Articles from Source: GitLab-Blog

Whatโ€™s new in Git 2.53.0?

2026-02-02 00:00
๐Ÿš€ Git 2.53.0 has been released with notable updates! One key enhancement is geometric repacking support for partial clones, improving performance while managing packfiles. This allows Git to better handle "promisor" packfiles, ensuring efficient backfilling of missing objects. Additionally, git-fast-import(1) introduces a new mode to preserve valid signatures during history rewrites. For more insights, check the official announcement! #Git #VersionControl #SoftwareDevelopment #OpenSource #GitLab
Source: GitLab Blog
Justin Tobler

How to set up GitLab SAML SSO with Google Workspace

2026-01-27 00:00
Streamline user access by integrating GitLab SAML SSO with Google Workspace! ๐Ÿ”’ This guide outlines how to configure SAML-based single sign-on, allowing users to log in to GitLab using their Google credentials. The setup includes automatic group synchronization, ensuring permissions reflect Google group memberships. Key benefits include centralized access control, enhanced security, and reduced administrative tasks. For complete instructions, refer to the detailed guide. #GitLab...
Source: GitLab Blog
Omid Khan

GitLab Bug Bounty Program policy updates

2026-01-20 00:00
๐Ÿš€ GitLab has updated its HackerOne Bug Bounty program policies to enhance security and transparency. Key changes include stronger guidance for local testing, emphasizing the GitLab Development Kit (GDK) for most security research. Additionally, the scope has been refined based on community feedback, with specific exclusions for Denial-of-Service (DoS) reports. A 7-day grace period is provided for existing researchers to align with these updates. GitLab reaffirms its commitment to the...
Source: GitLab Blog
Kayla Hagopian

Announcing general availability for GitLab Duo Agent Platform

2026-01-15 00:00
๐ŸŒŸ GitLab has announced the general availability of its Duo Agent Platform, marking a significant step towards integrating agentic AI in software development. This platform aims to tackle the AI paradox by enhancing automation and orchestration throughout the software lifecycle. Users will benefit from a unified experience and context-aware assistance via Agentic Chat. Additionally, GitLab Premium and Ultimate users will receive monthly credits to access Duo Agent Platform features. ๐Ÿ’ก Join...
Source: GitLab Blog
Bill Staples

Introducing GitLab Credits, usage-based pricing for GitLab Duo Agent Platform

2026-01-15 00:00
๐Ÿš€ GitLab has introduced GitLab Credits, a new usage-based pricing model for the Duo Agent Platform. This change aims to eliminate the limitations of seat-based pricing, allowing all team members with a GitLab account to access AI capabilities. ๐Ÿ’ก GitLab Credits are pooled across your organization, enabling flexible AI usage without needing individual seat purchases. Usage is billed monthly based on actual credits consumed, making AI access fairer for all users. ๐Ÿ“Š Customers with active Premium...
Source: GitLab Blog
Manav Khurana

AI Catalog: Discover, create, and share agents and flows

2026-01-14 00:00
๐Ÿš€ Explore the AI Catalog! Part 5 of our guide on GitLab Duo Agent Platform covers how to discover, create, and share AI agents and workflows. You can browse community-created solutions, enable them for your projects, and even customize your own agents and flows. Learn about versioning and best practices for sharing your work. ๐Ÿ”— Dive into automation today! #GitLab #AIAgents #Automation #DevOps #TechGuide
Source: GitLab Blog
Itzik Gan Baruch

Customizing GitLab Duo Agent Platform: Chat rules, prompts, and workflows

2026-01-14 00:00
Unlock the potential of the GitLab Duo Agent Platform! ๐Ÿš€ In Part 8 of our guide, learn how to customize AI agents and workflows for your development lifecycle. Explore user, workspace, and project-level customizations for tailored automation. Key topics include: - Custom rules for consistent agent behavior - AGENTS.md for chat behavior and standards - Extending capabilities with Model Context Protocol (MCP) - Creating custom agents and flows Start customizing today! ๐ŸŽฏ #GitLab #AIAutomation...
Source: GitLab Blog
Itzik Gan Baruch

Get started with GitLab Duo Agent Platform: The complete guide

2026-01-14 00:00
๐Ÿš€ Discover the GitLab Duo Agent Platform! This new AI solution enhances the software development lifecycle by integrating intelligent agents for tasks like code refactoring and security scans. ๐Ÿ’ป The platform enables developers to collaborate with specialized agents, transforming workflows into dynamic processes. ๐Ÿ“š Check out the comprehensive eight-part guide to get started with automation workflows. Join GitLab Transcend on February 10 to learn more about this innovative technology! #GitLab...
Source: GitLab Blog
Itzik Gan Baruch

Getting started with GitLab Duo Agentic Chat

2026-01-14 00:00
Unlock the power of AI with GitLab Duo Agentic Chat! ๐Ÿค– In Part 2 of our guide, we explore this robust tool designed for seamless integration into your development lifecycle. It allows for code creation, issue management, and CI/CD pipeline support, all while keeping you informed. Learn how to access it through various platforms, select models and agents, and troubleshoot common issues. Explore more about GitLab Duo today! ๐ŸŽฏ #GitLab #AI #Development #Automation #Coding
Source: GitLab Blog
Itzik Gan Baruch

Introduction to GitLab Duo Agent Platform

2026-01-14 00:00
๐Ÿš€ Introducing the GitLab Duo Agent Platform! This new AI orchestration layer enhances how developers collaborate with specialized AI agents throughout the software development lifecycle. With tools for asynchronous collaboration, multi-agent flows, and intelligent automation, you can focus on innovation while AI handles complex tasks. Explore various interaction methods, including GitLab Duo Agentic Chat and Custom Flows, for efficient workflows. ๐ŸŒŸ Ready to elevate your development process?...
Source: GitLab Blog
Itzik Gan Baruch

Monitor, manage, and automate AI workflows

2026-01-14 00:00
Unlock the potential of AI in your development lifecycle with Part 6 of our guide on the GitLab Duo Agent Platform. ๐Ÿ“Š Learn to manage agents and flows, set up event-driven triggers, and monitor activity through sessions. The Automate capabilities provide a streamlined hub for visibility and execution of your AI workflows. Explore now! ๐ŸŽฏ #GitLab #AIWorkflows #Automation #DevOps #TechTips
Source: GitLab Blog
Itzik Gan Baruch

Understanding agents: Foundational, custom, and external

2026-01-14 00:00
๐Ÿš€ Dive into Part 3 of our guide on the GitLab Duo Agent Platform! This article explores the different types of AI agents availableโ€”Foundational, Custom, and External. Each serves unique purposes, from general development tasks to specialized integrations. Learn how to create custom agents tailored to your workflows and discover best practices for effective use. ๐ŸŽฏ Try GitLab Duo Agent Platform today! #GitLab #AIAgents #DevOps #Automation #SoftwareDevelopment
Source: GitLab Blog
Itzik Gan Baruch

Understanding flows: Multi-agent workflows

2026-01-14 00:00
๐Ÿš€ Welcome to Part 4 of the GitLab Duo Agent Platform guide! This segment focuses on "flows," which combine multiple agents to create autonomous, multi-step workflows. Key features include: - **Multi-agent orchestration**: Collaborate seamlessly. - **Event-driven**: Triggered by specific actions. - **Background execution**: Work continues while flows operate. Explore foundational and custom flows for tailored automation in your projects. ๐Ÿ”— Check it out now! #GitLab #Automation #AI #DevOps...
Source: GitLab Blog
Itzik Gan Baruch

Strengthening GitLab.com security: Mandatory multi-factor authentication

2026-01-09 00:00
GitLab.com is enhancing security with mandatory multi-factor authentication (MFA) for all users signing in with a username and password. ๐Ÿ”’ This initiative is part of their commitment to being "Secure by Design" and aims to protect against account takeover threats. ๐Ÿ“ˆ If you sign in this way, set up MFA proactively to ensure a smooth transition. Notifications will be sent out before your group is required to comply. ๐Ÿš€ For those using API authentication, switching to a personal access token...
Source: GitLab Blog
Kim Waters

AI is reshaping DevSecOps: Attend GitLab Transcend to see whatโ€™s next

2026-01-08 00:00
AI is changing the landscape of DevSecOps, with 34% of development work now AI-generated. However, 70% of professionals find AI complicates compliance, leading to a paradox where faster coding slows down delivery. Many teams face workflow challenges due to fragmented tools, draining valuable time. A focus on intelligent orchestration is essential to improve collaboration and efficiency. Join us at GitLab Transcend on February 10, 2026, to explore how AI can enhance partnerships between humans...
Source: GitLab Blog
Manav Khurana

How IIT Bombay students are coding the future with GitLab

2026-01-08 00:00
๐Ÿš€ Exciting innovations emerged at the iHack Hackathon hosted by IIT Bombay, judged by the GitLab team! Students showcased their determination to tackle real-world problems using GitLab tools. The top projects included: ๐Ÿ† **Team Decode**: Developed FIRE, a fast data processing tool for scientific research. They utilized GitLab Issue Boards for efficient collaboration. ๐Ÿฅˆ **Team BichdeHueDost**: Created SemiPay, an RFID-based cashless payment system for schools, leveraging GitLab CI/CD for a...
Source: GitLab Blog
Nick Veenhof

OWASP Top 10 2025: What's changed and why it matters

2026-01-07 00:00
๐Ÿšจ The OWASP Foundation has released the 2025 edition of its "Top 10 Security Risks," reflecting significant changes in application security. Two new categories have been added: ๐Ÿ”น **Software Supply Chain Failures (A03)** ๐Ÿ”น **Mishandling of Exceptional Conditions (A10)** Security Misconfiguration has risen to #2, while Injection and Cryptographic Failures have dropped in rank. The update emphasizes the growing complexity of software systems and the need for modern testing methods. For...
Source: GitLab Blog
Fernando Diaz

AI-powered vulnerability triaging with GitLab Duo Security Agent

2026-01-06 00:00
๐Ÿš€ Security vulnerabilities in applications are on the rise, making effective triaging crucial for development teams. GitLab's integrated security scanners and the GitLab Duo Security Analyst Agent streamline this process, transforming it into a more efficient workflow. ๐Ÿ”๐Ÿ’ก These tools help prioritize vulnerabilities based on real risk, reducing manual effort and alert fatigue. Learn more about enhancing your vulnerability management on February 10 at GitLab Transcend. #CyberSecurity...
Source: GitLab Blog
Fernando Diaz

Building trust in agentic tools: What we learned from our users

2026-01-05 00:00
Building trust in AI agents is essential for effective software development. GitLab's research highlights that trust develops through "micro-inflection points"โ€”small interactions that accumulate over time. Key findings include: ๐Ÿ”‘ Four pillars of trust: 1. **Safeguarding Actions**: Ensuring safety with confirmation dialogs and rollback capabilities. 2. **Providing Transparency**: Clear updates and explanations help users understand AI actions. 3. **Remembering Context**: Retaining user...
Source: GitLab Blog
Will Leidheiser

GitLab 18.7: Advancing AI automation, governance, and developer experience

2025-12-18 00:00
๐Ÿš€ GitLab 18.7 introduces key enhancements in development, operations, and security to improve AI integration within workflows. Key updates include the GitLab Duo Agent Platform, set for general availability in January 2026, which will streamline agentic AI management across projects. New features like Custom Flows and SAST False Positive Detection Flow aim to automate repetitive tasks and improve accuracy in security testing. Mark your calendars for the global launch event on February 10,...
Source: GitLab Blog
Bill Staples

Taming tool sprawl: How to boost university IT productivity

2025-12-15 00:00
๐Ÿš€ Dr. James Quilty faced chaos in course management at Victoria University of Wellington due to scattered learning tools. By adopting GitLab in 2017, the university transformed its approach, leading to a 483% increase in student users and streamlined processes. ๐Ÿ“ˆ Higher education IT teams often deal with tool sprawl and legacy systems. GitLab offers a unified DevSecOps platform, allowing institutions to modernize gradually while ensuring compliance. Learn more about enhancing IT productivity...
Source: GitLab Blog
Elisabeth Burrows

Guide: Migrate from Azure DevOps to GitLab

2025-12-03 00:00
๐Ÿš€ Migrating from Azure DevOps to GitLab? This guide outlines a clear process for a successful transition. Key steps include: - Use GitLab's Congregate or built-in tools for repository migration. - Migrate CI/CD pipelines and other assets like work items and artifacts. - Plan your migration carefully by assessing timelines and structures. Ensure to run pilot migrations to validate your process before full execution. #GitLab #AzureDevOps #MigrationGuide #DevOps #SoftwareDevelopment
Source: GitLab Blog
Michael Leopard

Automate embedded systems compliance with GitLab and CodeSonar

2025-12-02 00:00
๐Ÿš€ Embedded systems development teams often face a trade-off between speed and compliance. The integration of GitLab with CodeSonar automates compliance workflows, allowing for continuous verification throughout the development lifecycle. This addresses the challenges of meeting stringent standards like ISO 26262 and DO-178C. The collaboration enhances code analysis, identifying vulnerabilities while maintaining audit trails, significantly improving development velocity and compliance...
Source: GitLab Blog
Darwin Sanoy

How we deploy the largest GitLab instance 12 times daily

2025-12-01 00:00
GitLab deploys code changes to GitLab.com up to 12 times daily without downtime, impacting millions of developers. Using GitLab's CI/CD platform, we streamline feature delivery and security patches, ensuring customers have access to the latest updates quickly. ๐Ÿš€ Discover how our automated deployment pipeline efficiently manages this complexity, demonstrating proven practices that support the reliability of our platform. #GitLab #DevOps #CICD #SoftwareDeployment #TechInnovation
Source: GitLab Blog
John Skarbek

GitLab discovers widespread npm supply chain attack

2025-11-24 00:00
๐Ÿšจ GitLab's Vulnerability Research team has uncovered a significant supply chain attack in the npm ecosystem. This campaign involves malware that spreads through infected packages, displaying worm-like behavior. The malware not only harvests credentials from various platforms but also has a destructive mechanism that can erase user data if its access channels are disrupted. ๐Ÿ” GitLab has confirmed that it is not affected but aims to help the security community combat this threat. Investigations...
Source: GitLab Blog
Daniel Abeles

Meet the 2025 EMEA GitLab Partner Award winners

2025-11-24 00:00
๐ŸŽ‰ Proud to announce the 2025 EMEA GitLab Partner Award winners! This year, exceptional partners in the EMEA region were recognized for their DevSecOps expertise and contributions. Key awards include: ๐Ÿ† **Regional Partner of the Year**: - **Central Europe**: cc cloud GmbH - **Northern Europe**: Adaptavist - **Southern Europe**: knowmad mood - **Meta Region**: Digital Future - **Emerging Markets**: Cloudfresh ๐Ÿ… **Best Technical Solution**: D|OPS Digital ๐Ÿ… **Most Certified Partner**: Devoteam ๐Ÿ…...
Source: GitLab Blog
Alex Picker

GitLab 18.6: From configuration to control

2025-11-20 00:00
๐Ÿš€ GitLab 18.6 introduces enhanced AI capabilities for software development. Teams gain flexibility with model selection, making workflows more efficient and secure. The GitLab Duo Planner and Security Analyst agents are now readily available, offering built-in support for planning and security. Cloud-connected users can choose AI models directly from the UI, ensuring compliance and cost management. For air-gapped environments, the Web IDE now functions offline, maintaining security without...
Source: GitLab Blog
Bill Staples

GitLab engineer: How I improved my onboarding experience with AI

2025-11-17 00:00
Starting a new job can be overwhelming, but GitLab's onboarding process, paired with GitLab Duo, has streamlined my experience as a fullstack engineer. The AI tool aids in exploration, reviewing, and debugging. It allows me to search all resources effortlessly and provides insights on edge cases before I begin coding. ๐Ÿ› ๏ธ Furthermore, GitLab Duo reviews my merge requests, catching mistakes and helping me understand feedback from my teammates. It enhances my efficiency and aligns with GitLabโ€™s...
Source: GitLab Blog
Konstantin Greif

Whatโ€™s new in Git 2.52.0?

2025-11-17 00:00
๐Ÿš€ Git has just released version 2.52! This update reintroduces the usual 12-week cycle after a brief 8-week one. A key feature is the new `git-last-modified(1)` command, which efficiently retrieves the last commit for each file in a commit, reducing processing load. Other improvements include enhancements to `git-fast-export(1)` and `git-fast-import(1)`, making them better at handling cryptographic signatures. For repository maintenance, a new geometric strategy in `git-maintenance(1)`...
Source: GitLab Blog
Patrick Steinhardt

Achieve CMMC Level 2 with GitLab Dedicated for Government

2025-11-12 00:00
๐Ÿš€ The U.S. Department of Defense has introduced new compliance requirements for Defense Industrial Base (DIB) companies under the CMMC Final Rule. Companies must now apply NIST 800-171 and undergo audits by Third-Party Assessment Organizations (3PAO) every three years. ๐Ÿ’ผ GitLab Dedicated for Government offers a solution with its FedRAMP Moderate Authorization. This allows DIB companies to use the platform without extra audits, easing the compliance burden. ๐Ÿ” The Shared Responsibility Matrix...
Source: GitLab Blog
Drew Wilmoth

Secure AI agent deployment to GKE

2025-11-10 00:00
๐Ÿš€ Deploying AI agents to Google Kubernetes Engine (GKE) is made simple with GitLab's integration! This tutorial covers how to set up secure deployments, offering full control over your infrastructure and seamless CI/CD integration. Key benefits include: - Full infrastructure control - No complex workarounds - Automatic scaling Prepare by enabling necessary APIs and creating your GitLab project and GKE cluster before diving into the deployment process. #AIAgents #GoogleCloud #GitLab...
Source: GitLab Blog
Regnard Raquedan

Migrate from pipeline variables to pipeline inputs for better security

2025-11-04 00:00
๐Ÿš€ GitLab is enhancing CI/CD security by migrating from pipeline variables to pipeline inputs. Pipeline variables can be overridden without validation, posing security risks. In contrast, pipeline inputs offer explicit declarations, type safety, and built-in validation, improving overall maintainability and governance. To transition, restrict pipeline variables and configure roles effectively. This ensures a more secure CI/CD environment. Learn more about the migration process and its...
Source: GitLab Blog
Fabio Pitino

Claude Sonnet 3.7 deprecation notice for GitLab Duo

2025-10-31 00:00
๐Ÿšจ Important Update for GitLab Duo Users! ๐Ÿšจ Anthropic is deprecating Claude Sonnet 3.7. As a result, GitLab will remove support for this model in version 18.8, scheduled for January 15, 2026. ๐Ÿ“… Current Status: Claude Sonnet 3.7 is still available. ๐Ÿ”„ Action Needed: Migrate to Claude 4.0+ models now. For further details, check the resources or contact GitLab Support for assistance. #GitLab #AI #ClaudeSonnet #Migration #TechUpdates
Source: GitLab Blog
Karishma Kumar

What is a YAML file? A complete guide from basics to practical use

2025-10-31 00:00
๐Ÿ“„ YAML is a widely used data serialization format, known for its clarity and simplicity. It's often utilized in configuration files and playbooks, especially in tools like Kubernetes and Ansible. ๐Ÿ” Key comparisons include YAML vs. JSON, highlighting YAML's use of indentation for better readability. The article also discusses YAML vs. CUE, emphasizing CUE's schema validation features. โœ๏ธ Understanding YAML syntax, such as indentation and data structures, is crucial for effective use. The...
Source: GitLab Blog
GitLab Team

Ace your planning without the context-switching

2025-10-28 00:00
๐Ÿš€ Software development teams often juggle multiple tasks under tight deadlines. The planning overhead can hinder strategic thinking, leading to missed opportunities. Introducing **GitLab Duo Planner**, an AI tool designed to streamline planning workflows right within GitLab. This tool helps product managers reduce overhead, improve alignment, and enhance predictability in their projects. Key features include: - Prioritization using frameworks like RICE and MoSCoW. - Efficient work breakdown...
Source: GitLab Blog
Amanda Rueda

Modernize Java applications quickly with GitLab Duo with Amazon Q

2025-10-22 00:00
๐Ÿš€ Modernizing Java applications just got easier with GitLab Duo and Amazon Q! Upgrading from Java 8 to Java 17, which once took weeks, can now be done in minutes. Simply create an issue in GitLab and trigger the transformation with a command. The automated process analyzes your code, updates dependencies, and generates merge requests for reviewโ€”all while maintaining functionality. This means less time on upgrades and more on new features! For more details, check out the full walkthrough!...
Source: GitLab Blog
Cesar Saavedra

Delivering faster and smarter scans with Advanced SAST

2025-10-21 00:00
๐Ÿš€ GitLab's Advanced SAST is enhancing static application security testing to improve developer workflows. With the latest updates, teams can expect faster scans, increased accuracy, and the ability to create custom detection rules. ๐Ÿ” These enhancements, like multi-core and diff-based scanning, significantly reduce scan times, making security integration seamless. ๐Ÿ’ก By prioritizing both speed and accuracy, GitLab aims to drive SAST adoption and secure software development. #DevSecOps #GitLab...
Source: GitLab Blog
Salman Ladha

GitLab 18.5: Intelligence that moves software development forward

2025-10-21 00:00
๐Ÿš€ GitLab 18.5 has been released, focusing on improving usability and integrating AI for software development teams. The new panel-based UI enhances user experience, allowing easy access to GitLab Duo Chat for contextual assistance. Purpose-built agents support vulnerability triage and backlog management, streamlining workflows. Key updates include advanced security features for identifying exploitable vulnerabilities, alongside tools for backlog organization and simplified API configurations....
Source: GitLab Blog
Bill Staples

Claude Haiku 4.5 now available in GitLab Duo Agentic Chat

2025-10-20 00:00
๐Ÿš€ Exciting news for GitLab users! Claude Haiku 4.5, Anthropic's latest and fastest model, is now available in the GitLab Duo model selector. With a performance score of 73.3% on SWE-bench Verified and over 2x the speed of Claude Sonnet 4.5, this model enhances coding workflows for developers. Claude Haiku 4.5 enables multi-agent orchestration, allowing efficient parallel task execution. This integration supports faster iterations and improved AI assistance within GitLab's ecosystem. Access...
Source: GitLab Blog
Tim Zallmann

Variable and artifact sharing in GitLab parent-child pipelines

2025-10-16 00:00
๐Ÿš€ In the world of software development, adapting to evolving needs is essential. The article discusses the significance of CI/CD pipelines, specifically the parent-child pipeline model in GitLab. ๐Ÿ”— This approach breaks complex pipelines into smaller, manageable child pipelines, improving functionality and efficiency. It also covers how to share variables and artifacts between these pipelines for streamlined operations. ๐Ÿ“Š Key benefits include conditional execution, parallel processing, and...
Source: GitLab Blog
Daniel Helfand