#ci-cd

A terminal window showing the gh CLI apt keyring check gpg --show-keys /etc/apt/keyrings/githubcli-archive-keyring.gpg, listing the old key fingerprint expiring 2026-09-05 and the new key fingerprint added 2026-04-07, followed by the wget command that fetches the updated keyring

gh CLI's New PGP Signing Key for Linux Packages

GitHub rotated the PGP key signing gh CLI's Linux apt/dnf/yum packages on 2026-04-08. Update your keyring before the old key expires Sept 5, 2026.

Aug 19, 2026Read more →

A terminal-style cover comparing gh release download against a public repository before and after GitHub CLI v2.96.0: the pre-v2.96.0 run hits gh's shared authentication-required error, the v2.96.0-and-later run succeeds with no token and downloads the real gh_2.96.0_checksums.txt asset

Dev Tools

gh release download No Longer Needs Auth (Public Repos)

gh release download now works against public repos without auth, matching gh extension install. What changed in v2.96.0, and a CI example.

Aug 19, 2026Read more →

A dark comparison-matrix cover titled gh skill --pin: Tag vs SHA, listing four rows: a tag is a mutable pointer, a SHA is content-addressed and cannot move, a tag is human-readable, a SHA is the reproducible choice for CI

Dev Tools

gh skill --pin: Tag vs Commit SHA, Which to Use

gh skill install --pin accepts a tag or a commit SHA. Pin to a SHA for CI reproducibility; a tag is fine for casual, supervised installs.

Aug 19, 2026Read more →

A terminal window showing the actions/checkout v7 changelog entry blocking fork pull request checkouts in pull_request_target and workflow_run workflows

Dev Tools

actions/checkout v7 Blocks pull_request_target PRs

actions/checkout v7 refuses to fetch fork PR code in pull_request_target and workflow_run by default. Here's the fix if your workflow relied on it.

Aug 13, 2026Read more →

A terminal window showing the GitHub Actions changelog entry describing approval requirements for bot-created pull requests before workflows can run

Dev Tools

Approve Workflow Runs From github-actions[bot] PRs

Pull requests from github-actions[bot] can now trigger CI workflows, but only after a collaborator approves the run. Here's how the gate works.

Aug 13, 2026Read more →

A terminal window showing the gh extension install github/gh-aw command and the verbatim changelog entry for GitHub Agentic Workflows public preview

Dev Tools

Set Up GitHub Agentic Workflows in Actions

GitHub Agentic Workflows (public preview) compiles Markdown into Actions YAML for AI-driven triage and CI analysis, sandboxed behind a read-only default.

Aug 13, 2026Read more →

A terminal window showing the GitHub Actions changelog entry describing read-only cache tokens for workflow events that can be triggered without write permissions

Dev Tools

GitHub Actions Cache Goes Read-Only on Untrusted Triggers

GitHub Actions now issues read-only cache tokens for untrusted triggers like pull_request_target, closing a cache-poisoning path. Here's what still writes.

Aug 13, 2026Read more →

A terminal window showing the verbatim changelog entry for GitHub Actions layered custom runner images: build custom images on top of other custom images

Dev Tools

Build Custom GitHub Actions Runner Images in Layers

GitHub Actions larger runners can now build a custom image on top of another custom image, plus conditional snapshot: generation for image versions.

Aug 13, 2026Read more →

A terminal window showing the verbatim changelog entry for GitHub Actions parallel steps: background: true runs a step asynchronously and immediately continues to the next step

Dev Tools

Run GitHub Actions Steps in Parallel With background

GitHub Actions steps can now run in parallel with background: true, wait, wait-all, cancel, and parallel. Here is when to use each keyword.

Aug 13, 2026Read more →

A terminal window showing the verbatim changelog entry for GitHub Actions' $/ self-repository syntax: resolves to your workflow's own repository at the exact commit that is running, with no checkout required

Dev Tools

Reference Same-Repo Actions With $/ Syntax

GitHub Actions' new $/ syntax resolves a same-repo action to the exact running commit, no checkout step needed. Requires runner 2.336.0 or newer.

Aug 13, 2026Read more →

A dark comparison-matrix style cover listing GitHub Actions' summer 2026 changes across three groups: security (checkout defaults, cache tokens, execution allow-lists), infrastructure (self-hosted runner floor, runner groups, layered images), and new syntax ($/ same-repo actions, parallel steps, agentic workflows)

Dev Tools

GitHub Actions' Summer 2026 Overhaul: Full Guide

GitHub shipped 10 Actions changes across June-July 2026: one breaking checkout default, a runner version cutoff, new security controls, and new syntax.

Aug 13, 2026Read more →

A terminal window showing the GitHub Actions self-hosted runner minimum version requirement: the runner must be on version 2.329.0 or later

Dev Tools

GitHub Actions: Upgrade Self-Hosted Runners by Jul 31

GitHub now enforces a minimum self-hosted runner version (2.329.0+) with brownout windows before full enforcement. Check your version before jobs stop running.

Aug 13, 2026Read more →

A terminal window showing the GitHub Actions workflow execution protections changelog entry describing an allow list for who can trigger workflows and which events are permitted

Dev Tools

Set Up GitHub Actions Workflow Execution Protections

Workflow execution protections let you allow-list who can trigger GitHub Actions workflows and which events are permitted, built on GitHub's rulesets.

Aug 13, 2026Read more →

A terminal window showing the verbatim changelog entry for GitHub-hosted runner group controls: disable the standard labels for hosted runners such as ubuntu-latest

Dev Tools

Restrict GitHub-Hosted Runners to Named Runner Groups

GitHub Team and Enterprise plans can disable standard runner labels like ubuntu-latest org-wide and force workflows through named runner groups instead.

Aug 13, 2026Read more →

A terminal window showing the verbatim changelog entry for wrangler 4.116.0: Avoid Worker and workers.dev naming prompts in agent-driven deploys

Dev Tools

Wrangler Skips Naming Prompts in Agent/CI Deploys

Wrangler 4.116 detects non-interactive terminals and skips the first-deploy naming prompt automatically, fixing CI pipelines and AI agents driving the CLI.

Aug 6, 2026Read more →

Close-up of a data center server rack, representing automated cloud infrastructure

Data & Automation

Cloudflare Workers Deploys: Built-In Git vs. GitHub Actions

Two ways to auto-deploy a static site to Cloudflare Workers: built-in Git integration vs. a custom GitHub Actions workflow, and how to choose.

Jul 27, 2026Read more →