GitHub Blog

10 technical talks I’m excited about at GitHub Universe 2026

From verifying AI-written code to securing npm dependencies, these are the sessions I’m building my …

Developer policy update: Transparency, state policy, and what’s ahead

Explore GitHub’s latest transparency data and learn more about policy updates affecting developers a…

How we found 24 Android vulnerabilities using our open source AI security agent

A look at the targeted AI taskflows behind these findings, the critical Android bugs they uncovered,…

Highlights from Git 2.56

The open source Git project just released Git 2.56. Here is GitHub's look at some of the most intere…

GitHub Copilot app for Beginners: How to build custom workflows with canvases

Describe the interface you need in plain English, then let the agent build a live surface you can bo…

Improving site performance by shipping more CSS

A look at how a design system shipped major changes without breaking the world. The post Improving s…

When chat is the wrong UI

What is a developer to do when they need something more tangible than a chat box? Enter canvases. Th…

AI-powered fuzzing with the GitHub Security Lab Taskflow Agent

In this blog post, I explain how to use the new fuzzing taskflow based on the GitHub Security Lab Ta…

Rendering huge pull requests in the GitHub Copilot app

How we rebuilt the diff surface in the GitHub Copilot app to open a million-line pull request with h…

Developers want more efficient software. Here’s what over 1000 GitHub users told us they need.

New research from GitHub and Yale Program on Climate Change Communication finds strong demand for to…

Should you read the code, is RAG dead, and did Skills kill MCP?

We dive into these questions and other AI hot takes on the latest episode of the GitHub Podcast. The…

Migrating the GitHub Copilot runtime to Rust, using Copilot

A rewrite this size wasn't affordable before agents. Here's what porting the Copilot agent runtime t…