In the GitLab API, the call to create a commit leaves open the possibility of race conditions. Ideally, it should accept a sha hash for the commit your changes are intended to build upon, and if that hash does not match the tip of the branch, it should return an error.