10/2021

Today, we are releasing version 8 of the npm CLI. A Semver-Major release of the CLI allows us to drop support for Node.js 10, making it easier for us to…

In March we made a change in GitHub Actions that forced workflows triggered by Dependabot to run with a read-only token. This change was made to protect your repositories from…

Organization owners on GitHub.com and GitHub Enterprise Cloud can now export a list of the organization’s members in JSON or CSV format, through the ‘Export’ button on the People tab…

The Codes of Conduct API preview, which was accessible with the scarlet-witch-preview header, is being deprecated. On December 6th, 2021, the fields behind this API preview will no longer be…

Dependency review is now generally available for all public repositories and for private repositories with GitHub Advanced Security enabled. Dependency review helps you understand dependency changes and the security impact…

As previously announced, the npm registry now requires TLS 1.2 or higher for all requests, including package installation.

Now available in public beta, you can reuse entire workflows as if they were an action. Instead of copying and pasting workflow definitions across repositories, you can now reference an…

The Explore tab on GitHub Mobile has been redesigned to make it easier to find the best projects on GitHub! Find personalized repository recommendations based on your past contributions and…

GitHub is where developers come to learn and celebrate what’s new in open source, and where maintainers share, collaborate and celebrate their community’s work. Starting today, available in public beta,…

You can now toggle between the source view and rendered Markdown view through the UI, by clicking the button to “Display the source blob” at the top of any Markdown…

The npm security advisory database is now part of the GitHub Advisory Database. As a result, npm audit will now return URLs to the GitHub Advisory Database and the advisories…

When a new tag is created, the push webhook payload will now always include a head_commit object that contains the data of the commit that the new tag points to.…