We’ve published an updated PGP keyring for GitHub CLI’s Linux package repositories. The keyring now includes both the current signing key and a new replacement key. If you’ve already rerun… The post New PGP signing key for GitHub CLI Linux packages appeared first on The GitHub Blog.
Fetched April 9, 2026
A security vulnerability that incorrectly included authorization headers in API requests to TUF repository mirrors via gh attestation, gh r…
GitHub · GitHub CLIWhat’s changing We’re going to remove the use of SHA-1 in HTTPS for GitHub and our CDNs. This impacts browsers that are used to…
GitHub · GitHub ChangelogGo toolchain and dependencies bumped to address CVEs.
LaunchDarkly · Relay ProxyFixed an issue where cache archive symlink reads could occur, and signed macOS release binaries.
Vercel · Turborepo