GitLab Inc. released GitLab 19.2, introducing several new features aimed at automating security remediation and software development workflows, according to a company statement.

Dependency Scanning Auto-Remediation, now in public beta, automatically opens merge requests to fix vulnerable packages. If an upgrade breaks a build, agents attempt to resolve the issue within the same merge request. The feature includes configuration controls for severity thresholds and version scope, and all changes remain subject to existing approval gates and audit trails.

Security Review Flow, also now in public beta, is designed to detect vulnerabilities that pattern-based scanners cannot identify, such as business-logic errors, race conditions, and authorization flaws. The tool operates on every merge request but does not approve changes autonomously; human review is required for final decisions.

GitLab Duo CLI is now generally available across GitLab.com, self-managed, and dedicated deployments. The command-line tool gives developers access to GitLab Duo Agent Platform's agents directly from the terminal, with project context included. Administrative controls govern its rollout across organizations.

Custom Flows, which allow teams to build automated multi-step workflows triggered by GitLab events, are also now generally available. The feature authenticates to external services using short-lived, job-scoped tokens. GitLab said an upcoming Flow Creation Agent will allow users to generate custom flows from natural-language descriptions.

GitLab 19.2 also introduces an AI Audit Event Report, now in beta, which logs AI-assisted actions as dedicated audit events for use in compliance reporting and incident investigation. Group-level custom instructions for GitLab Duo Code Review and new access controls for model context protocol agents are also included in the release.

"Coding agents made it possible to generate far more code and moved the bottleneck downstream to reviews and security," said Manav Khurana, chief product and marketing officer at GitLab. "GitLab 19.2 puts agents to work on that bottleneck."

GitLab cited a Forrester Consulting study, commissioned by the company, claiming organizations using GitLab Duo Agent Platform can achieve a 400% return on investment with payback in under six months.