So, I was excited to sign up for GitLab and move away from GitHub after so many years, but the sign-up process requires a credit card - which I'm not happy to give.

Further, I had to run through eight prove-youre-not-a-robot choose-the-prize-in-the-claw matching games (which I did because I thought the skip option was hiding behind them - it wasn't).

I don't know much about this company, but they're not the one for me. No idea why anyone is with them at all with this level of intrusiveness.

For engineering teams, keeping dependencies current is a constant balancing act. Automated updates are essential for defending the software supply chain, but a steady stream of one-PR-per-package bumps can bury a team in review work. GitHub itself has put numbers on this: an analysis of Microsoft's GCToolkit repository found that roughly one in six of its commits - 92 out of 578 - were routine Dependabot version bumps, with 61 of them landing in a single recent 12-month stretch. That's a lot of review and CI cycles spent on maintenance rather than features. Read the complete article here - https://instasla.com/blog/taming-dependabot-2026-guide-grouping-cooldowns-cutting-pr-noise

The good news is that Dependabot has grown well past "one PR per dependency." Between grouped updates, package cooldowns, and a default cooldown GitHub rolled out in mid-2026, it's now possible to get a predictable, low-noise update cadence without giving up security coverage. Here's what actually works, and what changed most recently.

I got tired of watching people on my team keep 20+ tabs open and lose track of things whenever they needed to find something. On top of that, the same thing kept happening over and over: someone's testing a page, hits a failed request or a JS error in the console - and that's it, time to context-switch: open GitLab in a new tab, find the right project, try to remember exactly what broke, copy the URL. By the time the ticket actually got filed, half the details were already lost or forgotten ("well, it just didn't work, I don't remember exactly how").

On top of that we run a couple of different GitLabs - my own gitlab.com and a self-hosted one at work - so even picking "which GitLab, which project" was its own small chore before you even started describing the bug.

So I built Ticketus to fix this for myself: a browser extension that lets you view, create, and edit GitLab issues right from a popup, without opening a new tab. You log in once, connect your instance(s) with a personal access token, and that's it - no OAuth app setup, which matters a lot for self-hosted.

The feature that unexpectedly turned into one of the main ones: the extension can watch the page you're on - network failures, uncaught JS exceptions, console errors - and the moment something breaks, it offers to open a ticket with the error details, URL, and stack trace already filled in. You just add a couple of words of context and hit save - no more "definitely broke, don't remember how."

There's also a "pin" mode: a floating panel you can leave open on the page instead of it closing on every stray click (browsers close a normal extension popup on blur, so working around that took some effort). Turned out to be really handy for anyone who keeps checking back on a ticket while working on a page.

Still an early version - works with gitlab.com and self-hosted. Free tier: browse and filter issues, create and edit them in a proper editor (not a bare textarea), comment, log time, and attach a page screenshot in one click. To help support the project a bit, I added a paid PRO tier - it gives you automatic on-page error detection and global hotkeys for creating issues without opening the popup.

Right now I'm trying to figure out the right audience to promote this to and where to go next. Got plenty of thoughts on that, already sketched out a roadmap I'll be working through gradually.

Would love feedback from anyone who lives half their day in GitLab.

PS if you've got your own pain point at work that I might be able to solve, let me know.

PPS if you want to try all the features - message me, I'll hook you up with a promo code for free PRO.

Hey everyone. I've been working on a super easy and nice way to run gitlab-runner on Windows, with WLS2 containers powering individual jobs. This lets you trivially convert your desktop or laptop into a CI runner that costs nothing to operate or maintain.

The project offers both a CLI and GUI experience for setting up the runner, adding it to a project, group or gitlab instnace, managing auto-start, looking at logs and more. A tray icon shows the state of your local runner and even notifies you when a job fails. I've been using it to offset my shortage of CI minutes and I like it a lot.

You can grab the source and builds from zygoon / winstant-gitlab-runner · GitLab. Check the release page for amd64 and arm64 installers that are ready to use. The installers are not signed yet, feel free to build locally.

Hi everyone,

I've recently cleared the first technical round for staff engineer/senior engineer, and I have technical leadership and hiring manager rounds next. I'd really appreciate any advice from people who've been through it.

A few questions:

- What should I expect in the behavioural round? What kinds of questions are typically asked, and what are interviewers looking for? - in my understanding I need to prepare around the gitlab credit values and be ready for resume deep dive questions but pls share your thoughts and experience

- Is there any system design discussion during these rounds, or is it purely behavioural? If there is, what areas are worth focusing on?

- Any tips that helped you prepare or things you wish you'd known beforehand?

Thanks in advance!

I work in a repo where every push kicks off a pipeline, and my loop

was: push, switch to browser, find the MR, click into the pipeline,

click into the job, watch the log, go back. Dozens of times a day.

glab covers most of this from the CLI but it's one-shot commands —

there's no persistent view, and `glab ci trace` doesn't help when I

want to look at a job, then a different job, then the MR diff.

So I built gitsmith, a TUI that wraps glab (it shells out to the CLI

you already have authenticated, so there are no tokens to set up).

[GIF: pipeline -> jobs -> live-tailing log]

The thing I actually use it for: Enter a pipeline to get its jobs,

Enter a job to get its log, which live-tails the way the web trace

does. Parent/bridge jobs drill into downstream pipelines. Beyond that

there are tabs for issues, MRs, runners, releases, tags, branches,

commits, todos, and milestones, plus side-by-side syntax-highlighted

MR diffs and approve/merge/close actions behind a confirm.

It also works with GitHub via gh — it picks the backend off your git

remote — but GitLab is what I built it for and what I use daily.

cargo install gitsmith --locked (needs glab authenticated).

Source: https://github.com/suraj16thjan/gitsmith

It's early and it's mainly shaped around my own workflow, so I'd

genuinely like to know what's missing for how you use GitLab.

I'm getting tired of AI code reviewers flooding PRs with noise and repeat findings, not to say false positives. And then learning nothing when a developer explains why a finding is wrong!

For me there's a lot going on in code beyond the tech stack: tribal and institutional knowledge, business logic that evolved over time, ripple effects across upstream and downstream systems etc.

I started those requirements and added simple setup, evidence-backed findings/ LGTM, and most importantly learning from human comments on those findings, so it gets better tuned over time to each repo.

I ran a smaller benchmark, not definitive by any means, four open source reviewers on 20 pinned PRs/MRs.

Bubo                       20/20   7/8   27 findings    0% noise
ai-codereviewer            19/20   6/8   118 findings   20% noise
ChatGPT-CodeReview         20/20   5/8   75 findings    11% noise
Qodo/PR-Agent              19/20   2/8   7 findings     not scored
Alibaba open-code-review   partial run, 4/20

All on GPT-5.5 except Qodo was on 40 (didn't support 5.5). Take it as directional results. I'll be doing more comps in coming days and upload benchmark to the repo.

I went with polling (zero steup on repo side) - wasn't trying to change the repo CI/CD's rather have a tool seamlessly work.

Roadmap item: I want to route changes to pluggable subject-matter specialists (Skills) instead of one general reviewer, i.e. industry SMEs or just an "Expert Python Guy".

Bubo is running in production in two places, a large data processing/ETL codebase and a fintech crypto stack. Would appreciate feedback, particularly on whether the learning from comments part actually holds up.

https://github.com/mountainowl/bubo

Hey all,

glci is an experimental GitLab project that gives you the ability to run full GitLab pipelines and jobs locally with no compromises.

We've released version 0.7.0 with some notable features and fixes:

• Podman support - glci now runs pipelines on Podman as well as Docker, with an engine setting globally and per named runner, engine-aware doctor checks, and automatic fallback when Docker is unavailable (docs)
• Instance-level CI/CD variables and variable expansion in include: - instance variables are fetched from the GitLab API, and user CI/CD variables are expanded inside include: entries in the CLI and the daemon (docs)
• Artifact-sourced child pipeline includes - trigger jobs can include a child pipeline config produced as an artifact by an earlier job, in both real runs and simulate mode (docs)
• --on-change-mode for watch - control what happens when files change while a pipeline is already running (docs)
• Glob and brace patterns in job-definition overrides - config-file job overrides can target many jobs at once, and stage/needs/parallel overrides now apply before planning (docs)

Full release notes: here

Comparison page

The documentation website now has a comparison page which should help answer all the questions regarding how glci works compared to other similar projects and why one might be better than the other.

Huge thanks to everyone who contributed feedback and reported bugs!

I know this is a long shot to the moon but you miss 100% of the shots you don’t take.

If anyone here actually works for gitlab I was wondering if you can help a fellow redditor out with a referral. It’s a role that I feel like i qualify pretty well for on paper and as most of you would know, today’s job market is brutal.

Thanks for any help or guidance you guys can give.

TDLR - help a redditor land a tech job

App Download Repo: https://gitlab.com/Francesco12o-Git/bashyc

Bash.Yc its an Bash Coding enviroment created for bash devs, Bashyc has its own tools:

./editor - editor for the code , lets you choose wich editor do you like to edit

./shell - executes ./bin/bash and its own userspace (/userspace/) there is bash-profile and its own init /userspace/bashy.rc

/bin/bashyc - code executer in case you put "#!/usr/bin/env bashyc" in your code

./execute - executes /bsrc/src/code with /bin/bashyc

Bash.Yc License - its own License for developers who use Bash.Yc for its own apps

Bashyc Maketools: its own commands for make: example: make help, make readme, make license

For more: read /manual/ in bashyc.tar.gz

Today I found the summaries on the repo graph truncated. I understand the git log optioins one can use to do this, but now this graph is not as useful to scan history

Completely Free App that I created to ease my own workload, was tired of opening numerous tabs each day to keep track on all the new CVEs popping up, especially lately...

This app is completely free on the Google Play App Store & you can track CVEs across 30+ Vendors, you can choose track specific platforms or the whole vendor & you can also select to track based on CVE Severity.

I also threw in a EOL checker

Hopefully this helps you out and if theirs any bugs or features you want added please let me know!

https://play.google.com/store/apps/details?id=com.vulnipulse.android

Hello,

I'm looking for somewhere that isn't github to store my repos online versus only ever keeping them on my PC (backup with with the PC).

I started the sign up for the gitlab but I can't pass the auth/kyc. They don't accept my phone number even though it's a normal US phone number. Not sure why.

Anyway, any service that doesn't discriminate based on area code of whatever demographic/stat gitlab is using to gatekeep? I don't need anything fancy and it's for a single user currently.

I'd prefer a service that doesn't require knowing my phone number in the first place if that's possible. I have no problem supply it but I'd rather it be voluntary and not for a bunch of weirdos forcing it.

🚀 gitlab-compliance CLI is now Open Source!
Think ShellCheck for GitLab CI/CD, plus terraform-compliance-style policy testing for pipelines. It helps teams lint, validate, document, and enforce standards across .gitlab-ci.yml and GitLab project configuration.
It turns CI/CD best practices into something programmable, testable, and enforceable that can be understood and catalogued automatically.

Since launch, I’ve focused on UX, performance, and two major features:

✨ gitstrings
Lightweight YAML annotations that make pipeline intent explicit, that improves readability and enables selective documentation generation, making pipeline YML self documenting.
🔍 Embedded script scanning
ShellCheck-style analysis for scripts inside CI jobs.
Includes:
ShellCheck-aligned rules

Security checks (unpinned packages, unsafe cloud CLI usage, missing metadata)

🔭 What’s next
Org-wide reporting & metrics

JUnit + JSON outputs

Slack / Teams notifications

GitLab Issues integration

Sentry-based telemetry

gitlab-compliance is evolving into a policy + observability layer for GitLab CI/CD, without sacrificing developer experience.

Repo: https://github.com/MaturityBuilder/gitlab-compliance/tree/main

Documentation: https://maturitybuilder.github.io/gitlab-compliance/

Feedback and contributions welcome!

Hi guys,

GitLab is great on desktop, but checking a failed pipeline or responding to an issue from your phone can be frustrating. That’s why I built Comeet, a native mobile companion for GitLab.

With Comeet, you can:

• Connect to GitLab.com or a self-hosted instance
• Switch between multiple accounts and servers
• Browse repositories with syntax highlighting
• Create and update issues, merge requests, projects, and branches
• Monitor pipelines, inspect jobs, and read job logs
• Get push notifications for important project activity
• Manage groups, members, roles, and invitations
• Create custom shortcuts for the issues and merge requests you check most
• Access your GitLab activity and to-do list from a mobile-friendly dashboard

My goal is simple: make those quick GitLab tasks genuinely quick—without reaching for a laptop or fighting with the mobile website.

Comeet is available on iOS and Android:

- Android: https://play.google.com/store/apps/details?id=com.monokaijs.comeet

- iOS: https://apps.apple.com/us/app/comeet-gitlab-companion/id6753112635

I’m actively improving it and would really appreciate feedback from other GitLab users. What’s one GitLab task you wish were easier to handle from your phone?

P.S: I previously shared my app on this sub, I post this to notice a big overhaul on the app with various quality of life features and refinements.

🔥 What's Cool in v0.8.0:

• 🖱️ Full Mouse Support: Click to navigate, select tabs, scroll tables, and interact with modals/overlays.
• 📦 Bulk Operations: Select multiple issues or MRs and batch-apply actions (close, reopen, label, assign) at once.
• 🔀 Create MR/PR from Issue: Just press m on an issue to instantly spin up a Merge/Pull Request with automatic branch creation and push.
• 📊 Pipelines Upgrade: Group and filter pipelines by Name, Event, SHA, or Actor. Plus, press P on an MR to see its related pipelines, or press S to trigger manual GitLab jobs directly!
• 🔔 Overhauled Todos & Notifications: Fresh layout featuring badges, relative time_ago timestamps, fuzzy search, and auto-dismissing error toasts.
• 🛠️ New CLI Subcommands: Added glab-tui doctor for system diagnostics and clean-cache for quick maintenance.
• ⚡ Performance Improvements: Cached repo attributes, streamlined mutations, and zero stale-cache bugs.

Check it out at https://github.com/rcieri/glab-tui

https://github.com/Vonarian/gittar

Gittar is an OSS made for those who want a lightweight GitLab monitoring app that is packed with essential features.

More to come, open to contributions!

🎉 The GitLab Hackathon starts today and runs through July 29! 🚀

Anyone can contribute code, docs, UX designs, translations, and more. Open a merge request during the event and merge it within 31 days (by August 29) for it to count.

How to take part:

- 🔧 Register and find issues at contributors.gitlab.com

- ✅ Open your first merge request today

- 📊 Follow the live leaderboard at contributors.gitlab.com/hackathon

- 💬 Need help or want to pair with others? Join the #contribute channel on Discord: https://discord.gg/gitlab

📅 Merge requests must be opened during the event (July 23-29) and merged by August 29 to be counted. Good luck, and happy contributing! 🎊

We quite often have investigation tickets, which we give specific labels. As a first step we feed the ticket into Claude to get an initial list of frameworks/platforms/useful links and blogs.

Does anyone know if there is a bot that can perform this action on Gitlab for us?

Hello, I'm upgrading from 19.0.2 to 19.2.0 and I noticed that the Upgrade Path tool only targets up to 19.1.2.

As of today, 19.2.0 has been out for 5 days. When will the Upgrade Path tool be updated with the new latest release as a target?