TL;DR
GitLab 19.0 extends agentic AI across the full software lifecycle with its Duo Agent Platform, adds SBOM-based dependency scanning, and supports Claude Opus 4.7 and Gemini models. The release targets the gap between faster code generation and slower delivery pipelines.
GitLab has released version 19.0, its first major version bump in a year, built around a concept the company calls intelligent orchestration. The pitch is that AI coding assistants have made writing code faster, but reviews, pipelines, security scans, and deployments remain manual bottlenecks. GitLab wants to close that gap.
The release expands the GitLab Duo Agent Platform, which reached general availability in January 2026. Duo agents now work across the full software lifecycle, from planning to security remediation, running tasks in parallel rather than waiting for human handoffs at each stage.
The most significant new capability is the SBOM-based dependency scanner, now generally available. It gives Maven, Gradle, and Python projects full visibility into vulnerabilities across their entire dependency tree, including transitive dependencies that are not declared directly. That matters because roughly 70 per cent of critical security debt comes from third-party code, according to Veracode’s 2025 State of Software Security report.
GitLab Duo Developer, the platform’s AI coding assistant, gets more flexible trigger methods. Developers can now assign it to an issue, select “Generate MR,” or mention it in any issue or merge request discussion thread. The goal is to let the agent pick up work autonomously rather than requiring developers to context-switch into a separate tool.
On the model front, GitLab 19.0 adds support for Claude Opus 4.7, Google’s Gemini models, and open-source options including Devstral 2 and GLM-5.1 for self-hosted deployments. The Gemini integration supports code review, vulnerability resolution, and CI/CD pipeline repair flows. Mistral AI is also available as a self-hosted model platform.
Group-level custom review instructions are new. Previously, teams had to duplicate review configurations across every project. Now a single set of instructions can apply across an entire group and its subgroups, which reduces setup overhead for organisations running dozens or hundreds of repositories.
The release also introduces infrastructure changes. Valkey replaces Redis as the default in the Linux package. Bundled Mattermost is removed. Ubuntu 20.04 support is dropped. These are breaking changes that will require planning from self-managed customers upgrading from version 18.
GitLab is positioning intelligent orchestration as the answer to what it calls the AI paradox: individual developers are writing code faster than ever, but overall delivery velocity has not kept pace. The company’s competitors are facing the same tension. GitHub recently froze new Copilot sign-ups after agentic workflows broke the economics of its unlimited-use pricing.
GitLab’s own response to the economics question is GitLab Credits, a virtual currency priced at one dollar per credit that meters AI agent usage. Premium customers receive 12 credits per user per month. Ultimate customers get 24. Budget guardrails and spending caps, introduced in version 18.11, give administrators direct control over costs.
The company recently restructured to match this strategy, flattening management layers and reorganising R&D into roughly 60 autonomous teams. CEO Bill Staples called it an investment in the agentic era. GitLab also reduced its country footprint by 30 per cent.
The AI coding tools market has grown to an estimated $12.8 billion in 2026, up from $5.1 billion in 2024. GitHub Copilot holds about 37 per cent of that market. GitLab’s bet is that the real value is shifting from code generation to orchestrating AI agents across the entire delivery pipeline, and that a single platform covering planning, coding, testing, security, and deployment has a structural advantage over point solutions.
GitLab 19.0 is available now for self-managed instances. The company’s next major event, GitLab Transcend, is scheduled for 10 June in London, where it plans to showcase more of its AI-driven development roadmap. For teams weighing their options, the question is whether a single platform can orchestrate agents better than a stack of specialist tools.
Stephan is the sports journalist for the Maple Grove Report.
