GitHub Blog news
The latest AI and developer news from GitHub Blog, with short summaries.
Visit website →From Coder to Orchestrator: How Agents Are Changing the Developer's Role
In the era of AI agents, developers become orchestrators of software delivery systems, moving beyond being code writers.
Using the GitHub Copilot SDK for Java
The GitHub Copilot SDK supports framework- and AI-provider-agnostic agent development in Java.
Guide to Slash Commands in the GitHub Copilot App
Slash commands in the GitHub Copilot app streamline session management and task planning.
Expanding Malware Security Advisories Beyond npm
GitHub has expanded its malware advisories to eight ecosystems by leveraging OpenSSF data.
How GitHub's Legal Team Streamlined Work with Copilot CLI
GitHub's legal team built custom contract review and DMCA analysis tools using Copilot CLI.
Turning a Massive AI-Generated Pull Request into a Reviewable Stack
GitHub proposed a method to split massive AI-generated PRs into hierarchical stacks to facilitate easier review and merging.
Don't Exit Early: Case Folding Source Code at Memory Speed
GitHub dramatically sped up case folding using a branchless loop without early exit.
GitHub Launches Public Preview of Stacked PRs
GitHub is offering Stacked PR functionality in public preview, allowing large changes to be broken into smaller units and reviewed in parallel.
Taming Dependabot: Grouping Updates, Adjusting Intervals, and Keeping Security Patches Fast
This introduces a strategy for grouping updates and adjusting intervals to reduce Dependabot's excessive Pull Requests, while keeping security patches fast.
Blocking Supply Chain Attacks on npm and GitHub Actions
GitHub has introduced new security measures to defend against supply chain attacks targeting npm and GitHub Actions.
A Harness Is All You Need (Mostly)
Instead of chasing new AI tools, this proposes a practical workflow that efficiently manages the entire software development process using only GitHub Copilot.
A Beginner's Guide to the GitHub Copilot App: Getting Started
The GitHub Copilot app goes beyond simple chat to offer an integrated development environment that understands project context and supports multi-agent workflows.
The Reason for the Cooldown: Why Dependabot Waits Before Version Updates
GitHub Dependabot has introduced a cooldown feature by default that delays PR creation for at least 3 days after a new release, in response to supply chain attacks.
Copilot vs. Direct API Access: What Are You Actually Paying For
GitHub Copilot and raw API access solve problems at different layers, and the choice comes down to what you want to own and build yourself.
Next Chapter: GitHub Overhauls Its Bug Bounty Program
GitHub has overhauled its bug bounty program, introducing a VIP track and adjusting the reward structure.
How to Build Interactive Experiences Using Canvas
GitHub Copilot's Canvas feature enables developers and AI agents to interact in real time and build visual tools together.
The Shifting Cost of Approving Feature Requests
As AI makes code production cheap, the criterion for judging feature requests has shifted from implementation cost to ownership cost.
GitHub Getting Started Guide: A Roadmap to Mastering Essential Features
This getting-started guide teaches essential GitHub features, including core concepts like version control, repositories, and pull requests.
How GitHub Gave Every Repository a Permanent Owner
In 45 days, GitHub sorted out ownership ambiguity across more than 14,000 repositories and assigned a validated owner to every active repository.
Automating Cross-Repository Documentation with GitHub Agentic Workflows
The Aspire team introduces how they use GitHub Agentic Workflows to automatically convert product changes into documentation PRs that undergo expert review.