Changes in v2.2.5
✨ Features
Contributors
🔐 Security note: gitlab_api_request
The new gitlab_api_request tool is off by default. It is enabled only when you explicitly list api in GITLAB_TOOLSETS (e.g. GITLAB_TOOLSETS=core,api); GITLAB_TOOLSETS=all, discover_tools, and GITLAB_TOOLS do not enable it. Once enabled, it can call arbitrary GitLab REST APIs with your token, bypassing the safeguards of the dedicated tools. Only enable it when you actually need it, and combine it with read-only mode (GITLAB_PERMISSION_MODE=readonly, which allows GET only) and GITLAB_ALLOWED_PROJECT_IDS (enforced for /projects/:id paths). See docs/tools/api.md.
⚠️ Deprecation notice
Deprecated configuration options (e.g. GITLAB_READ_ONLY_MODE, USE_GITLAB_WIKI, and other legacy flags) still work during the grace period, but they will be removed in v3.0.0. Please migrate to the replacements described in the pinned issue #815.