Search results for: Pull Request

Use these insights to automate software security (where possible) to keep your projects safe.

AI agents in GitHub Copilot don’t just assist developers but actively solve problems through multi-step reasoning and execution. Here’s what that means.

This update to the commit details page enhances accessibility, building on valuable feedback from the community, and also improves security and performance. Inline comments are now visible by default Inline…

Plus, considerations in updating one of GitHub’s oldest and most heavily used features.

This May marks the fifth annual Maintainer Month, and there are lots of treats in store: new badges, special discounts, events with experts, and more.

Get insights on the latest trends from GitHub experts while catching up on these exciting new projects.

See how you can use GitHub Copilot to build an API.

We continue to improve how teams can plan, track, and manage their work on GitHub. Following our public preview in January, we’re thrilled to announce the general availability of sub-issues,…

We are updating the url field for push webhook events. Previously, both html_url and url returned the same link, unlike other events like pull_request. Now, html_url will return the repository…

What is CORS and how can a CORS misconfiguration lead to security issues? In this blog post, we’ll describe some common CORS issues as well as how you can find and fix them.

🌐 New and improved Issues dashboard You’ll now see an updated Issues dashboard page at github.com/issues, allowing you to easily find and create issues across repositories and organizations. This page…

Critical authentication bypass vulnerabilities (CVE-2025-25291 + CVE-2025-25292) were discovered in ruby-saml up to version 1.17.0. In this blog post, we’ll shed light on how these vulnerabilities that rely on a parser differential were uncovered.

The refreshed commit details page is now generally available! This improved page lets you view and navigate the changes within a commit with improvements to filtering, commenting, and keyboard navigation.…

For 30 years, Java has been a cornerstone of enterprise software development. Here’s why—and how to learn Java.

Today’s changelog announces API support for issues advanced search, timeline events for issue types, and an update on issue types settings. 🔍 API support for issues advanced search You can…

We recently launched analysis capabilities for GitHub Actions workflow files in public preview. With the release of CodeQL 2.20.5, we are expanding the analysis capabilities to detect additional types of…

Today’s changelog brings you a snappier issue creation flow in projects, the ability to convert checklist items to sub-issues, required fields on private repositories, and important updates on tasklist blocks…

Discover how to use GitHub Copilot to refactor your code and see samples of it in action.

Learn how specially crafted artifacts can be used to attack Maven repository managers. This post describes PoC exploits that can lead to pre-auth remote code execution and poisoning of the local artifacts in Sonatype Nexus and JFrog Artifactory.

Following our opt-in preview last year, we are excited to release sub-issues, issue types and advanced search for issues to everyone! 🎉 Thank you to everyone who opted-in and gave…

A new REST API endpoint lists the secret scanning scan history for a repository, giving you visibility into when different types of secret scanning scans have occurred in your repository.…