API for reverting a pull request
A GraphQL mutation is now available for reverting a merged pull request: revertPullRequest. Like the revert action on the pull request page in the web, calling this API creates a new pull request that reverses…
Category: Github
GitHub Desktop improves force pushing and fetching along with many great open source contributions
GitHub Desktop 3.1.5 improves support for force pushing and fetching through the newly added Repository menu items as well as supporting pull request notifications on forks. This release also comes with many great contributions (12…
Bypassing OGNL sandboxes for fun and charities
Overview Object Graph Notation Language (OGNL) is a popular, Java-based, expression language used in popular frameworks and applications, such as Apache Struts and Atlassian Confluence. In the past, OGNL injections led to some serious remote…
GitHub Projects – January 26th update
This week, we’ve shipped a new experience for creating issues directly from Projects, improved sorting by custom fields across all layouts, and fixed a few bugs. Create issues in a snap with the new issue…
Enable private vulnerabilty reporting organization-wide
Organization admins and security managers can now enable private vulnerability reporting for all public repositories within an organization at once. With this enhancement, you no longer have to enable the feature for each repository individually.…
Setting the foundations for compliance
While compliance is foundational to delivering software around the world, there may be instances where developers get frustrated with policy enforcement slowing down their workflow. Since compliance is what enables the world’s software to be…
100 million developers and counting
In 2019, we set a goal to have 100 million developers using GitHub by 2025—because we know when more developers come together in a single place, incredible things happen. Today, I’m excited to share that…
Dependabot alerts prettified link and hovercard
Starting today, when linking to a Dependabot alert in an issue and or pull requests, anyone with permissions to view the alert will see a rich Dependabot alert mention, with detailed hovercard and a prettified…
GitHub Sponsors will stop supporting PayPal
Starting on February 23, 2023, GitHub Sponsors will no longer support PayPal as a payments processor. As such, it will no longer be possible to sponsor individuals or organizations using PayPal. If you are sponsoring…
Introducing the GitHub Bug Bounty swag store
Our bug bounty team has had an exciting year, including celebrating the eighth year of our program, hosting a live hacking event in June, spotlighting one of our hackers for cybersecurity awareness month, and spending…