npm CLI upgraded to version 8
Today, we are releasing version 8 of the npm CLI. A Semver-Major release of the CLI allows us to drop support for Node.js 10, making it easier for us to…
GitHub Actions: Workflows triggered by Dependabot PRs will respect permissions key in workflows
In March we made a change in GitHub Actions that forced workflows triggered by Dependabot to run with a read-only token. This change was made to protect your repositories from…
Export Organization Members
Organization owners on GitHub.com and GitHub Enterprise Cloud can now export a list of the organization’s members in JSON or CSV format, through the ‘Export’ button on the People tab…
Deprecation Notice: Codes of Conduct API preview
The Codes of Conduct API preview, which was accessible with the scarlet-witch-preview header, is being deprecated. On December 6th, 2021, the fields behind this API preview will no longer be…
Dependency review is generally available
Dependency review is now generally available for all public repositories and for private repositories with GitHub Advanced Security enabled. Dependency review helps you understand dependency changes and the security impact…
The npm registry requires TLS 1.2 or higher
As previously announced, the npm registry now requires TLS 1.2 or higher for all requests, including package installation.
GitHub Actions: DRY your GitHub Actions configuration by reusing workflows
Now available in public beta, you can reuse entire workflows as if they were an action. Instead of copying and pasting workflow definitions across repositories, you can now reference an…
A Redesigned Explore tab on GitHub Mobile
The Explore tab on GitHub Mobile has been redesigned to make it easier to find the best projects on GitHub! Find personalized repository recommendations based on your past contributions and…
Improvements to GitHub Releases – public beta
GitHub is where developers come to learn and celebrate what’s new in open source, and where maintainers share, collaborate and celebrate their community’s work. Starting today, available in public beta,…
Button to toggle Markdown rendering
You can now toggle between the source view and rendered Markdown view through the UI, by clicking the button to “Display the source blob” at the top of any Markdown…
The npm advisory database is now part of the GitHub Advisory Database
The npm security advisory database is now part of the GitHub Advisory Database. As a result, npm audit will now return URLs to the GitHub Advisory Database and the advisories…
The push webhook payload provides a consistent head_commit on tag creation
When a new tag is created, the push webhook payload will now always include a head_commit object that contains the data of the commit that the new tag points to.…
The world's largest developer platform
GitHub
Build what’s next on GitHub, the place for anyone from anywhere to build anything.
The GitHub Podcast
Catch up on the GitHub podcast, a show dedicated to the topics, trends, stories and culture in and around the open source developer community on GitHub.