GitLab Inc. (NASDAQ: GTLB) announced the release of GitLab 19.0, which includes new capabilities for secrets management, merge request workflows, and supply chain visibility, according to a company statement.

The update introduces GitLab Secrets Manager in public beta for Premium and Ultimate users. The feature stores credentials within the same platform that runs code and pipelines, limiting each secret to authorized jobs only. Access control uses GitLab's existing group and project structure, and the system provides audit logging linked to originating pipelines.

Developer Flow capabilities now extend across the full merge request lifecycle, addressing reviewer feedback, conflict resolution, and feature implementation. The system reads project-specific standards from AGENTS.md files before committing changes. New beta features include a "Resolve with Duo" function and one-click rebase-and-merge options for teams using specific merge methods.

Components Analytics provides platform engineering teams visibility into CI/CD Catalog component usage across organizations. The feature shows which components and versions are running, with adoption data available for all tier users and detailed drill-down capabilities for Ultimate tier users.

GitLab Duo Agent Platform Self-Hosted adds support for four open source models: Mistral Devstral 2 123B, GLM-5.1, Kimi-K2.6, and MiniMax-M2.7. These additions target teams in air-gapped or regulated environments that cannot send source code to external APIs.

The platform now includes dependency scanning with software bill of materials capabilities for Ultimate tier users, producing inventories of third-party components matched against GitLab security advisories. Security configuration profiles allow teams to enable Secret Detection, SAST, and Dependency Scanning across projects through policies.

"AI made it faster to generate code, but it didn't make it easier to trust or secure it at scale," said Manav Khurana, chief product and marketing officer at GitLab.