GitLab CE vs Forgejo: Self-Hosted Git on Docker, Measured
GitLab CE and Forgejo both give you a private Git server with issues, code review, CI and a container registry. They sit at opposite ends of the wei…
Latest Web news from Tech News
All topics
AI
agents
ai
api
architecture
automation
backend
beginners
career
database
devchallenge
devops
discuss
javascript
linux
llm
machinelearning
mcp
opensource
performance
productivity
programming
python
react
security
showdev
testing
tutorial
typescript
webdev
Securing the Software Supply Chain: Generating SBOMs & SLSA Provenance in GitLab CI/CD
Securing the Software Supply Chain: Generating SBOMs & SLSA Provenance in GitLab CI/CD From the SolarWinds breach to the recent XZ Utils backdoo…
Scaling Impact in GitLab Hackathons: From Winner to Repeat Contributor
Having won the July 2026 GitLab Hackathon and reaching Contributor Level 4, I often get asked how to maintain high contribution momentum across hack…
Pin the Digest Your GitLab Job Pulled, Not the Tag You Remember
A Friday job was green. The same commit failed on Monday. Did the base image move while the repository stayed still? You can lose an hour blaming th…
В фокусе RVD: трендовые уязвимости сентября
Хабр, привет! На связи команда инженер-аналитиков R-Vision. Мы проанализировали широкий спектр уязвимостей, выявленных в сентябре 2026 года,…
Hardening a Self-Managed GitLab Instance After CVE-2026-85706
Hardening a Self-Managed GitLab Instance After CVE-2026-85706 Vulnerability overview CVE-2026-85706 was fixed in GitLab 19.3.2, 19.2.6 and 19.1.8 on…
Prioritising CVE-2026-85706 Work: What a Read on a GitLab Host Is Worth
Prioritising CVE-2026-85706 Work: What a Read on a GitLab Host Is Worth Vulnerability overview CVE-2026-85706 gives an unauthenticated caller a file…
What Discloses From GitLab EE CVE-2026-87719: Advanced Search Configuration and Credentials
What Discloses From GitLab EE CVE-2026-87719: Advanced Search Configuration and Credentials Overview Advanced Search pushes indexed data to a backin…
AI code review that follows your team's rules: what each tool actually ingests
"Follows our coding standards" is the phrase teams use when they mean "does not post the same generic nit for the fourth time." It sounds like one f…
GitLab ships critical patch across 19.4, 19.3 and 19.2
What shipped GitLab pushed a critical patch release on 23 September covering three active branches at once: 19.4.1, 19.3.3 and 19.2.7. The release n…
Reviewing AI-generated code on GitLab and Azure DevOps: what actually exists
When you look for a way to catch low-quality AI-generated pull requests, the tool everyone names is CodeRabbit Slop Detection. Read its own docs and…
GitLab Runner Has Never Contacted This Instance: Every Cause and Fix
You created a runner, GitLab listed it, and next to it sits a grey warning: This runner has never contacted this instance. Your pipeline sits pendin…
gitsmith: A Terminal UI for Both GitLab and GitHub
I keep one foot in GitLab and the other in GitHub. Both have solid CLIs — glab and gh — but when I need to scan a list of merge requests, check a fa…
You Benchmarked the Model. Now Benchmark the Server.
You picked a free model because the answers looked good. Good answers are not an endpoint. An endpoint is the model plus the server plus the network…
A Bad Prompt Will Waste Your Free Model Calls. Lint the Contract First.
Last Tuesday, my pipeline called a free model three times on the same commit. The output looked confident every time. It was wrong every time. The m…
Give a Free Model a Latency Budget Before You Let It Into CI
I keep hitting the same failure pattern. A merge request passes every test. Then the pipeline stalls. Nothing in the diff changed. The free model ro…
You Don't Need More Free Model Quota. You Need a Content-Addressed Cache.
Three identical prompts. Three model calls. Same answer. I saw this in a GitLab CI pipeline that runs a free model over release notes. The prompt te…
Stop Wasting Free Model Calls on Trivial Diffs: A Three-Tier Escalation Ladder
A merge request changes one README line. The pipeline still calls a model. It costs tokens. It adds latency. It tells you almost nothing. Sound fami…
Put a JSON Contract in Front of a Free Model Route Before Your CI Ever Calls It
07:42. The GitLab job fails at risk not found . I open the raw log. The model returned { "output": "low" } . My parser expected { "summary": "...",…
The runner that was busy on someone else's job
My CI pipeline sat pending for ten minutes. The runner was healthy. So was every other pipeline in the queue. The default setting was the bug. Healt…
Treat Every `.gitlab-ci.yml` Edit as a Graph Change, Not a Text Diff
A dangerous GitLab CI change rarely looks dangerous in a merge request. The YAML diff is small: one rules: block becomes if: $CI_COMMIT_BRANCH , a j…
Хаос, шок, приватные ключи от не менее приватного GitLab
Последние пару месяцев злоумышленник распространял трояны с нескольких npm-учеток: alex05255 , mdrafiqulislamrabby , b.w1001 , abdev8773 и mollspotw…
Six ways GitLab CLI documented itself wrong, and the two CI traps I hit finding them
Before the July 2026 GitLab Hackathon I spent a few days reading gitlab-org/cli , the Go source behind glab . I wasn't hunting for crashes. I was lo…
GitLab packages Duo Agent Flows so multi-step runs share the platform's controls
In a blog post this week, GitLab put a name on the abstraction it wants delivery teams to build around: Duo Agent Flows, packaged multi-step runs me…
Anthropic's newer Sonnet lands on GitLab Duo, routed through the AI Gateway
The Friday before a long weekend, I asked an agent to migrate a legacy webhook handler while I closed my laptop. It came back with a diff that compi…
NestJS Zero-Downtime Deployment on DigitalOcean with GitLab CI/CD and PM2
Deploying a NestJS backend to production with true zero downtime is more involved than most guides suggest. This is a complete, battle-tested walkth…
Best Practices по GitLab CI/CD: от workflow:rules и кеша до OIDC, BuildKit, ревью-окружений и безопасных раннеров
Статья получилась большой: практик много, и каждая из них важна по-своему. Я собрал материал как набор best practices: не все пункты нужны каждому п…
GuardDuo — The AI Guardian That Keeps Vibe-Coding in Check
AI coding tools are incredible. But I noticed something — they ship code fast, skip the rules, and nobody catches it until it's already in productio…
AI for GitLab CI Authoring: Save Hours, Avoid Footguns
GitLab CI YAML is one of those formats where you can stare at it for an hour, get it 95% right, and have it fail with yaml: line 12: did not find ex…
«У меня работает»: десять способов узнать, что нет
Я думал, проект готов к релизу. CI думал иначе — и оказался прав десять раз. История про то, что видно только на чистом раннере. «Полностью готовый»…