Security upgrades not marked as such in yum packages.
In the admin interface today's update is marked as a security update (update ASAP). So I ran
--> gitlab-ce-12.2.4-ce.0.el7.x86_64 from @gitlab_gitlab-ce removed (updateinfo)
--> gitlab-ce-12.2.5-ce.0.el7.x86_64 from gitlab_gitlab-ce removed (updateinfo)
No packages needed for security; 1 packages available
Resolving Dependencies
and noticed the update is not marked as a security update, just as a normal update.
Please mark security updates as such so the package management system can treat them as such. This is required for automated updates with yum-cron.