Skip to content

Accept All すべて承認

GitLab Blog

20 stories

GitLab BlogGitHub10 questions to ask any software vendor about sovereignty Sovereignty is moving from buzzword to buying criterion. The European Commission’s proposed Cloud and AI Development Act (CADA) would set assurance levels for the cloud and AI services public…

GitLab BlogGitHubGitLab Orbit is GA: Higher agent accuracy, lower token cost An agent’s true cost isn’t only the tokens it burns. It’s the review that calls your code “safe to merge” after seeing the diff, but without any context on the pipeline.

GitLab BlogGitHubGitLab Orbit: Find vulnerability blast radius without the manual hunt A critical vulnerability needs a fix and a map. The fix is usually fast. Finding where the vulnerable component lives, who owns it, and whether it's exposed to the Internet is what costs you time.

GitLab BlogGitHubWhat happens when vulnerabilities are discovered faster than you can fix them? We're entering a new era of application security. Frontier AI models are uncovering complex flaws that traditional tools overlooked, and attackers are using the same models to exploit them faster.

GitLab BlogGitHubExtend GitLab Duo Agent Platform into your business systems Developers mostly use GitLab Duo Agent Platform where they already work: the IDE, merge requests, and issues.

GitLab BlogGitHubPillow CVE-2026-112900: How to find and fix it with GitLab GitLab is not affected by CVE-2026-112900 or the other vulnerabilities fixed in Pillow 13.0.0. GitLab products do not include the Pillow library, and our Security team has found no evidence of impact…

GitLab BlogGitHubPHP2Shell: GitLab helps find and remediate critical PHP flaws GitLab is not affected by PHP2Shell (CVE-2026-109618 and CVE-2026-109619). The GitLab application is not written in PHP and does not run it to serve web requests, and our Security team has found no…

GitLab BlogGitHubGitLab Critical Patch Release: 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, 18.11.13 On October 21, 2026, we released versions 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, 18.11.13 for GitLab Community Edition (CE) and Enterprise Edition (EE).

GitLab BlogGitHubRedesign how your team ships software with AI agents AI agents are sending more and more code into review queues built for human-paced work. A coding assistant can speed up code writing, but it can’t show you whether review, security checks, and…

GitLab BlogGitHubUncover the business logic vulnerabilities SAST scanners miss Broken object-level authorization ranks first on the OWASP API Security Top 10 , and OWASP says that traditional static application security testing (SAST) tools struggle to find access control…

GitLab BlogGitHubAI Governance: One view of agent activity AI coding agents are writing and changing code, from GitLab Duo Agent Platform agents to externally connected agents like Claude Code, Cursor, and Codex.

GitLab BlogGitHubThree developer tasks worth handing to an agent You already have an AI assistant. It completes your code, explains code you didn’t write, and maybe even drafts a whole feature while you sip your coffee.

GitLab BlogGitHubBuilding AI security in the open When code becomes abundant trust becomes scarce. That is the argument GitLab CEO Bill Staples made in his recent essay : AI is collapsing the cost of producing software, and everything around…

GitLab BlogGitHubGitLab Secrets Manager: Govern secrets like your code Credentials often start in an engineer's local dev environments, then get copied into unscoped CI/CD variables to keep pipelines running.

GitLab BlogGitHubGet every merge request in front of the right reviewer, faster The code is written. Now who reviews it? The volume of code has never been greater, but delivery hasn’t kept pace.

GitLab BlogGitHubConnect your agents to your software lifecycle with the GitLab MCP server Agents are working across your team's software development lifecycle, but most still operate as separate tools, leaving the context, handoffs, and permissions for your team to stitch together.

GitLab BlogGitHubUnblock agentic software delivery with governed code review AI agents have changed how much code a team can produce in a day. Review queues haven’t kept up, and delivery stalls while changes wait for a closer look.

GitLab BlogGitHubGitLab 19.5 released We are excited to recognize Dhairya , a Level 3 contributor, as this month’s Notable Contributor !

GitLab BlogGitHubGemini 4 Argon on GitLab: Built for long-running agentic work As AI models take on longer, multi-step work, the challenge is putting that power to use across the software lifecycle without adding risk or cost.

GitLab BlogGitHubScaling Git for the agentic software factory AI agents are fundamentally changing the economics of software development. As the cost of producing code falls, the volume of changes moving through the software factory is accelerating beyond what…

On the calendar

予定 · Conferences and launch events, this week's stories from each corner of the industry, and what its press is covering — in English

On view

This week, from that corner the newest stories from the corner of the industry you picked

The wire their own posts, translated

How code moves in 2026 from the industry's own reports

Sources

Fetched every six hours, linked to the original

About

The name is the button.

An agent writes the code now, and a human thumb hovers over Accept all a hundred times a day. The honest question of this decade is what, exactly, you just accepted. So I read the diff.

Eight years as a backend engineer in Stockholm, back in Tokyo since 2023, and I still ship something small most nights, usually badly. My one rule: the only real review of a model is the thing you built with it. That is why there is no leaderboard on this site.

Around a hundred and forty sources come through — the labs' own posts, the papers, the tools, the runtimes and languages nobody is watching yet, the chip under the demo, and the newsletters people actually forward. What is moving gets counted so the week reads at a glance, and every few days I explain one mechanism in plain words.

A story here is a headline, a short excerpt, one image and the link to whoever wrote it. We never reproduce the post; the images belong to their authors. A post written in Japanese appears in Japanese, exactly as it was published, and the link goes to the original.

— Yuki Halvorsen, Tokyo