Subsequent commits are appended to existing open merge requests
If you create and push a commit to a branch other than master in the repository, you're offered the option to create a merge request. On doing so, that commit is included in the merge request as you would expect. However, if you push an additional commit to the repository before the merge request has been accepted, the additional commit is also merged if the merge request gets accepted.
I appreciate cherry picking commits might not be possible, so I would expect alternative behaviour in that original merge request is invalidated/closed automatically by the subsequent push. Otherwise, changes not intended for integration could be integrated accidentally.
There is also another bug related to this, in that when the original merge request is accepted and both commits are merged, you are offered the "Create merge request" button on the dashboard, in order to create a merge request for the second commit. However, because it already got merged, you get the branches are identical message when you try to create the merge request. And thus, because you can't create the merge request, you can't dismiss the "Create merge request" button on the dashboard and it will persist until you next have commits available for merging.