GitLab has released version 19.3, introducing advanced administrative controls, dedicated tenant infrastructure, and automated vulnerability management to scale agentic software development securely.
GitLab 19.3 introduces significant enterprise capabilities, allowing GitLab Dedicated customers to run the GitLab Duo Agent Platform entirely within single-tenant environments and regional security boundaries. The updated platform lets organizations connect their own models for inference while ensuring all AI-processed data remains contained within established trust boundaries and residency requirements.
The release also delivers GitLab Secrets Manager in limited availability as a paid add-on for GitLab.com customers using GitLab Credits. The new module scopes every CI secret to the specific environment, branch, and protection status of requesting jobs, supporting Kubernetes, Terraform, OpenTofu, and custom tools under a unified platform permission model.
To combat accumulated technical and security debt, GitLab 19.3 introduces SAST False Positive Detection and Agentic SAST Vulnerability Resolution. The new capabilities allow security teams to review entire vulnerability backlogs in bulk rather than handling individual findings manually, using confidence scores to generate ready-to-merge patches for developers.
Process owners can additionally leverage the new Flow Creator Agent via Agentic Chat in the GitLab Duo Agent Platform to build custom automation workflows through plain language descriptions. Furthermore, organizations can now utilize GitLab Credits usage caps to set strict monthly spending ceilings on agentic AI operations before hitting overages.
“These updates extend the speed and control enterprises need deeper into the regulated and data-sensitive segment of the enterprise market,” said Manav Khurana, chief product and marketing officer at GitLab. “Every capability we shipped this month, from where an agent runs to which secret it can touch, extends that same control into the trusted software delivery workflows enterprises already depend on.”