schmonz.com is a Fediverse instance that uses the ActivityPub protocol. In other words, users at this host can communicate with people that use software like Mastodon, Pleroma, Friendica, etc. all around the world.

This server runs the snac software and there is no automatic sign-up process.

Search results for tag #GitHub

[?]Esparta :ruby: » 🌐
@esparta@ruby.social

Ruby Central report reopens wounds over RubyGems repo takeover
theregister.com/2026/04/01/rub

> Board-backed account of maintainer ouster is unlikely to settle row over governance, control, and trust

> Ruby Central, a nonprofit that supports the programming language ecosystem, just published an incident report regarding what it calls the September 2025 RubyGems fracture, when ownership of the code repository behind the RubyGems package manager was wrested from existing maintainers.

    [?]abadidea [she/her] » 🌐
    @0xabad1dea@infosec.exchange

    IT'S HAPPENING

    GITHUB, THE FIRST ENTERPRISE CLOUD SOLUTION TO REACH ZERO NINES RELIABILITY

    mrshu.github.io/github-statuse

    uptime graph reading: 95 incidents in last 90 days - 89.91% uptime

    Alt...uptime graph reading: 95 incidents in last 90 days - 89.91% uptime

    classic meme image: "it's happening" with Ron Paul laser show

    Alt...classic meme image: "it's happening" with Ron Paul laser show

      [?]Joe Brockmeier [He/Him/His] » 🌐
      @jzb@hachyderm.io

      GitHub could place an ad anywhere on the page -- this seems unnecessarily intrusive and user-hostile. Not to mention gross.

      notes.zachmanson.com/copilot-e

        [?]abadidea [she/her] » 🌐
        @0xabad1dea@infosec.exchange

        NINETY DAYS

        NINETY INCIDENTS

        NINETY PERCENT

        YOU PAID FOR ALL FIVE NINES BUT YOU’LL ONLY NEED THE EDGE

        a graph of github uptime status with an astonishing number of nineties specifically

        Alt...a graph of github uptime status with an astonishing number of nineties specifically

          Stephan boosted

          [?]Benjamin Carr, Ph.D. 👨🏻‍💻🧬 » 🌐
          @BenjaminHCCarr@hachyderm.io

          hits CTRL-Z, decides it will train its with user data after all
          's GitHub next month plans to begin using customer interaction data – "specifically inputs, outputs, code snippets, and associated context" – to train its AI models.
          The code locker’s revised policy applies to Free, Pro, and Pro+ customers, as of April 24. Students and teachers who access Copilot will also be spared.
          As of April 24 you'll be feeding Octocat unless you opt out
          theregister.com/2026/03/26/git

            [?]Mason Loring Bliss [he, him, his] » 🌐
            @mason@partychickens.net

            Alright, I've moved all my stuff off of GitHub and onto Codeberg. If they've opted me into LLM training without my consent, then they've already stolen everything I had there.

              [?]Harry Sintonen » 🌐
              @harrysintonen@infosec.exchange

              sent an email to everyone saying they're listening to people now and they will definitely not pushing AI to everything anymore.

              Also Microsoft enabled to collect all your "inputs, outputs and associated context to train and improve AI models". This new tickbox is enabled by default, even if you explicitly disabled Copilot before.

              Actions speak louder than words.

              You can disable the option at github.com/settings/copilot/fe

              Copilot Privacy setting at https://github.com/settings/copilot/features "Allow GitHub to use my data for AI model training", enabled by default.

"Allow GitHub to collect and use my Inputs, Outputs, and associated context to train and improve AI models. Read more in the Privacy Statement."

              Alt...Copilot Privacy setting at https://github.com/settings/copilot/features "Allow GitHub to use my data for AI model training", enabled by default. "Allow GitHub to collect and use my Inputs, Outputs, and associated context to train and improve AI models. Read more in the Privacy Statement."

                [?]Michał "rysiek" Woźniak · 🇺🇦 » 🌐
                @rysiek@mstdn.social

                Just got this from Microslop GitHub:

                > We're updating how GitHub uses data to improve AI-powered coding tools. From April 24 onward, your interactions with GitHub Copilot—including inputs, outputs, code snippets, and associated context—may be used to train and enhance AI models unless you opt out.

                I barely ever use GitHub. When I do, it's when I am forced to because some project I rely on only uses GitHub.

                If you're project is only using GitHub, please consider migrating.

                  [?]🫧 socialcoding.. » 🌐
                  @smallcircles@social.coop

                  @evan some time ago you queried about what would be a good comms channel for API.

                  I have some ideas / recommendations on the repo that the TF uses.

                  - Structure the repo to hold the work of the full task force, not just for the creation of a single specification document.

                  - Use GH Discussions for all the general elaboration, feedback collection, etc. The repo forms a self-contained body of work. Move most current Issues in the tracker to become Discussions.

                  - Issues are created by task force members, and always represent actionable items. They are tracked on a Project kanban board where the swimlanes represent a simple protocol development with a number of stages.

                  Then:

                  - Primary comms channel is Discussions.
                  - Issues + kanban represent work tracks.
                  - Secondary comms channel can be .

                  I'd reserve mailing list to and organizational matters concerning the CG itself, and point mails on other subject to appropriate channel.

                    [?]daniel:// stenberg:// » 🌐
                    @bagder@mastodon.social

                    Once you have opened for accepting vulnerability reports on , that door cannot be closed again. Now I need to manually tell everyone who do that where to go instead and close their submissions. Not the ideal workflow...

                      [?]Chuck » 🌐
                      @ChuckMcManis@chaos.social

                      Heads up you code maintainers who take submissions from people, delete unicode characters. See this: arstechnica.com/security/2026/ Yes, people put back doors in code using unicode characters that don't show up on the screen.

                        [?]David Cantrell 🏏 » 🌐
                        @DrHyde@fosstodon.org

                        Involved in an epic fight to the death with . Commit number ∞ of ℵ₀ prompted it to yell at me "Push cannot contain secrets".

                        Thanks ! Nice feature!

                        Also, I shall take that as my prompt to step away from the keyboard and go to bed.

                          [?]RevK :verified_r: » 🌐
                          @revk@toot.me.uk

                          So far 18/85 repositories moved from to

                          Each needs small amounts of work.

                          - Sort git hub pasted images in README
                          - Migrate over, including issues and maybe wiki
                          - Add Claude refusal to new README.
                          - Delete old repository.
                          - Make replacement with README linking to new repository.
                          - Reset URL on any cloned copies.
                          - Check all submodule usage in all other repositories, update URL, and commit.
                          - Also update some internal Makefiles in some places for new URL.

                          A gradual process.

                            [?]Graham Perrin » 🌐
                            @grahamperrin@mastodon.bsd.cafe

                            @david_chisnall I have only one minor criticism of GitHub's highlighting, and I don't know whether it is (or should be) fixable.

                            In cases such as the one pictured below, it's necessary to scroll/page down hugely to bring a tiny change into sight.

                            In other words, 'Show Diff' shows much, much more than the diff.

                            A wild guess: maybe specific to AsciiDoc in GitHub, or the FreeBSD Documentation Project's use of AsciiDoc in cases such as this.

                            @zev @bentolor

                            Screenshot: a large AsciiDoc page in GitHub, previewing a very small change, opting to show the diff.

                            Alt...Screenshot: a large AsciiDoc page in GitHub, previewing a very small change, opting to show the diff.

                            Screenshot: the tiny, two-sentence change, is way down near the foot of the page. Note the size and position of the inner scroller.

                            Alt...Screenshot: the tiny, two-sentence change, is way down near the foot of the page. Note the size and position of the inner scroller.

                              [?]JdeBP » 🌐
                              @JdeBP@mastodonapp.uk

                              @cstross

                              And on Usenet. There was a parallel to that 'MJ Rathbun', that went after Scott Shambaugh this week, from back in the tail end days of significant Usenet trolls.

                              mastodonapp.uk/@JdeBP/11606070

                              A follow-up post by Shambaugh reported that the 'AI agent' had been widely cheered on in some quarters. So now there's even more training data for the next robot.

                              theshamblog.com/an-ai-agent-pu

                              @n1xnx @keith_lawson @GossiTheDog @quixoticgeek

                                [?]Richard "RichiH" Hartmann » 🌐
                                @RichiH@chaos.social

                                @tschaefer @T_X @axx rumor has it, saw my announcement. Including the helpful offer to CNAME to which supports

                                  [?]Richard "RichiH" Hartmann » 🌐
                                  @RichiH@chaos.social

                                  @T_X @axx so for 2027, I had another stupid idea everyone insisted was good: it will be -only on the main network. The dual stack will get a yearly name change to prevent auto-reconnect. We want people on v6-only and break stuff left and right. Every. Single. Year.

                                  And if is not on v6 by next year, trust me, they will put _something_ in place very quickly.

                                    [?]JdeBP » 🌐
                                    @JdeBP@tty0.social

                                    @shlinkio

                                    I have this vague memory that when I first set up my github repositories, one could not turn off pull requests. I turned off almost everything that could be turned off.

                                    I've just turned them off on all of my repositories.

                                    I wasted too much of my life combatting robot-generated bulk e-mail. I'm going to nip robot-generated bulk pull requests in the bud before they become a problem.

                                    @ska

                                      [?]Proto Himbo European » 🌐
                                      @guyjantic@infosec.exchange

                                      How the @#$% does (static website generator) work with Github? Hundreds of pages reference but I still can't find how that works. Almost every Hugo help site says "add this reference to [a? your?] github repo..." but don't explain what the heck is happening or why I need that... why do I need a github repo to have a website somewhere else?

                                      Clearly I don't need it; I have a hugo site up and running, and at no point was github involved.... except nothing would work until I initalized (?) my hugo directory (or the executable? IDK) on my webhost's server using a git command. For some reason.

                                      I seriously don't understand why (or, more importantly, how) Hugo needs github. Right now dozens or hundreds of help sites seem like they're telling me that I need to have a shrine to my cat in my neighbor's house or else my blender won't work.

                                      Lots of references to using github submodules and plenty of people saying "No! You fool! Don't do that!" and other people saying "Ackshully you should make your website a github module." Then other sites (including Hugo's official site) saying I should make my website into a module somehow for some reason... and I can't do that unless I have a github repo somewhere? Which is also maybe a Go module? Yet more sites saying I don't need to do that if I use some fancy scripts to fool something (my Hugo installation? My github repo? IDK) into thinking my Hugo site is or has a github repo...

                                      If anyone would like to explain this to me like I'm literally 12 years old I'm very open to this. Every help site I've seen for weeks just assumes I understand some basic things that I don't remotely understand, like what the connection is between Hugo and github, how important it is, how it works, etc.

                                      Understanding that I already have a functioning Hugo site, but apparently still need a github repo (maybe?) to do anything more interesting with it.

                                      I know I'm using Mastodon as tech support a lot lately, but honestly y'all are more helpful than most search engines for some things.

                                        [?]Jon Udell » 🌐
                                        @judell@social.coop

                                        A human lifetime is not long enough to comprehend all that git and github can do, and become maximally capable of using these tools.

                                        I don't want to live forever but I do want to wield that full capability while I'm here, and now I can.

                                          [?]JdeBP » 🌐
                                          @JdeBP@mastodonapp.uk

                                          @Paperposts

                                          The thing is open source, and the github repository calls it LaSuite Meet in the README.

                                          github.com/suitenumerique/meet

                                          However, in the code itself, the application appears to have been called Visio for months.

                                          The French apparently haven't yet cottoned on that they still have a significant unreliable external dependency by hosting everything on Microsoft GitHub.

                                          @brian_greenberg @WiteWulf

                                            [?]Esparta :ruby: » 🌐
                                            @esparta@ruby.social

                                            @davetron5000 thanks!

                                            you made me look in my old gmail account, and that's correct: a couple of registrations with `$myhandle+$SOME_CHARS@gmail.com`

                                            - Medium
                                            - HeadSpace

                                            the only pattern now still +

                                            I'm still scratching my head about the why? Do they try to DDoS their registration systems?

                                              [?]Esparta :ruby: » 🌐
                                              @esparta@ruby.social

                                              @davetron5000 all of them today, or accumulated?
                                              I've notice that this is happening with -related email, so it's possible all of them: , , ?

                                              Do you notice some pattern?

                                                [?]Esparta :ruby: » 🌐
                                                @esparta@ruby.social

                                                This morning I did receive five (5) notification of services created on my behalf using GitHub-related email accounts:

                                                - Canary Mail
                                                - Angel Studios
                                                - Quora
                                                - Branded
                                                - Cardi.Health

                                                I'm still not sure if this still an issue with the last breach or an ongoing one.

                                                partial screenshot of one of my inbox, with 4 columns: Subject, Correspondents, spam, Date

- Activate account for Quora,
  Quora Support < support@quora.com >
  11:27 AM
- Activate account for Branded
  Branded <support@gobranded.zendesk.com>
  11:27 AM
- Activate account for Cardi.Health
  CardiHealth <hello@cardi.health>
  11:27

                                                Alt...partial screenshot of one of my inbox, with 4 columns: Subject, Correspondents, spam, Date - Activate account for Quora, Quora Support < support@quora.com > 11:27 AM - Activate account for Branded Branded <support@gobranded.zendesk.com> 11:27 AM - Activate account for Cardi.Health CardiHealth <hello@cardi.health> 11:27

                                                partial screenshot of one of my inbox, with 4 columns: Subject, Correspondents, spam, Date

- Activate account for Canary Mail
  Canary Mail <support@canarymail.zendesk.com>
  11:29 AM
- Activate account for Angel
  Angel <support@angelstudios.zendesk.com>
  11:29 AM

                                                Alt...partial screenshot of one of my inbox, with 4 columns: Subject, Correspondents, spam, Date - Activate account for Canary Mail Canary Mail <support@canarymail.zendesk.com> 11:29 AM - Activate account for Angel Angel <support@angelstudios.zendesk.com> 11:29 AM

                                                  [?]Benedikt Ritter (he/him) » 🌐
                                                  @britter@chaos.social

                                                  Why is there this convention to prefix git tags with 'v'? Like, why is the tag for version 2.1 called v2.1 and not simply 2.1 🤔

                                                    [?]Jason Yip » 🌐
                                                    @jchyip@mastodon.online

                                                    Exploring Solutions to Tackle Low-Quality Contributions on github.com/orgs/community/disc