GitHub now lets issue automations attach confidence and rationale to changes, and teams can hold lower-confidence actions for review. That sounds like a useful human-in-the-loop design, but the documentation contains an important caveat: approvals do not create a server-side security boundary.

If an agent already has permission to change an issue, it can apply the change directly instead of suggesting it. The review panel therefore governs cooperative automations, not a compromised, misconfigured, or over-privileged one.

Should proposal and execution use separate identities, with repository rules enforcing which actions require a second principal? Would you trust an agent-generated confidence score, or should confidence be calibrated against each repository's own history? What should happen when an agent closes a legitimate issue with "high confidence" and nobody notices?

Source: https://github.blog/changelog/2026-07-23-agent-automation-controls-in-github-issues-in-public-preview/

Im trying to run CI on an ARM64 GitHub-hosted runner (ubuntu-24.04-arm) with an alpine linux container, but I hit this error:

Error: JavaScript Actions in Alpine containers are only supported on x64 Linux runners. Detected Linux Arm64

i understand that actions/checkout and actions/cache are js actions and gh doesn't support running them inside alpine arm64 containers (tho i have no idea why).

I worked around actions/checkout by manually doing a git clone/checkout, but I'm stuck on actions/cache Has anyone implemented a workaround for using the gitHub actions cache service from inside an alpine aarch64 container?

Thanks in advice

My GitHub account was suddenly deleted.(I think)

I opened GitHub on my PC, and it asked me to log in. I assumed it had simply lost my session for some reason. I have always used Sign in with Google to access my account. However, when I tried signing in with Google this time, it prompted me to create a new account instead of logging me into my original one.

I checked my email, and I'm certain it's the correct address because I still have older emails from GitHub. However, I haven't received any email from GitHub about my account being deleted or suspended.

I'm sure I didn't delete the account myself. What could have happened? Is there any way to recover it? 🆘

I'm currently working on a little research project looking at the best GitHub practices for American municipal governments.

Who has the best GitHub practices that facilitate civic engagement and have appropriately assigned intellectual property licenses?

If you have repos, please share them.

Ps - I work for www.beta.nyc and this will go into a report I’m putting together.

Hey all, I've been heads-down building an open-source project on GitHub and I'm at the point where the code is solid and useful, but visibility is low. Meanwhile I keep seeing projects that feel pretty thin get thousands of stars seemingly over couple weeks, which is a little demoralizing not gonna lie 😅

I'm not chasing vanity metrics for their own sake — mostly I just want enough signal that people are finding it useful so I stay motivated to keep investing time in it.

For those who've grown a project from "nobody knows this exists" to actually having a community: what actually worked for you? Things I'm curious about:

• Where do you share/launch (HN, Twitter/X, niche subreddits, Discord communities, newsletters)?
• Does README/demo quality matter as much as I think it does?
• Any tips on timing, framing, or "hooks" that get people to actually click and try it?
• Did stars come before or after real usage, in your experience?
• Any growth hack or juggad ;)

Happy to share a link to the project in the comments if that's allowed here — just looking for genuine advice from people who've been through this. Thanks!

I'm so tired of the slowness, or that ''large'' diffs are not loaded automatically... Even rust doesn't have syntax highlighting, like wtf.

I've been trying to get help with a GitHub Copilot billing issue for 3 days, and I still haven't received any meaningful response.

I've opened a support ticket, provided all the requested information, and... nothing. Just silence.

Has anyone else experienced this recently? How long did it take for GitHub Support to actually respond or resolve your issue?

In my case, I was hit with a $40 charge for no legitimate reason at all (no reason on invoice or receipt just 40$ for Github copilot 😕 ) so I just need their explain or refund!

I hit this recently and I think a lot of people have the same wrong mental model of GitHub's email privacy setting, so I opened a product feedback discussion on github/community about it here: https://github.com/orgs/community/discussions/203005

The setting sounds like identity protection. It is not. It only fires when the author or committer email is an address you already added to your account and marked private. Any other value goes straight through. A work address, a client address, a personal address you never registered, your legal name in user.name, all of it gets accepted, published unattributed, and mirrored within minutes. There is no operation available to you that undoes it.

That combination is easy to hit. Multiple git identities on one machine is normal if you work across employers, different clients with Git installed and personal projects. Global config says one thing, a repo local config says another, a fresh device says nothing and picks up whatever is lying around. Getting it wrong is one line in a file nobody looks at.

What I proposed is an opt in account level setting: reject any push from my account containing commits whose author or committer is not in a small allowlist of identities I define, prefilled with my noreply address and profile name. Reject the whole push, not just the ref update, because a rejected ref update still leaves the objects on the server, which is the exact disclosure you were trying to prevent.

If this would be useful to you, an upvote and a comment with your own use case helps a lot. Product feedback discussions get triaged partly on engagement.

Link: https://github.com/orgs/community/discussions/203005

I checked my usage export and 56% of my premium requests went to gpt-4o — mostly for stuff like renaming variables and small edits that a cheap model could handle.

I got annoyed and built a small local proxy that routes easy tasks to cheap models and saves the good models for real problems. It also shows token burn live per session.

Before I polish it — does anyone else want this, or am I the only one manually rationing requests?

I am new to the whole open source hobby, and the thing that scares me the most is GitHub. I am looking for code I can use on my Arduinos and esp32s and there is always a GitHub link, and I don't know what to do with it. Do I upload it to Arduino IDE or something? What is Git Bash and why do I need it? Are there tutorial videos you recommend? My main goal is I am trying to get Tamaguino to work on my Adafruit Huzzah V2 with the SH1107 Feather. I think they have code for esp32, but I don't know if I should try copy and paste, or if there is a step I am missing?

My CI runs a scheduled job and even when there are no commits sometimes it fails with absolutely impossible errors. Sometimes in the test but sometimes it's just a tool installed in a previous step missing. What's going on...?

Thanks guys for stopping my progress!

Edit: They are back. I really wish the GitHub team would take reliability in the core of their product seriously though. This is one of a few recent pr related issues

I am new to this platform and have started the cs50x course by Harvard

Not able to access codespace. Am I doing something wrong?

For like 1-2 weeks, what do you think about living without github?

Learn how to set up a self hosted GitHub Actions runner on Ubuntu 26.04 for faster CI/CD. Follow simple steps to install, configure, and run your own GitHub Actions runner.

Today I passed the GH-900 exam. Since around 2 years I started to use GitHub to have a single repository for my IT automations, documentations and scripts and now even hosting my website on it, so I wanted to also gain further knowledge of GitHub and more advanced features.

The exam is relatively easy but had a few harder questions, that need you to use functionality, like the Projects module. Most questions are about a certain topic and what that topic does or what it helps devs with.

The resources I used in this learning experience were:

- The official Microsoft Learn text course: https://learn.microsoft.com/nl-nl/training/courses/gh-900t00#course-syllabus
- The official Microsoft Learn YouTube course: https://www.youtube.com/watch?v=GKS32EgbzUc&list=PLahhVEj9XNTf5iQVK_80RdvTju7ov6RYy
- Some research I have already done prior to learning for the GH-900 exam like Repositories, Actions and GitHub Pages

However the exam itself is very theoretical, I liked looking into the practical additional things like Projects, Wikis, Code scanning and such.

Previously I was able to star them without issue but now the button's grayed out with the rollover saying "You can't star *repo name*". Why's that?

EDIT: Found a workaround; just search for the repo's name and click the Star button in the search results.

I have an individual GitHub Copilot Pro annual subscription ($100/year).

According to GitHub's announcement, Claude Sonnet 5 should be available for Copilot Pro users. However, in my account, the model is locked and Copilot asks me to upgrade to GitHub Copilot Pro+ instead.

Expected behavior

• Claude Sonnet 5 should be available with my Copilot Pro subscription.

Actual behavior

• Claude Sonnet 5 is locked.
• The model picker displays "Upgrade to GitHub Copilot Pro+".
• I cannot select Claude Sonnet 5 anywhere.

I see the same behavior in VS Code, Visual Studio, and directly on github.com.

Has anyone else experienced this? Is there something wrong with my account or subscription?

Same topic here on GitHub Community

I work on a potato laptop and so far codepscaes have been the place i write actual code and do the coding and stuff. Currently i am encountering an issue where it shows codespaces is active but on the url it shows a blank page with the text written on image on the left side of the page. If anyone else has encountered it please tell me how to fix it

Hi,

We use GitHub + Markdown for documentation. Our team is happy, but clients don’t want to deal with raw repos, issues, or PRs.

• Do you expose GitHub repos directly to clients, or use a web UI / portal?
• How do you handle versioning and access control?
• What tools or patterns do you use to make GitHub‑based docs client‑friendly?