GitLab 19.1 introduces a broad set of features across security, AI, and DevOps. The headline feature is secret false positive detection powered by GitLab Duo, which automatically analyzes critical and high severity secret detection findings to reduce alert fatigue. Other major additions include: tool approval guardrails for AI agents (allow/ask/deny per tool), always-on GitLab Duo availability mode for enterprise governance, automatic Code Owner reviewer assignment, compliance framework templates (19 prebuilt templates including ISO 27001, SOC 2, FedRAMP), improved secret detection coverage scanning all commits on feature branches, GPT model support for Code Review Flow, a model selection allowlist for Agentic Chat, new merge request event triggers for flows, a generally available Security Manager role, SARIF 2.1.0 third-party scanner integration, stacked merge request UI support, inline git blame in the file viewer, and AI audit event streaming to external SIEM destinations.
