2026-11-12 00:00
π Many teams utilize Jira for planning and GitLab for shipping. A new tutorial introduces a way to streamline this process using the GitLab Duo Agent Platform. By adding a Jira agent to Duo Agentic Chat, teams can find, create, and update tickets without switching platforms. π Simply use the /goal command to hand off tickets to Developer Flow for automatic merge request creation. To get started, ensure you have GitLab Premium or Ultimate, and follow the setup steps outlined in the tutorial. π...
Source: GitLab Blog
Itzik Gan Baruch
2026-11-11 00:00
π Discover how to prevent leaks from Claude Code's file on GitLab! This guide explains steps to find and remove secrets that were unintentionally committed. Key measures include updating .gitignore and implementing push rules to block sensitive files. For developers, itβs crucial to assess and clean affected projects to safeguard sensitive information. π»π #GitLab #CyberSecurity #ClaudeCode #DataProtection #DevOps
Source: GitLab Blog
Daniel Abeles
2026-11-09 00:00
Agentic AI is transforming technology evaluations by enabling systems to make decisions and execute actions autonomously. To design a decision-grade pilot, start with a clear decision that defines the workflow, users, autonomy levels, and success criteria. Evaluate the agentβs ability to complete tasks effectively and reliably, rather than just its output. It's crucial to define the proposed autonomy levels and measure overall workflow success, ensuring controls and risks are addressed. This...
Source: GitLab Blog
Nina Sesti
2026-11-06 00:00
π¨ The Department of War's new guidance, DoW Instruction 8430.01, treats AI-generated code as unverified until proven otherwise. Effective from September 8, 2026, this instruction mandates that AI-written code undergoes the same rigorous review as human-written code. Key requirements include: 1οΈβ£ **Traceability**: Documenting AI's involvement in the code. 2οΈβ£ **Verification**: Ensuring human oversight for security-critical changes. 3οΈβ£ **Data Boundaries**: Protecting sensitive information...
Source: GitLab Blog
Elisabeth Burrows
2026-11-02 00:00
Sovereignty is becoming a key factor in software procurement, especially with the European Commissionβs proposed Cloud and AI Development Act (CADA) on the horizon. This act aims to establish guidelines on data location and access for cloud and AI services. π GitLab emphasizes the importance of customer control, portability, and risk management in this evolving landscape. They suggest ten crucial questions to ask any software vendor to ensure they prioritize sovereignty. π‘οΈ Key questions...
Source: GitLab Blog
Bryan Ross
2026-10-29 00:00
π GitLab Orbit is now generally available! This new context graph enhances agent accuracy by providing a live, queryable view of code, merge requests, and pipelines. It reduces unnecessary retries, allowing agents to use up to 4.5x fewer tokens during tasks. Comparative testing showed that agents connected to Orbit performed significantly better, understanding codebases more effectively. Learn more about how GitLab Orbit can improve your software lifecycle management! #GitLab #AI...
Source: GitLab Blog
Gabriel Engel
2026-10-29 00:00
π GitLab has launched Orbit, a tool designed to streamline vulnerability management. π Orbit consolidates code, pipelines, and security findings into one graph, allowing teams to quickly identify affected projects and their owners with a single query. This reduces the time spent manually piecing together information. π The recent PHP2Shell vulnerabilities highlight the challenge of tracking down affected installations. Orbit provides a comprehensive view, ensuring teams understand their...
Source: GitLab Blog
Rebecca Carter
2026-10-28 00:00
π‘οΈ We're entering a new era of application security as AI models expose complex flaws faster than traditional tools can address them. Verizon's 2026 DBIR shows the median time to remediate vulnerabilities has increased to 43 days. Security teams face mounting pressures from growing application portfolios and new threats. To adapt, GitLab is integrating autonomous agents like Anthropic's Claude Mythos 5.1 into workflows, enhancing vulnerability discovery and remediation processes. This shift...
Source: GitLab Blog
Bill Staples
2026-10-27 00:00
π GitLab Duo Agent Platform enhances DevSecOps by integrating with business systems like Salesforce. When errors occur, the platform automatically analyzes the code and generates a GitLab issue with root-cause insights. This streamlines issue tracking and fixes, reducing downtime for users. Learn how to create custom flows to improve your team's efficiency! #DevSecOps #GitLab #Salesforce #Automation #ErrorHandling
Source: GitLab Blog
Harshit Bhandari
2026-10-26 00:00
π¨ GitLab products are safe from CVE-2026-112900, a critical vulnerability in the Pillow library. The latest Pillow version 13.0.0 addresses this issue, which affects versions from 2.6.0 to 12.x. π§ Users are advised to upgrade to version 13.0.0 to mitigate risks, especially when handling untrusted images. π GitLab's tools can help locate affected projects and facilitate remediation at scale. #Cybersecurity #Pillow #GitLab #Vulnerability #SoftwareUpdate
Source: GitLab Blog
Daniel Abeles
2026-10-22 00:00
π¨ GitLab confirms it is not affected by the PHP2Shell vulnerabilities (CVE-2026-109618 & CVE-2026-109619). The application does not use PHP to serve web requests, ensuring no impact on GitLab-managed infrastructure. π The PHP project has released fixes for critical remote code execution flaws. All web servers running PHP, including NGINX and Apache, should upgrade to fixed versions immediately. π A guide is available for teams to locate PHP projects in GitLab and track remediation efforts...
Source: GitLab Blog
Dinesh Bolkensteyn
2026-10-21 00:00
π¨ GitLab has announced a critical patch release for multiple versions, including 19.5.1, 19.4.3, and older versions down to 18.11.13. This update addresses important security vulnerabilities, underscoring the need for users to upgrade to the latest versions for enhanced protection. Stay secure and keep your systems updated! ππ‘οΈ #GitLab #Cybersecurity #SoftwareUpdate #TechNews
Source: GitLab Blog
2026-10-20 00:00
π AI coding agents are transforming how we write and modify code. However, tracking their activities can be challenging. The new AI Governance Dashboard, currently in beta, provides a centralized view of agent activity, showing which agents were used and by whom. This tool helps ensure accountability and compliance. πΌ With detailed audit trails, you can easily monitor AI actions, aiding in risk management and audits. Set up the dashboard today to enhance oversight of AI usage in your...
Source: GitLab Blog
Alisa Ho
2026-10-20 00:00
AI agents are transforming software development, speeding up coding but creating new challenges in review processes. The AI-Native Engineering Playbook offers strategies to enhance software delivery by identifying bottlenecks and managing agent autonomy. Key insights come from industry leaders and research, highlighting that while coding efficiency has improved, overall delivery timelines remain lengthy. Explore how to streamline your engineering processes to adapt to the AI era. ππ»ππ€...
Source: GitLab Blog
Chandler Gibbons
2026-10-20 00:00
π Broken object-level authorization is a top concern in the OWASP API Security Top 10. Traditional SAST tools often miss these access control flaws due to missing authorization checks. π GitLab is introducing the Business Logic Security Analyzer, now in early access for Ultimate customers. This tool scans entire repositories to identify vulnerabilities that pattern-based scanners overlook. π As codebases grow, the need for robust security solutions increases. The analyzer aims to bridge this...
Source: GitLab Blog
Chris Widstrom
2026-10-19 00:00
GitLab CEO Bill Staples emphasizes the growing importance of trust in AI software production. As AI reduces development costs, the need for robust verification and governance increases. To address this, GitLab joins the Open Secure AI Alliance, focusing on developing open technologies to enhance software security. Their AI Gateway promotes transparency and collaboration among defenders. GitLab advocates for model choice and flexibility, ensuring organizations can secure their AI systems...
Source: GitLab Blog
Chaim Mazal
2026-10-19 00:00
π GitLab introduces the Duo Agent Platform, enhancing your coding experience! This AI tool assists with code reviews, pipeline fixes, and project inquiries. It provides context by considering merge requests, issues, and pipelines that your editor might miss. 1οΈβ£ **Code Review Flow**: Assign @GitLabDuo for initial review comments. 2οΈβ£ **Fix CI/CD Pipeline Flow**: Investigate and suggest fixes for failed pipelines. 3οΈβ£ **Agentic Chat**: Get quick answers about project changes. Best of all, you...
Source: GitLab Blog
Julie Griffin
2026-10-15 00:00
π The GitLab MCP server is now available with version 19.5, connecting your team's agents to the entire software lifecycle. This service allows MCP-compatible agents to run GitLab workflows seamlessly, reducing the number of calls needed and minimizing context bloat. Agents can now handle tasks across code, merge requests, and pipelines while adhering to existing GitLab permissions. New tools have been added, including features for code management and pipeline analysis, making it easier for...
Source: GitLab Blog
Brittany Lutz
2026-10-15 00:00
π GitLab's new **Recommend Reviewers Flow** aims to streamline the code review process. With code changes increasing significantly, finding the right reviewer has become crucial. This feature identifies the best reviewer based on expertise, workload, and availability, reducing the time to get feedback. Automated reviews can cut costs by 99%, allowing teams to focus on quality and efficiency. Learn more about this innovative solution in GitLab 19.5! #GitLab #CodeReview #SoftwareDevelopment...
Source: GitLab Blog
Rebecca Carter
2026-10-15 00:00
π GitLab has officially released version 19.5! This update introduces several new features aimed at enhancing user experience and productivity. Key improvements include better integration options and enhanced CI/CD capabilities. Additionally, various security enhancements have been implemented to ensure user data protection. Discover all the details and updates in this release! #GitLab #SoftwareUpdate #DevOps #CI/CD #TechNews
Source: GitLab Blog
2026-10-15 00:00
π GitLab Secrets Manager is now available in GitLab 19.5 for Premium and Ultimate users. It enhances credential security by managing secrets without a separate permission model. With this tool, developers can self-serve secrets while maintaining tight controls over access, directly tied to their project context. β¨ Secrets are scoped to specific jobs, reducing exposure risks and ensuring safety in CI/CD pipelines. Plus, built-in encryption protects secrets at rest. Learn more about improving...
Source: GitLab Blog
Mark Settle
2026-10-15 00:00
AI agents are transforming code production, but review queues are lagging, causing delays. Traditional workarounds can lead to burnout. GitLab's Code Review Flow addresses these challenges by automating reviews directly in the merge request process, ensuring each change meets set policies efficiently and cost-effectively. With a low cost of $0.25 per review, teams can maintain high standards without manual requests. This integration promotes streamlined delivery while adhering to compliance...
Source: GitLab Blog
Stuart Moncada
2026-10-14 00:00
π Introducing Gemini 4 Argon on GitLab Duo Agent Platform! This new model is designed for long, multi-step tasks, allowing teams to delegate with confidence. During evaluations, Argon completed 93.3% of benchmark tasks, showing its reliability across the software lifecycle. With features like error handling and control over complex decisions, Argon is a strong choice for projects where accuracy matters. Try it now at a promotional rate! #GitLab #AI #Gemini4 #SoftwareDevelopment #Innovation
Source: GitLab Blog
Brittany Lutz
2026-10-13 00:00
π GitLab has introduced new agent orchestration capabilities in the Duo Agent Platform to streamline software delivery. These features, like goal-driven flows, automate processes from review to approvals, minimizing delays caused by manual handoffs. π¬ GitLab for Slack allows teams to initiate tasks directly from conversations, enhancing collaboration. Custom Flows can be tailored to fit existing workflows, running under the same governance as other GitLab processes. Learn more about these...
Source: GitLab Blog
Elisabeth Burrows
2026-10-13 00:00
π Managing AI costs effectively is crucial as each task consumes tokens and credits. GitLab's new governed software factory and Duo Agent Platform offer tools to control this growth. With open-weight models, teams can match tasks to lower-cost models, reducing unnecessary retries and optimizing spend. Impact Analytics provides insights on credit usage by user and team, allowing for better resource management. Explore how to cap usage and improve efficiency! #AI #CostManagement #GitLab...
Source: GitLab Blog
Allie Holland
2026-10-13 00:00
AI agents are transforming software development, increasing the volume of code changes significantly. GitLab is responding with next-gen source code management (SCM) to support thousands of concurrent agents working with large repositories. Anthropic's recent experience highlights this need, as daily merges surged from 2,500 to over 30,000 in just a few months. Their solution, Scion, is customized for large monorepos but not a replacement for Git. GitLab's next-gen SCM maintains Git...
Source: GitLab Blog
Bill Staples
2026-10-12 00:00
π¨ GitLab has announced critical patch releases for versions 19.4.2, 19.3.4, and 19.2.8. These updates address important security vulnerabilities to enhance platform safety and stability. Users are encouraged to update to the latest versions promptly. Stay secure and keep your projects protected! ππ» #GitLab #CyberSecurity #SoftwareUpdate #TechNews
Source: GitLab Blog
2026-10-08 00:00
π GitLab 19.4 introduces a new organization-wide security dashboard, streamlining risk management for teams across multiple groups. This feature replaces manual data assembly with a consolidated view of vulnerabilities, allowing teams to focus on remediation. π The dashboard provides a risk score based on severity, age of vulnerabilities, and relevant threat lists. It enables security leaders to prioritize areas most at risk and track trends over time. π Additionally, it integrates findings...
Source: GitLab Blog
Alisa Ho
2026-10-06 00:00
π¨ Introducing GitLab Dependency Firewall! π¨ This new tool helps block malicious, vulnerable, and non-compliant packages before they reach your builds. With AI coding agents pulling in dependencies, the risk of unreviewed packages increases. The Firewall allows you to set policies for package status, vulnerability severity, license types, and age, ensuring only safe packages make it into your builds. Get early access to streamline your security and governance! π #GitLab #DependencyFirewall...
Source: GitLab Blog
Amit Shalem
2026-10-06 00:00
π GitLab has launched Artifact Central in beta for GitLab.com users! This new organization-level registry simplifies artifact management by consolidating storage and access across projects. With Artifact Central, teams can set policies once at the organization level, ensuring consistency. Developers benefit from a single URL for all artifact types, whether hosted or remote. Every artifact published carries automatic build provenance, making traceability easier. This feature is designed to...
Source: GitLab Blog
Corinne Dent
2026-10-06 00:00
π GitLab's Transcend event unveiled significant updates across four key areas: agent orchestration, data, DevOps workflows, and security. Key features include: - **Goal-driven flows** for seamless change management. - **Custom Flows** to align with team processes. - **GitLab for Slack** for integrated workflows. - **MCP Server** for secure AI tool connections. Explore new capabilities like GitLab Artifact Central and the Dependency Firewall to enhance your software development process....
Source: GitLab Blog
Manav Khurana
2026-10-05 00:00
πͺ GitLab's engineering team recently tackled authorization challenges in their internal GRC tool, which serves both the Security Compliance and Internal Audit teams. The original setup only checked if users were logged in, leading to significant security gaps. The team restructured the app, creating independent modules for each audience while maintaining a core with shared functionalities. π Access control now relies on Django's built-in auth system, ensuring that users can only access data...
Source: GitLab Blog
Donovan Felton
2026-10-02 00:00
π¨ GitLab's Threat Research Group has identified a critical command execution vulnerability in DeepSeek-Reasonix Studio. This flaw, known as ConfigPoisoning, may allow malicious code execution when developers view file diffs. To mitigate this risk, users are advised to update to DeepSeek-Reasonix Studio 2.21.0 or DeepSeek Reasonix npm 1.39.3. π οΈ It's important to note that this vulnerability affects multiple coding agents, highlighting a broader security concern in AI-assisted development...
Source: GitLab Blog
Daniel Abeles
2026-09-29 00:00
Government agencies are under pressure to adopt AI quickly while ensuring compliance. The U.S. OMB urges faster deployment, while the GAO emphasizes the need for safeguards. To address these challenges, agencies are leveraging AI coding assistants like Claude Code alongside GitLab Duo Agent Platform, which governs the software development lifecycle. This integration provides a comprehensive audit trail and maintains compliance without sacrificing speed. GitLab Duo Agent Platform enables...
Source: GitLab Blog
Elisabeth Burrows
2026-09-28 00:00
π Git 2.56.0 has been released! Key updates include: 1οΈβ£ New features like the `drop` command in `git-history` for easier commit deletions. 2οΈβ£ Enhancements in `git-branch` to delete merged branches effectively. 3οΈβ£ Progress on Git 3.0, including SHA-256 as the default hash format and a new release schedule. Notable contributions from the GitLab team and Google Summer of Code projects are highlighted. Stay tuned for more updates! #Git #GitRelease #OpenSource #SoftwareDevelopment #GitLab
Source: GitLab Blog
Karthik Nayak
2026-09-18 00:00
The software development landscape is rapidly evolving. According to GitLab CEO Bill Staples, when code is abundant, trust in production becomes scarce. As CISO, I emphasize that detection alone is not sufficient for defense. We must integrate security and governance throughout the software development lifecycle (SDLC) to ensure trustworthiness. ππ Recent trends show a rise in reported vulnerabilities and the speed at which threats are exploited. Organizations must adapt their operating...
Source: GitLab Blog
Chaim Mazal
2026-09-17 00:00
π GitLab 19.4 introduces the /goal command in the Duo CLI, streamlining complex tasks for developers. This feature allows you to define a goal, freeing you from constant back-and-forth communication. GitLab autonomously manages the task until completion, providing updates along the way. Stay tuned for the GitLab Transcend event on October 6 to learn more! #GitLab #DuoCLI #Automation #SoftwareDevelopment #TechUpdates
Source: GitLab Blog
Rebecca Carter
2026-09-17 00:00
π New tools from GitLab enhance automation for platform teams! The Model Context Protocol (MCP) now enables agents to run pipelines, open merge requests, and triage tasks. π With GitLab 19.4, agents can automate end-to-end processes while maintaining governance. Routine actions can occur automatically, but critical changes require human review. π
Join the GitLab Transcend event on October 6 to learn more about these advancements and how they support your development workflows. #GitLab...
Source: GitLab Blog
Rebecca Carter
2026-09-17 00:00
π GitLab Duo Agent Platform introduces three hosted open weight models: Kimi K3, GLM 5.3, and MiniMax M3. These models enhance your team's ability to optimize for quality, latency, and cost across various tasks. π‘ Kimi K3 and GLM 5.3 excel in demanding tasks, while MiniMax M3 is ideal for high-volume work. Teams can achieve up to 4x more calls per credit compared to some frontier models. π
Don't miss the GitLab Transcend event on October 6, showcasing how to integrate agentic AI into your...
Source: GitLab Blog
Brittany Lutz
2026-09-17 00:00
π¨ Important Update for GitLab Users! π¨ Starting October 19, 2026, GitLab.com will change rate limits to align with your subscription tier. Free accounts will see new limits first, with Premium and Ultimate plans following in January 2027. Authenticated requests will have higher limits based on your plan, while unauthenticated requests will be capped at 60 per hour. Preview windows for Free and unauthenticated traffic will occur on October 7 and 14. For those approaching limits, consider...
Source: GitLab Blog
Sam Wiskow