Unvalidated npm trusted publishing configurations now expire
Update4 days agoUnverifiedAdded Oct 6, 2026
Unvalidated npm trusted publishing configurations now expire 48 hours after creation and can no longer authorize publishing. This limits the risk of trusting a repository or project name that changes ownership. Your configuration becomes validated and exempt from expiry after its first successful publish.
Topics: Security, Observability, Developer tools
More GitHub Advanced Security releases
Every GitHub Advanced Security release- New fields for SecurityAdvisory GraphQL API
Updateunverified
- Confidential comments on repository security advisories
Updateunverified
- Repository security advisory comments API in public preview
Previewunverified
- npm staged publishing now supports creating new packages
Updateunverified
- Rate limits for private vulnerability reports
Updateunverified
- Structured forms for private vulnerability reports
Updateunverified
- Secret scanning adds detectors for Lovable, Supabase, and more
Updateunverified
- CodeQL 2.27.1 adds C and C++ query and Kotlin 2.4.20 support
Updateunverified
| Date | Release | Type |
|---|---|---|
| Oct 24 days ago | New fields for SecurityAdvisory GraphQL API unverified Update | Update |
| Oct 24 days ago | Update | Update |
| Oct 24 days ago | Preview | Preview |
| Oct 24 days ago | Update | Update |
| Oct 15 days ago | Update | Update |
| Oct 15 days ago | Update | Update |
| Oct 5yesterday | Update | Update |
| Sep 2511 days ago | Update | Update |
Also shipped on Oct 2, 2026
GitHub in October 2026- PagerDuty Advance team-level permissions now Generally Available
PagerDutyGAunverified
- AI Gateway, Web Search API - Introducing Web Search API
CloudflareBetaunverified
- KV - Workers KV namespace jurisdictions are now generally available
CloudflareGAunverified
- Note : Your clusters might not have these versions available
Google CloudPreviewunverified
- You can use Vertical Pod Autoscaler (VPA) with Horizontal Pod Autoscaler (HPA) to automatically optimize...
Google CloudPreviewunverified
- Agents, Workers - Run the Pi Durable harness on Cloudflare with the Agents SDK
CloudflareBetaunverified
| Date | Company | Release | Product | Type |
|---|---|---|---|---|
| Oct 24 days ago | PagerDuty | GA | ||
| Oct 24 days ago | Cloudflare developer platform | Beta | ||
| Oct 24 days ago | Cloudflare developer platform | GA | ||
| Oct 24 days ago | Google Kubernetes Engine | Preview | ||
| Oct 24 days ago | Google Kubernetes Engine | Preview | ||
| Oct 24 days ago | Cloudflare developer platform | Beta |