Developers are owning more of the delivery system around code, not just code itself. Join us during GitHub Universe to meet other devs, learn something new, and explore what's next.The post From coder to orchestrator: How agents shift the role of a developer appeared first on The GitHub Blog.

Enterprise Java developers have a new superpower—drive GitHub Copilot from idiomatic Java code with annotations, virtual threads, and more.The post Using the GitHub Copilot SDK for Java appeared first on The GitHub Blog.

Go beyond chat in the GitHub Copilot app with these slash commands. They'll help you plan, collaborate, automate, and customize your dev workflow.The post A guide to slash commands in the GitHub Copilot app appeared first on The GitHub Blog.

GitHub malware advisories no longer stop at npm. Here's how we wired OpenSSF's malicious-packages data into the Advisory Database, and why we built the pipeline paranoid.The post How we took malware advisories beyond npm appeared first on The GitHub Blog.

Learn how to build tools to simplify how you work—without writing a single line of code.The post How the GitHub legal team used Copilot CLI to streamline their workflows appeared first on The GitHub Blog.

Instead of one huge, un-reviewable pull request, teach coding agents to decompose work into a clean, ordered stack with GitHub stacked pull requests.The post Turn one giant AI-generated pull request to a reviewable stack appeared first on The GitHub Blog.

How a branch-free loop and byte-space arithmetic let GitHub case-fold every byte of code search at >45 GiB/s on a single core.The post Don’t stop early: Case-folding source code at memory speed appeared first on The GitHub Blog.

Learn how I modernized an old codebase of mine using stacked sessions and pull requests in the GitHub Copilot app.The post Stacked sessions and pull requests in the GitHub Copilot app appeared first on The GitHub Blog.

Dependabot keeps your dependencies current, but its defaults can flood your repository with pull requests. Here's how grouping updates, slowing the cadence, and keeping security fixes fast cut the noise on a Microsoft open source project.The post Tame Dependabot: Group your updates, slow the cadence, keep security fast appeared first on The GitHub Blog.

Explore the changes we've shipped across npm and GitHub Actions over the past few months to disrupt supply chain attack techniques and limit their impact.The post Disrupting supply chain attacks on npm and GitHub Actions appeared first on The GitHub Blog.