gitlab-api 26.1.0__tar.gz → 26.2.0__tar.gz

{gitlab_api-26.1.0/gitlab_api.egg-info → gitlab_api-26.2.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gitlab-api
-Version: 26.1.0
+Version: 26.2.0
 Summary: GitLab API + MCP Server + A2A Server
 Author-email: Audel Rouhi <knucklessg1@gmail.com>
 License: MIT
@@ -22,7 +22,7 @@ Requires-Dist: agent-utilities[agent,logfire]>=1.0.0; extra == "agent"
 Provides-Extra: gql
 Requires-Dist: gql[requests]>=4.0.0; extra == "gql"
 Provides-Extra: all
-Requires-Dist: gitlab-api[agent,gql,logfire,mcp]>=26.1.0; extra == "all"
+Requires-Dist: gitlab-api[agent,gql,logfire,mcp]>=26.2.0; extra == "all"
 Provides-Extra: test
 Requires-Dist: pytest-xdist>=3.6.0; extra == "test"
 Requires-Dist: pytest; extra == "test"
@@ -52,7 +52,7 @@ Dynamic: license-file
 ![PyPI - Wheel](https://img.shields.io/pypi/wheel/gitlab-api)
 ![PyPI - Implementation](https://img.shields.io/pypi/implementation/gitlab-api)
 
-*Version: 26.1.0*
+*Version: 26.2.0*
 
 > **Documentation** — Installation, deployment, usage across the API, CLI, and MCP
 > interfaces, the integrated A2A agent server, and guidance for provisioning the
@@ -137,12 +137,13 @@ _Auto-generated from the live MCP server — do not edit by hand._
 | `gitlab_snippets` | `SNIPPETSTOOL` | Manage GitLab snippets. |
 | `gitlab_tags` | `TAGSTOOL` | Manage gitlab tags operations. |
 | `gitlab_users` | `USERSTOOL` | Manage gitlab users operations. |
+| `gitlab_vulnerabilities` | `VULNERABILITIESTOOL` | Review a project's dependency list and security vulnerabilities (the GitLab counterpart to GitHub Dependabot). |
 | `gitlab_wiki` | `WIKITOOL` | Manage gitlab wiki operations. |
 
 #### Verbose 1:1 API-mapped tools (`MCP_TOOL_MODE=verbose` or `both`)
 
 <details>
-<summary>192 per-operation tools — one per public API method (click to expand)</summary>
+<summary>196 per-operation tools — one per public API method (click to expand)</summary>
 
 | MCP Tool | Toggle Env Var | Description |
 |----------|----------------|-------------|
@@ -236,6 +237,7 @@ _Auto-generated from the live MCP server — do not edit by hand._
 | `gitlab_get_group_releases` | `USERS_GROUPSTOOL` | Get information about releases in a group. |
 | `gitlab_get_group_runners` | `PIPELINESTOOL` | Get information about runners in a group. |
 | `gitlab_get_group_subgroups` | `USERS_GROUPSTOOL` | Get subgroups of a specific group. |
+| `gitlab_get_group_vulnerabilities` | `VULNERABILITIESTOOL` | Get a group's security vulnerability findings (Ultimate). |
 | `gitlab_get_groups` | `USERS_GROUPSTOOL` | Get a list of groups. |
 | `gitlab_get_issue` | `ISSUESTOOL` | Get a single issue. |
 | `gitlab_get_issues` | `ISSUESTOOL` | Get list of issues. Can filter by project_id. |
@@ -261,6 +263,7 @@ _Auto-generated from the live MCP server — do not edit by hand._
 | `gitlab_get_pipelines_triggered_from_schedule` | `PIPELINESTOOL` | Get pipelines triggered from a specific pipeline schedule. |
 | `gitlab_get_project` | `PROJECTSTOOL` | Get information about a specific project. |
 | `gitlab_get_project_contributors` | `PROJECTSTOOL` | Get information about contributors to a project. |
+| `gitlab_get_project_dependencies` | `VULNERABILITIESTOOL` | Get a project's Dependency List (all detected dependencies). |
 | `gitlab_get_project_deploy_token` | `PROJECTSTOOL` | Get a specific deploy token for a project. |
 | `gitlab_get_project_deploy_tokens` | `PROJECTSTOOL` | Get deploy tokens for a specific project. |
 | `gitlab_get_project_groups` | `PROJECTSTOOL` | Get groups associated with a specific project. |
@@ -275,6 +278,7 @@ _Auto-generated from the live MCP server — do not edit by hand._
 | `gitlab_get_project_merge_requests` | `PROJECTSTOOL` | Get merge requests for a specific project. |
 | `gitlab_get_project_runners` | `PROJECTSTOOL` | Get information about runners in a project. |
 | `gitlab_get_project_statistics` | `PROJECTSTOOL` | Get statistics for a specific project. |
+| `gitlab_get_project_vulnerabilities` | `VULNERABILITIESTOOL` | Get a project's security vulnerabilities (Ultimate). |
 | `gitlab_get_projects` | `PROJECTSTOOL` | Get information about projects. |
 | `gitlab_get_protected_branch` | `REPOSITORIESTOOL` | Get information about a specific protected branch in a project. |
 | `gitlab_get_protected_branches` | `REPOSITORIESTOOL` | Get information about protected branches in a project. |
@@ -294,6 +298,7 @@ _Auto-generated from the live MCP server — do not edit by hand._
 | `gitlab_get_tags` | `REPOSITORIESTOOL` | Get information about tags in a project. |
 | `gitlab_get_user` | `USERS_GROUPSTOOL` | Get information about a specific user. |
 | `gitlab_get_users` | `USERS_GROUPSTOOL` | Get information about users. |
+| `gitlab_get_vulnerability` | `VULNERABILITIESTOOL` | Get a single vulnerability by its global ID (Ultimate). |
 | `gitlab_get_wiki_list` | `OTHERTOOL` | Get a list of wiki pages for a project. |
 | `gitlab_get_wiki_page` | `OTHERTOOL` | Get information about a specific wiki page. |
 | `gitlab_merge_request_level_approvals` | `MERGE_REQUESTSTOOL` | Get approvals for a specific merge request. |
@@ -341,7 +346,7 @@ _Auto-generated from the live MCP server — do not edit by hand._
 
 </details>
 
-_32 action-routed tool(s) (default) · 192 verbose 1:1 tool(s). Each is enabled unless its `<DOMAIN>TOOL` toggle is set false; `MCP_TOOL_MODE` selects the surface (`condensed` default · `verbose` 1:1 · `both`). Auto-generated — do not edit._
+_33 action-routed tool(s) (default) · 196 verbose 1:1 tool(s). Each is enabled unless its `<DOMAIN>TOOL` toggle is set false; `MCP_TOOL_MODE` selects the surface (`condensed` default · `verbose` 1:1 · `both`). Auto-generated — do not edit._
 <!-- MCP-TOOLS-TABLE:END -->
 
 Detailed tool schemas, parameter shapes, and validation constraints are preserved in [docs/mcp.md](docs/mcp.md).
@@ -422,6 +427,7 @@ When query strings or parameters are supplied, an LLM-free **Knowledge Graph res
         "SNIPPETSTOOL": "True",
         "TAGSTOOL": "True",
         "USERSTOOL": "True",
+        "VULNERABILITIESTOOL": "True",
         "WIKITOOL": "True"
       }
     }
@@ -481,6 +487,7 @@ When query strings or parameters are supplied, an LLM-free **Knowledge Graph res
         "SNIPPETSTOOL": "True",
         "TAGSTOOL": "True",
         "USERSTOOL": "True",
+        "VULNERABILITIESTOOL": "True",
         "WIKITOOL": "True"
       }
     }
@@ -541,6 +548,7 @@ docker run -d \
   -e SNIPPETSTOOL=True \
   -e TAGSTOOL=True \
   -e USERSTOOL=True \
+  -e VULNERABILITIESTOOL=True \
   -e WIKITOOL=True \
   knucklessg1/gitlab-api:mcp
 ```
@@ -613,6 +621,7 @@ consumed from a **remote deployment**. The
 | `SNIPPETSTOOL` | `True` |  |
 | `TAGSTOOL` | `True` |  |
 | `USERSTOOL` | `True` |  |
+| `VULNERABILITIESTOOL` | `True` |  |
 | `WIKITOOL` | `True` |  |
 | `CUSTOM_APITOOL` | `True` |  |
 | `GRAPHQLTOOL` | `True` |  |
@@ -637,7 +646,7 @@ consumed from a **remote deployment**. The
 | `MODEL_ID` | `gpt-4o` | Model id for the agent |
 | `ENABLE_WEB_UI` | `True` | Serve the AG-UI web interface |
 
-_44 package + 14 inherited variable(s). Auto-generated from `.env.example` + the shared agent-utilities set — do not edit._
+_45 package + 14 inherited variable(s). Auto-generated from `.env.example` + the shared agent-utilities set — do not edit._
 <!-- ENV-VARS-TABLE:END -->
 
 

{gitlab_api-26.1.0 → gitlab_api-26.2.0}/README.md

@@ -20,7 +20,7 @@
 ![PyPI - Wheel](https://img.shields.io/pypi/wheel/gitlab-api)
 ![PyPI - Implementation](https://img.shields.io/pypi/implementation/gitlab-api)
 
-*Version: 26.1.0*
+*Version: 26.2.0*
 
 > **Documentation** — Installation, deployment, usage across the API, CLI, and MCP
 > interfaces, the integrated A2A agent server, and guidance for provisioning the
@@ -105,12 +105,13 @@ _Auto-generated from the live MCP server — do not edit by hand._
 | `gitlab_snippets` | `SNIPPETSTOOL` | Manage GitLab snippets. |
 | `gitlab_tags` | `TAGSTOOL` | Manage gitlab tags operations. |
 | `gitlab_users` | `USERSTOOL` | Manage gitlab users operations. |
+| `gitlab_vulnerabilities` | `VULNERABILITIESTOOL` | Review a project's dependency list and security vulnerabilities (the GitLab counterpart to GitHub Dependabot). |
 | `gitlab_wiki` | `WIKITOOL` | Manage gitlab wiki operations. |
 
 #### Verbose 1:1 API-mapped tools (`MCP_TOOL_MODE=verbose` or `both`)
 
 <details>
-<summary>192 per-operation tools — one per public API method (click to expand)</summary>
+<summary>196 per-operation tools — one per public API method (click to expand)</summary>
 
 | MCP Tool | Toggle Env Var | Description |
 |----------|----------------|-------------|
@@ -204,6 +205,7 @@ _Auto-generated from the live MCP server — do not edit by hand._
 | `gitlab_get_group_releases` | `USERS_GROUPSTOOL` | Get information about releases in a group. |
 | `gitlab_get_group_runners` | `PIPELINESTOOL` | Get information about runners in a group. |
 | `gitlab_get_group_subgroups` | `USERS_GROUPSTOOL` | Get subgroups of a specific group. |
+| `gitlab_get_group_vulnerabilities` | `VULNERABILITIESTOOL` | Get a group's security vulnerability findings (Ultimate). |
 | `gitlab_get_groups` | `USERS_GROUPSTOOL` | Get a list of groups. |
 | `gitlab_get_issue` | `ISSUESTOOL` | Get a single issue. |
 | `gitlab_get_issues` | `ISSUESTOOL` | Get list of issues. Can filter by project_id. |
@@ -229,6 +231,7 @@ _Auto-generated from the live MCP server — do not edit by hand._
 | `gitlab_get_pipelines_triggered_from_schedule` | `PIPELINESTOOL` | Get pipelines triggered from a specific pipeline schedule. |
 | `gitlab_get_project` | `PROJECTSTOOL` | Get information about a specific project. |
 | `gitlab_get_project_contributors` | `PROJECTSTOOL` | Get information about contributors to a project. |
+| `gitlab_get_project_dependencies` | `VULNERABILITIESTOOL` | Get a project's Dependency List (all detected dependencies). |
 | `gitlab_get_project_deploy_token` | `PROJECTSTOOL` | Get a specific deploy token for a project. |
 | `gitlab_get_project_deploy_tokens` | `PROJECTSTOOL` | Get deploy tokens for a specific project. |
 | `gitlab_get_project_groups` | `PROJECTSTOOL` | Get groups associated with a specific project. |
@@ -243,6 +246,7 @@ _Auto-generated from the live MCP server — do not edit by hand._
 | `gitlab_get_project_merge_requests` | `PROJECTSTOOL` | Get merge requests for a specific project. |
 | `gitlab_get_project_runners` | `PROJECTSTOOL` | Get information about runners in a project. |
 | `gitlab_get_project_statistics` | `PROJECTSTOOL` | Get statistics for a specific project. |
+| `gitlab_get_project_vulnerabilities` | `VULNERABILITIESTOOL` | Get a project's security vulnerabilities (Ultimate). |
 | `gitlab_get_projects` | `PROJECTSTOOL` | Get information about projects. |
 | `gitlab_get_protected_branch` | `REPOSITORIESTOOL` | Get information about a specific protected branch in a project. |
 | `gitlab_get_protected_branches` | `REPOSITORIESTOOL` | Get information about protected branches in a project. |
@@ -262,6 +266,7 @@ _Auto-generated from the live MCP server — do not edit by hand._
 | `gitlab_get_tags` | `REPOSITORIESTOOL` | Get information about tags in a project. |
 | `gitlab_get_user` | `USERS_GROUPSTOOL` | Get information about a specific user. |
 | `gitlab_get_users` | `USERS_GROUPSTOOL` | Get information about users. |
+| `gitlab_get_vulnerability` | `VULNERABILITIESTOOL` | Get a single vulnerability by its global ID (Ultimate). |
 | `gitlab_get_wiki_list` | `OTHERTOOL` | Get a list of wiki pages for a project. |
 | `gitlab_get_wiki_page` | `OTHERTOOL` | Get information about a specific wiki page. |
 | `gitlab_merge_request_level_approvals` | `MERGE_REQUESTSTOOL` | Get approvals for a specific merge request. |
@@ -309,7 +314,7 @@ _Auto-generated from the live MCP server — do not edit by hand._
 
 </details>
 
-_32 action-routed tool(s) (default) · 192 verbose 1:1 tool(s). Each is enabled unless its `<DOMAIN>TOOL` toggle is set false; `MCP_TOOL_MODE` selects the surface (`condensed` default · `verbose` 1:1 · `both`). Auto-generated — do not edit._
+_33 action-routed tool(s) (default) · 196 verbose 1:1 tool(s). Each is enabled unless its `<DOMAIN>TOOL` toggle is set false; `MCP_TOOL_MODE` selects the surface (`condensed` default · `verbose` 1:1 · `both`). Auto-generated — do not edit._
 <!-- MCP-TOOLS-TABLE:END -->
 
 Detailed tool schemas, parameter shapes, and validation constraints are preserved in [docs/mcp.md](docs/mcp.md).
@@ -390,6 +395,7 @@ When query strings or parameters are supplied, an LLM-free **Knowledge Graph res
         "SNIPPETSTOOL": "True",
         "TAGSTOOL": "True",
         "USERSTOOL": "True",
+        "VULNERABILITIESTOOL": "True",
         "WIKITOOL": "True"
       }
     }
@@ -449,6 +455,7 @@ When query strings or parameters are supplied, an LLM-free **Knowledge Graph res
         "SNIPPETSTOOL": "True",
         "TAGSTOOL": "True",
         "USERSTOOL": "True",
+        "VULNERABILITIESTOOL": "True",
         "WIKITOOL": "True"
       }
     }
@@ -509,6 +516,7 @@ docker run -d \
   -e SNIPPETSTOOL=True \
   -e TAGSTOOL=True \
   -e USERSTOOL=True \
+  -e VULNERABILITIESTOOL=True \
   -e WIKITOOL=True \
   knucklessg1/gitlab-api:mcp
 ```
@@ -581,6 +589,7 @@ consumed from a **remote deployment**. The
 | `SNIPPETSTOOL` | `True` |  |
 | `TAGSTOOL` | `True` |  |
 | `USERSTOOL` | `True` |  |
+| `VULNERABILITIESTOOL` | `True` |  |
 | `WIKITOOL` | `True` |  |
 | `CUSTOM_APITOOL` | `True` |  |
 | `GRAPHQLTOOL` | `True` |  |
@@ -605,7 +614,7 @@ consumed from a **remote deployment**. The
 | `MODEL_ID` | `gpt-4o` | Model id for the agent |
 | `ENABLE_WEB_UI` | `True` | Serve the AG-UI web interface |
 
-_44 package + 14 inherited variable(s). Auto-generated from `.env.example` + the shared agent-utilities set — do not edit._
+_45 package + 14 inherited variable(s). Auto-generated from `.env.example` + the shared agent-utilities set — do not edit._
 <!-- ENV-VARS-TABLE:END -->
 
 

{gitlab_api-26.1.0 → gitlab_api-26.2.0}/gitlab_api/agent_server.py

@@ -4,7 +4,7 @@ import os
 import sys
 import warnings
 
-__version__ = "26.1.0"
+__version__ = "26.2.0"
 
 logging.basicConfig(
     level=logging.INFO,

gitlab_api-26.2.0/gitlab_api/api/api_client_vulnerabilities.py

@@ -0,0 +1,168 @@
+#!/usr/bin/python
+
+from typing import TypeVar
+
+import requests
+from agent_utilities.base_utilities import get_logger
+from pydantic import ValidationError
+
+logger = get_logger(__name__)
+
+from agent_utilities.core.exceptions import (
+    MissingParameterError,
+    ParameterError,
+)
+
+from gitlab_api.gitlab_input_models import (
+    VulnerabilityModel,
+)
+from gitlab_api.gitlab_response_models import (
+    Response,
+)
+
+T = TypeVar("T")
+
+from gitlab_api.api.api_client_base import GitLabApiBase
+
+
+class GitLabApiVulnerabilities(GitLabApiBase):
+    """Dependency list + security vulnerability surface — the GitLab counterpart
+    to GitHub's Dependabot (Dependency List, Vulnerabilities, and findings APIs)."""
+
+    def get_project_dependencies(self, **kwargs) -> Response:
+        """
+        Get a project's Dependency List (all detected dependencies).
+
+        GET /projects/{project_id}/dependencies
+
+        Args:
+            **kwargs: project_id (required); optional package_manager filter and
+                pagination (page, per_page, max_pages).
+
+        Returns:
+            Response: wrapper containing the original response and the parsed
+                dependency list (list of dicts).
+
+        Raises:
+            MissingParameterError: If project_id is missing.
+            ParameterError: If invalid parameters are provided.
+        """
+        vulnerability = VulnerabilityModel(**kwargs)
+        if vulnerability.project_id is None:
+            raise MissingParameterError("project_id is required")
+        try:
+            response, data = self._fetch_all_pages(
+                endpoint=f"/projects/{vulnerability.project_id}/dependencies",
+                model=vulnerability,
+                id_field="project_id",
+                id_value=vulnerability.project_id,
+            )
+            return Response(response=response, data=data)
+        except ValidationError as e:
+            raise ParameterError(f"Invalid parameters: {e.errors()}") from e
+        except requests.RequestException as e:
+            raise ParameterError(f"Failed to get project dependencies: {str(e)}") from e
+
+    def get_project_vulnerabilities(self, **kwargs) -> Response:
+        """
+        Get a project's security vulnerabilities (Ultimate).
+
+        GET /projects/{project_id}/vulnerabilities
+
+        Args:
+            **kwargs: project_id (required); optional pagination.
+
+        Returns:
+            Response: wrapper containing the original response and the parsed
+                vulnerabilities (list of dicts).
+
+        Raises:
+            MissingParameterError: If project_id is missing.
+            ParameterError: If invalid parameters are provided.
+        """
+        vulnerability = VulnerabilityModel(**kwargs)
+        if vulnerability.project_id is None:
+            raise MissingParameterError("project_id is required")
+        try:
+            response, data = self._fetch_all_pages(
+                endpoint=f"/projects/{vulnerability.project_id}/vulnerabilities",
+                model=vulnerability,
+                id_field="project_id",
+                id_value=vulnerability.project_id,
+            )
+            return Response(response=response, data=data)
+        except ValidationError as e:
+            raise ParameterError(f"Invalid parameters: {e.errors()}") from e
+        except requests.RequestException as e:
+            raise ParameterError(
+                f"Failed to get project vulnerabilities: {str(e)}"
+            ) from e
+
+    def get_group_vulnerabilities(self, **kwargs) -> Response:
+        """
+        Get a group's security vulnerability findings (Ultimate).
+
+        GET /groups/{group_id}/vulnerability_findings
+
+        Args:
+            **kwargs: group_id (required); optional pagination.
+
+        Returns:
+            Response: wrapper containing the original response and the parsed
+                vulnerability findings (list of dicts).
+
+        Raises:
+            MissingParameterError: If group_id is missing.
+            ParameterError: If invalid parameters are provided.
+        """
+        vulnerability = VulnerabilityModel(**kwargs)
+        if vulnerability.group_id is None:
+            raise MissingParameterError("group_id is required")
+        try:
+            response, data = self._fetch_all_pages(
+                endpoint=f"/groups/{vulnerability.group_id}/vulnerability_findings",
+                model=vulnerability,
+                id_field="group_id",
+                id_value=vulnerability.group_id,
+            )
+            return Response(response=response, data=data)
+        except ValidationError as e:
+            raise ParameterError(f"Invalid parameters: {e.errors()}") from e
+        except requests.RequestException as e:
+            raise ParameterError(
+                f"Failed to get group vulnerabilities: {str(e)}"
+            ) from e
+
+    def get_vulnerability(self, **kwargs) -> Response:
+        """
+        Get a single vulnerability by its global ID (Ultimate).
+
+        GET /vulnerabilities/{vulnerability_id}
+
+        Args:
+            **kwargs: vulnerability_id (required).
+
+        Returns:
+            Response: wrapper containing the original response and the parsed
+                vulnerability (dict).
+
+        Raises:
+            MissingParameterError: If vulnerability_id is missing.
+            ParameterError: If invalid parameters are provided.
+        """
+        vulnerability = VulnerabilityModel(**kwargs)
+        if vulnerability.vulnerability_id is None:
+            raise MissingParameterError("vulnerability_id is required")
+        try:
+            response = self._session.get(
+                url=f"{self.url}/vulnerabilities/{vulnerability.vulnerability_id}",
+                headers=self.headers,
+                verify=self.verify,
+                proxies=self.proxies,
+            )
+            response.raise_for_status()
+            return Response(response=response, data=response.json())
+        except ValidationError as e:
+            raise ParameterError(f"Invalid parameters: {e.errors()}") from e
+        except requests.RequestException as e:
+            raise ParameterError(f"Failed to get vulnerability: {str(e)}") from e

{gitlab_api-26.1.0 → gitlab_api-26.2.0}/gitlab_api/api_client.py

@@ -18,6 +18,7 @@ from gitlab_api.api.api_client_projects import GitLabApiProjects
 from gitlab_api.api.api_client_repositories import GitLabApiRepositories
 from gitlab_api.api.api_client_system import GitLabApiSystem
 from gitlab_api.api.api_client_users_groups import GitLabApiUsersGroups
+from gitlab_api.api.api_client_vulnerabilities import GitLabApiVulnerabilities
 
 
 class Api(
@@ -29,6 +30,7 @@ class Api(
     GitLabApiPipelines,
     GitLabApiUsersGroups,
     GitLabApiEnvironments,
+    GitLabApiVulnerabilities,
     GitLabApiOther,
 ):
     __slots__ = ()

{gitlab_api-26.1.0 → gitlab_api-26.2.0}/gitlab_api/gitlab_input_models.py

@@ -3442,6 +3442,69 @@ class NoteModel(BaseModel):
         return values
 
 
+class VulnerabilityModel(BaseModel):
+    """
+    Pydantic model for the dependency list / security vulnerability surface
+    (the GitLab counterpart to GitHub Dependabot).
+
+    Attributes:
+    - project_id (int | str): Project ID or full path (dependencies / project vulnerabilities).
+    - group_id (int | str): Group ID or full path (group vulnerability findings).
+    - vulnerability_id (int | str): ID of a single vulnerability (global endpoint).
+    - package_manager (str): Optional Dependency List filter (e.g. 'bundler', 'npm').
+    """
+
+    project_id: int | str | None = Field(
+        default=None, description="Project ID or full path"
+    )
+    group_id: int | str | None = Field(
+        default=None, description="Group ID or full path"
+    )
+    vulnerability_id: int | str | None = Field(
+        default=None, description="ID of a single vulnerability"
+    )
+    package_manager: str | None = Field(
+        default=None,
+        description="Dependency List filter by package manager (e.g. 'npm', 'bundler')",
+    )
+    max_pages: int | None = Field(description="Maximum pages to return", default=None)
+    per_page: int | None = Field(description="Results per page", default=None)
+    page: int | None = Field(description="Pagination page", default=None)
+    api_parameters: dict | None = Field(description="API Parameters", default=None)
+    data: dict | None = Field(description="Data Payload", default=None)
+
+    def model_post_init(self, _context):
+        self.api_parameters = {}
+        if self.package_manager:
+            self.api_parameters["package_manager"] = self.package_manager
+        if self.page:
+            self.api_parameters["page"] = self.page
+        if self.per_page:
+            self.api_parameters["per_page"] = self.per_page
+
+    @field_validator("project_id")
+    def validate_project_id(cls, v):
+        if v is None:
+            return v
+        if not str(v).strip():
+            raise ValueError("Project ID or path cannot be empty")
+        return str(v).strip("'\"")
+
+    @field_validator("group_id")
+    def validate_group_id(cls, v):
+        if v is None:
+            return v
+        if not str(v).strip():
+            raise ValueError("Group ID or path cannot be empty")
+        return str(v).strip("'\"")
+
+    @field_validator("vulnerability_id")
+    def validate_vulnerability_id(cls, v):
+        if v is None:
+            return v
+        return str(v).strip("'\"")
+
+
 class EpicModel(BaseModel):
     group_id: int | str | None = Field(
         default=None, description="Group ID or full path"

{gitlab_api-26.1.0 → gitlab_api-26.2.0}/gitlab_api/mcp/__init__.py

@@ -33,6 +33,7 @@ from gitlab_api.mcp.mcp_runners import register_runners_tools
 from gitlab_api.mcp.mcp_snippets import register_snippets_tools
 from gitlab_api.mcp.mcp_tags import register_tags_tools
 from gitlab_api.mcp.mcp_users import register_users_tools
+from gitlab_api.mcp.mcp_vulnerabilities import register_vulnerabilities_tools
 from gitlab_api.mcp.mcp_wiki import register_wiki_tools
 
 __all__ = [
@@ -65,5 +66,6 @@ __all__ = [
     "register_snippets_tools",
     "register_tags_tools",
     "register_users_tools",
+    "register_vulnerabilities_tools",
     "register_wiki_tools",
 ]

gitlab_api-26.2.0/gitlab_api/mcp/mcp_vulnerabilities.py

@@ -0,0 +1,59 @@
+"""MCP tools for vulnerabilities operations.
+
+Auto-generated from mcp_server.py during ecosystem standardization.
+"""
+
+from typing import Any
+
+from agent_utilities.mcp_utilities import resolve_action, run_blocking
+from fastmcp import Context, FastMCP
+from fastmcp.dependencies import Depends
+from pydantic import Field
+
+from gitlab_api.auth import get_client
+
+
+def register_vulnerabilities_tools(mcp: FastMCP):
+    @mcp.tool(tags={"vulnerabilities"})
+    async def gitlab_vulnerabilities(
+        action: str = Field(
+            description="Action to perform. Must be one of: 'dependencies', 'get_project', 'get_group', 'get'"
+        ),
+        params_json: str = Field(
+            default="{}", description="JSON string of parameters to pass to the action."
+        ),
+        client=Depends(get_client),
+        ctx: Context | None = Field(
+            default=None, description="MCP context for progress reporting"
+        ),
+    ) -> Any:
+        """Review a project's dependency list and security vulnerabilities (the GitLab counterpart to GitHub Dependabot)."""
+        if ctx:
+            await ctx.info("Executing tool...")
+        import json
+
+        try:
+            kwargs = json.loads(params_json)
+        except Exception as e:
+            return {"error": f"Invalid params_json: {e}"}
+
+        kwargs = {k: v for k, v in kwargs.items() if v is not None}
+
+        resolved = resolve_action(
+            action,
+            {"dependencies", "get_project", "get_group", "get"},
+            service="gitlab-api",
+        )
+        if isinstance(resolved, dict):
+            return resolved
+        action = resolved
+
+        if action == "dependencies":
+            return await run_blocking(client.get_project_dependencies, **kwargs)
+        if action == "get_project":
+            return await run_blocking(client.get_project_vulnerabilities, **kwargs)
+        if action == "get_group":
+            return await run_blocking(client.get_group_vulnerabilities, **kwargs)
+        if action == "get":
+            return await run_blocking(client.get_vulnerability, **kwargs)
+        raise ValueError(f"Unknown action: {action}")

{gitlab_api-26.1.0 → gitlab_api-26.2.0}/gitlab_api/mcp_server.py

@@ -37,7 +37,7 @@ from agent_utilities.mcp_utilities import (
 from gitlab_api.api_client import Api
 from gitlab_api.auth import get_client
 
-__version__ = "26.1.0"
+__version__ = "26.2.0"
 print(f"Gitlab MCP v{__version__}", file=sys.stderr)
 
 logger = get_logger(name="mcp_server")
@@ -1641,6 +1641,52 @@ def register_namespaces_tools(mcp: FastMCP):
         raise ValueError(f"Unknown action: {action}")
 
 
+def register_vulnerabilities_tools(mcp: FastMCP):
+    @mcp.tool(tags={"vulnerabilities"})
+    async def gitlab_vulnerabilities(
+        action: str = Field(
+            description="Action to perform. Must be one of: 'dependencies', 'get_project', 'get_group', 'get'"
+        ),
+        params_json: str = Field(
+            default="{}", description="JSON string of parameters to pass to the action."
+        ),
+        client=Depends(get_client),
+        ctx: Context | None = Field(
+            default=None, description="MCP context for progress reporting"
+        ),
+    ) -> Any:
+        """Review a project's dependency list and security vulnerabilities (the GitLab counterpart to GitHub Dependabot)."""
+        if ctx:
+            await ctx.info("Executing tool...")
+        import json
+
+        try:
+            kwargs = json.loads(params_json)
+        except Exception as e:
+            return {"error": f"Invalid params_json: {e}"}
+
+        kwargs = {k: v for k, v in kwargs.items() if v is not None}
+
+        resolved = resolve_action(
+            action,
+            {"dependencies", "get_project", "get_group", "get"},
+            service="gitlab-api",
+        )
+        if isinstance(resolved, dict):
+            return resolved
+        action = resolved
+
+        if action == "dependencies":
+            return await run_blocking(client.get_project_dependencies, **kwargs)
+        if action == "get_project":
+            return await run_blocking(client.get_project_vulnerabilities, **kwargs)
+        if action == "get_group":
+            return await run_blocking(client.get_group_vulnerabilities, **kwargs)
+        if action == "get":
+            return await run_blocking(client.get_vulnerability, **kwargs)
+        raise ValueError(f"Unknown action: {action}")
+
+
 def register_prompts(mcp: FastMCP):
     @mcp.prompt
     def create_branch_prompt(

{gitlab_api-26.1.0 → gitlab_api-26.2.0}/gitlab_api/skills/gitlab-issues/SKILL.md

@@ -1,5 +1,6 @@
 ---
 name: gitlab-issues
+skill_type: skill
 description: >-
   Issue review and tracking on GitLab via the gitlab-api MCP server — review a project's issues,
   review issues across a whole group/organization, and read, create, update, or close an issue

{gitlab_api-26.1.0 → gitlab_api-26.2.0}/gitlab_api/skills/gitlab-merge-request-create/SKILL.md

@@ -1,5 +1,6 @@
 ---
 name: gitlab-merge-request-create
+skill_type: skill
 description: >-
   Open a new GitLab merge request against a project via the gitlab-api MCP server — from a
   source branch into a target branch, with title, description, assignees, reviewers, labels,

{gitlab_api-26.1.0 → gitlab_api-26.2.0}/gitlab_api/skills/gitlab-merge-request-review/SKILL.md

@@ -1,5 +1,6 @@
 ---
 name: gitlab-merge-request-review
+skill_type: skill
 description: >-
   Review and merge GitLab merge requests via the gitlab-api MCP server — by default the MRs
   assigned to you or where you are a reviewer, optionally scoped to a project, group, or the

{gitlab_api-26.1.0 → gitlab_api-26.2.0}/gitlab_api/skills/gitlab-pipelines/SKILL.md

@@ -1,5 +1,6 @@
 ---
 name: gitlab-pipelines
+skill_type: skill
 description: >-
   CI/CD pipeline review on GitLab via the gitlab-api MCP server — review pipeline results for a
   project, a group, or the whole instance, drill into the CI jobs of a pipeline, and read a