Dependabot keeps your dependencies current, but its defaults can flood your repository with pull requests. Here’s how grouping updates, slowing the cadence, and keeping security fixes fast cut the noise on a Microsoft open source project.
Explore the changes we’ve shipped across npm and GitHub Actions over the past few months to disrupt supply chain attack techniques and limit their impact.
A practical GitHub Copilot workflow for prototyping, planning, implementing, and reviewing software without chasing every new AI tool.
New to the GitHub Copilot app? Learn how to start projects, work with AI agents, explore canvases, and streamline your development workflow.
A new default three-day cooldown delays version update pull requests so maintainers and security researchers can address findings in a release before it gets into your code.
Copilot now bills usage at listed API rates. Compare direct model access with the coding workflow, policy, and harness work around it.
GitHub is making some significant changes to its bug bounty program, shifting its focus to give researchers a better experience working with the GitHub team.
A practical GitHub Copilot workflow for prototyping, planning, implementing, and reviewing software without chasing every new AI tool.
Explore the changes we’ve shipped across npm and GitHub Actions over the past few months to disrupt supply chain attack techniques and limit their impact.
Starting June 1, your Copilot usage will consume GitHub AI Credits.
The cost of writing code dropped; the cost of owning it didn’t. A framework for deciding which changes are actually cheap in the AI era.
How migrating Copilot code review to shared Unix-style code exploration tools reduced review cost by reshaping agent workflows around pull request evidence.
Explore how the Aspire team turns merged product changes into SME-reviewed docs pull requests, closing the gap between release and documentation.
How the GitHub Issues team used client-side caching, smart prefetching, and service workers to make navigation feel instant.
Learn how Github uses eBPF to detect and prevent circular dependencies in its deployment tooling.
Dive into the key findings from Octoverse 2025! This year saw record-breaking growth with over 180 million developers now on GitHub. We explore three big shifts: generative AI becoming ordinary engineering, TypeScript’s rise to the #1 language, and how AI is influencing developer choices. See how the developer map is redrawing itself faster than ever.
In late 2021, the Log4Shell vulnerability sent shockwaves through the global tech community. Hear the untold, inside story from Christian Grobmeier, a maintainer of the Log4j project.
Twenty years ago, Linus Torvalds created the basis for Git in just 10 days, forever changing how developers collaborate on code. In this interview, Linus Torvalds discusses Git’s unexpected journey.
In June, we experienced six incidents that resulted in degraded performance across GitHub services.
New Innovation Graph data shows global developer communities growing faster than ever, with collaboration reaching new highs across many economies.
We’re calling for targeted amendments to resolve conflicts with open source licensing and align with international transparency frameworks while preserving regulatory intent.
In May, we experienced nine incidents that resulted in degraded performance across GitHub services.
GitHub Universe is back: returning to the historic Fort Mason Center in San Francisco on October 28–29, 2026.
At Microsoft Build 2026, GitHub introduced new tools, updates, and surfaces so agents can work the way you already work.
Build what’s next on GitHub, the place for anyone from anywhere to build anything.
Join us October 28-29 in San Francisco or online for GitHub Universe, our flagship developer event uniting people, agents, and the world’s code.
