Release notes are available and communicated to internal and external system users through release posts.
Major changes to the GitLab product are rolled out in the form of a new product version, or release. As part of this process, release notes are created and posted to the GitLab Release Blog. This is a public blog that is available to all internal and external users.
This control is applicable to ALL GitLab releases - full version releases, patches, critical security releases, etc. so that changes to the GitLab product and it's features are transparently communicated to all GitLab Team Members.
All release posts should follow the GitLab Release Posts process documented in the handbook. Typically, release posts are created by a Product Manager and Marketing is responsible for ensuring that the post makes it to the GitLab Release Blog.
Non-public information relating to this security control as well as links to the work associated with various phases of project work can be found in the Release notes control issue.