proomt

Search

Search posts, papers, and topics

All posts

Hacker News front pageSam Wiskow4 min readintermediate

Rate limits on GitLab.com are changing

Read on gitlab.comHN 174·127 comments

Summary

GitLab.com will tie API rate limits to subscription tiers: free users (and unauthenticated IPs) get 60 req/hr, while Premium/Ultimate get higher per‑user and per‑group caps starting Oct 19 2026 (free) and Jan 2027 (paid). Authenticated requests use the plan’s limits; hitting a limit returns 429 with Retry‑After. Preview “brownout” windows on Oct 7 and 14 let you test the new caps. If you need mor…

  • Rate limits become tier‑specific: free = 60 req/hr per IP; Premium/Ultimate have higher, unpublished caps.
  • Unauthenticated traffic is always limited to 60 req/hr regardless of project visibility.
  • Authenticated requests (PAT, OAuth, CI job token) are counted against the user’s plan limits.
  • Two preview windows (Oct 7 & 14, 15:00‑19:00 UTC) will temporarily enforce the new free limits for testing.

Automation and CI/CD pipelines that hit the anonymous 60 req/hr ceiling can suddenly throttle, breaking builds or status badges. Aligning limits with subscription tiers encourages proper authentication and gives paid teams higher throughput, while protecting overall platform performance as usage sc…

5/10
devopssubscriptionauthenticationapirate limitsgitlab

Related reading

  1. Open-weight models take 56% of token volume, Astra doubles Fable 5.1 spend

    Vercel’s September AI Gateway Production Index shows open‑weight models processing 56% of token volume (up from 7% in Dec 2025) while accounting for only 14% of spend. Token price fell 23.2% month‑over‑month. Anthropic’s Opus 5 captured 22.5% of spend, overtaking Fable 5 which dropped to 4.9%. OpenAI’s new GPT‑6 Astra grabbed ~7.7% of total gateway spend in its first 12 days, more than double Ant…

    Vercelvercel.com6 minHN2

  2. Korea raises data breach fines to 10% of revenue

    South Korea’s privacy regulator will fine companies up to 10 % of revenue for large‑scale data breaches, a jump from the previous 3 % cap. The rule applies to intentional or grossly negligent leaks affecting 10 M+ people, with reductions for proactive security investments and rapid breach response. Companies must also notify users within 72 hours of a high‑risk exposure.

    Hacker News front pagekoreajoongangdaily.com3 minHN335113

  3. AWS reimagines the getting started experience

    AWS announced a new “project” onboarding flow that lets new users start building with default configurations, free credits, and simplified IAM handling. Sign‑in via Google/GitHub/Apple creates an isolated AWS account, auto‑provisions a CLI/agent toolkit, and lets you invite collaborators by email. Spend limits can be set per project, and advanced features (multi‑region, org policies) can be enabl…

    AWSamazon.com5 minHN33

  4. datasette-auth-github 1.0

    The datasette-auth-github plugin now reaches 1.0, fixing a bug where cookies lacked a Max‑Age attribute and thus expired at session end. The fix ensures longer‑lasting sessions and the release is tested against recent Datasette versions.

    Simon Willisonsimonwillison.net1 minrelease

  5. APort Vault: Benchmarking AI Agent Payment Authorization with the Open Agent Passport

    APort Vault is a benchmark that replays 4,371 human‑written attacks against a live payment‑handling AI agent across 14 models and multiple policy configurations, generating 225,964 evaluations. Adding the Open Agent Passport pre‑action check eliminated all unauthorized transfers in the test, showing a per‑session breach upper bound of 0.38%.

    Hugging Face Daily Papersarxiv.org2 minpaper

  6. What's new in ClickStack - Aug ’26

    ClickStack August 2026 update adds general‑availability dashboard variables (including cross‑source SQL, Lucene, PromQL macros), chart formulas for derived metrics, a metrics explorer UI, release‑marker overlays, OIDC auth for the collector, and a beta LLM observability dashboard. It also introduces a private‑preview TimeSeries engine with PromQL support, letting ClickStack store and query Promet…

    ClickHouseclickhouse.com16 min