GitHub Icon

GitHub

GitHub is where millions of developers gather every day to collaborate on open source software.
70 Stories
All Topics

Eileen Uchitelle github.blog

Running GitHub on Rails 6.0

Eileen Uchitelle shared the backstory of how they have GitHub running on Rails 6.0 just 1.5 weeks after its final release. 👏 As soon as we finished the Rails 5.2 upgrade last year, we started upgrading our application to Rails 6.0. Instead of waiting for the final release, we’d upgrade every week by pulling in the latest changes from Rails master and run all of our tests against that new version. This allowed us to find regressions quickly and early—often finding regressions in Rails master just hours after they were introduced. Upgrading weekly made it easy to find where these regressions were introduced since we were bisecting Rails with only a week’s worth of commits instead of more than a year of commits.

read more

npm blog.npmjs.org

npm token scanning extending to GitHub

The npm team is collaborating with GitHub on a new service that will automatically check for tokens that might have been accidentally pushed up to a repository and then automatically revoke them if they are valid. This will help to quickly mitigate attack vectors that might arise from the accidental oversharing of credentials for projects. From the post: Whenever you commit or push a change to GitHub in a public repository and an npm token is found in the change, it is sent to npm for validation. If it’s valid, we will revoke it and notify the maintainer of this action via email.

read more

Bloomberg Icon Bloomberg

Microsoft wins over skeptics. Wins back developers.

Like many out there, I was a skeptic of Microsoft’s acquisition of GitHub. To be honest, in some ways I still am. We’ve been tracking this topic very closely over the last several years. What’s particularly interesting to me is this story — Scott Guthrie wrote a proposal in 2014 to acquire GitHub and filed it away in a drawer. In 2014, Microsoft Corp. cloud chief Scott Guthrie wrote up a proposal to acquire GitHub Inc. Then he filed the plan away in a drawer. Every once in a while he’d take the plan out and look at it, and then return it to the cabinet. Guthrie felt Microsoft just wasn’t ready to acquire the popular open-source company… Fast forward 5 years…GitHub has been acquired and Nat Friedman (CEO of GitHub) says “GitHub has to be neutral and GitHub has to be independent. Developers want choice. GitHub can’t have any favoritism.” With that kind of intention and posture, my skepticism is eroding.

read more

Nadia Eghbal nadiaeghbal.com

The Twitch argument for GitHub Sponsors

Nadia Eghbal thinks GitHub Sponsors might be more like Twitch than it is like Patreon. Twitch streamers and, similarly I think, GitHub open source developers, benefit from an additional set of motivations, which is, “I want to watch and learn from you”. A graphic artist or a blogger who’s funded on Patreon doesn’t quite have that same relationship to their audience. In those cases, I think their output – the artifacts they create – takes center stage. She also thinks this dynamic might indicate that individual sponsorships will succeed despite enterprises being “where the money’s at”. I don’t know how this all will play out, but I do know it’ll be interesting!

read more

GitHub dependabot.com

Dependabot has been acquired by GitHub

More news out of today’s GitHub Satellite event, this time from a security angle. The implications of this acquisition from the horse’s mouth: We’re integrating Dependabot directly into GitHub, starting with security fix PRs 👮‍♂️ You can still install Dependabot from the GitHub Marketplace whilst we integrate it into GitHub, but it’s now free of charge 🎁 We’ve doubled the size of Dependabot’s team; expect lots of great improvements over the coming months 👩‍💻👨‍💻👩‍💻👨‍💻👩‍💻👨‍💻 Congrats to Grey, Harry and Philip!

read more

Owen Williams char.gd

GitHub's new features show it's finally listening to developers

The news about GitHub Sponsor is making the rounds. This post from Owen Williams highlights how GitHub is listening and putting their money where their mouth is, for the good of all of us. GitHub, it seems, is thriving again. It just showed the fruits of that labor, and what it looks like when a company is participating in the discussion in the open, listening to the developers that know it best. At an event called GitHub Satellite, the company unveiled the biggest set of new features in memory, all designed to address glaring problems the platform has faced for years. They’re designed to help make GitHub a better place to work, and contribute to the open source community as a whole.

read more

GitHub Icon GitHub

Sponsor your favorite open source contributors directly on GitHub

HUGE news coming from GitHub today: We’re thrilled to announce the beta of GitHub Sponsors, a new way to financially support the developers who build the open source software you use every day. Open source developers build tools for the rest of us. GitHub Sponsors is a new tool to help them succeed, too. 100% of sponsorship money goes to the developers and they’re even matching contributions up to $5k during a developer’s first year! Also, the whole thing is tightly integrated in to GitHub itself: Open source projects can also express their funding models directly from their repositories. When .github/FUNDING.yml is added to a project’s master branch, a new “Sponsor” button will appear at the top of the repository. Clicking the button opens a natively rendered view of the funding models listed in that file. There’s lots to digest here, but at first glance this looks like an amazing addition to the open source ecosystem. 🎉

read more

Opensource.com Icon Opensource.com

Querying 10 years of GitHub data with GHTorrent and Libraries.io

There are two fun angles coming from this article. The team over at CHAOSSEARCH has built ElasticSearch-like functionality on top of a AWS S3 buckets. It looks compelling for anyone who’s managed a large ES cluster and is looking at other ways to get search functionally out of a lot of data. Explore GitHub data shows a ton of interesting insights around popular and unpopular licenses, programming languages, and the libraries available to explore them.

read more

GitHub Icon GitHub

GitHub launched its own package registry 😱

ICYMI — late Friday afterrnoon GitHub held a live event to announce the beta launch of GitHub Package Registry. GitHub Package Registry is fully integrated with GitHub, so you can use the same search, browsing, and management tools to find and publish packages as you do for your repositories. You can also use the same user and team permissions to manage code and packages together. GitHub Package Registry provides fast, reliable downloads backed by GitHub’s global CDN. And it supports familiar package management tools: JavaScript (npm), Java (Maven), Ruby (RubyGems), .NET (NuGet), and Docker images, with more to come. You can sign up for the beta here.

read more

Nikita Prokopov tonsky.me

Redesigning GitHub's repository page

A thoughtful, step-by-step redesign of the repo page we all know so well. I didn’t realize how many problems the current design has! Perhaps I’ve been inoculated to them by sheer volume of use. His redesign takes a few left turns on me (I’ve always loved how code-centric the design is, for example), but overall there are many good ideas inside. I hope GitHub’s design teams read this and “steal” a few of the goodies.

read more

Jason Etcovitch jasonet.co

Probot app or GitHub Action?

Well, it depends. But the good news is Jason Etcovitch (Engineer at GitHub) examines the pros and cons of each and where they fit. He even shared a comparison table to help determine which to choose. Should your next automation tool be built in GitHub Actions or as a separate service with Probot? Since GitHub announced the beta release of GitHub Actions in October 2018, there’s been a new excitement around building automation - and that’s awesome! But I wanted to take a look at the various pros and cons of GitHub Actions and Probot, where each excels and where each might not be the best tool for the job. Click through and scroll to the bottom of the post if all you care about is the comparison.

read more

GitHub github.blog

GitHub introduces draft pull requests

From the GitHub blog: With draft pull requests, you can clearly tag when you’re coding a work in progress. Now when you open a pull request, a dropdown arrow appears next to the “Create pull request” button. Toggle the dropdown arrow whenever you want to create a draft instead. Finally. No more titling “[WIP]” and co-workers still asking you whether your pull request is ready to review. GitHub is killing it right now.

read more

Patrick Reynolds githubengineering.com

GitHub open sourced the parser and specification for GitHub Actions

If you’re looking for a deep dive on GitHub Actions, check out The Changelog #331: GitHub Actions is the next big thing with Kyle Daigle. Patrick Reynolds, writing on the GitHub Engineering blog: Since the beta release of GitHub Actions last October, thousands of users have added workflow files to their repositories. But until now, those files only work with the tools GitHub provided: the Actions editor, the Actions execution platform, and the syntax highlighting built into pull requests. To expand that universe, we need to release the parser and the specification for the Actions workflow language as open source. Today, we’re doing that. I also want to point out this “we believe” section of the post to key in on their intentions and willingness to provide the community with the necessary tools to make GitHub Actions all that it can be for the community. We believe that tools beyond GitHub should be able to run workflows. We believe there should be programs to check, format, compose, and visualize workflow files. We believe that text editors can provide syntax highlighting and autocompletion for Actions workflows. And we believe all that can only happen if the Actions community is empowered to build these tools along with us. That can happen better and faster if there is a single language specification and a free parser implementation.

read more

GitHub github.com

A simple web server for serving static GitHub Pages locally

This is useful for making sure things look right before pushing your content up to GitHub for serving. It’s better than python -m http.server and the like because it handles lack of file extensions and absolute paths better. It doesn’t support Jekyll-based GitHub pages, but it will take your Markdown files and send them off to api.github.com/markdown for character-perfect rendering.

read more

0:00 / 0:00