Which repo are you getting your GitLab .deb packages from?

Also, Debian/Ubuntu OS security updates happen a lot more often than once a month. I suggest just using unattended-upgrades, it can even auto-reboot at a convenient time of the day after Linux kernel security updates.