GitHub

Not sure where to begin with your #GitHubUniverse session proposal? Here's how you can stand out. ✨ Submit your idea by May 1. https://lnkd.in/gthhcDUd

Come hang and build with us!

You know how you can render a 10,000-line diff without melting the browser? By focusing on simplicity. After overhauling the React architecture of GitHub's "Files changed" tab, we dropped Interaction to Next Paint (INP) from ~450ms to ~100ms. 📉 React components cut from 8 to 2 per line 🔑 O(1) data access with JS Maps 🪟 Window virtualization for giant PRs Here's how the engineers at GitHub made it happen. ⬇️ https://lnkd.in/dKdWbAGc

Git 2.54 is here with features like config-based hooks, new ways to rewrite history, and much more. ✨ Check out the highlights from this release. 👇 https://lnkd.in/dkzjadcA

Looking for your first job in tech? Highlight your projects and resume with GitHub Pages. If you're not sure how to get started with GitHub Pages, our step-by-step guide has you covered. https://lnkd.in/dCkn9fvS

GitHub published 4,101 reviewed security advisories in 2025—the lowest number since 2021. 👀 But does that actually mean open source is shipping more secure code? We dug into a full year of data on CVEs, advisories, and malware to find out. Here is what the threat landscape actually looks like: 📉 The advisory drop is a backlog illusion: We actually saw a 19% increase in newly reported vulnerabilities. The overall drop happened because we are simply running out of older, historic vulnerabilities to backfill. 🎯 Data is getting more precise: Advisories missing a CWE tag dropped by 85%. While XSS remains the #1 threat, we saw significant jumps in resource exhaustion, unsafe deserialization, and SSRF. ⚠️ Malware is surging: Driven by massive campaigns like SHA1-Hulud, we saw a 69% increase in published npm malware advisories. 🛡️ The community is taking action: In 2025, GitHub published 35% more CVE records, and 20% more new organizations used our free CNA services to request CVEs. Securing the open source ecosystem takes a village. Enable Dependabot to catch malware early, combine CVSS and EPSS scores to prioritize your triage, and review all of our data findings below. 👇 https://lnkd.in/dGz5Yg5V

"Find the stuff that's boring and uninteresting, but you know still costs you, and try to get AI to do that for you." TypeScript's creator, Anders Hejlsberg, on how AI should get rid of all the toil you deal with when coding. Watch the full interview. https://lnkd.in/gqNjhNAe

What happens when you build a GitHub CLI extension with Copilot CLI? P̶r̶o̶g̶r̶a̶m̶ ̶M̶a̶n̶a̶g̶e̶r̶ Dungeon Master Lee Reilly created one that turns your repo into a dungeon ... with procedurally generated levels and bugs that fight back. ⚔️ Here's how to enter the battle. ▶️ https://lnkd.in/gVKCADSm