GitLab opens Dependency Firewall early access and adds AI spending caps

GitLab announced early access to Dependency Firewall, which lets software teams block, quarantine, or flag packages using rules for package age, vulnerability severity, malicious package detection, and license compliance. It enforces those rules on existing registries and works with GitLab Artifact Central, JFrog Artifactory, and Sonatype Nexus Repository. GitLab also announced credit and usage controls that cap AI spending at the subscription, group, or user level. Alerts trigger at 50%, 80%, and 100% of spending, with an automatic pause when the selected cap is reached. Dependency Firewall remains in early access.