GitLab 19.5 release notes
GitLab 19.5 introduces the general availability of the GitLab MCP server and the GitLab Secrets Manager. It also enables AI governance visibility for Externally Connected Agents (ECAs) like Claude Code and Cursor.
Verified State Diff
Impact & Verification Analysis
DevOps engineers, security and compliance teams, and developers using AI-assisted coding tools.
These changes reduce security risks associated with credential sprawl and provide enterprise-grade auditability for AI workflows, effectively positioning GitLab as a central control plane for both internal and external AI agent activity.
Full Fact Overview
The 19.5 release marks a significant expansion of GitLab's AI and security infrastructure. The GitLab MCP server now allows third-party agents to access the full GitLab tool catalog, facilitating deeper integration with external IDEs. The Secrets Manager, built on OpenBao, centralizes credential management within GitLab's existing permission model, replacing fragmented CI/CD variable usage. Furthermore, the integration of ECAs into the AI Governance Dashboard via the 'glab' CLI provides centralized auditability for AI interactions occurring outside the native GitLab environment.