GitHub Enterprise Cloud now lets enterprise-installed GitHub Apps authorize classic PATs and verified user-owned SSH keys across up to 50 organizations per request.
GitHub Automates SSO Authorization for PATs and SSH Keys Read More »
CodeQL 2.27.0 adds first-class Linux ARM64 support alongside new security queries, expanded framework modeling, and upcoming platform changes administrators should prepare for.
npm now applies a 72-hour security hold to every account after a recovery-code login, temporarily blocking publishing and other sensitive account changes. Here is what maintainers and release teams need to know.
npm Adds 72-Hour Holds to All Recovery-Code Logins Read More »
GitHub’s Xcode 27 GitHub-hosted runner image now uses macOS 27 and is available in public preview for arm64 workflows. Here’s what teams need to know before adopting it.
GitHub’s Xcode 27 Runner Image Moves to macOS 27 Read More »
GitHub Actions now lets teams control cache restores and saves with read, write, write-only, and none modes. Here’s how the feature affects workflow security and reusable workflows.
GitHub has placed REST API support for AI Scan for pull requests into public preview. Organizations can manage the setting programmatically, subject to enterprise policy, eligibility, and code-scanning requirements.
A new Headlamp plugin gives Kubernetes operators resource views for selected Kubeflow workloads, including notebooks, pipelines, Katib, training jobs, and Spark applications.
Python 3.12.14, 3.11.16 and 3.10.21 are available as security releases. Here is what developers need to know about the documented fixes, source-only distribution and upgrade planning.
Understand how Linux permissions and ownership work with practical Bash examples using chmod, chown, ls, and stat.
GitHub Actions has removed Node 20 from its runners and ended the temporary opt-out. Here is what action maintainers, workflow owners, and self-hosted runner operators need to review.
