The following page may contain information related to upcoming products, features and functionality. It is important to note that the information presented is for informational purposes only, so please do not rely on the information for purchasing or planning purposes. Just like with all projects, the items mentioned on the page are subject to change or delay, and the development, release, and timing of any products, features or functionality remain at the sole discretion of GitLab Inc.
The list is an outline of Direction issues coming up in each paid tier. These are tentpole features – the most important features of upcoming releases – and don't include most contributions from volunteers outside the company. You can also view features organized by upcoming releases or past releases.
Note that we often move things around, do things that are not listed, and cancel things that are listed. Some of the things listed here might not ever be in GitLab. This is our best estimate of where new features will land, but is in no way definitive.
Premium features are only available to Premium (and Ultimate) subscribers.
manage_pat_by_group_owners_ready 18.0arguments to the Bulk Update Mutation 18.1workflow:rules templates Next 7-12 releasespath param to return a drill down of code analytics Backlogauto_merges BacklogGitlab::OptimisticLocking to avoid StaleObjectError when an object is updated by multiple processes Backlogneeds does not work for parent-child pipelines when one project is private Backlogready_to_merge Backlogworker_resource_boundary :cpu from AutoMergeProcessWorker and MergeTrains::RefreshWorker BacklogMergeTrain::BaseService Backlogminimal access users or users not assigned to a group or project non-billable BacklogEnable merge trains section to disable skip merge train Backlogparallel:matrix: deployments BacklogInternal visibility and scope to Organization BacklogSTRATEGY=copy option BacklogAdmin -> Users -> Groups and projects Backlogci_max_artifact_size_terraform BacklogMerge immediately with Merge trains enabled Backlogonly: default-branch shorthand for rules.if: $CI_COMMIT_REF_NAME == $CI_DEFAULT_BRANCH Backlogadmin. Backlogneeds: keyword Backlogjob:when: to allow for more flexible pipeline execution Backlogairgapped? configuration state Backloggroup_attribute in SAML configuration BacklogYour Work should also have an Authored option Backloggeo/site_proxy endpoint to supersede geo/node_proxy Backloggeo_node_allowed_ips to geo_site_allowed_ips in Application Settings Backlogagentk should notify Flux about new OCI artifacts when they are available Backlogreplication slots and replication slot WAL and link to help pages from UI Backlogadmin/users/USERNAME/projects BacklogAll users in this group must set up two-factor authentication on a subgroup should only apply to direct members in that subgroup Backlogtime-until timestamp within the $CI_DEPLOY_FREEZE variable Backloggitlab object to components, as a safer alternative to predefined CI variables Backloggitlab:db:decomposition:connection_status Rake task doesn't include connection info after ci: database has been created Backlogsudo -i when starting replication results in postgresql data directory to inherit the root owner instead gitlab-psql BacklogRedownload behaviour as a fallback to recover from repeated failed clone/fetch sync requests Backlogexpires_at field between deploy tokens and access tokens Backlogprocess_mode that functions similar to oldest_first but sorts by job_id instead of pipeline_id Backloguse_inherited_setting to true Backlogrepo: option Backlogprepare and verify Backlogenvironment.action: validate fails, mark the related environment as failed Backlogregistry.database.{enabled, name, user, host, port, password} configuration in GitLab Chart Backlogactive parameter in Group::ChildrenController Backlogaimed_for_deletion parameter to GroupsFinder Backloggeo_shared Backloggeo_shared list view components to UI Backlogreadme_url for Groups via API, Supporting External Git Repository References Backloggeo_shared Backloggeo_shared details view components to UI BacklogUltimate is for organizations that have a need to build secure, compliant software and that want to gain visibility of - and be able to influence - their entire organization from a high level. Ultimate features are only be available to Ultimate subscribers.
security_policy_approval_warn_mode 18.0remove_cross_join_from_vulnerabilities_projects_grade 18.0group_vulnerability_scanners_using_statistics 18.0release/production are requiring approval on release/staging 18.0.pipeline-policy-pre stage should fail the pipeline to prevent jobs with empty needs from running 18.0arguments to the Bulk Update Mutation 18.1dependantSecurityPolicies property 18.3workflow:rules templates Next 7-12 releasesLicense-Check earlier in the pipeline Backlogrelease-candidate BacklogPIP_REQUIREMENTS_FILE implementation Backlogdependencies: [] Backloglicense_management to `license_scanning Backlogci_max_artifact_size_license_management column in the plan_limits table BacklogInternal visibility and scope to Organization BacklogMutations::Vulnerabilities::Create to accept a Vulnerability location BacklogSTRATEGY=copy option Backlogsast_fp_reduction to be generic for all scanners BacklogAdmin -> Users -> Groups and projects Backlogci_max_artifact_size_terraform Backlogonly: default-branch shorthand for rules.if: $CI_COMMIT_REF_NAME == $CI_DEFAULT_BRANCH Backlogpending information to the Status field to the drawer for Scan Execution policies BacklogLatest Scan field to the drawer for Scan Execution policies BacklogChange History field to the drawer for Scan Execution policies Backlogmatch_locations to reflect their input Backlogtype of project Backlogclassification and approval_status consistent between licenses endpoint and license_reports Backlogneeds: keyword Backlogjob:when: to allow for more flexible pipeline execution BacklogImage filter to the group/security center Operational vulnerabilities vulnerability report BacklogCluster filter to the group/security center Operational vulnerabilities vulnerability report BacklogJSONSelect case in gemnasium Backlogread_project_runners instead of using admin_project Backlogmembership params for project filter in RunnersFinder Backlogairgapped? configuration state Backloggroup_attribute in SAML configuration Backloglatest_build_for_default_branch is causing extra queries Backlogcluster_image_scanning APIs Backlogcluster_image_scanning APIs BacklogYour Work should also have an Authored option Backloggeo/site_proxy endpoint to supersede geo/node_proxy Backloggeo_node_allowed_ips to geo_site_allowed_ips in Application Settings Backlogshortest_path and introduced_by fields when creating report with Gitlab::VulnerabilityScanning::SbomScanner Backlogagentk should notify Flux about new OCI artifacts when they are available Backlogreplication slots and replication slot WAL and link to help pages from UI BacklogPackageAdvisories class for default branch Backlogadmin/users/USERNAME/projects BacklogAll users in this group must set up two-factor authentication on a subgroup should only apply to direct members in that subgroup Backlogtime-until timestamp within the $CI_DEPLOY_FREEZE variable Backlogdelete branch button for branches protected by a security policy Backloggitlab object to components, as a safer alternative to predefined CI variables Backloggitlab:db:decomposition:connection_status Rake task doesn't include connection info after ci: database has been created Backlogsudo -i when starting replication results in postgresql data directory to inherit the root owner instead gitlab-psql Backlogscan_result to approval policy in the FE Backloganalytics_share_as_image feature flag Backloganalytics_share_as_image feature flag BacklogRedownload behaviour as a fallback to recover from repeated failed clone/fetch sync requests Backlogexpires_at field between deploy tokens and access tokens Backlogprocess_mode that functions similar to oldest_first but sorts by job_id instead of pipeline_id Backlogeditor_layout's isRemoving/isEditinging/isUpdating flags BacklogCS_IGNORE_STATUSES env var value to the rails platform BacklogCS_IGNORE_STATUSES Backlogai_resolution_available? and ai_resolution_enabled? Backlogpolicy_editor/scan_result/editor_component.vue into policy_editor/scan_result/action/action_section.vue BacklogrenderMultiSelectText with getSelectedOptionsText Backlogprepare and verify Backlogee/spec/frontend/security_orchestration/components/policy_editor/branch_selector_spec.js, BranchSelector initial state for regular branches selects branches Backlogee/spec/frontend/security_orchestration/utils_spec.js, decomposeApprovers with mixed approvers returns a copy of the input values with their proper type attribute Backlogee/spec/frontend/security_orchestration/components/policies/app_spec.js, App loading renders the policies list correctly when vulnerabilityManagementPolicyType is true Backlogee/spec/frontend/security_orchestration/components/policy_editor/scan_result/action/group_select_spec.js, GroupSelect component default filters groups when search is performed in listbox Backlogee/spec/frontend/security_orchestration/components/policies/list_component_spec.js, List component initial state with data policy in row #1 renders Scheduled Dast/SAST scan-project in the name cell Backlogee/spec/frontend/security_orchestration/components/policy_editor/scan_result/settings/setting_popover_spec.js, ` SettingPopover default does not display by default` Backlogee/spec/frontend/security_orchestration/components/policy_editor/scan_execution/lib/from_yaml_spec.js, fromYaml returns the policy object for a valid template value BacklogCreateOrchestrationPolicyWorker with a PostReceive hook to catch direct updates to policy.yml Backlogbranch_types Backlogenvironment.action: validate fails, mark the related environment as failed Backloggroup_vulnerability_scanners_using_statistics BacklogExecutionPolicies::PipelineContext Backloggradle dependencies --write-locks Backlogregistry.database.{enabled, name, user, host, port, password} configuration in GitLab Chart Backlogactive parameter in Group::ChildrenController Backlogaimed_for_deletion parameter to GroupsFinder BacklogUpdateApprovalsService and rename it to SyncScanFindingRulesService Backlogprevent_pushing_and_force_pushing should reflect in branch rule UI Backloggeo_shared Backloggeo_shared list view components to UI Backlogreadme_url for Groups via API, Supporting External Git Repository References Backloggeo_shared Backloggeo_shared details view components to UI Backlog