Update gitlab/gitlab-ce Docker tag to v19

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Update	Change
gitlab/gitlab-ce (changelog)	major	18.9.2-ce.0 → 19.3.2-ce.0

---

Release Notes

gitlab-org/gitlab-foss (gitlab/gitlab-ce)

v19.3.2

Compare Source

Fixed (4 changes)

• Stop resetting mcp_server_enabled when Duo settings change GitLab Enterprise Edition
• Fix partition cache crash on single-pipeline ranges
• Geo: Support SSH cert gl_id formats in proxied Git requests GitLab Enterprise Edition
• Default SHA on merge requirement for new groups to false

Changed (1 change)

• Show "No available solution" message for CS when solution is empty GitLab Enterprise Edition

Security (17 changes)

• Prevent scheduled PEP test runs from bypassing policy scope (merge request)
• Reassign sole approver rules on permanent deletion (19.3) (merge request)
• Preserve protected environment approval rule on approver revoke (19.3) (merge request)
• Sanitise items in JSONTable before passing to BTable (merge request)
• Fix complexity multiplier logic enables Unauthenticated DoS (merge request)
• Require update_package to change generic package status (merge request)
• Fix routing manipulation with group wiki [Backport 19.3] (merge request)
• Content editor vets iframe sources before rendering (merge request)
• Pin checkout_sha at push time to prevent MR pipeline code injection (merge request)
• Read Terraform state upload path from verified UploadedFile (merge request)
• Remove admin compliance pipeline config from SM role (merge request)
• Verify Workhorse JWT on all remaining senddata emitters (merge request)
• Prevent email OTP from bypassing SSO enforcement (merge request)
• Anchor and escape EnvironmentMatcher wildcard patterns (merge request)
• Upgrade graphql gem and backport GlobalID serialization fixes (merge request)
• Update GitLab Elasticsearch Indexer to 5.14.13 (merge request)
• Fix unauthenticated arbitrary local file read in commits API (merge request)

Performance (2 changes)

• Cache the previous chunk in Gitlab::HttpIO
• Reuse HTTP connections and add timeouts in Gitlab::HttpIO

Other (1 change)

• Stop logging GraphQL type conflict deprecation warnings

v19.3.1

Compare Source

Fixed (2 changes)

• Provision inherited foundational flows without user elevation GitLab Enterprise Edition
• Gate tracked ref filter on advanced vulnerability management GitLab Enterprise Edition

Security (7 changes)

• Fix Compliance Framework Cross-Namespace Assignment on self-managed instances (merge request)
• Reject overflow username length in SCIM and OAuth sign-in (merge request)
• Prevent Sidekiq exhaustion via unbounded import jobs (merge request)
• Ignore Claude project settings in Claude agent (merge request)
• Check :update_approvers before resetting MR approval rules (merge request)
• Prevent policy job needs from resolving to untrusted jobs (merge request)
• Enforce protected environment check on terminal websocket auth (merge request)

Other (1 change)

• Reorder deployments bigint cleanup so the FK sorts first

v19.3.0

Compare Source

Added (275 changes)

• Add GraphQL mutation to remove an organization user (merge request)
• Prepare composite FK for vulnerability_occurrences (merge request)
• add list_duo_sessions mcp tool by @​DhairyaMajmudar (merge request) GitLab Enterprise Edition
• Record and expose approval gates on rollouts (merge request) GitLab Enterprise Edition
• Register risk_classification/v1 in the foundational flow catalog (merge request) GitLab Enterprise Edition
• Add project-level setting for SDLC Context Agent (merge request) GitLab Enterprise Edition
• Add project-level setting for SDLC Context Agent (merge request) GitLab Enterprise Edition
• Add project-level setting for SDLC Context Agent (merge request) GitLab Enterprise Edition
• Add a View session button to agent replies in MRs (merge request) GitLab Enterprise Edition
• Send CI/CD OTel data with optional bearer token (merge request)
• Add GLQL schema endpoint (merge request)
• Add profile scan job name suffix to avoid collision with SEP jobs (merge request) GitLab Enterprise Edition
• Add get_repository_file MCP tool (merge request)
• Add GraphQL fields for Note Duo session status (merge request) GitLab Enterprise Edition
• Add "Archived" tooltip to archived label chips by @​nwittstruck (merge request)
• Add archived badge to merge request header (merge request)
• Add ai_enabled field to work item agent plan widget (merge request) GitLab Enterprise Edition
• feat: Add Cargo package upload authorize endpoint by @​kiran-4444 (merge request)
• Add SendGrid API token validity check (merge request) GitLab Enterprise Edition
• Add incremental analysis toggle to gitlab-advanced-sast-ext (merge request)
• Add artifact registry organization to namespace mapping table (merge request)
• Geo: Enable geo_self_heal_checksum_mismatch feature flag by default (merge request) GitLab Enterprise Edition
• Add Datadog API key validity check (merge request) GitLab Enterprise Edition
• Add batched delivery wire formats to streaming destinations (merge request) GitLab Enterprise Edition
• Enable configurable_security_scan_profiles FF by default (merge request) GitLab Enterprise Edition
• Add new CI_JOB_RETRY_COUNT job predefined variable by @​gkepas (merge request)
• Add Stripe live secret key validity check (merge request) GitLab Enterprise Edition
• Add mergeability failure reasons to merge train errors (merge request) GitLab Enterprise Edition
• Add product metrics for Duo tool governance (merge request) GitLab Enterprise Edition
• Add monitoring and observability for namespace transfers (merge request)
• Add Heroku API key validity check (merge request) GitLab Enterprise Edition
• Allow model tags in AI Catalog flow agent components by @​official.harshith1 (merge request)
• Dispatch APNs push notifications on todo creation (merge request)
• Expose humanAuthor on AiAuditEvent GraphQL type (merge request) GitLab Enterprise Edition
• Add tool_call_approval_source server capability (merge request) GitLab Enterprise Edition
• Publish display type constraints in the schema (merge request)
• Add delete profile audit event (merge request) GitLab Enterprise Edition
• Add Flow Registry Chat Helper foundational chat agent (merge request) GitLab Enterprise Edition
• Add readiness_score column to work_item_agent_plans (merge request) GitLab Enterprise Edition
• Expose thread_ts and parent_thread_ts (merge request) GitLab Enterprise Edition
• Add CD RolloutStep GraphQL (merge request) GitLab Enterprise Edition
• Add index_sbom_occurrence_refs task to seed ES index on setup (merge request) GitLab Enterprise Edition
• Add Anthropic API key validity check (merge request) GitLab Enterprise Edition
• Add granular token authz to package and registry mutations (merge request)
• Introduce AE measurements (merge request)
• Add dotted syntax support to AEs (merge request) GitLab Enterprise Edition
• Add CD RolloutStep Model (merge request) GitLab Enterprise Edition
• Add SECRET_DETECTION_ENABLE_GSS to latest template (merge request) GitLab Enterprise Edition
• Add the artifact registry repository empty state (merge request) GitLab Enterprise Edition
• Add feature_flags endpoint to WorkItem REST API (EE) (merge request)
• Add deleted_at column to security_scan_profiles (merge request)
• Enable Feature Library modal for all users (merge request)
• Add SCIM access token reset to admin token API by @​nwittstruck (merge request) GitLab Enterprise Edition
• Add OpenAI project key validity check (merge request) GitLab Enterprise Edition
• Add project status filter to Security Inventory search bar (merge request) GitLab Enterprise Edition
• Address second review round (merge request)
• Enable security_dashboard_agentic_adoption by default (merge request) GitLab Enterprise Edition
• Add visibility and subgroup filters to groups queries by @​jcb960 (merge request)
• Release Restricted AI Catalog Items feature (merge request) GitLab Enterprise Edition
• Expose duo_session_id on the note REST payload (merge request) GitLab Enterprise Edition
• Add deleted_at column to security_scan_profiles (merge request)
• Add Policy Store Build policy step (merge request) GitLab Enterprise Edition
• Add Triggered By filter token to Agent Artifacts filtered search (merge request) GitLab Enterprise Edition
• Add GitHub personal access token validity check (merge request) GitLab Enterprise Edition
• Add AuditEvents::Streaming::EnqueueService producer seam (merge request) GitLab Enterprise Edition
• Default enable vulnerability_details_enrichment feature flag (merge request) GitLab Enterprise Edition
• Add granular PAT support for PipelineExecutionProjectScheduleType (merge request) GitLab Enterprise Edition
• Add admin UI toggle for OAuth dynamic client registration (merge request)
• Add Agent Identity Session API (merge request) GitLab Enterprise Edition
• Aimed_for_deletion added in groups gql api by @​nraj0408 (merge request)
• Add per-flow coding_environment declaration for DAP flows (merge request)
• Add related_merge_requests endpoint to WorkItem REST API (merge request)
• Add NatsPartitioning and audit streaming metrics (merge request) GitLab Enterprise Edition
• Hide New item button for anonymous users in work item lists (merge request)
• Check the API docs against the schema they describe (merge request)
• Schedule async validation of composite FK on vulnerability_occurrences (merge request)
• Address code review on the schema endpoint (merge request)
• Prepare composite FK for vulnerability_occurrences (merge request)
• Add elasticsearch index migration for groups (merge request) GitLab Enterprise Edition
• Bump gitlab_query_language to 0.34.0 (merge request)
• Add GLQL schema endpoint (merge request)
• Add relative_positioning_namespace_id to work_item_positions (merge request)
• Add the Build policy step's building blocks (merge request) GitLab Enterprise Edition
• Add user column to audit report table and session details panel (merge request) GitLab Enterprise Edition
• Add mobile push subscription REST API (merge request)
• Add feature_flags_minimum_role to project_settings (merge request)
• Send webhook when a merge request review is submitted by @​tayllanr (merge request)
• Add read-only groups attribute to instance SCIM User resource (merge request) GitLab Enterprise Edition
• Add Govern policy store tables and models (merge request) GitLab Enterprise Edition
• Add createdAt field to PathLock GraphQL type (merge request) GitLab Enterprise Edition
• Add userId filter to duoWorkflowSessionArtifacts (merge request) GitLab Enterprise Edition
• Add column reordering to work item boards (merge request)
• Add get_merge_request MCP facet reader tool (merge request)
• Implement award message update in userAchievementsUpdate mutation by @​Taucher2003 (merge request)
• Support order parameter with keyset pagination in Commits API (merge request)
• Add granular token authorization to governance mutations (merge request)
• Add merge request and Duo usage GLQL analytics sources (merge request)
• Add pinnedVersion support to AI catalog bulk enablement mutation (merge request) GitLab Enterprise Edition
• Add reason modal for Duo Slack thumbs-down feedback (merge request) GitLab Enterprise Edition
• Emit audit event when SPP encounter generic scan errors (merge request) GitLab Enterprise Edition
• Add runner access governance to tool management UI (merge request) GitLab Enterprise Edition
• Add semver support for CD version sets (merge request) GitLab Enterprise Edition
• Add trigger metadata columns to duo_workflows_workflows (merge request)
• Emit audit event when SPP is skipped due to invalid input (merge request) GitLab Enterprise Edition
• Add granular token authorization to vulnerability mutations (merge request) GitLab Enterprise Edition
• Add inline name validation to group general settings (merge request)
• Allow token authentication for design management images (merge request)
• Add granular token authorization to Admin & platform mutations (merge request)
• Add internal API endpoint for namespace projects with license data (merge request) GitLab Enterprise Edition
• Add audit events to profile create and update services (merge request) GitLab Enterprise Edition
• Add backend event tracking to Observability pages (merge request)
• Add beta label and feedback link to planning view board UI (merge request)
• Add oauth_application outbox instrumentation and backfill (merge request)
• Add secret detection configuration type to GQL mutations (merge request) GitLab Enterprise Edition
• Add mobile device push subscription registry (merge request)
• Add granular token authz to incident management mutations (merge request)
• Emit audit event when SPP scans too many paths (merge request) GitLab Enterprise Edition
• Add AI Governance UI for external MCP server blocks (merge request) GitLab Enterprise Edition
• Add client type to session details panel in agent artifacts (merge request) GitLab Enterprise Edition
• Wire AI Governance dashboard metrics to aiGovernanceMetrics API (merge request) GitLab Enterprise Edition
• Add MCP server endpoint to Observability setup page (merge request)
• Bump dependency scanning to major version 2 analyzer (merge request) GitLab Enterprise Edition
• Add exclude_ids argument to BaseGroupsResolver (merge request)
• Add profile update mutation (merge request) GitLab Enterprise Edition
• Add agent todos section to Duo session details (merge request) GitLab Enterprise Edition
• Add inline project slug format validation (merge request)
• Add nats-pure gem, Gitlab::Nats config, client, and app setting (merge request) GitLab Enterprise Edition
• Prepare composite FK for vulnerability_occurrences (merge request)
• Unhide mcp scopes on group and user OAuth app forms (merge request)
• Add managed settings config loader (merge request)
• Add security_policy_protected_branch_bypassed to ci_pipeline_metadata (merge request)
• Add deleted_at column to security_scan_profiles (merge request)
• Add external MCP server block/allow and enforcement (merge request) GitLab Enterprise Edition
• Record human author on AI audit events under composite identity (merge request) GitLab Enterprise Edition
• Add checkpoint_ns scoping to Duo Workflow checkpoints (merge request) GitLab Enterprise Edition
• Support target work item type in /move and /clone quick actions (merge request)
• Add Internal note indicator to email notifications (merge request)
• Add checksum mismatch self-heal columns to geo_nodes (merge request) GitLab Enterprise Edition
• Default enable reevaluate_preexisting_states flag (merge request) GitLab Enterprise Edition
• [Frontend] Add download button to audit event details panel (merge request) GitLab Enterprise Edition
• Add organization_id to vulnerability Elasticsearch document (merge request) GitLab Enterprise Edition
• Expose experiment context_keys in experiments API (merge request) GitLab Enterprise Edition
• Audit event details panel pagination (merge request) GitLab Enterprise Edition
• Add configurable profile create mutation (merge request) GitLab Enterprise Edition
• Track offline transfer export failures with internal events (merge request)
• Add worker to clean up dynamic OAuth apps when DCR is disabled (merge request)
• Add Policy Store deployment gate catalog (merge request) GitLab Enterprise Edition
• Frontend wiring ai search to more features modal (merge request) GitLab Enterprise Edition
• Add Cargo support to dependency scanning auto-remediation (merge request) GitLab Enterprise Edition
• Use parameter metadata for time dimensions and alias support (merge request)
• Show a toast when a milestone is deleted (merge request)
• Track offline transfer export completion with internal events (merge request)
• Add with_last_commit option to repository tree endpoint (merge request)
• Add workflow web_search_enabled to GraphQL (merge request) GitLab Enterprise Edition
• Add subscription name to admin subscription page (merge request) GitLab Enterprise Edition
• Add GraphQL subscription for CD deployment status updates (merge request) GitLab Enterprise Edition
• Add CREATING state to GraphQL enum and frontend for SPEP test runs (merge request) GitLab Enterprise Edition
• Add GraphQL subscription for CD service status updates (merge request) GitLab Enterprise Edition
• Add api for Duo flow callback hooks (merge request) GitLab Enterprise Edition
• Add flowTriggerFilter to consumer create mutations (merge request) GitLab Enterprise Edition
• Expose restricted visibility levels via GraphQL (merge request)
• Add GraphQL mutations for async group and project transfers (merge request)
• Prevent enterprise users from deleting their own account on GitLab.com (merge request) GitLab Enterprise Edition
• Add per-instance jitter to the malware advisory sync cron (merge request) GitLab Enterprise Edition
• Add Prometheus counter for stuck Duo Workflow sessions cleanup (merge request) GitLab Enterprise Edition
• Emit audit event when SPP encounter ruleset errors (merge request) GitLab Enterprise Edition
• Add empty state for group-level branch rule at project level (merge request) GitLab Enterprise Edition
• Inject profile configuration env vars to profile scan jobs (merge request) GitLab Enterprise Edition
• Expose flow metadata fields on DuoWorkflow GraphQL type (merge request) GitLab Enterprise Edition
• Expose field, type, and parameters in GLQL REST API entity (merge request)
• Link workflows to pipelines (merge request) GitLab Enterprise Edition
• Add availableQuickActions to Issue and WorkItem GraphQL types (merge request)
• Add GraphQL subscriptions for CD rollout and application health (merge request) GitLab Enterprise Edition
• Scan Swift and Objective-C with GitLab Advanced SAST (merge request)
• Add multigroup\project support for AggregationEngines (merge request) GitLab Enterprise Edition
• Transfer topic avatars on organization group transfer (merge request)
• Enforce HITL tool governance for CI/CD runner flows (merge request) GitLab Enterprise Edition
• Remove ci_observe_pipelines_finished feature flag (merge request)
• Add granular token authorization to audit event streaming (merge request)
• Show privacy notice for Duo mentions in non-public Slack contexts (merge request)
• Remove api_repository_archive_cache_headers feature flag (merge request)
• Add registration and revocation (merge request) GitLab Enterprise Edition
• Port Policy Store editor config field renderer (merge request) GitLab Enterprise Edition
• Add the rubygems_package_requests_forwarding cascading setting (merge request) GitLab Enterprise Edition
• Add deployment approval lifecycle webhook events by @​arcesium-guptaanv (merge request) GitLab Enterprise Edition
• Add work_item_type_names filter to Work Items REST API (merge request) GitLab Enterprise Edition
• Expose user field on SessionArtifactType GraphQL type (merge request) GitLab Enterprise Edition
• Introduce GSM denial telemetry (merge request) GitLab Enterprise Edition
• Add closing_merge_requests endpoint to WorkItem REST API (merge request)
• Add GraphQL for linking Duo workflow sessions to notes (merge request) GitLab Enterprise Edition
• Expose acting user on CD entities via GraphQL (merge request) GitLab Enterprise Edition
• Add x-gitlab-tier OpenAPI annotation for endpoint tiers (merge request)
• Add bulk profile-based scanning to Scanner Details page (merge request) GitLab Enterprise Edition
• Add GraphQL for linking Duo workflow sessions to merge requests (merge request)
• Geo: Add targeted container repository reverification task (merge request) GitLab Enterprise Edition
• Add merge_request_saved_views table and model (merge request)
• [Add OrganizationRestore GraphQL mutation](https://gitlab.com/gitlab-org/gitlab/-/commit/bb27da537eb82dbbf43867dd15255

❗ Important

✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.