GitHub Copilot for Business is now available
GitHub Copilot is the world’s first at-scale AI developer tool and we’re now offering it to every developer, team, organization, and enterprise. ⌘ Read more
Yout amicus: fighting for developers’ right to innovate
Our mission to accelerate human progress through developer collaboration requires us, from time to time, to fight against legal developments that would needlessly impair developers’ right to innovate. That’s why GitHub has filed an amicus brief in the appeal of Yout LLC v. Recording Industry of America, Inc. ⌘ Read more
On my blog: Developer Diary, World Radio Day https://john.colagioia.net/blog/2023/02/13/radio.html #programming #project #devjournal
On my blog: Free Culture Book Club — Life Blood, chapters 20 – 22 https://john.colagioia.net/blog/2023/02/11/life-blood-7.html #freeculture #bookclub
On my blog: Toots 🐘 from 02/06 to 02/10 https://john.colagioia.net/blog/2023/02/10/week.html #linkdump #mastodon #socialmedia #week
On my blog: Real Life in Star Trek, The Royale https://john.colagioia.net/blog/2023/02/09/royale.html #scifi #startrek #closereading
Release Radar, Festive Edition · December 2022 – January 2023
Welcome to our special edition of the Release Radar 🎄. Between Christmas festivities, end of the year parties, Chinese New Year, or simply enjoying some time off, almost everyone has been celebrating – us too! Now we’re taking a moment to celebrate these awesome open source projects that shipped major version releases during December and […] ⌘ Read more
In reply to: Oatmeal - week notes
The worst kind of blogging is blogging about blogging, so, I’ll keep this blogging about blogging short!
I’ve made some minor updates to the design of the website that have improved it’s usability a wee bit, and are a step in the right direction toward upping my accessibility game. The major remaining accessibility issues are around color contrast and some structura … ⌘ Read more
The technology behind GitHub’s new code search
A look at what went into building the world’s largest public code search index. ⌘ Read more
How to mitigate OWASP vulnerabilities while staying in the flow
Explore how GitHub Advanced Security can help address several of the OWASP Top 10 vulnerabilities ⌘ Read more
On my blog: Developer Diary, Day against FGM https://john.colagioia.net/blog/2023/02/06/no-fgm.html #programming #project #devjournal
On my blog: Free Culture Book Club — Life Blood, chapters 17 – 19 https://john.colagioia.net/blog/2023/02/04/life-blood-6.html #freeculture #bookclub
Ludum Dare 52 staff picks 🕹
We’ve got ten top games from the latest Ludum Dare game jam plus source code for you to check out. Pun intended. ⌘ Read more
On my blog: Toots 🐘 from 01/30 to 02/03 https://john.colagioia.net/blog/2023/02/03/week.html #linkdump #mastodon #socialmedia #week
Europe’s chance to be a leader in the age of AI
Below are my prepared remarks delivered at the EU Open Source Policy Summit in Brussels on Feb 3rd. ⌘ Read more
On my blog: Real Life in Star Trek, Contagion https://john.colagioia.net/blog/2023/02/02/contagion.html #scifi #startrek #closereading
How the GitHub Docs team uses GitHub Projects
Explore how the GitHub Docs team uses GitHub Projects for content coordination, reviews, and publishing. ⌘ Read more
Enabling branch deployments through IssueOps with GitHub Actions
What if developers want to leverage branch deployments but don’t have a full ChatOps stack integrated with their repositories? We wanted to set out to find a way for all developers to be able to take advantage of branch deployments with ease, right from their GitHub repository, and so the branch-deploy Action was born! ⌘ Read more
Announcing the launch of the All In for Maintainers DEI Resource Hub
The DEI Resource Hub is a vetted collection of resources, tools, and best practices designed to help open source maintainers create and maintain inclusive and diverse open source communities. ⌘ Read more
Open source’s impact on the world’s 100 million developers
We’re taking a look at how open source software has evolved on GitHub, and how the role of a maintainer and contributor has changed alongside the massive growth in open source software. ⌘ Read more
GitHub Availability Report: January 2023
In January, we experienced two incidents, one that resulted in degraded performance for Packages and Pages and another that impacted Git users. ⌘ Read more
Enable No-Code Kubernetes with the harpoon Docker Extension
Find out how to use the harpoon Docker Extension to deploy Kubernetes without any code right from Docker Desktop. ⌘ Read more
Skilling for the future: How GitHub is advancing diversity, equity, and inclusion within open source communities
In the coming months, we’re scaling, expanding, and launching new programming to further DEI within open source communities. ⌘ Read more
44.9666543118^2 ?~L~X https://notiz.blog/b/6Dg
Docker Compose: What’s New, What’s Changing, What’s Next
Docker Compose V1 will be deprecated after June, 2023. Here’s what you need to know to transition to Compose V2! ⌘ Read more
Action needed for GitHub Desktop and Atom users
Update to the latest version of Desktop and previous version of Atom before February 2. ⌘ Read more
On my blog: Developer Diary, Fred Korematsu Day https://john.colagioia.net/blog/2023/01/30/korematsu.html #programming #project #devjournal
On my blog: Free Culture Book Club — Life Blood, chapters 14 – 16 https://john.colagioia.net/blog/2023/01/28/life-blood-5.html #freeculture #bookclub
Australia’s Best Health Insurers
TL;DR List of best health insurers in Australia based on publicly available statistics.
I recently decided to up my health insurance from the bare minimum required by
the government here in Australia. It proved quite difficult to find which insurer
is the best for my state. Now the “best” insurer is a loaded term. It depends
on your needs, your age and so on. But that’s the matter of coverage. I wanted
to know which insurer was the easiest to deal with and actually cared abou … ⌘ Read more
On my blog: Toots 🐘 from 01/23 to 01/27 https://john.colagioia.net/blog/2023/01/27/week.html #linkdump #mastodon #socialmedia #week
Bypassing OGNL sandboxes for fun and charities
Object Graph Notation Language (OGNL) is a popular, Java-based, expression language used in popular frameworks and applications, such as Apache Struts and Atlassian Confluence. Learn more about bypassing certain OGNL injection protection mechanisms including those used by Struts and Atlassian Confluence, as well as different approaches to analyzing this form of protection so you can harden similar systems. ⌘ Read more
On my blog: Real Life in Star Trek, The Dauphin https://john.colagioia.net/blog/2023/01/26/dauphin.html #scifi #startrek #closereading
Setting the foundations for compliance
Laying the groundwork for developer-enabled compliance. ⌘ Read more
100 million developers and counting
There are now 100 million developers around the world using GitHub. Here’s what this means—and why it’s just the beginning. ⌘ Read more
January Extensions: Deploy Kubernetes and Develop Cloud Apps Locally
Find out what’s new this month in the Docker Extension Marketplace, including no-code kubernetes deployment and local cloud app development. ⌘ Read more
H3: Instead of C3
[Updated with correct Gemlog link.]
A version of this was posted on on 2023-01-06 but I thought it might
also fit here. Go to my gemlog for somewhat more personal takes and
see what I publish first. IPv6 only!
gemini://gem.hack.org/mc/log/
As long-time readers know I have participated in the Chaos
Communication Congress (C3) in Germany every year since 2008.
Since C3 was cancelled this year I thought I’d arrange a very small
conference of my own. I would at least try to gather some friends and
acquaintances … ⌘ Read more
Generating SBOMs for Your Image with BuildKit
Learn how to use BuildKit v0.11 to generate SBOMs so you (and your users) can quickly answer questions about your images and packages. ⌘ Read more
H3: Instead of C3
A version of this was posted on on 2023-01-06 but I thought it might
also fit here. Go to my gemlog for somewhat more personal takes and
see what I publish first. IPv6 only!
gemini://gem.hack.org/log/
As long-time readers know I have participated in the Chaos
Communication Congress (C3) in Germany every year since 2008.
Since C3 was cancelled this year I thought I’d arrange a very small
conference of my own. I would at least try to gather some friends and
acquaintances in chat and video conference and watch t … ⌘ Read more
Introducing the GitHub Bug Bounty swag store
We’re excited to share the newest addition to our GitHub Bug Bounty Program! ⌘ Read more
Pwning the all Google phone with a non-Google bug
It turns out that the first “all Google” phone includes a non-Google bug. Learn about the details of CVE-2022-38181, a vulnerability in the Arm Mali GPU. Join me on my journey through reporting the vulnerability to the Android security team, and the exploit that used this vulnerability to gain arbitrary kernel code execution and root on a Pixel 6 from an Android app. ⌘ Read more
On my blog: Developer Diary, World Freedom Day https://john.colagioia.net/blog/2023/01/23/freedom.html #programming #project #devjournal
On my blog: Free Culture Book Club — Life Blood, chapters 10 – 13 https://john.colagioia.net/blog/2023/01/21/life-blood-4.html #freeculture #bookclub
On my blog: Toots 🐘 from 01/16 to 01/20 https://john.colagioia.net/blog/2023/01/20/week.html #linkdump #mastodon #socialmedia #week
Unpacking the value of open source and code collaboration
We’re more excited than ever about what the future holds and the role open source will continue to play in solving critical societal challenges. ⌘ Read more
Sunsetting Subversion support
On January 8, 2024, GitHub will remove support for Subversion. ⌘ Read more
Bringing GitHub Actions to GitHub Mobile
How to tap into the power of GitHub Actions from anywhere with GitHub Mobile! ⌘ Read more
On my blog: Real Life in Star Trek, The Measure of a Man https://john.colagioia.net/blog/2023/01/19/measure-man.html #scifi #startrek #closereading
Unlocking security updates for transitive dependencies with npm
How Dependabot integrated with npm to address security vulnerabilities on transitive dependencies and increase the likelihood of success for JavaScript security updates by 40%. ⌘ Read more
How GitHub coordinates product releases with GitHub Projects and GitHub Actions
When teams work cross-functionally, good things happen. See how our teams use GitHub Projects to coordinate and ship new products and features. ⌘ Read more
logs: new blog post on visual design in software and first photojournal entries of 2023
Remediation made simple: Introducing new validity checks for GitHub tokens
GitHub now tells you whether GitHub tokens found by secret scanning are active so you can prioritize and escalate remediation efforts. ⌘ Read more
Highlights from the BuildKit v0.11 Release
Docker BuildKit v0.11 is now available with new features, bug fixes, performance improvements, and more! ⌘ Read more
Dependabot alerts are now visible to more developers
Default settings will allow developers with write and maintain access to see and resolve Dependabot alerts. ⌘ Read more
Git security vulnerabilities announced
Git users are encouraged to upgrade to the latest version, especially if they use `git archive`, work in untrusted repositories, or use Git GUI on Windows. ⌘ Read more
3 common DevOps antipatterns and cloud native strategies that can help
Explore how GitHub and cloud native strategies can help you address common DevOps pipeline and team antipatterns. ⌘ Read more
On my blog: Developer Diary, Martin Luther King Jr. Day https://john.colagioia.net/blog/2023/01/16/mlk.html #programming #project #devjournal
On my blog: Free Culture Book Club — Life Blood, chapters 6 – 9 https://john.colagioia.net/blog/2023/01/14/life-blood-3.html #freeculture #bookclub
Game Off 2022 winners 🏆
All of the winners and some of the best games from Game Off 2022. ⌘ Read more
On my blog: Toots 🐘 from 01/09 to 01/13 https://john.colagioia.net/blog/2023/01/13/week.html #linkdump #mastodon #socialmedia #week
New GitHub CLI extension tools
Support for GitHub CLI extensions has been expanded with new authorship tools and more ways to discover and install custom commands. Learn how to write powerful extensions in Go and find new commands to install. ⌘ Read more
Develop Your Cloud App Locally with the LocalStack Extension
Learn how to use the LocalStack Docker Extension to emulate a cloud service locally with Docker Desktop. ⌘ Read more
On my blog: Real Life in Star Trek, A Matter of Honor https://john.colagioia.net/blog/2023/01/12/matter-honor.html #scifi #startrek #closereading
A smarter, quieter Dependabot
Dependabot is getting a little smarter—and, a little quieter—by reducing bot-based noise from repositories based on your interaction with Dependabot. ⌘ Read more
Docker Desktop 4.16: Better Performance and Docker Extensions GA
We’re kicking off the new year with exciting Docker Extensions news and improved performance in Docker Desktop 4.16. ⌘ Read more
Passwordless deployments to the cloud
Discovering passwords in our codebase is probably one of our worst fears. But what if you didn’t need passwords at all, and could deploy to your cloud provider another way? In this post, we explore how you can use OpenID Connect to trust your cloud provider, enabling you to deploy easily, securely and safely, while minimizing the operational overhead associated with secrets (for example, key rotations). ⌘ Read more
Introducing required workflows and configuration variables to GitHub Actions
Now, you can standardize and enforce CI/CD best practices across all repositories in your organization to reduce duplication and secure your DevOps processes. ⌘ Read more
GitHub Discussions just got better with Category Forms!
Category Forms allow maintainers to create templates for their GitHub Discussions, which means that users can start new discussions with all the necessary information already included. ⌘ Read more
Default setup: A new way to enable GitHub code scanning
Default setup is a new way to automatically set up code scanning on your repository, without the use of a .yaml file. ⌘ Read more
On my blog: Developer Diary, Hōonkō https://john.colagioia.net/blog/2023/01/09/hoonko.html #programming #project #devjournal
On my blog: Free Culture Book Club — Life Blood, chapters 4 – 5 https://john.colagioia.net/blog/2023/01/07/life-blood-2.html #freeculture #bookclub
On my blog: Toots 🐘 from 01/02 to 01/06 https://john.colagioia.net/blog/2023/01/06/week.html #linkdump #mastodon #socialmedia #week
On my blog: Real Life in Star Trek, Unnatural Selection https://john.colagioia.net/blog/2023/01/05/unnatural-selection.html #scifi #startrek #closereading
GitHub Availability Report: December 2022
In December, we did not experience any incidents that resulted in degraded performance across GitHub services. This report sheds light into an incident that impacted customers using GitHub Packages and GitHub Pages in November. ⌘ Read more
On my blog: Developer Diary, National Science Fiction Day https://john.colagioia.net/blog/2023/01/02/scifi.html #programming #project #devjournal
On my blog: 🍾 Happy Calendar-Changing Day, 2023 🎆 https://john.colagioia.net/blog/2023/01/01/hny2023.html #holiday #newyear
blog: closing out the new year with reflections and resolutions
On my blog: Free Culture Book Club — Life Blood, chapters 1 – 3 https://john.colagioia.net/blog/2022/12/31/life-blood-1.html #freeculture #bookclub
On my blog: Tweets from 12/26 to 12/30 https://john.colagioia.net/blog/2022/12/30/week.html #twitter #week #socialmedia #linkdump
GitHub and the Ekoparty 2022 Capture the Flag
Learn about the design behind, and solutions to, several of GitHub’s CTF challenge for Ekoparty’s 2022 event! ⌘ Read more
On my blog: Real Life in Star Trek, The Schizoid Man https://john.colagioia.net/blog/2022/12/29/schizoid-man.html #scifi #startrek #closereading
GitHub’s top 10 blog posts of 2022
As the year winds down, we’re highlighting some of the incredible work from GitHub’s engineers, product teams, and security researchers. ⌘ Read more
December 2022 Newsletter ⌘ Read more
On my blog: Developer Journal, Boxing Day https://john.colagioia.net/blog/2022/12/26/boxing.html #programming #project #devjournal
On my blog: 🔭 Looking Back on 2022 https://john.colagioia.net/blog/2022/12/25/review-2022.html #retrospective #newyear
On my blog: Free Culture Book Club — Quantum Flux https://john.colagioia.net/blog/2022/12/24/quantum-flux.html #freeculture #bookclub
On my blog: Tweets from 12/19 to 12/23 https://john.colagioia.net/blog/2022/12/23/week.html #twitter #week #socialmedia #linkdump
What’s with all the ducks?
What in the world do rubber ducks have to do with programming? And why were they everywhere at GitHub Universe? A lot of you asked, so I’m here to help explain. ⌘ Read more
Oof, LastPass suffered a major breach
On my blog: Real Life in Star Trek, Loud As A Whisper https://john.colagioia.net/blog/2022/12/22/loud-as-whisper.html #scifi #startrek #closereading
December Extensions Roundup: Improving Visibility for Your APIs and Images
Check out the new Akita and Dive-In Docker Extensions released in December. ⌘ Read more
GitHub Gives 2022: Creating positive, lasting contributions in our communities
This year, we took GitHub Gives, our company-wide giving campaign, to new heights and wanted to share our learnings to provide best practices in programming a successful hybrid giving campaign for employees. ⌘ Read more
Increase developer productivity, save time on developer onboarding, and drive ROI in 2023
Forrester’s Total Economic Impact™ study dives into how GitHub Enterprise Cloud and GitHub Advanced Security help businesses drive ROI, increase developer productivity, and save time on developer onboarding. ⌘ Read more
How we use GitHub to be more productive, collaborative, and secure
Our engineering and security teams have done some incredible work in 2022. Let’s take a look at how we use GitHub to be more productive, build collaboratively, and shift security left. ⌘ Read more
Reduce Your Image Size with the Dive-In Docker Extension
Use the Dive-In Docker Extension to see how to reduce image size in an easy-to-use UI. ⌘ Read more
[Video] How has open source changed in the last 10 years?
What’s the state of open source and how has it changed over the last decade? GitHub’s VP of Developer Relations, Martin Woodward, tackles that question and more in a 2022 keynote. ⌘ Read more
On my blog: Developer Journal, International Human Solidarity Eve https://john.colagioia.net/blog/2022/12/19/solidarity.html #programming #project #devjournal
TIL: gwern has met Jürgen Habermas in person: https://www.lesswrong.com/posts/DXcezGmnBcAYL2Y2u/yes-a-blog?commentId=nhpQK5787tMoaYDWp
On my blog: Free Culture Book Club — R. James Gavreau https://john.colagioia.net/blog/2022/12/17/rjg.html #freeculture #bookclub
On my blog: Tweets from 12/12 to 12/16 https://john.colagioia.net/blog/2022/12/16/week.html #twitter #week #socialmedia #linkdump
Release Radar · November 2022 Edition
We promised we’d be back soon and here we are! There has been an incredible amount of open source projects shipping major version releases before the year wraps up. I can’t believe we are all saying that now. “When the year wraps up!” or “See you next year!” What happened to 2022? Well, we know […] ⌘ Read more