It’s been a while but we’re back! Hold on to your seats, there’s been pleeeenty going on at GitHub 🎢
But first, let me tell you that we’re going to Lab Week 🎉 🌴 🍹 Do reach out if you’re also there and would like to discuss anything GitHub related 📣 We’d be thrilled to chat 🍄
And now… this: 🔓 Git 2.38 is out! And with it, Scalar - a tool for large repo management. DO upgrade immediately if you’re cloning with --recurse-submodules from untrusted repositories or if you use git shell interactive mode. There were security vulnerabilities announced.
GitHub is trying to improve code search! The new portal is currently in technical preview. Let me know if you wanted to see it, I’m already in.
🤘 Larger runners for GitHub Actions are in public beta. Unfortunately, it’s only available for Team and Enterprise level customers. It’d be great if they offered them on pay-as-you-go for Free plans.
🗄️ You can finally manage GitHub Actions Caches from the UI! This is a great addition to the previously available options: API and CLI. These are not the only improvements to the GitHub Actions UI - I encourage you to visit some workflow page if you haven’t done that in a while.
🌓 Branch protections now understand the concept of last pusher - you can require reviews from someone other than the last person who pushed to the branch. But that’s not all, you can now also lock your branches and disallow any changes to them until the unlock.
🍏 GitHub App for Slack is getting some long awaited features:
🛌 The REST API allows retrieving all Dependabot alerts now. It also allows managing Codespaces. As far as I know, we don’t use the latter too much yet but it’d be definitely interesting to explore. You can also manage code security features through the API.
🏖️ Personal Access Tokens can now be configured much more precisely. You can choose which orgs and repos they relate too. On the other side, the org admins will now be able to control. These are in a public beta right now - the opt-in is very easy though so let me know if you want to try it out.
💪 save-state and set-output commands are now deprecated. The removal date is not scheduled yet. IPDX will perform a sweep in the coming weeks. We will do a follow-up to suggest changes to your workflows. Some options include:
- Storing data as an output in the action itself
- Storing data in a file and attaching it as an artifact
- Using environment variables
Have a great day!