megachangelog
Breaking2026.09.15

SHA-1 in HTTPS on GitHub sunset

GitHub has disabled SHA-1 in HTTPS for github.com and partner services as previously announced. Users must update their systems to use modern TLS cipher suites to maintain connectivity.

Previously we announced we would be disabling SHA-1 in HTTPS for GitHub on September 15th, 2026.

Following the planned schedule, GitHub has disabled SHA-1 in HTTPS for github.com and partner CDNs, including GitHub Enterprise Cloud and GitHub Enterprise Cloud with Data Residency. GitHub Enterprise Server is unaffected. Please see the previous announcement for more information.

The post SHA-1 in HTTPS on GitHub sunset appeared first on The GitHub Blog.

securitytlshttpsdeprecationbreaking

Source: original entry ↗

More from GitHub

Follow GitHub to get its new changes in your feed and email digest.

Feature

GitHub App improvements for least privilege and management

GitHub has released improvements to GitHub Apps that enable developers to migrate away from classic personal access tokens, enhance app management capabilities, and request fewer sensitive permissions for better security.

github-appsauthsecuritypermissionspat
Announcement

Gemini 4 Argon now available in GitHub Copilot

Google's Gemini 4 Argon frontier model is now generally available in GitHub Copilot, designed for complex coding, agentic, and reasoning tasks to enhance developer productivity.

copilotaimodelsannouncement
Feature

Audit GitHub Code Quality finding dismissals and reopenings

Users can now review manual dismissals and reopenings of GitHub Code Quality findings in their organization or enterprise audit log, enabling better tracking and governance of code quality decisions.

auditcode-qualitygovernancesecurity
See all GitHub changes →