GitHub

Incident across several services

GitHub Status — 2026-09-23T13:35:44+00:00

Sep 23 , 13:35 UTC Update - Users may experience stale Project search results. We are working to increase indexing speed. All other services are available. Sep 23 , 11:38 UTC Update - We are seeing recovery for Projects. Users may experience stale search results for Projects while indexing catches up. Sep 23 , 10:58 UTC Update - The degradation affecting API Requests has been mitigated. We are monitoring to ensure stability. Sep 23 , 10:57 UTC Update - Database replicas have been restored. Org c

Developers want more efficient software. Here’s what over 1000 GitHub users told us they need.

The GitHub Blog — 2026-09-23T13:00:00+00:00

New research from GitHub and Yale Program on Climate Change Communication finds strong demand for tools, measurement, and practical guidance that can help developers reduce wasted compute. The post Developers want more efficient software. Here’s what over 1000 GitHub users told us they need. appeared first on The GitHub Blog .

superdesigndev/treg

GitHub Trending — 2026-09-23T07:57:20.346164+00:00

OpenRouter for agent tools. Join community here: https://discord.gg/6mQYYfFMAn https://treg.to Treg (OpenRouter for Tools) OpenRouter, but for agent tools instead of models. Point an agent at one base URL with one token and it can do the job: 3,000+ catalogued endpoints across 60+ providers — SEO and backlinks, social and trends, people and company enrichment, ads, scraping, image and video generation — priced per call, from a cent , with no provider signup. Plus your own team's keys, skills and

google/ax

GitHub Trending — 2026-09-23T07:57:20.339778+00:00

Google's open agentic orchestration runtime https://agentexecutor.io AX Warning We are still actively refining our core concepts, protocols, and specifications. We will likely to introduce major breaking changes prior to a stable release. Declare an agentic task with workspaces and gateway specifications. AX sandboxes it, wires up its workspace, fences its network, and helps running it at scale. AX is a high-throughput, declarative orchestrator to run billions of autonomous agent workloads in a

davila7/claude-code-templates

GitHub Trending — 2026-09-23T07:57:20.335155+00:00

CLI tool for configuring and monitoring Claude Code https://aitmpl.com Sponsored by Bright Data Bright Data proudly supports this project. Connect Claude Code to live web data — try their Skills and MCPs for web search, scraping, and structured data feeds. # Install the Bright Data Skills + MCP for Claude Code npx claude-code-templates@latest --skill web-data/search,web-data/scrape,web-data/data-feeds,web-data/bright-data-mcp,web-data/bright-data-best-practices,development/brightdata-local-searc

dream-num/univer

GitHub Trending — 2026-09-23T07:57:20.324939+00:00

The Office Harness for AI Agents — Spreadsheets, Docs, Slides, Canvas, Relational Tables, and PDF in one runtime. https://docs.univer.ai The Office Harness for AI Agents Spreadsheets · Documents · Presentations · Bases · Boards · PDFs (coming soon) High-performance, fully customizable Office SDK Build embeddable productivity experiences with a plugin architecture, Canvas-based rendering, a formula engine, and one Facade API that works in the browser and on Node.js. English | 简体中文 | 繁體中文 | 日本語 |

OpenTelemetry in the GitHub Copilot app

GitHub Changelog — 2026-09-23T02:14:54+00:00

Understand how Copilot agents perform and interact with models and tools. The GitHub Copilot app now supports OpenTelemetry (OTel) configuration through enterprise-managed settings. OTel is an open source observability framework.… The post OpenTelemetry in the GitHub Copilot app appeared first on The GitHub Blog .

New features and improvements in Copilot for JetBrains

GitHub Changelog — 2026-09-23T00:34:18+00:00

GitHub Copilot for JetBrains 1.18.0 brings AI-assisted tool approvals, more control over agent conversations, and shared skills and instructions for your organization. You can also review plans with the Codex… The post New features and improvements in Copilot for JetBrains appeared first on The GitHub Blog .

`allow_queue_branch_edit` is deprecated

Mergify Changelog — 2026-09-23T00:00:00+00:00

The `allow_queue_branch_edit` queue rule option is deprecated and will be removed after December 31, 2026.

Jinja2 templating stops working on October 31, 2026

Mergify Changelog — 2026-09-23T00:00:00+00:00

Jinja2 expressions in your Mergify configuration stop working on October 31, 2026; plain {{ variable }} placeholders keep working.

Pick a condition's scope from the repository's scopes

Mergify Changelog — 2026-09-23T00:00:00+00:00

In the dashboard's condition editor, a condition on scope now offers the scopes declared in the repository's configuration instead of a free text field; a scope that is not declared stays editable and is discreetly marked.

The configuration editor tells you which sections your enabled products will never read

Mergify Changelog — 2026-09-23T00:00:00+00:00

The Summary panel of the configuration editor, the Configuration changed check on a configuration pull request, and mergify config simulate now warn when a section of .mergify.yml (pull_request_rules, merge_protections, queue_rules) is never evaluated because the product that runs it is not activated on the repository — with a link to activate it.

Faster C++ code intelligence with whole codebase indexing

GitHub Changelog — 2026-09-22T22:24:48+00:00

C++ code intelligence in GitHub Copilot CLI is now faster with support for whole codebase indexing. C++ repositories can contain millions of lines of code across deeply connected source files… The post Faster C++ code intelligence with whole codebase indexing appeared first on The GitHub Blog .

Claude Opus 5.5 is now available in GitHub Copilot

GitHub Changelog — 2026-09-22T17:10:23+00:00

Claude Opus 5.5, Anthropic’s newest Opus model, is now available in GitHub Copilot. You can use it for agentic coding, long-running agentic tasks, and knowledge work. In early testing, Opus… The post Claude Opus 5.5 is now available in GitHub Copilot appeared first on The GitHub Blog .

OpenAI’s GPT-6 Sol and GPT-6 Luna now available

GitHub Changelog — 2026-09-22T17:00:14+00:00

OpenAI’s GPT-6 family is expanding in GitHub Copilot with two additional models: GPT-6 Sol, and GPT-6 Luna. Joining the previously released GPT-6 Astra, these new options let you select the… The post OpenAI’s GPT-6 Sol and GPT-6 Luna now available appeared first on The GitHub Blog .

Security improvements for SSH

GitHub Changelog — 2026-09-22T14:11:47+00:00

We’re removing several SSH algorithms, adding a new algorithm, and requiring larger RSA SSH keys to improve security. The changes are as follows: We’re removing the ability to use RSA… The post Security improvements for SSH appeared first on The GitHub Blog .

GitHub App Private Keys: 474 Leaked Keys Exposed

GitGuardian — 2026-09-22T13:00:14+00:00

GitGuardian tested thousands of leaked GitHub App private keys and found 474 valid ones, some with admin access to entire organizations. CDC and BuildBuddy were among those affected. See the findings.

FlashML-org/FreeToken

GitHub Trending — 2026-09-22T12:01:12.861528+00:00

FreeToken brings datacenter-scale model serving to your desktop. Run massive models locally, fast and efficiently. https://flashml.ai | Download | Paper | Developer Slack | Community Discord | Community WeChat | Unlock datacenter-class intelligence on the hardware you already own — Run 290B+ frontier MoE models locally on your gaming PC at blistering interactive speeds. About FreeToken is an edge-native Mixture-of-Experts (MoE) serving engine designed for running frontier-scale open-weight model

cline/cline

GitHub Trending — 2026-09-22T12:01:12.780453+00:00

Autonomous coding agent as an SDK, IDE extension, or CLI assistant. https://cline.bot Cline The open source coding agent in your IDE, terminal, & desktop. Docs Discord r/cline Feature Requests Join us! CLI Run Cline in your terminal. Interactive chat or fully headless for CI/CD and scripting. npm i -g cline Learn more Desktop App Cline as a native app for macOS and Windows. Run agent sessions in any folder, schedule routines, and manage models, plugins, and MCP servers. Download for macOS and Wi

Crosstalk-Solutions/project-nomad

GitHub Trending — 2026-09-22T12:01:12.495722+00:00

Project NOMAD is an offline-first knowledge and education server. Wikipedia, thousands of books, courses, maps, and optional local AI, all running on hardware you own with no internet required. https://www.projectnomad.us Project NOMAD Knowledge That Never Goes Offline Project NOMAD is a self-contained, offline-first knowledge and education server packed with critical tools, knowledge, and AI to keep you informed and empowered — anytime, anywhere. Installation & Quickstart Project NOMAD can be i

zhouxiaoka/autoclip

GitHub Trending — 2026-09-22T12:01:12.466333+00:00

AutoClip : AI-powered video clipping and highlight generation · 一款智能高光提取与剪辑的二创工具 https://zhouxiaoka.github.io/autoclip_intro/ AutoClip 把长视频变成值得分享的精彩片段。简体中文 · English · 日本語 · 한국어 · Español · Português · Русский · Français 项目网站 · 反馈问题桌面安装包: macOS · Apple Silicon · Windows · x64 安装与第一次出片 · 完整排错指南自 v1.3.1 起，产品界面、官网和 README 均支持中、英、日、韩、西、葡、俄、法。顶栏可切换界面语言或跟随系统；用户素材和生成内容保留原文。 AutoClip 用 AI 分析视频字幕、定位高光、生成标题，并自动剪出片段与合集。适合访谈、播客、课程和直播回放，提供桌面应用、Docker Web 界面和 CLI / MCP 三种使用方式。界面预览 v1.3.0 真实 Web 界面：在文件导入区添

mvt-project/mvt

GitHub Trending — 2026-09-22T12:01:12.463968+00:00

MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise. https://mvt.re Mobile Verification Toolkit Important We recently merged the "v3" branch. This introduced breaking changes. If you relied on mvt output in other scripts They might have broken. More details: https://github.com/mvt-project/mvt/issues/757 Mobile Verification Toolkit (MVT) is a collection of utilities to simplify and automate the process of gathering f

Deprecation notice: All-platform CodeQL bundle

GitHub Changelog — 2026-09-22T09:21:03+00:00

Starting with CodeQL CLI 2.27.0, the all-platform CodeQL bundle (i.e., codeql-bundle.tar.gz and codeql-bundle.tar.zst), which includes the binaries for all supported platforms up to this release, is marked as deprecated. In… The post Deprecation notice: All-platform CodeQL bundle appeared first on The GitHub Blog .

Refreshed repository pull requests page generally available

GitHub Changelog — 2026-09-22T01:25:53+00:00

The new repository pull requests page is now generally available to all GitHub users. Highlights The new page makes it easier to find and act on pull requests in a… The post Refreshed repository pull requests page generally available appeared first on The GitHub Blog .

Agent of the Day – September 22, 2026

GitHub Agentic Workflows — 2026-09-22T00:00:00+00:00

Sergo, gh-aw's Serena-powered Go expert, spent three straight nights hunting bounds-check blind spots in a week-old linter and filing evidence-backed fixes instead of vague bug reports.

GitHub Enterprise adds credential inventory exports

GitHub Changelog — 2026-09-21T21:13:18+00:00

Enterprise owners can now export a complete inventory of every credential that can access their enterprise (e.g., SSH keys, classic and fine-grained personal access tokens, OAuth App access tokens, and… The post GitHub Enterprise adds credential inventory exports appeared first on The GitHub Blog .

One Graph, Every Worktree, No Context Lost

GitKraken — 2026-09-21T18:59:53+00:00

Five worktrees for five agents sounds like organization. In practice, it’s five contexts to keep straight, five places history could live, five spots for a WIP that gets left behind or diffed against the wrong branch. GitLens 19.2’s fix isn’t a second graph. It’s making the one graph you already trust point wherever the work […]

Grok 4.7 is now available in GitHub Copilot

GitHub Changelog — 2026-09-21T14:54:12+00:00

Grok 4.7, xAI’s latest reasoning model, is now rolling out in GitHub Copilot. Building on Grok 4.6, it is designed for agentic coding and complex, multistep workflows. This model is… The post Grok 4.7 is now available in GitHub Copilot appeared first on The GitHub Blog .

vercel-labs/json-render

GitHub Trending — 2026-09-21T13:16:14.201325+00:00

The Generative UI framework https://json-render.dev json-render The Generative UI framework. Generate dynamic, personalized UIs from prompts without sacrificing reliability. Predefined components and actions for safe, predictable output. # for React npm install @json-render/core @json-render/react # for React with pre-built shadcn/ui components npm install @json-render/shadcn # or for React Native npm install @json-render/core @json-render/react-native # or for video npm install @json-render/cor

mihail911/modern-software-dev-assignments

GitHub Trending — 2026-09-21T13:16:14.188520+00:00

Assignments for CS146S: The Modern Software Dev (Stanford University Fall 2026/2025) https://themodernsoftware.dev Assignments for CS146S: The Modern Software Developer This is the home of the assignments for CS146S: The Modern Software Developer , taught at Stanford University fall 2025. Repo Setup These steps work with Python 3.12. Install Anaconda Download and install: Anaconda Individual Edition Open a new terminal so conda is on your PATH . Create and activate a Conda environment (Python 3.

paperless-ngx/paperless-ngx

GitHub Trending — 2026-09-21T13:16:14.184690+00:00

A community-supported supercharged document management system: scan, index and archive all your documents http://docs.paperless-ngx.com/ Paperless-ngx Paperless-ngx is a document management system that transforms your physical documents into a searchable online archive so you can keep, well, less paper . Paperless-ngx is the official successor to the original Paperless & Paperless-ng projects and is designed to distribute the responsibility of advancing and supporting the project among a team of

anthropics/financial-services

GitHub Trending — 2026-09-21T13:16:14.176447+00:00

Claude for Financial Services Reference agents, skills, and data connectors for the financial-services workflows we see most — investment banking, equity research, private equity, and wealth management. Everything here is available two ways from one source : install it as a Claude Cowork plugin, or deploy it through the Claude Managed Agents API behind your own workflow engine. Same system prompt, same skills — you choose where it runs. Important Nothing in this repository constitutes investment

BuilderIO/agent-native

GitHub Trending — 2026-09-21T13:16:14.167219+00:00

A framework for building agentic apps https://www.agent-native.com Agent-Native Agent-Native is an open-source TypeScript framework for building agents that pair autonomous work with a purpose-built UI. Define each capability once as an action : the agent uses it as a tool, and the UI calls it from code. Quick start npx --yes @agent-native/core@latest create my-agent --standalone --template chat Follow the getting started guide for a full intro to the framework. Why build agents with UIs? Coding

Challenging the Death of the IDE

GitKraken — 2026-09-21T06:11:09+00:00

There is no doubt that LLMs have changed how we work as developers. You can go back just a year from today and I would have had a very different opinion. But, things have changed significantly. Complex work usually involves just prompting an agent for it. You still need taste and opinions to steer it […]

Weekly Update – September 21, 2026

GitHub Agentic Workflows — 2026-09-21T00:00:00+00:00

v0.89.17 lands faster logs auditing, refreshed model catalog, and a batch of AIC accounting fixes.

yynxxxxx/Codex-X

GitHub Trending — 2026-09-20T11:46:22.865699+00:00

OpenAI Codex 桌面端/CLI 的可视化管理工具，具有Provider/API 切换、会话同步、提示词注入、Skills/MCP 管理、TOML 配置可视化的跨平台工具。 https://codex-x.site Codex-X Codex 可视化提示词注入 · Provider · 会话 · Skills / MCP 管理工具一款面向 OpenAI Codex 桌面端 / Codex CLI 的跨平台桌面工具。把提示词模板、自定义 Prompt、第三方 API 供应商、会话同步、Skills / MCP 和 TOML 配置都放进可视化界面里，不用反复手改文件。 Codex-X 是什么？当你同时使用 Codex 桌面端、CLI、第三方 API、Skills / MCP 和多套提示词时，配置很容易散落在不同文件里。Codex-X 把这些高频操作集中到一个桌面界面中，让当前状态看得见、常用操作点一下就能完成。你可以用它：像管理插件一样管理提示词：分类、导入 Markdown、自定义编辑、一键启用 / 禁用内置 5 套提示词模板，同时支持用户把自己的提示词变成可视化模板库

ruanyf/weekly

GitHub Trending — 2026-09-20T11:46:22.835195+00:00

科技爱好者周刊，每周五发布科技爱好者周刊记录每周值得分享的科技内容，周五发布。欢迎投稿文章/软件/资源，请提交 issue 。 P.S. 讨论区的《谁在招人》，是一个免费的程序员招聘帖，提供大量就业信息，欢迎发布工作/实习岗位。 2026 九月第 413 期：再见了，React Native 第 412 期：禁止 issue，只用 PR 第 411 期： OpenClaw 2.0 是一个缩影八月第 410 期：你需要知道的 AI 三种机制第 409 期：程序员的职业未来第 408 期：你需要知道的 AI 缓存知识第 407 期：国家为什么需要开源软件？七月第 406 期：道可，道非，常道第 405 期：资源，社会公平与算力第 404 期：你需要知道的 AI 内存知识第 403 期：为什么 Dropbox 不成功第 402 期：我在智念 AI 的日子（小说）六月第 401 期：如何赚到10亿美元第 400 期： rsync 的争论第 399 期：中国 AI 大厂访问记五月第 398 期： Token 费用难以负担

cloudflare/quiche

GitHub Trending — 2026-09-20T11:46:22.827222+00:00

🥧 Savoury implementation of the QUIC transport protocol and HTTP/3 https://docs.quic.tech/quiche/ quiche is an implementation of the QUIC transport protocol and HTTP/3 as specified by the IETF . It provides a low level API for processing QUIC packets and handling connection state. The application is responsible for providing I/O (e.g. sockets handling) as well as an event loop with support for timers. For more information on how quiche came about and some insights into its design you can read a

docling-project/docling

GitHub Trending — 2026-09-20T11:46:22.823724+00:00

Get your documents ready for gen AI https://docling-project.github.io/docling Docling What is Docling ? Docling simplifies document processing by parsing diverse formats — including advanced PDF understanding — and providing seamless integrations with the generative AI ecosystem. Features 🗂️ Parsing of multiple document formats including PDF, DOCX, PPTX, XLSX, HTML, EPUB, Apple Pages, WAV, MP3, WebVTT, Box Notes, email formats (EML, MSG), images (PNG, TIFF, JPEG, ...), LaTeX, DocLang, plain text

higgsfield-ai/higgsfield

GitHub Trending — 2026-09-20T11:46:22.821023+00:00

Fault-tolerant, highly scalable GPU orchestration, and a machine learning framework designed for training models with billions to trillions of parameters higgsfield - multi node training without crying Higgsfield is an open-source, fault-tolerant, highly scalable GPU orchestration, and a machine learning framework designed for training models with billions to trillions of parameters, such as Large Language Models (LLMs). Higgsfield serves as a GPU workload manager and machine learning framework

Open-Dev-Society/OpenStock

GitHub Trending — 2026-09-20T11:46:22.812242+00:00

OpenStock is an open-source alternative to expensive market platforms. Track real-time prices, set personalized alerts, and explore detailed company insights — built openly, for everyone, forever free. https://openstock-ods.vercel.app Ca: B6F3rUqfPfPmHXeMJaVttkrP9tfy5Eq2MUAaubFxpump New from Open Dev Society: kitbash . Before you build, find out which parts already exist on GitHub. Borrow them, adapt them, or write the rest. © Open Dev Society. This project is licensed under AGPL-3.0; if you mod

Awesome List Updated on Sep 20, 2026

Track Awesome List — 2026-09-20T04:48:48.917000+00:00

11 awesome list updated on Sep 20, 2026, including Awesome Neovim, Awesome Selenium, Awesome Gemini Cli, Awesome Bitcoin, Free for Dev, Open Source Flutter Apps, Awesome Rust, Awesome Go, Awesome D, Collective Ai Tools, Awesome Acg

Awesome List Updated on Sep 19, 2026

Track Awesome List — 2026-09-19T04:32:39.961000+00:00

11 awesome list updated on Sep 19, 2026, including Awesome Opensource Documents, Awesome Zsh Plugins, Discount for Student Dev, Awesome Agents, Awesome Neovim, Awesome Gemini Cli, Free for Dev, Public Apis, Awesome Rust, Awesome Go, Collective Ai Tools

Copilot code review: An improved review experience

GitHub Changelog — 2026-09-18T20:17:22+00:00

Copilot code review now gives you a clearer view of how a review changes over time, more intelligently auto-resolves its own suggestions, and generates useful commit messages when you accept… The post Copilot code review: An improved review experience appeared first on The GitHub Blog .

Manage the code coverage ruleset condition with the REST API

GitHub Changelog — 2026-09-18T19:23:49+00:00

You can now use the generally available REST API to manage the Restrict code coverage repository ruleset option, in addition to the existing UI support. This ruleset lets you enforce… The post Manage the code coverage ruleset condition with the REST API appeared first on The GitHub Blog .

GitHub Copilot weekly releases — September 14

GitHub Changelog — 2026-09-18T19:21:22+00:00

This week, GitHub Copilot adds new model selection options, code review updates, and Sentry integration in the Copilot app. There are also updates for admins, plus new agent features in… The post GitHub Copilot weekly releases — September 14 appeared first on The GitHub Blog .

Upcoming deprecation of selected GitHub Copilot models in mid-October

GitHub Changelog — 2026-09-18T19:00:00+00:00

We will deprecate the following models across all GitHub Copilot experiences (including Copilot Chat, inline edits, ask and agent modes, and code completions) on October 19th, 2026: Model Deprecation date… The post Upcoming deprecation of selected GitHub Copilot models in mid-October appeared first on The GitHub Blog .

Stage-only npm tokens for safer automation

GitHub Changelog — 2026-09-18T16:37:50+00:00

You can now select Read and write (stage only) when creating an npm granular access token. This lets your automated workflows stage package versions for review without giving the token… The post Stage-only npm tokens for safer automation appeared first on The GitHub Blog .

Should you read the code, is RAG dead, and did Skills kill MCP?

GitHub AI & ML — 2026-09-18T15:00:00+00:00

We dive into these questions and other AI hot takes on the latest episode of the GitHub Podcast. The post Should you read the code, is RAG dead, and did Skills kill MCP? appeared first on The GitHub Blog .

Awesome List Updated on Sep 18, 2026

Track Awesome List — 2026-09-18T04:35:50.046000+00:00

20 awesome list updated on Sep 18, 2026, including Awesome Vue, Awesome Ffmpeg, Awesome Readme, Awesome Mqtt, Awesome Amazon Seller, Awesome V, Awesome Mongodb, Awesome Cytodata, Awesome Web Archiving, Awesome Cross Platform Nodejs, Awesome AutoHotkey, Free for Dev, Awesome Magento2, Awesome Integration, Awesome Rust, Collective Ai Tools, Awesome Rails, Static Analysis, Awesome Transit, Awesome Go

Copilot impact dashboard now shows feature engagement

GitHub Changelog — 2026-09-17T21:47:27+00:00

The Copilot impact dashboard now shows how many active users regularly use key Copilot features. Enterprise administrators can quickly see which experiences are widely adopted and which may need more… The post Copilot impact dashboard now shows feature engagement appeared first on The GitHub Blog .

Agentic CLI customizations now in the usage metrics API

GitHub Changelog — 2026-09-17T21:08:50+00:00

GitHub Copilot expands existing CLI report coverage with agentic activity metrics for skills, custom agents, Model Context Protocol (MCP) servers, slash commands, and plugins. What’s new The fields appear in… The post Agentic CLI customizations now in the usage metrics API appeared first on The GitHub Blog .

What Is an Agentic Development Environment? Kepler Is GitKraken’s Answer.

GitKraken — 2026-09-17T16:44:55+00:00

Every new AI coding agent comes with the same pitch: write code faster. For most devs, that part already checks out. Codex writes a function in seconds. Claude Code refactors a file mid-meeting. Copilot fills in a test before you finish describing it. None of that touches the problem that shows up an hour later: […]

Ubuntu 26 generally available and latest migration

GitHub Changelog — 2026-09-17T16:27:16+00:00

The Ubuntu 26.04 runner image for GitHub Actions is now out of public preview and fully supported for production workflows on both x64 and arm64. As part of this release,… The post Ubuntu 26 generally available and latest migration appeared first on The GitHub Blog .

Workflow execution protections in GitHub Actions generally available

GitHub Changelog — 2026-09-17T15:45:26+00:00

Workflow execution protections for GitHub Actions, previously in public preview, are now generally available for GitHub Enterprise, organizations, and repositories. Execution protections let you define an allowlist that controls who… The post Workflow execution protections in GitHub Actions generally available appeared first on The GitHub Blog .

What a Supply Chain Attack Is Really After: Your Credentials

GitGuardian — 2026-09-17T15:00:37+00:00

Recent campaigns show a consistent pattern: a supply chain attack compromises trusted software to reach the credentials held by developer machines and CI/CD pipelines.

Awesome List Updated on Sep 17, 2026

Track Awesome List — 2026-09-17T04:47:07.665000+00:00

13 awesome list updated on Sep 17, 2026, including Awesome Sysadmin, Awesome Icons, Awesome Polars, Awesome Vue, Awesome Neovim, Free for Dev, Public Apis, Awesome Mac, Awesome Rust, Awesome Go, Awesome Machine Learning, Static Analysis, Awesome Acg

Migrating the GitHub Copilot runtime to Rust, using Copilot

GitHub AI & ML — 2026-09-17T00:26:43+00:00

A rewrite this size wasn't affordable before agents. Here's what porting the Copilot agent runtime to 800,000 lines of production Rust actually took. The post Migrating the GitHub Copilot runtime to Rust, using Copilot appeared first on The GitHub Blog .

Automate SSO authorization for classic PATs and SSH keys

GitHub Changelog — 2026-09-16T20:20:16+00:00

Enterprise admins can now automate SSO authorization for existing classic personal access tokens (PATs) and SSH keys for organizations in GitHub Enterprise Cloud, replacing manual per-organization authorization by your developers.… The post Automate SSO authorization for classic PATs and SSH keys appeared first on The GitHub Blog .

SCIM user responses now include a profileUrl attribute

GitHub Changelog — 2026-09-16T20:19:58+00:00

SCIM user responses from GitHub now include the standard profileUrl attribute defined by RFC 7643, containing the absolute URL of the GitHub account linked to the external identity. Previously, matching… The post SCIM user responses now include a profileUrl attribute appeared first on The GitHub Blog .

Copilot budget increase requests are generally available

GitHub Changelog — 2026-09-16T20:17:18+00:00

Previously, when a member used all the Copilot AI credits available to them, they were blocked from Copilot features that consume credits. This release adds a flow for them to… The post Copilot budget increase requests are generally available appeared first on The GitHub Blog .

Degradation with Gemini 3.8 Flash

GitHub Status — 2026-09-16T17:48:49+00:00

Sep 16 , 17:48 UTC Resolved - On September 16, 2026, between 04:40 and 11:45 UTC, the Gemini 3.8 Flash model in GitHub Copilot experienced degraded availability. Requests to this model failed at an average rate of 6.4%, and the impact was highest during peak traffic hours. Other Copilot models were not affected. Users could continue to work with a different model or with 'Auto'. The degradation was caused due to a capacity issue with an upstream model provider. Failure rates returned to normal a

6 Best Pull Request Review Tools for Enterprise Teams in 2026

GitKraken — 2026-09-16T15:35:54+00:00

Finding the right pull request review tool can mean the difference between a team that ships confidently and one that drowns in open PRs. When review workflows are scattered across tabs, comment threads, and standalone dashboards, code quality and velocity both take a hit. GitKraken gives you a unified code review experience that connects your […]

Code scanning AI Scan no longer requires CodeQL default setup

GitHub Changelog — 2026-09-16T13:26:06+00:00

You can now use AI Scan for pull requests to find security vulnerabilities, even when CodeQL default setup isn’t enabled on a repository. Previously, AI Scan for pull requests only… The post Code scanning AI Scan no longer requires CodeQL default setup appeared first on The GitHub Blog .

Awesome List Updated on Sep 16, 2026

Track Awesome List — 2026-09-16T04:44:25.499000+00:00

13 awesome list updated on Sep 16, 2026, including Awesome Vue, Awesome Scientific Writing, Awesome Keycloak, Awesome Django, Awesome Graphql, Awesome Zsh Plugins, Awesome Agents, Awesome Mac, Awesome Rust, Awesome Go, Awesome Rails, Awesome Selfhosted, Awesome Go

Enforce GitHub Advanced Security configurations

GitHub Changelog — 2026-09-15T19:31:58+00:00

Enterprise administrators can now enforce GitHub Advanced Security configurations across their organizations. This prevents both organization and repository administrators from overriding settings defined at the enterprise level, helping security and… The post Enforce GitHub Advanced Security configurations appeared first on The GitHub Blog .

6 Top Jellyfish Competitors for Engineering Analytics 2026

GitKraken — 2026-09-15T15:33:46+00:00

Engineering teams are investing more in AI coding tools, and that means the platform you use to measure delivery performance needs to keep up. Jellyfish has been a go-to for engineering analytics, but it’s not the only option on your radar anymore. GitKraken Insights gives you full-stack developer intelligence that connects DORA metrics, AI impact […]

AI Autonomy: How to Find the Autonomy Your Agents Already Have

GitGuardian — 2026-09-15T15:00:39+00:00

AI agents are only as autonomous as the credentials behind them. This article talks about the Cloud Security Alliance's autonomy framework, why an agent's intended boundaries rarely match its actual access, and how GitGuardian helps close that gap through detection, remediation, and prevention.

Awesome List Updated on Sep 15, 2026

Track Awesome List — 2026-09-15T04:47:14.640000+00:00

12 awesome list updated on Sep 15, 2026, including Awesome Ironsworn, Awesome Zig, Awesome Ios Books, Awesome Playcanvas, Awesome Graphql, Awesome Gemini Cli, Awesome Neovim, Awesome Python, Public Apis, Awesome Rust, Awesome Go, Awesome Go

Agent of the Day – September 15, 2026

GitHub Agentic Workflows — 2026-09-15T00:00:00+00:00

ESLint Refiner audits gh-aw's own custom lint rules daily, catching a false positive with line-by-line evidence and filing a precise fix request instead of a vague complaint.

Tower 14 for Windows — Branches Review & Smarter "Fully Merged" Detection

Tower — 2026-09-15T00:00:00+00:00

Tower 14 for Windows is here, and it picks up right where the last release left off! This update brings the new Branches Review view, giving you a bird's-eye view of every branch in your repository — plus a much smarter "Fully Merged" detection that finally catches squash and rebase merges. In Tower 13 for Windows , we gave you Branch Pinning and Automatic Branch Management to help you keep your sidebar under control. The feedback was clear: you liked it, and you wanted to go further. So that's

Actions Larger Runner Jobs for some customers may be slow to start

GitHub Status — 2026-09-14T19:35:48+00:00

Sep 14 , 19:35 UTC Resolved - On September 14, 2026, between 16:10 and 19:01 UTC, some customers using GitHub Actions larger runners experienced longer-than-normal wait times for jobs to start. During this period, 5.7% of larger-runner jobs were affected. A routine expansion of our compute capacity exposed a bug in how our provisioning system handled capacity records when selecting where to create runner virtual machines. This slowed the creation of new runners, leaving insufficient runner capac

You Can Have Your Pi and Kepler It Too

GitKraken — 2026-09-14T18:22:48+00:00

One of the features I have been wanting in Kepler for a long time was the ability to use Pi as my agent when spinning up tasks. Pi is such a minimal harness that it doesn’t prompt for approval for every little thing and it’s system prompt let’s the model just be itself. That minimalism […]

Awesome List Updated on Sep 14, 2026

Track Awesome List — 2026-09-14T04:50:17.412000+00:00

23 awesome list updated on Sep 14, 2026, including Awesome Deno, Awesome Cyber Security University, Awesome Testing, Awesome Claude Code, Free Programming Books (English, By Subjects), Awesome Mysql, Awesome Blazor, Awesome Design Systems, Magictools, Awesome Electronics, Awesome Lowcode, Awesome Web Security, Awesome Fuzzing, Awesome Cli Apps in a Csv, Awesome Scientific Writing, Awesome Polars, Awesome Neovim, Awesome Gemini Cli, Awesome Bitcoin, Awesome Mac, Awesome Rust, Awesome Go, Awesome

Awesome List Updated on Sep 21 - Sep 27, 2026

Track Awesome List — 2026-09-14T04:50:17.412000+00:00

63 awesome list updated on Sep 21 - Sep 27, 2026, including Awesome Vue, Awesome Deno, Awesome Cyber Security University, Awesome Testing, Awesome Claude Code, Free Programming Books (English, By Subjects), Awesome Mysql, Awesome Blazor, Awesome Design Systems, Magictools, Awesome Electronics, Awesome Lowcode, Awesome Web Security, Awesome Fuzzing, Awesome Cli Apps in a Csv, Awesome Ironsworn, Awesome Zig, Awesome Ios Books, Awesome Playcanvas, Awesome Scientific Writing, Awesome Keycloak, Aweso

Weekly Update – September 14, 2026

GitHub Agentic Workflows — 2026-09-14T00:00:00+00:00

v0.89.0 through v0.89.12 shipped a wave of releases hardening logs observability, model routing, and CI security across gh-aw.

Agent of the Day – September 14, 2026

GitHub Agentic Workflows — 2026-09-14T00:00:00+00:00

Daily Model Inventory Checker cross-checks five live model catalogs every night and files a precise, sourced issue the moment a new flagship model needs an alias.

Incident with several GitHub Services

GitHub Status — 2026-09-13T10:44:55+00:00

Sep 13 , 10:44 UTC Resolved - On September 13, 2026, between 08:43 and 10:44 UTC, GitHub experienced degraded availability across approximately 28 services, including Issues, Pull Requests, Actions, Codespaces, Pages, Notifications, Code Scanning, Git LFS, and new account signup. At peak, 8.8% of requests to create GitHub App installation access tokens failed. Token issuance for Actions workflows was also affected, impacting approximately 4% of workflows during the incident time frame. Creating

Awesome List Updated on Sep 13, 2026

Track Awesome List — 2026-09-13T04:39:51.778000+00:00

13 awesome list updated on Sep 13, 2026, including Awesome Godot, Collective Ai Tools, Free Programming Books (English, By Subjects), Awesome Zig, Awesome Neovim, Awesome Gemini Cli, Open Source Flutter Apps, Awesome Python, Public Apis, Awesome Mac, Awesome Rust, Awesome Go, Awesome Cli Apps

Awesome List Updated on Sep 12, 2026

Track Awesome List — 2026-09-12T15:28:49.252000+00:00

5 awesome list updated on Sep 12, 2026, including Webcomponents the Right Way, Awesome Cl, Awesome Neovim, Awesome Rust, Awesome Machine Learning

Marketing ops as code: Automating events from planning to follow-up on GitHub

GitHub AI & ML — 2026-09-11T18:26:10+00:00

If you can write down how you do your work, you can automate it. Here's what I did to support GitHub's APAC marketing team. The post Marketing ops as code: Automating events from planning to follow-up on GitHub appeared first on The GitHub Blog .

Awesome List Updated on Sep 11, 2026

Track Awesome List — 2026-09-11T04:32:01.820000+00:00

14 awesome list updated on Sep 11, 2026, including Urban and Regional Planning Resources, Awesome Speaking, Awesome Python Scientific Audio, Awesome Embedded Rust, Awesome Blazor, Awesome Readme, Awesome Neovim, Awesome Gemini Cli, Game Datasets, Public Apis, Awesome Mac, Awesome Integration, Awesome D, Awesome Selfhosted

Turn off your GPU to fix GitKraken on WSL (and three other things support is fielding this week)

GitKraken — 2026-09-11T04:28:00+00:00

Every so often we sit down with someone from our support team and turn their week into a blog post. This time, Roberto walks us through four things generating tickets right now: an upcoming Microsoft authentication change, how AI credit pools actually work, multi-account support in Kepler, and a one-line fix for laggy GitKraken on […]

Agent of the Day – September 11, 2026

GitHub Agentic Workflows — 2026-09-11T00:00:00+00:00

Meet jsweep, gh-aw's daily agent that types and modernizes one JavaScript helper file at a time — and knows when to walk away empty-handed.

GitHub Copilot app for Beginners: Using the diff, terminal, and browser

GitHub AI & ML — 2026-09-10T21:31:19+00:00

Checking agent-generated code usually means hopping between tabs. Learn how to view diffs, run terminal commands, and preview web apps side by side in the GitHub Copilot app. The post GitHub Copilot app for Beginners: Using the diff, terminal, and browser appeared first on The GitHub Blog .

Awesome List Updated on Sep 10, 2026

Track Awesome List — 2026-09-10T04:33:38.621000+00:00

17 awesome list updated on Sep 10, 2026, including Awesome Captcha, Open Source Mac Os Apps, Awesome Osint, Awesome No Login Web Apps, Awesome Claude Code, Free Programming Books (English, By Subjects), Awesome Nextjs, Awesome Graphql, Collective Ai Tools, Awesome Neovim, Awesome Gemini Cli, Free for Dev, Open Source Flutter Apps, Public Apis, Awesome Mac, Awesome Rust, Awesome Go

Run More Internal Hackathons

GitKraken — 2026-09-10T04:00:17+00:00

Internal hackathons are a powerful way to let your teams explore ideas and work together on something fun besides the same old stuff for work. Maybe they want to build something brand new, maybe they want to knock out things that are on the backlog that never get prioritized, or maybe they want to work […]

GitHub availability report: August 2026

The GitHub Blog — 2026-09-10T02:05:17+00:00

In August, we experienced five incidents that resulted in degraded performance across GitHub services. The post GitHub availability report: August 2026 appeared first on The GitHub Blog .

Agent of the Day – September 10, 2026

GitHub Agentic Workflows — 2026-09-10T00:00:00+00:00

Meet the gh-aw agent that grades its own package docs daily and files scored gap reports automatically.

Questions to Ask About AI Agent Orchestration

GitKraken — 2026-09-09T16:25:30+00:00

Running AI coding agents in parallel across repositories is no longer experimental. It’s how high-performing engineering teams ship faster. But the tools you pick to orchestrate those agents can either multiply your output or introduce new bottlenecks. GitKraken gives your team a purpose-built surface for AI coding agent orchestration through Kepler, its agent-agnostic development environment. […]

Awesome List Updated on Sep 09, 2026

Track Awesome List — 2026-09-09T04:33:46.331000+00:00

15 awesome list updated on Sep 09, 2026, including Awesome WSL, Awesome Open Source Games, Awesome Javascript, Awesome Osint, Webcomponents the Right Way, Awesome Claude Code, Awesome Neovim, Awesome Gemini Cli, Public Apis, Awesome Mac, Awesome Rust, Awesome Go, Awesome Terraform, Awesome Datascience, Awesome Machine Learning

Agent of the Day – September 9, 2026

GitHub Agentic Workflows — 2026-09-09T00:00:00+00:00

PureLock hunts down untested pure Go functions and fans out parallel sub-agents to lock in coverage, one small draft PR at a time.

Code Review Platforms That Reduce PR Bottlenecks

GitKraken — 2026-09-08T16:18:14+00:00

Pull request queues keep growing, reviewers lose context between rounds of feedback, and merges stall for days. If your team’s code review process has become a bottleneck instead of a quality gate, the tooling around it may be the real issue. GitKraken gives you a unified code review workspace that cuts through noise and surfaces […]

Service Account Credential Rotation: The Blast-Radius Checklist

GitGuardian — 2026-09-08T15:00:15+00:00

A practical checklist for rotating service account credentials safely by assessing validity, leaks, permissions, consumers, vaults, copies, owners, and rollback.

Awesome List Updated on Sep 08, 2026

Track Awesome List — 2026-09-08T04:27:41.745000+00:00

19 awesome list updated on Sep 08, 2026, including Awesome Iam, Awesome Ai in Finance, Awesome Svelte, Awesome Game Remakes, Awesome Billing, Awesome No Login Web Apps, Webcomponents the Right Way, Awesome Icons, Awesome V, Awesome Developer First, Awesome Agents, Awesome Neovim, Free for Dev, Awesome Mac, Awesome Go, Collective Ai Tools, Awesome Opentofu, Static Analysis, Awesome Ai

Agent of the Day – September 8, 2026

GitHub Agentic Workflows — 2026-09-08T00:00:00+00:00

Meet CLI Version Checker, the agent that quietly keeps gh-aw's toolchain current.

Datadog integration: four merge queue metrics are being retired

Mergify Changelog — 2026-09-08T00:00:00+00:00

The operational Datadog metrics are retired in favour of the mergify.queue.* set shipped in July. Two have a renamed counterpart, two have none.

Head branch updates stay inside your repository and its forks

Mergify Changelog — 2026-09-08T00:00:00+00:00

The update, rebase and squash actions now refuse to write a head branch that lives in a repository yours was forked from.

6 Best Jellyfish Alternatives Compared for 2026

GitKraken — 2026-09-07T16:18:53+00:00

Jellyfish helped define engineering intelligence for enterprise teams, but it’s far from the only way to track software engineering intelligence alternatives like DORA metrics, delivery velocity, and AI coding tool impact. GitKraken Insights gives you full-stack developer intelligence with 15-minute setup and built-in AI impact measurement. This guide compares six platforms side by side so […]

AI Created a Leaked Credentials Flood: Here's How We're Draining It

GitGuardian — 2026-09-07T15:00:23+00:00

Leaked credentials now reach public sources faster than any security team can review them by hand. GitGuardian Public Secrets Monitoring runs agents over every public incident and returns a comprehensive verdict.

Awesome List Updated on Sep 07, 2026

Track Awesome List — 2026-09-07T04:29:35.482000+00:00

15 awesome list updated on Sep 07, 2026, including Awesome Data Engineering, Awesome Jupyter, Awesome Ansible, Awesome Svelte, Open Source Flutter Apps, Webcomponents the Right Way, Free Programming Books (English, By Subjects), Awesome Lowcode, Awesome Zig, Awesome Neovim, Awesome Mac, Awesome Rust, Collective Ai Tools, Awesome Terraform, Awesome Datascience

Awesome List Updated on Sep 14 - Sep 20, 2026

Track Awesome List — 2026-09-07T04:29:35.482000+00:00

54 awesome list updated on Sep 14 - Sep 20, 2026, including Awesome Data Engineering, Awesome Jupyter, Awesome Ansible, Awesome Iam, Awesome Ai in Finance, Awesome Svelte, Awesome Game Remakes, Awesome Billing, Awesome WSL, Awesome Open Source Games, Awesome Javascript, Awesome Captcha, Open Source Mac Os Apps, Awesome Osint, Awesome No Login Web Apps, Urban and Regional Planning Resources, Awesome Speaking, Awesome Python Scientific Audio, Awesome Embedded Rust, Open Source Flutter Apps, Webcom

Weekly Update – September 7, 2026

GitHub Agentic Workflows — 2026-09-07T00:00:00+00:00

v0.88.4 hardens the agentic firewall and CI reliability, plus new trusted enclave and DIFC policy support.

Agent of the Day – September 7, 2026

GitHub Agentic Workflows — 2026-09-07T00:00:00+00:00

Dead Code Removal Agent runs the deadcode static analyzer daily, then quietly deletes what it finds and everything that only existed to test it.

Awesome List Updated on Sep 06, 2026

Track Awesome List — 2026-09-06T04:30:24.647000+00:00

13 awesome list updated on Sep 06, 2026, including Awesome Github Wiki, Awesome Jupyter, Awesome Cli Apps, Awesome Web Security, Awesome Playcanvas, Awesome Django, Public Apis, Awesome Cpp, Awesome Zsh Plugins, Awesome Neovim, Awesome Selfhosted, Awesome Rust, Awesome Go

Awesome List Updated on Sep 05, 2026

Track Awesome List — 2026-09-05T04:18:51.627000+00:00

13 awesome list updated on Sep 05, 2026, including Awesome Digital History, Awesome Homematic, Awesome Go, Awesome Terraform, Awesome Datascience, Open Source Mac Os Apps, Awesome Claude Code, Awesome Bitcoin, Awesome Web Security, Awesome Scientific Writing, Awesome Mac, Awesome Selfhosted, Awesome Rust

MicroVM Support Is Consolidating on Cloud Hypervisor

GitHub Agentic Workflows — 2026-09-05T00:00:00+00:00

gh-aw is consolidating its specialized sandbox runtimes on the Cloud Hypervisor microVM implementation.

The New GitHub Star History API

Star History Blog — 2026-09-05T00:00:00+00:00

The New GitHub Star History API

Disruption with Copilot Code Review

GitHub Status — 2026-09-04T22:26:46+00:00

Sep 4 , 22:26 UTC Resolved - On September 4, 2026, between 20:04 and 22:26 UTC, GitHub Copilot code review experienced an increased failure rate. Affected pull request reviews failed to complete or post review comments. The incident was caused by a change to the service’s authentication permissions that prevented it from submitting affected reviews to the GitHub API. We reverted the change and restored normal operation by 22:26 UTC. We apologize for the disruption. Sep 4 , 22:25 UTC Monitoring -

Degradation in repos contents API

GitHub Status — 2026-09-04T22:23:34+00:00

Sep 4 , 22:23 UTC Resolved - On September 4, 2026, between approximately 21:45 and 22:07 UTC, some users experienced errors and elevated latency for repository operations. The incident was fully resolved at 22:23 UTC. The cause was a capacity change that spread one of our clusters across additional availability zones; our zone-aware traffic routing kept sending requests to the original zone for performance, overloading a small set of servers while the new capacity sat idle. We resolved the incid

Project HydraFusion: Frontier quality via multi-model orchestration

GitHub AI & ML — 2026-09-04T16:04:14+00:00

In controlled offline evaluations, HydraFusion’s selective coding workflows matched or exceeded the evaluated Opus 5 baseline while reducing estimated workflow cost. Now available as a research preview in GitHub Copilot. The post Project HydraFusion: Frontier quality via multi-model orchestration appeared first on The GitHub Blog .

Awesome List Updated on Sep 04, 2026

Track Awesome List — 2026-09-04T04:23:51.300000+00:00

9 awesome list updated on Sep 04, 2026, including Awesome React, Awesome Osint, Webcomponents the Right Way, Awesome Testing, Awesome Playcanvas, Awesome Go, Awesome Rails, Collective Ai Tools, Free for Dev

Pin a deployment condition to the app that deployed

Mergify Changelog — 2026-09-04T00:00:00+00:00

`deployment-success` and `deployment-failure` now accept the qualified `@ / ` form, so a rule can require an environment be deployed by one specific app.

Incident with Grok Copilot AI Model Provider

GitHub Status — 2026-09-03T17:11:47+00:00

Sep 3 , 17:11 UTC Resolved - Between 13:22 and 17:11 UTC on September 03, 2026, GitHub Copilot experienced degradation affecting several Grok models, including Grok 4.5 and Grok 4.6. Users encountered elevated error rates, but other models were not affected. The degradation was caused by an issue with an upstream model provider. GitHub engineers detected the issue through automated monitoring, displayed in-product warnings for the affected models, and coordinated with the provider. Service retur

GitHub Copilot app for Beginners: Run several agents at once

GitHub AI & ML — 2026-09-03T16:00:00+00:00

Learn how to run parallel agents in the GitHub Copilot app, and experience the moment it stops feeling scary and starts feeling powerful. The post GitHub Copilot app for Beginners: Run several agents at once appeared first on The GitHub Blog .

Why I’m excited to join GitKraken

GitKraken — 2026-09-03T10:00:00+00:00

I wanted you to hear directly from me that I’ve joined GitKraken as CEO. I’m honored to succeed Matt Johnston, who has led the company through five years of significant growth and scale. I chose to join GitKraken because the entire company is focused on a problem that matters deeply to software teams right now. […]

What to Know About AI Code-to-Merge Platforms

GitKraken — 2026-09-03T06:41:00+00:00

AI coding agents can generate pull requests at a pace your team has never seen. The bottleneck has shifted from writing code to everything that follows: reviewing, iterating, and merging. AI code-to-merge platforms are the category of tools built to manage that entire lifecycle, from the moment an agent starts working to the moment code […]

Awesome List Updated on Sep 03, 2026

Track Awesome List — 2026-09-03T04:18:21.683000+00:00

8 awesome list updated on Sep 03, 2026, including Awesome Algorand, Awesome Flutter, Awesome Windows, Awesome Blazor, Awesome Gemini Cli, Awesome Go, Awesome Machine Learning, Awesome Rust

Agent of the Day – September 3, 2026

GitHub Agentic Workflows — 2026-09-03T00:00:00+00:00

Issue Monster wakes every 40 minutes to hand triaged issues straight to the Copilot coding agent.

Decoding the new AI lingo: Loops, harnesses, squads, hill climbing… oh my!

GitHub AI & ML — 2026-09-02T21:00:00+00:00

From loop engineering to harnesses, squads, and open weights, the GitHub Podcast breaks down the AI terms showing up in developer conversations. The post Decoding the new AI lingo: Loops, harnesses, squads, hill climbing… oh my! appeared first on The GitHub Blog .

How we make AI coding more cost efficient without sacrificing task quality

GitHub Engineering — 2026-09-02T18:00:00+00:00

Why shorter outputs can cost more, and how GitHub Copilot reduces wasted work across the complete coding task. The post How we make AI coding more cost efficient without sacrificing task quality appeared first on The GitHub Blog .

Can You Prove Your AI Agents Are Paying Off? Most Developers Can’t

GitKraken — 2026-09-02T17:42:08+00:00

We put a blunt question to developers on a recent live webinar: right now, could you actually prove AI agents are paying off for you or your team? Only 24% said yes. The other 76% were guessing, unsure, or already suspicious that agents are costing more than they’re saving. That gap between adoption and proof […]

OWASP Top 10 CI/CD Security Risks Explained: Why Credential Hygiene Decides the Outcome

GitGuardian — 2026-09-02T15:00:42+00:00

Learn how the OWASP Top 10 CI/CD Security Risks map the modern software delivery attack surface, and why credential hygiene sits at the center of so many real-world failures.

8 Key Gaps in Code Review Collaboration Platforms

GitKraken — 2026-09-02T06:00:00+00:00

Your code review collaboration platform probably does a decent job showing diffs. But for distributed teams, the toughest problems rarely live inside the diff itself. They hide in handoff gaps, missing context, and review bottlenecks that no feature checklist warns you about. GitKraken gives distributed teams a connected workflow that ties early collaboration, visual code […]

Awesome List Updated on Sep 02, 2026

Track Awesome List — 2026-09-02T04:22:57.980000+00:00

21 awesome list updated on Sep 02, 2026, including Awesome Streaming, Awesome Amazon Seller, Awesome Testing, Awesome WSL, Awesome Javascript, Awesome Datascience, Awesome Windows, Awesome Cli Apps, Collective Ai Tools, Awesome Claude Code, Awesome Sysadmin, Magictools, Awesome Gemini Cli, Free for Dev, Public Apis, Awesome Selfhosted, Awesome Mac, Awesome Rust, Awesome Go, Awesome Mac, Awesome Ai

Agent of the Day – September 2, 2026

GitHub Agentic Workflows — 2026-09-02T00:00:00+00:00

Ponytail Reviewer hunts pull requests for over-engineering, flagging unnecessary complexity before it ships — three runs, one clean pass, and a mid-flight model swap.

DeepSeek Harness Beats OpenClaw as the Fastest Repo to 200K Stars

Star History Blog — 2026-09-02T00:00:00+00:00

DeepSeek Harness Beats OpenClaw as the Fastest Repo to 200K Stars

How To Orchestrate a Better Agentic Workflow

GitKraken — 2026-09-01T20:25:29+00:00

How to Orchestrate a Better Agentic Workflow Turn scattered agent activity into a workflow you can see, manage, and improve. September 17, 2026 @ 1:00PM EDT We’re all being asked to do more with AI coding agents. Run them longer. Give them more work. Keep more tasks moving in parallel. But what happens when you’re […]

Kepler Tutorials: Every Video You Need to Get Started

GitKraken — 2026-09-01T17:51:06+00:00

Running one coding agent is manageable. Running four of them across three repos, each at a different stage, each waiting on something different from you, is where most developers lose the thread. That’s the problem Kepler is built to solve, and it’s also why we put together a full tutorial series instead of a single […]

Delays in commit processing

GitHub Status — 2026-09-01T16:01:21+00:00

Sep 1 , 16:01 UTC Resolved - On September 1, 2026, between approximately 14:01 and 16:01 UTC, updates in response to pushes were delayed, temporarily showing stale diffs. The median time to refresh a diff after a push rose from the normal level of about 3 seconds to over 2 minutes at the peak, and more than 140,000 customer accounts had at least one delayed refresh during the most affected 75 minutes. Pushing commits and opening pull requests continued to work normally. The incident was caused b

version 10.20260901

git-annex — 2026-09-01T15:29:07+00:00

git-annex 10.20260901 released with these changes Behavior change: drop --auto --from a remote does not any longer try to drop content that is not known to be present on the remote. This avoids unncessary work and makes it consistent with the behavior of git-annex sync and push. External special remote protocol extended to support IMPORTKEY. git-annex-remote-internetarchive supports --no-content imports. diffdriver: Avoid crashing when git passes an (undocumented) 8th parameter. The preferred co

Star History Monthly 🌟 Harness (August 2026)

Star History Newsletter — 2026-09-01T15:05:10+00:00

🔧 Four projects, four things you can do with a harness: ship it, own it, optimize it, measure it.

Credential Security: What Endpoint Protection Really Means for Secrets

GitGuardian — 2026-09-01T15:00:06+00:00

Antivirus and EDR catch malicious behavior on a machine. Neither tells you which valid credentials are exposed on it right now. That's credential security, a distinct job that finds exposed secrets and helps fix them before attackers do.

Awesome List Updated on Sep 01, 2026

Track Awesome List — 2026-09-01T04:59:39.233000+00:00

19 awesome list updated on Sep 01, 2026, including ALL About RSS, Alternative Internet, Awesome Mqtt, Awesome Kde, Awesome Cpp, Awesome Nextjs, Awesome Integration, Awesome Selfhosted, Awesome Cl, Awesome Cli Apps, Free Programming Books (English, By Subjects), Awesome Mac, Awesome Go, Awesome Gemini Cli, Awesome Ios Books, Awesome Neovim, Free for Dev, Public Apis, Awesome Rust

Why the Built-In Playwright Tool Is Now CLI-Only

GitHub Agentic Workflows — 2026-09-01T00:00:00+00:00

gh-aw removed built-in Playwright MCP support in favor of @playwright/cli: a smaller attack surface and a lighter token footprint for coding agents.

Agent of the Day – September 1, 2026

GitHub Agentic Workflows — 2026-09-01T00:00:00+00:00

PR Sous Chef checks in on gh-aw's open pull requests every 15 minutes, nudging Copilot only when a PR has actually gone stale.

Sandbox Security Options Are Now Runtime Profiles

GitHub Agentic Workflows — 2026-09-01T00:00:00+00:00

gh-aw replaces sandbox.agent.legacy-security and sandbox.agent.sudo with explicit sandbox runtime profiles.

August 2026 Status Update

BeeWare News — 2026-09-01T00:00:00+00:00

August 2026 Status Update

What Are Stealth Models?

GitKraken — 2026-08-31T19:47:27+00:00

The recent mystery around Ox Alpha last week and the week before was a fun slice of what makes social media fun. The hunt for the model provider and how people did that discovery should be studied. But, this post is more about stealth models in general. You might be wondering what the phrase “stealth […]

AWS S3 Bucket Security: Find the Secrets Hiding Outside Git

GitGuardian — 2026-08-31T15:00:28+00:00

S3 buckets have quietly become a credential blind spot: years of logs, backups, and pipeline output that nobody ever scans for secrets. In one 2025 incident (Sysdig), attackers reached admin access in eight minutes using IAM keys found in a public bucket.

Elevated rate of errors for OpenAI models provided by Copilot

GitHub Status — 2026-08-31T09:58:14+00:00

Aug 31 , 09:58 UTC Resolved - Between 08:37 and 09:41 UTC on August 31, 2026, GitHub Copilot experienced degradation affecting several GPT models, including gpt-5.2, gpt-5.3-codex, gpt-5.4, gpt-5.4-mini, gpt-5.4-nano, and the gpt-5.6 family (Luna, Sol, and Terra). Users encountered elevated error rates and interrupted streaming responses. Other models were not affected. The degradation was caused by an issue with an upstream model provider. GitHub engineers detected the issue through automated m

Awesome List Updated on Sep 07 - Sep 13, 2026

Track Awesome List — 2026-08-31T05:26:53.355000+00:00

59 awesome list updated on Sep 07 - Sep 13, 2026, including Awesome Postgres, Awesome Flame, Awesome Open Hardware, Awesome Computational Biology, Awesome Hacker News, ALL About RSS, Alternative Internet, Awesome Kde, Awesome Streaming, Awesome Algorand, Awesome Flutter, Awesome React, Awesome Digital History, Awesome Homematic, Awesome Github Wiki, Awesome Testing, Awesome Go, Awesome WSL, Awesome Javascript, Open Source Mac Os Apps, Awesome Osint, Awesome Windows, Webcomponents the Right Way,

Weekly Update – August 31, 2026

GitHub Agentic Workflows — 2026-08-31T00:00:00+00:00

Three v0.87.x pre-releases landed this week alongside intent-driven workflow design guidance, typed cooldown gating, and a wave of trajectory grader implementations.

Agent of the Day – August 31, 2026

GitHub Agentic Workflows — 2026-08-31T00:00:00+00:00

Issue Arborist reads 100 open issues a day and links sub-issues into trees, only creating a new parent when a cluster truly needs one.

Star History Monthly August 2026 | Harness

Star History Blog — 2026-08-31T00:00:00+00:00

Star History Monthly August 2026 | Harness

Landing Page E3 – D

GitKraken — 2026-08-28T21:27:14+00:00

Stop Context Switching, Start Shipping Go from commit to merge without leaving your flow. Speed up reviews and let AI and agents handle the busywork while you stay in control, all from one place. Try it for free with all features unlocked for 14 days. Download GitKraken Windows / Mac / Linux Create an Account for Free […]

Why We Stopped Reading Agent Logs Like a Waterfall

GitKraken — 2026-08-28T07:41:00+00:00

Giordano “Gyo” Piazza, GitKraken’s Director of Engineering, has spent the past month heads down on the next version of Kepler. When he got on a call to talk through it, he skipped the changelog and went straight to the part he actually wanted to talk about: how agents show their work. “Personally, I think it’s […]

HelloGitHub 第 125 期

HelloGitHub — 2026-08-28T00:14:02+00:00

本期共有 40 个项目，包含 C 项目 (1)，C# 项目 (3)，C++ 项目 (2)，Go 项目 (4)，Java 项目 (2)，JavaScript 项目 (4)，Kotlin 项目 (1)，Python 项目 (4)，Rust 项目 (3)，Skills (4)，Swift 项目 (2)，人工智能 (5)，其它 (5)

Agent of the Day – August 28, 2026

GitHub Agentic Workflows — 2026-08-28T00:00:00+00:00

Meet ESLint Refiner, the workflow that reviews gh-aw's own custom lint rules for correctness — and caught a wording bug quietly recurring across eleven files.

Disruption with GitHub Billing

GitHub Status — 2026-08-27T19:44:08+00:00

Aug 27 , 19:44 UTC Resolved - On August 26, 2026, between 20:40 UTC and 00:51 UTC on August 27, GitHub Billing experienced degraded performance affecting billing budget pages and GitHub Copilot CLI sessions. Affected customers encountered failed budget page loads or failures when starting or continuing CLI sessions. We confirmed this impact for a small number of customers (<1%). This was caused by a concentrated workload that created processing delays in our data storage layer. Automated retries

OpenClaw went viral. Meet the maintainers building and securing it.

GitHub Security — 2026-08-27T16:00:00+00:00

OpenClaw is the fastest-growing project in GitHub history. Peter Steinberger and several maintainers share what they learned in the project's first six months. The post OpenClaw went viral. Meet the maintainers building and securing it. appeared first on The GitHub Blog .

AI Agent Threat Response: Why Pre-Runtime Controls Matter More Than Runtime Detection

GitGuardian — 2026-08-27T15:00:16+00:00

AI agent threat response starts before runtime. See why pre-runtime credential controls stop agent misuse that runtime detection can only observe.

Incident with Actions and Pull Requests

GitHub Status — 2026-08-27T00:26:44+00:00

Aug 27 , 00:26 UTC Resolved - On August 26, 2026, from 21:55 UTC to 23:58 UTC, 2.6% of workflow runs triggered by pull request events were delayed, with the impact rising as high as 25% at its peak. Some users also experienced delays in pull request merge-commit generation, mergeability information, and merge-button availability. Actions and Pull Requests fully recovered by 23:58 UTC; the incident was resolved at 00:26 UTC after normal operation was confirmed. Background jobs that process pull r

Don’t Sleep on Perplexity

GitKraken — 2026-08-27T00:07:01+00:00

Perplexity was a big name a few years ago. But, we haven’t heard much out of them lately. There are plenty of posts on social media criticizing Perplexity to that effect. One thing that the posts miss is that Perplexity is still the king of AI search. Google is giving it a run for its […]

GitHub Copilot app for Beginners: Automate Dependabot pull request triage

GitHub AI & ML — 2026-08-26T20:12:53+00:00

Managing library updates can be tedious at times. Learn how the GitHub Copilot app can handle this type of repetitive task. The post GitHub Copilot app for Beginners: Automate Dependabot pull request triage appeared first on The GitHub Blog .

6 Things to Know Before Choosing an SEI Platform in 2026

GitKraken — 2026-08-26T06:57:00+00:00

Choosing a software engineering intelligence platform is one of those decisions that gets more complicated the longer you wait. The category has grown rapidly, and every vendor claims to track the metrics that matter. GitKraken Insights gives you a full-stack view of engineering performance, from DORA metrics to AI tool ROI, in a platform trusted […]

Agent of the Day – August 26, 2026

GitHub Agentic Workflows — 2026-08-26T00:00:00+00:00

Meet the CLI Consistency Checker, the archivist that reads every gh aw --help line so your docs never drift.

How to evaluate LLMs before production

GitHub AI & ML — 2026-08-25T21:35:11+00:00

These are the lessons we learned evaluating LLMs for real-world secret scanning. The post How to evaluate LLMs before production appeared first on The GitHub Blog .

Agentic AI Security: Credentials and Permissions Define the Blast Radius

GitGuardian — 2026-08-25T15:00:05+00:00

Prompt injection can't be patched away. Three 2026 agentic AI incidents show that credentials and permissions decide the damage.

What to Look for in Code Review Platforms

GitKraken — 2026-08-25T06:40:00+00:00

Your code review tool does more than display diffs. It shapes how your team shares knowledge, catches bugs, and ships software. With AI-generated code accelerating PR volume, choosing the right code review platform is a decision that directly affects your team’s velocity. GitKraken connects PR workflows, multi-repo management, and AI-assisted review into a single developer […]

Agent of the Day – August 25, 2026

GitHub Agentic Workflows — 2026-08-25T00:00:00+00:00

Meet Issue Monster, the Cookie Monster of issues that scans gh-aw's tracker every 30 minutes and feeds the best candidates to Copilot coding agent.

Clearer reason when the merge queue can't create the draft pull request

Mergify Changelog — 2026-08-25T00:00:00+00:00

The dequeue reason now carries GitHub's own refusal message, including the repository rule that blocked the push.

Pagination drops the first and last links

Mergify Changelog — 2026-08-25T00:00:00+00:00

Paginated API responses now advertise only next and prev, and omit the Link header entirely when a page has neither.

Per-lane check capacity for dynamic scopes

Mergify Changelog — 2026-08-25T00:00:00+00:00

Set a single speculative-check budget that applies to every scope, so dynamic scope sets get per-lane capacity without listing scope names.

Repository badge API removed

Mergify Changelog — 2026-08-25T00:00:00+00:00

The deprecated /v1/badges/* endpoints are gone; a Mergify badge embedded in a README no longer renders.

Your alt text passes automated checks. That doesn’t mean it’s any good.

GitHub Engineering — 2026-08-24T20:56:32+00:00

We built a plugin for the GitHub Accessibility Scanner to make sure your alt text is actually accessible. Here's how it works. The post Your alt text passes automated checks. That doesn’t mean it’s any good. appeared first on The GitHub Blog .

Actions delays in starting runs

GitHub Status — 2026-08-24T14:34:42+00:00

Aug 24 , 14:34 UTC Resolved - On August 24, 2026, between 13:33 UTC and 14:04 UTC, 3.8% of Actions runs experienced start delays over 5 minutes with 1.25% of Actions runs failing outright. The incident was caused by a disk failure on a node hosting one of many service instances responsible for processing runner assignment events. Typically, pods on unhealthy nodes are removed and replaced automatically without impact. In this case, although the node was severely degraded and unable to perform d

Elevated errors on Fable 5 due to upstream provider

GitHub Status — 2026-08-24T07:58:41+00:00

Aug 24 , 07:58 UTC Resolved - On August 24th, 2026, between approximately 06:35 and 07:25 UTC, the Copilot service experienced a degradation of the Claude Fable 5 model due to an issue with our upstream provider. Users encountered elevated error rates when using Claude Fable 5, with requests sometimes failing mid-response. No other models were impacted. The issue was resolved by a mitigation put in place by our provider. GitHub is working with our provider to further improve the resiliency of th

Weekly Update – August 24, 2026

GitHub Agentic Workflows — 2026-08-24T00:00:00+00:00

This week brought three v0.87.x pre-releases with stricter safe-outputs validation, new pre-create PR steering, and a wave of internal reliability fixes.

Agent of the Day – August 24, 2026

GitHub Agentic Workflows — 2026-08-24T00:00:00+00:00

Meet Q, the on-demand workflow doctor that answers /q comments in gh-aw and turns real complaints into pull requests.

Degraded Git Operations over SSH

GitHub Status — 2026-08-21T14:00:00+00:00

Aug 21 , 14:00 UTC Resolved - On August 21, 2026, between 14:00 and 14:07 UTC, dotcom Git operations over SSH were degraded. Successful Git operations over SSH fell by more than 95% for during the peak impact window, making clone, fetch, or push over SSH effectively unavailable to most users for approximately four minutes. Git operations over HTTPS were not affected. The incident was caused by a software defect in our load-balancing infrastructure that was triggered by a configuration change. Th

Intermittent failures creating agent tasks

GitHub Status — 2026-08-21T00:37:20+00:00

Aug 21 , 00:37 UTC Resolved - Between 13:57 UTC on August 20 and 00:37 UTC on August 21, 2026, some users of the Copilot Cloud Agent experienced delays of up to 60 to 90 minutes in seeing the status and results of their agent tasks. The agent tasks themselves continued to run and complete during this time; only the visibility of their status was delayed. The cause was a regional outage in a third-party cloud database service that Copilot uses to store agent task status. We failed over the affect

The August 17 outage, and the work ahead

The GitHub Blog — 2026-08-20T18:36:11+00:00

An update on the August 17 outage and the steps we're taking to improve reliability. The post The August 17 outage, and the work ahead appeared first on The GitHub Blog .

Machine-Speed Credential Abuse: What the ChainDrop npm Worm Changes

GitGuardian — 2026-08-20T14:00:56+00:00

ChainDrop hijacked 444 npm packages and 2B monthly downloads via a Claude Code hook. AI agents have collapsed the gap between credential theft and abuse

GitHub Copilot app for Beginners: Managing your work

GitHub AI & ML — 2026-08-19T17:50:23+00:00

If you’re juggling multiple Copilot sessions, use the My work pane to track what's in flight, what's done, and what's next. The post GitHub Copilot app for Beginners: Managing your work appeared first on The GitHub Blog .

Why Secrets Slip Through Every Layer of Your Security Stack

GitGuardian — 2026-08-18T15:28:23+00:00

Your security stack is a set of specialists, each guarding one territory. Exposed credentials don't respect the boundaries between them, and 64% of the ones found valid in 2022 were still valid four years later.

Intermittent failures in runner group and runner-related permissions pages

GitHub Status — 2026-08-18T11:42:59+00:00

Aug 18 , 11:42 UTC Resolved - On August 18, 2026, between 05:02 UTC and 11:30 UTC, customers were unable to view or manage Actions Runners and Runner Groups through the GitHub UI and API. The issue was caused by failures in backend requests reading runner and runner group data. The failures were caused by an expired authentication certificate unique to this service. The certificate had been rotated in KeyVault, but a step to enable use at runtime had been paused to prevent recurrence of previous

Incident with GitHub.com

GitHub Status — 2026-08-17T21:15:46+00:00

Aug 17 , 21:15 UTC Resolved - On August 17, 2026, from 13:28–21:15 UTC (7h 47m), GitHub.com experienced elevated errors and latency across Issues, Pull Requests, APIs, Actions, and Copilot. At peak, web/API error rates were approximately 20%, while archive and raw-content downloads reached approximately 50%. SAML/OIDC authentication, SCIM, and Team Sync were also affected, as well as Actions workflows in GHEC with Data Residency that depend on public workflow step definitions hosted on GitHub.co

How canvases make agentic workflows visible, steerable, and cost-efficient

GitHub AI & ML — 2026-08-17T16:00:00+00:00

Chat is great for intent, but agent work gets lost in the scroll. Here is how I use canvases with my agentic workflows—and why your workflow also deserves a canvas. The post How canvases make agentic workflows visible, steerable, and cost-efficient appeared first on The GitHub Blog .

Inside the LiteLLM hack: 153GB, 433,909 Files, 2,488 Organizations

GitGuardian — 2026-08-14T18:21:04+00:00

Attackers dumped everything they harvested from LiteLLM builds during a 40-minute window in March. Here is what is inside and what it says about where secrets live.

How to bring your software delivery workflow into GitHub with agent apps

GitHub AI & ML — 2026-08-14T16:00:00+00:00

See how four GitHub agent apps can help you scope, secure, roll out, and ship a feature across the SDLC–all without leaving GitHub. The post How to bring your software delivery workflow into GitHub with agent apps appeared first on The GitHub Blog .

BSides Las Vegas 2026: Following the Trust Relationships Attackers Are Targeting

GitGuardian — 2026-08-14T14:00:01+00:00

BSidesLV 2026 presenters showed how attackers are increasingly exploiting valid trust relationships instead of breaking through the front door, and what we need to do about it.

Your guide to GitHub Universe 2026 is here: The schedule just launched!

The GitHub Blog — 2026-08-13T19:00:00+00:00

The GitHub Universe session catalog is live. Explore interactive workshops, community talks, demos, and panels. Plus, register before August 19 to save $300. The post Your guide to GitHub Universe 2026 is here: The schedule just launched! appeared first on The GitHub Blog .

Disruption with GHEC Team Sync

GitHub Status — 2026-08-13T18:27:54+00:00

Aug 13 , 18:27 UTC Resolved - On August 13, 2026, from 15:31:21 UTC to 18:27:55 UTC, GitHub Enterprise Cloud team synchronization was degraded for enterprises using personal accounts. Organization teams experienced delays of up to 3 to 13 hours (median 8 hours) when syncing with IdP groups, resulting in delayed access grants or removals for enterprise users across 2.8% of teams. A temporary change introduced to address a previous issue due to increased usage of this feature remained active after

Your AI Agents Are Using Your Credentials

GitGuardian — 2026-08-13T16:28:15+00:00

AI agent security is an identity problem, but it often starts as a secrets and credential problem. Do your AI agents operate using static API keys, tokens, and other reusable credentials? They might bypass traditional identity controls, creating a governance blind spot.

What 50 open source projects taught us about security in the AI era

GitHub Security — 2026-08-13T16:00:00+00:00

See how the open source projects in Session 4 of the GitHub Secure Open Source Fund combined AI-assisted workflows, maintainer expertise, GitHub security tools, expert guidance, and funding to improve project security. The post What 50 open source projects taught us about security in the AI era appeared first on The GitHub Blog .

Errors with the Fable 5 Model in Copilot

GitHub Status — 2026-08-13T15:47:22+00:00

Aug 13 , 15:47 UTC Resolved - On August 13th, 2026, between approximately 14:06 and 15:47 UTC, the Copilot service experienced a degradation of the Claude Fable 5 model due to an issue with our upstream provider. Users encountered elevated error rates, peaking at 43% and averaging 12%. Users who selected Auto or alternative models were unaffected. The issue was resolved by a mitigation put in place by our provider. GitHub is working with our provider to further improve the resiliency of the serv

Disruption with Login and Release Asset downloads

GitHub Status — 2026-08-12T22:56:39+00:00

Aug 12 , 22:56 UTC Resolved - On August 12 and 13, 2026, some anonymous (logged-out) requests to github.com experienced HTTP 5xx errors when loading pages like the sign-in page, and when downloading release assets, due to an unusual traffic pattern that repeatedly overloaded a part of our infrastructure that serves these types of requests. There were three windows of impact: (1) August 12 from 16:34 to 18:34 UTC, with an average error rate of 16.16% that peaked at 28.6%; (2) August 12 from 19:00

GitHub availability report: July 2026

The GitHub Blog — 2026-08-12T22:17:32+00:00

In July, we experienced eight incidents that resulted in degraded performance across GitHub services. The post GitHub availability report: July 2026 appeared first on The GitHub Blog .

GitHub Copilot app for Beginners: Write your first prompt

GitHub AI & ML — 2026-08-12T19:00:00+00:00

Learn how to write your first prompt in the GitHub Copilot app, choose the right context and model, and start your first task with confidence. The post GitHub Copilot app for Beginners: Write your first prompt appeared first on The GitHub Blog .

Your contributors are AI-first now. Is your project?

GitHub Open Source — 2026-08-12T18:00:08+00:00

AI contributors are already in your queue. AutoGPT maintainer Nicholas Tindle shares the repo instructions, gates, and boundaries that keep maintainers in control. The post Your contributors are AI-first now. Is your project? appeared first on The GitHub Blog .

Merge GitHub stacked pull requests with the merge queue

Mergify Changelog — 2026-08-12T00:00:00+00:00

Queue any member of a GitHub-native stacked pull request and Mergify merges it, in order, through GitHub's merge API.

From coder to orchestrator: How agents shift the role of a developer

The GitHub Blog — 2026-08-11T18:38:17+00:00

Developers are owning more of the delivery system around code, not just code itself. Join us during GitHub Universe to meet other devs, learn something new, and explore what's next. The post From coder to orchestrator: How agents shift the role of a developer appeared first on The GitHub Blog .

Vault Coverage Is the Missing Metric in NHI Programs

GitGuardian — 2026-08-11T15:14:30+00:00

Most vault programs track a numerator without a denominator. See how vault coverage turns secrets management into a measurable, reportable control.

Author-run commands now require a fork pull request

Mergify Changelog — 2026-08-11T00:00:00+00:00

The default restrictions for update, rebase, squash and refresh now let the pull request author run them only on pull requests coming from a fork.

New from-fork condition attribute

Mergify Changelog — 2026-08-11T00:00:00+00:00

Conditions can now match on whether a pull request comes from a fork.

Using the GitHub Copilot SDK for Java

GitHub Engineering — 2026-08-10T19:30:00+00:00

Enterprise Java developers have a new superpower—drive GitHub Copilot from idiomatic Java code with annotations, virtual threads, and more. The post Using the GitHub Copilot SDK for Java appeared first on The GitHub Blog .

Mini Shai-Hulud's Latest Wave: 280 New Places It Hunts for Your Secrets

GitGuardian — 2026-08-07T13:09:44+00:00

A new Mini Shai-Hulud wave hit keyv and 800+ npm packages. The malware now scans 469 secret locations, including AI agents, crypto wallets, and CI/CD tools.

A guide to slash commands in the GitHub Copilot app

GitHub AI & ML — 2026-08-06T19:49:34+00:00

Go beyond chat in the GitHub Copilot app with these slash commands. They'll help you plan, collaborate, automate, and customize your dev workflow. The post A guide to slash commands in the GitHub Copilot app appeared first on The GitHub Blog .

How we took malware advisories beyond npm

GitHub Security — 2026-08-06T16:51:12+00:00

GitHub malware advisories no longer stop at npm. Here's how we wired OpenSSF's malicious-packages data into the Advisory Database, and why we built the pipeline paranoid. The post How we took malware advisories beyond npm appeared first on The GitHub Blog .

40 Million Fake Push: When Spam Commits Took Over The Public GitHub

GitGuardian — 2026-08-05T14:43:49+00:00

Millions of fake commits are flooding GitHub's public feed. We followed the trail to a rebranded gambling site hiding behind a defunct lottery brand.

Securing Agentic AI Workflows in n8n: From Leaked API Keys to Encryption Key Compromise

GitGuardian — 2026-08-05T02:47:26+00:00

A leaked n8n API key is only the start. GitGuardian's research traces the full chain, from exposed tokens and weak keys to CVE-2026-25053 and the N8N_ENCRYPTION_KEY that protects every stored credential, then lays out a hardened configuration to break it.

How the GitHub legal team used Copilot CLI to streamline their workflows

GitHub AI & ML — 2026-08-04T19:02:34+00:00

Learn how to build tools to simplify how you work—without writing a single line of code. The post How the GitHub legal team used Copilot CLI to streamline their workflows appeared first on The GitHub Blog .

Turn one giant AI-generated pull request to a reviewable stack

GitHub Engineering — 2026-08-04T16:47:18+00:00

Instead of one huge, un-reviewable pull request, teach coding agents to decompose work into a clean, ordered stack with GitHub stacked pull requests. The post Turn one giant AI-generated pull request to a reviewable stack appeared first on The GitHub Blog .

Credential Harvesting Explained: How Attackers Collect Secrets From Developer Machines

GitGuardian — 2026-08-04T14:14:24+00:00

Credential harvesting is how attackers collect valid secrets at scale. See how it works, why developer machines are a prime target, and how to find them first.

July 2026 Status Update

BeeWare News — 2026-08-03T00:00:00+00:00

July 2026 Status Update

Don’t stop early: Case-folding source code at memory speed

GitHub Engineering — 2026-07-31T16:00:00+00:00

How a branch-free loop and byte-space arithmetic let GitHub case-fold every byte of code search at >45 GiB/s on a single core. The post Don’t stop early: Case-folding source code at memory speed appeared first on The GitHub Blog .

Star History Monthly July 2026 | Building Blocks

Star History Blog — 2026-07-31T00:00:00+00:00

Star History Monthly July 2026 | Building Blocks

Star History Monthly 🌟 Building Blocks (July 2026)

Star History Newsletter — 2026-07-30T22:00:00+00:00

🧱 Four projects selling picks to the assembly economy.

Stacked sessions and pull requests in the GitHub Copilot app

GitHub AI & ML — 2026-07-30T17:30:24+00:00

Learn how I modernized an old codebase of mine using stacked sessions and pull requests in the GitHub Copilot app. The post Stacked sessions and pull requests in the GitHub Copilot app appeared first on The GitHub Blog .

What Was on This Machine? Answering the Blast Radius Question After a Laptop Compromise

GitGuardian — 2026-07-30T15:43:52+00:00

After a laptop compromise, the hard question is which credentials were on it. See why blast radius scoping is hard, and how to turn it into a revocable list.

Tame Dependabot: Group your updates, slow the cadence, keep security fast

GitHub Engineering — 2026-07-29T16:00:00+00:00

Dependabot keeps your dependencies current, but its defaults can flood your repository with pull requests. Here's how grouping updates, slowing the cadence, and keeping security fixes fast cut the noise on a Microsoft open source project. The post Tame Dependabot: Group your updates, slow the cadence, keep security fast appeared first on The GitHub Blog .

An AI Agent Breached Hugging Face. The Attack Playbook Was Older Than the Attacker

GitGuardian — 2026-07-29T15:37:04+00:00

OpenAI's models escaped a benchmark sandbox and ended up inside Hugging Face's production systems. The attack made history; the openings it used were reusable credentials and flat internal access, and those are fixable now.

Label pull requests while the merge queue checks them

Mergify Changelog — 2026-07-29T00:00:00+00:00

A new `checking_label` option labels a pull request for the whole time the merge queue is checking it.

The github_actions action is deprecated

Mergify Changelog — 2026-07-29T00:00:00+00:00

The github_actions workflow automation action is deprecated and will be removed on 31 March 2027. Trigger your workflows from GitHub Actions directly with on: pull_request, workflow_dispatch, or repository_dispatch instead.

We'll be at PyCon AU 2026!

BeeWare News — 2026-07-29T00:00:00+00:00

We'll be at PyCon AU 2026!

Disrupting supply chain attacks on npm and GitHub Actions

GitHub Security — 2026-07-28T16:00:00+00:00

Explore the changes we've shipped across npm and GitHub Actions over the past few months to disrupt supply chain attack techniques and limit their impact. The post Disrupting supply chain attacks on npm and GitHub Actions appeared first on The GitHub Blog .

How to Reduce Time to Revoke for Exposed Credentials

GitGuardian — 2026-07-28T13:00:02+00:00

Learn how to measure time to revoke for exposed credentials using validation and invalidation timestamps, remediation SLAs, and CISO reporting metrics.

HelloGitHub 第 124 期

HelloGitHub — 2026-07-28T00:10:05+00:00

本期共有 40 个项目，包含 C 项目 (2)，C# 项目 (2)，C++ 项目 (1)，Go 项目 (4)，Java 项目 (1)，JavaScript 项目 (5)，Python 项目 (5)，Rust 项目 (2)，Skills (3)，Swift 项目 (3)，人工智能 (5)，其它 (5)，开源书籍 (2)

The harness is all you need (mostly)

GitHub AI & ML — 2026-07-27T18:00:00+00:00

A practical GitHub Copilot workflow for prototyping, planning, implementing, and reviewing software without chasing every new AI tool. The post The harness is all you need (mostly) appeared first on The GitHub Blog .

GitHub Copilot app for Beginners: Getting started

GitHub AI & ML — 2026-07-27T16:00:00+00:00

New to the GitHub Copilot app? Learn how to start projects, work with AI agents, explore canvases, and streamline your development workflow. The post GitHub Copilot app for Beginners: Getting started appeared first on The GitHub Blog .

Why SAST and DAST Aren't Enough for Secrets Security

GitGuardian — 2026-07-24T15:51:00+00:00

Static and dynamic app testing are cornerstones for any comprehensive AppSec program, yet they rarely rise up to the challenges of fully securing modern software. Discover why secrets are one of their critical blind spots.

Automatic flaky test detection and prevention