Dev Tools — page 1 of 3
- Dev Tools5 min
Your GitHub Copilot Settings Change Meaning on October 22. Unconfigured Will Mean On.
By Petru Popa ·GitHub added a global default policy for Copilot Business and Enterprise features on September 24 and starts enforcing it on October 22. The changelog lists three choices without saying which one is preselected. The docs do: enabled. Every eligible feature you never configured, including MCP servers in Copilot, turns on unless you decide otherwise in the next four weeks.
Read - Dev Tools6 min
Node 20 EOL Reached GitHub Actions on September 23. Your node20 Actions Kept Passing.
By Petru Popa ·Node 20 went end of life on 30 April. GitHub Actions removed it on 23 September and killed the opt-out. Workflows calling node20 actions did not fail: the runner rewrites the declaration to Node 24 and leaves one warning at the end of the job. Over nine thousand public action.yml files still declare node20. The date on a deprecation notice is not the day your pipeline changes.
Read - Dev Tools6 min
Copilot Custom Agents Pinned to Retiring Models: Aim at the LTS, Not the Suggested Alternative
By Petru Popa ·GitHub will retire GPT-5.5, GPT-5.4, GPT-5.4 mini, GPT-5 mini, Gemini 3.7 Flash and Grok 4.5 from every Copilot surface on 19 October. Over a thousand public custom agent files pin one of them. The docs table that tells you where to migrate still points four retired models at GPT-5.5, and the replacements it names have historically lasted months. The one target with a written commitment is the LTS model.
Read - Dev Tools6 min
Copilot's New Agent Observability Counts MCP Connections, Not Tool Calls
By Petru Popa ·GitHub added five breakdown arrays and five distinct-use counters to the Copilot usage metrics API on 17 September. The documentation says the MCP counter measures connection attempts rather than tool calls, and that anything your organization built itself is grouped under a single other row.
Read - Dev Tools6 min
GitHub Set a November 2 Deadline for pull_request_target. The Breaking Change Landed in July.
By Petru Popa ·Workflow execution protections reached general availability on September 17 with a default policy that blocks pull_request_target in public repositories from November 2. The change that actually breaks builds shipped to every moving actions/checkout tag back on July 20, and the two gates are independent of each other.
Read - Dev Tools5 min
Copilot's New Cost Tiers Draw From a Pool That Spans 25x
By Petru Popa ·GitHub added three cost-and-quality tiers to Copilot auto model selection. The model table in the docs repository shows every tier drawing from one pool whose per-token prices span 25x, the discount for using auto at all is 10%, and the two controls that actually bound spend are set somewhere else entirely.
Read - Dev Tools6 min
context-mode Trims Claude Code Token Usage. Its Last Release Was June 29.
By Petru Popa ·context-mode keeps raw tool output out of the agent's context window, and its own benchmark backs the savings. Since its June 29 release, all 120 commits on main are a bot refreshing a stats file, and 110 pull requests are waiting.
Read - Dev Tools6 min
npm Trusted Publishing Is Now an Or Across Ten Configurations
By Petru Popa ·A package can now carry up to ten trusted publishing configurations, and a publish is authorized if the incoming OIDC token matches any one of them. Adding a configuration can only widen who can publish — and the configurations that leave no provenance attestation are the ones you would least want to be the weak link.
Read - Dev Tools6 min
GitHub Stargazers Now 404s. Its Replacement Is a Reconciled Series, Not an Event Log.
By Petru Popa ·GitHub closed the stargazers listing endpoint in June and shipped an aggregate star history series on 4 September. Measured against three repositories, the new series reconciles exactly to the live star count and contains no negative buckets, which tells you what it can and cannot reconstruct.
Read - Dev Tools5 min
Your Supply Chain Has an Expiry Date. GitHub CLI's Is Tomorrow.
By Petru Popa ·GitHub announced on 3 September that the PGP key signing its Linux gh packages expires on Saturday. Any image that added the APT or RPM repository before 8 April and has not re-run the install steps will fail on the next apt update. The replacement keyring is already published, and reading the key material answers a planning question neither the changelog nor the issue calls out.
Read - Dev Tools6 min
Copilot Code Review Can Approve Pull Requests. Four of Our Last 53 Would Qualify.
By Petru Popa ·GitHub shipped Copilot approvals on 1 September. The approval is the headline; the eligibility rule buried in the repository settings is what decides whether the feature ever fires on your pull requests.
Read - Dev Tools6 min
Log Retention Falls to 90 Days, and Two More Defaults You Did Not Choose
By Petru Popa ·From 1 October, GitHub applies artifact-and-log retention to checks, workflow runs, and statuses, which had been kept past 400 days regardless of the setting. Public repositories cap at 90 days with no value above it. Two other defaults moved in the same window, in opposite directions.
Read