Reduce supply chain risk with SBOM-based dependency scanning

GitLab 19.0 makes SBOM-based dependency scanning generally available: it inventories direct and transitive dependencies, traces vulnerable package origins, and ranks findings by real-world exposure.