The enterprise audit log now records changes to GitHub Advanced Security, secret scanning, and push protection enablement. See business_secret_scanning See business_secret_scanning_push_protection See business_secret_scanning_push_protection_custom_message The organization-level audit log now also records…
Adding a configuration for Codespaces involves adding a Development Container to a repository and editing it to meet your needs. Previously, a dev container configuration could either be written manually…
At GitHub, we strive to make it easier for developers to release the best version of their code to users. As a result, we’ve rolled out a new feature that…
When you are building out a configuration for Codespaces using a dev container, the default behavior is now to do an incremental rebuild. The existing rebuild functionality is still available…
Dependabot has added support for updating dependencies in Yarn v2 and Yarn v3 manifests (package.json, and yarn.lock files). This is in addition to the existing support for Yarn v1. There…
With an organizational level policy to restrict container images, organization administrators can now control which base container images are used while creating organization-owned codespaces. This enables administrators to ensure that…
Preview Changes in Your Web Editor Have you ever launched an application in your codespace only for the running application to get lost in a sea of browser tabs? Today…
Starting today, customers can now enjoy larger runners without any pre-configuration work. GitHub now automatically creates a default runner group configured with four larger runners of our most popular sizes…
Today we’re releasing two new branch protections. Require approval from someone other than the last pusher Now, before a pull request can be merged, you can require it to be…
We are excited to share with you that we have added a bunch of new capabilities to our GitHub app in Slack. You can now create, track and manage your…
OpenID Connect (OIDC) support in GitHub Actions enables secure cloud deployments using short-lived tokens that are automatically rotated for each deployment. You can now use the enhanced OIDC support to…
You can now retrieve all your Dependabot alerts at the GitHub organization level via the REST API. This new API endpoint supplements the recently introduced Dependabot alerts REST API and…
🧹 Keep your project tidy with auto-archive As long-lived projects accumulate items over time, many users set aside time to archive old items to keep their projects focused on what…
Today we’re enabling fine-grained personal access tokens (PATs) in Public Beta for all user accounts on GitHub.com. This new type of token gives developers and resource owners more control and…
GitHub will regularly run a historical scan to detect newly added secret types on repositories with GitHub Advanced Security and secret scanning enabled. Previously, customers could manually trigger a historical…
Build what’s next on GitHub, the place for anyone from anywhere to build anything.
