GitLab Contributor Work Queue (gitlab-org/gitlab)

Data fetched: 2026-11-08. Only issues that had no assignee at fetch time. Three pages of quick win issues were read and a fourth was not, so the list isn't exhaustive.

Rules for the agent (read first)

  1. Re-check each issue before starting. Skip it if it is now assigned, closed, confidential, or labelled security.
  2. If the issue isn't clearly open to contributions, comment that you'd like to work on it and wait for a maintainer to respond.
  3. Read AGENTS.md and the relevant files in .ai/ before editing. In doc/, workhorse/ and other subdirectories, read that directory's AGENTS.md too.
  4. Make the smallest change that fixes the root cause. No refactors or unrelated cleanups.
  5. Comments in code: 1-3 lines, only when the "why" is non-obvious.
  6. Add or update specs and run the related specs locally.
  7. One issue = one branch = one MR. Link the issue by full URL in the MR description.
  8. Open MRs as Draft with [skip ci] in the title. Remove it only when ready for CI.
  9. Stop and ask me if the issue needs a product, design, or database-review decision.
  10. Never push without me reviewing the diff first.

Progress key

[ ] not started, [~] in progress, [x] MR opened, [-] skipped (reason)

Tier 1: Removals and cleanups (start here)

  • [ ] #635198 Remove stale quarantine from vue3_rollout_spec.rb
  • [ ] #634569 Clear the Fog connection cache in stub_object_storage_uploader
  • [ ] #633765 Clean up RubyGems spec files marked pending_destruction
  • [ ] #637388 Remove Notifications::TargetedMessages::DestroyWorker (labelled workflow::refinement, confirm it's ready)
  • [ ] #634447 Delete Bitbucket Cloud issue import workers (milestone 19.8)
  • [ ] #634446 Remove queued Bitbucket Cloud issue import jobs (milestone 19.7)
  • [ ] #636820 Move Projects::AutoDevops::DisableService to the Ci bounded context
  • [ ] #636678 Move duo_settings_path out of EE::Group
  • [ ] #636676 Move AI Catalog availability methods out of omniscient classes
  • [ ] #635243 Follow-up: clean up Secrets Manager variables CTA helper and specs

Tier 2: Backend bugs and performance

  • [ ] #638990 Observability service name derived incorrectly for self-hosted URLs
  • [ ] #638818 Preload iteration cadence in project iteration autocomplete (N+1)
  • [ ] #638764 Keep auto-remediation titles within 72 characters
  • [ ] #638385 MCP route-backed tool calls write two api_json lines with wrong HTTP method
  • [ ] #637972 Log approval policy rule creation failures above debug level
  • [ ] #637874 Offline transfer: preload snippet repositories in SnippetsRepositoryPipeline
  • [ ] #637860 Cascading settings writer marks non-boolean settings as changed
  • [ ] #637728 Validate comment length in vulnerability state transition mutations
  • [ ] #637095 Organizations activity feed ignores the organization param
  • [ ] #635535 N+1 authorizing subgroups in GraphQL group labels
  • [ ] #633930 Optimize group count query to select only IDs
  • [ ] #634028 Container virtual registry caches a failed upstream token

Tier 3: Frontend and UI

  • [ ] #638882 removeListenerSystemColorSchemeChange doesn't remove listeners
  • [ ] #638901 Follow-up: Vulnerability Context Flow last run (UI polish)
  • [ ] #638326 Direct transfer import details show wrong or raw labels
  • [ ] #637714 Add localized titles for remaining GitLab Credits flow types
  • [ ] #637320 FOSS jest-build-cache fails on EE import in iteration.query.graphql
  • [ ] #636671 Page title still says "Automate" on AI pages
  • [ ] #634272 Duo Chat hides switch to classic Chat when usage billing is unavailable

Tier 4: Docs-only

  • [ ] #636025 Document the security context filters on the vulnerability report (milestone 19.7)
  • [ ] #635599 Document opting out of expiring tokens for the GitHub import OAuth app
  • [ ] #633728 Value stream analytics docs: state it's available only for groups
  • [ ] #509818 Assess curl commands on API pages
  • [ ] #479161 Update alt text for images

Tier 5: Test and tooling gaps

  • [ ] #632430 Add missing test coverage for lib/gitlab/git/commit.rb
  • [ ] #634195 Fix fast_spec_helper spec failing in isolation: gitaly_client_slis
  • [ ] #636388 Fix flaky "Add seats" before hook in usage quotas seats spec
  • [ ] #632924 Licensed/unlicensed spec coverage for group protected branches
  • [ ] #637215 Tier 2 undercoverage check misses system-full child pipeline coverage

Needs a human decision first (agent must not start these)

Suggested order

  1. Week 1: pick 3-5 from Tier 1 and Tier 4. This shows your real cycle time.
  2. Then add Tier 5 and Tier 2 one at a time.
  3. Do Tier 3 once your frontend specs and Jest run locally.

Per-issue checklist

  • [ ] Still open and unassigned
  • [ ] Not confidential or security
  • [ ] Branch created from master
  • [ ] Minimal change, specs added or updated
  • [ ] Specs pass locally
  • [ ] Draft MR opened with [skip ci] in the title
  • [ ] I reviewed the diff
  • [ ] [skip ci] removed and pipeline started when ready