Upcoming access restrictions to public API endpoints and UI views
GitHub will introduce access restrictions to several public API endpoints as part of efforts to protect users and ensure responsible platform use.
As part of our ongoing commitment to protect our users and ensure responsible use of our platform, the Notifications team will soon introduce access restrictions to several public API endpoints and related UI views.
What’s changing
Access to the following public API endpoints will be limited to admins and collaborators:
- List stargazers endpoint:
/repos/{owner}/{repo}/stargazers - List watchers endpoint:
/repos/{owner}/{repo}/subscribers
We will deprecate the endpoint and remove access to the underlying information:
- List repositories watched by a user endpoint:
/users/{username}/subscriptions
During the deprecation period, the endpoint will remain accessible but will return empty responses. Full removal will occur in a subsequent phase.
The following UI views will also be affected:
- Repository stargazers view:
/stargazers - Repository “You Know” stargazers view:
/stargazers/you_know - Repository watchers view:
/watchers
Some users may begin receiving empty responses or a 403 Forbidden status when accessing the endpoints or views listed above.
Why we are making this change
These endpoints and views currently expose public lists of stargazers and watchers, and this information has increasingly been misused to collect user data for spam activities which negatively impacts user experience and platform trust.
By restricting access, we aim to reduce misuse of public data, prevent user data from being leveraged for spam, and strengthen overall platform security.
We will continue monitoring usage patterns and evaluating additional safeguards to ensure a safe and reliable environment for all users.
The post Upcoming access restrictions to public API endpoints and UI views appeared first on The GitHub Blog.
Source: original entry ↗
More from GitHub
Follow GitHub to get its new changes in your feed and email digest.
Claude Haiku 5.5 now available in GitHub Copilot
Claude Haiku 5.5, Anthropic's lightweight model, is now generally available in GitHub Copilot for fast, high-volume tasks like subagents, quick edits, and terminal operations.
Purpose-built model for leaked secret detection
GitHub introduced a new purpose-built model for detecting leaked secrets that provides context-aware detection to keep pace with modern software development practices, including AI-assisted coding.
Local sandboxing for GitHub Copilot now generally available
GitHub Copilot's local sandboxing feature is now generally available across GitHub Copilot CLI, the GitHub Copilot app, and VS Code sessions using Agent Host, providing developers with a secure environment for testing and development.