31
Upcoming breaking changes for npm v12
Our next npm major version, v12, introduces security-related default changes to npm install. All these changes are available behind warnings in npm today on 11.16.0 or newer, so you can…
The GitHub Blog
Updates, ideas, and inspiration from GitHub to help developers build and design software.
- Popular posts
- 168
- Total points
- 61,128
- HN comments
- 27,254
- Rank
- #10 company
Visit github.blog → RSS feedOn Hacker News Jan 2019 – Aug 2026
Software Engineering 96Tools & Productivity 41Security & Privacy 37Tech Industry & Business 35Infrastructure & DevOps 22Web & Frontend 21
32
Apache Software Foundation joins GitHub open source community
We’re excited to welcome the Apache Software Foundation (ASF) to GitHub.
33
Coming soon: Simpler pricing and a better experience for GitHub Actions
Update: We’ve read your posts and heard your feedback. We’re postponing the announced billing change for self-hosted GitHub Actions to take time to re-evaluate our approach. We are continuing to…
34
Git password authentication is shutting down
As previously announced, starting on August 13, 2021, at 09:00 PST, we will no longer accept account passwords when authenticating Git operations on GitHub.com. Instead, token-based authentication (for example, personal…
35
GitHub for mobile is now available
Learn more about GitHub for mobile—including highlights of its core features and how to get started.
36
GitHub releases an ImageNet for code and a CodeSearchNet challenge
We’re announcing the CodeSearchNet Challenge and releasing a large dataset for natural language processing and machine learning.
37
An update on GitHub availability
Here’s what we’ve done—and what we’re still doing—to improve our availability and reliability.
38
Kimi K2.7 Code is generally available in GitHub Copilot
Kimi K2.7 Code, an open-weight model, is now generally available in GitHub Copilot. This is the first open-weight model offered as a selectable option in the Copilot model picker, giving…
39
Updates to GitHub Copilot interaction data usage policy
From April 24 onward, interaction data from Copilot Free, Pro, and Pro+ users will be used to train and improve our AI models unless they opt out.
40
Git security vulnerabilities announced
Git users are encouraged to upgrade to the latest version, especially if they use `git archive`, work in untrusted repositories, or use Git GUI on Windows.
41
How We Built the GitHub Globe
GitHub is where the world builds software. More than 56 million developers around the world build and work together on GitHub. With our new homepage, we wanted to show how…
42
The Python Package Index is now a GitHub secret scanning integrator
GitHub and the Python Package Index (PyPI) are collaborating to help protect you from leaked PyPI API tokens. From today, GitHub will scan every commit to a public repository for…
43
How to undo almost anything with Git (2015)
One of the most useful features of any version control system is the ability to "undo" your mistakes. In Git, "undo" can mean many slightly different things.
44
GitHub introduces sub-issues, issue types and advanced search
Following our opt-in preview last year, we are excited to release sub-issues, issue types and advanced search for issues to everyone! 🎉 Thank you to everyone who opted-in and gave…
45
Stack Graphs
Precise code navigation is powered by stack graphs, a new open source framework that lets you define the name binding rules for a programming language.
46
Why and how GitHub is adopting OpenTelemetry
Building on top of OpenTelemetry empowers us to provide integrated and opinionated observability solutions for our application engineers.
47
GitHub Container Registry
GitHub Container Registry introduces easy sharing across organizations, fine-grained permissions, and free, anonymous access for public container images
48
Introducing draft pull requests
You can now use draft pull requests to clearly tag when you’re coding a work in progress.
49
Commits are snapshots not diffs (2020)
Git has a reputation for being confusing. Users stumble over terminology and phrasing that misguides their expectations. This is most apparent in commands that “rewrite history” such as git cherry-pick or git rebase. In my experience,…
50
GitHub Sunsetting Subversion Support
On January 8, 2024, GitHub will remove support for Subversion.
51
Improving large monorepo performance on GitHub
GitHub has done a lot of work in the last six months to improve performance for large monorepos.
52
GitHub’s database of security advisories is now open source
Anyone can now provide additional information and context to further the community’s understanding and awareness of security advisories.
53
GitHub Copilot code review will start consuming GitHub Actions minutes
Developers and engineering teams worldwide use GitHub Copilot for high-quality, agent-powered code reviews on every pull request. We understand that any change is significant to our customers, especially when it…
54
GitHub has completed its acquisition of NPM
With the npm acquisition complete, we’re ready to start the next chapter of npm and support the JavaScript community in a new way.
55
Sign in as anyone: Bypassing SAML SSO authentication with parser differentials
Critical authentication bypass vulnerabilities were discovered in ruby-saml up to version 1.17.0. See how they were uncovered.
56
GitHub Copilot Workspace: Technical Preview
We’re redefining the developer environment with GitHub Copilot Workspace - where any developer can go from idea, to code, to software all in natural language.
57
Three bugs in the Go MySQL driver
Check out what we learned from shipping our busiest Go service in production—we found 3 bugs in the Go MySQL driver.
58
Gaining kernel code execution on an MTE-enabled Pixel 8
In this post, I’ll look at CVE-2023-6241, a vulnerability in the Arm Mali GPU that allows a malicious app to gain arbitrary kernel code execution and root on an Android phone. I’ll show how this vulnerability can be exploited even when Memory Tagging Extension (MTE), a powerful mitigation, is enabled on the device.
59
Code scanning for security vulnerabilities now available
Now available, code scanning is a developer-first, GitHub-native approach to easily find security vulnerabilities before they reach production.
60
Open Source Goes to Mars
Celebrating the nearly 12,000 developers who aided Ingenuity's first Martian flight with a profile badge that recognizes their contributions to this historic achievement.