#gitlab — Public Fediverse posts

How to Install #GitLab on #AlmaLinux #VPS Easily

In this tutorial we are going to show you in detail how to install Gitlab on AlmaLinux VPS.
What is GitLab?
GitLab is open-source ...
Continued 👉 #dedicatedserver #selfhosting #rubygems #opensource #installguide #rubyonrails #selfhosted

How to Install GitLab on AlmaL...

Reward: You've received a Gavel of Marginal Competence — equip it before the next vuln drops, counselor.

https://www.bleepingcomputer.com/news/security/gitlab-warns-of-max-severity-rce-flaw-in-regex-compiler-engine/

#GitLab #CyberSecurity #ZeroDay #CodeExecution #CVE #PatchedOrPerish (3/3)

Yikes 😬 #gitlab

https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/

GitLab Patches Code Execution Flaw in CI/CD Compiler

GitLab has patched a critical code-execution flaw in its CI/CD compiler that allowed remote attackers to run arbitrary code on targeted instances. The vulnerability, tracked as CVE-2026-97229, was caused by an integer overflow weakness in the CI/CD Regular Expression Compiler.

https://osintsights.com/gitlab-patches-code-execution-flaw-in-cicd-compiler?utm_source=mastodon&utm_medium=social

#Gitlab #CodeExecution #Cicd #RegularExpressionCompiler #Cve202697229

GitLab security advisory. The standout CVE is a 10.0 critical CVE-2026-97229 - Integer Overflow issue in CI/CD Regular Expression Compiler impacts GitLab CE/EE

https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/

#gitlab #cve

GitLab Critical Patch Release: 19.4.2, 19.3.4, 19.2.8

Fixed an integer overflow in the CI/CD regular expression compiler that could allow an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in CI/CD configuration (CVE-2026-97229)

https://whatsnew.fyi/product/gitlab/releases/2026-10-12-gitlab-critical-patch-release-19.4.2-19.3.4-19.2

#GitLab #DevTools

GitLab Patches CVE-2026-97229 (CVSS 10.0) Flaw That Lets Unauthenticated Attackers Execute Arbitrary Code

https://securityonline.info/gitlab-cve-2026-97229-arbitrary-code-execution/

#GitLab #CVE202697229 #perfect10

The bill for my CI runner fleet came to $270, which doesn't sound like a lot of money until it's money you haven't got.

The two easy answers were spend more or test less. I wasn't having the second one. I'd rather pay in waiting time than drop a single test.

So I went through the receipt line by line: three weeks, 3,373 merge-request pipelines, 31,247 jobs. My hunch about where the money went was wrong.

The scary heavy jobs (mutation, fuzz, cross-arch) came to 5.7% of merge-request minutes. Renovate's branches were nearly half. Release merge requests were another 20.4%, entirely self-inflicted: I'd put CHANGELOG.md in the test jobs' change rules, so a file of markdown woke the whole suite.

Then main was rerunning the heavy jobs on the exact commit the merge request had already tested. 1,075 runner minutes to produce the same answer.

The fixes add up to something like 40% fewer merge-request minutes, and not one of them is a test I stopped running.

Most of that receipt was things I'd bought twice, which stings a bit more than the $270 did.

#CICD #GitLab #DevOps #Testing

https://phpboyscout.uk/which-tests-would-you-cut-when-the-bill-arrives/

The bill for my CI runner fleet came to $270, which doesn't sound like a lot of money until it's money you haven't got.

The two easy answers were spend more or test less. I wasn't having the second one. I'd rather pay in waiting time than drop a single test.

So I went through the receipt line by line: three weeks, 3,373 merge-request pipelines, 31,247 jobs. My hunch about where the money went was wrong.

The scary heavy jobs (mutation, fuzz, cross-arch) came to 5.7% of merge-request minutes. Renovate's branches were nearly half. Release merge requests were another 20.4%, entirely self-inflicted: I'd put CHANGELOG.md in the test jobs' change rules, so a file of markdown woke the whole suite.

Then main was rerunning the heavy jobs on the exact commit the merge request had already tested. 1,075 runner minutes to produce the same answer.

The fixes add up to something like 40% fewer merge-request minutes, and not one of them is a test I stopped running.

Most of that receipt was things I'd bought twice, which stings a bit more than the $270 did.

#CICD #GitLab #DevOps #Testing

https://phpboyscout.uk/which-tests-would-you-cut-when-the-bill-arrives/

A GitLab critical vulnerability, CVE-2026-97229 (CVSS 10.0), allows unauthenticated arbitrary code execution. Upgrade to GitLab 19.4.2 now.

#GitLab #CVE202697229 #ArbitraryCodeExecution #CICD #DevSecOps #PatchNow #CyberSecurity

https://securityonline.info/gitlab-cve-2026-97229-arbitrary-code-execution/?utm_source=mastodon&utm_medium=jetpack_social

I just sponsored zaccesss for the git-tutorial. Go sponsor the people behind open-source dependencies and projects!

Practical Git learning guide covering version control foundations, Codeberg, forgejo, gitea, GitHub, GitLab, branching, collaboration workflows and advanced command line usage:
https://github.com/zaccesss/git-unlocked

@isaacadjei is #newhere, he registered on 9. October 2026

https://www.isaacadjei.me/
https://github.com/sponsors/zaccesss

#sponsor #opensource #git #course #greatpeople #forgejo #codeberg #git #github #branching #gitlab #gitea #uk #developer #new #plboost #boost

Shipped today: Enkihost can now deploy your app straight from GitLab.

Connect your repo, push your code, and your Ruby, Rails or Jekyll site goes live. No server setup, no babysitting.

Still early days, so if you try it, I’d love to hear what works and what doesn’t.

https://enkihost.com

#Ruby #RubyOnRails #Jekyll #GitLab #BuildInPublic

@NuclearSquid I was not a big fan either until I discovered this #git feature.
Also, I'll use it on #Codeberg, not #Github.
I'm sooooo glad that my next employer uses #gitlab and not #github!
@halibut @TheyCallMeHacked

Your GitLab container registry doesn't have to fill up with untagged images from 18 months ago. Learn automated garbage collection and retention policies at 2 AM prevention: https://www.valtersit.com/guides/gitlab/gitlab-container-registry-cleanup-stop-running-out-of-disk-space/ #gitlab #devops

A Woodpecker CI 3.19 bezárta a titkokat kihasználó sebezhetőséget és hozott szerver által kikényszerített agent-címkéket — ez mit jelent a te CI-dre? Új runtime változók és local backend rugalmasság is van, érdemes elolvasni.

https://linuxmint.hu/hir/2026/10/megjelent-a-woodpecker-ci-319-szerver-altal-kikenyszeritett-agent-cimkek

#WoodpeckerCI #CI #CICD #security #agent #GitHub #GitLab #localbackend #kubernetes

Bonjour à toutes et à tous ! 👋

Concevoir un Pad institutionnel, collaboratif et directement hébergé sur la Forge : cela me trottait dans la tête depuis un moment... 👀

C'est maintenant disponible et ça s'appelle TickéPad !

→ https://tickepad.forge.apps.education.fr/

(1/3)

#NumériqueÉducatif #GitLab #LaForgeÉdu #CommunsNumériques #LogicielLibre