Coding Tools
GitHub Enhances OAuth App Security Features
GitHub Changeloghigh confidence
Why it matters
- →Expiring tokens enhance security by limiting the lifespan of access tokens.
- →Multiple redirect URIs simplify app management across different environments.
- →Wildcard matching offers flexibility in handling redirects for multi-tenant applications.
GitHub has rolled out updates to its OAuth and GitHub App platforms, enhancing security and flexibility for developers. The updates include support for expiring access tokens and refresh tokens, allowing OAuth apps to use short-lived tokens that expire after eight hours, with a refresh token valid for six months. Developers can now register up to 10 redirect URIs, facilitating support for various environments. Wildcard matching for redirect URIs is also introduced, enabling redirects to multiple related sites. These changes are part of GitHub's ongoing efforts to improve app security and development efficiency.
Read originalThe story around this
Earlier coverage that leads up to this article, and what followed. Lines connect each piece to the closest one after it, converging here.
What happened next
- 1GitHub Apps: Least Privilege & Management Updates
GitHub Changelog · October 13, 2026 · Same story
- 2GitHub CLI adds expiring OAuth tokens
GitHub Changelog · October 21, 2026 · Same story
More in Coding Tools
Coding Toolscoding
Claude Code v2.1.316: Subagents and Gateway Budgets
Anthropic is tightening control over Claude Code's autonomous behavior with new environment variables that let you disable 'ultrathink' or cap subagent effort levels. For teams, the introduction of pooled group budgets on the gateway allows shared monthly spending limits across members, a practical fix for enterprise cost management. The release also patches critical bugs where shell commands would hang or crash on exit, stabilizing the developer experience significantly.
Claude Code Releases
Coding Toolscoding
llama.cpp b12022 adds ROCm 10 and Snapdragon support
This release quietly cements llama.cpp as the universal inference runtime by finally bringing ROCm 10.0 to Linux and Windows alongside CUDA 13.4, effectively closing the hardware gap for AMD users who were previously left behind. The inclusion of native Snapdragon support on Linux marks a significant step toward running local LLMs on ARM-based mobile chips without emulation overhead. While KleidiAI on Apple Silicon is disabled in this build, the broader expansion to diverse accelerators ensures that developers aren't locked into NVIDIA ecosystems anymore.