News

GitLab has released further point versions of their DevOps software package. Versions 15.3 through 15.9 been released on a monthly cadence. GitLab's first machine-learning powered feature improves ...
This plugin fetches the source and target branches of a Gitlab merge request and makes them available to your build via build parameters. Once the build completes, Jenkins will leave a comment on the ...
GitLab 11.11, recently released, brings Multiple Assignees for Merge Requests, Windows Container Executor for GitLab Runners, Guest Access to Releases, instance-level Kubernetes cluster, and more.
CVE-2024-0456 – An unauthorised attacker can assign any user to merge requests in a project. Two third-party packages, the libxml2 library and redis, have also been patched against vulnerabilities.
Examples include merge requests, commits, bug descriptions and comments, and source code. The researchers demonstrated how instructions embedded inside these sources can lead Duo astray.
GitLab’s coding assistant Duo can parse malicious AI prompts hidden in comments, source code, merge request descriptions and commit messages from public repositories, researchers found.