How GitHub uses GitHub Actions and Actions larger runners to build and test GitHub.com
Recently, we’ve been working to make our CI experience better by leveraging the newly released GitHub feature, Actions larger runners, to run our CI.
The post [How GitHub uses GitHub Actions and Actions larger runners to build and test GitHub.com](https://github.blog/2023-09-26-how-github-uses-github-actions-and-actions-larger-runners-to-build-and-test-github-com/ … ⌘ Read more
Docker’s Journey Toward Enabling Lightning-Fast Developer Innovation: Unveiling Performance Milestones
Learn about Docker’s focus on performance and walk through the milestones of the past 12 months, including 85x improvement in upload speed, 71% reduction in build time, and a 5,800% increase in streaming speed. ⌘ Read more
Your ultimate guide to the GitHub Universe ‘23 agenda
Get a sneak peek into the must-attend sessions, speakers, workshops, and GitHub certifications available at our global developer event.
The post Your ultimate guide to the GitHub Universe ‘23 agenda appeared first on The GitHub Blog. ⌘ Read more
Getting RCE in Chrome with incorrect side effect in the JIT compiler
In this post, I’ll exploit CVE-2023-3420, a type confusion in Chrome that allows remote code execution (RCE) in the renderer sandbox of Chrome by a single visit to a malicious site.
The post Getting RCE in Chrome with incorrect side effect in the JIT compiler appeared first on [The GitHub Blog](ht … ⌘ Read more
Erlang Solutions: Our experts at Code BEAM Europe 2023
The biggest Erlang and Elixir Conference is coming to Berlin in October!
Are you ready for a deep dive into the world of Erlang and Elixir? Mark your calendars, because Code BEAM Europe 2023 is just around the corner.
With a lineup of industry pioneers and thought leaders, Code BEAM Europe 2023 promises to be a hub of knowledge sharing, innovation, and networking.
Erlang Solutions’ experts are working har … ⌘ Read more
Calling all teachers! Learn how to build new commands on the GitHub Classroom CLI
In this step-by-step tutorial, we’ll dive into how you can become the next open source contributor to the GitHub Classroom CLI, building commands that you can use to improve your workflow as an educator!
The post [Calling all teachers! Learn how to build new commands on the GitHub Classroom CLI](https://github.blog/2023-09-25-calling-all-teachers-learn-how-to-build-new-comma … ⌘ Read more
On my blog: Developer Diary, Unification of Nepal https://john.colagioia.net/blog/2023/09/25/nepal.html #programming #project #devjournal
Catching COVID-19
So far, I had been spared from COVID-19. “Had,” focusing on the past, because now it has affected me, or us, after all. We had to cut short our vacation, which I used to share little glimpses of here on the blog. We quickly went back home, wearing masks the whole time and hoping not to infect more people. ⌘ Read more
On my blog: Free Culture Book Club — C-Man https://john.colagioia.net/blog/2023/09/23/c-man.html #freeculture #bookclub
On my blog: Toots 🐘 from 09/18 to 09/22 https://john.colagioia.net/blog/2023/09/22/week.html #linkdump #mastodon #socialmedia #week
On my blog: Real Life in Star Trek, Hollow Pursuits https://john.colagioia.net/blog/2023/09/21/hollow-pursuits.html #scifi #startrek #closereading
The GitHub Security Lab’s journey to disclosing 500 CVEs in open source projects
The GitHub Security Lab audits open source projects for security vulnerabilities and helps maintainers fix them. Recently, we passed the milestone of 500 CVEs disclosed. Let’s take a trip down memory lane with a review of some noteworthy CVEs!
The post [The GitHub Security Lab’s journey to disclosing 500 CVEs in open source projects](https://github.blog/2023-09-21-the-github-s … ⌘ Read more
Passkeys are generally available
All GitHub.com users can now register a passkey to sign in without a password.
The post Passkeys are generally available appeared first on The GitHub Blog. ⌘ Read more
Announcing the GitHub Innovation Graph
Explore a universe of data about how the world is building software together on GitHub.
The post Announcing the GitHub Innovation Graph appeared first on The GitHub Blog. ⌘ Read more
GitHub Copilot Chat beta now available for all individuals
All GitHub Copilot for Individuals users now have access to GitHub Copilot Chat beta, bringing natural language-powered coding to every developer in all languages.
The post GitHub Copilot Chat beta now available for all individuals appeared first on The GitHub Blog. ⌘ Read more
Introducing Learning Paths on Global Campus
Guiding student developers through skill building foundations, a building block in their learning journey with GitHub Education.
The post Introducing Learning Paths on Global Campus appeared first on The GitHub Blog. ⌘ Read more
How IKEA Standardizes Docker Images for Efficient Machine Learning Model Deployment
Learn the vital role Docker plays in MLOps (machine learning operations) at IKEA. We explore how Docker and Seldon-Core work together to turn a convoluted task into a streamlined, agile operation, and how you can harness real-time metrics for profound insights. ⌘ Read more
Announcing general availability of GitHub Advanced Security for Azure DevOps
GitHub Advanced Security for Azure DevOps is now generally available. Enable secret scanning, dependency scanning, and code scanning on your organization directly in Azure DevOps configuration settings.
The post [Announcing general availability of GitHub Advanced Security for Azure DevOps](https://github.blog/2023-09-20-announcing-general-availability-of-github-advanced-security-for- … ⌘ Read more
Erlang Solutions: Smart Sensors with Erlang and AtomVM: Smart cities, smart houses and manufacturing monitoring
For our first article on IoT developments at Erlang Solutions, our goal is to delve into the use of Erlang on microcontrollers, highlighting and exposing its capabilities to run efficiently on smaller devices. For our inaugural article, we have chosen to address a pressing issue faced by numerous sectors- including healthcare, r … ⌘ Read more
How to Get Started with the Weaviate Vector Database on Docker
With Weaviate, you can build advanced LLM applications, next-level search systems, recommendation systems, and more. Discover features of the Weaviate vector database and learn how to install Weaviate on Docker using Docker Compose. ⌘ Read more
お知らせ：JPCERT/CC Eyes「国際カンファレンス参加レポート ～Black Hat USA, DEF CON～」 ⌘ Read more
Switching from Bitbucket Server and Bamboo to GitHub just got easier
Starting today, GitHub Enterprise Importer supports repository migrations from Bitbucket Server and Bitbucket Data Center, and GitHub Actions Importer offers CI/CD migrations from Bitbucket and Bamboo.
The post Switching from Bitbucket Server and Bamboo to GitHub just got easier appeared first on … ⌘ Read more
Snikket: State of Snikket 2023: Funding
As promised in our ‘State of Snikket 2023’ overview post, and teased at the end of our first update post about app development, this post in the series is about that thing most of us open-source folk love to hate… money.
We are an open-source project, and not-for-profit. Making money is not our primary goal, but like any business we have upstream expenses to pay - to compensate for the time and specialist work we need to implement the Snikket vision. To do that, we need income.
T … ⌘ Read more
On my blog: Developer Diary, World Water Monitoring Day https://john.colagioia.net/blog/2023/09/18/water.html #programming #project #devjournal
The angle of the sun wasn’t perfect for this photo, but it turned out to be an unexpected highlight during our hike around Thurso today. ⌘ Read more
On my blog: Free Culture Book Club — Poles, part 5 https://john.colagioia.net/blog/2023/09/16/poles-5.html #freeculture #bookclub
On my blog: Toots 🐘 from 09/11 to 09/15 https://john.colagioia.net/blog/2023/09/15/week.html #linkdump #mastodon #socialmedia #week
On my blog: Real Life in Star Trek, Tin Man https://john.colagioia.net/blog/2023/09/14/tin-man.html #scifi #startrek #closereading
DockerCon Workshops: What to expect
DockerCon 2023 will be held October 4-5 in Los Angeles. The program is now online so you can plan your experience by day, time, and theme, including AI and Machine Learning, Web Application / Web Development, Building and Deploying Applications, Secure Software Delivery, and Open Source. This year we’re offering talks, workshops, and panel discussions, plus the usual vibrant DIY hallway track. Here’s a preview of what to expect in our workshops. Register now! ⌘ Read more
Introducing auto-triage rules for Dependabot
Make quick work of alerts with preset and custom rules.
The post Introducing auto-triage rules for Dependabot appeared first on The GitHub Blog. ⌘ Read more
Is this the Hogwarts Express? 🚂🧙 ⌘ Read more
West Highland Way
With a backpack full of stuff for two weeks, we managed to walk 11km on the West Highland Way in 2:35h. I feel it in my legs, but the views and the experience are worth it. ⌘ Read more
JMP: Newsletter: Summer in Review
Hi everyone!
Welcome to the latest edition of your pseudo-monthly JMP update!
In case it’s been a while since you checked out JMP, here’s a refresher: JMP lets you send and receive text and picture messages (and calls) through a real phone number right from your computer, tablet, phone, or anything else that has a Jabber client. Among other things, JMP has these features: Your phone number on every device; Multiple phone numbers, one app; Free as in Freedom; Sh … ⌘ Read more
GitHub Availability Report: August 2023
In August, we experienced two incidents that resulted in degraded performance across GitHub services.
The post GitHub Availability Report: August 2023 appeared first on The GitHub Blog. ⌘ Read more
Apply now for GitHub Universe 2023 micro-mentoring
As part of our ongoing commitment to accelerate human progress through Social Impact initiatives, we’re offering students 30-minute, 1:1 micro-mentoring sessions with GitHub employees ahead of Universe.
The post Apply now for GitHub Universe 2023 micro-mentoring appeared first on The GitHub Blog. ⌘ Read more
Erlang Solutions: Diversity & Inclusion at CodeBEAM Europe
Our Pledge to DiversityAs technology becomes increasingly integrated into our lives, it’s crucial that the minds behind it come from diverse backgrounds. Different viewpoints lead to more comprehensive solutions, ensuring that the tech we create addresses the needs of a global audience.
At Erlang Solutions, we believe that a diverse workforce is a catalyst for creativity and progress. By sponsoring the Diversity & Inclusion Pr … ⌘ Read more
West Highland Way
With a backpack full of stuff for two weeks, we managed to walk 11km on the West Highland Way in 2:35h. I feel it in my legs, but the views and the experience are worth it. ⌘ Read more
Docker Desktop 4.23: New Configuration Integrity Check, Plus Updates to Docker Init, Compose, Watch, Quick Search, and More
Docker Desktop 4.23 is now available and includes numerous enhancements, including ASP.NET support in Docker Init, Configuration Integrity Check to alert on any configuration changes that require attention, and cross-domain identity management. This release also improves Quick Search, allowing for searching across containers, apps, Docker Hub, Docs, and any volume, and performing quick actions (st … ⌘ Read more
CodeQL team uses AI to power vulnerability detection in code
Learn how GitHub’s CodeQL leveraged AI modeling and multi-repository variant analysis to discover a new CVE in Gradle.
The post CodeQL team uses AI to power vulnerability detection in code appeared first on The GitHub Blog. ⌘ Read more
Here are three things I’ve noticed in the UK that I really appreciate: ⌘ Read more
Here are three things I’ve noticed in the UK that I really appreciate: ⌘ Read more
On my blog: Developer Diary, Nayrouz https://john.colagioia.net/blog/2023/09/11/nayrouz.html #programming #project #devjournal
London is on a whole different scale when it comes to size. It has roughly the same population as Berlin, Hamburg, Munich, Cologne, and Frankfurt combined, and those cities are already quite large. 🤯 ⌘ Read more
On my blog: Free Culture Book Club — Poles, part 4 https://john.colagioia.net/blog/2023/09/09/poles-4.html #freeculture #bookclub
Souvenirs de la Roumanie communiste
Un témoignage d’un lecteur assidu Il y a quelques temps, un habitué du blog, francophone mais d’origine roumaine, a proposé de colliger ses souvenirs de la Roumanie lorsqu’elle était encore sous le joug du régime communiste. Le résultat forme un petit fichier PDF facile à lire. Alors que l’époque de la Guerre Froide, de la […] ⌘ Read more
On my blog: Toots 🐘 from 09/04 to 09/08 https://john.colagioia.net/blog/2023/09/08/week.html #linkdump #mastodon #socialmedia #week
On my blog: Real Life in Star Trek, Captain’s Holiday https://john.colagioia.net/blog/2023/09/07/captain-s-holiday.html #scifi #startrek #closereading
Tailscale and Mullvad
This is some really cool news! You can now use Tailscale and Mullvad simultaneously without any additional setup required. ⌘ Read more
Erlang Solutions: Pay down technical debt to modernise your technology estate
Imagine this scenario. Your CEO tells you the organisation needs a complete tech overhaul, then gives you a blank cheque and free rein. He tells you to sweep away the old and usher in the new. “No shortcuts, no compromise!” he cries. “Start from scratch and make it perfect!”
And then you wake up. As we all know, this scenario is pure fantasy. Instead, IT leaders are faced with a constant st … ⌘ Read more
How to build an enterprise LLM application: Lessons from GitHub Copilot
The team behind GitHub Copilot shares its lessons for building an LLM app that delivers value to both individuals and enterprise users at scale.
The post How to build an enterprise LLM application: Lessons from GitHub Copilot appeared first on The GitHub Blog. ⌘ Read more
Prosodical Thoughts: Prosody 0.12.4 released
We are pleased to announce a new minor release from our stable branch.
We’re relieved to announce this overdue maintenance release containing a
number of bug fixes and also some improvements from the last few months.
Especially the prosodyctl check tool which gained some new diagnostic
checks as well as handling of configuration option types the same way
Prosody itself does.
A summary of changes in this release:
Minor changes- core.certmanager: Update Mozilla TLS … ⌘ Read more
After some cold and rainy weeks, it’s a quite warm and sunny again, but probably for the last time this year. ⌘ Read more
On my blog: Developer Diary, Labor Day https://john.colagioia.net/blog/2023/09/04/labor.html #programming #project #devjournal
On my blog: Free Culture Book Club — Poles, part 3 https://john.colagioia.net/blog/2023/09/02/poles-3.html #freeculture #bookclub
On my blog: Toots 🐘 from 08/28 to 09/01 https://john.colagioia.net/blog/2023/09/01/week.html #linkdump #mastodon #socialmedia #week
Getting started with edge computing
Edge computing practitioners answer your questions about when and why to build applications at the edge.
The post Getting started with edge computing appeared first on The GitHub Blog. ⌘ Read more
My August ‘23 in Review
Now it’s already September. So, what happened in August? ⌘ Read more
On my blog: Real Life in Star Trek, Allegiance https://john.colagioia.net/blog/2023/08/31/allegiance.html #scifi #startrek #closereading
How GitHub reduces costs with upgraded Codespaces
See how much more you can get out of GitHub Codespaces by taking advantage of the improved processing power and increased headroom the RAM provides.
The post How GitHub reduces costs with upgraded Codespaces appeared first on The GitHub Blog. ⌘ Read more
Erlang Solutions: What businesses should consider when adopting AI and machine learning
AI is everywhere. The chatter about chatbots has crossed from the technology press to the front pages of national newspapers. Worried workers in a wide range of industries are asking if AI will take their jobs.
Away from the headlines, organisations of all sizes are getting on with the task of working out what AI can do for them. It will almost certainly do something. One survey pu … ⌘ Read more
Why Rust is the most admired language among developers
Rust continues to top the charts as the most admired and desired language by developers, and in this post, we dive a little deeper into how (and why) Rust is stealing the hearts of developers around the world.
The post Why Rust is the most admired language among developers appeared first on The GitHub Blog. ⌘ Read more
GitHub Enterprise Server 3.10 is now generally available
Customers using GHES can now ensure secure development is a top priority with enhanced security and compliance controls for their repositories.
The post GitHub Enterprise Server 3.10 is now generally available appeared first on The GitHub Blog. ⌘ Read more
お知らせ：JPCERT/CC Eyes「『能動的サイバー防御』は効果があるのか？ ～注目が集まるoffensiveなオペレーションの考察～」 ⌘ Read more
10 things you didn’t know you could do with GitHub Projects
Learn how to optimize your usage of GitHub Projects to plan and track your work from idea to production.
The post 10 things you didn’t know you could do with GitHub Projects appeared first on The GitHub Blog. ⌘ Read more
On my blog: Developer Diary, Kaqchikel Rebellion https://john.colagioia.net/blog/2023/08/28/kaqchikel.html #programming #project #devjournal
Ignite Realtime Blog: CVE-2023-32315: Openfire vulnerability (update)
A few months ago, we published details about an important security vulnerability in Openfire that is identified as CVE-2023-32315.
To summarize: Openfire’s administrative console (the Admin Console), a web-based application, was found to be vulnerable to a path traversal attack via the setup environ … ⌘ Read more
On my blog: Free Culture Book Club — Poles, part 2 https://john.colagioia.net/blog/2023/08/26/poles-2.html #freeculture #bookclub
On my blog: Toots 🐘 from 08/21 to 08/25 https://john.colagioia.net/blog/2023/08/25/week.html #linkdump #mastodon #socialmedia #week
Game Bytes · August 2023
Game Bytes is our monthly series taking a peek at the world of gamedev on GitHub—featuring game engine updates, game jam details, open source games, mods, maps, and more. Game on!
The post Game Bytes · August 2023 appeared first on The GitHub Blog. ⌘ Read more
On my blog: Real Life in Star Trek, Sins of the Father https://john.colagioia.net/blog/2023/08/24/sins-father.html #scifi #startrek #closereading
A faster way to manage version updates with Dependabot
Now, you can group multiple version updates in a single pull request.
The post A faster way to manage version updates with Dependabot appeared first on The GitHub Blog. ⌘ Read more
Unleashing GitHub Codespaces templates to ignite your development
Learn how to leverage templating features in GitHub Codespaces to streamline your project setup, improve consistency, and simplify collaboration within your development team.
The post Unleashing GitHub Codespaces templates to ignite your development appeared first on The GitHub Blog. ⌘ Read more
Erlang Solutions: Future-proofing legacy systems with Erlang
Relying on outdated legacy systems often serves as the biggest hindrance to both innovation and optimisation for businesses today. Since many of these systems have been used for years, if not multiple decades, the significant costs involved with replacing a system entirely are rarely within budgets, particularly in today’s business climate.
But that doesn’t mean legacy systems should be left as is. Erlang is a resilient and p … ⌘ Read more
AI-powered impact: GitHub Social Impact’s year ahead
How GitHub Social Impact is working with nonprofit organizations, employees, and more to create positive, lasting change in global communities.
The post AI-powered impact: GitHub Social Impact’s year ahead appeared first on The GitHub Blog. ⌘ Read more
Docker Hub Registry IPv6 Support Now Generally Available
Docker announces the general availability of IPv6 support for the Docker Hub Registry, Docker Docs, and Docker Scout endpoints. ⌘ Read more
In my second apartment, I really like sitting in the winter garden (more some kind of balcony or loggia but with windows) in the evening and looking outside. The neighbors aren’t very close, and you can see the sky well. It’s very relaxing to sit here in the dark, thinking and enjoying the time. ⌘ Read more
お知らせ：JPCERT/CC Eyes「MalDoc in PDF - 検知回避を狙って悪性なWordファイルをPDFファイルへ埋め込む手法 -」 ⌘ Read more
ChatGPT Plus?
It’s been a while since ChatGPT was introduced to the world, and after the initial excitement, things seem to have settled down. While there’s still daily news about various services and companies integrating the GPT API into their products, the buzz around it has quieted. At least, that’s how it appears to me. ⌘ Read more
Highlights from Git 2.42
Another new release of Git is here! Take a look at some of our highlights on what’s new in Git 2.42.
The post Highlights from Git 2.42 appeared first on The GitHub Blog. ⌘ Read more
On my blog: Developer Diary, Haitian Revolution https://john.colagioia.net/blog/2023/08/21/haiti.html #programming #project #devjournal
On my blog: Free Culture Book Club — Poles, part 1 https://john.colagioia.net/blog/2023/08/19/poles-1.html #freeculture #bookclub
If you haven’t already noticed (though why would you?), I have finally merged my homepage into my blog. Why? Well, I believe it doesn’t make much sense to keep them separate. My homepage had only a few pages, and elements such as my “About Me” page and collections of things I use are well-maintained on my blog as well. Some pages were also deleted during this process, but I made an effort to preserve links where possible. ⌘ Read more
On my blog: Toots 🐘 from 08/14 to 08/18 https://john.colagioia.net/blog/2023/08/18/week.html #linkdump #mastodon #socialmedia #week
mTLS: When certificate authentication is done wrong
In this post, we’ll deep dive into some interesting attacks on mTLS authentication. We’ll have a look at implementation vulnerabilities and how developers can make their mTLS systems vulnerable to user impersonation, privilege escalation, and information leakages.
The post mTLS: When certificate authentication is done wrong appeared first on [The Gi … ⌘ Read more
On my blog: Real Life in Star Trek, The Offspring https://john.colagioia.net/blog/2023/08/17/offspring.html #scifi #startrek #closereading
Unleash Docker Desktop 4.22: The Featherweight Heavy-Hitter for Supercharged Rapid Development
Docker is committed to delivering the most efficient and high-performing container development toolset in the market, so we continue to advance our technology to exceed customer expectations. With the latest version 4.22 release, Docker Desktop has undergone significant optimizations, making it streamlined, lightweight, and faster than ever. Not only does this new version offer enhanced […] ⌘ Read more
Docker Scout Demo and Q&A
We share highlights from a recent webinar: “Docker Scout: Live Demo, Insights, and Q&A,” which is also now available on-demand. ⌘ Read more
Accelerating Machine Learning with TensorFlow.js: Using Pretrained Models and Docker
We explore the concept of using pretrained models with TensorFlow.js and Docker and delve into the potential applications and benefits offered. ⌘ Read more
お知らせ：JPCERT/CC Eyes「TSUBAMEレポート Overflow（2023年4～6月）」 ⌘ Read more
Profanity: Profanity 0.14.0
Apologies for the late blog post.
We have good news though! Two weeks ago we released Profanity 0.14.0!
13 people contributed to this release: Daniel Santos, @DebXWoody, @H3rnand3zzz, @ike08, @MarcoPolo-PasTonMolo, @mdosch, @pasis, @paulfertser, @shahab-vahedi, @sjaeckel, @techmetx11, @thexhr and @jubalh.
Also a big thanks to our sponsors: @mdosch, @LeSpocky, @jamesponddotco and one anonymous sponsor!
We introduced a new /privacy command which should make it easier to find all pri … ⌘ Read more
Build for today, transform for tomorrow at GitHub Universe 2023
Get tickets to our global developer and customer event for 30% off during our Super-Early Bird special, only for a limited time.
The post Build for today, transform for tomorrow at GitHub Universe 2023 appeared first on The GitHub Blog. ⌘ Read more
Release Radar · July 2023 Edition
After the last Release Radar, I promised the next one wouldn’t be far away, so here it is. This is the low down on some of the best open source projects that shipped major version updates in July. There’s lots of cool stuff from natural language processing, to APIs, money, and SDKs. I won’t spoil […]
The post Release Radar · July 2023 Edition appeared first on The GitHub Blog. ⌘ Read more
Hardening repositories against credential theft
Some best practices and important defenses to prevent common attacks against GitHub Actions that are enabled by stolen personal access tokens, compromised accounts, or compromised GitHub sessions.
The post Hardening repositories against credential theft appeared first on The GitHub Blog. ⌘ Read more
Nine years of the GitHub Security Bug Bounty program
It was another record year for our Security Bug Bounty program! We’re excited to highlight some achievements we’ve made together with the bounty community in 2022!
The post Nine years of the GitHub Security Bug Bounty program appeared first on The GitHub Blog. ⌘ Read more
My unsuccessful search for the perfect 5G home router solution
In search of the perfect LTE or 5G-based home router, I recently found myself tumbling down a rabbit hole. ⌘ Read more
5 Benefits of a Container-First Approach to Software Development
This post provides a quick introduction to the benefits of adopting a container-first model in your software development. Learn more by downloading our free Cracking the Code: Effectively Managing All of Those Applications whitepaper. ⌘ Read more
On my blog: Developer Diary, Gerakan Pramuka https://john.colagioia.net/blog/2023/08/14/gerakan-pramuka.html #programming #project #devjournal
My unsuccessful search for the perfect 5G home router solution
In search of the perfect LTE or 5G-based home router, I recently found myself tumbling down a rabbit hole. ⌘ Read more
On my blog: Announcing Kabang! https://john.colagioia.net/blog/2023/08/13/kabang.html #announcement #game #freeculture
On my blog: Free Culture Book Club — Project Ballad, part 3 https://john.colagioia.net/blog/2023/08/12/project-ballad-3.html #freeculture #bookclub