Articles from Source: GitLab-Blog

Teaching software development the easy way using GitLab

2026-04-29 00:00
Instructors face challenges in managing software development courses, especially with assignment distribution and feedback. The GitLab for Education program offers free access to GitLab Ultimate, helping educators create efficient workflows. Stephen G. Dame from the University of Washington, Bothell, shares his approach using GitLab's Groups and Subgroups to manage course materials and maintain code privacy. By establishing a clear group hierarchy, instructors can control permissions...
Source: GitLab Blog
Rod Burns

GitLab and Anthropic: Governed AI for enterprise development

2026-04-28 00:00
🚀 GitLab has enhanced its integration with Anthropic's Claude, enabling organizations to access the latest AI models within its intelligent orchestration platform. This development supports compliance and governance in software development. 🔍 With GitLab Duo, AI can assist in various tasks like code generation and vulnerability resolution, all while adhering to established security and audit protocols. 🌐 Organizations can now leverage Claude models through Google Cloud’s Vertex AI and AWS...
Source: GitLab Blog
Stuart Moncada

How to build CI/CD observability at scale

2026-04-28 00:00
Unlocking CI/CD success starts with visibility! 🌟 GitLab's CI/CD Observability solution helps organizations optimize pipeline performance and gain actionable insights. This includes key metrics like pipeline duration, job success rates, and more. A recent collaboration with a financial services firm showcased the benefits of integrating Grafana and Prometheus for real-time monitoring. Key dashboards provide visibility into job performance, runner utilization, and deployment frequency. 📊 Learn...
Source: GitLab Blog
Paul Meresanu

Give your AI agent direct, structured GitLab access with glab CLI

2026-04-27 00:00
🚀 Enhance your development workflow with GitLab and AI! Using glab CLI, give your AI agents structured access to GitLab projects. This integration allows agents to directly fetch and act on data, reducing errors and friction. Learn how to set up Model Context Protocol (MCP) for seamless communication between your AI and GitLab. 🛠️ Unlock faster code reviews and efficient issue tracking. #GitLab #AI #DevOps #glab #MCP
Source: GitLab Blog
Kai Armstrong

curl removed from Omnibus-GitLab FIPS packages in 19.0

2026-04-24 00:00
🚨 Important Update for GitLab FIPS Users 🚨 Starting with Omnibus-GitLab 19.0, FIPS packages will no longer include a GitLab-built version of curl. Instead, they will utilize the curl package from your Linux distribution. This change is due to curl 8.18.0's deprecation of OpenSSL 1.x. 🔍 Key Points: - GitLab will not provide security updates for curl in FIPS packages. - Customers are responsible for keeping their OS's curl up to date. - This update takes effect on May 21, 2026. For assistance,...
Source: GitLab Blog
Adam Chu

GitLab AI Hackathon 2026: Meet the winners

2026-04-22 00:00
🚀 The GitLab AI Hackathon 2026 showcased the power of community innovation, with nearly 7,000 developers creating over 600 AI agents to enhance software security and efficiency. 🏆 The Grand Prize went to LORELORE, an engine addressing knowledge retention as engineers leave. Other notable winners include Gitdefender for security fixes and GraphDev for mapping code changes. 🌱 Sustainability was a focus too, with awards for projects that measured environmental impact. Explore the impressive...
Source: GitLab Blog
Nick Veenhof

GitLab Patch Release: 18.11.1, 18.10.4, 18.9.6

2026-04-22 00:00
🚀 GitLab has announced new patch releases: 18.11.1, 18.10.4, and 18.9.6. These updates address security vulnerabilities and include important bug fixes to enhance system stability. Users are encouraged to update to the latest versions to ensure optimal performance and security. Stay informed and keep your projects safe! 🔐 #GitLab #SoftwareUpdate #CyberSecurity #TechNews
Source: GitLab Blog

GitLab + Amazon: Platform orchestration on a trusted AI foundation

2026-04-21 00:00
🚀 Exciting news for GitLab and AWS users! GitLab Duo Agent Platform integrates seamlessly with Amazon Bedrock to enhance your software lifecycle. This partnership allows you to leverage agentic AI for tasks like planning and security scanning while maintaining control over your data and cloud spend. The article discusses deployment options, benefits, and how this setup can address fragmentation and security issues in AI operations. 🔗 Explore how to optimize your AI integration with GitLab and...
Source: GitLab Blog
Mark Kriaf

GitHub Copilot's new policy for AI training is a governance wake-up call

2026-04-20 00:00
GitHub has announced a new policy for Copilot users that will take effect on April 24, 2026. Interaction data from Copilot Free, Pro, and Pro+ users will be used to train AI models by default unless users opt out. This change raises important questions for organizations in regulated industries, such as finance and healthcare, regarding data governance and compliance. Notably, GitLab has committed to not using customer code for AI training, providing a clear alternative for those concerned...
Source: GitLab Blog
Allie Holland

Prepare your pipeline for AI-discovered zero-days

2026-04-20 00:00
🚨 Anthropic's Mythos Preview model has identified thousands of zero-day vulnerabilities, including a bug in OpenBSD that went undetected for 27 years. As AI accelerates threat discovery, organizations struggle to keep pace. One-third of exploited CVEs showed activity before disclosure, highlighting the urgent need for security to be integrated into development pipelines. With AI-generated code adding thousands of new vulnerabilities, timely remediation is crucial. Teams must enforce security...
Source: GitLab Blog
Omer Azaria

What’s new in Git 2.54.0?

2026-04-20 00:00
🚀 Git 2.54.0 has been released with several key updates! 🔍 Notable features include the introduction of pluggable object databases, allowing for various storage formats and improving efficiency in handling large binary files. ✍️ The new `git history` command simplifies editing commit history, making it user-friendly and intuitive. 📊 Also, the `git repo structure` command now provides detailed metrics on repository size and object types, enhancing observability. Learn more about these...
Source: GitLab Blog
Patrick Steinhardt

Automate remediation with ready-to-merge AI code fixes

2026-04-16 00:00
🚀 AI is reshaping application security with GitLab's new Agentic SAST Vulnerability Resolution. This tool automatically generates ready-to-merge code fixes for SAST vulnerabilities, helping developers stay productive and reducing the burden on AppSec teams. 🔍 GitLab 18.11 enhances SAST scanning speed and governance, ensuring vulnerabilities are addressed efficiently before reaching production. 📊 The update includes risk-based prioritization, using CVSS 4.0 to reflect real-world...
Source: GitLab Blog
Alisa Ho

CI Expert and Data Analyst AI agents target development gaps

2026-04-16 00:00
🚀 GitLab 18.11 introduces two new AI agents on the Duo Agent Platform: 1️⃣ **CI Expert Agent** (in beta) helps streamline the path from writing code to running it in a pipeline, making setup faster and easier. 2️⃣ **Data Analyst Agent** (now available) provides instant answers to questions about merge requests, pipeline performance, and deployment targets using simple language. These tools enhance development efficiency by providing context-aware insights directly within GitLab. Learn more...
Source: GitLab Blog
Corinne Dent

Claude Opus 4.7 is now available in GitLab Duo Agent Platform

2026-04-16 00:00
🚀 Exciting news for GitLab users! Claude Opus 4.7 is now integrated into the GitLab Duo Agent Platform. This update enhances agent performance across the software delivery lifecycle, improving efficiency in tasks like CI/CD, code review, and vulnerability resolution. Key features include better instruction interpretation and the ability to verify outputs, resulting in smoother workflows and reduced errors. Start your free trial today! 💻✨ #GitLab #Opus4.7 #SoftwareDevelopment #AI #TechUpdate
Source: GitLab Blog
Rebecca Carter

GitLab 18.11: Budget guardrails for GitLab Credits

2026-04-16 00:00
🚀 GitLab 18.11 introduces budget guardrails for GitLab Credits, enhancing control over AI spending. Key features include: - **Subscription-level caps**: Set a monthly limit on credits for your entire team. 📊 - **Per-user credit limits**: Prevent overuse by individual users with customizable caps. 👥 - **Visibility and notifications**: Stay informed about credit usage and cap status. 📧 These tools aim to promote predictable spending and support AI adoption in organizations. #GitLab #AI...
Source: GitLab Blog
Bryan Rothwell

A guide to the breaking changes in GitLab 19.0

2026-04-15 00:00
🚀 GitLab 19.0 is set to launch with 15 breaking changes. Key deployment windows are: - GitLab.com: May 4-6 & May 11-13, 2026 - Self-Managed: Available from May 21, 2026 High-impact changes include the shift from NGINX Ingress to Gateway API with Envoy Gateway and removal of bundled PostgreSQL, Redis, and MinIO. For detailed mitigation steps, refer to the breaking changes documentation. 📅🔧 #GitLab #SoftwareUpdates #DevOps #TechNews
Source: GitLab Blog
Martin Brümmer

GitLab and Vertex AI on Google Cloud: Advancing agentic software development

2026-04-14 00:00
🚀 GitLab Duo Agent Platform is transforming software development by integrating agentic AI into every phase of the software lifecycle. This platform collaborates with Vertex AI on Google Cloud, enabling automated orchestration and context management for software teams. With advanced AI capabilities, GitLab users can streamline workflows, enhance security, and improve project management. Experience the future of DevSecOps with GitLab and Vertex AI. #GitLab #VertexAI #DevSecOps...
Source: GitLab Blog
Rajesh Agadi

GitLab named a 2026 Omdia Universe Leader

2026-04-13 00:00
🚀 GitLab has been recognized as a Leader in the 2026 Omdia Universe for AI-assisted Software Development! The independent evaluation highlighted GitLab's top scores in Solution Breadth (100%), Strategy and Innovation (88%), and Core Features (82%). This year, Omdia expanded its criteria to assess full software lifecycle capabilities, reflecting the evolving role of AI in development. With a focus on not just coding but also testing, security, and deployment, GitLab stands out among its peers....
Source: GitLab Blog
Rebecca Carter

5 ways GitLab pipeline logic solves real engineering problems

2026-04-09 00:00
Unlock the potential of GitLab's pipeline logic! 🚀 This article explores 5 key ways GitLab addresses complex engineering challenges with its CI/CD model. From managing monorepos with parent-child pipelines to ensuring cross-repo integration in microservices, each solution is designed for real-world scenarios. Key features include: - **DAG Execution** for efficient builds - **Dynamic Child Pipelines** for scalable deployments - **Merge Request Pipelines** ensuring accurate testing before...
Source: GitLab Blog
Omid Khan

GitLab Duo CLI: Agentic AI for the development lifecycle, now in the terminal

2026-04-07 00:00
🚀 GitLab Duo CLI is now in public beta, designed to enhance the software development lifecycle. It combines agentic AI with automated workflows and an interactive chat mode for when human oversight is needed. This tool operates in two modes: Interactive mode for user engagement, and Headless mode for automation without supervision. Security features include human approval for actions, built-in prompt injection detection, and limited access for agents. Try GitLab Duo CLI today to optimize your...
Source: GitLab Blog
John Coghlan

Pipeline security lessons from March supply chain incidents

2026-04-07 00:00
🚨 In March 2026, multiple supply chain attacks targeted CI/CD pipelines, affecting several tools like Trivy, Checkmarx KICS, LiteLLM, and axios. The attackers exploited compromised credentials to infiltrate and manipulate these widely used systems. Key vulnerabilities included poisoned tools, packaging misconfigurations, and issues with transitive dependencies. GitLab's Pipeline Execution Policies are recommended to enhance security and prevent similar incidents by enforcing mandatory checks...
Source: GitLab Blog
Grant Hickman

Streamline test management with the SmartBear QMetry GitLab component

2026-04-07 00:00
Streamline your test management with the new SmartBear QMetry GitLab component! 🚀 This integration automates the upload of test results from your GitLab CI/CD pipeline to QMetry, reducing manual effort and ensuring up-to-date data across teams. Key benefits include: - Elimination of manual uploads - Complete traceability for compliance - Accelerated feedback loops for faster decisions Learn how to set up and optimize your test management process! 📊🔍 #DevSecOps #TestManagement #GitLab #QMetry...
Source: GitLab Blog
Matt Bonner

Changes to packages.gitlab.com: What you need to know

2026-03-31 00:00
🚨 Important updates for users of packages.gitlab.com! 🚨 GitLab is migrating to a new package hosting system. The base domain remains the same, but URL formats, GPG key locations, and network requirements are changing. 🔹 Existing configurations will work until September 30, 2026, with a transition period in place. 🔹 Key actions include updating repository configurations and GPG key references. For a smooth transition, please review the updated installation documentation and make necessary...
Source: GitLab Blog
Denis Afonso

Getting started with GitLab feature flags in Python

2026-03-26 00:00
🚀 **Discover the power of GitLab feature flags!** Feature flags allow developers to deploy code without immediate visibility to all users. This tutorial guides you through integrating GitLab feature flags with a Python Flask app using the Unleash SDK. 🔧 Start by setting up your GitLab project and cloning the demo repository. Follow clear steps to create and manage feature flags, enabling gradual rollouts and real-time control of application behavior. No need for redeployment if issues...
Source: GitLab Blog
Omid Khan

Manage vulnerability noise at scale with auto-dismiss policies

2026-03-25 00:00
🚨 Managing security vulnerabilities just got easier! GitLab introduces auto-dismiss policies to streamline your vulnerability triage process. These policies allow security teams to automatically dismiss irrelevant findings, reducing alert fatigue and improving efficiency. You can set criteria based on file paths, directories, or vulnerability identifiers. 🔍 By implementing these policies, teams can eliminate noise, enforce decisions at scale, and maintain transparency in their reports. Ready...
Source: GitLab Blog
Grant Hickman

Agile planning gets a boost from new features in GitLab 18.10

2026-03-23 00:00
📢 Exciting updates for GitLab users! With GitLab 18.10, the Agile planning experience is enhanced through the new work items list and saved views. This upgrade consolidates all work item types—epics, issues, and more—into one unified list, streamlining workflows. Saved views allow users to customize and save list configurations for efficient access. These changes aim to improve consistency and standardize reporting across teams. Stay tuned for more features that will further enhance your...
Source: GitLab Blog
Matthew Macfarlane

Agentic code reviews for $0.25 each

2026-03-19 00:00
🚀 Code reviews are slowing down software delivery, with wait times increasing by 91% as developers use AI tools. Many AI review options come with high costs, making teams selective. However, GitLab's Code Review Flow offers a flat rate of $0.25 per review, enabling all merge requests to be processed efficiently. This tool automates the review process, saving time and significantly reducing costs—up to 99%. It allows for consistent review standards across projects, helping teams focus on...
Source: GitLab Blog
Karishma Kumar

Code Review without the bottlenecks or the bill

2026-03-19 00:00
🚀 Developers are moving faster with AI, but code review bottlenecks persist. GitLab addresses this challenge with Code Review Flow, an AI tool that automates the review of merge requests. 🔍 This feature analyzes code in real-time, providing consistent feedback without delays. It runs multiple reviews simultaneously, ensuring organization-wide standards are met. 💲 With a flat-rate pricing model, each review costs just $0.25, making it easier to manage budgets and scale reviews efficiently....
Source: GitLab Blog
Karishma Kumar

GitLab 18.10 brings AI-native triage and remediation

2026-03-19 00:00
🚀 GitLab 18.10 has launched with new AI-driven security features to enhance vulnerability management. The update includes Static Application Security Testing (SAST) false positive detection, which helps teams prioritize critical vulnerabilities by assessing the likelihood of false positives. Additionally, the Agentic SAST resolution flow can automatically create merge requests for verified vulnerabilities, streamlining the remediation process. Secret false positive detection is also...
Source: GitLab Blog
Alisa Ho

GitLab 18.10: Agentic AI now open to even more teams on GitLab

2026-03-19 00:00
🚀 GitLab 18.10 introduces a new way for Free GitLab.com teams to access Agentic AI without needing a full subscription. Starting today, teams can purchase GitLab Credits monthly, enabling immediate use of the GitLab Duo Agent Platform. This allows for streamlined software development tasks like planning, code generation, and automated code review. With features like the Planner Agent and Code Review Flow, teams can enhance productivity and reduce manual effort. Learn more about how to get...
Source: GitLab Blog
Talia Armato-Helle

How to use GitLab Container Virtual Registry with Docker Hardened Images

2026-03-12 00:00
Streamline your container image management with GitLab's Container Virtual Registry! 🐳 This solution acts as a pull-through cache for multiple registries like Docker Hub and dhi.io, allowing teams to pull images from a single endpoint. It simplifies authentication and reduces build times by caching images after the first pull. The article details how to set it up for Docker Hardened Images, addressing security and operational challenges. #GitLab #ContainerRegistry #DevOps #Docker #HardenedImages
Source: GitLab Blog
Tim Rizzi

Automating detection gap analysis with GitLab Duo Agent Platform

2026-03-10 00:00
🚨 After an incident, security teams often ask, "What did we miss?" GitLab addresses this with the Duo Agent Platform, automating detection gap analysis. 🔍 The platform features two AI agents: the Security Analyst Agent for quick assessments and the custom Detection Engineering Assistant tailored to your environment. 📈 This automation enhances consistency and efficiency in identifying detection gaps, ultimately improving security operations. Learn more about how GitLab is transforming incident...
Source: GitLab Blog
Matt Coons

Navigate repositories faster with the file tree browser

2026-03-09 00:00
🚀 GitLab 18.9 introduces the file tree browser, enhancing navigation within repositories. This feature adds a collapsible panel to keep your project structure visible while you read code, reducing the need for backtracking. You can filter files quickly, navigate with keyboard shortcuts, and enjoy a responsive design across devices. Explore this tool today to streamline your workflow! #GitLab #FileTreeBrowser #CodeNavigation #DevTools #SoftwareDevelopment
Source: GitLab Blog
Talia Armato-Helle

A complete guide to GitLab Container Scanning

2026-03-05 00:00
🚀 GitLab’s Container Scanning Guide outlines essential strategies to identify vulnerabilities in container images throughout their lifecycle. 🛡️ It emphasizes the importance of early detection to mitigate risks before deployment and highlights five scanning methods: Pipeline-based, Registry, Multi-Container, Continuous Vulnerability, and Operational Scanning. 🔍 Each method is designed for specific needs, ensuring comprehensive security from development to production. For more insights, visit...
Source: GitLab Blog
Fernando Diaz

Extend GitLab Duo Agent Platform: Connect any tool with MCP

2026-03-05 00:00
🚀 Managing software development involves juggling various tools like Jira, GitLab, and IDEs. GitLab Duo Agent Platform now supports MCP, allowing seamless integration with Jira. 🔑 This tutorial covers setting up Jira OAuth for secure access, configuring GitLab as an MCP client, and practical use cases. You'll learn how to query issues, update tickets, and manage workflows directly within your IDE. 💡 Key points include: - Secure authentication with OAuth 2.0 - Real-world workflows to...
Source: GitLab Blog
Albert Rabassa

10 AI prompts to speed your team’s software delivery

2026-03-04 00:00
🚀 AI-assisted coding tools are transforming software delivery, but coding is just 20% of the process. The remaining 80% often slows teams down due to issues like code review backlogs and security scanning delays. Here are 10 AI prompts from GitLab to streamline the software lifecycle. They address challenges in code review, security, documentation, and planning, ensuring that improvements in individual productivity translate to team efficiency. Explore how AI can enhance your workflow and...
Source: GitLab Blog
Chandler Gibbons

How GitLab built a security control framework from scratch

2026-03-04 00:00
🚀 GitLab's Security Compliance team recognized that existing security control frameworks didn't meet their unique needs. They created the GitLab Control Framework (GCF) to better align with their multi-product environment. Through five detailed steps, they tailored controls to focus on quality over quantity, ensuring compliance with various certifications. This custom framework allows for effective management and scaling across products, enhancing audit efficiency and reducing stakeholder...
Source: GitLab Blog
Davoud Tu

AI can detect vulnerabilities, but who governs risk?

2026-02-27 00:00
Anthropic's new AI system, Claude Code Security, detects vulnerabilities and suggests fixes, raising concerns over the future of traditional AppSec tools. 📉 Organizations are now focused on critical questions about safety, evolving risks, and governance of AI-generated code. GitLab is positioned as the solution, providing necessary visibility and control throughout the software lifecycle. 🔍 Effective governance is essential, as AI cannot enforce policies alone. Trust in AI-driven development...
Source: GitLab Blog
Omer Azaria

GitLab Duo Agent Platform with Claude accelerates development

2026-02-26 00:00
🚀 The GitLab Duo Agent Platform is transforming software development by integrating AI models like Anthropic's Claude into existing workflows. This platform addresses the challenges of maintaining velocity while ensuring code quality and security. External agents can autonomously handle tasks, from generating full-stack applications to performing thorough code reviews. Real-world use cases show how these agents streamline processes, reduce repetitive work, and enhance collaboration within the...
Source: GitLab Blog
Cesar Saavedra

Introducing the GitLab Managed Service Provider (MSP) Partner Program

2026-02-26 00:00
🚀 Exciting news for Managed Service Providers (MSPs)! GitLab has launched the Managed Service Provider (MSP) Partner Program, designed to enable MSPs to offer GitLab as a fully managed service. This program provides partners with clear requirements, structured support, and financial benefits, empowering them to support organizations in their DevSecOps journey. Partners can earn margins on transactions, access technical bootcamps, and receive go-to-market support. Customers benefit from a...
Source: GitLab Blog
Karishma Kumar