GitHub Actions macOS 14 Runner Retirement: Survive the October Brownouts and Migrate Before November 2 Starting October 5, 2026 at 14:00 UTC, GitHub will deliberately fail every job that asks for a macOS 14 hosted runner, for ten hours at a time, on eight separate days this month. On November 2, 2026 the image goes …

GitHub's New Runner Deprecation API: Automate Your Self-Hosted Fleet Audit If you manage self-hosted GitHub Actions runners, you've probably already been checking versions by hand — SSH into a box, run ./run.sh --version, repeat for every machine. On September 3, 2026, GitHub shipped a REST API that makes that manual …

GitHub Disabled SHA-1 in HTTPS: Fixing Git Clone/Push SSL Errors After Sept 15, 2026 On September 15, 2026, GitHub completely disabled SHA-1 in HTTPS/TLS connections to github.com, GitHub Enterprise Cloud, and its partner CDNs. If a git clone, git push, or a script calling the GitHub API over HTTPS suddenly started …

GitHub Actions Ubuntu 26.04 Migration: What Breaks When ubuntu-latest Moves On September 17, 2026, GitHub announced that the ubuntu-latest runner label is moving from Ubuntu 24.04 to Ubuntu 26.04, rolling out gradually between October 19 and November 19, 2026. If your workflows just say runs-on: ubuntu-latest and …

Block GitHub Pull Requests With Exposed Secrets: New Ruleset Rule Setup Guide Push protection catches a lot of leaked secrets, but it has always had a gap: it only inspects the commits in a single git push. A secret that slipped in through a squash-merged branch, a force-push that bypassed protection, a fork PR from a …

Fix GitHub CLI NO_PUBKEY / EXPKEYSIG Errors After the September 2026 Key Rotation If apt update, dnf update gh, or yum update gh suddenly started failing on a Linux box that has the GitHub CLI installed from GitHub's own package repository, you're not imagining it. The PGP key GitHub CLI used to sign its Linux packages …

GitHub Actions' New vulnerability-alerts Permission: Read Dependabot Alerts Without a PAT If you've ever tried to have a GitHub Actions workflow check for open Dependabot alerts — to block a release, gate a merge, or post a Slack summary — you've probably hit a wall: the default GITHUB_TOKEN can't read them. The …

GitHub Actions Self-Hosted Runners: Fix Your Version Before the September 25 Enforcement If your CI/CD pipeline runs on self-hosted GitHub Actions runners, GitHub has already started intermittently blocking outdated ones. Brownouts began August 24, 2026 on github.com and GitHub Enterprise Cloud, and they escalate on a …

GitHub Apps and OAuth Apps Get Refresh Tokens: How to Migrate Off Long-Lived Access Tokens If you've built an OAuth App or a GitHub App that authenticates on behalf of users, there's a decent chance it's still handing out a gho_ or ghu_ token that never expires. On August 14, 2026, GitHub shipped token rotation for …

GitHub Copilot Added Kimi K3: How to Enable It (and Why GitHub Paused the Rollout on Day One) On August 6, 2026, GitHub shipped Kimi K3 — Moonshot AI's open-weight model — as a selectable model inside GitHub Copilot. Then, the same day, GitHub added an editor's note to its own changelog post saying it had paused the …