github

GitHub says its Sponsors program has funneled more than $100 million to open source maintainers since 2019, with growth accelerating sharply.

GitHub shut down its free AI model playground, catalog, inference API, and BYOK access on July 30, 2026, directing developers to Microsoft Foundry or Copilot.

GitHub is halving public bug bounty payouts starting July 27, reserving its largest rewards for a new invite-only VIP tier as it fights a flood of low-quality, AI-generated reports.

Dependabot now waits three days before proposing new dependency versions by default. GitHub says the delay keeps freshly compromised releases out of update pull requests; security updates are exempt and repositories can opt out.

GitHub's new License Compliance feature enters public preview, letting Enterprise Cloud customers with GitHub Advanced Security block pull requests that add dependencies violating license policy.

Microsoft open-sourced its Eclipse IDE Copilot plugin on May 21, releasing roughly 15,000 lines of Java under MIT and drawing 1,200+ stars within hours.

GitHub Code Quality added code coverage metrics to pull requests on May 26, completing a roadmap item announced at the feature's October 2025 launch.

GitHub launched a native desktop app for Windows, macOS, and Linux that runs multiple isolated Copilot agent sessions in their own git worktrees and ties them back to issues, pull requests, and merges.

GitHub released the Enterprise Server 3.21 release candidate on May 13, making organization custom properties generally available along with Projects hierarchy views, REST API 2026-03-10, and secret scanning and Actions workflow improvements.

The DevTeam released NetHack 5.0.0 on May 2, ending an 11-year wait since 3.6.0 and folding more than 3,100 fixes, a Lua-driven dungeon and quest pipeline, and full C99 source into the 39-year-old roguelike.

On April 28, 2026, Microsoft published the earliest known DOS source code under the MIT License, including the 86-DOS 1.00 kernel and PC-DOS 1.00 development snapshots transcribed from Tim Paterson's printouts.

CVE-2026-3854 let any authenticated user run code on GitHub's backend with a single git push. GitHub patched github.com in two hours on March 4; public disclosure on April 28 found most Enterprise Server instances still vulnerable.