GitHub Copilot: Meet the new coding agent
Implementing features has never been easier: Just assign a task or issue to Copilot. It runs in the background with GitHub Actions and submits its work as a pull request.

The post GitHub Copilot: Meet the new coding agent appeared first on The GitHub Blog. ⌘ Read more

Code. Create. Commit. Welcome to dev/core
The new GitHub Shop collection is here. We’re celebrating you.

The post Code. Create. Commit. Welcome to dev/core appeared first on The GitHub Blog. ⌘ Read more

Vibe coding: Your roadmap to becoming an AI developer
Learn how to go from curious coder to AI wizard—with a little help from GitHub.

The post Vibe coding: Your roadmap to becoming an AI developer appeared first on The GitHub Blog. ⌘ Read more

Our pledge to help improve the accessibility of open source software at scale
GitHub takes the Global Accessibility Awareness Day (GAAD) pledge.

The post Our pledge to help improve the accessibility of open source software at scale appeared first on The GitHub Blog. ⌘ Read more

GitHub Availability Report: April 2025
In April, we experienced three incidents that resulted in degraded performance across GitHub services.

The post GitHub Availability Report: April 2025 appeared first on The GitHub Blog. ⌘ Read more

Documentation done right: A developer’s guide
Learn why and how you should write docs for your project with the Diátaxis framework.

The post Documentation done right: A developer’s guide appeared first on The GitHub Blog. ⌘ Read more

GitHub Issues search now supports nested queries and boolean operators: Here’s how we (re)built it
Plus, considerations in updating one of GitHub’s oldest and most heavily used features.

The post [GitHub Issues search now supports nested queries and boolean operators: Here’s how we (re)built it](https://github.blog/developer-skills/application-development/github-issues-search-now-supports-nested-queries-an … ⌘ Read more

GitHub for Beginners: Building a React App with GitHub Copilot
Follow along and build a frontend client using React and Copilot Chat.

The post GitHub for Beginners: Building a React App with GitHub Copilot appeared first on The GitHub Blog. ⌘ Read more

Real‑world video demo: Using different AI models in GitHub Copilot
Curious about how AI models perform in real-world scenarios with GitHub Copilot? Same. We made a live video demo to find out, and wrote up our key takeaways.

The post Real‑world video demo: Using different AI models in GitHub Copilot appeared first on The GitHub Blog. ⌘ Read more

Design system annotations, part 2: Advanced methods of annotating components
How to build custom annotations for your design system components or use Figma’s Code Connect to help capture important accessibility details before development.

The post [Design system annotations, part 2: Advanced methods of annotating components](https://github.blog/engineering/user-experience/design-system-annotations-part-2-advanced-methods-of-annotating-component … ⌘ Read more

Design system annotations, part 1: How accessibility gets left out of components
The Accessibility Design team created a set of annotations to bridge the gaps that design systems alone can’t fix and proactively addresses accessibility issues within Primer components.

The post [Design system annotations, part 1: How accessibility gets left out of components](https://github.blog/engineering/user-experience/design-system-annotations-part-1-how … ⌘ Read more

Dos and don’ts when sunsetting open source projects
Three maintainers share their tips for gracefully sunsetting open source projects.

The post Dos and don’ts when sunsetting open source projects appeared first on The GitHub Blog. ⌘ Read more

Welcome to Maintainer Month: Events, exclusive discounts, and a new security challenge
This May marks the fifth annual Maintainer Month, and there are lots of treats in store: new badges, special discounts, events with experts, and more.

The post [Welcome to Maintainer Month: Events, exclusive discounts, and a new security challenge](https://github.blog/open-source/maintainers/welcome-to-maintainer-month-events-exclusive-discounts-and-a-ne … ⌘ Read more

Copilot ask, edit, and agent modes: What they do and when to use them
An introduction to the three distinct modes of GitHub Copilot and a practical guide for integrating them effectively into your workflow.

The post Copilot ask, edit, and agent modes: What they do and when to use them appeared first on The GitHub Blog. ⌘ Read more

The AI-Powered DevOps revolution: Redefining developer collaboration
Collaboration is crucial to successful software delivery. Let’s dive into how AI can help your development teams decrease their time to delivery, and foster better communication and collaboration using GitHub Copilot.

The post [The AI-Powered DevOps revolution: Redefining developer collaboration](https://github.blog/ai-and-ml/github-copilot/the-ai-powered-devops-revolution-redefining-de … ⌘ Read more

From MCP to multi-agents: The top 10 open source AI projects on GitHub right now and why they matter
Get insights on the latest trends from GitHub experts while catching up on these exciting new projects.

The post [From MCP to multi-agents: The top 10 open source AI projects on GitHub right now and why they matter](https://github.blog/open-source/maintainers/from-mcp-to-multi-agents-the-top-10-open-source-ai-projects-on-git … ⌘ Read more

Cutting through the noise: How to prioritize Dependabot alerts
Learn how to effectively prioritize alerts using severity (CVSS), exploitation likelihood (EPSS), and repository properties, so you can focus on the most critical vulnerabilities first.

The post Cutting through the noise: How to prioritize Dependabot alerts appeared first on [The … ⌘ Read more

GitHub for Beginners: Building a REST API with Copilot
See how you can use GitHub Copilot to build an API.

The post GitHub for Beginners: Building a REST API with Copilot appeared first on The GitHub Blog. ⌘ Read more

How the GitHub CLI can now enable triangular workflows
The GitHub CLI now supports common Git configurations for triangular workflows. Learn more about triangular workflows, how they work, and how to configure them for your Git workflows. Then, see how you can leverage these using the GitHub CLI.

The post How the GitHub CLI can now enable triangular workflows appeared first on [The … ⌘ Read more

A guide to deciding what AI model to use in GitHub Copilot
What to look for with each model and how to test them in your workflows—with tips, tricks, and pointers.

The post A guide to deciding what AI model to use in GitHub Copilot appeared first on The GitHub Blog. ⌘ Read more

From prompt to production: Building a landing page with Copilot agent mode
See how I built a developer-focused landing page in under 30 minutes using GitHub Copilot agent mode and Claude 3.5 Sonnet—with just screenshots and prompts.

The post From prompt to production: Building a landing page with Copilot agent mode appeared fir … ⌘ Read more

Exploring GitHub CLI: How to interact with GitHub’s GraphQL API endpoint
Discover practical tips and tricks for forming effective GraphQL queries and mutations.

The post Exploring GitHub CLI: How to interact with GitHub’s GraphQL API endpoint appeared first on The GitHub Blog. ⌘ Read more

Racing into 2025 with new GitHub Innovation Graph data
Discover the latest trends and insights on public software development activity on GitHub with the quarterly release of data for the Innovation Graph, updated through December 2024.

The post Racing into 2025 with new GitHub Innovation Graph data appeared first on [The GitHub Blog](ht … ⌘ Read more

How to take climate action with your code
There are 60,000+ climate-focused projects on GitHub, explore one this Earth Day!

The post How to take climate action with your code appeared first on The GitHub Blog. ⌘ Read more

How to make your images in Markdown on GitHub adjust for dark mode and light mode
When you want your images to look good in Markdown on GitHub, you might have to adjust for the UI around them.

The post How to make your images in Markdown on GitHub adjust for dark mode and light mode appeared first on [The GitHub B … ⌘ Read more

Cracking the code: How to wow the acceptance committee at your next tech event
Want to speak at a tech conference? These four practical tips will help your session proposal stand out—and land you on the stage.

The post Cracking the code: How to wow the acceptance committee at your next tech event appeared fi … ⌘ Read more

Which AI model should I use with GitHub Copilot?
Ever wondered which AI model is the best fit for your GitHub Copilot project? Here are some things to consider.

The post Which AI model should I use with GitHub Copilot? appeared first on The GitHub Blog. ⌘ Read more

GitHub Availability Report: March 2025
In March, we experienced one incident that resulted in degraded performance across GitHub services.

The post GitHub Availability Report: March 2025 appeared first on The GitHub Blog. ⌘ Read more

When to choose GitHub-Hosted runners or self-hosted runners with GitHub Actions
Comparing GitHub-hosted vs self-hosted runners for your CI/CD workflows? This deep dive explores important factors to consider when making this critical infrastructure decision for your development team.

The post [When to choose GitHub-Hosted runners or self-hosted runners with GitHub Actions](https://github.blog/enterprise-software/ci-cd/when-to-choose-github-ho … ⌘ Read more

GitHub for Beginners: Security best practices with GitHub Copilot
Learn how to leverage GitHub Copilot to make your code more secure.

The post GitHub for Beginners: Security best practices with GitHub Copilot appeared first on The GitHub Blog. ⌘ Read more

Introducing sub-issues: Enhancing issue management on GitHub
Explore the iterative development journey of GitHub’s sub-issues feature. Learn how we leveraged sub-issues to build and refine sub-issues, breaking down larger tasks into smaller, manageable ones.

The post Introducing sub-issues: Enhancing issue management on GitHub ap … ⌘ Read more

What the heck is MCP and why is everyone talking about it?
Everyone’s talking about MCP these days when it comes to large language models (LLMs)—here’s what you need to know.

The post What the heck is MCP and why is everyone talking about it? appeared first on The GitHub Blog. ⌘ Read more

How we’re making security easier for the average developer
Security should be native to your workflow, not a painful separate process.

The post How we’re making security easier for the average developer appeared first on The GitHub Blog. ⌘ Read more

How to request a change to a CVE record
Learn how to identify which CVE Numbering Authority is responsible for the record, how to contact them, and what to include with your suggestion.

The post How to request a change to a CVE record appeared first on The GitHub Blog. ⌘ Read more

Found means fixed: Reduce security debt at scale with GitHub security campaigns
Starting today, security campaigns are generally available for all GitHub Advanced Security and GitHub Code Security customers—helping organizations take control of their security debt and manage risk by unlocking collaboration between developers and security teams.

The post [Found means fixed: Reduce security debt at scale with GitHub security campaigns](http … ⌘ Read more

Git turns 20: A Q&A with Linus Torvalds
To celebrate two decades of Git, we sat down with Linus Torvalds—the creator of Git and Linux—to discuss how it forever changed software development.

The post Git turns 20: A Q&A with Linus Torvalds appeared first on The GitHub Blog. ⌘ Read more

Vibe coding with GitHub Copilot: Agent mode and MCP support rolling out to all VS Code users
In celebration of MSFT’s 50th anniversary, we’re rolling out Agent Mode with MCP support to all VS code users. We are also announcing the new GitHub Copilot Pro+ plan w/ premium requests, the general availability of models from Anthropic, Google, and OpenAI, next edit suggestions for code completions & the Copilot code review agent.

The post [Vibe coding with GitHub Copilot: Agent mode and MC … ⌘ Read more

Localhost dangers: CORS and DNS rebinding
What is CORS and how can a CORS misconfiguration lead to security issues? In this blog post, we’ll describe some common CORS issues as well as how you can find and fix them.

The post Localhost dangers: CORS and DNS rebinding appeared first on The GitHub Blog. ⌘ Read more

GitHub found 39M secret leaks in 2024. Here’s what we’re doing to help
Every minute, GitHub blocks several secrets with push protection—but secret leaks still remain one of the most common causes of security incidents. Learn how GitHub is making it easier to protect yourself from exposed secrets, including today’s launches of standalone Secret Protection, org-wide scanning, and better access for teams of all sizes.

The post [GitHub found 39M secret leaks in 2024. H … ⌘ Read more

GitHub for Beginners: How to get LLMs to do what you want
Learn how to write effective prompts and troubleshoot results in this installment of our GitHub for Beginners series.

The post GitHub for Beginners: How to get LLMs to do what you want appeared first on The GitHub Blog. ⌘ Read more

5 GitHub Actions every maintainer needs to know
With these actions, you can keep your open source projects organized, minimize repetitive and manual tasks, and focus more on writing code.

The post 5 GitHub Actions every maintainer needs to know appeared first on The GitHub Blog. ⌘ Read more

Mastering GitHub Copilot: When to use AI agent mode
Discover the differences between agent mode and Copilot Edits with GitHub Copilot—and when to use them in your workflows.

The post Mastering GitHub Copilot: When to use AI agent mode appeared first on The GitHub Blog. ⌘ Read more

A maintainer’s guide to vulnerability disclosure: GitHub tools to make it simple
A step-by-step guide for open source maintainers on how to handle vulnerability reports confidently from the start.

The post A maintainer’s guide to vulnerability disclosure: GitHub tools to make it simple appeared fir … ⌘ Read more

World Water Day: how GitHub Copilot is helping bring clean water to communities
From simplifying the workflow of a developer to having an impact on the global water crisis, technology and AI are reshaping the way charity: water works.

The post World Water Day: how GitHub Copilot is helping bring clean water to communities appeared first on [Th … ⌘ Read more

Video: How to create checklists in Markdown for easier task tracking
Ever wondered how to create checklists in your GitHub repositories, Issues, and PRs? Make task lists more manageable in your GitHub repositories, issues, and pull requests.

The post Video: How to create checklists in Markdown for easier task tracking appeared first on [The … ⌘ Read more

IssueOps: Automate CI/CD (and more!) with GitHub Issues and Actions
A look into building IssueOps workflows on GitHub to do everything from CI/CD to handling approvals and more.

The post IssueOps: Automate CI/CD (and more!) with GitHub Issues and Actions appeared first on The GitHub Blog. ⌘ Read more

GitHub for Beginners: Essential features of GitHub Copilot
Get the most out of Copilot with code completion, inline chat, slash commands, Copilot code review, and more.

The post GitHub for Beginners: Essential features of GitHub Copilot appeared first on The GitHub Blog. ⌘ Read more

Highlights from Git 2.49
The open source Git project just released Git 2.49. Here is GitHub’s look at some of the most interesting features and changes introduced since last time.

The post Highlights from Git 2.49 appeared first on The GitHub Blog. ⌘ Read more

How GitHub engineers learn new codebases
Strategies to quickly get up to speed, whether you’re a seasoned engineer or a newcomer to the field.

The post How GitHub engineers learn new codebases appeared first on The GitHub Blog. ⌘ Read more

Sign in as anyone: Bypassing SAML SSO authentication with parser differentials
Critical authentication bypass vulnerabilities (CVE-2025-25291 + CVE-2025-25292) were discovered in ruby-saml up to version 1.17.0. In this blog post, we’ll shed light on how these vulnerabilities that rely on a parser differential were uncovered.

The post [Sign in as anyone: Bypassing SAML SSO authentication with parser differentials](https://github.blog/security/sign-in-as-anyone- … ⌘ Read more