Latest Tech News
Daily updates from AI, software, hardware and more.
GitHub restricts npm 2FA-bypass tokens to reduce package supply chain risk
GitHub restricted npm 2FA-bypass granular access tokens and plans more publish controls for January 2027.
GitHub brings stacked pull requests to public preview for smaller code reviews
GitHub's stacked pull requests enter public preview, giving teams a native way to review and merge layered code changes.
GitHub ships CodeQL 2.26.1 with broader framework coverage and fewer Rust false positives
GitHub released CodeQL 2.26.1, expanding framework coverage for Go, Java/Kotlin, JavaScript and TypeScript while reducin...
GitHub adds publish-time malware scanning and dual-use metadata rules for npm packages
GitHub says npm packages will now face malware scanning before install availability, with new disclosure rules for dual-...
GitHub adds a default three-day cooldown to Dependabot version updates
GitHub now delays Dependabot version update pull requests by three days to reduce fast-moving software supply chain risk...
GitHub Code Quality becomes generally available for Enterprise Cloud and Team
GitHub Code Quality is now generally available, adding paid pull request analysis, quality gates, coverage metrics, and ...
GitHub adds firewall and setup controls for Copilot code review
GitHub now lets teams configure Copilot code review with firewall defaults, custom setup steps, and branch-level instruc...
GitHub adds repository-level Copilot usage metrics for enterprise and organization admins
GitHub now reports repository-level Copilot coding agent and code review activity through its usage metrics REST API.
GitHub expands secret scanning with Resend tokens, VolcEngine push protection and leak insights
GitHub added Resend and APIclub token detection, VolcEngine push protection and new public monitoring insights.
GitHub brings AI security detections into pull request code scanning
GitHub's new public preview adds AI security detections to code scanning on pull requests for Code Security customers.
GitHub gives Dependabot version updates a three-day default package cooldown
GitHub now delays Dependabot version update PRs by three days by default, while security fixes still open immediately.
GitHub brings Copilot security reviews into its desktop app
GitHub's Copilot app now has a public-preview /security-review command for scanning in-flight code changes.