Search results for: Security

At GitHub, we care deeply about ensuring enterprise-readiness of our products. From recent improvements including enterprise-level delegated bypass controls for push protection, to support for the new Enterprise Security Manager…

Dependabot now supports parsing and updating environment.yml Conda environment specification files. This release includes version updates for Conda-based projects. Why it matters Many projects rely on Conda for managing dependencies…

Developers can now use Dependabot to automatically keep their Julia dependencies up to date. For projects that use Julia as a package manager, Dependabot version updates can now ensure dependencies…

Developers can now use Dependabot to automatically keep their Bazel dependencies up to date. For projects that use Bazel—either Bzlmod or WORKSPACE—Dependabot version updates can now ensure dependencies stay current…

Developers can now use Dependabot to automatically keep their OpenTofu dependencies up to date. For projects that use OpenTofu, Dependabot version updates can now ensure dependencies stay current with the…

Code scanning alert assignees are now generally available, helping your team track and remediate security vulnerabilities more effectively by assigning clear ownership of alerts. What’s new in general availability? Since…

We envision the future of AI-enabled tooling to look like near-effortless engineering for sustainability. We call it Continuous Efficiency.

Editor’s note (December 19, 2025): We updated this post to indicate new dates for when self-hosted runners need to be updated to v2.329.0 or later. The original upgrade date has…

A look at how we rebuilt GitHub Actions’ core architecture and shipped long-requested upgrades to improve performance, workflow flexibility, reliability, and everyday developer experience.

Repository administrators can now post and comment in GitHub Discussions using an “Admin” badge to distinguish official responses from personal contributions. The option to post as Admin appears when creating…

We’ve released a number of improvements, a dedicated SKU for Spark, and ensured Spark is covered by the GitHub DPA! Read on to hear about all of the changes. Spark…

GitHub Enterprise Server (GHES) 3.19 enhances deployment efficiency, monitoring capabilities, code security, and policy management. Here are a few highlights in the 3.19 release: An improved and more intuitive flow…

The GitHub MCP Server now comes with support for tool-specific configuration, allowing you to customize the server to your needs and minimize context window usage. Simply use the new X-MCP-Tools…

MCP is moving to the Linux Foundation. Here’s how that will affect developers.

AI can help you build faster than ever, but it can also produce bugs, issues, and problems. Use these strategies to keep your speed without losing control of your code.

As previously announced, we’re completing the npm classic token deprecation today. This marks a major milestone in the security hardening initiative to strengthen npm’s authentication system. What’s changing today (December…

Continuing the supply chain security theme of continually improving our package ecosystem support, Go projects will now see more complete and accurate transitive dependency trees in their dependency graphs and…

Discover how advanced AI users are redefining software development—shifting from code producers to strategic orchestrators—through delegation, verification, and a new era of AI-fluent engineering.

Follow this step-by-step guide to learn how to debug your issues using GitHub Copilot Spaces and Copilot coding agent.

GitHub Enterprise Server (GHES) 3.19 enhances deployment efficiency, monitoring capabilities, code security, and policy management. Here are a few highlights in the 3.19 release: An improved and more intuitive flow…

Learn how one of GitHub’s fastest-growing open source projects is redefining smart homes without the cloud.