Cortex — Veille numérique

What We Want to Hear From You

We’re sharing this now because some of these decisions are hard to unwind once the feature ships, and community input is more useful now than after the fact. A few things we’re genuinely thinking about: Remote installation is opt-in – you enable it through boot options or kickstart. But here’s a question we’re genuinely considering: should we ship a lightweight boot ISO without a local browser, with remote installation enabled by default? A minimal image aimed at headless and network install sce

11 juil.

Run flows automatically on real GitLab events

Discover, enable, and manage agents and flows from a central catalog.

11 juil.

What is going to happen next?

Fedora-Forgejo fork infrastructure and maintenance

11 juil.

Intelligence Artificielle

Start with a model built for what comes next

Contact GitLab's Sales team for a custom demo, help finding the right plan, or to discuss our intelligent orchestration platform for teams and their AI agents.

11 juil.

Things to watch out for

First of all, let’s take a look at what microVMs are. Just like any VM, they have their own kernel, one per each microVM. Compared to traditional VMs they start in very short time (hundreds of milliseconds) but don’t offer all the features of full VMs. This article explains usage of krun runtime for podman. This approach offers the same well-known workflow as containers, but simply runs every container as a microVM. Start by installing the runtime: To run a microVM, simply run podman with –runti

11 juil.

Développement

Motor system: Next-gen SCM rebuilt for concurrency

Engage with GitLab's team to get early, hands-on access to upcoming platform innovations in agentic software engineering and help shape the roadmap.

11 juil.

Claude IA

Case study: sandboxing Claude Code for a Python project

uv is an extremely fast Python package and project manager, written in Rust.

11 juil.

Immune system: Agents for security and governance for agents

Achieve organization wide security, compliance, and planning with GitLab Ultimate

11 juil.

Putting it together: single script to create the whole setup

Contribute to msehnout/agent-sandbox development by creating an account on GitHub.

11 juil.

A word of caution — microVM is not a bulletproof boundary

A dynamic library providing Virtualization-based process isolation capabilities - libkrun/libkrun

11 juil.

Google

Leverage your existing Google Cloud commitment

Buy GitLab and Duo Agent Platform through Google Cloud Marketplace, and you can draw down your existing Google Cloud commitment to fund it: No new budget cycle. Scale agentic AI against a commitment you've already made, instead of re-opening procurement every quarter.One bill, one view. Platform, inference, and infrastructure spend land in the same Google Cloud billing surface — nothing to reconcile across vendors. On top of that, you keep GitLab's own cost controls: usage dashboards, policy ove

11 juil.

How to update the firmware db

Enable and use fwupd to get your updates from the Linux Vendor Firmware Service (LVFS): If you have an HP or Fujitsu machine, the update will be available soon, after you have updated your firmware. Use either the above command, or the vendor-recommended command at that time.

11 juil.

Linux

Further resources on open source security

The latest report from the International Data Corporation (IDC) co-sponsored by Canonical and Google Cloud indicates that 36% of organizations adopt open source to improve development velocity, and 7 in 10 organizations see open source as extremely important to run mission critical workloads. However as open source adoption grows, organi […]

11 juil.

Linux

Beyond safety and security: Why automotive open source demands dependability

Canonical achieved ISO 21434 certification for its Security Management System, following an extensive assessment by TÜV SÜD

11 juil.

Apple

ClickFix technique uses Script Editor instead of Terminal on macOS

In April 2026, Netskope Threat Labs reported a ClickFix campaign delivering an AppleScript-based infostealer to macOS users, pilfering sensitive data

11 juil.

2. Small introduction to WAL and checkpoints in SQLite

SQLite uses WAL mode to allow readers to not be blocked by writers. The way it achieves that is by writing to a special staging area called the Write Ahead Log (WAL). Writers can append to the end of the WAL and readers can ignore the new data until it is stable. Eventually, the staging area is moved to the database; this is called a checkpoint. To prevent the WAL from growing indefinitely, a writer will attempt to “reset” it – i.e. overwriting it – if the previous checkpoint was able to move al

11 juil.

Hunting a 16-year-old SQLite bug with TLA+: is dqlite affected?

TLA models to reproduce SQLite's WAL bug and see whether dqlite is affected - Dockerfile

11 juil.

4. Reproducing the bug

Once the model is in place, we can define an invariant that will trigger in the event of data loss or database corruption: \* There are no "holes" in the database. \* All the frames that were added to the WAL have landed in order. NoPageIsLost ≜ ∀ f ∈ 1‥Cardinality(db) : f ∈ db Running the model-checker quickly finds a counter-example. It takes only 20 states to witness a missing page in the database which can, as stated in the documentation, lead to database corruption. The sequence of states l

11 juil.

6. Bonus: How was the bug fixed in SQLite?

Recently SQLite published a new version with a fix to a long-standing bug in the way that the Write Ahead Log (WAL) is checkpointed that leads to the corruption of the database. The important aspect of this bug is not its real-world impact (which is very low) but how long it has been in the repository, how difficult it was to find it, and how difficult it was to reproduce it. Indeed the bug has been present since 2010, for 16 years! Also, the crucial question for us, the dqlite team, is: can dql

11 juil.

2. Onboarding and documentation don’t support designers

The Bitcoin Design Guide is a reference for the design of bitcoin applications.

11 juil.

Cortex — actualités tech et cybersécurité

dimanche 12 juillet

What We Want to Hear From You

Run flows automatically on real GitLab events

What is going to happen next?

Start with a model built for what comes next

Things to watch out for

Motor system: Next-gen SCM rebuilt for concurrency

Case study: sandboxing Claude Code for a Python project

Immune system: Agents for security and governance for agents

Putting it together: single script to create the whole setup

A word of caution — microVM is not a bulletproof boundary

Leverage your existing Google Cloud commitment

How to update the firmware db

Further resources on open source security

Beyond safety and security: Why automotive open source demands dependability

ClickFix technique uses Script Editor instead of Terminal on macOS

2. Small introduction to WAL and checkpoints in SQLite

Hunting a 16-year-old SQLite bug with TLA+: is dqlite affected?

4. Reproducing the bug

6. Bonus: How was the bug fixed in SQLite?

2. Onboarding and documentation don’t support designers