11/2020

The Meta API endpoint previously contained MD5 signatures for GitHub’s SSH public keys. We have now deprecated these in favor of the newer SHA-256 fingerprints. Developers verifying the authenticity of…

You can now configure which events you would like to notified about on GitHub. Click ‘custom’ from the watch menu on any repository and select the types of events you…

You can now more easily opt-in to the public beta of GitHub Packages’ improved containers experience. New users and organizations can opt-in to the beta for their organization using either…

Organization admins now have admin privileges for all containers in their organization. Specifically, admins can read, write, manage access, and change the visibility of containers.

As previously announced, GitHub.com no longer accepts account passwords when authenticating with the REST API and now requires the use of token-based authentication (e.g., a personal access, OAuth, or GitHub…

If your organization uses IP allow lists to restrict access, GitHub Packages now respects those settings.

GitHub will recommend you unwatch repositories that you are no longer interacting with. You will see these recommendations when: You check your notifications on GitHub You search for notifications on…

On October 1, 2020, we published a CVE outlining a vulnerability in the set-env and add-path workflow commands feature of GitHub Actions, and announced that we would be deprecating those…