What's new in GitLab

Monthly releases, developer resources, and the latest from the GitLab team.

Monthly releases

March 19, 2026

GitLab 18.10 released with broader and more affordable access to agentic AI

GitLab Duo Agent Platform is now available on free GitLab.com accounts, agentic code reviews are $0.25 each, and SAST false- positive detection is generally available.

Read the release notes

Blog

GitLab 18.10 brings AI-native triage and remediation

Learn about GitLab Duo Agent Platform capabilities that cut noise, surface real vulnerabilities, and turn findings into proposed fixes.

Blog

Agentic AI now open to even more teams on GitLab

Free GitLab.com teams can purchase GitLab Credits and start using AI agents, flows, and flat-rate automated code review.

Blog

Agentic code reviews for $0.25 each

Code reviews are a bottleneck in software delivery. They no longer have to be with affordable agentic code reviews that you can turn on by default for every merge request.

Blog

Agile planning gets a boost from new features in GitLab 18.10

Work items list and saved views reduce context switching, keeping your software development team aligned and their workflows efficient.

This month’s Notable Contributor: Harshith Sudar

Harshith is currently a Level 3 Contributor who has made impactful contributions improving community tooling and analytics, from triage automation and contributor recognition to GitLab Duo usage insights.

Read the press release

Plan

Code

Duo Agent Platform now available on free GitLab.com accounts

Group owners on free GitLab.com namespaces can now purchase a monthly commitment of GitLab Credits, giving every member immediate access to agents, flows, and agentic chat. Credits are pooled across the group so you pay for what AI does, not how many people use it.

Code

Agentic code reviews for $0.25 each

Code Review Flow now costs one GitLab Credit for four reviews, regardless of merge request size or complexity. No more token math, no more reserving AI reviews for high-priority changes.

Credits dashboard: see exactly where AI spend is going

The credits dashboard now surfaces your biggest consumers, lets you audit specific sessions, and export usage data. The user table opens sorted by credits consumed so top users appear immediately.

Secure

Agentic SAST false-positive detection is generally available

After every SAST scan, Duo Agent Platform automatically checks critical and high severity findings and tells you which ones are likely false positives. Each finding gets a confidence score, an AI-generated explanation, and a visual badge.

Secure

AI-powered secret scanning false-positive detection (Beta)

Analyzes secret detection findings to flag test credentials, example values, and placeholder secrets before they clutter your vulnerability report. Each assessment comes with AI reasoning and a confidence score.

Plan

Work items list and saved views

Epics, issues, and other work items now share a single unified list. Saved views let teams create and store customized list configurations at the namespace level, so the filters and layouts you rely on every day are always one click away.

Build

Set job parameters mid-pipeline without re-running everything

Manual jobs in CI/CD pipelines can now accept input parameters at run time. If a parameter depends on an earlier job output or an external condition, you set it when you trigger the job; no need to re-run the full pipeline.

Secure

Analyze

Filter the security dashboard by business context

Security attributes like business impact, application name, business unit, and internet exposure are now filterable directly on the Security Dashboard. Security managers can slice vulnerability data by what matters to their organization.

Deploy

Manage container virtual registries from the UI (Beta)

Container virtual registries now have a web interface. Create Docker virtual registries, add upstream sources like Docker Hub, Harbor, and Quay, set their priority order, and clear caches; all without touching the API.

Read the press release