GitLab 18.7: Dynamic Input Selection for Pipelines
GitLab 18.7 introduces dynamic input selection for CI/CD pipelines, allowing cascading dropdown menus where options update based on previous selections.
GitLab 18.7, released in December 2025, delivers over 25 improvements including a significant enhancement to CI/CD pipeline configuration through dynamic input selection capabilities. The release continues GitLab's focus on streamlining DevSecOps workflows with more intelligent, context-aware tooling.
Dynamic Input Selection
The headline feature allows developers to set up pipelines with cascading dropdown menus when creating new pipelines through the web interface. When you select an input in one dropdown list, it automatically populates a list of related options in a second dropdown list based on that selection. This dynamic capability enables more intelligent, context-aware input configurations that guide users through the pipeline creation process.
Benefits for Complex Workflows
By ensuring only valid combinations of inputs can be selected, the feature reduces configuration errors and improves the developer experience when working with complex pipelines that have interdependent parameters. This is particularly valuable for organizations managing multiple environments, regions, or deployment targets where the available options for one parameter depend on another.
Additional 18.7 Features
The release also includes improvements to the GitLab Duo Analytics dashboard for better visibility into AI-assisted development metrics, enhanced secret validity checks for detecting exposed credentials, model selection for chat and agents, and Warn Mode for Merge Request Approval Policies. Warn Mode allows teams to gradually introduce new approval policies by alerting developers about policy violations without blocking merges, easing the transition to stricter governance.
Related Articles
GitHub Expands Developer Platform with Actions Artifacts v5 and Copilot Extensions GA
GitHub has shipped Actions Artifacts v5 with immutable storage and artifact attestation for tamper-proof build outputs, alongside the general availability of Copilot Extensions that let third-party tools integrate directly into the Copilot chat experience. The platform also expanded GitHub Models with seven new providers.
Docker Engine 29.3 Ships with Native gRPC Support and BuildKit v0.28
Docker Engine 29.3.0 introduces native gRPC support on listening sockets, BuildKit v0.28.0, and a new bind-create-src option for flexible volume mounting. The release lowers the minimum API version to v1.40 for broader backward compatibility and fixes DNS configuration corruption during daemon reloads.
GitHub Adds Dependabot Pre-Commit Support and 28 New Secret Scanning Detectors
GitHub has shipped two major supply chain security features: Dependabot now parses .pre-commit-config.yaml files and opens PRs to update hook versions, while secret scanning gains 28 new detectors from 15 providers including Snowflake, Supabase, and Vercel. Push protection is now enabled by default for 39 secret types.