2026-09-19 digest

GitLab 19.4 brings MCP server tools under the same agent governance as Duo

Developer tools confirmed

  • Sources: GitLab 19.4 release post, HN discussion
  • Summary: Read-only MCP tools default to Always Allow and write or delete tools default to Always Ask. The release adds MCP tools that merge requests, drive pipelines and commit files.
  • Why it matters: Third-party agents acting on a GitLab instance now fall under the same review policy as internal ones, and the defaults decide which calls stop for approval.

send feedback on this story