A new default three-day cooldown delays version update pull requests so maintainers and security researchers can address findings in a release before it gets into your code.

The post The case for a cooldown: Why Dependabot now waits before issuing version updates appeared first on The GitHub Blog.

Copilot now bills usage at listed API rates. Compare direct model access with the coding workflow, policy, and harness work around it.

The post Copilot vs. raw API access: What are you actually paying for? appeared first on The GitHub Blog.

GitHub is making some significant changes to its bug bounty program, shifting its focus to give researchers a better experience working with the GitHub team.

The post Next chapter: Restructuring GitHub’s bug bounty program appeared first on The GitHub Blog.

Canvases turn AI into interactive workspaces where you can visualize information, explore workflows, and take action across complex tasks.

The post How to build interactive experiences with canvases appeared first on The GitHub Blog.

Celebrating $100 million contributed by the community to the people who build and sustain open source every day.

The post $100 million for open source: A milestone built by the community appeared first on The GitHub Blog.

The cost of writing code dropped; the cost of owning it didn't. A framework for deciding which changes are actually cheap in the AI era.

The post The cost of saying yes has changed appeared first on The GitHub Blog.

New to GitHub? This beginner's guide explains version control, repositories, and pull requests—plus everything else you need to start working confidently on GitHub.

The post GitHub for Beginners: Your roadmap to mastering the GitHub essentials appeared first on The GitHub Blog.

How migrating Copilot code review to shared Unix-style code exploration tools reduced review cost by reshaping agent workflows around pull request evidence.

The post Better tools made Copilot code review worse. Here’s how we actually improved it. appeared first on The GitHub Blog.

GitHub had over 14,000 repositories. Fewer than half had clear ownership. Here's how we gave every active repository a validated owner in under 45 days, archived the rest, and made ownership the foundation for everything that followed.

The post How GitHub gave every repository a durable owner appeared first on The GitHub Blog.

Explore how the Aspire team turns merged product changes into SME-reviewed docs pull requests, closing the gap between release and documentation.

The post Automating cross-repo documentation with GitHub Agentic Workflows appeared first on The GitHub Blog.

In June, we experienced six incidents that resulted in degraded performance across GitHub services.

The post GitHub availability report: June 2026 appeared first on The GitHub Blog.

Go from an empty repository to a live custom domain with HTTPS in about 14 minutes, without manually editing a single DNS record.

The post How GitHub Copilot enables zero DNS configuration for GitHub Pages appeared first on The GitHub Blog.

New Innovation Graph data shows global developer communities growing faster than ever, with collaboration reaching new highs across many economies.

The post Q1 2026 Innovation Graph update: Open source collaboration is accelerating worldwide appeared first on The GitHub Blog.

GitHub had 20,000+ secret scanning alerts across 15,000 repositories. Here's how we separated signal from noise, built remediation workflows, and reached inbox zero in nine months.

The post How GitHub used secret scanning to reach inbox zero appeared first on The GitHub Blog.

These six free settings will not make your project unhackable. Nothing will. What they will do is close the easy doors. Turn these on, and your project will be meaningfully harder to attack than it was before.

The post 6 security settings every GitHub maintainer should enable this week appeared first on The GitHub Blog.

Explore how the Open Source Program Office uses GitHub’s new license compliance product to manage open source dependencies at scale.

The post How GitHub maintains compliance for open source dependencies appeared first on The GitHub Blog.

The open source Git project just released Git 2.55. Here is GitHub’s look at some of the most interesting features and changes introduced since last time.

The post Highlights from Git 2.55 appeared first on The GitHub Blog.

The GitHub Advisory Database is processing more vulnerability reports than ever before. Here's what's driving the surge, how we're responding, and how the community can help.

The post Inside the Advisory Database and what happens when vulnerability volume breaks records appeared first on The GitHub Blog.

GitHub joined the United Nations Development Programme in Ghana to explore how open source governance can support one of West Africa's most ambitious digital reform efforts.

The post GitHub and UNDP team up to advance development priorities in Ghana with open source appeared first on The GitHub Blog.