GitLab Dependency Scanning Auto-Remediation now in beta

Fri, 17 Jul 2026 12:03:24 +0000

Platform/SRE — Skip
CI/CD — Learn: Beta feature that auto-opens MRs to patch vulnerable dependencies and iterates until the pipeline passes — worth evaluating once GA, but pre-GA status caps this at Learn for now.
Leader — Learn: Beta capability targeting the OWASP dependency backlog and compliance remediation windows (PCI-DSS/FedRAMP 30-day deadlines); monitor for GA before considering for the golden path.
Signals: breaking-change flagged

Dependency-Scanning on CuraDevOps