Search results for: Pull Request

If you are using the Dependabot grouped version updates feature (currently in public beta), you can now group your pull requests by dependency type in ecosystems that support this. Instead…

Researchers from Purdue and NCSU have found a large number of command injection vulnerabilities in the workflows of projects on GitHub. Follow these four tips to keep your GitHub Actions workflows secure.

The GitHub Enterprise Server 3.10 release candidate is here GitHub Enterprise Server 3.10 gives customers more control over how their instance is used and run. Here are a few highlights:…

GitHub’s design experts share 10 tips and lessons for designing magical user experiences for AI applications and AI coding tools.

When you migrate to GitHub.com with GitHub Enterprise Importer, user activity (e.g. issues, pull requests, comments) is linked to placeholder identities called “mannequins”. After you’ve finished migrating, you can “reclaim”…

In the world of software development, collaboration can make the difference between a brittle last-minute release and a reliable, maintainable, pain-free project. Whether you’ve been coding for a day or a decade, your colleagues are there to help strengthen your work. But they can only help if you’ve given them the tools to do so.

As of August 17, 2023, Dependabot will no longer support Python 3.6 or 3.7, which have reached their end-of-life. If your code uses these versions, Dependabot will no longer be…

Learn about how we build containerized services that power microservices on the GitHub.com platform and many internal tools.

Dependabot can now open pull requests to update your Swift dependencies. In June, support for Swift advisories in the Advisory Database and Dependabot alerts was released. Dependabot will now be…

This blog post describes two security vulnerabilities in Decidim, a digital platform for citizen participation. Both vulnerabilities were addressed by the Decidim team with corresponding update releases for the supported versions in May 2023.

GitHub switched to performing merges and rebases using merge-ort. Come behind the scenes to see why and how we made this change.

Game Bytes is our monthly series taking a peek at the world of gamedev on GitHub—featuring game engine updates, game jam details, open source games, mods, maps, and more. Game on!

Repository rules provide an easy, flexible way to define branch protections and ensure consistency in code across repositories.

Today’s Changelog includes updates to project templates, a pinned item side panel, and pull request support in tasklists! 🎨 Project template updates Since we announced the public beta of project…

As a design organization, we have the opportunity to make a significant impact on designing the platform for all developers. How does the emergence of creative AI impact our work? How can we achieve an inclusive experience for a spectrum of all abilities? What does designing for developer happiness look like?

Today, we’re launching public beta support for Bitbucket Server and Bitbucket Data Center migrations in GitHub Enterprise Importer. You can now easily use GitHub Enterprise Importer to migrate your source…

Today’s Changelog brings you sorting improvements, the ability to select a template or form when creating a new issue from your project and adding a new option to a single…

Thanks to DevOps, cloud computing and other industry trends, many organizations are shifting from a product mindset to a service mindset. Here’s how you can implement a service-led strategy.

In June, we experienced two incidents that resulted in degraded performance across GitHub services.  June 7 16:11 UTC (lasting 2 hours 28 minutes) On June 7 at 16:11 UTC, GitHub…

Have your say to protect open source in the EU.

Level up your use of GitHub Projects on the command line and in GitHub Actions with the new project CLI command.