Hasty Briefs - Daily Tech News Brief

Bilingual

GitHub Copilot CLI: The Copilot coding agent in the terminal [public preview]
7 months ago
- GitHub Copilot CLI brings AI-powered coding assistance to the command line.
- It integrates with GitHub workflows and supports natural language interactions.
- Features include terminal-native development, GitHub integration, and agentic capabilities.
- Supports Linux, macOS, and Windows (experimental).
- Requires Node.js v22+, npm v10+, and an active Copilot subscription.
- Install globally via npm: `npm install -g @github/copilot`.
- Supports both Claude Sonnet 4 and GPT-5 (via environment variable).
- Each prompt uses a premium request from your monthly quota.
- Early-stage preview with frequent updates—feedback is encouraged.
GitHub Copilot CLI is now in public preview
7 months ago
- GitHub Copilot CLI is now in public preview, bringing AI-powered coding assistance directly to the terminal.
- Features include terminal-native development, GitHub integration, agentic capabilities for complex tasks, MCP-powered extensibility, and full user control over actions.
- Installation is simple via npm, and it works with existing Copilot Pro, Pro+, Business, or Enterprise plans.
- Designed to assist with exploring codebases, implementing features, and debugging locally.
GitHub-hosted copycat Mac app malware scam proliferates
7 months ago
- Scammers are impersonating well-known Mac apps on GitHub, including StopTheMadness Pro, 1Blocker, and others.
- The scam involves multiple anonymous GitHub accounts, fake support emails, and fraudulent download links.
- A JavaScript script in the scam repositories redirects victims to malicious websites via Base64-encoded URLs.
- The final payload is a Mach-O executable, likely malware, delivered through several layers of indirection.
- GitHub and Microsoft need to take action to prevent the spread of malware and limit anonymous account creation for scams.
GitHub Wiki Search Engine Enablement
7 months ago
- GHWSEE (GitHub Wiki Search Engine Enablement) allows GitHub Wikis to be indexed by search engines by bypassing GitHub's restrictions.
- GitHub Wikis have been purposefully non-indexable since 2012, a fact not well-documented until April 2021.
- GHWSEE serves as a proxy for wiki content, designed for crawlers, not direct user consumption, with clear links back to GitHub.
- The project aims to raise awareness about GitHub Wikis' invisibility to search engines and encourages the use of GitHub Pages as a more search-friendly alternative.
- Feedback and discussions about GitHub's blocking of Wiki content can be directed to a specific GitHub discussion thread.
- For anti-abuse, all external links from GHWSEE include 'rel="nofollow ugc"' attributes.
- The service is low-cost to host and encourages donations to the Internet Archive or Archive Team projects in lieu of compensation.
- GHWSEE plans to decommission once GitHub lifts indexing restrictions or provides an alternative solution.
- As of January 2022, GitHub has started allowing some Wikis to be indexed based on non-public criteria, with GHWSEE implementing redirects for these cases.
- The project is independently run by nelsonjchen, with no affiliation to GitHub.
Show HN: Enhance – A Terminal UI for GitHub Actions
7 months ago
- A Blazingly Fast Terminal UI for GitHub Actions
- Automatically watch runs in progress and get notified when done
- Rerun Failed Actions
- Easily integrates with GitHub Actions
- Native Vim keybindings
- Use custom themes
- Easily filter runs, jobs, and logs
- More features coming soon
- Join Discord community for updates and discussions
- Created and maintained by @dlvdr
GitHub Will Prioritize Migrating to Azure over Feature Development
7 months ago
- GitHub is prioritizing migrating its infrastructure to Azure over feature development.
- The migration is expected to be completed within 24 months, with 18 months for execution and a 6-month buffer.
- GitHub's CTO, Vladimir Fedorov, emphasized the necessity of this move to meet the demands of AI and Copilot.
- The company has faced outages due to resource constraints in its Virginia data center.
- Some GitHub employees are concerned about the migration, particularly regarding MySQL clusters on bare metal servers.
- GitHub's spokesperson confirmed the migration, stating it's essential for scaling and future growth.
- Open source developers may have concerns about GitHub's closer ties to Microsoft and Azure.
Download all of your GitHub data
7 months ago
- GitHub allows users to download an archive of their data from the account settings page.
- The archive includes profile data, repositories, issues, pull requests, and interactions.
- Data is exported in machine-readable formats (Git and JSON) for offline backup or migration.
- Archives are available for seven days or until manually deleted.
- For more control or organization exports, users can utilize the Migration API.
Show HN: Gitcasso – Syntax Highlighting and Draft Recovery for GitHub Comments
7 months ago
- Syntax highlighting and autosave features for comments on GitHub and other markdown-friendly websites.
- Quotes about syntax highlighting and the purpose of life related to comment drafts.
- Encouragement to contribute or fix issues by referring to CONTRIBUTING.md.
- Acknowledgments to overtype for textarea syntax highlighting, highlight.js for syntax highlighters, and Yukai Huang for PRs integrating both.
CamoLeak: Critical GitHub Copilot Vulnerability Leaks Private Source Code
7 months ago
- Critical vulnerability discovered in GitHub Copilot Chat (CVSS 9.6) in June 2025.
- Vulnerability allowed silent exfiltration of secrets and source code from private repositories.
- Attack combined a novel CSP bypass using GitHub’s infrastructure with remote prompt injection.
- GitHub fixed the issue by disabling image rendering in Copilot Chat.
- Exploit involved hidden comments in pull requests to inject malicious prompts.
- Copilot Chat's context-awareness was exploited to affect any user visiting the page.
- Attack could influence responses, inject custom Markdown, and leverage user permissions.
- Bypassed Content Security Policy (CSP) using GitHub’s Camo proxy for URL rewriting.
- Proof of Concept (PoC) demonstrated stealing zero-day vulnerabilities from private repos.
- GitHub resolved the vulnerability by August 14.
Renaming the default branch of Rust-lang/rust
7 months ago
- The default branch of rust-lang/rust repository will be renamed from 'master' to 'main' on 2025-11-10.
- The name 'main' was chosen because it is the default for newly-created GitHub repositories and leverages GitHub's built-in tooling for renaming.
- Tools assuming the default branch is 'master' should use 'HEAD' instead to ensure compatibility before and after the rename.
- After the rename, contributors need to run specific commands in their local repository checkout if their remote is named 'origin'.
- Fork owners of rust-lang/rust can rename their default branch to 'main' by following GitHub's instructions.
Free Programing Books
7 months ago
- The webpage provides a searchable list of free programming books, originally cloned from StackOverflow and now maintained by the Free Ebook Foundation.
- The list is one of GitHub's most popular repositories and includes books grouped by programming languages and genres in multiple languages.
- The Free Ebook Foundation, a not-for-profit, administers the repository and accepts tax-deductible donations in the US.
- Contributors are encouraged to follow the provided CONTRIBUTING guidelines and Code of Conduct.
- The repository also includes free podcasts, screencasts, and browser-based coding environments.
- Volunteers have translated contributing and conduct documents into various languages, with opportunities for further translation contributions.
- All repository files are licensed under the CC BY License.
Eget: Easy pre-built binary installation from GitHub
6 months ago
- Eget simplifies downloading pre-built binaries from GitHub releases.
- It automatically finds and extracts suitable binaries for your system.
- Best for simple, static binaries; complex installations may require manual steps.
- Software maintainers can recommend Eget for easy user installations.
- Supports various detection mechanisms and works out-of-the-box with many tools.
- Includes options for specific asset downloads, system targeting, and more.
- Configuration via TOML file allows for global and per-repository settings.
- Supports GitHub API tokens for higher request limits.
- Automatic SHA-256 checksum verification for downloaded assets.
- No dependency management or system-wide installation by default.
- Documentation and FAQ available for troubleshooting and compatibility.
Chezmoi introduces ban on LLM-generated contributions
6 months ago
- Using LLMs for contributions is prohibited and will result in a ban.
- chezmoi is a Go project requiring Go 1.24 or later.
- Clone the repository: `git clone https://github.com/twpayne/chezmoi.git`.
- Build chezmoi with `go build`.
- Run tests with `go test ./...`; some require additional software in `$PATH`.
- Run chezmoi with `go tool chezmoi`.
- Perform smoke tests with `make smoke-test`.
- Test cross-compilation with `make test-release`.
- Fish shell users may encounter warnings; use `SHELL=bash` or `SHELL=zsh` to avoid them.
GitHub is blocking South American users
6 months ago
- Users report GitHub raw file access issues with error 429, indicating rate limiting.
- Issue affects multiple users globally, especially in South America and Brazil.
- Users report problems with accessing raw files, scripts, and dependencies.
- Some users suspect GitHub is incorrectly flagging normal usage as scraping.
- Workarounds include using VPNs or waiting, but no official solution from GitHub.
- Impact extends to tools like Wabbajack, AUR packages, and self-hosted systems.
- Some users report intermittent access, suggesting possible fixes or changes.
- No official statement from GitHub or Microsoft acknowledging the issue.
Immutable releases are now generally available on GitHub
6 months ago
- GitHub releases now support immutability, enhancing supply chain security.
- Immutable releases protect assets and tags from tampering post-publication.
- Features include immutable assets, tag protection, and release attestations.
- Immutable assets cannot be added, modified, or deleted after publication.
- Tags for immutable releases are protected and cannot be deleted or moved.
- Release attestations allow verification of authenticity and integrity.
- Immutable releases can be enabled at repository or organization levels.
- Once enabled, all new releases are immutable; existing ones remain mutable unless republished.
- Disabling immutability does not affect previously created immutable releases.
- Attestations use Sigstore bundle format for verification via GitHub CLI or Sigstore-compatible tools.
- Feedback is encouraged via the GitHub Community.
Octoverse: A new developer joins GitHub every second, AI leads TypeScript to #1
6 months ago
- GitHub experienced its fastest absolute growth rate in 2025, with over 36 million new developers joining, bringing the total to more than 180 million.
- TypeScript overtook Python and JavaScript to become the most used language on GitHub in August 2025, marking a significant shift in developer toolkits.
- India added over 5 million developers in 2025, accounting for more than 14% of new GitHub accounts, and is projected to represent one in three new developers by 2030.
- GitHub Copilot Free's release in late 2024 led to a surge in developer sign-ups and record activity, including over 230 new repositories created every minute.
- Private repositories grew 33% year-over-year, faster than public repositories (19% YoY), highlighting GitHub's role in organizational development.
- Open source development reached record levels with 1.12 billion contributions to public repositories, a 13% increase year-over-year.
- AI infrastructure projects dominated the fastest-growing repositories, with six of the top 10 being AI-related.
- Automation tools like Dependabot and Copilot Autofix improved security, reducing critical vulnerability fix times by 30% and decreasing critical alerts by 26%.
- GitHub Actions usage surged by 35% year-over-year, with 11.5 billion minutes used in public projects, reflecting increased automation in development workflows.
- The U.S. and India led in AI project contributions, with the U.S. contributing 31.8% and India 12.5% of total contributions.
GitHub Partial Outage
6 months ago
- Users can subscribe to updates for git push and pull operation failures via email or SMS.
- Email notifications are sent when incidents are updated, and SMS notifications are sent when GitHub creates or resolves an incident.
- A list of supported countries with their respective country codes is provided for SMS subscriptions.
- To receive SMS updates, users must verify their mobile number by entering an OTP.
- Users can choose to proceed with email-only updates by clicking 'Subscribe' without verifying a mobile number.
GitHub: Git Operation Failures
6 months ago
- Subscribe to updates for Git operation failures via email and/or text message.
- Receive email notifications when incidents are updated.
- Receive text message notifications when GitHub creates or resolves an incident.
- Verify your number to receive SMS updates.
- Click ‘Subscribe’ to proceed with just email.
GitHut – Programming Languages and GitHub
5 months ago
- GitHut visualizes programming language usage across GitHub repositories.
- Programming languages are tools for creativity and problem-solving.
- GitHub is the largest code host with 3.4 million users.
- GitHub's API and GitHub Archive provide data for analysis.
- Data is collected quarterly, but language info is often missing.
- Activity (number of changes pushed) is used to measure language popularity.
- Language release years are sourced from Wikipedia.
- Methodology details are available in GitHut's GitHub repository.
Show HN: GitPulse – AI-powered tool to discover open source projects
5 months ago
- Visualize commit patterns, contributor activity, and repository insights not shown by GitHub.
- See when developers are most active and identify contribution trends.
- Discover top contributors with detailed analytics.
- Get insights on language breakdown, file changes, and repository health metrics.
- Try these popular repositories.

Hasty Briefsbeta

#github

GitHub Copilot CLI: The Copilot coding agent in the terminal [public preview]

GitHub Copilot CLI is now in public preview

GitHub-hosted copycat Mac app malware scam proliferates

GitHub Wiki Search Engine Enablement

Show HN: Enhance – A Terminal UI for GitHub Actions

GitHub Will Prioritize Migrating to Azure over Feature Development

Download all of your GitHub data

Show HN: Gitcasso – Syntax Highlighting and Draft Recovery for GitHub Comments

CamoLeak: Critical GitHub Copilot Vulnerability Leaks Private Source Code

Renaming the default branch of Rust-lang/rust

Free Programing Books

Eget: Easy pre-built binary installation from GitHub

Chezmoi introduces ban on LLM-generated contributions

GitHub is blocking South American users

Immutable releases are now generally available on GitHub

Octoverse: A new developer joins GitHub every second, AI leads TypeScript to #1

GitHub Partial Outage

GitHub: Git Operation Failures

GitHut – Programming Languages and GitHub

Show HN: GitPulse – AI-powered tool to discover open source projects