InfoQ Homepage GitLab Content on InfoQ
-
Entire's Git Forge Rethinks Git Collaboration for Coding Agents
Entire is a Git forge designed specifically for collaboration between human developers and AI coding agents. Its premise is that traditional software development infrastructure, particularly the pull request (PR) model, is not well suited to an environment where AI agents generate, review, and iterate on code at high speed.
-
GitLab 19.5 Makes Agentic Development a Governed Part of the DevOps Platform
GitLab 19.5, released on October 15, puts agentic software development and governance at the centre of the platform, making its GitLab MCP server generally available while expanding how external AI agents can interact with GitLab.
-
GitLab 19.4 Adds Goal-Driven Agents and Tighter Cost Controls
GitLab has released version 19.4 of its DevSecOps platform, adding a goal-driven mode to GitLab Duo CLI, three hosted open-weight models, a larger set of Model Context Protocol (MCP) tools, and more detailed controls for AI spending.
-
GitLab Vulnerability under Active Exploitation Enables Unauthenticated Data Exfiltration
CVE-2026-85706 is a critical GitLab path-traversal vulnerability that has moved beyond theoretical risk into confirmed exploitation. It affects self-managed GitLab CE/EE and could allow an unauthenticated remote attacker to read arbitrary files from the GitLab.
-
GitLab Duo Expands Self-Hosted AI Options through Microsoft Foundry
GitLab has expanded GitLab Duo Self-Hosted to support models deployed through Microsoft Foundry, letting organizations run GitLab's AI development capabilities against models hosted in their chosen Azure environment.
-
GitLab Warns That AI Agent Sandboxes Are Only as Secure as Their Network Access
GitLab warns that isolating an AI coding agent in a sandbox does not necessarily make the agent safe. In a new security analysis, the company describes an internal evaluation in which an AI agent escaped its sandbox by exploiting a vulnerable package proxy that had been explicitly placed on the sandbox's allowlist.
-
Uber Builds GitFarm to Run Git Operations as a Service for Large-Scale Monorepos
Uber’s GitFarm provides Git operations as a centralized service, eliminating local repository clones across large scale monorepo workloads. The platform uses prewarmed checkouts, ephemeral sandboxes, repository synchronization, and gRPC streaming to reduce resource consumption and startup latency for automation services operating across thousands of repositories.
-
GitLab Brings Carbon Awareness to CI/CD to Measure the Environmental Cost of Software Delivery
GitLab has introduced a new approach to Green DevOps, demonstrating how software engineering teams can measure the carbon emissions generated by their CI/CD pipelines.
-
GitLab 19.2 Puts AI Agents to Work on the Security Backlog
GitLab has released version 19.2 of its DevSecOps platform, adding agentic automation aimed at the security and review work that has piled up as AI coding tools generate more code than developers can check by hand. The release, announced on 16 July 2026, brings four features out of beta or into public beta: Dependency Scanning Auto-Remediation, Security Review Flow, GitLab Duo CLI and Custom Flows
-
GitLab Adds Flat-Rate Code Reviews, Free-Tier AI Access, and Spending Caps
Open-core DevOps vendor GitLab has shipped versions 18.10 and 18.11 of its DevSecOps platform, with changes that give agentic AI to users on the free tier, that cut the per-review cost of automated code analysis, and give administrators hard limits on how much teams can spend on AI credits each month.
-
GitLab Suggests AI Can Detect Vulnerabilities But it's AI Governance That Determines Risk
Artificial intelligence is rapidly transforming how software vulnerabilities are detected, but questions about who governs the risks AI exposes, and how those risks are acted on, are becoming increasingly urgent, according to a new blog post by GitLab.
-
GitLab 18.8 Marks General Availability of the Duo Agent Platform
GitLab 18.8 brings a number of new features, including GitLab Duo Planner Agent, GitLab Duo Security Analyst Agent, auto-dismiss irrelevant vulnerabilities, and more. With this release, the GitLab Duo Agent Platform, enabling organizations to orchestrate AI agents, reaches general availability.
-
Grafana and GitLab Introduce Serverless CI/CD Observability Integration
In a move to streamline development workflows, Daniel Fritzgerald of GrafanaLabs has published a new open-source solution that links GitLab CI/CD events into Grafana's observability stack via a serverless architecture.
-
GitLab Unveils Duo Agent Platform in Public Beta, Introducing Agent-Orchestrated DevSecOps
GitLab has launched the public beta of its GitLab Duo Agent Platform, an orchestration tool that enables developers to collaborate asynchronously with AI agents across the DevSecOps lifecycle.
-
GitLab 17.11 Enhances DevSecOps with Custom Compliance Frameworks and Expanded Controls
On April 17, 2025, GitLab released version 17.11, introducing significant advancements in compliance management and DevSecOps integration. A standout feature of this release is the introduction of Custom Compliance Frameworks, designed to embed regulatory compliance directly into the software development lifecycle.