chore(deps): Bump @gitlab/gitlab-ai-provider from 3.6.0 to 4.1.0
Closed
DE
8mo ago+1+1+0123456789-1-1-0123456789
Bumps @gitlab/gitlab-ai-provider from 3.6.0 to 4.1.0.
Release notes
Sourced from @gitlab/gitlab-ai-provider's releases.
v4.1.0
4.1.0 (2026-03-01)
- Merge branch 'duo-edit-20260227-221915' into 'main' (654643a)
- feat(models): add GPT-5.3 Codex model support (b34ebd6)
v4.0.0
4.0.0 (2026-02-27)
- feat!: add Duo Workflow Service integration via WebSocket (b293f73)
- feat!: bump major version (196b058)
- feat!: trigger major release (2cb0f9c)
- Merge branch 'feat/duo-workflow-integration' into 'main' (bfface1)
BREAKING CHANGE
- detectProject() now throws GitLabError instead of returning null on API failures. loadOpenCodeAuth() throws on malformed auth.json instead of returning undefined. Callers that relied on silent failure must add error handling.
v3.6.1
3.6.1 (2026-02-24)
Changelog
Sourced from @gitlab/gitlab-ai-provider's changelog.
4.1.0 (2026-03-01)
- Merge branch 'duo-edit-20260227-221915' into 'main' (654643a)
- feat(models): add GPT-5.3 Codex model support (b34ebd6)
4.0.0 (2026-02-27)
- feat!: add Duo Workflow Service integration via WebSocket (b293f73)
- feat!: bump major version (196b058)
- feat!: trigger major release (2cb0f9c)
- Merge branch 'feat/duo-workflow-integration' into 'main' (bfface1)
BREAKING CHANGE
- detectProject() now throws GitLabError instead of returning null on API failures. loadOpenCodeAuth() throws on malformed auth.json instead of returning undefined. Callers that relied on silent failure must add error handling.
4.0.0 (2026-02-27)
✨ Features
- feat: add Duo Workflow Service integration via WebSocket (!9)
- Add
workflowChat()factory method for server-side agentic workflows- Implement WebSocket client for bidirectional DWS communication
- Add dynamic model discovery via GraphQL (
aiChatAvailableModels)- Support MCP tool integration and built-in tool mapping
- Add file-based model cache with workspace/instance scoping
- Implement per-stream state isolation for concurrent requests
- Add dual heartbeat (WebSocket ping + JSON heartbeat)
- Support
GITLAB_INSTANCE_URLenvironment variable- Pass
aiGatewayUrlthrough to workflow config🔧 New Modules
gitlab-workflow-client.ts- WebSocket client for DWS communicationgitlab-workflow-language-model.ts- LanguageModelV2 adapter for DWSgitlab-workflow-token-client.ts- Token exchange and workflow creationgitlab-model-discovery.ts- Runtime model discovery via GraphQLgitlab-model-cache.ts- File-based cache for model discovery and selectiongitlab-workflow-builtins.ts- Built-in tool mapping and security utilitiesgitlab-workflow-types.ts- Comprehensive DWS protocol type definitions🧪 Test Coverage
- Added 89 new tests (300 total)
gitlab-model-discovery.test.ts- 21 testsgitlab-workflow-client.test.ts- 33 testsgitlab-workflow-language-model.test.ts- 20 testsgitlab-workflow-token-client.test.ts- 25 testsgitlab-provider.test.ts- 15 new tests for workflow routing
... (truncated)
Commits
1e96704chore(release): 4.1.0 [skip ci]654643aMerge branch 'duo-edit-20260227-221915' into 'main'b34ebd6feat(models): add GPT-5.3 Codex model support6023c08chore(release): 4.0.0 [skip ci]196b058feat!: bump major version2cb0f9cfeat!: trigger major releasebfface1Merge branch 'feat/duo-workflow-integration' into 'main'b293f73feat!: add Duo Workflow Service integration via WebSocket59ce476chore(release): 3.6.1 [skip ci]af675cfMerge branch 'fix/commitlint-footer-max-line-length' into 'main'- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)