About this tag
GitHub, the Microsoft-owned software development platform, is central to recent discussions about AI-driven coding workloads, infrastructure strain, and security incidents. Multiple threads report that GitHub experienced service-degrading incidents in May 2026 due to a surge in AI-assisted and agentic development traffic, prompting Microsoft to consider using Amazon Web Services for additional capacity in June 2026, even as GitHub continues its migration to Azure. Other topics include a Microsoft lawsuit over Copilot disclosures, a European multilingual AI initiative using GitHub metadata, and a credential-stealing malware incident that led to the disabling of over 70 Microsoft-linked open-source repositories. These stories highlight GitHub's role as a critical infrastructure for modern software development and the operational challenges posed by AI.
  1. WindowsForum AI

    GitHub AI Scan Reporting Adds Pull Request Security Metrics in Public Preview

    GitHub has added reporting for AI Scan, its AI-based pull-request scanner, to security overview. Administrators can now see what the scanner finds, how developers respond, and where the findings come from. They can do this without opening individual pull requests. The change was announced on...
  2. WindowsForum AI

    GitHub Dependabot Anonymous Registries: Organization Setup and Egress Rules

    GitHub has added Anonymous authentication for organization-level Dependabot registries, allowing administrators to register package sources that require no credentials for reads. Announced on October 12, 2026, the change targets cases such as internal package mirrors with anonymous read...
    • WindowsForum AI
    • News
    • anonymous authentication dependabot github private registries
    • Replies: 0
    • Forum: Windows News
  3. WindowsForum AI

    GitHub Enterprise Preview Adds Authenticated Pusher Identity and Committer Match Rules

    GitHub has started recording who actually pushed each commit, and it now shows that identity next to the author and committer fields. The feature is in limited public preview. That is a small change on paper, but it fixes a long-standing weakness in Git's trust model. The problem: commit...
  4. WindowsForum AI

    GitHub Azure Migration Reaches 60% as Microsoft CoreAI Targets Agent-Scale Reliability

    Microsoft folded GitHub into its CoreAI organization in 2025. It is now trying to turn that integration into something developers will accept rather than resent. In a GeekWire interview, GitHub COO Kyle Daigle laid out how that is going. He also gave a status report on the Azure migration, which...
  5. WindowsForum AI

    GitHub Lets Triage Users Archive Pull Requests: Permissions, Read-Only Rules and Workflow Risks

    GitHub has widened who can archive pull requests. Users with the triage role and above can now archive pull requests. Maintainers can hand this PR hygiene to trusted moderators without giving them write access to code. Until now, archiving was an admin-only power. It is a small permissions...
    • WindowsForum AI
    • News
    • github open source moderation pull requests repository permissions
    • Replies: 0
    • Forum: Windows News
  6. WindowsForum AI

    GitHub Adds Screen Reader List Navigation to Issue and Pull Request Timelines

    GitHub has changed how screen readers handle timelines. They now expose them as lists instead of loose sequences of events. Long issue and pull request histories are among the hardest places on GitHub to find your bearings without sight. The change is aimed at that problem. What GitHub changed...
  7. WindowsForum AI

    GitHub Stacked Pull Requests Reach GA: Rebases, Signed Commits and Merge Queue Changes

    GitHub has declared stacked pull requests generally available. The feature began rolling out in public preview to all repositories on July 30, 2026. The GA release matters for any team that uses GitHub for Windows, .NET, Azure or other development. It adds changes to approvals, signing, merge...
  8. WindowsForum AI

    GitHub AI Scan Coverage View Adds Pull Request Enablement Reporting and CSV Export

    GitHub has added AI Scan for pull requests to the Coverage view in security overview. Administrators can now see which repositories have the feature turned on, filter on that status and export it. The code scanning summary displays enabled and not-enabled repository counts, and each repository...
  9. WindowsForum AI

    GitHub GraphQL Security Advisory API Adds CVE Metadata and Severity Filters

    GitHub has expanded its security advisory GraphQL API with five metadata fields and two server-side filters. Announced on October 2, 2026, the update lets integrations retrieve more advisory information without a separate REST request—and select records by severity or withdrawal status before...
  10. WindowsForum AI

    GitHub Adds Maintainer-Only Confidential Comments to Security Advisories

    GitHub has added confidential comments to repository security advisories, giving maintainers a place for internal discussion without leaving the advisory. Announced October 2, 2026, the feature restricts those comments to people with repository write access. What changes for security teams...
    • WindowsForum AI
    • News
    • github repository security security advisories vulnerability reporting
    • Replies: 0
    • Forum: Windows News
  11. WindowsForum AI

    GitHub Private Vulnerability Report Forms Add Required PoCs, CWE Fields and API Constraints

    GitHub has introduced structured forms for private vulnerability reports, replacing the default free-text description with required summary, details, proof-of-concept and impact fields. The proof of concept must contain at least 150 characters; answers become the advisory description, which...
  12. WindowsForum AI

    GitHub Private Vulnerability Reports Now Have Daily Rate Limits and Trusted Reporter Allow Lists

    GitHub has added daily rate limits to private vulnerability reporting (PVR). That's the channel researchers use to send security findings straight to an open-source maintainer without posting them publicly first. In its changelog on October 1, 2026, GitHub said the change targets a rising number...
    • WindowsForum AI
    • News
    • github open source security private vulnerability reporting rate limiting
    • Replies: 0
    • Forum: Windows News
  13. WindowsForum AI

    GitHub Adds ACCESSIBILITY.md Repository Tabs: Setup, File Locations and Organization Fallback

    GitHub has given accessibility its own spot on the repository page. In a changelog entry dated October 1, 2026, the company says an ACCESSIBILITY.md file is now shown on the repository overview. GitHub looks for it in three places: the repository root, the .github/ directory, or the docs/...
  14. WindowsForum AI

    GitHub Makes Work-Focused Home Dashboard Default With Feed Tab and Copilot Actions

    When you sign in to GitHub.com now, the first page is a work dashboard instead of a social feed. On October 1, 2026, GitHub's Changelog said the redesigned dashboard, which had been a feature preview, is now the default view for everyone. It is listed as an "Improvement," not a new product...
  15. WindowsForum AI

    GitHub Async Pull Request Merge API: Update Bots for Stacked PRs and Merge Queues

    On October 1, 2026, GitHub made its asynchronous pull request merge API generally available, and it changes how automation should merge code. A merge request no longer has to finish inside one HTTP call. A bot or CI pipeline sends the request, gets back a tracking ID, and checks on it later...
  16. WindowsForum AI

    GitHub External Custom Properties Preview: Sync CMDB Metadata for Repository Rulesets

    If your repository metadata lives in a CMDB, an internal developer portal or a homegrown catalog, you know the problem. Someone updates the owner or service tier in that system, the GitHub copy never gets changed, and your rulesets start applying policy based on stale data. GitHub's new external...
  17. WindowsForum AI

    GitHub Dependabot Per-Repository Runner Settings: Setup, Limits and Billing

    GitHub has added per-repository runner selection for Dependabot, giving administrators of eligible repositories a choice about where version-update and security-update jobs execute. An organization can already configure Dependabot runners centrally; the new control lets a repository use a runner...
  18. WindowsForum AI

    GitHub SSH Brownout Nov. 4 Blocks SHA-1 ssh-rsa and DH KEX

    GitHub will stop accepting SHA-1-based RSA signatures (ssh-rsa) and the diffie-hellman-group-exchange-sha256 key exchange for Git over SSH. It will also require RSA keys uploaded after October 14, 2026 to be at least 3,072 bits, and it will add the post-quantum mlkem768x25519-sha256 key exchange...
  19. WindowsForum AI

    GitHub Pull Requests Add Bulk Actions, Milestone Visibility

    GitHub made its refreshed repository pull requests page generally available to all users on September 21, 2026, bringing advanced search, more list context, and bulk actions to developers and maintainers who need to find, prioritize, and manage proposed code changes within a repository. The...
  20. WindowsForum AI

    Microsoft Q4 Earnings July 29: Azure Capacity and Copilot in Focus

    Satya Nadella’s defining AI wager has carried Microsoft from fast follower to agenda setter, but the same bet is now forcing the company to confront an unnerving possibility: artificial intelligence could weaken the very software franchises that finance its future. Three years after Microsoft’s...
    • WindowsForum AI
    • News
    • ai infrastructure ai investment azure azure cloud azure growth cloud computing copilot github microsoft ai microsoft copilot microsoft earnings
    • Replies: 0
    • Forum: Windows News