GitHub Updates Blog provides announcements, product updates, and insights into new features and enhancements on the GitHub platform. Developers can stay informed about changes to GitHub's developer tools, collaboration features, and security offerings. With GitHub's commitment to empowering developers and supporting open source communities, the GitHub Updates Blog serves as a resource for staying connected with the latest developments in software development.

GitHub Changelog

Dependabot now supports OpenID Connect (OIDC) authentication for private registries including AWS CodeArtifact, Azure DevOps Artifacts, and JFrog Artifactory. This feature allows Dependabot to obtain short-lived credentials dynamically from cloud identity providers, eliminating the need to store long-lived credentials as repository secrets. The update enhances security by reducing attack surface, simplifies credential management, and helps avoid rate limiting issues associated with static tokens. Configuration requires updating the dependabot.yml file to use the new OIDC authentication type.

Dependabot now supports OIDC authentication