megachangelog
Breaking2026.09.15

SHA-1 in HTTPS on GitHub sunset

GitHub has disabled SHA-1 in HTTPS for github.com and partner services as previously announced. Users must update their systems to use modern TLS cipher suites to maintain connectivity.

Previously we announced we would be disabling SHA-1 in HTTPS for GitHub on September 15th, 2026.

Following the planned schedule, GitHub has disabled SHA-1 in HTTPS for github.com and partner CDNs, including GitHub Enterprise Cloud and GitHub Enterprise Cloud with Data Residency. GitHub Enterprise Server is unaffected. Please see the previous announcement for more information.

The post SHA-1 in HTTPS on GitHub sunset appeared first on The GitHub Blog.

securitytlshttpsdeprecationbreaking

Source: original entry ↗

More from GitHub

Follow GitHub to get its new changes in your feed and email digest.

Feature

Copilot model policy API for enterprise, orgs, and teams

REST API endpoints now available to retrieve and update Copilot model policies for enterprises, teams, apps, and organizations, enabling centralized policy management at scale.

copilotapienterprisepolicymanagement
Announcement2026.10.19

GitHub Copilot models deprecated

GitHub has deprecated certain models across GitHub Copilot experiences including Chat, inline edits, and code completions, effective October 19, 2026. Users may need to migrate to supported models.

copilotmodelsdeprecationai
Announcement

Some Git over HTTPS may temporarily require authentication

GitHub may temporarily require authentication for clones and fetches of public repositories over HTTPS during periods of unusual traffic to protect service availability.

githttpsauthenticationavailabilitytraffic
See all GitHub changes →