GitLab previews auto-remediation of vulnerable dependencies

GitLab has released GitLab 19.2, an update to its DevSecOps platform that introduces AI-powered auto-remediation of vulnerable dependencies, Security Review Flow for catching logic flaws, and general availability of GitLab Duo CLI for running AI agents from the terminal. The Dependency Scanning Auto-Remediation feature, in public beta, uses AI to fix build-breaking changes and iterate until the pipeline passes, while Security Review Flow analyzes code changes for authorization gaps and business-logic errors. GitLab chief product and marketing officer Manav Khurana said the update puts agents to work on the bottleneck of reviews and security.

GitLab has released GitLab 19.2 https://about.gitlab.com/whats-new/ , an update to the company’s devsecops https://www.infoworld.com/article/2337499/what-is-devsecops-securing-devops-pipelines.html platform that allows teams to fix vulnerable dependencies automatically, use Security Review Flow to catch logic flaws that scanners miss, and run AI agents straight from the terminal, the company said. Highlights in GitLab 19.2 include the following: - Dependency Scanning Auto-Remediation, in public beta, uses AI to fix build-breaking changes and iterates until your pipeline passes, with every change governed by your existing gates and audit trail. - Security Review Flow, also in public beta, analyzes code changes as a security engineer would and catches authorization gaps, business-logic errors, and race conditions that static scanners structurally cannot see. - GitLab Duo CLI, now generally available, gives developers access to agents and multi-step agentic flows for all software life cycle tasks without leaving the terminal. - Custom Flows, now generally available, let teams replace manual multi-step workflows with agentic automations for software development, triggered by GitLab events. “Coding agents made it possible to generate far more code and moved the bottleneck downstream to reviews and security,” said Manav Khurana, chief product and marketing officer at GitLab, in a statement. “GitLab 19.2 puts agents to work on that bottleneck: fixing vulnerable dependencies, catching the flaws scanners miss, and automating the steps in between with a person still approving what ships.”