GitLab has patched a critical security flaw with a CVSS score of 10.0, the highest possible severity. The vulnerability, CVE-2026-110264, could allow an unauthenticated attacker to execute arbitrary code on self-managed GitLab servers. It affects GitLab versions dating back to 7.0, released in 2014. GitLab says there is currently no evidence that the flaw has been exploited, but recommends updating to a patched version as soon as possible.

GitHub now lets you request a Copilot code review through REST or GraphQL. Code review is becoming something your own scripts and workflows can CALL. Another bit of the developer workflow quietly turning from a screen humans use into infrastructure software can operate.

GitHub secret scanning now knows what Lovable and Supabase credentials look like. That sounds like a tiny changelog item, but I reckon it says something bigger. The vibe-coding stack is maturing quickly enough that its tools are becoming part of the normal software security surface. “Built with AI” still ends with the same problem: don’t commit your keys😂

Github CI has been so slow lately it's such a pain. I'm contemplating a self-hosted runner Any of you geeks already using it? What kind of machine you are rocking for the purpose and did you notice sizeable speed benefits vs hosted github runners?