainers to admin notes in group level issues (merge request)
• Add standards adherence lighthouse metrics (merge request) GitLab Enterprise Edition
• Add sorting component for deployments (merge request)
• Adding adherence check for SAST scanner on UI (merge request) GitLab Enterprise Edition
• Add limit to concurrent batch exports (merge request)
• Add VSA StageAggregation model (merge request)
• Add mark_internal_note permission to note (merge request)
• Create Projects::DeployTokens::RevokeService by @nwittstruck (merge request)
• Add subtab query param to placeholders section (merge request)
• Add modal to keep all contributions as placeholders (merge request)
• Add vulnerability_reference_information table (merge request)
• Create index supporting sbom_occurrences.package_manager search (merge request)
• Move 'Maximum number of jobs in a single pipeline' from EE to CE by @choznerol (merge request) GitLab Enterprise Edition
• Add security policy bot for container scanning (merge request) GitLab Enterprise Edition
• Adding adherence check for dast scanner run (merge request) GitLab Enterprise Edition
• Add admin role option for the default project creation protection (merge request)
• Configure Sec CI for MR's labelled sec-decomposition (merge request)
• Model registry: Add actions to versions (merge request)
• Default enable security_policies_sync feature flags (merge request) GitLab Enterprise Edition
• Add JobTokenAuthLog resolver and type (merge request)
• Add solo_owned filter to the Users#Organizations resolver (merge request)
• Adds UI elements for deprecated packages (merge request)
• Model registry: Add artifactsCount (merge request)
• Make GKE runner option generally available (merge request) GitLab Enterprise Edition
• Model registry: Add performance tab to Version card (merge request)
• Enable NOT filtering for target branches in MR List GQL (merge request)
• Activate syntaxhighlighting in CI/CD catalog README by @hairmare (merge request)
• Adding adherence check for sast scanner run (merge request) GitLab Enterprise Edition
• Added ability to push multi-result count to sidebar (merge request)
• Add streamed diffs to rapid diffs commit page (merge request)
• Add GraphQL API for Wiki notes (merge request)
• Add and backfill project_id for ci_trigger_requests (merge request)
• Create ci_runners_e59bb2812d partitioned table (merge request)
• Model registry model right sidebar (merge request)
• Add DeleteNotPresentOccurrencesService for CS4R (merge request) GitLab Enterprise Edition
• Group settting to notify inherited members for access token expiry (merge request)
• Add a setting for text editors (merge request)
• Create an audit event when SD exclusion is applied (merge request) GitLab Enterprise Edition
• Add mailer for duo enterprise seat assignment (merge request) GitLab Enterprise Edition
• Model registry: Add tabs to Version card (merge request)
• Subscribe to Members::Added event (merge request) GitLab Enterprise Edition
• Add license option to sort options (merge request) GitLab Enterprise Edition
• Add reverse_lock_order on pending_alert_escalations table (merge request)
• Add Feed Tokens to Token information API by @nwittstruck (merge request)
• Remove terraform_extract_terraform_package_model feature flag (merge request)
• Adds enable_member_management setting to api response (merge request) GitLab Enterprise Edition
• Expose /licenses endpoint on Project Dependency list (merge request) GitLab Enterprise Edition
• Add auto_resolved column to vulnerabilities table (merge request)
• Add archived to NamespaceSettings for groups (merge request)
• Add label filter for merge requests scope (merge request)
• Add new event Members::DestroyedEvent (merge request) GitLab Enterprise Edition
• Audit when multi project down stream pipeline is created (merge request) GitLab Enterprise Edition
• Backfill sharding key for events (merge request)
• Make JaCoCo reports Generally Available (merge request)
• Add warning to file uploads in confidential/internal notes (merge request)
• Assume high risk for users who use a duplicate phone number (merge request) GitLab Enterprise Edition
• Added mutation for creating compliance requirements (merge request) GitLab Enterprise Edition
• Release Jira deployment gating feature (merge request)
• Prepare conversion of abuse_reports to bigint (merge request)
• Support X-Delivered-To headers for email ingestion by @divyamtayal (merge request)
• Remove model registry feature flag by releasing the feature (merge request)
• Model registry: Display author in model metadata (merge request)
• Add support for assigning an agent to an environment via CI (merge request)
• Add work item iteration to create flow (merge request)
• Expose list of Duo Chat available features (merge request) GitLab Enterprise Edition
• Support subscriptions in GraphQL explorer (merge request)
• Release protected npm packages feature (merge request)
• Remove ci_retry_on_exit_codes feature flag (merge request)
• Retry some errors (merge request) GitLab Enterprise Edition
• Display external author in note header on work items (merge request)
• Filter todos when marking all as done (merge request)
• Add identity_verification_settings column to application_settings table (merge request)
• Rake to alter cells only table sequences (merge request)
• Model registry: Display author in modelversion metadata (merge request)
• Protected packages: Integrate package protection rules for pypi packages by @gerardo-navarro (merge request)
• Create unique table visualizations for analytics dashboards (merge request) GitLab Enterprise Edition
• Add duo enterprise trial discover page (merge request) GitLab Enterprise Edition
• Add feature flag for github import user mapping (merge request)
• Add duoUsedCount aiMetrics (merge request) GitLab Enterprise Edition
• Add counts.groups_with_enterprise_users metric (merge request) GitLab Enterprise Edition
• Add visibilityLevel to Ci::Catalog::Resource type in GQL (merge request)
• Create new compute_minutes internal API route (merge request) GitLab Enterprise Edition
• Add project_id to ci_pipeline_messages (merge request)
• Add theme parameter to broadcast message API (merge request)
• Customize GraphQL explorer logo and welcome text (merge request)
• Add GKE provisioning service (merge request) GitLab Enterprise Edition
• Setting for resource token expiry notifications to inherited members (merge request)
• Model registry: Add author to model and model version (merge request)
• REST API: add an endpoint to configure pull mirrors (merge request) GitLab Enterprise Edition
• Add forked_from_project_id to project entity (merge request)
• Search API: Issue support fields parameter to search by title (merge request) GitLab Enterprise Edition
• Add AssignDesiredShardingKey to support non id PK (merge request)
• Create rake task to cleanup wrongly provisioned add-on purchases (merge request) GitLab Enterprise Edition
• Auto-ban duplicate users when a user is banned (merge request)
• Export CI Job Token Authorizations in CSV (merge request)
• Add skip parameter in network graph list commits (merge request)
• Service Ping count projects using multiple compliance frameworks (merge request) GitLab Enterprise Edition
• Add GitLab University link to pipeline editor (merge request)
• Check parents when rendering 'pending deletion' badges (merge request) GitLab Enterprise Edition
• Create new gitlab_subscriptions internal API route (merge request) GitLab Enterprise Edition
• Adds external author to note type (merge request)
• Add epic_issue and epic_links work item references (merge request) GitLab Enterprise Edition
• Validate OmniAuth email length by default (merge request)
• Use LFK to mark packages nuget symbols for destruction (merge request)
• Adds email participants widget definition (merge request)
• Add sharding key project_id for p_ci_pipelines_config (merge request)
• Update GitLab Pages version (merge request)
• Add badges to Catalog releases (merge request)
• Add lastActivityOn field to MemberInterface type (merge request)

Fixed (176 changes)

• Limit follower and following count to 21 before pagination (merge request)
• Only highlight file on changes tab (merge request)
• Use GlFormSelect for project visibility dropdown (merge request)
• Update namespace_id when moving issues (merge request)
• Fix setting namespace_id for group wiki page notes (merge request)
• Add quickActionsStatus field to create/update note GraphQL mutations (merge request)
• No op BBM QueueCreateMissingExternalLinksForVulnerabilities (merge request)
• Fix padding of reply comments so that username and comment content align (merge request)
• Merge request: Add correct design token for border bottom (merge request)
• Publish AuthorizationsAddedEvent with multiple projects (merge request) GitLab Enterprise Edition
• Fix displaying “unsupported” emojis (merge request)
• Do not run validations on AccessToken revocation (merge request)
• Save comments on a diff file automatically (merge request)
• Remove ci_redis_pipeline_creations flag (merge request)
• Exclude hidden issues in sidebar count (merge request)
• Return error when unable to create import relation (merge request)
• Consider manual pipeline for unenforceable policy rules (merge request) GitLab Enterprise Edition
• Fix application errors in /user/personal_tokens endpoint (merge request)
• Fix check for Diff::Line#match? (merge request)
• Update AuthorizationsAddedEvent to handle multiple projects (merge request) GitLab Enterprise Edition
• Fix pipeline security summary not loading (merge request) GitLab Enterprise Edition
• Fix on call rotation modal styles (merge request)
• Check title and name fields for scope delimiter for labels (merge request) GitLab Enterprise Edition
• Display the mermaid plot in terms page when 2FA on (merge request)
• Let activity entries wrap instead of overflowing (merge request)
• Use nav item title as aria-label on nav link (merge request)
• Fix warning background color for compare page (merge request)
• Index work items when project visibility level changes (merge request) GitLab Enterprise Edition
• Conditionally show Users without a group or project in correct section (merge request) GitLab Enterprise Edition
• Add missing namespace IDs header for Code Completion requests (merge request) GitLab Enterprise Edition
• Optimize standardRoles.memberCounts query (merge request) GitLab Enterprise Edition
• Re-add utility classes mw-m, mw-l and mw-xl for metadata_item.vue (merge request)
• Check work_item_epics FF for legacy date rollup (merge request) GitLab Enterprise Edition
• Fetch left super sidebar counts with async GraphQL calls (merge request)
• Vertically align badges in glql lists (merge request)
• Fix issue with /label and /unlabel commands (merge request)
• Fix updating approvers of multiple merge request rules (merge request) GitLab Enterprise Edition
• Adds findings exists check (merge request) GitLab Enterprise Edition
• Fix LLM AI client not returning a HTTP response with 204 responses (merge request)
• Fix error during project deletion when pipeline sha is nil (merge request)
• Fix user caps alert positioning to be above members buttons (merge request) GitLab Enterprise Edition
• Fix double API call when inviting a project member (merge request) GitLab Enterprise Edition
• Check for package_forwarding feature availability in admin's settings (merge request) GitLab Enterprise Edition
• Wait until pipeline finishes to evaluate unenforceable scans (merge request) GitLab Enterprise Edition
• Fix AIGW header for chat requests (merge request) GitLab Enterprise Edition
• Stop blocking pre-existing policy rules as unenforceable (merge request) GitLab Enterprise Edition
• Use Gitlab::HTTP for outbound filtering rules (merge request)
• Remove #find_object override in CI job mutations (merge request)
• Handle TypeError in parsing webhook template (merge request)
• Create migration to update admin bot profiles (merge request)
• Implement abort pod logs stream (merge request)
• Fix cron worker that deletes project_bot users to delete inactive only (merge request)
• Use subscription data for subscription related card (merge request) GitLab Enterprise Edition
• Fix pagination redirect for protected branches/tags (merge request)
• Don't change MR closing issues if MR is set to auto merge (merge request)
• Return an error for an invalid ref_name (merge request)
• Fix group wiki activity events breaking the user feed (merge request)
• Fix PendingStatusCheckWorker when merge_request is not found (merge request) GitLab Enterprise Edition
• Fix RTE rendering bug with empty code blocks (merge request)
• Fix project subscriptions policy (merge request) GitLab Enterprise Edition
• Fix repository push emails: don't escape commits for plain text emails (merge request)
• Changelog API: fix pattern for header detection (merge request)
• Allow job play mutation to act on instances of Ci::Bridge (merge request)
• Create project security_setting if necessary (merge request) GitLab Enterprise Edition
• Fix update of violation status for non-applicable approval rules (merge request) GitLab Enterprise Edition
• Avoid updating or creating runner managers when deleting runner (merge request)
• Fix start and due dates values for work items (merge request) GitLab Enterprise Edition
• Markdown header: Fix bg color in darkmode (merge request)
• fixed: Redirect behaviour for git-upload-pack requests (merge request) GitLab Enterprise Edition
• Settings footer: increase z-index by 1 from header (merge request)
• Repo language bar: Fix text in darkmode (merge request)
• Don't create approval rules without require_approval action (merge request) GitLab Enterprise Edition
• Model registry: Allow author to be missing (merge request)
• Update container registry link to settings path (merge request)
• Only set has_vulnerabilities records are ingested (merge request) GitLab Enterprise Edition
• Fix incorrect has_vulnerabilities values (merge request)
• Replace non-existing path in the profile 2FA page (merge request)
• Fix diff hunk header overflow (merge request)
• Corrects an inaccuracy in idempotent jobs docs (merge request)
• Fix GitLab Duo chat session error in the Web IDE (merge request) GitLab Enterprise Edition
• Uses tool input rather than user_input for calls (merge request)
• Fix: admin group update logic (merge request) GitLab Enterprise Edition
• Resolve "Correct cve-enrichments to cve-enrichment" (merge request)
• Ensure auto_merge_enabled is set when validating merge trains (merge request) GitLab Enterprise Edition
• Fix nondeterministic discussions_for_summary method (merge request) GitLab Enterprise Edition
• Convert 20241022181600 to a schema migration (merge request)
• Support namespaces in X-Gitlab-Duo-Seat-Count (merge request) GitLab Enterprise Edition
• Fix edge case when imprting issues with invalid associations (merge request)
• Go-get: return 404 error code when personal token is invalid (merge request)
• Group filtered search: Fix bg and border color (merge request)
• Unmark project as pending delete if user lacks delete access (merge request)
• Remove duplicate banner for scheduled project and group deletion (merge request) GitLab Enterprise Edition
• Fix show/hide logic for licenses tap in pipeline view (merge request)
• Fix error when adding quick actions to diffs (merge request)
• Fix markdown editor header background (merge request)
• Catch analytics tracking error during maintenance mode (merge request)
• Fix redirect after sign in when requesting access (merge request)
• Fix unlikely race on previous merge train car (merge request) GitLab Enterprise Edition
• Make merge trains more robust to ref deletion errors (merge request) GitLab Enterprise Edition
• Update pdf worker file path in pdf viewer (merge request)
• Fix work item assignees ordering GQL API (merge request)
• Specify default query sync values for status token (merge request) GitLab Enterprise Edition
• Change TailwindCSS darkMode from default to selector (merge request)
• Change root namespace for specific projects (merge request) GitLab Enterprise Edition
• Fix directory resolution for Google Cloud runners services (merge request)
• RefSwitcher: fix support for % symbol in reference names (merge request)
• Fix work item icon when conflicted with cache (merge request)
• Prevent group restoration during deletion (merge request) GitLab Enterprise Edition
• History rewrite: handle Gitaly errors (merge request)
• Fix Module deployment in Terraform template (merge request)
• Update has_vulnerabilities when deleting records (merge request)
• Add search for a ful path for polices (merge request) GitLab Enterprise Edition
• Make sure framework selection is updated (merge request)
• Deduplicate issuable_resource_links (merge request)
• Fix double line number hash on pipeline security tab (merge request) GitLab Enterprise Edition
• Broadcast message settings: Render message preview (merge request)
• Sidebar navigation: Fix skip link position (merge request)
• Simplify DropCiPipelinesConfig migration (merge request)
• Fix trial title for duo info card (merge request) GitLab Enterprise Edition
• Fix marking CVS vulnerabilities as no longer detected (merge request) GitLab Enterprise Edition
• Pipeline graph: Fix item hover in lightmode (merge request)
• MR sidebar: Refactor resize handling, remove CSS (merge request)
• Disable DNS rebinding protection when proxy used (merge request)
• Retry RepositoryUpdateMirror jobs on failure (merge request) GitLab Enterprise Edition
• Fix unneeded right sidebar gap for work item epic page (merge request) GitLab Enterprise Edition
• Localize dates on UI (merge request)
• Commit note: Fix commit on image styles (merge request)
• Fix comment template button missing from issue child items (merge request)
• fix: Admin user can see pipeline trigger token from other project by @gerardo-navarro (merge request)
• Include LDAP blocked users in user dropdowns (merge request)
• Notes app: Fix use of shortcut 'r' (merge request)
• Fix followees count (only count active users) by @bufferoverflow (merge request)
• Prevent errors in GraphQL notes type (merge request)
• Reduce batch size when backing up group wiki repositories (merge request) GitLab Enterprise Edition
• Increase precision of Value stream analytics time values (merge request) GitLab Enterprise Edition
• Secure Policies list: Fix vertical spacing and delete action (merge request)
• Fix admin groups page LDAP group links display (merge request) GitLab Enterprise Edition
• Avoid SELECT 1/LIMIT 1 query in credentials inventory (merge request) GitLab Enterprise Edition
• Fix broken link to doc on project transfer dialog (merge request)
• Remove from Matrix notify (merge request)
• Fix possible javascript loading order issues with trial widget dismissal (merge request) GitLab Enterprise Edition
• Fix performance of deleting MR approval_rules (merge request) GitLab Enterprise Edition
• Widgets: Use chevron lg size as design specs indicate (merge request)
• Remove policy_scope check to stop N+1 queries (merge request) GitLab Enterprise Edition
• Fix new project group templates pagination (merge request) GitLab Enterprise Edition
• Gracefully handle timeouts when counting issues (merge request)
• Skip defering scheduled jobs in concurrency limit client middleware (merge request)
• Use text-subtle for secondary text color in autocomplete (merge request)
• Security patch upgrade alert: Only expose to admins (merge request)
• Add check for CodeSuggestions API (merge request)
• Fix creating of terraform module metadatum (merge request)
• Fixed isNarrowScreen helper to not require specific element (merge request)
• Only delete protected tags if text matches (merge request)
• Fixed isNarrowScreen helper to not require specific element (merge request)
• Fix an intermittent add_on_purchase finding issue with duo trials (merge request) GitLab Enterprise Edition
• Fix work item modal timeline in dark mode (merge request)
• Dont use blob stitcher when finding oversized blobs (merge request)
• Fix two agent authorization UI issues (merge request) GitLab Enterprise Edition
• Treat a missing fixed_code block as a false positive (merge request) GitLab Enterprise Edition
• Localize dates on UI (merge request)
• Show SAML badges for projects under nested subgroups (merge request) GitLab Enterprise Edition
• Rollback related links on partial success (merge request) GitLab Enterprise Edition
• PullMirrors::UpdateService: fix a case with not enough provided params (merge request) GitLab Enterprise Edition
• Delete orphaned stages (merge request)
• Don't show note from background item in work item modal (merge request)
• Fix admin_mode enforcement in AdjournedProjectDeletionWorker (merge request) GitLab Enterprise Edition
• Include project ancestors when determining agent user access (merge request)
• Badges - Migrate to Server Side Pagination (merge request)
• Fix searching in the label filter (merge request)
• Fix missing groups in autocomplete (merge request)
• Fix container registry tag cleanup schedule visibility (merge request)
• Localize dates in epics and roadmaps UI (merge request)
• Remove Manual sort option from issues dashboard page (merge request)
• Have user_ids.size look for greater than or equal to 1 record (merge request) GitLab Enterprise Edition
• Lazy render emoji dropdown (merge request)
• Remove   on empty task lists (merge request)

Changed (281 changes)

• Change yaml format for approval policy (merge request) GitLab Enterprise Edition
• Move history button into commit box on repository and blob pages (merge request)
• Disable scan_execution_pipeline_concurrency_control ff (merge request) GitLab Enterprise Edition
• Disable ViewComponent deprecation warnings in production (merge request)
• Change yaml format for vulnerability management policy (merge request) GitLab Enterprise Edition
• Refactor notes quick action handling (merge request)
• Prevent missing records in Direct Transfer when Sidekiq restarts (merge request)
• Update framework detail text on audit events (merge request) GitLab Enterprise Edition
• Fix broadcast message dismissal for Omniauth/SAML (merge request)
• Change yaml format for pipeline execution policy (merge request) GitLab Enterprise Edition
• Initial checkin for Admin Duo Home Page (merge request) GitLab Enterprise Edition
• Add ids argument to a group resolver (merge request)
• Handle mailmaped emails for verified gpg signed commits (merge request)
• Allow LLMs to return a full resource definition (merge request)
• Small visual updates to glql UI (merge request)
• Enable ai_commit_reader_for_chat feature flag by default (merge request) GitLab Enterprise Edition
• Update edit blob to use commit change modal (merge request)
• Collapse Pipeline section when empty on load (merge request) GitLab Enterprise Edition
• Validate sharding constraint on p_ci_stages (merge request)
• AI-Resolution: Add public project warning (merge request) GitLab Enterprise Edition
• Remove search and allow text input for job token allowlist (merge request)
• Put inline blame behind feature flag (merge request)
• Updated all audit events to be streamed (merge request) GitLab Enterprise Edition
• Replace text-muted class with gl-text-subtle (merge request)
• Synchronize prepared security policy indexes (merge request)
• Remove enable_adherence_check_for_scanners feature flag (merge request)
• Remove unused policy helper property (merge request) GitLab Enterprise Edition
• Update User Cap settings message (merge request) GitLab Enterprise Edition
• Change yaml format for scan execution policy (merge request) GitLab Enterprise Edition
• Fix discover page breadcrumbs title (merge request) GitLab Enterprise Edition
• Update decompose approvers (merge request) GitLab Enterprise Edition
• Model registry: Allows directories in MLflow artifacts (merge request)
• Allow project transfer with tags conditionally (merge request)
• Clean up ai_build_reader_for_chat feature flag (merge request) GitLab Enterprise Edition
• Update outdated links (merge request)
• Enable FF enable_add_on_users_pagesize_selection by default (merge request) GitLab Enterprise Edition
• Initial checkin for Groups Duo Home Page (merge request) GitLab Enterprise Edition
• Remove search and allow text input for job token allowlist (merge request)
• Clean up gitlab_ci_archived_trace_consistent_reads feature flag (merge request)
• Update Admin Dashboard to fetch KAS version from KAS by @choznerol (merge request)
• Move creator_id LFKs to routing table ci_runners_e59bb2812d (merge request)
• Migrate text variables to design tokens in sidebars (merge request)
• Make memberships import optional (merge request)
• Require projects to be associated to an organization (merge request)
• Re-route pmg dropdowns to GraphQL version (merge request)
• Improve VSD and AI analytics dashboards panel titles (merge request) GitLab Enterprise Edition
• Error page: use a user friendly error page for ResourceExhausted errors by @divyamtayal (merge request)
• Remove FF batched_redis_updates_for_kubernetes_agent_events (merge request)
• Update jwt gem to 2.9.3 (merge request)
• Migrate your work MR dashboard to use Crud component (merge request)
• Remove collapse_card.scss stylesheet (merge request)
• Enable reviewer_assign_drawer feature flag by default (merge request)
• Improve layout of workspace items (merge request) GitLab Enterprise Edition
• Remove old format for action approvers (merge request) GitLab Enterprise Edition
• Enable scan_execution_pipeline_concurrency_control FF (merge request) GitLab Enterprise Edition
• Add user ssh and gpg system signatures using signature author email (merge request) GitLab Enterprise Edition
• Allow interrupted RelationBatchExportWorker to bypass limit (merge request)
• Model registry: Change create button (merge request)
• Ensure ID uniqueness for p_ci_pipelines (merge request)
• Create separate tables for group SCIM (merge request)
• Update audit event scope when a group disables 2FA for a user (merge request) GitLab Enterprise Edition
• Remove subscriber code from zoekt update used bytes worker (merge request) GitLab Enterprise Edition
• Use latest tanuki_emoji gem (merge request)
• Drop requires_credit_card_verification column (merge request)
• REST API: deprecate old pull mirror configuration process (merge request) GitLab Enterprise Edition
• Improve formatting of geo:status Rake task (merge request) GitLab Enterprise Edition
• Update opt-in email copy and remove deprecated language (merge request) GitLab Enterprise Edition
• Show warning about importing memberships when user namespace is selected (merge request)
• Refactor auditor subclasses to their bounded contexts (merge request) GitLab Enterprise Edition
• Remove cross-join from vuln stat adjustment (merge request) GitLab Enterprise Edition
• Add timeout handling for release evidence workers (merge request)
• Add user ssh and gpg system signatures using signature author email (merge request) GitLab Enterprise Edition
• Extract approvers mapping method to utils (merge request) GitLab Enterprise Edition
• License Scanning metrics (merge request) GitLab Enterprise Edition
• Enhance model registry and experiments permissions (merge request)
• Keep search enabled for namespaces with evicted zoekt indices (merge request) GitLab Enterprise Edition
• Add user to organization after group/project access request is approved (merge request)
• Run CVE Enrichment worker once an hour (merge request) GitLab Enterprise Edition
• Remove cross-join from snapshot calculator (merge request) GitLab Enterprise Edition
• Project sidebar: Migrate color classes to design tokens (merge request)
• Remove autocomplete_group_search_optimization feature flag (merge request)
• Remove feature flag to rollout code generation (merge request)
• Add multiple approval action support (merge request) GitLab Enterprise Edition
• Update vertical spacing of project settings (merge request)
• Update zoekt index storage reservations (merge request)
• Update link size in time tracking (merge request)
• Diff file too large warning: Migrate to design tokens (merge request)
• Avoid setting spent at value from the frontend when creating a timelog by @zillemarco (merge request)
• Update pages custom domains (merge request)
• Add backend validation for multiple actions (merge request) GitLab Enterprise Edition
• Add actor for CreatePipelineWorker FF check (merge request) GitLab Enterprise Edition
• Cleanup cte_for_group_search_access_level Feature Flag (merge request)
• Cleans up duo_chat_use_tool_input (merge request)
• Sync FK for p_ci_builds.upstream_pipeline_id (merge request)
• Model registry: Enhance model create flow (merge request)
• Log TriggerIndexingWorker task argument for debugging (merge request) GitLab Enterprise Edition
• Add remaining changes to topics (merge request)
• Remove search_project_query_builder feature flag (merge request) GitLab Enterprise Edition
• Remove feature flag no_locking_for_stop_actions (merge request)
• It adds a new Keep to change worker data consistency (merge request)
• Improve standard role type (merge request) GitLab Enterprise Edition
• Update breadcrumbs and page headers (merge request)
• Post bot message for fail-open violations (merge request) GitLab Enterprise Edition
• Cleanup v2_chat_agent_integration feature flag (merge request)
• Use devise authenticate_user! for search controller (merge request)
• Refactor ci templates page (merge request)
• Send emails on bulk user duo seat assignment (merge request) GitLab Enterprise Edition
• Update breadcrumbs for edit pages (merge request)
• Enhance model registry version creation (merge request)
• Extend merge request approval graphql api (merge request) GitLab Enterprise Edition
• Removed data.js files from filters as part of the code maintenance (merge request)
• Wells: Update design to match darkmode design direction (merge request)
• Add optimization for groups autocomplete (merge request)
• Rollout two feature flags for self-maneged instances (merge request) GitLab Enterprise Edition
• Renamed Promotion Management util methods (merge request) GitLab Enterprise Edition
• Tree table: Update design for darkmode (merge request)
• User Account - Block deletion with org ownership (merge request)
• Replace toggle with checkbox in upload file, create dir modals by @antonkalmykov (merge request)
• Update zoekt index used_storage_bytes on interval instead of callbacks (merge request) GitLab Enterprise Edition
• Enable license_scanning_with_sbom_licenses by default (merge request) GitLab Enterprise Edition
• Add clarifying help text to legacy issueable linked items input (merge request)
• Updates text under container image cleanup policies settings section (merge request)
• Update semver_dialects gem (merge request)
• Allow multiple approver actions (merge request) GitLab Enterprise Edition
• Add projects label for exceeding number (merge request) GitLab Enterprise Edition
• Use page header component for group members (merge request)
• Allow users with permission to delete last board (merge request)
• Model version right sidebar (merge request)
• Update contents of empty state without any issues (merge request)
• Update license violation checker for custom software licenses (merge request) GitLab Enterprise Edition
• PA team paper cuts 17.6 (merge request)
• Replace duoProAssignedUsersCount usage with duoAssignedUsersCount (merge request) GitLab Enterprise Edition
• Rewrite HostProbe to use Gitlab::HTTP (merge request) GitLab Enterprise Edition
• Feature flag clean up for purchase flow migration (merge request) GitLab Enterprise Edition
• Expose signature author email from gitaly (merge request)
• Initial checkin for Groups Duo Home Page (merge request) GitLab Enterprise Edition
• Allow for closed_by_id param in issues API queries (merge request)
• Update admin breadcrumbs and page headers (merge request)
• Notes: Migrate to section tokens to unbox darkmode (merge request)
• Update layout of alert header (merge request)
• Add migration for setting Namespace organization_id to 1 (merge request)
• Job log detail line number: Migrate text value (merge request)
• Use elastic retry setting for search requests (merge request) GitLab Enterprise Edition
• Remove FF prevent_job_token_admin_permissions (merge request)
• Show release notes on deployment approval page for tagged deployments by @antonkalmykov (merge request) GitLab Enterprise Edition
• Modify text for scheduled policy scan concurrency (merge request) GitLab Enterprise Edition
• Use lowercase text for environment badges (merge request)
• Use calendar-overdue for past due dates (merge request)
• Update layout of edit application page (merge request)
• Add multiple approvers action support (merge request) GitLab Enterprise Edition
• Changed Global Search modal scoped search position (merge request)
• New runner page: Use PageHeading component (merge request)
• Adjust report abuse layout (merge request)
• Update false positive have uniform text size (merge request) GitLab Enterprise Edition
• Update embedding developer docs (merge request) GitLab Enterprise Edition
• Refactor pipeline editor drawer (merge request)
• Model registry: Improve model listing (merge request)
• Replace prop drilling in pipelines.vue with provide/inject pattern by @antonkalmykov (merge request)
• Add link to Epic modal trigger button (merge request)
• Add instance setting to enforce CI job token scope (merge request)
• This MR cleans out feature flag (merge request) GitLab Enterprise Edition
• Update layout of admin edit project page (merge request)
• Adds migration to make file_checksum colmumn nullable (merge request)
• Job page: Migrate to use design tokens (merge request)
• Move WorkerDataConsistency inline disables to external file (merge request)
• Improves custom email verification SMTP error logging (merge request)
• Remove feature flag async_rewrite_history (merge request)
• Add slash command GraphQL query for Duo Chat (merge request) GitLab Enterprise Edition
• Replace span element by button in the group dependencies to fix a11y by @antonkalmykov (merge request) GitLab Enterprise Edition
• Drop the editor feild from the workspaces table (merge request) GitLab Enterprise Edition
• Fix alignment of actions in requirements drawer (merge request)
• Replace GlSegmentedControl with a more modern component with better UI (merge request)
• Improve regexp for system note email obfuscation (merge request)
• Wiki form: Don't disable submit button (merge request)
• Add policy type for breadcrumb (merge request) GitLab Enterprise Edition
• Adds application setting for elasticsearch retry on failure (merge request) GitLab Enterprise Edition
• Enhance model registry model version deletion (merge request)
• Add organization_id to oauth_device_grants table (merge request)
• Update Duo troubleshooting docs (merge request)
• Restore scheduled deletions if the user loses group/project access (merge request) GitLab Enterprise Edition
• Enhance model registry model deletion (merge request)
• Set zoekt enabled namespaces to have search enabled by default (merge request) GitLab Enterprise Edition
• Remove transition animation of copy code button (merge request)
• Add edit text to edit snippet breadcrumbs (merge request)
• Clean up the UI for the protected environments settings by @antonkalmykov (merge request) GitLab Enterprise Edition
• Index work_item embeddings (merge request) GitLab Enterprise Edition
• Adjust Bulk create/remove limit for up to 100 assignments (merge request) GitLab Enterprise Edition
• Enabling group_level_dependencies_filtering_by_component by default (merge request)
• apps/settings: Extend maximum token and SSH key expiration to 400 days by @ben.boeckel (merge request)
• MR widget: Migrate to use design tokens to update darkmode (merge request)
• Remove cross join exception (merge request) GitLab Enterprise Edition
• Model registry: Improve model version listing (merge request)
• Default enable ff_pages_use_open_file feature flag (merge request)
• Secure policies edit: Move delete action to right side (merge request)
• Fix links in pipeline editor helper (merge request)
• Finalize BackfillRootNamespaceClusterAgentMappings migration (merge request)
• Always search through zoekt replicas (merge request) GitLab Enterprise Edition
• Move model registry model editing from modals into forms (merge request)
• Increase zoekt bytes limit to 450 GB (merge request) GitLab Enterprise Edition
• Increase zoekt indexing timeout (merge request) GitLab Enterprise Edition
• Improve security policy comparison before persisting (merge request) GitLab Enterprise Edition
• Update empty policy list page svg (merge request) GitLab Enterprise Edition
• Disable add action button when limit is reached (merge request) GitLab Enterprise Edition
• Deprecate force_push_regex and delete_branch_regex from push_rules (merge request) GitLab Enterprise Edition
• Pipeline editor: Replace the commit confirmation alert with a toast by @antonkalmykov (merge request)
• Editor: Use design tokens (merge request)
• Sidebar nav: Change background in darkmode (merge request)
• Add name to paths in edit label and milestone pages (merge request)
• Increase create work item toast delay (merge request)
• Model registry: Improve empty version description state (merge request)
• Expose schedule name (merge request)
• Modify the way the zoekt multi-result loads (merge request) GitLab Enterprise Edition
• Cache user project authorizations for faster autocomplete and search (merge request)
• Update blob delete modal (merge request)
• Move model registry model editing from modals into forms (merge request)
• Store abuse report labels separate from project/group labels (merge request)
• Allow overriding of ingest and query O11y URLs (merge request) GitLab Enterprise Edition
• Swap beta badge component on Self-hosted models page (merge request)
• Define sharding key for snippets (merge request)
• Finalize ResolveVulnerabilitiesForRemovedAnalyzers migration (merge request)
• Adds knn index setting for opensearch clusters for workitem index (merge request) GitLab Enterprise Edition
• Show copy action in milestone list (merge request)
• Add job to run rubocop docs link check in docs pipelines (merge request)
• Cleanup feature flag ff_compliance_audit_mr_merge (merge request) GitLab Enterprise Edition
• Your work MR dashboard: Align approval badge icon on left side (merge request)
• Allow changing synced work item epics (merge request) GitLab Enterprise Edition
• Update usercap email to use standard email template (merge request)
• Mirror repository email apply standard template (merge request)
• Remove allow_cross_joins_across_databases (merge request) GitLab Enterprise Edition
• Groups Projects - Unify Restore UX (merge request) GitLab Enterprise Edition
• Remove access_token_pagination feature flag (merge request)
• Restore opt-in values from temporary table (merge request) GitLab Enterprise Edition
• Add not null constraint on p_ci_stages (merge request)
• Use search service for project autocomplete (merge request)
• Changed placeholder text in global search modal (merge request)
• Update delete approval rules query to use index (merge request) GitLab Enterprise Edition
• Fix rubocop violations from docs links (merge request) GitLab Enterprise Edition
• Updated error message when VR MR suggestions can’t be created (merge request) GitLab Enterprise Edition
• Remove unused table classes in alert details (merge request)
• Add call to action to issue analytics empty state (merge request) GitLab Enterprise Edition
• Allow vertically resizing markdown and rich text fields (merge request)
• Use routing table name for BuildTraceMetadata model (merge request)
• Model registry: Improve empty version description state (merge request)
• Add title attribute to MR list diff stats (merge request)
• Add back refetchQueries to placeholder_actions (merge request)
• De-emphasize required approvals in sidebar (merge request)
• Replace label fuzzy search with exact search for VSD (merge request) GitLab Enterprise Edition
• Transition vulnerability feedback to gitlab_sec (merge request) GitLab Enterprise Edition
• Remove webauthn_without_totp feature flag (merge request)
• Add feature flag for zoekt index circuit breakers (merge request) GitLab Enterprise Edition
• Move model registry UI away from modals into pages (merge request)
• Backfill project_id on Ci Stages (merge request)
• Crud: Migrate design tokens to use section tokens (merge request)
• Add organization_id to OAuth tables (merge request)
• Prepare async fk validation for p_ci_builds.upstream_pipeline_id (merge request)
• Reorder note actions (merge request)
• Sync security_policies when project is added to group (merge request) GitLab Enterprise Edition
• Remove error message if replication not enabled (merge request) GitLab Enterprise Edition
• Bump Gitaly gem to 17.5.0.pre.rc1 (merge request)
• Implement new Duo Pro trial widget design (merge request) GitLab Enterprise Edition
• Update CI templates for Browser Performance Testing (merge request)
• Put Geo::MetricsUpdateWorker behind a feature flag (merge request) GitLab Enterprise Edition
• Remove set_delete_failed_container_repository flag (merge request)
• Remove ci_hidden_variables ff (merge request)
• Surface which unspecified stage was incorrectly chosen (merge request)
• Show the vulnerability report even if 0 vulnerabilities (merge request)
• Add the bootstrap command to the agent creation modal by @antonkalmykov (merge request)
• Improve SBoM search performance with a inverted index (merge request)
• Update empty states on group landing page (merge request)
• Finalize rename of ::Abuse workers to ::AntiAbuse bounded context (merge request)
• Rename duoProAssignedUsersCount GraphQL field (merge request) GitLab Enterprise Edition
• Back up secrets.yml if it changes (merge request)
• Update pipeline mini graph upstream/downstream (merge request)
• Require password to delete WebAuthn devices (merge request)
• Work item hierarchy - Prevent dropping in child when type is not allowed (merge request)
• Roadmap - Expand caret does not display if no children in timeframe (merge request) GitLab Enterprise Edition
• Identify masked variable output clearly (merge request)
• Adding limit constraints on frameworks and requirements (merge request) GitLab Enterprise Edition
• Use helpPagePath to render container registry documentation links by @antonkalmykov (merge request) GitLab Enterprise Edition
• Show confidential action disabled when unavailable (merge request)
• Add "skipped" as valid state for commit status API by @marthyn.elzes (merge request)

Deprecated (1 change)

• Deprecate GitLab chart NGINX controller image v1.3.1 (merge request)

Removed (27 changes)

• Remove scan_execution_pipeline_worker feature flag (merge request)
• Remove dead legacy pipeline mini graph code (merge request)
• Remove faulty async index definitions (merge request)
• Removed feature flag (merge request)
• Remove commented code (merge request)
• Remove confidence column from vulnerability_occurrences (merge request)
• Remove generate description rails feature flag (merge request)
• Removes finalized BBM for project stats (merge request)
• Remove BAS security configuration option (merge request) GitLab Enterprise Edition
• Remove stepper in policy editor (merge request) GitLab Enterprise Edition
• Removes finalized background migration (merge request)
• Cleanup duo_free_access_ending_banner feature flag (merge request)
• Drop old temporary vulnerability management indices (merge request)
• Drop user_canonical_emails table (merge request)
• Remove vulnerability_occurrence_pipelines table and code (merge request) GitLab Enterprise Edition
• Remove tmp index from vulnerability_reads for bbm (merge request) GitLab Enterprise Edition
• Remove namespace_id from vulnerability_reads table (merge request)
• Remove database table packages_composer_cache_files (merge request)
• Remove feature flag and code combining queries (merge request)
• Remove sharding key issue url keys (merge request)
• Remove Packages::Composer::CacheFile and related code (merge request)
• Delete no longer used BBM code ahead of Sec Decomposition (merge request)
• Remove labels parameter (merge request) GitLab Enterprise Edition
• Remove unused vulnerability header CSS (merge request)
• Clean up ci_require_credit_card_on_trial_plan feature flag (merge request) GitLab Enterprise Edition
• Remove cross join suppression ahead of sec-decomposition (merge request) GitLab Enterprise Edition
• Remove user canonical emails (merge request)

Security (15 changes)

• Update rails-related gems in gems folder (merge request)
• Removed id from authorize buttons and added specs
• Prevent agent access via unconfirmed or disallowed group members
• Details of blocking merge request can be exposed via list
• Remove is-unsafe-link from product analytics tables to prevent XSS
• HTML injection in vulnerability Code flow leads to XSS on self hosted instances
• Use custom adapter for parsing FogBugz XML
• Update nokogiri to fix recent CVEs (merge request)
• Limit ProcessCommitWorker by number of branches (merge request)
• Update rexml to fix CVE-2024-49761 (merge request)
• Bump rack minor versions to patch CVEs (merge request)
• Fixed HTML injection in Global Search bug - renamed branch
• Limit max size of manifest file upload
• Update rexml to fix CVE-2024-41946 (merge request)
• Set Global timeout for Regexp to prevent ReDOS (merge request)

Performance (17 changes)

• Set PipelineProcessWorker to use sticky data consistency for main db (merge request)
• Optimize the upload confirmation endpoint in the virtual registries (merge request)
• Default to sticky for Ci::BuildFinishedWorker (merge request)
• Use CTE for Group access_level search (merge request)
• Prepare index for faster search build name (merge request)
• Optimize: custom ability verification (merge request) GitLab Enterprise Edition
• Enable CI kubernetes variables optimization for pipeline creation (merge request)
• Use :delayed or :sticky data_consistency for cleanup policy workers (merge request)
• Use sticky data consistency for InitialPipelineProcessWorker by default (merge request)
• Optimize: association loading for RepositoryController (merge request)
• Remove permissions JSONB column from the condition (merge request) GitLab Enterprise Edition
• Update import_export_uploads sharding (merge request)
• feat: Update Occurrence group scope to rely off traversal_ids (merge request) GitLab Enterprise Edition
• Create multi not null constraint for exports (merge request)
• Optimization: don't load a User when user_id is missing (merge request)
• Optimization: don't load group if not needed (merge request)
• Improve performance of issues autocomplete (merge request)

Other (258 changes)

• Backfill project organization_id column (merge request)
• Add non id primary key support for backfill (merge request)
• Remove dependency_list_exports from wip (merge request)
• Unquarantine project subscriptions spec (merge request) GitLab Enterprise Edition
• Quarantine a flaky test (merge request)
• Add PIPL email sent timestamp (merge request)
• Add models and initial ability for admin related custom roles (merge request)
• Quarantine test suite (merge request) GitLab Enterprise Edition
• Remove orphaned managers from ci_runner_machines_687967fa8a on .com (merge request)
• Remove FF owasp_top_10_null_filtering (merge request) GitLab Enterprise Edition
• Finalize migration BackfillSbomOccurrencesVulnerabilitiesProjectId (merge request)
• Cleanup monolith prompt for glab_ask_git_command (merge request)
• Add NOT NULL for sharding key on security_scans (merge request)
• Quarantine flaky spec (merge request) GitLab Enterprise Edition
• Finalize migration BackfillPkgsDebianProjectDistributionKeysProjectId (merge request)
• Use SessionMap for tracking per-db primary/replica usage (merge request)
• Finalize migration BackfillPackagesDebianPublicationsProjectId (merge request)
• Quarantine a flaky test (merge request)
• Finalize migration BackfillReleaseLinksProjectId (merge request)
• Finalize migration BackfillRelatedEpicLinksGroupId (merge request)
• Fix Layout/LineLength offenses by @ikelax (merge request)
• Model registry: Fix position of actions ellipsis (merge request)
• Remove current partition feature flags (merge request)
• Elasticsearch migration: Backfill correct_work_item_type_id (merge request) GitLab Enterprise Edition
• Quarantine a flaky test (merge request)
• Finalize migration BackfillPackagesDebianGroupDistributionKeysGroupId (merge request)
• Finalize migration BackfillPackagesBuildInfosProjectId (merge request)
• Finalize migration BackfillOperationsStrategiesUserListsProjectId (merge request)
• Protected containers: Remove field "Minimum access level for delete" by @gerardo-navarro (merge request)
• Calls alter_cell_sequences_range rake from db:configure (merge request)
• Finalize backfill_vulnerability_state_transitions_project_id bbm (merge request)
• Add custom access denied page for ultimate trials in-app (merge request) GitLab Enterprise Edition
• Regenerate RuboCop TODO files (merge request)
• Add NOT NULL for sharding key on dependency_list_exports (merge request)
• Quarantine a flaky test (merge request)
• Finalize migration BackfillMergeRequestAssigneesProjectId (merge request)
• Add issues.correct_work_item_type FK (merge request)
• Add tmp issues.correct_work_item_type_id indexes (merge request)
• Update postgres_sequences view (merge request)
• Protected packages: Remove scope :matching_package_protection_rules by @gerardo-navarro (merge request)
• Quarantine a flaky test (merge request)
• Finalize migration BackfillMergeRequestContextCommitsProjectId (merge request)
• Finalize migration BackfillMergeRequestBlocksProjectId (merge request)
• Finalize migration BackfillOperationsStrategiesProjectId (merge request)
• Add and backfill work_item_types.old_id column (merge request)
• Check if user can create package in npm create package service by @gerardo-navarro (merge request)
• Better extraction of variable and rubocop by @gerardo-navarro (merge request)
• Change data consistency for workers maintained by integrations (merge request)
• Finalize migration BackfillEpicUserMentionsGroupId (merge request)
• Use p_ci_build_tags for jobs queuing (merge request)
• Fix Layout/LineLength offenses by @ikelax (merge request)
• Quarantine a flaky test (merge request)
• Finalize migration BackfillOperationsFeatureFlagsIssuesProjectId (merge request)
• Finalize migration BackfillIssueLinksNamespaceId (merge request)
• Use sidekiq_interruptions_exhausted in Direct Transfer jobs (merge request)
• Remove add_on_purchase_expires_on feature flag (merge request) GitLab Enterprise Edition
• Revert caching authorized_projects (merge request)
• Quarantine a flaky test (merge request)
• Requeue migration security findings (merge request)
• Fix Layout/LineLength offenses by @ikelax (merge request)
• Backfill embeddings for work items (merge request) GitLab Enterprise Edition
• Finalize BackfillProjectIdToDependencyListExports (merge request)
• Elasticsearch: Migration to add work item type correct id (merge request) GitLab Enterprise Edition
• Use p_ci_pipelines by default (merge request)
• Remove prompt migration feature flags (merge request) GitLab Enterprise Edition
• Quarantine a flaky test (merge request)
• Finalize migration BackfillDraftNotesProjectId (merge request)
• Finalize migration BackfillDesignManagementVersionsNamespaceId (merge request)
• Finalize migration BackfillDesignManagementRepositoriesNamespaceId (merge request)
• Finalize migration BackfillWorkspaceVariablesProjectId (merge request)
• Fix Layout/LineLength offenses by @ikelax (merge request)
• Use 24 hours lease time (merge request) GitLab Enterprise Edition
• Fix sidekiq warning for ElasticsearchIndexedWorker by @gerardo-navarro (merge request) GitLab Enterprise Edition
• Fix Layout/ExtraSpacing offenses by @mr1chter (merge request)
• Finalize BackfillProjectIdToSecurityScans (merge request)
• Create new internal path for AddOnPurcahse (merge request) GitLab Enterprise Edition
• Groups::DeployTokens::RevokeService should return ServiceResponse by @nwittstruck (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Finalize migration BackfillDoraDailyMetricsProjectId (merge request)
• Finalize migration BackfillDesignManagementDesignsNamespaceId (merge request)
• Add desired sharding key (merge request)
• Create a new zpekt scheduling task repo_to_index_check (merge request) GitLab Enterprise Edition
• Add desired sharding key (merge request)
• Add policy toggle unblock_rules_using_scan_execution_policies (merge request) GitLab Enterprise Edition
• Cleanup CreateIterableTriggersWorker class and instances (merge request) GitLab Enterprise Edition
• Cleanup duo enterprise rollout feature flags (merge request) GitLab Enterprise Edition
• Use lock_key for BulkRefreshUserAssignmentsWorker (merge request) GitLab Enterprise Edition
• Regenerate RuboCop TODO files (merge request)
• Add pipl_users table (merge request) GitLab Enterprise Edition
• Protected packages: Add tests for pypi push protection with deploy token by @gerardo-navarro (merge request)
• Mark 20240410193847 as obsolete (merge request) GitLab Enterprise Edition
• Introduce histogram for ApplicationRateLimiter (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Finalize migration BackfillDefaultBranchProtectionSettings (merge request)
• Finalize migration BackfillDastSiteProfileSecretVariablesProjectId (merge request)
• Finalize migration BackfillDastProfilesTagsProjectId (merge request)
• Finalize migration BackfillWorkItemParentLinksNamespaceId (merge request)
• Finalize migration BackfillJiraTrackerDataProjectKeys (merge request)
• Fix Lint/UselessNumericOperation offenses by @ksp_1306 (merge request)
• Fix Layout/LineLength offenses by @ikelax (merge request)
• Create new WorkflowsInternal API for ai_workflows scope (merge request)
• Fix Style/IfUnlessModifier offences by @divyamtayal (merge request)
• Change data consistency for workers maintained by permissions (merge request)
• Fix Layout/LineLength offenses by @ikelax (merge request)
• Add service ping to support tracking runner maintenance notes (merge request)
• Add work item weight sources table (merge request)
• Finalize migration BackfillWikiRepositoryStatesProjectId (merge request)
• Fix Layout/LineLength offenses by @ikelax (merge request)
• Fix Layout/LineLength offenses by @ikelax (merge request)
• Remove the trial boolean qualification for ultimate trials (merge request) GitLab Enterprise Edition
• Fix Style/IfUnlessModifier offences by @divyamtayal (merge request)
• Remove expired cut off date feature flag (merge request)
• Make to-do item spelling in UI consistent (merge request) GitLab Enterprise Edition
• Update Dependency List docs (merge request) GitLab Enterprise Edition
• Remove trial column observance from the eligible trial query (merge request) GitLab Enterprise Edition
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Finalize migration PopulateTopicsSlugColumn (merge request)
• Add sharding_key_issue_url for manually backfilled (merge request)
• Log relation name when exporting projects (merge request)
• Fix Layout/LineLength offenses by @ikelax (merge request)
• Add and backfill namespace_id for analytics_cycle_analytics_value_stream (merge request)
• Remove custom_models_vue_app feature flag (merge request) GitLab Enterprise Edition
• Quarantine a flaky test (merge request)
• Finalize migration UpdateSbomOccurrencesComponentNameBasedOnPep503 (merge request)
• Fix Layout/LineLength offenses by @ikelax (merge request)
• Fix Style/CombinableLoops offenses by @JonstonChan (merge request)
• Remove custom_models_feature_settings_vue_app feature flag (merge request) GitLab Enterprise Edition
• Add ci_deleted_objects#project_id not null constraint (merge request)
• Mark 20240213091440 as obsolete (merge request) GitLab Enterprise Edition
• chore: Adds additonal properties in duo workflow event definitions (merge request) GitLab Enterprise Edition
• Move base integration code to a separate module (merge request)
• Track worker concurrency using Redis hash (merge request)
• Update instance_integrations table to match integrations schema (merge request)
• GitLab pages: Fix rubocop issues in certain files by @gerardo-navarro (merge request)
• Add namespace_details.deleted_at column (merge request)
• Exclude qa sbom fixtures from dependency scanning (merge request)
• Add RequeueBackfillApprovalProjectRulesProtectedBranchesProjectId (merge request)
• Change data consistency for workers maintained by not_owned (merge request)
• Remove sync_traversal_ids_nowait feature flag (merge request)
• Finalize migration DeleteOrphansApprovalProjectRules2 (merge request)
• Fix Gitlab/StrongMemoizeAttr offenses (merge request)
• Quarantine a flaky test (merge request)
• Finalize migration BackfillDastScannerProfilesBuildsProjectId (merge request)
• Finalize migration BackfillDastProfilesPipelinesProjectId (merge request)
• Finalize migration BackfillAlertManagementAlertMetricImagesProjectId (merge request)
• Support data consistency overrides for specific db in ApplicationWorker (merge request)
• Fix Style/IfUnlessModifier offences by @divyamtayal (merge request)
• Topology Service CellService client (merge request)
• Log when placeholder users are created (merge request)
• Finalize BackfillPCiRunnerMachineBuildsProjectId migration (merge request)
• Update seed factory exclusion (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Add created_by and updated_by to custom fields (merge request)
• Use exclusive lease for resuming job processing (merge request)
• Finalize migration BackfillDastPreScanVerificationsProjectId (merge request)
• Finalize migration BackfillAuditEventsStreamingEventTypeFiltersGroupId (merge request)
• Finalize migration BackfillAlertManagementAlertUserMentionsProjectId (merge request)
• Finalize migration BackfillAlertManagementAlertAssigneesProjectId (merge request)
• Finalize BackfillRunnerTypeAndShardingKeyIdOnCiRunnerManagers (merge request)
• Enqueue migration to fix canceling attributes for CI jobs (merge request)
• Mark 20240130154724 as obsolete (merge request) GitLab Enterprise Edition
• Check if user can create package in pypi create package service by @gerardo-navarro (merge request)
• Update to add sharding key (merge request)
• Protected packages: Return ServiceResponse for CreateConanPackageService by @gerardo-navarro (merge request)
• Change data consistency for workers maintained by importers (merge request)
• Fix docs link in UI (merge request) GitLab Enterprise Edition
• Add missing test for method #consume_event in Subscription by @gerardo-navarro (merge request)
• Drop search_namespace_index_assignments and search_indices tables (merge request)
• Fix Layout/LineLength offenses by @ikelax (merge request)
• Quarantine a flaky test (merge request)
• Temporarily unapprove MR for code owner rules to sync (merge request) GitLab Enterprise Edition
• Use SessionMap for tracking per-db primary/replica usage (merge request)
• Use project_id as sharding key for packages_dependencies table (merge request)
• Finalize migration BackfillBoardsEpicBoardLabelsGroupId (merge request)
• Change data consistency for workers maintained by auto_devops (merge request)
• Improve test performance of conan request tests by @gerardo-navarro (merge request)
• Change ultimate trial select namespace form language for duo (merge request) GitLab Enterprise Edition
• Remove the FF zoekt_initial_indexing_task (merge request) GitLab Enterprise Edition
• Refactor Token Identification by @nwittstruck (merge request)
• Add opensource limit to pages deployments limit (merge request)
• Mark 20240130215043 as obsolete (merge request) GitLab Enterprise Edition
• Finalize the backfill user details migration (merge request)
• Finalize BackfillShardingKeyIdOnCiRunners background migration (merge request)
• Add NOT NULL for sharding key on agent_activity_events (merge request)
• Improve sharding key spec (merge request)
• Add NOT NULL for sharding key on subscription_user_add_on_assignments (merge request)
• Cleanup group_protected_branches feature flag (merge request)
• Add and backfill project_id for security_findings (merge request)
• Remove search_indices table related code (merge request) GitLab Enterprise Edition
• Fixed rubocop space_inside_parens by @b310-jannik (merge request)
• Fix sidekiq warning for MergeRequests::RemoveUserApprovalRulesWorker by @gerardo-navarro (merge request)
• Bump issues bigint conversion cols removable data (merge request)
• Remove unnecessary ExclusiveLeaseHelpers from spec by @nwittstruck (merge request)
• Use AssignResourceFromResourceGroupWorker instead of V2 (merge request)
• Quarantine a flaky test (merge request)
• Add foreign key constraints to organization_users (merge request)
• Prepare async index creation for issues.correct_work_item_type_id (merge request)
• Introduce a checking state for approvals mergeability check (merge request) GitLab Enterprise Edition
• Remove the search_issues_uses_work_items_index ff (merge request) GitLab Enterprise Edition
• Mark 20240123181031 as obsolete (merge request) GitLab Enterprise Edition
• Projects::Settings::RepositoryController#show: re-enable query limit (merge request)
• Mark 20240130144625 as obsolete (merge request) GitLab Enterprise Edition
• Set retention period of 1 month for web_hook_logs (merge request)
• Validate ci_job_variables#project_id constraint (merge request)
• Regenerate RuboCop TODO files (merge request)
• Cleanup allow_protected_branches_for_group feature flag (merge request)
• GitLab Pages: Move error handling to model Gitlab::LetsEncrypt::Order by @gerardo-navarro (merge request)
• Remove ignore rule for identifier_external_ids column (merge request) GitLab Enterprise Edition
• Finalize BackfillSubscriptionUserAddOnAssignmentsOrganizationId (merge request)
• Add NOT NULL for sharding key on approval_group_rules_users (merge request)
• Emit concurrency limit stats in background sampler (merge request)
• Change data consistency for workers maintained by source_code_manageme (merge request)
• Mark 20240219161432 as obsolete (merge request) GitLab Enterprise Edition
• Replace ci_build_trace_metadata with dynamic partitions (merge request)
• Delete orphaned pipeline variables (merge request)
• Update work_item_types FKs to UPDATE CASCADE (merge request)
• Change data consistency for workers maintained by user_profile (merge request)
• Mark 20240119130539 as obsolete (merge request) GitLab Enterprise Edition
• Ignore last_activity_on column (merge request)
• Finalize migration BackfillBoardsEpicUserPreferencesGroupId (merge request)
• Replace ci_pipelines_config with dynamic partitions (merge request)
• Remove ignore state_changed_at_pipeline_id rule (merge request) GitLab Enterprise Edition
• Remove FF ci_variables_optimization_for_yaml_and_node (merge request)
• Finalize BackfillDeployTokensShardingKey background migration (merge request)
• Finalize DeleteOrphanedDeployTokens background migration (merge request)
• Allow the day 0 option of the trial widget to still show as active (merge request) GitLab Enterprise Edition
• Use project_id as sharding key for packages_npm_metadata_caches table (merge request)
• Drop vulnerability_count column from project_statistics table (merge request)
• Updating Topology Service Client Gem to d88ee3c (merge request)
• Suppresses Composite PK warning for Security::Finding (merge request) GitLab Enterprise Edition
• Reduce frequent nodes update (merge request) GitLab Enterprise Edition
• Add and backfill group_id for dependency_proxy_manifest_states (merge request)
• Remove the search_issues_uses_work_items_index ff (merge request) GitLab Enterprise Edition
• Mark 20240201164432 as obsolete (merge request) GitLab Enterprise Edition
• Change data consistency for workers maintained by devops_reports (merge request)
• Mark 20240208160152 as obsolete (merge request) GitLab Enterprise Edition
• Add and backfill group_id for dependency_proxy_blob_states (merge request)
• Add and backfill project_id for container_repository_states (merge request)
• Remove cross join suppression from vuln create service (merge request) GitLab Enterprise Edition
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Finalize migration BackfillComplianceFrameworkSecurityPoliciesProjectId (merge request)
• Drop index_for_owasp_top_10_group_level_reports idx (merge request)
• Use Job::Setter to indicate resumed job for concurrency limiting (merge request)
• Index namespace historical vulnerability statistics table (merge request)
• Remove unused Users::RecordLastActivityWorker (merge request)
• Remove block_password_auth_for_saml_users FF and the accompanying code (merge request) GitLab Enterprise Edition
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)

17.5.5 (2025-01-08)

Fixed (2 changes)

• Fix ability to use password for Git when password for Web is disabled
• Backport bugfix for diff_files highlighting

Security (4 changes)

• Prevent cyclic reference in work item hierarchy widget from frontend (merge request)
• Allow external_provider config take precedence over external_groups (merge request)
• Filter out sensitive parameters on Auth logs (merge request)
• Don't allow unauthorized users to close issues automatically (merge request)

17.5.4 (2024-12-10)

Fixed (1 change)

• Fix 401 errors when installing the GitLab for Jira app

Security (11 changes)

• Add timeout around Parslet in template parser (merge request)
• Add authorization check to protectableBranches field (merge request)
• Check harbor name & digest for path traversal (merge request)
• Ignore titles for GFM links in rich text editor (merge request)
• Restrict user and group creation when same pages unique domain exist (merge request)
• DoS by repeatedly sending unauthenticated requests for diff-files of a commit or merge request (merge request)
• Add query to filter_parameters (merge request)
• Added invalid redirect fragment check (merge request)
• Make confidential threads unresolvable via new issue (merge request)
• Do not set session cookie for /v2 endpoints in the response (merge request)
• HTML injection in vulnerability details, leads to XSS on self hosted servers (merge request)

17.5.3 (2024-11-26)

Fixed (1 change)

• Ensure auto_merge_enabled is set when validating merge trains GitLab Enterprise Edition

Security (6 changes)

• Add size check for harbor registry (merge request)
• Adding JobArtifactReport class to pre-emptively validate job artifacts (merge request)
• Fix: unsubscribe from actioncable channel when PAT is revoked (merge request)
• Allow a LFS token to be used only for LFS related requests (merge request)
• Fix possible DOS with TOML file parsing (merge request)
• Move allow_access_with_scope to class level (merge request)

17.5.2 (2024-11-12)

Fixed (4 changes)

• Fix group wiki activity events breaking the user feed
• Add param filtering to avoid error while saving project settings (merge request) GitLab Enterprise Edition
• Fix new project group templates pagination GitLab Enterprise Edition
• Update pdf worker file path in pdf viewer

Security (7 changes)

• Add missing project_id for build_chat_data (merge request)
• Use custom adapter for parsing FogBugz XML (merge request)
• Removed id from authorize buttons and added specs (merge request)
• HTML injection in vulnerability Code flow leads to XSS on self hosted instances (merge request)
• Remove is-unsafe-link from product analytics tables to prevent XSS (merge request)
• Details of blocking merge request can be exposed via list (merge request)
• Prevent agent access via unconfirmed or disallowed group members (merge request)

Performance (1 change)

• Remove permissions JSONB column from the condition

17.5.1 (2024-10-22)

Security (2 changes)

• Fixed HTML injection in Global Search bug (merge request)
• Limit max size of manifest file upload (merge request)

17.5.0 (2024-10-16)

Added (145 changes)

• Add X-Forwarded-To to allowed headers for email ingestion by @divyamtayal (merge request)
• Search API: Merge request support for title search_as_you_type (merge request) GitLab Enterprise Edition
• Added the group select to the global timelogs report by @zillemarco (merge request)
• Add global work item epics feature flag (merge request) GitLab Enterprise Edition
• Add support for updating abuse report notes (merge request)
• Audit merged MRs (merge request) GitLab Enterprise Edition
• Add user level AI metrics API (merge request) GitLab Enterprise Edition
• Reschedule BackfillPCiRunnerMachineBuildsProjectId migration (merge request)
• Backfill runner_type, sharding_key_id columns on ci_runner_machines (merge request)
• Add sharding key ci_pipeline_chat_data.project_id (merge request)
• Add customize jira issue setting (merge request) GitLab Enterprise Edition
• Create todos for expired SSH keys (merge request)
• Implement project compliance center (merge request) GitLab Enterprise Edition
• Add search button back to the header gated by feature flag (merge request)
• History rewrite: send emails after asynchronous processing (merge request)
• Add Project.projectComplianceStandardsAdherence field (merge request) GitLab Enterprise Edition
• Add Project.projectComplianceStandardsAdherence field (merge request) GitLab Enterprise Edition
• Allow disabling password auth for SSO users (merge request)
• Add download button to a health-check page (merge request) GitLab Enterprise Edition
• Release project-level security exclusions feature (merge request) GitLab Enterprise Edition
• Directly ingest emails by custom email in To header (merge request)
• Add migrate_memberships to BulkImportEntities (merge request)
• Ignore column vulnerablity_count in project_statistics table (merge request)
• Add custom license to license widget (merge request) GitLab Enterprise Edition
• Update Saml NameID related authentication errors (merge request) GitLab Enterprise Edition
• Add /help slash command (merge request) GitLab Enterprise Edition
• Integrate SD Exclusions with Scan Diffs feature (merge request) GitLab Enterprise Edition
• Create audit event for container_repository_created (merge request) GitLab Enterprise Edition
• Document new API endpoint POST /deploy_keys (merge request)
• Pull mirror API: extend response with mirror related fields (merge request)
• Add update event handler for security policies (merge request) GitLab Enterprise Edition
• Persist additional context in chat history (merge request) GitLab Enterprise Edition
• Model registry: Metrics for pull and push package (merge request)
• Add runner_type, sharding_key_id columns to ci_runner_machines (merge request)
• Allow setting of weight on work item create (merge request) GitLab Enterprise Edition
• Restoration of object storage through gitlab-backup-cli (merge request)
• Add FK on events.personal_namespace_id (merge request)
• Create AbuseReportLabelType GraphQL type (merge request)
• Changed feature flag type from wip to beta (merge request) GitLab Enterprise Edition
• Introduce notes and notes_internal to WorkItems by @joe-snyder (merge request) GitLab Enterprise Edition
• Changes for allowed_email_domain update audit event (merge request)
• Add migration and model for max retries and backoff (merge request)
• Added service ping metric for member management enabled (merge request) GitLab Enterprise Edition
• Add members activity tracker worker (merge request) GitLab Enterprise Edition
• Show location and ISP in sign in from new location email by @shangsuru (merge request)
• Add project.mergeRequestViolations field on project type (merge request) GitLab Enterprise Edition
• Added new table and API for Workflow Events (merge request) GitLab Enterprise Edition
• Enable edit_branch_rules feature falg by default (merge request)
• Add job_token_policies column to CI job token allowlist (merge request)
• Add work_item_epics_ssot feature flag (merge request) GitLab Enterprise Edition
• Update GitLab Pages version (merge request)
• Alert success or file errors with model/version creation (merge request)
• Remove pypi_extract_pypi_package_model feature flag (merge request)
• Model Registry ability to delete experiment (merge request)
• Display page header and subheader (merge request) GitLab Enterprise Edition
• Add a GraphQL mutation for updating OrganizationUser (merge request)
• Adds a cop and a generator to initialize bigint conversion (merge request)
• Add search argument to contributed projects GraphQL query (merge request)
• Add min_access_level and programming_language_name arguments (merge request)
• Add audit events for SD Exclusions on create, update and delete (merge request) GitLab Enterprise Edition
• Add programming language filter to contributed projects GraphQL query (merge request)
• Model Registry ability to delete candidate (merge request)
• Create merge request dependency api endpoint (merge request) GitLab Enterprise Edition
• Add async index to partition table (merge request)
• Add instance level job token application settings (merge request)
• Add async index to partition table (merge request)
• Expose code suggestion events on GraphQL (merge request) GitLab Enterprise Edition
• Add sharding_key_id to ci_runners table (merge request)
• Introduce group-level protected branches (merge request) GitLab Enterprise Edition
• Release "allow anyone to pull" feature for terraform modules (merge request)
• Update API and docs to account for non-billable promotions (merge request) GitLab Enterprise Edition
• Populate personal namespace for events (merge request)
• Add ml-candidate-metadata sharding-key (merge request)
• Add aiFeatureSettings GQL query (merge request) GitLab Enterprise Edition
• Ingest identifier_names of vulnerability_reads (merge request)
• Auto-ban duplicate users when a user is banned (merge request)
• Add new project redirect route to spec (merge request)
• Add Duo permission ability to vulnerability report (merge request) GitLab Enterprise Edition
• Add UserActivity class (merge request) GitLab Enterprise Edition
• Add a link to navigate to the CI/CD analytics on the pipelines page by @antonkalmykov (merge request)
• Enable CI job token authorizations log (merge request)
• Model Registry ability to load model (merge request)
• Add migrate_memberships to bulk_import_config (merge request)
• Add duo free access ending alert banner (merge request) GitLab Enterprise Edition
• Delete stale npm metadata caches with background migration (merge request)
• Add suffix strategy selector (merge request) GitLab Enterprise Edition
• Save draft data in storage (merge request)
• Add ability to remove resolved vulnerabilities (merge request) GitLab Enterprise Edition
• Add description field environments API (merge request)
• Expose has_vulnerability_resolution via GraphQL (merge request) GitLab Enterprise Edition
• Add description text field to environment details (merge request)
• Add description field to environment (BE & DB) (merge request)
• Create the snooze and un-snooze todos mutations (merge request)
• Filter merge trains by branch param (merge request) GitLab Enterprise Edition
• Introduce a delete MR dependency api endpoint (merge request) GitLab Enterprise Edition
• Add include_personal argument to contributed projects GraphQL query (merge request)
• GraphQL: Add aggregate field to PipelineAnalytics (merge request)
• Update Llm completion for VR suggestion (merge request) GitLab Enterprise Edition
• Add source-branch filter (merge request)
• Enable Ruby support for GitLab Advanced SAST (merge request)
• Add ingestion for EPSS data into GitLab DB (merge request) GitLab Enterprise Edition
• Remove feature flag vulnerability_resolution_ga (merge request) GitLab Enterprise Edition
• Added membership_modified_by_admin_event (merge request) GitLab Enterprise Edition
• Protected branches API: support deploy_key_id (merge request) GitLab Enterprise Edition
• Remove loose_foreign_keys_update_column_to feature flag (merge request)
• Add an empty state for MR approvals per branch (merge request) GitLab Enterprise Edition
• Adds GitlabSubscriptions::SeatAssignment model (merge request) GitLab Enterprise Edition
• Backfill for vulnerability_reads.has_vulnerability_resolution (merge request) GitLab Enterprise Edition
• Elasticsearch: Merge requests with title completion (merge request) GitLab Enterprise Edition
• Add min_access_level argument to contributed projects GraphQL query (merge request)
• Use CycloneDX SBOMs licenses in license scanner (merge request) GitLab Enterprise Edition
• Add backticks to GitHub import user mentions (merge request)
• Support for editing the model version description in the model registry (merge request)
• Add column 'max_number_of_vulnerabilities' to 'project_settings' table (merge request)
• Add RewriteHistoryWorker to asynchronously rewrite repository history (merge request)
• Protected tags API: support deploy_key_id (merge request) GitLab Enterprise Edition
• Remove work_item_epics_rollout feature flag (merge request)
• Add cron info to pipeline schedules table (merge request)
• Add subscribed argument to issues query (merge request)
• Initial checkin for Banner (merge request) GitLab Enterprise Edition
• Change relationship type of linked items via drag & drop (merge request)
• Remove references to gitlab_com_duo_pro_bulk_user_assignment (merge request)
• Add rails endpoinds for workflow status updates (merge request) GitLab Enterprise Edition
• Add event handlers for security policies changes (merge request) GitLab Enterprise Edition
• Add API endpoint to publish CI Catalog Resource Version (merge request)
• Add language filter to projects GraphQL query (merge request)
• Database changes for splitting microsoft applications (merge request)
• Add vuln counts to container regsitry page (merge request)
• Add license checks to group level work items ability checks (merge request)
• Add log fingerprint to the created issue (merge request) GitLab Enterprise Edition
• Add min_access_level argument to Projects GraphQL query (merge request)
• Add graphql mutations for project security exclusions (merge request) GitLab Enterprise Edition
• Admin API Endpoint: Token Info by @nwittstruck (merge request)
• Release "allow anyone to pull" feature for group-level maven endpoints (merge request)
• Add artifacts archive setting (merge request)
• Release "allow anyone to pull" feature for group-level NuGet endpoints (merge request)
• Delete custom_ability_admin_runners feature flag (merge request) GitLab Enterprise Edition
• Persist approval_policy_rule_id for scan_result_policy_violations (merge request) GitLab Enterprise Edition
• Move the zoekt_repository to failed if retries_left gets 0 (merge request) GitLab Enterprise Edition
• Rename and add fields additional context rest api (merge request) GitLab Enterprise Edition
• Show SBOM reports errors on the pipeline security and licenses tabs (merge request) GitLab Enterprise Edition
• Enable dependency_scanning_using_sbom_reports by (merge request) GitLab Enterprise Edition
• Add aiSelfHostedModelFeatureSettings query (merge request) GitLab Enterprise Edition
• Add merge_after attribute to MergeRequest by @Taucher2003 (merge request)
• Suspend/Resume flux reconciliation from the UI (merge request)

Fixed (132 changes)

• Protected containers: Push protection for admin users by @gerardo-navarro (merge request)
• Prevent submitting form when pressing enter in transfer location search (merge request)
• Revert "Fix Helm chart appVersion not being quoted in index.yaml" (merge request)
• Cloud Connector sync: Read license from DB (merge request) GitLab Enterprise Edition
• Revert "Merge branch 'sc1-optimise-concurrency-tracking' into 'master'" (merge request)
• Fix handling of loading secrets with empty section (merge request)
• Merge requests API: fix cache for "with_labels_details" argument (merge request)
• Labels page: Fix vertical alignment and badge (merge request)
• Prevent non-ASCII names (merge request)
• Mini Pipeline graph: Fix height of item and alignment of retry (merge request)
• Add response-content-disposition to url in Workhorse.send_url (merge request)
• PullMirrors::UpdateService: remove previous data after mirror's update (merge request) GitLab Enterprise Edition
• Update export to not hard fail when one batch export fails (merge request)
• Requeue BackfillPCiPipelineVariablesProjectId (merge request)
• Show pending project members on pending members page (merge request) GitLab Enterprise Edition
• fix: Use hash reference for resolving security finding CWE identifier (merge request) GitLab Enterprise Edition
• Fix access to job logs for anonymous users by @Taucher2003 (merge request)
• Allow self registered user to trigger user_create hook (merge request)
• Reset ci_deleted_objects#pick_up_at (merge request)
• Wrap source user reassignments in a lock (merge request)
• Fix #root_ancestor when parent_id is defined (merge request)
• Fix project_settings#has_vulnerabilities data inconsistency issue (merge request)
• Send correct namespace for the Flux resource (merge request)
• ansi2json: Handle multiple CRs in line endings by @lb90 (merge request)
• Pipeline Graph: Fix badge text color and card header in darkmode (merge request)
• Fix deeplink urls for migrated epics (merge request)
• Respect model registry and experiment visibility settings (merge request)
• Add epic to confidentiality feature (merge request) GitLab Enterprise Edition
• Flash alerts: Fix sticky position (merge request)
• Reset group callout for all seats used banner when deleting a member (merge request) GitLab Enterprise Edition
• Fix min-width of user select dropdown (merge request)
• Remove bottom padding on images (merge request)
• Remove vertical scrollbar on GLQL tables (merge request)
• Fix for Personal Projects Settings bug (merge request)
• Separate UI and API checks for user impersonation (merge request) GitLab Enterprise Edition
• Fix policy violations not being deleted properly (merge request) GitLab Enterprise Edition
• Prevent registration group creation changing registration_type (merge request) GitLab Enterprise Edition
• Delete deployed Pages on Project archive (merge request)
• Link compliance frameworks with pipeline execution policies (merge request) GitLab Enterprise Edition
• Remove go_get_handle_401_error feature flag (merge request)
• Clear draft on cancel (merge request)
• Fix project level value stream analytics default date (merge request)
• Distinct select style for user mentions in RTE (merge request)
• Only show custom emoji from current group in frequently used emoji (merge request)
• Update CycloneDX 1.5 json schema with upstream (merge request)
• Fixes package tag not being displayed (merge request)
• Groups Filter - Fix pagination tree view (merge request)
• Use error message from backend when updating member role (merge request) GitLab Enterprise Edition
• In Pages build use use_open_file instead of use_file (merge request)
• Allow Instance Admin to always create projects (merge request)
• Model Registry model versions empty state typo (merge request)
• Update haml markdown editor toolbar buttons to match Vue version (merge request)
• Recover destroyed ML model version packages (merge request)
• Fix broken wiki sidebar when slugs contain special characters (merge request)
• Drop project_id not null constraint ci_deleted_objects (merge request)
• Fix link color override with increasing specificity (merge request)
• Remove project_id FK constraint on terraform module metadata (merge request)
• Fix collapsed diff discussions expanding when adding a new discussion (merge request)
• Prevent deploy key access when owner is not a member of the project (merge request)
• Prevent approval rule from overlapping approvals count in drawer (merge request) GitLab Enterprise Edition
• Handle expired CI job artifacts with orphaned projects (merge request)
• Filter work item children and ancestors out of work item token input (merge request)
• PWA: Respect the screen rotation settings of the user device by @kurages (merge request)
• Fix flaky test (merge request)
• Do not fetch license on Duo page when SaaS (merge request) GitLab Enterprise Edition
• Fix Web IDE Oauth domain mismatch screen (merge request)
• Fix for Groups Duo Subscription Bug (merge request) GitLab Enterprise Edition
• Fix Helm chart appVersion not being quoted in index.yaml by @djhoese (merge request)
• Fix styling problems for Escalation policy rule controls (merge request) GitLab Enterprise Edition
• Allow :admin_runners to clear runners cache (merge request) GitLab Enterprise Edition
• Projects::GraphsController#charts: fix URL generation (merge request)
• Handle existing resolved ocs vulns (merge request)
• Add migration for fixing organization_id inconsistencies (merge request)
• Only create system note on color change (merge request) GitLab Enterprise Edition
• Fix flaky logger spec (merge request) GitLab Enterprise Edition
• Skip status checks for empty diff hashes (merge request) GitLab Enterprise Edition
• Fix NRE when logged out and reading merge trains via GraphQL (merge request)
• Allow reviewer unassign via quick action at MR creation by @kingjan1999 (merge request)
• Fix counting new vulnerabilities in ingestion logic (merge request) GitLab Enterprise Edition
• Fixing pipeline config issue for multiple frameworks (merge request) GitLab Enterprise Edition
• Fix authorized find in project security exclusion mutations (merge request) GitLab Enterprise Edition
• Skip new branch name validation for some keypresses (merge request)
• Remove duplicate ci status (merge request)
• Make a Vulnerability a proper todo target (merge request) GitLab Enterprise Edition
• Add auth check to delete tag endpoint (merge request)
• Handle merge when checks pass correctly in the api (merge request)
• Fix timeline style in dark mode (merge request)
• Add sass file page_bundles/todos_vue.scss (merge request)
• Adjust wording for pipeline's license tab (merge request) GitLab Enterprise Edition
• Fix logged out header for auto color mode (merge request)
• Prevent 500 errors when evaluating empty changelog configs (merge request)
• Initial commit for hide duo chat (merge request)
• Improvements to markdown "Exit full screen" button (merge request)
• Prevent footnote backref from displaying as emoji (merge request)
• Fix draft not clearing after submitting description (merge request)
• Fix error when trying to access nil commit author (via GraphQL) (merge request)
• Filter out duplicate milestone results in filter search bar (merge request)
• Prevent links in project descriptions from making project rows too wide (merge request)
• Update access level for imported protected tags (merge request)
• Fix partitioning rollback for p_ci_pipelines (merge request)
• Allow to search for todos with commit target type (merge request)
• Todos: Add namespace and project target types to GraphQL (merge request)
• Grant Auditor users :read_package ability on the group-level (merge request) GitLab Enterprise Edition
• Fix decreasing the project vulnerability counts (merge request) GitLab Enterprise Edition
• Fix Zoekt global code search by @skel2007 (merge request) GitLab Enterprise Edition
• Design management: Highlight current user handle (merge request)
• Model Registry version compatability with mlflow endpoint (merge request)
• Restore border on pipelines table (merge request)
• Fix incorrect gitlab-shell-check filename (merge request)
• Enable external status checks mutation for Projects::AllBranchesRule (merge request) GitLab Enterprise Edition
• Sync pipeline iid with subscription (merge request)
• Fix misleading UI message (merge request) GitLab Enterprise Edition
• Broadcast message styles remove manual dark mode color override (merge request)
• Remove add child console error (merge request)
• Fix truncated messages for commits (merge request)
• Allow POST to jwt/auth during maintenance mode (merge request) GitLab Enterprise Edition
• Reschedule setting vulnerability counts for projects (merge request)
• Fix page jump when reacting to work item comments (merge request)
• Fix regression not allowing clearing out runner tags (merge request)
• Fix work item skeleton loaders for extra pages (merge request)
• Send null memberRoleId instead of undefined (merge request)
• Avoid database reconnections when host disconnected from load balancer (merge request)
• Fix framework link in policy migration merge request (merge request) GitLab Enterprise Edition
• Remove extra container classes on Auto DevOps banner (merge request)
• Check commit message for issue close pattern setting (merge request)
• Initially hide final alert on model registry artifact upload (merge request)
• Consider Duo Enterprise when counting Pro users (merge request) GitLab Enterprise Edition
• Fix ci_owned_runners returning other groups (merge request)
• Ensure pipeline job items in a stage have appropriate border radius (merge request)
• Do not parse SSE events if not streaming (merge request) GitLab Enterprise Edition
• Fix N+1 in cluster agents resolver (merge request)
• Fix bug where car left after branch deletion (merge request) GitLab Enterprise Edition

Changed (205 changes)

• Add page refresh when policy type is selected (merge request) GitLab Enterprise Edition
• Remove allow_cross_joins_across_databases in finding_signature.rb (merge request) GitLab Enterprise Edition
• GraphQL: Rename CiJobsDurationStatistics to CiDurationStatistics (merge request)
• Added feature flag gate (merge request) GitLab Enterprise Edition
• UI: Do not expire direct memberships in subgroups and projects by @nwittstruck (merge request)
• Separate notes from vulnerabilities update when dismissing (merge request) GitLab Enterprise Edition
• Update Load Performance Testing templates (merge request)
• Use file icon for uploads (merge request)
• Support pages deploy jobs with names other than "pages" (merge request)
• Remove finding_resolver_use_pure_finder feature flag (merge request) GitLab Enterprise Edition
• Mark oauth_applications table as clusterwide (merge request)
• Remove references for editor field on workspaces (merge request) GitLab Enterprise Edition
• Add CI/CD Catalog wrapper to releases (merge request)
• Load first note on work items (merge request)
• Update copy for free registration paths (merge request) GitLab Enterprise Edition
• Handle mailmapped emails for ssh verified commits (merge request)
• Handle Work Item URLs in Duo Chat (merge request) GitLab Enterprise Edition
• Update license scanning documentation (merge request) GitLab Enterprise Edition
• Remove delete_otp_no_webauthn feature flag (merge request)
• Wikilinks now handle characters escpaed in title (merge request)
• Set vulnerability_exports table to gitlab_sec schema (merge request) GitLab Enterprise Edition
• Adjust toggle behaviour for runner registration token setting at group by @antonkalmykov (merge request)
• Skip CS components when parsing licenses from SBOM (merge request)
• Update pipeline mini graph variables (merge request)
• Enable FF enable_add_on_users_filtering by default (merge request)
• Improve status dropdown description (merge request) GitLab Enterprise Edition
• Process security policies only when they are changed (merge request) GitLab Enterprise Edition
• Settings block: Move collapsible button to left (merge request)
• Display an icon for closed merge requests on branches page (merge request)
• Security dashboard: Update heading to use shared component (merge request)
• Display helper text for severity group (merge request) GitLab Enterprise Edition
• Initial commit for changing admin Duo Utilization routes (merge request) GitLab Enterprise Edition
• Improve documentation spp_repository_pipeline_access settings (merge request)
• Synchronously add vulnerabilities_reads indexes (merge request)
• Remove ai_merge_request_reader_for_chat feature flag (merge request) GitLab Enterprise Edition
• Allow top level group owners to create Service Accounts in Self-Managed (merge request) GitLab Enterprise Edition
• Update GlPagination to use design tokens (merge request)
• Artifacts page: Update heading to use shared component (merge request)
• Handle permanently available deprovision parameters (merge request) GitLab Enterprise Edition
• Include HTML layouts in project export and project transfer emails by @jimender2 (merge request)
• Fix sbom scanner to work with reported licenses (merge request) GitLab Enterprise Edition
• Remove allow_cross_joins_across_databases (merge request) GitLab Enterprise Edition
• Fix Vue 3 failing test (merge request) GitLab Enterprise Edition
• Fix Vue 3 failing test (merge request) GitLab Enterprise Edition
• Duo Utilization routes setup (merge request) GitLab Enterprise Edition
• Link project_bot user deletion audit event to its resource if possible (merge request) GitLab Enterprise Edition
• Revise and update repository xray docs (merge request)
• Remove the beta badge for Secret push protection (merge request) GitLab Enterprise Edition
• Update push check and scanning gem to handle exclusions (merge request) GitLab Enterprise Edition
• Update extension for docs links in misc ruby files 2 (merge request) GitLab Enterprise Edition
• Add regex support for runner tag search (merge request)
• Hide bulk selection column when user doesn't allowed to delete artifacts by @antonkalmykov (merge request)
• CI/CD Admin: Use shared components (merge request)
• Changing RCA prompt to new prompt (merge request) GitLab Enterprise Edition
• Send trial_type param during trial generation (merge request) GitLab Enterprise Edition
• Add API support for webhook feature flag events (merge request)
• Hide blob ci status (merge request)
• Seperate gitlab_sec updates from gitlab_main transaction (merge request) GitLab Enterprise Edition
• Add conditional mapping for elasticsearch (merge request) GitLab Enterprise Edition
• Localize dates in UI (merge request)
• Convert ml_models.project_id constraint to cascade delete (merge request)
• Update extension for docs links in misc ruby files (merge request) GitLab Enterprise Edition
• Update Harbor Registry illustrations (merge request)
• Update extension for docs links in models and presenters (merge request)
• Switch to Duo Chat V2 (merge request)
• Remove security_policy_bot_shared_avatar feature flag (merge request)
• Update extension for docs links in ruby helpers (merge request)
• Add bold font for status filter (merge request) GitLab Enterprise Edition
• Remove group_access_request_webhooks feature flag by @Taucher2003 (merge request)
• Clarify 'GitLab' term in signup error message (merge request)
• Remove gl-new-card (merge request)
• Update extension for docs links in /lib ruby files (merge request)
• Fix tag icon display in the project ref selector dropdown by @antonkalmykov (merge request)
• Use a default value for the parameter that will be parsed by JSON.parse by @antonkalmykov (merge request)
• Disable heap fragmentation memory watchdog check (merge request)
• Return all linked projects/namespaces when fetching policies (merge request) GitLab Enterprise Edition
• Fix Vue 3 failing test (merge request) GitLab Enterprise Edition
• Allow filtering users on backend in RTE (merge request)
• Add probe for checks in air-gapped instances (merge request) GitLab Enterprise Edition
• Add markdown version to redis cache key (merge request)
• Allow watermarks to move from high to low for zoekt indices (merge request) GitLab Enterprise Edition
• Change duo trials duration logic (merge request) GitLab Enterprise Edition
• This MR changes layout of filters (merge request) GitLab Enterprise Edition
• Add watermark enum to zoekt indices (merge request)
• Rename config_version field in workspaces table (merge request) GitLab Enterprise Edition
• Remove default for organization_id (merge request) GitLab Enterprise Edition
• Fixes a bug with the duo free access ending banner (merge request) GitLab Enterprise Edition
• Add storage watermark to zoekt indices (merge request) GitLab Enterprise Edition
• Add keyboard nav to boards (merge request) GitLab Enterprise Edition
• Migrate Admin group edit page to use SettingsSection component (merge request)
• Update kubernates empty states illustrations (merge request)
• Split AI impact dashboard table into multiple panels (merge request) GitLab Enterprise Edition
• Add handling big content for a drawer (merge request) GitLab Enterprise Edition
• Create work item: Add dividers to items in sidebar (merge request)
• Split the Value stream dashboard table into multiple panels (merge request) GitLab Enterprise Edition
• Update extension for docs links in ci ruby files (merge request)
• Add scheduling worker to update storage used on zoekt index (merge request) GitLab Enterprise Edition
• Add conditional mapping for elasticsearch (merge request) GitLab Enterprise Edition
• Add stat cards for filtering users (merge request)
• Change the order of fork information (merge request)
• Add an option to track_event API to send events to Snowplow (merge request)
• Discover Duo Pro: Migrate to regular card (merge request) GitLab Enterprise Edition
• Update Members page (merge request)
• Use POST request to force unsubscribe by email clients (merge request)
• Update Locked Files page (merge request)
• Drop randomization_seed from database load balancing log messages (merge request)
• Remove load_balancing_disconnect_without_verify feature flag (merge request)
• Add new list between two lists on a board (merge request)
• Make roles and permissions page visible to premium (merge request) GitLab Enterprise Edition
• Show specific OmniAuth buttons in signup page (merge request)
• Consider multiple target branch pipelines for license policy (merge request) GitLab Enterprise Edition
• This MR adds extra check for policy scope (merge request) GitLab Enterprise Edition
• Backfill PATs seven_days_notification_sent_at column (merge request)
• Add integration test for group scope (merge request) GitLab Enterprise Edition
• Update Escalation Policies empty state illustration (merge request)
• Format code blocks (merge request)
• Scope ComponentsResolver to Group or Project (merge request) GitLab Enterprise Edition
• Separate gitlab_main updates from gitlab_sec updates (merge request) GitLab Enterprise Edition
• Add errors to SecurityPolicyProjectCreated subscription (merge request) GitLab Enterprise Edition
• Simplify logic to exclude rules in Scan Execution Policies (merge request) GitLab Enterprise Edition
• Finalize UpdateWorkspacesConfigVersion3 migration (merge request)
• Make tag content more ergonomic on commit list pages (merge request)
• This MR updates linked SPP query (merge request) GitLab Enterprise Edition
• Adds to RedisStore sid (merge request)
• Create loose fkeys dast_profiles_schedulus.profile_id (merge request)
• This MR fix remove button layout (merge request) GitLab Enterprise Edition
• Raise error on lock retries exhaustion (merge request)
• Add watermark enum to zoekt indices (merge request)
• Add Changelog trailer (merge request)
• Add option to skip cache with zoekt scheduling service (merge request) GitLab Enterprise Edition
• Align time tracking link size (merge request)
• Show manifest media type for container registry image tag (merge request)
• Re-enable DocumentationLinks in haml-lint (merge request)
• Remove index from SBOM tables (merge request)
• Fix yaml support for monaco-editor with vite (merge request)
• Model Registry present latest SemVer instead of ID (merge request)
• Use a label instead of strong tag in a CI job token allowlist form by @antonkalmykov (merge request)
• Small update to Linked widget help copy (merge request)
• Zoekt nodes skip tasks when over critical storage watermarks (merge request) GitLab Enterprise Edition
• Update container registry tags list toggle details icon (merge request)
• Switch from Rails.application.secrets to Rails.application.credentials (merge request)
• Ensure zoekt replica router returns distinct set of indices (merge request) GitLab Enterprise Edition
• Remove meta-programming from AutoMergeService (merge request)
• This MR fix remove button layout (merge request) GitLab Enterprise Edition
• Send add-on metrics during seat link sync (merge request) GitLab Enterprise Edition
• Set default true for pipeline mainteennce feature flag (merge request) GitLab Enterprise Edition
• Add link to error code to Duo Chat response (merge request) GitLab Enterprise Edition
• Avatar: Refactor img to use GlAvatar (merge request)
• Localize dates in UI (merge request)
• Remove legacy event tracking from Value Streams Dashboard (merge request) GitLab Enterprise Edition
• Add pages_domains not null constraint for project_id (merge request)
• Update pipeline migration UI text (merge request) GitLab Enterprise Edition
• Allow to select multiple groups with the same name in MR approval rules by @antonkalmykov (merge request)
• Use GlTable for the deployment approval settings in the add rule modal by @antonkalmykov (merge request) GitLab Enterprise Edition
• This MR adds warning for invalid policies (merge request) GitLab Enterprise Edition
• Update approval_policy_rule_id fk to nullify on delete (merge request) GitLab Enterprise Edition
• Remove cache when zoekt replica search FF is changed (merge request)
• Clean up scan_execution_policy_cache_ci_templates feature flag (merge request) GitLab Enterprise Edition
• Update Puma to 6.4.3 and patch PID reaper (merge request)
• Domain verification: Migrate to Crud (merge request)
• Let embedded videos be full width with max-width 100% (merge request)
• Remove default project_id from p_ci_finished_build_ch_sync_event (merge request) GitLab Enterprise Edition
• Update UI docs links in app/view/groups files (merge request)
• Update UI docs links in assorted files (merge request)
• Update UI docs links in app/views/shared files (merge request)
• Update UI docs links in app/view/projects files (merge request)
• Add comparison pipelines in bot comments for error cases (merge request) GitLab Enterprise Edition
• Fix Vue 3 failing test (merge request) GitLab Enterprise Edition
• Made Environments > Deployment details page mobile friendly by @antonkalmykov (merge request) GitLab Enterprise Edition
• Show group path in group selection dropdown in purchase flow (merge request) GitLab Enterprise Edition
• Renamed run pipeline button (merge request)
• ACTUALLY set the schema to gitlab_sec (merge request) GitLab Enterprise Edition
• Update pipeline migration text and link (merge request) GitLab Enterprise Edition
• Add an OPS FF to avoid flooding sentry with semver dialect errors (merge request) GitLab Enterprise Edition
• There were several problems here: (merge request) GitLab Enterprise Edition
• There were several problems here: (merge request) GitLab Enterprise Edition
• Remove beta mention in metadata database alert on registry pages (merge request)
• Fix zoekt replica group search (merge request) GitLab Enterprise Edition
• Clean up ci_conditionals_reduce_gitaly_calls feature flag (merge request)
• Commits: Migrate non-compliant Avatar sizes (merge request)
• Show an empty state when Protected Environment has no approval rules by @antonkalmykov (merge request) GitLab Enterprise Edition
• Update UI docs links in application_settings files (merge request)
• Update ffi gem to v1.17.0 (merge request)
• Split remediations query from upload deletion for decomposition (merge request) GitLab Enterprise Edition
• Do not destroy empty ML model packages (merge request)
• Finalize migration NullifyOrganizationIdForSnippets (merge request)
• Add used_storage_bytes column to zoekt indices (merge request)
• Modify the way dividers are generated (merge request)
• Remove cross DB transaction against dast_site_profile (merge request) GitLab Enterprise Edition
• Remove feature flag zoekt_create_indexing_tasks (merge request) GitLab Enterprise Edition
• Watch for k8s events changes (merge request)
• Cleanup 'locked_paths_mergeability_check' FF (merge request)
• Enable summarize_notes_with_duo by default (merge request)
• Improve messaging for pending approval invited members (merge request) GitLab Enterprise Edition
• Add loader for pipeline actions (merge request)
• Hide failed jobs widget logic (merge request)
• Tranition vulnerability_state_transitions to gitlab_sec schema (merge request) GitLab Enterprise Edition
• Localize dates within issues (merge request)
• Make pages_domains.project_id not nullable (merge request)
• Permanently delete project: Remove gl-new-card classes (merge request) GitLab Enterprise Edition
• Add popover for image and tag on vuln report page (merge request)
• Remove allow_cross_joins_across_databases (merge request) GitLab Enterprise Edition
• Only notify user who started BulkImport (merge request)
• Update dependency ai-gateway to v1.18.0 (merge request)
• Change the UX of the create model button for Model registry (merge request)

Deprecated (6 changes)

• Deprecate Legacy Epics on GraphQL (merge request) GitLab Enterprise Edition
• Adds ContainerTagsExpirationPolicy graphql type (merge request)
• GraphQL: Deprecate CiRunnerUsageByProject.ciUsedMinutes (merge request)
• GraphQL: Deprecate CiRunnerUsage.ciUsedMinutes in favor of ciDuration (merge request)
• Initial checkin for Issue 479384 (merge request) GitLab Enterprise Edition
• Deprecate namespaces addOnPurchase GraphQL field (merge request) GitLab Enterprise Edition

Removed (40 changes)

• Removed include_manual_to_pipeline_completion flag (merge request)
• Clean up account_validation_email feature flag (merge request) GitLab Enterprise Edition
• Remove identifier_external_ids column from vulnerability_reads (merge request)
• Remove cross join allowances from vuln ingestion process (merge request) GitLab Enterprise Edition
• Model Registry removed Candidates tab (merge request)
• Remove flash background colors (merge request)
• Drop zoekt_shards table (merge request)
• Remove finalized BBM that contains cross join sec decomp can't support (merge request) GitLab Enterprise Edition
• Delete migration BackfillSbomOccurrencesTraversalIdsAndArchived (merge request)
• Remove Issue Analytics broken search filters (merge request)
• Remove BBM that cannot function post Sec Decomposition (merge request)
• Remove sec-decomposition related cross join supression (merge request) GitLab Enterprise Edition
• Remove sec-decomposition related cross join suppresion (merge request) GitLab Enterprise Edition
• Delete unused BBM code (merge request) GitLab Enterprise Edition
• Elasticsearch: Reindex to remove title completion (merge request) GitLab Enterprise Edition
• Remove no longer needed cross join suppressions (merge request)
• Remove unneeded transitional cross join suppresion (merge request) GitLab Enterprise Edition
• Remove unneeded cross db interaction suppressions (merge request) GitLab Enterprise Edition
• Remove unneeded cross join suppresion (merge request) GitLab Enterprise Edition
• Drop token_with_ivs table (merge request)
• Clean up migrated prompts for self-hosted code suggestions (merge request) GitLab Enterprise Edition
• Remove cross DB access suppression from remediation creation (merge request) GitLab Enterprise Edition
• Remove transitional cross DB warning suppresion (merge request) GitLab Enterprise Edition
• Place Product Analytics admin settings behind flag by @max.woolf (merge request) GitLab Enterprise Edition
• Remove faulty async index definitions (merge request)
• Remove possibly unnecessary cross join suppresion for vuln helper (merge request) GitLab Enterprise Edition
• Remove unneeded cross DB suppression (merge request) GitLab Enterprise Edition
• Remove unneeded cross join allowances (merge request) GitLab Enterprise Edition
• Delete the emoji_webhooks feature flag (merge request)
• Remove ci_platform_metrics and related Sidekiq code (merge request)
• Remove early access checkbox (merge request) GitLab Enterprise Edition
• Remove transitional cross join allowances (merge request) GitLab Enterprise Edition
• Remove pipeline reference from state transition (merge request)
• Remove unneeded cross join allowance for sec decomposition (merge request) GitLab Enterprise Edition
• Remove DAG code (merge request)
• Remove unneeded transitional cross join suppresions (merge request) GitLab Enterprise Edition
• Drop namespace setting column toggle_security_policy_custom_ci (merge request)
• Remove ensure prepared worker (merge request)
• Remove validate_target_sha_in_user_commit_files feature flag (merge request)
• Remove ignore_columns for Packages::BuildInfo (merge request)

Security (13 changes)

• Prevent guest access to project templates
• Skip content when listing conflict files with types
• Do not create a pipeline on MR refresh if source branch was deleted
• Escape OAuth application name on authorize page
• Remove access to local requests via cube query service
• Prevent deploy keys from pushing code to an archived project
• Hide version info from unauthorized users
• Return for admin condition if user authentication with job token (merge request)
• External webhook token should be set
• Updates Summarize Comments LLM Prompt
• Hide system notes with invalid references
• Reset dependency proxy maven credentials when registry url is changed
• Implement input sanitization for SummarizeComments

Performance (11 changes)

• Update import_data sharding (merge request)
• Stop creating keep-arounds on merge base commits (merge request)
• Remove cancel_redundant_pipelines_without_hierarchy_cte feature flag (merge request)
• Use sticky data consistency for post receive worker (merge request)
• Enable CI variables optimization for pipeline creation (merge request)
• Add concurrency_limit to ProcessScanResultPolicyWorker (merge request) GitLab Enterprise Edition
• Move a field check into the query instead of the loop body (merge request)
• Add deduplication to SynScanPoliciesWorker (merge request) GitLab Enterprise Edition
• Limit count query in the events APIs (merge request)
• Remove increase_diff_file_performance feature flag (merge request)
• Cache Fog::Storage object for CI build chunks (merge request)

Other (146 changes)

• Add and backfill project_id for dast_site_profiles_builds (merge request)
• Add and backfill project_id for dast_profiles_pipelines (merge request)
• Clean up send_verification_code_to_secondary_email feature flag (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Finalize migration BackfillBoardsEpicListsGroupId (merge request)
• Add expiration wording to duo pro and enterprise trial success (merge request) GitLab Enterprise Edition
• Remove in-app trials redirect to stored user location (merge request) GitLab Enterprise Edition
• Finalize BackfillComplianceFrameworkSecurityPoliciesNamespaceId (merge request)
• refactor: Protected badge as reusable component by @gerardo-navarro (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Do not subscribe to Users::ActivityEvent (merge request)
• Create partitions for p_ci_build_trace_metadata (merge request)
• Drop issues.correct_work_item_type_id foreign key (merge request)
• Backfill migration for vulnerability_reads identifier_names (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Add db_config_database into marginalia comments (merge request)
• Avoid sidekiq warning for FlushCounterIncrementsWorker by @gerardo-navarro (merge request)
• Finalize migration BackfillBoardsEpicBoardPositionsGroupId (merge request)
• Track worker concurrency using Redis hash (merge request)
• Backfill issues.correct_work_item_type_id with correct value (merge request)
• Remove upcoming_reconciliations from spec (merge request)
• Quarantine a flaky test (merge request)
• Add trigger to update issues.correct_work_item_type_id (merge request)
• Reduce wait time for replica if worker urgency is high (merge request)
• Regenerate RuboCop TODO files (merge request)
• Add and backfill project_id for packages_composer_metadata (merge request)
• Add and backfill project_id for dast_scanner_profiles_builds (merge request)
• Use routing table name for PipelineConfig model (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Move Cop/WithoutReactiveCache to gitlab-org/gitlab by @schurzi (merge request)
• Set vulnerability_count of project_security_statistics records (merge request)
• Create partitions for p_ci_build_trace_metadata (merge request)
• Quarantine a flaky test (merge request)
• Finalize migration BackfillAuditEventsStreamingHeadersGroupId (merge request)
• Correct tag name restrictions documentation (merge request)
• Quarantine a flaky test (merge request)
• Finalize migration BackfillApprovalProjectRulesUsersProjectId (merge request)
• Protected containers: Align actor for feature flag by @gerardo-navarro (merge request)
• Add and backfill project_id for ci_secure_file_states (merge request)
• Add and backfill project_id for packages_pypi_metadata (merge request)
• Fix Style/SingleArgumentDig offences by @rutvikchandla3 (merge request)
• Add and backfill project_id for ci_pipeline_schedule_variables (merge request)
• Regenerate RuboCop TODO files (merge request)
• Add and backfill project_id for packages_rubygems_metadata (merge request)
• Quarantine a flaky test (merge request)
• Add initial schema for custom field configuration (merge request)
• Continue removal of Trial Abandonment worker (merge request) GitLab Enterprise Edition
• Cleanup of backend and E2E for pipeline_security_dashboard_graphql (merge request)
• Solve null equality in BBM that deduplicates lfs_objects_projects (merge request)
• Add and backfill project_id for pages_domain_acme_orders (merge request)
• Remove .issuable-row background in milestone's page_bundles (merge request)
• Add foreign key constraint to projects.organization_id (merge request)
• Add and backfill project_id for ci_resources (merge request)
• Quarantine a flaky test (merge request)
• Remove web_ide_oauth flag and its references (merge request)
• Finalize migration BackfillApprovalsProjectId (merge request)
• Finalize migration BackfillApprovalMergeRequestRuleSourcesProjectId (merge request)
• Change the duo pro discover page to match new wording and design (merge request) GitLab Enterprise Edition
• DB Docs are up to date (merge request)
• Add Duo Enterprise product interaction for seat assignment lead (merge request) GitLab Enterprise Edition
• Add and backfill project_id for packages_nuget_metadata (merge request)
• Remove the nodes which are offline for more than 12 hours (merge request) GitLab Enterprise Edition
• Add and backfill project_id for ci_builds_runner_session (merge request)
• Add and backfill project_id for pages_deployment_states (merge request)
• Add and backfill project_id for packages_rpm_metadata (merge request)
• Add and backfill project_id for approval_project_rules_protected_branche (merge request)
• Add and backfill project_id for packages_npm_metadata (merge request)
• Quarantine a flaky test (merge request)
• Remove pipeline_run_keyword feature flag (merge request)
• Add and backfill project_id for incident_management_pending_alert_escala (merge request)
• Introduce project_security_statistics table (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Finalize migration BackfillApprovalGroupRulesUsersGroupId (merge request)
• Quarantine a flaky test (merge request)
• Use defined constants for selector types (merge request) GitLab Enterprise Edition
• Finalize migration BackfillApprovalMergeRequestRulesProjectId (merge request)
• Finalize migration BackfillApprovalGroupRulesProtectedBranchesGroupId (merge request)
• Finalize migration BackfillAgentActivityEventsAgentProjectId (merge request)
• Fix Performance/RegexpMatch offenses by @bolah2009 (merge request) GitLab Enterprise Edition
• Fully deprecate legacy sidekiq workers for onboarding (merge request)
• Add metric to track when CVS cannot scan component (merge request) GitLab Enterprise Edition
• Quarantine a flaky test (merge request)
• Add and backfill project_id for incident_management_timeline_event_tag_l (merge request)
• Add and backfill project_id for ci_unit_test_failures (merge request)
• Mark 20231016162120 as obsolete (merge request) GitLab Enterprise Edition
• Add issues.correct_work_item_type_id column (merge request)
• Add work_item_types.correct_id column (merge request)
• Mark 20231019223356 as obsolete (merge request) GitLab Enterprise Edition
• Fix packages_packages definition file (merge request)
• Add emails notification for RewriteHistory worker (merge request)
• Add target_type to refine the query (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Drop database table compliance_checks (merge request)
• refactor: Fix rubocop offense Layout/space_inside_parens by @gerardo-navarro (merge request)
• Drop default for work_item_types.id (merge request)
• Change FF type and default enable flag (merge request) GitLab Enterprise Edition
• Redefine broken foreign keys on p_ci_pipelines (merge request)
• Add accessibility tests to todos filtering dashboard (merge request)
• Add and backfill project_id for milestone_releases (merge request)
• Mark 20231005103449 as obsolete (merge request) GitLab Enterprise Edition
• Rubocop fix by @arno_gr (merge request)
• Change default for org id (merge request) GitLab Enterprise Edition
• Fix the initial_indexing logic (merge request) GitLab Enterprise Edition
• Mark 20231130202203 as obsolete (merge request) GitLab Enterprise Edition
• Add and backfill project_id for incident_management_oncall_rotations (merge request)
• Add and backfill project_id for alert_management_alert_user_mentions (merge request)
• Remove project_analytics_dashboard_dynamic_vsd feature flag (merge request) GitLab Enterprise Edition
• Add and backfill project_id for incident_management_escalation_rules (merge request)
• Remove unused code for build tags (merge request)
• Mark 20231004124852 as obsolete (merge request) GitLab Enterprise Edition
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Mark 20240107132344 as obsolete (merge request) GitLab Enterprise Edition
• DB Docs are up to date (merge request)
• Audit list of classes in dashboard.scss by @NIKU-SINGH (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Add and backfill project_id for alert_management_alert_metric_images (merge request)
• Mark 20240104134928 as obsolete (merge request) GitLab Enterprise Edition
• Partition ci_build_trace_metadata table - 4 (merge request)
• Add and backfill project_id for ci_job_artifact_states (merge request)
• Remove obsolete Advanced search migrations (merge request) GitLab Enterprise Edition
• Remove feature flag save_policy_violation_data (merge request) GitLab Enterprise Edition
• Quarantine a flaky test (merge request)
• Mark 20231213172132 as obsolete (merge request) GitLab Enterprise Edition
• Add index for component search on Occurrences table (merge request)
• Mark 20231130152447 as obsolete (merge request) GitLab Enterprise Edition
• Quarantine a flaky test (merge request)
• Remove & clean up set_sbom_report_ingestion_errors FF (merge request)
• Quarantine a flaky test (merge request)
• Adjust signup page items for more clarity (merge request) GitLab Enterprise Edition
• Removes Unused CSS class by @NIKU-SINGH (merge request)

17.4.6 (2024-12-10)

Fixed (2 changes)

• Add param filtering to avoid error while saving project settings (merge request) GitLab Enterprise Edition
• Fix 401 errors when installing the GitLab for Jira app

Security (11 changes)

• Add timeout around Parslet in template parser (merge request)
• Add authorization check to protectableBranches field (merge request)
• Check harbor name & digest for path traversal (merge request)
• Ignore titles for GFM links in rich text editor (merge request)
• Restrict user and group creation when same pages unique domain exist (merge request)
• DoS by repeatedly sending unauthenticated requests for diff-files of a commit or merge request (merge request)
• Add query to filter_parameters (merge request)
• Added invalid redirect fragment check (merge request)
• Make confidential threads unresolvable via new issue (merge request)
• Do not set session cookie for /v2 endpoints in the response (merge request)
• HTML injection in vulnerability details, leads to XSS on self hosted servers (merge request)

17.4.5 (2024-11-26)

Security (6 changes)

• Add size check for harbor registry (merge request)
• Adding JobArtifactReport class to pre-emptively validate job artifacts (merge request)
• Fix: unsubscribe from actioncable channel when PAT is revoked (merge request)
• Allow a LFS token to be used only for LFS related requests (merge request)
• Fix possible DOS with TOML file parsing (merge request)
• Move allow_access_with_scope to class level (merge request)

17.4.4 (2024-11-12)

Fixed (4 changes)

• Fix bug where car left after branch deletion GitLab Enterprise Edition
• Ensure auto_merge_enabled is set when validating merge trains GitLab Enterprise Edition
• Update pdf worker file path in pdf viewer
• Security patch upgrade alert: Only expose to admins

Security (6 changes)

• Use custom adapter for parsing FogBugz XML (merge request)
• Removed id from authorize buttons and added specs (merge request)
• HTML injection in vulnerability Code flow leads to XSS on self hosted instances (merge request)
• Remove is-unsafe-link from product analytics tables to prevent XSS (merge request)
• Details of blocking merge request can be exposed via list (merge request)
• Prevent agent access via unconfirmed or disallowed group members (merge request)

Performance (1 change)

• Remove permissions JSONB column from the condition

17.4.3 (2024-10-22)

Fixed (1 change)

• Fix Zoekt global code search GitLab Enterprise Edition

Changed (1 change)

• Backport LabKit v1.21.2 update to fix broken dependency

Security (2 changes)

• Fixed HTML injection in Global Search bug (merge request)
• Limit max size of manifest file upload (merge request)

17.4.2 (2024-10-09)

Fixed (1 change)

• Drop project_id not null constraint ci_deleted_objects

Security (8 changes)

• Do not create a pipeline on MR refresh if source branch was deleted (merge request)
• Escape OAuth application name on authorize page (merge request)
• Prevent guest access to project templates (merge request)
• Remove access to local requests via cube query service (merge request)
• External webhook token should be set (merge request)
• Skip content when listing conflict files with types (merge request)
• Hide version info from unauthorized users (merge request)
• Prevent deploy keys from pushing code to an archived project (merge request)

17.4.1 (2024-09-24)

Fixed (2 changes)

• Fix incorrect gitlab-shell-check filename
• Check commit message for issue close pattern setting

Security (3 changes)

• Implement input sanitization for SummarizeComments (merge request)
• Hide system notes with invalid references (merge request)
• Reset dependency proxy maven credentials when registry url is changed (merge request)

17.4.0 (2024-09-18)

Added (202 changes)

• Add and backfill project_id for p_ci_runner_machine_builds (merge request)
• Allow to configure K8s ns and flux resource path in API (merge request)
• Create add-on purchases when applying an offline license (merge request) GitLab Enterprise Edition
• Add Expand and Collapse all files buttons to merge requests (merge request)
• Add group scope to policy drawer (merge request) GitLab Enterprise Edition
• Add full path to expiring group token by @shangsuru (merge request)
• Add group policy scope for SPP (merge request) GitLab Enterprise Edition
• Add a batch migration to populate detumbled_email in emails table (merge request)
• Add AI vulnerability resolution badge (merge request) GitLab Enterprise Edition
• Add GraphQL fragment and queries for project security exclusions (merge request) GitLab Enterprise Edition
• Multiple artifact uploads to model registry model versions (merge request)
• Add ci_finished_pipelines_daily_mv ClickHouse materialized view (merge request)
• Bump devfile gem to 0.0.28.pre.alpha1 (merge request)
• Create add-on purchases when applying an offline license (merge request) GitLab Enterprise Edition
• Add Reachbility Coulmn to sbom occurancy (merge request) GitLab Enterprise Edition
• Audit when job token is used for authentication (merge request) GitLab Enterprise Edition
• Update GitLab Pages version (merge request)
• Adds audit events for self-hosted model creation (merge request)
• Bring back required instance ci template setting in database (merge request) GitLab Enterprise Edition
• Refactor Issuable reply hotkey (merge request)
• Make wiki sidebar resizable (merge request)
• Implement post-migration workflow message (merge request) GitLab Enterprise Edition
• Manage uploads API by secret and filename (merge request)
• Add new update_column_to action to Loose foreign keys (merge request)
• Add toggle for spp_repository_pipeline_access in project settings (merge request) GitLab Enterprise Edition
• Retry - add personal_namespace_id column to events (merge request)
• Add new column to events for self-managed only (merge request)
• Expose k8s ns and flux resource path in API (merge request)
• Add basic graphql resources for project security exclusions (merge request) GitLab Enterprise Edition
• Adds audit events for updating self-hosted models (merge request)
• Split AccessProbe to Access and Token probe (merge request) GitLab Enterprise Edition
• Create feature flag for controlling CVS for CS (merge request) GitLab Enterprise Edition
• Add Anthropic keys pattern to secret detection (merge request)
• Logs events for self-hosted model deletion (merge request)
• Expose abuse report notes in GraphQL endpoint (merge request)
• Make the project setting spp_repository_pipeline_access cascading (merge request) GitLab Enterprise Edition
• Add setting for projects to access SPP repository to fetch PEP configs (merge request) GitLab Enterprise Edition
• Set approval_policy_rule_id for approval rules and license policies (merge request) GitLab Enterprise Edition
• Add database columns for 7+30+60 day PAT expiry notification (merge request)
• Remove feature flag pipeline_execution_policy_suffix (merge request) GitLab Enterprise Edition
• Show health status rollup data (merge request) GitLab Enterprise Edition
• Add linkable image to single vuln view (merge request)
• Implementation AiFeatureSettingUpdate GraphQL node (merge request) GitLab Enterprise Edition
• Add organization_id to sbom_component_versions (merge request) GitLab Enterprise Edition
• Prompt registry access for generate_issue_description (merge request) GitLab Enterprise Edition
• Add has_vulnerability_resolution column to vulnerability_reads (merge request) GitLab Enterprise Edition
• Introduce duo pro seat assignment email for SM (merge request) GitLab Enterprise Edition
• Log authentications using CI job token (merge request)
• Logs events when changing feature config (merge request)
• Document receptive agents (merge request)
• Add bulk create or update service for add-on purchases for SaaS (merge request) GitLab Enterprise Edition
• Logs audit event for self-hosted models usage (merge request)
• Work Item rolled up count by type (merge request) GitLab Enterprise Edition
• Add webhook events for access requests by @Taucher2003 (merge request)
• Remove elastic_index_work_items ff (merge request) GitLab Enterprise Edition
• Delete Status Check (merge request) GitLab Enterprise Edition
• Add health_check rake task (merge request) GitLab Enterprise Edition
• Add not null constraint to p_ci_pipeline_variables#project_id (merge request)
• Re-queue BBM to backfill project_id for packages dependencies (merge request)
• Allow to configure cluster agent in Environments REST API (merge request)
• Add new permission for external status (merge request) GitLab Enterprise Edition
• Add Reachbility Coulmn to sbom occurancy (merge request) GitLab Enterprise Edition
• Add bulk create or update service for add-on purchases for SaaS (merge request) GitLab Enterprise Edition
• Add and backfill project_id for p_ci_pipeline_variables (merge request)
• Set project_id for existing orphaned packages dependencies (merge request)
• Adds audit events for MlModelVersion (merge request)
• Add method to move repository to namespace in API client (merge request)
• Adds audit events for ML Models (merge request)
• Expose cluster agent in Environments REST API (merge request)
• Feature to cancel machine learning artifact imports (merge request)
• Add featureFlags to GraphQL metadata field (merge request)
• Rename and add fields additional context api (merge request) GitLab Enterprise Edition
• Add Project.dependencies and Group.dependencies queries (merge request) GitLab Enterprise Edition
• Add branch rules alert on repo setting page (merge request)
• Adds CI pipeline for duo workflow execution (merge request) GitLab Enterprise Edition
• Allow projects API to receive order_by=star_count (merge request)
• GraphQL: Merge Request add field "Closed At" by @schurzi (merge request)
• Compute policy diff before persisting security policies (merge request) GitLab Enterprise Edition
• Backfill vulnerability_count background migration (merge request)
• Add EPSS field to Vulnerability type in GraphQL (merge request) GitLab Enterprise Edition
• Create Instance Integrations table (merge request)
• Added todos_vue_application feature flag by @zillemarco (merge request)
• Adding "approver" to merge request resolver (merge request) GitLab Enterprise Edition
• Release handle_vulnerability_external_issue_link_via_events feature (merge request) GitLab Enterprise Edition
• Add backticks to username mentions (merge request)
• Create database table to store group-level allowlist entries (merge request) GitLab Enterprise Edition
• Remove generic_extract_generic_package_model feature flag (merge request)
• Add prometheus metrics for scan execution policies (merge request) GitLab Enterprise Edition
• Create database table to store project-level allowlist entries (merge request) GitLab Enterprise Edition
• Add tag details to vuln list page (merge request) GitLab Enterprise Edition
• Add tracking and some ux element tweaks (merge request) GitLab Enterprise Edition
• Add managing protected branches as custom permission (merge request) GitLab Enterprise Edition
• Enable Advanced Context for Code Suggestions (merge request) GitLab Enterprise Edition
• Add API endpoint for token associations (merge request)
• Add Duo chat sub-feature to self-hosted models settings (merge request) GitLab Enterprise Edition
• Add project_id for ci_deleted_events (merge request)
• Add and backfill project_id for p_ci_job_annotations (merge request)
• Add personal_namespace_id column to events (merge request)
• Add web-commits/public-key endpoint to get signing public key (merge request)
• Add build_project_id column to p_ci_finished_build_ch_sync_events (merge request) GitLab Enterprise Edition
• Add VSA duration data series to GraphQL (merge request) GitLab Enterprise Edition
• Add gitlab:keep_around:orphaned raketask (merge request)
• Early access program group admin opt-in (merge request) GitLab Enterprise Edition
• Add static events to the workload details (merge request)
• Export detailed membership data (merge request) GitLab Enterprise Edition
• Show Progress percentage in rollup data (merge request)
• Add project level value streams dashboard (merge request) GitLab Enterprise Edition
• Add informational tooltips to AI Impact Analytics overview tiles (merge request) GitLab Enterprise Edition
• Support finding Sbom::Occurrences via dependency names (merge request) GitLab Enterprise Edition
• Add image and tag column (merge request)
• Edit branch rule status check (merge request) GitLab Enterprise Edition
• Add new status bar and pagination model (merge request) GitLab Enterprise Edition
• Update GitLab Pages version (merge request)
• Add pipeline license count endpoint (merge request) GitLab Enterprise Edition
• Help center menu: Add privacy menu link (merge request)
• Adds check_parent_organization_match validation (merge request)
• Add support for project traces via GraphQL (merge request) GitLab Enterprise Edition
• feat: Fix body response for error log (merge request) GitLab Enterprise Edition
• Add additional context to Duo Chat REST API (merge request) GitLab Enterprise Edition
• Add user mapping membership table and model (merge request)
• Add registry id to location (merge request) GitLab Enterprise Edition
• Add licensed filters to VSA (merge request) GitLab Enterprise Edition
• Add GQL interface for project observability logs (merge request) GitLab Enterprise Edition
• Implement REST API for cluster agent url configurations (merge request)
• Prepare the foreign keys for p_ci_pipelines (merge request)
• Release Jira Service Management feature (merge request)
• Context aware quote discussion hotkey (merge request)
• Index p_ci_finished_pipeline_ch_sync_events table (merge request)
• Add WorkItemBulkUpdate mutation (merge request)
• Enable auto merge of Merge Requests (merge request) GitLab Enterprise Edition
• Adds duo workflow events and metrics (merge request) GitLab Enterprise Edition
• Create partitioned table p_ci_pipelines and attach first partition (merge request)
• Allow labels search by exact title (merge request)
• Add upload zone (merge request)
• Remove FF: bulk_add_on_assignment_refresh_worker (merge request) GitLab Enterprise Edition
• Support for editing the model version description in the model registry (merge request)
• Add and backfill project_id for ci_job_variables (merge request)
• Add frontend support for markdown in ML Model Versions (merge request)
• Update AliasResolver to work with versions (merge request)
• Implement REST API for cluster agent url configurations (merge request)
• Show Terms of Service and Privacy Policy entry within Help if defined by @bufferoverflow (merge request)
• Ingest component licenses from CycloneDX SBOMs (merge request)
• Audit topic changes on projects (merge request) GitLab Enterprise Edition
• Add official CycloneDX 1.6 JSON schema (merge request)
• Implement internal REST API for receptive agents (merge request)
• Add API endpoint for bulk usage_data sending (merge request)
• Allow to fetch related items on VSA GraphQL query (merge request) GitLab Enterprise Edition
• Add Export Subscription History button to Usage Quotas Page (merge request) GitLab Enterprise Edition
• Fix pipeline error when invalid CI and using PEP (merge request) GitLab Enterprise Edition
• Display when locked account email verification code was sent (merge request)
• Notify on assignment rejection (merge request)
• Enable Direct Transfer UI when override flag is set (merge request)
• Add resend hook event api by @lifez (merge request)
• Add REST API invited groups in a group (merge request)
• Add project view to pages usage quotas (merge request) GitLab Enterprise Edition
• Add branch rules status check (merge request) GitLab Enterprise Edition
• Allow linking work items to a new work item via GraphQL (merge request)
• Prepare async partitioning constraint for ci_pipelines (merge request)
• Create ci_finished_pipelines_daily ClickHouse tables (merge request)
• Add archived argument to projects GraphQL query (merge request)
• Set the detumble_email attribute before saving emails (merge request)
• This MR adds group policy scope (merge request) GitLab Enterprise Edition
• Add async destruction of billable members (merge request) GitLab Enterprise Edition
• Add reassignment error to Import::SourceUser (merge request)
• Link issue to metric on creation (merge request) GitLab Enterprise Edition
• Add table to store O11y trace-details when creating linked issues (merge request) GitLab Enterprise Edition
• Add published_by to CI Catalog Resource Version (merge request)
• Add endpoint with standard roles and members count for groups (merge request) GitLab Enterprise Edition
• Add GraphQL interface for linked metrics for issues (merge request) GitLab Enterprise Edition
• Release Admin Runners custom ability (merge request) GitLab Enterprise Edition
• Convert checklist item to child item in work items (merge request)
• Update GitLab Pages version (merge request)
• Exposed target path and access request data on todo GraphQL type by @zillemarco (merge request)
• Add end tutorial button to learn gitlab (merge request) GitLab Enterprise Edition
• Add Whats New section to DuoProDiscover page (merge request) GitLab Enterprise Edition
• Link issue to metric on creation (merge request) GitLab Enterprise Edition
• Support for editing the model description in the model registry (merge request)
• Add a user preference for enabling the DPoP feature per User (merge request)
• Add table to store O11y log-details when creating linked issues (merge request) GitLab Enterprise Edition
• Add backend support for markdown in ML Model Versions (merge request)
• Append year to date column headers in AI Impact table (merge request) GitLab Enterprise Edition
• Add org to sbom_components (merge request) GitLab Enterprise Edition
• Add migration to backfill project_id for packages dependencies (merge request)
• Feat: manual variables tab frontend part 2 (merge request)
• Add sharding key for personal access tokens (merge request)
• Replace gl-form-text with equivalents (merge request) GitLab Enterprise Edition
• Add migrations for import placeholder user limits (merge request)
• Add application setting for enabling receptive cluster agents (merge request)
• Add additional context to Duo Chat (merge request) GitLab Enterprise Edition
• Add Whats New section to DuoProDiscover page ... (merge request) GitLab Enterprise Edition
• Send Arkose truth data when auto-banning users (merge request)
• Add cached markdown fields to ML ModelVersion (merge request)
• Parse deprecatedProperties for SEP and add banner for custom scan (merge request) GitLab Enterprise Edition
• Validate FK for ci_pipelines.auto_canceled_by_id (merge request)
• Support for editing the model description in the GitLab model registry (merge request)
• Protected containers: Add DELETE REST API for container protection rules by @nwittstruck (merge request)
• Allow groups to disable password authentication for enterprise users (merge request) GitLab Enterprise Edition
• Add Idempotency-Key header to Webhooks by @van.m.anderson (merge request)
• Add helpers (un)prepare_partitioned_async_check_constraint_validation (merge request)
• Expose root_storage_statistics in REST API for top level groups by @nwittstruck (merge request)
• Validate FK for p_ci_builds.upstream_pipeline_id (merge request)
• Add archived argument to projects GraphQL query (merge request)

Fixed (187 changes)

• Ensure that the titles of collapsed board lists are aligned (merge request)
• Remove unnecessary association validation (merge request) GitLab Enterprise Edition
• Restore backup log file (merge request)
• Preserve leading spaces in code (merge request)
• Add loading and empty state in commit refs (merge request)
• Fix timeline content dark mode rendering (merge request)
• Fix alignment of legacy system notes (merge request)
• Fix theme color theme highlighting (merge request)
• Applying Patch for Checkin (merge request)
• Fix broken docs link for container scanning (merge request)
• Fix ci_deleted_objects#pick_up_at (merge request)
• Make sure explain code button doesn't overlap sticky headers and nav (merge request) GitLab Enterprise Edition
• Fix admin user can create top level group UI (merge request)
• Set cron source to schedule to ensure clean up on load (merge request)
• Use Gitaly::ListCommitsRequest in network graph to include tags (merge request)
• Initial checkin fix for adding back experiments (merge request)
• Do CommitTrailersFilter before ref filters (merge request)
• Avoid multiple submit of work item comment (merge request)
• Fix Issue entity undefined method `namespace' for nil:NilClass (merge request) GitLab Enterprise Edition
• Fix conflicts warning on work item description (merge request)
• Fix CI Catalog component table layout (merge request)
• Fix anthropic client to handle nil response (merge request) GitLab Enterprise Edition
• Ignore negative index policies and rules for security policies (merge request) GitLab Enterprise Edition
• Ensure file title wraps on merge conflict resolver screen (merge request)
• Update regex to capture edge cases (merge request)
• Handle a slow query for CodeNavigationPath (merge request)
• Remove extra avatar on image diff comments (merge request)
• Fix start and due dates widget when work item has a dates source (merge request)
• Use keyword_init: true in gitaly server.rb struct (merge request)
• Prevent footnote OL from being reorderable (merge request)
• Fix Duo for CLI policy to check instance setting for SM (merge request) GitLab Enterprise Edition
• Fix list item click event on the group-level Analytics Dashboards page (merge request) GitLab Enterprise Edition
• Fix leading of CiIcon text and make sure it is vertically centered (merge request)
• Remove gradient line at beginning and end of activity (merge request)
• Vulnerability: bugfix of add issues form disappearing (merge request)
• Fix deploy key truncation issue in drawer (merge request)
• Check if project is public before setting cache control to true (merge request)
• Show new notification button in work item sticky header when flag is on (merge request)
• Skip the indexing when the zoekt_repository is in failed state (merge request) GitLab Enterprise Edition
• Fix import of pipelines with negative duration to ClickHouse (merge request)
• Fixes logic to set labels filter base path (merge request)
• Fix layout of Comment type dropdown for small viewports (merge request)
• Fix disabled job action state (merge request)
• Create missing NPM metadata when package is deprecated (merge request)
• Update merge request overview tab changes count to use merge head (merge request)
• Fix overflow issues in branch rule deploy keys (merge request)
• Fix description issues with custom roles (merge request)
• Fixes create workflow param (merge request) GitLab Enterprise Edition
• Add search by parents for group links (merge request)
• Initial checkin for checkbox fix (merge request) GitLab Enterprise Edition
• Project, group description: highlighted-text style by @santigl (merge request)
• Fix layout of suggestion management buttons on mobile (merge request)
• Fix flaky specs for creating a work item with linked items (merge request)
• Fix reference serialization in RTE (merge request)
• Flush internal_id records on unique violations (merge request)
• Initial checkin of experiments setting fix (merge request) GitLab Enterprise Edition
• Prevent award tooltip being cut off in modals (merge request)
• Fix JobInjector error when stage does not exist for some jobs (merge request) GitLab Enterprise Edition
• Update Access data on sync even if data didn’t changed (merge request) GitLab Enterprise Edition
• Fix inputs in pipeline schedule ui not resizeable by @wilsonpinto (merge request)
• Reject OmniAuth sign in when email is too long (merge request)
• Add :clean_gitlab_redis_cache to server_spec.rb (merge request)
• Cover all scenarios when determining whether chid is within parent epic (merge request) GitLab Enterprise Edition
• Reduce workItemNotesByIid query complexity (merge request)
• Add default background color to timeline avatars (merge request)
• Do not update descriptionHtml if details blocks are changed (merge request)
• Fix missing ci_cd_settings relation on project creation (merge request)
• GraphQL: Fix empty successful pipeline analytics (merge request)
• Mirror behavior of issuable header status in sticky header status (merge request)
• Remove derisk feature flag after rollout (merge request)
• Fix total issues chart (merge request) GitLab Enterprise Edition
• Blame: Fix text overflow and use small text (merge request)
• Fix sidebar flyout menu closing before cursor can reach it (merge request)
• Fix blame for sha256 repositories (merge request)
• Conditionally expose member's is using seat info (merge request) GitLab Enterprise Edition
• Group label events in deterministic order (merge request)
• Display exhaustive Licensee license list (merge request)
• Handle membership access requests for indirect members (merge request)
• Refactor IngestReportsService with execute strategy (merge request) GitLab Enterprise Edition
• Update schema processing for policy editor (merge request)
• Fix draft replies on regular comments on MR overview tab (merge request)
• Fix alignment of items in performance bar (merge request)
• Fix background avatar color and border on draft notes (merge request)
• Pages unique domain url update (merge request)
• Stop using kilobyte conversion for max highlight file size (merge request)
• Re-enable hand raise lead for SaaS usage quota page duo (merge request) GitLab Enterprise Edition
• Adjust background migration to new schema (merge request)
• Timeline avatars: Add default bg (merge request)
• Fix multiline discussion alignment (merge request)
• Fix 500 when passing non-string to inputs:regex (merge request)
• Fix group-level vulnerabilities GraphQL performance issue (merge request) GitLab Enterprise Edition
• Expand deeplinked resolved thread (merge request)
• Fixes link formatting in Matrix integration (merge request)
• Fix usage overview visualization flex layout (merge request) GitLab Enterprise Edition
• Fix issue where user could not assign runner to a project (merge request)
• Admin Code Suggestions - Add default injections (merge request) GitLab Enterprise Edition
• Fix line height of CI status badge in job header (merge request)
• Rescue TarInvalidError when uploading npm packages (merge request)
• Fix 403 error in external status endpoint for admin user (merge request) GitLab Enterprise Edition
• Fix undesired wrapping issue on related items attributes in Safari (merge request)
• Reset notification email to default when used email got deleted (merge request)
• Fix bug with label_name search filter (merge request) GitLab Enterprise Edition
• Shift anchor icon to the left for headers inside a summary tag (merge request)
• Personal access tokens: Open form if url params are set (merge request)
• Use current user instead of @user (merge request) GitLab Enterprise Edition
• Add markdown live preview test & fix mermaid graph not rendering on load (merge request)
• Fix size of comment counter badge (merge request)
• Trigger workItemUpdated subscription when related MR is updated (merge request)
• Fix 500 error when deleting pending user invite (merge request) GitLab Enterprise Edition
• Add payload errors in status check services (merge request) GitLab Enterprise Edition
• Fix previous/next button styles for date picker in dark mode (merge request)
• Fix synced attrs when creating linked LDAP user (merge request)
• Use LFS transformer to create a pointer (merge request)
• Fix missing milestone change system notes (merge request)
• Fix Duo Chat documentation question irrelevant ref (merge request) GitLab Enterprise Edition
• Override pushrule for security policy project (merge request) GitLab Enterprise Edition
• Check only top-level groups on sign-up form endpoint (merge request)
• Provide epics list path for labels in work item sidebar (merge request) GitLab Enterprise Edition
• Order on organizations table (merge request)
• Protect against a nil security_setting (merge request) GitLab Enterprise Edition
• Fix api_token update bug for self-hosted form (merge request)
• Change additional context to use indiff access (merge request) GitLab Enterprise Edition
• Adds a guard against missing projects in todos (merge request)
• Fix alignment of description diff history delete button (merge request)
• Show Coverage-Check rule on MR settings (merge request) GitLab Enterprise Edition
• Remove nil content from Duo Chat message history (merge request) GitLab Enterprise Edition
• Web IDE update URL when ref changes (merge request)
• Fix icon and alignment of weight widget in sidebar when locked (merge request) GitLab Enterprise Edition
• Fix issue when resizing images in RTE (merge request)
• Disable pipeline must succeed setting for security policy project (merge request) GitLab Enterprise Edition
• Fix sticky header on work items and legacy issuables (merge request)
• Asana integration: only close Asana task if closing keyword is followed by asana taskId identifier by @ivaneG (merge request)
• Fix icon and alignment of epic widget in sidebar when locked (merge request) GitLab Enterprise Edition
• Fix Git HTTP redirects not working with query parameter (merge request)
• Ensure discussion reply for linked comments has correct top padding (merge request)
• Fix gap between buttons in vulnerability report header (merge request) GitLab Enterprise Edition
• Require approvals for missing policy scans without target pipeline (merge request) GitLab Enterprise Edition
• MR header: Fix tooltip of copy branch name (merge request)
• Use default number of participants in work item sidebar widget (merge request)
• Work items: Fix huge gap when not yet edited (merge request)
• Deleted vulnerability_remediations leave behind uploads records (merge request) GitLab Enterprise Edition
• Fix vulnerability report page activity docs (merge request) GitLab Enterprise Edition
• Author badges: Migrate non compliant badges (merge request)
• Fix a double-slash URL problem when MR URL ends with a trailing slash by @yasuk (merge request)
• Fix admin_mode enforcement in AdjournedGroupDeletionWorker (merge request) GitLab Enterprise Edition
• Fix Go Back functionality for duo pro access denied (merge request) GitLab Enterprise Edition
• Fix NoMethodError for blame (merge request)
• Always target correct pipeline for cancel (merge request)
• Fix the bug that replica respect zoekt_enabled_namespace search (merge request) GitLab Enterprise Edition
• Do not check for permissions when syncing children reordering (merge request) GitLab Enterprise Edition
• Fix timeout when checking group dependencies (merge request) GitLab Enterprise Edition
• Workhorse: fix unix socket path too long (merge request)
• Ensure levels is an array (merge request)
• Fix: Geo Replication Details incorrectly empty (merge request) GitLab Enterprise Edition
• Branch rule details: Fix spacing and make count optional (merge request)
• Fix vulnerabilities related issues widget (merge request) GitLab Enterprise Edition
• Update ee mutations specs (merge request)
• Load Participants seperately to speed up page load (merge request)
• Fix 'e' shortcut triggering unexpected edits by @salihudickson (merge request)
• Turn NotFound from Gitaly into 404 for InfoRefs (merge request)
• Fix audit flow when audit_log feature is disabled (merge request)
• Set project_id when deploy tokens are created for Auto DevOps (merge request)
• Fix selected emoji award button style (merge request)
• Remove invalid parents from the Commit object (merge request)
• Fix "Variable $refType of type RefType was provided invalid value" (merge request)
• Fix "continue editing" sticky header z-index (merge request)
• Update GitLab version in DELETE REST API docs for protected containers by @nwittstruck (merge request)
• Fix license check for reordering work items (merge request) GitLab Enterprise Edition
• Fix upgrading to versions > 17.0 without upgrading to 17.0 first (merge request)
• Fix inherited source filter for Pipeline execution policies (merge request) GitLab Enterprise Edition
• Fix loading child items that are also related (merge request)
• Update GitLab release version in Group REST API docs by @nwittstruck (merge request)
• Remove old finder not needed (merge request) GitLab Enterprise Edition
• Fix work item description quick actions (merge request)
• Update shortcut hint in the UI (merge request)
• Update graphql specs in prep for update (merge request)
• Update container scanning for registry docs link (merge request)
• Fix show SAML session expiration modal (merge request)
• Add GLFM support in single editor preview (merge request)
• Avoid errors from Analytics::DateFiller (merge request)
• Encode special characters in find file search (merge request)
• Remove rules_exist_expand_globs_early feature flag (merge request)
• Return 404 error when ref_type + ref combination is incorrect (merge request)
• Migrate .bold to .gl-font-bold in HAML files (merge request)
• Allow to edit files from a commit or tag with WebIDE (merge request)
• Ensure service accounts for GitLab.com groups restricted during trial (merge request) GitLab Enterprise Edition
• Display newline changes in description diff (merge request)

Changed (249 changes)

• Remove dast tables allow cross-joins (merge request) GitLab Enterprise Edition
• Add dynamic concurrency limit for create pipeline worker (merge request) GitLab Enterprise Edition
• Adjust error message on project not found for CI_JOB_TOKEN requests (merge request)
• Allow reporter+ to read analytics dashboards (merge request) GitLab Enterprise Edition
• Do not expire direct memberships in subgroups and projects by @nwittstruck (merge request)
• Add border to board card (merge request)
• Add dropdown popover for empty state (merge request) GitLab Enterprise Edition
• Enable summarize_notes_with_duo by default (merge request)
• Update dependency auto-deploy-image to v2.104.0 (merge request)
• Vulnerability Report: fix Jira error handling (merge request) GitLab Enterprise Edition
• Update @gitlab/web-ide package version (merge request)
• Lighten block quote shadow color in dark mode (merge request)
• Truncate p_ci_finished_build_ch_sync_events if ClickHouse unconfigured (merge request) GitLab Enterprise Edition
• Handle orphaned zoekt indices (merge request) GitLab Enterprise Edition
• Handle orphaned zoekt indices (merge request) GitLab Enterprise Edition
• Don't always set X-Gitlab-Duo-Seat-Count (merge request) GitLab Enterprise Edition
• Migrate "Abuse reports" empty result page to EmptyResult component (merge request)
• Remove allow_cross_joins_across_databases (merge request) GitLab Enterprise Edition
• Prefill policy editor using compliance pipelines migration params (merge request) GitLab Enterprise Edition
• Set vulnerability_mr_links project id to lfk (merge request) GitLab Enterprise Edition
• Update Container Registry cleanup policies time format (merge request)
• Added missing translations from GitLab UI (merge request)
• Transition dast_pre_scan_verifications to gitlab_sec (merge request) GitLab Enterprise Edition
• Deprecate legacy Geo Prometheus repository checks metrics (merge request) GitLab Enterprise Edition
• Remove legacy zoekt index code paths (merge request) GitLab Enterprise Edition
• Use small font for resolved text (merge request)
• Update fog-aws to v3.26.0 (merge request)
• This MR adds linked items dropdown (merge request) GitLab Enterprise Edition
• Remove superfluous HTML length validation refs (merge request)
• Stop tracking noisy InvalidConstraintError in sentry (merge request)
• Update UI docs links in CI files (merge request)
• Transition dast_profiles_pipelines to gitlab_sec schema (merge request) GitLab Enterprise Edition
• Backfill pipeline.project_id to dependency_list_export.project_id (merge request)
• Invert and Disable temporarily DocumentationLinks (merge request)
• Remove default organization_id from PAT (merge request)
• Delete inactive groups and projects access tokens after 30 days (merge request)
• Deprecate compliance-pipeline fields in graphql (merge request) GitLab Enterprise Edition
• Remove default value from raw_usage_data table (merge request)
• AI impact analytics: Rename Duo seats: Assigned and used panel (merge request) GitLab Enterprise Edition
• Prevent line height from being forced into tabs (merge request)
• Extract RewriteHistory logic into a service (merge request) GitLab Enterprise Edition
• Allow for attachments in Model and Model Version descriptions (merge request)
• Update @gitlab/web-ide package version (merge request)
• Allow Conainer-Scanning to scan multiple containers in a pipeline by @Valkhof (merge request)
• Enable callers of client.tags for self-managed (merge request)
• Remove -v2 from all system note classes (merge request)
• Add support for WorkItem embeddings (merge request) GitLab Enterprise Edition
• Deprecate non-nullable target field on Todo type (merge request)
• Limit value streams max size to prevent timeouts (merge request)
• Diff threads: Align toggle function with regular threads (merge request)
• Remove unused profile CSS, make activity line darker (merge request)
• Update fog-aws to v3.25.0 (merge request)
• Add organization id to topics (merge request)
• Update dependency auto-deploy-image to v2.103.0 (merge request)
• Simplify container registry feature spec by @sahilsarawagi (merge request)
• Added support for skip_authorization (merge request) GitLab Enterprise Edition
• This MR adds linked items dropdown (merge request) GitLab Enterprise Edition
• Update Topic empty states (merge request)
• Add requested changes and merge to relevant MR activity filters (merge request)
• Clarify when approval policy targets unprotected default branch (merge request) GitLab Enterprise Edition
• Transition dast_site_profile_secret_variables to gitlab_sec (merge request) GitLab Enterprise Edition
• Implement checking ref when rendering CI Config blob page (merge request)
• Concurrency limit: allow pausing workers (merge request)
• Migrate linked resources to Crud (merge request)
• Remove sharding_key_config for ml_candidate_ (merge request)
• Adjust DeployKeyItem to data it should receive (merge request)
• Move timezone selection position in the pipeline schedule form by @wilsonpinto (merge request)
• Limit scan execution policy actions to 8 (merge request) GitLab Enterprise Edition
• UI polish the GitLab Duo cards (merge request) GitLab Enterprise Edition
• Guard editing of branch protection (merge request)
• MR widget: Use regular chevron icons (merge request)
• Update GitLab Workhorse to AWS SDK for Go v2 (merge request)
• Add slim health status mode (merge request) GitLab Enterprise Edition
• Add callout in the admin area about OpenSSL v3 (merge request)
• Hide health status on child items when closed (merge request) GitLab Enterprise Edition
• Translate severity count limit (merge request) GitLab Enterprise Edition
• Fix design inconsistencies in work items child/linked widget item metadata (merge request)
• Add cached markdown fields for Model Registry (merge request)
• Resend email verification code if the current code has expired (merge request)
• Add optional ref parameter to Contributors API endpoint (merge request)
• Use white bg for light highlight theme gutter (merge request)
• Avatar: Refactor to use gl-avatar (merge request)
• Jira Cloud app only editable via API when active (merge request)
• Increase model registry description text limits (merge request)
• Updating features to be uppercase (merge request) GitLab Enterprise Edition
• refactor conan api to have V1 version by @ScanianJP (merge request) GitLab Enterprise Edition
• Exclude add-on purchases from active that are expiring today (merge request) GitLab Enterprise Edition
• Update container scanning for registry config (merge request) GitLab Enterprise Edition
• Remember user preference for showing labels on work item widgets (merge request)
• Validate and replace the fk referencing p_ci_pipelines (merge request)
• Add priority_searchable concern to select search type (merge request) GitLab Enterprise Edition
• Use more info for license add-on provisioning (merge request) GitLab Enterprise Edition
• Remove security_report_schemas_rubygem feature flag (merge request)
• Add zoekt_cpu_to_tasks_ratio to Zoekt (merge request) GitLab Enterprise Edition
• Transition dast_site_profiles to gitlab_sec (merge request) GitLab Enterprise Edition
• Handle issue references when project is nil (merge request) GitLab Enterprise Edition
• Remove description and diff from descriptionVersion (merge request)
• Improve GQL query for fetching groups and projects (merge request)
• Seperates banners from alerts (merge request)
• Move shared note styles into new file (merge request)
• Increase default child items batch size to 50 (merge request)
• Don't show Terms and privacy on SaaS (merge request)
• Adjust private vizibility description (merge request)
• Expose ETag header of API requests to XHR requests (merge request)
• Add missing variables to Policy Editor UI (merge request) GitLab Enterprise Edition
• Add illustration to search result empty state by @jimender2 (merge request)
• Updating feature name to be uppercase (merge request)
• This MR adds link option (merge request) GitLab Enterprise Edition
• This MR updates wording for group policy scope (merge request) GitLab Enterprise Edition
• It raises an error on migration exhaustion (merge request)
• Add priority_searchable concern to select search type (merge request) GitLab Enterprise Edition
• Avoid gitaly calls when evaluating exists conditional (merge request)
• Migrate explain_vulnerability to AIGW (merge request) GitLab Enterprise Edition
• Rollout the zoekt_tasks_processing_state FF (merge request) GitLab Enterprise Edition
• Cleanup the duo_pro_trial_expired_widget ff (merge request) GitLab Enterprise Edition
• Set vulnerability_mr_links project id to lfk (merge request) GitLab Enterprise Edition
• Decompose vulnerability_occurrence_identifiers to gitlab_sec (merge request) GitLab Enterprise Edition
• Add group scope option for policy drawer (merge request) GitLab Enterprise Edition
• Notes: Change visual order of replies (merge request)
• Change button appearance (merge request) GitLab Enterprise Edition
• Refactor draft notes CSS (merge request)
• Legacy license support for GitLab Duo (merge request) GitLab Enterprise Edition
• Allow files with spaces in their names for model registry (merge request)
• Adds filter empty state to milestone list (merge request)
• Decouple OccurrencesVulnerabilities & vulnerability_finding_pipeline (merge request) GitLab Enterprise Edition
• Update job item styling (merge request)
• Migrate remote_development_agent_configs table (merge request)
• GraphQL: Update merge train fields (merge request) GitLab Enterprise Edition
• Update fog-aws to v3.24.0 (merge request)
• Add migration to backfill project_id to security_scans (merge request)
• Remove expensive guard clause for callout reset (merge request) GitLab Enterprise Edition
• Update gpgme to v2.0.24 (merge request)
• Deploy keys: Migrate empty state (merge request)
• Current user: Change text color to orange to match system notes (merge request)
• Decompose vulnerability_remediations to gitlab_sec (merge request) GitLab Enterprise Edition
• Enable GraphQL Pipeline Security Tab by default (merge request) GitLab Enterprise Edition
• Swap out container scanning for registry card (merge request)
• Match the order from REST stage api to GQL stage api (merge request)
• Transition dast_site_profiles_builds to gitlab_sec schema (merge request) GitLab Enterprise Edition
• Support expected_old_oid in user_commit_files (merge request)
• Add frontend validations for seat controls user cap option (merge request) GitLab Enterprise Edition
• Revert "Improve GQL query for fetching groups and projects" (merge request)
• Scope i18n strings that are incorrectly unscoped by @JonstonChan (merge request)
• This MR fixes layout issues (merge request) GitLab Enterprise Edition
• Enable post_receive_sync_refresh_cache feature flag by default (merge request)
• Restrict zoekt indices from having cascade deletes (merge request)
• Decompose vulnerability_occurrence pipelines (merge request) GitLab Enterprise Edition
• Remove unused DESCRIPTION_HTML_LENGTH_MAX (merge request)
• GitLab Duo Health Check - Collapsable status (merge request) GitLab Enterprise Edition
• Set detumbled_email address before saving emails (merge request)
• Remove legend values from DORA Performers Score chart (merge request) GitLab Enterprise Edition
• Cleanup bigint conversions for packages_build_infos (merge request)
• Secondary email removal: Use tertiary button with trash icon (merge request)
• Broaden the scope of lazyLoader (merge request)
• Rollout focusin feature in Dropdowns (merge request)
• Refactor CI Icons to be independent from GlBadge (merge request)
• Fix Layout/SpaceInLambdaLiteral offenses by @JonstonChan (merge request)
• Add loading row to pipelines table (merge request)
• Emphasize highlights that have vulnerabilities (merge request) GitLab Enterprise Edition
• Update design for vulnerability groups (merge request) GitLab Enterprise Edition
• Added unique index to import_source_users (merge request)
• Adds support for permalinks from description in Work Items (merge request)
• Decreases lock timeout for sliding list partition strategy (merge request)
• Use new CSS file for work items system notes (merge request)
• Update schema to classify clusterwide table (merge request)
• Rewrite system note CSS (merge request)
• Remove search_query_milestone_builder feature flag (merge request) GitLab Enterprise Edition
• Update duo pro docs for GDK setup (merge request)
• Migrate Operations dashboard cards (merge request)
• Change model used in git_command LLM endpoint (merge request) GitLab Enterprise Edition
• Rollout FF packages_dependency_proxy_pass_token_to_policy (merge request)
• Improve source column of membership table (merge request)
• Subscription table: Migrate to Crud (merge request) GitLab Enterprise Edition
• Allow configuring Duo Workflow Service URL in config/gitlab.yml (merge request)
• Modifying summarize tool to use claude 3 (merge request) GitLab Enterprise Edition
• Makes dashboard titles more general (merge request)
• Merge branch... (merge request)
• MS Teams update MessageCard format to adaptive by @ivaneG (merge request)
• Transition dast_site_s to gitlab_sec schema (merge request) GitLab Enterprise Edition
• Hide Reset if integration not manually enabled (merge request)
• Secrets table: Migrate to Crud (merge request) GitLab Enterprise Edition
• Migrate WriteTests tool (merge request) GitLab Enterprise Edition
• Display current user's username in email verification page (merge request)
• Fix date flex wrapper for smaller breakpoints (merge request)
• Update labelling of empty MR approval rules (merge request) GitLab Enterprise Edition
• Add post trial ctas to duo pro usage tab (merge request) GitLab Enterprise Edition
• Tabs: Active item badge adjustment (merge request)
• Zoekt: Switch to tasks API by default (merge request) GitLab Enterprise Edition
• Swap primary key for ci_pipelines to include partition_id (merge request)
• Remove zoekt_new_concurrency_limit_logic FF (merge request) GitLab Enterprise Edition
• Read security report schemas from RubyGem (merge request)
• Add multiple frameworks filter (merge request) GitLab Enterprise Edition
• Add zoekt processing queue monitoring metric (merge request) GitLab Enterprise Edition
• Remove explain_vulnerability_tool feature flag (merge request) GitLab Enterprise Edition
• Configure LFK for vulnerability_statistics.project_id (merge request) GitLab Enterprise Edition
• Update code generation libraries prompt (merge request)
• Enable web_ide_oauth flag by default (merge request)
• Set vulnerability_finding_evidences to gitlab_sec schema (merge request) GitLab Enterprise Edition
• Update GitLab Duo Chat icon (merge request) GitLab Enterprise Edition
• Remove activity border in work items (merge request)
• Allow changing child items batch size via query param (merge request)
• Split subtitle logic on GitLab Duo page (merge request) GitLab Enterprise Edition
• Filtering projects by all compliance frameworks (merge request) GitLab Enterprise Edition
• Replace work_item_iid query param with show (merge request)
• Update dependency auto-deploy-image to v2.102.0 (merge request)
• Adjust model names to map the exact model names (merge request) GitLab Enterprise Edition
• Change style and text of primary button in pipeline edit modal (merge request)
• feat: Set vulnerability_scanners to gitlab_sec schema (merge request) GitLab Enterprise Edition
• Remove extra whitespace after placeholder in i18n text (merge request) GitLab Enterprise Edition
• Remove v12p1 elastic files (merge request) GitLab Enterprise Edition
• Clear new_user_signups_cap when seat_control is not user_cap (merge request) GitLab Enterprise Edition
• Update super sidebar theme styles (merge request)
• Migrate RefactorCode tool to AIGW (merge request) GitLab Enterprise Edition
• Send language server version in AI gateway requests (merge request) GitLab Enterprise Edition
• Remove feature flag locked_lfs_files_mergeability_check (merge request)
• Update self-managed product analytics onboarding flow (merge request) GitLab Enterprise Edition
• Related issues: Migrate to use crud component (merge request)
• Update CI_JOB_TOKEN error message on git repository requests (merge request)
• Moved epic assignees to work_items_beta FF (merge request) GitLab Enterprise Edition
• Requeue resolve vulnerabilities migration (merge request)
• Update dependency auto-deploy-image to v2.101.0 (merge request)
• This MR fixes initial user selection (merge request) GitLab Enterprise Edition
• PA UX Papercuts 17.4 (merge request)
• Mass permit expected foreign keys during decomposition process (merge request)
• Set vulnerability_finding_signatures schema to gitlab_sec (merge request) GitLab Enterprise Edition
• Move framework button to the top (merge request) GitLab Enterprise Edition
• Add View Details button to the popup (merge request) GitLab Enterprise Edition
• Use /epics path for epic work items (merge request) GitLab Enterprise Edition
• Add up and down votes to the work items list page (merge request)
• Remove ignore rules related to loose FKs for ci_pipelines (merge request)
• Use Months layout and This year timeframe for scoped roadmap (merge request) GitLab Enterprise Edition
• Transition sbom_occurrences to the gitlab_sec schema (merge request) GitLab Enterprise Edition
• Adding not-null constraint on project_id for ci_pipelines (merge request)
• Switch Group Settings UI from User Cap to Seat Controls (merge request) GitLab Enterprise Edition
• Removing experimental RCA feature (merge request) GitLab Enterprise Edition
• Unbox Duo seat assignment (merge request) GitLab Enterprise Edition
• Use quarters layout and three years timeframe for scoped roadmap (merge request) GitLab Enterprise Edition
• Remove new-card classes from other instances (merge request)
• Add clone dashboard to analytics dashboards (merge request) GitLab Enterprise Edition
• Parse host and port from service URL (merge request) GitLab Enterprise Edition
• Allow environment alerts to display alerts from any source (merge request)
• Update json schema validator to return meaningful error messages (merge request)
• Enable the submit button after create access token (merge request)
• Add permission to cloudConnectorStatus GQL call (merge request) GitLab Enterprise Edition
• Avatar component: Update to use new design tokens for text (merge request)
• Align position and styling of general settings on group and project by @antonkalmykov (merge request) GitLab Enterprise Edition
• Allow Redis password to be specified in Workhorse URL (merge request)
• Migrate milestone labels GlCard to CrudComponent (merge request)
• Update dependency ai-gateway to v1.15.0 (merge request)

Deprecated (3 changes)

• Initial checkin for removing duo experimental settings (merge request) GitLab Enterprise Edition
• Include deprecation for owasp 2017 GraphQL argument values (merge request) GitLab Enterprise Edition
• Drop the following claude instant model (merge request) GitLab Enterprise Edition

Removed (43 changes)

• Remove needs tab (merge request)
• Remove confidence usage from Vulnerabilities::Finding (merge request) GitLab Enterprise Edition
• Removes finalize_after key from BBM dictionary (merge request)
• Chore: drop vertex_gitlab_docs db (merge request) GitLab Enterprise Edition
• Initial checkin of duo group settings FF removal (merge request)
• Remove Non DUO Chat explain vulnerability code (merge request) GitLab Enterprise Edition
• Remove ignore_columns for CommitStatus (merge request)
• Drop old upcoming_reconciliations endpoint (merge request) GitLab Enterprise Edition
• Remove deprecated getAddOnPurchase query (merge request) GitLab Enterprise Edition
• Remove explain this vulnerability section (merge request) GitLab Enterprise Edition
• Remove FF resolve_vulnerability_ai (merge request) GitLab Enterprise Edition
• Remove exclusive lock when updating statistics (merge request)
• Remove grafana embed and integration metrics (merge request)
• Remove elasticsearch call during initialize (merge request) GitLab Enterprise Edition
• Drop all deprecated metrics category tables (merge request)
• Remove job log from failed job widget (merge request)
• Ban AI remove Duo Admin Settings FF (merge request)
• Initial checkin of removal of duo project FF (merge request)
• removal: Feature flag controller_static_context removed (merge request)
• Ignore metadata settings fields in Metadatum by @oceane_scania (merge request)
• Remove getters setters user_preference (merge request)
• Removes reset_seat_banner_callouts feature flag (merge request) GitLab Enterprise Edition
• Cleanup legacy routes (merge request)
• Remove redundant index (merge request)
• Removes old/finalized batched background migration (merge request) GitLab Enterprise Edition
• Feat: remove vertex embeddings database (merge request) GitLab Enterprise Edition
• GraphQL: Remove deprecated values from CiRunnerStatus (merge request)
• Drop table ci_platform_metrics and model CiPlatformMetric (merge request)
• Remove async_merge_request_pipeline_creation (merge request)
• Remove pre_receive_secret_detection_beta_release feature flag (merge request) GitLab Enterprise Edition
• Remove data gathering of 2 obsolete AI events (merge request) GitLab Enterprise Edition
• Remove vulnerability_reads indices using namespace_id (merge request)
• Remove bs-callout css (merge request)
• Remove duplicate index index_sbom_component_versions_on_component_id (merge request)
• Remove cloud_connector_status FF (merge request) GitLab Enterprise Edition
• Remove Resolve Vulnerability Vertex prompt (merge request) GitLab Enterprise Edition
• Remove Ci::PartitioningIdAnalyzer (merge request)
• Remove the unused FKs referencing ci_pipelines (merge request)
• Remove duplicate vulnerability management indices (merge request)
• Remove explain_vulnerability_anthropic flag (merge request)
• Remove ignored help_text and sign_in_text (merge request)
• Remove project_level_sbom_occurrences feature flag (merge request) GitLab Enterprise Edition
• Delete the blame_page_pagination feature flag (merge request)

Security (23 changes)

• Revert "Merge branch 'security-psk-fix-external-wiki-integration-dos' into 'master'"
• Fix external wiki integration DoS by changing request to HEAD
• Redirect url in the link validated for being external
• Strip out Set-Cookie header from dependencyproxy auth response
• Fix open redirect due to additional slash added
• Prevent code injection in Product Analytics funnels YAML
• Add permissions check to project creations from a project template
• Fix the vulnerability in the glm_source parameter
• Fix credentials disclosure in mirroring failure
• Improve GraphQL log security
• Update edit permissions for DAST profiles
• Prevent users with admin_group_member custom ab. to manage custom roles
• Execute environment stop actions as the owner of the action
• Commit information visible through release atom endpoint for guest users
• Group Developers can view group runners
• Fixed frontend regex to parse URI
• Use session instead of params for identity linking
• Enforce Pipeline execution policy variables for template rules
• Restrict IPs for packages dependency proxy
• IP restriction to prevent all group permissions
• Do not run pipelines when resolving vulnerability
• Destroy associated releases when removing a tag via Git CLI
• Add Octokit::ResponseValidation middleware

Performance (3 changes)

• Use segmented export for group-level dependency list exports (merge request) GitLab Enterprise Edition
• Add composite index to SubscriptionAddOnPurchases (merge request)
• Drop composite index involving project_fingerprint (merge request)

Other (117 changes)

• Mark 20230928104245 as obsolete (merge request) GitLab Enterprise Edition
• Announce deprecation of field add_on_purchase under namespaces (merge request) GitLab Enterprise Edition
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Reorg. of sidebar files (merge request)
• Quarantine a flaky test (merge request)
• Cleanup remote_development_namespace_agent_authorization feature flag (merge request)
• Add and backfill project_id for ml_candidate_metrics (merge request)
• Add and backfill project_id for alert_management_alert_assignees (merge request)
• Update status of namespace in URL path to GA from Beta (merge request)
• Cleanup project_daily_statistic_counter_attribute_fetch feature flag (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Add open_kubernetes_resource_details event (merge request)
• Add and backfill project_id for ml_candidate_params (merge request)
• Add new FK between p_ci_builds and p_ci_pipelines (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• fix: Use gitlab_sec for vuln_remediation bulk insert (merge request) GitLab Enterprise Edition
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Improve github import docs (merge request)
• Revised index for owasp group level reports (merge request)
• Partition ci_pipelines_config table (merge request)
• Remove feature flag not_found_response_for_go_get (merge request)
• Removes the extra docs and updates the original BBM dictionary (merge request)
• Upsert single upcoming_reconciliation (merge request) GitLab Enterprise Edition
• Convert integer ID columns to bigint (merge request)
• Use instance variable @namespace (merge request) GitLab Enterprise Edition
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Make copy changes to trial registrations for duo enterprise (merge request) GitLab Enterprise Edition
• Improve error handling for the job logs app (merge request)
• Add learn duo pro discover link in expired duo pro trial widget (merge request) GitLab Enterprise Edition
• Clean up new_broadcast_message_dismissal (merge request)
• Implement change_allow_force_push tracking event (merge request)
• Quarantine a flaky test (merge request)
• Remove ci_new_query_for_running_stuck_jobs feature flag (merge request)
• Fix Layout/ArrayAlignment offense by @Deepak18-06 (merge request)
• Add an attribute truncate to do cleanup for the new node (merge request) GitLab Enterprise Edition
• Remove cncf logo from trial registrations (merge request) GitLab Enterprise Edition
• Improve Cypress test case names by @JonstonChan (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Remove actions and approval_settings from security_policies (merge request)
• Remove FF vulnerability_owasp_top_10_group (merge request) GitLab Enterprise Edition
• Desired sharding key to accept custom parent table primary key (merge request)
• Fix sidekiq warning in EventStore::Subscription by @gerardo-navarro (merge request)
• Enable ai impact analytics only for duo enterprise (merge request) GitLab Enterprise Edition
• Upgrade to graphql 2.3.14 (merge request)
• Quarantine a flaky test (merge request)
• Cleanup ensure_lfs_object_project_uniqueness FF (merge request)
• Reschedule DropWorkItemWidgetDefinitionsNamespaceId migration (merge request)
• chore: Fix typo regarding response and successful by @gerardo-navarro (merge request)
• Add and backfill organization_id for subscription_user_add_on_assignment (merge request)
• Removes webui_members_inherited_users feature flag (merge request)
• Partition ci_builds_metadata table (merge request)
• Optimize ListConfigVariablesService (prefill variables service) (retry) (merge request)
• Fix flaky spec (merge request)
• Update vendored Laravel project to match project template by @JonstonChan (merge request)
• Update vendored Cluster Management project to match project template by @JonstonChan (merge request)
• Fix Layout/ArrayAlignment offenses by @sahilsarawagi (merge request)
• BBM to update owasp_top_10 with null values to -1 (merge request)
• Remove ci_partitioning_first_records feature flag (merge request)
• Cleanup write_to_ci_build_tags feature flag (merge request)
• Quarantine a flaky test (merge request)
• Backfill published_by_id of catalog_resource_versions (merge request)
• Cleanup allow git http fetch writes feature flag (merge request)
• Organize mocks into categories (merge request) GitLab Enterprise Edition
• Correct tests after migration to Crud and SettingsSection components (merge request)
• Update docs of detailed_merge_status (merge request)
• Fix RSpec/ReturnFromStub offenses by @nathanpbrophy (merge request) GitLab Enterprise Edition
• Change trial group selection placeholder text (merge request) GitLab Enterprise Edition
• Add policy type to orchestration_policy_rule_schedule (merge request) GitLab Enterprise Edition
• Backfill p_ci_build_tags with data from taggings (merge request)
• Remove parallel_project_export feature flag (merge request)
• Partition ci_build_trace_metadata table (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Requeue migration to backfill sharding key for deploy_tokens (merge request)
• Delete orphaned deploy tokens (merge request)
• Drop unused onboarding_progresses columns (merge request)
• Validate p_ci_builds project_id not null constraint (merge request)
• GitLab Pages: Handle LetsEncrypt errors on ssl renewal by @gerardo-navarro (merge request)
• Quarantine a flaky test (merge request)
• Remove feature flag allow_ai_features_token_for_graphql_ai_features (merge request)
• Add identifier_names to vulnerability_reads (merge request)
• Add warning when external user accesses internal catalog project (merge request)
• Removing Clusterwide DB CI/CD Jobs (merge request)
• Add & backfill sharding keys for security_orchestration_policy_rule_sche (merge request)
• Finalize DeletePackagesComposerCacheFileRecords migration (merge request)
• refactor: Define spacing in parent element by @gerardo-navarro (merge request)
• Clean up ci_require_credit_card_on_free_plan feature flag (merge request) GitLab Enterprise Edition
• Add & backfill sharding keys for protected_environment_deploy_access_lev (merge request)
• Fix separation of duties link from UI to docs (merge request) GitLab Enterprise Edition
• Cleanup "use_pull_mirror_update_service" feature flag (merge request)
• Optimize ListConfigVariablesService (prefill variables service) (merge request)
• Add & backfill sharding keys for protected_environment_approval_rules (merge request)
• Update external status checks metrics (merge request)
• Add disable CI build for draft MR example by @lifez (merge request)
• Remove rely_on_work_item_type_seeder feature flag (merge request)
• Query using int when owasp_top_10 is none (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Validate FK for ci_daily_build_group_report_results.last_pipeline_id (merge request)
• Log headers from http-router (merge request)
• Refactors beyond identity page to remove GlNavItem (merge request)
• refactor: Use single quotes consistently in the files by @gerardo-navarro (merge request)
• Change owasp_top_10 column default to int on vulnerability_reads (merge request)
• Remove "disable_ssh_key_used_tracking" feature flag (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Deprecate BackupCustomHooks and RestoreCustomHooks RPCs (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)

EE (1 change)

• Update learn more link and docs formatting (merge request)

17.3.7 (2024-11-12)

Security (6 changes)

• Use custom adapter for parsing FogBugz XML (merge request)
• Removed id from authorize buttons and added specs (merge request)
• HTML injection in vulnerability Code flow leads to XSS on self hosted instances (merge request)
• Remove is-unsafe-link from product analytics tables to prevent XSS (merge request)
• Details of blocking merge request can be exposed via list (merge request)
• Prevent agent access via unconfirmed or disallowed group members (merge request)

17.3.6 (2024-10-22)

Security (2 changes)

• Fixed HTML injection in Global Search bug (merge request)
• Limit max size of manifest file upload (merge request)

17.3.5 (2024-10-09)

Fixed (1 change)

• Ensure levels is an array

Security (8 changes)

• Do not create a pipeline on MR refresh if source branch was deleted (merge request)
• Escape OAuth application name on authorize page (merge request)
• Prevent guest access to project templates (merge request)
• Remove access to local requests via cube query service (merge request)
• External webhook token should be set (merge request)
• Skip content when listing conflict files with types (merge request)
• Hide version info from unauthorized users (merge request)
• Prevent deploy keys from pushing code to an archived project (merge request)

17.3.4 (2024-09-24)

Security (3 changes)

• Implement input sanitization for SummarizeComments (merge request)
• Hide system notes with invalid references (merge request)
• Reset dependency proxy maven credentials when registry url is changed (merge request)

17.3.3 (2024-09-16)

No changes.

17.3.2 (2024-09-11)

Fixed (3 changes)

• Update Access data on sync even if data didn’t changed
• Fix Sidekiq crashing when GITLAB_LOG_LEVEL set to debug
• Fix issue when resizing images in RTE

Changed (1 change)

• Backport OpenSSL v3 callout to 17.3

Security (19 changes)

• Revert "Merge branch 'security-psk-fix-external-wiki-integration-dos-17-3' into '17-3-stable-ee'" (merge request)
• Fix the vulnerability in the glm_source parameter (merge request)
• Improve GraphQL log security (merge request)
• Add permissions check to project creations from a project template (merge request)
• Fix credentials disclosure in mirroring failure (merge request)
• Redirect url in the link validated for being external (merge request)
• [17.3] Update edit permissions for DAST profiles (merge request)
• Commit information visible through release atom endpoint for guest users (merge request)
• Execute environment stop actions as the owner of the action (merge request)
• Prevent code injection in Product Analytics funnels YAML (merge request)
• Prevent users with admin_group_member custom ab. to manage custom roles (merge request)
• Fixed frontend regex to parse URI (merge request)
• Use session instead of params for identity linking (merge request)
• Fix external wiki integration DoS by changing request to HEAD (merge request)
• Restrict IPs for packages dependency proxy (merge request)
• Strip out Set-Cookie header from dependencyproxy auth response (merge request)
• Fix open redirect due to additional slash added (merge request)
• Group Developers can view group runners (merge request)
• Enforce Pipeline execution policy variables for template rules (merge request)

17.3.1 (2024-08-20)

Fixed (3 changes)

• Merge branch '444926-fix-bug-in-resolve-vulnerabilities-migration' into 'master'
• Turn NotFound from Gitaly into 404 for InfoRefs
• Fix timeout when checking group dependencies GitLab Enterprise Edition

Changed (1 change)

• Include language server version in code suggestions GitLab Enterprise Edition

Security (4 changes)

• Do not run pipelines when resolving vulnerability (merge request)
• Add Octokit::ResponseValidation middleware (merge request)
• IP restriction to prevent all group permissions (merge request)
• Destroy associated releases when removing a tag via Git CLI (merge request)

17.3.0 (2024-08-14)

Added (143 changes)

• Trigger a Flux reconciliation from the cluster UI (merge request)
• Add REST API invited groups in a group (merge request)
• Sync finished pipelines to ClickHouse (merge request)
• Add subscription_history to Namespace GraphQL Type (merge request)
• Add common phrases copy to the password (merge request) GitLab Enterprise Edition
• Set project_id when creating Packages::Dependency (merge request)
• Extend deprecation properties with custom scan action (merge request) GitLab Enterprise Edition
• Protected containers: Badge "protected" in container registry list by @gerardo-navarro (merge request)
• Add a shared avatar image for security policy bots (merge request)
• Add backend support for multiple Vue list filters (merge request) GitLab Enterprise Edition
• Add EPSS to GitLab database (merge request) GitLab Enterprise Edition
• Script to update Topology Service Gem (merge request)
• Add TLS support for Redis Sentinel (merge request)
• Create events to measure Branch rule edit adoption (merge request) GitLab Enterprise Edition
• Allow the restriction of Kubernetes agent access to protected branches by @nwittstruck (merge request)
• Add compliance_checks and compliance_requirements tables (merge request)
• Cleanup sync_audit_events_to_new_tables feature flag (merge request)
• Add setting for max_artifact_archive_size_bytes by @danlamanna (merge request)
• Add MR mergeability check for locked paths (merge request)
• Refactor Modal form to use native submit (merge request)
• Adapt seat assignment logic for both Duo add-ons (merge request) GitLab Enterprise Edition
• Add GraphQL PMG to MR widget (merge request)
• Add field enterprise_users_extensions_marketplace_enabled for groups (merge request)
• Add CSV upload modal for user contribution reassignments (merge request)
• Frontend for zoekt search results - part 1 (merge request) GitLab Enterprise Edition
• Provide connect command for agent cluster (merge request)
• Async FK for p_ci_builds.upstream_pipeline_id (merge request)
• Async FK for ci_pipelines.auto_canceled_by_id (merge request)
• Clean up duo_chat_disabled_button feature flag (merge request) GitLab Enterprise Edition
• Add new internal API for credit card validation (merge request) GitLab Enterprise Edition
• Add MR mergeability check for locked LFS files (merge request)
• VSD Usage Overview - Display alert if background aggregations disabled (merge request) GitLab Enterprise Edition
• List owned runners via :admin_runners permission (merge request) GitLab Enterprise Edition
• Add endpoint with standard roles and members count for self-managed (merge request) GitLab Enterprise Edition
• Add work items hierarchy reorder mutation (merge request) GitLab Enterprise Edition
• Trigger workItemUpdated GQL subscription on MR update (merge request)
• Frontend for zoekt search results - part 1 (merge request) GitLab Enterprise Edition
• Update GitLab Pages version (merge request)
• Allow users to customize their JWT sub claim (merge request)
• Add the DB migration to backfill reserved_storage_bytes in zoekt_indices (merge request)
• Add show_on_profile to UserAchievement by @Taucher2003 (merge request)
• Add merge request dependency GET endpoints for REST (merge request)
• Add project_id to merge_request_diff_commits_b5377a7a34 (merge request)
• Add project_id to merge_request_diff_files_99208b8fac (merge request)
• Add GIN index to sbom_components (merge request)
• Add Duo Pro seats panel to AI impact analytics dashboard (merge request) GitLab Enterprise Edition
• Show SBOM reports ingestion errors on the project dependency list (merge request) GitLab Enterprise Edition
• Add code suggestions acceptance rate tile (merge request) GitLab Enterprise Edition
• Support custom Redis usernames (merge request)
• Make RCA generally available (merge request)
• Update GitLab Pages version (merge request)
• Add trendlines to the AI Impact analytics dashboard (merge request) GitLab Enterprise Edition
• Add new table to connect issues to metrics (merge request) GitLab Enterprise Edition
• Improve logging and Prometheus metrics of Workhorse endpoints (merge request)
• Add observability APIs (merge request)
• Adds the code suggestions unique users tile (merge request) GitLab Enterprise Edition
• Enable store_sbom_report_ingestion_errors FF by default (merge request) GitLab Enterprise Edition
• Update shared groups params (merge request)
• Remove feature flag wiki_redirection (merge request)
• Allow Duo add-on upgrade and downgrade for self-managed (merge request) GitLab Enterprise Edition
• Expose can_modify_blob_with_web_ide (merge request)
• Add merge trains viz link (merge request) GitLab Enterprise Edition
• Add style for <mark> in rendered markdown (merge request)
• Add .NET tutorial for O11y usage (merge request)
• Update GitLab Pages version (merge request)
• Add project_id column to packages_dependencies table (merge request)
• Remove FF enterprise_disable_personal_access_tokens (merge request)
• Add terraform module graphql type (merge request)
• Added the countable connection to the todo type by @zillemarco (merge request)
• Protected containers: Badge "protected" in container detail page by @gerardo-navarro (merge request)
• Cloud Connector status: Add end-to-end probe (merge request) GitLab Enterprise Edition
• Cloud Connector: Add VerificationService (merge request) GitLab Enterprise Edition
• Added field to query memberApprovals for group/project (merge request) GitLab Enterprise Edition
• Add id attribute to uploads API (merge request)
• Do not allow creating epic notes when synced work item is locked (merge request) GitLab Enterprise Edition
• Update GitLab Pages version (merge request)
• Add org to source package (merge request) GitLab Enterprise Edition
• Trigger workItemUpdated with WorkItemAddClosingMergeRequest (merge request)
• Audit group modifications to CI_JOB_TOKEN (merge request) GitLab Enterprise Edition
• Add group settings sections to command mode results (merge request)
• Add support for xterm background colors (merge request)
• Add Arkose email intelligence service (merge request) GitLab Enterprise Edition
• Add contact support links in identity verification page (merge request) GitLab Enterprise Edition
• Add new merge trains link (merge request) GitLab Enterprise Edition
• Add drag and drop feature to work items page (merge request)
• Integrate Topology Service Gem into GitLab (merge request)
• Add Disable Personal Access Tokens setting to Admin Settings UI (merge request) GitLab Enterprise Edition
• Add job count metric for pipeline execution policy (merge request) GitLab Enterprise Edition
• Add Mattermost version 9.10 to releases table (merge request)
• Remove search_add_fork_filter_to_zoekt FF (merge request) GitLab Enterprise Edition
• Add mutation to convert note to thread (merge request)
• Filter merge requests by target branch (merge request) GitLab Enterprise Edition
• Add Virtual Registry cached responses table (merge request)
• Add models for Virtual Registries, part 1/2 (merge request)
• Add Duo Enterprise to cloud connector configuration (merge request) GitLab Enterprise Edition
• Set reserved_storage_bytes in the node_assignment (merge request) GitLab Enterprise Edition
• Add pull_frequency to control the tasks pulling frequency (merge request) GitLab Enterprise Edition
• Adds support for Matrix notification integration (merge request)
• Adds last_dormant_member_review_at to namespaces (merge request)
• Add "source" property of jobs to Jobs API, GraphQL (merge request)
• Add delete pod functionality (merge request)
• Allow custom roles to be assigned to invited groups (merge request) GitLab Enterprise Edition
• Remove wiki front matter related feature flags (merge request)
• Add approval policy rules and projects link table (merge request) GitLab Enterprise Edition
• Add Java Spring tutorial for o11y usages (merge request)
• Rollout code_suggestions_skip_dependency_descriptions ff (merge request) GitLab Enterprise Edition
• Persist all policy types for security policies (merge request) GitLab Enterprise Edition
• Support organization_path for determining current organization (merge request)
• Add delete pod functionality (merge request)
• Remove merge_trains_viz flag (merge request) GitLab Enterprise Edition
• Show SBOM reports ingestion errors on the vulnerability report (merge request) GitLab Enterprise Edition
• Reindex issues from database (merge request) GitLab Enterprise Edition
• Skip the tasks with same project_identifier (merge request) GitLab Enterprise Edition
• Schedule DORA DF score recalculation (merge request) GitLab Enterprise Edition
• Add Django tutorial for observability tooling (merge request)
• Show Flux resource details (merge request)
• Add CreateSecurityPolicyProjectAsync mutation (merge request) GitLab Enterprise Edition
• Emit audit event for agent creation and deletion (merge request) GitLab Enterprise Edition
• Add for_occurrences and with_advisory scopes (merge request) GitLab Enterprise Edition
• This MR adds new column to external status checks (merge request) GitLab Enterprise Edition
• Add the syntax decoration for multi_match (merge request) GitLab Enterprise Edition
• Add filtering by max role on members pages (merge request)
• Expose source_url in API::Entities::BulkImport (merge request)
• Update GitLab Pages version (merge request)
• Add metrics for pipeline execution policy usage (merge request) GitLab Enterprise Edition
• Add pagination support for Hierarchy widget (merge request)
• Add index for purl_type and package_name on (merge request)
• Feat: manual variables tab frontend part one (merge request)
• Release inheritance feature for Integrations API (merge request)
• Add filtering active and human users in GraphQL (merge request)
• Sync namespace_settings seat_control with new_user_signups_cap (merge request)
• Add job action mutations (merge request)
• Add nodejs tutorial to Observability docs (merge request)
• Add detumbled_email column to emails table (merge request)
• Deprecation alert for Needs tab (merge request)
• Adds fix slash command (merge request) GitLab Enterprise Edition
• Add org to sbom source (merge request) GitLab Enterprise Edition
• Add member_role_id to group_group_links (merge request)
• Add filters to import source users Graphql resolver (merge request)
• Added .cjs & .mjs matching to SAST CI templates (merge request)
• Access runners via admin_runners permission (merge request) GitLab Enterprise Edition
• Add job action mutations (merge request)
• Add mergeTrainCar to MergeRequestType (merge request) GitLab Enterprise Edition

Fixed (143 changes)

• Revert "Refactor lavel filter to use labelName attr" (merge request) GitLab Enterprise Edition
• Fix empty dependency list page (merge request) GitLab Enterprise Edition
• Fix bug with pasting retina images (merge request)
• Hide invalid closing issues on merge request (merge request)
• Fix text on badge for health check (merge request) GitLab Enterprise Edition
• Kubernetes agent access for protected branches: Mention feature flag by @nwittstruck (merge request)
• Fix repo instructions border radius (merge request)
• Project Admin - Fix delete project after email message (merge request)
• Unify branch protection on rules details with repository settings (merge request) GitLab Enterprise Edition
• Fix wrong project in the connect command (merge request)
• Fix installable scope for inherited classes (merge request)
• Prevent re-enabling project sharing when user cap is set (merge request) GitLab Enterprise Edition
• Add Heading 5 and 6 to text style dropdown (merge request)
• Fix model artifact upload bug (merge request)
• Properly handle empty repository.ff_merge in FromTrainRef merge strategy (merge request) GitLab Enterprise Edition
• Update synthetic note (merge request)
• Frecent Items - Use fullPath over webUrl (merge request)
• Fix feature flag check for (merge request) GitLab Enterprise Edition
• Fix policy scope checker for multiple project compliance frameworks (merge request) GitLab Enterprise Edition
• Fix quick action urls in work items (merge request)
• Catch BlockedUrlError when dispatching external status check (merge request) GitLab Enterprise Edition
• Add correct check method for ga ai features (merge request) GitLab Enterprise Edition
• Add license check to cs for registry (merge request) GitLab Enterprise Edition
• Fix work item parent links namespace_id (merge request)
• Delete existing policy reads for invalidating policy edits (merge request) GitLab Enterprise Edition
• Fix removing conan manifest recipe file by cleanup policy (merge request)
• Fix timestamp values in Arkose Data Exchange payload (merge request) GitLab Enterprise Edition
• Handle invalid webhhook receiver gzip response (merge request)
• Adjust alignment of codeblock "Copy code" button (merge request)
• Make full log viewer section parsing more strict (merge request)
• Exclude deleted projects from GetProjectsQuery (merge request)
• Fix vulnerability statistics bug (merge request) GitLab Enterprise Edition
• Fix missing dependency project dropdown on narrow screen width (merge request) GitLab Enterprise Edition
• Backfill verification state table only for enabled replicators (merge request) GitLab Enterprise Edition
• Enable project_daily_statistic_counter_attribute_fetch FF by default (merge request)
• Mark projects as vulnerable in CVS logic (merge request) GitLab Enterprise Edition
• Fix train removal toast (merge request) GitLab Enterprise Edition
• Fix SBOM merge report service when merging tools of mixed structure (merge request) GitLab Enterprise Edition
• Fixes output_safety in integrations (merge request)
• Fixes disable style ANSI sequences in full log viewer (merge request)
• Atomically refresh branch/tag cache in PostReceive (merge request)
• Handle error when create directory params are missing (merge request)
• Add a batch migration to nullify organization_id for Project snippets (merge request)
• Project Topics - Allow new topics created always (merge request)
• Fix broken docs links in the UI (merge request)
• Fix segmented export zero division error (merge request) GitLab Enterprise Edition
• Fix custom role name for admin user views (merge request) GitLab Enterprise Edition
• Break words in legacy user dropdown (merge request)
• Use generated identifier for chart range data (merge request) GitLab Enterprise Edition
• Allow to edit files from a commit or tag with WebIDE (merge request)
• Ensure DiffCollection is not empty when applying each_gitaly_patch (merge request)
• Fix cluster check metrics (merge request) GitLab Enterprise Edition
• Fix missing CSS variables in jira_connect app (merge request)
• Fix toggle replies widget regression (merge request)
• Update graphql specs in preparation of gem upgrade (merge request)
• Cleanup allow_custom_root_folder_name_in_npm_upload FF (merge request)
• Fix upload after comment preview bug (merge request)
• Do not index associated issues that are epic work item type (merge request) GitLab Enterprise Edition
• Re-add no-enforce-focus prop on checkout modal (merge request)
• Internationalize dates within issues (merge request)
• Fix tooltip for suggested similar issue state icon (merge request)
• Add a validation for default branch name in group settings (merge request)
• Mark project as vulnerable while creating vulnerabilities (merge request) GitLab Enterprise Edition
• Ignore not search params which are not hashes (merge request)
• Fix help icon shrinks when there are many code owners (merge request) GitLab Enterprise Edition
• Fix clear bug in create view for health status widget (merge request)
• Add clipboard btn hover state to checkout MR instructions (merge request)
• Fix Explain vulnerabilities with AI loading state (merge request)
• Fixes output_safety in integrations (merge request)
• Use explicit rule names to avoid flaky specs (merge request) GitLab Enterprise Edition
• Fix GraphQL query returning less than expected projects (merge request)
• Update specs for upcoming graphql upgrade (merge request) GitLab Enterprise Edition
• Update publish a new release docs link (merge request)
• Make sure broadcast notifications do not affect broadcast message height (merge request)
• Reset request data on each filter (merge request)
• Fix Roadmap not loading when epics have private parents (merge request) GitLab Enterprise Edition
• Fix new epic work item email (merge request)
• Add missing breadcrumb items to several admin edit pages (merge request)
• Update graphql specs for coming upgrade (merge request)
• Fix badges in runners admin area (merge request)
• bug: Fix template error due to divided by zero by @gerardo-navarro (merge request)
• Use autolinker filter for commit descriptions (merge request)
• Drop sequences that should no longer exist in database (merge request)
• Ignore unknown sequences in sequence fix migration (merge request)
• Fixed Zoekt forks filter behavior (merge request)
• Scrub non-UTF characters from context chunk (merge request)
• Add support for redirects to go-get middleware (merge request)
• Update postgres_sequences view (merge request)
• Break words in code blocks in RTE (merge request)
• Fixes output_safety in integrations (merge request)
• Fix project name truncation in dependency project count dropdown (merge request) GitLab Enterprise Edition
• Fix SQL query for finding sequences owned by table (merge request)
• Use a separate Redis key for rescheduling jobs (merge request)
• Prevent CS SBOM to be parsed as ready for License Scanning rules (merge request) GitLab Enterprise Edition
• Clear Gitlab::Geo.proxied_site memoization (merge request) GitLab Enterprise Edition
• Fix clear button in deprecated jQuery dropdown filter (merge request)
• Restrict project ID parameters for GAR setup scripts (merge request) GitLab Enterprise Edition
• Connect null data points in Value Stream Dashboard sparklines (merge request) GitLab Enterprise Edition
• Skip issue due date validation on work item epics (merge request) GitLab Enterprise Edition
• Update graphql specs in preparation of gem upgrade (merge request)
• Restore collapsible sections in job log viewer (merge request)
• Improve image resizing in rich text editor (merge request)
• Fix auditor permission in group VSA (merge request) GitLab Enterprise Edition
• Fixed empty tooltips in usage trends count charts (merge request)
• Keep hover effect on section title when flyout is hovered (merge request)
• Fix missing spdx licenses in the policy editor (merge request) GitLab Enterprise Edition
• Fix duplicated projects in listbox (merge request)
• Status badge: Fix use of icon (merge request)
• Fix bug with deployment score calculation (merge request) GitLab Enterprise Edition
• Fix approval policy to include group level protected branch (merge request) GitLab Enterprise Edition
• Fix publishing npm package with custom root folder name (merge request)
• Handle Browser::Error exception (merge request)
• Remove project_ref_name_in_variables FF (merge request)
• Fix missing/incorrect linked work items from other namespaces (merge request)
• Fix SBOM export when tools property has different structure (merge request) GitLab Enterprise Edition
• Fix PEP when SEC is available (merge request) GitLab Enterprise Edition
• Add validation for vulnerability identifiers (merge request) GitLab Enterprise Edition
• Improve printing functionality by @yanglb (merge request)
• Added Instance scope as valid audit entity type (merge request) GitLab Enterprise Edition
• fix: Only run advanced SAST job when Ultimate license present (merge request) GitLab Enterprise Edition
• Pipeline dropdown: Fix spacing and border-radius (merge request)
• Add copy timelog logic when moving issue (merge request)
• Use SpinnerComponent in users groups/projects view (merge request)
• Remove padding if sections settings have no border (merge request)
• Fix merge request list icon alignment in Safari (merge request)
• Updates container registry set up cleanup link (merge request)
• Fix invalid X-Next-Page header for the first page (merge request)
• Provide a full commit sha to CommitReferences query (merge request)
• Remove full screen button at ML Model creation (merge request)
• Remove uplaods and redirects file results from wiki basic search (merge request)
• Ignore default before and after_script for Scan Execution Policies (merge request) GitLab Enterprise Edition
• Prevent dragging board list if not editable (merge request)
• Prevent export finalisation from overrunning the expected duration (merge request) GitLab Enterprise Edition
• Release jira_connect_proxy_create_branch (merge request)
• Display all seats user banner when there is an overage (merge request)
• Revert "Align the visual presentation of the action between groups and projects" (merge request)
• Your Work Projects - Fix improper index import (merge request)
• Make sure group path is used for getting list of frameworks (merge request) GitLab Enterprise Edition
• Fix pending members member link (merge request) GitLab Enterprise Edition
• Show download button in narrow viewports in repo directory view (merge request)
• Fix namespace path in pending members page (merge request) GitLab Enterprise Edition
• Use shared lock for SBoM ingestion and sync workers (merge request) GitLab Enterprise Edition
• Fix Changelog error on Non-encoded Commit Trailers (merge request)

Changed (226 changes)

• Ignore unused columns in onboarding_progress and remove all references (merge request)
• Enable self-managed UI bulk assignment/unassignment feature by default (merge request)
• Enable traversal_ids for all project search queries (merge request) GitLab Enterprise Edition
• Improve Cloud Connector status host probe (merge request) GitLab Enterprise Edition
• Transition dast_site_tokens to loose foreign keys (merge request)
• Lower sync event table partition cleanup threshold to 30 days (merge request)
• Hide search panel when user has no groups (merge request)
• Requeue backfilling of work_item_dates_sources (merge request)
• Show empty state also in workspace tab (merge request)
• Migrate title and cards in ssh key detail page (merge request)
• Add database index on emails to detumbled_email column (merge request)
• Find zoekt index through repository if exists (merge request) GitLab Enterprise Edition
• Groups Projects - Consistent pending delete alert (merge request)
• Makes job log color palettes consistent (merge request)
• Remove redirect to clear settings for self-managed provider (merge request) GitLab Enterprise Edition
• Scheduling service skips cache in non prod environments (merge request) GitLab Enterprise Edition
• Add framework id popover (merge request) GitLab Enterprise Edition
• Update redis-store gem and drop custom patch (merge request)
• Expose pre_receive_secret_detection_enabled in the API (merge request)
• Remove gl-new-card-body from terms card (merge request)
• Migrate branch rule details cards to crud components (merge request)
• Remove Security::ReportFetchService and refactor tests (merge request) GitLab Enterprise Edition
• Default-enable Cloud Connector status FF (merge request) GitLab Enterprise Edition
• Enable rewrite_history_ui feature flag by default (merge request)
• Adjust the visual styling of health check (merge request) GitLab Enterprise Edition
• This MR adds an icon for disabled policies (merge request) GitLab Enterprise Edition
• This MR adds new badge to status check table (merge request) GitLab Enterprise Edition
• Quarantine spec for old background migration (merge request) GitLab Enterprise Edition
• Update terraform empty state illustration (merge request)
• Notifications page: Migrate components used (merge request)
• Update tags page (merge request)
• Update blocked and blocking icons based on new direction (merge request)
• Remove gl-new-card from permanent group deletion card (merge request)
• Move work item note loader above comment box (merge request)
• Remove gl-new-card from failed jobs card (merge request)
• Switch back to charlock_holmes gem (merge request)
• Set vulnerability_finding_links schema to gitlab_sec (merge request) GitLab Enterprise Edition
• Replace subtle text color style with description label default style (merge request) GitLab Enterprise Edition
• Remove gl-new-card from pipeline editor card (merge request)
• Distinguish index on tags (merge request)
• Remove gl-new-card from group advanced settings (merge request)
• Rephrase policy bot message errors (merge request) GitLab Enterprise Edition
• Removes the note about billing quotas on the PA GitLab managed provider (merge request) GitLab Enterprise Edition
• Decrease space between log lines (merge request)
• Avoid TemplateFinder instantiations (merge request) GitLab Enterprise Edition
• Remove search_issue_refactor feature flag (merge request) GitLab Enterprise Edition
• Unbox the add license section (merge request) GitLab Enterprise Edition
• Move provider selection component error state inline (merge request) GitLab Enterprise Edition
• Add header to contributor analytics page (merge request)
• Sentence case access tokens (merge request)
• Refine the activation modal (merge request) GitLab Enterprise Edition
• Migrate terraform states GlCard to CrudComponent (merge request)
• Release page: Add page title and migrate to Crud (merge request)
• Sign-out deletes only GitLab site data, not all subdomains (merge request)
• Add email template for source_user rejects (merge request)
• Cleanup "add_validation_for_push_rules" feature flag (merge request) GitLab Enterprise Edition
• Make color palettes in logs consistent (merge request)
• Fix dark mode support in minimal and devise_empty (merge request)
• Replace click with select on add license (merge request) GitLab Enterprise Edition
• Migrate workspace variables card to CrudComponent (merge request)
• Remove new-card classes from legacy cards (merge request)
• Fetch product analytics project settings via GraphQL (merge request) GitLab Enterprise Edition
• Hide /type quick action on epic work items (merge request) GitLab Enterprise Edition
• Simplify atomic cache/tag clear code in PostReceive (merge request)
• Migrate dashboard projects to filtered search and sort (merge request)
• Refactor DuoChat error display (merge request) GitLab Enterprise Edition
• Fix broadcast message dismissals cookie not restoring upon login (merge request)
• Update review started icon in MR sidebar (merge request)
• feat: Transition sbom_component_versions to gitlab_sec schema (merge request) GitLab Enterprise Edition
• Deploy freeze table migration to Crud (merge request)
• Update visualization designer type selector (merge request) GitLab Enterprise Edition
• This MR updated dispatch service (merge request) GitLab Enterprise Edition
• Comments templates: Migrates components used (merge request)
• This MR adds new field to status check form (merge request) GitLab Enterprise Edition
• Update dependency auto-deploy-image to v2.100.2 (merge request)
• Transition dast_site_tokens to loose foreign keys (merge request)
• Update CI/CD Details tab order (merge request)
• Use locale date format on the custom emoji page by @NIKU-SINGH (merge request)
• Migrate wiki history card to crud component (merge request)
• Migrate branch rules card to CrudComponent (merge request)
• Update work item parent labels (merge request)
• Show warnings for rendered as markdown (merge request)
• Update gitaly servers card to CrudComponent (merge request)
• Display error when LLM determines false positive (merge request) GitLab Enterprise Edition
• Update cleanup policies page (merge request)
• Migrate badges card to crud component (merge request)
• Add fallback_behavior usage metrics (merge request) GitLab Enterprise Edition
• Update welcome page question order (merge request) GitLab Enterprise Edition
• Migrate secure files to cardcomponent (merge request)
• Update prompt for Duo Vulnerability Resolution (merge request) GitLab Enterprise Edition
• Reverse order of recent month columns in VSD (merge request) GitLab Enterprise Edition
• Update google-cloud-core and google-cloud-env gems (merge request)
• Migrate monitor alerts to crudcomponent (merge request)
• Duo Chat Retry Attempts Update (merge request) GitLab Enterprise Edition
• Does not load SSF data for disabled replicators (merge request) GitLab Enterprise Edition
• Update security policies graphql API to filter policies by scope (merge request) GitLab Enterprise Edition
• Update dependency auto-deploy-image to v2.100.1 (merge request)
• Set vulnerability_flags schema to gitlab_sec (merge request) GitLab Enterprise Edition
• Update cached commit signatures when a gpg key is recreated (merge request)
• Reverify externally verified gpg keys (merge request)
• Add DuoChat helper menu (merge request) GitLab Enterprise Edition
• Fix issue on terms page with mermaid plots (merge request)
• Update user pages empty states in admin area (merge request)
• Add tmp index on vulnerability_reads for bbm (merge request) GitLab Enterprise Edition
• Update merge request template copy (merge request) GitLab Enterprise Edition
• General improvements in the terms pages (merge request)
• Change the alert message for the invalid invite (merge request)
• This MR updates approval selector (merge request) GitLab Enterprise Edition
• Migrate Analyze page headings (merge request)
• Update BBM status (merge request)
• Use gl-text-subtle instead of gl-text-secondary in crud component (merge request)
• Migrate header components in tags and compare revisions (merge request)
• Add "Why GitLab Duo?" section to Duo Pro trial discover page (merge request) GitLab Enterprise Edition
• Refactors primary keys validations (merge request) GitLab Enterprise Edition
• Labels: Migrate label-badge (merge request)
• Remove MemberRole ignored columns (merge request) GitLab Enterprise Edition
• Issue closing pattern works with work items (merge request)
• Update runner edit form (merge request)
• ViewComponent documentation: Adds missing shared components (merge request)
• Humanize chart units for Value stream analytics (merge request) GitLab Enterprise Edition
• Hide pending todos authored by banned users (merge request)
• Hide rollup weight when null (merge request)
• Returning multiple compliance frameworks in project api (merge request) GitLab Enterprise Edition
• This MR adds new arguments for graphql mutation (merge request) GitLab Enterprise Edition
• Check for feature flag for user autocomplete in command palette (merge request)
• Put groups_direct field in CI JWT tokens behind feature flag (merge request)
• Sentence case pipeline editor (merge request)
• Issue Analytics: Migrate title and optimize loading state (merge request)
• Switching default_enabled: true for RCA troubleshoot (merge request) GitLab Enterprise Edition
• Ensure Current.organization is set in REST API (merge request)
• Add delimiter to label counters (merge request)
• Open k8s details drawer on the pod name click by @antonkalmykov (merge request)
• Set schema to gitlab_sec (merge request) GitLab Enterprise Edition
• Use header components and sentence case in code section (merge request)
• Update error pages (merge request)
• Pipeline mini graph clean up (merge request)
• Use page heading component for new snippet (merge request)
• Update pipeline editor to replace external link icon with catalog icon (merge request)
• Search bar: Migrate buttons to GlButton (merge request)
• Use CrudComponent for labels lists (merge request)
• Applys pending promotion requests (merge request) GitLab Enterprise Edition
• Move glab ask endpoint to AI gateway (merge request) GitLab Enterprise Edition
• Update stackprof to v0.2.26 (merge request)
• Remove add_gitlab_tier_cookie feature flag (merge request) GitLab Enterprise Edition
• This MR adds new field for update service (merge request) GitLab Enterprise Edition
• Applications group settings: Migrate components (merge request)
• Hooks: Update components (merge request)
• Redirect to group page upon user acceptance (merge request)
• User permissions for ML model registry & experiments (merge request)
• Update user achievements (merge request)
• Switch indexing button to background job (merge request) GitLab Enterprise Edition
• Set default state of web_ide_oauth flag to enabled (merge request)
• Migrates to use SettingsSection and Crud Components (merge request) GitLab Enterprise Edition
• Configure ignoring default before and after_script for policies (merge request) GitLab Enterprise Edition
• Remove updated at from work items (merge request)
• Replace toggle by radio buttons in the CI/CD settings by @antonkalmykov (merge request)
• Repository settings: Migrate components (merge request)
• Update help text for job token setting (merge request)
• Cleanup prevent_registration_from_china feature flag (merge request) GitLab Enterprise Edition
• This MR adds new field for external_status_check model (merge request) GitLab Enterprise Edition
• Update OpenID and OAuth2 gems (merge request)
• Clean up SafelyChangeColumnDefault for policy concurrency (merge request) GitLab Enterprise Edition
• Update illustration for work item empty state (merge request)
• Remove default value from organization_id field for snippets (merge request)
• Add approval rule: Move action buttons to content (merge request)
• Fix icons on commit page (merge request)
• Cleanup bigint conversions (merge request)
• Fix profile passed to API Security analyzer (merge request) GitLab Enterprise Edition
• Update dependency auto-deploy-image to v2.100.0 (merge request)
• Lock logger version to 1.5.x series (merge request)
• Apply a daily limit for duplicate credit card validations (merge request)
• Remove gl-block class on badge (merge request)
• Validate presence of Organization on Namespace model (merge request)
• Shows releases on group milestones (merge request) GitLab Enterprise Edition
• Auto close issues for group level issues defaults to false (merge request)
• Analytics settings: Migrate to use SettingsSection (merge request)
• Use FrameworkBadge as item for the Frameworks Select (merge request) GitLab Enterprise Edition
• Extract authz classes to fetch permitted abilities (merge request) GitLab Enterprise Edition
• Remove deprecated observability_tracing feature flag (merge request)
• Enable sorting by published_at for self-managed (merge request)
• Clarifies the availability of dormant user feature (merge request)
• Remove optimized_vulnerability_report_export feature flag (merge request) GitLab Enterprise Edition
• Update Duo Pro card on Usage Quotas page for trials (merge request) GitLab Enterprise Edition
• Show newest linked items first (merge request)
• Add ai_custom_models_prompts_migration FF (merge request) GitLab Enterprise Edition
• Migrate Integrations settings pages (merge request)
• Update source_users/show copy and UI (merge request)
• This MR updates dropdown text (merge request) GitLab Enterprise Edition
• Rename Gitlab::Geo. replication_enabled_replicator_classes by @sahilsarawagi (merge request)
• Reduce the verbosity of package_metadata logs (merge request)
• Add new child work items to the start (merge request)
• Update the tooltip text on the deployment limits message (merge request) GitLab Enterprise Edition
• Don't send commit messages from the FE if they're untouched (merge request)
• Update gems for Faraday 2 compatibility (merge request)
• Update dependency auto-deploy-image to v2.99.0 (merge request)
• Group: Migrate project settings (merge request)
• Backfill label_ids for merge request (merge request) GitLab Enterprise Edition
• Migrate axios call to GraphQL mutation for jobPlay by @missy-davies (merge request)
• Hides job logs timestamps on mobile size screens (merge request)
• Display current user's username in Identity Verification page (merge request) GitLab Enterprise Edition
• Update dependency auto-build-image to v4.3.0 (merge request)
• Remove elastic_index_use_trigger_indexing FF (merge request) GitLab Enterprise Edition
• Set Claude 3.5 Sonnet as code generation default (merge request)
• Usage quotas: Use PageHeadingComponent for heading and description (merge request)
• Use tertiary button for admin area (merge request)
• Update project report for multi frameworks (merge request) GitLab Enterprise Edition
• Update link to the help page on Geo health help icon by @antonkalmykov (merge request) GitLab Enterprise Edition
• Fix double border at the 'Child items' widget on the Issues page by @antonkalmykov (merge request)
• Add new observability feature and policy (merge request)
• Set vulnerability_export_part schema to gitlab_sec (merge request) GitLab Enterprise Edition
• CI/CD Settings: Migrates settings blocks to SettingsBlock (merge request)
• Filter merge requests by author (merge request) GitLab Enterprise Edition
• Project general settings: Add sr-only h1 (merge request)
• Update dependency ai-gateway to v1.12.0 (merge request)
• Sticky header color alignment between color modes (merge request)
• Change page title for subscription page (merge request) GitLab Enterprise Edition
• Update UI text for require auth in MR policies (merge request) GitLab Enterprise Edition
• Advanced Search: Index label_ids for merge requests (merge request) GitLab Enterprise Edition
• Update admin push rules (merge request)
• Show group stats when deleting from the Admin Area by @antonkalmykov (merge request)
• Remove code behind preserve_unchanged_markdown (merge request)
• Docs: Add Cloudflare IP range info for Duo (merge request) GitLab Enterprise Edition
• Update deploy keys pages (merge request)
• Finalizing batchedBackgroundMigration of CiPipelines (merge request)
• Make policy migration context aware (merge request) GitLab Enterprise Edition
• Delete requires_input.js behavior (merge request)

Deprecated (1 change)

• Stop using PrometheusAlertPresenter from graphql and remove class (merge request)

Removed (30 changes)

• Remove required_instance_ci_template column (merge request)
• Remove link_existing_lfs_object feature flag (merge request)
• Revert index on web_hook_logs (merge request)
• Delete the enable_environments_search_within_folder feature flag (merge request)
• Remove free-tier workspaces pages (merge request)
• Cleanup compliance_pipeline_in_policies feature flag (merge request) GitLab Enterprise Edition
• Delete the changelog_commits_limitation feature flag (merge request)
• Deprecated and remove continuous vulnerability (merge request) GitLab Enterprise Edition
• Remove dependency list alerts (merge request) GitLab Enterprise Edition
• Delete the json_wrapper_legacy_mode feature flag (merge request)
• Delete the order_builds_for_group_runner feature flag (merge request)
• Remove gitlab_main_clusterwide and connection (merge request)
• Remove custom CI action from Scan execution policies UI (merge request) GitLab Enterprise Edition
• Removing unused project frameworks controller (merge request) GitLab Enterprise Edition
• Remove composer cache files related code and database records (merge request)
• Remove wiki_size index on project statistics (merge request)
• Remove packages_size index from project_statistics (merge request)
• Cleanup traces of old cron job (merge request)
• Remove cloud license promotion banner (merge request) GitLab Enterprise Edition
• Chore: remove the feature flag default (merge request) GitLab Enterprise Edition
• Remove simplified_badges feature flag (merge request)
• Remove custom CI action from processing (merge request) GitLab Enterprise Edition
• Clean up phone_verification_for_low_risk_users experiment (merge request) GitLab Enterprise Edition
• Remove store first reviwer assignment timestamp FF (merge request)
• Remove pipeline execution action experiment from group settings (merge request) GitLab Enterprise Edition
• Remove geo_use_clone_on_first_sync feature flag (merge request) GitLab Enterprise Edition
• Removes unused index on project statistics (merge request)
• Drop temporary index on vulnerability_occurrences table (merge request)
• Remove Ramon related code (merge request) GitLab Enterprise Edition
• Remove unused arkose_labs_verify_api_url col from application_settings (merge request)

Security (22 changes)

• Filter parameters in Rack::Attack logs
• Fix Possible asciidoctor include:: directive DOS
• Show correct file content
• Fix the catastrophic backtracking
• Update audit payload
• Limit access to project accessed by Security Policy Bot
• Show alert about not rendering files due to path encoding
• Add a project scope to LfsTokens
• Security fixes for banzai pipeline part 2
• Remove xhtml extensions from snippets blobs
• Fix ReDoS in RefMatcher
• Enforce require_password_to_approve MR approval policy property
• Remove verify authentication token skip in cdot proxy controller
• Fix ReDoS when parsing git push options
• Attribute BulkImport::Export to a particular user
• Refactor import_export_upload to be user-based
• Don't include project-level analytics settings in DOM
• Remove prohibited tags after import
• Fix for private dotenv artifacts not accessible to downstream jobs
• Do not allow script execution on dependency responses
• Fix for private txt artifacts being accessible through the artifacts/browse link
• Disable system hooks on GitLab.com (merge request)

Performance (10 changes)

• Add preloads to AddOnPurchasesResolver (merge request) GitLab Enterprise Edition
• Remove segmented_vulnerability_report_export feature flag (merge request) GitLab Enterprise Edition
• Do not attempt to upsert existing cvs scanners (merge request)
• Only wait for contribution mapping related exports (merge request)
• Prevent timeouts in group autocomplete query (merge request)
• Skip updates for existing components and versions (merge request) GitLab Enterprise Edition
• Refactor Nuget SearchResultsPresenter (merge request)
• Adjust Bitbucket Cloud issues worker to be resumable by @ivantedja (merge request)
• Bulk insert CVS vulnerability scanners (merge request)
• Remove skip_sbom_occurrences_update_on_pipeline_id_change feature flag (merge request) GitLab Enterprise Edition

Other (124 changes)

• Remove double quotes (merge request) GitLab Enterprise Edition
• Remove group_multi_select_tokens feature flag (merge request)
• Backfill audit events into new audit events table (merge request)
• Improve documentation for the work items reordering mutation (merge request)
• Fix regex bug (merge request)
• Quarantine a flaky test (merge request)
• Add background migration for duplicates LFS object projects (merge request)
• Use Ci::Tag model for autocomplete search (merge request)
• Add PullMirrors::UpdateService (merge request) GitLab Enterprise Edition
• Alter webhook deleted audit event (merge request)
• Add & backfill multiple sharding keys for compliance_framework_security_ (merge request)
• Add resolve vulns migration (merge request)
• Add indexed_bytes in zoekt_nodes (merge request)
• Add the columns size_bytes and index_file_count (merge request)
• Remove ActsAsTaggableOn from DAST profiles (merge request)
• Remove redundant test (merge request)
• refactor: Avoid importing string literals in tests by @gerardo-navarro (merge request)
• Clean up pipeline_execution_policy_type feature flag from backend (merge request) GitLab Enterprise Edition
• Quarantine a flaky test (merge request)
• Enable ensure_lfs_object_project_uniqueness FF by default (merge request)
• Add dev widget to task work item type (merge request)
• Add migration for updating current value of max_yaml_size_bytes (merge request)
• Removes GlCarousel from the app (merge request) GitLab Enterprise Edition
• Validate migration schema message (merge request)
• Check if columns exist before running credit card hashing migration (merge request)
• Quarantine a flaky test (merge request)
• Replace text-tertiary with gl-text-tertiary (merge request)
• Replace cdark with gl-text-default (merge request)
• Remove ci_canceling_status feature flag (merge request)
• Replace cgreen with gl-text-green-600 (merge request)
• Replace bg-white with gl-bg-white (merge request)
• workhorse: refactor access to Gitaly Sidechannel (merge request)
• Support expected_old_oid for UserApplyPatch (merge request)
• Enhance hand raise modal button layout for mobile (merge request) GitLab Enterprise Edition
• Add NOT NULL for sharding key on deployment_approvals (merge request)
• Add the default value for reserved_storage_bytes (merge request)
• Add and backfill project_id for error_tracking_error_events (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Guard PAT last_used_at updates with exclusive lease (merge request)
• Add and backfill project_id for vulnerability_occurrence_pipelines (merge request)
• Replace text-success with gl-text-success (merge request)
• Add and backfill project_id for vulnerability_occurrence_identifiers (merge request)
• Update default max_yaml_size_bytes to 2 MB (merge request)
• Quarantine a flaky test (merge request)
• Protected packages: Push protection for deploy token by @gerardo-navarro (merge request)
• Mark 20230724070100 as obsolete (merge request) GitLab Enterprise Edition
• Override for assign_resource_worker_deduplicate_until_executing (merge request)
• Remove unused text-metric class (merge request)
• Use gl-fill-icon-subtle for close icon on Dismissible Container (merge request)
• Remove 'text-plain' util class from common.scss (merge request)
• Add and backfill project_id for packages_package_files (merge request)
• Add and backfill project_id for vulnerability_finding_links (merge request)
• Add jacoco file limit (merge request)
• Add and backfill project_id for approvals (merge request)
• Replace cgray with gl-text-primary (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Replace bold class with gl-font-bold (merge request)
• Replace 'text-danger' with 'gl-text-danger' (merge request)
• Add and backfill project_id for merge_request_user_mentions (merge request)
• Quarantine a flaky test (merge request)
• Add and backfill sharding keys for deploy_tokens (merge request)
• test: Add missing feature category by @gerardo-navarro (merge request)
• Quarantine a flaky test (merge request)
• Remove feature flag (merge request) GitLab Enterprise Edition
• Use tailwind util classes for semantic color usage in What's New (merge request)
• Add and backfill namespace_id for epic_issues (merge request)
• Use semantic link color in app/assets/stylesheets/errors.scss (merge request)
• Remove index_vulnerability_occurrences_on_primary_identifier_id (merge request)
• Quarantine a flaky test (merge request)
• Replace fgray with gl-fill-gray-500 and remove fwhite (merge request)
• Move PolicyScopeService to lib (merge request) GitLab Enterprise Edition
• Mark 20230823154049 as obsolete (merge request) GitLab Enterprise Edition
• Use semantic token in bootstrap_migration_reset.scss (merge request)
• Add advisory lock to lfs_objects_project model (merge request)
• Add regex argument (merge request) GitLab Enterprise Edition
• Remove unused fetch method and add Storybook entry (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Add and backfill project_id for evidences (merge request)
• Use semantic tokens in broadcast_messages.scss (merge request)
• Use semantic tokens in calendar.scss (merge request)
• Use semantic tokens in app/assets/stylesheets/framework/blocks.scss (merge request)
• Mark 20230719211400 as obsolete (merge request) GitLab Enterprise Edition
• Add basic methods to abuse report note model (merge request)
• Mark 20230824114205 as obsolete (merge request) GitLab Enterprise Edition
• Backfills the user_details records for users that do not have one (merge request)
• Mark 20230908120634 as obsolete (merge request) GitLab Enterprise Edition
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Mark 20230722212041 as obsolete (merge request) GitLab Enterprise Edition
• Mark 20230901120542 as obsolete (merge request) GitLab Enterprise Edition
• Mark 20230720000000 as obsolete (merge request) GitLab Enterprise Edition
• Refactor MirrorsController: move pull mirror code to EE (merge request) GitLab Enterprise Edition
• Mark 20230831152648 as obsolete (merge request) GitLab Enterprise Edition
• Remove the references of FF zoekt_exact_search (merge request)
• Add reserved_storage_bytes to zoekt_indices (merge request)
• Mark 20230911205548 as obsolete (merge request) GitLab Enterprise Edition
• Use semantic tokens in diff_file_component.scss (merge request)
• Use semantic tokens in app/assets/stylesheets/components/avatar.scss (merge request)
• Requeue partitioning backfill for build group reports (merge request)
• Implement index addition (merge request)
• Add and backfill group_id for approval_group_rules_protected_branches (merge request)
• Remove diff_preview_in_email feature flag (merge request)
• Remove move_issue_children feature flag (merge request)
• Remove NOT NULL on policy_id for scan_result_policy_violations (merge request)
• Add index for owasp_top_10 group level reports (merge request)
• Replace flag synced_epic_work_item_editable with work_item_epics (merge request) GitLab Enterprise Edition
• GitLab pages: Improve test pages_domain_spec.rb by @gerardo-navarro (merge request)
• Add p_ci_builds upstream_pipeline_partition_id (merge request)
• Quarantine a flaky test (merge request)
• Introduce lock-free rescheduling for duplicate job (merge request)
• Remove ignores for imported column (merge request)
• Add and backfill group_id for approval_group_rules_users (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Run cron job daily (merge request)
• Protected packages: Cleanup renaming of protected_up_to_access_level by @gerardo-navarro (merge request)
• Dynamically gets the column type for assertion (merge request)
• Quarantine a flaky test (merge request)

17.2.9 (2024-10-09)

Fixed (1 change)

• Ensure levels is an array

Security (8 changes)

• Do not create a pipeline on MR refresh if source branch was deleted (merge request)
• Escape OAuth application name on authorize page (merge request)
• Prevent guest access to project templates (merge request)
• Remove access to local requests via cube query service (merge request)
• External webhook token should be set (merge request)
• Skip content when listing conflict files with types (merge request)
• Hide version info from unauthorized users (merge request)
• Prevent deploy keys from pushing code to an archived project (merge request)

17.2.8 (2024-09-24)

Security (3 changes)

• Implement input sanitization for SummarizeComments (merge request)
• Hide system notes with invalid references (merge request)
• Reset dependency proxy maven credentials when registry url is changed (merge request)

17.2.7 (2024-09-16)

No changes.

17.2.6 (2024-09-13)

No changes.

17.2.5 (2024-09-11)

Fixed (2 changes)

• Fix Sidekiq crashing when GITLAB_LOG_LEVEL set to debug
• Backport Fixes Geo Replication Details view GitLab Enterprise Edition

Changed (2 changes)

• Backport OpenSSL v3 callout to 17.2
• Update google-cloud-core and google-cloud-env gems

Security (19 changes)

• Revert "Merge branch 'security-psk-fix-external-wiki-integration-dos-17-2' into '17-2-stable-ee'" (merge request)
• Fix the vulnerability in the glm_source parameter (merge request)
• Improve GraphQL log security (merge request)
• Add permissions check to project creations from a project template (merge request)
• Fix credentials disclosure in mirroring failure (merge request)
• Redirect url in the link validated for being external (merge request)
• [17.2] Update edit permissions for DAST profiles (merge request)
• Commit information visible through release atom endpoint for guest users (merge request)
• Execute environment stop actions as the owner of the action (merge request)
• Prevent code injection in Product Analytics funnels YAML (merge request)
• Prevent users with admin_group_member custom ab. to manage custom roles (merge request)
• Fixed frontend regex to parse URI (merge request)
• Use session instead of params for identity linking (merge request)
• Fix external wiki integration DoS by changing request to HEAD (merge request)
• Restrict IPs for packages dependency proxy (merge request)
• Strip out Set-Cookie header from dependencyproxy auth response (merge request)
• Fix open redirect due to additional slash added (merge request)
• Group Developers can view group runners (merge request)
• Enforce Pipeline execution policy variables for template rules (merge request)

17.2.4 (2024-08-21)

Security (1 change)

• Always build assets image when tagging (merge request)

17.2.3 (2024-08-20)

Fixed (3 changes)

• Turn NotFound from Gitaly into 404 for InfoRefs
• Fix empty dependency list page GitLab Enterprise Edition
• Properly handle empty repository.ff_merge in FromTrainRef merge strategy GitLab Enterprise Edition

Changed (1 change)

• Include language server version in code suggestions GitLab Enterprise Edition

Security (4 changes)

• Do not run pipelines when resolving vulnerability (merge request)
• Add Octokit::ResponseValidation middleware (merge request)
• IP restriction to prevent all group permissions (merge request)
• Destroy associated releases when removing a tag via Git CLI (merge request)

Other (1 change)

• Check if columns exist before running credit card hashing migration

17.2.2 (2024-08-06)

Fixed (2 changes)

• bug: Fix template error due to divided by zero
• Ignore unknown sequences in sequence fix migration

Changed (2 changes)

• Reverify externally verified gpg keys
• Put groups_direct field in CI JWT tokens behind feature flag

Security (13 changes)

• Show correct file content (merge request)
• Fix Possible asciidoctor include:: directive DOS (merge request)
• Filter parameters in Rack::Attack logs (merge request)
• Update audit payload (merge request)
• Limit access to project accessed by Security Policy Bot (merge request)
• Show alert about not rendering files due to path encoding (merge request)
• Fix the catastrophic backtracking (merge request)
• Security fixes for banzai pipeline part 2 (merge request)
• Remove xhtml extensions from snippets blobs (merge request)
• Add a project scope to LfsTokens (merge request)
• Fix ReDoS when parsing git push options (merge request)
• Fix ReDoS in RefMatcher (merge request)
• Enforce require_password_to_approve MR approval policy property (merge request)

Other (1 change)

• Introduce lock-free rescheduling for duplicate job

17.2.1 (2024-07-24)

Fixed (1 change)

• Fix PEP when SEC is available GitLab Enterprise Edition

Security (7 changes)

• Refactor import_export_upload to be user-based (merge request)
• Fix for private txt artifacts being accessible through the artifacts/browse link (merge request)
• Attribute BulkImport::Export to a particular user (merge request)
• Don't include project-level analytics settings in DOM (merge request)
• Fix for private dotenv artifacts not accessible to downstream jobs (merge request)
• Do not allow script execution on dependency responses (merge request)
• Remove prohibited tags after import (merge request)

17.2.0 (2024-07-17)

Added (159 changes)

• Add status to scan result policy violations (merge request) GitLab Enterprise Edition
• Add new run keyword under job (merge request)
• Protected containers: Add PATCH REST API for container protection rules by @nwittstruck (merge request)
• Added filters for multiple compliance frameworks (merge request) GitLab Enterprise Edition
• Add Duo Enterprise to provision service for add-ons (merge request) GitLab Enterprise Edition
• Add Duo Pro end trial widget (merge request) GitLab Enterprise Edition
• Add RoR tutorial to Observability docs (merge request)
• Enable container scanning for registry (merge request)
• Add willAutoCloseByMergeRequest field to work items API (merge request)
• Add Duo Enterprise to provision service for add-ons (merge request) GitLab Enterprise Edition
• Add models for Virtual Registries, part 1/2 (merge request)
• Add the API to return the multi_matches in a single file (merge request) GitLab Enterprise Edition
• Ensure uniqueness p_ci_job_annotation (merge request)
• Add job action button to PMG (merge request)
• Add migration to add seat control column to namespace settings table (merge request)
• Display ratios instead of counts in CI/CD Analytics (merge request)
• Add Importer User for imports user mapping (merge request)
• Workhorse: HTTP endpoint for bidirectional SSH git-receive-pack data (merge request) GitLab Enterprise Edition
• Add GraphQL API for Duo Pro seats assigned and used (merge request) GitLab Enterprise Edition
• Enable direct code completions by default (merge request) GitLab Enterprise Edition
• Added mutation for updating frameworks of projects (merge request) GitLab Enterprise Edition
• Updates AI merge commit message to be GA (merge request)
• Add gitlab-advanced-sast as a SAST job template (merge request) GitLab Enterprise Edition
• Update the search code according to the replica (merge request) GitLab Enterprise Edition
• Add the API to return the multi_matches in a single file (merge request) GitLab Enterprise Edition
• Add merge_request.squash git push option (merge request)
• Add by_pipeline_ids scope for occurrences (merge request)
• Release secret push protection for self-managed instances (merge request) GitLab Enterprise Edition
• Add ability to delete task list items (merge request)
• Enable store first reviewer FF by default (merge request)
• Add support for LDAP group sync with custom roles (merge request) GitLab Enterprise Edition
• Add delete mutation for deleting self-hosted models (merge request) GitLab Enterprise Edition
• Add REST API endpoints to manage uploads (merge request)
• This MR adds performance warning modal (merge request) GitLab Enterprise Edition
• Protected containers: New GraphQL field "protectionRuleExists" by @gerardo-navarro (merge request)
• Add ci_component_source_policy (merge request)
• Add support for comments in rich text editor (merge request)
• Add the API to return the multi_matches in a single file (merge request) GitLab Enterprise Edition
• Add reviewer first assigned at VSA stage event (merge request) GitLab Enterprise Edition
• Add page metadata to work items (merge request)
• Create p_ci_finished_pipeline_ch_sync_events table (merge request)
• Add Rake task to show token expiration info (merge request)
• Add and set uploaded_by_user_id on Upload records (merge request)
• Set first MR assigned for review timestamp metrics (merge request)
• Expose VSD overview counts for projects (merge request) GitLab Enterprise Edition
• Create country_access_logs table (merge request) GitLab Enterprise Edition
• Show real page title in wiki sidebar (merge request)
• GraphQL: Add PipelineAnalyticsPeriod type (merge request)
• CI/CD Catalog: Add description, type to components (merge request)
• Protected containers: POST REST API for container protection rules by @nwittstruck (merge request)
• Add Users::ActivityEvent and pub/sub logic (merge request)
• Add status column to duo workflows (merge request) GitLab Enterprise Edition
• Enables inheritance field param via the Integrations API (merge request)
• Add hasParent field to hierarchy widget (merge request)
• Add UI for CI_JOB_TOKEN permission settings (merge request)
• Document SPP known limitation (merge request)
• Remove ci_expand_variables_in_compare_to FF (merge request)
• Separate wiki page title and URL fields (merge request)
• Remove the gitlab_duo_usage_menu_item feature flag (merge request) GitLab Enterprise Edition
• Remove references to hamilton_seat_management feature flag (merge request) GitLab Enterprise Edition
• Add FK to VSA stage event hashes organization_id (merge request)
• Release pipeline execution policy type (merge request) GitLab Enterprise Edition
• Update Analytics Dashboards' viewed/created/edited tracking events (merge request) GitLab Enterprise Edition
• Update GitLab Pages version (merge request)
• Add owners internal endpoint (merge request) GitLab Enterprise Edition
• Add banned/blocked indicator to card matches admin page (merge request) GitLab Enterprise Edition
• Recreate ci_finished_pipelines ClickHouse table (merge request)
• Add endpoint to update list of X-Ray dependencies (merge request) GitLab Enterprise Edition
• Add imported_from value to github importer (merge request)
• Create ci_finished_pipelines ClickHouse table (merge request)
• Add compliance center for premium customers (merge request) GitLab Enterprise Edition
• Add badge for feedback on new epics (merge request)
• Add a validation about project assignment to a replica (merge request) GitLab Enterprise Edition
• Add support for LDAP group sync with custom roles (merge request) GitLab Enterprise Edition
• Create audit event when deploying to protected environment (merge request) GitLab Enterprise Edition
• Add new namespaces/namespace_id route (merge request) GitLab Enterprise Edition
• Add support for groups in policy scope (merge request) GitLab Enterprise Edition
• Show TOC of a wiki page in sidebar (merge request)
• Add table to record placeholder contributions (merge request)
• Migration to populate vulnerability_reads.identifier_external_ids (merge request)
• Add runner fleet dashboard visit metric (merge request) GitLab Enterprise Edition
• Add more log fields in 401 Unauthorized requests (merge request)
• Add imported_from to bb cloud resources (merge request)
• Integration for Beyond Identity exclusions by groups (merge request)
• Add hybrid search query for issues (merge request) GitLab Enterprise Edition
• Add job item to pipeline mini graph (merge request)
• Add imported_from value to gitea imported resources (merge request)
• Add GraphQL API for AI Acceptance Rate (merge request) GitLab Enterprise Edition
• Create audit event for container repository tag deletion (merge request) GitLab Enterprise Edition
• Add tracking to metric drill-down links in VSD and AI Impact tables (merge request) GitLab Enterprise Edition
• Perform chat requests via new endpoint (merge request) GitLab Enterprise Edition
• Added mutation for updating MemberApprovals (merge request) GitLab Enterprise Edition
• Add new internal users endpoint (merge request) GitLab Enterprise Edition
• Add imported_from value to bb server resources (merge request)
• Add support for legacy epic references in workItemsByReference query (merge request) GitLab Enterprise Edition
• Add in pipeline stage dropdown (merge request)
• Add branch_filter_strategy to system, group and project hooks by @clxrx (merge request)
• Add duo enterprise add-on type (merge request) GitLab Enterprise Edition
• Add update mutation for the self-hosted models Vue client to leverage (merge request)
• Protected packages: Add label "protected" to package list on group level by @gerardo-navarro (merge request)
• Protected containers: Add GET to REST API for container protection rules by @nwittstruck (merge request)
• Add gitlab_sec db connection and application record (merge request)
• Fill out fields on InputType (merge request)
• Adds configurable default Service Desk ticket visibility (merge request)
• Add error message for failed association deletion (merge request)
• Allow admin_runner to create a runner linked to a user (merge request) GitLab Enterprise Edition
• Allow push to the own repo using CI_JOB_TOKEN (merge request)
• Adds reusable SettingsSection component (merge request)
• Enable runner dashboard for groups (merge request) GitLab Enterprise Edition
• GraphQL: Add job execution status to runner manager (merge request)
• Auditing framework assign and unassign to a project (merge request) GitLab Enterprise Edition
• Add runner CSV export metrics at project and group level (merge request) GitLab Enterprise Edition
• WorkItems: Fix rolledup dates when removing child (merge request) GitLab Enterprise Edition
• feat: Add configuration for sec DB (merge request)
• GraphQL: API for retrieving most used runners (merge request) GitLab Enterprise Edition
• GraphQL: Add percentiles to QueueingHistoryTimeSeries (merge request) GitLab Enterprise Edition
• GraphQL: Add upgradeStatus field to RunnerType (merge request) GitLab Enterprise Edition
• Add support for Claude 3.5 Sonnet for code generation (merge request) GitLab Enterprise Edition
• Bump rouge to 4.3.0 with the new IEC 61131-3 Structured Text lexer by @bufferoverflow (merge request)
• Add secure schemas version 15.1.4 and 5.1.3 (merge request)
• Add metadata to group work item page (merge request)
• Add NOT NULL on merge_request_id (merge request)
• Add merge and closed user ids to MR metrics (merge request)
• Pass org in export part creation (merge request) GitLab Enterprise Edition
• Add support for child pipelines to SBOM ingestion (merge request) GitLab Enterprise Edition
• Add option to sort Pipeline Schedules to frontend by @schurzi (merge request)
• Add ability to create label in work item labels widget (merge request)
• Allow admin_runner ability to change stale runner pruning setting (merge request) GitLab Enterprise Edition
• Adds type to issue webhook attributes (merge request)
• Add button for adding additional seats to error messages (merge request) GitLab Enterprise Edition
• Adds the CRUD Container component (merge request)
• Add variables field into PipelineType (merge request)
• Show latest version on version creation (merge request)
• Backfills gitlab group issue embeddings on gitlab.com (merge request) GitLab Enterprise Edition
• Enforce rate limits for notification emails (merge request)
• Release CI/CD popularity count and sort (merge request)
• Remove ci_expand_nested_resource_group_variables FF (merge request)
• Protected packages: REST API PATCH package protection rules by @nwittstruck (merge request)
• Add api to return group's shared groups by @imskr (merge request)
• Protected containers: Allow nil value for fields minimum_access_level by @gerardo-navarro (merge request)
• Add maintenance mode banner to edit frameworks UI (merge request) GitLab Enterprise Edition
• Add cargo to supported sbom and sync types (merge request)
• Add disabled_direct_code_suggestions setting (merge request) GitLab Enterprise Edition
• AI impact analytics dashboard is now generally available (merge request) GitLab Enterprise Edition
• Adds inheritance settings to API::Integrations (merge request)
• Remove identity_verification_arkose_challenge feature flag (merge request) GitLab Enterprise Edition
• Added include_forked filter to the zoek search (merge request)
• Extend organization to snippets table (merge request)
• Include required backend data for the Project Header (merge request)
• Added create and delete apis for instance level namespace filters (merge request) GitLab Enterprise Edition
• Add approval_policy_rule_id index and foreign key (merge request)
• Add pod logs buttons (merge request)
• Add support for rendering readme in terraform package details page (merge request)
• Create container_repository_deletion_marked audit event (merge request) GitLab Enterprise Edition
• Protected packages: REST API POST package protection rule by @nwittstruck (merge request)
• Adjust logic to add org to export (merge request) GitLab Enterprise Edition
• Add mediaType as a field to Tag (merge request)
• Adds List-Unsubscribe-Post header to notification emails (merge request)
• Add member_role_id to ldap_group_links (merge request) GitLab Enterprise Edition

Fixed (162 changes)

• Exclude scripts from coherence check when publishing npm packages (merge request)
• Relax the version comparison for NPM uploads (merge request)
• Fix worker when record not found (merge request) GitLab Enterprise Edition
• Fix Content-Disposition not working for Azure in API download (merge request)
• Display error when delete framework fails (merge request) GitLab Enterprise Edition
• Cobertura parser: Extract filename OS-agnostically by @bmarconato (merge request)
• Fixed Productivity Analytics date range calculations (merge request) GitLab Enterprise Edition
• Fix IDE Duo Chat timeout (merge request) GitLab Enterprise Edition
• Support auth credentials from URI for pull mirror validation (merge request)
• Remove invalid foreign key fk_87f4cefcda_p (merge request)
• Fix calculations for predefined date ranges in Value Stream Analytics (merge request)
• Use sentence case for work items "Linked items" header (merge request)
• Fix custom emoji display (merge request)
• Fix pipeline subscription error flash message display (merge request) GitLab Enterprise Edition
• Remove zoekt dependency from elasticsearch (merge request) GitLab Enterprise Edition
• Fix custom role bug with requirements (merge request) GitLab Enterprise Edition
• Fix issues with quick action explanations (merge request)
• Fix notification emails not being sent when using external authorization by @pR0Ps (merge request)
• Clear seat assignments cache on bulk upsert (merge request) GitLab Enterprise Edition
• Fix how maven dependency proxy credentials are sent (merge request) GitLab Enterprise Edition
• Remove validation for ProtectedRef access levels (merge request)
• Make complianceFrameworks field work for subgroups (merge request) GitLab Enterprise Edition
• Introduce dedup lock for rescheduling jobs (merge request)
• Fix GitHub Import when importing from GHE (merge request)
• Fix alignment of admin groups header (merge request)
• Parse the package.json file entirely for NPM uploads (merge request)
• Authenticate the GitLab Duo usage controller (merge request) GitLab Enterprise Edition
• Fix new issue note for group level issues (merge request)
• Remove milestone truncation on issues/merge requests dashboard (merge request)
• Protected packages: Npm package push protection for admin user by @gerardo-navarro (merge request)
• Work Item Epic feedback close on click (merge request)
• Fix work item sticky header (merge request)
• Fix bug with achievements path when feature flag not globally enabled (merge request)
• Protected packages: Fix documentation by @nwittstruck (merge request)
• Add workItemType check for weight widget for epics (merge request)
• Exclude disabled custom permissions (merge request) GitLab Enterprise Edition
• Prevent modal close on comment submission (merge request)
• Remove empty minimum_should_match from query (merge request) GitLab Enterprise Edition
• Prevent running scans from execution policies after downgrading license (merge request) GitLab Enterprise Edition
• Fix wildcard package.json search in npm upload (merge request)
• Fix sync failure retry backoff (merge request) GitLab Enterprise Edition
• Exclude last page link from projects/id/repository/commits endpoint (merge request)
• Unify spacing in group and project item components (merge request)
• Fix MR approval policy prevent_pushing_and_force_pushing enforcement (merge request) GitLab Enterprise Edition
• Update static_holmes to v0.7.11 (merge request)
• Fix meta.root_namespace not logging for groups API requests (merge request)
• Remove fix_sso_enforcement_for_web_activity feature flag (merge request) GitLab Enterprise Edition
• Fix layout of filtered search for pipelines page on mobile (merge request)
• Fix cached introspection query and graphql-explorer (merge request)
• Ignore object pool already exists creation errors (merge request)
• Fix approval policy type detection for policies list (merge request) GitLab Enterprise Edition
• Fix polling when retrying status check (merge request) GitLab Enterprise Edition
• Fix NoMethodError in PathLocksController (merge request) GitLab Enterprise Edition
• Protected packages: Remove developer as an example from documentation by @nwittstruck (merge request)
• Ignore selected project if adding epic (merge request)
• Remove Bad spacing in pending comment by @Deepak18-06 (merge request) GitLab Enterprise Edition
• Fix merge train merge availability when pipeline is canceling (merge request) GitLab Enterprise Edition
• Fix broken schema path (merge request) GitLab Enterprise Edition
• Fix incorrect retry warning when merge trains are enabled (merge request) GitLab Enterprise Edition
• Fix Zoekt exact match (merge request) GitLab Enterprise Edition
• Forking project to groups with restricted visibility levels by @gerardo-navarro (merge request)
• Title returns a default value if no advisory title (merge request) GitLab Enterprise Edition
• When activity token is cleared set query to all values (merge request) GitLab Enterprise Edition
• Fix issues mailer for group level issues (merge request)
• Display unverified badge for signed commits without a signature (merge request)
• Fix related items header in dark mode (merge request)
• Reduce getPipelineDetails query complexity below 200 (merge request)
• Fix issue description task actions focus bug (merge request)
• Reset form error when tokens change after submission failure (merge request)
• Do not create empty rule for branch specific rules (merge request) GitLab Enterprise Edition
• Reinstate dt disabled message (merge request)
• Fix submit keyboard shortcut on commit page (merge request)
• Remove custom CSS to fix modal background color (merge request)
• Fix badge issues and sticky header (merge request)
• Skip approval updates for merged MRs (merge request) GitLab Enterprise Edition
• Fix ambiguous namespace_id in query (merge request)
• Pass session_id to nested sidekiq calls (merge request) GitLab Enterprise Edition
• Prevent redudant finalisations of segmented exports (merge request) GitLab Enterprise Edition
• Allow Developers to create projects from templates (merge request)
• Fix flaky test in SyncFunnelsWorker by @max.woolf (merge request) GitLab Enterprise Edition
• Fix URL generation for links with spaces (merge request)
• Fix Link header for Tree API requests (merge request)
• Fix issue creation on board with scope set to No iteration (merge request) GitLab Enterprise Edition
• Fix setting the organization_id for vulnerability exports (merge request) GitLab Enterprise Edition
• Field needs to be called Url (merge request)
• Fix bulk_import history prop type check (merge request)
• Upgrade graphql-client GEM (merge request)
• Fix Milestone collapsed sidebar, adjust some aspects of issue sidebar (merge request)
• Add safeguard for author (merge request) GitLab Enterprise Edition
• Geo: Update the host to build the replication details links by @antonkalmykov (merge request) GitLab Enterprise Edition
• Add missing "Deploy Keys" breadcrumb item (merge request)
• Allow viewing hook logs with admin_hook permission (merge request) GitLab Enterprise Edition
• Recreate records when moving issues (merge request) GitLab Enterprise Edition
• Authenticate agent requests using Gitlab-Agentk-Api-Request header (merge request)
• Fix Verification concurrency limit (merge request) GitLab Enterprise Edition
• SSO enforcement for web activity should only apply to current_user (merge request) GitLab Enterprise Edition
• Display the number of rules for a given branch only (merge request) GitLab Enterprise Edition
• Fix sticky header badges shrinking (merge request)
• Fix DML not allowed error when creating views (merge request)
• Use pajamas default left and right spacings on Roadmap page (merge request) GitLab Enterprise Edition
• Fix orphaned work item parent links (merge request) GitLab Enterprise Edition
• Add jwt for jira connect branches (merge request)
• Do not wrap flex parent of verified badge and commit copy button (merge request)
• Protected packages: NPM push protection for deploy token by @gerardo-navarro (merge request)
• Use universal_stylesheet_link_tag in app layout head haml (merge request)
• Improve error message when setting parent of a work item (merge request)
• Fix search bar accessibility issues (merge request)
• Allow to set "No one" level for branch protection defaults (merge request)
• Fix MailRoom not loading in Omnibus (merge request)
• Change fixture order (merge request)
• Don't trigger edit wiki shortcut when using search (merge request)
• Include action in webhook test payloads (merge request)
• Fix issue using multiple contact quick actions at the same time (merge request)
• Correct finalize migration for BackfillEpicBasicFieldsToWorkItemRecord (merge request)
• Remove extra gap when 0 roadmap epics have children (merge request) GitLab Enterprise Edition
• Fix finding name in regards to image name (merge request) GitLab Enterprise Edition
• Validate provided group parameters (merge request) GitLab Enterprise Edition
• Vertically align group and project header (merge request)
• Fix undefined method error for invalid ref (merge request)
• Fix NoMethodError for Files API (merge request)
• Do not show minimal access role as option (merge request)
• Include pagination values in request (merge request)
• DAST Scan library: Fix Tailwind classname (merge request)
• Fix line number for larger numbers (merge request)
• Fix 500 on Changelog config (merge request)
• Fix spacing info popover icon on dependencies table (merge request) GitLab Enterprise Edition
• Revert "Merge branch '430915-enhance-permission-selector' into 'master'" (merge request) GitLab Enterprise Edition
• Do not show cluster image scanning vulnerabilities on development tab (merge request) GitLab Enterprise Edition
• Cap vulnerability report tab count if it exceeds cap count limit (merge request) GitLab Enterprise Edition
• Enable the query workItemsByReference to accept a group path (merge request) GitLab Enterprise Edition
• Improve work item query when sorting by updated_at (merge request)
• Don't introduce Unicode null character while escaping it (merge request) GitLab Enterprise Edition
• Fix related work item links syncing (merge request) GitLab Enterprise Edition
• Fix extra blank space above drawer work item attributes sidebar (merge request)
• Only enumerate commits in pre-receive check if push came from Web (merge request)
• Fix layout of issue list top area on small viewports (merge request)
• Fix the workItemType to be valid (merge request)
• Ensure all analytics breadcrumbs display (merge request) GitLab Enterprise Edition
• Fix missing forked_from_project in projects API for unauth users by @_ZN3val (merge request)
• Fixes notebook markdown failing to render (merge request)
• Fixed Numpad enter key event (merge request)
• Fix error message when adding confidential epic to public issue (merge request) GitLab Enterprise Edition
• Include empty groups in mentions autocomplete (merge request)
• Fix Bitbucket importer MR reviewers (merge request)
• Use widget presence check for rendering Hierarchy widget (merge request) GitLab Enterprise Edition
• Skip IP lookups in validating URLs on certain conditions (merge request)
• Add missing ResourceLinkEvent#synthetic_note_class (merge request)
• Fix missing require_reauthentication_to_approve in API (merge request) GitLab Enterprise Edition
• Fix Inactive Project Deletion reset deletion date by @Deepak18-06 (merge request)
• Remove the deduplicate_security_report_ingestion_jobs FF (merge request) GitLab Enterprise Edition
• Apply gl-break-word to test file name in Pipeline test suite detail (merge request)
• Remove null bytes when importing diffs (merge request)
• Fix resolving namespace conflicts on creating internal user (merge request)
• Fix redirect to docs.gitlab.com when no custom doc_url is configured (merge request)
• Quarantine metrics_test_fetches_top_job_data (merge request)
• Fix rename functionality using "Edit single file" (merge request)
• Resolve pagination issue (merge request)
• Read more: Fix background color in darkmode (merge request)
• Use LocalStorage for frequently used emoji (merge request)
• Fix alignment of commit in admin jobs page (merge request)
• Fix kubernetes tabs (merge request)
• Skip conflict check when adding to merge train on pipeline success (merge request) GitLab Enterprise Edition

Changed (231 changes)

• Change schema for sbom_sources (merge request)
• Disables remaining prometheus integration endpoints (merge request)
• Change format of iteration dates (merge request) GitLab Enterprise Edition
• Use sentence case for security and compliance (merge request)
• Rename DAG feature to needs (merge request)
• Clarifies error text for confidentiality (merge request)
• Improve AI impact analytics dashboard trend indicator tooltips (merge request) GitLab Enterprise Edition
• Update admin health check page UI (merge request)
• Update scheduled_scans_max_concurrency for self-managed (merge request) GitLab Enterprise Edition
• Defaulting Duo Chat to use Sonnet 3.5 and updating related documentation (merge request) GitLab Enterprise Edition
• Cleanup telesign_high_risk_cc_validation feature flag (merge request) GitLab Enterprise Edition
• Updating LooseForeignKey cleaner service to not raise (merge request)
• Backfill zoekt replicas on zoekt indices (merge request)
• Use sentence case for Admin area (merge request)
• Use group organization for import user personal namespace (merge request)
• Update background jobs header (merge request)
• Remove pages from navigation when disabled in settings by @Taucher2003 (merge request)
• Remove view summary experiment label (merge request) GitLab Enterprise Edition
• This MR adds new option for group dropdown (merge request) GitLab Enterprise Edition
• Migrate os sbom occurrences to correct components (merge request)
• Use monospace font for code inputs in Pages setup (merge request)
• Add or text between conditions sections for scan result policy by @jzeng88 (merge request) GitLab Enterprise Edition
• Move CI lint button (merge request)
• Separate terminated workspaces into a new tabbed list view (merge request) GitLab Enterprise Edition
• Summarize issues using Anthropic (merge request)
• Add details to client-side secret detection warnings (merge request)
• Enforce job uniqueness with pipeline execution policies (merge request) GitLab Enterprise Edition
• Use sentence case for audit events (merge request)
• Renames TanukiBot to GenerateEmbeddingsCompletionsService (merge request) GitLab Enterprise Edition
• Merge notes unification FF under more generic unification FF (merge request)
• Author admin permissions for PersonalSnippet notes (merge request)
• Merge Request auto close issues now checked on merge (merge request)
• Verify replicable after create/update (merge request) GitLab Enterprise Edition
• Add Notify mutation to resend email (merge request)
• feat: Decompose sbom_source_packages from sbom_occurrences (merge request) GitLab Enterprise Edition
• Use Duo for summarize comments (merge request)
• GraphQL: Rename CiRunnerJobExecutionStatus RUNNING to ACTIVE (merge request)
• Update health check page (merge request)
• Update usage trends feature to sentence case (merge request)
• Use sentence case for background migrations (merge request)
• Used new process to gen gitleaks.toml (merge request)
• Merge labels unification FF under more generic unification FF (merge request)
• Show selected work item labels at top of the list (merge request)
• Migrate groups dashboard to filtered search and sort (merge request)
• Use Active badge instead of Running badge in runners list (merge request)
• Update admin background jobs page (merge request)
• Add license type to overview (merge request) GitLab Enterprise Edition
• Update dependency ai-gateway to v1.10.0 (merge request)
• Add title and subtitle on the standalone GitLab Duo settings page (merge request) GitLab Enterprise Edition
• Exclude archived projects from dependency list search filter (merge request) GitLab Enterprise Edition
• Hide Service Desk from navigation if disabled in settings by @Taucher2003 (merge request)
• Remove Gitlab.com check for last_published_at (merge request)
• Always allow license sorting for group dependency list (merge request) GitLab Enterprise Edition
• Update spam logs UI (merge request)
• feat: Add doorkeeper device auth support by @johnwparent (merge request)
• Explain quick actions inline in RTE (merge request)
• Add linked projects to framework (merge request) GitLab Enterprise Edition
• Enable submit button by default (merge request) GitLab Enterprise Edition
• AI impact analytics dashboard: Add tooltip when there is no % change (merge request) GitLab Enterprise Edition
• Remove search_merge_request_query_builder FF (merge request) GitLab Enterprise Edition
• Move merge request files now shown warning to diff panel (merge request)
• Notify Admin re: the hierarchy limits in displaying Group(s) statistics (merge request)
• Allow filtering Resource Access Tokens by state in the REST API (merge request)
• Add seats_in_use to GitlabSubscriptionHistory trarcked attributes (merge request) GitLab Enterprise Edition
• Sets elaticsearch_issue_upsert flag as default enabled (merge request) GitLab Enterprise Edition
• Add placeholder data to member tabs (merge request)
• Prohibit "default" as compliance framework name (merge request) GitLab Enterprise Edition
• Backfilling null project_id for p_ci_builds (merge request)
• Switch deployment approvals group view to Vue (merge request) GitLab Enterprise Edition
• Update protected environments to handle group view (merge request) GitLab Enterprise Edition
• Add trial and update users_over_license_count in CurrentLicenseType (merge request) GitLab Enterprise Edition
• List selector component for groups can fetch project only groups (merge request) GitLab Enterprise Edition
• Update admin credentials page (merge request)
• Update Tools Injector Image, PAT scope with additional ENV (merge request)
• Update Cloud Connector architecture docs (merge request) GitLab Enterprise Edition
• Update admin background migrations (merge request)
• Clarify CI Job Token wording (merge request)
• Adds info alert about cleanup policy regexp anchors (merge request)
• Remove unicode_escaped_blob feature flag (merge request)
• Update admin topic page (merge request)
• Added Promotion Management for CreatorService (merge request) GitLab Enterprise Edition
• Allow access token access to usage_data API (merge request)
• Default cube analytics queries to the last 7 days (merge request) GitLab Enterprise Edition
• Refactors QueueExistingMemberService (merge request) GitLab Enterprise Edition
• Enable custom dashboards by default on projects (merge request) GitLab Enterprise Edition
• Fixing target_table_name for build_name foreign key (merge request)
• Make filter based visualization designer generally available (merge request) GitLab Enterprise Edition
• Ignore confidence column on Security::Finding (merge request) GitLab Enterprise Edition
• Remove DuoChat from Help center (merge request) GitLab Enterprise Edition
• Remove wiki sidebar limit (merge request)
• Improve token access add form (merge request)
• Move create repo position (merge request)
• Fix CI icons shape (merge request)
• Support expanding references for work items (merge request)
• Align the visual presentation of the action between groups and projects by @antonkalmykov (merge request) GitLab Enterprise Edition
• Update admin project layout (merge request)
• Align admin users account content (merge request)
• Clean up signup_intent_step_one experiment (merge request) GitLab Enterprise Edition
• Show wiki sidebar on a 404 page (merge request)
• This MR adds validation for policy action (merge request) GitLab Enterprise Edition
• Update welcome screen (merge request)
• Update users page for admin view (merge request)
• Update concurrency_limit for CreatePipelineWorker (merge request) GitLab Enterprise Edition
• Added Finder, and correponding scope (merge request) GitLab Enterprise Edition
• Zoekt: Add ctags support (merge request) GitLab Enterprise Edition
• Remove creating framework at sub-group level (merge request) GitLab Enterprise Edition
• Add NOT NULL constraint for remote_mirrors.project_id (merge request)
• Add taskCompletionStatus to the work item UI (merge request)
• Update semver_dialects gem version (merge request)
• Default enable FF group_level_vulnerability_report_grouping (merge request)
• Update abuse reports list view (merge request)
• Use SettingsBlockComponent for admin push rules (merge request)
• Sync epic work items to legacy epic by default (merge request) GitLab Enterprise Edition
• Add organization_id to stage event hashes table (merge request)
• Admin groups: Improve display of content (merge request) GitLab Enterprise Edition
• Update PMG architecture blueprint (merge request)
• Fix required approvers validation (merge request) GitLab Enterprise Edition
• Update graphiql-rails gem (merge request)
• Modified UX of command palette (merge request)
• Admin settings: Migrate network settings to SettingsBlock (merge request)
• Migrate oauth applications to use CRUD container (merge request)
• Migrate broadcast messages page (merge request)
• Remove the data preview option from the visualization desinger (merge request) GitLab Enterprise Edition
• Update dependency ai-gateway to v1.8.0 (merge request)
• Extract SSoT for pipeline sources for which SEP should be enforced (merge request) GitLab Enterprise Edition
• Move Mermaid too large alert to the beginning (merge request)
• Update bulk create service for custom software licenses (merge request) GitLab Enterprise Edition
• Raising error in mutation when more than 1 frameowrks for project (merge request) GitLab Enterprise Edition
• Update vendor/spdx.json to v3.24 (merge request)
• Add search_type param to SearchService (merge request)
• Update wording for pipeline deprecation banner (merge request) GitLab Enterprise Edition
• Route resolve vulnerability through the Anthropic client (merge request) GitLab Enterprise Edition
• Add read_runners custom ability (merge request) GitLab Enterprise Edition
• Migrates deploy keys to use CRUD container (merge request)
• Allow blob window size to be specified (merge request)
• Remove ":" for drawer title: overwritten part by @jzeng88 (merge request) GitLab Enterprise Edition
• Adds snowplow form error events (merge request) GitLab Enterprise Edition
• Adjust layout of iteration report issues table (merge request) GitLab Enterprise Edition
• Remove "+" icon and add word "new" to button by @jzeng88 (merge request) GitLab Enterprise Edition
• Update admin groups layout (merge request)
• Add support for parsing CI log timestamps (merge request)
• Reduce the amount of variants for GitLab UI badges (merge request)
• Duo Chat cancel button integration (merge request) GitLab Enterprise Edition
• Remove "scan" word from execution variable by @jzeng88 (merge request) GitLab Enterprise Edition
• Update admin product analytics settings (merge request)
• Allow assigning compliance frameworks at sub-group level (merge request) GitLab Enterprise Edition
• Migrate CI/CD Variables settings to CRUD container (merge request)
• Update admin license and compliance layout (merge request)
• Remove drill-down link for code suggestions usage metric (merge request) GitLab Enterprise Edition
• Change History links to 'View import history' buttons (merge request)
• Update tools injector image (merge request) GitLab Enterprise Edition
• Admin labels: Migrate to use CRUD container (merge request)
• Admin settings: Migrate reporting section to use SettingsBlock (merge request)
• Admin settings: Migrates repository page to use SettingsBlock (merge request)
• Admin settings: Migrate analytics section to use SettingsBlock (merge request)
• Admin settings: Migrate preferences to use SettingsBlock (merge request)
• Admin settings: Migrate metrics settings to use SettingsBlock (merge request)
• Admin settings: Migrate templates section to use SettingsBlock (merge request)
• Admin settings: Migrate CI/CD settings to use SettingsBlock (merge request)
• Admin settings: Migrate settings blocks of general settings (merge request)
• Update GitLab Pages version (merge request)
• Pipeline graph dropdowns: Use GlBadge for indicating jobs (merge request)
• Update projects page for admin view (merge request)
• Require user to solve Arkose challenge on every PN verification attempt (merge request) GitLab Enterprise Edition
• Migrates File Hooks to use CRUD Component (merge request)
• Admin settings: Migrate advanced search to use SettingsBlock (merge request)
• This MR updated approve layout (merge request) GitLab Enterprise Edition
• Conditionally handle AuthorizationsChangedEvent when policies exists (merge request) GitLab Enterprise Edition
• Add report_type to Approval Rules APIs by @PatrickRice (merge request) GitLab Enterprise Edition
• Update locked application setting popover (merge request)
• Enable assign resource v2 by default (merge request)
• Update admin geo page (merge request)
• Refetch job list when an artifactless job remains (merge request)
• Add start trial CTA to duo pro usage tab (merge request) GitLab Enterprise Edition
• Provide consistent interface across scopes (merge request) GitLab Enterprise Edition
• Update snippets empty state (merge request)
• Remove ignored toggle_security_policies_policy_scope setting (merge request)
• Update naming of duo group settings (merge request)
• Add UserStarredProjectsResolver sort argument by @jzeng88 (merge request)
• Migrates gl-display-inline-flex to gl-inline-flex (merge request)
• Multiple frameworks labels (merge request) GitLab Enterprise Edition
• Add permissions checking to AI Impact Dashboard (merge request) GitLab Enterprise Edition
• Admin settings: Migrate security settings to use SettingsBlock (merge request)
• Externalize strings on ldap_group_links by @MAlvarez32 (merge request)
• Improve usability of environment folders by @antonkalmykov (merge request)
• Display capped results for large datasets (merge request) GitLab Enterprise Edition
• Update GitLab logo on deploy page (merge request)
• Update groups page for admin view (merge request)
• Update admin subscription page UI (merge request) GitLab Enterprise Edition
• Add placeholder actions to table (merge request)
• Update visualization type selection with validation state (merge request) GitLab Enterprise Edition
• User friendly date formatting in Container tags_list_row by @Saurabh-Daware (merge request)
• Remove extra space in board cards (merge request)
• Check deploy_key exists during ProtectedRefDeployKeyAccess#valid? (merge request)
• Implement AR validations for ProtectedRefAccess (merge request) GitLab Enterprise Edition
• This MR updates yaml schema (merge request) GitLab Enterprise Edition
• Remove showcase_free_security_features experiment (merge request) GitLab Enterprise Edition
• Reverse make_synced_work_item_read_only FF check logic (merge request) GitLab Enterprise Edition
• Renamed autocomplete scopes to use plural form (merge request)
• Show dependency location count if occurrenceCount field is present (merge request) GitLab Enterprise Edition
• This MR removes loading state (merge request) GitLab Enterprise Edition
• Add concurrency_limit to AddApproversToRulesWorker (merge request) GitLab Enterprise Edition
• Update gitaly servers page (merge request)
• Update trial terms (merge request)
• Enable zoekt_exact_search by default (merge request) GitLab Enterprise Edition
• Remove ai_claude_3_for_docs feature flag (merge request) GitLab Enterprise Edition
• Increase max body limit for AI GW requests (merge request) GitLab Enterprise Edition
• Remove GCP WLIF setup script API endpoint (merge request) GitLab Enterprise Edition
• Drop ci_job_artifacts_use_primary_to_authenticate feature flag (merge request)
• This MR updates yaml schema (merge request) GitLab Enterprise Edition
• Adds Zoekt::Replica (merge request)
• Update admin system info page (merge request)
• Replace approval modal with link to approval page (merge request)
• This MR refactors multi select text (merge request) GitLab Enterprise Edition
• This MR updated user approver dropdown (merge request) GitLab Enterprise Edition
• Remove :notify_owners_of_finished_dt FF (merge request)
• Cleanup the duo_pro_trials feature flag (merge request) GitLab Enterprise Edition
• Change unit primitive for text embeddings (merge request) GitLab Enterprise Edition
• Extend error-alert Vue component with buttons (merge request) GitLab Enterprise Edition
• Add external Stripe IDs to CreditCardValidation (merge request) GitLab Enterprise Edition
• Improve compliance center for subgroups (merge request) GitLab Enterprise Edition
• Use static AWS credentials for indexer if set (merge request) GitLab Enterprise Edition
• Remove transaction opening for non-basic search count (merge request)
• Remove overflow:hidden from card component (merge request)
• Display usage quota tab during duo pro trial even group on free plan (merge request) GitLab Enterprise Edition
• Allow self-signed CC tokens in development (merge request) GitLab Enterprise Edition
• Add NOT NULL constraint to ci_runner_namespaces.namespace_id (merge request)
• Add NOT NULL constraint to ci_runner_projects.project_id (merge request)
• Update create label UI in labels widget (merge request)
• Change help link text copy (merge request)
• Update dependency auto-build-image to v4.2.0 (merge request)

Removed (22 changes)

• Remove triggers and old columns for bigint p_ci_builds (merge request)
• Removes storage_size index on project statistics (merge request)
• Remove MR review summaries table (merge request)
• Drop index_vulnerability_occurrences_for_issue_links_migration (merge request)
• Reverts 112527 as no longer required (merge request)
• Remove EnsureStageService and prep for removal of stage (merge request)
• Drop legacy geo_repositories_changed_events table (merge request)
• Remove SafelyChangeColumnDefault include (merge request)
• Remove issues_mrs_empty_state feature (merge request) GitLab Enterprise Edition
• Remove create_user_details_all_user_creation feature flag (merge request)
• Remove the template auto fill AI feature (merge request)
• Removes project stats index on packages size (merge request)
• Chore: Remove the ai editor assistant feature flag (merge request) GitLab Enterprise Edition
• Removes storage size idx on project_statistics (merge request)
• Drop unused DAST tables (merge request) GitLab Enterprise Edition
• Removes project stats index on wiki size (merge request)
• Remove track_ai_metrics_in_usage_data feature flag (merge request)
• Removes index on project_statistics async (merge request)
• Remove obsolete codeSuggestionsUsageRate field (merge request) GitLab Enterprise Edition
• Remove sep batching configuration (merge request) GitLab Enterprise Edition
• Removes temp index from project statistics (merge request)
• Cleanup prominent_create_board_btn feature flag (merge request)

Security (23 changes)

• Check npm package name, version and scripts coherence
• Disallow serving Pages over disabled custom domains with deployments
• Prevent privilege escalation via custom role
• Check if user has ban_group_member access before banning in namespace
• Check for create_deploy_token policy before creating deploy token
• Prevent using quick actions for some bot users
• Disable raw HTML for quick action pipeline
• Disable quick actions unless description changed
• Remove comment support from shrug and tableflip
• Pass SSO session data to Sidekiq
• Do not run a new pipeline on re-target
• Remove search results from public projects with unauthorized repos
• Reject deletion of security policy project approval rules
• Add limits on autolinker regex
• Fix for Private job artifacts can be accessed by any user
• Prevent non-members from using promote_to quick action for quick actions
• Fix the catastrophic backtracking in openapi regex
• Use permitted_params for standalone and multiplex queries
• Fix clickjacking on OAuth application page
• Remove collapseLongCommitList method
• Security fixes for banzai pipeline
• Hide branch merge request if merge requests are private
• Mitigate ReDoS attacks via method_call_regex

Performance (3 changes)

• Parse affected ranges only once (merge request)
• Adjust Bitbucket server importer to be resumable by @ivantedja (merge request)
• Remove group-level vulnerability report performance improvements FF (merge request) GitLab Enterprise Edition

Other (150 changes)

• Finalize DeleteOrphansApprovalMergeRequestRules2 (merge request)
• Update display_work_item_epic_issue_sidebar to work_item_epics (merge request) GitLab Enterprise Edition
• Remove bitbucket_cloud_convert_mentions_to_users ff (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Remove filter_deleted_groups feature flag (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Remove unused index with namespace_id on vulnerability_reads (merge request)
• Sync approval settings for groups for reauth setting (merge request)
• Remove self_managed_code_suggestions feature flag (merge request) GitLab Enterprise Edition
• Create table p_ci_build_tags (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Remove reference to BBD ODS FF (merge request) GitLab Enterprise Edition
• Quarantine a flaky test (merge request)
• Remove rewrite_sbom_occurrences_query feature flag (merge request) GitLab Enterprise Edition
• Fix forgotten ability (merge request) GitLab Enterprise Edition
• Fix <Layouts/LineLength> offenses by @Rohit.Kala (merge request)
• Fix flaky test "#protected_branch_exists?" (merge request)
• Implement delete car mutation (merge request) GitLab Enterprise Edition
• Rollout Filtered Search on Vulnerability Report (merge request) GitLab Enterprise Edition
• Fix pipeline schedule error handling (merge request)
• Remove temp index by @TamsilAmani (merge request)
• Add a pending_delete column to mark namespaces deleted by user (merge request)
• Add partitioned FK from ci_pipeline_artifacts to ci_pipelines (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Finalize migration CreateComplianceStandardsAdherence (merge request)
• Rspec Test order: run test in random order by @Deepak18-06 (merge request)
• Quarantine a flaky test (merge request)
• Refactor SAX document to cobertura (merge request)
• Release jira_connect_remove_branches (merge request)
• Finalize BackfillWorkItemHierarchyForEpics migration (merge request)
• Improve accessibility of remove icon buttons (merge request)
• Persist all policies instead of active policies (merge request) GitLab Enterprise Edition
• Remove set_ip_address feature flag (merge request)
• Finalize re-syncing basic epic attribute migration (merge request)
• Finalize BackfillEpicDatesToWorkItemDatesSources (merge request)
• Enable parallel_project_export feature flag (merge request)
• Add weight widget definition options (merge request)
• Add partitioned FK from p_ci_builds_execution_configs to ci_pipelines (merge request)
• Sync create index and swap columns (merge request)
• Fix Style/Lambda offenses by @Deepak18-06 (merge request) GitLab Enterprise Edition
• Add index for listing uploads (merge request)
• Quarantine a flaky test (merge request)
• Protected packages: Batch load matching protection rules by @gerardo-navarro (merge request)
• Extend a troubleshooting section to cover Xcode SSH keys problem (merge request)
• Add partitioned FK from ci_pipeline_chat_data to ci_pipelines (merge request)
• Rspec Test Order:Run spec/graphql/types in random order by @Deepak18-06 (merge request)
• Add partitioned FK from ci_pipelines_config to ci_pipelines (merge request)
• Finalize backfilling of related epic links on issue links (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Fix Layout/LineBreakAfterFinalMixin offenses by @m.bortlik (merge request)
• Protected containers: Enable multi-line errors in GraphQL API by @gerardo-navarro (merge request)
• Fix Layout/ExtraSpacing offenses by @miha-prehcm (merge request)
• Add partitioned FK from ci_pipeline_messages to ci_pipelines (merge request)
• Add partitioned FK from ci_pipeline_metadata to ci_pipelines (merge request)
• Mark 20230615101400 as obsolete (merge request) GitLab Enterprise Edition
• Change table ownership (merge request)
• Add and backfill group_id for packages_debian_group_architectures (merge request)
• Add partitioned FK from p_ci_pipeline_variables to ci_pipelines (merge request)
• Regenerate rubocop todo files (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Prepare ci_pipelines.autocancel_by_id for composite primary key (merge request)
• Finalize BackfillEpicIssuesIntoWorkItemParentLinks migration (merge request)
• refactor: Increase test code quality for package controller test by @gerardo-navarro (merge request)
• Add partitioned FK from ci_sources_pipelines to ci_pipelines (merge request)
• Remove default values for ci_sources_projects#partition_id (merge request)
• Add and backfill group_id for packages_debian_group_components (merge request)
• Add spec to verify FeatureFlagReferenceFilter N+1 by @jzeng88 (merge request)
• Finalize migration ConvertCreditCardValidationDataToHashes (merge request)
• Add test for N+1 query for VulnerabilityReferenceFilter by @jzeng88 (merge request) GitLab Enterprise Edition
• Rspec Test Order:Run spec in random order by @Deepak18-06 (merge request)
• Revert "Merge branch 'bwill/optimize-top-bound-lineage-search' into 'master'" (merge request)
• Mark 20230719094243 as obsolete (merge request) GitLab Enterprise Edition
• Resolve Layout/ArgumentAlignment offenses 76 by @gauravmarwal (merge request)
• Create Dependencies::DependencyListExport::Part model (merge request)
• Add and backfill project_id for packages_debian_project_architectures (merge request)
• Add partitioned FK from p_ci_stages to ci_pipelines (merge request)
• Add partitioned FK from p_ci_builds to ci_pipelines (merge request)
• Mark 20230719144243 as obsolete (merge request) GitLab Enterprise Edition
• Mark 20230628094243 as obsolete (merge request) GitLab Enterprise Edition
• Mark 20230702000000 as obsolete (merge request) GitLab Enterprise Edition
• Mark 20230711140500 as obsolete (merge request) GitLab Enterprise Edition
• Add and backfill project_id for packages_debian_project_components (merge request)
• Mark 20230719142200 as obsolete (merge request) GitLab Enterprise Edition
• Mark 20230703112233 as obsolete (merge request) GitLab Enterprise Edition
• Remove ignored MemberRole columns (merge request)
• Set internal bots profiles to be private and confirmed (merge request)
• Finalize migration BackfillSbomOccurrencesTraversalIdsAndArchived (merge request)
• Mark 20230628094700 as obsolete (merge request) GitLab Enterprise Edition
• Add and backfill project_id for ml_candidate_metadata (merge request)
• Add and backfill project_id for packages_dependency_links (merge request)
• Add not null constraint (merge request) GitLab Enterprise Edition
• refactor: Apply best practices to feature test new project by @gerardo-navarro (merge request)
• Rspec Test order: run test in random order by @Deepak18-06 (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Mark 20230710142700 as obsolete (merge request) GitLab Enterprise Edition
• Remove initialize_processable from Seed::Build by @Deepak18-06 (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Remove unused deployments indexes on .com (merge request)
• Implement cars resolver (merge request) GitLab Enterprise Edition
• Add and backfill project_id for ml_model_metadata (merge request)
• Add and backfill project_id for merge_requests_closing_issues (merge request)
• Add and backfill project_id for vulnerability_external_issue_links (merge request)
• Add and backfill project_id for packages_conan_metadata (merge request)
• Finalize migration BackfillProjectStatisticsStorageSizeWithRecentSize (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Check for N+1 in IssueReferenceFilter by @Deepak18-06 (merge request)
• Drop security_findings_confidence_idx index from security_findings (merge request)
• Add and backfill project_id for packages_maven_metadata (merge request)
• Add and backfill project_id for vulnerability_finding_evidences (merge request)
• Add and backfill project_id for merge_request_reviewers (merge request)
• Finalize migration BackfillUsersColorModeId (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Merge ExtractsRef into ExtractsPath (merge request)
• Add new column to store organization project & group sorting options (merge request)
• Remove imported column from relevant tables (merge request)
• Add and backfill namespace_id for vulnerability_finding_signatures (merge request)
• Add post_migrate to remove invalid record (merge request) GitLab Enterprise Edition
• Remove default values ci_pipeline_messages#partition_id (merge request)
• Drop merge_requests_closing_issues.closes_work_item column (merge request)
• Resolve Layout/ArgumentAlignment offenses 88 by @gauravmarwal (merge request)
• Add a new model that will handle abuse report notes (merge request)
• Add and backfill project_id for protected_tag_create_access_levels (merge request)
• Add and backfill project_id for vulnerability_findings_remediations (merge request)
• refactor: Remove rubocop issues by @gerardo-navarro (merge request)
• Change catalog resource last 30-day count updated_at (merge request)
• Finalize BackfillPartitionIdCiPipelineMessage (merge request)
• Protected packages: Shorten GraphQL field protectionRuleExists Part 3 by @gerardo-navarro (merge request)
• Add and backfill project_id for vulnerability_flags (merge request)
• Add and backfill project_id for merge_request_context_commits (merge request)
• Add and backfill namespace_id for issue_links (merge request)
• Add and backfill group_id for related_epic_links (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Remove "use_remote_mirror_destroy_service" feature flag (merge request)
• Protected containers: Cleanup renaming of protected_up_to_access_level by @gerardo-navarro (merge request)

17.1.8 (2024-09-16)

No changes.

17.1.7 (2024-09-11)

Fixed (2 changes)

• Fix Sidekiq crashing when GITLAB_LOG_LEVEL set to debug
• Backport Fixes Geo Replication Details view GitLab Enterprise Edition

Changed (1 change)

• Add callout in the admin area about OpenSSL v3

Security (18 changes)

• Revert 'security-psk-fix-external-wiki-integration-dos-17-1' into '17-1" (merge request)
• Fix the vulnerability in the glm_source parameter (merge request)
• Improve GraphQL log security (merge request)
• Add permissions check to project creations from a project template (merge request)
• Fix credentials disclosure in mirroring failure (merge request)
• Redirect url in the link validated for being external (merge request)
• [17.1] Update edit permissions for DAST profiles (merge request)
• Commit information visible through release atom endpoint for guest users (merge request)
• Execute environment stop actions as the owner of the action (merge request)
• Prevent code injection in Product Analytics funnels YAML (merge request)
• Prevent users with admin_group_member custom ab. to manage custom roles (merge request)
• Fixed frontend regex to parse URI (merge request)
• Use session instead of params for identity linking (merge request)
• Fix external wiki integration DoS by changing request to HEAD (merge request)
• Restrict IPs for packages dependency proxy (merge request)
• Strip out Set-Cookie header from dependencyproxy auth response (merge request)
• Fix open redirect due to additional slash added (merge request)
• Group Developers can view group runners (merge request)

17.1.6 (2024-08-21)

Security (1 change)

• Always build assets image when tagging (merge request)

17.1.5 (2024-08-20)

Fixed (1 change)

• Properly handle empty repository.ff_merge in FromTrainRef merge strategy GitLab Enterprise Edition

Changed (1 change)

• Include language server version in code suggestions GitLab Enterprise Edition

Security (4 changes)

• Do not run pipelines when resolving vulnerability (merge request)
• Add Octokit::ResponseValidation middleware (merge request)
• IP restriction to prevent all group permissions (merge request)
• Destroy associated releases when removing a tag via Git CLI (merge request)

17.1.4 (2024-08-06)

Changed (2 changes)

• Reverify externally verified gpg keys
• Put groups_direct field in CI JWT tokens behind feature flag

Security (13 changes)

• Show correct file content (merge request)
• Fix Possible asciidoctor include:: directive DOS (merge request)
• Filter parameters in Rack::Attack logs (merge request)
• Update audit payload (merge request)
• Limit access to project accessed by Security Policy Bot (merge request)
• Show alert about not rendering files due to path encoding (merge request)
• Fix the catastrophic backtracking (merge request)
• Security fixes for banzai pipeline part 2 (merge request)
• Remove xhtml extensions from snippets blobs (merge request)
• Add a project scope to LfsTokens (merge request)
• Fix ReDoS when parsing git push options (merge request)
• Fix ReDoS in RefMatcher (merge request)
• Enforce require_password_to_approve MR approval policy property (merge request)

17.1.3 (2024-07-24)

Fixed (2 changes)

• Fix wildcard search for package.json in npm upload
• Ignore object pool already exists creation errors

Security (7 changes)

• Refactor import_export_upload to be user-based (merge request)
• Fix for private txt artifacts being accessible through the artifacts/browse link (merge request)
• Attribute BulkImport::Export to a particular user (merge request)
• Don't include project-level analytics settings in DOM (merge request)
• Fix for private dotenv artifacts not accessible to downstream jobs (merge request)
• Do not allow script execution on dependency responses (merge request)
• Remove prohibited tags after import (merge request)

17.1.2 (2024-07-09)

Fixed (2 changes)

• Update dependency slack-messenger to v2.3.5
• Fix MailRoom not loading in Omnibus

Security (9 changes)

• Disallow serving Pages over disabled custom domains with deployments (merge request)
• Check npm package name, version and scripts coherence (merge request)
• Check for create_deploy_token policy before creating deploy token (merge request)
• Check if user has ban_group_member access before banning in namespace (merge request)
• Prevent privilege escalation via custom role (merge request)
• Prevent using quick actions for some bot users (merge request)
• Disable raw HTML for quick action pipeline (merge request)
• Disable quick actions unless description changed (merge request)
• Remove comment support from shrug and tableflip (merge request)

17.1.1 (2024-06-25)

Fixed (1 change)

• Only enumerate commits in pre-receive check if push came from Web

Security (14 changes)

• Security fixes for banzai pipeline (merge request)
• Fix the catastrophic backtracking in openapi regex (merge request)
• Use permitted_params for standalone and multiplex queries (merge request)
• Fix for Private job artifacts can be accessed by any user (merge request)
• Remove search results from public projects with unauthorized repos (merge request)
• Do not run a new pipeline on re-target (merge request)
• Add limits on autolinker regex (merge request)
• Fix clickjacking on OAuth application page (merge request)
• Hide branch merge request if merge requests are private (merge request)
• Remove collapseLongCommitList method (merge request)
• Pass SSO session data to Sidekiq (merge request)
• Prevent non-members from using promote_to quick action for quick actions (merge request)
• Reject deletion of security policy project approval rules (merge request)
• Mitigate ReDoS attacks via method_call_regex (merge request)

17.1.0 (2024-06-19)

Added (180 changes)

• Allow admin_runner ability to change shared runner setting (merge request) GitLab Enterprise Edition
• Update services to create custom software license (merge request) GitLab Enterprise Edition
• Protected containers: Add help text for repository path pattern input by @gerardo-navarro (merge request)
• Move document for CS for registry (merge request) GitLab Enterprise Edition
• Add new duo pro discover page (merge request) GitLab Enterprise Edition
• Changed association of frameworks with projects (merge request) GitLab Enterprise Edition
• Add support for new placeholders by @TamsilAmani (merge request)
• Add admin_runners custom ability (merge request) GitLab Enterprise Edition
• Add worker to aggregate last 30-day catalog resource usage data (merge request)
• Add cargo to supported sbom and sync types (merge request)
• Add project settings sections to command mode results (merge request)
• Configuring Topology Service in Rails (merge request)
• Add ML Model filters to the "package files" screen (merge request)
• Include SAST Advanced in configuration UI allowlist (merge request)
• Group level work items support group level references (merge request)
• Add search in wiki sidebar (merge request)
• Render icons beside suggestions (merge request)
• Display temporary extension expiration banner (merge request) GitLab Enterprise Edition
• Add logs header details (merge request)
• Cleanup index terraform module archive FF (merge request)
• Create new custom Permission: read_crm_contact by @ChaelCodes (merge request) GitLab Enterprise Edition
• Use custom models for duo chat features (merge request) GitLab Enterprise Edition
• Add ssh-upload-pack endpoint to handle Git over SSH requests (merge request) GitLab Enterprise Edition
• Add embedding reference and call it on condition (merge request) GitLab Enterprise Edition
• Add related issues to Merge Request API by @zzaakiirr (merge request)
• Add partition_id to Ci::Sources::Project (merge request)
• Expose configuration in API and UI (merge request)
• Filter projects by marked for deletion by @imskr (merge request) GitLab Enterprise Edition
• Add urls to generated changelogs by @Taucher2003 (merge request)
• Add count field to WorkItemConnection (merge request)
• Progress bar & status to model artifact importer (merge request)
• Exposed note body first line on GraphQL by @zillemarco (merge request)
• Add external MR diffs to gitlab-backup task by @zzaakiirr (merge request)
• Add support for rendering icons (merge request)
• Add identifier_external_ids column to vulnerability_reads (merge request)
• Protected packages: Label "protected" for package detail page on group by @gerardo-navarro (merge request)
• Clean up duo_chat_display_source feature flag (merge request) GitLab Enterprise Edition
• Adds sort by publish date for container registry tags list (merge request)
• GraphQL changes to fetch vulnerability severities count with limits (merge request) GitLab Enterprise Edition
• Allow actor override when GitHub and BBS disabled (merge request)
• Early access program participation checkbox (merge request) GitLab Enterprise Edition
• Add approval_policy_rule_id to approval rules and related tables (merge request)
• Add organization to vuln export for sharding (merge request) GitLab Enterprise Edition
• Add verified creator badge (merge request)
• Protected packages: REST API GET package protection rules by @nwittstruck (merge request)
• Improves empty state on model registry model page (merge request)
• Add star count as sorting option for CICD Catalog (merge request)
• Validate form input for version and model name (merge request)
• Create partitions for new audit event tables (merge request)
• Add support for Redis extra config command to ActionCable (merge request)
• Filter projects by marked for deletion by @imskr (merge request) GitLab Enterprise Edition
• Allow selecting project for project level items (merge request)
• Protected containers: Update protection rules in project settings ui by @gerardo-navarro (merge request)
• Handle declined event for bitbucket server importer by @ivantedja (merge request)
• Adding gcp audit event destination validator (merge request) GitLab Enterprise Edition
• Add pmg README.md (merge request)
• Add admin_runners custom ability (merge request) GitLab Enterprise Edition
• Add support for Sentinel usernames in Workhorse (merge request)
• Default enable diff_preview_in_email (merge request)
• Add CVS for CS document (merge request) GitLab Enterprise Edition
• Add security policies projects join table (merge request) GitLab Enterprise Edition
• Display timestamp in log lines (merge request)
• GraphQL: Add fullPath argument in runnerUsage query (merge request) GitLab Enterprise Edition
• Add sorting by component_name to dependency list aggregations (merge request)
• Backfill work_item_dates_sources with epic dates data (merge request)
• Add confirmation message on manual job with confirmation message by @lifez (merge request)
• Remove repository_tree_gitaly_pagination feature flag (merge request)
• Add source code to /explain_vulnerability tool (merge request) GitLab Enterprise Edition
• Add Restore Pages Deployment Mutation (merge request)
• Enable integration API for admin integrations custom ability (merge request) GitLab Enterprise Edition
• Add PagesDeployment to deletePagesDeployment Mutation (merge request)
• Adjust the mistral promprt for 22b (merge request) GitLab Enterprise Edition
• GraphQL: Add fullPath argument in runnerUsageByProject query (merge request) GitLab Enterprise Edition
• Filter by marked_for_deletion_on in groups graphql by @imskr (merge request) GitLab Enterprise Edition
• Add support for latest_tag by @TamsilAmani (merge request)
• Add PagesDeployments to Project type (merge request)
• Enable show_container_registry_tag_signatures feature flag by default (merge request) GitLab Enterprise Edition
• Add admin integrations custom permission (merge request) GitLab Enterprise Edition
• Improve observability by various Git LFS metrics (merge request)
• Add GraphQL mutation projectTextReplace (merge request)
• Adds published message for each container registry image repository (merge request)
• Create separate elastic queue for embeddings (merge request) GitLab Enterprise Edition
• Log token info for GraphQL requests (merge request)
• Add Limit for CVS for CS (merge request) GitLab Enterprise Edition
• Add a new task initial_indexing for Zoekt::SchedulingService (merge request) GitLab Enterprise Edition
• Add option to add custom html header tags via gitlab.yml config by @bufferoverflow (merge request)
• Add support for custom headers in webhook API by @Taucher2003 (merge request)
• Audit when product analytics settings are changed (merge request) GitLab Enterprise Edition
• Protected packages: REST API DELETE package protection rules by @nwittstruck (merge request)
• Remove single_relation_import feature flag (merge request)
• Add audit event for web hook creation (merge request) GitLab Enterprise Edition
• Include custom role name in members exports (merge request) GitLab Enterprise Edition
• GraphQL: Add runnerManager field to CiJob (merge request)
• GraphQL: Add managers field to CiRunner (merge request)
• Add trigram indexes on email column by @zzaakiirr (merge request)
• Add partition_id to Ci::PipelineMessage (merge request)
• Backfilling of work_item_parent_links from epics parent_id (merge request)
• Introduce ci_pipeline_variables_minimum_role (merge request)
• Finalize BackfillPartitionIdCiDailyBuildGroupReportResult (merge request)
• Created blueprint for pipeline mini graph (merge request)
• Add explain vulnerability tool (merge request) GitLab Enterprise Edition
• Add a cleanup worker for removable add-on purchases (merge request) GitLab Enterprise Edition
• Add WorkItemAddClosingMergeRequest mutation to GQL API (merge request)
• Audit when product analytics settings are changed (merge request) GitLab Enterprise Edition
• Filter groups by marked_for_deletion_on by @imskr (merge request)
• Add spec for the handleClusterError helper by @antonkalmykov (merge request)
• Add resolver for product analytics project settings (merge request) GitLab Enterprise Edition
• Update doc for single_relation_import flag status (merge request)
• Add API-Security CI template (merge request) GitLab Enterprise Edition
• Add index for sorting by highest severity (merge request)
• Add projects dropdown to work_item_links_form component (merge request)
• Adds support for dynamic schemas with date range filters (merge request) GitLab Enterprise Edition
• Include none argument owasp_top_10 filter (merge request) GitLab Enterprise Edition
• Filter the pods list be clicking at the pod stat (merge request)
• feature: Create a new model and version and upload artifacts (merge request)
• Send configured API key to AI Gateway (merge request) GitLab Enterprise Edition
• Adds a mergeTrainIndex field to merge requests (merge request) GitLab Enterprise Edition
• Introduce data source for overtime DORA metrics (merge request) GitLab Enterprise Edition
• Add partition_id to Ci::DailyBuildGroupReportResult (merge request)
• feature: Create new model version & import artifacts (merge request)
• Adds last_activity_on to Members table (merge request)
• Add capability to support error codes on Duo Chat backend (merge request) GitLab Enterprise Edition
• [Feature Flag] Cleans up large_ipynb_diffs (merge request)
• Backfill related epic links to issue links (merge request)
• Add security policy scheduled scans concurrency limit (merge request) GitLab Enterprise Edition
• Add graphql mutation endpoint to run VerifyNamespaceService (merge request) GitLab Enterprise Edition
• Add not valid foreign key to namespaces.parent_id (merge request)
• Expose Vulnerabilities::StateTransition ID in GraphQL (merge request) GitLab Enterprise Edition
• Extend label GraphQL search with field list (merge request)
• Add GraphQL filters by deployments (merge request)
• Add migration helpers (un)prepare_partitioned_async_index (merge request)
• Add calendar endpoint for PATs (merge request)
• Audit event tables (merge request)
• Add two options to configure target availability check in API Security (merge request)
• Add project level filter (merge request) GitLab Enterprise Edition
• Create a GraphQL query for contributed projects by @yasuk (merge request)
• Simplify wiki print functionality (merge request)
• Create car type (merge request) GitLab Enterprise Edition
• Displays the last published date for container repository (merge request)
• Render solution html in vulnerability modal (merge request) GitLab Enterprise Edition
• Downscale pasted retina images (merge request)
• Add delete_user ability to OrganizationUser permission type (merge request)
• Add hand raise lead to the duo pro trial widget popover (merge request) GitLab Enterprise Edition
• Validate work item presence in epics (merge request)
• Add pipeline validator to check identity verification (merge request) GitLab Enterprise Edition
• Remove google_cloud_support_feature_flag feature flag (merge request)
• Add Rake task to update project storage (merge request)
• Update type of subscription_add_on_purchases started_at column (merge request) GitLab Enterprise Edition
• Add GraphQL mutation projectBlobsRemove (merge request)
• Add BulkImport cancel API for instance admins (merge request)
• Add AI telemetry endpoint (merge request) GitLab Enterprise Edition
• Allow adding members by username by @imskr (merge request)
• Trigger GraphQl subscription when WorkItem hierarchy change (merge request)
• feature: Delete model version (merge request)
• Sync unique index creation for ci_pipelines.partition_id (merge request)
• Create audit events when deployments are approved or rejected (merge request) GitLab Enterprise Edition
• Upload artifacts to an existing machine learning model version (merge request)
• Support directory structure in generic package registry (merge request)
• Add pipeline validator to check identity verification (merge request) GitLab Enterprise Edition
• Release Silent Admin Exports feature (merge request)
• Added the featureFlagEnabled query field (merge request)
• Create migration to add started_at to subscription_add_on_purchases (merge request) GitLab Enterprise Edition
• Add new option to filter projects in GraphQL (merge request)
• Zoekt: Add callback service (merge request) GitLab Enterprise Edition
• Use the zoekt_settings in the Admin settings (merge request)
• Sync funnels when config project changes (merge request) GitLab Enterprise Edition
• Add X-Gitlab-Version to Cloud Connector headers (merge request) GitLab Enterprise Edition
• Run migrations in milestone order (merge request)
• Skip audit event on download of export, if silent (merge request)
• Redirect wiki pages on renaming them (merge request)
• Add GraphQL mutation for product analytics project settings (merge request) GitLab Enterprise Edition
• Add initial duo pro trial status popover (merge request) GitLab Enterprise Edition
• Feature to delete artifacts from a model version (merge request)
• Add a new IndexingTaskWorker (merge request) GitLab Enterprise Edition
• Adds custom API server support for Telegram (merge request)
• Backend code for self-hosted LLM server instance configuration (merge request)
• Add API for trigger group test webhook by @lifez (merge request) GitLab Enterprise Edition
• Prepare async index for ci_pipelines.partition_id related (merge request)
• Add manage_merge_request_settings custom permission (merge request)
• Add custom software licenses table (merge request) GitLab Enterprise Edition

Fixed (191 changes)

• Check email confirmation status of active users (merge request) GitLab Enterprise Edition
• Fix the multiple zoekt_tasks creation for delete_repo (merge request) GitLab Enterprise Edition
• Force UTF-8 encoding on CSV export files (merge request) GitLab Enterprise Edition
• Ensure Workhorse log writers are closed to avoid Goroutine leaks (merge request)
• Update replication troubleshooting snippets (merge request) GitLab Enterprise Edition
• Fix fork badge always shown in pipelines page (merge request)
• Increase JWT expiration from 1 to 10 mins (merge request) GitLab Enterprise Edition
• Fixed issue with command palette shortcut (merge request)
• Remove performance bar from jira connect (merge request)
• Update Bitbucket Cloud Importer to map users by uuid (merge request)
• Fix product analytics manager offering UI (merge request) GitLab Enterprise Edition
• Implement segmented vulnerability export mechanism for large groups (merge request) GitLab Enterprise Edition
• Create worker to store security reports by project (merge request) GitLab Enterprise Edition
• Work item hierarchy change system notes use full references (merge request)
• Allow labels to be specified with absolute path (merge request)
• Change FF to beta and default enable (merge request) GitLab Enterprise Edition
• Show wiki sidebar content in history and changes (merge request)
• Increase SQL query threashold on work_items test (merge request)
• MR widget: Fix alignment (merge request)
• Wiki: Fix last edited author (merge request)
• Remove unused issue card weight filtering functionality (merge request)
• Fix publishing npm package with custom root folder name (merge request)
• Fixed overflowing layout on the compare revisions page by @zillemarco (merge request)
• Wiki: Fix header spacings on published pages and create page (merge request)
• Delete project_ref_name_in_pipeline feature flag (merge request)
• Wrap wiki history commit message (merge request)
• Fix approvals text alignment (merge request)
• Use gl-background-color-default for .gl-new-card-add-form background (merge request)
• Sync updated_at attribute when updating epic (merge request) GitLab Enterprise Edition
• Fix inviting members with a custom role (merge request) GitLab Enterprise Edition
• Remove the archived projects from the security dashboard (merge request) GitLab Enterprise Edition
• Remove branch on jira when deleted on gitlab (merge request)
• Update "shared runners enabled" setting on subgroup builds (merge request)
• Ignore wiki links that have missing href (merge request)
• Hide Exact code search in preferences when zoekt setting is disabled (merge request) GitLab Enterprise Edition
• This MR fixes project selection (merge request) GitLab Enterprise Edition
• fix: Add zero-padded mapping for OWASP 2021 vuln categories (merge request) GitLab Enterprise Edition
• Fix links and tree drag and drop on FF (merge request)
• Update Merge train system note (merge request)
• Fix calculating direct_members count (merge request) GitLab Enterprise Edition
• Fix the limit logic for containing refs requests (merge request)
• Add reject_non_dco_commits to push rules REST API (merge request) GitLab Enterprise Edition
• Use primary DB for authenticating artifacts downloads (merge request)
• Cleanup ci_runner_projects records with null project_id (merge request)
• Cleanup ci_runner_namespaces records with null namespace_id (merge request)
• Take broadcast message height into account in board height (merge request)
• Use blue color for subscribed state and active todo (merge request)
• Fix Epics::UpdateService to only sync changed attributes (merge request) GitLab Enterprise Edition
• Respect carraige return in new job log viewer (merge request)
• Update an expired test certificate (merge request)
• Do not error when assigning issue to same epic (merge request) GitLab Enterprise Edition
• Restrict GraphQL API to only documented token types (merge request)
• Fix fullPath for cross projects work items (merge request)
• This MR fix bottom loader (merge request) GitLab Enterprise Edition
• Fix missing filename when downloading generic package in release page (merge request)
• Verify the namespace_id on duo pro trial service layer (merge request) GitLab Enterprise Edition
• Add spacing between framework pill and title in adherence list (merge request)
• Execute the task even the repo is not found (merge request) GitLab Enterprise Edition
• Update ShortcutsBlob data (merge request)
• Show correct policies subheader for a group (merge request) GitLab Enterprise Edition
• Fixes incorrect wrapping in styled log lines (merge request)
• Wiki sidebar: Fix hover in Darkmode (merge request)
• Add analyze_interval for IntRangeStrategy (merge request)
• Add frontend scripts to assets hash calculation (merge request)
• Fix loading spinner spacing on child issues and epics (merge request) GitLab Enterprise Edition
• Parses job log logs when lines gets split in chunks (merge request)
• Remove card border for issue boards (merge request)
• Enable extra slug sanitization on user provisioning (merge request)
• Accept integer parameter in runner_type for GetUsageServiceBase (merge request) GitLab Enterprise Edition
• Adds ancestors on the index Explore>Groups page (merge request)
• Update MemberRoles::RolesFinder and Members::UpdateService (merge request)
• Modify machine learning version input description (merge request)
• Fixes issue with valid Notebooks not diffing (merge request)
• Fix merge request padding (merge request)
• Remove the user_detail creation derisk feature flag (merge request)
• Fix ancestor widget appearance in Epic sidebar (merge request) GitLab Enterprise Edition
• Allow more wiki types to be searchable (merge request) GitLab Enterprise Edition
• Fixes auditing non-changing fields for product analytics (merge request) GitLab Enterprise Edition
• Fix vertical spacing of collapse MR sidebar btn (merge request)
• Forbid branch protection updates with blocking policy in place (merge request) GitLab Enterprise Edition
• Ensure complete messages are not passed to DuoChat in chunks (merge request) GitLab Enterprise Edition
• Fix nav control layout for new dropdowns (merge request)
• Fix upgrade message link in operations dashboard (merge request)
• Delegate GroupHook URL validation to base class (merge request) GitLab Enterprise Edition
• Fix the other icons being shown in loading state (merge request)
• Fix serialization error on CI Lint with including a CI component (merge request)
• Fix code reloading for Sidekiq in development (merge request)
• Fix button spacing and updating UI text to use sentence case (merge request) GitLab Enterprise Edition
• Fix protected branches deploy key selection for FOSS (merge request)
• Remove the experiment_features_enabled check (merge request) GitLab Enterprise Edition
• Fix visualization designer showing confirm modal after saving (merge request) GitLab Enterprise Edition
• Update StuckExportJobsWorker to not fail parallel export jobs (merge request)
• Vite config: Fix open in editor url (merge request)
• Expose 'Is using seat' badge for Auditors (merge request) GitLab Enterprise Edition
• Differentiate vulnerability security scanner (merge request) GitLab Enterprise Edition
• Use compact pagination on explore page when total pages is unavailable (merge request)
• Exclude child pipelines from tag and branch query (merge request)
• Fix registry list extra padding between list items (merge request)
• Include Group Links in access level check (merge request) GitLab Enterprise Edition
• Fix work items showing icons and actions when not found (merge request)
• Fix missing BATCH_SIZE constant (merge request)
• Fix ActiveModel::UnknownAttributeError for initialize_with_readme (merge request)
• Add a check to use the different URL for namespace (merge request) GitLab Enterprise Edition
• Fix misleading error message when assigining sec policy project (merge request) GitLab Enterprise Edition
• Group visibility levels: Show all radio button with correct attributes by @gerardo-navarro (merge request)
• Fix display of performance bar in relative root installations (merge request)
• Fix Cloud Connector service catalog is stale (merge request)
• Use safe_params to persevere sort params (merge request)
• Use localstorage to remember swimlane state for boards (merge request)
• Generic Registry: Fix a bug when downloading files with sign symbol (merge request)
• List all users in the Admin > Users (merge request)
• Do not allow creating Service Accounts for a subgroup (merge request) GitLab Enterprise Edition
• Fix child pipeline badge is broken in CI header (merge request)
• Fix Firefox Drag and Drop on epic lists (merge request) GitLab Enterprise Edition
• Fixes typo for CS JOB (merge request) GitLab Enterprise Edition
• Fix @ autocomplete when search requests overlap (merge request)
• Allow branch protection updates via API with block_branch_modification (merge request) GitLab Enterprise Edition
• Set height: auto only on images with both dimension set (merge request)
• Move modal and drawer out of container style (merge request)
• Import fork MR when target branch couldn't be created (merge request)
• Fix doc link to project topics (merge request)
• Add default branch to branches API cache_context (merge request)
• Fix gitlab:db:decomposition:migrate task (merge request)
• Fix dark mode hover for admin/credentials row user email (merge request) GitLab Enterprise Edition
• Set imported from value for project export import (merge request)
• Include headers in LfsDownloadObject (merge request)
• Set height: auto on images (merge request)
• Fix registry search sorting layout in mobile screen sizes (merge request)
• Parameterize path after regex validation failure (merge request)
• Use text-subtle instead of a disabled class for badge img empty (merge request)
• A11y fix: make sure "+" button can be focused in wiki sidebar (merge request)
• Fix "shared_audit_event_id_seq" already exists (merge request)
• Fix batched finish worker reenqueue delay (merge request)
• Ignore imported column in relevant models (merge request)
• Show current wiki page as active (merge request)
• Fix default branch protection settings (merge request)
• Use label text color for remove button icon in MR filter bar token (merge request)
• Avoid idling in transaction when exporting with Parallel Project Export (merge request)
• Only lookup by username if ops flag is enabled (merge request)
• Roadmap - Fix alignment of epics with no start date (merge request) GitLab Enterprise Edition
• Filter labels already applied out of recently used suggestions (merge request)
• Fix broken link in CI Catalog verified badge (merge request)
• Fix webhooks temporary disabled too long, too fast (merge request)
• Update member roles REST API doc (merge request)
• Handle project creation error on git push (merge request)
• Fix roadmap settings drawer offset height (merge request) GitLab Enterprise Edition
• Fix access levels for default branch protection (merge request)
• Disable promote button for in flight request (merge request)
• Fix insert table box in rich text editor (merge request)
• Ensure label text color is used for label filter in MR search bar (merge request)
• Do not allow group Owners create Service accounts on Self-managed (merge request) GitLab Enterprise Edition
• Fix an overwrite bug in the gcs metrics concern (merge request)
• Skip pre-receive SD on deletes (merge request) GitLab Enterprise Edition
• Fix board swimlanes headers background (merge request)
• Prevent error in copy_metadata quick action (merge request)
• Update imported value when cloning and moving issues (merge request)
• Fix an N+1 situation (merge request)
• Move Direct Transfer project entities creation to a later stage (merge request)
• Reset project counters after relation import (merge request)
• MR commit message: Fix existing message dropdown selection (merge request)
• Restrict repository_object_format update for PUT projects/:id (merge request)
• Correctly handle nil assignee arguments (merge request)
• Fix dropdown behavior in ProtectedBranchHelpers to fix flaky test (merge request)
• Fix hidden code navigation tabs (merge request)
• Fix error when calling GQL ciConfig endpoint with include:component (merge request)
• Ensure BLPOP/BRPOP returns nil instead of raising ReadTimeoutError (merge request)
• Use consistent encoding with startup js to fetch commit data (merge request)
• Expose project settings in REST API only for maintainer+ users (merge request)
• Fix approval policy to include group level protected branch (merge request) GitLab Enterprise Edition
• Fix N+1 query in /api/v4/projects/:id/jobs endpoint (merge request)
• Only include the duo pro widget data if ultimate trial is absent (merge request) GitLab Enterprise Edition
• Fix counts for Search Within filter on issues list (merge request)
• Fix instance templates pagination (merge request) GitLab Enterprise Edition
• MR: Show sidebar expand button on md breakpoint (merge request)
• Make pending invitations search case insensitive (merge request)
• Fixes "retryable" value for merge train pipelines as JSON (merge request) GitLab Enterprise Edition
• Change column default when the connections match (merge request)
• Link squashed, fast-forwarded merge requests to deployments (merge request)
• Fix broken DORA performers score Storybook story (merge request) GitLab Enterprise Edition
• Resolve flash of light styles when using auto color mode (merge request)
• Increase Atlassian token constraint (merge request)
• Fix webhook warning permission check (merge request) GitLab Enterprise Edition
• Bugfix file type icon resizes (merge request)
• Fix Sidekiq migration timeout (merge request)
• Fix OpenTofu CI/CD template backport (merge request)
• Fix collapsing sections in job log viewer (merge request)
• Project transfer fix for ES indexing (merge request) GitLab Enterprise Edition
• Support Epic -> WorkItem sync of imported_from (merge request) GitLab Enterprise Edition
• Right align snippet comment actions dropdown (merge request)
• Fix blob viewer line numbers (merge request)
• Fix flow metrics handling of null assignees (merge request)

Changed (308 changes)

• Improve Analytics dashboards schema errors (merge request) GitLab Enterprise Edition
• Drop beta tag on Duo Pro promotion (merge request)
• Dont identify a user using a deploy key (merge request)
• Always show project count for group dependency list (merge request) GitLab Enterprise Edition
• Add the proper empty state when wiki page not found (merge request)
• Re-sync basic epic fields to work items (merge request)
• Declare StoreSecurityReportsByProjectWorker memory-bound (merge request) GitLab Enterprise Edition
• Rename work_items_mvc_2 to work_items_alpha (merge request)
• Rename for reauthentication vs just password (merge request) GitLab Enterprise Edition
• Reset input field when closing the modal to delete merged branches (merge request)
• Display easy to read error messages for Duo Chat (merge request) GitLab Enterprise Edition
• Work items: Migrate headline to use type scale (merge request)
• Improve VSD warning messages for failed API requests (merge request) GitLab Enterprise Edition
• Replace funnel name attribute with file name (merge request) GitLab Enterprise Edition
• Update wiki page titles (merge request)
• Update analytics settings page with link to dashboards page (merge request) GitLab Enterprise Edition
• Add padding to OWASP identifiers (merge request) GitLab Enterprise Edition
• Fixes incorrect params passed to Workato (merge request) GitLab Enterprise Edition
• Changes for project owners to receive email notifications (merge request)
• Check for related_epics ff when linking epics (merge request) GitLab Enterprise Edition
• Improve markdown syntax highlighting (merge request)
• Enable user searching by partial email for admins by @zzaakiirr (merge request)
• Update PMG architecture blueprint (merge request)
• Fix spacing of new wiki form help text (merge request)
• Fixed search page flicker (merge request)
• Improve the look of the token access table (merge request)
• Doc(Feature rollout): extend of monitoring (merge request)
• Don't show viewed file tooltip on scroll (merge request)
• Issuable: Migrate title (merge request)
• Changes model candidates to use ml_model packages (merge request)
• Handle errors in different formats (merge request) GitLab Enterprise Edition
• Configure the Claude 3 Haiku model for VE (merge request) GitLab Enterprise Edition
• Added create method in MemberApproval, modified promotion mgmt util (merge request) GitLab Enterprise Edition
• Wiki: Clean up code for injecting props (merge request)
• Merge request: Migrate headline to use type scale (merge request)
• Issuables: Update alignment of open and closed status badge icons (merge request)
• Route LLM requests to AI Gateway (merge request)
• Remove prevent_issue_epic_search feature flag (merge request) GitLab Enterprise Edition
• Update bulk assign service to include iterable triggers (merge request) GitLab Enterprise Edition
• Add links to description in AI impact analytics dashboard (merge request) GitLab Enterprise Edition
• Validate that all or no analytics settings are defined (merge request) GitLab Enterprise Edition
• Replace issues.milestone_id index by a [milestone_id, id] (merge request)
• Save sidebar entries collapsed state (merge request)
• Search flyout: Bump project avatar size to 32 (merge request)
• Rename /explain_vulnerability Duo slash command (merge request) GitLab Enterprise Edition
• Remove security_policies_unassign_redundant_policy_projects FF (merge request)
• Auto-select the current project (merge request)
• Remove search_query_builder feature flag (merge request) GitLab Enterprise Edition
• Wiki custom sidebar: Store pages state in localStorage (merge request)
• Reduce runner stale timeout from 3 months to 7 days (merge request)
• SPP no secrets no message docs update (merge request)
• Update beta documentation (merge request)
• Improve TOC functionality in rich text editor (merge request)
• Update dependency ai-gateway to v1.7.0 (merge request)
• Update docs path to secret push protection (merge request)
• Break out downstream pipelines (merge request)
• Show alert on web IDE start error (merge request)
• Updated popover text of system_id column on runner page by @catinbag (merge request)
• Wiki: Create & edit sidebar changes (merge request)
• Migrates gl-display-block to gl-block (merge request)
• Wiki: Show more actions dropdown on pages (merge request)
• Change gitlab:elastic:index to async worker (merge request) GitLab Enterprise Edition
• Hide create wiki page button if inadequate permissions (merge request)
• Removes alpha from CI Catalog fields (merge request)
• Increase prominence of the context header (merge request)
• Add possibility to change allowed to merge groups (merge request) GitLab Enterprise Edition
• Show additional error details from CubeJS 400 responses (merge request) GitLab Enterprise Edition
• chore: Remove the following gitlab embeddings rake task (merge request) GitLab Enterprise Edition
• Make locking message consistent (merge request)
• Update PMG architecture blueprint (merge request)
• Add Google Cloud IAM integration metrics to Service Ping (merge request) GitLab Enterprise Edition
• Change title for bulk seat assignment/removal (merge request) GitLab Enterprise Edition
• Add page counter to wiki sidebar (merge request)
• Adds a new client that uses basic auth to fetch from prometheus (merge request)
• Migrate d-block to gl-block (merge request)
• Fix hr color in navigation sidebar on darkmode (merge request)
• Overhaul OAuth page (merge request)
• Wiki history: Use card container (merge request)
• Add jira client call (merge request)
• Only show "Merge request was removed from train" for open MRs (merge request) GitLab Enterprise Edition
• Wiki templates: Remove limited container (merge request)
• Remove FF allow_user_variables_by_minimum_role (merge request)
• Revert MR https://gitlab.com/gitlab-org/gitlab/-/merge_requests/154228 (merge request)
• Migrates gl-sm-display- classes to Tailwind (merge request)
• Update dependency ai-gateway to v1.6.1 (merge request)
• Update PreventIndexCreation rule (merge request)
• Move all elastic rake tasks to service (merge request) GitLab Enterprise Edition
• Wiki: Adds in-page editing functionality (merge request)
• Update Rails to 7.0.8.4 (merge request)
• Update pmg query (merge request)
• Refactor groups API by @imskr (merge request) GitLab Enterprise Edition
• Use sentence case for edit page, remove hr (merge request)
• Wiki sidebar: Change alignment of sidebar header (merge request)
• Add connection mode column to cluster agents (merge request)
• Allow retry of merge train pipeline while its running (merge request)
• Rename doc page to secret push protection (merge request)
• Add polling to jobs tabs on pipeline (merge request)
• Add WorkItems reference (merge request) GitLab Enterprise Edition
• No longer require magic username for Git over HTTPS with OAuth token by @hickford (merge request)
• Show collapsed directory when custom wiki sidebar exists (merge request)
• Add hasChildrenWithinTimeframe field to epics (merge request) GitLab Enterprise Edition
• Add a param to indicate the purchase request is from GitLab.com (merge request) GitLab Enterprise Edition
• Migrate gl-lg-display-* classes to Tailwind (merge request)
• Update GitLab Pages version (merge request)
• Migrate d-flex to gl-flex (merge request)
• Update pmg architecture blueprint (merge request)
• Replace gl-white-space-normal class (merge request)
• Migrates gl-display-none! to !gl-hidden (merge request) GitLab Enterprise Edition
• Update dependency auto-build-image to v4.1.0 (merge request)
• Rollout github_import_lock_user_finder feature flag (merge request)
• Display username when advising of LFS lock (merge request)
• Rename CI and pipeline minute to compute minute (merge request)
• Replace "via" with "with" in email copy and event timeline (merge request)
• Bumping PAT last used timestamp will not trigger sticky writes (merge request)
• Rename Migration/BackgroundMigrationBaseClass rubocop rule by @zzaakiirr (merge request)
• Make page breadcrumbs auto-adjust to available width (merge request)
• Add edit to edit page breadcrumb (merge request)
• Consolidate Board scope for i18n (merge request)
• Update product analytics onboarding permissions (merge request) GitLab Enterprise Edition
• Add a banner informing about token expiration (merge request)
• This MR removed feature flag (merge request) GitLab Enterprise Edition
• Wiki: Migrate content to Vue (merge request)
• Remove DORA Performers Score panel from built-in project VSD (merge request) GitLab Enterprise Edition
• Enable filtered search on Vulnerability Report (merge request) GitLab Enterprise Edition
• Migrate your work pages to use new typescale (merge request)
• Migrates gl-md-display-* classes to Tailwind (merge request)
• Separate pipeline stages files (merge request)
• Tailwind: Migrate heading utility classes (merge request)
• Fix approval groups finder (merge request) GitLab Enterprise Edition
• Remove Attributes column from Inherited CI/CD Variables table (merge request)
• Skip timestamps in log if present when generating HTML (merge request)
• Avoid overflows (merge request) GitLab Enterprise Edition
• Show toast message when merge request is removed from train (merge request) GitLab Enterprise Edition
• Add Jenkins migration callout (merge request)
• Clarifies issue list error state (merge request)
• Fix alignment of wiki sitemap and templates pages (merge request)
• Rename "Limit access..." to "Grant access..." (merge request)
• Align notes on mobile (merge request)
• Replace gl-line-clamp with the Tailwind equivalent (merge request)
• Update file index.md (merge request)
• Add tracking event for Compute Minutes/Storage checkout page views (merge request) GitLab Enterprise Edition
• Update @gitlab/web-ide and gitlab-vscode-extension (merge request)
• Improve analytics dashboards descriptions (merge request) GitLab Enterprise Edition
• WorkItemAddClosingMergeRequest mutation allows URLs and full references (merge request)
• Replace 'gl-overflow-wrap-anywhere' to Tailwind equivalent (merge request)
• Add iid to work item title (merge request)
• Persist scan execution policies to database (merge request) GitLab Enterprise Edition
• Productize trial_disover_page experiment (merge request) GitLab Enterprise Edition
• Move legacy pipeline mini graph (merge request)
• Update "Upgrade your plan to improve repositories" banner (merge request)
• Reduce number of tokens sent for RCA (merge request) GitLab Enterprise Edition
• Change issues from index to upsert for Elasticsearch (merge request) GitLab Enterprise Edition
• refactor: Introduce a Vue-based UI for Pages (merge request)
• Pipeline graph: Improves accessibility when using keyboard (merge request)
• Update dependency auto-deploy-image to v2.93.0 (merge request)
• Improve UX for 404 error for Duo Pro trial page (merge request) GitLab Enterprise Edition
• Update GitLab Pages version (merge request)
• Consolidate iteration filters for issues (merge request) GitLab Enterprise Edition
• Update breaking changes banner (merge request) GitLab Enterprise Edition
• Include session_cookie_token_prefix in KAS session cookie (merge request)
• Add alignment to prevent button height to grow (merge request)
• Rate limit project / group notifications per user (merge request)
• Allow redirecting wiki directories on rename (merge request)
• Add NOT NULL constraint to "path_locks.project_id" (merge request)
• Add metric start date tooltip to AI Impact Dashboard (merge request) GitLab Enterprise Edition
• Create parent links for imported epics (merge request)
• Migrate d-inline-block to gl-inline-block (merge request)
• Docs(Epic Header): add entry to describe counts (merge request) GitLab Enterprise Edition
• Update page title of history page (merge request)
• Move AI Powered Features by @jzeng88 (merge request)
• Remove Kotlin and Scala from MR pipelines by @l.s.andringa1 (merge request) GitLab Enterprise Edition
• Scaffold component for visualization designer overhaul (merge request) GitLab Enterprise Edition
• Replace curl with gcloud commands in GAM integration (merge request)
• Add enum to graphql mutation (merge request) GitLab Enterprise Edition
• Remove beta notice for import with projects (merge request)
• Feat(Purchase): remove key_contacts_management_v2 (merge request) GitLab Enterprise Edition
• Value stream dashboard label filter no longer matches description (merge request) GitLab Enterprise Edition
• Convert GraphQL fullPath fields to ID types (merge request)
• Change removal milestone of ZenTao to 18.0 (merge request)
• Update UI of the MR approval rules banner (merge request) GitLab Enterprise Edition
• Remove "New list button has moved" popover (merge request)
• Change gl-overflow-wrap-break to gl-break-words (merge request)
• Update button and footer description on company form (merge request) GitLab Enterprise Edition
• Help page: Fix badge alignment and migrate headline class (merge request)
• Cascade duo_features_enabled on save (merge request) GitLab Enterprise Edition
• Update software license policies table (merge request) GitLab Enterprise Edition
• Convert GraphQL IID fields from ID to String types (merge request)
• Apply one rate limit to all webhook test endpoints (merge request)
• Remove collapsed description field for snippets form (merge request)
• Increase WorkItem max children (merge request)
• Add allowed to merge drawer (merge request)
• Diff: use own class for setting max-width (merge request)
• Remove font weight 100 and 300 (merge request) GitLab Enterprise Edition
• Fix for broadcast messages not staying dismissed by @robyrne (merge request)
• Early access program tracking by namespace settings (merge request)
• Change 'warning' banner to 'info' on the Terraform state page by @antonkalmykov (merge request)
• Migrate d-none to gl-hidden (merge request)
• Moved MememberManagement namespaced files to GitlabSubscriptions (merge request) GitLab Enterprise Edition
• Update ruby-lsp to v0.16.7 and prism to v0.29.0 (merge request)
• Use Duo icon and label in editor (merge request) GitLab Enterprise Edition
• Wiki create/edit form cleanup (merge request)
• Remove "Already signed in with SAML" (merge request) GitLab Enterprise Edition
• Update in-progress product analytics onboarding state (merge request) GitLab Enterprise Edition
• Cleanup FF saas_user_caps (merge request) GitLab Enterprise Edition
• Pages: Update UI (merge request)
• Drop default value for p_ci_builds.auto_canceled_by_partition_id (merge request)
• Link to deployment details page for waiting-for-approval jobs (merge request) GitLab Enterprise Edition
• Allow instance adminstrators to link work items (merge request)
• Regenerate OpenAPI documentation of REST API (merge request)
• Move board delete to board configuration modal (merge request)
• Align wording between group and project restore confirmation by @antonkalmykov (merge request) GitLab Enterprise Edition
• Update dependency auto-deploy-image to v2.91.0 (merge request)
• Remove beta status from AI impact analytics dashboard (merge request) GitLab Enterprise Edition
• Wiki: Clone repository changes (merge request)
• Drop redudnant vuln_reads indices, improve unnested_in_filters (merge request)
• Remove invalid remote mirror records without "project_id" (merge request)
• Add epics.issue_id NOT NULL constraint (merge request) GitLab Enterprise Edition
• Add allowedParentTypes to Hierarchy widget (merge request)
• Update visualization designer to preview code in YAML (merge request) GitLab Enterprise Edition
• Add routing field to issues index (merge request) GitLab Enterprise Edition
• Enable use of #deduplicated_size for self-managed (merge request)
• Add feedback mechanism for AI cube query generation (merge request) GitLab Enterprise Edition
• Update error message and layout (merge request)
• Remove Scala and Kotlin from Spotbugs job in Static Analysis CI template (merge request) GitLab Enterprise Edition
• Downcase invite emails as the service layer (merge request)
• Use sentence case for edit snippet title (merge request)
• Remove FF mark_cvs_vulnerabilities_as_resolved (merge request) GitLab Enterprise Edition
• Update neighbor gem to 0.3.2 (merge request)
• Updating ci_pipeline_schedule_variables with sharding key (merge request)
• Make GITLAB_LOG_LEVEL affect more logs (merge request)
• Update edit wiki page and template titles (merge request)
• Move wiki edited by text below title (merge request)
• Add ci_integration_jenkins model function (merge request)
• Remove unused indices on sbom_occurrences (merge request)
• Update GitLab Pages version (merge request)
• Update wiki sidebar (merge request)
• Add frontend URL validation for uploading metrics images (edit modal) by @antonkalmykov (merge request)
• Add allowed to merge drawer (merge request)
• Feat(Epic Header and Board): Align presentation (merge request) GitLab Enterprise Edition
• Using self-hosted llm models name as differentiator (merge request) GitLab Enterprise Edition
• Ignore additional registry migration fields (merge request)
• Wiki: Update docs (merge request)
• Only query the fields needed (merge request)
• Wiki: Move template link to kebab menu (merge request)
• Remove permission check skipping (merge request) GitLab Enterprise Edition
• Improve Analytics dashboards schema errors (merge request) GitLab Enterprise Edition
• Add aria label to labels search (merge request)
• Update redis-client to v0.22.2 (merge request)
• Do not perform git housekeeping when repository does not exist (merge request) GitLab Enterprise Edition
• Update wiki templates layout (merge request)
• Show edit pending comment button on mobile (merge request)
• Excludes pre-release versions from latest and shorthand (merge request)
• Change included text for GitLab Duo generated commit message (merge request)
• Remove enter key listener on states table actions form by @archish27 (merge request)
• Remove duplicated indexes in post migration (merge request)
• Make media and list items draggable (merge request)
• Hide RCA button on the job logs page (merge request)
• Change edit board to "Configure board" (merge request)
• Remove duo chat ga flag (merge request) GitLab Enterprise Edition
• Wiki page: Add delete option to kebab menu (merge request)
• Updated error text for incorrect branch name when creating by @catinbag (merge request)
• Handle product analytics urls endding with slash (merge request) GitLab Enterprise Edition
• Add Search reference (merge request) GitLab Enterprise Edition
• Add query builder format class (merge request) GitLab Enterprise Edition
• Update product analytics onboarding flow settings clearing (merge request) GitLab Enterprise Edition
• Updated the Upgrade GitLab Runner link by @catinbag (merge request)
• Remove epic work item sync feature flags (merge request) GitLab Enterprise Edition
• Create wikis without content (merge request)
• Replace approval selectors with User/Group selectors (merge request) GitLab Enterprise Edition
• Add new page button to wiki sitemap (merge request)
• Wiki edit page: Move delete button to action row (merge request)
• AI Generate commit message: Change text of button (merge request)
• Remove static webhook feature flags (merge request)
• Export private emails in seat usage quota export (merge request) GitLab Enterprise Edition
• Update ES sizing for single node clusters (merge request) GitLab Enterprise Edition
• Display custom role title in invitation emails (merge request)
• Add imported badge to design notes (merge request)
• Move board optons into dropdown and change config button (merge request)
• Change logic for beyond identity GPG keys alert message (merge request)
• Only return ID from Elasticsearch response (merge request) GitLab Enterprise Edition
• Move update trigger to pop up modal by @missy-davies (merge request)
• Use confirm variant for new wiki template (merge request)
• Used gitlab ui utilities in feature flag form by @catinbag (merge request)
• Add link to the project in the self-managed provider card (merge request) GitLab Enterprise Edition
• Externalize interpret_service_spec by @jzeng88 (merge request)
• Disable Rails console's IRB's autocompletion by default (merge request)
• Add indicator when Cube query is loading slow (merge request) GitLab Enterprise Edition
• Release compliance frameworks report csv feature (merge request) GitLab Enterprise Edition
• Make edited text always gray (merge request)
• Update styling of framework report drawer (merge request) GitLab Enterprise Edition
• Clean up duo_chat_ga_alert flag and feature (merge request) GitLab Enterprise Edition
• Remove saml_reload feature flag (merge request)
• Clean up duo_pro_trial_alert feature flag by @robyrne (merge request) GitLab Enterprise Edition
• Updates GitLab Pages version (merge request)
• Swap columns trigger_request_id and erased_by_id for p_ci_builds (merge request)
• Implement a web hook create service (merge request) GitLab Enterprise Edition
• Improve CI/CD lead time analytics rendering of small values (merge request) GitLab Enterprise Edition
• Minor UX updates to explore projects (merge request)
• Restrict accesss requests when group has reached member limit (merge request) GitLab Enterprise Edition
• Migrate d-inline to gl-inline (merge request)
• Remove log_execution_time_path_traversal_middleware feature flag (merge request)
• Remove rate_limit_oauth_api feature flag (merge request)
• Migrates d-inline-flex go gl-inline-flex (merge request)
• Remove use_database_for_dependency_export feature flag (merge request) GitLab Enterprise Edition
• Default group_multi_select_tokens feature flag to true (merge request)
• Change gl-word-break-word to gl-break-anywhere (merge request)
• Append a percentage symbol to the end of work item progress (merge request) GitLab Enterprise Edition
• Simplify text of Google Cloud runner registration (merge request)

Removed (29 changes)

• Remove confidence parameter from vulnerability_findings API (merge request) GitLab Enterprise Edition
• Remove deprecated ci_runners columns (merge request)
• Revert MR button in forked project issues (merge request)
• Remove combined_analytics_dashboards feature flag (merge request) GitLab Enterprise Edition
• Remove code_suggestion_events_in_click_house FF (merge request) GitLab Enterprise Edition
• Removes the cascade_duo_features_enabled_setting feature flag (merge request)
• Remove BBM job classes up to 16.3 (merge request)
• Remove temporary duo pro settings banners (merge request)
• Cleanup product_analytics_admin_settings flag (merge request)
• Remove unused Geo::RepositoriesChangedEvent (merge request) GitLab Enterprise Edition
• Remove ai_tracking_data_gathering feature flag (merge request) GitLab Enterprise Edition
• Cleanup product_analytics_beta_optin flag (merge request)
• Removes temporary index on project_statistics (merge request)
• Remove migration columns in container repository (merge request)
• Removed product analytics dashboard feature flag by @archish27 (merge request)
• Remove backfill_workspace_personal_access_token_spec (merge request)
• Remove migration-related columns from settings (merge request)
• Remove gitops Deprecation Alert (merge request)
• Remove AI experimentation endpoints (merge request) GitLab Enterprise Edition
• Remove ignore columns rule for legacy event-related tables (merge request) GitLab Enterprise Edition
• Remove use_or_default_operator feature flag (merge request) GitLab Enterprise Edition
• Renamed relatedMergeRequests field on WorkItem Development widget (merge request)
• Remove unused code (merge request) GitLab Enterprise Edition
• Remove browse template button from the pipeline editor by @yonghyun.jin13 (merge request)
• Remove all code related to clusters/integrations (merge request)
• Remove the BuildSuccessWorker (merge request)
• Remove approval_rules_drawer feature flag (merge request)
• Remove integer column and trigger function for ci_pipelines (merge request)
• Remove use_faster_code_owner_file_exist_check feature flag (merge request) GitLab Enterprise Edition

Security (21 changes)

• Verify Asana access token when testing Asana integration
• Bump KAS version
• Improve go_package_regex to prevent ReDoS attacks
• XSS and content injection raw XHTML files on IOS devices
• Fix ReDoS in CI Interpolation
• Set IP address in sidekiq (merge request)
• Prevent PDF.js from evaluating scripts (merge request)
• Add text limit to ci_runners text fields (merge request)
• Caching test_report api response to reduce calculations (merge request)
• Fail create commit status on pipeline_id / sha mismatch (merge request)
• Restrict access to Secure artifacts to developer role (merge request)
• Use UntrustedRegexp for gollum pattern (merge request)
• Patch @gitlab/web-ide to fix XSS webWorkerExtensionHostIframe.html (merge request)
• Prevent PDF.js from evaluating scripts (merge request)
• Add text limit to ci_runners text fields (merge request)
• Caching test_report api response to reduce calculations (merge request)
• Fail create commit status on pipeline_id / sha mismatch (merge request)
• Update KAS version (merge request)
• Restrict access to Secure artifacts to developer role (merge request)
• Use UntrustedRegexp for gollum pattern (merge request)
• Patch @gitlab/web-ide to fix XSS webWorkerExtensionHostIframe.html (merge request)

Performance (10 changes)

• Add index to package files on package_id, status and file extension (merge request)
• Improves groups controller specs (merge request)
• Memoize common rules:changes evaluations in pipeline creation (merge request)
• Enable and remove ci_rules_exists_pattern_matches_cache (merge request)
• Fix N+1 problem in the pipeline bridges API endpoint (merge request)
• Skip groups query in @ autocomplete if not needed (merge request)
• Delay devise login lock settings (merge request)
• Optimize todos query when filtering by group (merge request)
• Add index to package files on file_name and file_sha256 (merge request)
• Analyze partitioned tables every 3 days (merge request)

Other (334 changes)

• Add the zoekt application setting zoekt_auto_index_root_namespace (merge request) GitLab Enterprise Edition
• Add and backfill project_id for external_status_checks_protected_branche (merge request)
• Add and backfill project_id for merge_request_review_llm_summaries (merge request)
• Protected packages + containers: Set alpha for GraphQL protection rules by @gerardo-navarro (merge request)
• Backfilling ci_pipelines project_id (merge request)
• Prepare async creation for merge_requests.head_pipeline_id (merge request)
• Add and backfill project_id for vulnerability_issue_links (merge request)
• Fix some Style/EmptyMethod offenses by @phot0n (merge request)
• Drop FF respawn_assign_resource_worker (merge request)
• Removes extra period from FK docs (merge request)
• Adds a note about using BIGINT Fks (merge request)
• Define events and metrics for Find file instrumentation (merge request)
• Add sharding-key on upcoming_reconciliations (merge request) GitLab Enterprise Edition
• Remove duplicated index from boards_epic_board_recent_visits (merge request)
• Add and backfill project_id for operations_strategies_user_lists (merge request)
• Add and backfill project_id for sbom_occurrences_vulnerabilities (merge request)
• Add and backfill project_id for packages_debian_project_distribution_key (merge request)
• Add and backfill project_id for merge_request_blocks (merge request)
• Add and backfill group_id for epic_user_mentions (merge request)
• Include accessibility tests for classing and rapid diffs (merge request)
• Remove overage_members_modal feature flag (merge request)
• Implement train_type (merge request) GitLab Enterprise Edition
• Add and backfill project_id for status_check_responses (merge request)
• Add and backfill project_id for release_links (merge request)
• Fix missing traversal_ids for vulnerability_reads records (merge request)
• refactor: Apply best practices to visibility helper test by @gerardo-navarro (merge request)
• refactor: Protected packages: Collection of wording changes by @gerardo-navarro (merge request)
• Quarantine a flaky test (merge request)
• Add and backfill group_id for packages_debian_group_distribution_keys (merge request)
• Add and backfill project_id for merge_request_assignment_events (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Add and backfill project_id for packages_debian_publications (merge request)
• Remove index_identities_on_provider DB index (merge request)
• Quarantine a flaky test (merge request)
• Improve UI text in custom notification settings (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Protected packages: Use positive logic to protected_up_to_access_level by @gerardo-navarro (merge request)
• Add and backfill project_id for dast_site_validations (merge request)
• Add and backfill project_id for vulnerability_merge_request_links (merge request)
• Add and backfill project_id for operations_feature_flags_issues (merge request)
• Docs: Support mutual TLS in GitLab Pages with GitLab API (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Add a metric ZoektSearchEnabledMetric (merge request) GitLab Enterprise Edition
• Release augmenting package registry GCS signed URLs with metadata (merge request)
• Remove column default (merge request) GitLab Enterprise Edition
• Add and backfill project_id for dast_pre_scan_verifications (merge request)
• Draft: Add sharding key tracking issues for security_policy_management (merge request)
• Resolve Layout/ArgumentAlignment offenses 82 by @gauravmarwal (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Remove duplicated index from boards_epic_user_preferences (merge request)
• Remove duplicated index from board_user_preferences (merge request)
• Mark 20230426195404 as obsolete (merge request) GitLab Enterprise Edition
• Add and backfill project_id for vulnerability_state_transitions (merge request)
• Add and backfill project_id for merge_request_assignees (merge request)
• Add and backfill project_id for dast_site_profile_secret_variables (merge request)
• Mark 20230518064300 as obsolete (merge request) GitLab Enterprise Edition
• Add and backfill project_id for terraform_state_versions (merge request)
• Add and backfill project_id for project_relation_exports (merge request)
• Add organization_id column (merge request) GitLab Enterprise Edition
• Draft: Add sharding key tracking issues for requirements_management (merge request)
• Draft: Add sharding key tracking issues for incident_management (merge request)
• Add and backfill project_id for draft_notes (merge request)
• Draft: Add sharding key tracking issues for geo_replication (merge request)
• Remove ai_gateway_docs_search flag (merge request) GitLab Enterprise Edition
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Draft: Add sharding key tracking issues for continuous_delivery (merge request)
• Draft: Add sharding key tracking issues for integrations (merge request)
• Add and backfill project_id for vulnerability_user_mentions (merge request)
• Add and backfill project_id for operations_strategies (merge request)
• Add and backfill project_id for dast_profiles_tags (merge request)
• Remove untrusted Bitbucket identities and related fallback (merge request)
• Resolve Layout/ArgumentAlignment offenses 68 by @gauravmarwal (merge request)
• Drop unused index_vulnerability_occurrences_on_project_fingerprint (merge request)
• Use normal font weight for board view dropdown toggles (merge request)
• Make approver to-do and email consistent (merge request) GitLab Enterprise Edition
• Remove tree method from ExtractsRef (merge request)
• Updated documentation & fixed rate limit user by @archish27 (merge request)
• Resolve Layout/ArgumentAlignment offenses 65 by @gauravmarwal (merge request)
• Protected container: Add help page for protected containers by @gerardo-navarro (merge request)
• Add and backfill project_id for ml_experiment_metadata (merge request)
• Add and backfill namespace_id for user_achievements (merge request)
• Remove use_ids_for_markdown_upload_urls flag (merge request)
• Remove default values ci_daily_build_group_report_results#partition_id (merge request)
• Update feature category for MergeWorker (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Refactor ExtractsRef to use RefExtractor logic (merge request)
• Remove obsolete Advanced search migrations (merge request) GitLab Enterprise Edition
• Remove FF auto_merge_when_incomplete_pipeline_succeeds (merge request)
• Remove unnecessary allows between gitlab_schemas (merge request)
• Add and backfill project_id for packages_build_infos (merge request)
• Add a new FF disable_zoekt_search_for_saas (merge request) GitLab Enterprise Edition
• Add and backfill namespace_id for design_management_versions (merge request)
• Draft: Add sharding key tracking issues for release_evidence (merge request)
• Remove "use_remote_service_update_service" feature flag (merge request) GitLab Enterprise Edition
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Finalize migration BackfillDeploymentApprovalsProjectId (merge request)
• Quarantine a flaky test (merge request)
• Fix Layout/FirstArrayElementIndentation 1 offenses by @archish27 (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Add and backfill project_id for wiki_page_slugs (merge request)
• Quarantine a flaky test (merge request)
• Drop temp_index_on_notes_with_null_noteable_type from notes table (merge request)
• Resolve Layout/ArgumentAlignment offenses 75 by @gauravmarwal (merge request)
• Protected packages: Add help text for name pattern input by @gerardo-navarro (merge request)
• Quarantine a flaky test (merge request) GitLab Enterprise Edition
• Add and backfill project_id for remote_development_agent_configs (merge request)
• Add and backfill project_id for dora_daily_metrics (merge request)
• Resolve Layout/ArgumentAlignment offenses 73 by @gauravmarwal (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Finalize migration BackfillClusterAgentTokensProjectId (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Add not null constraint for releases.project_id (merge request)
• Fix Lint/AmbiguousOperatorPrecedence 4 offenses by @archish27 (merge request) GitLab Enterprise Edition
• Draft: Add sharding key tracking issues for code_review_workflow (merge request)
• Add and backfill agent_project_id for agent_activity_events (merge request)
• Draft: Add sharding key tracking issues for cell (merge request)
• Backfill epic_issues records into work_items (merge request)
• Resolve Layout/ArgumentAlignment offenses 79 by @gauravmarwal (merge request)
• Resolve Layout/ArgumentAlignment offenses 86 by @gauravmarwal (merge request)
• Fix Layout/SpaceInLambdaLiteral 8 offenses by @archish27 (merge request)
• Remove unnecessary allows between gitlab_schemas (merge request)
• Add and backfill group_id for boards_epic_user_preferences (merge request)
• Fix Layout/MultilineOperationIndentation 3 offenses by @archish27 (merge request)
• Fix Lint/AmbiguousOperatorPrecedence 6 offenses by @archish27 (merge request)
• Draft: Add sharding key tracking issues for system_access (merge request)
• Use RemoteMirrors::DestroyService for push mirror deletion (merge request)
• Draft: Add sharding key tracking issues for importers (merge request)
• Remove unused approval auto merge worker (merge request)
• Resolve Layout/ArgumentAlignment offenses 71 by @gauravmarwal (merge request)
• Fix Lint/SymbolConversion 1 offenses by @archish27 (merge request) GitLab Enterprise Edition
• Remove duplicated index from board_project_recent_visits (merge request)
• Fix Layout/SpaceInLambdaLiteral 4 offenses by @archish27 (merge request)
• Fix Lint/SymbolConversion 3 offenses by @archish27 (merge request) GitLab Enterprise Edition
• Fix Lint/SymbolConversion 8 offenses by @archish27 (merge request)
• Consolidate MWCP feature flags into 1 (merge request)
• Resolve Layout/ArgumentAlignment offenses 74 by @gauravmarwal (merge request)
• Resolve Layout/ArgumentAlignment offenses 85 by @gauravmarwal (merge request)
• Cleanup approval_policy_parent_child_pipeline feature flag (merge request) GitLab Enterprise Edition
• Remove remove_refactor_auto_merge feature flag (merge request)
• Draft: Add sharding key tracking issues for devops_reports (merge request)
• DROP temp_notes_backup table (merge request)
• Draft: Add sharding key tracking issues for team_planning (merge request)
• Validate notes.noteable_type NOT NULL constraint SYNC (merge request)
• Resolve Layout/ArgumentAlignment offenses 80 by @gauravmarwal (merge request)
• Resolve Layout/ArgumentAlignment offenses 78 by @gauravmarwal (merge request)
• Fix Layout/SpaceInLambdaLiteral 7 offenses by @archish27 (merge request)
• Resolve Layout/ArgumentAlignment offenses 72 by @gauravmarwal (merge request)
• Resolve Layout/ArgumentAlignment offenses 66 by @gauravmarwal (merge request)
• Add sharding key tracking issues for continuous_integration (merge request)
• Fix Layout/SpaceInLambdaLiteral 22 offenses by @archish27 (merge request)
• Add and backfill group_id for boards_epic_lists (merge request)
• Draft: Add sharding key tracking issues for build_artifacts (merge request)
• Fix Layout/FirstArrayElementIndentation 4 offenses by @archish27 (merge request)
• Add sharding key for VSA tables (merge request)
• Fix Layout/FirstArrayElementIndentation 2 offenses by @archish27 (merge request)
• Fix Lint/AmbiguousOperatorPrecedence 10 offenses by @archish27 (merge request)
• Finalize migration BackfillCatalogResourceVersionSemVer (merge request)
• Fix Lint/AmbiguousOperatorPrecedence 11 offenses by @archish27 (merge request)
• Fix Layout/SpaceInLambdaLiteral 11 offenses by @archish27 (merge request) GitLab Enterprise Edition
• Make copy for entering URLs consistent (merge request) GitLab Enterprise Edition
• Drop the temporary index from vulnerability_reads table (merge request)
• Draft: Add sharding key tracking issues for secrets_management (merge request)
• Add and backfill namespace_id for design_management_repositories (merge request)
• Add and backfill namespace_id for design_management_designs (merge request)
• Fix Layout/SpaceInLambdaLiteral 5 offenses by @archish27 (merge request)
• Fix Layout/SpaceInLambdaLiteral 14 offenses by @archish27 (merge request) GitLab Enterprise Edition
• Fix Layout/SpaceInLambdaLiteral 2 offenses by @archish27 (merge request)
• Fix Lint/AmbiguousOperatorPrecedence 9 offenses by @archish27 (merge request)
• Draft: Add sharding key tracking issues for portfolio_management (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Clean up ai_chat_enabled_namespace_ids feature flag (merge request)
• Draft: Add sharding key tracking issues for audit_events (merge request)
• Quarantine a flaky test (merge request)
• Resolve Layout/FirstHashElementIndentation 3 by @gauravmarwal (merge request)
• Quarantine a flaky test (merge request)
• Fix Lint/AmbiguousRegexpLiteral 2 offenses by @archish27 (merge request)
• Add and backfill group_id for audit_events_streaming_event_type_filters (merge request)
• Clean up arkose_labs_phone_verification_challenge FF (merge request) GitLab Enterprise Edition
• Quarantine a flaky test (merge request)
• Add and backfill group_id for audit_events_streaming_headers (merge request)
• Mark 20230530500000 as obsolete (merge request) GitLab Enterprise Edition
• Draft: Add sharding key tracking issues for user_profile (merge request)
• Update capitalization of beta and experiment in ui (merge request)
• Finalize migration BackfillNugetNormalizedVersion (merge request)
• Add and backfill group_id for boards_epic_board_labels (merge request)
• Fix Layout/ArgumentAlignment offenses 44 by @gauravmarwal (merge request) GitLab Enterprise Edition
• Quarantine a flaky test (merge request)
• Remove the use_only_onboarding_status_db_value feature flag (merge request) GitLab Enterprise Edition
• Resolve Layout/ArgumentAlignment offenses 49 by @gauravmarwal (merge request) GitLab Enterprise Edition
• Draft: Add sharding key tracking issues for package_registry (merge request)
• Resolve Layout/ArgumentAlignment offenses 70 by @gauravmarwal (merge request)
• Add and backfill group_id for boards_epic_board_positions (merge request)
• Update validations for Push Mirrors (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Fix Layout/SpaceInLambdaLiteral 16 offenses by @archish27 (merge request) GitLab Enterprise Edition
• Finalize issue search data backfill migration (merge request)
• Resolve Layout/FirstHashElementIndentation 2 by @gauravmarwal (merge request)
• Ignore manually created MergeRequestsClosinIssues records (merge request)
• Fix Lint/AmbiguousOperatorPrecedence 8 offenses by @archish27 (merge request)
• Resolve Layout/ArgumentAlignment offenses 67 by @gauravmarwal (merge request)
• Mark 20230519142363 as obsolete (merge request) GitLab Enterprise Edition
• Mark 20230428500000 as obsolete (merge request) GitLab Enterprise Edition
• Mark 20230613555555 as obsolete (merge request) GitLab Enterprise Edition
• Quarantine protected_branches_access_control_ce_shared_examples.rb (merge request)
• Draft: Add sharding key tracking issues for feature_flags (merge request)
• Extract GitLab-Shell JWT token verification into a class (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Add sharding key tracking issues for source_code_management (merge request)
• Mark 20230503064300 as obsolete (merge request) GitLab Enterprise Edition
• Remove Message about moved Pages Menu entry (merge request)
• Draft: Add sharding key tracking issues for purchase (merge request)
• Draft: Add sharding key tracking issues for metrics (merge request)
• Draft: Add sharding key tracking issues for consumables_cost_management (merge request)
• Draft: Add sharding key tracking issues for groups_and_projects (merge request)
• Draft: Add sharding key tracking issues for compliance_management (merge request)
• Fix Layout/SpaceInLambdaLiteral 12 offenses by @archish27 (merge request) GitLab Enterprise Edition
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Fix Layout/SpaceInLambdaLiteral 23 offenses by @archish27 (merge request)
• Remove or_issuable_queries feature flag (merge request)
• Mark 20230519500012 as obsolete (merge request) GitLab Enterprise Edition
• Remove k8s_watch_api feature flag (merge request)
• Mark 20230427555555 as obsolete (merge request) GitLab Enterprise Edition
• Fix Layout/MultilineOperationIndentation 1 offenses by @archish27 (merge request)
• Remove alpha label (merge request) GitLab Enterprise Edition
• Quarantine a flaky test (merge request)
• Remove feature flag "use_remote_mirror_create_service" (merge request)
• Protected packages: Shorten GraphQL field protectionRuleExists Part 2 by @gerardo-navarro (merge request)
• Fix Layout/ArgumentAlignment offenses 16 by @gauravmarwal (merge request)
• Fix Layout/SpaceInLambdaLiteral 17 offenses by @archish27 (merge request) GitLab Enterprise Edition
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Finalize BackupAndRemoveNotesWithNullNoteableType migration (merge request)
• Fix Layout/SpaceInLambdaLiteral 9 offenses by @archish27 (merge request)
• Fix Layout/SpaceInLambdaLiteral 19 offenses by @archish27 (merge request)
• Fix Layout/LineContinuationLeadingSpace 3 by @archish27 (merge request)
• Fix Lint/DeprecatedConstants Layout/FirstArgumentIndentation offenses by @archish27 (merge request)
• Add sync index and swap columns (merge request)
• Fix Lint/AmbiguousRegexpLiteral 4 offenses by @archish27 (merge request)
• Remove duplicated index from alert_management_http_integrations (merge request)
• Fix Layout/MultilineOperationIndentation 4 offenses by @archish27 (merge request) GitLab Enterprise Edition
• Fix Layout/SpaceInsideParens offenses 5 by @archish27 (merge request) GitLab Enterprise Edition
• Draft: Add sharding key tracking issues for seat_cost_management (merge request)
• Fix Layout/SpaceInLambdaLiteral 6 offenses by @archish27 (merge request)
• Fix Layout/SpaceInLambdaLiteral 21 offenses by @archish27 (merge request)
• Finalize migration BackfillArchivedAndTraversalIdsToVulnerabilityReads (merge request)
• Draft: Add sharding key tracking issues for global_search (merge request)
• Fix Layout/SpaceInsideParens offenses 4 by @archish27 (merge request) GitLab Enterprise Edition
• Update Node-Express template with an updated code (merge request)
• Add and backfill project_id for approval_project_rules_users (merge request)
• Finalize BackfillEpicBasicFieldsToWorkItemRecord background migration (merge request)
• Draft: Add sharding key tracking issues for deployment_management (merge request)
• Draft: Add sharding key tracking issues for release_orchestration (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Resolve Layout/FirstHashElementIndentation 14 by @gauravmarwal (merge request)
• Resolve Layout/FirstHashElementIndentation 1 by @gauravmarwal (merge request)
• Resolve Layout/ArgumentAlignment offenses 87 by @gauravmarwal (merge request)
• Resolve Layout/ArgumentAlignment offenses 84 by @gauravmarwal (merge request)
• Quarantine a flaky test (merge request)
• Resolve Layout/ArgumentAlignment offenses 81 by @gauravmarwal (merge request)
• Resolve Layout/ArgumentAlignment offenses 77 by @gauravmarwal (merge request)
• Resolve Layout/ArgumentAlignment offenses 69 by @gauravmarwal (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Remove disable_developer_access_to_admin_vulnerability feature flag (merge request) GitLab Enterprise Edition
• Remove autovacuum skip for ci_builds related BBMs (merge request)
• Remove pool_key label in connection pool metrics (merge request)
• Fix Layout/ArgumentAlignment offenses 4 by @gauravmarwal (merge request)
• Quarantine a flaky test (merge request)
• Fix Layout/ArgumentAlignment offenses 11 by @gauravmarwal (merge request)
• Add and backfill project_id for approval_merge_request_rules (merge request)
• Fix Lint/SymbolConversion 4 offenses by @archish27 (merge request)
• Fix Layout/FirstArrayElementIndentation 2 offenses by @archish27 (merge request) GitLab Enterprise Edition

fix (1 change)

• Update Web IDE dependency to receive duo fixes (merge request)

17.0.8 (2024-09-16)

No changes.

17.0.7 (2024-09-10)

Fixed (2 changes)

• Fix Sidekiq crashing when GITLAB_LOG_LEVEL set to debug (merge request)
• Backport Fixes Geo Replication Details view (merge request) GitLab Enterprise Edition

17.0.6 (2024-08-06)

Changed (1 change)

• Put groups_direct field in CI JWT tokens behind feature flag

Security (13 changes)

• Show correct file content (merge request)
• Fix Possible asciidoctor include:: directive DOS (merge request)
• Filter parameters in Rack::Attack logs (merge request)
• Update audit payload (merge request)
• Limit access to project accessed by Security Policy Bot (merge request)
• Show alert about not rendering files due to path encoding (merge request)
• Fix the catastrophic backtracking (merge request)
• Security fixes for banzai pipeline part 2 (merge request)
• Remove xhtml extensions from snippets blobs (merge request)
• Add a project scope to LfsTokens (merge request)
• Fix ReDoS when parsing git push options (merge request)
• Fix ReDoS in RefMatcher (merge request)
• Enforce require_password_to_approve MR approval policy property (merge request)

17.0.5 (2024-07-24)

Added (1 change)

• Add Rake task to show token expiration info

Fixed (1 change)

• Ignore object pool already exists creation errors

Security (7 changes)

• Refactor import_export_upload to be user-based (merge request)
• Fix for private txt artifacts being accessible through the artifacts/browse link (merge request)
• Attribute BulkImport::Export to a particular user (merge request)
• Don't include project-level analytics settings in DOM (merge request)
• Fix for private dotenv artifacts not accessible to downstream jobs (merge request)
• Do not allow script execution on dependency responses (merge request)
• Remove prohibited tags after import (merge request)

17.0.4 (2024-07-09)

Fixed (1 change)

• Update dependency slack-messenger to v2.3.5

Security (9 changes)

• Disallow serving Pages over disabled custom domains with deployments (merge request)
• Check npm package name, version and scripts coherence (merge request)
• Check for create_deploy_token policy before creating deploy token (merge request)
• Check if user has ban_group_member access before banning in namespace (merge request)
• Prevent privilege escalation via custom role (merge request)
• Prevent using quick actions for some bot users (merge request)
• Disable raw HTML for quick action pipeline (merge request)
• Disable quick actions unless description changed (merge request)
• Remove comment support from shrug and tableflip (merge request)

17.0.3 (2024-06-25)

Fixed (5 changes)

• Only enumerate commits in pre-receive check if push came from Web
• Only allow documented token types for GraphQL authentication
• Fix error when calling GQL ciConfig endpoint with include:component
• Update an expired test certificate
• Fix missing filename when downloading generic package in release page

Changed (1 change)

• Add a banner informing about token expiration

Security (14 changes)

• Security fixes for banzai pipeline (merge request)
• Fix the catastrophic backtracking in openapi regex (merge request)
• Use permitted_params for standalone and multiplex queries (merge request)
• Fix for Private job artifacts can be accessed by any user (merge request)
• Remove search results from public projects with unauthorized repos (merge request)
• Do not run a new pipeline on re-target (merge request)
• Add limits on autolinker regex (merge request)
• Fix clickjacking on OAuth application page (merge request)
• Hide branch merge request if merge requests are private (merge request)
• Remove collapseLongCommitList method (merge request)
• Pass SSO session data to Sidekiq (merge request)
• Prevent non-members from using promote_to quick action for quick actions (merge request)
• Reject deletion of security policy project approval rules (merge request)
• Mitigate ReDoS attacks via method_call_regex (merge request)

17.0.2 (2024-06-11)

Fixed (1 change)

• Fix instance templates pagination GitLab Enterprise Edition

Changed (1 change)

• Only query the fields needed

Security (4 changes)

• XSS and content injection raw XHTML files on IOS devices (merge request)
• Improve go_package_regex to prevent ReDoS attacks (merge request)
• Fix ReDoS in CI Interpolation (merge request)
• Verify Asana access token when testing Asana integration (merge request)

17.0.1 (2024-05-21)

Fixed (2 changes)

• Don't fail so loudly if default work item type is invalid
• Ensure BLPOP/BRPOP returns nil instead of raising ReadTimeoutError

Security (7 changes)

• Prevent PDF.js from evaluating scripts (merge request)
• Caching test_report api response to reduce calculations (merge request)
• Restrict access to Secure artifacts to developer role (merge request)
• Fail create commit status on pipeline_id / sha mismatch (merge request)
• Use UntrustedRegexp for gollum pattern (merge request)
• Patch @gitlab/web-ide to fix XSS webWorkerExtensionHostIframe.html (merge request)
• Add text limit to ci_runners text fields (merge request)

17.0.0 (2024-05-15)

Added (164 changes)

• Add more actions to work item sticky header (merge request)
• Expose webhook name and description fields in API (merge request)
• Expose VSA metrics via GraphQL (merge request)
• Update project policy to use admin_push_rules (merge request) GitLab Enterprise Edition
• Document migration to multiple databases for Streaming Replication setup (merge request)
• Auto assign the new members a duo pro seat (merge request) GitLab Enterprise Edition
• Augment GCS signed URLs with GitLab metadata for package registry (merge request)
• Add automatic color mode (merge request)
• Enable ai_gateway_docs_search as beta feature (merge request) GitLab Enterprise Edition
• Set imported_from for Direct Transfer objects (merge request)
• Adding create and delete apis for group namespace filters (merge request) GitLab Enterprise Edition
• Cleanup default_branch_protection_defaults feature flag (merge request)
• Warn when pages multiple deployments is disabled (merge request) GitLab Enterprise Edition
• Add admin_web_hook ability to custom roles (merge request) GitLab Enterprise Edition
• Add new params in protected branch creation (merge request) GitLab Enterprise Edition
• Add reassigned_by_user to import_source_users (merge request)
• Migrate Value streams dashboard to shared analytics dashboards (merge request)
• Enable approval_policy_disable_bot_comment by default (merge request) GitLab Enterprise Edition
• Add creator relationship to namespaces (merge request)
• Add mutation for clearing project runner cache (merge request)
• Enables external participants for Service Desk (merge request)
• Add tooltip with raw counts to AI usage rate values in AI Impact table (merge request) GitLab Enterprise Edition
• Expose imported status for relevant entities (merge request)
• Update project_saved_replies_flag to default true (merge request) GitLab Enterprise Edition
• Delete users unconfirmed secondary emails after 3 days (merge request)
• Add labels and assignees widgets to work items create mutation (merge request)
• Allow additional parameter: published_at for sorting (merge request)
• Expose last_published_at field from API (merge request)
• Add a worker to remove stuck canceling jobs (merge request)
• Bypass secrets check via push option (merge request)
• Implement default branch protection defaults (merge request)
• Adds Phorge logo (merge request)
• Organization owner project permissions (merge request)
• Add BranchRuleExternalStatusCheckDestroy mutation (merge request) GitLab Enterprise Edition
• Adds templating functionality to new participant email (merge request)
• Add gql option to ciCatalogResources to sort by usage (merge request)
• Adding aws audit event destination validator (merge request) GitLab Enterprise Edition
• Protected packages: Show protection info in package detail page by @gerardo-navarro (merge request)
• Add scan result policy deprecated warning (merge request) GitLab Enterprise Edition
• Add imported_from column (merge request)
• Backfill work items for epics (merge request)
• Clean up auto_request_phone_number_verification_exemption feature flag (merge request) GitLab Enterprise Edition
• Support rules:exists subkeys paths, project, and ref (merge request)
• Allow group owners to enable duo pro auto assign (merge request) GitLab Enterprise Edition
• Roll out deployment details page (merge request)
• Add validation error to input (merge request) GitLab Enterprise Edition
• Protected packages: Use icon only for delete rule button by @gerardo-navarro (merge request)
• Adds Beta badge for analytics dashboards (merge request) GitLab Enterprise Edition
• Secrets push check uses project level settings (merge request)
• This MR adds drawer for pipeline execution (merge request) GitLab Enterprise Edition
• Index vulnerability_reads for common group-level queries (merge request)
• Add status to Ci::Partition (merge request)
• Make view Jira issues configurable via API by @ivantedja (merge request)
• Add Update avatar api endpoint for current user by @lifez (merge request)
• Add audit event for deleting web hooks (merge request) GitLab Enterprise Edition
• Add silent_admin_exports_enabled setting (merge request)
• Allow groups to be added to the inbound allowlist (merge request)
• Support deep linking to search results on the CI/CD catalogue page by @espadav8 (merge request)
• Add setting for enabling CS for Registry (merge request) GitLab Enterprise Edition
• Create BranchRuleExternalStatusCheckUpdate mutation (merge request) GitLab Enterprise Edition
• Added validation of http destinations (merge request) GitLab Enterprise Edition
• Add empty states for deployment approvals (merge request) GitLab Enterprise Edition
• Finalize BackfillVulnerabilityReadsClusterAgent migration (merge request)
• Add achievementsPath to NamespaceType for graphql by @ChaelCodes (merge request)
• Add UI components for Beyond Identity check exclusions (merge request)
• Add status field to CustomizableDashboard GraphQL API (merge request) GitLab Enterprise Edition
• Add support for ordering group runners by most active (merge request)
• Added CreateService (merge request) GitLab Enterprise Edition
• Add manual_confirmation by @lifez (merge request)
• Frontend work for regex filter on Zoekt code search (merge request)
• Remove "update_changelog_logic" FF (merge request)
• Limit the number of active versioned pages deployments (merge request)
• Added model for instance namespace filters (merge request) GitLab Enterprise Edition
• Sort labels by relevance on search (merge request)
• Add VerifyNamespaceService to change validation_level (merge request)
• Synch add tmp indexes for vulnerability_occurrences backfill (merge request)
• Adds support to filter packages by status (merge request)
• Rate limit internal X-Ray scan API endpoint (merge request) GitLab Enterprise Edition
• Clean up arkose_labs_signup_data_exchange feature flag (merge request) GitLab Enterprise Edition
• Create partitioned merge_request_diff_files_* table (merge request)
• Add pipeline source check for security_policy_default (merge request) GitLab Enterprise Edition
• This MR adds pipeline execution queries (merge request) GitLab Enterprise Edition
• Adds system note when external participant unsubscribes (merge request)
• Add Bitbucket Cloud Import API (merge request)
• Add enable_auto_assign_gitlab_duo_pro_seats setting (merge request) GitLab Enterprise Edition
• Add support to list child pipelines in project (merge request)
• Default enable approval_policy_parent_child_pipeline (merge request) GitLab Enterprise Edition
• Finish value stream stages read GraphQL API (merge request) GitLab Enterprise Edition
• Support X-Original-To headers for email ingestion (merge request)
• Support banned projects in VisibilityIcon component by @espadav8 (merge request)
• Move Analytics settings to a new admin settings section (merge request) GitLab Enterprise Edition
• This MR adds new resolver (merge request) GitLab Enterprise Edition
• Add ID of runner owner group in ci_running_builds (merge request)
• Add REST API endpoints to list, create, delete instance member roles (merge request) GitLab Enterprise Edition
• Refactor refresh user assignments jobs (merge request) GitLab Enterprise Edition
• Allow fetching related merge requests on a WorkItem (merge request)
• feat: Add throttle app settings for unauthenticated GIT HTTP requests by @gerardo-navarro (merge request)
• Prepare async index for p_ci_builds.user_id (merge request)
• Add GraphQL API for policy violations (merge request) GitLab Enterprise Edition
• Add missing arguments for creating a work item epic (merge request)
• Reconcile Seat Overage (merge request) GitLab Enterprise Edition
• Early Access Program tracking init (merge request)
• Add full log viewer (merge request)
• Add frontend for user registration restrictions (merge request) GitLab Enterprise Edition
• Create index on user_add_on_assignments (merge request)
• Updated requesting changes blocking behaviour (merge request)
• Add limit warning message (merge request) GitLab Enterprise Edition
• Add admin compliance framework as custom ability (merge request) GitLab Enterprise Edition
• Add solution_html to PipelineSecurityReportFindingType (merge request) GitLab Enterprise Edition
• Show which group user approved for (merge request) GitLab Enterprise Edition
• Add new fields for orchestration helper (merge request) GitLab Enterprise Edition
• Document pitfalls with upgrading PostgreSQL across glibc versions (merge request)
• Improve backup logging by log levels by @imskr (merge request)
• Added create and delete api for instance level event filters (merge request) GitLab Enterprise Edition
• Sync create indexes and validate fks for ci_pipelines bigint id (merge request)
• Allow users to select which group to approve as (merge request) GitLab Enterprise Edition
• This MR adds new humanization rules (merge request) GitLab Enterprise Edition
• Add actions dropdown to work item links (merge request)
• Add functions to search for merge_user in merge request view by @schurzi (merge request)
• Saved MemberRoleId when passed (merge request) GitLab Enterprise Edition
• Track Secret Detection vulnerabilities as they move within the file (merge request) GitLab Enterprise Edition
• Add weight to iteration issue list (merge request) GitLab Enterprise Edition
• Use Progressive Web App (PWA) icon as apple-touch-icon if defined by @bufferoverflow (merge request)
• Expose trigger short token to CI by @kevin.gosa (merge request)
• Support GitLab flavored markdown in finding modal description (merge request) GitLab Enterprise Edition
• Add secure schemas version 15.1.0 (merge request)
• Extracted Billable code to a shared util file (merge request) GitLab Enterprise Edition
• GraphQL: Add upgradeStatus field to RunnerManagerType (merge request) GitLab Enterprise Edition
• Support epoch millis when ingesting alerts (merge request)
• Audit Event when merge request approval setting is updated (merge request) GitLab Enterprise Edition
• Add REST API to update pages settings by @jzeng88 (merge request) GitLab Enterprise Edition
• Obfuscate external participants emails in system notes (merge request)
• Protected packages: Delete protection rules in project settings ui by @gerardo-navarro (merge request)
• Jira issues - Display error message returned from jira response (merge request)
• Expose auto_stop_at in Environments api by @devDavidBox (merge request)
• Show admin mode within active sessions view (remove feature flag) by @bufferoverflow (merge request)
• Add new panel title interpolation options to analytics dashboards (merge request) GitLab Enterprise Edition
• Add imported column to resources (merge request)
• Add support for showing a popover for milestones in GFM (merge request)
• Exposed web_path on the MR GraphQL type by @zillemarco (merge request)
• Expose project/namespace IDs in internal/allowed response (merge request)
• Add edit button to policies list in edit screen (merge request) GitLab Enterprise Edition
• Added MemberApprovalFinder (merge request) GitLab Enterprise Edition
• Remove the tailwind_all_the_way feature flag (merge request)
• Added keyboard shortcut (merge request)
• Add a branch check for default security policy config (merge request) GitLab Enterprise Edition
• Prepare async index for p_ci_builds.project_id (merge request)
• Add confirmation when closing blocked work items (merge request)
• Add setting for enabling CS for Registry (merge request) GitLab Enterprise Edition
• Add feature flag for stopping CH data ingestion (merge request) GitLab Enterprise Edition
• Prepare async indexes and fks for ci_pipelines.id_convert_to_bigint (merge request)
• Sync create indexes p_ci_builds runner_id (merge request)
• Add median time to merge metric to VSD (merge request) GitLab Enterprise Edition
• Add milestone and iteration to board card (merge request)
• Added possibility to sort todos from GraphQL by @zillemarco (merge request)
• Always submit note via key shortcut with shift (merge request)
• Adds a new keep file to remove duplicated indexes (merge request)
• Add migration for semver_prefixed column (merge request)
• Use object exist check for codeowners file (merge request) GitLab Enterprise Edition
• Show warning when a group webhook is disabled (merge request)
• Add error to indicate email is linked to an account pending deletion (merge request)
• Remove exempt_paid_namespace_members_...from_identity_verification FF (merge request) GitLab Enterprise Edition
• Remove internal_events_for_product_analytics FF (merge request)
• GraphQL: Add queuedDuration field to CiJobsStatistics (merge request) GitLab Enterprise Edition

Fixed (161 changes)

• Trigger epic dates update when adding or removing a child epic (merge request) GitLab Enterprise Edition
• Fix default protected branch settings for user namespace (merge request)
• Fix a dependency proxy upload premature interruption in workhorse (merge request)
• Fixes requested access users when excluding guests (merge request) GitLab Enterprise Edition
• Add break-all class to stages dropdown (merge request)
• Normalize golang component name when looking up their license (merge request)
• Fix code suggestions and diagrams in rich text (merge request)
• Merge commit message: Use monospace font (merge request)
• Fix custom dashboards not saving on non-"main" branch (merge request) GitLab Enterprise Edition
• Exclude ci_secure_files from Workhorse-accelerated types (merge request)
• Fix license approval policy for pre-existing license_state (merge request) GitLab Enterprise Edition
• Rescue errors in ActionCable #connect (merge request)
• Hide download button on blob viewer (merge request)
• Fix text on vulnerability report alert (merge request) GitLab Enterprise Edition
• Fix NoMethodError for BranchesController (merge request)
• Prevent WebIDE from crashing on message (merge request)
• Add requested_path to readmeHtml field resolver (merge request)
• Handle dashboard pointer in sync funnels worker (merge request) GitLab Enterprise Edition
• Fix blob border radius (merge request)
• Add word break to the job log sidebar (merge request)
• Release calling after_script on cancel (merge request)
• Reject zero-length component names and versions (merge request) GitLab Enterprise Edition
• Correctly handle empty default branch protection defaults (merge request)
• Fix alignment in rolled up dates widget (merge request)
• Exclude YAML languages in the wiki search results (merge request) GitLab Enterprise Edition
• Fix escaping dismissal descriptions on MR widget (merge request) GitLab Enterprise Edition
• Update fetch path of raw logs (merge request)
• Handle an empty "subjectAltName" field for X.509 certificates (merge request)
• Calculate correct access level of members invited through group (merge request)
• High contrast mode fixes for topbar and sidebar navigation (merge request)
• Fix milestone dropdown on incident sidebar (merge request)
• Preserve approval rules when role changes (merge request)
• Allow auto merge on created and blocked pipelines (merge request)
• Fix 500 errors when viewing empty CI artifacts image (merge request)
• Fix notice for projects (merge request) GitLab Enterprise Edition
• Upgrade to semver_dialects 3.0.0 (merge request) GitLab Enterprise Edition
• SSO enforcement: Sessionless activity does not need to be allowed for Owner without session (merge request) GitLab Enterprise Edition
• Add apk to supported package managers (merge request) GitLab Enterprise Edition
• Handle window popstate events for registry search (merge request)
• Release raising permissions of group APIs to owner for package settings (merge request)
• Load the system cert pool when dialing websocket channels in workhorse by @jlsalmon (merge request)
• Fixed flaky billable member spec (merge request) GitLab Enterprise Edition
• Fix broken link to CI troubleshooting doc from merge requests (merge request)
• Cancel outdated deployments for jobs with resource groups (merge request)
• Fix race condition when changing dashboard filters quickly (merge request) GitLab Enterprise Edition
• gitlab-zip-metadata: Ensure 0-byte files have a size field (merge request)
• Disable sidekiq shard validation for /admin/sidekiq path (merge request)
• Show global search filter button when sidebar is auto collapsed (merge request)
• Update pipeline_triggers plan limits to 25k for Premium and Ultimate (merge request)
• Fix handling of analytics visualizations with hyphens (merge request) GitLab Enterprise Edition
• Prevent board epic lane header from moving before sticky (merge request) GitLab Enterprise Edition
• Adjust left and right margins of board top bar and content (merge request)
• Allow developers to create an issue for a vulnerability (merge request) GitLab Enterprise Edition
• Fix board epic swimlane header background in dark mode (merge request) GitLab Enterprise Edition
• Improve issue searches for URLs (merge request)
• Upgrade to grpc v1.63.0 (merge request)
• Ignore tag pipelines for MR approval policies (merge request) GitLab Enterprise Edition
• Rescue from validation errors when uploading terraform modules (merge request)
• Allow access to roles/permissions page via read_member_role permission (merge request) GitLab Enterprise Edition
• Ensure assignee array has values before passing argument to finder (merge request)
• Fix dark mode search token coloring and dropdown active/hover colors (merge request)
• Casts finalized_by migration version to an integer (merge request)
• Do not overwrite findings_by_commits hash (merge request)
• Allow admins to be able to link issues (merge request)
• Changed the email validation for only encoded chars (merge request)
• Fix resetting approvals when pipeline is manual (merge request) GitLab Enterprise Edition
• Use tmpdir for relation import extraction (merge request)
• Consume response stream to finish when calling UserMergeBranch (merge request)
• Fix style of search tokens in dark mode (merge request)
• Fix pattern matching for prevent_pushing_and_force_pushing (merge request) GitLab Enterprise Edition
• Align project avatar to the top by @grace-chung (merge request)
• Fix loading state for group invite modal (merge request) GitLab Enterprise Edition
• Schedule Dora updates after MR linking process (merge request) GitLab Enterprise Edition
• Sync approval rules even when security_scans are duplicated (merge request) GitLab Enterprise Edition
• Account for protected branches without backing git refs (merge request) GitLab Enterprise Edition
• Include template in deprecated flafinder-sast job (merge request)
• Add AzureRM support to orphan artifacts cleanup (merge request)
• Fix work item child status icon color (merge request)
• Use locale-specific formatting for numbers in the AI Impact Dashboard (merge request) GitLab Enterprise Edition
• Allows ml_model pending destruction (merge request)
• Fixes issue with registry search query params when removed (merge request)
• MR list: Fix overlapping search icon (merge request)
• Create refs/merge-requests/:iid/head refs for imported merge requests (merge request)
• Fixed MR list layout on mobile by @zillemarco (merge request)
• Apply truncation to other Pypi metadatum fields (merge request)
• Legacy HAML filtered search: Fix reset search (merge request)
• Zoekt search enable should respect expiriment setting (merge request) GitLab Enterprise Edition
• Replace markdown escpae filters (merge request)
• Allow Developers to create external issue links for vulnerabilities (merge request) GitLab Enterprise Edition
• Always return the direct member of an object that requests it (merge request)
• Fix blurry avatars in Members list (merge request)
• Branch target settings: Change spacing of table row (merge request) GitLab Enterprise Edition
• Avoid sub-group destruction in group link synchronization (merge request)
• Fix project_path sorting scopes in Packages::Package model (merge request)
• Fix flaky test in Epics > User uses quick actions (merge request) GitLab Enterprise Edition
• Fix bug of coverage check approval rules (merge request)
• Decouple read_vulnerability from read_dependency (merge request) GitLab Enterprise Edition
• Update XRay Add-On Access check (merge request) GitLab Enterprise Edition
• Show zero based coverage (merge request)
• Only allow documented token types for GraphQL authentication (merge request)
• Fix inherited member source not visible to subgroup members (merge request)
• Fix bug preventing instance settings being inherited by project (merge request) GitLab Enterprise Edition
• Fix empty CommitMessage error (merge request)
• Pass correct reference for modal work item (merge request)
• Fix trailing slash in Maven dependency proxy upstream URL (merge request)
• Reject git LFS push when the namespace is over the free tier user limit (merge request) GitLab Enterprise Edition
• Fix broadcast message text in darkmode (merge request)
• Do not move "You" to front of emoji award list (merge request)
• Zoekt: Fix exact search mode (merge request) GitLab Enterprise Edition
• fix: Avoids whitespace when displaying the version number by @gerardo-navarro (merge request)
• Fix type error when the file_name is not set (merge request)
• Resolve query performance regression on sbom reports (merge request) GitLab Enterprise Edition
• Add fullPath to CatalogResource graphl query (merge request)
• Fixes N+1 on ExperimentsController (merge request)
• Fixed drawer view with two column (merge request)
• Resolve homepage tooltip covering sidebar contents (merge request)
• Pipeline: Fix dropdown item focus in darkmode (merge request)
• Fix vulnerability list table head (merge request) GitLab Enterprise Edition
• Improve extra_slug_path_sanitization account creation (merge request)
• Truncate/Wrap around exit codes larger than 32767 (merge request)
• Render alert when raw text search attempted in Issue Analytics (merge request) GitLab Enterprise Edition
• Clear license caches before license reset in seat link sync (merge request) GitLab Enterprise Edition
• Let merge request sidebar scroll (merge request)
• Non-admins can change "Allow runner registration token" (merge request)
• Migrate deprecated dropdown in pipeline deployment widget (merge request)
• Package detail: Assets table adjustments (merge request)
• Fix N+1 queries with autocomplete recent items (merge request) GitLab Enterprise Edition
• Let sidekiq handle retries (merge request) GitLab Enterprise Edition
• Fix math block alert rendering (merge request)
• Add missing handler for protected branches Deploy key (merge request)
• Fix todo count going from 99+ down to 98 (merge request)
• Fixes deleting last page of package assets deleting entire package (merge request)
• Allow incomplete bucket for Secure Files in object storage config (merge request)
• Package registry detail page: Use secondary text for help text (merge request)
• Skip license capacity check for security policy bot user (merge request) GitLab Enterprise Edition
• Fix box-shadow colors in Tailwind (merge request)
• Fixes missing webUrl on associated projects (merge request) GitLab Enterprise Edition
• Add gl-text-left to stage name in job (merge request)
• Fix Usage Overview panel title's popover positioning (merge request) GitLab Enterprise Edition
• Only add to merge train if not already there (merge request) GitLab Enterprise Edition
• Fix bottom popover arrow color (merge request) GitLab Enterprise Edition
• Fix toggle behavior for board iteration and label edits (merge request) GitLab Enterprise Edition
• Work items widgets: Fix alignments of items (merge request)
• Add jitter to StoreSecurityReportsWorker lock retries (merge request) GitLab Enterprise Edition
• Fix link to self-hosted docs in sidebar help menu (merge request)
• Fix prominent create board button alignment (merge request)
• Fix error for truncated height (merge request)
• Fix incorrect locked state for missing group settings (merge request) GitLab Enterprise Edition
• Fix FetchPolicyApproversService for ComplianceFramework (merge request) GitLab Enterprise Edition
• Use new math ability of markdown parser (merge request)
• Update split i18n strings to be more translatable (merge request)
• Fix built-in shadows in empty state dashboard SVGs (merge request)
• Fixing Flaky Test in ConsistencyCheckService (merge request)
• Fix LFS token check & add test for specific case by @kevin.gosa (merge request)
• When localStorage draft exists for comment reply, show it on load (merge request)
• Fix missing webUrl for associated framework projects (merge request) GitLab Enterprise Edition
• Update fog-google to v1.24.1 (merge request)
• Return Snippet.none when not referencing a project (merge request)
• Remove "fork_targets_finder_with_parents" feature flag (merge request)
• Fix downstream pipeline background color in dark mode (merge request)
• Remove lazy_merge_request_committers feature flag (merge request)

Changed (228 changes)

• Show project that invited group users on usage quota > seats page (merge request)
• Make default admin email not a known value (merge request)
• Fix(Confirm Order): handle 3DS failure (merge request) GitLab Enterprise Edition
• Add a generic error message when the error response is not of JSON type by @antonkalmykov (merge request)
• Use Claude 3 for some parts of Duo Chat (merge request) GitLab Enterprise Edition
• Add visual indicators for some items (merge request)
• Remove 'Get Started' page during registration (merge request) GitLab Enterprise Edition
• Use full-width for both inline and side-by-side diffs in compare (merge request)
• Update empty settings search result page (merge request)
• Remove :jira_multiple_project_keys feature flag (merge request)
• Remove role=button from related issues input (merge request)
• Add logging for keep-around references (merge request)
• Update how header anchors ids are generated (merge request)
• Remove use_database_for_dependencies_api feature flag (merge request) GitLab Enterprise Edition
• Update global search comments results UI (merge request)
• Update "removal" language to "deletion" for groups by @antonkalmykov (merge request) GitLab Enterprise Edition
• Allow overriding restricted variables from Scan Execution Policy (merge request) GitLab Enterprise Edition
• Improves alert message when multiple error packages exist (merge request)
• Adds logo for Pumble integration (merge request)
• Disable runner registration tokens on self-managed instances (merge request)
• Swap primary key with bigint column for ci_pipelines (merge request)
• Remove feature flag from downstream pipeline (merge request)
• Clean up cs_connect_with_sales feature and productize feature (merge request) GitLab Enterprise Edition
• Remove FF "allow_nokogiri_parse_huge_xml" (merge request)
• Changed timelogCreate mutation to not require the spentAt field by @zillemarco (merge request)
• Release changing npm package upload from sync to async (merge request)
• Updating ci_build and pipeline tracking data_category (merge request)
• Makes issue list title inline (merge request)
• Updating help text for Ci/Cd (merge request)
• Use database for dependency exports (merge request) GitLab Enterprise Edition
• Remove double border on todo row hover (merge request)
• Skip committer email checks for commits signed by GitLab (merge request)
• Replace gl-word-break-all to gl-break-all (merge request)
• Upgrade to semgrep v5 (merge request) GitLab Enterprise Edition
• Edit scheduled policy to inform that scan executes around provided time (merge request) GitLab Enterprise Edition
• Auto expand merge commit message field (merge request)
• Refactor text-gl-muted and use gl-text-secondary instead (merge request)
• Disable deprecated SAST analyzers for 17.0 release (merge request) GitLab Enterprise Edition
• MR commit message: Add AI icon to generate commit message feature (merge request)
• Add link to log viewer for long logs (merge request)
• Remove remove_jwks_endpoint FF (merge request)
• Remove Feature Flag remove_shared_jwts (merge request)
• Merge request widget: Fix action button height (merge request)
• Releases: Migrate item to use GlCard (merge request)
• Set Claude 3 sonnet as code generation default (merge request) GitLab Enterprise Edition
• Merge request list: Add new MR and more actions to Vue FF (merge request)
• Simplify UI text of Google Artifact Management (merge request) GitLab Enterprise Edition
• Upgrade DAST to use version 5 (merge request)
• Don't upsert work item types if not found in the DB (merge request)
• Sync indexes and swap columns user_id for p_ci_builds (merge request)
• Breadcrumbs text made more intuitive on new entities pages in Groups by @catinbag (merge request)
• Fix alignment for global search filter row (merge request)
• Added Branches page link to New Branch page breadcrumbs by @catinbag (merge request)
• Override bootstrap margin (merge request)
• Remove FF activity_filter_has_mr (merge request) GitLab Enterprise Edition
• Renames invite_email quickaction to add_email (merge request)
• Ignore migration-related fields in app settings (merge request)
• Update parent link validate_max_children validation (merge request)
• Remove link icons from search code results (merge request)
• Disable runner registration tokens for all groups on .com (merge request)
• Default-enable fallback_behavior flags (merge request) GitLab Enterprise Edition
• Adds WAL receiver saturation indicator (merge request)
• Update global search milestone results page (merge request)
• Groups and Projects - Update invite tab name (merge request)
• Add batched migration to remove namespace from OS components (merge request)
• Remove overflow:hidden from gl-card (merge request)
• Rename report abuse to administrator to report abuse in dropdowns (merge request) GitLab Enterprise Edition
• Ignore migration columns in container repository (merge request)
• Update empty search result (merge request)
• This MR updates text rendering (merge request) GitLab Enterprise Edition
• Update license_finder to v7.1.0 (merge request)
• Create new group settings page for analytics (merge request) GitLab Enterprise Edition
• Remove overflow shadow in favor of border on readme (merge request)
• Show most recent contact in runner details (merge request)
• Modify breadcrumbs text by @jzeng88 (merge request)
• Move repository cleanup under maintenance section (merge request)
• Update time tracking report (merge request)
• Update illustrations for a chart with no jobs (merge request)
• Update quick action language (merge request)
• Protected containers: Use icon only for delete rule button by @gerardo-navarro (merge request)
• Add "Imported" badge to Notes (merge request)
• Prevented jobs allowed to fail from cancelling the pipeline by @zillemarco (merge request)
• Added highlighting of incorrect branch name on new branch page by @catinbag (merge request)
• Update terraform states UI (merge request)
• Removed published data for error packages by @jzeng88 (merge request)
• Remove experiment flag from Analytics GraphQL (merge request) GitLab Enterprise Edition
• Update Usage Overview panel to support subgroups (merge request) GitLab Enterprise Edition
• Move Zoekt to Search::Zoekt namespace by @jzeng88 (merge request) GitLab Enterprise Edition
• Remove overflow:hidden from gl-card (merge request)
• Enable /confidential quickaction for tasks (merge request)
• Remove extra borders around filter (merge request)
• Secret detection CLI message update (merge request)
• Add modal for epic work item creation (merge request) GitLab Enterprise Edition
• Update component include to use $CI_SERVER_FQDN (merge request)
• Apply rate limit to project hook test API endpoint (merge request)
• Removes "new" badge next to fleet dashboard link (merge request)
• Remove the left and right borders from the registry search block by @antonkalmykov (merge request)
• Update schema for clusterwide tables in threat insights (merge request)
• Update constants in catalog (merge request)
• Update major version to 5 for DAST API/API Fuzzing (merge request)
• Reset pagination on grouping change (merge request) GitLab Enterprise Edition
• Use "Previous" instead of "Prev" in pagination (merge request)
• Make metadata processing optional for Secure Files (merge request)
• Remove admin_user_filtered_nav feature flag (merge request)
• Log zoekt node name in scheduling service (merge request) GitLab Enterprise Edition
• Merge request list: Migrate actions to Vue (merge request)
• Sync indexes and swap columns project_id for p_ci_builds (merge request)
• Sync indexes and swap columns project_id for p_ci_builds
• Update dependency auto-build-image to v4 (merge request)
• Move new list button out of board header into board content (merge request)
• Used constant for CSS classes in pipeline_failed_jobs_widget test by @catinbag (merge request)
• Restrict member roles REST API (merge request) GitLab Enterprise Edition
• Used gitlab-ui classes for time_ago in pipelines_page by @catinbag (merge request)
• Update the global search users results page (merge request)
• Add support for DAST 5 to DAST templates (merge request)
• Use database for dependencies API (merge request) GitLab Enterprise Edition
• Clean up epics/issues/MR search results (merge request)
• Refactor argument splat for edit framework handler (merge request) GitLab Enterprise Edition
• Pipeline Graph page: Improve repsonsive behavior of dropdown (merge request)
• Update milestone labels tab (merge request)
• Pipeline MiniGraph: Update tooltip content and direction (merge request)
• Add new illustrations to product analytics onboarding flow (merge request) GitLab Enterprise Edition
• Add "Imported" badge to Snippet header (merge request)
• Update flux_resource_path (merge request)
• Update ProjectPipelinesResolver preloads (merge request) GitLab Enterprise Edition
• Added margin top to pipeline tabs (merge request)
• Always allow reading external pipeline builds (merge request)
• Update permissions to relate issues (merge request) GitLab Enterprise Edition
• Check membership with all_group_members (merge request) GitLab Enterprise Edition
• Add "Imported" badge to designs (merge request)
• User profile readme: Add ability to use hash scrollTo event (merge request)
• Move platform selection to runners "register" step (merge request)
• Remove FF activity_filter_has_remediations (merge request) GitLab Enterprise Edition
• Change project_level_sbom_occurrences default (merge request) GitLab Enterprise Edition
• Removes link to log viewer (merge request)
• Improve registry search query params generation (merge request)
• Update syntax options drawer title (merge request)
• Align presentation of pending deletion tab by @r2abreu (merge request) GitLab Enterprise Edition
• Add frontend validation for framework names (merge request) GitLab Enterprise Edition
• Only show project limits alert on affected project (merge request) GitLab Enterprise Edition
• Remove purchase_code_suggestions feature flag (merge request) GitLab Enterprise Edition
• Highlight search text on the global search result page (merge request)
• Remove start_pre_import method (merge request) GitLab Enterprise Edition
• Fix(Purchase addon): handle errors in the frontend (merge request) GitLab Enterprise Edition
• Fix(Purchase): handle 3DS error in the frontend (merge request) GitLab Enterprise Edition
• Swap columns runner_id for p_ci_builds (merge request)
• Issue list: Update search bar (merge request)
• Return or display Gitlab version if GITLAB_KAS_VERSION is a SHA (merge request)
• Render Storage Usage Quotas for Profile in CE (merge request)
• Fix bottom border for the last commit block (merge request)
• Update grpc to v1.62.0 and gitlab-labkit to v0.32.0 by @gitlab-dependency-update-bot (merge request)
• Update multiple entries in a single input guidance text (merge request)
• Replace "Play" with "Run" in pipeline action button titles (merge request)
• Add "Imported" text to User profile activity (merge request)
• Branch Rules: Allow to merge section with edit (merge request)
• Replace references to deprecated runner fields (merge request)
• Update badges on project security configuration page (merge request)
• Milestone header: Migrate kebab menu to GlDisclosureDropdown (merge request)
• Merge request: Show code dropdown on small screens (merge request)
• Remove usage of latest for non catalog resource projects (merge request)
• Remove lock icon from admin mode setting (merge request)
• GraphQL: Rename RunnerMembershipFilter to CiRunnerMembershipFilter (merge request)
• GraphQL: Change CiRunnerType.projects default sort order (merge request)
• Upgrade Secret Detection Analyzer to v6 in CI templates (merge request)
• Allow migrations to be skipped on condition (merge request) GitLab Enterprise Edition
• Update dependency auto-build-image to v3 (merge request)
• Add new stream only audit event for repo download of public projects (merge request) GitLab Enterprise Edition
• Migrate explore search and sort to filtered search bar (merge request)
• Update time tracking UI (merge request)
• Change to work item namespace query (merge request)
• Add "Imported" badge to epic header (merge request) GitLab Enterprise Edition
• Change Duo Chat default final error message to be more friendly (merge request) GitLab Enterprise Edition
• Remove connecting lines in group list (merge request)
• Remove 'and' from component list (merge request)
• Capture running builds on non-shared runners (merge request)
• Update Usage Overview panel to support subgroups (merge request) GitLab Enterprise Edition
• Add "Imported" badge to MR header (merge request)
• Update analytics docs links for some metrics (merge request)
• Support JOB-TOKEN authentication header for generic packages (merge request)
• Format dates on analytics dashboards (merge request) GitLab Enterprise Edition
• Add imported badge on issue page (merge request)
• Fix display Mermaid plots in project CI/CD setting pages by @dannyelcf (merge request)
• Fix hover underline in comments icon in list view (merge request)
• Hide archived filter toggle with selected project (merge request)
• Display commit title instead of message (merge request)
• Update dependency auto-build-image to v2.1.0 (merge request)
• Upgrade Container Scanning to v7 (merge request)
• Upgrade to Gemnasium v5 (merge request) GitLab Enterprise Edition
• Package registry list: Change metadata appearance (merge request)
• Use GITLAB_LOG_LEVEL for Geo logs (merge request) GitLab Enterprise Edition
• Unblock fail-open license_scanning rules without target pipeline (merge request) GitLab Enterprise Edition
• Update description field component (merge request)
• Update URLs for Terraform module registry pages by @jzeng88 (merge request)
• Change unneeded js test attribute to data attribute by @bahek2462774 (merge request)
• Remove restrict_member_roles feature-flag (merge request) GitLab Enterprise Edition
• Redesign create custom role permissions list (merge request) GitLab Enterprise Edition
• Add Duo Chat GA alert (merge request) GitLab Enterprise Edition
• Turn off the Trial Abandonment Survey sent from the GitLab application (merge request) GitLab Enterprise Edition
• Cleanup Feature Flag: usage_quotas_for_all_editions (merge request)
• Add fallback_behavior property to MR approval policies (merge request) GitLab Enterprise Edition
• Move close action first (merge request)
• Use GITLAB_LOG_LEVEL for Sidekiq server logs (merge request)
• Protected packages: Use icon only for remove action (merge request)
• Remove :new_pipeline_graph FF (merge request)
• Update dependency auto-deploy-image to v2.90.0 (merge request)
• Remove duo_chat_current_resource_by_default feature flag (merge request)
• Pipeline graph items: Change tooltip orientation, content (merge request)
• Save resource verification level on publish (merge request)
• Add limitation for semi-linear/ff merge trains (merge request) GitLab Enterprise Edition
• Make basic information section expanded by default (merge request) GitLab Enterprise Edition
• Update "View raw" link (merge request)
• Move harbor integration sidemenu entry from operate to deploy (merge request)
• Show alert when project transfer is still running (merge request)
• Adjust the update password page (merge request)
• Register Sidekiq queues only from routing rules (merge request)
• Update compliance framework badge (merge request) GitLab Enterprise Edition
• MR sidebar: Put loading icon after participants title (merge request)
• Fix flaky test by sorting dependencies (merge request) GitLab Enterprise Edition
• Allow migrations to be skipped on condition (merge request) GitLab Enterprise Edition
• Cleanup gitlab_duo_chat_requests_to_ai_gateway feature flag (merge request)
• Bringing back ability to use iterations in incidents by @SlickDomique (merge request) GitLab Enterprise Edition
• Remove unnecessary div for vulnerability modal footer (merge request) GitLab Enterprise Edition
• Relax constraints when consolidated object storage settings is enabled (merge request)
• Pipeline Graph Drodpown: Use fluidWidth (merge request)
• Adjust border radius of collapsed conflicted file (merge request)
• Remove usages of sub-header-block by @espadav8 (merge request)
• GraphQL: Rename CiRunnerUpgradeStatusType to CiRunnerUpgradeStatus (merge request)
• Update advice for QA selectors in rubocop output (merge request)

Deprecated (5 changes)

• Return an empty pipelines in the package REST API payload (merge request)
• Disable the migration MigrateZoektSettingsInApplicationSettings (merge request)
• Sunset deprecated args for UpdateRepositoryStorageWorker#perform (merge request)
• REST: Deprecate runner details API fields (merge request)
• Remove CreateEmptyEmbeddingsRecordsWorker class by @jzeng88 (merge request) GitLab Enterprise Edition

Removed (59 changes)

• Remove license compliance app (merge request) GitLab Enterprise Edition
• Remove unused code_suggesitons project setting (merge request)
• Remove security_policies_breaking_changes feature flag (merge request) GitLab Enterprise Edition
• Remove confidential attribute from Note (merge request)
• Drop table geo_hashed_storage_migrated_events (merge request)
• Remove usages of deprecated runner fields (merge request)
• Remove compliance framework from settings (merge request) GitLab Enterprise Edition
• Remove Facebook OmniAuth integration (merge request)
• Delete temporary_storage_increase feature flag (merge request) GitLab Enterprise Edition
• Remove Twitter OmniAuth integration (merge request)
• Remove deprecated canDestroy and canDelete GraphQL fields (merge request)
• Remove loading status spinner for hand raise lead button (merge request) GitLab Enterprise Edition
• Remove min and max_concurrency option in Sidekiq cluster (merge request)
• Remove deprecate_unified_approval_rules feature flag (merge request)
• Remove beta badge (merge request)
• Remove unused FK(s) on geo_event_log table (merge request)
• Remove calls to the import API endpoints (merge request)
• Remove dead code from details page (merge request)
• Remove unused Dependency Scanning jobs (merge request)
• Remove ScanResultPolicy.groupApprovers graphql field (merge request) GitLab Enterprise Edition
• Remove deprecated Geo prometheus metrics (merge request) GitLab Enterprise Edition
• Drop path column (merge request)
• Remove Dependency Scanning artifact from CS template (merge request)
• Remove deprecated GitLab Agent GitOps docs (merge request)
• Remove migration worker files and update queues yml (merge request)
• Replace flawfinder analyzer with semgrep (merge request)
• Remove list_repos Rake task (merge request)
• Remove total_weight from BoardList type (merge request) GitLab Enterprise Edition
• Goodbye sentry-raven (merge request)
• Removes old funnels endpoint (merge request) GitLab Enterprise Edition
• Remove visual review tools (merge request)
• Remove required pipeline configuration feature (merge request) GitLab Enterprise Edition
• Remove vendored omniauth-azure-oauth2 by @bufferoverflow (merge request)
• Remove support for match_on_inclusion (merge request) GitLab Enterprise Edition
• GraphQL: Remove deprecated CiRunnerType fields (merge request)
• Remove License Scanning CI templates (merge request) GitLab Enterprise Edition
• Remove onboarding_step_url column from user_details (merge request) GitLab Enterprise Edition
• GraphQL: Remove deprecated DISABLED_WITH_OVERRIDE value (merge request)
• Remove support for newly_detected vulnerability status (merge request) GitLab Enterprise Edition
• Remove VSA cumulative duration FF (merge request) GitLab Enterprise Edition
• Replace NodeJS and PHPCS analyzer with semgrep (merge request)
• Remove cadence_validation feature flag (merge request) GitLab Enterprise Edition
• Remove :simplified_labels FF (merge request)
• Remove networkpolicies field from ProjectType (merge request) GitLab Enterprise Edition
• Remove message field from Vulnerability GraphQL type (merge request) GitLab Enterprise Edition
• Remove deprecated DORA API fields (merge request) GitLab Enterprise Edition
• Drop diff summaries table (merge request)
• Remove min and max_concurrency option in Sidekiq cluster (merge request)
• Clean up duo_pro_trials_for_free_plans feature flag (merge request) GitLab Enterprise Edition
• Dropping unsused table external_approval_rules_protected_branches (merge request)
• Remove queue selector and negate options from Sidekiq cluster CLI (merge request)
• Remove shared avatar for security policy bots (merge request) GitLab Enterprise Edition
• Remove legacy replication details routes redirection (merge request) GitLab Enterprise Edition
• Remove current_stage argument from EntityWorker (merge request)
• Remove deprecated confidence field from GraphQL (merge request) GitLab Enterprise Edition
• Remove GraphQL field hasSolutions from VulnerabilityType (merge request) GitLab Enterprise Edition
• Remove ci_catalog_create_metadata feature flag (merge request)
• Remove the feature flag filter_saml_response (merge request)
• Remove auto_fix for security settings (merge request)

Security (18 changes)

• Prevent deploy token bypass for external authentication (Part 2) (merge request)
• Fix confidentiality check optimization
• Enforce per_page validation for Branches/TagsFinders
• Prevent namespace banned users from reading project todos
• Validate request origin before MR approval
• ReDoS in GitRefsFinder when using wildcards in branch search
• Update GITHUB_MEDIA_CDN to avoid SSRF when importing from Github
• Require confirmation before linking JWT identity
• ReDos in escape and commit reference filters
• Check request size before updating user pins
• Update BaseMessage::RELATIVE_LINK_REGEX regex
• Update Integrations::Discord::ATTACHMENT_REGEX regex
• Fix guest access for setting time estimate on issues (merge request)
• Forbid untrusted sign-ins to GitLab with Bitbucket and fix related uid
• fix: Validate security report version against schema during parsing
• Validation for encoded formatting characters
• Protect against ReDoS in FileFinder with wildcard filters
• Ensure PAT scope is validated everywhere for GraphQL/ActionCable

Performance (9 changes)

• Improve ServiceHook and SystemHook specs (merge request)
• Remove pipelines schedules delay feature flag (merge request)
• Remove ExclusiveLease on setting last_activity_on (merge request)
• Release avoiding copy operation in terraform modules upload (merge request)
• Remove index index_vulnerabilities_on_detected_at_and_id by @jzeng88 (merge request)
• Use backend filtering for @ autocomplete (merge request)
• Don't update vulnerability_reads records unnecessarily (merge request) GitLab Enterprise Edition
• Direct answering instead of using IssueReader (merge request) GitLab Enterprise Edition
• Add limit to RelatedPipelinesFinder (merge request) GitLab Enterprise Edition

Other (191 changes)

• Fix Layout/LineContinuationLeadingSpace 1 by @archish27 (merge request) GitLab Enterprise Edition
• Document bounded_contexts.yml in Software Design Guides (merge request)
• Protected packages: Shorten GraphQL field for by @gerardo-navarro (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Fix Layout/ArgumentAlignment offenses 25 by @gauravmarwal (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Fix Lint/AmbiguousOperatorPrecedence 17 offenses by @archish27 (merge request)
• Removes database migrations up to 16-2-stable-ee (merge request)
• Refactor "(s)" in quick actions (merge request)
• Protected packages: Scope feature flag check to project by @gerardo-navarro (merge request)
• Drop duplicate index on p_ci_runner_machine_builds (merge request)
• Fix Layout/MultilineOperationIndentation 2 offenses by @archish27 (merge request)
• Remove resolve_all_organization_groups feature flag (merge request)
• Quarantine a flaky test (merge request)
• Drop unused index on ci_pipelines_config (merge request)
• Fix Layout/SpaceInLambdaLiteral 3 offenses by @archish27 (merge request)
• Enable webui_members_inherited_users feature flag by default (merge request)
• Fix Layout/ArgumentAlignment offenses 30 by @gauravmarwal (merge request)
• Docs: Update default auth_redirect_uri (merge request)
• Remove ci_create_partitions_102 feature flag (merge request)
• Remove duplicated index from abuse_reports (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Remove useless method from Issuable::DestroyService by @zzaakiirr (merge request)
• Fix workhorse linter warnings (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Add new invite_email column index on members for new query (merge request)
• Remove duplicated index from board_group_recent_visits (merge request)
• Allow CORS for /oauth/token/info (merge request)
• Fix Layout/ArgumentAlignment offenses 23 by @gauravmarwal (merge request)
• Fix Layout/SpaceInsideParens offenses 5 by @archish27 (merge request) GitLab Enterprise Edition
• Track redirection counts within a Redis pipeline (merge request)
• Fix Layout/SpaceInsideParens offenses 2 by @archish27 (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Fix Layout/ArgumentAlignment offenses 31 by @gauravmarwal (merge request)
• Use Gitlab::Redis::ClusterUtil in redis cache store patch (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Add icon to issues on child epics when filtering epics (merge request) GitLab Enterprise Edition
• Remove cron job details for CreateEmptyEmbeddingsRecordsWorker (merge request)
• Fix Layout/ArgumentAlignment offenses 2 by @gauravmarwal (merge request)
• Fix Layout/ArgumentAlignment offenses 21 by @gauravmarwal (merge request)
• Mark 20230415500000 MigrateWikisToSeparateIndex migration as obsolete (merge request) GitLab Enterprise Edition
• Mark AddHashedRootNamespaceIdToIssues as obsolete (merge request) GitLab Enterprise Edition
• Fix Layout/ArgumentAlignment offenses 14 by @gauravmarwal (merge request)
• Fix Layout/ArgumentAlignment offenses 19 by @gauravmarwal (merge request)
• Fix Layout/ArgumentAlignment offenses 29 by @gauravmarwal (merge request)
• Fix Layout/ArgumentAlignment offenses 8 by @gauravmarwal (merge request)
• Add specs for Gitlab::VulnerabilityScanning::SecurityScanner by @jzeng88 (merge request) GitLab Enterprise Edition
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Remove FF check when creating synced work items (merge request) GitLab Enterprise Edition
• Fix Layout/ArgumentAlignment offenses 13 by @gauravmarwal (merge request)
• Fix Layout/ArgumentAlignment offenses 6 by @gauravmarwal (merge request)
• Fix Layout/ArgumentAlignment offenses 18 by @gauravmarwal (merge request)
• Fix Layout/ArgumentAlignment offenses 27 by @gauravmarwal (merge request)
• Fix Layout/LineContinuationLeadingSpace 4 offenses by @archish27 (merge request)
• Schedule async indexes (merge request)
• Release FF environment_stop_actions_include_all_finished_deployments (merge request)
• Remove obsolete Advanced search migrations (merge request) GitLab Enterprise Edition
• Fix Layout/SpaceBeforeBlockBraces Layout/TrailingWhitespace offenses by @archish27 (merge request)
• Fix Layout/SpaceInsideParens offenses 1 by @archish27 (merge request)
• Add and backfill project_id for approval_merge_request_rule_sources (merge request)
• Move emails_disabled inversion to REST API (merge request)
• Mark 20230320011400 AddHashedRootNamespaceIdToCommits as obsolete (merge request) GitLab Enterprise Edition
• Quarantine a flaky test (merge request)
• Remove duplicated code from MirrorsController#update (merge request) GitLab Enterprise Edition
• Remove unused code from MergeRequest model (merge request)
• Rubocop: Fixes warning for GraphQL/resolver_method_length by @nwittstruck (merge request)
• Add trigger function reset (merge request)
• Finalize migration BackfillHasRemediationsOfVulnerabilityReads (merge request)
• Add sharding key tracking issues for Threat Insights (merge request)
• Update trigger function for merge_request_metrics (merge request)
• Populate Ci::Partition first record (merge request)
• Remove MR locked state index synchronously (merge request)
• Fix Layout/MultilineOperationIndentation 5 offenses by @archish27 (merge request)
• Fix Lint/AmbiguousRegexpLiteral 6 offenses by @archish27 (merge request)
• Fix Lint/AmbiguousRegexpLiteral 5 offenses by @archish27 (merge request)
• Fix Lint/AmbiguousRegexpLiteral 3 offenses by @archish27 (merge request)
• Fix Lint/AmbiguousRegexpLiteral 1 offenses by @archish27 (merge request) GitLab Enterprise Edition
• Fix Layout/SpaceInLambdaLiteral 18 offenses by @archish27 (merge request)
• Fix Layout/SpaceInLambdaLiteral 15 offenses by @archish27 (merge request) GitLab Enterprise Edition
• Fix Layout/SpaceInLambdaLiteral 13 offenses by @archish27 (merge request) GitLab Enterprise Edition
• Fix Layout/SpaceInLambdaLiteral 10 offenses by @archish27 (merge request)
• Fix Layout/SpaceInLambdaLiteral 1 offenses by @archish27 (merge request)
• Fix Lint/SymbolConversion 9 offenses by @archish27 (merge request)
• Fix Lint/SymbolConversion 7 offenses by @archish27 (merge request)
• Fix Lint/SymbolConversion 2 offenses by @archish27 (merge request) GitLab Enterprise Edition
• docs: Add missing access levels for minimum_access_level_for_x fields by @gerardo-navarro (merge request)
• Fix Layout/ArgumentAlignment offenses 28 by @gauravmarwal (merge request)
• Use Pajamas input for approval count (merge request) GitLab Enterprise Edition
• Fix Layout/ArgumentAlignment offenses 26 by @gauravmarwal (merge request)
• Initial commit of bounded_contexts.yml file (merge request)
• Fix Lint/AmbiguousOperatorPrecedence 7 offenses by @archish27 (merge request)
• Fix Layout/ArgumentAlignment offenses 22 by @gauravmarwal (merge request)
• Mark BackfillWikiPermissionsInMainIndex search migration as obsolete (merge request) GitLab Enterprise Edition
• Fix Rails/NegateInclude 1 by @archish27 (merge request) GitLab Enterprise Edition
• Switch merge_request_metrics pipeline_id to bigint (merge request)
• Fix Layout/ArgumentAlignment offenses 20 by @gauravmarwal (merge request)
• Switch merge_trains pipeline_id to bigint (merge request)
• Lint fixes OrAssignmentToConstant RedundantStringCoercion EnvMocking by @archish27 (merge request) GitLab Enterprise Edition
• Fix Layout/ArgumentAlignment offenses 17 by @gauravmarwal (merge request)
• Update epic deletion confirmation (merge request)
• Fix Layout/ArgumentAlignment offenses 15 by @gauravmarwal (merge request)
• Fix Layout/ArgumentAlignment offenses 12 by @gauravmarwal (merge request)
• Mark 20230325200700 search migration as obsolete (merge request) GitLab Enterprise Edition
• Mark 20230321202400 search migration as obsolete (merge request) GitLab Enterprise Edition
• Mark 20230321091100 search migration as obsolete (merge request) GitLab Enterprise Edition
• Fix Layout/ArgumentAlignment offenses 10 by @gauravmarwal (merge request)
• Mark 20230316150000 search migration as obsolete (merge request) GitLab Enterprise Edition
• Fix Layout/ArgumentAlignment offenses 7 by @gauravmarwal (merge request)
• Fix Layout/ArgumentAlignment offenses 5 by @gauravmarwal (merge request)
• Fix Layout/ArgumentAlignment offenses 3 by @gauravmarwal (merge request)
• Fix Layout/ArgumentAlignment offenses by @gauravmarwal (merge request)
• Fix Style/RedundantInterpolation offenses by @archish27 (merge request)
• Fix Layout/SpaceInsideBlockBraces offenses by @gauravmarwal (merge request)
• Add Sidekiq shard-awareness validator (merge request) GitLab Enterprise Edition
• Quarantine a flaky test (merge request)
• Allow MultiStore to be initialised with Redis clients (merge request)
• Add and backfill project_id for wiki_repository_states (merge request)
• Fix Layout/HashAlignment Layout/LeadingCommentSpace offenses by @archish27 (merge request) GitLab Enterprise Edition
• Fix Layout/LineContinuationLeadingSpace 2 by @archish27 (merge request) GitLab Enterprise Edition
• Fix Layout/SpaceInsideParens offenses 7 by @archish27 (merge request) GitLab Enterprise Edition
• Delete FF (merge request)
• Use Pajamas components for approval password form (merge request) GitLab Enterprise Edition
• Fix Layout/SpaceInsideParens offenses 3 by @archish27 (merge request)
• Remove container_scanning_continuous_vulnerability_scans flag (merge request)
• Remove ExtractsPath module from ProjectsController (merge request)
• Fix Layout/LeadingCommentSpace offenses by @archish27 (merge request)
• Clean up linked_work_items feature flag (merge request)
• Mark 20230307102400 advanced search migration as obsolete (merge request) GitLab Enterprise Edition
• Update Pages without wildcard DNS docs (merge request)
• Fix Style/HashAsLastArrayItem Offenses (merge request)
• Remove a MR index with state_id, iid synchronously (merge request)
• Include itemprop attribute in project avatar component by @espadav8 (merge request)
• Draft: Add sharding key tracking issues for design_management (merge request)
• Fix Lin/AmbiguousRange Offenses (merge request)
• Fix RSpec/HooksBeforeExamples Offenses (merge request)
• Change maxWorkers configuration (merge request)
• Add DEV flag for jest (merge request)
• Protected containers: Use service response shared examples in tests by @gerardo-navarro (merge request)
• Swap packages_build_infos pipeline_id to bigint (merge request)
• Swap vulnerability_feedback pipeline_id to bigint (merge request)
• Add JSON validation spec for zoekt/node.rb by @jzeng88 (merge request) GitLab Enterprise Edition
• Finalize migration BackfillHasMergeRequestOfVulnerabilityReads (merge request)
• Apply Sidekiq sharding router to Sidekiq::Job::Setter (merge request)
• Remove the temporary patch for "listing commits failed" error (merge request)
• Fix warning by adding feature category to pipeline specs by @b310-jannik (merge request)
• refactor: Rename names of attributes related to access levels by @gerardo-navarro (merge request)
• Add desired sharding keys for metrics (merge request)
• Update MAX_RUN_TIME to match max HTTP request time (merge request) GitLab Enterprise Edition
• Add and backfill namespace_id for work_item_parent_links (merge request)
• Add and backfill project_id for workspace_variables (merge request)
• Remove create_vulnerability_jira_issue_via_graphql feature flag (merge request) GitLab Enterprise Edition
• Remove feature flag for custom webhook templates by @kevin.gosa (merge request)
• Revert "Merge branch '434291-refactor-pat-policy' into 'master'" (merge request)
• Remove custom_webhook_headers feature flag by @Taucher2003 (merge request)
• Quarantine a flaky test (merge request)
• Remove group_user_saml feature flag (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Introduce service "RemoteMirrors::CreateService" (merge request) GitLab Enterprise Edition
• Release FF link_fast_forward_merge_requests_to_deployment (merge request)
• Cleanup add_policy_approvers_to_rules feature flag (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Quarantine a flaky test (merge request)
• Remove inputs from catalog_resource_components (merge request)
• Add relaxed sharding keys for runner (merge request)
• Quarantine a flaky test (merge request)
• Include psudonymised user id into X Ray scan req (merge request) GitLab Enterprise Edition
• Migrate self-managed custom roles to the instance-level roles (merge request)
• Feature cleanup flag wiki_content_background_job by @ivantedja (merge request)

16.11.10 through 16.0.0

• See changelogs/archive-16.md

15.11.13 through 15.0.0

• See changelogs/archive-15.md

14.10.5 through 14.0.0

• See changelogs/archive-14.md

13.12.15 through 13.0.0

• See changelogs/archive-13.md

12.10.14 through 12.0.0

• See changelogs/archive-12.md

11.11.8 through 11.0.0

• See changelogs/archive-11.md

10.8.6 through 10.0.0

• See changelogs/archive-10.md

9.5.10 through 0.8.0

• See changelogs/archive.md