Gitlab Review

2026.09.08.1

Added: SHA-bound, changed-line-validated batch inline review posting for approval-gated triage.

Upgrade note: Existing review resources are unchanged.

2026.08.28.1

Changed: Normalized the extension license to Apache-2.0 and corrected the copyright holder to "Sean Escriva". Extensions that previously shipped an MIT LICENSE.md are now Apache-2.0, consistent with the repository root and every other extension. No code or behavioral changes.

Upgrade note: License text only. No API, schema, or runtime behavior changed.

2026.08.26.3

Fixed: Restored inline npm:zod@4.4.3 import specifiers so the registry quality scorer can resolve dependencies and score the extension. An earlier release used a bare "zod" import-map specifier, which published but scored as unscored.

Changed: Retained explicit compilerOptions.strict in deno.json. No behavioral or schema changes.

2026.08.28.1

Changed: Normalized the extension license to Apache-2.0 and corrected the copyright holder to "Sean Escriva". Extensions that previously shipped an MIT LICENSE.md are now Apache-2.0, consistent with the repository root and every other extension. No code or behavioral changes.

Upgrade note: License text only. No API, schema, or runtime behavior changed.

2026.08.26.3

Fixed: Restored inline npm:zod@4.4.3 import specifiers so the registry quality scorer can resolve dependencies and score the extension. An earlier release used a bare "zod" import-map specifier, which published but scored as unscored.

Changed: Retained explicit compilerOptions.strict in deno.json. No behavioral or schema changes.

2026.08.26.3

Fixed: Restored inline npm:zod@4.4.3 import specifiers so the registry quality scorer can resolve dependencies and score the extension. An earlier release used a bare "zod" import-map specifier, which published but scored as unscored.

Changed: Retained explicit compilerOptions.strict in deno.json. No behavioral or schema changes.

2026.08.26.1

Fixed: Added missing description field to upgrade entry for version 2026.08.24.2. The omission caused swamp extension pull to fail with a catalog validation error ("upgrades.N.description: Invalid input: expected string, received undefined").

2026.08.25.1

Changed: Updated labels for improved extension discoverability. Added cross-cutting category labels (security, observability, finops, infrastructure, networking, compliance, devops, ai, incident-response) where applicable.

2026.08.24.3

Added: Output metadata attributes for observability.

• durationMs: Method execution duration in milliseconds.
• collectedBy: Extension name that produced the data.
• fetchedAt: ISO 8601 timestamp when data was fetched (added to resources that previously lacked it).

2026.08.24.2

Added Troubleshooting section documenting post_review partial-failure scenario, large diff truncation, idempotent unapprove, list_mr_notes cross-extension dependency, token scope requirements, and no rate-limit retry.

2026.08.21.2

Changed: project and iid method arguments (get_mr_diff, analyze, edit_draft, approve_mr, unapprove_mr, update_review, post_review, post_line_comment) are now validated up front — project must be non-empty and iid must be a positive integer. Previously an empty project path or a zero/negative/fractional iid passed schema validation and only failed deep inside a GitLab API call with a confusing 404 or 400. A malformed (non-JSON) response body from GitLab's GraphQL endpoint, the MR changes endpoint, the MR versions endpoint, or the discussions endpoint now raises a clear error naming the request that failed, instead of a raw JSON.parse SyntaxError.

2026.08.21.1

Changed: Added .describe() documentation to every previously undocumented field in the resource schemas (DiffFileSchema, MrDiffSchema, ReviewDraftSchema, ReviewPostedSchema, LineCommentSchema). Tightened host and token in the global arguments to require a non-empty string. No behavioral change — a no-op upgrades entry was added to keep the model's typeVersion tracking in sync with the version bump.

2026.08.07.1

Added: post_line_comment method — posts a comment positioned on a specific file/line in an MR diff (GitLab REST discussions API), for the standard diff-level code-review UX that post_review (top-level notes only) doesn't cover. Fetches the MR's current diff versions to build the required base_sha/start_sha/head_sha position, then creates a positioned discussion thread. Accepts newLine and/or oldLine (at least one required) to comment on added, deleted, or context lines. New lineComment resource records discussionId, noteId, and the file/line position of each posted comment, keyed per file/line so multiple comments on the same MR are stored as separate instances (lifetime: 30d, garbageCollection: 20, additive — no changes to existing resources).

2026.07.18.1

Added: An upgrades array entry (no-op) to review.ts for proper typeVersion tracking on existing instances. No schema or behavior changes.

2026.07.08.1

Fixed:

• unapprove_mr and post_review action=request_changes are now idempotent. GitLab's unapprove endpoint returns HTTP 404 when the caller has no approval to remove; that is the desired end state for "request changes", not an error. A never-approved MR no longer fails the call — the comment still posts and the MR is left unapproved. Non-404 errors still propagate.

2026.08.21.1

Changed: Added .describe() documentation to every previously undocumented field in the resource schemas (DiffFileSchema, MrDiffSchema, ReviewDraftSchema, ReviewPostedSchema, LineCommentSchema). Tightened host and token in the global arguments to require a non-empty string. No behavioral change — a no-op upgrades entry was added to keep the model's typeVersion tracking in sync with the version bump.

2026.08.07.1

Added: post_line_comment method — posts a comment positioned on a specific file/line in an MR diff (GitLab REST discussions API), for the standard diff-level code-review UX that post_review (top-level notes only) doesn't cover. Fetches the MR's current diff versions to build the required base_sha/start_sha/head_sha position, then creates a positioned discussion thread. Accepts newLine and/or oldLine (at least one required) to comment on added, deleted, or context lines. New lineComment resource records discussionId, noteId, and the file/line position of each posted comment, keyed per file/line so multiple comments on the same MR are stored as separate instances (lifetime: 30d, garbageCollection: 20, additive — no changes to existing resources).

2026.07.18.1

Added: An upgrades array entry (no-op) to review.ts for proper typeVersion tracking on existing instances. No schema or behavior changes.

2026.07.08.1

Fixed:

• unapprove_mr and post_review action=request_changes are now idempotent. GitLab's unapprove endpoint returns HTTP 404 when the caller has no approval to remove; that is the desired end state for "request changes", not an error. A never-approved MR no longer fails the call — the comment still posts and the MR is left unapproved. Non-404 errors still propagate.

2026.08.07.1

Added: post_line_comment method — posts a comment positioned on a specific file/line in an MR diff (GitLab REST discussions API), for the standard diff-level code-review UX that post_review (top-level notes only) doesn't cover. Fetches the MR's current diff versions to build the required base_sha/start_sha/head_sha position, then creates a positioned discussion thread. Accepts newLine and/or oldLine (at least one required) to comment on added, deleted, or context lines. New lineComment resource records discussionId, noteId, and the file/line position of each posted comment, keyed per file/line so multiple comments on the same MR are stored as separate instances (lifetime: 30d, garbageCollection: 20, additive — no changes to existing resources).

2026.07.18.1

Added: An upgrades array entry (no-op) to review.ts for proper typeVersion tracking on existing instances. No schema or behavior changes.

2026.07.08.1

Fixed:

• unapprove_mr and post_review action=request_changes are now idempotent. GitLab's unapprove endpoint returns HTTP 404 when the caller has no approval to remove; that is the desired end state for "request changes", not an error. A never-approved MR no longer fails the call — the comment still posts and the MR is left unapproved. Non-404 errors still propagate.

2026.07.18.1

Added: An upgrades array entry (no-op) to review.ts for proper typeVersion tracking on existing instances. No schema or behavior changes.

2026.07.08.1

Fixed:

• unapprove_mr and post_review action=request_changes are now idempotent. GitLab's unapprove endpoint returns HTTP 404 when the caller has no approval to remove; that is the desired end state for "request changes", not an error. A never-approved MR no longer fails the call — the comment still posts and the MR is left unapproved. Non-404 errors still propagate.

2026.07.08.1

Fixed:

• unapprove_mr and post_review action=request_changes are now idempotent. GitLab's unapprove endpoint returns HTTP 404 when the caller has no approval to remove; that is the desired end state for "request changes", not an error. A never-approved MR no longer fails the call — the comment still posts and the MR is left unapproved. Non-404 errors still propagate.