绿盟科技通告，GitLab存在远程代码执行漏洞CVE-2026-97229，CVSS评分10.0。因CI/CD配置正则验证不足，未认证攻击者可触发整数溢出，以Git账户执行任意代码。影响GitLab CE/EE多个19.x版本，官方已修复，建议升级至19.2.8、19.3.5或19.4.2以上，或限制访问。

VoidZero has launched Vite+ 1.0, the first stable version of its JavaScript toolchain. It features a command line tool for managing Node.js, package management, and frontend development from a...

GitLab has released version 19.4 of its DevSecOps platform, adding a goal-driven mode to GitLab Duo CLI, three hosted open-weight models, a larger set of Model Context Protocol (MCP) tools, and...

forge-bot 是一个基于 Rust 的编程智能体网关，可在 Issue 和 PR 评论中提及机器人来启动任务，智能体读取仓库、修改代码并回复结果。它支持 Forgejo、GitHub、GitLab 及多种智能体适配器，保留线程会话，并提供状态页、通知以及实现与审查智能体的自动交接。部署时需注意权限隔离，适合自托管团队使用。

CVE-2026-85706 is a critical GitLab path-traversal vulnerability that has moved beyond theoretical risk into confirmed exploitation. It affects self-managed GitLab CE/EE and could allow an...

GitLab has expanded GitLab Duo Self-Hosted to support models deployed through Microsoft Foundry, letting organizations run GitLab's AI development capabilities against models hosted in their...

本文介绍在Ubuntu上安装Kubernetes并通过GitLab CI实现自动部署：关闭swap、启用IPv4转发，安装kubelet、kubeadm、kubectl，配置containerd国内镜像与私有仓库；Master节点用kubeadm init初始化并安装Calico网络插件，Worker节点加入集群；在GitLab Runner安装kubectl并配置kubeconfig，通过.gitlab-ci.yml自动部署。

GitLab warns that isolating an AI coding agent in a sandbox does not necessarily make the agent safe. In a new security analysis, the company describes an internal evaluation in which an AI agent...

GitLab has introduced a new approach to Green DevOps, demonstrating how software engineering teams can measure the carbon emissions generated by their CI/CD pipelines. By Craig Risi

GitLab has released version 19.2 of its DevSecOps platform, adding agentic automation aimed at the security and review work that has piled up as AI coding tools generate more code than developers...

GitLab's 2026 AI Accountability Report highlights an AI Paradox: although 78% of developers say they code faster, overall software delivery has not accelerated due to downstream testing and review...

GitLab 19.0 extends agentic AI beyond code generation into securing credentials, reviewing and merging changes, and scanning dependencies, adding a public beta Secrets Manager, a full merge...