GitHub license compliance GA: manage the lifetime of exceptions
License policy can now gate merges. Connect eligibility, exception ownership and review triggers to a practical dependency workflow.
Writing my thoughts on software, business, and life.
All of my long-form thoughts on programming, business, and more
GitHub retires push emails: audit the delivery path, not just the inbox
A practical review of recipients, branch scope, delivery evidence and ownership after repository push email notifications end.
GitHub Actions lockfile preview: review the commit you pin
A practical adoption path that separates dependency review, locked execution and future updates.
GitHub push attribution preview: record author, committer and pusher separately
Review authenticated push attribution and Committer must match pusher before changing automation rules.
CodeQL 2.27.2 on macOS: verify OS, Xcode, and analysis mode together
Read the traced-analysis limits before changing runners, and keep evidence of the actual scan.
Copilot local sandboxing GA: verify denials, not just saved settings
A practical evidence trail for filesystem, network and tool boundaries in local agent sessions.
GitHub PR archiving expands: stop comment automation when cleaning the queue
Connect triage-level PR archiving and read-only conversations to your team’s review evidence and bots.
GitHub draft PR limits: define the intake policy before agents pile up work
GitHub can now include drafts in per-user PR limits. Connect experiments, existing pull requests and review capacity before changing repository policy.
GitHub stacked PRs GA: a small diff is not a deployable unit
Separate review scope, integration tests and deployment boundaries when adopting GitHub stacked pull requests.
GitHub AI Scan enablement: distinguish a setting from analysis evidence
Read the new Security coverage status as adoption data, then keep separate evidence for PR analysis and human review.