Transitive dependencies are now available for Maven
Following the ship of transitive labeling for npm packages, the same capabilities are now available for Maven packages: Dependabot alerts now contain a direct label if they are associated with…
Following the ship of transitive labeling for npm packages, the same capabilities are now available for Maven packages: Dependabot alerts now contain a direct label if they are associated with…
Enterprise custom properties and enterprise rulesets are now generally available, further improving the governance features for GitHub Enterprise customers. Enterprise custom properties With enterprise-level custom properties, you can now enrich…
A step-by-step guide for open source maintainers on how to handle vulnerability reports confidently from the start.
Ever wondered how to create checklists in your GitHub repositories, Issues, and PRs? Make task lists more manageable in your GitHub repositories, issues, and pull requests.
A look into building IssueOps workflows on GitHub to do everything from CI/CD to handling approvals and more.
Issue types can now be managed using the REST API, expanding the ability to automate and incorporate them in your workflows. Check out our documentation on issue types for more…
Get the most out of Copilot with code completion, inline chat, slash commands, Copilot code review, and more.
Performance Metrics for GitHub Actions are now generally available for repositories and organizations. Repository members can view workflow and job performance data including queue times and failure rates going back…
The open source Git project just released Git 2.49. Here is GitHub’s look at some of the most interesting features and changes introduced since last time.
Strategies to quickly get up to speed, whether you’re a seasoned engineer or a newcomer to the field.
GitHub Copilot now features instant semantic code search indexing, dramatically reducing the time it takes for Copilot to understand and reference your codebase. What’s changed Previously, when you wanted GitHub…
Critical authentication bypass vulnerabilities (CVE-2025-25291 + CVE-2025-25292) were discovered in ruby-saml up to version 1.17.0. In this blog post, we’ll shed light on how these vulnerabilities that rely on a parser differential were uncovered.
Alerts for non-provider patterns and Copilot-detected passwords are now categorized as generic instead of experimental. This change applies to alert filters and the secondary inbox in your alert list views.…
GitHub Enterprise Server 3.16 enhances deployment efficiency, monitoring capabilities, code security, and policy management. Here are a few highlights in the 3.16 release: The reliability, observability, and efficiency of ghe-config-apply…
For 30 years, Java has been a cornerstone of enterprise software development. Here’s why—and how to learn Java.
Treating exposures as full and complete can help you respond more effectively to focus on what truly matters: securing systems, protecting sensitive data, and maintaining the trust of stakeholders.
Copilot features can go through different early access stages, which are typically enabled and configured through settings. The possible stages are as follows: Experimental: This feature is still in development…
Keep control over the security posture of your organization with delegated alert dismissal. With this feature, you can require a review process before alerts are dismissed in code scanning and…
Learn to automate dependency management using GitHub Copilot, GitHub Actions, and Dependabot to eliminate manual checks, improve security, and save time for what really matters.
GitHub Copilot isn’t just for developers! Discover how product managers, security professionals, scrum masters, and more use GitHub Copilot to streamline tasks, automate workflows, and boost productivity across teams.
The improved merge experience on the pull request page is now generally available! This update is designed to help you better understand the state of your pull request and get…
Build what’s next on GitHub, the place for anyone from anywhere to build anything.
Join us October 28-29 in San Francisco or online for GitHub Universe, our flagship developer event uniting people, agents, and the world’s code.