Multiple GitHub services are experiencing issues, causing workflow runs to fail or be delayed, and some queued jobs may time out. Engineers are implementing mitigations and rolling out a fix across all affected systems.

Stacked pull requests are now in public preview on GitHub, allowing users to break large changes into smaller, reviewable pull requests. This feature enables independent review of each pull request in a series, facilitating easier merging of changes with a single action.

Thousands of repositories on GitHub are currently distributing malware, accessible through the standard search function without special knowledge. Despite having a substantial budget, a dedicated security team, and AI resources, GitHub has not resolved this issue over the past two years.

The main branch of the repository liang-wenfeng-investor-meeting-2026-7-22 does not contain the file 梁文锋投资者交流会-文字稿_1_18_translate_20260723201651.pdf. Feedback is taken seriously and can be reviewed in the documentation.

GitHub is restructuring its bug bounty program to enhance collaboration with the security research community and improve overall platform safety. Changes to the program aim to better recognize and reward researchers for identifying and reporting vulnerabilities.

Noma Labs identified a prompt injection vulnerability in GitHub's Agentic Workflows, allowing unauthenticated attackers to access private repository data by posting a crafted GitHub Issue in a public repository within the same organization. This vulnerability has been named GitLost.

Two months ago I was fired by Google for creating the Google Workspace CLI. It went viral, hit #1 on Hacker News, gained thousands of GitHub stars and many thousands of actual users in just a couple days. It was an incredible, confusing journey, from directors and leaders asking what they could learn from the tool to getting grilled by legal about why the Google logo and brand colors are on the Go...

A large-scale malware distribution campaign on GitHub has been identified, involving 10,000 repositories that distribute Trojan malware. These repositories originate from different contributors and share a common pattern, enabling the creation of a script to find them.

Microsoft is adding Amazon Web Services capacity to GitHub to manage increased coding activity driven by AI advancements. This decision deviates from the original strategy of fully integrating GitHub's infrastructure with Microsoft's Azure cloud.

Ponytail integrates a senior developer's mindset into AI agents, enabling them to significantly reduce code complexity by writing one line instead of fifty. This results in 80-94% less code, 3-6 times faster execution, and 47-77% cost savings.