GitHub Actions: Updates to the macOS 10.15 virtual environment

You can now edit GitHub Security Advisories after you publish them. This can be helpful if you’ve learned more about the scope or impact of the vulnerability you’re announcing, if the vulnerable version range has changed, or if you have other information you’d like to share as part of the advisory.

Edits of advisories in public repos are reviewed by GitHub. Upon review, we may use the updates to send security alerts to affected repositories and redistribute the advisory and its updates through GitHub Advisory Database, our API, and our Atom feed.

In 2016, GitHub introduced commit squashing when merging a pull request. Then in 2018, we added support for commit co-authors. Today, we’re combining these features to improve the squash-and-merge experience.

Before today, whoever opened the pull request became the sole author of the squash commit. Now, we will automatically credit every commit author in the pull request as a co-author on the squash commit.