You get the chance to chat to three people of your choosing at GitHub Universe. Who would be on your list?

The 5 commands to use in GitHub CLI (token-free) 👀

Organize your issue labels, find the right one faster, and keep your lists tidy. 🗂️ Got a repo with a long and growing list of labels? Suggested Labels and Archive Labels are here to help. https://github.blog/changelog/2026-08-27-label-archiving-is-generally-available/

⭐ Track a repo's star growth over time with the new star history REST API endpoint without exposing stargazer identities. Stargazer listing endpoints were restricted to admins and collaborators to protect user privacy. But now you can get insights with this privacy-safe alternative. The details 👇

New API endpoint provides privacy-safe star history data - GitHub Changelog

Track repository star growth over time with the new star history REST API endpoint without exposing stargazer identities. Earlier this year, stargazer listing endpoints were restricted to admins and c...

github.blog

4.9 percentage points higher verified task quality. 67% lower estimated cost. Project HydraFusion delivered those results against Claude Opus 5 on Terminal-Bench 2.1 in controlled offline evaluations. HydraFusion orchestrates the models and workflow for each coding task github.blog/ai-and-ml/gi...

Project HydraFusion: Frontier quality via multi-model orchestration

In controlled offline evaluations, HydraFusion’s selective coding workflows matched or exceeded the evaluated Opus 5 baseline while reducing estimated cost.

github.blog

🆕 On September 10, we're kicking off the first-ever GitHub Copilot Day! 🎉 Hear directly from the people building Copilot and the developers putting it to work. Learn the most effective ways to use Copilot, from agents and model choice to working across GitHub, Copilot app, CLI, and @vscode.dev.

Cboard is an open source AAC web app that helps people with speech and language disabilities communicate using symbols and text-to-speech. Thanks to its global community of developers, educators, translators, and contributors, Cboard supports accessible communication for people of all ages.

Sometimes it's easier to show than tell. We're sure this update will help with that. 👀 GitHub CLI now has a repeatable --attach flag that uploads a local image or video. Reference it inline in an issue, pull request, or comment body.

GitHub wants to learn about the tools, product settings, and personal adaptations developers use to do their best work. You don't need to identify as someone with disabilities or already consider yourself an accessibility-tool user to participate. Respond by 9/30 ⬇️ gh.io/2026-accesscats-survey

Grab your pass to join us for #GitHubUniverse in San Francisco October 28-29 🌁 https://githubuniverse.com/?utm_source=Bluesky&utm_medium=Social&utm_campaign=sun_short

What's it like to be a maintainer of OpenClaw, the fastest growing project in GitHub history? 🦞 You lose some sleep, but Peter Steinberger says you also hear amazing stories.

🚀 New updates in GitHub Issues • Pin views in the Issues sidebar • See profile avatars for reactions • Adjust dashboard density • Hide closed sub-issues • Scope-aware Issue dependency REST API

Dependabot now waits three days before non-security version update pull requests, giving scanners time to catch a poisoned release first. The case for this cooldown delay ⬇️

The case for a cooldown: Why Dependabot now waits before issuing version updates

A new default three-day cooldown delays version update pull requests so maintainers and security researchers can address findings in a release before it gets into your code.

github.blog

In Session 4 of the GitHub Secure Open Source Fund, 50 projects upgraded their security posture through AI-assisted workflows, maintainer expertise, GitHub security tools, and more. As AI changes how software is built, maintainers remain at the center of protecting the open source ecosystem. 👇

What 50 open source projects taught us about security in the AI era

See how the projects in the GitHub Secure Open Source Fund combined AI-assisted workflows, maintainer expertise, and more to improve project security.

github.blog

GitHub case-folds every byte of code search at over 45 GiB/s on one core. The biggest win came from removing an early-exit branch, not adding one. https://github.blog/engineering/architecture-optimization/dont-stop-early-case-folding-source-code-at-memory-speed/

Don't stop early: Case-folding source code at memory speed

How a branch-free loop and byte-space arithmetic let GitHub case-fold every byte of code search at >45 GiB/s on a single core.

github.blog

A dozen Dependabot pull requests on a Monday morning is how important updates get ignored. On Microsoft's GCToolkit, roughly one in six commits were single-dependency version bumps. Three small changes to dependabot.yml fixed it 👇

Tame Dependabot: Group your updates, slow the cadence, keep security fast

Here's how grouping updates, slowing the cadence, and keeping security fixes fast cut the noise on a Microsoft open source project.

github.blog

What if your JavaScript app could work directly with Git repositories, without the native Git CLI? This Open Source Friday, we’re exploring isomorphic-git, a pure JavaScript implementation of Git for Node.js and browsers. Set a reminder 🔔 https://gh.io/live

npm is rotating write-scoped npm Granular Access Tokens that bypass 2FA as a precaution following a now-contained security incident. This doesn't affect GitHub personal access tokens. Maintainers should upgrade the npm CLI to v12+ and consider Trusted Publishing. docs.npmjs.com/trusted-publ...

Trusted publishing for npm packages | npm Docs

Documentation for the npm registry, website, and command-line interface

docs.npmjs.com

Open source is growing across economies and developer communities. 🌍📈 In Q1 2026, outbound collaboration jumped 16% quarter over quarter, the second-highest growth rate since 2020. See where collaboration, repositories, and git pushes are taking off around the world. 🔍 gh.io/q1-26-graph-update

Beats for your next work or study session 🎧

Lofi beats to code and merge stacked PRs

YouTube video by GitHub

youtu.be

Large changes are hard to review. Smaller pull requests make them easier to ship. Stacked PRs are now on GitHub. https://docs.github.com/en/pull-requests/how-tos/stacked-pull-requests?utm_source=bluesky-motion-graphic&utm_medium=social&utm_campaign=stacked-prs-gtm-public-preview-2026

you can play this game for real if you want cassidoo.github.io/stack-run

GitHub@github.com · last mo.

We can’t fix your attention span, but we can make stacked PRs make sense.

We can’t fix your attention span, but we can make stacked PRs make sense.

stackception

Stacked PRs, now on GitHub. Go forth and stack 🥞

Do you use accessibility tools when working on GitHub? GitHub wants to learn more about how developers with disabilities contribute to software and how accessibility technology helps them do their best work. We welcome you to fill out our survey, open until 8/31/2026. gh.io/2026-accesscats-survey

GitHub had 14,000+ internal repositories, but fewer than half had a clear owner. In under 45 days, we validated ownership for every active repo and archived 8,000 that were no longer used. Here’s how we made ownership durable, and how you can too. 💡

How GitHub gave every repository a durable owner

GitHub had over 14,000 repositories. Fewer than half had clear ownership. Here's how we gave every active repository a validated owner in under 45 days.

github.blog

GitHub’s Bug Bounty Program is evolving to prioritize high-quality, high-impact research. Learn about our next chapter: new VIP program, restructured public bounties, and updated signal requirements, all designed to build stronger researcher partnerships.

Next chapter: Restructuring GitHub's bug bounty program

GitHub is making some significant changes to its bug bounty program, shifting its focus to give researchers a better experience.

github.blog

20,000+ secret scanning alerts across 15,000 repos. Nine months later, GitHub reached inbox zero.

🆕 Multi-select fields for Projects and Issues are now in public preview. Tag an item with everything it relates to (like multiple teams, modules, or categories) instead of picking just one. 🏷️