gitlab-api 26.1.1__tar.gz → 26.4.0__tar.gz

{gitlab_api-26.1.1/gitlab_api.egg-info → gitlab_api-26.4.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gitlab-api
-Version: 26.1.1
+Version: 26.4.0
 Summary: GitLab API + MCP Server + A2A Server
 Author-email: Audel Rouhi <knucklessg1@gmail.com>
 License: MIT
@@ -22,7 +22,7 @@ Requires-Dist: agent-utilities[agent,logfire]>=1.0.0; extra == "agent"
 Provides-Extra: gql
 Requires-Dist: gql[requests]>=4.0.0; extra == "gql"
 Provides-Extra: all
-Requires-Dist: gitlab-api[agent,gql,logfire,mcp]>=26.1.1; extra == "all"
+Requires-Dist: gitlab-api[agent,gql,logfire,mcp]>=26.4.0; extra == "all"
 Provides-Extra: test
 Requires-Dist: pytest-xdist>=3.6.0; extra == "test"
 Requires-Dist: pytest; extra == "test"
@@ -52,7 +52,7 @@ Dynamic: license-file
 ![PyPI - Wheel](https://img.shields.io/pypi/wheel/gitlab-api)
 ![PyPI - Implementation](https://img.shields.io/pypi/implementation/gitlab-api)
 
-*Version: 26.1.1*
+*Version: 26.4.0*
 
 > **Documentation** — Installation, deployment, usage across the API, CLI, and MCP
 > interfaces, the integrated A2A agent server, and guidance for provisioning the
@@ -116,6 +116,7 @@ _Auto-generated from the live MCP server — do not edit by hand._
 | `gitlab_graphql` | `GRAPHQLTOOL` | Execute raw GraphQL queries and mutations natively on GitLab. |
 | `gitlab_graphql_ops` | `GRAPHQL_OPSTOOL` | Run a typed GitLab GraphQL operation by name. |
 | `gitlab_groups` | `GROUPSTOOL` | Manage gitlab groups operations. |
+| `gitlab_ingest_pipelines` | `MISCTOOL` | Natively ingest GitLab CI pipeline runs (+ jobs) into epistemic-graph. |
 | `gitlab_ingest_projects` | `MISCTOOL` | Natively ingest GitLab projects into epistemic-graph as typed :Project nodes. |
 | `gitlab_instances` | `MISCTOOL` | List the configured GitLab tenants (CONCEPT:AU-KG.backend.declared-columns-so-schema). |
 | `gitlab_issues` | `ISSUESTOOL` | Manage GitLab issues. |
@@ -137,12 +138,13 @@ _Auto-generated from the live MCP server — do not edit by hand._
 | `gitlab_snippets` | `SNIPPETSTOOL` | Manage GitLab snippets. |
 | `gitlab_tags` | `TAGSTOOL` | Manage gitlab tags operations. |
 | `gitlab_users` | `USERSTOOL` | Manage gitlab users operations. |
+| `gitlab_vulnerabilities` | `VULNERABILITIESTOOL` | Review a project's dependency list and security vulnerabilities (the GitLab counterpart to GitHub Dependabot). |
 | `gitlab_wiki` | `WIKITOOL` | Manage gitlab wiki operations. |
 
 #### Verbose 1:1 API-mapped tools (`MCP_TOOL_MODE=verbose` or `both`)
 
 <details>
-<summary>192 per-operation tools — one per public API method (click to expand)</summary>
+<summary>196 per-operation tools — one per public API method (click to expand)</summary>
 
 | MCP Tool | Toggle Env Var | Description |
 |----------|----------------|-------------|
@@ -236,6 +238,7 @@ _Auto-generated from the live MCP server — do not edit by hand._
 | `gitlab_get_group_releases` | `USERS_GROUPSTOOL` | Get information about releases in a group. |
 | `gitlab_get_group_runners` | `PIPELINESTOOL` | Get information about runners in a group. |
 | `gitlab_get_group_subgroups` | `USERS_GROUPSTOOL` | Get subgroups of a specific group. |
+| `gitlab_get_group_vulnerabilities` | `VULNERABILITIESTOOL` | Get a group's security vulnerability findings (Ultimate). |
 | `gitlab_get_groups` | `USERS_GROUPSTOOL` | Get a list of groups. |
 | `gitlab_get_issue` | `ISSUESTOOL` | Get a single issue. |
 | `gitlab_get_issues` | `ISSUESTOOL` | Get list of issues. Can filter by project_id. |
@@ -261,6 +264,7 @@ _Auto-generated from the live MCP server — do not edit by hand._
 | `gitlab_get_pipelines_triggered_from_schedule` | `PIPELINESTOOL` | Get pipelines triggered from a specific pipeline schedule. |
 | `gitlab_get_project` | `PROJECTSTOOL` | Get information about a specific project. |
 | `gitlab_get_project_contributors` | `PROJECTSTOOL` | Get information about contributors to a project. |
+| `gitlab_get_project_dependencies` | `VULNERABILITIESTOOL` | Get a project's Dependency List (all detected dependencies). |
 | `gitlab_get_project_deploy_token` | `PROJECTSTOOL` | Get a specific deploy token for a project. |
 | `gitlab_get_project_deploy_tokens` | `PROJECTSTOOL` | Get deploy tokens for a specific project. |
 | `gitlab_get_project_groups` | `PROJECTSTOOL` | Get groups associated with a specific project. |
@@ -275,6 +279,7 @@ _Auto-generated from the live MCP server — do not edit by hand._
 | `gitlab_get_project_merge_requests` | `PROJECTSTOOL` | Get merge requests for a specific project. |
 | `gitlab_get_project_runners` | `PROJECTSTOOL` | Get information about runners in a project. |
 | `gitlab_get_project_statistics` | `PROJECTSTOOL` | Get statistics for a specific project. |
+| `gitlab_get_project_vulnerabilities` | `VULNERABILITIESTOOL` | Get a project's security vulnerabilities (Ultimate). |
 | `gitlab_get_projects` | `PROJECTSTOOL` | Get information about projects. |
 | `gitlab_get_protected_branch` | `REPOSITORIESTOOL` | Get information about a specific protected branch in a project. |
 | `gitlab_get_protected_branches` | `REPOSITORIESTOOL` | Get information about protected branches in a project. |
@@ -294,6 +299,7 @@ _Auto-generated from the live MCP server — do not edit by hand._
 | `gitlab_get_tags` | `REPOSITORIESTOOL` | Get information about tags in a project. |
 | `gitlab_get_user` | `USERS_GROUPSTOOL` | Get information about a specific user. |
 | `gitlab_get_users` | `USERS_GROUPSTOOL` | Get information about users. |
+| `gitlab_get_vulnerability` | `VULNERABILITIESTOOL` | Get a single vulnerability by its global ID (Ultimate). |
 | `gitlab_get_wiki_list` | `OTHERTOOL` | Get a list of wiki pages for a project. |
 | `gitlab_get_wiki_page` | `OTHERTOOL` | Get information about a specific wiki page. |
 | `gitlab_merge_request_level_approvals` | `MERGE_REQUESTSTOOL` | Get approvals for a specific merge request. |
@@ -341,7 +347,7 @@ _Auto-generated from the live MCP server — do not edit by hand._
 
 </details>
 
-_32 action-routed tool(s) (default) · 192 verbose 1:1 tool(s). Each is enabled unless its `<DOMAIN>TOOL` toggle is set false; `MCP_TOOL_MODE` selects the surface (`condensed` default · `verbose` 1:1 · `both`). Auto-generated — do not edit._
+_34 action-routed tool(s) (default) · 196 verbose 1:1 tool(s). Each is enabled unless its `<DOMAIN>TOOL` toggle is set false; `MCP_TOOL_MODE` selects the surface (`condensed` default · `verbose` 1:1 · `both`). Auto-generated — do not edit._
 <!-- MCP-TOOLS-TABLE:END -->
 
 Detailed tool schemas, parameter shapes, and validation constraints are preserved in [docs/mcp.md](docs/mcp.md).
@@ -422,6 +428,7 @@ When query strings or parameters are supplied, an LLM-free **Knowledge Graph res
         "SNIPPETSTOOL": "True",
         "TAGSTOOL": "True",
         "USERSTOOL": "True",
+        "VULNERABILITIESTOOL": "True",
         "WIKITOOL": "True"
       }
     }
@@ -481,6 +488,7 @@ When query strings or parameters are supplied, an LLM-free **Knowledge Graph res
         "SNIPPETSTOOL": "True",
         "TAGSTOOL": "True",
         "USERSTOOL": "True",
+        "VULNERABILITIESTOOL": "True",
         "WIKITOOL": "True"
       }
     }
@@ -541,6 +549,7 @@ docker run -d \
   -e SNIPPETSTOOL=True \
   -e TAGSTOOL=True \
   -e USERSTOOL=True \
+  -e VULNERABILITIESTOOL=True \
   -e WIKITOOL=True \
   knucklessg1/gitlab-api:mcp
 ```
@@ -613,6 +622,7 @@ consumed from a **remote deployment**. The
 | `SNIPPETSTOOL` | `True` |  |
 | `TAGSTOOL` | `True` |  |
 | `USERSTOOL` | `True` |  |
+| `VULNERABILITIESTOOL` | `True` |  |
 | `WIKITOOL` | `True` |  |
 | `CUSTOM_APITOOL` | `True` |  |
 | `GRAPHQLTOOL` | `True` |  |
@@ -637,7 +647,7 @@ consumed from a **remote deployment**. The
 | `MODEL_ID` | `gpt-4o` | Model id for the agent |
 | `ENABLE_WEB_UI` | `True` | Serve the AG-UI web interface |
 
-_44 package + 14 inherited variable(s). Auto-generated from `.env.example` + the shared agent-utilities set — do not edit._
+_45 package + 14 inherited variable(s). Auto-generated from `.env.example` + the shared agent-utilities set — do not edit._
 <!-- ENV-VARS-TABLE:END -->
 
 

{gitlab_api-26.1.1 → gitlab_api-26.4.0}/README.md

@@ -20,7 +20,7 @@
 ![PyPI - Wheel](https://img.shields.io/pypi/wheel/gitlab-api)
 ![PyPI - Implementation](https://img.shields.io/pypi/implementation/gitlab-api)
 
-*Version: 26.1.1*
+*Version: 26.4.0*
 
 > **Documentation** — Installation, deployment, usage across the API, CLI, and MCP
 > interfaces, the integrated A2A agent server, and guidance for provisioning the
@@ -84,6 +84,7 @@ _Auto-generated from the live MCP server — do not edit by hand._
 | `gitlab_graphql` | `GRAPHQLTOOL` | Execute raw GraphQL queries and mutations natively on GitLab. |
 | `gitlab_graphql_ops` | `GRAPHQL_OPSTOOL` | Run a typed GitLab GraphQL operation by name. |
 | `gitlab_groups` | `GROUPSTOOL` | Manage gitlab groups operations. |
+| `gitlab_ingest_pipelines` | `MISCTOOL` | Natively ingest GitLab CI pipeline runs (+ jobs) into epistemic-graph. |
 | `gitlab_ingest_projects` | `MISCTOOL` | Natively ingest GitLab projects into epistemic-graph as typed :Project nodes. |
 | `gitlab_instances` | `MISCTOOL` | List the configured GitLab tenants (CONCEPT:AU-KG.backend.declared-columns-so-schema). |
 | `gitlab_issues` | `ISSUESTOOL` | Manage GitLab issues. |
@@ -105,12 +106,13 @@ _Auto-generated from the live MCP server — do not edit by hand._
 | `gitlab_snippets` | `SNIPPETSTOOL` | Manage GitLab snippets. |
 | `gitlab_tags` | `TAGSTOOL` | Manage gitlab tags operations. |
 | `gitlab_users` | `USERSTOOL` | Manage gitlab users operations. |
+| `gitlab_vulnerabilities` | `VULNERABILITIESTOOL` | Review a project's dependency list and security vulnerabilities (the GitLab counterpart to GitHub Dependabot). |
 | `gitlab_wiki` | `WIKITOOL` | Manage gitlab wiki operations. |
 
 #### Verbose 1:1 API-mapped tools (`MCP_TOOL_MODE=verbose` or `both`)
 
 <details>
-<summary>192 per-operation tools — one per public API method (click to expand)</summary>
+<summary>196 per-operation tools — one per public API method (click to expand)</summary>
 
 | MCP Tool | Toggle Env Var | Description |
 |----------|----------------|-------------|
@@ -204,6 +206,7 @@ _Auto-generated from the live MCP server — do not edit by hand._
 | `gitlab_get_group_releases` | `USERS_GROUPSTOOL` | Get information about releases in a group. |
 | `gitlab_get_group_runners` | `PIPELINESTOOL` | Get information about runners in a group. |
 | `gitlab_get_group_subgroups` | `USERS_GROUPSTOOL` | Get subgroups of a specific group. |
+| `gitlab_get_group_vulnerabilities` | `VULNERABILITIESTOOL` | Get a group's security vulnerability findings (Ultimate). |
 | `gitlab_get_groups` | `USERS_GROUPSTOOL` | Get a list of groups. |
 | `gitlab_get_issue` | `ISSUESTOOL` | Get a single issue. |
 | `gitlab_get_issues` | `ISSUESTOOL` | Get list of issues. Can filter by project_id. |
@@ -229,6 +232,7 @@ _Auto-generated from the live MCP server — do not edit by hand._
 | `gitlab_get_pipelines_triggered_from_schedule` | `PIPELINESTOOL` | Get pipelines triggered from a specific pipeline schedule. |
 | `gitlab_get_project` | `PROJECTSTOOL` | Get information about a specific project. |
 | `gitlab_get_project_contributors` | `PROJECTSTOOL` | Get information about contributors to a project. |
+| `gitlab_get_project_dependencies` | `VULNERABILITIESTOOL` | Get a project's Dependency List (all detected dependencies). |
 | `gitlab_get_project_deploy_token` | `PROJECTSTOOL` | Get a specific deploy token for a project. |
 | `gitlab_get_project_deploy_tokens` | `PROJECTSTOOL` | Get deploy tokens for a specific project. |
 | `gitlab_get_project_groups` | `PROJECTSTOOL` | Get groups associated with a specific project. |
@@ -243,6 +247,7 @@ _Auto-generated from the live MCP server — do not edit by hand._
 | `gitlab_get_project_merge_requests` | `PROJECTSTOOL` | Get merge requests for a specific project. |
 | `gitlab_get_project_runners` | `PROJECTSTOOL` | Get information about runners in a project. |
 | `gitlab_get_project_statistics` | `PROJECTSTOOL` | Get statistics for a specific project. |
+| `gitlab_get_project_vulnerabilities` | `VULNERABILITIESTOOL` | Get a project's security vulnerabilities (Ultimate). |
 | `gitlab_get_projects` | `PROJECTSTOOL` | Get information about projects. |
 | `gitlab_get_protected_branch` | `REPOSITORIESTOOL` | Get information about a specific protected branch in a project. |
 | `gitlab_get_protected_branches` | `REPOSITORIESTOOL` | Get information about protected branches in a project. |
@@ -262,6 +267,7 @@ _Auto-generated from the live MCP server — do not edit by hand._
 | `gitlab_get_tags` | `REPOSITORIESTOOL` | Get information about tags in a project. |
 | `gitlab_get_user` | `USERS_GROUPSTOOL` | Get information about a specific user. |
 | `gitlab_get_users` | `USERS_GROUPSTOOL` | Get information about users. |
+| `gitlab_get_vulnerability` | `VULNERABILITIESTOOL` | Get a single vulnerability by its global ID (Ultimate). |
 | `gitlab_get_wiki_list` | `OTHERTOOL` | Get a list of wiki pages for a project. |
 | `gitlab_get_wiki_page` | `OTHERTOOL` | Get information about a specific wiki page. |
 | `gitlab_merge_request_level_approvals` | `MERGE_REQUESTSTOOL` | Get approvals for a specific merge request. |
@@ -309,7 +315,7 @@ _Auto-generated from the live MCP server — do not edit by hand._
 
 </details>
 
-_32 action-routed tool(s) (default) · 192 verbose 1:1 tool(s). Each is enabled unless its `<DOMAIN>TOOL` toggle is set false; `MCP_TOOL_MODE` selects the surface (`condensed` default · `verbose` 1:1 · `both`). Auto-generated — do not edit._
+_34 action-routed tool(s) (default) · 196 verbose 1:1 tool(s). Each is enabled unless its `<DOMAIN>TOOL` toggle is set false; `MCP_TOOL_MODE` selects the surface (`condensed` default · `verbose` 1:1 · `both`). Auto-generated — do not edit._
 <!-- MCP-TOOLS-TABLE:END -->
 
 Detailed tool schemas, parameter shapes, and validation constraints are preserved in [docs/mcp.md](docs/mcp.md).
@@ -390,6 +396,7 @@ When query strings or parameters are supplied, an LLM-free **Knowledge Graph res
         "SNIPPETSTOOL": "True",
         "TAGSTOOL": "True",
         "USERSTOOL": "True",
+        "VULNERABILITIESTOOL": "True",
         "WIKITOOL": "True"
       }
     }
@@ -449,6 +456,7 @@ When query strings or parameters are supplied, an LLM-free **Knowledge Graph res
         "SNIPPETSTOOL": "True",
         "TAGSTOOL": "True",
         "USERSTOOL": "True",
+        "VULNERABILITIESTOOL": "True",
         "WIKITOOL": "True"
       }
     }
@@ -509,6 +517,7 @@ docker run -d \
   -e SNIPPETSTOOL=True \
   -e TAGSTOOL=True \
   -e USERSTOOL=True \
+  -e VULNERABILITIESTOOL=True \
   -e WIKITOOL=True \
   knucklessg1/gitlab-api:mcp
 ```
@@ -581,6 +590,7 @@ consumed from a **remote deployment**. The
 | `SNIPPETSTOOL` | `True` |  |
 | `TAGSTOOL` | `True` |  |
 | `USERSTOOL` | `True` |  |
+| `VULNERABILITIESTOOL` | `True` |  |
 | `WIKITOOL` | `True` |  |
 | `CUSTOM_APITOOL` | `True` |  |
 | `GRAPHQLTOOL` | `True` |  |
@@ -605,7 +615,7 @@ consumed from a **remote deployment**. The
 | `MODEL_ID` | `gpt-4o` | Model id for the agent |
 | `ENABLE_WEB_UI` | `True` | Serve the AG-UI web interface |
 
-_44 package + 14 inherited variable(s). Auto-generated from `.env.example` + the shared agent-utilities set — do not edit._
+_45 package + 14 inherited variable(s). Auto-generated from `.env.example` + the shared agent-utilities set — do not edit._
 <!-- ENV-VARS-TABLE:END -->
 
 

{gitlab_api-26.1.1 → gitlab_api-26.4.0}/gitlab_api/agent_server.py

@@ -4,7 +4,7 @@ import os
 import sys
 import warnings
 
-__version__ = "26.1.1"
+__version__ = "26.4.0"
 
 logging.basicConfig(
     level=logging.INFO,

gitlab_api-26.4.0/gitlab_api/api/api_client_vulnerabilities.py

@@ -0,0 +1,168 @@
+#!/usr/bin/python
+
+from typing import TypeVar
+
+import requests
+from agent_utilities.base_utilities import get_logger
+from pydantic import ValidationError
+
+logger = get_logger(__name__)
+
+from agent_utilities.core.exceptions import (
+    MissingParameterError,
+    ParameterError,
+)
+
+from gitlab_api.gitlab_input_models import (
+    VulnerabilityModel,
+)
+from gitlab_api.gitlab_response_models import (
+    Response,
+)
+
+T = TypeVar("T")
+
+from gitlab_api.api.api_client_base import GitLabApiBase
+
+
+class GitLabApiVulnerabilities(GitLabApiBase):
+    """Dependency list + security vulnerability surface — the GitLab counterpart
+    to GitHub's Dependabot (Dependency List, Vulnerabilities, and findings APIs)."""
+
+    def get_project_dependencies(self, **kwargs) -> Response:
+        """
+        Get a project's Dependency List (all detected dependencies).
+
+        GET /projects/{project_id}/dependencies
+
+        Args:
+            **kwargs: project_id (required); optional package_manager filter and
+                pagination (page, per_page, max_pages).
+
+        Returns:
+            Response: wrapper containing the original response and the parsed
+                dependency list (list of dicts).
+
+        Raises:
+            MissingParameterError: If project_id is missing.
+            ParameterError: If invalid parameters are provided.
+        """
+        vulnerability = VulnerabilityModel(**kwargs)
+        if vulnerability.project_id is None:
+            raise MissingParameterError("project_id is required")
+        try:
+            response, data = self._fetch_all_pages(
+                endpoint=f"/projects/{vulnerability.project_id}/dependencies",
+                model=vulnerability,
+                id_field="project_id",
+                id_value=vulnerability.project_id,
+            )
+            return Response(response=response, data=data)
+        except ValidationError as e:
+            raise ParameterError(f"Invalid parameters: {e.errors()}") from e
+        except requests.RequestException as e:
+            raise ParameterError(f"Failed to get project dependencies: {str(e)}") from e
+
+    def get_project_vulnerabilities(self, **kwargs) -> Response:
+        """
+        Get a project's security vulnerabilities (Ultimate).
+
+        GET /projects/{project_id}/vulnerabilities
+
+        Args:
+            **kwargs: project_id (required); optional pagination.
+
+        Returns:
+            Response: wrapper containing the original response and the parsed
+                vulnerabilities (list of dicts).
+
+        Raises:
+            MissingParameterError: If project_id is missing.
+            ParameterError: If invalid parameters are provided.
+        """
+        vulnerability = VulnerabilityModel(**kwargs)
+        if vulnerability.project_id is None:
+            raise MissingParameterError("project_id is required")
+        try:
+            response, data = self._fetch_all_pages(
+                endpoint=f"/projects/{vulnerability.project_id}/vulnerabilities",
+                model=vulnerability,
+                id_field="project_id",
+                id_value=vulnerability.project_id,
+            )
+            return Response(response=response, data=data)
+        except ValidationError as e:
+            raise ParameterError(f"Invalid parameters: {e.errors()}") from e
+        except requests.RequestException as e:
+            raise ParameterError(
+                f"Failed to get project vulnerabilities: {str(e)}"
+            ) from e
+
+    def get_group_vulnerabilities(self, **kwargs) -> Response:
+        """
+        Get a group's security vulnerability findings (Ultimate).
+
+        GET /groups/{group_id}/vulnerability_findings
+
+        Args:
+            **kwargs: group_id (required); optional pagination.
+
+        Returns:
+            Response: wrapper containing the original response and the parsed
+                vulnerability findings (list of dicts).
+
+        Raises:
+            MissingParameterError: If group_id is missing.
+            ParameterError: If invalid parameters are provided.
+        """
+        vulnerability = VulnerabilityModel(**kwargs)
+        if vulnerability.group_id is None:
+            raise MissingParameterError("group_id is required")
+        try:
+            response, data = self._fetch_all_pages(
+                endpoint=f"/groups/{vulnerability.group_id}/vulnerability_findings",
+                model=vulnerability,
+                id_field="group_id",
+                id_value=vulnerability.group_id,
+            )
+            return Response(response=response, data=data)
+        except ValidationError as e:
+            raise ParameterError(f"Invalid parameters: {e.errors()}") from e
+        except requests.RequestException as e:
+            raise ParameterError(
+                f"Failed to get group vulnerabilities: {str(e)}"
+            ) from e
+
+    def get_vulnerability(self, **kwargs) -> Response:
+        """
+        Get a single vulnerability by its global ID (Ultimate).
+
+        GET /vulnerabilities/{vulnerability_id}
+
+        Args:
+            **kwargs: vulnerability_id (required).
+
+        Returns:
+            Response: wrapper containing the original response and the parsed
+                vulnerability (dict).
+
+        Raises:
+            MissingParameterError: If vulnerability_id is missing.
+            ParameterError: If invalid parameters are provided.
+        """
+        vulnerability = VulnerabilityModel(**kwargs)
+        if vulnerability.vulnerability_id is None:
+            raise MissingParameterError("vulnerability_id is required")
+        try:
+            response = self._session.get(
+                url=f"{self.url}/vulnerabilities/{vulnerability.vulnerability_id}",
+                headers=self.headers,
+                verify=self.verify,
+                proxies=self.proxies,
+            )
+            response.raise_for_status()
+            return Response(response=response, data=response.json())
+        except ValidationError as e:
+            raise ParameterError(f"Invalid parameters: {e.errors()}") from e
+        except requests.RequestException as e:
+            raise ParameterError(f"Failed to get vulnerability: {str(e)}") from e

{gitlab_api-26.1.1 → gitlab_api-26.4.0}/gitlab_api/api_client.py

@@ -18,6 +18,7 @@ from gitlab_api.api.api_client_projects import GitLabApiProjects
 from gitlab_api.api.api_client_repositories import GitLabApiRepositories
 from gitlab_api.api.api_client_system import GitLabApiSystem
 from gitlab_api.api.api_client_users_groups import GitLabApiUsersGroups
+from gitlab_api.api.api_client_vulnerabilities import GitLabApiVulnerabilities
 
 
 class Api(
@@ -29,6 +30,7 @@ class Api(
     GitLabApiPipelines,
     GitLabApiUsersGroups,
     GitLabApiEnvironments,
+    GitLabApiVulnerabilities,
     GitLabApiOther,
 ):
     __slots__ = ()

{gitlab_api-26.1.1 → gitlab_api-26.4.0}/gitlab_api/gitlab_input_models.py

@@ -3442,6 +3442,69 @@ class NoteModel(BaseModel):
         return values
 
 
+class VulnerabilityModel(BaseModel):
+    """
+    Pydantic model for the dependency list / security vulnerability surface
+    (the GitLab counterpart to GitHub Dependabot).
+
+    Attributes:
+    - project_id (int | str): Project ID or full path (dependencies / project vulnerabilities).
+    - group_id (int | str): Group ID or full path (group vulnerability findings).
+    - vulnerability_id (int | str): ID of a single vulnerability (global endpoint).
+    - package_manager (str): Optional Dependency List filter (e.g. 'bundler', 'npm').
+    """
+
+    project_id: int | str | None = Field(
+        default=None, description="Project ID or full path"
+    )
+    group_id: int | str | None = Field(
+        default=None, description="Group ID or full path"
+    )
+    vulnerability_id: int | str | None = Field(
+        default=None, description="ID of a single vulnerability"
+    )
+    package_manager: str | None = Field(
+        default=None,
+        description="Dependency List filter by package manager (e.g. 'npm', 'bundler')",
+    )
+    max_pages: int | None = Field(description="Maximum pages to return", default=None)
+    per_page: int | None = Field(description="Results per page", default=None)
+    page: int | None = Field(description="Pagination page", default=None)
+    api_parameters: dict | None = Field(description="API Parameters", default=None)
+    data: dict | None = Field(description="Data Payload", default=None)
+
+    def model_post_init(self, _context):
+        self.api_parameters = {}
+        if self.package_manager:
+            self.api_parameters["package_manager"] = self.package_manager
+        if self.page:
+            self.api_parameters["page"] = self.page
+        if self.per_page:
+            self.api_parameters["per_page"] = self.per_page
+
+    @field_validator("project_id")
+    def validate_project_id(cls, v):
+        if v is None:
+            return v
+        if not str(v).strip():
+            raise ValueError("Project ID or path cannot be empty")
+        return str(v).strip("'\"")
+
+    @field_validator("group_id")
+    def validate_group_id(cls, v):
+        if v is None:
+            return v
+        if not str(v).strip():
+            raise ValueError("Group ID or path cannot be empty")
+        return str(v).strip("'\"")
+
+    @field_validator("vulnerability_id")
+    def validate_vulnerability_id(cls, v):
+        if v is None:
+            return v
+        return str(v).strip("'\"")
+
+
 class EpicModel(BaseModel):
     group_id: int | str | None = Field(
         default=None, description="Group ID or full path"