与「GitLab」相关的搜索结果

🔥 太实用了，Plannotator 能让你像改作业一样，在浏览器里直接圈改 AI agent 写的计划和代码，批注一键送回给 agent。 Plannotator 上过 GitHub 热榜，已经 1 万+ star，11 月 10 日到 13 日四天连发了四个版本。 用 Claude Code 这类 agent 干活，最磨人的是审计划：它甩出一大段方案，你只能在终端里打字回「第三步不对，第五步换个思路」，来回几轮上下文就乱了。 Plannotator 把计划、规格文档、HTML 和代码 diff 都打开成一个本地网页，哪句不对就选中哪句写批注，改完一键送回，agent 拿到的是逐条定位好的反馈。审代码也一样，本地改动和 GitHub、GitLab 上的 PR 都能看。 它支持 Claude Code、Codex、Gemini CLI、OpenCode 等一串 agent。新加的 Inbox 还能让 agent 主动把问题和文件丢给你，你回复后答案会回到提问的那个会话。不收集遥测，计划、批注和历史默认都存在本地。同名组织下还有个终端版 plannotator-tui，不想开浏览器也能批。 盯 agent 干活，总算有了一支红笔。 GitHub：

Everything we shipped at DevDay 2026: - Dots - ChatGPT Space - Pages - Teams + team automations - @ChatGPT in Slack + Microsoft Teams - Meetings plugin (beta) - Shareable profiles - GPT-6.1 Sol - GPT-6 Astra Ultrafast - Pro 500 - Sign in with ChatGPT + plan usage in partner apps - Codex cloud environments - Refreshed Codex CLI with voice + /agents - Code Review + automatic reviews + GitLab support - Codex Security Cloud - Computer use in the Agents API - Bedrock Managed Agents powered by OpenAI - Decisions API (limited preview) - Plugin extensions: sidebars, panels + file viewers - Plugin submission + discovery improvements - MCP events for automations - MCP extensions SDKs: Python + Node - Plugins + MCP hosting in Sites - ZDR with Private Safety Processing What an incredible time to be building!!

🚨 SlowMist TI Alert 🚨 MemTensor's AI memory tooling has been compromised: MemoryOS (PyPI), the company's open-source long-term memory library for LLM and AI agents, and memtensor/memos-cloud-openclaw-plugin (npm), the official plugin connecting it to the OpenClaw agent runtime. Affected versions bundle cross-platform Go binaries that execute when the package is loaded or imported: MemoryOS==2.0.34 on PyPI, and plugin versions 0.1.21, 0.1.23 and 0.1.25 on npm. You are affected if the PyPI version has been imported in your environment, or if the npm plugin is installed and the OpenClaw gateway has been started. Potential attacker actions include harvesting npm/PyPI tokens, GitHub/GitLab credentials, AWS keys, SSH keys, API tokens, environment secrets, and other developer credentials, with data sent to infrastructure under skyleen[.]fr. The affected npm plugin may also expose user prompt content. Users should remove or downgrade affected packages to known-good versions (0.1.20 for npm and 2.0.33 for PyPI), terminate sckit processes, block associated infrastructure, review network activity, and rotate credentials accessible from affected environments. You can also visit to check for free whether the npm packages, pip packages, domains, or IPs you use are safe. Reference: As always, stay vigilant!

I bought a Fable dataset from one of the top Chinese LLM routers yesterday. With just 6TB data, I can take over 7 Chinese/CIS gov entities & 19 top Chinese firms like Xiaomi, Huawei, NIO, Minimax using SSH keys, VPN configs, Aliyun keys, GitLab tokens sent to the router.

🚀 Today we're launching agentic triage in @roboto_ai. Roboto Agents can now review every robot log the moment it arrives and open labeled issues in #Jira#, #Linear# or #GitLab# with supporting evidence attached. It’s the first line of defense that every #robotics# team needs. Failure modes and anomalies are detected automatically. The runs that warrant escalation get surfaced. You can spend more time improving your system instead of debugging the same issue for the fifth time. Robotics teams often underestimate how high the support burden will be once they start putting robots into the field. A robot that's 99% reliable sounds great until you deploy 100 of them. Suddenly you're dealing with failures every day. The statistics catch up quickly. Tomorrow’s issues are already sitting in today’s logs - but nobody has time to review them. So you wait for a customer to complain instead. That’s a huge business risk. Agentic triage gives you the tools to find issues before your customers do. We’ve been testing this with select engineering and field support teams collecting #ROS# bags, #MCAP# and #PX4# ULG files over the past few months. They think it rocks, and they’ve discovered and fixed some surprising issues before anyone noticed. Today is day 2 of #AgentWeek#, and it's live now. If you want to try agentic triage on your own data, reach out or check out our blog post below. #PhysicalAI# #Triage# #Agents# @OpenRoboticsOrg @PX4Autopilot @NVIDIARobotics

前身是阿里集团内部官方 AI 代码审查助手，过去两年服务了数万开发者，识别了数百万个代码缺陷。 现在它开源了：Open Code Review。 它不是让 AI “随便看一眼 diff”，而是把 AI Code Review 工程化。 它能读取 Git diff，结合上下文分析代码变更，生成带行级定位的结构化审查意见。 对开发者：提 PR 前先自查，少返工。 对 Reviewer：少看低级问题，把精力留给架构和业务逻辑。 对团队：可以沉淀规则，接入 GitHub Actions / GitLab CI。 一句话： 它不是取代人类 Review，而是让团队代码审查更省力、更稳定、更有价值。 GitHub：

GitLab has apparently taken down the Nightmare-Eclipse account just days after the researcher moved there following the GitHub ban. The drama started after Nightmare-Eclipse released several Windows exploits and Defender bypass tools, including BlueHammer, RedSun, and UnDefend. GitHub removed the account earlier this week over concerns that the tools could be misused and weaponized. Security company Huntress says some of the tools have already been seen in real-world intrusion cases, showing how quickly proof-of-concept research can end up being used in actual attacks.

Security researcher Nightmare Eclipse, who has shared several zero-day vulnerabilities, had their entire GitHub account and all repositories taken down. They have now moved everything to a new GitLab profile at In a signed message on their blog, they accuse Microsoft of defaming them, mishandling vulnerability reports like CVE-2026-45585, revoking their MSRC access, and quietly patching issues without collaborating. They point to July 14 as an important date when they may release more documents or take things further. The post also mentions two other vulnerabilities called UnDefend (CVE-2026-45498) and RedSun (CVE-2026-41091).

AIが大量のコードを生み出す時代。 脆弱性も、同じ速度で増えていく。 次世代の解決策を、GitLabと考えませんか？ オンラインイベントTranscend Japan 📅 6/18（水）13:00〜 開催