If they switched to using the official Gitlab containers, then it's just a case of upgrading to a new version number when Gitlab sends a security email (about once a fortnight or so).