
github.blog
August 20, 2026
4 min read
61/100
Summary
GitHub suffered a 7-hour, 47-minute outage on August 17 that disrupted github.com, authentication, GitHub Actions, APIs, pull requests, issues, and Copilot worldwide. GitHub said traffic had reached a new peak when a critical infrastructure component in its Central US data center failed to scale, creating capacity pressure that spread across its systems. Most services recovered that day after teams rerouted traffic and isolated affected infrastructure, while some Copilot services took longer because client-side retry loops increased traffic during recovery. The outage was GitHub’s second significant August incident, following an August 6 GitHub Actions failure. GitHub said neither event resulted from a code or configuration change; both were capacity failures. Monthly commits grew from 1.4 billion in April to 2.9 billion, increasing system demand. Since April, GitHub has added more than 3 million CPU cores, 120 petabytes of high-speed storage, and additional network capacity, while accelerating its migration to Azure. Azure now handles about 58% of GitHub platform load and half of Git operations, up from 12% of platform load in May. GitHub plans to limit retries and apply retry budgets and variable timeouts between services, review lower-priority CPU and memory alerts, isolate critical systems, and remove shared dependencies. It is also developing an architecture intended to scale read capacity linearly for large monorepos.
Key Takeaways
What the discussion said
The thread treated the outage less as an isolated GitHub failure than as a stress test for AI-assisted coding at industrial scale. Commenters were staggered by monthly commits jumping from roughly 1.4 billion to 2.9 billion in a few months, with several reading the surge as evidence that coding agents and autocomplete are turning developers into high-volume code generators. That growth is exciting as a sign of AI adoption, but it also looks suspiciously like unreviewed generated output flooding a platform whose underlying capacity was built for a different era. The technical focus landed on the Copilot Token Service recovery failure, where client retries reportedly multiplied load about tenfold. Readers agreed that retry storms are a classic way for a partial failure to become an extended outage. The split was over whether retries themselves are the culprit: some saw them as a dangerous habit that conceals real errors, while others argued they are essential when a request simply lands on a bad node, provided clients use backoff, circuit breakers, and server-directed retry guidance. Skeptics also found the remediation plan too dependent on adding capacity, questioning why a service at GitHub’s scale still lacks sufficiently scalable read architecture. A few commenters credited the company for publishing a technical postmortem, but confidence in its preparedness was thin.
Where opinion split
The sharp dispute was whether automatic retries are sound reliability engineering or a self-inflicted outage amplifier. Critics argued that blind client retries hide failures from users and turn service degradation into a thundering herd, as the Copilot recovery incident demonstrated. Defenders argued retries remain necessary for transient, node-specific faults, but only when paired with accurate signals, exponential backoff, and circuit breakers that halt traffic once the service is broadly unhealthy.
Community Sentiment
Positives
Concerns