December 2023 Summaries

GitLab Duo Code Suggestions, part of the AI-powered GitLab Duo suite, is now generally available with GitLab 16.7, offering a generative AI code creation assistant designed to improve developer efficiency and secure code writing within the DevSecOps platform. Highlighted in GitLab's 2023 State of AI in Software Development report, a significant 83% of DevSecOps professionals emphasized the importance of integrating AI into software development to remain competitive, with many showing interest in AI-driven code generation. Code Suggestions aims to streamline development processes by reducing context switching and enhancing productivity, offering features like code generation and completion in 15 programming languages. It integrates seamlessly with popular IDEs and GitLab's Web IDE, ensuring a smooth user experience. GitLab Duo includes various AI-assisted features that support the entire software development lifecycle, emphasizing security and operational efficiency while maintaining a privacy-first approach. Users can trial Code Suggestions for free until February 14, after which it will be available as an add-on to GitLab subscriptions for an introductory price.

GitLab 16.7 introduces the CI/CD Catalog (Beta) to enhance developer efficiency in DevSecOps by providing a centralized hub for sharing and discovering reusable CI/CD pipeline configurations. This catalog addresses challenges in the CI/CD process such as discoverability, reusability, and ease of contribution by allowing developers to find pre-existing configurations, integrate them into their projects, and contribute their own configurations to the wider GitLab community. Developers can navigate the catalog to explore various components, utilize detailed documentation to understand their use, and incorporate them into their CI/CD pipelines using the .gitlab-ci.yml file. The platform encourages collaboration across organizations by enabling users to publish their components, which are then cataloged publicly, thereby harnessing collective expertise and fostering a community-driven approach to software development. This initiative aims to streamline the development process by reducing redundancy and promoting the efficient reuse of pipeline components.

Google Summer of Code (GSoC) is an initiative aimed at integrating new contributors into open source software development, with GitLab actively participating for over five years. The program involves open source organizations proposing projects and providing mentors, with contributors being selected, guided, and funded by Google over a 12-week period. In 2023, GitLab mentors supported contributors like Kousik Sanagavarapu, who worked on enhancing Git commands by porting formatting options from the "pretty" to the "ref-filter" format, resulting in new capabilities in Git 2.43. Prospective contributors are encouraged to prepare early by familiarizing themselves with GitLab or Git, as applications are strengthened by prior learning and small contributions. GitLab supports this mission by offering extensive documentation and internal mentoring programs, emphasizing its commitment to its philosophy that "Everyone can contribute."

GitLab is advancing towards an open beta of its Product Analytics feature set, designed to help users monitor and visualize data to assess how well their features meet goals, with a strong emphasis on privacy. The feature set includes a managed analytics stack, multiple SDKs for instrumentation, and dashboards for data visualization. By internally testing the Product Analytics on GitLab.com, the company achieved significant event volume to stress-test the system, leading to a 17x increase in load, and allowing the team to identify and resolve infrastructure issues, validate scaling strategies, and improve the onboarding experience for beta users. This testing phase provided valuable insights into the performance and scalability of the analytics stack, ensuring readiness for future customer load. Feedback from internal and external users during this phase is driving improvements in dashboard functionality, with plans to incorporate AI to enhance data accessibility. GitLab encourages user feedback to refine its Product Analytics offering and is eager for users to experience the features firsthand.

State and local government leaders face the dual challenges of adapting to new fiscal constraints and modernizing cybersecurity practices amid uncertainties in federal funding and increasing demands for efficient digital services. The Department of Government Efficiency's efforts to curb U.S. federal spending may impact the $1.1 trillion annual funding crucial for state revenues, prompting government leaders to preemptively address potential budgetary pressures. Concurrently, escalating cyber threats have elevated cybersecurity to a top priority, necessitating secure development practices. GitLab Self-Managed with GitLab Duo Self-Hosted emerges as a vital tool for governmental agencies, providing a comprehensive DevSecOps platform that ensures data sovereignty, compliance, and secure, efficient service delivery in air-gapped environments. With features like customizable compliance frameworks and advanced AI capabilities, GitLab aids in consolidating fragmented toolchains, thereby improving developer productivity and reducing IT costs while maintaining stringent security standards. GitLab's robust analytics capabilities offer government agencies the means to substantiate efficiency improvements and justify modernization investments through data-driven insights, supporting a sustainable path toward enhanced operational efficiency and service delivery.

Manuel Gauto, director of engineering at Sigma Defense, has been instrumental in the development and success of Black Pearl, a managed DevSecOps environment for the U.S. Navy. Black Pearl consolidates multiple software factories into a single cloud platform, significantly reducing setup time and costs while enhancing security and onboarding efficiency. It incorporates GitLab's DevSecOps platform, which centralizes development, security, and compliance tools to foster collaborative efficiency and streamline processes. Gauto emphasizes the importance of breaking down silos, centralizing security, and enabling rapid onboarding to create a robust DevSecOps environment. Black Pearl's design allows flexibility and innovation, catering to diverse military delivery environments while promoting ownership and adaptability among users. The project has seen a 400% increase in adoption over the past year, showcasing its effectiveness in allowing users to focus on solving their specific challenges without being bogged down by infrastructure concerns.

GitLab is introducing the Maven dependency proxy, a feature designed to enhance artifact management by allowing enterprises to consolidate their operations on the DevSecOps platform. This new tool, currently in Beta, expands GitLab's package registry capabilities, aiming to make software pipelines faster, more reliable, and less costly in terms of data transfer by caching packages for future use. The Maven dependency proxy allows users to configure an external Java repository, ensuring packages are first sought in GitLab and then pulled from the external source if necessary, thus optimizing download speeds and reducing security risks. This feature is part of GitLab's effort to support enterprise organizations in transitioning away from other artifact management vendors like Artifactory or Sonatype, with virtual registries enabling publication, proxying, and caching of multiple package repositories under a single URL. It is initially available to Premium tier customers, with plans to expand its capabilities to support other dependency formats, such as npm, PyPI, and NuGet, and its success will be measured through metrics like package pull rates and cache hit ratios.

Rafael Campuzano, the CTO of Betstudios, has been focused on enhancing the software development team's efficiency since joining the company, which is soon to be part of WA. Technology Group. Seeking to improve CI/CD capabilities and transition to a more reliable SaaS model, the team upgraded from GitLab's free tier to GitLab Premium. With Campuzano's previous experience at EveryMatrix, where a similar upgrade proved beneficial, the decision was straightforward. Initial benefits include reduced manual processes and time savings, allowing team leads to allocate more time to planning and code reviews. Although the team has not fully utilized all Premium features, they have already automated deployments, saving significant time, and plan to explore further capabilities such as Kubernetes integration. Campuzano advises that GitLab's all-in-one platform simplifies code production and management, negating the need for complex systems and emphasizing ease of use and support.

GitLab is encouraging users to upgrade to its new beta container registry, which offers online garbage collection, addressing longstanding issues with the legacy system such as high storage costs and performance inefficiencies. The previous registry, based on a fork of the Distribution project, struggled with scalability and usability, leading to expensive storage and operational challenges. By optimizing garbage collection for cloud storage solutions, GitLab achieved significant performance improvements, though the legacy system still required extensive downtime for operations. This led to the development of a next-generation container registry that supports advanced use cases, reduces costs, and enhances the API and UI performance and reliability. The company successfully implemented an online migration to this new system, which now deletes terabytes of data daily without service degradation. GitLab aims to extend these improvements to self-managed customers, offering features like improved sorting and filtering, UI enhancements, and support for protected repositories. They also invite early adopters to provide feedback to refine the registry's features further, while cautioning that beta features for self-managed systems may not be immediately available until the general release.