GitLab 19.0 launched with public beta Secrets Manager and AI workflows

GitLab released version 19.0 featuring the public beta of GitLab Secrets Manager for Premium and Ultimate users, agentic merge request workflows, and security configuration profiles for centralized scanner management. The update emphasizes solving the AI Paradox where code generation speed has outpaced security controls.

GitHub published comprehensive security architecture for AI agent workflows in CI/CD pipelines, emphasizing isolation, constrained execution, and auditability. The design addresses risks like prompt injection and privilege escalation through sandboxed environments and restricted permissions.

Microsoft's May 2026 Patch Tuesday included critical vulnerabilities affecting Azure DevOps, including CVE-2026-42826 with a CVSS score of 10 allowing information disclosure. The vulnerability has been proactively remediated in cloud infrastructure without customer action required.

Atlassian released Security Bulletin for May 19, 2026, addressing multiple vulnerabilities across Bitbucket, Jira, and Confluence platforms. Organizations are advised to patch to the latest versions to address all disclosed vulnerabilities.

Microsoft updated documentation for GitHub Advanced Security integration with Azure DevOps, requiring .NET 8.x runtime and CodeQL bundle installation. The feature provides secret scanning, dependency scanning, and code scanning capabilities for Azure Repos.

GitProtect's 2026 DevOps Threats Report reveals 607 security incidents across major platforms in 2025, totaling 9,255 hours of impact. AI-related incidents numbered 68, with malicious prompt injections and credential leaks among emerging threats affecting DevOps data protection strategies.