Coding Tools
GitHub automates SSO for PATs and SSH keys
GitHub Changeloghigh confidence
Why it matters
- →Reduces operational overhead by automating SSO authorization across multiple organizations.
- →Mitigates security risks associated with long-lived tokens caused by manual rotation friction.
- →Enables secure credential delegation through GitHub Apps without exposing token secrets.
GitHub Enterprise Cloud has introduced an API allowing enterprise admins to automate SSO authorization for classic personal access tokens (PATs) and SSH keys. Previously, administrators had to manually authorize credentials for each organization individually, a process that created operational overhead and encouraged the use of insecure long-lived tokens. The new feature enables GitHub Apps with specific permissions to bulk-authorize credentials for up to 50 organizations in a single request, verifying ownership and existing authorizations safely. This capability is now available for GitHub Enterprise Cloud accounts.
Read originalMore from GitHub Changelog
© GitHub ChangelogCoding Toolscoding
GitHub SCIM adds profileUrl attribute
GitHub finally aligns its SCIM implementation with RFC 7643 by adding the profileUrl attribute to user responses. This small but necessary change eliminates the need for identity providers to perform extra lookups or infer account links when provisioning access. The update is additive, meaning existing integrations remain unaffected while new ones can now rely on a standardized field. It’s a quiet fix that reduces friction for enterprise IT teams managing GitHub access at scale.
GitHub Changelog
© GitHub ChangelogCoding Toolscoding
GitHub Copilot budget increase requests GA
GitHub finally closes the friction gap in its usage-based billing model. Instead of hitting a hard wall when credits run out, members can now request more budget directly from their settings, with approvals routing automatically to the correct organizational or enterprise billing manager. This removes the administrative bottleneck that previously stalled productivity, allowing teams to scale AI adoption without constant manual intervention. It is a pragmatic fix for enterprise governance rather than a technological breakthrough.
GitHub Changelog
© GitHub ChangelogCoding Toolscoding
GitHub AI Scan no longer requires CodeQL default setup
GitHub is removing a major friction point for AI-powered security scanning by decoupling AI Scan from the mandatory CodeQL default setup. Previously, organizations had to configure complex CodeQL workflows just to access basic vulnerability detection in pull requests; now, any Advanced Security customer can enable AI Scan directly on eligible repositories without that prerequisite. This shift significantly lowers the barrier to entry for automated code review, allowing teams to adopt AI-driven security checks with minimal configuration overhead. It marks a move toward simpler, more accessible developer tooling within GitHub's enterprise suite.
GitHub Changelog
More in Coding Tools
Coding Toolscoding
Claude Code v2.1.274 fixes MCP timeouts and session stability
This release targets the friction points that make local AI coding feel fragile. The most critical fix addresses MCP servers timing out after five minutes regardless of configuration, a major blocker for complex agent workflows. Session reliability also improves with self-healing corrupted transcripts and better handling of background agents during resumption. While not feature-heavy, these patches stabilize the environment for developers relying on long-running automated tasks.
Claude Code Releases
Coding Toolscoding
llama.cpp b11000 fixes critical RCE in server
This release patches a critical remote code execution vulnerability in the llama.cpp server that allowed unauthenticated attackers to hijack memory via dangling pointers. The flaw stemmed from caching compute graphs that referenced freed buffers, enabling heap corruption and arbitrary code execution through subsequent tensor commands. By discarding cached graphs when buffers are freed, the fix forces a safe fallback to full recomputation without changing the API. This is a vital security update for anyone running the llama.cpp server remotely, closing a direct path to system compromise.
llama.cpp Releases
Coding Toolscoding
llama.cpp b11001 fixes Spacemit transpose bug
A copy-paste error in llama.cpp was corrupting matrix transpositions on Spacemit hardware, causing significant data corruption for int16 operations. This release patches the specific RVV instruction call to ensure correct computation on these RISC-V based chips. While niche, it prevents silent inference failures for users relying on this specific accelerator architecture. The update also ships binaries for CUDA 13 and ROCm 10.0, keeping the runtime current with latest driver ecosystems.
llama.cpp Releases