Roku developer repositories moved from GitHub to GitLab (blog.roku.com)
PedroBatista 14 hours ago
ivanjermakov 14 hours ago
How so? I used both at work and they're functionally the same.
IshKebab 14 hours ago
koolala 14 hours ago
This sounds pretty annoying though: https://docs.gitlab.com/administration/license_usage/
radlad 13 hours ago
koolala 5 hours ago
radlad 3 hours ago
I'm not sure, you'd have to check their pricing pages.
koolala 3 hours ago
quietbritishjim 13 hours ago
myko 13 hours ago
tyingq 13 hours ago
GuB-42 12 hours ago
Choosing one over the other is just a matter of details. How well it integrates with the corporate network, how pretty it looks, the options regarding CI/CD integration, overall popularity and community, etc... Last time I got to choose, I went with Gitea, because performance was good and it met my needs.
stefan_ 13 hours ago
And, dare I say it? There is a place for GitLab in a world where most development happens with coding agents. Its perfectly fine to be the version control & CI place. But they got stupid management (just like Atlassian or GitHub) that have convinced themselves they must be the orchestrator, the middleman, the gatekeeper to inference. They neither are nor will be that and if they go down the path of Copilot trying to ruin their product to make it happen, it will be the end.
1718627440 11 hours ago
Deploy contains the released versions and packages.
Operate is for Infrastructure as Code.
Analyze are project and CI statistics.
I doubt you want to remove any of them, they are quite needed functionality.
nikau 8 hours ago
yieldcrv 9 hours ago
ralph84 7 hours ago
kart23 8 hours ago
nullpoint420 7 hours ago
bob1029 13 hours ago
I don't know that the grass will remain green for very long anywhere in this current scenario.
GitHub is not having most of its outages because GitHub's engineers are using AI (although there might be a case or two of this). The primary driver of the outages is the fact that developers can move so much faster in their workflows. Every single user of these products is placing a heavier demand on the system. I don't think this ramping of demand will cease any time soon. I fully expect to receive an email any second now about how my 5,000 req/hr GH API quota will be cut in half before 2027.
I don't understand how GitLab would be immune from these forces, unless we were willing to reach for self-hosted & enterprise plans. Both of which GitHub offers.
LtWorf 10 hours ago
I'm sure most of it is garbage.
rr808 15 hours ago
verdverm 15 hours ago
does not portend good things for the future
robertfw 15 hours ago
cwbriscoe 15 hours ago
verdverm 15 hours ago
an out of control, bipartisan oligarchy
The majority of HN has been on the winning side of this equation, benefiting greatly from the rise of the computer, internet, and now Ai. This is not most people, we forget about them, we tell them it's their own fault when it is not. The game is not fair, it's rigged for most humans.
Michael Sandel explains it better than I can yet
extraextra 14 hours ago
ezst 14 hours ago
extraextra 14 hours ago
He did, however, recommend an author at the end of his comment, and that's whom I was referring to when I said "communist political philosopher"
verdverm 13 hours ago
Distributive is more the communist / far-left take from the rich and give to the poor. Contributive is about the dignity of work. People are happiest when they are part of a community, have work which can support a family and contribute to the greater good, and above all receive social recognition for their contributions. (like the essential workers during COVID we rarely speak of these days)
While we've always had technological advancement and automation, the computer changed things. We stopped producing new types of tasks for many humans. Almost all new tasks are cognitive. We told people "if you want to get ahead in the new economy, go to college." Well, most people do not have college degrees, and within that there is an implicit insult that if they are suffering, it is their fault for not doing what we told them. The people who rigged the game also obviate these people and make it harder for the average person to have a decent life.
I recommend his conversations with Daron Acemoglu. Both have perspectives worth hearing and considering.
ozgrakkurt 15 hours ago
edoceo 14 hours ago
lotsofpulp 14 hours ago
When I was younger, the only way information, and especially video/audio was spread is via a select few outlets.
Today, anyone can upload anything to a variety of servers and spread the information within seconds.
verdverm 13 hours ago
This is not necessarily better, I'm still unsure myself. I would like it to be true, but misinformation and foreign influence campaigns are much more effective these days.
The most significant change is that we no longer have a shared reality. Before our current situation, at least we got the same news. Today we get different hyperbole.
nostromo 12 hours ago
Today everything you’re exposed to has to be approved for release by Google, Meta, and all of the backbone providers along the way - or you’ll be shouting into the void.
TV is dying and streaming is stagnant so I don’t think it’s particularly worrisome that big companies are buying up the dinosaurs before they go extinct.
dylan604 10 hours ago
Another problem with these "independents" is they are fed their material via farms that have been proven to be run by Russian operatives which makes the quotes around independents necessary.
lotsofpulp 9 hours ago
Lack of unlimited time means people will need some way to choose which information to learn and which to not learn, which may well be to choose whatever is curated by Meta/Alphabet/etc, but that is a choice made by the user, not by leaders.
verdverm 6 hours ago
Within the constraints of the algorithms and controls those leaders put into their platforms. Most of those algorithms were designed to maximize ad profits, which is tied to time on platform, with the algorithms converging on anxiety and similar negative emotions. Big data can be dangerous
OnlineTux 7 hours ago
News outlets used to be held to journalistic standards; these days they can self-regulate. Finding reputable news sources is getting harder and harder.
verdverm 6 hours ago
alt227 15 hours ago
verdverm 14 hours ago
20after4 14 hours ago
lossyalgo 12 hours ago
verdverm 12 hours ago
Lately, I'm just watching About Oliver, he does blind / no-wiki / no-backseat gaming. If you are a Minecraft fan, you'll experience something no one else in the community can do. He's currently doing a Create series, but watch the first season first, it's really special.
https://www.youtube.com/@AboutOliver
Also working on an NES harness instead of gaming myself after a too long stint with X4 foundations :x
lossyalgo 12 hours ago
I agree in principle though - I usually search on YT for reviews and/or gameplay before I buy anything these days, since gameplay trailers are like Hollywood movie trailers: they either give too many spoilers and/or they trick you into buying something that isn't what I want.
verdverm 12 hours ago
Oliver is not a streamer I get recommendations from, he gets recommendations from his followers. I watch him more for the blind playthroughs of my more favorite games.
I've used some genre top lists YT videos lately
lossyalgo 12 hours ago
Of course considering who just bought EA (PIF, a Saudi fund + Kushner and some other asshats) and it all makes sense. But I'm still shocked and really sad.
LtdJorge 8 hours ago
OnlineTux 7 hours ago
As for Bioware - Mass Effect Andromeda, Anthem, Dragon Age: The Veilguard.
EA's prior behaviour combined with Bioware's recent performance would be enough for this to make sense.
This also isn't unusual with what's happening across the AAA gaming industry; take a look at the layoffs at Microsoft.
pokstad 13 hours ago
verdverm 13 hours ago
the new incentives do not seem to have served us well, and perhaps worth noting that the same oligarchy controls the algorithms of the new platforms
weberer 9 hours ago
verdverm 6 hours ago
I generally look for those whose primary means of income is not their reporting or podcast.
toomuchtodo 12 hours ago
I have been unable to find an open equivilent of Roku, Apple TV, and Nvidia's Shield, but would be interested in sponsoring an open version via https://bounties.fulu.org/ that could be manufactured through CrowdSupply. An open design and code to run on the hardware avoids future commercial capture. One can then own their media system end to end, from storage, streaming (Jellyfin ecosystem), and hardware on a display.
verdverm 12 hours ago
Not sure if that translates into real demand for it, most consumers are going to consumer.
cramer4next 12 hours ago
VanTheBrand 12 hours ago
Paramount+ has a 2.5% share and Disney has a 4.7% share for comparison.
https://advertising.roku.com/learn/resources/nielsen-gauge-4...
cramer4next 11 hours ago
https://www.nielsen.com/data-center/top-ten/
Personally I've had Roku from the beginning and never once saw or watched the Roku Channel. But I did look it up now. Looks like all "D" rated films and really old media. They produce nothing and licence and syndicate everything.
tiew9Vii 8 hours ago
The hardware looses them $80m+ while the add and media distribution brings them in $1b+.
The hardware is a side hustle run at a loss to acquire users for the main business.
cramer4next 3 hours ago
rnd0 2 hours ago
veryfancy 15 hours ago
cramer4next 15 hours ago
otterley 14 hours ago
murillians 11 hours ago
Grombobulous 9 hours ago
The reason MSNBC recently changed to MS NOW is because the relationship to NBC ended.
angry_octet 7 hours ago
kube-system 7 hours ago
pjmlp 3 hours ago
pokstad 13 hours ago
tangotaylor 16 hours ago
jeron 16 hours ago
prologic 16 hours ago
echelon 15 hours ago
Something like, "if you look at us, we must be able to look at you"
abc42 15 hours ago
seanhunter 14 hours ago
pjmlp 15 hours ago
prologic 8 hours ago
pjmlp 6 hours ago
tinyhouse 15 hours ago
misnome 15 hours ago
And of course many people self-host which changes a lot of the equation (which you can also do with GitHub, but not for free - and FWIW our self-hosted premium gitlab has about an hour a day downtime, which we've been told by the team responsible is an unavoidable side-effect of backing up gitlab).
mcrowder65 15 hours ago
otterley 14 hours ago
pbalau 11 hours ago
> [...] and FWIW our *self-hosted* premium gitlab has about an hour a day downtime
Volundr 15 hours ago
icefo 15 hours ago
But at the same time, if you're not a global company, doing it at 3am is probably fine.
NewJazz 14 hours ago
esseph 14 hours ago
LoganDark 14 hours ago
PixyMisa 13 hours ago
petermefrandsen 13 hours ago
Or what do you think?
gchamonlive 15 hours ago
GitLab is thought-out to support larger groups with more complex pipelines, and while it's got it's own set of quirks, it doesn't begin to compare, GitHub in contrast seems like a toy forge for toy projects.
macki0 10 hours ago
gchamonlive 5 hours ago
In Gitlab you can use the main file for describing high level stage pathways (tests, builds, deployments...) and offload individual control of jobs to granular files. Tests can be self contained child pipelines. Templates make them easy to replicate and components give them more flexibility.
You can do a lot more than GitHub actions with a lot less complexity than Jenkins.
thirtyseven 15 hours ago
midnightclubbed 14 hours ago
otterley 14 hours ago
darkstar999 14 hours ago
otterley 14 hours ago
viking_fullz 8 hours ago
brightball 15 hours ago
verdverm 14 hours ago
- Container based workflows are the same in CI and locally (you can run containers too), they become one-liners
- Remote caching out of the box without extra steps
- Multiple language SDKs, unlocks the DAG in BuildKit and containers, real reuse
- Obfuscates secrets from your logs and agents. I've built an agent environment on Dagger, which also includes forking and time travel)
tl;dr - Dagger gives you SDK access to BuildKit and container based DAGs for building or anything else.
v1-beta just released yesterday: https://dagger.io/blog/dagger-10-beta/
---
edit: they are replacing BuildKit (for good reasons) and that is already out https://dagger.io/changelog/theseus/
zrail 14 hours ago
verdverm 13 hours ago
I'm gearing up for a major rewrite, there is a lot of cruft in there from nearly 10 years of my experiments and explorations :]
0xbadcafebee 14 hours ago
I recommend Drone.io or WoodpeckerCI for hosting your own CI. It's a very good design; very simple, easy to run, easy to use, integrates with most systems you'd want to, abstracts away components rather than tightly integrating them, and you don't need to be a programmer to use it. So basically the opposite of Dagger.
shepherdjerred 13 hours ago
prologic 16 hours ago
Lerc 13 hours ago
I made a game that I thought people might like. I'm trying to offer it to F-Droid and I am encountering pressure to create a GitLab account.
I have been finding it intensely ironic that a project like F-Droid is doing this. It seems like they have, themselves, built processes that have resulted in a form of lock-in that requires others to sign up to GitLab for interoperability.
wormius 13 hours ago
2. Submitting an App Without a GitLab Account
To get an app listed on F-Droid, a metadata file must be added to the official fdroiddata repository. While the standard workflow involves opening a Merge Request on GitLab, you still do not strictly need a GitLab account: • Alternative Logins: The F-Droid GitLab instance allows you to sign in using your existing GitHub, Google, Bitbucket, or Salesforce accounts. • Community Submission: If you do not want to interact with GitLab at all, you can post a request on the F-Droid Forum, and community contributors can create and submit the metadata file on your behalf.
----- Apparently you don't need to actually create a gitlab account? Login with your github or whatever (I assume via oauth?)
The docs definitely don't look clear (on quick perusal), and maybe this info is outdated, but perhaps you can still push to gitlab without actually creating an account just need to make sure the metadata is correct?
Lerc 12 hours ago
I asked on the #fdroid IRC channel without success. I only got as far as I did by asking an AI to decipher their documentation. I have posted on the forum, but it seems clear that this is a second class approach. It feels a little Kafkaesque to choose the non-GitLab path and have them recommend you use GitLab.
Sign in with an auth from another account is still creating an account, You may be able to use the other accounts to log in, but it still puts you through the sign up process asking a bunch of details.
stefangordon 6 hours ago
ram_rar 13 hours ago
cxr 13 hours ago
clivedup 11 hours ago
Even as an appreciator of multiple Git forges... Github seems good?
desolate_muffin 10 hours ago
_dky 9 hours ago
kart23 8 hours ago
prepend 10 hours ago
I like github, but it’s getting kind of nuts.
bluesnowmonkey 10 hours ago
koyote 8 minutes ago
Github is so bad I don't even know where to start. It's fine for small personal projects and the odd project with a few collaborators. But it's just not built for managing large software projects. Even the PR process is awful compared to Azure Devops (and Azure Devops was, in my opinion, ok bordering on good). Diffs are somehow worse than any tool I've ever used.
I am now questioning what Microsoft has been doing all these years they've owned it.
abc42 15 hours ago
zulban 14 hours ago
clivedup 11 hours ago
zulban 9 hours ago
robswc 15 hours ago
CodesInChaos 15 hours ago
locknitpicker 14 hours ago
otterley 14 hours ago
esseph 14 hours ago
Shared pipelines across multiple projects
rules: have far more flexibility than githubs if:
GitLab is very easy to fan out CI/CD runners on your own k8s infra.
otterley 13 hours ago
Shared pipelines also exist: https://docs.github.com/en/organizations/managing-organizati... and https://docs.github.com/en/enterprise-cloud@latest/repositor...
Hosting runners on K8S is similarly easy; GitHub even built a controller to help: https://docs.github.com/en/actions/concepts/runners/actions-...
esseph 11 hours ago
treyd 13 hours ago
GHA was based on Azure Actions, which was never intended as a CI system nor meant to be used in a context where actions could be malicious. So it's the wrong tool for the job that had to be adapted to fit another use case, straying from its original design principles to make it work.
otterley 13 hours ago
locknitpicker 21 minutes ago
It's so trivial to put together any CICD pipeline that it barely registers as a skill you need to develop. All jobs run on containers you control, you specify the scripts you want to run in each job (e.g., npm test), and done. For standard pipelines you don't even bother to set precedence and fan-out/fan-in because if you set your stages as the default stages then that's already done for you.
Also nice, GitLab provides terraform providers for it's CICD infrastructure.
GitHub Actions in comparison is a god-awful mess that has only parallel in Azure YAML Pipelines, another abomination that should be used as a punishment instead of a production system.
jesse_faden 5 hours ago
I have hit so many issues and limitations on GitLab which is just simply possible on GitHub. Here's a few of my rants with GitLab
1. The smallest unit of action on GitLab is a whole job, on GitHub, that's a task. So all of the actions or templated files can perform a single task instead of a whole job. This granularity is incredibly useful and lets my team create a catalog of actions that our downstream teams can simply include and compose it over a variety of tools and frameworks.
2. You cannot share secrets between jobs. This was just outright ridiculous when it meant that in each new job you have to fetch an STS token even though the token from a previous job would suffice. So much repetition. When you have a template like fetching AWS credentials using OIDC, that's the only thing you can do. Hence proving point 1.
3. Multiple workflow files instead of a single `.gitlab.yml` with a scrambled mess of rules
4. Dynamic services, in GitHub it is effortless to build a matrix AND have services spun up from it. The amount of duplication this reduces is insane.
name: Test Actions
on:
push:
branches:
- main
jobs:
preTest:
runs-on: ubuntu-latest
outputs:
services: ${{ steps.services.outputs.serviceJson }}
steps:
- uses: actions/checkout@v3
- run: echo "serviceJson=$(cat .github/workflows/demo.json | jq -c)" >> "$GITHUB_OUTPUT"
id: services
shell: bash
test:
runs-on: ubuntu-latest
needs: [preTest]
services: ${{ fromJson(needs.preTest.outputs.services ) }}
steps:
- run: echo "Hello"
shell: bashlocknitpicker 28 minutes ago
I'm baffled by remarks of GitLab's ICD being "unintuitive". I mean, GitLab's pipelines are made up of a set of stages, and stages are made up of a set of jobs. To put it differently, GitLab's pipelines are made up of jobs, which are grouped into stages. Does this go against your personal notion of a pipeline?
> The smallest unit of action on GitLab is a whole job
No. A job is the smallest unit of execution you can assign a runner to execute. It is used to set things like dependencies and runtime environments. Once your job sets the environment, your job can start to execute your scripts. This means a set of individual shell commands or shell scripts you provide.
> You cannot share secrets between jobs.
Yes, and only a very silly and clueless person would ever think it would be a good idea to share secrets through random runners due to exfiltration risks.
This is not a GitLab thing, mind you. You should really read this
https://secure-pipelines.com/ci-cd-security/gitlab-ci-cd-sec...
> Multiple workflow files instead of a single `.gitlab.yml`
Now I wonder if you're just trolling.
> Dynamic services,
Now this is just silly. Did you even bothered to learn how GitLab handles this?
robswc 7 hours ago
In specific, off the top of my head:
- you can't group repos
- CI/CD is far behind what GitLab offers
- Review apps (though I think now you can do this on GH with other tools)
- Can't mark PRs as drafts by default in GH
- better metric tracking, easier to see a "snapshot" of where something is at on GitLab
Tbf, GH may have closed some gaps over the years but when I was bouncing between the two GH always felt a lot more rigid and further behind than GL. It did have fantastic support for open source though, and has a few unique and fun things like the `io` site stuff. Overall though if I could choose which to work in for serious projects I'll always choose GL.
rootnod3 13 hours ago
pinkgolem 16 hours ago
tonymet 7 hours ago
zbentley 6 hours ago
What?
Step 1: go to project's manpage/readme or website.
Step 2: find the URL of their software forge (git/svn/hg site).
Step 3: clone and contribute using that website.
That process has been largely the same for a lot more than 20 years. Most people were not using GitHub as a discovery/random-repo-browsing system.
backendEngineer 11 hours ago
outfitx 16 hours ago
jacquesm 16 hours ago
rlonstein 15 hours ago
> Do you have some time?
Okay, I laughed.
sanex 8 hours ago
wtf_is_up 10 hours ago
CyanLite2 16 hours ago
locknitpicker 15 hours ago
That's fine. GitLab offers self-hosted solutions where companies run the service in their own infrastructure and limit who has access to it. The same cannot be said by GitHub, though.
slantedview 14 hours ago
20after4 14 hours ago
bigstrat2003 14 hours ago
That isn't true. Self hosted Github exists, and has for years now. From what I hear (from a friend who had to administer his company's instance) it's not a good product by any means, but it does exist.
esseph 14 hours ago
kannanvijayan 14 hours ago
GitLab's model is different - at least it was when I moved over to it. They charged for public repositories and gave you a free private ones as a sampler for trying out the platform. That approach is far less prone to getting overrun by millions of slopositories.
GitLab never tried to be the social media of software development. Theirs is a much simpler, classical model - one of the reasons I switched to them: you pay them money, they provide you services for that money.
otterley 14 hours ago
0xbadcafebee 14 hours ago
skullone 16 hours ago
jdorfman 15 hours ago
BatchJob 15 hours ago
As for gitlab...yuck. But whatever. Most of the dev tool space is really just "sh* we have to put up with now", none of it is any good, all of it is dated from the early aughts, and taken as a whole is even worse because none of it works together.
While software development itself got better in the last ten years these tools stayed the same or got worse (enshittification). And this is part of why folks are self hosting.
The other part is that AI is destroying the Internet and its time to pack your bags anyway. The smart people already have.
carlosjobim 15 hours ago
CodesInChaos 15 hours ago
Same reason we ended up with git. Their predecessors were significantly worse, and then they had enough momentum to keep going.
locknitpicker 15 hours ago
You broadcasted your negative feedback but it seems you had no positive remarks to give. If you feel everything is so bad, would you mind sharing what tolerable alternatives are there to GitHub and GitLab?
20after4 14 hours ago
Not the op, and while your criticism of their negativity may be somewhat justified, the ask is kind of silly. There are a bunch of well known alternatives:
Self-hosted free software:
Gerrit <https://www.gerritcodereview.com> Phorge <https://we.phorge.it>
SaaSsy:
Codeberg <https://codeberg.org> SourceHut <https://sr.ht/>
There are a lot more, of course, these are just the ones I have experience with.
BatchJob 7 hours ago
robinhood 15 hours ago
sidcool 15 hours ago
verandaguy 15 hours ago
> disguised as an open source project
A software project either is or isn't open source. Gitlab CE is source-available (here: https://gitlab.com/gitlab-org/gitlab) with an MIT license, which is a permissive open-source license.Gitlab CE is open-source. There exist versions of Gitlab with features that require payment. This does not mean that Gitlab (the product) is not open-source; it means that Gitlab (the company) has a core product which is open-source, and then sustains its development through the sale of licenses to product tiers beyond that.
neya 16 hours ago
I am even considering hosting my own GIT server myself. Some of our deployments got affected multiple times in the last 6 months alone we were really caught off-guard. Thankfully our clients were understanding of the GitHub outages. But, this should not be the baseline. Reliability should not be the cost of doing business.
[1] https://github.com/creativefoundrysg/desktop#an-open-letter-...
to11mtm 16 hours ago
latsu 16 hours ago
alt227 15 hours ago
turtleburger 14 hours ago
valiant55 16 hours ago
vips7L 14 hours ago
neya 12 hours ago
999900000999 16 hours ago
Say annual contracts start at 100k minimum and everyone gets a dedicated support engineer.
You get your own rack. None of this degraded shared capability nonsense.
Does that seem like a solid business ?
the__alchemist 16 hours ago
999900000999 15 hours ago
What I'm thinking of is a company that exclusively caters to the enterprise.
You get a support engineer and they help on everything, migration, CI/CD, hosting, etc.
Nothing goes down without a solid 3 page write up.
neya 10 hours ago
999900000999 6 hours ago
But it could work as a franchise model too, maybe I just refer your company to an affiliate located in your country of choice.
For example, most European clients would pick German locations.
If I was in the EU I’d be applying for a grant to build on the idea. Their’s no rational reason for European companies to fully trust Microsoft to act in good faith.
habinero an hour ago
I don't need or want a dedicated support engineer for my VCS, I need it to integrate with all the bullshit products I already have, tick off the compliance and governance checkboxes for the suits, give me controls so SWEs do less dumb shit and above all, not be something I have to think about except at contract renewal time.
I'm just not going to trust a rando to run all that for me and get it right, especially not at that price point.
pixl97 15 hours ago
Every other free service would die nearly instantly, so maybe only want useful things to move to other services.
>I am even considering hosting my own GIT server myself.
It's mostly a good idea.... but, with the current security apocalypse we seem to be under making sure your own shit doesn't get pwned is a full time job. The level of security hostility on the internet recently has reached numbers I've never seen before. RCE's dropping about every day, more targeted scans than I've ever seen in my life, swarms of AI bots breaking into services.
sedan_baklazhan 15 hours ago
pixl97 15 hours ago
sedan_baklazhan 14 hours ago
pixl97 14 hours ago
neya 12 hours ago
Not if you didn't vide code your architecture. I have a 7 year box running without a single incident (touchwood) because 7 years ago we didn't have vibe coding and I used a compiled language. To use PHP for anything serious in 2026 is just insane, let's be honest.
pjmlp 15 hours ago
Everyone spent years talking against GPL, business friendly licenses like MIT and Apache were the way of the future, not viral and co.
Now we are here, most projects have their key contributors working at corporations like Microsoft, or gladly getting their acquisition money to pay the VCs, embrace your business friendly licenses.
neya 12 hours ago
pjmlp 6 hours ago
steffenfrost 16 hours ago
valyala 16 hours ago
cdmckay 16 hours ago
InsidiousWombat 14 hours ago