GitLab 19.4 expands MCP tools and adds governed agents

GitLab 19.4 expands its MCP server with tools for CI/CD pipelines, merge requests, repositories, work items, projects, and users, while adding configurable governance for MCP tools in GitLab Duo settings.

Advanced SAST now supports Kotlin, Dart, and Scala, and dependency and license scanning can use SPDX composite license expressions in dependency lists and approval policies.

The release also adds GitLab Duo CLI’s /goal command, an experimental Slack integration, a beta visual flow builder for VS Code, and a Created action for merge request triggers.