GitLab Blog
Featured blog posts
DevSecOps
How to calculate DevOps platform total cost of ownership
Budget pressure on your toolchain? See what goes into DevOps platform costs, from compute to security to tool sprawl, and where to cut.
Product
GitLab Critical Patch Release: 19.3.2, 19.2.6, 19.1.8
Read about this critical patch release for GitLab Community Edition and Enterprise Edition.
Security
Prepare for the Cyber Resilience Act's 24-hour reporting deadline
Under the Cyber Resilience Act, manufacturers have 24 hours to report an actively exploited vulnerability in their product. See how GitLab helps you answer fast.
Recent posts
Engineering
Co-Create: Building GitLab with our users
How GitLab users collaborated with us to build practical product improvements in the first half of 2026.
Browse by category
Agile Planning
Agile planning gets a boost from new features in GitLab 18.10
Work items list and saved views reduce context switching, keeping your software development team aligned and their workflows efficient.
Ace your planning without the context-switching
Embedded views: The future of work tracking in GitLab
AI
GPT-6 Astra on GitLab: Faster runs, fewer tokens used
On GitLab Duo Agent Platform, GPT-6 Astra completes a typical run up to 43.4% faster than GPT-5.6 Sol and uses 42.7% fewer tokens.
Bring your own model to GitLab Duo Self-Hosted with Microsoft Foundry
GitLab’s internal playbook to foster AI-fluent technical teams
Bulletin Board
curl removed from Omnibus-GitLab FIPS packages in 19.0
With the Omnibus-GitLab 19.0 release, GitLab will stop building curl for FIPS customers. Here’s what you need to know.
Claude Opus 4.7 is now available in GitLab Duo Agent Platform
Passkeys now available for passwordless sign-in and 2FA on GitLab
Customer Stories
The Co-Create Program: How customers are collaborating to build GitLab
Learn how organizations like Thales, Scania, and Kitware are partnering with GitLab engineers to contribute meaningful features that benefit the entire community.
Kingfisher transforming the developer experience with GitLab
How Indeed transformed its CI platform with GitLab
DevSecOps
How to calculate DevOps platform total cost of ownership
Budget pressure on your toolchain? See what goes into DevOps platform costs, from compute to security to tool sprawl, and where to cut.
Consolidate your GitLab stack with Gitaly on Kubernetes
Teaching software development the easy way using GitLab
Engineering
Co-Create: Building GitLab with our users
How GitLab users collaborated with us to build practical product improvements in the first half of 2026.
Git was built for humans — agents need an upgrade
From chaos to context: Building an AI dev workflow
News
When code is abundant
Producing code is getting cheap. Trusting it is not. Why enterprises need a durable layer of context, verification, and governance around AI agents.
GitLab named a Leader in the 2026 Gartner® Magic Quadrant™ for DevSecOps Platforms
GitLab and Capgemini accelerate DevSecOps transformation
Open Source
How to recognize your team with GitLab Achievements
Reward the people who make your team great — in your company, community, or open source project. Learn why we built this feature and how to use it.
What's new in Git 2.55.0?
GitLab AI Hackathon 2026: Meet the winners
Product
GitLab Critical Patch Release: 19.3.2, 19.2.6, 19.1.8
Read about this critical patch release for GitLab Community Edition and Enterprise Edition.
Making room for what's next in the GitLab UI
GitLab Patch Release: 19.3.1, 19.2.5, 19.1.7
Security
Prepare for the Cyber Resilience Act's 24-hour reporting deadline
Under the Cyber Resilience Act, manufacturers have 24 hours to report an actively exploited vulnerability in their product. See how GitLab helps you answer fast.
GitLab compliance frameworks: Adhere to SOC 2 in minutes
When your backlog outgrows your team, GitLab scales remediation
Security Labs
Critical remote code execution in vm2, a widely used Node.js sandbox library
GitLab's Threat Research Group found a critical sandbox escape in vm2 that runs attacker code using the library's own documented configuration.
